last executing test programs:

4m34.070915784s ago: executing program 2 (id=13):
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x7)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x800100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
syz_mount_image$hfsplus(&(0x7f0000000280), &(0x7f0000000d00)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x639, &(0x7f00000006c0)="$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")
creat(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x83)
chdir(&(0x7f0000000040)='./file0\x00')
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket(0x1d, 0x2, 0x6)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, 0x0, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc010, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000040)={0x0, 0x73, 0x0, 0x5, 0x0, "5ee691000200000017e0054200", 0x1000, 0x4})
pipe2(&(0x7f0000001440)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
splice(r1, 0x0, r2, 0x0, 0xa, 0x0)
pselect6(0x40, &(0x7f0000000300)={0x0, 0x0, 0x110000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001003, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x7, 0xf, 0x80000006}, 0x0, 0x0)
r3 = syz_open_dev$vivid(&(0x7f00000001c0), 0x3, 0x2)
ioctl$VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000000)={0xffff, 0x8, 0x2, "509df38396494b088561956ecfed1d1a7767c375467875874e68510e4d7c801e", 0x56555959})

4m31.953533856s ago: executing program 2 (id=17):
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0)
syz_mount_image$hfs(&(0x7f0000000300), &(0x7f0000000000)='.\x02\x00', 0x4810, &(0x7f0000000180)=ANY=[], 0x3, 0x2e7, &(0x7f0000001900)="$eJzs3b1v004YwPHnnKRNf636c19QJcZCJSYEZUEsRah/BAMgShOkqlGR2iJRFipmhNh42RjYmBELI3sFM4KJib3djO45O3WpfU6aNm7g+5ESufHd+TnbsZ+L5J4A+GfdWPz+7spP+zIiFamIyDWRQETqIlUROSMz9YdrmyubrWbD11BFa9iXEVfTHCqzvNbMqmrraY1YaP+qylj6M5yMKIqiH18r/jL/9y0clES//RkCkeH426nr632P7GRslx1Aycye7MkjGS87DgBAuez9v+YSf3ufH4vz9yAQmYtv+wN2//dnrXv9C+RUSt3/dZQVGXt8dZeZ/fGeDuHs+iAZJXpazF0zJC6RPJBgmqJRpcYSjNxfaTUvLj9oNQJ5KguxVLFpfW+4UzdREO2sJ9gMxX3Poz0OarYP8znxTx1liy+7D6VtNzI75o4J5Y002vlfNdI9okcq1LjDdgUX/6X8FkftmzFaKqeXE7qRs/EW5OP7DnpZzx6RtOOcSE7dJ+7DMInzxZCn1qQc/FnB9e5yfu+01lRmrfmCWtPpWvGVMz6b82seXU63/2Cem5tmVn7JB1lM5f+B3dtzWiDZ7Z4gjZaMzwxvf6paMuwgsKCj8NGpmnftM7knV2V8Y+vx6lKr1VzvdOHTty4KH9fC67duodJLO0nPD62qSq8RRsOu6ZPaCb1H2MlCcsL08eAmx6TvZ1TJC9JzOxUZltXkmnlsgcWHY3t1qeWWshOlkV6uSzhFUpfHmVtlB4My2GuIceM/zeRdVndd19mvf6h5ek2y8vSoqHFt8dXtHTd8SI0N9pPVSX3/r6sR3Gj+CC7VB++Y69wFkfOeLX4+2GwYx/mXMIvyRe7y+z8AAAAAAAAAAAAAAAAAAMCgKXwwYDda39iKH2854pMhJXcRAAAAAAAAAAAAAAAAAAAAAICB55v/V+fILJj/N3kyIH/+39R/9S6e/3fBNpQz/69/kloAXfsdAAD//7rQb18=")
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x20, r3, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xc00c4}, 0x14)
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x20020c0, 0x0, 0x1, 0x0, &(0x7f0000001a00))
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./bus\x00', 0x200)
write$binfmt_script(r1, &(0x7f00000008c0), 0xfecc)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x300, 0xffffffff, 0xb0, 0x0, 0x1a8, 0xffffffff, 0xffffffff, 0x268, 0x268, 0x268, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @dev, 0x0, 0x0, 'bond_slave_1\x00', 'nr0\x00'}, 0x0, 0x70, 0xb0, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "6bc128419cfb67daad5b4809088400ed0000006c00000000000100040500"}}}, {{@ip={@rand_addr=0x64010102, @multicast1, 0xff000000, 0x0, 'sit0\x00', 'veth1_to_hsr\x00', {}, {0xd7fffbe779abf152}, 0x8, 0x1, 0x2}, 0x287, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@cpu={{0x28}}, @common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360)
ioctl$VIDIOC_ENUMAUDIO(r0, 0xc0345641, &(0x7f0000000480)={0x1, "fe76d62cc443ecaa041a3002fd4869323800bca798cd82d1e6b7771c0252f48b", 0x2, 0x1})
syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xa1080a, &(0x7f0000000300)=ANY=[@ANYBLOB='dmask=00000000000000000002621,utf8,umask=00000000000000000200000,namecase=1,discard,errors=remount-ro,umask=00000000000000000200004,umask=00000000000000000003377,namecase=1,utf8,iocharset=iso8859-4,allow_utime=00000000000000000000011,dmask=01777777777777777777770,errors=remount-ro,uid=', @ANYRES32=0x0, @ANYRES16, @ANYRESDEC, @ANYRES16=0x0, @ANYRES8=0x0, @ANYRES16=0x0, @ANYRES32=0x0, @ANYRESDEC, @ANYRES8, @ANYRESDEC], 0x21, 0x150d, &(0x7f0000001f80)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
r5 = socket(0x2, 0x80805, 0x0)
ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000000)=0x400)
getsockopt$bt_hci(r5, 0x84, 0x18, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
request_key(&(0x7f0000001000)='dns_resolver\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f0000001080)='\x00', 0x0)
clock_adjtime(0x0, &(0x7f0000001100)={0xd77, 0xf423f, 0x5, 0x0, 0x4, 0x4b, 0x100000000, 0x0, 0x0, 0xff, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x1000, 0x1, 0x0, 0x1, 0x0, 0x76})
request_key(&(0x7f00000010c0)='dns_resolver\x00', &(0x7f0000001100)={'syz', 0x2}, 0x0, 0x0)
getpeername$ax25(r0, &(0x7f0000001080)={{0x3, @rose}, [@null, @null, @default, @remote, @remote, @default, @remote, @default]}, &(0x7f0000001100)=0x48)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000004c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0xc70567f4b86b524d}}, 0x20)

4m31.596383421s ago: executing program 2 (id=21):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@metacopy_on}]})
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000000c0)='kmem_cache_free\x00', r0}, 0x18)
mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0)

4m31.457097737s ago: executing program 2 (id=22):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$packet(0x11, 0x3, 0x300)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f0000000300)={[{@jqfmt_vfsold}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1}}, {@bsdgroups}, {@noload}, {@delalloc}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@discard}, {@grpjquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x7fffffff}}, {@init_itable_val={'init_itable', 0x3d, 0xe}}]}, 0xfa, 0x477, &(0x7f0000001380)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f0000002d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x820}}, {{&(0x7f0000001580)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40042}}], 0x2, 0x20000000)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r2, &(0x7f0000006b40)={0x2020}, 0x2020)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000fd3f08000000480100100000000019002b000a0001000500000000000072081f52000500000000", 0x39}], 0x1)

4m25.245858936s ago: executing program 2 (id=30):
socketpair$unix(0x1, 0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000700), 0xff, 0x49b, &(0x7f0000001040)="$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")
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
keyctl$instantiate(0xc, 0x0, 0x0, 0x2d, 0xfffffffffffffff9)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r3, 0x1, 0x2d, &(0x7f00000000c0), 0x4)
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x40081, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$jfs(&(0x7f0000005e00), &(0x7f0000005e40)='./file0\x00', 0x214001, &(0x7f0000006000), 0x1, 0x5def, &(0x7f0000000000)="$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")
syz_emit_ethernet(0x3b4, &(0x7f00000009c0)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x37e, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a741e54006598080a8030000004023493b87aafaff0500ffffffe723732472eefa45ad96579269748e254c1e4a948b580a9bc430d3be27df3e34060000ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000100000000001995319cff"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x3, 0xb, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e3b63ed09bdb581c9fe68a356f542b043059ff05932e740e077e1d16212fb"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa76ffff9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4828288e62afbf03269f1f98aea6a58cf45d7c5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c258a6f"}, {0x0, 0x4, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02c226a6bce65f"}]}}}}}}, 0x0)
syz_emit_ethernet(0x3b6, &(0x7f00000009c0)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x380, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a741e54006598080a8030000004023493b87aafaff0500ffffffe723732472eefa45ad96579269748e254c1e4a948b580a9bc430d3be27df3e34060000ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000100000000001995319cff"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x3, 0xb, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x2000000000000040, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e3b63ed09bdb581c9fe68a356f542b043059ff05932e740e077e1d16212fb"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa76ffff9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4828288e62afbf03269f1f98aea6a58cf45d7c5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c258a6f"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02c226a6bce65f81ed"}]}}}}}}, 0x0)

4m23.110798869s ago: executing program 2 (id=34):
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x7)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x800100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
syz_mount_image$hfsplus(&(0x7f0000000280), &(0x7f0000000d00)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x639, &(0x7f00000006c0)="$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")
creat(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x83)
chdir(&(0x7f0000000040)='./file0\x00')
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket(0x1d, 0x2, 0x6)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, 0x0, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc010, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000040)={0x0, 0x73, 0x0, 0x5, 0x0, "5ee691000200000017e0054200", 0x1000, 0x4})
pipe2(&(0x7f0000001440)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
splice(r1, 0x0, r2, 0x0, 0xa, 0x0)
pselect6(0x40, &(0x7f0000000300)={0x0, 0x0, 0x110000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001003, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x7, 0xf, 0x80000006}, 0x0, 0x0)
r3 = syz_open_dev$vivid(&(0x7f00000001c0), 0x3, 0x2)
ioctl$VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000000)={0xffff, 0x8, 0x2, "509df38396494b088561956ecfed1d1a7767c375467875874e68510e4d7c801e", 0x56555959})

4m22.278422825s ago: executing program 32 (id=34):
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x7)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x800100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
syz_mount_image$hfsplus(&(0x7f0000000280), &(0x7f0000000d00)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x639, &(0x7f00000006c0)="$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")
creat(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x83)
chdir(&(0x7f0000000040)='./file0\x00')
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket(0x1d, 0x2, 0x6)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, 0x0, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc010, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000040)={0x0, 0x73, 0x0, 0x5, 0x0, "5ee691000200000017e0054200", 0x1000, 0x4})
pipe2(&(0x7f0000001440)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
splice(r1, 0x0, r2, 0x0, 0xa, 0x0)
pselect6(0x40, &(0x7f0000000300)={0x0, 0x0, 0x110000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001003, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x7, 0xf, 0x80000006}, 0x0, 0x0)
r3 = syz_open_dev$vivid(&(0x7f00000001c0), 0x3, 0x2)
ioctl$VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000000)={0xffff, 0x8, 0x2, "509df38396494b088561956ecfed1d1a7767c375467875874e68510e4d7c801e", 0x56555959})

52.865973649s ago: executing program 1 (id=737):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fd\x00')
getdents(r1, &(0x7f00000006c0)=""/34, 0x22)
getdents(r1, 0x0, 0x48)
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r2}, 0x50)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
syz_fuse_handle_req(r0, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
getdents64(r3, &(0x7f00000063c0)=""/1024, 0x400)
syz_fuse_handle_req(r0, &(0x7f00000067c0), 0x2000, &(0x7f00000087c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000008880)={0x30, 0x0, 0x0, [{0x0, 0x0, 0x4, 0x0, '#,,-'}]}, 0x0, 0x0, 0x0, 0x0})

52.559912003s ago: executing program 1 (id=744):
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c0001"], 0x98}}, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="880100001000330600000200000000007f000001000000000000000000000000fc01000000000000000000000000004000000000000000000000002084000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x188}}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e746572009c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000700003806c000080080003400000000260000b80440001800c000100636f756e746572"], 0x130}, 0x1, 0x0, 0x0, 0x8000}, 0x8880)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10)
semop(0x0, 0x0, 0x0)
fcntl$getownex(r1, 0x10, &(0x7f0000000300)={0x0, <r2=>0x0})
ptrace$setregs(0xd, r2, 0x5, &(0x7f0000000800)="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")
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)

51.800994735s ago: executing program 1 (id=745):
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x800100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
syz_mount_image$hfsplus(&(0x7f0000000280), &(0x7f0000000d00)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x639, &(0x7f00000006c0)="$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")
creat(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x83)
chdir(0x0)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket(0x1d, 0x2, 0x6)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, 0x0, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc010, 0x0, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000040)={0x0, 0x73, 0x0, 0x5, 0x0, "5ee691000200000017e0054200", 0x1000, 0x4})
pipe2(&(0x7f0000001440)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
splice(r1, 0x0, r2, 0x0, 0xa, 0x0)
pselect6(0x40, &(0x7f0000000300)={0x0, 0x0, 0x110000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001003, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x7, 0xf, 0x80000006}, 0x0, 0x0)
r3 = syz_open_dev$vivid(&(0x7f00000001c0), 0x3, 0x2)
ioctl$VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000000)={0xffff, 0x8, 0x2, "509df38396494b088561956ecfed1d1a7767c375467875874e68510e4d7c801e", 0x56555959})

50.152811377s ago: executing program 1 (id=751):
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
pipe2$9p(0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x100000001}}, './file0/file0\x00'})
read$FUSE(r0, &(0x7f0000001400)={0x2020}, 0x2020)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a5291, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file0\x00', 0x500, 0x40)
open_tree(r1, &(0x7f0000000300)='\x00', 0x89901)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x9, 0x0, 0x0, 0x0, 0x69, 0x10, 0xae}, [@ldst={0x4, 0x0, 0x6, 0x9}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x49)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x800000, 0x0)
syz_open_procfs(0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0xe, &(0x7f0000000540)={[{@init_itable}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000340), 0xf2, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000040)={r3, r3, r3}, &(0x7f0000000080)=""/67, 0x43, &(0x7f0000000100)={&(0x7f00000001c0)={'blake2b-384\x00'}})
chdir(&(0x7f0000000300)='./bus\x00')
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @d}})
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300), 0xfe, 0x54d, &(0x7f0000000980)="$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")
mkdir(&(0x7f0000000100)='./bus\x00', 0xe8)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000cc0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
rename(&(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00')

49.679749387s ago: executing program 1 (id=757):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x2000})
r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'nicvf0\x00', &(0x7f0000000000)=@ethtool_test={0x1a, 0x5, 0x9, 0x5, [0x1, 0x7ff, 0x80000000, 0x9, 0x0]}})
socket$alg(0x26, 0x5, 0x0)

47.99813755s ago: executing program 1 (id=763):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) (fail_nth: 3)

47.07933356s ago: executing program 33 (id=763):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) (fail_nth: 3)

1.369916721s ago: executing program 4 (id=1074):
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x10, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x24}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x5933b97999a55390, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.344498762s ago: executing program 4 (id=1076):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000008140)={&(0x7f0000008000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, 0x0, 0x8, 0x0, 0x0, 0x41000}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)

1.201876208s ago: executing program 4 (id=1082):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='mm_page_free_batched\x00', r0}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$cgroup_pid(r1, &(0x7f0000000000), 0x2a979d)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, 0x0, 0x50)
recvmsg$unix(r2, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x2020)

1.192981449s ago: executing program 0 (id=1083):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000030000000000000000000000850000009700000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a00)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="b9ff03316858268cb89e14f00800", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.110295712s ago: executing program 0 (id=1086):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xb, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)

985.887907ms ago: executing program 0 (id=1090):
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x12, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}, [@generic={0x73, 0x1, 0x1, 0xf}]}, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_sock_addr=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94)

938.87946ms ago: executing program 0 (id=1093):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0x10}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94)

845.864274ms ago: executing program 0 (id=1096):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000001f40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x1, 0x1}]}]}}, 0x0, 0x2e, 0x0, 0x1, 0x9}, 0x28)

714.026939ms ago: executing program 0 (id=1100):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x132})
bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x45}, 0x28)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000d60000000900000005"], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000001680), &(0x7f0000002300), 0x8001, r1}, 0x38)

705.891479ms ago: executing program 5 (id=1102):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000730123000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

564.217746ms ago: executing program 5 (id=1105):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000001b80)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r1}, 0x10)

494.883689ms ago: executing program 3 (id=1107):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000301000000000000ffffff7f2c0001000000000095"], &(0x7f0000000000)='GPL\x00', 0xf, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)

463.51082ms ago: executing program 5 (id=1108):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe98, 0x0, 0x0, 0x0}, 0x94)

394.119683ms ago: executing program 6 (id=1109):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x12, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0x40}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x94)

393.933423ms ago: executing program 3 (id=1110):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x4, &(0x7f0000000640)=@framed={{}, [@ldst={0x1, 0x0, 0x4}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x94)

369.103794ms ago: executing program 5 (id=1111):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfff7ffff, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x36}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000600)="87fc5d85da21530562070095c108", 0x0, 0x8011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x40}, 0x50)

343.364955ms ago: executing program 6 (id=1112):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000001dfb5ad6aeb96c7b97d85d3e750000000000000000000000000000000005000000000000"], 0x48)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7b}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x18, 0x0, &(0x7f00000006c0), &(0x7f0000000340)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffff}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e80)={r3, 0xe0, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, &(0x7f0000000c00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000c40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xeb, &(0x7f0000000c80), 0x0, 0x10, &(0x7f0000000cc0), &(0x7f0000000d00), 0x8, 0x35, 0x8, 0x8, &(0x7f0000000d40)}}, 0x10)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x17}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000380)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x7, 0x1c, &(0x7f0000000840)=ANY=[@ANYBLOB="18080000000005000000000000", @ANYRES32, @ANYRESHEX=r0, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095", @ANYRES16, @ANYRES8], &(0x7f0000000980)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r6 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB='+cpu'], 0x5)
openat$cgroup_int(r5, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = openat$cgroup_subtree(r7, &(0x7f0000002000), 0x2, 0x0)
write$cgroup_subtree(r8, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5)

343.024735ms ago: executing program 4 (id=1113):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000780000000000000000020022850000007b000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300003f008700850000007300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x78, 0xfffffffffffffe2b, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

258.194319ms ago: executing program 3 (id=1114):
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@generic={0x91, 0x1, 0x1, 0x8}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94)

257.969898ms ago: executing program 4 (id=1115):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94)
close(0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"/3002], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x3f)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

244.736639ms ago: executing program 5 (id=1116):
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xe, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000000000000000000000711209000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

234.58916ms ago: executing program 6 (id=1117):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x13, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee6}, [@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0xb0}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x53, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x26, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

166.100743ms ago: executing program 3 (id=1118):
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x16, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000ebf6ffff000000000a000000911197000000000095"], &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94)

165.867743ms ago: executing program 6 (id=1119):
bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x5f, 0x54}}, &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x48)

149.301994ms ago: executing program 5 (id=1120):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x1, 0x1, 0x10000}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0), 0x75, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1, r0}, 0xc)

149.141994ms ago: executing program 4 (id=1121):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1e, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="8500000019000000040000000800000195"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

114.088895ms ago: executing program 3 (id=1122):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x7, 0x4, 0x100, 0x4, 0x20}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x7, 0x8, &(0x7f0000000180)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

42.170128ms ago: executing program 6 (id=1123):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000600)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000400), 0x12)
openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.memory_spread_slab\x00', 0x2, 0x0)
close(0xffffffffffffffff)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, 0x0}, 0x54)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc)
syz_open_procfs$namespace(0x0, 0x0)

13.55923ms ago: executing program 3 (id=1124):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x4, 0x4, 0x4, 0xbf28}, 0x48)

0s ago: executing program 6 (id=1125):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x1b, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000640)='syzkaller\x00', 0x8, 0x8d, &(0x7f0000000680)=""/141}, 0x23)

kernel console output (not intermixed with test programs):

ll be lost
[  255.743232][ T7288] 
[  255.753068][ T7288] EXT4-fs (loop0): Total free blocks count 0
[  255.759213][ T7288] EXT4-fs (loop0): Free/Dirty block details
[  255.765328][ T7288] EXT4-fs (loop0): free_blocks=2415919504
[  255.771250][ T7288] EXT4-fs (loop0): dirty_blocks=16
[  255.776534][ T7288] EXT4-fs (loop0): Block reservation details
[  255.782671][ T7288] EXT4-fs (loop0): i_reserved_data_blocks=1
[  255.842712][ T7288] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28
[  255.855325][ T7288] EXT4-fs (loop0): This should not happen!! Data will be lost
[  255.855325][ T7288] 
[  257.341479][ T7291] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  257.357109][ T7291] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  257.447315][ T7291] EXT4-fs (loop4): This should not happen!! Data will be lost
[  257.447315][ T7291] 
[  257.517361][ T7291] EXT4-fs (loop4): Total free blocks count 0
[  257.613574][ T7291] EXT4-fs (loop4): Free/Dirty block details
[  257.824987][ T7291] EXT4-fs (loop4): free_blocks=2415919504
[  257.830711][ T7291] EXT4-fs (loop4): dirty_blocks=16
[  257.835854][ T7291] EXT4-fs (loop4): Block reservation details
[  257.841933][ T7291] EXT4-fs (loop4): i_reserved_data_blocks=1
[  258.129105][ T7294] loop0: detected capacity change from 0 to 4096
[  258.139104][ T7298] loop1: detected capacity change from 0 to 512
[  258.194591][ T7299] loop4: detected capacity change from 0 to 1024
[  258.215659][ T7298] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nojournal_checksum,. Quota mode: writeback.
[  258.229865][ T7299] hfsplus: unable to parse mount options
[  258.271349][ T7308] loop3: detected capacity change from 0 to 2048
[  258.298375][ T7298] ext4 filesystem being mounted at /121/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  258.402647][ T7308] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  258.607311][ T4182] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22.
[  258.625396][ T4182] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  258.639602][ T7318] loop1: detected capacity change from 0 to 64
[  258.654645][ T7320] fuse: Bad value for 'group_id'
[  259.785807][ T7323] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  259.801304][ T7323] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  259.813570][ T7323] EXT4-fs (loop3): This should not happen!! Data will be lost
[  259.813570][ T7323] 
[  259.823248][ T7323] EXT4-fs (loop3): Total free blocks count 0
[  259.829226][ T7323] EXT4-fs (loop3): Free/Dirty block details
[  259.835160][ T7323] EXT4-fs (loop3): free_blocks=2415919504
[  259.840899][ T7323] EXT4-fs (loop3): dirty_blocks=16
[  259.846022][ T7323] EXT4-fs (loop3): Block reservation details
[  259.852018][ T7323] EXT4-fs (loop3): i_reserved_data_blocks=1
[  260.078056][ T7318] Cannot find set identified by id 0 to match
[  260.230989][ T7332] loop3: detected capacity change from 0 to 2048
[  260.364697][ T7332] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  261.077413][ T7335] loop5: detected capacity change from 0 to 2048
[  261.315438][ T7345] loop1: detected capacity change from 0 to 1024
[  261.405754][ T7335] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  261.463699][ T7352] loop0: detected capacity change from 0 to 512
[  261.622848][ T7345] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none.
[  261.729209][ T7362] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  261.744769][ T7362] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  261.757126][ T7362] EXT4-fs (loop5): This should not happen!! Data will be lost
[  261.757126][ T7362] 
[  261.766880][ T7362] EXT4-fs (loop5): Total free blocks count 0
[  261.772963][ T7362] EXT4-fs (loop5): Free/Dirty block details
[  261.778947][ T7362] EXT4-fs (loop5): free_blocks=2415919504
[  261.784729][ T7362] EXT4-fs (loop5): dirty_blocks=16
[  261.789910][ T7362] EXT4-fs (loop5): Block reservation details
[  261.795947][ T7362] EXT4-fs (loop5): i_reserved_data_blocks=1
[  261.855293][ T7362] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28
[  261.867752][ T7362] EXT4-fs (loop5): This should not happen!! Data will be lost
[  261.867752][ T7362] 
[  262.394861][ T7352] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.669: inode has both inline data and extents flags
[  262.437123][ T7352] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.669: couldn't read orphan inode 15 (err -117)
[  262.449665][ T7352] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  262.467320][ T7364] loop4: detected capacity change from 0 to 512
[  262.470773][ T7345] ext4 filesystem being mounted at /123/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  262.610865][ T7340] EXT4-fs error (device loop1): ext4_map_blocks:739: inode #15: comm syz.1.667: lblock 0 mapped to illegal pblock 0 (length 1)
[  262.645440][ T7340] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  262.675652][ T7340] EXT4-fs (loop1): This should not happen!! Data will be lost
[  262.675652][ T7340] 
[  262.685287][ T7367] netlink: 12 bytes leftover after parsing attributes in process `syz.5.671'.
[  262.760383][ T7345] EXT4-fs error (device loop1): ext4_map_blocks:629: inode #15: comm syz.1.667: lblock 0 mapped to illegal pblock 0 (length 1)
[  262.988423][ T7345] EXT4-fs error (device loop1): ext4_map_blocks:629: inode #15: comm syz.1.667: lblock 0 mapped to illegal pblock 0 (length 1)
[  263.041627][ T7339] EXT4-fs error (device loop1): ext4_map_blocks:629: inode #15: comm syz.1.667: lblock 0 mapped to illegal pblock 0 (length 1)
[  263.074540][ T7345] EXT4-fs error (device loop1): ext4_map_blocks:629: inode #15: comm syz.1.667: lblock 0 mapped to illegal pblock 0 (length 1)
[  263.105325][ T7339] EXT4-fs error (device loop1): ext4_map_blocks:629: inode #15: comm syz.1.667: lblock 0 mapped to illegal pblock 0 (length 1)
[  263.133414][ T7345] EXT4-fs error (device loop1): ext4_map_blocks:629: inode #15: comm syz.1.667: lblock 0 mapped to illegal pblock 0 (length 1)
[  263.168031][ T7240] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set
[  263.232413][ T7340] EXT4-fs error (device loop1): ext4_map_blocks:629: inode #15: comm syz.1.667: lblock 0 mapped to illegal pblock 0 (length 1)
[  263.333743][ T7364] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nojournal_checksum,. Quota mode: writeback.
[  263.370640][ T7377] loop5: detected capacity change from 0 to 64
[  263.389852][ T7347] EXT4-fs error (device loop1): ext4_map_blocks:629: inode #15: comm syz.1.667: lblock 0 mapped to illegal pblock 0 (length 1)
[  263.428628][ T7364] ext4 filesystem being mounted at /139/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  263.538756][ T7377] Cannot find set identified by id 0 to match
[  263.546013][ T7383] netlink: 60 bytes leftover after parsing attributes in process `syz.0.674'.
[  263.895629][ T7392] loop0: detected capacity change from 0 to 64
[  263.921839][ T7395] loop5: detected capacity change from 0 to 2048
[  264.407488][ T7395] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  264.516291][ T7399] Cannot find set identified by id 0 to match
[  264.894495][ T7407] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  264.909786][ T7407] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  264.922508][ T7407] EXT4-fs (loop5): This should not happen!! Data will be lost
[  264.922508][ T7407] 
[  264.932445][ T7407] EXT4-fs (loop5): Total free blocks count 0
[  264.938540][ T7407] EXT4-fs (loop5): Free/Dirty block details
[  264.944548][ T7407] EXT4-fs (loop5): free_blocks=2415919504
[  264.950397][ T7407] EXT4-fs (loop5): dirty_blocks=16
[  264.955582][ T7407] EXT4-fs (loop5): Block reservation details
[  264.961772][ T7407] EXT4-fs (loop5): i_reserved_data_blocks=1
[  265.020132][ T7407] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28
[  265.032581][ T7407] EXT4-fs (loop5): This should not happen!! Data will be lost
[  265.032581][ T7407] 
[  265.450106][ T7406] loop1: detected capacity change from 0 to 2048
[  265.514272][ T7408] loop4: detected capacity change from 0 to 1024
[  265.547321][ T7408] hfsplus: unable to parse mount options
[  265.597363][ T7406] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  265.603482][ T7412] loop5: detected capacity change from 0 to 8
[  265.682570][ T7412] squashfs image failed sanity check
[  265.787012][ T7416] netlink: 'syz.0.683': attribute type 9 has an invalid length.
[  265.794726][ T7416] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.683'.
[  265.833306][ T7414] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  265.848271][ T7414] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28
[  265.860659][ T7414] EXT4-fs (loop1): This should not happen!! Data will be lost
[  265.860659][ T7414] 
[  265.870374][ T7414] EXT4-fs (loop1): Total free blocks count 0
[  265.876455][ T7414] EXT4-fs (loop1): Free/Dirty block details
[  265.882386][ T7414] EXT4-fs (loop1): free_blocks=2415919504
[  265.888136][ T7414] EXT4-fs (loop1): dirty_blocks=64
[  265.893255][ T7414] EXT4-fs (loop1): Block reservation details
[  265.899279][ T7414] EXT4-fs (loop1): i_reserved_data_blocks=4
[  265.957634][ T7419] loop5: detected capacity change from 0 to 512
[  265.987572][ T7418] netlink: 12 bytes leftover after parsing attributes in process `syz.3.684'.
[  266.008920][ T7401] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  266.021242][ T7401] EXT4-fs (loop1): This should not happen!! Data will be lost
[  266.021242][ T7401] 
[  266.462407][ T7419] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,nojournal_checksum,. Quota mode: writeback.
[  266.494343][ T7427] loop0: detected capacity change from 0 to 512
[  266.538557][ T7419] ext4 filesystem being mounted at /127/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  266.557024][ T7412] EXT4-fs error (device loop5): ext4_xattr_block_get:546: inode #15: comm syz.5.682: corrupted xattr block 33
[  266.559631][ T7432] loop1: detected capacity change from 0 to 256
[  266.593042][ T7412] EXT4-fs (loop5): Remounting filesystem read-only
[  266.627279][ T7432] FAT-fs (loop1): Unrecognized mount option "nnonumtail=1" or missing value
[  266.631985][ T7427] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.686: inode has both inline data and extents flags
[  266.646096][ T7412] fscrypt (loop5, inode 15): Error -117 getting encryption context
[  266.657836][ T7427] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.686: couldn't read orphan inode 15 (err -117)
[  266.671157][ T7427] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  266.831458][ T7436] sctp: [Deprecated]: syz.3.688 (pid 7436) Use of struct sctp_assoc_value in delayed_ack socket option.
[  266.831458][ T7436] Use struct sctp_sack_info instead
[  267.630978][ T7432] loop1: detected capacity change from 0 to 32768
[  268.024123][ T7432] XFS (loop1): Mounting V5 Filesystem
[  268.236673][ T7432] XFS (loop1): Ending clean mount
[  268.244951][ T7432] XFS (loop1): Unmounting Filesystem
[  268.813623][ T7452] loop3: detected capacity change from 0 to 2048
[  268.898781][ T7444] loop4: detected capacity change from 0 to 32768
[  268.998221][ T7444] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.689 (7444)
[  269.027245][ T7452] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  269.070248][ T7444] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  269.152893][ T7444] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8)
[  269.246941][ T7444] BTRFS info (device loop4): use lzo compression, level 0
[  269.254102][ T7444] BTRFS info (device loop4): using free space tree
[  269.263275][ T7444] BTRFS info (device loop4): has skinny extents
[  269.286382][ T7464] loop0: detected capacity change from 0 to 64
[  269.538168][ T7464] Cannot find set identified by id 0 to match
[  269.619958][ T7478] loop1: detected capacity change from 0 to 2048
[  269.642046][ T7487] syz.5.693[7487] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  269.642145][ T7487] syz.5.693[7487] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  269.698948][ T7444] BTRFS info (device loop4): enabling ssd optimizations
[  269.827708][ T7498] loop5: detected capacity change from 0 to 16
[  269.885264][ T7498] erofs: Unknown parameter ''
[  269.919409][ T7478] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  270.467688][ T7500] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  270.482740][ T7500] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28
[  270.495527][ T7500] EXT4-fs (loop1): This should not happen!! Data will be lost
[  270.495527][ T7500] 
[  270.508660][ T7500] EXT4-fs (loop1): Total free blocks count 0
[  270.514727][ T7500] EXT4-fs (loop1): Free/Dirty block details
[  270.520639][ T7500] EXT4-fs (loop1): free_blocks=2415919504
[  270.526498][ T7500] EXT4-fs (loop1): dirty_blocks=64
[  270.527453][ T7502] netlink: 16 bytes leftover after parsing attributes in process `syz.0.696'.
[  270.531707][ T7500] EXT4-fs (loop1): Block reservation details
[  270.531723][ T7500] EXT4-fs (loop1): i_reserved_data_blocks=4
[  270.575449][ T7477] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  270.587721][ T7477] EXT4-fs (loop1): This should not happen!! Data will be lost
[  270.587721][ T7477] 
[  270.804995][ T7505] loop5: detected capacity change from 0 to 1024
[  270.844357][ T7505] hfsplus: unable to parse mount options
[  270.851676][ T7506] loop0: detected capacity change from 0 to 512
[  270.862697][ T7508] loop1: detected capacity change from 0 to 512
[  271.015125][ T7508] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.698: inode has both inline data and extents flags
[  271.017025][ T7506] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.700: inode has both inline data and extents flags
[  271.073683][ T7506] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.700: couldn't read orphan inode 15 (err -117)
[  271.085007][ T7508] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.698: couldn't read orphan inode 15 (err -117)
[  271.169564][ T7506] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  271.210319][ T7508] EXT4-fs (loop1): mounted filesystem without journal. Opts: norecovery,noload,acl,noload,journal_dev=0x0000000000000003,nogrpid,,errors=continue. Quota mode: none.
[  272.223141][ T4293] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  272.532468][ T4293] usb 5-1: Using ep0 maxpacket: 16
[  272.653739][ T4293] usb 5-1: too many endpoints for config 0 interface 0 altsetting 1: 48, using maximum allowed: 30
[  272.777488][ T4293] usb 5-1: config 0 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 48
[  272.922090][ T4293] usb 5-1: config 0 interface 0 has no altsetting 0
[  272.941201][ T7533] loop5: detected capacity change from 0 to 8192
[  272.970898][ T7541] loop0: detected capacity change from 0 to 64
[  273.017295][ T7533] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal
[  273.064432][ T7533] REISERFS (device loop5): using ordered data mode
[  273.076333][ T7537] loop1: detected capacity change from 0 to 32768
[  273.104801][ T7541] Cannot find set identified by id 0 to match
[  273.112457][ T4293] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=29.82
[  273.120047][ T7533] reiserfs: using flush barriers
[  273.132082][ T7533] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  273.140242][ T7537] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[  273.156190][ T4293] usb 5-1: New USB device strings: Mfr=83, Product=5, SerialNumber=10
[  273.157731][ T7533] REISERFS (device loop5): checking transaction log (loop5)
[  273.199550][ T7537] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  273.226936][ T4293] usb 5-1: Product: syz
[  273.238945][ T4293] usb 5-1: Manufacturer: syz
[  273.244400][ T4293] usb 5-1: SerialNumber: syz
[  273.269737][ T4293] usb 5-1: config 0 descriptor??
[  273.330645][ T7533] REISERFS (device loop5): Using tea hash to sort names
[  273.340066][ T7533] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage.
[  273.423747][ T7547] overlayfs: unrecognized mount option "fsuuid=556
[  273.423747][ T7547] 7442-5f1b-bc14-e9f-6477a14d" or missing value
[  273.640416][ T7527] udc-core: couldn't find an available UDC or it's busy
[  273.648627][ T7527] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  273.661103][ T7551] loop0: detected capacity change from 0 to 512
[  273.675096][ T4185] ocfs2: Unmounting device (7,1) on (node local)
[  273.697198][ T7527] loop4: detected capacity change from 0 to 256
[  273.744651][ T7551] EXT4-fs (loop0): Ignoring removed orlov option
[  273.751065][ T7551] EXT4-fs (loop0): Unrecognized mount option "nouser_xattr.barrier" or missing value
[  273.793801][ T7527] exfat: Unknown parameter 'ÿÿ'
[  273.804025][ T7554] loop5: detected capacity change from 0 to 2048
[  274.024212][ T7556] loop0: detected capacity change from 0 to 1024
[  274.041671][ T7554] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  274.087442][ T7549] loop3: detected capacity change from 0 to 32768
[  274.156405][ T7556] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none.
[  274.195817][ T7556] ext4 filesystem being mounted at /150/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  274.289121][ T7556] EXT4-fs error (device loop0): ext4_map_blocks:739: inode #15: comm syz.0.711: lblock 0 mapped to illegal pblock 0 (length 1)
[  274.304037][ T7556] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  274.316686][ T7556] EXT4-fs (loop0): This should not happen!! Data will be lost
[  274.316686][ T7556] 
[  274.330642][ T7566] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  274.337893][ T4293] snd-usb-audio: probe of 5-1:0.0 failed with error -22
[  274.345877][ T7566] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28
[  274.358499][ T4293] usb 5-1: USB disconnect, device number 8
[  274.364967][ T7566] EXT4-fs (loop5): This should not happen!! Data will be lost
[  274.364967][ T7566] 
[  274.364992][ T7566] EXT4-fs (loop5): Total free blocks count 0
[  274.365005][ T7566] EXT4-fs (loop5): Free/Dirty block details
[  274.365019][ T7566] EXT4-fs (loop5): free_blocks=2415919504
[  274.384205][ T7549] XFS (loop3): Mounting V5 Filesystem
[  274.386595][ T7566] EXT4-fs (loop5): dirty_blocks=64
[  274.408732][ T7566] EXT4-fs (loop5): Block reservation details
[  274.414790][ T7566] EXT4-fs (loop5): i_reserved_data_blocks=4
[  274.419070][ T7549] XFS (loop3): Ending clean mount
[  274.423381][ T7565] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #15: comm syz.0.711: lblock 0 mapped to illegal pblock 0 (length 1)
[  274.461116][ T7549] XFS (loop3): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair.
[  274.463988][ T7565] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #15: comm syz.0.711: lblock 0 mapped to illegal pblock 0 (length 1)
[  274.512371][   T21] usb 2-1: new full-speed USB device number 4 using dummy_hcd
[  274.524277][ T7565] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #15: comm syz.0.711: lblock 0 mapped to illegal pblock 0 (length 1)
[  274.539223][ T7565] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #15: comm syz.0.711: lblock 0 mapped to illegal pblock 0 (length 1)
[  274.594287][ T7553] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  274.596752][ T7565] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #15: comm syz.0.711: lblock 0 mapped to illegal pblock 0 (length 1)
[  274.606512][ T7553] EXT4-fs (loop5): This should not happen!! Data will be lost
[  274.606512][ T7553] 
[  274.651963][ T7576] loop4: detected capacity change from 0 to 512
[  274.662083][ T4334] udevd[4334]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  274.705787][ T7565] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #15: comm syz.0.711: lblock 0 mapped to illegal pblock 0 (length 1)
[  274.735728][ T7576] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.712: inode has both inline data and extents flags
[  274.735850][ T7565] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #15: comm syz.0.711: lblock 0 mapped to illegal pblock 0 (length 1)
[  274.777764][ T7576] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.712: couldn't read orphan inode 15 (err -117)
[  274.818460][ T7565] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #15: comm syz.0.711: lblock 0 mapped to illegal pblock 0 (length 1)
[  274.827729][ T7576] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  274.847097][ T7565] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #15: comm syz.0.711: lblock 0 mapped to illegal pblock 0 (length 1)
[  274.852475][ T4189] XFS (loop3): Unmounting Filesystem
[  274.886279][ T7579] loop5: detected capacity change from 0 to 1024
[  275.011997][   T21] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  275.023096][ T7579] hfsplus: unable to parse mount options
[  275.030848][   T21] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  275.045026][   T21] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  275.054386][   T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  275.706029][   T21] usb 2-1: usb_control_msg returned -32
[  275.714147][   T21] usbtmc 2-1:16.0: can't read capabilities
[  275.922794][ T7591] loop5: detected capacity change from 0 to 64
[  275.993470][ T7591] Cannot find set identified by id 0 to match
[  276.018018][ T7585] loop0: detected capacity change from 0 to 32768
[  276.070058][ T7595] FAULT_INJECTION: forcing a failure.
[  276.070058][ T7595] name failslab, interval 1, probability 0, space 0, times 0
[  276.102119][ T7595] CPU: 1 PID: 7595 Comm: syz.3.713 Not tainted syzkaller #0
[  276.109438][ T7595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  276.119527][ T7595] Call Trace:
[  276.122815][ T7595]  <TASK>
[  276.125752][ T7595]  dump_stack_lvl+0x168/0x230
[  276.130444][ T7595]  ? show_regs_print_info+0x20/0x20
[  276.135655][ T7595]  ? load_image+0x3b0/0x3b0
[  276.140431][ T7595]  ? __might_sleep+0xf0/0xf0
[  276.145029][ T7595]  ? __lock_acquire+0x7c60/0x7c60
[  276.150071][ T7595]  should_fail+0x38c/0x4c0
[  276.154501][ T7595]  should_failslab+0x5/0x20
[  276.159011][ T7595]  slab_pre_alloc_hook+0x51/0xc0
[  276.163960][ T7595]  ? __anon_vma_prepare+0xb0/0x410
[  276.169080][ T7595]  kmem_cache_alloc+0x3d/0x290
[  276.173848][ T7595]  ? find_mergeable_anon_vma+0x394/0x590
[  276.179490][ T7595]  __anon_vma_prepare+0xb0/0x410
[  276.184435][ T7595]  handle_mm_fault+0x3b83/0x43b0
[  276.189484][ T7595]  ? get_page+0xe0/0xe0
[  276.193657][ T7595]  ? vmacache_find+0x238/0x590
[  276.198519][ T7595]  ? find_vma+0xd2/0x230
[  276.202773][ T7595]  do_user_addr_fault+0x489/0xc80
[  276.207817][ T7595]  exc_page_fault+0x60/0x100
[  276.212420][ T7595]  asm_exc_page_fault+0x22/0x30
[  276.217276][ T7595] RIP: 0033:0x7fa82a869943
[  276.221697][ T7595] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c
[  276.241307][ T7595] RSP: 002b:00007fa828c0e4a0 EFLAGS: 00010206
[  276.247394][ T7595] RAX: 0000000000008001 RBX: 00007fa828c0e540 RCX: 00007fa8207ef000
[  276.255373][ T7595] RDX: 00007fa828c0e6e0 RSI: 0000000000000007 RDI: 00007fa828c0e5e0
[  276.263355][ T7595] RBP: 0000000000000102 R08: 0000000000000009 R09: 0000000000000195
[  276.271342][ T7595] R10: 00000000000001b2 R11: 00007fa828c0e540 R12: 0000000000000001
[  276.279326][ T7595] R13: 00007fa82aa48c40 R14: 0000000000000042 R15: 00007fa828c0e5e0
[  276.287342][ T7595]  </TASK>
[  276.290422][    C1] vkms_vblank_simulate: vblank timer overrun
[  276.297536][ T7585] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop0 scanned by syz.0.715 (7585)
[  276.339233][ T7585] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  276.364859][ T7585] BTRFS info (device loop0): using free space tree
[  276.408570][ T7587] loop4: detected capacity change from 0 to 32768
[  276.410749][ T7585] BTRFS info (device loop0): has skinny extents
[  276.426901][ T7595] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[  276.443823][ T7587] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.716 (7587)
[  276.444423][   T21] usb 2-1: USB disconnect, device number 4
[  276.485276][ T7601] FAULT_INJECTION: forcing a failure.
[  276.485276][ T7601] name failslab, interval 1, probability 0, space 0, times 0
[  276.502108][ T7595] loop3: detected capacity change from 0 to 128
[  276.515121][ T7601] CPU: 0 PID: 7601 Comm: syz.5.720 Not tainted syzkaller #0
[  276.522443][ T7601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  276.532504][ T7601] Call Trace:
[  276.535788][ T7601]  <TASK>
[  276.538725][ T7601]  dump_stack_lvl+0x168/0x230
[  276.543423][ T7601]  ? show_regs_print_info+0x20/0x20
[  276.548624][ T7601]  ? load_image+0x3b0/0x3b0
[  276.553143][ T7601]  ? __might_sleep+0xf0/0xf0
[  276.557739][ T7601]  ? __lock_acquire+0x7c60/0x7c60
[  276.562783][ T7601]  should_fail+0x38c/0x4c0
[  276.567223][ T7601]  should_failslab+0x5/0x20
[  276.571738][ T7601]  slab_pre_alloc_hook+0x51/0xc0
[  276.576686][ T7601]  ? __anon_vma_prepare+0xb0/0x410
[  276.581804][ T7601]  kmem_cache_alloc+0x3d/0x290
[  276.586566][ T7601]  ? find_mergeable_anon_vma+0x394/0x590
[  276.592205][ T7601]  __anon_vma_prepare+0xb0/0x410
[  276.597588][ T7601]  wp_page_copy+0x130e/0x1fd0
[  276.602277][ T7601]  ? do_wp_page+0x902/0xad0
[  276.606910][ T7601]  ? insert_page_into_pte_locked+0x480/0x480
[  276.609882][ T7607] loop1: detected capacity change from 0 to 16
[  276.612897][ T7601]  ? do_raw_spin_unlock+0x11d/0x230
[  276.612927][ T7601]  ? _raw_spin_unlock+0x24/0x40
[  276.612943][ T7601]  ? do_wp_page+0x902/0xad0
[  276.612964][ T7601]  handle_mm_fault+0x1ec7/0x43b0
[  276.612991][ T7601]  ? get_page+0xe0/0xe0
[  276.613015][ T7601]  ? vmacache_find+0x238/0x590
[  276.647428][ T7601]  ? find_vma+0xd2/0x230
[  276.651678][ T7601]  do_user_addr_fault+0x489/0xc80
[  276.653294][ T7607] erofs: (device loop1): mounted with root inode @ nid 36.
[  276.656712][ T7601]  exc_page_fault+0x60/0x100
[  276.656743][ T7601]  asm_exc_page_fault+0x22/0x30
[  276.656760][ T7601] RIP: 0033:0x7ff935793943
[  276.656778][ T7601] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c
[  276.697322][ T7601] RSP: 002b:00007ff933b384a0 EFLAGS: 00010202
[  276.703489][ T7601] RAX: 0000000000000400 RBX: 00007ff933b38540 RCX: 00007ff92b719000
[  276.711476][ T7601] RDX: 00007ff933b386e0 RSI: 0000000000000000 RDI: 00007ff933b385e0
[  276.719456][ T7601] RBP: 00000000000000f9 R08: 0000000000000008 R09: 00000000000000a6
[  276.727441][ T7601] R10: 00000000000000c4 R11: 00007ff933b38540 R12: 0000000000000001
[  276.735417][ T7601] R13: 00007ff935972c40 R14: 0000000000000020 R15: 00007ff933b385e0
[  276.743405][ T7601]  </TASK>
[  276.755551][ T7595] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  276.760533][ T7587] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  276.782442][ T7595] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  276.838364][ T7587] BTRFS info (device loop4): turning off barriers
[  276.875103][ T7587] BTRFS info (device loop4): setting nodatasum
[  276.894090][ T7607] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117]
[  276.904049][ T7587] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  276.915968][ T7607] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117]
[  276.928287][ T7607] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  276.929985][ T7587] BTRFS info (device loop4): use zstd compression, level 3
[  276.945998][ T7587] BTRFS info (device loop4): using free space tree
[  276.952566][ T7587] BTRFS info (device loop4): has skinny extents
[  276.978457][ T7607] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -18 in[3072, 1024] out[3984]
[  277.034007][ T7601] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[  277.046634][ T7601] loop5: detected capacity change from 0 to 512
[  277.054300][ T7607] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117]
[  277.059188][ T7585] BTRFS info (device loop0): enabling ssd optimizations
[  277.062559][ T7607] erofs: (device loop1): erofs_readdir: fail to readdir of logical block 144 of nid 36
[  277.337016][ T7644] netlink: 'syz.3.722': attribute type 10 has an invalid length.
[  277.344909][ T7644] netlink: 40 bytes leftover after parsing attributes in process `syz.3.722'.
[  277.368933][ T7644] batman_adv: batadv0: Adding interface: virt_wifi0
[  277.375700][ T7644] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  277.423108][ T7644] batman_adv: batadv0: Interface activated: virt_wifi0
[  277.476885][ T7601] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  277.719841][   T21] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  277.814833][ T7655] loop3: detected capacity change from 0 to 2048
[  277.973884][ T7661] loop5: detected capacity change from 0 to 512
[  277.979266][   T21] usb 2-1: Using ep0 maxpacket: 8
[  278.040046][ T7655] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  278.096834][ T7661] EXT4-fs error (device loop5): ext4_orphan_get:1401: inode #15: comm syz.5.727: inode has both inline data and extents flags
[  278.159994][   T21] usb 2-1: unable to get BOS descriptor or descriptor too short
[  278.239980][   T21] usb 2-1: config 0 has an invalid interface number: 88 but max is 0
[  278.248353][   T21] usb 2-1: config 0 has no interface number 0
[  278.299148][ T7661] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.727: couldn't read orphan inode 15 (err -117)
[  278.331714][   T21] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  278.365370][   T21] usb 2-1: config 0 interface 88 has no altsetting 0
[  278.398038][ T7666] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  278.412978][ T7666] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28
[  278.425934][ T7666] EXT4-fs (loop3): This should not happen!! Data will be lost
[  278.425934][ T7666] 
[  278.435627][ T7666] EXT4-fs (loop3): Total free blocks count 0
[  278.441695][ T7666] EXT4-fs (loop3): Free/Dirty block details
[  278.447624][ T7666] EXT4-fs (loop3): free_blocks=2415919504
[  278.453394][ T7666] EXT4-fs (loop3): dirty_blocks=64
[  278.458526][ T7666] EXT4-fs (loop3): Block reservation details
[  278.464536][ T7666] EXT4-fs (loop3): i_reserved_data_blocks=4
[  278.541650][ T7661] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  278.579144][ T7654] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  278.591547][ T7654] EXT4-fs (loop3): This should not happen!! Data will be lost
[  278.591547][ T7654] 
[  278.689040][   T21] usb 2-1: string descriptor 0 read error: -22
[  278.695306][   T21] usb 2-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31
[  278.859828][   T21] usb 2-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3
[  278.871042][   T21] usb 2-1: config 0 descriptor??
[  278.920474][   T21] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.88/input/input6
[  279.406490][ T7674] loop0: detected capacity change from 0 to 1024
[  279.659238][ T7515] usb 2-1: USB disconnect, device number 5
[  279.685886][ T7681] loop3: detected capacity change from 0 to 1024
[  279.738942][ T7681] hfsplus: unable to parse mount options
[  280.617456][ T7674] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none.
[  280.790277][ T7674] ext4 filesystem being mounted at /152/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  282.276699][ T7694] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set
[  282.703779][ T7701] FAULT_INJECTION: forcing a failure.
[  282.703779][ T7701] name failslab, interval 1, probability 0, space 0, times 0
[  282.734038][ T7703] netlink: 12 bytes leftover after parsing attributes in process `syz.1.735'.
[  282.736432][ T7701] CPU: 1 PID: 7701 Comm: syz.3.734 Not tainted syzkaller #0
[  282.750236][ T7701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  282.760303][ T7701] Call Trace:
[  282.763469][ T7703] netlink: 12 bytes leftover after parsing attributes in process `syz.1.735'.
[  282.763585][ T7701]  <TASK>
[  282.775344][ T7701]  dump_stack_lvl+0x168/0x230
[  282.780031][ T7701]  ? show_regs_print_info+0x20/0x20
[  282.785267][ T7701]  ? load_image+0x3b0/0x3b0
[  282.788198][ T7703] netlink: 40 bytes leftover after parsing attributes in process `syz.1.735'.
[  282.789783][ T7701]  ? __might_sleep+0xf0/0xf0
[  282.802370][ T7703] netlink: 40 bytes leftover after parsing attributes in process `syz.1.735'.
[  282.803178][ T7701]  ? __lock_acquire+0x7c60/0x7c60
[  282.817025][ T7701]  should_fail+0x38c/0x4c0
[  282.821451][ T7701]  should_failslab+0x5/0x20
[  282.825955][ T7701]  slab_pre_alloc_hook+0x51/0xc0
[  282.830894][ T7701]  ? __alloc_file+0x25/0x240
[  282.835489][ T7701]  kmem_cache_alloc+0x3d/0x290
[  282.840253][ T7701]  __alloc_file+0x25/0x240
[  282.844669][ T7701]  alloc_empty_file+0x90/0x180
[  282.849433][ T7701]  alloc_file+0x5b/0x4f0
[  282.853674][ T7701]  ? do_raw_spin_unlock+0x11d/0x230
[  282.858875][ T7701]  alloc_file_pseudo+0x17a/0x1f0
[  282.863841][ T7701]  ? alloc_empty_file_noaccount+0x80/0x80
[  282.869580][ T7701]  __shmem_file_setup+0x1cf/0x290
[  282.874617][ T7701]  ? shmem_file_setup+0x13/0x30
[  282.879501][ T7701]  __se_sys_memfd_create+0x290/0x430
[  282.884796][ T7701]  ? __x64_sys_memfd_create+0x60/0x60
[  282.890175][ T7701]  ? lockdep_hardirqs_on+0x94/0x140
[  282.895379][ T7701]  do_syscall_64+0x4c/0xa0
[  282.899787][ T7701]  ? clear_bhb_loop+0x30/0x80
[  282.904466][ T7701]  ? clear_bhb_loop+0x30/0x80
[  282.909149][ T7701]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  282.915049][ T7701] RIP: 0033:0x7fa82a9a8749
[  282.919466][ T7701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  282.935041][ T4473] udevd[4473]: Error opening device "/dev/input/event4": No such file or directory
[  282.939066][ T7701] RSP: 002b:00007fa828c0ee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
[  282.939089][ T7701] RAX: ffffffffffffffda RBX: 0000000000000559 RCX: 00007fa82a9a8749
[  282.939101][ T7701] RDX: 00007fa828c0eef0 RSI: 0000000000000000 RDI: 00007fa82aa2d960
[  282.939113][ T7701] RBP: 0000200000000d40 R08: 00007fa828c0ebb7 R09: 00007fa828c0ee40
[  282.954676][ T4473] udevd[4473]: Unable to EVIOCGABS device "/dev/input/event4"
[  282.956755][ T7701] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000001c0
[  282.956770][ T7701] R13: 00007fa828c0eef0 R14: 00007fa828c0eeb0 R15: 0000200000000a00
[  282.956794][ T7701]  </TASK>
[  283.099859][ T7721] loop4: detected capacity change from 0 to 512
[  283.154911][ T4473] udevd[4473]: Unable to EVIOCGABS device "/dev/input/event4"
[  283.220527][ T7721] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.740: inode has both inline data and extents flags
[  283.236655][ T7721] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.740: couldn't read orphan inode 15 (err -117)
[  283.252234][ T7721] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  283.284398][ T7734] loop0: detected capacity change from 0 to 1024
[  283.299736][ T7736] netlink: 12 bytes leftover after parsing attributes in process `syz.1.744'.
[  283.343095][ T7736] netlink: 12 bytes leftover after parsing attributes in process `syz.1.744'.
[  283.414023][ T7734] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none.
[  283.421036][ T7736] netlink: 40 bytes leftover after parsing attributes in process `syz.1.744'.
[  283.431246][ T7515] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  283.440958][ T7736] netlink: 40 bytes leftover after parsing attributes in process `syz.1.744'.
[  283.764021][ T7734] ext4 filesystem being mounted at /154/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  284.041916][ T7734] EXT4-fs error (device loop0): ext4_map_blocks:739: inode #15: comm syz.0.743: lblock 0 mapped to illegal pblock 0 (length 1)
[  284.115984][ T7734] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  284.128556][ T7734] EXT4-fs (loop0): This should not happen!! Data will be lost
[  284.128556][ T7734] 
[  284.152565][ T7745] loop1: detected capacity change from 0 to 1024
[  284.160707][ T7746] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #15: comm syz.0.743: lblock 0 mapped to illegal pblock 0 (length 1)
[  284.179387][ T7746] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #15: comm syz.0.743: lblock 0 mapped to illegal pblock 0 (length 1)
[  284.187980][ T7745] hfsplus: unable to parse mount options
[  284.231571][ T7746] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #15: comm syz.0.743: lblock 0 mapped to illegal pblock 0 (length 1)
[  284.355655][ T7515] usb 6-1: Using ep0 maxpacket: 8
[  284.475947][ T7515] usb 6-1: config 0 has too many interfaces: 235, using maximum allowed: 32
[  284.518386][ T7515] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 235
[  284.664922][ T7515] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 3499, setting to 64
[  285.712691][ T7762] loop1: detected capacity change from 0 to 512
[  285.735143][ T7515] usb 6-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7
[  285.758558][ T7515] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  285.767415][ T7765] loop0: detected capacity change from 0 to 1764
[  285.788860][ T7515] usb 6-1: Product: syz
[  285.801449][ T7762] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  285.825641][ T7515] usb 6-1: Manufacturer: syz
[  285.849945][ T7515] usb 6-1: SerialNumber: syz
[  285.851132][ T7762] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  285.887127][ T7762] EXT4-fs (loop1): 1 truncate cleaned up
[  285.894056][ T7762] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable,max_dir_size_kb=0x00000000000001ff,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none.
[  285.903361][ T7515] usb 6-1: config 0 descriptor??
[  285.978409][ T7762] EXT4-fs (loop1): shut down requested (2)
[  286.012710][ T7762] overlayfs: failed to get metacopy (-5)
[  286.064559][ T7515] usb 6-1: can't set config #0, error -71
[  286.104768][ T7515] usb 6-1: USB disconnect, device number 4
[  286.160556][ T7778] loop0: detected capacity change from 0 to 1024
[  286.162201][ T7780] loop3: detected capacity change from 0 to 512
[  286.191827][ T7777] binder_alloc: 7774: binder_alloc_buf failed to map page at 200000ffe000 in userspace
[  286.228591][ T7778] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  286.267165][ T7778] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869)
[  286.278532][ T7778] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #3: comm syz.0.755: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  286.280209][ T7780] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.756: inode has both inline data and extents flags
[  286.310428][ T7778] EXT4-fs (loop0): no journal found
[  286.315848][ T7778] EXT4-fs (loop0): can't get journal size
[  286.323167][ T7778] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000002000,noinit_itable,max_dir_size_kb=0x0000000000000005,noblock_validity,noload,data=writeback,,errors=continue. Quota mode: writeback.
[  286.370627][ T7778] netlink: 12 bytes leftover after parsing attributes in process `syz.0.755'.
[  286.500448][ T7780] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.756: couldn't read orphan inode 15 (err -117)
[  286.526868][ T7780] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  286.572037][ T7789] fuse: Unknown parameter 'grou00000000000000000000'
[  287.640797][ T7796] loop0: detected capacity change from 0 to 2048
[  287.785230][ T7796] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  287.996735][ T4324] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  288.012514][ T7802] loop5: detected capacity change from 0 to 1024
[  288.097534][ T7805] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  288.112388][ T7805] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28
[  288.124932][ T7805] EXT4-fs (loop0): This should not happen!! Data will be lost
[  288.124932][ T7805] 
[  288.134716][ T7805] EXT4-fs (loop0): Total free blocks count 0
[  288.140707][ T7805] EXT4-fs (loop0): Free/Dirty block details
[  288.147164][ T7805] EXT4-fs (loop0): free_blocks=2415919504
[  288.152910][ T7805] EXT4-fs (loop0): dirty_blocks=64
[  288.158115][ T7805] EXT4-fs (loop0): Block reservation details
[  288.164118][ T7805] EXT4-fs (loop0): i_reserved_data_blocks=4
[  288.264673][ T7802] hfsplus: unable to parse mount options
[  288.351642][ T7795] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  288.363987][ T7795] EXT4-fs (loop0): This should not happen!! Data will be lost
[  288.363987][ T7795] 
[  288.759747][ T4324] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  288.870409][ T7809] loop3: detected capacity change from 0 to 1024
[  288.981085][ T4324] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  289.019268][ T7818] loop5: detected capacity change from 0 to 128
[  289.067416][ T7821] FAULT_INJECTION: forcing a failure.
[  289.067416][ T7821] name failslab, interval 1, probability 0, space 0, times 0
[  289.074593][ T7818] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  289.098511][ T4324] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  289.098923][ T7821] CPU: 1 PID: 7821 Comm: syz.4.769 Not tainted syzkaller #0
[  289.116055][ T7821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  289.126118][ T7821] Call Trace:
[  289.129402][ T7821]  <TASK>
[  289.132332][ T7821]  dump_stack_lvl+0x168/0x230
[  289.137013][ T7821]  ? show_regs_print_info+0x20/0x20
[  289.142236][ T7821]  ? load_image+0x3b0/0x3b0
[  289.146750][ T7821]  ? __might_sleep+0xf0/0xf0
[  289.151507][ T7821]  ? __lock_acquire+0x7c60/0x7c60
[  289.156555][ T7821]  should_fail+0x38c/0x4c0
[  289.160999][ T7821]  should_failslab+0x5/0x20
[  289.165522][ T7821]  slab_pre_alloc_hook+0x51/0xc0
[  289.170475][ T7821]  kmem_cache_alloc_trace+0x47/0x2a0
[  289.175766][ T7821]  ? __list_lru_init+0x50a/0xa50
[  289.180719][ T7821]  __list_lru_init+0x50a/0xa50
[  289.185507][ T7821]  alloc_super+0x76c/0x950
[  289.189940][ T7821]  ? do_raw_spin_unlock+0x11d/0x230
[  289.195155][ T7821]  ? kill_litter_super+0xa0/0xa0
[  289.196709][ T7818] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  289.200138][ T7821]  sget_fc+0x2dc/0x720
[  289.213201][ T7821]  ? kill_litter_super+0xa0/0xa0
[  289.218153][ T7821]  ? mqueue_get_tree+0xe0/0xe0
[  289.222929][ T7821]  get_tree_nodev+0x26/0x160
[  289.227532][ T7821]  vfs_get_tree+0x88/0x270
[  289.231957][ T7821]  fc_mount+0x18/0xa0
[  289.235950][ T7821]  mq_init_ns+0x39d/0x510
[  289.240287][ T7821]  copy_ipcs+0x2e3/0x4b0
[  289.244542][ T7821]  create_new_namespaces+0x212/0x6f0
[  289.249835][ T7821]  ? bpf_lsm_capable+0x5/0x10
[  289.254527][ T7821]  unshare_nsproxy_namespaces+0x116/0x160
[  289.260262][ T7821]  ksys_unshare+0x4bc/0x890
[  289.264779][ T7821]  ? sighand_ctor+0x40/0x40
[  289.269288][ T7821]  ? lock_chain_count+0x20/0x20
[  289.274151][ T7821]  ? vtime_user_exit+0x2dc/0x400
[  289.279101][ T7821]  ? syscall_enter_from_user_mode+0x21/0x70
[  289.285009][ T7821]  __x64_sys_unshare+0x34/0x40
[  289.289774][ T7821]  do_syscall_64+0x4c/0xa0
[  289.294187][ T7821]  ? clear_bhb_loop+0x30/0x80
[  289.298870][ T7821]  ? clear_bhb_loop+0x30/0x80
[  289.303558][ T7821]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  289.309459][ T7821] RIP: 0033:0x7f8ac52ec749
[  289.313882][ T7821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  289.333495][ T7821] RSP: 002b:00007f8ac3553038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  289.341920][ T7821] RAX: ffffffffffffffda RBX: 00007f8ac5542fa0 RCX: 00007f8ac52ec749
[  289.349902][ T7821] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008040000
[  289.357882][ T7821] RBP: 00007f8ac3553090 R08: 0000000000000000 R09: 0000000000000000
[  289.365867][ T7821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  289.373845][ T7821] R13: 00007f8ac5543038 R14: 00007f8ac5542fa0 R15: 00007ffdec204f68
[  289.381837][ T7821]  </TASK>
[  289.462500][ T5431] usb 1-1: new full-speed USB device number 8 using dummy_hcd
[  289.595252][ T7828] fuse: Unknown parameter 'grou00000000000000000000'
[  289.676447][ T5431] usb 1-1: device descriptor read/64, error -71
[  289.982647][ T5431] usb 1-1: new full-speed USB device number 9 using dummy_hcd
[  290.007136][ T7829] FAULT_INJECTION: forcing a failure.
[  290.007136][ T7829] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  290.233786][ T7829] CPU: 1 PID: 7829 Comm: syz.5.770 Not tainted syzkaller #0
[  290.241116][ T7829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  290.251266][ T7829] Call Trace:
[  290.254549][ T7829]  <TASK>
[  290.257478][ T7829]  dump_stack_lvl+0x168/0x230
[  290.262159][ T7829]  ? show_regs_print_info+0x20/0x20
[  290.267357][ T7829]  ? load_image+0x3b0/0x3b0
[  290.271868][ T7829]  ? __lock_acquire+0x7c60/0x7c60
[  290.276895][ T7829]  should_fail+0x38c/0x4c0
[  290.281331][ T7829]  _copy_to_iter+0x22a/0x1160
[  290.286007][ T7829]  ? lockdep_hardirqs_on+0x94/0x140
[  290.291219][ T7829]  ? iov_iter_init+0x170/0x170
[  290.296071][ T7829]  ? __check_object_size+0xeb/0x410
[  290.301271][ T7829]  ? __phys_addr_symbol+0x2b/0x70
[  290.306303][ T7829]  __skb_datagram_iter+0xde/0x740
[  290.311519][ T7829]  ? skb_copy_datagram_iter+0x1f0/0x1f0
[  290.317079][ T7829]  skb_copy_datagram_iter+0xad/0x1f0
[  290.322373][ T7829]  tipc_recvstream+0x727/0xe70
[  290.327166][ T7829]  ? tipc_sendstream+0x70/0x70
[  290.331938][ T7829]  ____sys_recvmsg+0x291/0x580
[  290.336709][ T7829]  ? __might_fault+0xb3/0x110
[  290.341399][ T7829]  ? __sys_recvmsg_sock+0x40/0x40
[  290.346439][ T7829]  ? import_iovec+0x6f/0xa0
[  290.350951][ T7829]  ___sys_recvmsg+0x1af/0x4f0
[  290.355636][ T7829]  ? __sys_recvmsg+0x250/0x250
[  290.360430][ T7829]  ? __fdget+0x18b/0x210
[  290.364672][ T7829]  ? do_recvmmsg+0x164/0x7a0
[  290.369264][ T7829]  do_recvmmsg+0x344/0x7a0
[  290.373685][ T7829]  ? __sys_recvmmsg+0x280/0x280
[  290.378547][ T7829]  ? __lock_acquire+0x7c60/0x7c60
[  290.383586][ T7829]  __x64_sys_recvmmsg+0x18d/0x240
[  290.388629][ T7829]  ? do_recvmmsg+0x7a0/0x7a0
[  290.393321][ T7829]  ? lockdep_hardirqs_on+0x94/0x140
[  290.398532][ T7829]  do_syscall_64+0x4c/0xa0
[  290.402958][ T7829]  ? clear_bhb_loop+0x30/0x80
[  290.407641][ T7829]  ? clear_bhb_loop+0x30/0x80
[  290.412329][ T7829]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  290.418315][ T7829] RIP: 0033:0x7ff9358d2749
[  290.422744][ T7829] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  290.442353][ T7829] RSP: 002b:00007ff933b39038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  290.450776][ T7829] RAX: ffffffffffffffda RBX: 00007ff935b28fa0 RCX: 00007ff9358d2749
[  290.458775][ T7829] RDX: 0000000000000001 RSI: 0000200000000980 RDI: 0000000000000003
[  290.463258][ T7822] chnl_net:caif_netlink_parms(): no params data found
[  290.466767][ T7829] RBP: 00007ff933b39090 R08: 0000000000000000 R09: 0000000000000000
[  290.481463][ T7829] R10: 0000000000012123 R11: 0000000000000246 R12: 0000000000000001
[  290.489440][ T7829] R13: 00007ff935b29038 R14: 00007ff935b28fa0 R15: 00007fff04ae1d68
[  290.497435][ T7829]  </TASK>
[  290.580273][ T5431] usb 1-1: device descriptor read/64, error -71
[  290.712798][ T5431] usb usb1-port1: attempt power cycle
[  290.746752][ T7842] loop5: detected capacity change from 0 to 2048
[  290.852273][ T7822] bridge0: port 1(bridge_slave_0) entered blocking state
[  290.885545][ T7822] bridge0: port 1(bridge_slave_0) entered disabled state
[  290.933633][ T7842] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  290.975890][ T7822] device bridge_slave_0 entered promiscuous mode
[  291.057373][ T7822] bridge0: port 2(bridge_slave_1) entered blocking state
[  291.091530][ T7822] bridge0: port 2(bridge_slave_1) entered disabled state
[  291.114208][ T7822] device bridge_slave_1 entered promiscuous mode
[  291.151870][ T5431] usb 1-1: new full-speed USB device number 10 using dummy_hcd
[  291.163079][ T7822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  291.206729][ T7848] loop4: detected capacity change from 0 to 8192
[  291.215983][ T7822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  291.231237][ T7515] Bluetooth: hci2: command 0x0409 tx timeout
[  291.251493][ T5431] usb 1-1: device descriptor read/8, error -71
[  291.272970][ T7866] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  291.307074][ T7848] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal
[  291.318017][ T7848] REISERFS (device loop4): using ordered data mode
[  291.338880][ T7848] reiserfs: using flush barriers
[  291.363367][ T7822] team0: Port device team_slave_0 added
[  291.370911][ T7822] team0: Port device team_slave_1 added
[  291.378320][ T7846] loop3: detected capacity change from 0 to 32768
[  291.387670][ T7848] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  291.411561][ T7866] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  291.421826][ T7846] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.772 (7846)
[  291.431388][ T7848] REISERFS (device loop4): checking transaction log (loop4)
[  291.452137][ T7848] REISERFS warning: reiserfs-5085 is_leaf: item length seems wrong: *3.5*[1 2 0x1 DIRECT], item_len 0, item_location 4004, free_space(entry_count) 2306
[  291.461180][ T7866] EXT4-fs (loop5): This should not happen!! Data will be lost
[  291.461180][ T7866] 
[  291.474715][ T7848] REISERFS error (device loop4): vs-5150 search_by_key: invalid format found in block 531. Fsck?
[  291.489144][ T7848] REISERFS (device loop4): Remounting filesystem read-only
[  291.496851][ T7848] REISERFS error (device loop4): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD]
[  291.542727][ T7866] EXT4-fs (loop5): Total free blocks count 0
[  291.557619][ T5431] usb 1-1: new full-speed USB device number 11 using dummy_hcd
[  291.571236][ T7866] EXT4-fs (loop5): Free/Dirty block details
[  291.589574][ T7866] EXT4-fs (loop5): free_blocks=2415919504
[  291.600596][ T7866] EXT4-fs (loop5): dirty_blocks=16
[  291.608937][ T7866] EXT4-fs (loop5): Block reservation details
[  291.618109][ T7846] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  291.642204][ T7822] batman_adv: batadv0: Adding interface: batadv_slave_0
[  291.659462][ T7822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  291.666825][ T7846] BTRFS info (device loop3): using free space tree
[  291.701461][ T5431] usb 1-1: device descriptor read/8, error -71
[  291.713242][ T7866] EXT4-fs (loop5): i_reserved_data_blocks=1
[  291.739606][ T7822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  291.776789][ T7822] batman_adv: batadv0: Adding interface: batadv_slave_1
[  291.789327][ T7846] BTRFS info (device loop3): has skinny extents
[  291.789405][ T7822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  291.846988][ T5431] usb usb1-port1: unable to enumerate USB device
[  291.898398][ T7822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  291.958327][ T7822] device hsr_slave_0 entered promiscuous mode
[  291.967230][ T7822] device hsr_slave_1 entered promiscuous mode
[  291.974600][ T7822] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  291.983974][ T7822] Cannot create hsr debugfs directory
[  292.087773][ T7846] BTRFS info (device loop3): enabling ssd optimizations
[  292.130310][   T26] audit: type=1800 audit(1765160693.131:76): pid=7846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.772" name="bus" dev="loop3" ino=263 res=0 errno=0
[  292.370648][ T5431] usb 1-1: new full-speed USB device number 12 using dummy_hcd
[  292.490056][ T7848] loop4: detected capacity change from 0 to 32768
[  292.522686][ T4324] device hsr_slave_0 left promiscuous mode
[  292.542995][ T7848] (syz.4.775,7848,0):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options
[  292.570493][ T7848] (syz.4.775,7848,0):ocfs2_fill_super:1177 ERROR: status = -22
[  292.581283][ T4324] device hsr_slave_1 left promiscuous mode
[  292.600797][ T4324] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  292.608257][ T4324] batman_adv: batadv0: Removing interface: batadv_slave_0
[  292.667266][ T4324] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  292.690467][ T4324] batman_adv: batadv0: Removing interface: batadv_slave_1
[  292.733394][ T4324] device bridge_slave_1 left promiscuous mode
[  292.747756][ T4324] bridge0: port 2(bridge_slave_1) entered disabled state
[  292.812095][ T5431] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  292.830261][ T5431] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  292.851598][ T5431] usb 1-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00
[  292.860986][ T5431] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  292.879432][ T5431] usb 1-1: config 0 descriptor??
[  293.511916][ T5431] samsung 0003:0419:0001.0004: unknown main item tag 0x0
[  293.532052][ T5431] samsung 0003:0419:0001.0004: hidraw0: USB HID v0.00 Device [HID 0419:0001] on usb-dummy_hcd.0-1/input0
[  293.561607][ T7515] Bluetooth: hci2: command 0x041b tx timeout
[  293.608135][ T4324] device bridge_slave_0 left promiscuous mode
[  293.625267][ T7917] loop3: detected capacity change from 0 to 1024
[  293.632614][ T4324] bridge0: port 1(bridge_slave_0) entered disabled state
[  293.680683][ T7917] hfsplus: unable to parse mount options
[  293.719140][ T7878] loop0: detected capacity change from 0 to 256
[  294.023328][ T7878] FAT-fs (loop0): Directory bread(block 64) failed
[  294.053463][ T4324] device veth1_macvtap left promiscuous mode
[  294.063079][ T4324] device veth0_macvtap left promiscuous mode
[  294.076098][ T7878] FAT-fs (loop0): Directory bread(block 65) failed
[  294.086445][ T7923] loop5: detected capacity change from 0 to 2048
[  294.135372][ T7878] FAT-fs (loop0): Directory bread(block 66) failed
[  294.197463][ T7878] FAT-fs (loop0): Directory bread(block 67) failed
[  294.197523][ T4324] device veth1_vlan left promiscuous mode
[  294.246581][ T4324] device veth0_vlan left promiscuous mode
[  294.253095][ T7878] FAT-fs (loop0): Directory bread(block 68) failed
[  294.259809][ T7878] FAT-fs (loop0): Directory bread(block 69) failed
[  294.267255][ T7878] FAT-fs (loop0): Directory bread(block 70) failed
[  294.275025][ T7878] FAT-fs (loop0): Directory bread(block 71) failed
[  294.282225][ T7923] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  294.292098][ T7878] FAT-fs (loop0): Directory bread(block 72) failed
[  294.299272][ T7878] FAT-fs (loop0): Directory bread(block 73) failed
[  294.416563][ T7928] loop4: detected capacity change from 0 to 8
[  294.466030][ T7878] input: syz1 as /devices/virtual/input/input8
[  294.508896][ T7928] squashfs image failed sanity check
[  294.612513][ T7933] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  294.627652][ T7933] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28
[  294.640080][ T7933] EXT4-fs (loop5): This should not happen!! Data will be lost
[  294.640080][ T7933] 
[  294.649855][ T7933] EXT4-fs (loop5): Total free blocks count 0
[  294.655903][ T7933] EXT4-fs (loop5): Free/Dirty block details
[  294.661871][ T7933] EXT4-fs (loop5): free_blocks=2415919504
[  294.667642][ T7933] EXT4-fs (loop5): dirty_blocks=64
[  294.672839][ T7933] EXT4-fs (loop5): Block reservation details
[  294.678862][ T7933] EXT4-fs (loop5): i_reserved_data_blocks=4
[  294.867447][ T7920] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  294.879780][ T7920] EXT4-fs (loop5): This should not happen!! Data will be lost
[  294.879780][ T7920] 
[  295.044951][ T7934] loop4: detected capacity change from 0 to 512
[  295.191720][ T7934] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nojournal_checksum,. Quota mode: writeback.
[  295.205521][ T7934] ext4 filesystem being mounted at /158/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  295.218251][ T7934] EXT4-fs error (device loop4): ext4_xattr_block_get:546: inode #15: comm syz.4.781: corrupted xattr block 33
[  295.230436][ T7934] EXT4-fs (loop4): Remounting filesystem read-only
[  295.237118][ T7934] fscrypt (loop4, inode 15): Error -117 getting encryption context
[  295.245852][ T7938] fuse: Unknown parameter 'grou00000000000000000000'
[  295.465599][ T4324] team0 (unregistering): Port device team_slave_1 removed
[  295.704500][ T4324] team0 (unregistering): Port device team_slave_0 removed
[  295.955604][ T4324] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  296.016405][ T7518] Bluetooth: hci2: command 0x040f tx timeout
[  296.033967][ T4324] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  296.167470][ T7516] usb 1-1: USB disconnect, device number 12
[  296.296070][ T7946] netlink: 112 bytes leftover after parsing attributes in process `syz.5.786'.
[  296.321987][ T7946] netlink: 12 bytes leftover after parsing attributes in process `syz.5.786'.
[  296.362390][ T7944] loop5: detected capacity change from 0 to 1024
[  296.366624][ T4324] bond0 (unregistering): Released all slaves
[  296.419947][ T7944] EXT4-fs (loop5): inline encryption not supported
[  296.435921][ T7944] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  296.477760][ T7944] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,noauto_da_alloc,data_err=ignore,nojournal_checksum,errors=remount-ro,grpquota,noblock_validity,user_xattr,nombcache,errors=remount-ro,. Quota mode: writeback.
[  296.526033][ T7822] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  296.547114][   T26] audit: type=1800 audit(1765160697.544:77): pid=7944 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.786" name="file1" dev="loop5" ino=15 res=0 errno=0
[  296.617277][ T7822] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  296.686113][ T7822] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  296.763513][ T7822] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  296.826946][ T7956] loop0: detected capacity change from 0 to 2048
[  296.830593][ T7961] 9pnet: Insufficient options for proto=fd
[  296.979995][ T7956] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  297.022535][ T7822] 8021q: adding VLAN 0 to HW filter on device bond0
[  297.040228][ T7822] 8021q: adding VLAN 0 to HW filter on device team0
[  297.074094][ T7822] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  297.085485][ T7822] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  297.107816][ T5433] usb 6-1: new full-speed USB device number 5 using dummy_hcd
[  297.138086][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  297.193485][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  297.208965][ T7982] fuse: Unknown parameter 'group_i00000000000000000000'
[  297.236096][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  297.273895][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  297.314781][ T4425] bridge0: port 1(bridge_slave_0) entered blocking state
[  297.321936][ T4425] bridge0: port 1(bridge_slave_0) entered forwarding state
[  297.355925][ T7984] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  297.407037][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  297.415994][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  297.454141][ T7984] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  297.647548][   T26] audit: type=1326 audit(1765160698.635:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7959 comm="syz.3.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82a9a8749 code=0x7fc00000
[  297.688208][ T4425] bridge0: port 2(bridge_slave_1) entered blocking state
[  297.695400][ T4425] bridge0: port 2(bridge_slave_1) entered forwarding state
[  297.796282][ T7984] EXT4-fs (loop0): This should not happen!! Data will be lost
[  297.796282][ T7984] 
[  297.992139][ T7984] EXT4-fs (loop0): Total free blocks count 0
[  298.007417][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  298.015460][   T26] audit: type=1326 audit(1765160698.635:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7959 comm="syz.3.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa82a9a8749 code=0x7fc00000
[  298.043558][ T7984] EXT4-fs (loop0): Free/Dirty block details
[  298.050496][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  298.058681][ T7984] EXT4-fs (loop0): free_blocks=2415919504
[  298.064445][ T7984] EXT4-fs (loop0): dirty_blocks=16
[  298.070059][ T7984] EXT4-fs (loop0): Block reservation details
[  298.076140][ T7984] EXT4-fs (loop0): i_reserved_data_blocks=1
[  298.109768][ T4293] Bluetooth: hci2: command 0x0419 tx timeout
[  298.133559][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  298.140328][   T26] audit: type=1326 audit(1765160698.635:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7959 comm="syz.3.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82a9a8749 code=0x7fc00000
[  298.157213][ T5433] usb 6-1: config 252 has an invalid interface number: 191 but max is 0
[  298.163960][   T26] audit: type=1326 audit(1765160698.635:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7959 comm="syz.3.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82a9a8749 code=0x7fc00000
[  298.195265][ T5433] usb 6-1: config 252 has no interface number 0
[  298.202416][ T7995] loop4: detected capacity change from 0 to 1024
[  298.229269][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  298.250172][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  298.267927][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  298.276492][   T26] audit: type=1326 audit(1765160698.635:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7959 comm="syz.3.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82a9a8749 code=0x7fc00000
[  298.316179][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  298.316616][ T7995] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none.
[  298.353744][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  298.370679][   T26] audit: type=1326 audit(1765160698.635:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7959 comm="syz.3.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82a9a8749 code=0x7fc00000
[  298.376072][ T7995] ext4 filesystem being mounted at /162/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  298.405202][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  298.413552][ T5433] usb 6-1: New USB device found, idVendor=054c, idProduct=0069, bcdDevice=6d.6f
[  298.413795][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  298.431138][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  298.439887][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  298.448309][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  298.457957][   T26] audit: type=1326 audit(1765160698.635:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7959 comm="syz.3.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82a9a8749 code=0x7fc00000
[  298.481199][ T7995] EXT4-fs error (device loop4): ext4_map_blocks:739: inode #15: comm syz.4.794: lblock 0 mapped to illegal pblock 0 (length 1)
[  298.494735][ T5433] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  298.534744][ T5433] usb 6-1: Product: syz
[  298.540850][ T7995] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  298.549077][   T26] audit: type=1326 audit(1765160698.635:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7959 comm="syz.3.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82a9a8749 code=0x7fc00000
[  298.566787][ T5433] usb 6-1: Manufacturer: syz
[  298.586796][ T7995] EXT4-fs (loop4): This should not happen!! Data will be lost
[  298.586796][ T7995] 
[  298.619448][ T5433] usb 6-1: SerialNumber: syz
[  298.633187][ T8003] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #15: comm syz.4.794: lblock 0 mapped to illegal pblock 0 (length 1)
[  298.677039][ T7994] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #15: comm syz.4.794: lblock 0 mapped to illegal pblock 0 (length 1)
[  298.698087][ T5433] usb-storage 6-1:252.191: USB Mass Storage device detected
[  298.711510][ T7822] 8021q: adding VLAN 0 to HW filter on device batadv0
[  298.721304][   T26] audit: type=1326 audit(1765160698.635:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7959 comm="syz.3.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82a9a8749 code=0x7fc00000
[  298.748426][ T5433] usb-storage 6-1:252.191: Quirks match for vid 054c pid 0069: 1
[  298.757692][ T3037] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  298.765326][ T3037] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  298.770477][   T26] audit: type=1326 audit(1765160698.635:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7959 comm="syz.3.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82a9a8749 code=0x7fc00000
[  298.798354][ T7994] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #15: comm syz.4.794: lblock 0 mapped to illegal pblock 0 (length 1)
[  298.884141][ T8015] loop3: detected capacity change from 0 to 1024
[  298.892437][ T8003] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #15: comm syz.4.794: lblock 0 mapped to illegal pblock 0 (length 1)
[  298.931616][   T23] usb 6-1: USB disconnect, device number 5
[  298.958503][ T7995] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #15: comm syz.4.794: lblock 0 mapped to illegal pblock 0 (length 1)
[  298.988332][ T8003] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #15: comm syz.4.794: lblock 0 mapped to illegal pblock 0 (length 1)
[  299.051703][ T8015] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none.
[  299.149600][ T8015] ext4 filesystem being mounted at /162/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  299.222487][ T8015] EXT4-fs error (device loop3): ext4_map_blocks:739: inode #15: comm syz.3.795: lblock 0 mapped to illegal pblock 0 (length 1)
[  299.304776][ T8015] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  299.350002][ T8015] EXT4-fs (loop3): This should not happen!! Data will be lost
[  299.350002][ T8015] 
[  299.393076][ T8029] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #15: comm syz.3.795: lblock 0 mapped to illegal pblock 0 (length 1)
[  299.432946][ T8014] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #15: comm syz.3.795: lblock 0 mapped to illegal pblock 0 (length 1)
[  299.490006][ T8014] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #15: comm syz.3.795: lblock 0 mapped to illegal pblock 0 (length 1)
[  299.535341][ T8029] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #15: comm syz.3.795: lblock 0 mapped to illegal pblock 0 (length 1)
[  299.579267][ T6007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  299.591988][ T8029] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #15: comm syz.3.795: lblock 0 mapped to illegal pblock 0 (length 1)
[  299.618061][ T6007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  299.646171][   T23] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  299.654129][ T8015] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #15: comm syz.3.795: lblock 0 mapped to illegal pblock 0 (length 1)
[  299.659212][ T6007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  299.684329][ T8029] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #15: comm syz.3.795: lblock 0 mapped to illegal pblock 0 (length 1)
[  299.690465][ T8039] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  299.707616][ T8039] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  299.724400][ T6007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  299.728165][ T8015] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #15: comm syz.3.795: lblock 0 mapped to illegal pblock 0 (length 1)
[  299.761088][ T6007] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  299.794403][ T6007] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  299.816235][ T7822] device veth0_vlan entered promiscuous mode
[  299.863921][ T7822] device veth1_vlan entered promiscuous mode
[  299.906170][   T23] usb 5-1: Using ep0 maxpacket: 16
[  299.944357][ T8045] loop5: detected capacity change from 0 to 8
[  299.951323][ T8047] loop0: detected capacity change from 0 to 1024
[  299.959957][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  299.998885][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  300.024401][ T8045] squashfs image failed sanity check
[  300.026198][   T23] usb 5-1: config 0 has an invalid interface number: 8 but max is 0
[  300.057054][ T8049] loop3: detected capacity change from 0 to 1024
[  300.059029][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  300.078780][   T23] usb 5-1: config 0 has no interface number 0
[  300.085538][   T23] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  300.102690][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  300.117958][ T8047] hfsplus: unable to parse mount options
[  300.118081][ T8045] loop5: detected capacity change from 0 to 512
[  300.145192][ T7822] device veth0_macvtap entered promiscuous mode
[  300.204461][ T7822] device veth1_macvtap entered promiscuous mode
[  300.383160][ T7822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  300.394371][   T23] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  300.404127][ T7822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  300.414037][   T23] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  300.419764][ T8045] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,nojournal_checksum,. Quota mode: writeback.
[  300.422316][   T23] usb 5-1: Product: syz
[  300.472324][   T23] usb 5-1: SerialNumber: syz
[  300.736295][   T23] usb 5-1: config 0 descriptor??
[  300.802480][ T7822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  300.815570][   T23] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input9
[  300.826256][ T8045] ext4 filesystem being mounted at /158/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  300.880795][ T7822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  300.908337][ T8045] EXT4-fs error (device loop5): ext4_xattr_block_get:546: inode #15: comm syz.5.800: corrupted xattr block 33
[  300.969557][ T7822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  300.980085][ T7822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  300.990020][ T7822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  300.995579][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  301.007347][ T7822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  301.009933][ T4292] usb 5-1: USB disconnect, device number 9
[  301.017759][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  301.017783][    C1] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  301.019670][ T7822] batman_adv: batadv0: Interface activated: batadv_slave_0
[  301.064501][ T8045] EXT4-fs (loop5): Remounting filesystem read-only
[  301.078802][ T8045] fscrypt (loop5, inode 15): Error -117 getting encryption context
[  301.103416][ T8047] loop0: detected capacity change from 0 to 512
[  301.105484][ T4292] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  301.126437][ T3101] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  301.134745][ T3101] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  301.202872][ T3101] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  301.235982][ T3101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  301.236553][ T8047] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.799: inode has both inline data and extents flags
[  301.256347][ T7822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  301.276982][ T7822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  301.289874][ T7822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  301.300923][ T7822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  301.311251][ T7822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  301.321985][ T7822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  301.332183][ T7822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  301.353028][ T7822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  301.417996][ T8072] overlayfs: './file0' not a directory
[  301.466365][ T7822] batman_adv: batadv0: Interface activated: batadv_slave_1
[  301.498900][ T8047] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.799: couldn't read orphan inode 15 (err -117)
[  301.673590][ T8075] fuse: Unknown parameter 'group_i00000000000000000000'
[  301.784114][ T3101] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  301.810960][ T3101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  302.665296][ T8047] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  302.701282][ T7822] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  302.757003][ T8079] 9pnet: Insufficient options for proto=fd
[  302.774297][ T7822] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  302.794536][ T7822] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  302.844638][ T7822] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  302.854517][   T26] kauditd_printk_skb: 56 callbacks suppressed
[  302.854531][   T26] audit: type=1800 audit(1765160703.868:144): pid=8047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.799" name="file1" dev="loop0" ino=18 res=0 errno=0
[  302.866196][ T8083] fuse: Bad value for 'fd'
[  303.120184][ T8093] loop3: detected capacity change from 0 to 1024
[  303.398067][ T8093] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  303.662000][   T26] audit: type=1326 audit(1765160704.658:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8078 comm="syz.4.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac52ec749 code=0x7fc00000
[  303.725082][   T26] audit: type=1326 audit(1765160704.668:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8078 comm="syz.4.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8ac52ec749 code=0x7fc00000
[  303.772487][ T8098] FAULT_INJECTION: forcing a failure.
[  303.772487][ T8098] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  303.786221][ T8098] CPU: 0 PID: 8098 Comm: syz.3.807 Not tainted syzkaller #0
[  303.793517][ T8098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  303.803565][ T8098] Call Trace:
[  303.806847][ T8098]  <TASK>
[  303.809771][ T8098]  dump_stack_lvl+0x168/0x230
[  303.814449][ T8098]  ? asm_sysvec_reschedule_ipi+0x16/0x20
[  303.820106][ T8098]  ? show_regs_print_info+0x20/0x20
[  303.825299][ T8098]  ? load_image+0x3b0/0x3b0
[  303.829810][ T8098]  should_fail+0x38c/0x4c0
[  303.834226][ T8098]  prepare_alloc_pages+0x1e4/0x5f0
[  303.839347][ T8098]  __alloc_pages+0x10e/0x470
[  303.843936][ T8098]  ? zone_statistics+0x170/0x170
[  303.848884][ T8098]  ? alloc_pages+0x438/0x550
[  303.853473][ T8098]  new_slab+0xc0/0x4b0
[  303.857534][ T8098]  ? kmem_cache_alloc_bulk+0x141/0x3c0
[  303.862986][ T8098]  ___slab_alloc+0x81e/0xdf0
[  303.867573][ T8098]  ? io_submit_sqes+0x50e0/0x9b00
[  303.872600][ T8098]  kmem_cache_alloc_bulk+0x141/0x3c0
[  303.877887][ T8098]  io_submit_sqes+0x50e0/0x9b00
[  303.882740][ T8098]  ? __lock_acquire+0x7c60/0x7c60
[  303.887787][ T8098]  ? io_uring_del_tctx_node+0x2c0/0x2c0
[  303.893339][ T8098]  __se_sys_io_uring_enter+0x26d/0x1d30
[  303.898889][ T8098]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  303.904874][ T8098]  ? preempt_schedule_irq+0xd0/0x150
[  303.910160][ T8098]  ? __x64_sys_io_uring_enter+0xf0/0xf0
[  303.915699][ T8098]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  303.921677][ T8098]  ? lock_chain_count+0x20/0x20
[  303.926527][ T8098]  ? asm_sysvec_reschedule_ipi+0x16/0x20
[  303.932155][ T8098]  ? lockdep_hardirqs_on+0x94/0x140
[  303.937352][ T8098]  ? asm_sysvec_reschedule_ipi+0x16/0x20
[  303.942991][ T8098]  ? __x64_sys_io_uring_enter+0x1d/0xf0
[  303.948535][ T8098]  do_syscall_64+0x4c/0xa0
[  303.952946][ T8098]  ? clear_bhb_loop+0x30/0x80
[  303.957615][ T8098]  ? clear_bhb_loop+0x30/0x80
[  303.962290][ T8098]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  303.968179][ T8098] RIP: 0033:0x7fa82a9a8749
[  303.972589][ T8098] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  303.992203][ T8098] RSP: 002b:00007fa828bcd038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[  304.000617][ T8098] RAX: ffffffffffffffda RBX: 00007fa82abff180 RCX: 00007fa82a9a8749
[  304.008585][ T8098] RDX: 000000000000e5a7 RSI: 000000000000349e RDI: 0000000000000008
[  304.016558][ T8098] RBP: 00007fa828bcd090 R08: 0000000000000000 R09: 0000000000000000
[  304.024532][ T8098] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000001
[  304.032508][ T8098] R13: 00007fa82abff218 R14: 00007fa82abff180 R15: 00007ffdceeada48
[  304.040500][ T8098]  </TASK>
[  304.084607][   T26] audit: type=1326 audit(1765160704.668:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8078 comm="syz.4.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac52ec749 code=0x7fc00000
[  304.215886][ T3101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  304.240371][ T8101] loop5: detected capacity change from 0 to 2048
[  304.274291][   T26] audit: type=1326 audit(1765160704.668:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8078 comm="syz.4.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac52ec749 code=0x7fc00000
[  304.311482][ T3101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  304.332701][ T8101] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  304.381570][ T3101] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  304.394372][ T3101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  304.403750][ T3101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  304.419732][ T3101] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  304.500140][ T8107] loop0: detected capacity change from 0 to 512
[  304.540017][ T8104] loop3: detected capacity change from 0 to 2048
[  304.551932][   T26] audit: type=1326 audit(1765160704.668:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8078 comm="syz.4.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac52ec749 code=0x7fc00000
[  304.638779][ T8104] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000001,errors=remount-ro,resgid=0x0000000000000000,barrier,bsdgroups,inode_readahead_blks=0x0000000000002000,. Quota mode: none.
[  304.660997][ T8104] ext4 filesystem being mounted at /168/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  304.694291][ T8107] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  304.744334][   T26] audit: type=1326 audit(1765160704.668:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8078 comm="syz.4.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac52ec749 code=0x7fc00000
[  304.856830][ T8121] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.810: bg 0: block 345: padding at end of block bitmap is not set
[  304.889803][   T26] audit: type=1326 audit(1765160704.668:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8078 comm="syz.4.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac52ec749 code=0x7fc00000
[  304.949857][ T8121] EXT4-fs (loop3): Remounting filesystem read-only
[  304.977920][   T26] audit: type=1326 audit(1765160704.668:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8078 comm="syz.4.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac52ec749 code=0x7fc00000
[  305.035977][ T8126] FAULT_INJECTION: forcing a failure.
[  305.035977][ T8126] name failslab, interval 1, probability 0, space 0, times 0
[  305.048680][ T8126] CPU: 0 PID: 8126 Comm: syz.6.764 Not tainted syzkaller #0
[  305.055965][ T8126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  305.066015][ T8126] Call Trace:
[  305.069288][ T8126]  <TASK>
[  305.072214][ T8126]  dump_stack_lvl+0x168/0x230
[  305.076942][ T8126]  ? show_regs_print_info+0x20/0x20
[  305.082139][ T8126]  ? load_image+0x3b0/0x3b0
[  305.086644][ T8126]  ? asm_sysvec_reschedule_ipi+0x16/0x20
[  305.092276][ T8126]  should_fail+0x38c/0x4c0
[  305.096694][ T8126]  should_failslab+0x5/0x20
[  305.101194][ T8126]  slab_pre_alloc_hook+0x51/0xc0
[  305.106124][ T8126]  ? skb_clone+0x1bd/0x350
[  305.110536][ T8126]  kmem_cache_alloc+0x3d/0x290
[  305.115299][ T8126]  skb_clone+0x1bd/0x350
[  305.119543][ T8126]  __netlink_deliver_tap+0x3cd/0x7c0
[  305.124842][ T8126]  netlink_deliver_tap+0x16c/0x180
[  305.129948][ T8126]  netlink_unicast+0x74f/0x920
[  305.134721][ T8126]  netlink_sendmsg+0x8ab/0xbc0
[  305.139497][ T8126]  ? netlink_getsockopt+0x560/0x560
[  305.144690][ T8126]  ? preempt_schedule_irq+0xd0/0x150
[  305.150116][ T8126]  ? aa_sock_msg_perm+0x94/0x150
[  305.155064][ T8126]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  305.160347][ T8126]  ? security_socket_sendmsg+0x7c/0xa0
[  305.165808][ T8126]  ? netlink_getsockopt+0x560/0x560
[  305.171020][ T8126]  ____sys_sendmsg+0x5a2/0x8c0
[  305.175796][ T8126]  ? __sys_sendmsg_sock+0x30/0x30
[  305.180829][ T8126]  ? ___sys_sendmsg+0x1cd/0x260
[  305.185682][ T8126]  ___sys_sendmsg+0x1f0/0x260
[  305.190371][ T8126]  ? __sys_sendmsg+0x250/0x250
[  305.195139][ T8126]  ? rcu_lock_acquire+0xe/0x30
[  305.199916][ T8126]  ? __fdget+0x18b/0x210
[  305.204169][ T8126]  __se_sys_sendmsg+0x190/0x250
[  305.209148][ T8126]  ? __x64_sys_sendmsg+0x80/0x80
[  305.214098][ T8126]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  305.220099][ T8126]  ? lockdep_hardirqs_on+0x94/0x140
[  305.225458][ T8126]  do_syscall_64+0x4c/0xa0
[  305.229909][ T8126]  ? clear_bhb_loop+0x30/0x80
[  305.234588][ T8126]  ? clear_bhb_loop+0x30/0x80
[  305.239270][ T8126]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  305.245173][ T8126] RIP: 0033:0x7f40842b6749
[  305.249719][ T8126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  305.269435][ T8126] RSP: 002b:00007f40824db038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  305.277875][ T8126] RAX: ffffffffffffffda RBX: 00007f408450d180 RCX: 00007f40842b6749
[  305.285843][ T8126] RDX: 0000000008000002 RSI: 0000200000000080 RDI: 0000000000000006
[  305.293812][ T8126] RBP: 00007f40824db090 R08: 0000000000000000 R09: 0000000000000000
[  305.301777][ T8126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  305.309749][ T8126] R13: 00007f408450d218 R14: 00007f408450d180 R15: 00007fffb19259b8
[  305.317825][ T8126]  </TASK>
[  305.382751][   T26] audit: type=1326 audit(1765160704.668:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8078 comm="syz.4.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac52ec749 code=0x7fc00000
[  305.591188][ T8134] fuse: Unknown parameter 'group_i00000000000000000000'
[  305.716356][ T8135] loop3: detected capacity change from 0 to 2048
[  305.776096][ T8140] loop0: detected capacity change from 0 to 1024
[  306.039085][ T8140] EXT4-fs (loop0): Ignoring removed orlov option
[  306.150806][ T8135] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  306.272663][ T7518] usb 7-1: new full-speed USB device number 2 using dummy_hcd
[  306.311313][ T8140] EXT4-fs (loop0): Project quota feature not enabled. Cannot enable project quota enforcement.
[  306.512993][ T7861] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  306.564320][ T7518] usb 7-1: device descriptor read/64, error -71
[  306.727300][ T8151] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28
[  306.739800][ T8151] EXT4-fs (loop3): This should not happen!! Data will be lost
[  306.739800][ T8151] 
[  306.749548][ T8151] EXT4-fs (loop3): Total free blocks count 0
[  306.755617][ T8151] EXT4-fs (loop3): Free/Dirty block details
[  306.761561][ T8151] EXT4-fs (loop3): free_blocks=2415919504
[  306.767364][ T8151] EXT4-fs (loop3): dirty_blocks=64
[  306.772847][ T8151] EXT4-fs (loop3): Block reservation details
[  306.778886][ T8151] EXT4-fs (loop3): i_reserved_data_blocks=4
[  306.953544][ T8133] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  306.965850][ T8133] EXT4-fs (loop3): This should not happen!! Data will be lost
[  306.965850][ T8133] 
[  306.992830][ T8150] loop0: detected capacity change from 0 to 512
[  307.198673][ T8150] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nojournal_checksum,. Quota mode: writeback.
[  307.296479][ T8158] loop4: detected capacity change from 0 to 1024
[  307.316774][ T8150] ext4 filesystem being mounted at /167/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  307.336707][ T8160] loop3: detected capacity change from 0 to 1024
[  307.343352][ T7518] usb 7-1: new full-speed USB device number 3 using dummy_hcd
[  307.350878][ T8150] EXT4-fs error (device loop0): ext4_xattr_block_get:546: inode #15: comm syz.0.817: corrupted xattr block 33
[  307.363934][ T8150] EXT4-fs (loop0): Remounting filesystem read-only
[  307.370463][ T8150] fscrypt (loop0, inode 15): Error -117 getting encryption context
[  307.379532][ T8160] hfsplus: unable to parse mount options
[  307.551668][ T7518] usb 7-1: device descriptor read/64, error -71
[  307.682000][ T7518] usb usb7-port1: attempt power cycle
[  308.111151][ T7518] usb 7-1: new full-speed USB device number 4 using dummy_hcd
[  308.169675][ T8158] hfsplus: xattr search failed
[  308.189836][ T8164] hfsplus: xattr searching failed
[  308.227333][ T8165] hfsplus: xattr searching failed
[  308.232889][ T7518] usb 7-1: device descriptor read/8, error -71
[  308.314373][    T9] hfsplus: b-tree write err: -5, ino 3
[  308.459751][ T8176] loop4: detected capacity change from 0 to 1024
[  308.500810][ T7518] usb 7-1: new full-speed USB device number 5 using dummy_hcd
[  308.590934][ T7518] usb 7-1: device descriptor read/8, error -71
[  308.618274][ T8176] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none.
[  308.637132][ T8176] ext4 filesystem being mounted at /170/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  308.651746][ T8176] EXT4-fs error (device loop4): ext4_map_blocks:739: inode #15: comm syz.4.821: lblock 0 mapped to illegal pblock 0 (length 1)
[  308.667317][ T8176] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  308.690975][ T8176] EXT4-fs (loop4): This should not happen!! Data will be lost
[  308.690975][ T8176] 
[  308.702319][ T8176] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #15: comm syz.4.821: lblock 0 mapped to illegal pblock 0 (length 1)
[  308.710931][ T7518] usb usb7-port1: unable to enumerate USB device
[  308.723679][ T8176] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #15: comm syz.4.821: lblock 0 mapped to illegal pblock 0 (length 1)
[  308.813505][ T8174] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #15: comm syz.4.821: lblock 0 mapped to illegal pblock 0 (length 1)
[  308.882855][ T8176] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #15: comm syz.4.821: lblock 0 mapped to illegal pblock 0 (length 1)
[  308.902605][ T8188] loop5: detected capacity change from 0 to 1024
[  308.911922][ T8187] 9pnet: Insufficient options for proto=fd
[  308.963837][ T8174] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #15: comm syz.4.821: lblock 0 mapped to illegal pblock 0 (length 1)
[  309.034509][ T8182] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #15: comm syz.4.821: lblock 0 mapped to illegal pblock 0 (length 1)
[  309.058638][ T8182] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #15: comm syz.4.821: lblock 0 mapped to illegal pblock 0 (length 1)
[  309.132845][ T8176] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #15: comm syz.4.821: lblock 0 mapped to illegal pblock 0 (length 1)
[  309.180021][ T8176] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #15: comm syz.4.821: lblock 0 mapped to illegal pblock 0 (length 1)
[  309.703233][   T26] kauditd_printk_skb: 57 callbacks suppressed
[  309.703251][   T26] audit: type=1326 audit(1765160710.712:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8186 comm="syz.6.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40842b6749 code=0x7fc00000
[  309.922657][   T26] audit: type=1326 audit(1765160710.712:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8186 comm="syz.6.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f40842b6749 code=0x7fc00000
[  309.950554][   T26] audit: type=1326 audit(1765160710.712:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8186 comm="syz.6.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40842b6749 code=0x7fc00000
[  309.974907][   T26] audit: type=1326 audit(1765160710.712:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8186 comm="syz.6.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40842b6749 code=0x7fc00000
[  310.018444][   T26] audit: type=1326 audit(1765160710.712:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8186 comm="syz.6.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40842b6749 code=0x7fc00000
[  310.041199][   T26] audit: type=1326 audit(1765160710.712:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8186 comm="syz.6.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40842b6749 code=0x7fc00000
[  310.065744][   T26] audit: type=1326 audit(1765160710.712:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8186 comm="syz.6.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40842b6749 code=0x7fc00000
[  310.112929][   T26] audit: type=1326 audit(1765160710.712:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8186 comm="syz.6.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40842b6749 code=0x7fc00000
[  310.159593][   T26] audit: type=1326 audit(1765160710.712:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8186 comm="syz.6.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40842b6749 code=0x7fc00000
[  310.173911][ T8167] loop3: detected capacity change from 0 to 65536
[  310.235239][   T26] audit: type=1326 audit(1765160710.712:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8186 comm="syz.6.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40842b6749 code=0x7fc00000
[  310.265231][ T8213] fuse: Unknown parameter 'group_id00000000000000000000'
[  310.279938][ T7518] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  310.434338][ T8167] XFS (loop3): Deprecated V4 format (crc=0) not supported by kernel.
[  311.149790][ T7518] usb 6-1: device descriptor read/64, error -71
[  311.186558][ T8228] loop6: detected capacity change from 0 to 256
[  311.229295][ T8228] FAT-fs (loop6): Unrecognized mount option "18446744073709551615" or missing value
[  311.314791][ T8234] loop0: detected capacity change from 0 to 1024
[  311.369816][ T8234] hfsplus: unable to parse mount options
[  311.419046][ T7518] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  311.589517][ T8215] loop4: detected capacity change from 0 to 32768
[  311.608953][ T7518] usb 6-1: device descriptor read/64, error -71
[  311.681798][ T8242] FAULT_INJECTION: forcing a failure.
[  311.681798][ T8242] name failslab, interval 1, probability 0, space 0, times 0
[  311.694625][ T8242] CPU: 1 PID: 8242 Comm: syz.6.831 Not tainted syzkaller #0
[  311.701912][ T8242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  311.711966][ T8242] Call Trace:
[  311.715238][ T8242]  <TASK>
[  311.718164][ T8242]  dump_stack_lvl+0x168/0x230
[  311.722840][ T8242]  ? asm_sysvec_reschedule_ipi+0x16/0x20
[  311.728469][ T8242]  ? show_regs_print_info+0x20/0x20
[  311.733667][ T8242]  ? load_image+0x3b0/0x3b0
[  311.738183][ T8242]  should_fail+0x38c/0x4c0
[  311.742613][ T8242]  should_failslab+0x5/0x20
[  311.747110][ T8242]  slab_pre_alloc_hook+0x51/0xc0
[  311.752038][ T8242]  ? security_inode_alloc+0x30/0x110
[  311.757320][ T8242]  kmem_cache_alloc+0x3d/0x290
[  311.762080][ T8242]  security_inode_alloc+0x30/0x110
[  311.767188][ T8242]  inode_init_always+0x8f4/0xcb0
[  311.772120][ T8242]  ? shmem_match+0x160/0x160
[  311.776715][ T8242]  new_inode_pseudo+0x8e/0x210
[  311.781480][ T8242]  new_inode+0x25/0x1c0
[  311.785658][ T8242]  shmem_get_inode+0x334/0xa90
[  311.790429][ T8242]  ? _raw_spin_unlock+0x24/0x40
[  311.795285][ T8242]  __shmem_file_setup+0x10b/0x290
[  311.800306][ T8242]  ? shmem_file_setup+0x13/0x30
[  311.805159][ T8242]  __se_sys_memfd_create+0x290/0x430
[  311.810445][ T8242]  ? __x64_sys_memfd_create+0x60/0x60
[  311.815820][ T8242]  ? syscall_enter_from_user_mode+0x2a/0x70
[  311.821719][ T8242]  do_syscall_64+0x4c/0xa0
[  311.826136][ T8242]  ? clear_bhb_loop+0x30/0x80
[  311.830812][ T8242]  ? clear_bhb_loop+0x30/0x80
[  311.835489][ T8242]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  311.841482][ T8242] RIP: 0033:0x7f40842b6749
[  311.845907][ T8242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  311.865508][ T8242] RSP: 002b:00007f40824dae18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
[  311.873921][ T8242] RAX: ffffffffffffffda RBX: 0000000000009e89 RCX: 00007f40842b6749
[  311.881888][ T8242] RDX: 00007f40824daef0 RSI: 0000000000000000 RDI: 00007f408433b960
[  311.889883][ T8242] RBP: 0000200000014040 R08: 00007f40824dabb7 R09: 00007f40824dae40
[  311.897857][ T8242] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000000
[  311.905828][ T8242] R13: 00007f40824daef0 R14: 00007f40824daeb0 R15: 0000200000001780
[  311.913811][ T8242]  </TASK>
[  312.027800][ T7518] usb usb6-port1: attempt power cycle
[  312.234605][ T8244] FAULT_INJECTION: forcing a failure.
[  312.234605][ T8244] name failslab, interval 1, probability 0, space 0, times 0
[  312.302691][ T8244] CPU: 1 PID: 8244 Comm: syz.3.832 Not tainted syzkaller #0
[  312.310022][ T8244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  312.320083][ T8244] Call Trace:
[  312.323367][ T8244]  <TASK>
[  312.326293][ T8244]  dump_stack_lvl+0x168/0x230
[  312.330975][ T8244]  ? show_regs_print_info+0x20/0x20
[  312.336172][ T8244]  ? load_image+0x3b0/0x3b0
[  312.340678][ T8244]  ? __might_sleep+0xf0/0xf0
[  312.345268][ T8244]  ? __lock_acquire+0x7c60/0x7c60
[  312.350304][ T8244]  should_fail+0x38c/0x4c0
[  312.354729][ T8244]  should_failslab+0x5/0x20
[  312.359255][ T8244]  slab_pre_alloc_hook+0x51/0xc0
[  312.364199][ T8244]  kmem_cache_alloc_node+0x47/0x2d0
[  312.369399][ T8244]  ? __alloc_skb+0xf4/0x750
[  312.373909][ T8244]  __alloc_skb+0xf4/0x750
[  312.378245][ T8244]  sock_omalloc+0x86/0x170
[  312.382663][ T8244]  msg_zerocopy_alloc+0x4b/0x3c0
[  312.387599][ T8244]  __ip6_append_data+0xc41/0x3810
[  312.392629][ T8244]  ? reacquire_held_locks+0x2f9/0x590
[  312.398005][ T8244]  ? verify_lock_unused+0x140/0x140
[  312.403241][ T8244]  ? ip6_setup_cork+0x11e0/0x11e0
[  312.408270][ T8244]  ? lockdep_hardirqs_on_prepare+0x760/0x760
[  312.414261][ T8244]  ip6_append_data+0x1d4/0x310
[  312.419034][ T8244]  ? ip_skb_dst_mtu+0x9b0/0x9b0
[  312.423892][ T8244]  ? ip_skb_dst_mtu+0x9b0/0x9b0
[  312.428746][ T8244]  udpv6_sendmsg+0xaf5/0x2320
[  312.433436][ T8244]  ? verify_lock_unused+0x140/0x140
[  312.438638][ T8244]  ? udp_v6_early_demux+0xe90/0xe90
[  312.443847][ T8244]  ? __lock_acquire+0x13ad/0x7c60
[  312.448899][ T8244]  ? aa_sk_perm+0x7b4/0x8f0
[  312.453429][ T8244]  ? aa_af_perm+0x2b0/0x2b0
[  312.457956][ T8244]  ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0
[  312.464380][ T8244]  ? sock_rps_record_flow+0x17/0x3b0
[  312.469672][ T8244]  ? inet_send_prepare+0x58/0x260
[  312.474701][ T8244]  ? inet6_compat_ioctl+0x380/0x380
[  312.479896][ T8244]  ? inet6_sendmsg+0x5b/0xd0
[  312.484494][ T8244]  ? inet6_compat_ioctl+0x380/0x380
[  312.489689][ T8244]  ____sys_sendmsg+0x5a2/0x8c0
[  312.494458][ T8244]  ? memset+0x1e/0x40
[  312.498443][ T8244]  ? __sys_sendmsg_sock+0x30/0x30
[  312.503472][ T8244]  ? import_iovec+0x6f/0xa0
[  312.507987][ T8244]  ___sys_sendmsg+0x1f0/0x260
[  312.512679][ T8244]  ? __sys_sendmsg+0x250/0x250
[  312.517479][ T8244]  ? __might_fault+0xb3/0x110
[  312.522164][ T8244]  __sys_sendmmsg+0x27c/0x4a0
[  312.526848][ T8244]  ? __ia32_sys_sendmsg+0x80/0x80
[  312.531881][ T8244]  ? __context_tracking_exit+0x4c/0x80
[  312.537360][ T8244]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  312.543345][ T8244]  ? lock_chain_count+0x20/0x20
[  312.548194][ T8244]  ? vtime_user_exit+0x2dc/0x400
[  312.553133][ T8244]  __x64_sys_sendmmsg+0x9c/0xb0
[  312.557987][ T8244]  do_syscall_64+0x4c/0xa0
[  312.562407][ T8244]  ? clear_bhb_loop+0x30/0x80
[  312.567083][ T8244]  ? clear_bhb_loop+0x30/0x80
[  312.571760][ T8244]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  312.577659][ T8244] RIP: 0033:0x7fa82a9a8749
[  312.582073][ T8244] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  312.601678][ T8244] RSP: 002b:00007fa828c0f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  312.610106][ T8244] RAX: ffffffffffffffda RBX: 00007fa82abfefa0 RCX: 00007fa82a9a8749
[  312.618086][ T8244] RDX: 0000000000000002 RSI: 00002000000008c0 RDI: 0000000000000003
[  312.626060][ T8244] RBP: 00007fa828c0f090 R08: 0000000000000000 R09: 0000000000000000
[  312.634118][ T8244] R10: 000000000404c484 R11: 0000000000000246 R12: 0000000000000001
[  312.642088][ T8244] R13: 00007fa82abff038 R14: 00007fa82abfefa0 R15: 00007ffdceeada48
[  312.650080][ T8244]  </TASK>
[  312.688287][ T7518] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  312.798436][ T7518] usb 6-1: device descriptor read/8, error -71
[  312.964303][ T8255] loop0: detected capacity change from 0 to 24
[  312.975055][  T275] read_mapping_page failed!
[  312.976446][ T8257] loop5: detected capacity change from 0 to 8
[  312.999279][ T8255] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  313.033716][ T8257] squashfs image failed sanity check
[  313.047569][ T8255] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  313.111836][ T8255] autofs4:pid:8255:autofs_fill_super: could not open pipe file descriptor
[  313.150805][ T8257] loop5: detected capacity change from 0 to 512
[  313.154248][ T8262] tmpfs: Unknown parameter '00000000000000000000005'
[  313.172799][ T8259] sch_tbf: burst 32852 is lower than device lo mtu (65550) !
[  313.268934][ T8255] netlink: 'syz.0.835': attribute type 10 has an invalid length.
[  313.285856][ T8255] device veth1_macvtap left promiscuous mode
[  313.313913][ T8257] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,nojournal_checksum,. Quota mode: writeback.
[  313.370557][ T8255] bridge0: port 3(macsec0) entered blocking state
[  313.374251][ T8257] ext4 filesystem being mounted at /162/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  313.377305][ T8255] bridge0: port 3(macsec0) entered disabled state
[  313.425160][ T8248] loop3: detected capacity change from 0 to 32768
[  313.441477][ T8255] device macsec0 entered promiscuous mode
[  313.459092][ T8257] EXT4-fs error (device loop5): ext4_xattr_block_get:546: inode #15: comm syz.5.836: corrupted xattr block 33
[  313.543779][ T8257] EXT4-fs (loop5): Remounting filesystem read-only
[  313.577705][ T8257] fscrypt (loop5, inode 15): Error -117 getting encryption context
[  313.733688][ T8275] 9pnet: Insufficient options for proto=fd
[  313.747293][ T8276] fuse: Unknown parameter 'group_id00000000000000000000'
[  313.923901][ T8282] loop3: detected capacity change from 0 to 2048
[  314.117734][ T4292] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  314.276219][ T8282] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  314.437318][ T4292] usb 1-1: Using ep0 maxpacket: 16
[  314.567426][ T4292] usb 1-1: config 0 has an invalid interface number: 105 but max is 0
[  314.575631][ T4292] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  314.757749][ T4292] usb 1-1: config 0 has no interface number 0
[  314.773098][ T8282] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  314.787973][ T8282] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28
[  314.800509][ T8282] EXT4-fs (loop3): This should not happen!! Data will be lost
[  314.800509][ T8282] 
[  314.810305][ T8282] EXT4-fs (loop3): Total free blocks count 0
[  314.816302][ T8282] EXT4-fs (loop3): Free/Dirty block details
[  314.822395][ T8282] EXT4-fs (loop3): free_blocks=2415919504
[  314.828174][ T8282] EXT4-fs (loop3): dirty_blocks=64
[  314.833295][ T8282] EXT4-fs (loop3): Block reservation details
[  314.839340][ T8282] EXT4-fs (loop3): i_reserved_data_blocks=4
[  314.847569][ T8279] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  314.860642][ T8279] EXT4-fs (loop3): This should not happen!! Data will be lost
[  314.860642][ T8279] 
[  314.941949][ T8291] loop4: detected capacity change from 0 to 512
[  314.957216][ T4292] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  315.003034][ T4292] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  315.008611][ T8296] loop6: detected capacity change from 0 to 1024
[  315.038937][ T8291] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.843: inode has both inline data and extents flags
[  315.058250][ T8296] hfsplus: unable to parse mount options
[  315.117338][ T4292] usb 1-1: Product: syz
[  315.124598][ T8291] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.843: couldn't read orphan inode 15 (err -117)
[  315.158201][ T4292] usb 1-1: Manufacturer: syz
[  315.227016][ T4292] usb 1-1: SerialNumber: syz
[  315.263347][ T8291] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  315.297812][ T4292] usb 1-1: config 0 descriptor??
[  315.572779][ T4292] usb 1-1: Found UVC 0.00 device syz (046d:08f3)
[  315.616232][ T8308] loop3: detected capacity change from 0 to 128
[  315.653395][ T8308] VFS: Found a Xenix FS (block size = 1024) on device loop3
[  316.556889][ T4292] usb 1-1: No valid video chain found.
[  316.564321][ T4292] usb 1-1: USB disconnect, device number 13
[  316.772555][ T4189] sysv_free_block: flc_count > flc_size
[  316.887817][ T4189] sysv_free_block: flc_count > flc_size
[  316.899505][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  316.905879][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  316.983540][ T4189] sysv_free_block: flc_count > flc_size
[  316.989381][ T4189] sysv_free_block: flc_count > flc_size
[  316.995031][ T4189] sysv_free_block: flc_count > flc_size
[  317.000853][ T4189] sysv_free_block: flc_count > flc_size
[  317.007604][ T4189] sysv_free_block: flc_count > flc_size
[  317.013169][ T4189] sysv_free_block: flc_count > flc_size
[  317.018869][ T4189] sysv_free_block: flc_count > flc_size
[  317.024423][ T4189] sysv_free_block: flc_count > flc_size
[  317.031951][ T4189] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  317.069043][ T8314] netlink: 'syz.4.849': attribute type 10 has an invalid length.
[  317.126567][ T8316] libceph: resolve '40.' (ret=-3): failed
[  317.162067][ T8317] loop3: detected capacity change from 0 to 256
[  317.203754][ T8314] device veth1_macvtap left promiscuous mode
[  317.238930][ T8314] bridge0: port 3(macsec0) entered blocking state
[  317.259224][ T8330] fuse: Unknown parameter 'group_id00000000000000000000'
[  317.327667][ T8332] 9pnet: Insufficient options for proto=fd
[  317.341587][ T8314] bridge0: port 3(macsec0) entered disabled state
[  317.357151][ T8317] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001207b, chksum : 0x1e861e4d, utbl_chksum : 0xe619d30d)
[  317.390467][ T8329] loop6: detected capacity change from 0 to 2048
[  317.423272][ T8314] device macsec0 entered promiscuous mode
[  317.770498][ T8329] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  317.797099][ T8337] loop5: detected capacity change from 0 to 1024
[  318.222730][ T8337] EXT4-fs (loop5): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none.
[  318.328274][ T8347] loop3: detected capacity change from 0 to 4096
[  318.336262][ T8337] ext4 filesystem being mounted at /164/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  318.354994][ T8353] loop4: detected capacity change from 0 to 512
[  318.409976][ T8337] EXT4-fs error (device loop5): ext4_map_blocks:739: inode #15: comm syz.5.855: lblock 0 mapped to illegal pblock 0 (length 1)
[  318.457103][ T8353] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.859: inode has both inline data and extents flags
[  318.475733][ T8337] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  318.550430][ T8361] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  318.565282][ T8361] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  318.577542][ T8361] EXT4-fs (loop6): This should not happen!! Data will be lost
[  318.577542][ T8361] 
[  318.587323][ T8361] EXT4-fs (loop6): Total free blocks count 0
[  318.593338][ T8361] EXT4-fs (loop6): Free/Dirty block details
[  318.599306][ T8361] EXT4-fs (loop6): free_blocks=2415919504
[  318.605084][ T8361] EXT4-fs (loop6): dirty_blocks=16
[  318.610193][ T8361] EXT4-fs (loop6): Block reservation details
[  318.616218][ T8361] EXT4-fs (loop6): i_reserved_data_blocks=1
[  318.625911][ T8361] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28
[  318.638314][ T8361] EXT4-fs (loop6): This should not happen!! Data will be lost
[  318.638314][ T8361] 
[  318.730112][ T8337] EXT4-fs (loop5): This should not happen!! Data will be lost
[  318.730112][ T8337] 
[  318.806996][ T8353] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.859: couldn't read orphan inode 15 (err -117)
[  318.841982][ T8353] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  318.842060][ T8359] EXT4-fs error (device loop5): ext4_map_blocks:629: inode #15: comm syz.5.855: lblock 0 mapped to illegal pblock 0 (length 1)
[  318.870372][ T8366] loop0: detected capacity change from 0 to 764
[  318.877456][ T4189] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22.
[  318.883903][ T4189] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  319.020229][ T8359] EXT4-fs error (device loop5): ext4_map_blocks:629: inode #15: comm syz.5.855: lblock 0 mapped to illegal pblock 0 (length 1)
[  319.418233][ T8359] EXT4-fs error (device loop5): ext4_map_blocks:629: inode #15: comm syz.5.855: lblock 0 mapped to illegal pblock 0 (length 1)
[  319.680264][ T8374] netlink: 'syz.0.870': attribute type 1 has an invalid length.
[  319.708922][ T8336] EXT4-fs error (device loop5): ext4_map_blocks:629: inode #15: comm syz.5.855: lblock 0 mapped to illegal pblock 0 (length 1)
[  319.735594][ T8359] EXT4-fs error (device loop5): ext4_map_blocks:629: inode #15: comm syz.5.855: lblock 0 mapped to illegal pblock 0 (length 1)
[  319.760730][ T8375] Cannot find set identified by id 0 to match
[  319.878986][ T8359] EXT4-fs error (device loop5): ext4_map_blocks:629: inode #15: comm syz.5.855: lblock 0 mapped to illegal pblock 0 (length 1)
[  319.987173][ T8336] EXT4-fs error (device loop5): ext4_map_blocks:629: inode #15: comm syz.5.855: lblock 0 mapped to illegal pblock 0 (length 1)
[  320.000771][ T8384] loop6: detected capacity change from 0 to 1024
[  320.056033][ T8391] loop3: detected capacity change from 0 to 8
[  320.063350][ T8359] EXT4-fs error (device loop5): ext4_map_blocks:629: inode #15: comm syz.5.855: lblock 0 mapped to illegal pblock 0 (length 1)
[  320.077483][ T8384] hfsplus: unable to parse mount options
[  320.091163][ T8337] EXT4-fs error (device loop5): ext4_map_blocks:629: inode #15: comm syz.5.855: lblock 0 mapped to illegal pblock 0 (length 1)
[  320.131211][ T8391] squashfs image failed sanity check
[  320.148133][ T8390] loop4: detected capacity change from 0 to 1024
[  320.167569][ T8393] 9pnet: Insufficient options for proto=fd
[  320.175639][ T8390] hfsplus: unable to parse mount options
[  321.024539][ T8391] loop3: detected capacity change from 0 to 512
[  321.503464][ T8391] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nojournal_checksum,. Quota mode: writeback.
[  321.527358][ T8399] loop0: detected capacity change from 0 to 2048
[  321.578797][ T8391] ext4 filesystem being mounted at /181/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  321.589332][ T8404] loop4: detected capacity change from 0 to 512
[  321.612676][ T8405] loop6: detected capacity change from 0 to 2048
[  321.643334][ T8391] EXT4-fs error (device loop3): ext4_xattr_block_get:546: inode #15: comm syz.3.864: corrupted xattr block 33
[  321.694814][ T8404] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.867: inode has both inline data and extents flags
[  321.764824][ T8411] fuse: Bad value for 'user_id'
[  321.778946][ T8399] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  321.811671][ T8391] EXT4-fs (loop3): Remounting filesystem read-only
[  321.866753][ T8404] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.867: couldn't read orphan inode 15 (err -117)
[  321.891960][ T8405] EXT4-fs (loop6): mounted filesystem without journal. Opts: init_itable=0x0000000000000001,errors=remount-ro,resgid=0x0000000000000000,barrier,bsdgroups,inode_readahead_blks=0x0000000000002000,. Quota mode: none.
[  321.921793][ T8391] fscrypt (loop3, inode 15): Error -117 getting encryption context
[  322.334102][ T8417] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  322.349036][ T8417] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28
[  322.361476][ T8417] EXT4-fs (loop0): This should not happen!! Data will be lost
[  322.361476][ T8417] 
[  322.371338][ T8417] EXT4-fs (loop0): Total free blocks count 0
[  322.377411][ T8417] EXT4-fs (loop0): Free/Dirty block details
[  322.383516][ T8417] EXT4-fs (loop0): free_blocks=2415919504
[  322.389257][ T8417] EXT4-fs (loop0): dirty_blocks=64
[  322.394439][ T8417] EXT4-fs (loop0): Block reservation details
[  322.400449][ T8417] EXT4-fs (loop0): i_reserved_data_blocks=4
[  322.513069][ T8404] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  322.895646][ T8398] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  322.907940][ T8398] EXT4-fs (loop0): This should not happen!! Data will be lost
[  322.907940][ T8398] 
[  323.059631][ T8405] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  323.245712][ T8421] loop5: detected capacity change from 0 to 2048
[  323.259039][ T8424] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.868: bg 0: block 345: padding at end of block bitmap is not set
[  323.316979][ T4334]  loop5: p1 < > p2 p3 < p5 p6 > p4
[  323.337597][ T4334] loop5: partition table partially beyond EOD, truncated
[  323.379081][ T4334] loop5: p1 start 4278190080 is beyond EOD, truncated
[  323.388513][ T8427] loop3: detected capacity change from 0 to 512
[  323.397351][ T8424] EXT4-fs (loop6): Remounting filesystem read-only
[  323.431943][ T4334] loop5: p2 start 16908800 is beyond EOD, truncated
[  323.483453][ T4334] loop5: p5 start 16908800 is beyond EOD, truncated
[  323.483491][ T8427] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.873: inode has both inline data and extents flags
[  323.596649][ T8421]  loop5: p1 < > p2 p3 < p5 p6 > p4
[  323.602252][ T8421] loop5: partition table partially beyond EOD, truncated
[  323.678610][ T8421] loop5: p1 start 4278190080 is beyond EOD, truncated
[  323.687022][ T8427] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.873: couldn't read orphan inode 15 (err -117)
[  323.709611][ T8421] loop5: p2 start 16908800 is beyond EOD, truncated
[  323.769356][ T8427] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  323.791046][ T8421] loop5: p5 start 16908800 is beyond EOD, truncated
[  323.938756][ T8440] loop6: detected capacity change from 0 to 2048
[  324.010323][ T4473] udevd[4473]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory
[  324.023323][ T4472] udevd[4472]: inotify_add_watch(7, /dev/loop5p6, 10) failed: No such file or directory
[  324.304172][ T4334] udevd[4334]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory
[  324.573069][ T4473] udevd[4473]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory
[  324.586816][ T4334] udevd[4334]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory
[  324.599930][ T4472] udevd[4472]: inotify_add_watch(7, /dev/loop5p6, 10) failed: No such file or directory
[  324.657862][ T8440] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  325.089496][ T8422] loop0: detected capacity change from 0 to 32768
[  325.106944][   T26] kauditd_printk_skb: 56 callbacks suppressed
[  325.106959][   T26] audit: type=1326 audit(1765160981.118:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8462 comm="syz.5.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9358d2749 code=0x7fc00000
[  325.248967][   T26] audit: type=1326 audit(1765160981.118:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8462 comm="syz.5.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff9358d2749 code=0x7fc00000
[  325.316327][   T26] audit: type=1326 audit(1765160981.118:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8462 comm="syz.5.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9358d2749 code=0x7fc00000
[  325.398861][ T8422] XFS (loop0): Mounting V5 Filesystem
[  325.480507][ T8422] XFS (loop0): Ending clean mount
[  325.506843][   T26] audit: type=1326 audit(1765160981.118:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8462 comm="syz.5.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9358d2749 code=0x7fc00000
[  325.536613][   T26] audit: type=1326 audit(1765160981.118:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8462 comm="syz.5.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9358d2749 code=0x7fc00000
[  325.559839][   T26] audit: type=1326 audit(1765160981.118:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8462 comm="syz.5.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9358d2749 code=0x7fc00000
[  325.588923][   T26] audit: type=1326 audit(1765160981.118:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8462 comm="syz.5.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9358d2749 code=0x7fc00000
[  325.641066][ T8422] XFS (loop0): Quotacheck needed: Please wait.
[  325.682565][   T26] audit: type=1326 audit(1765160981.118:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8462 comm="syz.5.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9358d2749 code=0x7fc00000
[  325.763352][ T8422] XFS (loop0): Quotacheck: Done.
[  325.780705][   T26] audit: type=1326 audit(1765160981.118:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8462 comm="syz.5.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9358d2749 code=0x7fc00000
[  325.863380][   T26] audit: type=1326 audit(1765160981.118:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8462 comm="syz.5.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9358d2749 code=0x7fc00000
[  325.996412][ T8498] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  326.012147][ T8498] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  326.024350][ T8498] EXT4-fs (loop6): This should not happen!! Data will be lost
[  326.024350][ T8498] 
[  326.034062][ T8498] EXT4-fs (loop6): Total free blocks count 0
[  326.040042][ T8498] EXT4-fs (loop6): Free/Dirty block details
[  326.046001][ T8498] EXT4-fs (loop6): free_blocks=2415919504
[  326.051776][ T8498] EXT4-fs (loop6): dirty_blocks=16
[  326.056961][ T8498] EXT4-fs (loop6): Block reservation details
[  326.063029][ T8498] EXT4-fs (loop6): i_reserved_data_blocks=1
[  326.072784][ T8498] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28
[  326.085253][ T8498] EXT4-fs (loop6): This should not happen!! Data will be lost
[  326.085253][ T8498] 
[  326.257737][ T4182] XFS (loop0): Unmounting Filesystem
[  331.449596][ T8733] device pim6reg1 entered promiscuous mode
[  333.335468][ T8858] syzkaller0: tun_chr_ioctl cmd 1074025677
[  333.361547][ T8858] syzkaller0: linktype set to 805
[  334.192172][ T8910] syz.6.1061 (8910) used obsolete PPPIOCDETACH ioctl
[  335.519636][ T3560] udevd[3560]: worker [4444] terminated by signal 33 (Unknown signal 33)
[  335.561856][ T3560] udevd[3560]: worker [4444] failed while handling '/devices/virtual/block/loop6'
[  335.723053][ T9032] ------------[ cut here ]------------
[  335.758656][ T9032] trace type BPF program uses run-time allocation
[  335.807696][ T9032] WARNING: CPU: 1 PID: 9032 at kernel/bpf/verifier.c:11750 check_map_prog_compatibility+0x6cf/0x870
[  335.862764][ T9032] Modules linked in:
[  335.876834][ T9032] CPU: 1 PID: 9032 Comm: syz.5.1120 Not tainted syzkaller #0
[  335.884242][ T9032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  335.966684][ T9032] RIP: 0010:check_map_prog_compatibility+0x6cf/0x870
[  335.973420][ T9032] Code: ff e8 65 e2 ef ff 48 c7 c6 60 36 11 8a e9 0d fd ff ff e8 54 e2 ef ff c6 05 52 a6 cd 0b 01 48 c7 c7 c0 32 11 8a e8 21 3e 0f 08 <0f> 0b e9 9f fb ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c a5 f9
[  336.068783][ T9032] RSP: 0018:ffffc900030bf450 EFLAGS: 00010246
[  336.092364][ T9032] RAX: e75826bfd6b28100 RBX: 0000000000000001 RCX: 0000000000080000
[  336.145415][ T9032] RDX: ffffc90013856000 RSI: 0000000000004601 RDI: 0000000000004602
[  336.180808][ T9032] RBP: ffff8880776d4000 R08: dffffc0000000000 R09: ffffed10172267b0
[  336.208625][ T9032] R10: ffffed10172267b0 R11: 1ffff110172267af R12: ffffc900011c8038
[  336.253802][ T9032] R13: 0000000000000011 R14: dffffc0000000000 R15: 1ffff92000239007
[  336.289565][ T9032] FS:  00007ff933b396c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000
[  336.360681][ T9032] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  336.400823][ T9032] CR2: 00007f8ac55112f8 CR3: 0000000024137000 CR4: 00000000003506f0
[  336.422731][ T9032] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  336.498575][ T9032] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  336.533984][ T9032] Call Trace:
[  336.545526][ T9032]  <TASK>
[  336.555515][ T9032]  resolve_pseudo_ldimm64+0x691/0x1030
[  336.574510][ T9032]  ? check_attach_btf_id+0xe60/0xe60
[  336.592499][ T9032]  ? __mark_reg_known+0x1a0/0x1a0
[  336.611078][ T9032]  bpf_check+0x30a4/0xf090
[  336.631649][ T9032]  ? mark_lock+0x94/0x320
[  336.652670][ T9032]  ? bpf_get_btf_vmlinux+0x10/0x10
[  336.670399][ T9032]  ? mark_lock+0x94/0x320
[  336.683857][ T9032]  ? verify_lock_unused+0x140/0x140
[  336.702672][ T9032]  ? verify_lock_unused+0x140/0x140
[  336.732782][ T9032]  ? rcu_lock_release+0x5/0x20
[  336.751876][ T9032]  ? __lock_acquire+0x7c60/0x7c60
[  336.775960][ T9032]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  336.795380][ T9032]  ? lock_chain_count+0x20/0x20
[  336.807141][ T9032]  ? seqcount_lockdep_reader_access+0x120/0x1c0
[  336.822141][ T9032]  ? lockdep_hardirqs_on+0x94/0x140
[  336.827797][ T9032]  ? ktime_get_with_offset+0xff/0x320
[  336.833278][ T9032]  ? seqcount_lockdep_reader_access+0x172/0x1c0
[  336.840084][ T9032]  ? ktime_get_real_ts64+0x420/0x420
[  336.848404][ T9032]  ? __might_fault+0xb3/0x110
[  336.853247][ T9032]  ? memset+0x1e/0x40
[  336.858692][ T9032]  ? bpf_obj_name_cpy+0x190/0x1d0
[  336.863966][ T9032]  bpf_prog_load+0x1043/0x1550
[  336.871248][ T9032]  ? map_freeze+0x350/0x350
[  336.880324][ T9032]  ? __might_fault+0xb7/0x110
[  336.890687][ T9032]  ? __might_fault+0xb3/0x110
[  336.901031][ T9032]  ? bpf_lsm_bpf+0x5/0x10
[  336.911026][ T9032]  ? security_bpf+0x7a/0xa0
[  336.920366][ T9032]  __sys_bpf+0x4c2/0x670
[  336.930284][ T9032]  ? bpf_link_show_fdinfo+0x340/0x340
[  336.941102][ T9032]  ? vtime_user_exit+0x2dc/0x400
[  336.952929][ T9032]  __x64_sys_bpf+0x78/0x90
[  336.967104][ T9032]  do_syscall_64+0x4c/0xa0
[  336.976128][ T9032]  ? clear_bhb_loop+0x30/0x80
[  336.986522][ T9032]  ? clear_bhb_loop+0x30/0x80
[  336.995768][ T9032]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  337.008368][ T9032] RIP: 0033:0x7ff9358d2749
[  337.018408][ T9032] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  337.058500][ T9032] RSP: 002b:00007ff933b39038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  337.080348][ T9032] RAX: ffffffffffffffda RBX: 00007ff935b28fa0 RCX: 00007ff9358d2749
[  337.097576][ T9032] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005
[  337.114603][ T9032] RBP: 00007ff935956f91 R08: 0000000000000000 R09: 0000000000000000
[  337.131877][ T9032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  337.149082][ T9032] R13: 00007ff935b29038 R14: 00007ff935b28fa0 R15: 00007fff04ae1d68
[  337.166274][ T9032]  </TASK>
[  337.172747][ T9032] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  337.180043][ T9032] CPU: 0 PID: 9032 Comm: syz.5.1120 Not tainted syzkaller #0
[  337.187419][ T9032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  337.197482][ T9032] Call Trace:
[  337.200761][ T9032]  <TASK>
[  337.203690][ T9032]  dump_stack_lvl+0x168/0x230
[  337.208374][ T9032]  ? show_regs_print_info+0x20/0x20
[  337.213573][ T9032]  ? load_image+0x3b0/0x3b0
[  337.218088][ T9032]  panic+0x2c9/0x7f0
[  337.221989][ T9032]  ? bpf_jit_dump+0xd0/0xd0
[  337.226505][ T9032]  ? check_map_prog_compatibility+0x6cf/0x870
[  337.232578][ T9032]  __warn+0x248/0x2b0
[  337.236558][ T9032]  ? check_map_prog_compatibility+0x6cf/0x870
[  337.242634][ T9032]  report_bug+0x1b7/0x2e0
[  337.246979][ T9032]  handle_bug+0x3a/0x70
[  337.251143][ T9032]  exc_invalid_op+0x16/0x40
[  337.255659][ T9032]  asm_exc_invalid_op+0x16/0x20
[  337.260521][ T9032] RIP: 0010:check_map_prog_compatibility+0x6cf/0x870
[  337.267292][ T9032] Code: ff e8 65 e2 ef ff 48 c7 c6 60 36 11 8a e9 0d fd ff ff e8 54 e2 ef ff c6 05 52 a6 cd 0b 01 48 c7 c7 c0 32 11 8a e8 21 3e 0f 08 <0f> 0b e9 9f fb ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c a5 f9
[  337.286901][ T9032] RSP: 0018:ffffc900030bf450 EFLAGS: 00010246
[  337.292976][ T9032] RAX: e75826bfd6b28100 RBX: 0000000000000001 RCX: 0000000000080000
[  337.300950][ T9032] RDX: ffffc90013856000 RSI: 0000000000004601 RDI: 0000000000004602
[  337.308926][ T9032] RBP: ffff8880776d4000 R08: dffffc0000000000 R09: ffffed10172267b0
[  337.316904][ T9032] R10: ffffed10172267b0 R11: 1ffff110172267af R12: ffffc900011c8038
[  337.324887][ T9032] R13: 0000000000000011 R14: dffffc0000000000 R15: 1ffff92000239007
[  337.332884][ T9032]  resolve_pseudo_ldimm64+0x691/0x1030
[  337.338374][ T9032]  ? check_attach_btf_id+0xe60/0xe60
[  337.343687][ T9032]  ? __mark_reg_known+0x1a0/0x1a0
[  337.348729][ T9032]  bpf_check+0x30a4/0xf090
[  337.353169][ T9032]  ? mark_lock+0x94/0x320
[  337.357521][ T9032]  ? bpf_get_btf_vmlinux+0x10/0x10
[  337.362638][ T9032]  ? mark_lock+0x94/0x320
[  337.366995][ T9032]  ? verify_lock_unused+0x140/0x140
[  337.372213][ T9032]  ? verify_lock_unused+0x140/0x140
[  337.377443][ T9032]  ? rcu_lock_release+0x5/0x20
[  337.382213][ T9032]  ? __lock_acquire+0x7c60/0x7c60
[  337.387251][ T9032]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  337.393239][ T9032]  ? lock_chain_count+0x20/0x20
[  337.398099][ T9032]  ? seqcount_lockdep_reader_access+0x120/0x1c0
[  337.404349][ T9032]  ? lockdep_hardirqs_on+0x94/0x140
[  337.409547][ T9032]  ? ktime_get_with_offset+0xff/0x320
[  337.414920][ T9032]  ? seqcount_lockdep_reader_access+0x172/0x1c0
[  337.421168][ T9032]  ? ktime_get_real_ts64+0x420/0x420
[  337.426464][ T9032]  ? __might_fault+0xb3/0x110
[  337.431146][ T9032]  ? memset+0x1e/0x40
[  337.435139][ T9032]  ? bpf_obj_name_cpy+0x190/0x1d0
[  337.440184][ T9032]  bpf_prog_load+0x1043/0x1550
[  337.444964][ T9032]  ? map_freeze+0x350/0x350
[  337.449476][ T9032]  ? __might_fault+0xb7/0x110
[  337.454177][ T9032]  ? __might_fault+0xb3/0x110
[  337.458864][ T9032]  ? bpf_lsm_bpf+0x5/0x10
[  337.463202][ T9032]  ? security_bpf+0x7a/0xa0
[  337.467700][ T9032]  __sys_bpf+0x4c2/0x670
[  337.471961][ T9032]  ? bpf_link_show_fdinfo+0x340/0x340
[  337.477357][ T9032]  ? vtime_user_exit+0x2dc/0x400
[  337.482318][ T9032]  __x64_sys_bpf+0x78/0x90
[  337.486759][ T9032]  do_syscall_64+0x4c/0xa0
[  337.491184][ T9032]  ? clear_bhb_loop+0x30/0x80
[  337.495868][ T9032]  ? clear_bhb_loop+0x30/0x80
[  337.500547][ T9032]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  337.506432][ T9032] RIP: 0033:0x7ff9358d2749
[  337.510847][ T9032] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  337.530438][ T9032] RSP: 002b:00007ff933b39038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  337.538841][ T9032] RAX: ffffffffffffffda RBX: 00007ff935b28fa0 RCX: 00007ff9358d2749
[  337.546919][ T9032] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005
[  337.554879][ T9032] RBP: 00007ff935956f91 R08: 0000000000000000 R09: 0000000000000000
[  337.562846][ T9032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  337.570796][ T9032] R13: 00007ff935b29038 R14: 00007ff935b28fa0 R15: 00007fff04ae1d68
[  337.578769][ T9032]  </TASK>
[  337.582035][ T9032] Kernel Offset: disabled
[  337.586357][ T9032] Rebooting in 86400 seconds..