last executing test programs:

6m19.746134193s ago: executing program 2 (id=393):
r0 = socket(0x2, 0x80805, 0x0)
close(0x3)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000040)={0xfffc, 0xc}, 0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10)
sendmmsg$inet_sctp(r0, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x492492492492775, 0x0)

6m19.340366729s ago: executing program 2 (id=394):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f280, 0x0, 0x399})
pipe(&(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$RDMA_USER_CM_CMD_REJECT(r2, &(0x7f00000001c0)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x7, "f9c47d", "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"}}, 0x110)
splice(r1, 0x0, r0, 0x0, 0x8, 0x4)

6m19.141057166s ago: executing program 2 (id=395):
unshare(0x64000600)
r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x1, 0x18)
symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f0000000140)='./file0\x00')
openat2(r1, &(0x7f00000008c0)='./file0/../file0\x00', &(0x7f0000000380)={0x100, 0x0, 0x8}, 0x18)

6m18.556516746s ago: executing program 2 (id=396):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x1141099, 0x0)
mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
chroot(&(0x7f0000000580)='./file0/../file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0)
pivot_root(&(0x7f00000003c0)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00')

6m18.223382728s ago: executing program 2 (id=397):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000009, 0x200000005c832, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x8031, 0xffffffffffffffff, 0xffffd000)
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x700})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000acf000/0x1000)=nil, 0x800000})

6m17.505110422s ago: executing program 2 (id=400):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept(r0, 0x0, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000bc0)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x480c0)
accept$packet(r1, &(0x7f0000000000), 0x0)

6m16.590841134s ago: executing program 32 (id=400):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept(r0, 0x0, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000bc0)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x480c0)
accept$packet(r1, &(0x7f0000000000), 0x0)

6m3.641673739s ago: executing program 0 (id=457):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}}}}}}, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x401, @loopback, 0x2}], 0x1c)
sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000000)=ANY=[], 0xffc9)

6m2.959553137s ago: executing program 0 (id=461):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x804}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001a40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x14, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf, 0x1, "9915487c28dd58bd7ae4cc"}]}]}]}]}, @NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x3}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x80)

6m2.402805011s ago: executing program 0 (id=463):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0xa, 0x3, 0x87)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'sit0\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x22}, 0x78, r2})
setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10)
ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x8918, &(0x7f0000000000))

6m1.682809356s ago: executing program 0 (id=466):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000600)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x4, 0x525, &(0x7f0000000e40)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x48a7e, 0x0)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0xa27b734c1a0bc97)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]})
mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', 0x0, 0x14c98, 0x0)

5m59.278583496s ago: executing program 0 (id=470):
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x88}, [@ldst={0x6}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000000040)={'ipvlan1\x00', @random='\x00\x00\x00\x00\x00 '})

5m54.148996467s ago: executing program 0 (id=494):
r0 = socket$inet6(0xa, 0x80002, 0x88)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x3, 0x1, 0x8}]}, 0x10)
setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000200)=0x8, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e20004db0"], 0x0)

5m53.462915595s ago: executing program 33 (id=494):
r0 = socket$inet6(0xa, 0x80002, 0x88)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x3, 0x1, 0x8}]}, 0x10)
setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000200)=0x8, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e20004db0"], 0x0)

4m24.197346582s ago: executing program 3 (id=825):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4)
r1 = socket$tipc(0x1e, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00', <r2=>0x0})
bind$xdp(r0, &(0x7f00000000c0)={0x2c, 0x1, r2, 0x33, r1}, 0x10)

4m23.802534966s ago: executing program 3 (id=827):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0)
fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
read$FUSE(r0, &(0x7f0000000a80)={0x2020}, 0x2020)

4m23.465824169s ago: executing program 3 (id=830):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x100006, {{@in6=@private1={0xfc, 0x1, '\x00', 0xfe}, @in6=@empty, 0x0, 0x400, 0x1000, 0xfffe, 0x2, 0x20, 0x10, 0x84}, {0x0, 0x7}, {0x0, 0x4000000000000, 0xfffffffffffffffa}, 0x0, 0x0, 0x0, 0x1, 0x1}}, 0xb8}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='1', 0x1, 0x4000800, 0x0, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r0, &(0x7f0000000000), 0xd)

4m22.909705694s ago: executing program 3 (id=832):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000600)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x4, 0x525, &(0x7f0000000e40)="$eJzs3d9rY1kdAPDvTZtuO9PdZlVkXHB3cVdmFp2k3bpaRXZGEH0aUMf3sbZpKU2b0qTjtAzawT9AEFHBP8AXwQcfBZk/QYR58F1UFNEZfdS5cpNb7Y+kjW3ajOnnA7c5J+fmfL/n0twk9x7uDeDSejMibkfESES8ExFT+fOFfInd9pKt9+zpw4VsSSJN7/41iSR/bq+vrD4aEVfzl41HxNe+HPHN5GjcxvbO6nytVt3M65Xm2kalsb1zc2Vtfrm6XF2fnZ35RUS8Nzed5s40zlJEvP/FP/7wez/90vu/+uS3fnfvzze+naX1+Q+3846IhTMF6KLdd7G1LfZk22jzPIINSDae4sigswAAoBfZd/wPRMTHWt//p2Kk9W2uk7ELzgwAAADol/TWZPwziUgBAACAoVWIiMlICuV8LsBkFArlcnsO74fiSqFWbzQ/sVTfWl/M2iJKUSwsrdSq0/lc4VIUk6w+k8+x3au/e6g+GxGvRsQPpiZa9fJCvbY46IMfAAAAcElcfePg7/9/TBVaZQAAAGDIlLpWAAAAgGHhJz8AAAAMP7//AQAAYKh95c6dbEn37uO9eH97a7V+/+ZitbFaXttaKC/UNzfKy/X6cuuafWsn9Ver1zc+FetbDyrNaqNZaWzv3Furb603760cuAU2AAAAcIFefePxb5OI2P3cRGuJ/DqAAAf8YdAJAP00MugEgIEZHXQCwMAUT1zDHgKGXXJC+9HJO+1jhfHr88kHAADov+sfOXr+fyxvO/nYAPD/zFwfALh8Dp7dmxhYHsDFK552BuC1fmcCDMor7YeXurV3vXhHD+f/28cY0vRUiQEAAH0zmS35Cf9XWvVCoVyOeDmep6UoJksrtep0q60YEcWXsvpMa+3kxDnDAAAAAAAAAAAAAAAAAAAAAAAAAEBbmiaRAgAAAEMtovCnpHU1/4jrU29PHjw6cOiuXz+5+6MH883m5kzEWPK3qeypsYho/jh//t3ULQEAAABgsCayP+3f6fnjzKBTAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDYPHv6cGFvuci4f/lCRJQ6xR+N8dbjeBQj4srfkxjd97okIkb6EH/3UURc6xQ/iedpmpbyLDrFnzjn+KXWpukcvxARV/sQHy6zx9n+53an918h3mw9dn7/jebLWXXf/xX+s/8b6bL/eflQvZvXnvy80jX+o4jXRjvvf/biJ+34B0Jklbd6HOM3vr6z07FhX5ed4u+PVWmubVQa2zs3V9bml6vL1fXZ2ZlPz31m7r256crSSq2a/+0Y5vsf/eXz48Z/pUv80sHxH9n+b/c0+jT+9eTB0w+2K8VO8W+81fnz91qX+IX8s+/jeTlrv75X3m2X93v9Z795/bjxL3YZ//gJ47/R0/jjs+989bu/79hyZGsAABehsb2zOl+rVTePKYz3sM7/VIg4az+3+prPi1CIk9cZf0FSPY9C+p32/+PZ+jnjy48U0rO8fDT6kMbYkffpSJy2wyRiN+urx39IAABgyPz3S/9xZ5AAAAAAAAAAAAAAAAAAAACA83TKy5KNR0TPKx+OuTuYoQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHOvfAQAA//9XUdEU")
open(&(0x7f0000000180)='./bus\x00', 0x48a7e, 0x0)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0xa27b734c1a0bc97)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]})
mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', 0x0, 0x14c98, 0x0)

4m21.454274246s ago: executing program 3 (id=839):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, &(0x7f0000001180)=ANY=[@ANYBLOB='quota,usrquota_inode_hardlimit=7'])
fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0xee00, 0x1000)
futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1\x00', 0x42, 0x5)
quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000901, 0x0, &(0x7f00000003c0))

4m19.460972619s ago: executing program 3 (id=846):
r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x2, 0x1, 0x1})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1)
ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000200)=@userptr={0x0, 0x1, 0x4, 0x2, 0x0, {0x77359400}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '#\x00'}, 0x0, 0x2, {0x0}})
ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000280)=@mmap={0x0, 0x1, 0x4, 0x100004, 0x0, {0x77359400}, {0x7, 0xc, 0x0, 0x0, 0x0, 0x0, "1000"}})
ppoll(&(0x7f0000000200)=[{r0, 0x1}], 0x1, 0x0, 0x0, 0x0)

4m18.938649747s ago: executing program 34 (id=846):
r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x2, 0x1, 0x1})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1)
ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000200)=@userptr={0x0, 0x1, 0x4, 0x2, 0x0, {0x77359400}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '#\x00'}, 0x0, 0x2, {0x0}})
ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000280)=@mmap={0x0, 0x1, 0x4, 0x100004, 0x0, {0x77359400}, {0x7, 0xc, 0x0, 0x0, 0x0, 0x0, "1000"}})
ppoll(&(0x7f0000000200)=[{r0, 0x1}], 0x1, 0x0, 0x0, 0x0)

2m45.979959036s ago: executing program 5 (id=1280):
setns(0xc9, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x7fff, @empty}, 0x1c)
sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg$sock(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="11", 0xfffd}], 0x1}}], 0x1, 0x8015)

2m45.357619572s ago: executing program 5 (id=1284):
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
r1 = socket(0x2, 0x805, 0x0)
r2 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f00000000c0)=0x8)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x74, &(0x7f0000000200)={r3, 0x5, 0x20, 0x1949, 0xffffffffffffffff}, &(0x7f0000000240)=0x29)

2m45.036164923s ago: executing program 5 (id=1288):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d250700000037865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52374c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c917ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f90a72b90400000000000000c279f03558083906666827d650593a633bffff250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800000000000000000000000000000000000a00", "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"})
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x7)
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0xa8)

2m44.754122866s ago: executing program 5 (id=1291):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x8, &(0x7f0000000280)={[{@noauto_da_alloc}, {@errors_remount}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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")
mount(0x0, 0x0, 0x0, 0x0, 0x0)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
removexattr(&(0x7f00000002c0)='./file0/file1\x00', &(0x7f0000000300)=@known='system.posix_acl_access\x00')

2m43.692530294s ago: executing program 5 (id=1296):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000002c0)={[{@init_itable}, {@resuid}, {@stripe={'stripe', 0x3d, 0x40}}]}, 0x3, 0x445, &(0x7f0000001100)="$eJzs28+PE1UcAPDvTLeLCLgr4g9+qKto3PhjlwVUDh7UaOIBExM96HGzuxCksIZdEyFEwRg8GWPi3Xj0X/CkF2M8mXjVuyEhhgvgqWbaGbYtbdktLUX6+SQD78282fe+nXnte/PaAEbWVPZPErE1Iv6MiIl6trnAVP2/q5fPLly7fHYhiWr13X+SWrkrl88uFEWL87bkmek0Iv0iid1t6l05feb4fKWydCrPz66e+Gh25fSZF46dmD+6dHTp5P5Dhw4emHv5pf0v9iXOrE1Xdn26vGfnWx988/bhr5rib4mjT6a6HXy6Wu1zdcO1rSGdjA2xIWxIKSKyy1Wu9f+JKMXaxZuINz8fauOAgapWq9UtnQ+fqwJ3sSSa87o8jIrigz6b/xZb6yDg1cENP4bu0mv1CVAW99V8qx8ZizQvU26Z3/bTVES8f+7f77ItBvMcAgCgyU/Z+Of5duO/NB5qKHdfvjY0GRH3R8T2iHggInZExIMRtbIPR8QjG6y/dZHkxvFPerGnwNYpG/+9kq9tNY//itFfTJby3LZa/OXkyLHK0r78NZmO8qYsP9eljp/f+OPrTscax3/ZltVfjAXzdlwc29R8zuL86vytxNzo0vmIXWPt4k+urwQkEbEzInb1WMexZ3/Y0+nYzePvog/rTNXvI56pX/9z0RJ/Iem+Pjl7T1SW9s0Wd8WNfvv9wjud6r+l+Psgu/73tr3/r8c/mTSu165svI4Lf33ZcU7T6/0/nrxXS4/n+z6ZX109NRcxnhyuN7px//61c4t8UT6Lf3pv+/6/PdZeid0Rkd3Ej0bEYxHxeN72JyLiyYjY2yX+X19/6sPe4x+sLP7FDV3/tcR4tO5pnygd/+XHpkonb4j/Wvfrf7CWms73rOf9bz3t6u1uBgAAgP+fNCK2RpLOXE+n6cxM/fvyOyLSyvLK6nNHlj8+uVj/jcBklNPiSddEw/PQuXxaX8+fj4j6VwuK4wfy58bfljbX8jMLy5XFYQcPI25Lh/6f+bs07NYBA+f3WjC69H8YXfo/jC79H0ZXm/6/eRjtAG6/dp//nw2hHcDt19L/LfvBCDH/h9Gl/8Po0v9hJK1sjpv/SL5rovhLPZ5+1yaifEc0Y2CJSO+IZkgMKDHc9yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB++S8AAP///fHg0g==")
creat(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x140)
mknod$loop(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, 0x1)
symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
mknod$loop(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)

2m43.216521763s ago: executing program 6 (id=1299):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
r1 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f00000000c0)=[{0x6, 0x81, 0xca}]}, 0x10)
listen(r1, 0x2b9b)
close_range(r0, 0xffffffffffffffff, 0x0)

2m43.008073612s ago: executing program 5 (id=1308):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0)
getsockname$packet(r1, &(0x7f0000000580)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r2, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@newlink={0x5c, 0x10, 0x439, 0x70bd29, 0xffffffea, {0x0, 0x0, 0xe403, r2, 0x28586, 0x4}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @sit={{0x8}, {0x30, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}, @IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x1}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008004}, 0x4002040)

2m42.323875531s ago: executing program 35 (id=1308):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0)
getsockname$packet(r1, &(0x7f0000000580)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r2, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@newlink={0x5c, 0x10, 0x439, 0x70bd29, 0xffffffea, {0x0, 0x0, 0xe403, r2, 0x28586, 0x4}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @sit={{0x8}, {0x30, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}, @IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x1}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008004}, 0x4002040)

2m42.296796205s ago: executing program 6 (id=1303):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f0000000400)="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f01", 0x17)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8)
r2 = dup2(r1, r0)
recvmsg$unix(r2, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x2060)

2m42.002278441s ago: executing program 6 (id=1304):
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x188, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0xa8, 0xf0, 0x0, {}, [@common=@unspec=@time={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ip={@local, @local, 0x0, 0x0, 'veth0_to_team\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
r0 = socket$inet(0x2, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x18}, 0x94)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000140)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c)
syz_emit_ethernet(0x2a, &(0x7f0000000a00)={@link_local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x2, 0x0, 0xfe, 0x11, 0x0, @local, @multicast1}, {0x0, 0x4e21, 0x8}}}}}, 0x0)

2m41.719754074s ago: executing program 6 (id=1306):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x8, &(0x7f0000000280)={[{@noauto_da_alloc}, {@errors_remount}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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")
mount(0x0, 0x0, 0x0, 0x0, 0x0)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
removexattr(&(0x7f00000002c0)='./file0/file1\x00', &(0x7f0000000300)=@known='system.posix_acl_access\x00')

2m40.478246506s ago: executing program 6 (id=1310):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', <r1=>0x0})
setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000100), 0x4)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x0, 0x3, r1, 0x230d}, 0xc)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4)

2m39.437140861s ago: executing program 6 (id=1311):
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x118)
mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0])
mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000000c0)=0x4)

2m38.715129677s ago: executing program 36 (id=1311):
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x118)
mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0])
mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000000c0)=0x4)

11.433602309s ago: executing program 4 (id=1863):
r0 = syz_usb_connect(0x3, 0x50, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040ca08100100010102030109023e0001010080fa0904000002ff00000007058302000200070504020002"], 0x0)
syz_usb_ep_write(r0, 0x83, 0x0, 0x0)
syz_usb_ep_read(r0, 0x4, 0x0, 0x0)
syz_usb_ep_write(r0, 0x83, 0x0, 0x0)
syz_usb_ep_read(r0, 0x4, 0x0, 0x0)
syz_usb_ep_read(r0, 0x4, 0x0, 0x0)

9.07420263s ago: executing program 4 (id=1873):
r0 = io_uring_setup(0x3bda, &(0x7f0000000300)={0x0, 0xbbc7, 0x80, 0x2, 0x200010})
close(r0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]})
membarrier(0x10, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000180))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000000c0))

7.975481066s ago: executing program 4 (id=1877):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
io_setup(0x4, &(0x7f0000000000)=<r0=>0x0)
r1 = eventfd(0x0)
io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xc2, r1, &(0x7f0000000180)="0100fd6400000000", 0x8, 0x36, 0x0, 0x0, r1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x81, 0x0, 0x1, r1}])
fcntl$lock(0xffffffffffffffff, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
syz_clone3(&(0x7f0000000400)={0x2000080, 0x0, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, 0x0}, 0x58)

7.157690559s ago: executing program 4 (id=1882):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000000140)='./file1\x00', 0x800080, &(0x7f0000003b40)=ANY=[@ANYBLOB='active_logs=4,jqfmt=vfsv0,prjjquota=f2fs\x00,mode=ad,norecovery,fsync_mode=posix,user_xattr,disable_roll_forward,\x00\x00\x00', @ANYRESOCT=0x0, @ANYRESOCT, @ANYBLOB="57763f8b80ccb54515aa467d89bbb893a63f49cae5772efb6bb2d1d03fd1742a12e8978807c6a53aae173e5c08461b1d2594eed5030000002e74086cd91724e5631fa9733e7a1e4017c3d4264edd910e", @ANYBLOB="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"], 0x1, 0x105ea, &(0x7f000000d000)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1000})

5.717509939s ago: executing program 4 (id=1885):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
close_range(r0, r0, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}}, 0x0, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}})

3.258963089s ago: executing program 7 (id=1894):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3)
write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0x78)
sendfile(r0, r1, &(0x7f00000001c0), 0x8)
fcntl$addseals(r1, 0x409, 0x8)
fallocate(r1, 0x3, 0x90fc, 0x3)

2.716287171s ago: executing program 7 (id=1897):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r0, &(0x7f0000000100)={@val={0xa, 0x10}, @void, @eth={@broadcast, @remote, @void, {@ipv6={0x86dd, @generic={0x9, 0x6, "17007e", 0x0, 0x2b, 0xff, @local, @mcast2}}}}}, 0x3a)

2.480317295s ago: executing program 1 (id=1899):
r0 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000680)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0x1, 0x1, 0xfffffffc, 0xffffffff, 0xffffffff], [0xffffffff, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0xffffffff, 0xfffdffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x83, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x5, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x8, 0xf4240, 0x0, 0x0, 0x1}]})
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r0, 0xc0884113, &(0x7f0000000280)={0x1, 0x8, 0xa4b0, 0x3ff, 0x100000000, 0x7, 0xffffffffffffc474, 0x8, 0x5, 0x0, 0xfffffff8, 0x2})
ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0)
ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0)
ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r0, 0xc06c4124, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1})

2.152024157s ago: executing program 1 (id=1900):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r2=>0x0})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r4=>0x0})
sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x24, r1, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x22040000}, 0x0)

2.002654585s ago: executing program 7 (id=1902):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0)
write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x40000000, 0x0, 0x0, 0x83, "00000000000000000000ffff00"})
r1 = syz_open_pts(r0, 0x0)
poll(&(0x7f0000000000)=[{r1, 0xa}], 0x1, 0xa1)

1.828826867s ago: executing program 1 (id=1903):
r0 = socket$nl_route(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000000)="38000000240001040100000000000000000000000100000000000100ffffffff0000000008000100657473000c0002800500010010000000", 0x38)
write(r0, &(0x7f0000000080)="38000000240001040300000000000000000000000100000000000300020001000000000008000100657473000c0002800500010010000000", 0x38)
write(r0, &(0x7f0000000500)="240000002a0001039900000000000000000000000100"/36, 0x24)
read(r0, &(0x7f0000002000), 0x8000)
read(r0, &(0x7f0000002000), 0x8000)

1.661449179s ago: executing program 8 (id=1904):
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet(0x2, 0x80001, 0x84)
r0 = io_uring_setup(0x21dd, &(0x7f00000001c0)={0x0, 0x1fffff, 0x0, 0x2, 0xd5})
io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20)
io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000040)=[{0x0, 0xffffffff00000005}], &(0x7f0000000180)=[0xffffffff, 0x7fffffff, 0x2, 0x6, 0x101, 0x1], 0x7}, 0x20)

1.516517306s ago: executing program 1 (id=1905):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000006000/0x1000)=nil)
syz_clone(0x204000, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet6(r0, &(0x7f0000000080)="b1", 0xffe0, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)

1.266138703s ago: executing program 8 (id=1906):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0)
close(r0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080))
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000000000000631108000000000085100000020000008500"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94)
ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"})
openat$tun(0xffffff9c, 0x0, 0xc00, 0x0)

1.149924775s ago: executing program 4 (id=1907):
r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000001300)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff000000070501020002000705810200020007050204e5"], 0x0)
setns(0xc9, 0x0)
r1 = socket(0x8, 0x5, 0x7fff)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000100)="900100"/64)
ioctl$sock_SIOCOUTQNSD(r1, 0x40106184, &(0x7f0000000000))

971.129798ms ago: executing program 8 (id=1908):
r0 = socket$inet6(0xa, 0x2, 0x0)
close(r0)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4)
sendmsg$inet6(r1, &(0x7f0000000140)={&(0x7f0000000100)={0xa, 0x4e60, 0x80000, @dev={0xfe, 0x80, '\x00', 0x3d}, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x33}}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x3c}}}], 0x30}, 0x3400c8d4)

858.704449ms ago: executing program 7 (id=1909):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000000900010073797a300000000048000000030a01040000000000000000010000000900010073797a30000000000900030073797a31000000001400048008000140000000040800024000000064080007006e6174004c000000060a01040000000000000000010000000900010073797a30000000000900020073797a3100000000200004801c000180090001006d617371000000000c000280080001400000006314000000110001"], 0xdc}}, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c)

760.960937ms ago: executing program 1 (id=1910):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000040000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4)
syz_genetlink_get_family_id$devlink(&(0x7f0000000240), 0xffffffffffffffff)

714.780506ms ago: executing program 8 (id=1911):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000040)=[{&(0x7f00000003c0)="ea", 0xfffffe4b}], 0x1, 0x8)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

389.072707ms ago: executing program 8 (id=1912):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x9, 0x1, 0x8, 0x40, 0x42, 0x1}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000072"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

369.880221ms ago: executing program 7 (id=1913):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r0, @ANYBLOB="06001500070000000c001680080001"], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x44081}, 0x4)
r1 = socket(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0xfff0)

112.081909ms ago: executing program 8 (id=1914):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0)
ftruncate(r0, 0xc17a)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, 0x0}, 0x0)
syz_clone(0x2280700, 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)

29.062734ms ago: executing program 1 (id=1915):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0)
ioctl$TCXONC(r0, 0x540a, 0x2)
ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000))
r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x6)
write(r1, &(0x7f0000000080)='g', 0x1)
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000140)={0x7, 0x3, 0x6, 0x7fff, 0x17, "ee1dd756f560f25a63b2f119c3439425ea59d8"})

0s ago: executing program 7 (id=1916):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$nfc_llcp(r0, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$nfc_llcp(r1, &(0x7f0000001040)={0x27, 0x0, 0xfefffffd, 0x5, 0x0, 0xfd, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000080000200000000001900", 0x3c}, 0x60)
r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$nfc_llcp(r2, &(0x7f0000000080)={0x27, 0x0, 0x0, 0xe0cba8b119564bb4, 0x0, 0x46, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x2d}, 0x60)

kernel console output (not intermixed with test programs):

esystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  385.850692][T10527] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  385.859382][T10527] BTRFS info (device loop1): setting nodatacow, compression disabled
[  385.925021][T10527] BTRFS info (device loop1): force clearing of disk cache
[  385.964582][T10527] BTRFS info (device loop1): turning off barriers
[  385.974893][T10527] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8)
[  386.019085][T10527] BTRFS info (device loop1): use lzo compression, level 0
[  386.050287][T10527] BTRFS info (device loop1): disabling free space tree
[  386.057245][T10527] BTRFS info (device loop1): enabling ssd optimizations
[  386.112364][ T5786] Bluetooth: hci3: command tx timeout
[  386.119822][T10527] BTRFS info (device loop1): using spread ssd allocation scheme
[  386.141278][T10527] BTRFS info (device loop1): not using ssd optimizations
[  386.148461][T10527] BTRFS info (device loop1): not using spread ssd allocation scheme
[  386.279418][T10527] BTRFS info (device loop1): rebuilding free space tree
[  386.345594][T10527] BTRFS info (device loop1): disabling free space tree
[  386.374790][T10527] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  386.414763][T10527] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  386.475800][T10527] BTRFS info (device loop1): checking UUID tree
[  386.927030][ T5775] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  386.978280][T10557] loop4: detected capacity change from 0 to 128
[  387.087527][T10557] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  387.198393][T10557] ext4 filesystem being mounted at /219/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  387.790355][ T5786] Bluetooth: hci0: command tx timeout
[  388.125109][ T7055] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  388.190795][ T5786] Bluetooth: hci3: command tx timeout
[  388.395326][T10567] loop4: detected capacity change from 0 to 4096
[  388.421054][T10567] ntfs3: Unknown parameter './proc_mnt'
[  388.467191][ T5779] I/O error, dev loop4, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  388.768364][   T49] team0 (unregistering): Port device team_slave_1 removed
[  388.967751][   T49] team0 (unregistering): Port device team_slave_0 removed
[  389.143734][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  389.158460][T10567] loop4: detected capacity change from 0 to 32768
[  389.199373][T10567] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1329 (10567)
[  389.267284][T10567] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  389.319978][T10567] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  389.346670][T10567] BTRFS info (device loop4): setting nodatasum
[  389.380749][T10567] BTRFS info (device loop4): force zlib compression, level 3
[  389.388385][T10567] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8)
[  389.421117][T10567] BTRFS info (device loop4): use lzo compression, level 0
[  389.428535][T10567] BTRFS info (device loop4): turning on flush-on-commit
[  389.449361][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  389.501429][T10567] BTRFS info (device loop4): enabling auto defrag
[  389.508246][T10567] BTRFS info (device loop4): max_inline at 4096
[  389.551587][T10567] BTRFS info (device loop4): using free space tree
[  389.655885][T10567] BTRFS info (device loop4): enabling ssd optimizations
[  389.870792][ T5786] Bluetooth: hci0: command tx timeout
[  389.983774][ T7055] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  390.270386][ T5786] Bluetooth: hci3: command tx timeout
[  390.933616][    T9] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  391.116841][   T49] bond0 (unregistering): Released all slaves
[  391.158519][    T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  391.193099][    T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  391.220658][    T9] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  391.229753][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67
[  391.244986][    T9] usb 5-1: SerialNumber: syz
[  391.492806][    T9] usb 5-1: 0:2 : does not exist
[  391.509473][T10470] bridge0: port 1(bridge_slave_0) entered blocking state
[  391.584011][    T9] usb 5-1: USB disconnect, device number 15
[  391.620554][T10470] bridge0: port 1(bridge_slave_0) entered disabled state
[  391.627820][T10470] bridge_slave_0: entered allmulticast mode
[  391.702404][T10470] bridge_slave_0: entered promiscuous mode
[  391.784510][T10470] bridge0: port 2(bridge_slave_1) entered blocking state
[  391.805650][T10470] bridge0: port 2(bridge_slave_1) entered disabled state
[  391.825845][T10470] bridge_slave_1: entered allmulticast mode
[  391.844189][T10470] bridge_slave_1: entered promiscuous mode
[  392.004740][T10470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  392.096293][T10470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  392.191698][T10600] loop1: detected capacity change from 0 to 1024
[  392.350346][ T5786] Bluetooth: hci3: command tx timeout
[  392.469284][T10470] team0: Port device team_slave_0 added
[  392.601962][T10470] team0: Port device team_slave_1 added
[  392.818021][T10470] batman_adv: batadv0: Adding interface: batadv_slave_0
[  392.847089][T10470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  392.937654][T10470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  392.969797][T10470] batman_adv: batadv0: Adding interface: batadv_slave_1
[  392.989179][T10470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  393.073874][T10470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  393.368841][T10470] hsr_slave_0: entered promiscuous mode
[  393.417779][T10470] hsr_slave_1: entered promiscuous mode
[  393.444253][T10470] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  393.478373][T10470] Cannot create hsr debugfs directory
[  393.537217][T10512] chnl_net:caif_netlink_parms(): no params data found
[  393.928784][T10633] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1337'.
[  393.993150][T10633] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1337'.
[  394.063866][T10512] bridge0: port 1(bridge_slave_0) entered blocking state
[  394.101658][T10512] bridge0: port 1(bridge_slave_0) entered disabled state
[  394.139936][T10512] bridge_slave_0: entered allmulticast mode
[  394.167363][T10512] bridge_slave_0: entered promiscuous mode
[  394.221279][T10512] bridge0: port 2(bridge_slave_1) entered blocking state
[  394.240073][T10512] bridge0: port 2(bridge_slave_1) entered disabled state
[  394.261946][T10512] bridge_slave_1: entered allmulticast mode
[  394.282766][T10512] bridge_slave_1: entered promiscuous mode
[  394.520858][T10512] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  394.617492][T10512] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  394.844206][T10512] team0: Port device team_slave_0 added
[  394.903491][ T5786] Bluetooth: hci2: unexpected event for opcode 0x1001
[  394.922211][T10641] Bluetooth: MGMT ver 1.22
[  394.983780][T10512] team0: Port device team_slave_1 added
[  395.158731][T10512] batman_adv: batadv0: Adding interface: batadv_slave_0
[  395.200621][T10512] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  395.309865][T10512] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  395.321535][   T49] wlan1: Trigger new scan to find an IBSS to join
[  395.358286][T10470] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  395.451404][T10512] batman_adv: batadv0: Adding interface: batadv_slave_1
[  395.498991][T10512] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  395.637473][T10512] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  395.690090][T10470] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  395.863052][T10470] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  395.931203][T10470] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  396.082227][T10657] loop4: detected capacity change from 0 to 64
[  396.226827][T10512] hsr_slave_0: entered promiscuous mode
[  396.302255][T10512] hsr_slave_1: entered promiscuous mode
[  396.351262][T10512] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  396.358894][T10512] Cannot create hsr debugfs directory
[  396.986959][T10470] 8021q: adding VLAN 0 to HW filter on device bond0
[  397.000084][ T5785] Bluetooth: hci0: command 0x0c1a tx timeout
[  397.006830][ T5786] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  397.304866][T10470] 8021q: adding VLAN 0 to HW filter on device team0
[  397.376530][ T4523] bridge0: port 1(bridge_slave_0) entered blocking state
[  397.383783][ T4523] bridge0: port 1(bridge_slave_0) entered forwarding state
[  397.484412][ T4523] bridge0: port 2(bridge_slave_1) entered blocking state
[  397.491788][ T4523] bridge0: port 2(bridge_slave_1) entered forwarding state
[  397.846331][T10512] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  397.906352][T10512] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  397.964503][T10512] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  398.038833][T10512] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  398.272442][ T1130] wlan1: Trigger new scan to find an IBSS to join
[  398.522381][ T9356] wlan1: Creating new IBSS network, BSSID e2:71:a5:15:99:51
[  398.564092][T10512] 8021q: adding VLAN 0 to HW filter on device bond0
[  398.712082][T10512] 8021q: adding VLAN 0 to HW filter on device team0
[  398.779644][ T7627] bridge0: port 1(bridge_slave_0) entered blocking state
[  398.786878][ T7627] bridge0: port 1(bridge_slave_0) entered forwarding state
[  398.962356][ T7627] bridge0: port 2(bridge_slave_1) entered blocking state
[  398.969563][ T7627] bridge0: port 2(bridge_slave_1) entered forwarding state
[  399.025572][T10703] FAULT_INJECTION: forcing a failure.
[  399.025572][T10703] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  399.081103][T10703] CPU: 0 PID: 10703 Comm: syz.1.1352 Not tainted syzkaller #0
[  399.088643][T10703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  399.098737][T10703] Call Trace:
[  399.102036][T10703]  <TASK>
[  399.104995][T10703]  dump_stack_lvl+0x18c/0x250
[  399.109698][T10703]  ? show_regs_print_info+0x20/0x20
[  399.114923][T10703]  ? load_image+0x420/0x420
[  399.119535][T10703]  ? __lock_acquire+0x7d80/0x7d80
[  399.124584][T10703]  should_fail_ex+0x394/0x4c0
[  399.129305][T10703]  prepare_alloc_pages+0x1e1/0x5b0
[  399.134469][T10703]  __alloc_pages+0x134/0x460
[  399.139092][T10703]  ? zone_statistics+0x170/0x170
[  399.144158][T10703]  ? alloc_pages+0x4e1/0x740
[  399.148803][T10703]  ? do_raw_spin_unlock+0x121/0x230
[  399.154058][T10703]  __get_free_pages+0xc/0x30
[  399.158671][T10703]  kasan_populate_vmalloc_pte+0x35/0x100
[  399.164332][T10703]  __apply_to_page_range+0x860/0xdd0
[  399.169645][T10703]  ? kasan_populate_vmalloc+0x70/0x70
[  399.175055][T10703]  ? apply_to_page_range+0x50/0x50
[  399.180192][T10703]  ? do_raw_spin_unlock+0x121/0x230
[  399.185411][T10703]  alloc_vmap_area+0x1d26/0x1e50
[  399.190392][T10703]  ? vm_map_ram+0xcf0/0xcf0
[  399.194928][T10703]  ? rcu_is_watching+0x15/0xb0
[  399.199819][T10703]  __get_vm_area_node+0x162/0x370
[  399.205054][T10703]  __vmalloc_node_range+0x36f/0x1320
[  399.210365][T10703]  ? prealloc_elems_and_freelist+0x86/0x1c0
[  399.216279][T10703]  ? get_callchain_buffers+0x221/0x360
[  399.221776][T10703]  ? free_vm_area+0x50/0x50
[  399.226305][T10703]  ? get_callchain_buffers+0x1a2/0x360
[  399.231807][T10703]  ? rcu_is_watching+0x15/0xb0
[  399.236596][T10703]  bpf_map_area_alloc+0xf1/0x110
[  399.241576][T10703]  ? prealloc_elems_and_freelist+0x86/0x1c0
[  399.247519][T10703]  prealloc_elems_and_freelist+0x86/0x1c0
[  399.253278][T10703]  stack_map_alloc+0x32b/0x4b0
[  399.258093][T10703]  map_create+0x877/0x12f0
[  399.262536][T10703]  __sys_bpf+0x651/0x890
[  399.266825][T10703]  ? bpf_link_show_fdinfo+0x560/0x560
[  399.272243][T10703]  ? lock_chain_count+0x20/0x20
[  399.277154][T10703]  __x64_sys_bpf+0x7c/0x90
[  399.281603][T10703]  do_syscall_64+0x55/0xb0
[  399.286066][T10703]  ? clear_bhb_loop+0x40/0x90
[  399.290885][T10703]  ? clear_bhb_loop+0x40/0x90
[  399.295687][T10703]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  399.301728][T10703] RIP: 0033:0x7f2afad9e159
[  399.306171][T10703] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  399.325811][T10703] RSP: 002b:00007f2afbd57028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  399.334251][T10703] RAX: ffffffffffffffda RBX: 00007f2afb025fa0 RCX: 00007f2afad9e159
[  399.342239][T10703] RDX: 0000000000000050 RSI: 0000200000000540 RDI: 0000000000000000
[  399.350250][T10703] RBP: 00007f2afae3506b R08: 0000000000000000 R09: 0000000000000000
[  399.358237][T10703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  399.366311][T10703] R13: 00007f2afb026038 R14: 00007f2afb025fa0 R15: 00007fff0718e0e8
[  399.374310][T10703]  </TASK>
[  399.404270][T10470] 8021q: adding VLAN 0 to HW filter on device batadv0
[  399.459009][T10512] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  399.490287][T10512] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  400.110295][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  400.507720][T10512] 8021q: adding VLAN 0 to HW filter on device batadv0
[  400.599520][T10470] veth0_vlan: entered promiscuous mode
[  400.685786][T10470] veth1_vlan: entered promiscuous mode
[  400.879513][T10470] veth0_macvtap: entered promiscuous mode
[  400.955639][T10732] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check.
[  401.060676][T10470] veth1_macvtap: entered promiscuous mode
[  401.194039][T10470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  401.275037][T10470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  401.338233][T10470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  401.410272][T10470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  401.477429][T10470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  401.527655][T10470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  401.596380][T10470] batman_adv: batadv0: Interface activated: batadv_slave_0
[  401.662417][T10470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  401.774526][T10470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  401.828058][T10470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  401.931376][T10470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  401.999258][T10470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  402.083149][T10470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  402.127854][T10470] batman_adv: batadv0: Interface activated: batadv_slave_1
[  402.286480][T10512] veth0_vlan: entered promiscuous mode
[  402.310329][    T8] usb 5-1: new full-speed USB device number 16 using dummy_hcd
[  402.341058][T10470] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  402.373379][T10470] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  402.414508][T10470] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  402.450272][T10470] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  402.532434][    T8] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  402.597787][    T8] usb 5-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00
[  402.636858][T10512] veth1_vlan: entered promiscuous mode
[  402.687935][    T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  402.728733][    T8] usb 5-1: config 0 descriptor??
[  402.908409][T10512] veth0_macvtap: entered promiscuous mode
[  402.986396][T10512] veth1_macvtap: entered promiscuous mode
[  403.079268][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  403.096842][T10512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  403.135938][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  403.159617][T10512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  403.185928][T10512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  403.239307][T10512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  403.257251][    T8] input: HID 0458:5005 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5005.0013/input/input22
[  403.297915][T10512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  403.359243][T10512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  403.389287][T10512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  403.428706][    T8] input: HID 0458:5005 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5005.0013/input/input23
[  403.440704][    C0] vcan0: j1939_tp_rxtimer: 0xffff88805c5f8c00: rx timeout, send abort
[  403.443554][    C0] vcan0: j1939_tp_rxtimer: 0xffff88805c5f9000: rx timeout, send abort
[  403.452072][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805c5f8c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  403.454269][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805c5f9000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  403.534024][T10512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  403.585421][T10512] batman_adv: batadv0: Interface activated: batadv_slave_0
[  403.675793][T10512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  403.724147][T10512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  403.760921][T10512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  403.814021][T10512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  403.885693][T10512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  403.900688][    T8] kye 0003:0458:5005.0013: input,hiddev0,hidraw0: USB HID v7f.fd Device [HID 0458:5005] on usb-dummy_hcd.4-1/input0
[  403.999673][T10512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  404.079183][    T8] usb 5-1: USB disconnect, device number 16
[  404.100349][T10512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  404.160309][T10512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  404.223795][T10512] batman_adv: batadv0: Interface activated: batadv_slave_1
[  404.263422][T10773] fido_id[10773]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory
[  404.412269][T10512] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  404.479824][T10512] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  404.536186][T10512] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  404.588130][T10512] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  404.749662][T10780] syzkaller1: entered promiscuous mode
[  404.775497][T10780] syzkaller1: entered allmulticast mode
[  405.034029][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  405.123962][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  405.659929][T10793] bridge0: port 2(bridge_slave_1) entered disabled state
[  405.667242][T10793] bridge0: port 1(bridge_slave_0) entered disabled state
[  406.336638][T10793] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  406.398586][T10793] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  407.013632][T10793] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  407.023883][T10793] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  407.037026][T10793] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  407.049246][T10793] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  407.260032][T10796] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1371'.
[  407.556385][ T7625] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  407.663744][ T7625] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  407.994401][T10812] loop4: detected capacity change from 0 to 16
[  408.019634][ T1130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  408.073294][T10812] erofs: (device loop4): mounted with root inode @ nid 36.
[  408.101581][ T1130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  409.453597][T10840] jffs2: notice: (10840) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  409.757550][T10818] loop1: detected capacity change from 0 to 32768
[  409.884845][T10818] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 scanned by syz.1.1376 (10818)
[  410.028191][T10818] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  410.093970][T10818] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  410.163015][T10818] BTRFS info (device loop1): turning on async discard
[  410.181579][    T9] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  410.227596][T10818] BTRFS info (device loop1): using free space tree
[  410.411219][    T9] usb 5-1: Using ep0 maxpacket: 16
[  410.447566][    T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  410.539863][    T9] usb 5-1: config 0 interface 0 has no altsetting 0
[  410.548688][T10818] BTRFS info (device loop1): enabling ssd optimizations
[  410.599598][    T9] usb 5-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20
[  410.697002][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  410.761876][    T9] usb 5-1: Product: syz
[  410.767750][    T9] usb 5-1: Manufacturer: syz
[  410.837956][    T9] usb 5-1: SerialNumber: syz
[  410.851789][   T27] audit: type=1800 audit(1790656567.992:351): pid=10818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1376" name="bus" dev="loop1" ino=263 res=0 errno=0
[  410.906252][    T9] usb 5-1: config 0 descriptor??
[  410.957896][T10880] loop8: detected capacity change from 0 to 1764
[  411.210906][T10880] isofs_fill_super: get root inode failed
[  411.296878][    T9] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input24
[  411.607670][ T5775] BTRFS info (device loop1): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  411.751380][   T56] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[  411.845606][ T9163] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  411.860376][    T9] rc_core: IR keymap rc-imon-pad not found
[  411.918759][    T9] Registered IR keymap rc-empty
[  411.948455][ T9163] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[  411.968533][    T9] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support
[  412.029776][T10895] netlink: 'syz.8.1394': attribute type 12 has an invalid length.
[  412.041484][    T9] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  412.082716][T10895] netlink: 'syz.8.1394': attribute type 29 has an invalid length.
[  412.118684][    T9] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  412.173958][T10895] netlink: 148 bytes leftover after parsing attributes in process `syz.8.1394'.
[  412.221310][    T9] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input25
[  412.242101][T10895] netlink: 'syz.8.1394': attribute type 1 has an invalid length.
[  412.254537][T10884] ceph: No mds server is up or the cluster is laggy
[  412.276559][ T5820] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  412.293859][T10895] netlink: 'syz.8.1394': attribute type 2 has an invalid length.
[  412.306118][    C0] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71)
[  412.331776][ T5820] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[  412.342081][    T9] imon 5-1:0.0: iMON device (15c2:0041, intf0) on usb<5:17> initialized
[  412.350746][T10886] ceph: No mds server is up or the cluster is laggy
[  412.361786][T10895] netlink: 'syz.8.1394': attribute type 3 has an invalid length.
[  412.406973][    T9] usb 5-1: USB disconnect, device number 17
[  412.431233][T10895] netlink: 3 bytes leftover after parsing attributes in process `syz.8.1394'.
[  413.616828][T10919] loop1: detected capacity change from 0 to 128
[  413.639893][T10920] loop4: detected capacity change from 0 to 512
[  413.757662][T10919] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  413.781418][T10920] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  413.904762][T10919] hpfs: filesystem error: improperly stopped
[  413.969885][T10919] hpfs: You really don't want any checks? You are crazy...
[  414.017255][T10919] hpfs: hpfs_map_sector(): read error
[  414.070959][T10919] hpfs: code page support is disabled
[  414.109330][T10919] hpfs: hpfs_map_4sectors(): unaligned read
[  414.189655][T10919] hpfs: hpfs_map_4sectors(): unaligned read
[  414.252555][T10919] hpfs: filesystem error: unable to find root dir
[  414.303827][ T7055] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  414.389503][T10919] hpfs: hpfs_map_4sectors(): unaligned read
[  414.400351][    T9] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  414.474153][T10919] hpfs: hpfs_map_sector(): read error
[  414.515169][T10929] hpfs: hpfs_map_4sectors(): unaligned read
[  414.533178][T10929] hpfs: hpfs_map_sector(): read error
[  414.650296][    T9] usb 8-1: Using ep0 maxpacket: 8
[  414.669392][    T9] usb 8-1: config 179 has an invalid interface number: 65 but max is 0
[  414.709704][    T9] usb 8-1: config 179 has no interface number 0
[  414.735562][    T9] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  414.811420][    T9] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  414.889026][    T9] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  414.970333][   T27] audit: type=1326 audit(1790656572.092:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10933 comm="syz.1.1404" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2afad9e159 code=0x0
[  415.008395][    T9] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  415.092663][    T9] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  415.162855][    T9] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  415.194151][    T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  415.234942][T10926] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  415.769068][    T9] input: Generic X-Box pad as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:179.65/input/input26
[  416.270720][T10926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  416.378701][T10926] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  416.542042][ T7625] Bluetooth: hci4: Frame reassembly failed (-84)
[  416.777528][T10958] binder: 10957:10958 ioctl c0306201 200000000080 returned -14
[  416.804582][T10958] binder: 10957:10958 ioctl c0306201 2000000003c0 returned -14
[  417.058255][   T56] usb 8-1: USB disconnect, device number 2
[  417.058317][    C0] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  417.058355][    C0] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  417.131662][   T56] xpad 8-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  418.590776][ T5785] Bluetooth: hci4: command 0x1003 tx timeout
[  418.599179][ T5786] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  418.671539][ T5786] Bluetooth: hci0: command tx timeout
[  418.947559][T10985] loop4: detected capacity change from 0 to 2048
[  419.003148][T10975] loop7: detected capacity change from 0 to 32768
[  419.078752][T10988] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  419.140803][T10975] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop7 scanned by syz.7.1419 (10975)
[  419.237436][T10979] loop1: detected capacity change from 0 to 32768
[  419.283779][T10975] BTRFS info (device loop7): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  419.309083][T10988] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  419.395682][T10975] BTRFS info (device loop7): using blake2b (blake2b-256-generic) checksum algorithm
[  419.457591][T10988] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4)
[  419.495656][T10979] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  419.507521][T10994] loop8: detected capacity change from 0 to 256
[  419.517324][T10975] BTRFS info (device loop7): use zlib compression, level 3
[  419.575763][T10975] BTRFS info (device loop7): using free space tree
[  419.601422][T10994] FAT-fs (loop8): Unrecognized mount option "0xffffffffffffffff" or missing value
[  419.643240][T10988] Remounting filesystem read-only
[  419.685782][T10985] NILFS (loop4): mounting fs with errors
[  419.714573][T10979] XFS (loop1): Ending clean mount
[  419.753364][   T27] audit: type=1800 audit(1790656576.892:353): pid=10985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1423" name="file1" dev="loop4" ino=15 res=0 errno=0
[  419.894372][T10988] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  420.017430][T10975] BTRFS info (device loop7): enabling ssd optimizations
[  420.061275][T10988] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4)
[  420.097404][T10975] BTRFS info (device loop7): auto enabling async discard
[  420.168844][T10988] Remounting filesystem read-only
[  420.690895][ T5775] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  420.701331][ T7055] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer
[  420.772731][ T7055] NILFS (loop4): discard dirty page: offset=0, ino=15
[  420.779571][ T7055] NILFS (loop4): discard dirty block: blocknr=22, size=1024
[  420.890781][ T7055] NILFS (loop4): discard dirty block: blocknr=0, size=1024
[  420.942705][ T7055] NILFS (loop4): discard dirty block: blocknr=0, size=1024
[  420.949986][ T7055] NILFS (loop4): discard dirty block: blocknr=0, size=1024
[  421.081445][ T7055] NILFS (loop4): discard dirty page: offset=0, ino=6
[  421.142236][ T7055] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  421.200745][ T7055] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  421.252400][ T7055] NILFS (loop4): discard dirty block: blocknr=37, size=1024
[  421.302308][ T7055] NILFS (loop4): discard dirty block: blocknr=38, size=1024
[  421.349121][ T7055] NILFS (loop4): discard dirty page: offset=0, ino=5
[  421.406383][ T7055] NILFS (loop4): discard dirty block: blocknr=41, size=1024
[  421.478864][ T7055] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  421.534545][T10470] BTRFS info (device loop7): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  421.559471][ T7055] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  421.621513][ T7055] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  421.684187][ T7055] NILFS (loop4): discard dirty page: offset=0, ino=4
[  421.735332][ T7055] NILFS (loop4): discard dirty block: blocknr=40, size=1024
[  421.768920][ T7055] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  421.847706][ T7055] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  421.947062][ T7055] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  422.051082][ T7055] NILFS (loop4): discard dirty page: offset=0, ino=3
[  422.057845][ T7055] NILFS (loop4): discard dirty block: blocknr=42, size=1024
[  422.215192][ T7055] NILFS (loop4): discard dirty block: blocknr=43, size=1024
[  422.277026][ T7055] NILFS (loop4): discard dirty block: blocknr=44, size=1024
[  422.345230][ T7055] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  422.421321][ T7055] NILFS (loop4): discard dirty page: offset=229376, ino=3
[  422.428880][ T7055] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  422.586055][ T7055] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  422.659267][ T7055] NILFS (loop4): discard dirty block: blocknr=50, size=1024
[  422.745906][ T7055] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  423.082944][T11048] jffs2: notice: (11048) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  423.192189][   T27] audit: type=1326 audit(1790656580.332:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11049 comm="syz.4.1426" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2fc39e159 code=0x7ff00000
[  423.408856][   T27] audit: type=1326 audit(1790656580.332:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11049 comm="syz.4.1426" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2fc39e159 code=0x7ff00000
[  423.603123][   T27] audit: type=1326 audit(1790656580.332:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11049 comm="syz.4.1426" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2fc39e159 code=0x7ff00000
[  423.791232][   T27] audit: type=1326 audit(1790656580.332:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11049 comm="syz.4.1426" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2fc39e159 code=0x7ff00000
[  423.954283][   T27] audit: type=1326 audit(1790656580.352:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11049 comm="syz.4.1426" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2fc39e159 code=0x7ff00000
[  424.007683][T11037] loop7: detected capacity change from 0 to 32768
[  424.070490][T11037] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 scanned by syz.7.1429 (11037)
[  424.179170][   T27] audit: type=1326 audit(1790656580.352:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11049 comm="syz.4.1426" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2fc39e159 code=0x7ff00000
[  424.224625][T11037] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  424.317383][T11037] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm
[  424.379258][T11037] BTRFS info (device loop7): setting nodatacow, compression disabled
[  424.422768][   T27] audit: type=1326 audit(1790656580.352:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11049 comm="syz.4.1426" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2fc39e159 code=0x7ff00000
[  424.501017][T11037] BTRFS info (device loop7): setting datasum, datacow enabled
[  424.508549][T11037] BTRFS info (device loop7): force clearing of disk cache
[  424.631449][T11037] BTRFS info (device loop7): turning on sync discard
[  424.638458][T11037] BTRFS warning (device loop7): excessive commit interval 43283
[  424.669819][   T27] audit: type=1326 audit(1790656580.352:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11049 comm="syz.4.1426" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2fc39e159 code=0x7ff00000
[  424.757103][T11037] BTRFS info (device loop7): enabling ssd optimizations
[  424.829215][T11037] BTRFS info (device loop7): using spread ssd allocation scheme
[  424.878446][ T5818] kworker/dying (5818) used greatest stack depth: 15832 bytes left
[  424.918957][   T27] audit: type=1326 audit(1790656580.352:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11049 comm="syz.4.1426" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2fc39e159 code=0x7ff00000
[  424.943857][T11037] BTRFS info (device loop7): not using ssd optimizations
[  424.991824][T11037] BTRFS info (device loop7): not using spread ssd allocation scheme
[  425.056633][T11037] BTRFS info (device loop7): using free space tree
[  425.123207][   T27] audit: type=1326 audit(1790656580.352:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11049 comm="syz.4.1426" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2fc39e159 code=0x7ff00000
[  425.234635][T11037] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR
[  425.257627][T11037] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR
[  425.374373][T11037] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR
[  425.385276][   T27] audit: type=1326 audit(1790656580.352:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11049 comm="syz.4.1426" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2fc39e159 code=0x7ff00000
[  425.518071][T11037] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR
[  425.518684][T11037] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR
[  425.603052][T11037] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR
[  425.677238][T11037] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR
[  425.708332][   T27] audit: type=1326 audit(1790656580.352:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11049 comm="syz.4.1426" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2fc39e159 code=0x7ff00000
[  425.814076][T11037] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR
[  425.814617][T11037] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[  425.865470][   T56] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  426.000782][T11037] BTRFS error (device loop7): open_ctree failed: -12
[  426.080813][   T27] audit: type=1326 audit(1790656580.352:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11049 comm="syz.4.1426" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2fc39e159 code=0x7ff00000
[  426.292559][   T56] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  426.313000][   T27] audit: type=1326 audit(1790656580.352:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11049 comm="syz.4.1426" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2fc39e159 code=0x7ff00000
[  426.379836][   T56] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  426.430315][ T6453] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  426.444721][ T5779] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 scanned by udevd (5779)
[  426.469553][   T56] usb 2-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00
[  426.560615][   T27] audit: type=1326 audit(1790656580.352:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11049 comm="syz.4.1426" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2fc39e159 code=0x7ff00000
[  426.585355][   T56] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  426.658714][   T56] spcp8x5 2-1:1.0: SPCP8x5 converter detected
[  426.701857][ T6453] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  426.741836][   T56] usb 2-1: SPCP8x5 converter now attached to ttyUSB0
[  426.780372][    T9] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  426.788687][ T6453] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  426.801910][   T27] audit: type=1326 audit(1790656580.352:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11049 comm="syz.4.1426" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2fc39e159 code=0x7ff00000
[  426.915094][ T6453] usb 5-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00
[  427.003469][ T6453] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  427.035861][    T9] usb 8-1: config index 0 descriptor too short (expected 23569, got 27)
[  427.063963][   T27] audit: type=1326 audit(1790656580.352:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11049 comm="syz.4.1426" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2fc39e159 code=0x7ff00000
[  427.109394][    T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  427.152951][ T6453] spcp8x5 5-1:1.0: SPCP8x5 converter detected
[  427.204745][    T9] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  427.232555][ T6453] usb 5-1: SPCP8x5 converter now attached to ttyUSB1
[  427.280048][    T9] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  427.319729][   T27] audit: type=1326 audit(1790656580.352:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11049 comm="syz.4.1426" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2fc39e159 code=0x7ff00000
[  427.379165][    T9] usb 8-1: Manufacturer: syz
[  427.437315][    T9] usb 8-1: config 0 descriptor??
[  427.618795][T11114] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -110)
[  427.684746][T11114] SPCP8x5 ttyUSB0: failed to set control lines: -32
[  427.749567][T11104] SPCP8x5 ttyUSB0: failed to set control lines: -32
[  427.779241][    T9] rc_core: IR keymap rc-hauppauge not found
[  427.847379][ T6453] usb 2-1: USB disconnect, device number 27
[  427.853601][    T9] Registered IR keymap rc-empty
[  427.880314][    T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0
[  427.907769][ T6453] SPCP8x5 ttyUSB0: failed to set control lines: -19
[  427.967190][    T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input27
[  427.994502][ T6453] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0
[  428.049380][ T6453] spcp8x5 2-1:1.0: device disconnected
[  428.086155][    T9] usb 8-1: USB disconnect, device number 3
[  429.250663][ T6453] usb 5-1: USB disconnect, device number 18
[  429.322979][ T6453] SPCP8x5 ttyUSB1: SPCP8x5 converter now disconnected from ttyUSB1
[  429.404916][ T6453] spcp8x5 5-1:1.0: device disconnected
[  429.917811][T11158] loop7: detected capacity change from 0 to 512
[  429.964881][T11158] EXT4-fs: inline encryption not supported
[  430.067074][T11158] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2
[  430.153524][T11158] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.1454: invalid indirect mapped block 2683928664 (level 1)
[  430.338393][T11158] EXT4-fs (loop7): Remounting filesystem read-only
[  430.369842][T11158] EXT4-fs (loop7): 1 truncate cleaned up
[  430.409967][T11173] gadgetfs: bound to dummy_udc driver
[  430.417473][T11158] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  431.022331][T10470] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  433.487360][T11223] loop7: detected capacity change from 0 to 8192
[  433.586813][T11223] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  433.684264][T11223] REISERFS (device loop7): found reiserfs format "3.5" with non-standard journal
[  433.772518][T11223] REISERFS (device loop7): using ordered data mode
[  433.836069][T11223] reiserfs: using flush barriers
[  433.917126][T11223] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  434.036846][T11223] REISERFS (device loop7): checking transaction log (loop7)
[  434.159521][T11223] REISERFS (device loop7): Using r5 hash to sort names
[  434.242046][T11223] REISERFS (device loop7): using 3.5.x disk format
[  434.315776][T11223] REISERFS (device loop7): Created .reiserfs_priv - reserved for xattr storage.
[  434.675693][T11253] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 3717, free_space(entry_count) 2
[  434.818519][T11253] REISERFS error (device loop7): vs-5150 search_by_key: invalid format found in block 532. Fsck?
[  434.921364][T11253] REISERFS (device loop7): Remounting filesystem read-only
[  435.519643][T11242] loop4: detected capacity change from 0 to 32768
[  435.856650][T11242] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  436.060309][T11242] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  436.068995][T11242] BTRFS info (device loop4): setting nodatacow, compression disabled
[  436.288929][T11242] BTRFS info (device loop4): force clearing of disk cache
[  436.370032][T11242] BTRFS info (device loop4): turning off barriers
[  436.378054][T11291] syzkaller1: entered promiscuous mode
[  436.438341][T11242] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8)
[  436.450285][T11291] syzkaller1: entered allmulticast mode
[  436.512574][T11242] BTRFS info (device loop4): use lzo compression, level 0
[  436.519758][T11242] BTRFS info (device loop4): disabling free space tree
[  436.591221][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  436.720353][T11242] BTRFS info (device loop4): enabling ssd optimizations
[  436.777253][T11242] BTRFS info (device loop4): using spread ssd allocation scheme
[  436.860372][T11242] BTRFS info (device loop4): not using ssd optimizations
[  436.916658][T11242] BTRFS info (device loop4): not using spread ssd allocation scheme
[  437.000574][T11242] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR
[  437.001159][T11242] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR
[  437.112713][T11242] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR
[  437.206721][T11242] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR
[  437.316978][T11242] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR
[  437.404690][T11242] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR
[  437.529587][T11242] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR
[  437.579592][T11315] FAULT_INJECTION: forcing a failure.
[  437.579592][T11315] name failslab, interval 1, probability 0, space 0, times 0
[  437.638676][T11242] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR
[  437.639272][T11242] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR
[  437.739703][T11242] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR
[  437.834517][T11315] CPU: 0 PID: 11315 Comm: syz.8.1489 Not tainted syzkaller #0
[  437.851780][T11315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  437.861883][T11315] Call Trace:
[  437.865200][T11315]  <TASK>
[  437.868163][T11315]  dump_stack_lvl+0x18c/0x250
[  437.872880][T11315]  ? show_regs_print_info+0x20/0x20
[  437.878121][T11315]  ? load_image+0x420/0x420
[  437.882655][T11315]  ? __might_sleep+0xe0/0xe0
[  437.887273][T11315]  ? __lock_acquire+0x7d80/0x7d80
[  437.892344][T11315]  ? lock_chain_count+0x20/0x20
[  437.897215][T11315]  should_fail_ex+0x394/0x4c0
[  437.901936][T11315]  should_failslab+0x9/0x20
[  437.906482][T11315]  slab_pre_alloc_hook+0x59/0x300
[  437.911534][T11315]  ? _raw_spin_unlock+0x40/0x40
[  437.916405][T11315]  ? __request_module+0x2d1/0x600
[  437.921449][T11315]  __kmem_cache_alloc_node+0x53/0x250
[  437.926887][T11315]  ? __request_module+0x2d1/0x600
[  437.931997][T11315]  kmalloc_trace+0x2a/0xe0
[  437.936448][T11315]  __request_module+0x2d1/0x600
[  437.941345][T11315]  ? module_enforce_rwx_sections+0x150/0x150
[  437.947408][T11315]  ? inet6_create+0x80/0x1120
[  437.952143][T11315]  ? rcu_read_unlock+0x8c/0xa0
[  437.956929][T11315]  inet6_create+0x446/0x1120
[  437.961547][T11315]  ? inet6_create+0x80/0x1120
[  437.966274][T11315]  __sock_create+0x49e/0x940
[  437.970982][T11315]  __sys_socket+0xd7/0x1b0
[  437.975439][T11315]  __x64_sys_socket+0x7a/0x90
[  437.980142][T11315]  do_syscall_64+0x55/0xb0
[  437.984579][T11315]  ? clear_bhb_loop+0x40/0x90
[  437.989281][T11315]  ? clear_bhb_loop+0x40/0x90
[  437.993988][T11315]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  437.999915][T11315] RIP: 0033:0x7f0a8379e159
[  438.004361][T11315] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  438.024026][T11315] RSP: 002b:00007f0a819f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  438.032469][T11315] RAX: ffffffffffffffda RBX: 00007f0a83a25fa0 RCX: 00007f0a8379e159
[  438.040589][T11315] RDX: 00000000000000c6 RSI: 0000000000000006 RDI: 000000000000000a
[  438.048610][T11315] RBP: 00007f0a8383506b R08: 0000000000000000 R09: 0000000000000000
[  438.056614][T11315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  438.064604][T11315] R13: 00007f0a83a26038 R14: 00007f0a83a25fa0 R15: 00007ffde4545c98
[  438.072613][T11315]  </TASK>
[  438.078423][T11242] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR
[  438.079105][T11242] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR
[  438.130774][T11242] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[  438.199727][T11242] BTRFS error (device loop4): open_ctree failed: -12
[  438.245834][ T5792] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by udevd (5792)
[  439.508907][T11346] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  440.437183][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  440.450027][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  440.637428][T11378] ip_tables: iptables: counters copy to user failed while replacing table
[  441.385383][T11391] loop8: detected capacity change from 0 to 764
[  443.158849][T11432] 
[  444.826210][T11465] loop1: detected capacity change from 0 to 8192
[  444.915519][T11465] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  444.974189][T11444] loop8: detected capacity change from 0 to 32768
[  445.035628][T11465] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal
[  445.072039][T11444] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop8 scanned by syz.8.1531 (11444)
[  445.118394][T11465] REISERFS (device loop1): using ordered data mode
[  445.158810][T11465] reiserfs: using flush barriers
[  445.206809][T11444] BTRFS info (device loop8): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  445.237296][T11465] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  445.300349][T11444] BTRFS info (device loop8): using blake2b (blake2b-256-generic) checksum algorithm
[  445.340418][T10794] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  445.362783][T11465] REISERFS (device loop1): checking transaction log (loop1)
[  445.373947][T11444] BTRFS info (device loop8): use zlib compression, level 3
[  445.441116][T11465] REISERFS (device loop1): Using r5 hash to sort names
[  445.448055][T11465] REISERFS (device loop1): using 3.5.x disk format
[  445.457920][T11444] BTRFS info (device loop8): using free space tree
[  445.547716][T11465] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  445.574865][T10794] usb 8-1: too many configurations: 15, using maximum allowed: 8
[  445.671836][T11444] BTRFS info (device loop8): enabling ssd optimizations
[  445.698184][T10794] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  445.723762][T11444] BTRFS info (device loop8): auto enabling async discard
[  445.762022][T10794] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  445.770076][T10794] usb 8-1: Product: syz
[  445.805832][T11465] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 3717, free_space(entry_count) 2
[  445.861503][T10794] usb 8-1: Manufacturer: syz
[  445.876411][T10794] usb 8-1: SerialNumber: syz
[  446.021447][T11465] REISERFS error (device loop1): vs-5150 search_by_key: invalid format found in block 532. Fsck?
[  446.135552][T11465] REISERFS (device loop1): Remounting filesystem read-only
[  446.244703][T10794] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32
[  446.274304][ T4541] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  446.365002][T10794] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32
[  446.937912][ T4541] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  446.961886][T11508] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1544'.
[  446.984312][T10512] BTRFS info (device loop8): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  447.117277][T10794] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71
[  447.260213][T10794] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  447.370062][T10794] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  447.445369][ T4541] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  447.535139][T10794] lan78xx: probe of 8-1:1.0 failed with error -71
[  447.635542][T10794] usb 8-1: USB disconnect, device number 4
[  447.750355][    T9] usb 2-1: new full-speed USB device number 28 using dummy_hcd
[  448.044220][    T9] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 10
[  448.151050][    T9] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid maxpacket 169, setting to 64
[  448.239084][    T9] usb 2-1: config 0 interface 0 has no altsetting 0
[  448.261083][ T6453] usb 5-1: new full-speed USB device number 19 using dummy_hcd
[  448.311965][ T4541] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  448.337836][    T9] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  448.387108][    T9] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  448.440504][    T9] usb 2-1: Product: syz
[  448.444720][    T9] usb 2-1: Manufacturer: syz
[  448.496486][    T9] usb 2-1: SerialNumber: syz
[  448.523486][ T6453] usb 5-1: config 127 has an invalid interface number: 57 but max is 0
[  448.547944][    T9] usb 2-1: config 0 descriptor??
[  448.578319][ T6453] usb 5-1: config 127 has no interface number 0
[  448.610067][T11516] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  448.620182][   T56] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  448.640535][ T6453] usb 5-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64
[  448.735136][    T9] usb 2-1: selecting invalid altsetting 0
[  448.758957][ T6453] usb 5-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b
[  448.847057][ T6453] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  448.867778][   T56] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  448.926191][T11516] usb 2-1: BOGUS urb xfer, pipe 0 != type 1
[  448.950810][ T6453] usb 5-1: Product: syz
[  448.955056][ T6453] usb 5-1: Manufacturer: syz
[  448.970747][   T56] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  449.067603][ T6453] usb 5-1: SerialNumber: syz
[  449.099833][   T56] usb 8-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00
[  449.159373][T11532] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  449.182141][ T9163] usb 2-1: USB disconnect, device number 28
[  449.220494][   T56] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  449.352984][ T5790] udevd[5790]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  449.369972][   T56] spcp8x5 8-1:1.0: SPCP8x5 converter detected
[  449.497576][   T56] usb 8-1: SPCP8x5 converter now attached to ttyUSB0
[  449.685132][T11532] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  449.801048][T11537] SPCP8x5 ttyUSB0: failed to set control lines: -110
[  449.856539][T11537] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32)
[  449.941633][T11537] SPCP8x5 ttyUSB0: failed to set control lines: -32
[  449.975898][ T6453] asix 5-1:127.57 (unnamed net_device) (uninitialized): invalid hw address, using random
[  450.093059][T11537] SPCP8x5 ttyUSB0: unsupported baudrate, using 9600
[  450.146758][T11537] SPCP8x5 ttyUSB0: Set UART format 0x0 failed (error = -32)
[  450.170998][ T6453] asix 5-1:127.57 (unnamed net_device) (uninitialized): invalid PHY address: 33
[  450.438552][ T6453] usb 5-1: USB disconnect, device number 19
[  451.283621][ T6453] usb 8-1: USB disconnect, device number 5
[  451.362841][ T6453] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0
[  451.438535][ T6453] spcp8x5 8-1:1.0: device disconnected
[  451.892329][T11575] loop8: detected capacity change from 0 to 256
[  451.946592][T11575] exfat: Deprecated parameter 'utf8'
[  452.006699][T11575] exfat: Deprecated parameter 'utf8'
[  452.134746][T11575] exFAT-fs (loop8): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  452.148814][T11578] FAULT_INJECTION: forcing a failure.
[  452.148814][T11578] name failslab, interval 1, probability 0, space 0, times 0
[  452.271334][T11578] CPU: 0 PID: 11578 Comm: syz.7.1559 Not tainted syzkaller #0
[  452.278859][T11578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  452.288971][T11578] Call Trace:
[  452.292274][T11578]  <TASK>
[  452.295233][T11578]  dump_stack_lvl+0x18c/0x250
[  452.299943][T11578]  ? show_regs_print_info+0x20/0x20
[  452.305170][T11578]  ? load_image+0x420/0x420
[  452.309698][T11578]  ? __might_sleep+0xe0/0xe0
[  452.314312][T11578]  ? __lock_acquire+0x7d80/0x7d80
[  452.319367][T11578]  should_fail_ex+0x394/0x4c0
[  452.324073][T11578]  should_failslab+0x9/0x20
[  452.328666][T11578]  slab_pre_alloc_hook+0x59/0x300
[  452.333754][T11578]  ? do_kimage_alloc_init+0x4e/0x290
[  452.339079][T11578]  __kmem_cache_alloc_node+0x53/0x250
[  452.344487][T11578]  ? __lock_acquire+0x7d80/0x7d80
[  452.349554][T11578]  ? do_kimage_alloc_init+0x4e/0x290
[  452.354880][T11578]  kmalloc_trace+0x2a/0xe0
[  452.359339][T11578]  do_kimage_alloc_init+0x4e/0x290
[  452.364493][T11578]  do_kexec_load+0xac/0x6d0
[  452.369034][T11578]  __se_sys_kexec_load+0x134/0x160
[  452.374184][T11578]  do_syscall_64+0x55/0xb0
[  452.378625][T11578]  ? clear_bhb_loop+0x40/0x90
[  452.383319][T11578]  ? clear_bhb_loop+0x40/0x90
[  452.388153][T11578]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  452.394108][T11578] RIP: 0033:0x7efd9319e159
[  452.398545][T11578] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  452.418180][T11578] RSP: 002b:00007efd94118028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6
[  452.426619][T11578] RAX: ffffffffffffffda RBX: 00007efd93425fa0 RCX: 00007efd9319e159
[  452.434613][T11578] RDX: 00002000000002c0 RSI: 0000000000000001 RDI: 0000000000000002
[  452.442602][T11578] RBP: 00007efd9323506b R08: 0000000000000000 R09: 0000000000000000
[  452.450585][T11578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  452.458574][T11578] R13: 00007efd93426038 R14: 00007efd93425fa0 R15: 00007ffce1c15808
[  452.466620][T11578]  </TASK>
[  452.599820][T11583] binder: 11581:11583 ioctl c0306201 200000000480 returned -14
[  452.877491][ T4541] mac80211_hwsim hwsim14 wlan0 (unregistering): left promiscuous mode
[  453.157945][ T4541] team0: left promiscuous mode
[  453.204021][ T4541] team_slave_0: left promiscuous mode
[  453.253213][ T4541] team_slave_1: left promiscuous mode
[  453.540300][ T4541] hsr_slave_0: left promiscuous mode
[  453.610653][ T4541] hsr_slave_1: left promiscuous mode
[  453.652625][T10794] IPVS: starting estimator thread 0...
[  453.673791][T11603] IPVS: fo: FWM 3 0x00000003 - no destination available
[  453.734934][    C0] IPVS: fo: FWM 3 0x00000003 - no destination available
[  453.790499][T11604] IPVS: using max 26 ests per chain, 62400 per kthread
[  453.809112][ T4541] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  453.881744][ T4541] batman_adv: batadv0: Removing interface: batadv_slave_0
[  454.024156][ T4541] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  454.100182][ T4541] batman_adv: batadv0: Removing interface: batadv_slave_1
[  454.181651][ T4541] bridge_slave_1: left allmulticast mode
[  454.188567][ T4541] bridge_slave_1: left promiscuous mode
[  454.293773][ T4541] bridge0: port 2(bridge_slave_1) entered disabled state
[  454.382345][ T4541] bridge_slave_0: left allmulticast mode
[  454.405431][T11617] mmap: syz.7.1573 (11617) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  454.450846][ T4541] bridge_slave_0: left promiscuous mode
[  454.476339][ T4541] bridge0: port 1(bridge_slave_0) entered disabled state
[  454.754044][ T4541] veth1_macvtap: left promiscuous mode
[  454.794908][ T4541] veth0_macvtap: left promiscuous mode
[  454.839305][ T4541] veth1_vlan: left promiscuous mode
[  454.878202][ T4541] veth0_vlan: left promiscuous mode
[  455.189858][T11635] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  455.415885][T11639] loop7: detected capacity change from 0 to 2048
[  455.483077][T11639] UDF-fs: error (device loop7): udf_process_sequence: Primary Volume Descriptor not found!
[  455.504177][T11641] loop4: detected capacity change from 0 to 8
[  455.558571][T11639] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  456.296061][T11644] loop4: detected capacity change from 0 to 4096
[  456.347572][T11644] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512).
[  456.640903][   T27] kauditd_printk_skb: 123 callbacks suppressed
[  456.640920][   T27] audit: type=1800 audit(1790656613.752:495): pid=11644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1582" name="file1" dev="loop4" ino=30 res=0 errno=0
[  456.774949][T11644] ntfs3: loop4: ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" failed to parse mft record
[  456.993863][T11644] ntfs3: loop4: ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" failed to parse mft record
[  457.167686][T11644] ntfs3: loop4: ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" failed to parse mft record
[  458.546196][ T4541] team0 (unregistering): Port device team_slave_1 removed
[  458.637608][ T4541] team0 (unregistering): Port device team_slave_0 removed
[  458.736083][ T4541] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  458.827762][ T4541] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  459.386246][T11665] loop7: detected capacity change from 0 to 2048
[  459.422920][T11665] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  460.314006][ T4541] bond0 (unregistering): Released all slaves
[  460.400240][ T6453] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  460.552447][T11623] netlink: 'syz.1.1575': attribute type 1 has an invalid length.
[  460.610470][ T6453] usb 8-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  460.650437][ T6453] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  460.663649][T11623] 8021q: adding VLAN 0 to HW filter on device bond1
[  460.676202][ T5786] Bluetooth: hci3: command 0x0406 tx timeout
[  460.691511][ T6453] usb 8-1: config 0 descriptor??
[  460.754548][ T6453] gspca_main: cpia1-2.14.0 probing 0813:0001
[  460.768407][T11626] bond1: (slave geneve2): making interface the new active one
[  460.799539][T11626] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  461.172222][ T6453] cpia1 8-1:0.0: unexpected state after lo power cmd: 00
[  461.783140][ T6453] gspca_cpia1: usb_control_msg 05, error -71
[  461.835843][ T6453] cpia1 8-1:0.0: unexpected systemstate: 00
[  461.855539][ T4541] IPVS: stop unused estimator thread 0...
[  461.938306][ T6453] usb 8-1: USB disconnect, device number 6
[  462.034939][T10794] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  462.095339][T11685] ftl_cs: FTL header not found.
[  462.310356][T10794] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  462.377128][T10794] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  462.427524][T11685] block2mtd: mtd1: [/dev/ram0] erase_size = 128KiB [131072]
[  462.474584][T10794] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  462.569624][T10794] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  462.629382][T10794] usb 2-1: config 0 descriptor??
[  462.737523][T11703] loop7: detected capacity change from 0 to 128
[  462.820487][T11703] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002]
[  462.909454][T11703] System zones: 1-3, 19-19, 35-36
[  462.961334][T11703] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  463.101867][T11703] ext4 filesystem being mounted at /47/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  463.152188][T10794] pyra 0003:1E7D:2CF6.0014: unknown main item tag 0x2
[  463.211293][T10794] pyra 0003:1E7D:2CF6.0014: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0
[  463.240429][ T5785] Bluetooth: hci2: command 0x0406 tx timeout
[  463.252404][T11703] EXT4-fs warning (device loop7): ext4_group_extend:1892: will only finish group (8193 blocks, 8129 new)
[  463.339216][T10794] pyra 0003:1E7D:2CF6.0014: couldn't init struct pyra_device
[  463.385948][T11703] EXT4-fs warning (device loop7): ext4_group_extend:1897: can't read last block, resize aborted
[  463.413587][T10794] pyra 0003:1E7D:2CF6.0014: couldn't install mouse
[  463.467519][T10794] pyra: probe of 0003:1E7D:2CF6.0014 failed with error -71
[  463.556092][T10794] usb 2-1: USB disconnect, device number 29
[  463.627944][T10470] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  463.656762][T11716] fido_id[11716]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  463.989219][T11725] loop7: detected capacity change from 0 to 512
[  464.571980][T11733] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[10512] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[11733]
[  464.737318][ T5786] Bluetooth: hci3: ACL packet for unknown connection handle 201
[  464.957034][ T9163] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  465.160184][ T9163] usb 2-1: Using ep0 maxpacket: 32
[  465.189197][T11743] loop4: detected capacity change from 0 to 2048
[  465.206062][ T9163] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  465.244100][ T9163] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  465.332453][ T9163] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  465.342874][T11748] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  465.438780][ T9163] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  465.508356][ T9163] usb 2-1: config 0 descriptor??
[  465.562243][ T9163] hub 2-1:0.0: USB hub found
[  465.687019][T11748] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  465.747353][T11748] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4)
[  465.805299][ T9163] hub 2-1:0.0: 1 port detected
[  465.832135][T11748] Remounting filesystem read-only
[  465.980296][ T7055] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer
[  466.026448][ T7055] NILFS (loop4): discard dirty page: offset=0, ino=15
[  466.085022][ T7055] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  466.152217][ T7055] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  466.221029][ T7055] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  466.258614][ T7055] NILFS (loop4): discard dirty block: blocknr=0, size=1024
[  466.292903][ T7055] NILFS (loop4): discard dirty page: offset=0, ino=6
[  466.337847][ T7055] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  466.363615][ T7055] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  466.403780][ T7055] NILFS (loop4): discard dirty block: blocknr=37, size=1024
[  466.473962][ T7055] NILFS (loop4): discard dirty block: blocknr=38, size=1024
[  466.516282][ T9163] hub 2-1:0.0: activate --> -90
[  466.544530][ T7055] NILFS (loop4): discard dirty page: offset=0, ino=5
[  466.609052][ T7055] NILFS (loop4): discard dirty block: blocknr=41, size=1024
[  466.657223][ T7055] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  466.724581][ T7055] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  466.776683][ T7055] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  466.829631][ T7055] NILFS (loop4): discard dirty page: offset=0, ino=4
[  466.854036][T11772] loop7: detected capacity change from 0 to 4096
[  466.870555][ T7055] NILFS (loop4): discard dirty block: blocknr=40, size=1024
[  466.906517][ T7055] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  466.923420][T10794] usb 2-1: USB disconnect, device number 30
[  466.967156][T11772] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  466.989013][ T7055] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  467.039556][ T7055] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  467.093913][ T7055] NILFS (loop4): discard dirty page: offset=0, ino=3
[  467.131963][ T7055] NILFS (loop4): discard dirty block: blocknr=42, size=1024
[  467.166345][ T7055] NILFS (loop4): discard dirty block: blocknr=43, size=1024
[  467.214670][ T7055] NILFS (loop4): discard dirty block: blocknr=44, size=1024
[  467.273368][T10470] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  467.284586][ T7055] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  467.329074][ T7055] NILFS (loop4): discard dirty page: offset=229376, ino=3
[  467.379584][ T7055] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  467.436937][ T7055] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  467.515706][ T7055] NILFS (loop4): discard dirty block: blocknr=50, size=1024
[  467.593802][ T7055] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  468.239384][T11791] loop4: detected capacity change from 0 to 4096
[  468.930503][T10794] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  469.112547][ T6453] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  469.134536][T10794] usb 8-1: Using ep0 maxpacket: 16
[  469.170552][T10794] usb 8-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  469.213745][T10794] usb 8-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  469.296004][T10794] usb 8-1: config 0 interface 0 has no altsetting 0
[  469.344963][T10794] usb 8-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00
[  469.360295][ T6453] usb 2-1: Using ep0 maxpacket: 8
[  469.380666][T11818] loop4: detected capacity change from 0 to 256
[  469.397421][ T6453] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  469.410221][T10794] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  469.421709][T11818] exfat: Deprecated parameter 'utf8'
[  469.427125][T11818] exfat: Deprecated parameter 'utf8'
[  469.440398][ T6453] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  469.500878][T10794] usb 8-1: config 0 descriptor??
[  469.513266][ T6453] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  469.593910][T11818] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  469.616633][ T6453] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  469.669543][ T6453] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  469.779610][ T6453] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  469.838859][ T6453] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  469.987507][T11808] loop8: detected capacity change from 0 to 32768
[  470.027461][T10794] input: HID 04f3:074d as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:04F3:074D.0015/input/input28
[  470.078500][T11808] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 scanned by syz.8.1630 (11808)
[  470.159202][ T6453] usb 2-1: GET_CAPABILITIES returned 0
[  470.202048][T10794] elan 0003:04F3:074D.0015: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 04f3:074d] on usb-dummy_hcd.7-1/input0
[  470.246656][ T6453] usbtmc 2-1:16.0: can't read capabilities
[  470.254725][T11808] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  470.379725][T11808] BTRFS info (device loop8): using crc32c (crc32c-intel) checksum algorithm
[  470.467063][T11808] BTRFS info (device loop8): using free space tree
[  470.480022][T10794] usb 2-1: USB disconnect, device number 31
[  470.829883][T11808] BTRFS info (device loop8): enabling ssd optimizations
[  470.895016][T11808] BTRFS info (device loop8): auto enabling async discard
[  471.954584][   T56] usb 8-1: USB disconnect, device number 7
[  471.999654][T10512] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  472.494119][ T5779] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop8 scanned by udevd (5779)
[  473.090708][   T56] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  473.351627][   T56] usb 9-1: config 0 has no interfaces?
[  473.377347][   T56] usb 9-1: New USB device found, idVendor=047e, idProduct=ffff, bcdDevice= 0.00
[  473.477042][   T56] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  473.592976][   T56] usb 9-1: config 0 descriptor??
[  473.961248][   T56] usb 9-1: USB disconnect, device number 2
[  474.086202][T11889] loop7: detected capacity change from 0 to 1024
[  474.189528][T11889] hfsplus: invalid length 32517 has been corrected to 255
[  474.436544][T11892] io-wq is not configured for unbound workers
[  474.830524][ T7643] hfsplus: b-tree write err: -5, ino 20
[  475.505891][T11884] loop1: detected capacity change from 0 to 32768
[  475.573518][T11884] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10
[  475.907378][ T5792] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10
[  476.541451][T11927] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1656'.
[  476.672767][T11927] vlan2: entered allmulticast mode
[  476.730276][T11927] macsec0: entered allmulticast mode
[  476.769195][T11927] veth1_macvtap: entered allmulticast mode
[  476.817733][T11927] bridge0: port 3(vlan2) entered blocking state
[  476.871087][T11927] bridge0: port 3(vlan2) entered disabled state
[  476.926489][T11927] vlan2: entered promiscuous mode
[  476.963392][T11927] macsec0: entered promiscuous mode
[  477.795577][T11958] loop1: detected capacity change from 0 to 32768
[  477.907297][T11958] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[  477.923291][T11958] JBD2: Ignoring recovery information on journal
[  477.993133][T11958] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  478.208344][   T27] audit: type=1800 audit(1790656635.342:496): pid=11958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1663" name="file0" dev="loop1" ino=17058 res=0 errno=0
[  478.671034][T11970] loop4: detected capacity change from 0 to 512
[  478.816345][T11970] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  478.921211][ T9163] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  479.047723][T11968] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.1667: bg 0: block 67: padding at end of block bitmap is not set
[  479.156153][T11968] EXT4-fs (loop4): Remounting filesystem read-only
[  479.170641][ T9163] usb 9-1: Using ep0 maxpacket: 8
[  479.189626][T11968] EXT4-fs (loop4): error restoring inline_data for inode -- potential data loss! (inode 15, error -5)
[  479.213586][ T9163] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  479.228633][ T5775] ocfs2: Unmounting device (7,1) on (node local)
[  479.273936][ T9163] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2
[  479.360289][ T9163] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[  479.439160][ T9163] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[  479.524609][ T9163] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  479.535905][ T7055] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  479.582740][ T9163] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  479.664027][ T9163] hub 9-1:1.0: bad descriptor, ignoring hub
[  479.740247][ T9163] hub: probe of 9-1:1.0 failed with error -5
[  479.746812][ T9163] cdc_wdm 9-1:1.0: skipping garbage
[  479.866680][ T9163] cdc_wdm 9-1:1.0: skipping garbage
[  479.927482][ T9163] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device
[  479.984595][ T9163] cdc_wdm 9-1:1.0: Unknown control protocol
[  480.227368][T11987] loop7: detected capacity change from 0 to 4096
[  480.378634][ T9163] usb 9-1: reset high-speed USB device number 3 using dummy_hcd
[  480.447464][T11992] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  480.793039][ T9163] usb 9-1: device firmware changed
[  480.848218][ T9163] usb 9-1: USB disconnect, device number 3
[  480.900959][   T56] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  481.149268][   T56] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  481.224046][   T56] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  481.270460][ T9163] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  481.314752][   T56] usb 2-1: config 0 interface 0 has no altsetting 0
[  481.367484][   T56] usb 2-1: New USB device found, idVendor=06a3, idProduct=0cd0, bcdDevice= 0.00
[  481.425813][   T56] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  481.487161][   T56] usb 2-1: config 0 descriptor??
[  481.500223][ T9163] usb 9-1: Using ep0 maxpacket: 8
[  481.518021][T12011] loop4: detected capacity change from 0 to 1024
[  481.551461][ T9163] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  481.631287][T12011] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  481.643610][ T9163] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2
[  481.738722][ T9163] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  481.882637][ T9163] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  481.926151][   T27] audit: type=1800 audit(1790656639.052:497): pid=12016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1677" name="bus" dev="loop4" ino=902 res=0 errno=0
[  482.004786][   T56] input: HID 06a3:0cd0 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:06A3:0CD0.0016/input/input29
[  482.030418][ T9163] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  482.077916][T12018] loop8: detected capacity change from 0 to 128
[  482.158900][ T9163] usb 9-1: can't set config #1, error -71
[  482.188946][T12018] FAT-fs (loop8): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  482.274103][ T9163] usb 9-1: USB disconnect, device number 4
[  482.326005][   T56] saitek 0003:06A3:0CD0.0016: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 06a3:0cd0] on usb-dummy_hcd.1-1/input0
[  482.984509][T12030] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 1)
[  483.072781][    T9] usb 2-1: USB disconnect, device number 32
[  483.101059][T12030] FAT-fs (loop8): Filesystem has been set read-only
[  483.152278][T12030] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 1)
[  483.233209][T12030] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 1)
[  483.300501][T12030] FAT-fs (loop8): error, clusters badly computed (1 != 2)
[  483.428789][T10512] FAT-fs (loop8): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  484.188348][T12053] xt_hashlimit: size too large, truncated to 1048576
[  484.610815][    T9] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  484.830804][    T9] usb 8-1: Using ep0 maxpacket: 8
[  484.873700][    T9] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  484.927098][    T9] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[  484.989187][    T9] usb 8-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40
[  485.031434][    T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  485.069988][    T9] usb 8-1: Product: syz
[  485.099815][    T9] usb 8-1: Manufacturer: syz
[  485.134637][    T9] usb 8-1: SerialNumber: syz
[  485.416823][    T9] usb 8-1: unit 6 not found!
[  485.473466][    T9] usb 8-1: USB disconnect, device number 8
[  485.580989][ T5779] udevd[5779]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  486.463117][T12070] loop1: detected capacity change from 0 to 32768
[  486.585639][T12070] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  487.112508][ T5775] ocfs2: Unmounting device (7,1) on (node local)
[  487.157431][ T5785] Bluetooth: hci4: command 0x1003 tx timeout
[  487.166496][ T5786] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  488.011398][ T9163] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  488.233847][T12095] loop1: detected capacity change from 0 to 1024
[  488.271658][ T9163] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  488.319611][ T9163] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  488.416979][T12095] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  488.477798][ T9163] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00
[  488.512019][T12082] loop7: detected capacity change from 0 to 40427
[  488.539028][ T9163] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  488.620229][ T9163] usb 5-1: Product: syz
[  488.634814][T12082] F2FS-fs (loop7): Wrong segment_count / block_count (31 > 0)
[  488.657323][T12095] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters
[  488.681156][ T9163] usb 5-1: Manufacturer: syz
[  488.685847][ T9163] usb 5-1: SerialNumber: syz
[  488.741614][T12082] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock
[  488.844432][T12082] F2FS-fs (loop7): invalid crc value
[  488.902602][T12082] F2FS-fs (loop7): Found nat_bits in checkpoint
[  489.030608][T12095] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  489.286312][T12095] EXT4-fs (loop1): This should not happen!! Data will be lost
[  489.286312][T12095] 
[  489.348779][T12082] F2FS-fs (loop7): Try to recover 2th superblock, ret: 0
[  489.385459][T12095] EXT4-fs (loop1): Total free blocks count 0
[  489.402485][T12082] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  489.441840][T12095] EXT4-fs (loop1): Free/Dirty block details
[  489.486989][T12109] ip6erspan0: entered promiscuous mode
[  489.493090][T12095] EXT4-fs (loop1): free_blocks=20480
[  489.530499][T12095] EXT4-fs (loop1): dirty_blocks=144
[  489.563868][T12095] EXT4-fs (loop1): Block reservation details
[  489.603080][T12095] EXT4-fs (loop1): i_reserved_data_blocks=9
[  489.677054][T12082] syz.7.1696: attempt to access beyond end of device
[  489.677054][T12082] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  489.813089][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  489.905220][    C0] usb 5-1: invalid cport id 160 received
[  490.080051][T10470] syz-executor: attempt to access beyond end of device
[  490.080051][T10470] loop7: rw=2049, sector=45112, nr_sectors = 8 limit=40427
[  490.190010][T12119] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1703'.
[  490.265494][ T6453] usb 5-1: USB disconnect, device number 20
[  490.271917][    C0] usb 5-1: failed to resubmit arpc in-urb: -19
[  490.271955][    C0] usb 5-1: failed to resubmit arpc in-urb: -19
[  490.271984][    C0] usb 5-1: failed to resubmit in-urb: -19
[  490.272012][    C0] usb 5-1: failed to resubmit in-urb: -19
[  490.272039][    C0] usb 5-1: failed to resubmit in-urb: -19
[  490.272067][    C0] usb 5-1: failed to resubmit in-urb: -19
[  490.311816][T10470] F2FS-fs (loop7): Remounting filesystem read-only
[  490.370461][T12119] openvswitch: netlink: Geneve option length err (len 3060, max 255).
[  490.566505][ T6453] usb 5-1: failed to send ARPC request 4: -19
[  490.637213][ T6453] usb 5-1: failed to execute ARPC: -19
[  490.700281][ T6453] usb 5-1: failed to flush cport 0: -19
[  490.779978][ T6453] greybus greybus1: 0/0:0: failed to flush host cport: -19
[  490.842071][ T6453] usb 5-1: failed to send ARPC request 2: -19
[  490.895156][ T6453] usb 5-1: failed to execute ARPC: -19
[  490.934753][ T6453] usb 5-1: failed to quiesce cport 0: -19 (0)
[  491.010304][ T6453] greybus greybus1: 0/0:0: failed to quiesce host cport: -19
[  491.017864][ T6453] usb 5-1: failed to send ARPC request 3: -19
[  491.082301][   T27] audit: type=1326 audit(1790656648.202:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12130 comm="syz.8.1707" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0a8379e159 code=0x0
[  491.146921][ T6453] usb 5-1: failed to execute ARPC: -19
[  491.216993][ T6453] usb 5-1: failed to clear cport 0: -19
[  491.251136][ T6453] greybus greybus1: 0/0:0: failed to clear host cport: -19
[  491.388092][T12142] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1709'.
[  491.747435][T12147] gadgetfs: bound to dummy_udc driver
[  492.258031][T12158] loop8: detected capacity change from 0 to 1024
[  493.011195][T12174] overlayfs: invalid redirect ((null))
[  493.090809][ T6453] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  493.298521][ T6453] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  493.360194][ T6453] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  493.396984][ T6453] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  493.434837][ T6453] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  493.466372][ T6453] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[  493.514266][ T6453] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  494.819920][ T6453] gud 2-1:1.0: USB-2: Failed to add properties (ret=-71)
[  494.862580][ T6453] gud 2-1:1.0: Failed to get connectors (error=-71)
[  494.910483][ T6453] gud: probe of 2-1:1.0 failed with error -71
[  495.047114][ T6453] usb 2-1: USB disconnect, device number 33
[  495.964636][T12223] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1735'.
[  498.104990][T12264] tipc: Started in network mode
[  498.143054][T12264] tipc: Node identity ac1414aa, cluster identity 4711
[  498.167439][T12264] tipc: New replicast peer: 172.20.20.187
[  498.214825][T12264] tipc: Enabled bearer <udp:syz0>, priority 10
[  498.329846][T12266] bond2: entered promiscuous mode
[  498.393789][T12266] 8021q: adding VLAN 0 to HW filter on device bond2
[  498.646267][T12273] loop8: detected capacity change from 0 to 1024
[  499.087680][T12273] hfsplus: request for non-existent node 33554434 in B*Tree
[  499.220334][T12273] hfsplus: request for non-existent node 33554434 in B*Tree
[  499.286379][T12273] hfsplus: request for non-existent node 33554434 in B*Tree
[  499.347564][T12273] hfsplus: request for non-existent node 33554434 in B*Tree
[  499.400525][   T56] tipc: Node number set to 2886997162
[  499.661759][   T60] hfsplus: request for non-existent node 33554434 in B*Tree
[  499.707095][   T60] hfsplus: request for non-existent node 33554434 in B*Tree
[  499.940794][   T56] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  500.044175][T12291] loop8: detected capacity change from 0 to 1024
[  500.116762][T12291] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  500.190605][   T56] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  500.253374][T12291] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  500.265338][   T56] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64
[  500.349751][   T56] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  500.454136][T12291] EXT4-fs error (device loop8): ext4_map_blocks:720: inode #15: block 3: comm syz.8.1753: lblock 3 mapped to illegal pblock 3 (length 3)
[  500.476528][   T56] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00
[  500.527600][   T56] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  500.631768][T12291] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  500.725387][T12291] EXT4-fs (loop8): This should not happen!! Data will be lost
[  500.725387][T12291] 
[  500.811809][T12290] EXT4-fs error (device loop8): ext4_map_blocks:610: inode #15: block 3: comm syz.8.1753: lblock 3 mapped to illegal pblock 3 (length 1)
[  500.882627][T12283] loop4: detected capacity change from 0 to 32768
[  500.942310][T12283] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10
[  500.977868][T12298] EXT4-fs error (device loop8): ext4_map_blocks:610: inode #15: block 3: comm syz.8.1753: lblock 3 mapped to illegal pblock 3 (length 1)
[  501.014090][   T56] cxacru 2-1:1.0: send of cm 0x91 failed (-71)
[  501.051786][   T56] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71
[  501.093567][T12298] EXT4-fs error (device loop8): ext4_map_blocks:610: inode #15: block 3: comm syz.8.1753: lblock 3 mapped to illegal pblock 3 (length 1)
[  501.130386][   T56] ATM dev 0: usbatm_atm_init: atm_start failed: -71!
[  501.179799][   T56] cxacru: probe of 2-1:1.0 failed with error -71
[  501.256398][T12290] EXT4-fs error (device loop8): ext4_map_blocks:610: inode #15: block 3: comm syz.8.1753: lblock 3 mapped to illegal pblock 3 (length 1)
[  501.283150][   T56] usb 2-1: USB disconnect, device number 34
[  501.382975][ T5779] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10
[  501.458635][T12298] EXT4-fs error (device loop8): ext4_map_blocks:610: inode #15: block 3: comm syz.8.1753: lblock 3 mapped to illegal pblock 3 (length 1)
[  501.583248][T12290] EXT4-fs error (device loop8): ext4_map_blocks:610: inode #15: block 3: comm syz.8.1753: lblock 3 mapped to illegal pblock 3 (length 1)
[  501.715484][T12298] EXT4-fs error (device loop8): ext4_map_blocks:610: inode #15: block 3: comm syz.8.1753: lblock 3 mapped to illegal pblock 3 (length 1)
[  501.847817][T12290] EXT4-fs error (device loop8): ext4_map_blocks:610: inode #15: block 3: comm syz.8.1753: lblock 3 mapped to illegal pblock 3 (length 1)
[  501.906882][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  501.921215][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  502.013947][T12298] EXT4-fs error (device loop8): ext4_map_blocks:610: inode #15: block 3: comm syz.8.1753: lblock 3 mapped to illegal pblock 3 (length 1)
[  502.049429][T12316] FAULT_INJECTION: forcing a failure.
[  502.049429][T12316] name failslab, interval 1, probability 0, space 0, times 0
[  502.078100][T12318] loop7: detected capacity change from 0 to 128
[  502.145146][T12316] CPU: 0 PID: 12316 Comm: syz.1.1758 Not tainted syzkaller #0
[  502.152675][T12316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  502.162782][T12316] Call Trace:
[  502.166081][T12316]  <TASK>
[  502.169029][T12316]  dump_stack_lvl+0x18c/0x250
[  502.173807][T12316]  ? show_regs_print_info+0x20/0x20
[  502.179029][T12316]  ? load_image+0x420/0x420
[  502.183754][T12316]  ? __might_sleep+0xe0/0xe0
[  502.188497][T12316]  ? __lock_acquire+0x7d80/0x7d80
[  502.193586][T12316]  should_fail_ex+0x394/0x4c0
[  502.198322][T12316]  should_failslab+0x9/0x20
[  502.202880][T12316]  slab_pre_alloc_hook+0x59/0x300
[  502.207953][T12316]  kmem_cache_alloc+0x5a/0x2c0
[  502.212738][T12316]  ? alloc_vfsmnt+0x24/0x450
[  502.217364][T12316]  alloc_vfsmnt+0x24/0x450
[  502.221826][T12316]  clone_mnt+0x65/0xc60
[  502.226003][T12316]  ? do_raw_spin_unlock+0x121/0x230
[  502.231235][T12316]  copy_tree+0x3d2/0x7e0
[  502.235514][T12316]  ? copy_mnt_ns+0x16a/0x8f0
[  502.240147][T12316]  copy_mnt_ns+0x16a/0x8f0
[  502.244609][T12316]  ? create_new_namespaces+0x34/0x700
[  502.250008][T12316]  create_new_namespaces+0xd3/0x700
[  502.255330][T12316]  ? bpf_lsm_capable+0x9/0x10
[  502.260048][T12316]  ? security_capable+0x89/0xb0
[  502.264950][T12316]  unshare_nsproxy_namespaces+0x11a/0x160
[  502.270721][T12316]  ksys_unshare+0x4fa/0x8f0
[  502.275255][T12316]  ? sighand_ctor+0x50/0x50
[  502.279776][T12316]  ? lock_chain_count+0x20/0x20
[  502.284646][T12316]  ? syscall_enter_from_user_mode+0x25/0x80
[  502.290578][T12316]  __x64_sys_unshare+0x38/0x40
[  502.295370][T12316]  do_syscall_64+0x55/0xb0
[  502.299831][T12316]  ? clear_bhb_loop+0x40/0x90
[  502.304566][T12316]  ? clear_bhb_loop+0x40/0x90
[  502.309266][T12316]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  502.315194][T12316] RIP: 0033:0x7f2afad9e159
[  502.319636][T12316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  502.339273][T12316] RSP: 002b:00007f2afbd57028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  502.347707][T12316] RAX: ffffffffffffffda RBX: 00007f2afb025fa0 RCX: 00007f2afad9e159
[  502.355692][T12316] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022020600
[  502.363673][T12316] RBP: 00007f2afae3506b R08: 0000000000000000 R09: 0000000000000000
[  502.371652][T12316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  502.380066][T12316] R13: 00007f2afb026038 R14: 00007f2afb025fa0 R15: 00007fff0718e0e8
[  502.388072][T12316]  </TASK>
[  502.391254][    C0] vkms_vblank_simulate: vblank timer overrun
[  503.039209][ T1130] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  503.067699][ T1130] EXT4-fs (loop8): This should not happen!! Data will be lost
[  503.067699][ T1130] 
[  503.116094][T10512] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  503.956668][ T5785] Bluetooth: hci0: command tx timeout
[  505.244310][T12370] loop1: detected capacity change from 0 to 4096
[  505.428022][T12373] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  505.519978][T12350] loop7: detected capacity change from 0 to 32768
[  505.573095][T12375] loop4: detected capacity change from 0 to 128
[  505.698469][T12375] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  505.743947][T12350] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  505.845789][T12375] ext4 filesystem being mounted at /345/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  506.101480][T12350] XFS (loop7): Ending clean mount
[  506.193969][T12340] loop8: detected capacity change from 0 to 32768
[  506.334583][ T7055] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  506.358656][T12340] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 scanned by syz.8.1762 (12340)
[  506.702693][T12340] BTRFS error (device loop8): open_ctree failed: -4
[  506.892325][ T5779] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 scanned by udevd (5779)
[  506.974519][T10470] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  509.072654][ T5785] Bluetooth: hci3: command 0x0406 tx timeout
[  509.197192][T12421] kvm: Disabled LAPIC found during irq injection
[  510.036033][T12435] loop7: detected capacity change from 0 to 32768
[  510.097771][T12435] (syz.7.1786,12435,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  510.112308][T12435] (syz.7.1786,12435,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  510.202084][T12435] JBD2: Ignoring recovery information on journal
[  510.259520][T12435] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  510.335198][   T27] audit: type=1326 audit(1790656667.472:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12438 comm="syz.8.1787" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0a8379e159 code=0x0
[  510.845889][ T7647] net_ratelimit: 31 callbacks suppressed
[  511.432544][T10470] ocfs2: Unmounting device (7,7) on (node local)
[  511.755310][T12451] loop8: detected capacity change from 0 to 8192
[  512.112118][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  512.516329][T12443] loop4: detected capacity change from 0 to 40427
[  512.621382][T12443] F2FS-fs (loop4): Wrong segment_count / block_count (31 > 0)
[  512.690206][T12443] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  512.767476][T12443] F2FS-fs (loop4): invalid crc value
[  512.816444][T12443] F2FS-fs (loop4): Found nat_bits in checkpoint
[  513.113981][T12475] loop7: detected capacity change from 0 to 256
[  513.144496][T12443] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[  513.177998][T12443] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  514.197952][ T7239] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[  514.275604][   T56] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  514.295330][ T7239] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[  514.353644][ T7239] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  514.653784][ T7239] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  514.703468][ T7239] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[  514.735573][T12507] loop1: detected capacity change from 0 to 512
[  514.808641][T12507] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  514.835886][T12510] loop4: detected capacity change from 0 to 256
[  514.856604][T12507] System zones: 1-12
[  514.886192][T12510] exfat: Deprecated parameter 'namecase'
[  514.927398][T12507] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #12: comm syz.1.1802: missing EA_INODE flag
[  515.008488][T12510] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36df086c, utbl_chksum : 0xe619d30d)
[  515.065216][T12497] ceph: No mds server is up or the cluster is laggy
[  515.093796][T12507] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.1802: error while reading EA inode 12 err=-117
[  515.106511][T12500] ceph: No mds server is up or the cluster is laggy
[  515.191932][T12507] EXT4-fs (loop1): 1 orphan inode deleted
[  515.253507][T12507] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  515.275171][   T56] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[  516.004544][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  516.096426][T12523] loop4: detected capacity change from 0 to 1024
[  516.176024][T12523] hfsplus: wrong filesystem version
[  516.304546][ T5792] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  516.350138][    C0] net_ratelimit: 25 callbacks suppressed
[  516.672632][T12532] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  517.906958][T12530] loop7: detected capacity change from 0 to 32768
[  518.015801][T12530] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  518.498512][T12551] input: syz1 as /devices/virtual/input/input30
[  519.112937][T10470] ocfs2: Unmounting device (7,7) on (node local)
[  519.667524][T12561] netlink: 'syz.4.1821': attribute type 10 has an invalid length.
[  519.997278][T12565] loop7: detected capacity change from 0 to 512
[  520.064899][ T7239] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0
[  520.170544][ T7239] hid-generic 0000:0000:0000.0017: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  520.216764][T12565] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003)
[  520.306496][T12565] FAT-fs (loop7): Filesystem has been set read-only
[  520.394990][T12573] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 548)
[  520.498988][T12573] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548)
[  520.576210][T12575] tls_set_device_offload_rx: netdev not found
[  521.520289][   T56] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  521.630641][ T1130] net_ratelimit: 31 callbacks suppressed
[  521.745697][   T56] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  521.788214][   T56] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  521.845880][   T56] usb 9-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00
[  521.895612][T12596] loop7: detected capacity change from 0 to 128
[  521.915421][   T56] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  522.014779][   T56] spcp8x5 9-1:1.0: SPCP8x5 converter detected
[  522.087024][   T56] usb 9-1: SPCP8x5 converter now attached to ttyUSB0
[  522.481705][T12586] SPCP8x5 ttyUSB0: failed to set control lines: -110
[  522.529514][T12586] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32)
[  522.567074][T12586] SPCP8x5 ttyUSB0: failed to set control lines: -32
[  522.607170][T12586] SPCP8x5 ttyUSB0: failed to set control lines: -32
[  522.731787][T12585] SPCP8x5 ttyUSB0: failed to set control lines: -32
[  522.755529][ T7239] usb 9-1: USB disconnect, device number 5
[  522.808616][ T7239] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0
[  522.841101][   T56] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  522.856384][ T7239] spcp8x5 9-1:1.0: device disconnected
[  522.998280][T12594] loop1: detected capacity change from 0 to 32768
[  523.070860][   T56] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  523.107199][T12594] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  523.140728][   T56] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  523.205755][   T56] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  523.225953][T12612] loop4: detected capacity change from 0 to 64
[  523.268055][T12594] XFS (loop1): Ending clean mount
[  523.296413][   T56] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  523.351047][T12594] XFS (loop1): Quotacheck needed: Please wait.
[  523.381400][   T56] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  523.471139][   T56] usb 8-1: config 0 descriptor??
[  523.699034][T12594] XFS (loop1): Quotacheck: Done.
[  523.988937][   T56] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0
[  524.042985][   T56] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0
[  524.084997][   T56] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0
[  524.111858][ T5775] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  524.156125][   T56] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0
[  524.187230][   T56] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0
[  524.261037][   T56] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0
[  524.297480][   T56] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0
[  524.325444][   T56] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0
[  524.347909][T12620] FAULT_INJECTION: forcing a failure.
[  524.347909][T12620] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  524.370353][   T56] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0
[  524.393663][   T56] plantronics 0003:047F:FFFF.0018: No inputs registered, leaving
[  524.402376][T12620] CPU: 0 PID: 12620 Comm: syz.8.1842 Not tainted syzkaller #0
[  524.409862][T12620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  524.419942][T12620] Call Trace:
[  524.423258][T12620]  <TASK>
[  524.426258][T12620]  dump_stack_lvl+0x18c/0x250
[  524.430975][T12620]  ? show_regs_print_info+0x20/0x20
[  524.436213][T12620]  ? load_image+0x420/0x420
[  524.440738][T12620]  ? __might_fault+0xaa/0x120
[  524.445436][T12620]  ? __lock_acquire+0x7d80/0x7d80
[  524.450481][T12620]  ? __virt_addr_valid+0x10c/0x380
[  524.455772][T12620]  should_fail_ex+0x394/0x4c0
[  524.460500][T12620]  _copy_to_user+0x2f/0xa0
[  524.464959][T12620]  bpf_verifier_vlog+0x2f1/0x840
[  524.469999][T12620]  btf_verifier_log+0x11e/0x1a0
[  524.474973][T12620]  ? btf_parse_graph_root+0xb00/0xb00
[  524.480387][T12620]  ? btf_func_proto_log+0x62e/0x850
[  524.485625][T12620]  __btf_verifier_log_type+0x457/0x690
[  524.491116][T12620]  ? btf_int_show+0x2810/0x2810
[  524.496031][T12620]  btf_func_proto_check_meta+0xed/0x150
[  524.501660][T12620]  btf_check_all_metas+0x371/0xaf0
[  524.506833][T12620]  btf_parse_type_sec+0xfc/0x1960
[  524.511885][T12620]  ? btf_check_sec_info+0x350/0x350
[  524.517134][T12620]  ? __virt_addr_valid+0x10c/0x380
[  524.522272][T12620]  ? btf_verifier_log+0x1a0/0x1a0
[  524.527321][T12620]  ? btf_parse_hdr+0x545/0x700
[  524.532134][T12620]  ? btf_parse_str_sec+0x20d/0x2a0
[  524.537265][T12620]  btf_new_fd+0x440/0x9e0
[  524.541633][T12620]  ? bpf_btf_show_fdinfo+0x80/0x80
[  524.546852][T12620]  ? capable+0x88/0xe0
[  524.550947][T12620]  __sys_bpf+0x670/0x890
[  524.555237][T12620]  ? bpf_link_show_fdinfo+0x560/0x560
[  524.560667][T12620]  ? lock_chain_count+0x20/0x20
[  524.565566][T12620]  __x64_sys_bpf+0x7c/0x90
[  524.570007][T12620]  do_syscall_64+0x55/0xb0
[  524.574457][T12620]  ? clear_bhb_loop+0x40/0x90
[  524.579160][T12620]  ? clear_bhb_loop+0x40/0x90
[  524.583887][T12620]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  524.589803][T12620] RIP: 0033:0x7f0a8379e159
[  524.594243][T12620] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  524.613875][T12620] RSP: 002b:00007f0a819f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  524.622342][T12620] RAX: ffffffffffffffda RBX: 00007f0a83a25fa0 RCX: 00007f0a8379e159
[  524.630360][T12620] RDX: 0000000000000028 RSI: 0000200000000140 RDI: 0000000000000012
[  524.638384][T12620] RBP: 00007f0a8383506b R08: 0000000000000000 R09: 0000000000000000
[  524.646387][T12620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  524.654385][T12620] R13: 00007f0a83a26038 R14: 00007f0a83a25fa0 R15: 00007ffde4545c98
[  524.662383][T12620]  </TASK>
[  524.817192][   T56] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0
[  524.895494][   T56] usb 8-1: USB disconnect, device number 9
[  524.930831][T12617] loop4: detected capacity change from 0 to 32768
[  525.149711][T12623] fido_id[12623]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory
[  525.334065][T12617] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  525.617101][T12617] XFS (loop4): Ending clean mount
[  525.726321][T12617] XFS (loop4): Quotacheck needed: Please wait.
[  525.934829][T12617] XFS (loop4): Quotacheck: Done.
[  526.062954][T12637] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1844'.
[  526.408121][ T7055] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  526.830139][    C0] net_ratelimit: 29 callbacks suppressed
[  527.131957][T12632] loop7: detected capacity change from 0 to 40427
[  527.239426][T12632] F2FS-fs (loop7): Small segment_count (9 < 1 * 24)
[  527.280824][T12632] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  527.383171][T12650] bond0: (slave bridge0): Releasing backup interface
[  527.409442][T12632] F2FS-fs (loop7): Found nat_bits in checkpoint
[  527.555978][T12650] team0: Port device dummy0 removed
[  527.605239][T12650] bridge_slave_0: left allmulticast mode
[  527.676730][T12650] bridge_slave_0: left promiscuous mode
[  527.715971][T12650] bridge0: port 1(bridge_slave_0) entered disabled state
[  527.745697][T12632] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  527.781150][T12632] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  527.798306][T12650] bridge_slave_1: left allmulticast mode
[  527.825463][T12650] bridge_slave_1: left promiscuous mode
[  527.853192][T12650] bridge0: port 2(bridge_slave_1) entered disabled state
[  527.920874][T12650] bond0: (slave bond_slave_0): Releasing backup interface
[  527.940012][T12658] loop1: detected capacity change from 0 to 4096
[  527.975511][T12650] bond0: (slave bond_slave_1): Releasing backup interface
[  528.062480][T12658] ntfs3: loop1: ino=19, mi_enum_attr
[  528.071989][T12650] team0: Port device team_slave_0 removed
[  528.093504][T12658] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  528.107646][T12650] team0: Port device team_slave_1 removed
[  528.180028][T12650] batman_adv: batadv0: Removing interface: batadv_slave_0
[  528.188915][T10470] syz-executor: attempt to access beyond end of device
[  528.188915][T10470] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  528.274332][T10470] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[  528.282712][T12650] batman_adv: batadv0: Removing interface: batadv_slave_1
[  530.150804][T12690] FAULT_INJECTION: forcing a failure.
[  530.150804][T12690] name failslab, interval 1, probability 0, space 0, times 0
[  530.170335][   T56] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  530.235461][T12690] CPU: 0 PID: 12690 Comm: syz.8.1865 Not tainted syzkaller #0
[  530.242996][T12690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  530.253183][T12690] Call Trace:
[  530.256479][T12690]  <TASK>
[  530.259434][T12690]  dump_stack_lvl+0x18c/0x250
[  530.264149][T12690]  ? show_regs_print_info+0x20/0x20
[  530.269374][T12690]  ? load_image+0x420/0x420
[  530.273898][T12690]  ? __might_sleep+0xe0/0xe0
[  530.278515][T12690]  ? __lock_acquire+0x7d80/0x7d80
[  530.283568][T12690]  should_fail_ex+0x394/0x4c0
[  530.288369][T12690]  should_failslab+0x9/0x20
[  530.293027][T12690]  slab_pre_alloc_hook+0x59/0x300
[  530.298097][T12690]  ? futex_unqueue+0xcb/0xf0
[  530.302757][T12690]  ? syslog_print_all+0xf9/0x470
[  530.307720][T12690]  __kmem_cache_alloc_node+0x53/0x250
[  530.313128][T12690]  ? syslog_print_all+0xf9/0x470
[  530.318089][T12690]  kmalloc_trace+0x2a/0xe0
[  530.322550][T12690]  syslog_print_all+0xf9/0x470
[  530.327379][T12690]  ? aa_get_newest_label+0xfd/0x5c0
[  530.332628][T12690]  ? syslog_print+0x630/0x630
[  530.337328][T12690]  ? apparmor_capable+0x137/0x1a0
[  530.342370][T12690]  ? bpf_lsm_capable+0x9/0x10
[  530.347147][T12690]  ? security_capable+0x89/0xb0
[  530.352041][T12690]  do_syslog+0x3d7/0x820
[  530.356404][T12690]  ? log_buf_vmcoreinfo_setup+0x450/0x450
[  530.362178][T12690]  ? lock_chain_count+0x20/0x20
[  530.367050][T12690]  __x64_sys_syslog+0x7c/0x90
[  530.371769][T12690]  do_syscall_64+0x55/0xb0
[  530.376206][T12690]  ? clear_bhb_loop+0x40/0x90
[  530.380903][T12690]  ? clear_bhb_loop+0x40/0x90
[  530.385601][T12690]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  530.391529][T12690] RIP: 0033:0x7f0a8379e159
[  530.395986][T12690] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  530.415612][T12690] RSP: 002b:00007f0a819f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000067
[  530.424045][T12690] RAX: ffffffffffffffda RBX: 00007f0a83a25fa0 RCX: 00007f0a8379e159
[  530.432034][T12690] RDX: 000000000000004c RSI: 0000200000000180 RDI: 0000000000000004
[  530.440051][T12690] RBP: 00007f0a8383506b R08: 0000000000000000 R09: 0000000000000000
[  530.448066][T12690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  530.456062][T12690] R13: 00007f0a83a26038 R14: 00007f0a83a25fa0 R15: 00007ffde4545c98
[  530.464090][T12690]  </TASK>
[  530.659481][   T56] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  530.678294][   T56] usb 5-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00
[  530.687798][   T56] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  530.714262][   T56] usb 5-1: Product: syz
[  530.724097][   T56] usb 5-1: Manufacturer: syz
[  530.737981][   T56] usb 5-1: SerialNumber: syz
[  530.786077][   T56] gspca_main: mr97310a-2.14.0 probing 08ca:0110
[  530.800306][    T8] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  530.982195][    T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  531.006959][    T8] usb 2-1: config 0 has no interfaces?
[  531.014822][    T8] usb 2-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00
[  531.026517][    T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  531.045693][    T8] usb 2-1: config 0 descriptor??
[  531.190216][ T7239] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  531.283546][ T6453] usb 2-1: USB disconnect, device number 35
[  531.384860][ T7239] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  531.415886][   T56] gspca_mr97310a: reg read [21] error -71
[  531.439250][ T7239] usb 9-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[  531.466702][   T56] mr97310a: probe of 5-1:1.0 failed with error -71
[  531.497121][ T7239] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  531.536353][   T56] usb 5-1: USB disconnect, device number 21
[  531.588132][ T7239] keyspan 9-1:1.0: Keyspan 2 port adapter converter detected
[  531.655946][ T7239] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 81
[  531.689981][ T7239] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 1
[  531.728496][ T7239] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 84
[  531.767712][ T7239] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 2
[  531.815609][ T7239] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  531.869479][ T7239] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 88
[  531.939405][ T7239] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 6
[  531.950129][    C0] net_ratelimit: 30 callbacks suppressed
[  532.032609][ T7239] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  532.249444][T12708] loop1: detected capacity change from 0 to 256
[  532.305561][T12708] exfat: Deprecated parameter 'namecase'
[  532.380692][T12708] exfat: Deprecated parameter 'namecase'
[  532.433078][T12708] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  532.546074][   T56] usb 9-1: USB disconnect, device number 6
[  532.623357][   T56] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  532.746657][   T56] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  532.844644][   T56] keyspan 9-1:1.0: device disconnected
[  533.199726][T12721] netlink: 27 bytes leftover after parsing attributes in process `syz.7.1876'.
[  533.636947][T12727] loop7: detected capacity change from 0 to 2048
[  533.674233][T12727] UDF-fs: bad mount option "0x0000000000000004" or missing value
[  534.979706][T12739] loop4: detected capacity change from 0 to 131072
[  535.034340][T12739] F2FS-fs (loop4): invalid crc value
[  535.061443][T12739] F2FS-fs (loop4): Found nat_bits in checkpoint
[  535.105816][T12739] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  535.711464][T12750] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size
[  535.950977][T12753] FAULT_INJECTION: forcing a failure.
[  535.950977][T12753] name failslab, interval 1, probability 0, space 0, times 0
[  535.965802][T12753] CPU: 0 PID: 12753 Comm: syz.7.1886 Not tainted syzkaller #0
[  535.973288][T12753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  535.983376][T12753] Call Trace:
[  535.986702][T12753]  <TASK>
[  535.989648][T12753]  dump_stack_lvl+0x18c/0x250
[  535.994353][T12753]  ? show_regs_print_info+0x20/0x20
[  535.999764][T12753]  ? load_image+0x420/0x420
[  536.004282][T12753]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  536.010285][T12753]  ? lock_chain_count+0x20/0x20
[  536.015156][T12753]  should_fail_ex+0x394/0x4c0
[  536.019857][T12753]  should_failslab+0x9/0x20
[  536.024381][T12753]  slab_pre_alloc_hook+0x59/0x300
[  536.029432][T12753]  kmem_cache_alloc_node+0x5e/0x310
[  536.034739][T12753]  ? __alloc_skb+0x103/0x2c0
[  536.039387][T12753]  __alloc_skb+0x103/0x2c0
[  536.043925][T12753]  tipc_buf_acquire+0x2b/0xe0
[  536.048737][T12753]  tipc_named_publish+0x266/0x760
[  536.053782][T12753]  tipc_nametbl_publish+0xee/0x1f0
[  536.059003][T12753]  tipc_sk_publish+0x1cc/0x430
[  536.063791][T12753]  ? tipc_sk_withdraw+0x640/0x640
[  536.068856][T12753]  ? do_raw_spin_unlock+0x121/0x230
[  536.074112][T12753]  tipc_sk_bind+0x1ee/0x300
[  536.078678][T12753]  __sys_bind+0x2f0/0x3f0
[  536.083053][T12753]  ? __ia32_sys_socketpair+0xb0/0xb0
[  536.088395][T12753]  __x64_sys_bind+0x7a/0x90
[  536.092917][T12753]  do_syscall_64+0x55/0xb0
[  536.097358][T12753]  ? clear_bhb_loop+0x40/0x90
[  536.102052][T12753]  ? clear_bhb_loop+0x40/0x90
[  536.106747][T12753]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  536.112676][T12753] RIP: 0033:0x7efd9319e159
[  536.117145][T12753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  536.136768][T12753] RSP: 002b:00007efd94118028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031
[  536.145383][T12753] RAX: ffffffffffffffda RBX: 00007efd93425fa0 RCX: 00007efd9319e159
[  536.153410][T12753] RDX: 0000000000000010 RSI: 00002000000000c0 RDI: 0000000000000003
[  536.161494][T12753] RBP: 00007efd9323506b R08: 0000000000000000 R09: 0000000000000000
[  536.169483][T12753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  536.177469][T12753] R13: 00007efd93426038 R14: 00007efd93425fa0 R15: 00007ffce1c15808
[  536.185468][T12753]  </TASK>
[  536.188597][T12753] tipc: Publication distribution failure
[  536.311881][T12755] loop1: detected capacity change from 0 to 2048
[  536.346131][T12757] loop8: detected capacity change from 0 to 8
[  536.399897][T12755] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found!
[  536.489725][T12757] SQUASHFS error: Failed to read block 0x10e000000008f: -5
[  536.529920][T12757] SQUASHFS error: Failed to read block 0x10e0000c00090: -5
[  536.551740][T12755] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  536.588606][T12757] SQUASHFS error: Failed to read block 0x10e000000008f: -5
[  536.630769][T12757] SQUASHFS error: Failed to read block 0x10e000000008f: -5
[  536.638200][T12757] SQUASHFS error: Failed to read block 0x10e000000008f: -5
[  536.723306][T12757] SQUASHFS error: Failed to read block 0x10e000000008f: -5
[  536.793474][T12757] SQUASHFS error: Failed to read block 0x10e000000008f: -5
[  536.936577][   T27] audit: type=1800 audit(1790656694.012:500): pid=12757 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1887" name="file2" dev="loop8" ino=6 res=0 errno=0
[  537.310124][    C0] net_ratelimit: 50 callbacks suppressed
[  538.013138][T12771] loop8: detected capacity change from 0 to 1024
[  538.088914][T12771] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  538.197036][T12771] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  538.592380][T10512] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  540.520415][    T8] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  540.760288][    T8] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  540.827980][    T8] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64
[  540.906636][    T8] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  541.004446][    T8] usb 5-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00
[  541.089908][    T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  541.399166][T12837] ==================================================================
[  541.407274][T12837] BUG: KASAN: slab-out-of-bounds in string+0x204/0x290
[  541.414152][T12837] Read of size 1 at addr ffff88814d417079 by task syz.7.1916/12837
[  541.422060][T12837] 
[  541.424422][T12837] CPU: 0 PID: 12837 Comm: syz.7.1916 Not tainted syzkaller #0
[  541.431978][T12837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  541.442073][T12837] Call Trace:
[  541.445364][T12837]  <TASK>
[  541.448308][T12837]  dump_stack_lvl+0x18c/0x250
[  541.453007][T12837]  ? __lock_acquire+0x7d80/0x7d80
[  541.458053][T12837]  ? show_regs_print_info+0x20/0x20
[  541.463272][T12837]  ? load_image+0x420/0x420
[  541.467806][T12837]  ? __virt_addr_valid+0x10c/0x380
[  541.472931][T12837]  ? __virt_addr_valid+0x10c/0x380
[  541.478061][T12837]  ? __virt_addr_valid+0x10c/0x380
[  541.483196][T12837]  print_report+0xa8/0x210
[  541.487720][T12837]  ? string+0x204/0x290
[  541.491905][T12837]  kasan_report+0x117/0x150
[  541.496430][T12837]  ? string+0x204/0x290
[  541.500601][T12837]  string+0x204/0x290
[  541.504798][T12837]  vsnprintf+0xf72/0x1ba0
[  541.509169][T12837]  pointer+0x9ed/0x1150
[  541.513429][T12837]  ? string+0x290/0x290
[  541.517625][T12837]  vsnprintf+0xdaa/0x1ba0
[  541.521974][T12837]  vprintk_store+0x3d9/0xd50
[  541.526599][T12837]  ? printk_parse_prefix+0x3d0/0x3d0
[  541.531921][T12837]  ? mark_lock+0x94/0x320
[  541.536274][T12837]  ? __lock_acquire+0x1336/0x7d80
[  541.541341][T12837]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  541.547437][T12837]  vprintk_emit+0x117/0x610
[  541.551965][T12837]  ? printk_sprint+0x460/0x460
[  541.556746][T12837]  ? stack_trace_save+0xaa/0x100
[  541.561704][T12837]  _printk+0xde/0x130
[  541.565719][T12837]  ? load_image+0x420/0x420
[  541.570240][T12837]  ? __mutex_trylock_common+0x160/0x270
[  541.575805][T12837]  __dynamic_pr_debug+0x1a3/0x260
[  541.580857][T12837]  ? rcu_is_watching+0x15/0xb0
[  541.585647][T12837]  ? param_get_dyndbg_classes+0x170/0x170
[  541.591473][T12837]  ? __mutex_lock+0x30d/0xc80
[  541.596208][T12837]  ? llcp_sock_bind+0x370/0x710
[  541.601089][T12837]  ? rcu_is_watching+0x15/0xb0
[  541.605877][T12837]  nfc_llcp_get_sdp_ssap+0x3a4/0x3d0
[  541.611191][T12837]  llcp_sock_bind+0x3be/0x710
[  541.615902][T12837]  ? llcp_sock_recvmsg+0xcd0/0xcd0
[  541.621036][T12837]  ? bpf_lsm_socket_bind+0x9/0x10
[  541.626078][T12837]  ? security_socket_bind+0x80/0xa0
[  541.631300][T12837]  __sys_bind+0x2f0/0x3f0
[  541.635686][T12837]  ? __ia32_sys_socketpair+0xb0/0xb0
[  541.641026][T12837]  __x64_sys_bind+0x7a/0x90
[  541.645580][T12837]  do_syscall_64+0x55/0xb0
[  541.650074][T12837]  ? clear_bhb_loop+0x40/0x90
[  541.654788][T12837]  ? clear_bhb_loop+0x40/0x90
[  541.659494][T12837]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  541.665433][T12837] RIP: 0033:0x7efd9319e159
[  541.669867][T12837] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  541.689689][T12837] RSP: 002b:00007efd94118028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031
[  541.698322][T12837] RAX: ffffffffffffffda RBX: 00007efd93425fa0 RCX: 00007efd9319e159
[  541.706312][T12837] RDX: 0000000000000060 RSI: 0000200000000080 RDI: 0000000000000004
[  541.714314][T12837] RBP: 00007efd9323506b R08: 0000000000000000 R09: 0000000000000000
[  541.722308][T12837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  541.730315][T12837] R13: 00007efd93426038 R14: 00007efd93425fa0 R15: 00007ffce1c15808
[  541.738326][T12837]  </TASK>
[  541.741367][T12837] 
[  541.743779][T12837] Allocated by task 12837:
[  541.748229][T12837]  kasan_set_track+0x4e/0x70
[  541.752847][T12837]  __kasan_kmalloc+0x8f/0xa0
[  541.757458][T12837]  __kmalloc_node_track_caller+0xb4/0x230
[  541.763200][T12837]  kmemdup+0x2b/0x70
[  541.767124][T12837]  llcp_sock_bind+0x370/0x710
[  541.771813][T12837]  __sys_bind+0x2f0/0x3f0
[  541.776151][T12837]  __x64_sys_bind+0x7a/0x90
[  541.780672][T12837]  do_syscall_64+0x55/0xb0
[  541.785106][T12837]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  541.791036][T12837] 
[  541.793385][T12837] The buggy address belongs to the object at ffff88814d417078
[  541.793385][T12837]  which belongs to the cache kmalloc-8 of size 8
[  541.807121][T12837] The buggy address is located 0 bytes to the right of
[  541.807121][T12837]  allocated 1-byte region [ffff88814d417078, ffff88814d417079)
[  541.821483][T12837] 
[  541.823822][T12837] The buggy address belongs to the physical page:
[  541.830271][T12837] page:ffffea00053505c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x14d417
[  541.840523][T12837] flags: 0x57ff00000000800(slab|node=1|zone=2|lastcpupid=0x7ff)
[  541.848181][T12837] page_type: 0xffffffff()
[  541.852561][T12837] raw: 057ff00000000800 ffff888017c41280 dead000000000100 dead000000000122
[  541.861573][T12837] raw: 0000000000000000 0000000080660066 00000001ffffffff 0000000000000000
[  541.870170][T12837] page dumped because: kasan: bad access detected
[  541.876605][T12837] page_owner tracks the page as allocated
[  541.882323][T12837] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 1, tgid 1 (swapper/0), ts 26426769946, free_ts 0
[  541.899017][T12837]  post_alloc_hook+0x1c1/0x200
[  541.903812][T12837]  get_page_from_freelist+0x2181/0x22a0
[  541.909563][T12837]  __alloc_pages+0x1f0/0x460
[  541.914191][T12837]  alloc_page_interleave+0x24/0x1e0
[  541.919404][T12837]  alloc_slab_page+0x5d/0x180
[  541.924119][T12837]  new_slab+0x87/0x2d0
[  541.928219][T12837]  ___slab_alloc+0xc5c/0x12f0
[  541.932929][T12837]  __kmem_cache_alloc_node+0x11f/0x250
[  541.938441][T12837]  kmalloc_trace+0x2a/0xe0
[  541.942915][T12837]  add_sysfs_param+0x5fb/0x940
[  541.947729][T12837]  kernel_add_sysfs_param+0xaf/0x120
[  541.953093][T12837]  param_sysfs_builtin+0x1fd/0x2b0
[  541.958258][T12837]  param_sysfs_builtin_init+0x2d/0x30
[  541.963648][T12837]  do_one_initcall+0x242/0x790
[  541.968468][T12837]  do_initcall_level+0x13d/0x1f0
[  541.973462][T12837]  do_initcalls+0x69/0xd0
[  541.977818][T12837] page_owner free stack trace missing
[  541.983290][T12837] 
[  541.985624][T12837] Memory state around the buggy address:
[  541.991282][T12837]  ffff88814d416f00: fb fb fb fb fc fc fc fc 00 00 00 fc fc fc fc fc
[  541.999359][T12837]  ffff88814d416f80: fb fb fb fb fc fc fc fc 00 00 00 00 fc fc fc fc
[  542.007432][T12837] >ffff88814d417000: 02 fc fc fc fc 00 fc fc fc fc fa fc fc fc fc 01
[  542.015529][T12837]                                                                 ^
[  542.023522][T12837]  ffff88814d417080: fc fc fc fc 00 fc fc fc fc fb fc fc fc fc fa fc
[  542.031608][T12837]  ffff88814d417100: fc fc fc fa fc fc fc fc 05 fc fc fc fc 05 fc fc
[  542.039879][T12837] ==================================================================
[  542.047975][T12837] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  542.055180][T12837] CPU: 0 PID: 12837 Comm: syz.7.1916 Not tainted syzkaller #0
[  542.062656][T12837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  542.072808][T12837] Call Trace:
[  542.076105][T12837]  <TASK>
[  542.079047][T12837]  dump_stack_lvl+0x18c/0x250
[  542.083750][T12837]  ? show_regs_print_info+0x20/0x20
[  542.088967][T12837]  ? load_image+0x420/0x420
[  542.093492][T12837]  panic+0x2ca/0x720
[  542.097402][T12837]  ? bpf_jit_dump+0xd0/0xd0
[  542.101917][T12837]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  542.107829][T12837]  ? _raw_spin_unlock+0x40/0x40
[  542.112693][T12837]  ? print_memory_metadata+0x314/0x400
[  542.118188][T12837]  ? string+0x204/0x290
[  542.122377][T12837]  check_panic_on_warn+0x84/0xa0
[  542.127384][T12837]  ? string+0x204/0x290
[  542.131563][T12837]  end_report+0x6f/0x130
[  542.135877][T12837]  kasan_report+0x128/0x150
[  542.140397][T12837]  ? string+0x204/0x290
[  542.144583][T12837]  string+0x204/0x290
[  542.148582][T12837]  vsnprintf+0xf72/0x1ba0
[  542.152932][T12837]  pointer+0x9ed/0x1150
[  542.157110][T12837]  ? string+0x290/0x290
[  542.161300][T12837]  vsnprintf+0xdaa/0x1ba0
[  542.165654][T12837]  vprintk_store+0x3d9/0xd50
[  542.170275][T12837]  ? printk_parse_prefix+0x3d0/0x3d0
[  542.175586][T12837]  ? mark_lock+0x94/0x320
[  542.179951][T12837]  ? __lock_acquire+0x1336/0x7d80
[  542.184999][T12837]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  542.191090][T12837]  vprintk_emit+0x117/0x610
[  542.195625][T12837]  ? printk_sprint+0x460/0x460
[  542.200402][T12837]  ? stack_trace_save+0xaa/0x100
[  542.205372][T12837]  _printk+0xde/0x130
[  542.209373][T12837]  ? load_image+0x420/0x420
[  542.213886][T12837]  ? __mutex_trylock_common+0x160/0x270
[  542.219447][T12837]  __dynamic_pr_debug+0x1a3/0x260
[  542.224490][T12837]  ? rcu_is_watching+0x15/0xb0
[  542.229277][T12837]  ? param_get_dyndbg_classes+0x170/0x170
[  542.235029][T12837]  ? __mutex_lock+0x30d/0xc80
[  542.239768][T12837]  ? llcp_sock_bind+0x370/0x710
[  542.244637][T12837]  ? rcu_is_watching+0x15/0xb0
[  542.249529][T12837]  nfc_llcp_get_sdp_ssap+0x3a4/0x3d0
[  542.254843][T12837]  llcp_sock_bind+0x3be/0x710
[  542.259569][T12837]  ? llcp_sock_recvmsg+0xcd0/0xcd0
[  542.264701][T12837]  ? bpf_lsm_socket_bind+0x9/0x10
[  542.269756][T12837]  ? security_socket_bind+0x80/0xa0
[  542.274996][T12837]  __sys_bind+0x2f0/0x3f0
[  542.279438][T12837]  ? __ia32_sys_socketpair+0xb0/0xb0
[  542.284784][T12837]  __x64_sys_bind+0x7a/0x90
[  542.289391][T12837]  do_syscall_64+0x55/0xb0
[  542.293846][T12837]  ? clear_bhb_loop+0x40/0x90
[  542.298541][T12837]  ? clear_bhb_loop+0x40/0x90
[  542.303259][T12837]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  542.309203][T12837] RIP: 0033:0x7efd9319e159
[  542.313657][T12837] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  542.333373][T12837] RSP: 002b:00007efd94118028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031
[  542.341806][T12837] RAX: ffffffffffffffda RBX: 00007efd93425fa0 RCX: 00007efd9319e159
[  542.349839][T12837] RDX: 0000000000000060 RSI: 0000200000000080 RDI: 0000000000000004
[  542.357841][T12837] RBP: 00007efd9323506b R08: 0000000000000000 R09: 0000000000000000
[  542.365850][T12837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  542.373875][T12837] R13: 00007efd93426038 R14: 00007efd93425fa0 R15: 00007ffce1c15808
[  542.381886][T12837]  </TASK>
[  542.384993][T12837] Kernel Offset: disabled
[  542.389329][T12837] Rebooting in 86400 seconds..