last executing test programs:

2m8.858295972s ago: executing program 1 (id=786):
creat(&(0x7f0000000000)='./file1\x00', 0x121)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb")
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x3f4, 0x1, 0x0, 0x0, {0x2}}, [], {0x14, 0x3f2, 0x1, 0x0, 0x0, {0xa}}}, 0x28}, 0x1, 0x0, 0x0, 0x923986954893969c}, 0x4000000)
ptrace$getregset(0x4205, r0, 0x2, &(0x7f00000002c0)={&(0x7f0000000000)=""/120, 0x78})
ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0})

2m7.902151305s ago: executing program 1 (id=794):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = fcntl$dupfd(r1, 0x406, r1)
write$cgroup_pid(r2, &(0x7f00000003c0), 0xffffffa0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000000)=r2, 0x4)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)

2m7.501847615s ago: executing program 1 (id=798):
r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x1)
fchdir(r1)
r2 = inotify_init()
inotify_add_watch(r2, &(0x7f0000000080)='./bus\x00', 0x400017e)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97)
preadv(r3, 0x0, 0x0, 0x2b, 0x6091)

2m7.333494459s ago: executing program 1 (id=801):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
chroot(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00')
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00')

2m7.248754871s ago: executing program 1 (id=802):
socket$nl_generic(0x10, 0x3, 0x10)
mkdir(&(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff)
mkdir(&(0x7f0000000600)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff)
mkdir(&(0x7f0000000700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/f/dwFrameInterval\x00', 0x1, 0x0)
write(r0, &(0x7f0000000a00)='6', 0x1)

2m5.081082635s ago: executing program 1 (id=818):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x48, &(0x7f0000000040)={[{@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0x5, 0x559a, &(0x7f0000005680)="$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")
r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3)
r1 = open(&(0x7f0000002840)='./file0\x00', 0x577982, 0x240)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x40842, 0x1c3)
setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff})
pwrite64(0xffffffffffffffff, &(0x7f0000000300)='_', 0x1, 0x10000000005)
copy_file_range(r2, 0x0, r1, 0x0, 0xfffffbffa003e458, 0x2000000000000000)

2m4.710897943s ago: executing program 32 (id=818):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x48, &(0x7f0000000040)={[{@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0x5, 0x559a, &(0x7f0000005680)="$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")
r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3)
r1 = open(&(0x7f0000002840)='./file0\x00', 0x577982, 0x240)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x40842, 0x1c3)
setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff})
pwrite64(0xffffffffffffffff, &(0x7f0000000300)='_', 0x1, 0x10000000005)
copy_file_range(r2, 0x0, r1, 0x0, 0xfffffbffa003e458, 0x2000000000000000)

1m42.710264454s ago: executing program 3 (id=1020):
syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0)
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0)
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", <r2=>0xffffffffffffffff})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", <r3=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000180)={"2486910284ed923431d4c5d5fbf514fd00", r3})
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0xb, 0x6, 0xff}, 0x3c, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x8000004, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x200, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x7, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x6, 0x1000a, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x8, 0xffffffff, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x2000000c, 0x2, 0x6d02, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xd, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2eb, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x2, 0x2, 0x5, 0x1, 0x3, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x2, 0x226, 0x5, 0x5, 0x1, 0x30b1d68f, 0xa1f, 0xf40, 0x800, 0x1, 0x6c1b, 0x0, 0x2, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
ioctl$SW_SYNC_IOC_INC(r1, 0x40045701, &(0x7f00000002c0)=0x3)

1m42.609299857s ago: executing program 3 (id=1021):
r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040110700090001010203010902200001010080fa0904000002070102000705810200020007050202"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004"], 0x48)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r1 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0x9c, 0x71, 0x10, 0x1d}}, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)

1m40.371403892s ago: executing program 3 (id=1035):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x8804)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}, 0x40000100)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0xc, 0xffffffffffffffff, 0xffffffff}, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b70400000000000085000000c300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r3}, 0xc)

1m40.200221646s ago: executing program 3 (id=1037):
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x800000, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
unshare(0x26020480)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
chroot(&(0x7f0000000100)='./file0/file0\x00')
umount2(&(0x7f0000000440)='./file0/file0\x00', 0x0)

1m39.199138761s ago: executing program 3 (id=1043):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20)
r1 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xfffffffc}, 0x1c)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e22, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c)

1m38.394213751s ago: executing program 3 (id=1049):
pipe2(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28)
writev(r1, &(0x7f0000000080)=[{&(0x7f00000001c0)="d1bdf15960a8b8b5fd330682ac", 0xd}], 0x1)
splice(r1, 0x0, r0, 0x0, 0x2, 0x0)

1m37.945765812s ago: executing program 33 (id=1049):
pipe2(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28)
writev(r1, &(0x7f0000000080)=[{&(0x7f00000001c0)="d1bdf15960a8b8b5fd330682ac", 0xd}], 0x1)
splice(r1, 0x0, r0, 0x0, 0x2, 0x0)

7.909566806s ago: executing program 4 (id=1616):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e)
r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3})
ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000040)=0x1)
ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x100, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x3})
unshare(0x400)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x7, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x20, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x6, 0x7, 0x5, 0x8, 0x4c74, 0xffff7fff, 0x7, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xffffffff, 0x7, 0x5, 0x80003e, 0x18e, 0x6, 0x6, 0x0, 0x8, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x7, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2009, 0xfffffffc, 0x573a, 0x0, 0x0, 0x5, 0x2f, 0x8, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x1007, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x40, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x200009, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x6, 0x40a, 0x3ff, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x3, 0x8, 0x86, 0x1000515, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6cff, 0x6, 0x20000038, 0x200, 0x1fd, 0x80, 0x7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xcc, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ef, 0x2006, 0x80a2cd, 0x4, 0x25], [0xc, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffc, 0xa620, 0x1, 0x5, 0x801, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x8, 0x4, 0x5, 0xca, 0x1, 0xfffff000, 0x10000, 0xf, 0x7e, 0x9, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0xe1c4, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

6.621376827s ago: executing program 4 (id=1620):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0)
write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x2, 0x0, 0x83, "00000000000000000000ffff00000000000002"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x0, 0xfffffffd, 0x0, 0x6, 0x12, "e315bc1cc24ff7b7cdb242e1ff0aa6905446b3"})
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
read$FUSE(r2, &(0x7f0000003f80)={0x2020}, 0x2020)

6.207943997s ago: executing program 4 (id=1621):
socket(0x1e, 0x1, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f00000000c0)={0x50, 0x0, r1, {0x7, 0x1f, 0xa, 0x40010, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000efff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ca8e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x7ff, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
flock(r2, 0x5)

5.912795454s ago: executing program 4 (id=1622):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="12000000020000000800000002"], 0x48)
close(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x1000001, 0x2172, 0xffffffffffffffff, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r1}, &(0x7f0000000000), &(0x7f0000000440)=r0}, 0x20)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

5.561359323s ago: executing program 4 (id=1632):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5})
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0xff, 0xfe, 0x7fff0006}]})
r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x20004, <r3=>r1})
r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000300)={<r5=>0x0, 0x0, r3})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r5})
close(0x3)

5.389329748s ago: executing program 4 (id=1626):
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0, 0xfc}}, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x1)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371c00000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0)

3.133665153s ago: executing program 5 (id=1636):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80800)
write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})
chdir(&(0x7f0000000040)='./file0\x00')
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2000844, &(0x7f0000000000)={[{@fat=@sys_immutable}, {@nodots}, {@fat=@tz_utc}, {@nodots}, {@fat=@debug}, {@dots}, {@nodots}, {@dots}, {@fat=@fmask={'fmask', 0x3d, 0x7}}, {@dots}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x9}}, {@fat=@gid}, {@fat=@errors_remount}, {@dots}]}, 0x1, 0x250, &(0x7f00000005c0)="$eJzs3cFqE0EYB/DPNm3TXuxZPCx48VTUNwgSQVwQIjnoyUD10oqwvaye8hg+g4/kY/TUg7Bid9vUbRQsm07K/n4Q9iN/Br65ZOYwk33/8NPR4eeTj9WPbzEcZjGImMdZxH5sxGbU7l08L4or5te/AgDW3GQyG6XugQ4t2aMVxWi2FRE715Lp99tpCgAAAAAAAAAAgK79z/n/jfN6+4/xzv8DwN2z/Pz/bopWWJGiGM32mv1b42dVVc7/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEmdVdX96h+f1P0BAN2z/gNA/1j/AaB/rP8A0D9v3r57Ncrz8STLhhGn83JaTutnnb94mY+fZOf2F6NOy3K61dT5+GmdZ+18rxn/bGm+HY8f1fnv7PnrvJXvxOGqJw8AAAAAAAAAAAAAAAAAAABr4iC71Lrfv1nnB3/L6+rK/wO07u8P4sHg1qYBAAAAAAAAAAAAAAAAAAAAd9rJl69Hs+PjD4VCcVnsxg1GDWM9mld0UqT+ZQIAAAAAAAAAAAAAAAAAgP5ZXPpN3QkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAApLN4///qitRzBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPrhVwAAAP//pDGVnw==")

2.786075701s ago: executing program 5 (id=1640):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x19}}, 0x6}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='veth0_macvtap\x00', 0x10)
r1 = fcntl$dupfd(r0, 0x0, r0)
sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r1)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[], 0x7c70}, 0x1, 0x0, 0x0, 0x90}, 0x8080)

2.396753651s ago: executing program 2 (id=1643):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r0, 0x25, &(0x7f00000000c0))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r2, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x3, 0x2000000000000000})
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
fcntl$lock(r1, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x9, 0x9})
close_range(r3, 0xffffffffffffffff, 0x0)

2.093347709s ago: executing program 2 (id=1644):
r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
ioctl$FE_GET_EVENT(r0, 0x80286f4e, &(0x7f0000000140))
ioctl$FE_SET_FRONTEND(r0, 0x40246f4c, &(0x7f0000000080)={0x30a32c0, 0x1, @qam={0x3, 0xb, 0xa}})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)

1.821398925s ago: executing program 2 (id=1645):
r0 = socket$kcm(0x2b, 0x1, 0x0)
r1 = socket$kcm(0x1e, 0x5, 0x0)
sendmsg$kcm(r1, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0)
recvmsg$kcm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/5, 0x63}], 0x1, 0xfffffffffffffffe, 0x19}, 0x0)
sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ff", 0x4c}], 0x1, &(0x7f00000015c0)=ANY=[], 0x11f0}, 0x10008014)
setsockopt$sock_attach_bpf(r0, 0x0, 0x25, 0x0, 0x2e)
r2 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0)

1.717583568s ago: executing program 5 (id=1646):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="800002010800000008001b000000000008000d"], 0x38}}, 0x0)
preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000000)=""/30, 0x1e}], 0x1, 0x8, 0x2)

1.501395203s ago: executing program 2 (id=1648):
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={<r3=>r2, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f0000000040)=0x84)
sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='P'], 0x50}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000480)={r3, @in={{0x2, 0x4e22, @remote}}, [0x9, 0x8a, 0x8, 0x96a1, 0x10000, 0x0, 0x8, 0xff, 0x1, 0x7ffffffffffffffd, 0x6, 0x5, 0x9, 0x9, 0xb286]}, &(0x7f00000000c0)=0x100)

1.403709575s ago: executing program 0 (id=1649):
socket(0x2, 0x80805, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r1 = io_uring_setup(0xfd2, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0xc, 0xa0002f5})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000002, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)
shutdown(r0, 0x1)

1.331670187s ago: executing program 2 (id=1650):
r0 = socket(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {}, {0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x2000000)

1.20938765s ago: executing program 0 (id=1651):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0)
write(r0, &(0x7f0000000380)='10000', 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000200)='1', 0x1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0)
write(r2, &(0x7f0000000280)='0', 0x1)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))

1.062346104s ago: executing program 0 (id=1652):
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
mbind(&(0x7f00005b4000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x100000000000041, 0x2)

934.964837ms ago: executing program 2 (id=1653):
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='nobarrier,mode=lfs,fsync_mode=strict\x00acl,\x00'], 0x1, 0x552d, &(0x7f000000d000)="$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")
setsockopt(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x40, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12)
write(r1, &(0x7f0000000200)="c7", 0x1)
sendfile(r1, r0, 0x0, 0x3ffff)
sendfile(r1, r0, 0x0, 0x7ffff000)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x1000, 0x6, &(0x7f0000a51000/0x1000)=nil)

545.307536ms ago: executing program 5 (id=1654):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@getqdisc={0x24, 0x26, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x3, 0x10}, {0x8, 0xf}, {0xf, 0xffe0}}}, 0x24}}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c070054001280080001006873720048000280"], 0x90}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008"], 0xa4}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r1=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000014001a80100004800c0006"], 0x34}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

469.324238ms ago: executing program 0 (id=1655):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d00000000000000000a00000000000006"], 0x30}}, 0x4090)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x3c}, 0x1, 0x11}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', <r3=>0x0})
ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r3})
sendmsg$nl_route(r1, 0x0, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0)

260.946753ms ago: executing program 0 (id=1656):
mount(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, 0x0, 0x0)
syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2)
getpeername$packet(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/serio/devices/serio0/drvctl\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='atkbd', 0x5)

260.825993ms ago: executing program 5 (id=1657):
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000002980)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x4001ffe, 0xa68d7c519fc00ff1, 0xffbc, 0xffff, 0x1d45, 0x0, 0x0, 0x0, 0x40}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f0000006380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0)
writev(r2, &(0x7f0000000580)=[{&(0x7f00000005c0)="11", 0x1}, {0x0}], 0x2)
close(r0)

103.285247ms ago: executing program 0 (id=1658):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = syz_ublk_setup_io_uring(0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xf}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0xffffffffffffff0f, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r4=>0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
syz_ublk_setup_queues(r6, r4, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x3, 0x255, 0x0, r6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x2, 0x1000000, 0x10000003}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x8000, 0x2, 0x146, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x683d, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x20002, 0x1, 0xffffffef}}], 0x1, &(0x7f0000000340)={0x2e, 0x45, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x700, 0x20, {}, 0x0, 0x0, '\x00', {0x1, 0x5, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e"], 0x48)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)

0s ago: executing program 5 (id=1659):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
r1 = socket$key(0xf, 0x3, 0x2)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80000)
splice(r1, 0x0, r2, 0x0, 0x6, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

kernel console output (not intermixed with test programs):

_print_info+0x20/0x20
[   97.181301][ T6340]  ? load_image+0x420/0x420
[   97.185830][ T6340]  ? __might_sleep+0xe0/0xe0
[   97.190445][ T6340]  ? __lock_acquire+0x7d80/0x7d80
[   97.195503][ T6340]  should_fail_ex+0x394/0x4c0
[   97.200223][ T6340]  should_failslab+0x9/0x20
[   97.204756][ T6340]  slab_pre_alloc_hook+0x59/0x300
[   97.209816][ T6340]  kmem_cache_alloc+0x5a/0x2c0
[   97.214612][ T6340]  ? __kernfs_new_node+0xe5/0x7f0
[   97.219676][ T6340]  __kernfs_new_node+0xe5/0x7f0
[   97.224569][ T6340]  ? kernfs_new_node+0x260/0x260
[   97.229552][ T6340]  ? up_write+0x1be/0x410
[   97.233911][ T6340]  kernfs_new_node+0x14c/0x260
[   97.238703][ T6340]  __kernfs_create_file+0x4b/0x2e0
[   97.243832][ T6340]  sysfs_add_file_mode_ns+0x237/0x2f0
[   97.249228][ T6340]  internal_create_group+0x431/0xd10
[   97.254516][ T6340]  ? kernfs_add_one+0x149/0x6b0
[   97.259370][ T6340]  ? down_read_killable+0x340/0x340
[   97.264583][ T6340]  ? sysfs_create_group+0x20/0x20
[   97.269608][ T6340]  ? up_write+0x1be/0x410
[   97.273937][ T6340]  sysfs_create_groups+0x59/0x120
[   97.278963][ T6340]  device_add_attrs+0x1b2/0x830
[   97.283813][ T6340]  ? device_add_class_symlinks+0x240/0x240
[   97.289624][ T6340]  ? kobject_put+0x41a/0x450
[   97.294223][ T6340]  ? device_add_class_symlinks+0x21f/0x240
[   97.300036][ T6340]  device_add+0x51a/0xc40
[   97.304370][ T6340]  wakeup_source_sysfs_add+0x1d3/0x2c0
[   97.309834][ T6340]  wakeup_source_register+0x163/0x240
[   97.315216][ T6340]  ep_insert+0xeb2/0x1990
[   97.319561][ T6340]  ? ep_loop_check+0x1b0/0x1b0
[   97.324341][ T6340]  ? __lock_acquire+0x7d80/0x7d80
[   97.329381][ T6340]  do_epoll_ctl+0x8bc/0xf40
[   97.333893][ T6340]  __x64_sys_epoll_ctl+0x166/0x1b0
[   97.339013][ T6340]  ? ep_modify+0xa80/0xa80
[   97.343435][ T6340]  ? lockdep_hardirqs_on+0x98/0x150
[   97.348640][ T6340]  do_syscall_64+0x55/0xb0
[   97.353059][ T6340]  ? clear_bhb_loop+0x40/0x90
[   97.357736][ T6340]  ? clear_bhb_loop+0x40/0x90
[   97.362415][ T6340]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   97.368303][ T6340] RIP: 0033:0x7f13ed19e159
[   97.372721][ T6340] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   97.392324][ T6340] RSP: 002b:00007f13ee074028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9
[   97.400734][ T6340] RAX: ffffffffffffffda RBX: 00007f13ed425fa0 RCX: 00007f13ed19e159
[   97.408699][ T6340] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000005
[   97.416669][ T6340] RBP: 00007f13ed235024 R08: 0000000000000000 R09: 0000000000000000
[   97.424638][ T6340] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[   97.432603][ T6340] R13: 00007f13ed426038 R14: 00007f13ed425fa0 R15: 00007ffe2ae55508
[   97.440580][ T6340]  </TASK>
[   97.694052][    T9] hid-generic 0003:046D:C31C.0003: unknown main item tag 0x0
[   97.747239][ T6349] CacheFiles: Failed to register: -95
[   97.776720][    T9] hid-generic 0003:046D:C31C.0003: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.1-1/input0
[   98.445009][ T6338] usb 2-1: reset high-speed USB device number 4 using dummy_hcd
[   98.506879][ T6370] netlink: 4 bytes leftover after parsing attributes in process `syz.0.190'.
[   98.676176][ T6374] loop0: detected capacity change from 0 to 1024
[   98.916965][ T6338] usbhid 2-1:0.0: reset_resume error -1
[   99.204057][ T5813] usb 2-1: USB disconnect, device number 4
[   99.222339][ T6382] loop0: detected capacity change from 0 to 2048
[   99.246053][ T6382] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[   99.276480][ T6382] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[   99.298880][ T6382] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   99.468285][ T6387] loop2: detected capacity change from 0 to 1024
[   99.508451][ T6387] EXT4-fs (loop2): inodes count not valid: 1 vs 32
[  100.164440][ T6401] loop3: detected capacity change from 0 to 512
[  100.178171][ T6401] EXT4-fs error (device loop3): ext4_orphan_get:1408: inode #15: comm syz.3.202: inode has both inline data and extents flags
[  100.205002][ T6401] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.202: couldn't read orphan inode 15 (err -117)
[  100.219467][ T6401] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  100.287468][   T27] audit: type=1800 audit(1788527544.417:6): pid=6401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.202" name="file1" dev="loop3" ino=18 res=0 errno=0
[  100.453562][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  100.610519][ T6414] warning: `syz.3.206' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  100.739572][ T6416] loop3: detected capacity change from 0 to 128
[  100.767879][ T6416] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  100.788756][ T6416] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  100.992489][ T6420] netlink: 24 bytes leftover after parsing attributes in process `syz.1.208'.
[  101.278817][ T5773] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  101.430193][ T6429] FAULT_INJECTION: forcing a failure.
[  101.430193][ T6429] name failslab, interval 1, probability 0, space 0, times 0
[  101.476136][ T6429] CPU: 0 PID: 6429 Comm: syz.3.210 Not tainted syzkaller #0
[  101.483481][ T6429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  101.493561][ T6429] Call Trace:
[  101.496885][ T6429]  <TASK>
[  101.499803][ T6429]  dump_stack_lvl+0x18c/0x250
[  101.504497][ T6429]  ? show_regs_print_info+0x20/0x20
[  101.509729][ T6429]  ? load_image+0x420/0x420
[  101.514262][ T6429]  ? __might_sleep+0xe0/0xe0
[  101.518886][ T6429]  ? __lock_acquire+0x7d80/0x7d80
[  101.523952][ T6429]  should_fail_ex+0x394/0x4c0
[  101.528669][ T6429]  should_failslab+0x9/0x20
[  101.533208][ T6429]  slab_pre_alloc_hook+0x59/0x300
[  101.538266][ T6429]  ? memcg_list_lru_alloc+0x335/0xb00
[  101.543664][ T6429]  ? memcg_list_lru_alloc+0x335/0xb00
[  101.549066][ T6429]  __kmem_cache_alloc_node+0x53/0x250
[  101.554481][ T6429]  ? memcg_list_lru_alloc+0x335/0xb00
[  101.559888][ T6429]  __kmalloc+0xa7/0x240
[  101.564087][ T6429]  memcg_list_lru_alloc+0x335/0xb00
[  101.569326][ T6429]  ? memcg_reparent_list_lrus+0x860/0x860
[  101.575088][ T6429]  ? get_obj_cgroup_from_current+0xd4/0x280
[  101.581012][ T6429]  slab_pre_alloc_hook+0x2ad/0x300
[  101.586145][ T6429]  ? slab_pre_alloc_hook+0xb1/0x300
[  101.591338][ T6429]  kmem_cache_alloc_lru+0x4d/0x2b0
[  101.596451][ T6429]  ? iget_locked+0x205/0x8c0
[  101.601078][ T6429]  iget_locked+0x205/0x8c0
[  101.605515][ T6429]  kernfs_get_inode+0x4f/0x6e0
[  101.610286][ T6429]  ? down_read+0x1ac/0x2e0
[  101.614733][ T6429]  kernfs_get_tree+0x461/0x720
[  101.619515][ T6429]  sysfs_get_tree+0x46/0x110
[  101.624096][ T6429]  vfs_get_tree+0x8c/0x280
[  101.628520][ T6429]  do_new_mount+0x24a/0xa40
[  101.633034][ T6429]  __se_sys_mount+0x2e7/0x3d0
[  101.637723][ T6429]  ? __x64_sys_mount+0xc0/0xc0
[  101.642527][ T6429]  ? lockdep_hardirqs_on+0x98/0x150
[  101.647757][ T6429]  ? __x64_sys_mount+0x20/0xc0
[  101.652566][ T6429]  do_syscall_64+0x55/0xb0
[  101.657011][ T6429]  ? clear_bhb_loop+0x40/0x90
[  101.661710][ T6429]  ? clear_bhb_loop+0x40/0x90
[  101.666403][ T6429]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  101.672299][ T6429] RIP: 0033:0x7fe46979e159
[  101.676739][ T6429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  101.696370][ T6429] RSP: 002b:00007fe46a642028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  101.704795][ T6429] RAX: ffffffffffffffda RBX: 00007fe469a25fa0 RCX: 00007fe46979e159
[  101.712788][ T6429] RDX: 0000200000000600 RSI: 0000200000000400 RDI: 0000000000000000
[  101.720778][ T6429] RBP: 00007fe469835024 R08: 0000000000000000 R09: 0000000000000000
[  101.728761][ T6429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  101.736727][ T6429] R13: 00007fe469a26038 R14: 00007fe469a25fa0 R15: 00007ffddeb135f8
[  101.744698][ T6429]  </TASK>
[  102.001717][ T6444] loop0: detected capacity change from 0 to 256
[  102.020191][   T12] Bluetooth: hci4: Frame reassembly failed (-84)
[  102.043791][   T12] Bluetooth: hci4: Frame reassembly failed (-84)
[  102.050845][ T6442] Bluetooth: MGMT ver 1.22
[  102.069777][ T6444] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011f1c, chksum : 0x850fc7e5, utbl_chksum : 0xe619d30d)
[  102.079028][ T6442] loop2: detected capacity change from 0 to 512
[  102.113895][ T6442] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  102.160716][ T6442] EXT4-fs (loop2): orphan cleanup on readonly fs
[  102.176814][ T6442] EXT4-fs error (device loop2): ext4_orphan_get:1434: comm syz.2.218: bad orphan inode 16
[  102.206672][ T6442] ext4_test_bit(bit=15, block=18) = 1
[  102.215828][ T6442] is_bad_inode(inode)=0
[  102.220092][ T6442] NEXT_ORPHAN(inode)=83886080
[  102.225473][ T6442] max_ino=32
[  102.231189][ T6442] i_nlink=0
[  102.313418][ T3488] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  102.338762][ T3488] EXT4-fs error (device loop2): ext4_release_dquot:6989: comm kworker/u4:11: Failed to release dquot type 1
[  102.360469][ T6442] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  102.565675][ T6451] raw_sendmsg: syz.3.222 forgot to set AF_INET. Fix it!
[  103.622133][ T5813] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  103.834911][ T5813] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  103.852731][ T5813] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  103.864239][ T5813] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  103.886979][ T5813] usb 1-1: config 0 descriptor??
[  104.041989][   T51] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  104.129624][ T5813] usbhid 1-1:0.0: can't add hid device: -71
[  104.179101][ T5813] usbhid: probe of 1-1:0.0 failed with error -71
[  104.211417][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.242917][ T5813] usb 1-1: USB disconnect, device number 2
[  104.357788][ T6484] loop1: detected capacity change from 0 to 40427
[  104.392148][ T6484] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  104.399988][ T6484] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  104.464812][ T6484] F2FS-fs (loop1): Found nat_bits in checkpoint
[  104.524158][ T6487] loop3: detected capacity change from 0 to 1024
[  104.554252][ T6484] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  104.561365][ T6484] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  104.612852][ T6487] hfsplus: request for non-existent node 33423360 in B*Tree
[  104.630913][ T6487] hfsplus: request for non-existent node 33423360 in B*Tree
[  104.657349][ T6487] hfsplus: request for non-existent node 33423360 in B*Tree
[  104.673183][ T6487] hfsplus: request for non-existent node 33423360 in B*Tree
[  104.722907][ T6487] hfsplus: request for non-existent node 33423360 in B*Tree
[  104.742784][ T6487] hfsplus: request for non-existent node 33423360 in B*Tree
[  104.794454][ T6487] hfsplus: request for non-existent node 33423360 in B*Tree
[  104.811899][ T6487] hfsplus: request for non-existent node 33423360 in B*Tree
[  104.836340][ T6487] hfsplus: request for non-existent node 33423360 in B*Tree
[  104.852261][ T5813] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  104.853232][ T6487] hfsplus: request for non-existent node 33423360 in B*Tree
[  105.047658][ T5813] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  105.069289][ T5813] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40
[  105.079281][ T6496] hfsplus: request for non-existent node 33423360 in B*Tree
[  105.089326][ T6496] hfsplus: request for non-existent node 33423360 in B*Tree
[  105.091347][ T6484] syz.1.232: attempt to access beyond end of device
[  105.091347][ T6484] loop1: rw=2049, sector=77824, nr_sectors = 2048 limit=40427
[  105.099417][ T5813] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  105.126374][ T6484] syz.1.232: attempt to access beyond end of device
[  105.126374][ T6484] loop1: rw=2049, sector=79872, nr_sectors = 2048 limit=40427
[  105.164819][ T6484] syz.1.232: attempt to access beyond end of device
[  105.164819][ T6484] loop1: rw=2049, sector=49152, nr_sectors = 3904 limit=40427
[  105.174301][ T5813] usb 1-1: config 0 descriptor??
[  105.183780][ T6484] syz.1.232: attempt to access beyond end of device
[  105.183780][ T6484] loop1: rw=2049, sector=53056, nr_sectors = 192 limit=40427
[  105.190908][ T6484] syz.1.232: attempt to access beyond end of device
[  105.190908][ T6484] loop1: rw=2049, sector=57344, nr_sectors = 1136 limit=40427
[  106.380139][ T5813] aiptek 1-1:0.0: Aiptek using 400 ms programming speed
[  106.530901][ T5813] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input9
[  107.215200][ T5813] usb 1-1: USB disconnect, device number 3
[  107.221094][    C0] aiptek 1-1:0.0: aiptek_irq - usb_submit_urb failed with result -19
[  107.659885][   T79] Bluetooth: hci4: Frame reassembly failed (-84)
[  108.531913][  T789] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  108.711907][  T789] usb 2-1: Using ep0 maxpacket: 16
[  108.719509][  T789] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  108.740350][  T789] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  108.751261][  T789] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.764416][  T789] usb 2-1: Product: syz
[  108.768707][  T789] usb 2-1: Manufacturer: syz
[  108.775049][  T789] usb 2-1: SerialNumber: syz
[  108.786489][  T789] usb 2-1: config 0 descriptor??
[  108.798147][  T789] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  108.811010][  T789] em28xx 2-1:0.0: DVB interface 0 found: bulk
[  109.457671][  T789] em28xx 2-1:0.0: unknown em28xx chip ID (0)
[  109.722852][ T5783] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  109.722878][   T51] Bluetooth: hci4: command 0x1003 tx timeout
[  110.088659][  T789] em28xx 2-1:0.0: failed to get i2c transfer status from bridge register (error=-5)
[  110.120414][  T789] em28xx 2-1:0.0: board has no eeprom
[  110.201880][  T789] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  110.228196][  T789] em28xx 2-1:0.0: dvb set to bulk mode.
[  110.249645][   T23] em28xx 2-1:0.0: Binding DVB extension
[  110.267711][  T789] usb 2-1: USB disconnect, device number 5
[  110.305153][  T789] em28xx 2-1:0.0: Disconnecting em28xx
[  110.423050][   T23] em28xx 2-1:0.0: Registering input extension
[  110.430735][  T789] em28xx 2-1:0.0: Closing input extension
[  110.481230][ T6556] sctp: [Deprecated]: syz.3.252 (pid 6556) Use of struct sctp_assoc_value in delayed_ack socket option.
[  110.481230][ T6556] Use struct sctp_sack_info instead
[  110.499433][  T789] em28xx 2-1:0.0: Freeing device
[  110.732102][  T790] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  110.889073][ T6565] loop3: detected capacity change from 0 to 256
[  110.926457][ T6565] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  110.946210][  T790] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  110.962018][  T790] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  111.013078][  T790] usb 1-1: config 0 descriptor??
[  111.022167][  T790] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  111.622516][ T6567] loop2: detected capacity change from 0 to 32768
[  111.665117][ T6567] (syz.2.258,6567,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  111.690584][ T6567] (syz.2.258,6567,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  111.735099][ T6567] (syz.2.258,6567,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC.
[  111.768147][ T6567] JBD2: Ignoring recovery information on journal
[  111.816716][ T6567] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  111.861304][ T6581] loop1: detected capacity change from 0 to 512
[  111.914997][ T6581] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  111.987610][ T6581] EXT4-fs (loop1): 1 truncate cleaned up
[  112.038243][ T6581] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  112.210953][ T6567] ocfs2: Unmounting device (7,2) on (node local)
[  112.279679][  T790] gspca_stv06xx: I2C: Read error writing address: -71
[  112.297889][  T790] usb 1-1: USB disconnect, device number 4
[  112.558300][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  113.338763][ T6597] syz.1.265 (6597) used greatest stack depth: 20280 bytes left
[  113.701312][ T6605] loop0: detected capacity change from 0 to 40427
[  113.731492][ T6605] F2FS-fs (loop0): invalid crc value
[  113.785001][ T6605] F2FS-fs (loop0): Found nat_bits in checkpoint
[  113.937223][ T6605] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  114.031944][ T5779] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  114.046480][ T6619] netlink: 209216 bytes leftover after parsing attributes in process `syz.2.273'.
[  114.072100][ T6619] net_ratelimit: 10 callbacks suppressed
[  114.072119][ T6619] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  114.094933][ T5776] syz-executor: attempt to access beyond end of device
[  114.094933][ T5776] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  114.138907][ T5776] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  114.226135][ T5779] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  114.245196][ T5779] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.269647][ T5779] usb 4-1: Product: syz
[  114.281934][ T5779] usb 4-1: Manufacturer: syz
[  114.294062][ T5779] usb 4-1: SerialNumber: syz
[  114.889823][ T5779] rtl8150 4-1:1.0: couldn't reset the device
[  114.896321][ T5779] rtl8150: probe of 4-1:1.0 failed with error -5
[  114.932145][ T5779] usb 4-1: USB disconnect, device number 4
[  115.807657][ T6656] netlink: 24 bytes leftover after parsing attributes in process `syz.3.285'.
[  116.702081][ T6644] syz.1.281 (6644) used greatest stack depth: 19560 bytes left
[  116.845281][ T6679] bridge0: port 3(syz_tun) entered blocking state
[  116.868858][ T6679] bridge0: port 3(syz_tun) entered disabled state
[  116.901234][ T6679] syz_tun: entered allmulticast mode
[  116.934483][ T6679] syz_tun: entered promiscuous mode
[  116.960463][ T6679] bridge0: port 3(syz_tun) entered blocking state
[  116.968002][ T6679] bridge0: port 3(syz_tun) entered forwarding state
[  117.076370][ T6685] netlink: 4 bytes leftover after parsing attributes in process `syz.2.291'.
[  117.600362][ T6695] loop0: detected capacity change from 0 to 2048
[  117.664291][ T6695] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  117.682617][ T6695] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  117.857066][ T6695] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  119.082125][ T6724] netlink: 12 bytes leftover after parsing attributes in process `syz.0.305'.
[  119.151288][ T6724] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  119.160144][ T6724] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  119.169228][ T6724] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  119.178026][ T6724] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  119.217770][ T6724] netlink: 12 bytes leftover after parsing attributes in process `syz.0.305'.
[  119.468542][ T6731] Dead loop on virtual device ip6_vti0, fix it urgently!
[  119.691746][ T6733] netlink: 68 bytes leftover after parsing attributes in process `syz.3.309'.
[  119.791984][  T790] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  119.963419][ T6736] loop3: detected capacity change from 0 to 16
[  120.007199][  T790] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  120.035593][  T790] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00
[  120.048429][ T6736] erofs: (device loop3): mounted with root inode @ nid 36.
[  120.061968][  T790] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.094659][  T790] usb 1-1: Product: syz
[  120.098874][  T790] usb 1-1: Manufacturer: syz
[  120.117529][  T790] usb 1-1: SerialNumber: syz
[  120.182558][  T790] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[  120.192908][  T790] cdc_wdm 1-1:1.0: Unknown control protocol
[  120.503941][ T6738] loop1: detected capacity change from 0 to 2048
[  120.618070][ T6741] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -25 in[58, 4038] out[2639]
[  120.622248][ T6738] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  120.633904][  T789] usb 1-1: USB disconnect, device number 5
[  120.662406][ T6741] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 39 of nid 36
[  120.823888][ T6736] erofs: (device loop3): z_erofs_readahead: readahead error at folio 38 @ nid 36
[  120.858000][ T6736] erofs: (device loop3): z_erofs_readahead: readahead error at folio 36 @ nid 36
[  120.891537][ T6736] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance 1468 @ lcn 31 of nid 36
[  120.922223][ T6736] erofs: (device loop3): z_erofs_readahead: readahead error at folio 31 @ nid 36
[  120.943326][ T6736] erofs: (device loop3): z_erofs_readahead: readahead error at folio 26 @ nid 36
[  121.009130][ T6736] erofs: (device loop3): z_erofs_readahead: readahead error at folio 24 @ nid 36
[  121.030638][ T6736] erofs: (device loop3): z_erofs_readahead: readahead error at folio 19 @ nid 36
[  121.076835][ T6736] erofs: (device loop3): z_erofs_readahead: readahead error at folio 13 @ nid 36
[  121.086633][ T6736] erofs: (device loop3): z_erofs_readahead: readahead error at folio 8 @ nid 36
[  121.101668][ T6736] erofs: (device loop3): z_erofs_readahead: readahead error at folio 6 @ nid 36
[  121.121357][ T6736] erofs: (device loop3): z_erofs_readahead: readahead error at folio 4 @ nid 36
[  121.137803][ T6736] erofs: (device loop3): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36
[  121.165666][ T6736] erofs: (device loop3): z_erofs_readahead: readahead error at folio 0 @ nid 36
[  121.178612][ T6736] syz.3.310: attempt to access beyond end of device
[  121.178612][ T6736] loop3: rw=524288, sector=296, nr_sectors = 16 limit=16
[  121.197518][ T6736] syz.3.310: attempt to access beyond end of device
[  121.197518][ T6736] loop3: rw=524288, sector=1049264, nr_sectors = 16 limit=16
[  121.214815][ T6736] syz.3.310: attempt to access beyond end of device
[  121.214815][ T6736] loop3: rw=524288, sector=16, nr_sectors = 8 limit=16
[  121.232225][ T6736] syz.3.310: attempt to access beyond end of device
[  121.232225][ T6736] loop3: rw=524288, sector=720, nr_sectors = 128 limit=16
[  121.260277][ T6736] syz.3.310: attempt to access beyond end of device
[  121.260277][ T6736] loop3: rw=524288, sector=13478624080, nr_sectors = 24 limit=16
[  121.282284][ T6736] syz.3.310: attempt to access beyond end of device
[  121.282284][ T6736] loop3: rw=524288, sector=13478624032, nr_sectors = 48 limit=16
[  121.306642][ T6736] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -25 in[58, 4038] out[4055]
[  121.320472][ T6736] erofs: (device loop3): z_erofs_readahead: readahead error at folio 79 @ nid 36
[  121.329955][ T6736] erofs: (device loop3): z_erofs_readahead: readahead error at folio 78 @ nid 36
[  121.348711][ T6736] erofs: (device loop3): z_erofs_readahead: readahead error at folio 72 @ nid 36
[  121.358295][ T6736] erofs: (device loop3): z_erofs_readahead: readahead error at folio 71 @ nid 36
[  121.402227][ T6736] erofs: (device loop3): z_erofs_readahead: readahead error at folio 70 @ nid 36
[  121.418759][ T6736] erofs: (device loop3): z_erofs_readahead: readahead error at folio 63 @ nid 36
[  121.448002][ T6736] erofs: (device loop3): z_erofs_readahead: readahead error at folio 61 @ nid 36
[  121.486113][ T6736] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance 1024 @ lcn 58 of nid 36
[  121.508096][ T6736] erofs: (device loop3): z_erofs_readahead: readahead error at folio 59 @ nid 36
[  121.531841][ T6736] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance 1024 @ lcn 58 of nid 36
[  121.551857][ T6736] erofs: (device loop3): z_erofs_readahead: readahead error at folio 58 @ nid 36
[  121.581988][ T6736] erofs: (device loop3): z_erofs_readahead: readahead error at folio 56 @ nid 36
[  121.591201][ T6736] erofs: (device loop3): z_erofs_readahead: readahead error at folio 54 @ nid 36
[  121.657895][ T6736] erofs: (device loop3): z_erofs_readahead: readahead error at folio 51 @ nid 36
[  121.706955][ T6736] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance 1586 @ lcn 46 of nid 36
[  121.743239][ T6736] erofs: (device loop3): z_erofs_readahead: readahead error at folio 47 @ nid 36
[  121.757854][ T6751] netlink: 24 bytes leftover after parsing attributes in process `syz.1.315'.
[  121.759573][ T6749] loop0: detected capacity change from 0 to 32768
[  121.771866][ T6736] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance 1586 @ lcn 46 of nid 36
[  121.798423][ T6749] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.316 (6749)
[  121.829574][ T6749] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  121.840908][ T6749] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  121.850091][ T6749] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  121.852337][ T6736] erofs: (device loop3): z_erofs_readahead: readahead error at folio 46 @ nid 36
[  121.859935][ T6749] BTRFS info (device loop0): use zstd compression, level 3
[  121.876460][ T6749] BTRFS info (device loop0): force clearing of disk cache
[  121.884053][ T6749] BTRFS info (device loop0): enabling disk space caching
[  121.891695][ T6749] BTRFS info (device loop0): disk space caching is enabled
[  121.907592][ T6736] erofs: (device loop3): z_erofs_readahead: readahead error at folio 45 @ nid 36
[  121.918349][ T6736] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36
[  121.944823][ T6736] erofs: (device loop3): z_erofs_readahead: readahead error at folio 43 @ nid 36
[  121.967006][ T6736] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36
[  122.002006][ T6736] erofs: (device loop3): z_erofs_readahead: readahead error at folio 42 @ nid 36
[  122.054095][ T6749] BTRFS info (device loop0): enabling ssd optimizations
[  122.061121][ T6749] BTRFS info (device loop0): auto enabling async discard
[  122.078045][ T6736] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance 774 @ lcn 40 of nid 36
[  122.094250][ T6749] BTRFS info (device loop0): rebuilding free space tree
[  122.123595][ T6736] erofs: (device loop3): z_erofs_readahead: readahead error at folio 41 @ nid 36
[  122.153562][ T6736] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance 774 @ lcn 40 of nid 36
[  122.165249][ T6736] erofs: (device loop3): z_erofs_readahead: readahead error at folio 40 @ nid 36
[  122.174786][ T6736] syz.3.310: attempt to access beyond end of device
[  122.174786][ T6736] loop3: rw=524288, sector=24, nr_sectors = 72 limit=16
[  122.188465][ T6736] syz.3.310: attempt to access beyond end of device
[  122.188465][ T6736] loop3: rw=524288, sector=221968, nr_sectors = 8 limit=16
[  122.204544][ T6749] BTRFS info (device loop0): disabling free space tree
[  122.211600][ T6749] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  122.221825][ T6749] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  122.238944][ T6736] syz.3.310: attempt to access beyond end of device
[  122.238944][ T6736] loop3: rw=524288, sector=14552337248, nr_sectors = 16 limit=16
[  122.253437][ T6736] syz.3.310: attempt to access beyond end of device
[  122.253437][ T6736] loop3: rw=524288, sector=14546590680, nr_sectors = 16 limit=16
[  122.286715][ T6736] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -25 in[58, 4038] out[4095]
[  123.083072][ T5776] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  124.183150][ T6805] fuse: Bad value for 'fd'
[  124.771892][ T5779] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  124.949955][ T6826] netlink: 12 bytes leftover after parsing attributes in process `syz.2.336'.
[  124.985323][ T5779] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  125.028974][ T6826] 8021q: adding VLAN 0 to HW filter on device bond1
[  125.030449][ T5779] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  125.037125][ T6830] batman_adv: batadv0: Interface deactivated: dummy0
[  125.071297][ T6830] batman_adv: batadv0: Removing interface: dummy0
[  125.101048][ T5779] usb 4-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00
[  125.122003][ T6830] bond1: (slave dummy0): Enslaving as an active interface with an up link
[  125.123420][ T5779] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.181954][ T5779] usb 4-1: Product: syz
[  125.186256][ T5779] usb 4-1: Manufacturer: syz
[  125.190875][ T5779] usb 4-1: SerialNumber: syz
[  125.221562][ T5779] ti_usb_3410_5052 4-1:2.0: TI USB 5052 2 port adapter converter detected
[  125.269857][ T5779] usb 4-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0
[  125.321036][ T5779] usb 4-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1
[  125.334848][ T6826] netlink: 'syz.2.336': attribute type 10 has an invalid length.
[  125.375663][ T6826] netlink: 40 bytes leftover after parsing attributes in process `syz.2.336'.
[  125.417790][ T6826] dummy0: entered promiscuous mode
[  125.462785][ T6826] bond1: (slave dummy0): Releasing backup interface
[  125.984032][ T6460] syz.1.223 (6460) used greatest stack depth: 17864 bytes left
[  126.284091][ T5783] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11
[  127.130810][ T6864] bridge0: port 2(bridge_slave_1) entered disabled state
[  127.139691][ T6864] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.148757][ T6864] bridge0: entered allmulticast mode
[  127.182979][ T6864] bridge_slave_1: left allmulticast mode
[  127.188734][ T6864] bridge_slave_1: left promiscuous mode
[  127.196027][ T6864] bridge0: port 2(bridge_slave_1) entered disabled state
[  127.209243][ T6864] bridge_slave_0: left allmulticast mode
[  127.216048][ T6864] bridge_slave_0: left promiscuous mode
[  127.221979][ T6864] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.323438][ T6820] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot clear input buffers, -110
[  127.338773][  T790] usb 4-1: USB disconnect, device number 5
[  127.371765][  T790] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0
[  127.406154][  T790] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1
[  127.433689][  T790] ti_usb_3410_5052 4-1:2.0: device disconnected
[  130.018563][ T6926] loop3: detected capacity change from 0 to 2048
[  130.084018][ T6926] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  130.172575][ T6926] fscrypt (loop3, inode 12): Error -61 getting encryption context
[  130.297000][ T6926] EXT4-fs error (device loop3): xattr_find_entry:337: inode #12: comm syz.3.370: corrupted xattr entries
[  130.332127][ T6926] fscrypt (loop3, inode 12): Error -117 getting encryption context
[  130.515852][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.627246][ T6938] netlink: 188 bytes leftover after parsing attributes in process `syz.0.374'.
[  130.646567][ T6938] netlink: 105 bytes leftover after parsing attributes in process `syz.0.374'.
[  130.662101][ T6938] netlink: 105 bytes leftover after parsing attributes in process `syz.0.374'.
[  131.035020][ T6952] overlayfs: failed to clone lowerpath
[  131.239129][ T6957] overlayfs: failed to clone lowerpath
[  132.925077][ T1284] ieee802154 phy0 wpan0: encryption failed: -22
[  132.931461][ T1284] ieee802154 phy1 wpan1: encryption failed: -22
[  134.112866][ T7014] bridge0: port 2(bridge_slave_1) entered disabled state
[  134.121381][ T7014] bridge0: port 1(bridge_slave_0) entered disabled state
[  134.172167][ T7014] bridge0: entered allmulticast mode
[  134.209094][ T7015] bridge_slave_1: left allmulticast mode
[  134.236186][ T7015] bridge_slave_1: left promiscuous mode
[  134.292139][ T7015] bridge0: port 2(bridge_slave_1) entered disabled state
[  134.341670][ T7015] bridge_slave_0: left allmulticast mode
[  134.371990][ T7015] bridge_slave_0: left promiscuous mode
[  134.398089][ T7015] bridge0: port 1(bridge_slave_0) entered disabled state
[  136.104562][ T7051] loop1: detected capacity change from 0 to 8192
[  136.162918][ T7051] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  136.176510][ T7051] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal
[  136.186065][ T7051] REISERFS (device loop1): using ordered data mode
[  136.192676][ T7051] reiserfs: using flush barriers
[  136.203467][ T7051] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  136.232777][ T7051] REISERFS (device loop1): checking transaction log (loop1)
[  136.268058][ T7051] REISERFS (device loop1): Using r5 hash to sort names
[  136.319992][ T7051] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  138.650268][ T7091] comedi comedi3: pcl818: I/O port conflict (0x6,16)
[  139.342572][ T7098] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1)
[  140.301979][    T8] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  140.506601][    T8] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  140.535527][    T8] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  140.558963][    T8] usb 1-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00
[  140.574149][    T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.596020][    T8] usb 1-1: Product: syz
[  140.600221][    T8] usb 1-1: Manufacturer: syz
[  140.612107][    T8] usb 1-1: SerialNumber: syz
[  140.629713][    T8] ti_usb_3410_5052 1-1:2.0: TI USB 5052 2 port adapter converter detected
[  140.668628][    T8] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0
[  140.689163][    T8] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1
[  141.957336][ T5783] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11
[  142.422202][ T7135] netlink: 24 bytes leftover after parsing attributes in process `syz.3.435'.
[  142.604587][ T7109] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot clear input buffers, -110
[  142.633207][   T23] usb 1-1: USB disconnect, device number 6
[  142.669024][   T23] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0
[  142.719141][   T23] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1
[  142.733153][   T23] ti_usb_3410_5052 1-1:2.0: device disconnected
[  142.760323][ T7137] loop1: detected capacity change from 0 to 8192
[  144.231175][ T7170] Illegal XDP return value 2013585576 on prog  (id 46) dev syz_tun, expect packet loss!
[  144.343092][ T7176] loop0: detected capacity change from 0 to 256
[  144.365227][ T7176] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  144.376359][ T7153] loop1: detected capacity change from 0 to 40427
[  144.407348][ T7153] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  144.428523][ T7153] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  144.463668][ T7153] F2FS-fs (loop1): Found nat_bits in checkpoint
[  144.646303][ T7153] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  144.664360][ T7153] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  145.595080][ T7199] netlink: 'syz.2.463': attribute type 1 has an invalid length.
[  145.645733][ T7199] 8021q: adding VLAN 0 to HW filter on device bond2
[  145.767286][ T7199] 8021q: adding VLAN 0 to HW filter on device batadv0
[  145.778089][ T7199] bond2: (slave batadv0): making interface the new active one
[  145.786803][ T7199] bond2: (slave batadv0): Enslaving as an active interface with an up link
[  145.854939][ T7208] trusted_key: syz.2.466 sent an empty control message without MSG_MORE.
[  145.882087][ T5779] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  146.064573][ T5779] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  146.079857][ T7217] fuse: Bad value for 'fd'
[  146.087481][ T7217] fuse: Bad value for 'fd'
[  146.089184][ T5779] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  146.113298][ T5779] usb 2-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00
[  146.127535][ T5779] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  146.135703][ T5779] usb 2-1: Product: syz
[  146.140110][ T5779] usb 2-1: Manufacturer: syz
[  146.144998][ T5779] usb 2-1: SerialNumber: syz
[  146.167126][ T5779] ti_usb_3410_5052 2-1:2.0: TI USB 5052 2 port adapter converter detected
[  146.188556][ T5779] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0
[  146.206295][ T5779] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1
[  146.684632][ T7235] netlink: 'syz.0.476': attribute type 1 has an invalid length.
[  146.733544][ T7235] 8021q: adding VLAN 0 to HW filter on device bond2
[  146.792676][ T7235] 8021q: adding VLAN 0 to HW filter on device batadv0
[  146.801639][ T7235] bond2: (slave batadv0): making interface the new active one
[  146.810179][ T7235] bond2: (slave batadv0): Enslaving as an active interface with an up link
[  146.833835][ T7240] netlink: 4 bytes leftover after parsing attributes in process `syz.3.479'.
[  148.212084][ T7201] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot clear input buffers, -110
[  148.239624][   T23] usb 2-1: USB disconnect, device number 6
[  148.276300][   T23] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0
[  148.318860][   T23] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1
[  148.351376][   T23] ti_usb_3410_5052 2-1:2.0: device disconnected
[  149.092399][ T5891] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  149.288567][ T5891] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  149.298813][ T5891] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  149.314406][ T5891] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  149.327492][ T5891] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  149.341627][ T5891] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[  149.352808][ T5891] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  149.980555][ T7291] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3296079272 (6592158544 ns) > initial count (3847508052 ns). Using initial count to start timer.
[  150.370247][   T27] audit: type=1326 audit(1788527594.497:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7300 comm="syz.1.503" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9f419e159 code=0x7ffc0000
[  150.416427][   T27] audit: type=1326 audit(1788527594.497:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7300 comm="syz.1.503" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9f419e159 code=0x7ffc0000
[  150.470906][   T27] audit: type=1326 audit(1788527594.507:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7300 comm="syz.1.503" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9f419e159 code=0x7ffc0000
[  150.522016][   T27] audit: type=1326 audit(1788527594.507:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7300 comm="syz.1.503" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9f419e159 code=0x7ffc0000
[  150.586818][   T27] audit: type=1326 audit(1788527594.507:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7300 comm="syz.1.503" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe9f415e98e code=0x7ffc0000
[  150.617578][ T5891] gud 4-1:1.0: USB-1: Failed to add TV modes (ret=-5)
[  150.641918][   T27] audit: type=1326 audit(1788527594.527:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7300 comm="syz.1.503" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9f419e159 code=0x7ffc0000
[  150.644903][ T5891] gud 4-1:1.0: USB-1: Failed to add properties (ret=-5)
[  150.681959][   T27] audit: type=1326 audit(1788527594.527:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7300 comm="syz.1.503" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9f419e159 code=0x7ffc0000
[  150.741966][ T5891] gud 4-1:1.0: Failed to get connectors (error=-5)
[  150.753436][   T27] audit: type=1326 audit(1788527594.527:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7300 comm="syz.1.503" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9f419e159 code=0x7ffc0000
[  150.762533][ T5891] gud: probe of 4-1:1.0 failed with error -5
[  150.807466][   T27] audit: type=1326 audit(1788527594.537:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7300 comm="syz.1.503" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fe9f419e159 code=0x7ffc0000
[  150.860241][ T5891] usb 4-1: USB disconnect, device number 6
[  150.887684][   T27] audit: type=1326 audit(1788527594.537:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7300 comm="syz.1.503" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9f419e159 code=0x7ffc0000
[  151.812432][ T7345] loop3: detected capacity change from 0 to 1024
[  151.832945][ T7345] EXT4-fs: Ignoring removed bh option
[  151.895848][ T7345] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  152.016957][ T7345] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  152.635177][ T7373] overlayfs: failed to clone upperpath
[  152.689319][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  152.905448][ T7379] overlayfs: metacopy with no lower data found - abort lookup (/file2)
[  153.066089][ T7398] netlink: 4 bytes leftover after parsing attributes in process `syz.3.537'.
[  153.160512][ T7400] netlink: 40 bytes leftover after parsing attributes in process `syz.1.538'.
[  153.170314][ T7400] netlink: 40 bytes leftover after parsing attributes in process `syz.1.538'.
[  153.179931][ T7400] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  153.271650][ T7405] FAULT_INJECTION: forcing a failure.
[  153.271650][ T7405] name failslab, interval 1, probability 0, space 0, times 0
[  153.285473][ T7405] CPU: 1 PID: 7405 Comm: syz.1.540 Not tainted syzkaller #0
[  153.292773][ T7405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  153.302857][ T7405] Call Trace:
[  153.306140][ T7405]  <TASK>
[  153.309059][ T7405]  dump_stack_lvl+0x18c/0x250
[  153.313750][ T7405]  ? show_regs_print_info+0x20/0x20
[  153.318944][ T7405]  ? load_image+0x420/0x420
[  153.323441][ T7405]  ? __might_sleep+0xe0/0xe0
[  153.328026][ T7405]  ? __lock_acquire+0x7d80/0x7d80
[  153.333065][ T7405]  should_fail_ex+0x394/0x4c0
[  153.337740][ T7405]  should_failslab+0x9/0x20
[  153.342259][ T7405]  slab_pre_alloc_hook+0x59/0x300
[  153.347320][ T7405]  kmem_cache_alloc+0x5a/0x2c0
[  153.352103][ T7405]  ? radix_tree_node_alloc+0x7e/0x3a0
[  153.357475][ T7405]  radix_tree_node_alloc+0x7e/0x3a0
[  153.362684][ T7405]  idr_get_free+0x28f/0xa10
[  153.367196][ T7405]  idr_alloc+0x19d/0x2e0
[  153.371428][ T7405]  ? loop_add+0x120/0x990
[  153.375746][ T7405]  ? lockdep_softirqs_off+0x440/0x440
[  153.381114][ T7405]  ? idr_alloc_u32+0x330/0x330
[  153.385888][ T7405]  ? init_timer_key+0x161/0x2a0
[  153.390750][ T7405]  loop_add+0x176/0x990
[  153.394916][ T7405]  loop_control_ioctl+0x128/0x590
[  153.399956][ T7405]  ? loop_set_hw_queue_depth+0x110/0x110
[  153.405600][ T7405]  ? bpf_lsm_file_ioctl+0x9/0x10
[  153.410536][ T7405]  ? security_file_ioctl+0x80/0xa0
[  153.415646][ T7405]  ? loop_set_hw_queue_depth+0x110/0x110
[  153.421275][ T7405]  __se_sys_ioctl+0xfd/0x170
[  153.425868][ T7405]  do_syscall_64+0x55/0xb0
[  153.430284][ T7405]  ? clear_bhb_loop+0x40/0x90
[  153.434959][ T7405]  ? clear_bhb_loop+0x40/0x90
[  153.439635][ T7405]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  153.445541][ T7405] RIP: 0033:0x7fe9f419e159
[  153.449955][ T7405] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  153.469558][ T7405] RSP: 002b:00007fe9f5155028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  153.477966][ T7405] RAX: ffffffffffffffda RBX: 00007fe9f4425fa0 RCX: 00007fe9f419e159
[  153.485939][ T7405] RDX: 0000000007000000 RSI: 0000000000004c80 RDI: 0000000000000005
[  153.493907][ T7405] RBP: 00007fe9f4235024 R08: 0000000000000000 R09: 0000000000000000
[  153.501872][ T7405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  153.509836][ T7405] R13: 00007fe9f4426038 R14: 00007fe9f4425fa0 R15: 00007ffe72af36c8
[  153.517813][ T7405]  </TASK>
[  153.640123][ T7409] EXT4-fs warning (device sda1): ext4_resize_fs:2025: can't read last block, resize aborted
[  153.892166][ T5813] usb 4-1: new full-speed USB device number 7 using dummy_hcd
[  154.131229][ T5813] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  154.161179][ T5813] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  154.170391][ T5813] usb 4-1: Product: syz
[  154.179800][ T5813] usb 4-1: Manufacturer: syz
[  154.185884][ T5813] usb 4-1: SerialNumber: syz
[  154.199982][ T5813] usb 4-1: config 0 descriptor??
[  154.222280][ T7431] loop1: detected capacity change from 0 to 2048
[  154.250813][ T7431] UDF-fs: bad mount option "giduid=forge" or missing value
[  154.275299][ T7433] netlink: 12 bytes leftover after parsing attributes in process `syz.2.552'.
[  154.427301][ T5813] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  154.438869][ T7436] netlink: 24 bytes leftover after parsing attributes in process `syz.1.553'.
[  154.481996][ T7436] netlink: 24 bytes leftover after parsing attributes in process `syz.1.553'.
[  155.286234][ T7441] loop1: detected capacity change from 0 to 131072
[  155.302923][ T7441] F2FS-fs (loop1): Invalid log sectorsize (67108873)
[  155.309742][ T7441] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  155.320344][ T7441] F2FS-fs (loop1): invalid crc value
[  155.348710][ T7441] F2FS-fs (loop1): Found nat_bits in checkpoint
[  155.423934][ T7441] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  155.431057][ T7441] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  156.378454][ T5813] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -110
[  156.721192][ T5813] usb 4-1: USB disconnect, device number 7
[  156.930502][ T7468] veth1_to_bond: entered allmulticast mode
[  156.952836][ T7468] veth1_to_bond: entered promiscuous mode
[  156.962816][ T7468] netlink: 4 bytes leftover after parsing attributes in process `syz.1.564'.
[  157.045195][ T7468] veth1_to_bond (unregistering): left promiscuous mode
[  157.051422][ T7470] loop3: detected capacity change from 0 to 1024
[  157.055253][ T7468] veth1_to_bond (unregistering): left allmulticast mode
[  157.090299][ T7470] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  157.116808][ T7468] bond0: (slave bond_slave_1): Releasing backup interface
[  157.117878][ T7470] EXT4-fs (loop3): group descriptors corrupted!
[  157.425408][ T7470] loop3: detected capacity change from 0 to 8192
[  160.925296][ T7568] overlayfs: failed to clone upperpath
[  161.926874][ T7602] sctp: [Deprecated]: syz.1.614 (pid 7602) Use of struct sctp_assoc_value in delayed_ack socket option.
[  161.926874][ T7602] Use struct sctp_sack_info instead
[  161.973363][ T7604] netlink: 'syz.0.616': attribute type 1 has an invalid length.
[  162.006850][ T7604] 8021q: adding VLAN 0 to HW filter on device bond3
[  162.053941][ T7604] 8021q: adding VLAN 0 to HW filter on device bond3
[  162.060971][ T7604] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address
[  162.074963][ T7604] bond3: (slave wireguard0): Error -95 calling set_mac_address
[  162.231595][ T7609] overlayfs: failed to clone upperpath
[  162.456517][ T7616] netlink: 4 bytes leftover after parsing attributes in process `syz.0.620'.
[  162.479725][ T7616] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  162.596084][ T7616] batman_adv: batadv0: Removing interface: batadv_slave_1
[  162.642697][ T7624] netlink: 12 bytes leftover after parsing attributes in process `syz.3.624'.
[  162.849935][ T7632] loop1: detected capacity change from 0 to 512
[  162.886931][ T7632] EXT4-fs error (device loop1): ext4_orphan_get:1408: inode #15: comm syz.1.627: iget: bad i_size value: 38620345925642
[  162.992099][ T7632] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.627: couldn't read orphan inode 15 (err -117)
[  163.042078][ T7632] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  163.132532][ T7632] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm syz.1.627: bg 0: block 5: invalid block bitmap
[  163.165509][ T7632] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 652 with error 28
[  163.179004][ T7632] EXT4-fs (loop1): This should not happen!! Data will be lost
[  163.179004][ T7632] 
[  163.192127][ T7632] EXT4-fs (loop1): Total free blocks count 0
[  163.201882][ T7632] EXT4-fs (loop1): Free/Dirty block details
[  163.208890][ T7632] EXT4-fs (loop1): free_blocks=0
[  163.214775][ T7632] EXT4-fs (loop1): dirty_blocks=656
[  163.220001][ T7632] EXT4-fs (loop1): Block reservation details
[  163.226518][ T7632] EXT4-fs (loop1): i_reserved_data_blocks=656
[  163.301443][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  163.441274][ T7658] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  163.451302][ T7658] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  163.471037][ T7658] overlayfs: inode number too big (/, ino=4611686018427387905, xinobits=3)
[  163.481274][ T7658] overlayfs: d_ino too big (., ino=4611686018427387912, xinobits=3)
[  163.495225][ T7658] overlayfs: d_ino too big (gadget, ino=4611686018427391280, xinobits=3)
[  163.503908][ T7658] overlayfs: d_ino too big (snd_seq, ino=4611686018427391410, xinobits=3)
[  163.512541][ T7658] overlayfs: d_ino too big (netdevsim, ino=4611686018427411550, xinobits=3)
[  163.521241][ T7658] overlayfs: d_ino too big (serio, ino=4611686018427391297, xinobits=3)
[  163.530949][ T7658] overlayfs: d_ino too big (ulpi, ino=4611686018427391239, xinobits=3)
[  163.539509][ T7659] overlayfs: inode number too big (/, ino=4611686018427387905, xinobits=3)
[  163.548264][ T7659] overlayfs: d_ino too big (ulpi, ino=4611686018427391239, xinobits=3)
[  163.556561][ T7659] overlayfs: d_ino too big (coreboot, ino=4611686018427436235, xinobits=3)
[  164.118451][ T7675] loop1: detected capacity change from 0 to 16
[  164.150726][ T7675] erofs: (device loop1): mounted with root inode @ nid 36.
[  164.182752][ T7675] bio_check_eod: 2 callbacks suppressed
[  164.182766][ T7675] syz.1.643: attempt to access beyond end of device
[  164.182766][ T7675] loop1: rw=0, sector=8, nr_sectors = 32 limit=16
[  164.220832][ T7675] syz.1.643: attempt to access beyond end of device
[  164.220832][ T7675] loop1: rw=524288, sector=16, nr_sectors = 32 limit=16
[  164.239733][ T7675] syz.1.643: attempt to access beyond end of device
[  164.239733][ T7675] loop1: rw=524288, sector=8, nr_sectors = 32 limit=16
[  164.662312][ T7690] loop1: detected capacity change from 0 to 1024
[  164.690254][ T7690] EXT4-fs: Ignoring removed bh option
[  164.738772][ T7690] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  165.114302][ T7697] netlink: 11575 bytes leftover after parsing attributes in process `syz.0.652'.
[  165.296544][ T7700] tipc: Failed to remove unknown binding: 66,0,0/0:3122912597/3122912598
[  165.775384][ T7709] overlayfs: failed to clone upperpath
[  165.857446][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  166.219650][   T27] kauditd_printk_skb: 23 callbacks suppressed
[  166.219664][   T27] audit: type=1800 audit(1788527610.347:40): pid=7718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.659" name="/" dev="fuse" ino=1 res=0 errno=0
[  166.362181][ T7725] netlink: 24 bytes leftover after parsing attributes in process `syz.0.665'.
[  166.441447][ T7728] loop3: detected capacity change from 0 to 1024
[  166.510938][ T7731] fuse: Bad value for 'fd'
[  166.551899][ T7728] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  166.621087][ T7728] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  166.690893][ T7742] io-wq is not configured for unbound workers
[  166.883937][ T7728] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 44 with max blocks 4 with error 28
[  166.921017][ T7728] EXT4-fs (loop3): This should not happen!! Data will be lost
[  166.921017][ T7728] 
[  166.942089][ T7728] EXT4-fs (loop3): Total free blocks count 0
[  166.951936][ T7728] EXT4-fs (loop3): Free/Dirty block details
[  166.968932][ T7728] EXT4-fs (loop3): free_blocks=0
[  166.986475][ T7728] EXT4-fs (loop3): dirty_blocks=0
[  167.005434][ T7728] EXT4-fs (loop3): Block reservation details
[  167.026496][ T7728] EXT4-fs (loop3): i_reserved_data_blocks=0
[  167.126887][ T7752] loop1: detected capacity change from 0 to 16
[  167.164902][ T7752] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  167.282498][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.365733][ T7754] 9pnet: p9_errstr2errno: server reported unknown error 0x000000
[  167.530145][ T7760] overlayfs: failed to clone upperpath
[  168.490153][ T7779] loop1: detected capacity change from 0 to 1024
[  168.539702][ T7779] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  168.610441][ T7779] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  168.851181][ T7779] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 44 with max blocks 4 with error 28
[  168.880713][ T7779] EXT4-fs (loop1): This should not happen!! Data will be lost
[  168.880713][ T7779] 
[  168.904552][ T7779] EXT4-fs (loop1): Total free blocks count 0
[  168.914920][ T7779] EXT4-fs (loop1): Free/Dirty block details
[  168.942519][ T7779] EXT4-fs (loop1): free_blocks=0
[  168.951995][ T7779] EXT4-fs (loop1): dirty_blocks=0
[  168.957075][ T7779] EXT4-fs (loop1): Block reservation details
[  169.010684][ T7779] EXT4-fs (loop1): i_reserved_data_blocks=0
[  169.199941][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  170.044431][ T7818] loop2: detected capacity change from 0 to 7
[  170.074229][ T7818] Dev loop2: unable to read RDB block 7
[  170.079858][ T7818]  loop2: unable to read partition table
[  170.105465][ T7818] loop2: partition table beyond EOD, truncated
[  170.122274][ T7818] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  170.459241][ T7827] FAULT_INJECTION: forcing a failure.
[  170.459241][ T7827] name failslab, interval 1, probability 0, space 0, times 0
[  170.492048][ T7827] CPU: 0 PID: 7827 Comm: syz.1.700 Not tainted syzkaller #0
[  170.499395][ T7827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  170.509477][ T7827] Call Trace:
[  170.512783][ T7827]  <TASK>
[  170.515733][ T7827]  dump_stack_lvl+0x18c/0x250
[  170.520449][ T7827]  ? show_regs_print_info+0x20/0x20
[  170.525676][ T7827]  ? load_image+0x420/0x420
[  170.530211][ T7827]  ? __might_sleep+0xe0/0xe0
[  170.534832][ T7827]  ? __lock_acquire+0x7d80/0x7d80
[  170.539890][ T7827]  should_fail_ex+0x394/0x4c0
[  170.544950][ T7827]  should_failslab+0x9/0x20
[  170.549483][ T7827]  slab_pre_alloc_hook+0x59/0x300
[  170.554535][ T7827]  ? __lock_acquire+0x7d80/0x7d80
[  170.559564][ T7827]  kmem_cache_alloc_node+0x5e/0x310
[  170.564766][ T7827]  ? __alloc_skb+0x103/0x2c0
[  170.569355][ T7827]  __alloc_skb+0x103/0x2c0
[  170.573772][ T7827]  netlink_sendmsg+0x66a/0xbf0
[  170.578536][ T7827]  ? netlink_getsockopt+0x590/0x590
[  170.583728][ T7827]  ? apparmor_socket_sendmsg+0x8e/0x330
[  170.589285][ T7827]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  170.594568][ T7827]  ? security_socket_sendmsg+0x80/0xa0
[  170.600022][ T7827]  __sys_sendto+0x4a9/0x6b0
[  170.604531][ T7827]  ? __ia32_sys_getpeername+0x90/0x90
[  170.609909][ T7827]  ? __lock_acquire+0x7d80/0x7d80
[  170.614935][ T7827]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  170.620912][ T7827]  ? lock_chain_count+0x20/0x20
[  170.625761][ T7827]  ? lock_chain_count+0x20/0x20
[  170.630631][ T7827]  __x64_sys_sendto+0xde/0xf0
[  170.635343][ T7827]  do_syscall_64+0x55/0xb0
[  170.639772][ T7827]  ? clear_bhb_loop+0x40/0x90
[  170.644446][ T7827]  ? clear_bhb_loop+0x40/0x90
[  170.649122][ T7827]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  170.655011][ T7827] RIP: 0033:0x7fe9f415e98e
[  170.659430][ T7827] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  170.679035][ T7827] RSP: 002b:00007fe9f5153e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  170.687448][ T7827] RAX: ffffffffffffffda RBX: 00007fe9f51556c0 RCX: 00007fe9f415e98e
[  170.695414][ T7827] RDX: 0000000000000020 RSI: 00007fe9f5154000 RDI: 0000000000000006
[  170.703378][ T7827] RBP: 0000000000000000 R08: 00007fe9f5153f04 R09: 000000000000000c
[  170.711343][ T7827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006
[  170.719305][ T7827] R13: 00007fe9f5153f58 R14: 00007fe9f5154000 R15: 0000000000000000
[  170.727281][ T7827]  </TASK>
[  172.249774][ T7860] loop1: detected capacity change from 0 to 512
[  172.266700][ T7860] EXT4-fs: Ignoring removed nobh option
[  172.389399][ T7860] EXT4-fs error (device loop1): ext4_do_update_inode:5256: inode #3: comm syz.1.714: corrupted inode contents
[  172.518002][ T7860] EXT4-fs (loop1): Remounting filesystem read-only
[  172.547166][ T7860] Quota error (device loop1): write_blk: dquota write failed
[  172.560857][ T7860] Quota error (device loop1): qtree_write_dquot: Error -5 occurred while creating quota
[  172.563186][ T7865] overlayfs: failed to clone upperpath
[  172.577390][ T7860] EXT4-fs (loop1): 1 truncate cleaned up
[  172.590899][ T7860] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  172.617044][ T7860] ext4 filesystem being mounted at /169/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  172.720137][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  173.626720][ T7904] loop3: detected capacity change from 0 to 512
[  173.694169][ T7904] EXT4-fs error (device loop3): ext4_iget_extra_inode:4740: inode #15: comm syz.3.722: corrupted in-inode xattr: invalid ea_ino
[  173.783086][ T7904] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.722: couldn't read orphan inode 15 (err -117)
[  173.830198][ T7904] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  173.905997][ T7904] syz.3.722 (pid 7904) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  174.094996][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  174.995075][ T7928] netlink: 'syz.2.729': attribute type 1 has an invalid length.
[  175.028287][ T7928] 8021q: adding VLAN 0 to HW filter on device bond3
[  175.079336][ T7928] bond3: (slave veth3): Enslaving as a backup interface with a down link
[  175.275878][ T7933] netlink: 8 bytes leftover after parsing attributes in process `syz.2.731'.
[  175.444452][ T7937] overlayfs: failed to resolve './file0': -2
[  175.826845][ T7950] loop3: detected capacity change from 0 to 1024
[  175.889759][ T7875] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  176.729385][ T7974] loop0: detected capacity change from 0 to 4096
[  176.828614][ T7974] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting.
[  176.849689][ T7974] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[  176.879582][ T7974]  loop0:
[  177.210137][ T7978] loop3: detected capacity change from 0 to 512
[  177.240158][ T7978] EXT4-fs: Ignoring removed mblk_io_submit option
[  177.287074][ T7978] EXT4-fs (loop3): orphan cleanup on readonly fs
[  177.333927][ T7978] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13
[  177.374132][ T7978] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.751: invalid indirect mapped block 1819239214 (level 1)
[  177.455991][ T7978] EXT4-fs (loop3): Remounting filesystem read-only
[  177.468092][ T7978] EXT4-fs (loop3): 1 truncate cleaned up
[  177.492720][ T7985] loop1: detected capacity change from 0 to 1024
[  177.493179][ T7978] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  177.676437][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  180.166485][ T5813] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[  180.453815][    T8] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[  180.915258][ T8023] ceph: No mds server is up or the cluster is laggy
[  180.963614][    T8] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[  181.261981][ T8049] netlink: 'syz.0.776': attribute type 1 has an invalid length.
[  181.395671][ T8053] bond4: (slave macvlan1): making interface the new active one
[  181.471637][   T27] audit: type=1326 audit(1788527625.597:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8054 comm="syz.2.778" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f621ef9e159 code=0x0
[  181.483702][ T8053] bond4: (slave macvlan1): Enslaving as an active interface with an up link
[  181.591402][ T8049] bond4 (unregistering): (slave macvlan1): Releasing active interface
[  181.662169][ T8049] bond4 (unregistering): Released all slaves
[  182.061075][ T8069] capability: warning: `syz.0.784' uses deprecated v2 capabilities in a way that may be insecure
[  182.159964][ T8077] netlink: 12 bytes leftover after parsing attributes in process `syz.3.787'.
[  182.539015][ T8091] netlink: 'syz.3.790': attribute type 1 has an invalid length.
[  182.580845][ T8091] 8021q: adding VLAN 0 to HW filter on device bond1
[  182.676527][ T8091] 8021q: adding VLAN 0 to HW filter on device team0
[  182.700792][ T8091] bond1: (slave team0): Enslaving as a backup interface with an up link
[  183.578797][   T27] audit: type=1326 audit(1788527627.707:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8137 comm="syz.1.801" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9f419e159 code=0x7ffc0000
[  183.629995][   T27] audit: type=1326 audit(1788527627.707:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8137 comm="syz.1.801" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9f419e159 code=0x7ffc0000
[  183.681966][   T27] audit: type=1326 audit(1788527627.707:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8137 comm="syz.1.801" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fe9f419cfc7 code=0x7ffc0000
[  183.737387][   T27] audit: type=1326 audit(1788527627.707:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8137 comm="syz.1.801" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9f419e159 code=0x7ffc0000
[  183.791994][   T27] audit: type=1326 audit(1788527627.707:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8137 comm="syz.1.801" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9f419e159 code=0x7ffc0000
[  183.853545][ T8075] bridge0: port 3(syz_tun) entered disabled state
[  183.862761][   T27] audit: type=1326 audit(1788527627.707:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8137 comm="syz.1.801" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fe9f419e159 code=0x7ffc0000
[  183.911406][ T8075] syz_tun (unregistering): left allmulticast mode
[  183.926464][ T8075] syz_tun (unregistering): left promiscuous mode
[  183.935197][   T27] audit: type=1326 audit(1788527627.707:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8137 comm="syz.1.801" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9f419e159 code=0x7ffc0000
[  183.968086][ T8075] bridge0: port 3(syz_tun) entered disabled state
[  183.975945][   T27] audit: type=1326 audit(1788527627.707:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8137 comm="syz.1.801" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7fe9f419e159 code=0x7ffc0000
[  184.022800][   T27] audit: type=1326 audit(1788527627.707:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8137 comm="syz.1.801" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9f419e159 code=0x7ffc0000
[  185.849822][ T8170] overlayfs: failed to clone upperpath
[  186.219164][ T5783] Bluetooth: hci3: command 0x0406 tx timeout
[  186.225391][ T5778] Bluetooth: hci1: command 0x0406 tx timeout
[  186.231413][ T5778] Bluetooth: hci2: command 0x0406 tx timeout
[  186.242382][ T8203] netlink: 24 bytes leftover after parsing attributes in process `syz.3.821'.
[  186.758735][ T5786] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  186.770034][ T5786] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  186.779126][ T5786] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  186.789090][ T5786] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  186.799353][ T5786] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  186.807838][ T5786] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  187.039340][ T8222] chnl_net:caif_netlink_parms(): no params data found
[  187.228668][ T8222] bridge0: port 1(bridge_slave_0) entered blocking state
[  187.237405][ T8222] bridge0: port 1(bridge_slave_0) entered disabled state
[  187.245921][ T8222] bridge_slave_0: entered allmulticast mode
[  187.260347][ T8222] bridge_slave_0: entered promiscuous mode
[  187.274768][ T8222] bridge0: port 2(bridge_slave_1) entered blocking state
[  187.282335][ T8222] bridge0: port 2(bridge_slave_1) entered disabled state
[  187.289948][ T8222] bridge_slave_1: entered allmulticast mode
[  187.297325][ T8222] bridge_slave_1: entered promiscuous mode
[  187.330466][ T8222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  187.343233][ T8222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  187.391285][ T8222] team0: Port device team_slave_0 added
[  187.410660][ T8222] team0: Port device team_slave_1 added
[  187.461234][ T8222] batman_adv: batadv0: Adding interface: batadv_slave_0
[  187.470659][ T8222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  187.515949][ T8222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  187.544426][ T8222] batman_adv: batadv0: Adding interface: batadv_slave_1
[  187.555036][ T8222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  187.608251][ T8222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  187.739829][ T8222] hsr_slave_0: entered promiscuous mode
[  187.756310][ T8222] hsr_slave_1: entered promiscuous mode
[  187.763607][ T8222] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  187.771227][ T8222] Cannot create hsr debugfs directory
[  188.134103][ T8222] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  188.155135][ T8222] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  188.185370][ T8257] netlink: 4 bytes leftover after parsing attributes in process `syz.2.839'.
[  188.244740][ T8222] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  188.264934][ T8222] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  188.434550][ T8222] 8021q: adding VLAN 0 to HW filter on device bond0
[  188.507554][ T8222] 8021q: adding VLAN 0 to HW filter on device team0
[  188.556138][ T3444] bridge0: port 1(bridge_slave_0) entered blocking state
[  188.563342][ T3444] bridge0: port 1(bridge_slave_0) entered forwarding state
[  188.609522][   T79] bridge0: port 2(bridge_slave_1) entered blocking state
[  188.616725][   T79] bridge0: port 2(bridge_slave_1) entered forwarding state
[  188.841925][ T5786] Bluetooth: hci0: command tx timeout
[  188.931058][ T8222] 8021q: adding VLAN 0 to HW filter on device batadv0
[  189.301580][ T8290] loop3: detected capacity change from 0 to 2048
[  189.354453][ T8290] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  189.525121][ T8289] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  189.580090][ T8289] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  189.595805][ T8222] veth0_vlan: entered promiscuous mode
[  189.621267][ T8222] veth1_vlan: entered promiscuous mode
[  189.638345][ T8289] EXT4-fs (loop3): This should not happen!! Data will be lost
[  189.638345][ T8289] 
[  189.672953][ T8289] EXT4-fs (loop3): Total free blocks count 0
[  189.693105][ T8222] veth0_macvtap: entered promiscuous mode
[  189.695868][ T8289] EXT4-fs (loop3): Free/Dirty block details
[  189.716169][ T8222] veth1_macvtap: entered promiscuous mode
[  189.728534][ T8289] EXT4-fs (loop3): free_blocks=4096
[  189.742065][ T8289] EXT4-fs (loop3): dirty_blocks=64
[  189.753886][ T8289] EXT4-fs (loop3): Block reservation details
[  189.765114][ T8222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  189.773896][ T8289] EXT4-fs (loop3): i_reserved_data_blocks=4
[  189.791954][ T8222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  189.812060][ T8222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  189.818785][ T8290] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28
[  189.831993][ T8222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  189.857350][ T8222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  189.879527][ T8222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  189.899833][ T8222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  189.923220][ T8222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  189.946072][ T8222] batman_adv: batadv0: Interface activated: batadv_slave_0
[  190.006901][ T8222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  190.017669][ T8222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  190.028552][ T8222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  190.039340][ T8222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  190.049488][ T8222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  190.060410][ T8222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  190.074446][ T8222] batman_adv: batadv0: Interface activated: batadv_slave_1
[  190.105547][ T8222] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  190.119943][ T8222] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  190.131535][ T8222] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  190.152349][ T8222] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  190.336752][ T3552] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  190.378083][ T3552] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  190.457447][ T3552] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  190.474937][ T8303] netlink: 24 bytes leftover after parsing attributes in process `syz.0.852'.
[  190.484263][ T3552] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  190.710428][  T790] libceph: connect (1)0.0.0.0:6789 error -22
[  190.734473][  T790] libceph: mon0 (1)0.0.0.0:6789 connect error
[  190.886217][ T8320] netlink: 'syz.2.858': attribute type 1 has an invalid length.
[  190.932090][ T5786] Bluetooth: hci0: command tx timeout
[  190.977771][ T8320] bond4: (slave macvlan1): making interface the new active one
[  190.992942][ T8320] bond4: (slave macvlan1): Enslaving as an active interface with an up link
[  191.022165][    T9] libceph: connect (1)0.0.0.0:6789 error -22
[  191.034570][    T9] libceph: mon0 (1)0.0.0.0:6789 connect error
[  191.048471][ T8320] bond4 (unregistering): (slave macvlan1): Releasing active interface
[  191.067567][ T8320] bond4 (unregistering): Released all slaves
[  191.420212][ T8306] ceph: No mds server is up or the cluster is laggy
[  191.822795][ T8339] FAULT_INJECTION: forcing a failure.
[  191.822795][ T8339] name failslab, interval 1, probability 0, space 0, times 0
[  191.852122][ T8339] CPU: 0 PID: 8339 Comm: syz.3.866 Not tainted syzkaller #0
[  191.859441][ T8339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  191.869496][ T8339] Call Trace:
[  191.872783][ T8339]  <TASK>
[  191.875701][ T8339]  dump_stack_lvl+0x18c/0x250
[  191.880367][ T8339]  ? show_regs_print_info+0x20/0x20
[  191.885550][ T8339]  ? load_image+0x420/0x420
[  191.890035][ T8339]  ? __lock_acquire+0x7d80/0x7d80
[  191.895050][ T8339]  should_fail_ex+0x394/0x4c0
[  191.899716][ T8339]  should_failslab+0x9/0x20
[  191.904208][ T8339]  slab_pre_alloc_hook+0x59/0x300
[  191.909219][ T8339]  kmem_cache_alloc+0x5a/0x2c0
[  191.913984][ T8339]  ? ioctx_alloc+0x105/0x770
[  191.918597][ T8339]  ioctx_alloc+0x105/0x770
[  191.923030][ T8339]  ? __might_fault+0xc6/0x120
[  191.927724][ T8339]  ? __might_fault+0xaa/0x120
[  191.932429][ T8339]  __se_sys_io_setup+0x7b/0x190
[  191.937299][ T8339]  do_syscall_64+0x55/0xb0
[  191.941711][ T8339]  ? clear_bhb_loop+0x40/0x90
[  191.946380][ T8339]  ? clear_bhb_loop+0x40/0x90
[  191.951053][ T8339]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  191.956936][ T8339] RIP: 0033:0x7fe46979e159
[  191.961341][ T8339] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  191.980944][ T8339] RSP: 002b:00007fe46a642028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce
[  191.989347][ T8339] RAX: ffffffffffffffda RBX: 00007fe469a25fa0 RCX: 00007fe46979e159
[  191.997311][ T8339] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000008001
[  192.005268][ T8339] RBP: 00007fe469835024 R08: 0000000000000000 R09: 0000000000000000
[  192.013238][ T8339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  192.021214][ T8339] R13: 00007fe469a26038 R14: 00007fe469a25fa0 R15: 00007ffddeb135f8
[  192.029195][ T8339]  </TASK>
[  193.002094][ T5786] Bluetooth: hci0: command tx timeout
[  194.320105][ T8404] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  194.365518][ T1284] ieee802154 phy0 wpan0: encryption failed: -22
[  194.382699][ T1284] ieee802154 phy1 wpan1: encryption failed: -22
[  194.688816][ T8415] FAULT_INJECTION: forcing a failure.
[  194.688816][ T8415] name failslab, interval 1, probability 0, space 0, times 0
[  194.714304][ T8415] CPU: 0 PID: 8415 Comm: syz.4.896 Not tainted syzkaller #0
[  194.721648][ T8415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  194.731711][ T8415] Call Trace:
[  194.734992][ T8415]  <TASK>
[  194.737942][ T8415]  dump_stack_lvl+0x18c/0x250
[  194.742665][ T8415]  ? show_regs_print_info+0x20/0x20
[  194.747902][ T8415]  ? load_image+0x420/0x420
[  194.752431][ T8415]  ? __might_sleep+0xe0/0xe0
[  194.757046][ T8415]  ? __lock_acquire+0x7d80/0x7d80
[  194.762095][ T8415]  should_fail_ex+0x394/0x4c0
[  194.766804][ T8415]  should_failslab+0x9/0x20
[  194.771330][ T8415]  slab_pre_alloc_hook+0x59/0x300
[  194.776388][ T8415]  kmem_cache_alloc+0x5a/0x2c0
[  194.781177][ T8415]  ? __kernfs_new_node+0xe5/0x7f0
[  194.786239][ T8415]  __kernfs_new_node+0xe5/0x7f0
[  194.791126][ T8415]  ? kernfs_new_node+0x260/0x260
[  194.796115][ T8415]  ? sysfs_do_create_link_sd+0x75/0x110
[  194.801690][ T8415]  ? __lock_acquire+0x7d80/0x7d80
[  194.806743][ T8415]  kernfs_new_node+0x14c/0x260
[  194.811544][ T8415]  kernfs_create_link+0xa7/0x200
[  194.816514][ T8415]  sysfs_do_create_link_sd+0x83/0x110
[  194.821923][ T8415]  driver_sysfs_add+0xec/0x210
[  194.826727][ T8415]  really_probe+0x13c/0xae0
[  194.831259][ T8415]  ? pm_runtime_barrier+0x14b/0x1c0
[  194.836496][ T8415]  __driver_probe_device+0x1f5/0x390
[  194.841820][ T8415]  driver_probe_device+0x4f/0x420
[  194.846871][ T8415]  __driver_attach+0x444/0x6d0
[  194.851670][ T8415]  bus_for_each_dev+0x235/0x2b0
[  194.856549][ T8415]  ? driver_attach+0x50/0x50
[  194.861167][ T8415]  ? bus_remove_file+0x140/0x140
[  194.866140][ T8415]  ? do_raw_spin_unlock+0x121/0x230
[  194.871371][ T8415]  bus_add_driver+0x340/0x630
[  194.876095][ T8415]  driver_register+0x23a/0x310
[  194.880887][ T8415]  usb_gadget_register_driver_owner+0xf9/0x270
[  194.887080][ T8415]  raw_ioctl+0x1613/0x3d80
[  194.891534][ T8415]  ? tomoyo_path_number_perm+0x56b/0x5e0
[  194.897201][ T8415]  ? tomoyo_path_number_perm+0x217/0x5e0
[  194.902866][ T8415]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  194.908358][ T8415]  ? make_qualifier+0x260/0x260
[  194.913271][ T8415]  ? __fget_files+0x28/0x460
[  194.917905][ T8415]  ? bpf_lsm_file_ioctl+0x9/0x10
[  194.922867][ T8415]  ? security_file_ioctl+0x80/0xa0
[  194.928010][ T8415]  ? make_qualifier+0x260/0x260
[  194.932893][ T8415]  __se_sys_ioctl+0xfd/0x170
[  194.937514][ T8415]  do_syscall_64+0x55/0xb0
[  194.941954][ T8415]  ? clear_bhb_loop+0x40/0x90
[  194.946660][ T8415]  ? clear_bhb_loop+0x40/0x90
[  194.951363][ T8415]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  194.957280][ T8415] RIP: 0033:0x7fe549b9ddeb
[  194.961716][ T8415] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[  194.981344][ T8415] RSP: 002b:00007fe54aaecf00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  194.989783][ T8415] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007fe549b9ddeb
[  194.997774][ T8415] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004
[  195.005765][ T8415] RBP: 00007fe54aaedfd0 R08: 0000000000000001 R09: 00000000ffffffff
[  195.013759][ T8415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  195.021754][ T8415] R13: 0000200000000040 R14: 0000000000000000 R15: 0000000000000000
[  195.029763][ T8415]  </TASK>
[  195.044067][ T8415] really_probe: driver_sysfs_add(gadget.4) failed
[  195.063102][ T8415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  195.083320][ T5786] Bluetooth: hci0: command tx timeout
[  195.084218][ T8415] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  195.545583][ T5779] IPVS: starting estimator thread 0...
[  195.642149][ T8431] IPVS: using max 21 ests per chain, 50400 per kthread
[  196.528356][ T8442] loop4: detected capacity change from 0 to 32768
[  196.548640][ T8442] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.906 (8442)
[  196.614625][ T8442] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  196.645476][ T8442] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  196.662852][ T8442] BTRFS info (device loop4): allowing degraded mounts
[  196.669836][ T8442] BTRFS info (device loop4): setting nodatasum
[  196.678873][ T8442] BTRFS info (device loop4): force zlib compression, level 3
[  196.688184][ T8442] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8)
[  196.697989][ T8442] BTRFS info (device loop4): use lzo compression, level 0
[  196.708590][ T8442] BTRFS info (device loop4): turning on flush-on-commit
[  196.722116][ T8442] BTRFS info (device loop4): enabling auto defrag
[  196.730255][ T8442] BTRFS info (device loop4): max_inline at 4096
[  196.746087][ T8442] BTRFS info (device loop4): using free space tree
[  196.922560][ T8442] BTRFS info (device loop4): enabling ssd optimizations
[  197.098705][ T8442] BTRFS warning (device loop4): qgroup rescan init failed, qgroup is not enabled
[  197.209629][ T8222] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  197.355755][ T6125] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop4 scanned by udevd (6125)
[  198.175635][ T8499] netlink: 28 bytes leftover after parsing attributes in process `syz.0.921'.
[  198.759524][ T8517] x86/PAT: syz.3.928:8517 freeing invalid memtype [mem 0xfe004000-0xfe004fff]
[  199.008066][ T8529] loop4: detected capacity change from 0 to 512
[  199.042887][ T8529] EXT4-fs: Ignoring removed nomblk_io_submit option
[  199.049587][ T8529] EXT4-fs: Ignoring removed nobh option
[  199.096305][ T8529] EXT4-fs: Ignoring removed i_version option
[  199.219629][ T8529] EXT4-fs (loop4): 1 orphan inode deleted
[  199.278270][ T8529] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  199.395422][ T8529] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.932: Invalid inode bitmap blk 4 in block_group 0
[  199.430907][ T8541] loop3: detected capacity change from 0 to 128
[  199.549376][ T8222] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.777618][ T8548] netlink: 'syz.3.941': attribute type 1 has an invalid length.
[  199.871304][ T8546] af_packet: tpacket_rcv: packet too big, clamped from 65535 to 3944. macoff=96
[  199.889705][ T8548] 8021q: adding VLAN 0 to HW filter on device bond2
[  199.930044][ T8555] bond2: (slave gretap1): Enslaving as a backup interface with an up link
[  200.306260][ T8558] bond2 (unregistering): (slave gretap1): Releasing backup interface
[  200.360186][ T8558] bond2 (unregistering): Released all slaves
[  200.690253][ T8573] overlayfs: failed to clone upperpath
[  201.243067][ T8590] loop4: detected capacity change from 0 to 4096
[  201.252382][ T8590] EXT4-fs: Ignoring removed nobh option
[  201.258400][ T8590] EXT4-fs: Ignoring removed bh option
[  201.277035][ T8590] EXT4-fs (loop4): Test dummy encryption mode enabled
[  201.299250][ T8590] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  201.504205][ T8222] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.649857][ T8602] capability: warning: `syz.3.962' uses 32-bit capabilities (legacy support in use)
[  202.045372][   T28] IPVS: starting estimator thread 0...
[  202.132404][ T8619] IPVS: using max 18 ests per chain, 43200 per kthread
[  202.387310][ T5786] Bluetooth: hci1: unexpected event for opcode 0x2023
[  204.481584][ T8679] loop3: detected capacity change from 0 to 512
[  204.538748][ T8679] EXT4-fs (loop3): 1 truncate cleaned up
[  204.552965][ T8679] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  204.666453][ T8679] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.995: bg 0: block 465: padding at end of block bitmap is not set
[  204.716737][ T8679] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  204.746875][ T8679] EXT4-fs (loop3): This should not happen!! Data will be lost
[  204.746875][ T8679] 
[  204.788115][ T8679] EXT4-fs (loop3): Total free blocks count 0
[  204.808076][ T8679] EXT4-fs (loop3): Free/Dirty block details
[  204.820070][ T8679] EXT4-fs (loop3): free_blocks=0
[  204.836609][ T8679] EXT4-fs (loop3): dirty_blocks=66
[  204.848783][ T8679] EXT4-fs (loop3): Block reservation details
[  204.874441][ T8679] EXT4-fs (loop3): i_reserved_data_blocks=66
[  204.897464][ T7883] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28
[  205.838896][ T8710] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check.
[  206.445018][ T5786] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  206.454732][ T5786] Bluetooth: hci1: Injecting HCI hardware error event
[  206.464048][ T5786] Bluetooth: hci1: hardware error 0x00
[  206.698337][ T8729] loop4: detected capacity change from 0 to 2048
[  206.758215][ T8729] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  206.780914][ T8729] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.1012: bg 0: block 240: padding at end of block bitmap is not set
[  206.805648][ T8729] EXT4-fs error (device loop4): ext4_iget_extra_inode:4740: inode #12: comm syz.4.1012: corrupted in-inode xattr: e_value size too large
[  206.937029][ T8222] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[  208.581912][    T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  208.601991][ T5786] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  208.784169][    T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  208.812164][    T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  208.835176][    T9] usb 4-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00
[  208.847353][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  208.875751][    T9] usb 4-1: Product: syz
[  208.879948][    T9] usb 4-1: Manufacturer: syz
[  208.893098][    T9] usb 4-1: SerialNumber: syz
[  209.398252][    T9] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900
[  209.901439][    T9] usb 4-1: USB disconnect, device number 8
[  209.948439][    T9] usblp0: removed
[  209.952715][ T8771] overlayfs: failed to clone upperpath
[  211.060818][ T8806] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  211.111147][ T8806] batman_adv: batadv0: Adding interface: gretap1
[  211.130214][ T8806] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  211.187516][ T8806] batman_adv: batadv0: Interface activated: gretap1
[  212.667078][ T3488] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0
[  212.702748][ T3488] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 60387 - 0
[  212.735210][ T3488] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.903106][ T3488] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0
[  212.926729][ T3488] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 60387 - 0
[  212.951873][ T3488] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  213.114447][ T3488] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0
[  213.142414][ T3488] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 60387 - 0
[  213.181904][ T3488] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  213.424188][ T3488] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0
[  213.462746][ T3488] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 60387 - 0
[  213.501892][ T3488] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  213.612685][ T5784] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  213.624942][ T5784] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  213.648055][ T5784] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  213.662683][ T5784] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  213.673204][ T5784] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  213.680856][ T5784] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  214.688502][ T8876] chnl_net:caif_netlink_parms(): no params data found
[  215.339560][ T8876] bridge0: port 1(bridge_slave_0) entered blocking state
[  215.378462][ T8876] bridge0: port 1(bridge_slave_0) entered disabled state
[  215.385640][ T8922] loop4: detected capacity change from 0 to 64
[  215.422069][ T8876] bridge_slave_0: entered allmulticast mode
[  215.429242][ T8876] bridge_slave_0: entered promiscuous mode
[  215.565357][ T8922] hfs: get root inode failed
[  215.599788][ T8876] bridge0: port 2(bridge_slave_1) entered blocking state
[  215.632209][ T8876] bridge0: port 2(bridge_slave_1) entered disabled state
[  215.661964][ T8876] bridge_slave_1: entered allmulticast mode
[  215.669207][ T8876] bridge_slave_1: entered promiscuous mode
[  215.728634][ T5784] Bluetooth: hci3: command tx timeout
[  215.906645][ T8926] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1064'.
[  216.063802][ T8926] 8021q: adding VLAN 0 to HW filter on device bond1
[  216.255007][ T8876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  216.279894][ T8876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  216.324230][ T8927] macvlan2: entered promiscuous mode
[  216.329573][ T8927] macvlan2: entered allmulticast mode
[  216.411280][ T8927] bond1: entered promiscuous mode
[  216.438265][ T8927] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  216.475766][ T8927] bond1: left promiscuous mode
[  216.644098][ T8937] netlink: 'syz.2.1068': attribute type 1 has an invalid length.
[  216.676750][ T8937] ifb1: entered promiscuous mode
[  216.724592][ T8938] netlink: 'syz.2.1068': attribute type 1 has an invalid length.
[  216.982707][ T8876] team0: Port device team_slave_0 added
[  217.004248][ T8876] team0: Port device team_slave_1 added
[  217.540780][ T8876] batman_adv: batadv0: Adding interface: batadv_slave_0
[  217.570720][ T8876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  217.646522][ T8876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  217.708765][ T8876] batman_adv: batadv0: Adding interface: batadv_slave_1
[  217.732450][ T8876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  217.803158][ T5784] Bluetooth: hci3: command tx timeout
[  217.817506][ T8876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  218.099052][ T8876] hsr_slave_0: entered promiscuous mode
[  218.131009][ T8876] hsr_slave_1: entered promiscuous mode
[  218.160696][ T8876] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  218.174690][ T8876] Cannot create hsr debugfs directory
[  218.324988][ T3488] hsr_slave_0: left promiscuous mode
[  218.369714][ T3488] hsr_slave_1: left promiscuous mode
[  218.430785][ T3488] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  218.449529][ T3488] batman_adv: batadv0: Removing interface: batadv_slave_0
[  218.498824][ T3488] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  218.523540][ T3488] batman_adv: batadv0: Removing interface: batadv_slave_1
[  218.629986][ T3488] veth1_macvtap: left promiscuous mode
[  218.642398][ T3488] veth0_macvtap: left promiscuous mode
[  218.648983][ T3488] veth1_vlan: left promiscuous mode
[  218.672133][ T3488] veth0_vlan: left promiscuous mode
[  219.274413][ T3488] bond1 (unregistering): (slave team0): Removing an active aggregator
[  219.288352][ T3488] bond1 (unregistering): (slave team0): Releasing backup interface
[  219.303112][ T3488] bond1 (unregistering): Released all slaves
[  219.885034][ T5784] Bluetooth: hci3: command tx timeout
[  219.947045][ T3488] team0 (unregistering): Port device team_slave_1 removed
[  219.993713][ T3488] team0 (unregistering): Port device team_slave_0 removed
[  220.035623][ T3488] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  220.080937][ T3488] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  220.426610][ T3488] bond0 (unregistering): Released all slaves
[  220.550138][ T8993] tipc: Started in network mode
[  220.555288][ T8993] tipc: Node identity aaaaaaaaaa3a, cluster identity 4711
[  220.564612][ T8993] tipc: Enabled bearer <eth:macvtap0>, priority 27
[  220.719845][    C0] hrtimer: interrupt took 633986 ns
[  221.150446][ T9018] netlink: 'syz.0.1091': attribute type 13 has an invalid length.
[  221.468646][ T3488] IPVS: stop unused estimator thread 0...
[  221.571290][ T8876] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  221.618587][ T8876] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  221.629438][ T9032] loop4: detected capacity change from 0 to 1024
[  221.651716][ T8876] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  221.664458][ T9032] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  221.698381][ T8876] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  221.739210][ T9032] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  221.778682][   T28] tipc: Node number set to 9480874
[  221.841443][ T9032] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters
[  221.925166][ T8222] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  221.968024][ T5784] Bluetooth: hci3: command tx timeout
[  222.019522][ T8876] 8021q: adding VLAN 0 to HW filter on device bond0
[  222.040513][ T8876] 8021q: adding VLAN 0 to HW filter on device team0
[  222.071506][ T7883] bridge0: port 1(bridge_slave_0) entered blocking state
[  222.078692][ T7883] bridge0: port 1(bridge_slave_0) entered forwarding state
[  222.121771][ T7883] bridge0: port 2(bridge_slave_1) entered blocking state
[  222.129033][ T7883] bridge0: port 2(bridge_slave_1) entered forwarding state
[  222.261745][ T9047] IPVS: Scheduler module ip_vs_ not found
[  222.497689][ T8876] 8021q: adding VLAN 0 to HW filter on device batadv0
[  223.231985][ T8876] veth0_vlan: entered promiscuous mode
[  223.259286][ T8876] veth1_vlan: entered promiscuous mode
[  223.306718][ T8876] veth0_macvtap: entered promiscuous mode
[  223.327676][ T8876] veth1_macvtap: entered promiscuous mode
[  223.358701][ T8876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  223.384663][ T8876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  223.404104][ T8876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  223.424524][ T8876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  223.440029][ T8876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  223.453996][ T8876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  223.467715][ T8876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  223.487953][ T8876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  223.506142][ T8876] batman_adv: batadv0: Interface activated: batadv_slave_0
[  223.530845][ T8876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  223.551949][ T8876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  223.566448][ T8876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  223.589317][ T8876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  223.607522][ T8876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  223.619584][ T8876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  223.636497][ T8876] batman_adv: batadv0: Interface activated: batadv_slave_1
[  223.653811][ T8876] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  223.671254][ T8876] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  223.688372][ T8876] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  223.698769][ T8876] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  223.899274][ T3488] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  223.921845][ T3488] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  224.022941][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  224.061451][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  224.506894][ T9131] kvm: emulating exchange as write
[  224.514750][ T9131] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  227.994348][ T9274] CIFS: Attempting to mount //::1/share
[  228.518122][ T9294] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  228.566264][ T9294] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  228.608011][ T9294] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  228.648104][ T9294] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  228.696678][ T9294] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  228.715404][ T9294] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  228.736874][ T9294] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  228.751111][ T9294] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  228.769403][ T9294] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  228.820399][ T9274] CIFS: VFS: cifs_mount failed w/return code = -512
[  228.829727][ T9294] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  228.889548][ T9304] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1152'.
[  229.112177][ T9314] netlink: 'syz.5.1153': attribute type 1 has an invalid length.
[  229.240440][ T9314] wg1: entered allmulticast mode
[  230.111794][    C1] sched: RT throttling activated
[  230.178675][ T9332] syz_tun: entered allmulticast mode
[  230.264666][ T9334] dvmrp6: entered allmulticast mode
[  230.628219][ T3488] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.671005][ T9330] syz_tun: left allmulticast mode
[  230.769101][ T3488] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.934373][ T3488] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  231.103466][ T3488] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  231.142068][   T27] kauditd_printk_skb: 30 callbacks suppressed
[  231.142083][   T27] audit: type=1326 audit(1788527675.267:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9356 comm="syz.4.1164" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe549b9e159 code=0x7ffc0000
[  231.222735][   T27] audit: type=1326 audit(1788527675.267:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9356 comm="syz.4.1164" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe549b9e159 code=0x7ffc0000
[  231.342037][   T27] audit: type=1326 audit(1788527675.267:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9356 comm="syz.4.1164" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe549b9e159 code=0x7ffc0000
[  231.422413][   T27] audit: type=1326 audit(1788527675.267:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9356 comm="syz.4.1164" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe549b9e159 code=0x7ffc0000
[  231.454970][   T27] audit: type=1326 audit(1788527675.267:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9356 comm="syz.4.1164" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe549b9e159 code=0x7ffc0000
[  231.479379][   T27] audit: type=1326 audit(1788527675.307:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9356 comm="syz.4.1164" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7fe549b9e159 code=0x7ffc0000
[  231.612934][   T27] audit: type=1326 audit(1788527675.307:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9356 comm="syz.4.1164" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe549b9e159 code=0x7ffc0000
[  231.731995][   T27] audit: type=1326 audit(1788527675.307:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9356 comm="syz.4.1164" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe549b9e159 code=0x7ffc0000
[  231.836044][   T27] audit: type=1326 audit(1788527675.307:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9356 comm="syz.4.1164" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe549b9e159 code=0x7ffc0000
[  231.906501][   T27] audit: type=1326 audit(1788527675.307:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9356 comm="syz.4.1164" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7fe549b9e159 code=0x7ffc0000
[  232.556689][ T9399] tipc: Started in network mode
[  232.574375][ T9399] tipc: Node identity aaaaaaaaaa3a, cluster identity 4711
[  232.596371][ T9399] tipc: Enabled bearer <eth:macvtap0>, priority 27
[  233.004026][ T9413] binder: 9410:9413 ioctl c0306201 200000004a40 returned -14
[  233.015273][ T9407] netlink: 'syz.5.1177': attribute type 13 has an invalid length.
[  233.099908][ T9409] ip_tables: iptables: counters copy to user failed while replacing table
[  233.697987][   T23] tipc: Node number set to 9480874
[  233.859821][ T9427] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  233.948057][ T3488] bond0: (slave wlan1): Releasing backup interface
[  234.315240][ T3488] hsr_slave_0: left promiscuous mode
[  234.341076][ T3488] hsr_slave_1: left promiscuous mode
[  234.367996][ T3488] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  234.388332][ T3488] batman_adv: batadv0: Removing interface: batadv_slave_0
[  234.418468][ T3488] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  234.440668][ T3488] batman_adv: batadv0: Removing interface: batadv_slave_1
[  234.463781][ T3488] bridge_slave_1: left allmulticast mode
[  234.489701][ T3488] bridge_slave_1: left promiscuous mode
[  234.516305][ T3488] bridge0: port 2(bridge_slave_1) entered disabled state
[  234.573998][ T3488] bridge_slave_0: left allmulticast mode
[  234.589525][ T3488] bridge_slave_0: left promiscuous mode
[  234.622737][ T3488] bridge0: port 1(bridge_slave_0) entered disabled state
[  234.737729][ T3488] veth1_macvtap: left promiscuous mode
[  234.757197][ T3488] veth0_macvtap: left promiscuous mode
[  234.763630][ T3488] veth1_vlan: left promiscuous mode
[  234.774573][ T3488] veth0_vlan: left promiscuous mode
[  236.848934][ T3488] team0 (unregistering): Port device team_slave_1 removed
[  236.918722][ T9495] input: syz0 as /devices/virtual/input/input11
[  236.967878][ T3488] team0 (unregistering): Port device team_slave_0 removed
[  237.060739][ T3488] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  237.816220][ T3488] bond0 (unregistering): Released all slaves
[  238.198742][ T9482] veth0: entered promiscuous mode
[  238.204320][ T9482] veth0: left promiscuous mode
[  238.229842][ T9483] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1198'.
[  238.556074][ T9483] bond0: (slave bond_slave_1): Releasing backup interface
[  240.152696][  T790] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  240.342074][  T790] usb 6-1: Using ep0 maxpacket: 16
[  240.349239][  T790] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  240.367617][  T790] usb 6-1: config 0 interface 0 has no altsetting 0
[  240.386172][  T790] usb 6-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20
[  240.404291][  T790] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  240.425758][  T790] usb 6-1: Product: syz
[  240.431119][  T790] usb 6-1: Manufacturer: syz
[  240.439155][  T790] usb 6-1: SerialNumber: syz
[  240.458386][  T790] usb 6-1: config 0 descriptor??
[  240.691087][    C0] imon 6-1:0.0: imon usb_rx_callback_intf0: status(-71)
[  240.715176][  T790] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input12
[  240.768172][  T790] imon:send_packet: packet tx failed (-71)
[  240.802216][  T790] imon 6-1:0.0: panel buttons/knobs setup failed
[  241.000701][  T790] rc_core: IR keymap rc-imon-pad not found
[  241.020466][  T790] Registered IR keymap rc-empty
[  241.050871][  T790] imon 6-1:0.0: Looks like you're trying to use an IR protocol this device does not support
[  241.096412][  T790] imon 6-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  241.150497][  T790] imon:send_packet: packet tx failed (-71)
[  241.182763][  T790] imon 6-1:0.0: remote input dev register failed
[  241.203657][  T790] imon 6-1:0.0: imon_init_intf0: rc device setup failed
[  241.263159][  T790] imon 6-1:0.0: unable to initialize intf0, err 0
[  241.287310][  T790] imon:imon_probe: failed to initialize context!
[  241.323868][  T790] imon 6-1:0.0: unable to register, err -19
[  241.362526][  T790] usb 6-1: USB disconnect, device number 2
[  241.710648][ T9511] IPVS: starting estimator thread 0...
[  241.771965][  T790] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  241.823605][ T9586] IPVS: using max 21 ests per chain, 50400 per kthread
[  241.992058][  T790] usb 6-1: Using ep0 maxpacket: 16
[  242.009652][  T790] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  242.045588][  T790] usb 6-1: config 0 interface 0 has no altsetting 0
[  242.063547][  T790] usb 6-1: string descriptor 0 read error: -22
[  242.072094][  T790] usb 6-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20
[  242.089964][  T790] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  242.123033][  T790] usb 6-1: config 0 descriptor??
[  242.177796][  T790] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input14
[  242.593820][  T790] rc_core: IR keymap rc-imon-pad not found
[  242.614440][  T790] Registered IR keymap rc-empty
[  242.631141][  T790] imon 6-1:0.0: Looks like you're trying to use an IR protocol this device does not support
[  242.651609][  T790] imon 6-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  242.703885][  T790] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[  242.749028][  T790] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input15
[  242.814306][  T790] imon 6-1:0.0: iMON device (15c2:0041, intf0) on usb<6:3> initialized
[  243.118863][    C0] imon 6-1:0.0: imon usb_rx_callback_intf0: status(-71)
[  243.128077][    T9] usb 6-1: USB disconnect, device number 3
[  244.863271][   T27] kauditd_printk_skb: 23 callbacks suppressed
[  244.863302][   T27] audit: type=1326 audit(1788527688.997:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9657 comm="syz.5.1241" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda69b9e159 code=0x7fc00000
[  245.286493][ T9696] CIFS: Attempting to mount //::1/share
[  246.125075][ T9696] CIFS: VFS: Error connecting to socket. Aborting operation.
[  246.165930][ T9696] CIFS: VFS: cifs_mount failed w/return code = -4
[  246.669884][ T9719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  246.777148][ T9733] FAULT_INJECTION: forcing a failure.
[  246.777148][ T9733] name failslab, interval 1, probability 0, space 0, times 0
[  246.802858][ T9733] CPU: 1 PID: 9733 Comm: syz.4.1256 Not tainted syzkaller #0
[  246.810279][ T9733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  246.820362][ T9733] Call Trace:
[  246.823666][ T9733]  <TASK>
[  246.826613][ T9733]  dump_stack_lvl+0x18c/0x250
[  246.831337][ T9733]  ? show_regs_print_info+0x20/0x20
[  246.836568][ T9733]  ? load_image+0x420/0x420
[  246.841098][ T9733]  ? __might_sleep+0xe0/0xe0
[  246.845722][ T9733]  ? __lock_acquire+0x7d80/0x7d80
[  246.850775][ T9733]  ? __alloc_pages+0x276/0x460
[  246.855569][ T9733]  should_fail_ex+0x394/0x4c0
[  246.860284][ T9733]  should_failslab+0x9/0x20
[  246.864820][ T9733]  slab_pre_alloc_hook+0x59/0x300
[  246.869874][ T9733]  ? io_rsrc_node_alloc+0xff/0x1c0
[  246.875051][ T9733]  __kmem_cache_alloc_node+0x53/0x250
[  246.880460][ T9733]  ? io_pages_map+0x34c/0x4e0
[  246.885171][ T9733]  ? io_rsrc_node_alloc+0xff/0x1c0
[  246.890311][ T9733]  kmalloc_trace+0x2a/0xe0
[  246.894757][ T9733]  io_rsrc_node_alloc+0xff/0x1c0
[  246.899728][ T9733]  io_uring_create+0x74b/0x1330
[  246.904621][ T9733]  __se_sys_io_uring_setup+0x29f/0x2b0
[  246.910119][ T9733]  ? __x64_sys_io_uring_setup+0x60/0x60
[  246.915709][ T9733]  ? lockdep_hardirqs_on+0x98/0x150
[  246.920941][ T9733]  do_syscall_64+0x55/0xb0
[  246.925392][ T9733]  ? clear_bhb_loop+0x40/0x90
[  246.930098][ T9733]  ? clear_bhb_loop+0x40/0x90
[  246.934812][ T9733]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  246.940734][ T9733] RIP: 0033:0x7fe549b9e159
[  246.945174][ T9733] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  246.964804][ T9733] RSP: 002b:00007fe54aaeefb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9
[  246.973242][ T9733] RAX: ffffffffffffffda RBX: 0000200000000180 RCX: 00007fe549b9e159
[  246.981236][ T9733] RDX: 0000200000000040 RSI: 0000200000000180 RDI: 0000000000000045
[  246.989233][ T9733] RBP: 00007fe549c35024 R08: 0000000000000000 R09: 0000000000000000
[  246.997226][ T9733] R10: 0000200000000000 R11: 0000000000000206 R12: 0000200000000040
[  247.005220][ T9733] R13: 0000200000000000 R14: 0000200000000100 R15: 00007fff940e8438
[  247.013226][ T9733]  </TASK>
[  251.823654][ T9844] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1284'.
[  251.902770][ T9844] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1284'.
[  252.345963][ T5779] IPVS: starting estimator thread 0...
[  252.442675][ T9863] IPVS: using max 18 ests per chain, 43200 per kthread
[  252.970481][ T9876] EXT4-fs warning (device sda1): ext4_group_extend:1868: can't shrink FS - resize aborted
[  253.543143][ T9896] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1298'.
[  253.579765][ T9896] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1298'.
[  254.607810][ T9921] netlink: 'syz.2.1303': attribute type 10 has an invalid length.
[  254.671504][ T9921] 8021q: adding VLAN 0 to HW filter on device team0
[  254.706206][ T9921] bond0: (slave team0): Enslaving as an active interface with an up link
[  255.654107][ T9948] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1321'.
[  255.808258][ T1284] ieee802154 phy0 wpan0: encryption failed: -22
[  255.817147][ T1284] ieee802154 phy1 wpan1: encryption failed: -22
[  258.431712][T10017] tipc: Failed to remove unknown binding: 66,0,0/0:1123061110/1123061112
[  258.457780][T10017] tipc: Failed to remove unknown binding: 66,0,0/0:1123061110/1123061111
[  260.136420][   T27] audit: type=1800 audit(1788527704.257:115): pid=10038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1336" name="file1" dev="fuse" ino=0 res=0 errno=0
[  261.537992][T10083] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1349'.
[  261.676587][T10083] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1349'.
[  265.041693][   T27] audit: type=1326 audit(1788527709.167:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10169 comm="syz.4.1369" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe549b9e159 code=0x0
[  268.345307][T10235] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1382'.
[  271.087174][T10305] bond4: entered allmulticast mode
[  271.150047][T10311] macvlan2: entered promiscuous mode
[  271.178307][T10311] macvlan2: entered allmulticast mode
[  271.207860][T10311] bond4: (slave macvlan2): Opening slave failed
[  271.479136][T10322] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1403'.
[  272.314569][T10346] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1408'.
[  272.727660][T10355] loop5: detected capacity change from 0 to 4096
[  272.866736][T10355] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  273.390703][ T8876] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  275.412080][ T5786] Bluetooth: hci0: command 0x0406 tx timeout
[  276.069262][T10392] loop4: detected capacity change from 0 to 40427
[  276.104127][T10392] F2FS-fs (loop4): invalid crc value
[  276.542751][T10392] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  276.813276][T10447] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1437'.
[  279.062465][T10510] loop4: detected capacity change from 0 to 256
[  279.268810][T10510] FAT-fs (loop4): Directory bread(block 64) failed
[  279.307940][T10510] FAT-fs (loop4): Directory bread(block 65) failed
[  279.322369][T10516] syz_tun: entered allmulticast mode
[  279.340815][T10510] FAT-fs (loop4): Directory bread(block 66) failed
[  279.373631][T10515] syz_tun: left allmulticast mode
[  279.381751][T10510] FAT-fs (loop4): Directory bread(block 67) failed
[  279.390296][T10510] FAT-fs (loop4): Directory bread(block 68) failed
[  279.411919][T10510] FAT-fs (loop4): Directory bread(block 69) failed
[  279.444104][T10510] FAT-fs (loop4): Directory bread(block 70) failed
[  279.450666][T10510] FAT-fs (loop4): Directory bread(block 71) failed
[  279.505009][T10510] FAT-fs (loop4): Directory bread(block 72) failed
[  279.511582][T10510] FAT-fs (loop4): Directory bread(block 73) failed
[  281.998024][T10577] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1468'.
[  282.055406][T10577] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1468'.
[  283.043883][T10605] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  283.855660][T10636] netlink: 15143 bytes leftover after parsing attributes in process `syz.2.1485'.
[  284.358928][T10653] loop5: detected capacity change from 0 to 512
[  284.383641][T10653] EXT4-fs (loop5): Test dummy encryption mode enabled
[  284.441649][T10653] EXT4-fs error (device loop5): ext4_orphan_get:1408: inode #15: comm syz.5.1490: inode has both inline data and extents flags
[  284.460348][T10653] EXT4-fs error (device loop5): ext4_orphan_get:1413: comm syz.5.1490: couldn't read orphan inode 15 (err -117)
[  284.477855][T10653] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  284.912277][    T8] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  284.957227][T10653] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  285.103475][    T8] usb 5-1: Using ep0 maxpacket: 32
[  285.132259][    T8] usb 5-1: config 0 has an invalid interface number: 67 but max is 0
[  285.146615][ T8876] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  285.151930][    T8] usb 5-1: config 0 has no interface number 0
[  285.183609][    T8] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  285.193166][    T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  285.201296][    T8] usb 5-1: Product: syz
[  285.218737][    T8] usb 5-1: Manufacturer: syz
[  285.235094][    T8] usb 5-1: SerialNumber: syz
[  285.253697][    T8] usb 5-1: config 0 descriptor??
[  285.274406][    T8] smsc95xx v2.0.0
[  285.407049][T10689] loop5: detected capacity change from 0 to 2048
[  285.516183][T10689] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  285.704608][    T8] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  285.736685][    T8] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  286.129950][T10704] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000
[  286.433271][T10712] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  286.464539][T10715] EXT4-fs error (device loop5): ext4_find_inline_data_nolock:164: inode #12: comm syz.5.1499: inline data xattr refers to an external xattr inode
[  286.484682][T10712] CIFS: Attempting to mount //127.0.0.1/share
[  286.491534][T10715] EXT4-fs (loop5): Remounting filesystem read-only
[  286.550449][T10712] CIFS: VFS: Error connecting to socket. Aborting operation.
[  286.579334][T10712] CIFS: VFS: cifs_mount failed w/return code = -111
[  286.927861][T10723] netlink: 'syz.0.1505': attribute type 1 has an invalid length.
[  286.975152][    T8] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  287.007389][    T8] smsc95xx: probe of 5-1:0.67 failed with error -71
[  287.015763][ T8876] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[  287.045001][    T8] usb 5-1: USB disconnect, device number 2
[  287.096306][T10727] bond5: entered promiscuous mode
[  287.286698][T10726] 8021q: adding VLAN 0 to HW filter on device bond6
[  287.317882][T10726] bond5: (slave bond6): making interface the new active one
[  287.326629][T10726] bond6: entered promiscuous mode
[  287.333887][T10726] bond5: (slave bond6): Enslaving as an active interface with an up link
[  287.967364][T10752] ref_ctr increment failed for inode: 0x1d0 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88807a885f00
[  288.307624][T10764] syzkaller0: entered promiscuous mode
[  288.347756][T10764] syzkaller0: entered allmulticast mode
[  288.810225][T10778] syz_tun: entered allmulticast mode
[  289.389837][T10800] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  289.708615][T10812] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1529'.
[  290.267978][T10828] loop5: detected capacity change from 0 to 256
[  290.694993][T10838] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1544'.
[  290.721677][T10838] vlan2: entered allmulticast mode
[  291.097843][T10853] loop4: detected capacity change from 0 to 512
[  291.130565][T10853] ext4: Unknown parameter 'nouser_xattr'
[  291.167861][ T5786] Bluetooth: hci0: hardware error 0x00
[  293.251960][ T5786] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  298.720862][T11013] kvm: pic: non byte write
[  299.802994][T11021] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input16
[  300.346163][T11043] loop5: detected capacity change from 0 to 2048
[  300.426275][T11043] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  300.819103][ T8876] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  301.686594][T11079] netlink: 15143 bytes leftover after parsing attributes in process `syz.5.1601'.
[  302.041271][T11089] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1603'.
[  302.095544][ T5786] Bluetooth: hci2: unexpected event for opcode 0x1003
[  302.372139][T11097] loop5: detected capacity change from 0 to 1764
[  302.497232][T11099] loop4: detected capacity change from 0 to 2048
[  302.566329][T11099] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  302.757346][ T8876] iso9660: Corrupted directory entry in block 2 of inode 1920
[  302.760767][T11107] ip_tables: iptables: counters copy to user failed while replacing table
[  302.875508][ T8876] iso9660: Corrupted directory entry in block 2 of inode 1920
[  302.976335][ T8222] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  305.330011][T11140] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.1623'.
[  305.593372][T11148] xt_hashlimit: size too large, truncated to 1048576
[  305.749483][T11149] bridge0: port 1(bridge_slave_0) entered disabled state
[  306.122380][ T5786] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  306.133921][ T5786] Bluetooth: hci2: Injecting HCI hardware error event
[  306.144716][ T5784] Bluetooth: hci2: hardware error 0x00
[  306.910567][T11149] bridge_slave_0 (unregistering): left allmulticast mode
[  306.952771][T11149] bridge_slave_0 (unregistering): left promiscuous mode
[  306.959840][T11149] bridge0: port 1(bridge_slave_0) entered disabled state
[  307.175018][T11162] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1628'.
[  307.202055][T11162] 8021q: VLANs not supported on ip6gre0
[  307.880524][T11177] loop5: detected capacity change from 0 to 512
[  308.139198][T11181] netlink: 'syz.0.1639': attribute type 10 has an invalid length.
[  308.208892][T11181] 8021q: adding VLAN 0 to HW filter on device team0
[  308.260981][T11181] bond0: (slave team0): Enslaving as an active interface with an up link
[  308.770641][ T5784] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  310.487069][T11221] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1655'.
[  312.301824][    T0] NOHZ tick-stop error: local softirq work is pending, handler #06!!!
[  312.401828][    T0] NOHZ tick-stop error: local softirq work is pending, handler #06!!!
[  312.452107][    T0] NOHZ tick-stop error: local softirq work is pending, handler #4e!!!
[  312.511827][    T0] NOHZ tick-stop error: local softirq work is pending, handler #06!!!
[  312.621826][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  312.731827][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  312.831834][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  312.841824][    T0] NOHZ tick-stop error: local softirq work is pending, handler #06!!!
[  312.861936][    T0] NOHZ tick-stop error: local softirq work is pending, handler #06!!!
[  312.941828][    T0] NOHZ tick-stop error: local softirq work is pending, handler #06!!!
[  375.727671][ T1284] ieee802154 phy0 wpan0: encryption failed: -22
[  377.806726][   T51] Bluetooth: hci3: command 0x0406 tx timeout
[  416.981814][    C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  416.988812][    C1] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P7882/1:b..l
[  416.997501][    C1] rcu: 	(detected by 1, t=10502 jiffies, g=48989, q=208 ncpus=2)
[  417.005256][    C1] task:kworker/u4:16   state:R  running task     stack:25032 pid:7882  ppid:2      flags:0x00004000
[  417.017645][    C1] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet
[  417.025514][    C1] Call Trace:
[  417.028810][    C1]  <TASK>
[  417.031758][    C1]  __schedule+0x15ae/0x4660
[  417.036309][    C1]  ? asan.module_dtor+0x20/0x20
[  417.041183][    C1]  ? mark_lock+0x94/0x320
[  417.045539][    C1]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  417.051560][    C1]  ? preempt_schedule_irq+0xb4/0x150
[  417.056869][    C1]  preempt_schedule_irq+0xbf/0x150
[  417.062003][    C1]  ? preempt_schedule_notrace+0x110/0x110
[  417.067749][    C1]  ? rcu_irq_exit_check_preempt+0xdf/0x210
[  417.073581][    C1]  irqentry_exit+0x67/0x70
[  417.078020][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  417.084020][    C1] RIP: 0010:lock_acquire+0x208/0x420
[  417.089322][    C1] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3c 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 43 c7 44 3c 08 00 00 00 00 65 48 8b 04 25
[  417.108942][    C1] RSP: 0018:ffffc90004b2f8a0 EFLAGS: 00000206
[  417.115035][    C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: d7e9fca4d90b2500
[  417.123024][    C1] RDX: 0000000000000000 RSI: ffffffff8acade60 RDI: ffffffff8b1d35e0
[  417.131011][    C1] RBP: ffffc90004b2f9a8 R08: dffffc0000000000 R09: 1ffffffff223dea0
[  417.138997][    C1] R10: dffffc0000000000 R11: fffffbfff223dea1 R12: 1ffff92000965f20
[  417.146982][    C1] R13: ffffffff8d1320e0 R14: 0000000000000246 R15: dffffc0000000000
[  417.154989][    C1]  ? batadv_iv_ogm_schedule+0x43b/0x1080
[  417.160647][    C1]  ? read_lock_is_recursive+0x20/0x20
[  417.166043][    C1]  ? batadv_iv_ogm_schedule+0x470/0x1080
[  417.171705][    C1]  batadv_iv_ogm_schedule+0x45c/0x1080
[  417.177182][    C1]  ? batadv_iv_ogm_schedule+0x43b/0x1080
[  417.182841][    C1]  ? batadv_iv_ogm_schedule+0x43b/0x1080
[  417.188500][    C1]  ? batadv_iv_send_outstanding_bat_ogm_packet+0x800/0x800
[  417.195734][    C1]  batadv_iv_send_outstanding_bat_ogm_packet+0x6ed/0x800
[  417.202795][    C1]  ? process_scheduled_works+0x975/0x1600
[  417.208547][    C1]  process_scheduled_works+0xa60/0x1600
[  417.214143][    C1]  ? worker_attach_to_pool+0x370/0x370
[  417.219625][    C1]  ? assign_work+0x3cc/0x5d0
[  417.224240][    C1]  worker_thread+0xa5e/0xfe0
[  417.228871][    C1]  kthread+0x2fa/0x390
[  417.232958][    C1]  ? pr_cont_work+0x550/0x550
[  417.237653][    C1]  ? kthread_blkcg+0xd0/0xd0
[  417.242263][    C1]  ret_from_fork+0x48/0x80
[  417.246699][    C1]  ? kthread_blkcg+0xd0/0xd0
[  417.251302][    C1]  ret_from_fork_asm+0x11/0x20
[  417.256100][    C1]  </TASK>
[  417.259129][    C1] rcu: rcu_preempt kthread starved for 4031 jiffies! g48989 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
[  417.270335][    C1] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  417.280315][    C1] rcu: RCU grace-period kthread stack dump:
[  417.286208][    C1] task:rcu_preempt     state:R  running task     stack:27848 pid:17    ppid:2      flags:0x00004000
[  417.297009][    C1] Call Trace:
[  417.300301][    C1]  <TASK>
[  417.303248][    C1]  __schedule+0x15ae/0x4660
[  417.307799][    C1]  ? asan.module_dtor+0x20/0x20
[  417.312673][    C1]  ? rcu_is_watching+0x15/0xb0
[  417.317475][    C1]  schedule+0xbd/0x170
[  417.321833][    C1]  schedule_timeout+0x188/0x2d0
[  417.326704][    C1]  ? console_conditional_schedule+0x40/0x40
[  417.332610][    C1]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  417.338524][    C1]  ? update_process_times+0x1b0/0x1b0
[  417.343921][    C1]  ? prepare_to_swait_event+0x344/0x360
[  417.349488][    C1]  rcu_gp_fqs_loop+0x30d/0x1590
[  417.354365][    C1]  ? dyntick_save_progress_counter+0x2b0/0x2b0
[  417.360537][    C1]  ? lockdep_hardirqs_on+0x98/0x150
[  417.365760][    C1]  ? rcu_gp_init+0x1530/0x1530
[  417.370553][    C1]  rcu_gp_kthread+0x9d/0x3b0
[  417.375167][    C1]  ? rcu_report_qs_rsp+0x1a0/0x1a0
[  417.380296][    C1]  ? __kthread_parkme+0x71/0x1c0
[  417.385251][    C1]  ? __kthread_parkme+0x15b/0x1c0
[  417.390295][    C1]  kthread+0x2fa/0x390
[  417.394376][    C1]  ? rcu_report_qs_rsp+0x1a0/0x1a0
[  417.399501][    C1]  ? kthread_blkcg+0xd0/0xd0
[  417.404112][    C1]  ret_from_fork+0x48/0x80
[  417.408550][    C1]  ? kthread_blkcg+0xd0/0xd0
[  417.413161][    C1]  ret_from_fork_asm+0x11/0x20
[  417.417958][    C1]  </TASK>
[  417.420985][    C1] rcu: Stack dump where RCU GP kthread last ran:
[  417.427331][    C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0
[  417.434368][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  417.444436][    C1] RIP: 0010:pv_native_safe_halt+0xf/0x10
[  417.450093][    C1] Code: b9 19 02 c3 cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d 63 76 38 00 fb f4 <c3> 66 0f 1f 00 55 41 57 41 56 41 54 53 50 8b 2f eb 2c 89 cb 80 f9
[  417.469714][    C1] RSP: 0000:ffffc90000187de0 EFLAGS: 000002c2
[  417.475801][    C1] RAX: 345028fda455d700 RBX: ffffffff81631d54 RCX: 345028fda455d700
[  417.483785][    C1] RDX: 0000000000000001 RSI: ffffffff8acacce0 RDI: ffffffff8b1d35e0
[  417.491771][    C1] RBP: ffffc90000187f20 R08: ffff8880b8f36b6b R09: 1ffff110171e6d6d
[  417.499755][    C1] R10: dffffc0000000000 R11: ffffed10171e6d6e R12: 1ffff92000030fc8
[  417.507744][    C1] R13: dffffc0000000000 R14: 1ffff110036ce780 R15: 0000000000000000
[  417.515731][    C1] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  417.524675][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  417.531272][    C1] CR2: 0000001b2db1aff8 CR3: 0000000033635000 CR4: 00000000003506e0
[  417.539257][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000001800
[  417.547244][    C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  417.555228][    C1] Call Trace:
[  417.558523][    C1]  <TASK>
[  417.561465][    C1]  default_idle+0x13/0x20
[  417.565811][    C1]  default_idle_call+0x6c/0xa0
[  417.570590][    C1]  do_idle+0x334/0x5c0
[  417.574683][    C1]  ? idle_inject_timer_fn+0x60/0x60
[  417.579899][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  417.586110][    C1]  cpu_startup_entry+0x43/0x60
[  417.590899][    C1]  start_secondary+0xee/0xf0
[  417.595509][    C1]  secondary_startup_64_no_verify+0x179/0x17b
[  417.601618][    C1]  </TASK>
[  418.866305][ T1284] ieee802154 phy1 wpan1: encryption failed: -22
[  418.914842][ T1284] ieee802154 phy0 wpan0: encryption failed: -22
[  418.941940][ T1284] ieee802154 phy1 wpan1: encryption failed: -22
SYZFAIL: failed to send rpc
fd=3 want=64872 sent=0 n=-1 (errno 32: Broken pipe)
[  421.277308][   T79] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  421.307085][   T79] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  421.445591][   T79] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  421.461639][   T79] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  421.554871][   T79] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  421.567663][   T79] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  421.701346][   T79] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  421.716546][   T79] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  422.003554][   T79] tipc: Disabling bearer <eth:macvtap0>
[  422.023281][   T79] tipc: Left network mode
[  423.157673][   T79] dvmrp6 (unregistering): left allmulticast mode
[  423.516578][   T79] hsr_slave_0: left promiscuous mode
[  423.526363][   T79] hsr_slave_1: left promiscuous mode
[  423.537296][   T79] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  423.546289][   T79] batman_adv: batadv0: Removing interface: batadv_slave_0
[  423.573627][   T79] veth1_macvtap: left promiscuous mode
[  423.580875][   T79] veth0_macvtap: left promiscuous mode
[  423.591221][   T79] veth1_vlan: left promiscuous mode
[  423.596929][   T79] veth0_vlan: left promiscuous mode
[  423.869009][   T79] bond5 (unregistering): (slave bond6): Releasing backup interface
[  423.877083][   T79] bond6 (unregistering): left promiscuous mode
[  423.886246][   T79] bond6 (unregistering): Released all slaves
[  423.903260][   T79] bond5 (unregistering): Released all slaves
[  423.920049][   T79] bond4 (unregistering): Released all slaves
[  424.171937][   T79] bond3 (unregistering): Released all slaves
[  424.340297][   T79] bond2 (unregistering): (slave batadv0): Releasing active interface
[  424.349593][   T79] bond2 (unregistering): Released all slaves
[  424.388917][   T79] bond1 (unregistering): (slave bridge1): Releasing backup interface
[  424.397207][   T79] bridge1 (unregistering): left promiscuous mode
[  424.617445][   T79] bond1 (unregistering): Released all slaves
[  425.235687][   T79] team0 (unregistering): Port device team_slave_1 removed
[  425.297826][   T79] team0 (unregistering): Port device team_slave_0 removed
[  425.357293][   T79] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  425.714441][   T79] bond0 (unregistering): (slave team0): Releasing backup interface
[  425.767967][   T79] bond0 (unregistering): Released all slaves
[  426.245605][   T79] IPVS: stop unused estimator thread 0...
[  426.428403][   T79] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  426.524384][   T79] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  426.617307][   T79] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  426.722429][   T79] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0