last executing test programs:

4m56.851041845s ago: executing program 32 (id=30):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x1, 0x4af, &(0x7f0000000ec0)="$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")
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x5c)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc3}})
mount$overlay(0x0, 0x0, &(0x7f0000000340), 0x4008, 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x10040d0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

4m26.720523372s ago: executing program 33 (id=198):
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_usb_connect$midi(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0xd8c, 0x102, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x60, 0x60, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x30, 0x2}}}}}]}}, 0x0)
syz_usb_control_io$uac2(r0, &(0x7f0000001880)={0x14, 0x0, &(0x7f0000001780)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io$lan78xx(r0, &(0x7f0000000600)={0x14, 0x0, &(0x7f0000000540)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0)

4m25.254687886s ago: executing program 0 (id=211):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0x42f, 0x870bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xffe0, 0x7}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9ac5}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x0)

4m23.191963234s ago: executing program 0 (id=218):
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r4=>0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x300, 0x2100, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)

4m21.608122946s ago: executing program 0 (id=227):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20)
r1 = accept4$alg(r0, 0x0, 0x0, 0x80000)
io_setup(0x42, &(0x7f0000000100)=<r2=>0x0)
sendmmsg$alg(r1, &(0x7f0000004400)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x810}], 0x1, 0x10)
io_submit(r2, 0x1, &(0x7f0000000580)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000000)='e', 0x1, 0x0, 0x0, 0x2}])

4m20.371077765s ago: executing program 0 (id=231):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f00000005c0)="$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")
mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='huge=always'])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104)
fallocate(r0, 0x0, 0x3, 0x800000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x2c42, 0x4c)
fallocate(r1, 0x0, 0x37e9, 0x2f92)

4m19.676339121s ago: executing program 0 (id=233):
r0 = syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r1)
mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0)
r2 = syz_open_procfs(r0, &(0x7f0000000040)='task\x00')
fchdir(r2)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)

4m17.115252765s ago: executing program 0 (id=244):
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
io_uring_setup(0x1694, &(0x7f0000000080))
mremap(&(0x7f000007b000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000239000/0x1000)=nil)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1)

4m16.309212557s ago: executing program 34 (id=244):
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
io_uring_setup(0x1694, &(0x7f0000000080))
mremap(&(0x7f000007b000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000239000/0x1000)=nil)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1)

4m13.803217734s ago: executing program 1 (id=266):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1})
mbind(&(0x7f0000730000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x400, 0x2)

4m13.564613043s ago: executing program 1 (id=267):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x39b3)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r1, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20)
recvmmsg(r0, &(0x7f0000005b80)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/163, 0xa3}], 0x1}, 0x6}], 0x1, 0x23, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
connect$inet6(r0, &(0x7f0000001180)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00', 0x7ff}, 0x1c)

4m13.181789491s ago: executing program 1 (id=270):
r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x7b, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, <r4=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0x42f, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0x123}}}, &(0x7f0000000300)=<r5=>0x0)
open$dir(&(0x7f0000000000)='./file0\x00', 0x125842, 0x100)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup(r6)
syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x1, 0x123, 0x0, r7}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x100, 0x1000000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x2, 0x0, 0x146, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0xdf}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r4, '\x00', {0xfff9, 0x7, 0x0, 0x0}}, 0x0)
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x4}, 0x8)

4m12.589335511s ago: executing program 1 (id=273):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0/file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
umount2(&(0x7f00000002c0)='./file0\x00', 0xb)

4m12.401910029s ago: executing program 1 (id=274):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000080)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x14d}}}, &(0x7f0000000480)=<r0=>0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
syz_ublk_setup_queues(r2, r0, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0)
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB=')'], 0x18}, 0x440e0)

4m11.787319745s ago: executing program 1 (id=282):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x7c, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "d1"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}}, 0x40)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0)

4m11.276653069s ago: executing program 35 (id=282):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x7c, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "d1"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}}, 0x40)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0)

4m8.612062594s ago: executing program 5 (id=299):
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x5, &(0x7f0000000280)=0x522, 0x4)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x4, 0x0, [0x806f, 0x0, 0x2d5, 0x2, 0x6], [0x6, 0x7, 0x1, 0x9, 0x8002, 0x0, 0x5, 0x2, 0x0, 0x802, 0x9, 0x200000100, 0x3, 0xfffffffffffffff4, 0x4a, 0x1000000000005, 0x100, 0xd, 0xdd, 0x8000000000000000, 0x1, 0x2a8, 0x3, 0xc39, 0x8, 0x8, 0xffff, 0x2, 0x7b1, 0x8, 0x401, 0x800000000000003, 0x7, 0xfffffffffffffffa, 0x81, 0x100, 0x5, 0x931, 0x101, 0x3, 0x8001, 0x8000000000000000, 0x7, 0x1, 0x8, 0x8, 0x6aa, 0x102, 0x1, 0x83, 0x538a, 0x9, 0xfffffffffffffff7, 0x4, 0x0, 0x4, 0x5, 0x8, 0x80008000, 0x8000000000000000, 0x4, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x5bc, 0x1, 0x7fffffff, 0x4, 0x3ff, 0x3ff, 0x7, 0x7, 0x9, 0x82c, 0x8000, 0xe000000000000, 0xe4, 0x11, 0x0, 0x8, 0x22, 0xffffffffffffffff, 0x7, 0x1, 0x8000000000000000, 0x2000000009, 0x8, 0x0, 0x6, 0x6, 0x7, 0x100000002, 0x4, 0x4, 0x8, 0x7, 0x7, 0x9, 0x1, 0x16d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x0, 0x5, 0x4, 0x7, 0x406, 0x3, 0x5, 0x5, 0x0, 0x3, 0x40, 0x7fffffff, 0x0, 0x3, 0x4]})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00000071"], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

4m8.150978102s ago: executing program 5 (id=301):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0, 0x0, <r2=>0x0}, 0x2020)
acct(&(0x7f00000005c0)='./file0/file0\x00')
write$FUSE_INIT(r0, &(0x7f00000002c0)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x5090880b, 0x0, 0x10, 0xd, 0x40, 0x0, 0x0, 0x2f, 0x1}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f0000008400)="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", 0x2000, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x80, {0x1fffffffffffffc, 0x2, 0x5, 0xfffffffffffffffe, 0xa003, 0x1ff, {0x8, 0x9, 0x6, 0x7d, 0x2, 0x3f45, 0xc05, 0x6, 0xd, 0x2000, 0x0, 0x0, r2, 0xe6d, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0})

4m7.207862169s ago: executing program 5 (id=304):
socket(0x11, 0x3, 0x8)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00')
r1 = socket(0x1, 0x80802, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_to_batadv\x00', <r2=>0x0})
r3 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r3, &(0x7f00000001c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14)
preadv(r0, &(0x7f0000001540)=[{&(0x7f0000000240)=""/207, 0xcf}], 0x1, 0x3a, 0xfffffffd)

4m7.065866388s ago: executing program 5 (id=306):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x59}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000005b80)=ANY=[@ANYBLOB="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", @ANYRESOCT=0x0, @ANYBLOB="07de9ae3004865f36195c93617594bca658e0b966b6d116ecd4910edb0e65f31cb794b50544910eb6456aa609c6861b309b45ef6567d4e820a14ff961ba2f4a3713fdf8adc13aa34115d481dc607cf6ecefc260ef52c3ec19b03986055d54904fe9cd76a923407c252e18073e276f22da9f4d528729fe74609970ff0f1fd20dedc46c4c077d1907c6e56c95506ef8d787b61e0c37b0159a50a5f6be5dfa0afe9eaeed8ffd1a325b8982c80dd9e45d1aea60565aa8c0f427ebeac1f101ad7c598679e1899e7fc2462b3e55ec2b037aeec6af78d058f96bef36411fe2e5db3c4575668515aac63f8ce589f000845efd4e4321cecb196", @ANYRESOCT=0x0, @ANYRES32=0x0, @ANYRESHEX, @ANYRES16, @ANYRES32], 0x5, 0x5505, &(0x7f0000000340)="$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")
truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd)
syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x400a8, 0x0, 0x5, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x30040a9, 0x0, 0xf, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@uuid_off}]})

4m6.35505763s ago: executing program 5 (id=307):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="f800000019200100000000000000000020010000000000000000000500000000fe8000000000000000000000000000aa00000005000000000a00200000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ac00000000000000b30b000000000000ffffffffffffffff0008000000000000ffffffffffffffffffffff7f000000008100000000000000df00000000000000040a00000000000000000000008040000000000000000008000000000000000001000003000000004400050000000000000000000000ffffac141432000004d23c0000"], 0xf8}}, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r2, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000580)="b9ff0300600d698cff9e13f008004de7f9c764360000ff2f00135433f6e31e17128c", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

4m4.623297506s ago: executing program 5 (id=321):
openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x275a, 0x0)
write$cgroup_devices(r0, &(0x7f0000000000)=ANY=[], 0x9)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x94)
lseek(r1, 0x3, 0x1)
getdents64(r1, 0x0, 0x0)

4m4.255934671s ago: executing program 36 (id=321):
openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x275a, 0x0)
write$cgroup_devices(r0, &(0x7f0000000000)=ANY=[], 0x9)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x94)
lseek(r1, 0x3, 0x1)
getdents64(r1, 0x0, 0x0)

1m44.293239345s ago: executing program 8 (id=1155):
syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x804, &(0x7f0000000280)={[{@utf8}, {@errors_continue}, {}, {@discard}, {@discard}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@fmask={'fmask', 0x3d, 0x5}}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@namecase}, {@namecase}]}, 0x1, 0x1534, &(0x7f0000000cc0)="$eJzs3AucTVX7OPDnWWvtMSSdJtdhrfVsTnJZJEkuSXJJktQrSW4JSZO8kpAYcksakpBchuQyhOQWk8b9fr8kJMk7SZJbbsn6fybmr97q/9568/v/5vl+Pvsza83az9rPPs+cffbe55z5pvOQmo1qVWtARPAfwUs/EgEgFgAGAMB1ABAAQLm4cnEZ49klJv5nG2F/rIdTrnYG7Gri+mdtXP+sjeuftXH9szauf9bG9c/auP5ZG9efsaxs87QC1/OSdRe+/5+V8ev//yLppcZ8ubZUni4AMf9sCNf//3/4H8Ry/f/XCv6Zlbj+WRvXP6uKvdoJsP8B+PmfFWT73RGuf9bG9WcsK/v5veBYuPr3o//sBSL/zfdAfM9Lj/LV38/f3X/GGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY+xPcNZfoQAgs32182KMMcYYY4wxxtgfx2e72hkwxhhjjDHGGGPsvw9BgAQFAcRANoiF7JADBEBM5vj1EAc3QG7IA3khH+SHAhAPBaEQaDBggSCEwlAEonAjFIWboBgUhxJQEhyUgtJwM5SBW6As3Arl4DYoD7dDBagIlaAy3AFV4E6oCndBNbgbqkMNqAm14B6oDfdCHbgP6sL9UA8egPrwIDwEf4EG8DA0hEegETwKjeExaAJNoRk0hxb/VvyL0B1egh7QExKhF/SGl6EP9IV+0B8GwCswEF6FQfAaJMFgGAKvw1B4A4bBmzAcRsBIeAtGwdswGsbAWBgHyTAeJsA7MBHehUkwGabAVEiBaTAd3oMZMBNmwfswGz6AOTAX5qmMx/NDWAiLIBU+gsXwMaTBElgKy2A5rICVsApWwxpYC+tgPWyAjbAJNsMW2ArbYDvsgJ3wCeyCT2E37IG98Bnsg8//xfgzfxffBQEBBQpUqDAGYzAWYzEH5sCcmBNzYS6MYATjMA5zY27Mi3kxP+bHeIzHQlgIDRokJCyMhTGKUSyKRbEYFsMSWAIdOiyNpbEM3oJlsSyWw3JYHstjBayIFbEyVsYqWAWrYlWshtWwOlbHmlgT78F7sBfWwTpYF+tiPayXeXsKG2ADbIgNsRE2wsbYGJtgE2yGzbAFtsCW2BJbYStsg22wLbbFdtgOEzAB22N77IAdsCN2xE7YCTtjZ+yCXbFr+ovZAF/Cl7AnVhe9sDf2xj6YlK0f9sf++AoOxFfxVXwNk3AwDsHX8XV8A4fhaRx+cQSOxJFYRbyNo3EMkhiHyZiME3ACTsSJOAkn42Sciik4DafjdJyBM3Emvo+z8QP8AOfiXJyPC3ABLsRFmIqpuBjPYBouwaW4DJfjClyOq3A1rsK1uA7X4gbcgJtwE27BLbgNt+EO3IGfoALAT3EP7sEk3If7cD/uxwN4AA/iQUzHdDyEh/AwHsYjeASP4lE8hsfxBB7HU3gKT+MZPItn8Tyexwv4fPxXDT8pviYJRAYllIgRMSJWxIocIofIKXKKXCKXiIiIiBNxIrfILfKKvCK/yC/iRbwoJAoJI4wgEeYBABEVUVFUFBXFRDFRQpQQTjhRWpQWZUQZUVaUFeXEbaK8uF1UEBVFa1dZVBZVRBtXVdwlqolqorqoIWqKWqKWqC1qizqijqgr6op6op6oLx4UD4le2A8fFhmVaSQGY2MxBJuIpkJePkK1FMOwlWgt2ognxQgcju1ES5cgnhHtxWjsIP4qxuBzopMYh53FC6KL6Cq6iRdFd9HK9RA9xSTsJXqLqdhH9BX9RH8xA2uI93F29priNZEkBosh4nUxH98Qw8SbYrgYIUaKt8Qo8bYYLcaIsWKcSBbjxQTxjpgo3hWTxGQxRUwVKWKamC7eEzPETDFLvC9miw/EHDFXzBPzxQLxoVgoFolU8ZFYLD4WaWKJWCqWieVihVgpVonVYo1YK9aJ9WKD2Cg2ic1ii9gqtontYofYKT4Ru8SnYrfYI/aKz8Q+8bnYL74QB8SX4qD4m0gXX4lD4mtxWHwjjohvxVHxnTgmjosT4qQ4Jb4Xp8UZcVacE+fFD+KC+FFcFF6ARCmklEoGMkZmk7Eyu8whr5E5ZZB5/Jdx8gaZW+aReWU+mV8WkPGyoCwktTTSSpKhLCyLyKi8URaVN8lisrgsIUtKJ0vJ0vJmWUbeIsvKW2U5eZssL2+XFWRFWUlWlnfIKvJOCZFL26gua8iaspa8RybCvbKOvE/WlffLevIBWV8+mHGMyiAbykdkI/mobCwfk01kU9lMNpct5OOypXxCtpKtZRv5pGwrn5Lt5NMyQT4j20t/+U/kOdlJPi87yxdkF9lVdpM/yovSyx6yp4ReIHvLl2Uf2Vf2k/3lAPmKHChflYPkazJJDpZD5OtyqHxDDpNvyuFyhBwp35Kj5NtytBwjx8pxMlmOlxPkO3KifFdOkpPlFDlVpshpst/lmWZJ+Q/j3/mN+EE/bX2T3Cy3yK1ym9wud8id8hO5S+6Su+VuuVfulfvkPrlf7pcH5AF5UB6U6TJdHpKH5GF5WB6RR+RReVQek8flOXlSnpLfy9PyjDwjz8nz8ry8cPkxAIVKKKmUClSMyqZiVXaVQ12jcqprVS51nYqo61WcukHlVnlUXpVP5VcFVLwqqAoprYyyilSoCqsiKqpuxMt/MKqEKqmcKqVKq5v/lXhVVN2kiqniv4jPzC/xd/JroVqolqqlaqVaqTaqjWqr2qp2qp1KUAmqvWqvOqgOqqPqqDqpTqqz6qy6qC6qm+qmuqvuqofqoRJVouqtXlZ9VF/VT/VXA9QrImMfBqlBKkklqSFqiBqqhqphapgaroarkWqkGqVGqdFqtBqrxqpklawmqAlKqolqkpqkpqgpKkWlqOlqupqhZqhZapaarWarOWqOmqfmqQVqgVqoFqpUlaoWq8UqTS1RS9QytUytUCvUKrVKrVFr1Dq1Tm1QG1Sa2qw2q61qq9qutqudaqfapXap3Wq32qv2qn1qn9qv9qsD6oA6qA6qdJWuDqlD6rA6rI6oI+qoOqqOqWPqhDqhTqlT6rQ6rc6qs+q8Oq8uqAvqorqYcdoXiEAEKlBBTBATxAaxQY4gR5AzyBnkCnIFkSASxAVxQe4gT5A3yBfkDwoE8UHBoFCgAxPYQFwuejS4MSga3BQUC4oHJYKSgQtKBaWDm4MywS1B2eDWoFxwW1A+uD2oEFQMKgWVgzuCKsGdQdXgrqBacHdQPagR1AxqBfcEtYN7gzrBfUHd4P6gXvBAUD94MHgo+EvQIHg4aBg8EjQKHg0aB48FTYKmQbOgedDi35gf4ffm9/50vidcD91TJ+peurd+WffRfXU/3V8P0K/ogfpVPUi/ppP0YD1Ev66H6jf0MP2mHq5H6JH6LT1Kv61H6zF6rB6nk/V4PUG/oyfqd/UkPVlP0VN1ip6mp+v39Aw9U8/S7+vZ+gM9R8/V8/R8vUB/qBfqRTpVf6QX6491ml6il+plerleoVfqVXq1XqPX6nV6vd6gN+pNerPeorfqbXq73qF36k/0Lv2p3q336L36M71Pf6736y/0Af2lPqj/ptP1V/qQ/lof1t/oI/pbfVR/p4/p47qsPqlP6e/1aX1Gn9Xn9Hn9g76gf9QXtc84uc94eTfKKBNjYkysiTU5TA6T0+Q0uUwuEzERE2fiTG6T2+Q1eU1+k9/Em3hTyBQyGciQKWwKm6iJmqKmqClmipkSpoRxxpnSprQpY8qYsqasKWfKmfKmvKlgKphKppK5w9xh7jR3mrvMXeZuc7epYWqYWqaWqW1qmzqmjqlr6pp6pp6pb+qbh8xDpoFpYBqahqaRaWQam8amiWlimplmpoVpYVqalqaVaWXamDamrWlr2pl2JsEkmPamvelgOpiOpqPpZDqZzqaz6WK6mG6mm+luupsepodJNImmt+lt+pg+pp/pZwaYAWagGWgGmUEmySSZIWaIGWqGmmFmmBluRpiRGSeq5m0z2owxY804k2ySzQQzwUw0E80kM8lMMVNMikkx0810M8PMMLPMLDPbzDZzzBwzz8wzC8wCs9AsNKkm1Sw2i02aSTNLzVKz3Cw3K81Ks9qsNmvNWrMe1puNZqPZbDabrWar2W62m51mp9lldpndZrfZa/aafWaf2W/2mwPmgDloDpp0k24OmUPmsDlsjpgj5qg5ao6ZY+aEOWFOmVPmtDltzpqz5rzJd/n10ptYm93msNfYnPZam8teZ/++n98WsPG2oC1ktc1r8/2ib6y1xWxxW8KWtM6WsqXtzb/qV7AVbSVb2d5hq9g7bdVf9Wvbe20de5+ta++3tew9v+jXsw/Y+vZR+xAigG1qG9rmtpF91Da2j9kmtqltZpvbtvYp284+bRPsM7a9ffZX/YV2kV1t19i1dp3dbffYs/acPWy/seftD7aH7WkH2FfsQPuqHWRfs0l28K/6I+1bdpR92462Y+xYO+5X/Sl2qk2x0+x0+56dYWf+qr/Afmhn21Q7x8618+z8n/oZOaXaj+xi+7FNswEstcvscrvCrrSr/m+uy+wGu9Fusrvsp3ar3Wa32x12Z+aJsN1j99rP7D77uT1kv7YH7Jf2oD1i0+1XP/Uz9u+I/dYetd/ZY/a4PWFP2lP2e5UZnbHvJ+2P9qL1FggJSJKigGIoG8VSdspB11BOupZy0XUUoespjm6g3JSH8lI+yk8FKJ4KUiHSZMgSUUiFqQhF6UbKTK8ElSRHpag03Uxl6BYqS7dSObqNytPtVIEqUiWqTHdQFbqTqtJdVI3upupUg2pSLbqHatO9VIfuo7p0P9WjB6g+PUgP0V+oAT1MDekRakSPUmN6jJpQU2pGzakFPU4t6QlqRa2pDT1JbekpakdPUwI9Q+3pWepAf6WO9Bx1ouepM71AXagrdaMXqTu9RD2oJyVSL+pNL1Mf6kv9qD8NoFdoIL1Kg+g1SqLBNIRep6H0Bg2jN2k4jaCR9BaNordpNI2hsTSOkmk8TaB3aCK9S5NoMk2hqZRC02g6vUczaCbNovdpNn1Ac2guzaP5tIA+pIW0iFLpI1pMH1MaLaGltIyW0wpaSatoNa2htbSO1tMG2kibaDNtoa20jbbTDtpJn9Au+pR20x7aS5/RPvqc9tMXdIC+pIP0N0qnr+gQfU2H6Rs6Qt/6nvQdHaPjdIJO0in6nk7TGTpL5+g8/UAX6Ee6SJ4gxFCEMlRhEMaE2cLYMHuYI7wmzBleG+YKrwsj4fVhXHhDmDvME+YN84X5wwJhfFgwLBTq0IQ2pDAMC4dFwmh4Y1g0vCksFhYPS4QlQxeWCkuHN4dlwlvCsuGtYbnwtrB8eHtYIawYPnp/5fCOsEp4Z1g1vCusFt4dVg9rhDXDWuE9Ye3w3rBOeF9YN7w/LBs+ENYPHwwfCv8SNggfDhuGj4SNwkfDxuFjYZOwadgsbB62CB8PW4ZPhK3C1mGb8JqwbfhU2C58OkwInwnbh8/+NP7AoszxJ381nhj2CnuHL4cvh97fJ+dF50cXRD+MLowuiqZGP4oujn4cTYsuiS6NLosuj66Iroyuiq6Oromuja6Lro9uiG6Mbop6XysbOHTCSadc4GJcNhfrsrsc7hqX013rcrnrXMRd7+LcDS63y+Pyunwuvyvg4l1BV8hpZ5x15EJX2BVxUXejK+pucsVccVfClXTOlXKlXXPXwrVwLd0TrpVr7dq4J92T7in3lHvaPe2ece3ds66D+6vr6J5zndzz7nn3guviurpu7kXX3Y3Pdek5meh6u96uj+vj+rl+boAb4Aa6gW6QG+SSXJIb4oa4oW6oG+aGueFuuBvpRrpRbpQb7Ua7sW6sS3bJboKb4Ca6iW6Sm+SmuCkuxaW46W66m+FmuCozL21ljpvj5rl5boFb4Ba6jHPGVLfYLXZpLs0tdUvdcrfcrXQr3Wq32q11a916t95tdBvdZrfZbXVb3Xa33e10O90ut8vt9tddmtTtc/vdfnfAHXAH3d9cuvvKHXJfu8PuG3fEfeuOuu/cMXfcnXAn3Sn3vTvtzriz7pw7735wF9yP7qLzLjkyPjIh8k5kYuTdyKTI5MiUyNRISmRaZHrkvciMyMzIrMj7kdmRDyJzInMj8yLzIwsiH0YWRhZFUiMfRRZHPo6kRZZElkaWRZZHVkS8L7g19IV9ER/1N/qi/iZfzBf3JXxJ73wpX9rf7MtcyjvN+9t8eX+7r+Ar+kr+Md/EN/XNfHPfwj/uW/onfCvf2rfxT/q2/infzj/tE/wzvr1/1nfwf/Ud/XO+k3/ed/Yv+C6+q+/mX/Td/Uu+h+/pE30v39u/7Pv4vr6f7+8H+Ff8QP+qH+Rf80l+sB/iX/dD/Rt+mH/TD/cj/MiYt/yozEtkGOeT/Xg/wb/jJ/p3/SQ/2U/xU32Kn+an+/f8DD/Tz/Lv+9n+Az/Hz/Xz/Hy/wH/oF/pFPtV/5Bf7j32aX5J509iv9Kv8ar/Gr/Xr/Hq/wW/0m/xmv8Vv9dv8dr/D7/Sf+F3+U7/b7/F7/Wd+n//c7/df+AMXM7+B9pU/5L/2h/03/oj/1h/13/lj/rg/4U/6U/57f9qf8Wf9OX/e/+Av+B/9Rf7OGmOMMcbYP2X8lab45cil2/m9fiNG/Gzl3gBw7bYC6T8fzzijXJ/3UruviI/N+PlMz84PZy7VqycmJl5eN01CUGQuQOY7QRl++ujB5X7Gek9BArSGMr+Zf1/R9Tz9g/mjtwHk+FlMRkKZ/SXQ5vL8XwBg4m/M//iTIxeWD8/G/T/mnwtQrMiVmOxwpb8E2vx0f6U1lP2d/PO1/Af5Z/8yGaDVz2JywpX+lfxLwxPwLCT8Yk3GGGOMMcYYY+ySvqJSx8zrz8xPfP7W9Xm8uhKTDa70r1x//vb1OWOMMcYYY4wxxq6+57p2e/rxhITWHf/1RtV/K+qfbjSG/9bM3PjNhvcAmb9RAPAfTgiQ0ZB/5l5s+VO2lXT5qfP3Q8vP+QD+Z5Tyj2hc5QMTY4wxxhhj7A935aT/l79XVyshxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGMsC/oz/p3Y1d5HxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhj7Gr7PwEAAP//kFH3Jw==")
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000040)='./file0\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x51}, [@ldst={0x4}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a)
getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000)

1m43.447069918s ago: executing program 8 (id=1160):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
unshare(0x8040480)
r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r4=>0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x1, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x2000, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x2000, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x800, 0x1, 0x0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x1, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x81000fff, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0)

1m42.16589587s ago: executing program 8 (id=1166):
syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040), 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x3e2}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)
r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r5=>0x0, &(0x7f0000000280)=<r6=>0x0, &(0x7f0000000140)=<r7=>0x0)
syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r8=>0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
r10 = dup(r9)
syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0)

1m40.066756018s ago: executing program 8 (id=1174):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000200), 0x1, 0x4bc, &(0x7f0000000a40)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x2002, 0xa)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101581, 0x1b9)
open(&(0x7f0000000200)='./file1\x00', 0x4c23e, 0x20)
open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]})
fallocate(r0, 0x10, 0x1, 0x8000)

1m38.564120901s ago: executing program 8 (id=1181):
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x200, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {0xffe0}, {0xf}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000884}, 0x48000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0)

1m36.483277253s ago: executing program 8 (id=1193):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r0 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0)
getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100037040400"/20, @ANYRES32=r1, @ANYBLOB="8304050000000000280012800900010076657468000000001800028014000100000000", @ANYRES32=r1], 0x48}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1m35.643577637s ago: executing program 37 (id=1193):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r0 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0)
getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100037040400"/20, @ANYRES32=r1, @ANYBLOB="8304050000000000280012800900010076657468000000001800028014000100000000", @ANYRES32=r1], 0x48}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

9.1690483s ago: executing program 7 (id=1608):
r0 = fsopen(&(0x7f0000000140)='sysfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
r3 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = syz_pidfd_open(r3, 0x0)
setns(r4, 0x24020000)
fsmount(r0, 0x0, 0x21)

8.616765656s ago: executing program 7 (id=1611):
symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac)
renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0)
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f00000001c0)={{}, {}, [], {0x4, 0x1}}, 0x24, 0x0)
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e)

6.596737436s ago: executing program 3 (id=1619):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_smc(0x2b, 0x1, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x362, 0xc000, 0x7, 0x337})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0)
r1 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8)
sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

6.556921998s ago: executing program 7 (id=1620):
syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000540)='./file2\x00', 0x0, &(0x7f0000000580), 0x1, 0x4e8, &(0x7f00000005c0)="$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")
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r1 = fanotify_init(0xf00, 0x181000)
fanotify_mark(r1, 0x1, 0x5000003a, r0, 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97)
fanotify_mark(r1, 0x5, 0x4800003e, r2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x58)
read$FUSE(r1, &(0x7f0000000f40)={0x2020}, 0x2020)

6.295837237s ago: executing program 3 (id=1623):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2008c040}, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x9, 0x31, 0xffffffffffffffff, 0x0)
connect$inet(r1, &(0x7f0000000200)={0x2, 0xe26, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10)

5.8236731s ago: executing program 7 (id=1627):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3)
mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188)

5.81172545s ago: executing program 3 (id=1628):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f00000001c0)=ANY=[@ANYBLOB="000f02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000005c0)={0x24, &(0x7f0000000280)={0x40, 0x10, 0x1, ';'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

4.998808648s ago: executing program 6 (id=1636):
r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8)
write$binfmt_format(r0, &(0x7f0000000100)='0\x00', 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x78, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35b", 0x6)
process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7, 0x5], &(0x7f0000000240), 0x0, 0x2}}, 0x40)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)

4.868440796s ago: executing program 4 (id=1638):
ioperm(0x3, 0x1, 0xfffffffffffffe01)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000400)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r2, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0)
close(r3)

4.57844164s ago: executing program 9 (id=1639):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0xfffffffd}}, 0x10)
bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10)
bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10)
bind$tipc(r1, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10)
bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10)
bind$tipc(r0, 0x0, 0x0)

4.513958858s ago: executing program 6 (id=1640):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$usbmon(&(0x7f0000000000), 0x1000000004, 0xe101)

4.503165182s ago: executing program 4 (id=1641):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$kcm(0x11, 0x3, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x5}, @TCA_FQ_FLOW_MAX_RATE={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r4, 0x2e}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000300)="55ee4addb0838779ff7a51df6a145e9ed9d2b922db8a944a832300dc1f10cbf4ccbb", 0x22}], 0x1}, 0x4)

4.195160935s ago: executing program 9 (id=1642):
timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0))
timer_create(0xfffffffd, 0x0, &(0x7f0000000040)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0)
r1 = gettid()
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x6, 0x7fc00100}]})
readv(0xffffffffffffffff, 0x0, 0x0)
tkill(r1, 0x7)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
close_range(r2, 0xffffffffffffffff, 0x0)
timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)

3.389559383s ago: executing program 2 (id=1643):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x2, @local, 0x8ac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b9312948f6651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267513308a3d40aa1c788df6"}, 0xd8)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4)
ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0xffff)
setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x5, 0x4)
writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1)

3.301168246s ago: executing program 4 (id=1644):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000180))

3.219608798s ago: executing program 6 (id=1645):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, 0x0, 0x4010)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x4040091)
socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000300)="a6", 0x1, 0x240080c4, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4)
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10)

3.140138752s ago: executing program 9 (id=1646):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='htcp', 0x4)
sendmmsg$inet(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000280)='=', 0x1}], 0x1}}], 0x1, 0x24040014)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0)

2.771013645s ago: executing program 6 (id=1647):
r0 = socket$igmp(0x2, 0x3, 0x2)
r1 = socket(0x10, 0x803, 0x2)
socket$packet(0x11, 0x3, 0x300)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=@newlink={0x38, 0x10, 0x439, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, 0xb8a1}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24008006}, 0x4000840)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$inet(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}, 0x0)

2.084947525s ago: executing program 9 (id=1648):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340))
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x80000)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x1004000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}})

2.084236865s ago: executing program 2 (id=1649):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc1}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="0203f602310000002cbd7000fbdbdf2502000900080000001c0000000000000005000600000000000a0000000000000000000000000000000000000000000001020000000000000002000100000000000000070c000001fc05000500000000000a00000000000000fc0100000000000000000000000000010700000000000000210008000008"], 0x188}, 0x1, 0x7}, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x1, [{0x0, 0x2, 0x20000000}]}, @restrict={0x0, 0x0, 0x0, 0x6, 0x2}]}}, 0x0, 0x3e}, 0x28)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e0000"], 0x70}}, 0x0)
sendmmsg(r2, &(0x7f0000000180), 0x3ef, 0x0)

1.977261883s ago: executing program 4 (id=1650):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_writev(r3, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x53, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/109, 0x20001c34}], 0x1, 0x0)

1.780202778s ago: executing program 9 (id=1651):
socket$unix(0x1, 0x2, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0)
r1 = socket$inet(0x2, 0x80001, 0x84)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000140)="1632800e", 0x4}], 0x1)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8)
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

1.765142215s ago: executing program 6 (id=1652):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x6}, 0x94)
syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4)
sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)

1.333217067s ago: executing program 2 (id=1653):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
close(0x3)
r1 = socket(0x2, 0x80805, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={<r3=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000000c0), &(0x7f0000000180)=0x8)

1.290138997s ago: executing program 3 (id=1654):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000000)=0x7, 0x4)
getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000100)=""/34, &(0x7f00000000c0)=0x57)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f00000001c0), 0x4)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000540)=[@in6={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x1ff}]}, &(0x7f0000000140)=0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000000))

1.284797088s ago: executing program 7 (id=1655):
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x42, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_rdma(0x10, 0x3, 0x14)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x2000800)

1.145733518s ago: executing program 9 (id=1656):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
clock_settime(0x0, &(0x7f0000000240)={0x77359400})

1.083946748s ago: executing program 2 (id=1657):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "dbdc27ff", "16de86d67a8426bd"}, 0x28)
readv(r0, &(0x7f00000031c0)=[{&(0x7f0000000140)=""/20, 0x14}, {&(0x7f00000001c0)=""/30, 0x1e}], 0x2)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0)
setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4)

982.616613ms ago: executing program 4 (id=1658):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0xb, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77682a85, 0x1000, 0x1}, @flat=@handle={0x73682a85, 0x1000}, @flat=@binder={0x73622a85, 0x0, 0x1}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

940.759062ms ago: executing program 7 (id=1659):
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x5)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
sigaltstack(&(0x7f0000001000)={&(0x7f0000002100)=""/4114, 0x1, 0xdf01}, 0x0)
r0 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3})
mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r0, 0x0, 0x0, 0x9, 0x0)

791.44671ms ago: executing program 4 (id=1660):
r0 = socket(0x28, 0x5, 0x0)
r1 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
listen(r1, 0x10000008)
connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
recvfrom$inet_nvme(r0, 0x0, 0xfffffffffffffea6, 0x40000002, 0x0, 0x0)

666.591927ms ago: executing program 6 (id=1661):
open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00')
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$lock(r0, 0x410, &(0x7f0000000200)={0x1, 0x3, 0x1000000000000001, 0x9b})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@known='system.posix_acl_default\x00')

566.550838ms ago: executing program 2 (id=1662):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="12000000070000000400000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, <r2=>0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)=r0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, <r3=>0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000140)=r0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xfb1585202ff31891}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r5=>0x0})
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r6, r5, 0x25, 0x0, @val=@target_btf_id=0xffffffffffffffff}, 0x14)
syz_emit_ethernet(0xffe, &(0x7f0000001200)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x6, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x1}}}}}}}, 0x0)

194.866103ms ago: executing program 3 (id=1663):
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
r1 = socket$qrtr(0x2a, 0x2, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50)
io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0)
connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x4, 0x7ffe}, 0xc)
close_range(r0, r1, 0x0)

8.857189ms ago: executing program 3 (id=1664):
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4040)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10)
getpid()
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'lo\x00'})
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f0007000000000002"], 0x18)

0s ago: executing program 2 (id=1665):
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x4})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x10)
iopl(0x3)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0xf61cb000)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4)
syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r1)
mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}})

kernel console output (not intermixed with test programs):

ng garbage
[  209.800072][ T5352] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device
[  209.827225][ T5352] cdc_wdm 9-1:1.0: Unknown control protocol
[  209.893425][ T5352] usb 9-1: USB disconnect, device number 4
[  209.998451][ T8456] loop9: detected capacity change from 0 to 131072
[  210.010578][ T8456] F2FS-fs (loop9): invalid crc value
[  210.147330][ T8456] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  210.166416][ T8456] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e4
[  210.916577][ T8498] loop4: detected capacity change from 0 to 128
[  210.992801][ T5640] Bluetooth: hci4: command 0x0406 tx timeout
[  211.003488][ T8498] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  211.123307][ T8498] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  211.164728][ T8502] loop7: detected capacity change from 0 to 4096
[  211.181060][ T8502] ntfs3(loop7): Different NTFS sector size (1024) and media sector size (512).
[  211.266771][ T8502] ntfs3(loop7): Mark volume as dirty due to NTFS errors
[  211.282627][   T31] audit: type=1800 audit(1784632130.371:35): pid=8498 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.661" name="file1" dev="loop4" ino=12 res=0 errno=0
[  211.310601][ T8508] netlink: 'syz.8.663': attribute type 1 has an invalid length.
[  211.342538][ T8502] ntfs3(loop7): Failed to load $Extend (-22).
[  211.391472][ T8502] ntfs3(loop7): Failed to initialize $Extend.
[  211.457557][ T8502] ntfs3(loop7): ino=0, attr_set_size_ex
[  211.541795][ T8502] ntfs3(loop7): ino=0, attr_set_size_ex
[  211.614718][ T8502] ntfs3(loop7): ino=0, attr_set_size_ex
[  211.618338][ T8508] 8021q: adding VLAN 0 to HW filter on device bond1
[  211.654171][ T7140] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  211.664603][ T8517] ntfs3(loop7): no free space to extend mft
[  211.768283][ T8502] ntfs3(loop7): no free space to extend mft
[  211.812004][ T8514] 8021q: adding VLAN 0 to HW filter on device bond1
[  211.867706][ T8514] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address
[  211.890381][ T8521] ntfs3(loop7): no free space to extend mft
[  211.922143][ T8514] bond1: (slave wireguard0): Error -95 calling set_mac_address
[  212.065877][ T8516] mac80211_hwsim hwsim19 wlan1: entered promiscuous mode
[  212.170044][ T8516] bond1: (slave wlan1): Enslaving as an active interface with a down link
[  213.481194][ T8540] overlayfs: failed to clone upperpath
[  214.120829][ T8563] netlink: 12 bytes leftover after parsing attributes in process `syz.6.679'.
[  214.169843][ T5352] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  214.215187][ T8558] loop4: detected capacity change from 0 to 8192
[  214.253402][ T5352] hid-generic 0000:0000:0000.0007: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  214.332715][ T8566] loop9: detected capacity change from 0 to 4096
[  214.383815][ T8566] EXT4-fs (loop9): Test dummy encryption mode enabled
[  214.470112][ T8566] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  214.713038][ T8571] fido_id[8571]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  214.945530][ T6989] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  215.621511][ T8602] netlink: zone id is out of range
[  215.669800][ T8602] netlink: zone id is out of range
[  215.685080][ T8602] netlink: zone id is out of range
[  215.780689][ T8611] team0: entered promiscuous mode
[  215.806908][ T8611] team_slave_0: entered promiscuous mode
[  215.827383][ T8611] team_slave_1: entered promiscuous mode
[  215.914264][ T8611] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  215.959429][ T8611] bond0: (slave macvlan2): Enslaving as an active interface with an up link
[  216.524279][ T8631] loop9: detected capacity change from 0 to 512
[  216.648593][ T8629] loop8: detected capacity change from 0 to 4096
[  216.661047][ T8631] EXT4-fs (loop9): Test dummy encryption mode enabled
[  216.703594][ T8631] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  216.817390][ T8631] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  216.886029][ T8631] EXT4-fs error (device loop9): ext4_orphan_get:1425: comm syz.9.695: bad orphan inode 131083
[  216.977285][ T8631] loop9: lost filesystem error report for type 5 error -117
[  216.981992][    C1] EXT4-fs (loop9): error count since last fsck: 1
[  216.995837][    C1] EXT4-fs (loop9): initial error at time 1784632136: ext4_orphan_get:1425
[  217.004395][    C1] EXT4-fs (loop9): last error at time 1784632136: ext4_orphan_get:1425
[  217.018177][ T8631] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  217.402025][ T5629] Bluetooth: hci2: link tx timeout
[  217.410510][ T5629] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  217.428465][ T5640] Bluetooth: hci2: link tx timeout
[  217.433898][ T5640] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  217.441700][ T5640] Bluetooth: hci2: link tx timeout
[  217.448873][ T5640] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  217.456642][ T5640] Bluetooth: hci2: link tx timeout
[  217.462084][ T5640] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  217.472997][ T5640] Bluetooth: hci2: link tx timeout
[  217.479531][ T5640] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  217.493599][ T5640] Bluetooth: hci2: link tx timeout
[  217.498845][ T5640] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  217.506632][ T5640] Bluetooth: hci2: link tx timeout
[  217.513540][ T5640] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  217.521920][ T5640] Bluetooth: hci2: link tx timeout
[  217.527190][ T5640] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  217.535479][ T5640] Bluetooth: hci2: link tx timeout
[  217.540737][ T5640] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  217.548609][ T5640] Bluetooth: hci2: link tx timeout
[  217.554474][ T5640] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  217.567931][ T5640] Bluetooth: hci2: link tx timeout
[  217.573184][ T5640] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  217.798560][ T6989] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  218.316561][ T8674] loop9: detected capacity change from 0 to 32768
[  218.331116][ T8674] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.708 (8674)
[  218.370410][ T8674] BTRFS info (device loop9): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  218.380628][ T8674] BTRFS info (device loop9): using sha256 checksum algorithm
[  218.496907][ T8674] BTRFS info (device loop9): rebuilding free space tree
[  218.602170][ T8674] BTRFS info (device loop9): setting nodatasum
[  218.608546][ T8674] BTRFS info (device loop9): setting nodatacow
[  218.614801][ T8674] BTRFS info (device loop9): turning off barriers
[  218.621341][ T8674] BTRFS info (device loop9): turning on sync discard
[  218.628028][ T8674] BTRFS info (device loop9): enabling free space tree
[  218.634883][ T8674] BTRFS info (device loop9): force clearing of disk cache
[  218.773072][ T8698] loop7: detected capacity change from 0 to 512
[  218.799308][ T8674] BTRFS info (device loop9): scrub: started on devid 1
[  218.827718][ T8674] BTRFS info (device loop9): scrub: finished on devid 1 with status: 0
[  218.890290][ T8696] ref_ctr_offset mismatch. inode: 0x353 offset: 0x0 ref_ctr_offset(old): 0x2000000000c0 ref_ctr_offset(new): 0x1000000008
[  218.930239][ T8701] loop4: detected capacity change from 0 to 2048
[  218.933756][ T8698] EXT4-fs error (device loop7): ext4_orphan_get:1399: inode #15: comm syz.7.714: iget: bad i_size value: 38620345925642
[  218.946588][ T8701] udf: Unknown parameter '18446744073709551615'
[  219.019242][ T8698] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  219.021261][    C0] EXT4-fs (loop7): error count since last fsck: 1
[  219.036911][    C0] EXT4-fs (loop7): initial error at time 1784632138: ext4_orphan_get:1399: inode 15
[  219.046600][    C0] EXT4-fs (loop7): last error at time 1784632138: ext4_orphan_get:1399: inode 15
[  219.095910][ T8698] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.714: couldn't read orphan inode 15 (err -117)
[  219.141349][ T8698] loop7: lost filesystem error report for type 5 error -117
[  219.159934][ T8698] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  219.342510][ T6989] BTRFS info (device loop9): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  219.439190][ T8711] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.714: bg 0: block 5: invalid block bitmap
[  219.471591][ T5640] Bluetooth: hci2: command 0x0406 tx timeout
[  219.504985][ T8711] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 28 with error 28
[  219.589573][ T8711] EXT4-fs (loop7): This should not happen!! Data will be lost
[  219.589573][ T8711] 
[  219.643272][ T8711] EXT4-fs (loop7): Total free blocks count 0
[  219.649380][ T8711] EXT4-fs (loop7): Free/Dirty block details
[  219.659124][ T8711] EXT4-fs (loop7): free_blocks=0
[  219.673135][ T8711] EXT4-fs (loop7): dirty_blocks=28
[  219.678759][ T8711] EXT4-fs (loop7): Block reservation details
[  219.686046][ T8711] EXT4-fs (loop7): i_reserved_data_blocks=28
[  219.751554][ T8715] fuse: fd is not a fuse device
[  219.815175][ T8717] fuse: fd is not a fuse device
[  219.909963][ T8721] loop8: detected capacity change from 0 to 512
[  219.960886][ T8721] EXT4-fs: Ignoring removed nomblk_io_submit option
[  219.986625][ T6647] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  220.064313][ T8721] EXT4-fs error (device loop8): ext4_iget_extra_inode:5180: inode #15: comm syz.8.721: corrupted in-inode xattr: invalid ea_ino
[  220.103653][ T8721] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  220.111505][    C0] EXT4-fs (loop8): error count since last fsck: 1
[  220.127172][    C0] EXT4-fs (loop8): initial error at time 1784632139: ext4_iget_extra_inode:5180: inode 15
[  220.137201][    C0] EXT4-fs (loop8): last error at time 1784632139: ext4_iget_extra_inode:5180: inode 15
[  220.198699][ T8721] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.721: couldn't read orphan inode 15 (err -117)
[  220.263883][ T8721] loop8: lost filesystem error report for type 5 error -117
[  220.267757][ T8721] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  220.482508][ T8742] loop7: detected capacity change from 0 to 512
[  220.521970][ T8742] EXT4-fs: Ignoring removed orlov option
[  220.614367][ T8742] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  220.627205][ T8742] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  220.666849][ T8741] EXT4-fs (loop7): shut down requested (0)
[  220.684343][ T6864] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  221.250877][ T8763] loop4: detected capacity change from 0 to 1024
[  221.357995][ T6647] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  223.301340][ T5352] IPVS: starting estimator thread 0...
[  223.472573][ T8815] IPVS: using max 30 ests per chain, 72000 per kthread
[  223.480135][ T8796] bridge0: port 2(bridge_slave_1) entered disabled state
[  223.487889][ T8796] bridge0: port 1(bridge_slave_0) entered disabled state
[  224.013374][ T8796] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  224.048852][ T8796] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  224.167618][ T8832] netlink: 24 bytes leftover after parsing attributes in process `syz.8.758'.
[  224.580278][ T8834] loop7: detected capacity change from 0 to 32768
[  224.600460][ T8834] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  224.608905][ T8834] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  224.705383][ T8834] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[  224.727499][    T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  224.774242][    T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  224.872803][ T3336] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  224.930236][ T3336] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  224.975643][ T3336] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  225.022502][ T3336] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  225.284903][    T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 510ms
[  225.379518][    T9] gfs2: fsid=syz:syz.0: jid=0: Done
[  225.401617][ T8834] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  225.546960][ T8868] netlink: 8 bytes leftover after parsing attributes in process `syz.6.766'.
[  225.629893][ T8868] netlink: 8 bytes leftover after parsing attributes in process `syz.6.766'.
[  225.632862][   T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  225.914289][   T10] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  225.934789][   T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  225.983285][   T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  226.007524][   T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  226.052241][   T10] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  226.062752][   T10] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  226.078007][   T10] usb 5-1: Product: syz
[  226.095192][   T10] usb 5-1: Manufacturer: syz
[  226.139855][   T10] cdc_wdm 5-1:1.0: skipping garbage
[  226.165427][   T10] cdc_wdm 5-1:1.0: skipping garbage
[  226.215330][   T10] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  226.249162][   T10] cdc_wdm 5-1:1.0: Unknown control protocol
[  226.404940][    T9] usb 5-1: USB disconnect, device number 3
[  226.901355][   T31] audit: type=1800 audit(1784632145.991:36): pid=8896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.775" name="nullb0" dev="tmpfs" ino=265 res=0 errno=0
[  226.922285][    T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  227.105859][    T9] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  227.148150][    T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  227.200909][    T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  227.230003][    T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  227.566197][ T8908] loop9: detected capacity change from 0 to 40427
[  227.576495][    T9] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  227.587844][    T9] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  227.595969][ T8908] F2FS-fs (loop9): invalid crc value
[  227.631886][ T8914] loop8: detected capacity change from 0 to 8
[  227.663553][    T9] usb 5-1: Product: syz
[  227.667857][    T9] usb 5-1: Manufacturer: syz
[  227.678271][ T8908] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  227.690194][ T8908] F2FS-fs (loop9): f2fs_disable_checkpoint starts, unusable: 0
[  227.697843][ T8908] F2FS-fs (loop9): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[  227.708998][ T8908] F2FS-fs (loop9): Start checkpoint disabled!
[  227.728445][ T8908] F2FS-fs (loop9): f2fs_disable_checkpoint finishes, err:0
[  227.736901][ T8908] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6
[  227.743396][ T8914] SQUASHFS error: zlib decompression failed, data probably corrupt
[  227.753235][    T9] cdc_wdm 5-1:1.0: skipping garbage
[  227.758470][    T9] cdc_wdm 5-1:1.0: skipping garbage
[  227.779773][    T9] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  227.785811][    T9] cdc_wdm 5-1:1.0: Unknown control protocol
[  227.800304][ T8908] syz.9.778: attempt to access beyond end of device
[  227.800304][ T8908] loop9: rw=2049, sector=77824, nr_sectors = 136 limit=40427
[  227.818647][ T8908] syz.9.778: attempt to access beyond end of device
[  227.818647][ T8908] loop9: rw=2049, sector=45096, nr_sectors = 56 limit=40427
[  227.832859][ T8908] syz.9.778: attempt to access beyond end of device
[  227.832859][ T8908] loop9: rw=2049, sector=77920, nr_sectors = 40 limit=40427
[  227.843335][ T8914] SQUASHFS error: Failed to read block 0x9b: -5
[  227.897550][ T8914] SQUASHFS error: Unable to read metadata cache entry [99]
[  227.914471][ T8914] SQUASHFS error: Unable to read inode 0x127
[  227.930876][   T38] kworker/u8:3: attempt to access beyond end of device
[  227.930876][   T38] loop9: rw=2049, sector=45152, nr_sectors = 8 limit=40427
[  228.016595][   T38] CPU: 1 UID: 0 PID: 38 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) 
[  228.016629][   T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026
[  228.016646][   T38] Workqueue: writeback wb_workfn (flush-7:9)
[  228.016686][   T38] Call Trace:
[  228.016696][   T38]  <TASK>
[  228.016706][   T38]  dump_stack_lvl+0xe8/0x150
[  228.016749][   T38]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  228.016789][   T38]  f2fs_write_end_io+0x124b/0x1710
[  228.016863][   T38]  __submit_merged_bio+0x258/0x6a0
[  228.016893][   T38]  ? srso_alias_return_thunk+0x5/0xfbef5
[  228.016922][   T38]  ? rcu_is_watching+0x15/0xb0
[  228.016970][   T38]  __submit_merged_write_cond+0x3c9/0x4e0
[  228.017015][   T38]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  228.017066][   T38]  ? srso_alias_return_thunk+0x5/0xfbef5
[  228.017107][   T38]  f2fs_write_data_pages+0x2a27/0x36f0
[  228.017143][   T38]  ? srso_alias_return_thunk+0x5/0xfbef5
[  228.017222][   T38]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  228.017318][   T38]  ? srso_alias_return_thunk+0x5/0xfbef5
[  228.017351][   T38]  ? __lock_acquire+0x683/0x2cf0
[  228.017396][   T38]  ? srso_alias_return_thunk+0x5/0xfbef5
[  228.017425][   T38]  ? __lock_acquire+0x683/0x2cf0
[  228.017502][   T38]  ? srso_alias_return_thunk+0x5/0xfbef5
[  228.017531][   T38]  ? __lock_acquire+0x683/0x2cf0
[  228.017574][   T38]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  228.017611][   T38]  do_writepages+0x338/0x560
[  228.017657][   T38]  ? srso_alias_return_thunk+0x5/0xfbef5
[  228.017686][   T38]  ? reacquire_held_locks+0x104/0x190
[  228.017724][   T38]  ? writeback_sb_inodes+0x450/0x1b00
[  228.017767][   T38]  __writeback_single_inode+0x12e/0xf90
[  228.017813][   T38]  writeback_sb_inodes+0x9de/0x1b00
[  228.017852][   T38]  ? __lock_acquire+0x683/0x2cf0
[  228.017922][   T38]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  228.018013][   T38]  ? srso_alias_return_thunk+0x5/0xfbef5
[  228.018042][   T38]  ? rcu_is_watching+0x15/0xb0
[  228.018081][   T38]  ? srso_alias_return_thunk+0x5/0xfbef5
[  228.018110][   T38]  ? queue_io+0x2d3/0x470
[  228.018148][   T38]  wb_writeback+0x41c/0xad0
[  228.018184][   T38]  ? queue_io+0x201/0x470
[  228.018226][   T38]  ? __pfx_wb_writeback+0x10/0x10
[  228.018255][   T38]  ? do_raw_spin_lock+0x12b/0x2f0
[  228.018308][   T38]  wb_workfn+0x431/0x10f0
[  228.018361][   T38]  ? __pfx_wb_workfn+0x10/0x10
[  228.018386][   T38]  ? rcu_is_watching+0x15/0xb0
[  228.018424][   T38]  ? srso_alias_return_thunk+0x5/0xfbef5
[  228.018453][   T38]  ? trace_hrtimer_start+0x82/0x200
[  228.018494][   T38]  ? srso_alias_return_thunk+0x5/0xfbef5
[  228.018523][   T38]  ? do_raw_spin_lock+0x12b/0x2f0
[  228.018556][   T38]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  228.018589][   T38]  ? srso_alias_return_thunk+0x5/0xfbef5
[  228.018623][   T38]  ? srso_alias_return_thunk+0x5/0xfbef5
[  228.018663][   T38]  ? rcu_is_watching+0x15/0xb0
[  228.018702][   T38]  ? srso_alias_return_thunk+0x5/0xfbef5
[  228.018734][   T38]  ? process_scheduled_works+0xa20/0x14e0
[  228.018764][   T38]  process_scheduled_works+0xa8e/0x14e0
[  228.018840][   T38]  ? __pfx_process_scheduled_works+0x10/0x10
[  228.018878][   T38]  ? srso_alias_return_thunk+0x5/0xfbef5
[  228.018907][   T38]  ? assign_work+0x3cf/0x5d0
[  228.018944][   T38]  worker_thread+0xa47/0xfb0
[  228.018978][   T38]  ? srso_alias_return_thunk+0x5/0xfbef5
[  228.019021][   T38]  ? srso_alias_return_thunk+0x5/0xfbef5
[  228.019050][   T38]  ? __kthread_parkme+0x71/0x1f0
[  228.019098][   T38]  kthread+0x388/0x470
[  228.019135][   T38]  ? __pfx_worker_thread+0x10/0x10
[  228.019163][   T38]  ? __pfx_kthread+0x10/0x10
[  228.019201][   T38]  ret_from_fork+0x514/0xb70
[  228.019243][   T38]  ? __pfx_ret_from_fork+0x10/0x10
[  228.019280][   T38]  ? srso_alias_return_thunk+0x5/0xfbef5
[  228.019308][   T38]  ? __switch_to+0xc89/0x1420
[  228.019345][   T38]  ? __pfx_kthread+0x10/0x10
[  228.019384][   T38]  ret_from_fork_asm+0x1a/0x30
[  228.019432][   T38]  </TASK>
[  228.406870][ T8914] netlink: 12 bytes leftover after parsing attributes in process `syz.8.779'.
[  228.489439][   T38] F2FS-fs (loop9): Stopped filesystem due to reason: 3
[  228.737948][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  228.744791][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  228.754010][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  228.760609][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  228.767561][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  228.774156][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  228.780415][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  228.787002][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  228.793776][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  228.800372][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  228.806864][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  228.813454][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  228.819772][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  228.826363][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  228.832700][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  228.839292][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  228.845624][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  228.852218][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  228.858476][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  228.865063][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  228.873350][    T9] usb 5-1: USB disconnect, device number 4
[  228.879206][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  232.178269][ T9036] loop8: detected capacity change from 0 to 512
[  232.312390][ T9036] EXT4-fs warning (device loop8): ext4_expand_extra_isize_ea:2860: Unable to expand inode 17. Delete some EAs or run e2fsck.
[  232.333408][ T9036] EXT4-fs (loop8): 1 truncate cleaned up
[  232.405870][ T9036] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  232.876554][ T9053] loop9: detected capacity change from 0 to 32768
[  232.884831][ T9053] btrfs: Deprecated parameter 'usebackuproot'
[  232.890920][ T9053] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  232.900957][ T9053] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.818 (9053)
[  232.940985][ T9053] BTRFS info (device loop9): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  232.951692][ T9053] BTRFS info (device loop9): using crc32c checksum algorithm
[  232.959116][ T9053] BTRFS warning (device loop9): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  232.962730][ T6864] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  233.148352][   T69] BTRFS warning (device loop9): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  233.249680][ T9053] BTRFS error (device loop9): failed to load root extent
[  233.261837][ T9053] BTRFS warning (device loop9): try to load backup roots slot 1
[  233.274537][   T69] BTRFS warning (device loop9): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  233.292275][ T9053] BTRFS warning (device loop9): couldn't read tree root
[  233.299273][ T9053] BTRFS warning (device loop9): try to load backup roots slot 2
[  233.307406][   T69] BTRFS error (device loop9): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  233.317871][ T9053] BTRFS warning (device loop9): couldn't read tree root
[  233.324938][ T9053] BTRFS warning (device loop9): try to load backup roots slot 3
[  233.376970][ T9053] BTRFS info (device loop9): rebuilding free space tree
[  233.466928][ T9053] BTRFS info (device loop9): disabling free space tree
[  233.474007][ T9053] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  233.483783][ T9053] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  233.528931][ T9053] BTRFS info (device loop9): checking UUID tree
[  233.543853][ T9053] BTRFS info (device loop9): enabling ssd optimizations
[  233.550926][ T9053] BTRFS info (device loop9): turning on async discard
[  233.557823][ T9053] BTRFS info (device loop9): enabling disk space caching
[  233.564943][ T9053] BTRFS info (device loop9): force clearing of disk cache
[  233.572255][ T9053] BTRFS info (device loop9): enabling auto defrag
[  233.578690][ T9053] BTRFS info (device loop9): trying to use backup root at mount time
[  233.586855][ T9053] BTRFS info (device loop9): use zstd compression, level 3
[  233.657324][ T9088] netlink: 24 bytes leftover after parsing attributes in process `syz.6.825'.
[  234.254178][ T9105] netlink: 12 bytes leftover after parsing attributes in process `syz.6.830'.
[  234.569525][ T6989] BTRFS info (device loop9): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  235.074397][ T9124] loop4: detected capacity change from 0 to 2048
[  235.206262][ T9124] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  235.423045][ T9124] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #12: comm syz.4.835: corrupted in-inode xattr: invalid size in ea xattr
[  235.818334][ T7140] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[  236.011839][ T5785] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  236.161146][ T9162] netlink: 'syz.4.844': attribute type 12 has an invalid length.
[  236.208470][ T9162] netlink: 'syz.4.844': attribute type 29 has an invalid length.
[  236.224314][ T5785] usb 9-1: Using ep0 maxpacket: 32
[  236.262000][ T9162] netlink: 148 bytes leftover after parsing attributes in process `syz.4.844'.
[  236.282268][ T5785] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  236.326520][ T5785] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  236.353615][ T5785] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  236.371407][ T9162] netlink: 'syz.4.844': attribute type 1 has an invalid length.
[  236.385795][ T9162] netlink: 47 bytes leftover after parsing attributes in process `syz.4.844'.
[  236.413720][ T5785] usb 9-1: Product: syz
[  236.443784][ T5785] usb 9-1: Manufacturer: syz
[  236.465519][ T5785] usb 9-1: SerialNumber: syz
[  236.514973][ T5785] usb 9-1: config 0 descriptor??
[  236.538469][ T9149] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  236.780109][ T9174] netlink: 4 bytes leftover after parsing attributes in process `syz.4.848'.
[  237.062646][ T9183] netlink: 32 bytes leftover after parsing attributes in process `syz.9.850'.
[  237.326466][   T31] audit: type=1326 audit(1784632156.421:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9189 comm="syz.2.852" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7fb043d97c17 code=0x0
[  237.372923][ T9195] loop4: detected capacity change from 0 to 512
[  237.468399][ T9195] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  237.593940][ T9195] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  237.729347][ T9209] loop9: detected capacity change from 0 to 128
[  237.766560][ T9209] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256
[  237.846976][ T5786] usb 9-1: USB disconnect, device number 5
[  237.999751][ T9213] fuse: fd is not a fuse device
[  238.116800][ T9214] UDF-fs: error (device loop9): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  238.125325][ T7140] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  238.645759][ T9234] netlink: 24 bytes leftover after parsing attributes in process `syz.8.863'.
[  240.245746][ T9257] loop4: detected capacity change from 0 to 32768
[  240.335474][ T9257] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  240.675911][ T9300] netlink: 20 bytes leftover after parsing attributes in process `syz.9.885'.
[  240.719877][ T9303] netlink: 'syz.8.886': attribute type 11 has an invalid length.
[  240.758252][ T9305] overlayfs: failed to clone upperpath
[  241.135486][ T7140] ocfs2: Unmounting device (7,4) on (node local)
[  241.200744][ T9308] 8021q: adding VLAN 0 to HW filter on device bond1
[  241.361353][   T29] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  241.381445][ T9309] mac80211_hwsim hwsim18 wlan0: entered promiscuous mode
[  241.410091][ T9309] mac80211_hwsim hwsim18 wlan0: entered allmulticast mode
[  241.531358][   T29] usb 8-1: Using ep0 maxpacket: 16
[  241.567202][   T29] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  241.630373][   T29] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  241.680412][   T29] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  241.707658][   T29] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  241.733828][   T29] usb 8-1: Product: syz
[  241.747948][   T29] usb 8-1: Manufacturer: syz
[  241.768122][   T29] usb 8-1: SerialNumber: syz
[  241.795815][   T29] usb 8-1: config 0 descriptor??
[  241.829020][   T29] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  241.859376][   T29] em28xx 8-1:0.0: Audio interface 0 found (Vendor Class)
[  242.203136][ T9338] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  242.444756][   T29] em28xx 8-1:0.0: unknown em28xx chip ID (0)
[  242.469835][   T29] em28xx 8-1:0.0: Config register raw data: 0xf7
[  242.488657][   T29] em28xx 8-1:0.0: I2S Audio (3 sample rate(s))
[  242.506269][   T29] em28xx 8-1:0.0: No AC97 audio processor
[  242.964859][ T9361] xt_hashlimit: size too large, truncated to 1048576
[  244.262039][   T29] usb 8-1: USB disconnect, device number 5
[  244.744985][ T9389] loop9: detected capacity change from 0 to 64
[  245.123350][ T9395] loop7: detected capacity change from 0 to 512
[  245.142864][ T9395] EXT4-fs: Ignoring removed oldalloc option
[  245.211870][ T9389] syz.9.909: attempt to access beyond end of device
[  245.211870][ T9389] loop9: rw=8388608, sector=67, nr_sectors = 1 limit=64
[  245.227609][ T9395] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  245.321657][ T9395] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  245.339489][ T9389] Buffer I/O error on dev loop9, logical block 67, async page read
[  245.395246][ T9389] syz.9.909: attempt to access beyond end of device
[  245.395246][ T9389] loop9: rw=8388608, sector=68, nr_sectors = 1 limit=64
[  245.449460][ T9389] Buffer I/O error on dev loop9, logical block 68, async page read
[  245.487310][ T9389] syz.9.909: attempt to access beyond end of device
[  245.487310][ T9389] loop9: rw=8388608, sector=69, nr_sectors = 1 limit=64
[  245.515895][ T9389] Buffer I/O error on dev loop9, logical block 69, async page read
[  245.530324][ T9408] netlink: 2036 bytes leftover after parsing attributes in process `syz.4.913'.
[  245.574560][ T9389] syz.9.909: attempt to access beyond end of device
[  245.574560][ T9389] loop9: rw=8388608, sector=70, nr_sectors = 1 limit=64
[  245.612930][ T9408] netlink: 24 bytes leftover after parsing attributes in process `syz.4.913'.
[  245.645647][ T9389] Buffer I/O error on dev loop9, logical block 70, async page read
[  245.702642][ T9389] syz.9.909: attempt to access beyond end of device
[  245.702642][ T9389] loop9: rw=8388608, sector=71, nr_sectors = 1 limit=64
[  245.756608][ T9389] Buffer I/O error on dev loop9, logical block 71, async page read
[  245.780496][ T9389] syz.9.909: attempt to access beyond end of device
[  245.780496][ T9389] loop9: rw=8388608, sector=72, nr_sectors = 1 limit=64
[  245.840835][ T9389] Buffer I/O error on dev loop9, logical block 72, async page read
[  245.888150][ T9389] syz.9.909: attempt to access beyond end of device
[  245.888150][ T9389] loop9: rw=8388608, sector=73, nr_sectors = 1 limit=64
[  245.950932][ T9389] Buffer I/O error on dev loop9, logical block 73, async page read
[  245.999241][ T9411] fuse: fd is not a fuse device
[  246.459243][ T9418] netlink: 4 bytes leftover after parsing attributes in process `syz.8.918'.
[  246.520326][ T9418] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  246.667863][ T9418] batman_adv: batadv0: Removing interface: batadv_slave_1
[  247.901455][ T6647] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  248.014993][ T9445] loop8: detected capacity change from 0 to 512
[  248.098440][ T9445] EXT4-fs (loop8): 1 truncate cleaned up
[  248.159795][ T9445] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  248.692545][ T6864] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  249.053720][ T9423] loop9: detected capacity change from 0 to 40427
[  249.114567][ T9423] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12
[  249.174037][ T9423] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock
[  249.242786][ T9423] F2FS-fs (loop9): invalid crc value
[  249.404761][ T9474] netlink: 4 bytes leftover after parsing attributes in process `syz.6.930'.
[  249.543644][ T9477] netlink: 4 bytes leftover after parsing attributes in process `syz.6.930'.
[  249.933158][ T9423] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  251.032539][   T29] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  251.251731][   T29] usb 9-1: Using ep0 maxpacket: 32
[  251.273114][   T10] usb 5-1: new full-speed USB device number 5 using dummy_hcd
[  251.276005][   T29] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  251.344983][   T29] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  251.394552][   T29] usb 9-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  251.432791][   T29] usb 9-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  251.467622][   T10] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 241, changing to 4
[  251.470831][   T29] usb 9-1: Product: syz
[  251.525627][   T10] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 213, changing to 4
[  251.534432][   T29] usb 9-1: Manufacturer: syz
[  251.561669][   T10] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1056, setting to 1023
[  251.632421][   T10] usb 5-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40
[  251.668496][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  251.681643][   T29] hub 9-1:4.0: USB hub found
[  251.728929][   T10] usb 5-1: Product: syz
[  251.753013][   T10] usb 5-1: Manufacturer: syz
[  251.774345][   T10] usb 5-1: SerialNumber: syz
[  251.908250][   T29] hub 9-1:4.0: 2 ports detected
[  252.158693][   T10] snd-ua101 5-1:1.1: sample format descriptor not found
[  252.186780][   T10] snd-ua101 5-1:1.0: invalid num_altsetting
[  252.335749][   T10] usb 5-1: USB disconnect, device number 5
[  252.354384][   T29] hub 9-1:4.0: set hub depth failed
[  252.471660][   T29] usb 9-1: USB disconnect, device number 6
[  253.157624][ T9558] loop4: detected capacity change from 0 to 64
[  254.736066][ T9592] overlayfs: failed to clone lowerpath
[  254.999969][ T1310] ieee802154 phy0 wpan0: encryption failed: -22
[  255.008247][ T1310] ieee802154 phy1 wpan1: encryption failed: -22
[  255.728190][ T9607] loop9: detected capacity change from 0 to 512
[  255.780472][ T9607] EXT4-fs error (device loop9): ext4_orphan_get:1399: inode #15: comm syz.9.966: inode has both inline data and extents flags
[  255.811455][ T9607] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  255.812138][ T9607] EXT4-fs error (device loop9): ext4_orphan_get:1404: comm syz.9.966: couldn't read orphan inode 15 (err -117)
[  255.822673][    C0] EXT4-fs (loop9): error count since last fsck: 1
[  255.822700][    C0] EXT4-fs (loop9): initial error at time 1784632174: ext4_orphan_get:1399: inode 15
[  255.822740][    C0] EXT4-fs (loop9): last error at time 1784632174: ext4_orphan_get:1399: inode 15
[  255.905229][   T29] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[  255.986993][ T9607] loop9: lost filesystem error report for type 5 error -117
[  256.016158][ T9607] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  256.088846][   T29] usb 9-1: Using ep0 maxpacket: 32
[  256.113792][   T29] usb 9-1: config 0 has an invalid interface number: 89 but max is 0
[  256.159031][   T29] usb 9-1: config 0 has no interface number 0
[  256.199667][   T29] usb 9-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  256.255169][   T29] usb 9-1: config 0 interface 89 has no altsetting 0
[  256.284497][   T29] usb 9-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a
[  256.318504][   T29] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  256.334176][ T9607] Invalid argument reading file caps for ./file0
[  256.360905][   T29] usb 9-1: Product: syz
[  256.376056][   T29] usb 9-1: Manufacturer: syz
[  256.402793][   T29] usb 9-1: SerialNumber: syz
[  256.475977][   T29] usb 9-1: config 0 descriptor??
[  256.491735][ T9630] netlink: 24 bytes leftover after parsing attributes in process `syz.7.971'.
[  256.546137][   T29] em28xx 9-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[  256.584221][   T29] em28xx 9-1:0.89: Video interface 89 found:
[  256.616806][ T6989] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  257.153325][   T29] em28xx 9-1:0.89: unknown em28xx chip ID (0)
[  257.237163][ T9638] loop9: detected capacity change from 0 to 1024
[  258.094002][   T29] em28xx 9-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[  258.159694][   T29] em28xx 9-1:0.89: board has no eeprom
[  258.252488][   T29] em28xx 9-1:0.89: Identified as Terratec Grabby (card=67)
[  258.290467][   T29] em28xx 9-1:0.89: analog set to bulk mode.
[  258.336871][ T5785] em28xx 9-1:0.89: Registering V4L2 extension
[  258.397648][   T29] usb 9-1: USB disconnect, device number 7
[  258.451066][   T29] em28xx 9-1:0.89: Disconnecting em28xx
[  258.714725][ T5785] em28xx 9-1:0.89: Config register raw data: 0xffffffed
[  258.759410][ T5785] em28xx 9-1:0.89: AC97 chip type couldn't be determined
[  258.834166][ T5785] em28xx 9-1:0.89: No AC97 audio processor
[  259.069716][ T9678] netlink: 24 bytes leftover after parsing attributes in process `syz.7.987'.
[  259.111655][ T9678] tipc: Started in network mode
[  259.115440][ T5785] usb 9-1: Decoder not found
[  259.154433][ T5785] em28xx 9-1:0.89: failed to create media graph
[  259.190977][ T9678] tipc: Node identity 7fff, cluster identity 4711
[  259.190997][ T5785] em28xx 9-1:0.89: V4L2 device video103 deregistered
[  259.191021][ T9678] tipc: Node number set to 32767
[  259.690327][ T9683] loop4: detected capacity change from 0 to 40427
[  259.703119][ T9683] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64)
[  259.711530][ T9683] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  259.767586][ T9683] F2FS-fs (loop4): Image doesn't support compression
[  259.781998][ T9683] F2FS-fs (loop4): invalid crc value
[  259.821699][ T5785] em28xx 9-1:0.89: Registering snapshot button...
[  259.976529][ T9683] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  259.993294][ T9683] F2FS-fs (loop4): f2fs_disable_checkpoint starts, unusable: 0
[  260.000930][ T9683] F2FS-fs (loop4): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[  260.016413][ T9683] F2FS-fs (loop4): Start checkpoint disabled!
[  260.033511][ T9683] F2FS-fs (loop4): f2fs_disable_checkpoint finishes, err:0
[  260.050044][ T9683] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  260.060772][ T9683] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  260.079484][ T5785] input: em28xx snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.89/input/input11
[  260.168696][ T5785] em28xx 9-1:0.89: Remote control support is not available for this card.
[  260.232534][ T9683] F2FS-fs (loop4): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled
[  260.277150][   T29] em28xx 9-1:0.89: Closing input extension
[  260.329623][   T29] em28xx 9-1:0.89: Deregistering snapshot button
[  260.545825][ T9041] kworker/u8:15: attempt to access beyond end of device
[  260.545825][ T9041] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  260.659748][ T9041] CPU: 1 UID: 0 PID: 9041 Comm: kworker/u8:15 Not tainted syzkaller #0 PREEMPT(full) 
[  260.659784][ T9041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026
[  260.659801][ T9041] Workqueue: writeback wb_workfn (flush-7:4)
[  260.659846][ T9041] Call Trace:
[  260.659856][ T9041]  <TASK>
[  260.659866][ T9041]  dump_stack_lvl+0xe8/0x150
[  260.659907][ T9041]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  260.659946][ T9041]  f2fs_write_end_io+0x124b/0x1710
[  260.660008][ T9041]  __submit_merged_bio+0x258/0x6a0
[  260.660038][ T9041]  ? srso_alias_return_thunk+0x5/0xfbef5
[  260.660068][ T9041]  ? rcu_is_watching+0x15/0xb0
[  260.660113][ T9041]  __submit_merged_write_cond+0x3c9/0x4e0
[  260.660158][ T9041]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  260.660206][ T9041]  ? srso_alias_return_thunk+0x5/0xfbef5
[  260.660246][ T9041]  f2fs_write_data_pages+0x2a27/0x36f0
[  260.660323][ T9041]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  260.660441][ T9041]  ? srso_alias_return_thunk+0x5/0xfbef5
[  260.660471][ T9041]  ? __lock_acquire+0x683/0x2cf0
[  260.660533][ T9041]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  260.660569][ T9041]  do_writepages+0x338/0x560
[  260.660606][ T9041]  ? srso_alias_return_thunk+0x5/0xfbef5
[  260.660631][ T9041]  ? reacquire_held_locks+0x104/0x190
[  260.660667][ T9041]  ? writeback_sb_inodes+0x450/0x1b00
[  260.660701][ T9041]  __writeback_single_inode+0x12e/0xf90
[  260.660740][ T9041]  writeback_sb_inodes+0x9de/0x1b00
[  260.660797][ T9041]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  260.660873][ T9041]  ? srso_alias_return_thunk+0x5/0xfbef5
[  260.660899][ T9041]  ? rcu_is_watching+0x15/0xb0
[  260.660932][ T9041]  ? srso_alias_return_thunk+0x5/0xfbef5
[  260.660956][ T9041]  ? queue_io+0x2d3/0x470
[  260.660987][ T9041]  wb_writeback+0x41c/0xad0
[  260.661019][ T9041]  ? queue_io+0x201/0x470
[  260.661051][ T9041]  ? __pfx_wb_writeback+0x10/0x10
[  260.661077][ T9041]  ? do_raw_spin_lock+0x12b/0x2f0
[  260.661125][ T9041]  wb_workfn+0x431/0x10f0
[  260.661169][ T9041]  ? __pfx_wb_workfn+0x10/0x10
[  260.661191][ T9041]  ? srso_alias_return_thunk+0x5/0xfbef5
[  260.661229][ T9041]  ? srso_alias_return_thunk+0x5/0xfbef5
[  260.661254][ T9041]  ? do_raw_spin_lock+0x12b/0x2f0
[  260.661282][ T9041]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  260.661308][ T9041]  ? srso_alias_return_thunk+0x5/0xfbef5
[  260.661335][ T9041]  ? srso_alias_return_thunk+0x5/0xfbef5
[  260.661369][ T9041]  ? rcu_is_watching+0x15/0xb0
[  260.661402][ T9041]  ? srso_alias_return_thunk+0x5/0xfbef5
[  260.661429][ T9041]  ? process_scheduled_works+0xa20/0x14e0
[  260.661456][ T9041]  process_scheduled_works+0xa8e/0x14e0
[  260.661511][ T9041]  ? __pfx_process_scheduled_works+0x10/0x10
[  260.661543][ T9041]  ? srso_alias_return_thunk+0x5/0xfbef5
[  260.661568][ T9041]  ? assign_work+0x3cf/0x5d0
[  260.661598][ T9041]  worker_thread+0xa47/0xfb0
[  260.661649][ T9041]  kthread+0x388/0x470
[  260.661678][ T9041]  ? __pfx_worker_thread+0x10/0x10
[  260.661700][ T9041]  ? __pfx_kthread+0x10/0x10
[  260.661730][ T9041]  ret_from_fork+0x514/0xb70
[  260.661763][ T9041]  ? __pfx_ret_from_fork+0x10/0x10
[  260.661793][ T9041]  ? srso_alias_return_thunk+0x5/0xfbef5
[  260.661817][ T9041]  ? __switch_to+0xc89/0x1420
[  260.661854][ T9041]  ? __pfx_kthread+0x10/0x10
[  260.661885][ T9041]  ret_from_fork_asm+0x1a/0x30
[  260.661923][ T9041]  </TASK>
[  261.077568][ T9041] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  261.100937][ T9041] CPU: 1 UID: 0 PID: 9041 Comm: kworker/u8:15 Not tainted syzkaller #0 PREEMPT(full) 
[  261.100970][ T9041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026
[  261.100987][ T9041] Workqueue: writeback wb_workfn (flush-7:4)
[  261.101025][ T9041] Call Trace:
[  261.101035][ T9041]  <TASK>
[  261.101045][ T9041]  dump_stack_lvl+0xe8/0x150
[  261.101087][ T9041]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  261.101127][ T9041]  f2fs_write_end_io+0x124b/0x1710
[  261.101198][ T9041]  __submit_merged_bio+0x258/0x6a0
[  261.101229][ T9041]  ? srso_alias_return_thunk+0x5/0xfbef5
[  261.101260][ T9041]  ? rcu_is_watching+0x15/0xb0
[  261.101308][ T9041]  __submit_merged_write_cond+0x3c9/0x4e0
[  261.101352][ T9041]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  261.101408][ T9041]  ? srso_alias_return_thunk+0x5/0xfbef5
[  261.101449][ T9041]  f2fs_write_data_pages+0x2a27/0x36f0
[  261.101536][ T9041]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  261.101670][ T9041]  ? srso_alias_return_thunk+0x5/0xfbef5
[  261.101700][ T9041]  ? __lock_acquire+0x683/0x2cf0
[  261.101767][ T9041]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  261.101805][ T9041]  do_writepages+0x338/0x560
[  261.101851][ T9041]  ? srso_alias_return_thunk+0x5/0xfbef5
[  261.101881][ T9041]  ? reacquire_held_locks+0x104/0x190
[  261.101920][ T9041]  ? writeback_sb_inodes+0x450/0x1b00
[  261.101962][ T9041]  __writeback_single_inode+0x12e/0xf90
[  261.102009][ T9041]  writeback_sb_inodes+0x9de/0x1b00
[  261.102080][ T9041]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  261.102173][ T9041]  ? srso_alias_return_thunk+0x5/0xfbef5
[  261.102202][ T9041]  ? rcu_is_watching+0x15/0xb0
[  261.102241][ T9041]  ? srso_alias_return_thunk+0x5/0xfbef5
[  261.102271][ T9041]  ? queue_io+0x2d3/0x470
[  261.102309][ T9041]  wb_writeback+0x41c/0xad0
[  261.102346][ T9041]  ? queue_io+0x201/0x470
[  261.102393][ T9041]  ? __pfx_wb_writeback+0x10/0x10
[  261.102423][ T9041]  ? do_raw_spin_lock+0x12b/0x2f0
[  261.102476][ T9041]  wb_workfn+0x431/0x10f0
[  261.102530][ T9041]  ? __pfx_wb_workfn+0x10/0x10
[  261.102556][ T9041]  ? srso_alias_return_thunk+0x5/0xfbef5
[  261.102608][ T9041]  ? srso_alias_return_thunk+0x5/0xfbef5
[  261.102636][ T9041]  ? do_raw_spin_lock+0x12b/0x2f0
[  261.102669][ T9041]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  261.102702][ T9041]  ? srso_alias_return_thunk+0x5/0xfbef5
[  261.102735][ T9041]  ? srso_alias_return_thunk+0x5/0xfbef5
[  261.102776][ T9041]  ? rcu_is_watching+0x15/0xb0
[  261.102815][ T9041]  ? srso_alias_return_thunk+0x5/0xfbef5
[  261.102847][ T9041]  ? process_scheduled_works+0xa20/0x14e0
[  261.102877][ T9041]  process_scheduled_works+0xa8e/0x14e0
[  261.102948][ T9041]  ? __pfx_process_scheduled_works+0x10/0x10
[  261.102987][ T9041]  ? srso_alias_return_thunk+0x5/0xfbef5
[  261.103015][ T9041]  ? assign_work+0x3cf/0x5d0
[  261.103052][ T9041]  worker_thread+0xa47/0xfb0
[  261.103123][ T9041]  kthread+0x388/0x470
[  261.103160][ T9041]  ? __pfx_worker_thread+0x10/0x10
[  261.103187][ T9041]  ? __pfx_kthread+0x10/0x10
[  261.103226][ T9041]  ret_from_fork+0x514/0xb70
[  261.103268][ T9041]  ? __pfx_ret_from_fork+0x10/0x10
[  261.103305][ T9041]  ? srso_alias_return_thunk+0x5/0xfbef5
[  261.103333][ T9041]  ? __switch_to+0xc89/0x1420
[  261.103376][ T9041]  ? __pfx_kthread+0x10/0x10
[  261.103416][ T9041]  ret_from_fork_asm+0x1a/0x30
[  261.103465][ T9041]  </TASK>
[  261.479731][   T29] em28xx 9-1:0.89: Freeing device
[  261.584180][ T9041] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  261.841411][   T29] usb 9-1: new full-speed USB device number 8 using dummy_hcd
[  262.444971][   T29] usb 9-1: unable to get BOS descriptor or descriptor too short
[  262.493978][   T29] usb 9-1: unable to read config index 0 descriptor/start: -71
[  262.554999][   T29] usb 9-1: can't read configurations, error -71
[  262.769841][ T9729] syz_tun: entered allmulticast mode
[  262.838259][ T9727] syz_tun: left allmulticast mode
[  263.690855][ T5777] libceph: connect (1)[c::]:6789 error -97
[  263.750367][ T5777] libceph: mon0 (1)[c::]:6789 connect error
[  263.857481][ T9740] ceph: No mds server is up or the cluster is laggy
[  263.881957][ T5777] libceph: connect (1)[c::]:6789 error -97
[  263.895590][ T5777] libceph: mon0 (1)[c::]:6789 connect error
[  264.085595][ T9757] netlink: 'syz.6.1011': attribute type 13 has an invalid length.
[  264.185266][ T5777] libceph: connect (1)[c::]:6789 error -97
[  264.212066][ T9757] gretap0: refused to change device tx_queue_len
[  264.220360][ T5777] libceph: mon0 (1)[c::]:6789 connect error
[  264.229129][ T9763] loop9: detected capacity change from 0 to 128
[  264.279653][ T9757] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  264.314573][ T9763] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  264.782699][ T9040] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  265.144910][ T5757] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  265.342373][ T5757] usb 8-1: Using ep0 maxpacket: 16
[  265.366228][ T5757] usb 8-1: config 1 has an invalid interface number: 105 but max is 0
[  265.391361][ T5757] usb 8-1: config 1 has no interface number 0
[  265.398975][ T5757] usb 8-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  265.448881][ T5757] usb 8-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  265.499663][ T5757] usb 8-1: config 1 interface 105 has no altsetting 0
[  265.561337][ T5757] usb 8-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  265.563171][ T9786] binder: 9785:9786 ioctl c0306201 0 returned -14
[  265.616264][ T5757] usb 8-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  265.670691][ T5757] usb 8-1: Product: syz
[  265.708116][ T5757] usb 8-1: Manufacturer: syz
[  265.727029][ T5757] usb 8-1: SerialNumber: syz
[  265.786613][ T9771] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  265.811567][ T9771] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  266.345135][ T9771] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  266.392207][ T9771] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  266.790880][ T9817] loop4: detected capacity change from 0 to 512
[  266.852932][ T5757] aqc111 8-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32
[  266.885337][ T9822] loop9: detected capacity change from 0 to 8
[  266.945956][ T5757] aqc111 8-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32
[  267.032307][ T9817] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.1029: iget: bad i_size value: 38620345925642
[  267.084145][ T9817] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  267.089626][ T9817] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.1029: couldn't read orphan inode 15 (err -117)
[  267.098896][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  267.098922][    C1] EXT4-fs (loop4): initial error at time 1784632186: ext4_orphan_get:1399: inode 15
[  267.098962][    C1] EXT4-fs (loop4): last error at time 1784632186: ext4_orphan_get:1399: inode 15
[  267.210673][ T9817] loop4: lost filesystem error report for type 5 error -117
[  267.313867][ T9817] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  267.317205][ T5640] Bluetooth: hci5: command 0x0406 tx timeout
[  267.472821][ T5757] aqc111 8-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.7-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 3e:27:b5:7f:1b:b3
[  267.489762][ T5757] usb 8-1: USB disconnect, device number 6
[  267.526467][ T5757] aqc111 8-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.7-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter
[  267.750337][ T5757] aqc111 8-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[  267.819314][ T5757] aqc111 8-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[  267.850403][ T9843] fuse: fd is not a fuse device
[  267.865031][ T5757] aqc111 8-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19
[  268.037108][ T7140] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  268.555709][ T9854] 0x000000000007-0x000000020000 : ""
[  268.974199][ T9854] ftl_cs: FTL header corrupt!
[  270.912618][ T9853] fuse: fd is not a fuse device
[  272.586943][ T9869] overlayfs: failed to clone upperpath
[  272.991360][ T5640] Bluetooth: hci0: command 0x0406 tx timeout
[  274.939071][ T9878] sctp: sctp_transport_update_pmtu: Reported pmtu 128 too low, using default minimum of 512
[  276.502612][ T9923] loop9: detected capacity change from 0 to 128
[  276.804436][   T29] usb 9-1: new full-speed USB device number 10 using dummy_hcd
[  276.889375][ T9923] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  277.001646][ T9923] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  277.003477][   T29] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  277.094283][ T9923] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  277.113524][   T29] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  277.164716][   T29] usb 9-1: New USB device found, idVendor=0925, idProduct=8066, bcdDevice= 0.00
[  277.191929][   T29] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  277.205629][ T9923] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  277.225513][   T29] usb 9-1: config 0 descriptor??
[  277.387639][ T9923] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  277.754076][   T29] hid-generic 0003:0925:8066.0008: unbalanced collection at end of report description
[  277.789166][   T29] hid-generic 0003:0925:8066.0008: probe with driver hid-generic failed with error -22
[  277.883635][    C0] sctp: sctp_transport_update_pmtu: Reported pmtu 128 too low, using default minimum of 512
[  277.896410][    C0] sctp: sctp_transport_update_pmtu: Reported pmtu 128 too low, using default minimum of 512
[  277.909978][    C0] sctp: sctp_transport_update_pmtu: Reported pmtu 128 too low, using default minimum of 512
[  277.921895][    C0] sctp: sctp_transport_update_pmtu: Reported pmtu 128 too low, using default minimum of 512
[  277.933557][    C0] sctp: sctp_transport_update_pmtu: Reported pmtu 128 too low, using default minimum of 512
[  277.944840][    C0] sctp: sctp_transport_update_pmtu: Reported pmtu 128 too low, using default minimum of 512
[  277.956179][    C0] sctp: sctp_transport_update_pmtu: Reported pmtu 128 too low, using default minimum of 512
[  277.969942][    C0] sctp: sctp_transport_update_pmtu: Reported pmtu 128 too low, using default minimum of 512
[  277.981852][    C0] sctp: sctp_transport_update_pmtu: Reported pmtu 128 too low, using default minimum of 512
[  278.343469][   T10] usb 9-1: USB disconnect, device number 10
[  278.661636][ T9943] fuse: fd is not a fuse device
[  280.059752][ T9960] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1072'.
[  280.079740][ T9960] netlink: 'syz.6.1072': attribute type 5 has an invalid length.
[  280.132168][ T9965] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1072'.
[  280.181685][ T9965] netlink: 'syz.6.1072': attribute type 5 has an invalid length.
[  280.190014][ T9960] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1072'.
[  280.265375][ T9965] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1072'.
[  280.354275][ T9040] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  280.375742][ T9040] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  280.412924][ T9040] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  280.454894][ T9040] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  281.354434][ T9956] loop9: detected capacity change from 0 to 4096
[  281.405711][ T9956] ntfs3(loop9): Different NTFS sector size (2048) and media sector size (512).
[  281.424805][   T31] audit: type=1800 audit(1784632200.521:38): pid=9992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1083" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0
[  281.583530][ T9956] ntfs3(loop9): Failed to initialize $Extend/$ObjId.
[  282.640402][T10011] loop4: detected capacity change from 0 to 512
[  282.768503][   T31] audit: type=1326 audit(1784632201.861:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10013 comm="syz.6.1094" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29bb39de99 code=0x7ffc0000
[  282.845547][ T5757] IPVS: starting estimator thread 0...
[  282.893114][T10011] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #15: comm syz.4.1091: corrupted inode contents
[  282.968004][T10011] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  282.975066][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  282.978694][T10018] tipc: Started in network mode
[  282.987738][    C0] EXT4-fs (loop4): initial error at time 1784632202: ext4_do_update_inode:5742: inode 15
[  283.010361][    C0] EXT4-fs (loop4): last error at time 1784632202: ext4_do_update_inode:5742: inode 15
[  283.028428][T10011] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem
[  283.032292][T10021] IPVS: using max 25 ests per chain, 60000 per kthread
[  283.047590][   T31] audit: type=1326 audit(1784632201.911:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10013 comm="syz.6.1094" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f29bb39de99 code=0x7ffc0000
[  283.079922][T10018] tipc: Node identity 9650bd992a31, cluster identity 4711
[  283.080527][T10011] loop4: lost filesystem error report for type 5 error -117
[  283.119713][T10011] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #15: comm syz.4.1091: corrupted inode contents
[  283.126112][T10018] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  283.174278][T10020] +
: renamed from syzkaller0
[  283.176872][   T31] audit: type=1326 audit(1784632201.921:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10013 comm="syz.6.1094" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29bb39de99 code=0x7ffc0000
[  283.205152][   T31] audit: type=1326 audit(1784632201.951:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10013 comm="syz.6.1094" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f29bb39de99 code=0x7ffc0000
[  283.230321][   T31] audit: type=1326 audit(1784632201.951:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10013 comm="syz.6.1094" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29bb39de99 code=0x7ffc0000
[  283.243094][T10011] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  283.258362][   T31] audit: type=1326 audit(1784632201.951:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10013 comm="syz.6.1094" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29bb39de99 code=0x7ffc0000
[  283.325839][T10011] EXT4-fs error (device loop4): ext4_evict_inode:315: inode #15: comm syz.4.1091: mark_inode_dirty error
[  283.350296][T10020] tipc: Disabling bearer <eth:syzkaller0>
[  283.391119][   T31] audit: type=1326 audit(1784632201.951:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10013 comm="syz.6.1094" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f29bb39de99 code=0x7ffc0000
[  283.416165][T10011] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  283.437364][T10011] EXT4-fs (loop4): 1 orphan inode deleted
[  283.487319][T10011] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  283.516402][   T31] audit: type=1326 audit(1784632201.951:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10013 comm="syz.6.1094" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29bb39de99 code=0x7ffc0000
[  283.626368][   T31] audit: type=1326 audit(1784632201.951:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10013 comm="syz.6.1094" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29bb39de99 code=0x7ffc0000
[  284.065985][ T7140] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  284.548186][T10045] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1102'.
[  284.569840][T10045] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1102'.
[  286.398804][T10073] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  286.416108][T10073] block device autoloading is deprecated and will be removed.
[  286.842875][   T29] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  287.034910][   T29] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  287.058025][ T5750] libceph: connect (1)[c::]:6789 error -101
[  287.088418][ T5750] libceph: mon0 (1)[c::]:6789 connect error
[  287.097169][   T29] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  287.138407][T10087] ceph: No mds server is up or the cluster is laggy
[  287.146037][   T29] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  287.194978][   T29] usb 10-1: config 0 descriptor??
[  287.406622][ T5750] libceph: connect (1)[c::]:6789 error -101
[  287.438498][ T5750] libceph: mon0 (1)[c::]:6789 connect error
[  287.485518][   T29] usbhid 10-1:0.0: can't add hid device: -71
[  287.500726][   T29] usbhid 10-1:0.0: probe with driver usbhid failed with error -71
[  287.525765][   T29] usb 10-1: USB disconnect, device number 3
[  287.811608][ T5757] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  287.983227][ T5757] usb 8-1: Using ep0 maxpacket: 32
[  288.008590][ T5757] usb 8-1: config 0 has an invalid interface number: 12 but max is 0
[  288.021545][   T29] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  288.039034][ T5757] usb 8-1: config 0 has no interface number 0
[  288.055845][ T5757] usb 8-1: config 0 interface 12 has no altsetting 0
[  288.090576][ T5757] usb 8-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  288.106785][ T5757] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  288.119297][ T5757] usb 8-1: Product: syz
[  288.124889][ T5757] usb 8-1: Manufacturer: syz
[  288.130275][ T5757] usb 8-1: SerialNumber: syz
[  288.158007][ T5757] usb 8-1: config 0 descriptor??
[  288.195677][   T29] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  288.229373][   T29] usb 10-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40
[  288.255899][   T29] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  288.292988][   T29] usb 10-1: config 0 descriptor??
[  289.134085][   T29] aiptek 10-1:0.0: Aiptek using 400 ms programming speed
[  289.183479][   T29] input: Aiptek as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input12
[  289.616679][   T29] usb 10-1: USB disconnect, device number 4
[  289.616743][    C1] aiptek 10-1:0.0: aiptek_irq - usb_submit_urb failed with result -19
[  289.870191][ T5757] f81534 8-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  289.891528][ T5757] f81534 8-1:0.12: f81534_find_config_idx: read failed: -71
[  289.925346][ T5757] f81534 8-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  289.956604][ T5757] f81534 8-1:0.12: probe with driver f81534 failed with error -71
[  290.015128][ T5757] usb 8-1: USB disconnect, device number 7
[  290.146873][T10124] fuse: fd is not a fuse device
[  292.295575][T10150] bond2: entered promiscuous mode
[  293.301935][ T5785] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  293.351335][T10176] fuse: fd is not a fuse device
[  293.501308][ T5785] usb 5-1: Using ep0 maxpacket: 32
[  293.537189][ T5785] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  293.595386][ T5785] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  293.646667][ T5785] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  293.700599][ T5785] usb 5-1: Product: syz
[  293.740102][ T5785] usb 5-1: Manufacturer: syz
[  293.773348][ T5785] usb 5-1: SerialNumber: syz
[  293.886537][ T5785] usb 5-1: config 0 descriptor??
[  293.910404][T10173] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  294.635062][T10196] loop8: detected capacity change from 0 to 256
[  294.656959][ T5969] usb 5-1: USB disconnect, device number 6
[  294.689303][T10196] exfat: Deprecated parameter 'utf8'
[  294.719898][T10196] exfat: Deprecated parameter 'namecase'
[  294.750412][T10196] exfat: Deprecated parameter 'namecase'
[  294.867293][T10196] exFAT-fs (loop8): failed to load upcase table (idx : 0x0001fe89, chksum : 0x9420891b, utbl_chksum : 0xe619d30d)
[  295.107378][T10204] fuse: fd is not a fuse device
[  295.633323][T10217] loop4: detected capacity change from 0 to 256
[  295.799846][T10215] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  295.872721][T10222] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1163'.
[  295.907800][T10215] FAT-fs (loop4): Filesystem has been set read-only
[  295.977791][T10215] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  296.096688][T10215] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  296.159850][   T31] kauditd_printk_skb: 13 callbacks suppressed
[  296.159872][   T31] audit: type=1800 audit(1784632215.251:61): pid=10215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1162" name="file1" dev="loop4" ino=1048654 res=0 errno=0
[  298.766387][T10257] loop8: detected capacity change from 0 to 512
[  298.937498][T10257] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  298.991713][T10257] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  299.484366][T10257] loop8: detected capacity change from 512 to 64
[  299.530429][T10266] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6435: Out of memory
[  299.547107][T10272] netlink: 'syz.4.1176': attribute type 1 has an invalid length.
[  299.692339][T10266] EXT4-fs error (device loop8): ext4_dirty_inode:6639: inode #15: comm syz.8.1174: mark_inode_dirty error
[  299.743004][T10277] netlink: 'syz.6.1178': attribute type 7 has an invalid length.
[  299.753109][T10277] netlink: 'syz.6.1178': attribute type 8 has an invalid length.
[  299.778653][T10266] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6435: Out of memory
[  299.823774][T10266] EXT4-fs error (device loop8): __ext4_ext_dirty:207: inode #15: comm syz.8.1174: mark_inode_dirty error
[  299.894629][T10266] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6435: Out of memory
[  299.964384][T10272] 8021q: adding VLAN 0 to HW filter on device bond1
[  299.994861][T10266] EXT4-fs error (device loop8): ext4_alloc_file_blocks:4646: inode #15: comm syz.8.1174: mark_inode_dirty error
[  300.052657][ T6864] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6435: Out of memory
[  300.070920][ T6864] EXT4-fs error (device loop8): ext4_dirty_inode:6639: inode #2: comm syz-executor: mark_inode_dirty error
[  300.212528][T10273] bond1: (slave gretap1): Enslaving as a backup interface with an up link
[  300.289846][ T3348] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  300.453957][ T3348] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  300.697745][T10275] bond1 (unregistering): (slave gretap1): Removing an active aggregator
[  300.994335][T10275] bond1 (unregistering): (slave gretap1): Releasing backup interface
[  301.122864][T10275] bond1 (unregistering): Released all slaves
[  301.238393][   T31] audit: type=1800 audit(1784632220.331:62): pid=10294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1184" name="file0" dev="overlay" ino=620 res=0 errno=0
[  301.332784][T10283] syz_tun: entered allmulticast mode
[  301.341966][T10283] syz_tun: left allmulticast mode
[  301.468481][T10298] netlink: 'syz.2.1186': attribute type 1 has an invalid length.
[  301.895359][ T6864] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  301.961524][ T5785] IPVS: starting estimator thread 0...
[  302.048177][T10298] 8021q: adding VLAN 0 to HW filter on device bond1
[  302.134222][T10312] IPVS: using max 26 ests per chain, 62400 per kthread
[  302.298522][T10299] bond1: (slave gretap1): making interface the new active one
[  302.370203][T10299] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  302.570923][T10299] syz.2.1186 (10299) used greatest stack depth: 19296 bytes left
[  302.746996][ T9040] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  302.895268][ T9040] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  303.181837][ T9040] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  303.202516][T10331] overlayfs: failed to clone upperpath
[  303.453894][ T5640] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  303.478349][ T5640] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  303.488492][ T5640] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  303.504692][ T5640] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  303.515159][ T5640] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  303.780566][ T9040] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  303.899916][T10344] netlink: 'syz.2.1204': attribute type 1 has an invalid length.
[  304.196377][T10344] 8021q: adding VLAN 0 to HW filter on device bond2
[  304.507210][T10352] bond2: (slave gretap2): Enslaving as a backup interface with an up link
[  304.561653][ T3348] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  304.623636][T10353] bond2: (slave dummy0): Enslaving as a backup interface with an up link
[  304.752581][T10366] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1209'.
[  304.770703][   T12] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  305.631738][ T5629] Bluetooth: hci5: command tx timeout
[  305.756937][ T9040] bridge_slave_1: left allmulticast mode
[  305.795266][ T9040] bridge_slave_1: left promiscuous mode
[  305.811259][T10386] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1215'.
[  305.826673][ T9040] bridge0: port 2(bridge_slave_1) entered disabled state
[  305.940527][ T9040] bridge_slave_0: left allmulticast mode
[  305.980021][ T9040] bridge_slave_0: left promiscuous mode
[  306.015303][ T9040] bridge0: port 1(bridge_slave_0) entered disabled state
[  306.107153][T10398] loop7: detected capacity change from 0 to 128
[  306.256918][T10398] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  306.367439][T10398] ext4 filesystem being mounted at /144/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  306.639126][ T6647] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  307.393891][T10423] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1221'.
[  307.495319][ T9040] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  307.541784][ T9040] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  307.594840][ T9040] bond0 (unregistering): (slave team0): Releasing backup interface
[  307.642547][ T9040] bond0 (unregistering): Released all slaves
[  307.711288][ T5629] Bluetooth: hci5: command tx timeout
[  307.725288][ T9040] bond1 (unregistering): (slave wlan1): Releasing active interface
[  307.755314][ T9040] bond1 (unregistering): Released all slaves
[  307.785432][ T9040] bond2 (unregistering): Released all slaves
[  308.357169][T10432] netlink: 156 bytes leftover after parsing attributes in process `syz.7.1223'.
[  308.525527][ T5281] 8021q: adding VLAN 0 to HW filter on device eth1
[  308.551437][ T5969] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  308.752009][ T5969] usb 10-1: Using ep0 maxpacket: 32
[  308.809579][ T5969] usb 10-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  308.845996][ T5969] usb 10-1: config 0 interface 0 has no altsetting 0
[  308.868174][ T5969] usb 10-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
[  308.891477][ T5969] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  308.963337][ T5969] usb 10-1: config 0 descriptor??
[  309.766126][ T9040] hsr_slave_0: left promiscuous mode
[  309.791669][ T5629] Bluetooth: hci5: command tx timeout
[  309.804531][ T9040] hsr_slave_1: left promiscuous mode
[  309.831031][ T9040] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  309.846651][ T5969] corsair-cpro 0003:1B1C:0C10.0009: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.9-1/input0
[  309.848583][ T9040] batman_adv: batadv0: Removing interface: batadv_slave_0
[  310.000176][ T9040] veth1_macvtap: left promiscuous mode
[  310.036519][ T9040] veth0_macvtap: left promiscuous mode
[  310.049662][ T5969] corsair-cpro 0003:1B1C:0C10.0009: probe with driver corsair-cpro failed with error -5
[  310.061890][ T9040] veth1_vlan: left promiscuous mode
[  310.090792][ T9040] veth0_vlan: left promiscuous mode
[  310.344528][ T5786] usb 10-1: USB disconnect, device number 5
[  311.399972][T10472] loop9: detected capacity change from 0 to 1024
[  311.446672][T10472] EXT4-fs (loop9): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  311.472528][T10472] EXT4-fs (loop9): group descriptors corrupted!
[  311.594588][T10474] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1231'.
[  311.605867][T10474] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1231'.
[  311.750484][ T9040] team0 (unregistering): Port device team_slave_1 removed
[  311.802799][ T5757] usb 10-1: new full-speed USB device number 6 using dummy_hcd
[  311.884099][ T5629] Bluetooth: hci5: command tx timeout
[  311.920637][ T9040] team0 (unregistering): Port device team_slave_0 removed
[  312.007734][ T5757] usb 10-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 64
[  312.049842][ T5757] usb 10-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  312.070066][ T5757] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  312.119366][T10472] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  312.484246][T10436] mac80211_hwsim hwsim0 wlan0: entered promiscuous mode
[  312.514930][T10436] netlink: 'syz.4.1225': attribute type 1 has an invalid length.
[  312.544129][T10436] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1225'.
[  312.693959][ T5281] 8021q: adding VLAN 0 to HW filter on device eth2
[  313.489437][ T9040] IPVS: stop unused estimator thread 0...
[  313.654598][T10495] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1236'.
[  313.814227][T10502] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1236'.
[  314.098877][T10509] loop7: detected capacity change from 0 to 128
[  314.138254][T10509] EXT4-fs (loop7): Test dummy encryption mode enabled
[  314.221217][    T0] NOHZ tick-stop error: local softirq work is pending, handler #06!!!
[  314.232883][T10509] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  314.310904][T10509] ext4 filesystem being mounted at /153/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  314.331203][    T0] NOHZ tick-stop error: local softirq work is pending, handler #06!!!
[  314.342109][ T5757] aiptek 10-1:17.0: Aiptek using 400 ms programming speed
[  314.404129][ T5757] input: Aiptek as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:17.0/input/input13
[  314.613944][T10509] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni"
[  314.811229][    T0] NOHZ tick-stop error: local softirq work is pending, handler #204!!!
[  314.839388][T10509] fscrypt: AES-256-XTS using implementation "xts-aes-vaes-avx2"
[  314.871218][    T0] NOHZ tick-stop error: local softirq work is pending, handler #206!!!
[  314.898546][    C0] aiptek 10-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[  314.943875][ T5757] usb 10-1: USB disconnect, device number 6
[  315.342737][T10336] bridge0: port 1(bridge_slave_0) entered blocking state
[  315.378971][T10336] bridge0: port 1(bridge_slave_0) entered disabled state
[  315.428427][T10336] bridge_slave_0: entered allmulticast mode
[  315.479112][T10336] bridge_slave_0: entered promiscuous mode
[  315.533018][T10336] bridge0: port 2(bridge_slave_1) entered blocking state
[  315.542356][T10533] overlayfs: failed to clone upperpath
[  315.575806][T10336] bridge0: port 2(bridge_slave_1) entered disabled state
[  315.605978][T10336] bridge_slave_1: entered allmulticast mode
[  315.645241][T10336] bridge_slave_1: entered promiscuous mode
[  315.894910][T10336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  315.939684][T10336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  316.148293][T10336] team0: Port device team_slave_0 added
[  316.186990][T10336] team0: Port device team_slave_1 added
[  316.251500][T10336] batman_adv: batadv0: Adding interface: batadv_slave_0
[  316.258698][T10336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  316.335914][T10336] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  316.387268][T10336] batman_adv: batadv0: Adding interface: batadv_slave_1
[  316.417295][T10336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  316.445543][ T1310] ieee802154 phy0 wpan0: encryption failed: -22
[  316.447707][ T1310] ieee802154 phy1 wpan1: encryption failed: -22
[  316.497063][T10336] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  316.798858][T10551] fuse: fd is not a fuse device
[  316.818686][T10336] hsr_slave_0: entered promiscuous mode
[  316.851885][T10336] hsr_slave_1: entered promiscuous mode
[  316.879206][T10336] debugfs: 'hsr0' already exists in 'hsr'
[  316.914080][T10336] Cannot create hsr debugfs directory
[  316.939635][ T5281] 8021q: adding VLAN 0 to HW filter on device eth3
[  317.540547][T10558] netlink: 'syz.6.1253': attribute type 1 has an invalid length.
[  317.897577][ T6647] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  317.940671][T10558] 8021q: adding VLAN 0 to HW filter on device bond1
[  318.221757][T10561] bond1: (slave geneve2): making interface the new active one
[  318.318535][T10561] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  320.879298][ T5281] 8021q: adding VLAN 0 to HW filter on device eth4
[  321.004534][T10600] loop7: detected capacity change from 0 to 2048
[  321.178414][T10600] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  321.274802][T10600] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  322.743474][T10336] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  323.701732][T10336] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  323.888389][T10336] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  323.987851][T10336] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  324.035967][T10336] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  324.108354][T10653] netlink: 'syz.6.1276': attribute type 1 has an invalid length.
[  324.127387][T10336] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  324.439563][T10653] 8021q: adding VLAN 0 to HW filter on device bond2
[  324.479852][T10336] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  324.531918][T10336] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  325.098990][T10336] 8021q: adding VLAN 0 to HW filter on device bond0
[  325.148858][T10686] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1282'.
[  325.205434][T10336] 8021q: adding VLAN 0 to HW filter on device team0
[  325.210034][T10686] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1282'.
[  325.275747][ T9042] bridge0: port 1(bridge_slave_0) entered blocking state
[  325.283964][ T9042] bridge0: port 1(bridge_slave_0) entered forwarding state
[  325.390159][ T9042] bridge0: port 2(bridge_slave_1) entered blocking state
[  325.401330][ T9042] bridge0: port 2(bridge_slave_1) entered forwarding state
[  328.309032][T10336] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  328.321367][T10336] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  328.499295][T10696] bridge0: port 2(bridge_slave_1) entered disabled state
[  328.510001][T10696] bridge0: port 1(bridge_slave_0) entered disabled state
[  328.700204][T10697] bridge0: port 2(bridge_slave_1) entered blocking state
[  328.707488][T10697] bridge0: port 2(bridge_slave_1) entered forwarding state
[  328.715056][T10697] bridge0: port 1(bridge_slave_0) entered blocking state
[  328.722239][T10697] bridge0: port 1(bridge_slave_0) entered forwarding state
[  328.953009][T10697] bridge0: entered promiscuous mode
[  329.008702][T10697] bridge0: entered allmulticast mode
[  330.414547][T10725] fuse: fd is not a fuse device
[  332.503266][T10336] 8021q: adding VLAN 0 to HW filter on device batadv0
[  333.188983][T10790] veth1_macvtap: left promiscuous mode
[  333.367181][T10336] veth0_vlan: entered promiscuous mode
[  333.507139][T10336] veth1_vlan: entered promiscuous mode
[  333.851096][T10336] veth0_macvtap: entered promiscuous mode
[  333.921011][T10336] veth1_macvtap: entered promiscuous mode
[  334.140244][T10336] batman_adv: batadv0: Interface activated: batadv_slave_0
[  334.236049][T10336] batman_adv: batadv0: Interface activated: batadv_slave_1
[  334.378747][ T9040] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  334.427320][ T9040] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  334.484113][ T9040] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  334.633494][ T9040] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  335.053180][T10829] fuse: fd is not a fuse device
[  336.202930][ T9040] wlan1: Trigger new scan to find an IBSS to join
[  336.326390][ T9042] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  336.349821][ T9042] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  336.711670][ T9038] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  336.759403][ T9038] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  337.190029][T10873] fuse: fd is not a fuse device
[  338.033339][T10890] loop4: detected capacity change from 0 to 2048
[  338.105947][T10890] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  339.158281][ T7140] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  340.379099][T10955] binder: 10954:10955 ioctl c0306201 200000000180 returned -22
[  341.155998][   T13] wlan1: Trigger new scan to find an IBSS to join
[  341.169098][ T5919] wlan1: Trigger new scan to find an IBSS to join
[  341.265191][T10979] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1354'.
[  342.138078][ T9042] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  344.111419][ T5629] Bluetooth: hci2: command 0x0406 tx timeout
[  344.233185][T10988] loop7: detected capacity change from 0 to 40427
[  344.291488][ T5777] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  344.300790][T10988] F2FS-fs (loop7): Insane cp_payload (553648128 >= 504)
[  344.318743][T10988] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  344.363476][T10988] F2FS-fs (loop7): invalid crc value
[  344.404381][T10988] F2FS-fs (loop7): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root and reserve_node
[  344.489439][ T5777] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  344.548365][ T5777] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  344.601447][ T5777] usb 4-1: Product: syz
[  344.628086][ T5777] usb 4-1: Manufacturer: syz
[  344.657715][ T5777] usb 4-1: SerialNumber: syz
[  345.175626][ T5777] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  345.198501][T10988] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  345.219536][ T5777] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  345.271509][T10988] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  345.294537][T10988] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  345.663819][T11048] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1372'.
[  346.124097][ T9039] wlan1: Trigger new scan to find an IBSS to join
[  346.287612][T11055] netlink: 'syz.6.1374': attribute type 1 has an invalid length.
[  346.373235][ T5777] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE
[  346.486315][T11048] 8021q: adding VLAN 0 to HW filter on device bond3
[  346.526521][ T5777] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  346.550246][T11058] netlink: 'syz.6.1374': attribute type 10 has an invalid length.
[  346.709937][T11058] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1374'.
[  346.783431][ T5777] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  346.857850][ T5777] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32
[  346.881164][ T5777] usb 4-1: USB disconnect, device number 4
[  347.186628][T11063] loop9: detected capacity change from 0 to 40427
[  347.195709][T11063] F2FS-fs (loop9): Corrupted extension count (64 + 1 > 64)
[  347.203542][T11063] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock
[  347.214679][T11063] F2FS-fs (loop9): Image doesn't support compression
[  347.222500][T11063] F2FS-fs (loop9): invalid crc value
[  347.309319][T11063] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  347.324362][T11063] F2FS-fs (loop9): f2fs_disable_checkpoint starts, unusable: 0
[  347.332004][T11063] F2FS-fs (loop9): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[  347.343569][T11063] F2FS-fs (loop9): Start checkpoint disabled!
[  347.361913][T11063] F2FS-fs (loop9): f2fs_disable_checkpoint finishes, err:0
[  347.387693][T11063] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0
[  347.395222][T11063] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6
[  347.544322][T11063] F2FS-fs (loop9): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled
[  347.564348][T11055] 8021q: adding VLAN 0 to HW filter on device bond3
[  347.622284][ T9039] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  347.905905][ T3348] kworker/u8:9: attempt to access beyond end of device
[  347.905905][ T3348] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  347.923648][T11057] bond3: (slave dummy0): Enslaving as a backup interface with an up link
[  347.955809][T11058] dummy0: entered promiscuous mode
[  347.963919][ T9039] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  347.975940][ T3348] CPU: 0 UID: 0 PID: 3348 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT(full) 
[  347.975973][ T3348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026
[  347.975988][ T3348] Workqueue: writeback wb_workfn (flush-7:9)
[  347.976026][ T3348] Call Trace:
[  347.976035][ T3348]  <TASK>
[  347.976044][ T3348]  dump_stack_lvl+0xe8/0x150
[  347.976083][ T3348]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  347.976117][ T3348]  f2fs_write_end_io+0x124b/0x1710
[  347.976170][ T3348]  __submit_merged_bio+0x258/0x6a0
[  347.976193][ T3348]  ? srso_alias_return_thunk+0x5/0xfbef5
[  347.976219][ T3348]  ? rcu_is_watching+0x15/0xb0
[  347.976257][ T3348]  __submit_merged_write_cond+0x3c9/0x4e0
[  347.976290][ T3348]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  347.976313][ T3348]  ? irqentry_exit+0x218/0x8f0
[  347.976358][ T3348]  f2fs_write_data_pages+0x2a27/0x36f0
[  347.976424][ T3348]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  347.976521][ T3348]  ? irqentry_exit+0x218/0x8f0
[  347.976542][ T3348]  ? srso_alias_return_thunk+0x5/0xfbef5
[  347.976566][ T3348]  ? lockdep_hardirqs_on+0x7a/0x110
[  347.976587][ T3348]  ? irqentry_exit+0x218/0x8f0
[  347.976609][ T3348]  ? trace_irq_disable+0x3b/0x140
[  347.976652][ T3348]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  347.976687][ T3348]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  347.976717][ T3348]  do_writepages+0x338/0x560
[  347.976755][ T3348]  ? srso_alias_return_thunk+0x5/0xfbef5
[  347.976779][ T3348]  ? reacquire_held_locks+0x104/0x190
[  347.976814][ T3348]  ? writeback_sb_inodes+0x450/0x1b00
[  347.976854][ T3348]  __writeback_single_inode+0x12e/0xf90
[  347.976893][ T3348]  writeback_sb_inodes+0x9de/0x1b00
[  347.976950][ T3348]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  347.977023][ T3348]  ? srso_alias_return_thunk+0x5/0xfbef5
[  347.977049][ T3348]  ? rcu_is_watching+0x15/0xb0
[  347.977084][ T3348]  ? srso_alias_return_thunk+0x5/0xfbef5
[  347.977109][ T3348]  ? queue_io+0x2d3/0x470
[  347.977142][ T3348]  wb_writeback+0x41c/0xad0
[  347.977174][ T3348]  ? queue_io+0x201/0x470
[  347.977211][ T3348]  ? __pfx_wb_writeback+0x10/0x10
[  347.977240][ T3348]  ? do_raw_spin_lock+0x12b/0x2f0
[  347.977290][ T3348]  wb_workfn+0x431/0x10f0
[  347.977321][ T3348]  ? srso_alias_return_thunk+0x5/0xfbef5
[  347.977367][ T3348]  ? __pfx_wb_workfn+0x10/0x10
[  347.977392][ T3348]  ? srso_alias_return_thunk+0x5/0xfbef5
[  347.977432][ T3348]  ? srso_alias_return_thunk+0x5/0xfbef5
[  347.977465][ T3348]  ? irqentry_exit+0x218/0x8f0
[  347.977490][ T3348]  ? srso_alias_return_thunk+0x5/0xfbef5
[  347.977518][ T3348]  ? lockdep_hardirqs_on+0x7a/0x110
[  347.977542][ T3348]  ? srso_alias_return_thunk+0x5/0xfbef5
[  347.977571][ T3348]  ? irqentry_exit+0x218/0x8f0
[  347.977594][ T3348]  ? trace_irq_disable+0x3b/0x140
[  347.977630][ T3348]  ? srso_alias_return_thunk+0x5/0xfbef5
[  347.977663][ T3348]  ? srso_alias_return_thunk+0x5/0xfbef5
[  347.977702][ T3348]  ? rcu_is_watching+0x15/0xb0
[  347.977740][ T3348]  ? srso_alias_return_thunk+0x5/0xfbef5
[  347.977772][ T3348]  ? process_scheduled_works+0xa20/0x14e0
[  347.977802][ T3348]  process_scheduled_works+0xa8e/0x14e0
[  347.977873][ T3348]  ? __pfx_process_scheduled_works+0x10/0x10
[  347.977909][ T3348]  ? srso_alias_return_thunk+0x5/0xfbef5
[  347.977938][ T3348]  ? assign_work+0x3cf/0x5d0
[  347.977973][ T3348]  worker_thread+0xa47/0xfb0
[  347.978007][ T3348]  ? srso_alias_return_thunk+0x5/0xfbef5
[  347.978048][ T3348]  ? srso_alias_return_thunk+0x5/0xfbef5
[  347.978077][ T3348]  ? __kthread_parkme+0x71/0x1f0
[  347.978122][ T3348]  kthread+0x388/0x470
[  347.978159][ T3348]  ? __pfx_worker_thread+0x10/0x10
[  347.978187][ T3348]  ? __pfx_kthread+0x10/0x10
[  347.978226][ T3348]  ret_from_fork+0x514/0xb70
[  347.978268][ T3348]  ? __pfx_ret_from_fork+0x10/0x10
[  347.978304][ T3348]  ? srso_alias_return_thunk+0x5/0xfbef5
[  347.978333][ T3348]  ? __switch_to+0xc89/0x1420
[  347.978369][ T3348]  ? __pfx_kthread+0x10/0x10
[  347.978406][ T3348]  ret_from_fork_asm+0x1a/0x30
[  347.978452][ T3348]  </TASK>
[  348.362081][ T3348] F2FS-fs (loop9): Stopped filesystem due to reason: 3
[  348.529428][   T10] loop9: lost filesystem error report for type 5 error -108
[  348.644785][ T9039] bond3: (slave dummy0): link status up again after 0 ms
[  348.712493][ T9039] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  348.722634][ T9039] bond3: (slave dummy0): link status up again after 0 ms
[  348.768578][ T9040] bond3: (slave dummy0): link status up again after 0 ms
[  348.812538][   T38] bond3: (slave dummy0): link status up again after 0 ms
[  348.851305][   T38] bond3: (slave dummy0): link status up again after 0 ms
[  348.897374][   T38] bond3: (slave dummy0): link status up again after 0 ms
[  349.567832][T11058] bond3: (slave dummy0): Removing an active aggregator
[  349.575632][T11058] bond3: (slave dummy0): Releasing backup interface
[  349.883146][T11068] bridge0: port 3(vlan2) entered blocking state
[  349.932098][T11068] bridge0: port 3(vlan2) entered disabled state
[  349.956114][T11068] vlan2: entered allmulticast mode
[  349.983521][T11068] geneve0: entered allmulticast mode
[  350.031121][T11068] vlan2: entered promiscuous mode
[  350.088437][T11068] geneve0: entered promiscuous mode
[  350.583021][T11095] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1381'.
[  350.990063][T11103] loop3: detected capacity change from 0 to 8192
[  351.031925][T11103] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  352.175941][T11125] fuse: fd is not a fuse device
[  353.332213][T11147] loop3: detected capacity change from 0 to 512
[  353.381809][T11147] EXT4-fs: Ignoring removed i_version option
[  353.472251][T11147] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  354.156484][T11147] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters
[  354.181193][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  354.188633][    C0] EXT4-fs (loop3): initial error at time 1784632273: ext4_mb_generate_buddy:1317
[  354.199182][    C0] EXT4-fs (loop3): last error at time 1784632273: ext4_mb_generate_buddy:1317
[  354.244989][T11147] Quota error (device loop3): write_blk: dquota write failed
[  354.310964][T11147] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5
[  354.382135][T11147] Quota error (device loop3): write_blk: dquota write failed
[  354.433011][T11147] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota
[  354.478794][T11147] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.1394: Failed to acquire dquot type 1
[  354.518390][T11147] loop3: lost filesystem error report for type 5 error -28
[  354.519544][T11147] EXT4-fs (loop3): 1 truncate cleaned up
[  354.590481][T11147] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  354.875522][T11172] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1401'.
[  354.923013][T10336] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  354.970664][ T3348] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  354.995899][T11172] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1401'.
[  355.032378][ T3348] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  355.097807][ T3348] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  355.126321][ T3348] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  355.508243][T11178] netlink: 'syz.4.1403': attribute type 1 has an invalid length.
[  355.693520][T11182] loop9: detected capacity change from 0 to 2048
[  355.790239][T11178] bond1: entered promiscuous mode
[  355.807553][T11182] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  355.809567][T11178] bond1: entered allmulticast mode
[  355.884716][T11178] 8021q: adding VLAN 0 to HW filter on device bond1
[  355.974112][T11196] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  355.983519][T11196] IPv6: NLM_F_CREATE should be set when creating new route
[  356.127467][T11198] overlayfs: failed to clone upperpath
[  356.150017][T11200] mmap: syz.9.1404 (11200) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  356.655617][T11196] bridge0: port 2(bridge_slave_1) entered disabled state
[  356.663436][T11196] bridge0: port 1(bridge_slave_0) entered disabled state
[  357.497349][T11196] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  357.548423][T11196] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  358.103829][T11196] team0: left promiscuous mode
[  358.130257][T11196] team_slave_0: left promiscuous mode
[  358.149161][T11196] team_slave_1: left promiscuous mode
[  358.196093][ T5919] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  358.238630][ T5919] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  358.297955][ T5919] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  358.340079][ T5919] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  358.702954][   T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  358.872995][   T10] usb 4-1: Using ep0 maxpacket: 8
[  358.919856][   T10] usb 4-1: config 0 has an invalid interface number: 55 but max is 0
[  358.972441][   T10] usb 4-1: config 0 has no interface number 0
[  359.001644][   T10] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  359.091689][   T10] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  359.140057][   T10] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  359.157204][   T10] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  359.215686][   T10] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  359.261727][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  359.379470][   T10] usb 4-1: config 0 descriptor??
[  359.799016][T11283] loop4: detected capacity change from 0 to 40427
[  359.831565][T11283] F2FS-fs (loop4): invalid crc value
[  359.916425][T11283] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  359.938550][T11283] F2FS-fs (loop4): f2fs_disable_checkpoint starts, unusable: 0
[  359.948156][T11283] F2FS-fs (loop4): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[  359.961439][T11283] F2FS-fs (loop4): Start checkpoint disabled!
[  359.991788][T11283] F2FS-fs (loop4): f2fs_disable_checkpoint finishes, err:0
[  359.999623][T11283] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  360.038293][   T10] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  360.284319][   T10] usb 4-1: USB disconnect, device number 5
[  360.529829][   T10] ldusb 4-1:0.55: LD USB Device #0 now disconnected
[  361.393626][T11296] syz.4.1425: attempt to access beyond end of device
[  361.393626][T11296] loop4: rw=2049, sector=45096, nr_sectors = 1824 limit=40427
[  362.299316][ T5919] kworker/u8:10: attempt to access beyond end of device
[  362.299316][ T5919] loop4: rw=1, sector=45096, nr_sectors = 1824 limit=40427
[  362.367906][ T5919] kworker/u8:10: attempt to access beyond end of device
[  362.367906][ T5919] loop4: rw=2049, sector=46920, nr_sectors = 8 limit=40427
[  362.452289][ T5919] CPU: 0 UID: 0 PID: 5919 Comm: kworker/u8:10 Not tainted syzkaller #0 PREEMPT(full) 
[  362.452327][ T5919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026
[  362.452344][ T5919] Workqueue: writeback wb_workfn (flush-7:4)
[  362.452382][ T5919] Call Trace:
[  362.452392][ T5919]  <TASK>
[  362.452410][ T5919]  dump_stack_lvl+0xe8/0x150
[  362.452451][ T5919]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  362.452490][ T5919]  f2fs_write_end_io+0x124b/0x1710
[  362.452550][ T5919]  __submit_merged_bio+0x258/0x6a0
[  362.452580][ T5919]  ? srso_alias_return_thunk+0x5/0xfbef5
[  362.452610][ T5919]  ? rcu_is_watching+0x15/0xb0
[  362.452655][ T5919]  __submit_merged_write_cond+0x3c9/0x4e0
[  362.452698][ T5919]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  362.452744][ T5919]  ? srso_alias_return_thunk+0x5/0xfbef5
[  362.452783][ T5919]  f2fs_write_data_pages+0x2a27/0x36f0
[  362.452859][ T5919]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  362.452910][ T5919]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  362.452980][ T5919]  ? srso_alias_return_thunk+0x5/0xfbef5
[  362.453017][ T5919]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  362.453069][ T5919]  ? __lock_acquire+0x683/0x2cf0
[  362.453125][ T5919]  ? __lock_acquire+0x683/0x2cf0
[  362.453162][ T5919]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  362.453199][ T5919]  do_writepages+0x338/0x560
[  362.453242][ T5919]  ? srso_alias_return_thunk+0x5/0xfbef5
[  362.453271][ T5919]  ? reacquire_held_locks+0x104/0x190
[  362.453310][ T5919]  ? writeback_sb_inodes+0x450/0x1b00
[  362.453350][ T5919]  __writeback_single_inode+0x12e/0xf90
[  362.453395][ T5919]  writeback_sb_inodes+0x9de/0x1b00
[  362.453433][ T5919]  ? __lock_acquire+0x683/0x2cf0
[  362.453496][ T5919]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  362.453576][ T5919]  ? srso_alias_return_thunk+0x5/0xfbef5
[  362.453605][ T5919]  ? rcu_is_watching+0x15/0xb0
[  362.453642][ T5919]  ? srso_alias_return_thunk+0x5/0xfbef5
[  362.453671][ T5919]  ? queue_io+0x2d3/0x470
[  362.453706][ T5919]  wb_writeback+0x41c/0xad0
[  362.453742][ T5919]  ? queue_io+0x201/0x470
[  362.453781][ T5919]  ? __pfx_wb_writeback+0x10/0x10
[  362.453811][ T5919]  ? do_raw_spin_lock+0x12b/0x2f0
[  362.453858][ T5919]  wb_workfn+0x431/0x10f0
[  362.453906][ T5919]  ? __pfx_wb_workfn+0x10/0x10
[  362.453931][ T5919]  ? irqentry_exit+0x218/0x8f0
[  362.453957][ T5919]  ? lockdep_hardirqs_on+0x7a/0x110
[  362.453980][ T5919]  ? srso_alias_return_thunk+0x5/0xfbef5
[  362.454009][ T5919]  ? irqentry_exit+0x218/0x8f0
[  362.454031][ T5919]  ? trace_irq_disable+0x3b/0x140
[  362.454066][ T5919]  ? srso_alias_return_thunk+0x5/0xfbef5
[  362.454099][ T5919]  ? irqentry_exit+0x218/0x8f0
[  362.454122][ T5919]  ? srso_alias_return_thunk+0x5/0xfbef5
[  362.454150][ T5919]  ? lockdep_hardirqs_on+0x7a/0x110
[  362.454174][ T5919]  ? srso_alias_return_thunk+0x5/0xfbef5
[  362.454202][ T5919]  ? irqentry_exit+0x218/0x8f0
[  362.454224][ T5919]  ? trace_irq_disable+0x3b/0x140
[  362.454259][ T5919]  ? srso_alias_return_thunk+0x5/0xfbef5
[  362.454291][ T5919]  ? srso_alias_return_thunk+0x5/0xfbef5
[  362.454329][ T5919]  ? rcu_is_watching+0x15/0xb0
[  362.454368][ T5919]  ? srso_alias_return_thunk+0x5/0xfbef5
[  362.454400][ T5919]  ? process_scheduled_works+0xa20/0x14e0
[  362.454438][ T5919]  process_scheduled_works+0xa8e/0x14e0
[  362.454500][ T5919]  ? __pfx_process_scheduled_works+0x10/0x10
[  362.454537][ T5919]  ? srso_alias_return_thunk+0x5/0xfbef5
[  362.454565][ T5919]  ? assign_work+0x3cf/0x5d0
[  362.454600][ T5919]  worker_thread+0xa47/0xfb0
[  362.454632][ T5919]  ? srso_alias_return_thunk+0x5/0xfbef5
[  362.454673][ T5919]  ? srso_alias_return_thunk+0x5/0xfbef5
[  362.454701][ T5919]  ? __kthread_parkme+0x71/0x1f0
[  362.454746][ T5919]  kthread+0x388/0x470
[  362.454782][ T5919]  ? __pfx_worker_thread+0x10/0x10
[  362.454809][ T5919]  ? __pfx_kthread+0x10/0x10
[  362.454846][ T5919]  ret_from_fork+0x514/0xb70
[  362.454887][ T5919]  ? __pfx_ret_from_fork+0x10/0x10
[  362.454922][ T5919]  ? srso_alias_return_thunk+0x5/0xfbef5
[  362.454951][ T5919]  ? __switch_to+0xc89/0x1420
[  362.454986][ T5919]  ? __pfx_kthread+0x10/0x10
[  362.455020][ T5919]  ret_from_fork_asm+0x1a/0x30
[  362.455064][ T5919]  </TASK>
[  362.522530][ T5919] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  362.592040][T11300] loop9: detected capacity change from 0 to 32768
[  362.911718][T11300] btrfs: Deprecated parameter 'usebackuproot'
[  362.917823][T11300] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  362.936111][T11300] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.1429 (11300)
[  363.065462][T11300] BTRFS info (device loop9): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  363.122050][T11300] BTRFS info (device loop9): using crc32c checksum algorithm
[  363.129501][T11300] BTRFS warning (device loop9): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  365.266931][T11300] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR
[  365.269995][T11300] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[  365.668316][T11300] BTRFS error (device loop9): open_ctree failed: -12
[  365.940766][ T5777] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  366.376286][T11400] fuse: fd is not a fuse device
[  366.426848][T11402] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1456'.
[  366.632406][T11402] bond1: entered promiscuous mode
[  366.679720][T11402] 8021q: adding VLAN 0 to HW filter on device bond1
[  366.932331][ T5777] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  366.943201][ T5777] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  366.952267][ T5777] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  366.983719][ T5777] usb 4-1: config 0 descriptor??
[  366.990369][T11402] 8021q: adding VLAN 0 to HW filter on device bond1
[  366.997541][T11402] bond1: (slave sit2): The slave device specified does not support setting the MAC address
[  367.082454][T11402] bond1: (slave sit2): Error -95 calling set_mac_address
[  367.449573][   T31] audit: type=1326 audit(1784632286.521:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11375 comm="syz.3.1450" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d8eb9de99 code=0x7ffc0000
[  367.506104][ T5777] ath6kl: Failed to submit usb control message: -71
[  367.512795][ T5777] ath6kl: unable to send the bmi data to the device: -71
[  367.519832][ T5777] ath6kl: Unable to send get target info: -71
[  367.531896][ T5777] ath6kl: Failed to init ath6kl core: -71
[  367.538969][ T5777] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71
[  367.590263][   T31] audit: type=1326 audit(1784632286.521:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11375 comm="syz.3.1450" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d8eb9de99 code=0x7ffc0000
[  367.620289][ T5777] usb 4-1: USB disconnect, device number 6
[  367.649183][   T31] audit: type=1326 audit(1784632286.521:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11375 comm="syz.3.1450" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d8eb9de99 code=0x7ffc0000
[  367.696909][   T31] audit: type=1326 audit(1784632286.521:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11375 comm="syz.3.1450" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f0d8eb9de99 code=0x7ffc0000
[  367.721592][   T31] audit: type=1326 audit(1784632286.521:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11375 comm="syz.3.1450" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d8eb9de99 code=0x7ffc0000
[  367.748224][   T31] audit: type=1326 audit(1784632286.521:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11375 comm="syz.3.1450" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d8eb9de99 code=0x7ffc0000
[  367.812277][   T31] audit: type=1326 audit(1784632286.521:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11375 comm="syz.3.1450" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d8eb9de99 code=0x7ffc0000
[  367.861403][   T31] audit: type=1326 audit(1784632286.521:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11375 comm="syz.3.1450" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7f0d8eb9de99 code=0x7ffc0000
[  367.889608][   T31] audit: type=1326 audit(1784632286.521:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11375 comm="syz.3.1450" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d8eb9de99 code=0x7ffc0000
[  367.916081][   T31] audit: type=1326 audit(1784632286.521:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11375 comm="syz.3.1450" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d8eb9de99 code=0x7ffc0000
[  369.345706][T11475] loop4: detected capacity change from 0 to 2048
[  369.667249][T11475] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  370.687773][ T7140] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  371.301860][T11533] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1489'.
[  371.539711][T11540] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1489'.
[  371.679662][T11515] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  372.164944][T11556] binder: 11555:11556 unknown command 0
[  372.170800][T11556] binder: 11555:11556 ioctl c0306201 2000000001c0 returned -22
[  372.269783][ T5281] veth1_macvtap: entered promiscuous mode
[  372.377973][T11552] loop9: detected capacity change from 0 to 2048
[  372.580827][T11552] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  372.608007][T11564] P
[  373.132334][T11591] xt_hashlimit: size too large, truncated to 1048576
[  373.318804][T11592] loop9: detected capacity change from 0 to 4096
[  373.416259][T11592] ntfs3(loop9): Mark volume as dirty due to NTFS errors
[  373.556931][T11592] ntfs3(loop9): Failed to load $Extend (-22).
[  373.580631][T11592] ntfs3(loop9): Failed to initialize $Extend.
[  374.096325][T11604] batman_adv: batadv0: Removing interface: batadv_slave_0
[  374.301959][T11609] erspan0: entered promiscuous mode
[  374.307376][T11609] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1508'.
[  374.555726][T11628] loop9: detected capacity change from 0 to 1024
[  374.626913][T11628] EXT4-fs (loop9): stripe (31) is not aligned with cluster size (16), stripe is disabled
[  374.672878][ T3348] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  374.746163][T11628] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  374.798510][T11628] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  376.810451][T11681] fuse: fd is not a fuse device
[  377.326348][ T5640] Bluetooth: hci2: command 0x0406 tx timeout
[  377.956185][ T5757] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  377.974193][T11704] loop7: detected capacity change from 0 to 256
[  377.980976][ T1310] ieee802154 phy0 wpan0: encryption failed: -22
[  377.987281][ T1310] ieee802154 phy1 wpan1: encryption failed: -22
[  378.012794][T11704] exfat: Deprecated parameter 'utf8'
[  378.018209][T11704] exfat: Deprecated parameter 'namecase'
[  378.836034][T11683] loop4: detected capacity change from 0 to 32768
[  378.931880][T11714] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000
[  378.985109][T11704] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d)
[  379.225409][ T5757] usb 4-1: Using ep0 maxpacket: 8
[  379.438712][    T9] IPVS: starting estimator thread 0...
[  379.460788][ T5640] Bluetooth: hci2: command 0x0406 tx timeout
[  379.708058][T11730] IPVS: using max 27 ests per chain, 64800 per kthread
[  379.863289][ T5757] usb 4-1: unable to get BOS descriptor or descriptor too short
[  380.186828][ T5757] usb 4-1: config 4 has an invalid interface number: 147 but max is 0
[  380.195045][ T5757] usb 4-1: config 4 contains an unexpected descriptor of type 0x2, skipping
[  380.203759][ T5757] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  380.213827][ T5757] usb 4-1: config 4 has no interface number 0
[  380.297965][T11749] loop4: detected capacity change from 0 to 128
[  380.345570][T11749] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 4)
[  380.520279][ T3348] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 4)
[  380.529899][ T3348] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  380.647191][T11749] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 4)
[  380.682026][T11757] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1552'.
[  380.699056][T11758] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1553'.
[  380.811976][T11757] 8021q: adding VLAN 0 to HW filter on device bond4
[  380.916203][ T5757] usb 4-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e
[  380.925489][ T5757] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  380.933500][ T5757] usb 4-1: Product: syz
[  380.993069][ T5757] usb 4-1: can't set config #4, error -71
[  381.000916][ T5757] usb 4-1: USB disconnect, device number 7
[  381.294529][T11778] fuse: fd is not a fuse device
[  381.475518][ T5757] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  381.945002][ T5757] usb 4-1: Using ep0 maxpacket: 8
[  382.216470][T11789] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1564'.
[  382.285508][ T3348] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  382.285594][T11789] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1564'.
[  382.328538][ T3348] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  382.417193][ T5757] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[  382.425492][ T5757] usb 4-1: config 179 has no interface number 0
[  382.452731][ T3348] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  382.452808][ T5757] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  382.494542][ T3348] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  382.506085][ T5757] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  382.517503][ T5757] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9
[  382.528816][ T5757] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024
[  382.540200][ T5757] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  382.618134][T11792] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1566'.
[  382.635547][ T5757] usb 4-1: config 179 interface 65 has no altsetting 0
[  382.642457][ T5757] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  382.692859][T11796] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1567'.
[  382.769224][ T5757] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  382.930783][ T5757] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input14
[  383.063436][ T4971] input input14: unable to receive magic message: -110
[  383.239289][T11808] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  383.462287][ T4971] input input14: unable to receive magic message: -110
[  383.635310][ T4971] input input14: unable to receive magic message: -110
[  383.942529][ T4971] input input14: unable to receive magic message: -32
[  383.982147][T11838] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1579'.
[  383.991472][T11838] 8021q: VLANs not supported on ip6gre0
[  384.740501][   T29] usb 4-1: USB disconnect, device number 8
[  384.744602][    C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  384.765167][T11843] netlink: 'syz.7.1581': attribute type 1 has an invalid length.
[  384.942341][T11851] Bluetooth: MGMT ver 1.23
[  384.949334][T11851] Bluetooth: hci0: invalid length 0, exp 2 for type 7
[  385.074441][T11843] 8021q: adding VLAN 0 to HW filter on device bond1
[  385.098567][T11853] overlayfs: failed to clone upperpath
[  385.212126][T11854] 8021q: adding VLAN 0 to HW filter on device bond1
[  385.298976][T11854] bond1: (slave vti0): The slave device specified does not support setting the MAC address
[  385.372838][T11854] bond1: (slave vti0): Error -95 calling set_mac_address
[  385.523116][ T5786] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[  385.654377][T11860] gretap1: entered promiscuous mode
[  385.665898][T11860] bond1: (slave gretap1): making interface the new active one
[  385.674153][T11860] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  385.711386][ T5786] usb 10-1: Using ep0 maxpacket: 32
[  385.719193][ T5786] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  385.741929][T11859] loop3: detected capacity change from 0 to 32768
[  385.754830][ T5786] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  385.788539][ T5786] usb 10-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  385.834605][ T5786] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  385.879293][ T5786] usb 10-1: config 0 descriptor??
[  385.932354][T11859] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  386.269282][T10336] ocfs2: Unmounting device (7,3) on (node local)
[  386.519002][ T5786] ft260 0003:0403:6030.000A: unknown main item tag 0x0
[  386.545738][ T5786] ft260 0003:0403:6030.000A: unknown main item tag 0x0
[  386.592752][ T5786] ft260 0003:0403:6030.000A: chip code: 0000 0000
[  386.610279][ T5785] libceph: connect (1)[c::]:6789 error -97
[  386.616775][ T5785] libceph: mon0 (1)[c::]:6789 connect error
[  386.709908][T11890] loop7: detected capacity change from 0 to 2048
[  386.780985][T11892] ceph: No mds server is up or the cluster is laggy
[  386.807665][T11890]  loop7: p1 p2 p3
[  386.807665][T11890]  p1: <netbsd: p5 >
[  386.814648][ T5786] ft260 0003:0403:6030.000A: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.9-1/input0
[  386.838763][T11890] loop7: p1 size 16779263 extends beyond EOD, truncated
[  386.892532][T11890] loop7: p2 size 458752 extends beyond EOD, truncated
[  386.917855][T11890] loop7: p3 start 3036741376 is beyond EOD, truncated
[  387.029790][ T5786] ft260 0003:0403:6030.000A: failed to retrieve status: -32, no wakeup
[  387.088790][ T5786] ft260 0003:0403:6030.000A: failed to retrieve status: -32
[  388.351206][ T5786] ft260 0003:0403:6030.000A: failed to reset I2C controller: -71
[  388.940913][T11888] loop3: detected capacity change from 0 to 32768
[  388.972720][ T5750] usb 10-1: reset high-speed USB device number 7 using dummy_hcd
[  389.012617][ T5750] usb 10-1: device reset changed ep0 maxpacket size!
[  389.020060][T11888] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  389.102574][ T5786] usb 10-1: USB disconnect, device number 7
[  389.124936][T11888] XFS (loop3): Ending clean mount
[  389.265609][T11888] XFS (loop3): User initiated shutdown received.
[  389.273447][T11888] XFS (loop3): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x105/0x150 (fs/xfs/xfs_fsops.c:458).  Shutting down filesystem.
[  389.288295][T11888] XFS (loop3): Please unmount the filesystem and rectify the problem(s)
[  389.454370][T10336] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  389.611510][ T5786] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[  389.792054][ T5786] usb 10-1: Using ep0 maxpacket: 16
[  389.843684][ T5786] usb 10-1: config 0 has an invalid interface number: 105 but max is 0
[  389.906001][ T5786] usb 10-1: config 0 has an invalid descriptor of length 92, skipping remainder of the config
[  389.958905][ T5786] usb 10-1: config 0 has no interface number 0
[  389.986315][ T5786] usb 10-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  390.061919][ T5786] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  390.124869][ T5786] usb 10-1: Product: syz
[  390.146585][ T5786] usb 10-1: Manufacturer: syz
[  390.208201][ T5786] usb 10-1: SerialNumber: syz
[  390.299462][ T5786] usb 10-1: config 0 descriptor??
[  390.365071][ T5786] uvcvideo 10-1:0.105: Found UVC 0.00 device syz (046d:08f3)
[  390.397240][ T5786] uvcvideo 10-1:0.105: No valid video chain found.
[  390.642652][ T5757] usb 10-1: USB disconnect, device number 8
[  392.058750][T11985] netlink: 1320 bytes leftover after parsing attributes in process `syz.6.1617'.
[  392.334045][T11996] loop7: detected capacity change from 0 to 512
[  392.463893][T11996] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  392.950965][ T6647] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  393.141561][ T5750] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  393.344824][ T5750] usb 4-1: Using ep0 maxpacket: 16
[  393.365219][ T5750] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  393.409621][ T5750] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  393.423826][ T5750] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  393.441362][ T5750] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  393.473980][ T5750] usb 4-1: Product: syz
[  393.490643][ T5750] usb 4-1: Manufacturer: syz
[  393.505488][ T5750] usb 4-1: SerialNumber: syz
[  393.591611][ T5750] usb 4-1: config 0 descriptor??
[  393.634760][ T5750] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  393.683599][ T5750] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class)
[  394.488616][ T5750] em28xx 4-1:0.0: unknown em28xx chip ID (0)
[  394.505015][ T5750] em28xx 4-1:0.0: Config register raw data: 0xfffffffb
[  394.937304][   T31] kauditd_printk_skb: 23 callbacks suppressed
[  394.937349][   T31] audit: type=1326 audit(1784632314.031:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12076 comm="syz.9.1642" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b29d9de99 code=0x7fc00000
[  395.264027][   T31] audit: type=1326 audit(1784632314.101:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12076 comm="syz.9.1642" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f4b29d9de99 code=0x7fc00000
[  395.334013][ T5750] em28xx 4-1:0.0: Unknown AC97 audio processor detected!
[  395.340923][   T31] audit: type=1326 audit(1784632314.271:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12076 comm="syz.9.1642" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4b29d97c17 code=0x7fc00000
[  395.365700][   T31] audit: type=1326 audit(1784632314.271:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12076 comm="syz.9.1642" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4b29d3f219 code=0x7fc00000
[  395.390240][   T31] audit: type=1326 audit(1784632314.271:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12076 comm="syz.9.1642" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f4b29d3f2dd code=0x7fc00000
[  395.562304][ T5750] em28xx 4-1:0.0: couldn't setup AC97 register 2
[  395.577434][ T5750] em28xx 4-1:0.0: couldn't setup AC97 register 4
[  395.599057][ T5750] em28xx 4-1:0.0: couldn't setup AC97 register 6
[  395.624366][ T5750] em28xx 4-1:0.0: couldn't setup AC97 register 54
[  395.651344][ T5750] em28xx 4-1:0.0: couldn't setup AC97 register 56
[  395.671427][   T31] audit: type=1326 audit(1784632314.331:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12076 comm="syz.9.1642" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f4b29d9de99 code=0x7fc00000
[  395.729901][ T5750] usb 4-1: USB disconnect, device number 9
[  503.661101][    C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  503.668104][    C1] rcu: 	0-...!: (1 GPs behind) idle=781c/1/0x4000000000000000 softirq=61879/61895 fqs=0
[  503.680489][    C1] rcu: 	(detected by 1, t=10503 jiffies, g=62273, q=496 ncpus=2)
[  503.688225][    C1] Sending NMI from CPU 1 to CPUs 0:
[  503.688260][    C0] NMI backtrace for cpu 0
[  503.688277][    C0] CPU: 0 UID: 0 PID: 12160 Comm: syz.9.1656 Not tainted syzkaller #0 PREEMPT(full) 
[  503.688303][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026
[  503.688316][    C0] RIP: 0010:memset+0xf/0x30
[  503.688346][    C0] Code: 44 88 1f e9 8e 54 40 f5 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 49 89 f9 40 88 f0 48 89 d1 <f3> aa 4c 89 c8 e9 62 54 40 f5 90 90 90 90 90 90 90 90 90 90 90 90
[  503.688365][    C0] RSP: 0018:ffffc90000007d18 EFLAGS: 00000002
[  503.688386][    C0] RAX: 6200ebed4f394a00 RBX: ffff888028b89300 RCX: 0000000000000010
[  503.688402][    C0] RDX: 0000000000000010 RSI: 0000000000000000 RDI: ffffc90000007d38
[  503.688418][    C0] RBP: 0000000000000000 R08: ffffc90000007d47 R09: ffffc90000007d38
[  503.688434][    C0] R10: dffffc0000000000 R11: fffff52000000fa9 R12: 0000000000000001
[  503.688450][    C0] R13: dffffc0000000000 R14: ffffffff8bef7f00 R15: 0000000000000000
[  503.688468][    C0] FS:  00007f4b2abb56c0(0000) GS:ffff888124f54000(0000) knlGS:0000000000000000
[  503.688488][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  503.688504][    C0] CR2: 00007f4b2abb4ff8 CR3: 000000002d08d000 CR4: 0000000000350ef0
[  503.688522][    C0] Call Trace:
[  503.688533][    C0]  <IRQ>
[  503.688540][    C0]  debug_object_activate+0x38/0x420
[  503.688579][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  503.688611][    C0]  enqueue_hrtimer+0xa9/0x2c0
[  503.688642][    C0]  __hrtimer_run_queues+0x4ce/0xa10
[  503.688679][    C0]  hrtimer_interrupt+0x448/0x910
[  503.688721][    C0]  __sysvec_apic_timer_interrupt+0x102/0x430
[  503.688748][    C0]  sysvec_apic_timer_interrupt+0xa1/0xc0
[  503.688785][    C0]  </IRQ>
[  503.688792][    C0]  <TASK>
[  503.688801][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  503.688826][    C0] RIP: 0010:scm_recv_unix+0x2b3/0x360
[  503.688856][    C0] Code: 74 08 4c 89 ef e8 6d ad 95 f8 49 8b 7d 00 e8 c4 17 f1 f7 41 80 3c 1f 00 74 08 4c 89 ef e8 45 ae 95 f8 49 c7 45 00 00 00 00 00 <48> c7 44 24 20 0e 36 e0 45 49 c7 04 1e 00 00 00 00 41 c7 44 1e 08
[  503.688874][    C0] RSP: 0018:ffffc90002ebf640 EFLAGS: 00000246
[  503.688894][    C0] RAX: ffffffff899e5501 RBX: dffffc0000000000 RCX: 0000000000080000
[  503.688910][    C0] RDX: ffffc9000f80d000 RSI: 000000000007ffff RDI: 0000000000080000
[  503.688926][    C0] RBP: ffffc90002ebf710 R08: ffffc90002ebf7bf R09: ffffc90002ebf7a0
[  503.688947][    C0] R10: dffffc0000000000 R11: fffff520005d7ef8 R12: 1ffff1100eee53a3
[  503.688963][    C0] R13: ffffc90002ebf7a0 R14: 1ffff920005d7ecc R15: ffff888077729d18
[  503.688986][    C0]  ? scm_recv_unix+0x101/0x360
[  503.689022][    C0]  ? __pfx_scm_recv_unix+0x10/0x10
[  503.689056][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  503.689082][    C0]  ? pid_vnr+0xfd/0x1e0
[  503.689115][    C0]  __unix_dgram_recvmsg+0x9d6/0xd70
[  503.689157][    C0]  ? __pfx___unix_dgram_recvmsg+0x10/0x10
[  503.689190][    C0]  ? irqentry_exit+0x218/0x8f0
[  503.689219][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  503.689244][    C0]  ? __lock_acquire+0x683/0x2cf0
[  503.689278][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  503.689304][    C0]  ? lockdep_hardirqs_on+0x7a/0x110
[  503.689325][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  503.689351][    C0]  ? unix_dgram_recvmsg+0xae/0xd0
[  503.689375][    C0]  ? __pfx_unix_dgram_recvmsg+0x10/0x10
[  503.689401][    C0]  sock_recvmsg_nosec+0x130/0x170
[  503.689434][    C0]  ____sys_recvmsg+0x3e3/0x4a0
[  503.689465][    C0]  ? __pfx_____sys_recvmsg+0x10/0x10
[  503.689499][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  503.689525][    C0]  ? import_iovec+0x73/0xa0
[  503.689562][    C0]  ___sys_recvmsg+0x213/0x5a0
[  503.689590][    C0]  ? __pfx____sys_recvmsg+0x10/0x10
[  503.689616][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  503.689642][    C0]  ? lockdep_hardirqs_on+0x7a/0x110
[  503.689663][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  503.689690][    C0]  ? irqentry_exit+0x218/0x8f0
[  503.689725][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  503.689757][    C0]  do_recvmmsg+0x31a/0x7f0
[  503.689787][    C0]  ? __pfx_do_recvmmsg+0x10/0x10
[  503.689810][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  503.689837][    C0]  ? hook_file_ioctl+0x1f0/0x5f0
[  503.689879][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  503.689905][    C0]  ? do_raw_spin_lock+0x12b/0x2f0
[  503.689938][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  503.689971][    C0]  __x64_sys_recvmmsg+0x198/0x250
[  503.689998][    C0]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  503.690029][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  503.690053][    C0]  do_syscall_64+0x174/0x580
[  503.690075][    C0]  ? trace_irq_disable+0x3b/0x140
[  503.690108][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  503.690131][    C0] RIP: 0033:0x7f4b29d9de99
[  503.690152][    C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  503.690170][    C0] RSP: 002b:00007f4b2abb5028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  503.690191][    C0] RAX: ffffffffffffffda RBX: 00007f4b2a026180 RCX: 00007f4b29d9de99
[  503.690208][    C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003
[  503.690223][    C0] RBP: 00007f4b29e33eaf R08: 0000000000000000 R09: 0000000000000000
[  503.690237][    C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000
[  503.690250][    C0] R13: 00007f4b2a026218 R14: 00007f4b2a026180 R15: 00007ffeaf3fe2a8
[  503.690279][    C0]  </TASK>
[  503.691250][    C1] rcu: rcu_preempt kthread starved for 10503 jiffies! g62273 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
[  504.227405][    C1] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  504.237375][    C1] rcu: RCU grace-period kthread stack dump:
[  504.243257][    C1] task:rcu_preempt     state:R  running task     stack:27496 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00080000
[  504.256774][    C1] Call Trace:
[  504.260048][    C1]  <TASK>
[  504.262980][    C1]  __schedule+0x17d9/0x56c0
[  504.267502][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  504.273146][    C1]  ? __lock_acquire+0x683/0x2cf0
[  504.278102][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  504.283750][    C1]  ? __pfx___schedule+0x10/0x10
[  504.288630][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  504.294272][    C1]  ? schedule+0x90/0x2b0
[  504.298543][    C1]  schedule+0x164/0x2b0
[  504.302715][    C1]  schedule_timeout+0x152/0x2c0
[  504.307572][    C1]  ? __pfx_schedule_timeout+0x10/0x10
[  504.312953][    C1]  ? __pfx_process_timeout+0x10/0x10
[  504.318246][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  504.323888][    C1]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  504.329706][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  504.335343][    C1]  ? prepare_to_swait_event+0x322/0x350
[  504.340894][    C1]  rcu_gp_fqs_loop+0x30c/0x11f0
[  504.345755][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  504.351388][    C1]  ? lockdep_hardirqs_on+0x7a/0x110
[  504.356584][    C1]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  504.362396][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  504.368034][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  504.373679][    C1]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[  504.378973][    C1]  ? _raw_spin_unlock_irq+0x2e/0x50
[  504.384190][    C1]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  504.390011][    C1]  rcu_gp_kthread+0x9e/0x2b0
[  504.394611][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  504.399818][    C1]  ? __kthread_parkme+0x71/0x1f0
[  504.404760][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  504.410423][    C1]  ? __kthread_parkme+0x196/0x1f0
[  504.415461][    C1]  kthread+0x388/0x470
[  504.419546][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  504.424752][    C1]  ? __pfx_kthread+0x10/0x10
[  504.429351][    C1]  ret_from_fork+0x514/0xb70
[  504.433960][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  504.439078][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  504.444716][    C1]  ? __switch_to+0xc89/0x1420
[  504.449399][    C1]  ? __pfx_kthread+0x10/0x10
[  504.453999][    C1]  ret_from_fork_asm+0x1a/0x30
[  504.458779][    C1]  </TASK>
[  504.461789][    C1] rcu: Stack dump where RCU GP kthread last ran:
[  504.468102][    C1] CPU: 1 UID: 0 PID: 12140 Comm: syz.7.1659 Not tainted syzkaller #0 PREEMPT(full) 
[  504.477469][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026
[  504.487518][    C1] RIP: 0010:smp_call_function_many_cond+0x10b5/0x14b0
[  504.494346][    C1] Code: 1e 89 de 83 e6 01 31 ff e8 d8 22 0c 00 83 e3 01 48 bb 00 00 00 00 00 fc ff df 75 07 e8 84 1e 0c 00 eb 37 f3 90 41 0f b6 04 1c <84> c0 75 10 41 f7 06 01 00 00 00 74 1e e8 69 1e 0c 00 eb e5 44 89
[  504.513953][    C1] RSP: 0018:ffffc900032cf1a0 EFLAGS: 00000293
[  504.520028][    C1] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff88801eb8be00
[  504.527990][    C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  504.535953][    C1] RBP: ffffc900032cf2c8 R08: ffff888034bfcbc7 R09: 1ffff1100697f978
[  504.543921][    C1] R10: dffffc0000000000 R11: ffffffff8178e3f0 R12: 1ffff110170c85fd
[  504.551894][    C1] R13: ffff8880b873c448 R14: ffff8880b8642fe8 R15: 0000000000000000
[  504.559904][    C1] FS:  0000000000000000(0000) GS:ffff888125054000(0000) knlGS:0000000000000000
[  504.568837][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  504.575421][    C1] CR2: 0000001b3131dff8 CR3: 0000000046ba9000 CR4: 0000000000350ef0
[  504.583398][    C1] Call Trace:
[  504.586674][    C1]  <TASK>
[  504.589602][    C1]  ? __pfx_flush_tlb_func+0x10/0x10
[  504.594812][    C1]  ? __pfx_should_flush_tlb+0x10/0x10
[  504.600201][    C1]  ? __pfx_smp_call_function_many_cond+0x10/0x10
[  504.606561][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  504.612235][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  504.617873][    C1]  ? __pfx_should_flush_tlb+0x10/0x10
[  504.623276][    C1]  ? __pfx_flush_tlb_func+0x10/0x10
[  504.628511][    C1]  on_each_cpu_cond_mask+0x3f/0x80
[  504.633644][    C1]  flush_tlb_mm_range+0x5c4/0x1090
[  504.638776][    C1]  ? rcu_is_watching+0x15/0xb0
[  504.643564][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  504.649206][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  504.654865][    C1]  __zap_vma_range+0x3ef5/0x4f10
[  504.659891][    C1]  ? __pfx___zap_vma_range+0x10/0x10
[  504.665210][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  504.670865][    C1]  ? mas_find+0xab1/0xcf0
[  504.675199][    C1]  ? unmap_vmas+0x1b9/0x550
[  504.679742][    C1]  unmap_vmas+0x390/0x550
[  504.684097][    C1]  ? __pfx_unmap_vmas+0x10/0x10
[  504.688987][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  504.694633][    C1]  exit_mmap+0x293/0x9f0
[  504.698886][    C1]  ? __pfx_exit_mmap+0x10/0x10
[  504.703685][    C1]  ? __pfx_exit_aio+0x10/0x10
[  504.708379][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  504.714017][    C1]  ? arch_uprobe_clear_state+0x1c8/0x240
[  504.719678][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  504.725344][    C1]  ? uprobe_clear_state+0x2ac/0x3e0
[  504.730590][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  504.736237][    C1]  __mmput+0x118/0x420
[  504.740324][    C1]  exit_mm+0x221/0x2d0
[  504.744423][    C1]  do_exit+0x6cd/0x2360
[  504.748592][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  504.754231][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  504.759865][    C1]  ? __pfx_do_exit+0x10/0x10
[  504.764471][    C1]  ? do_raw_spin_lock+0x12b/0x2f0
[  504.769557][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  504.775205][    C1]  do_group_exit+0x22d/0x2f0
[  504.779804][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  504.785021][    C1]  get_signal+0x121b/0x12c0
[  504.789555][    C1]  arch_do_signal_or_restart+0xbb/0x860
[  504.795111][    C1]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  504.801279][    C1]  ? __x64_sys_mq_timedsend+0x17a/0x220
[  504.806848][    C1]  exit_to_user_mode_loop+0x104/0x730
[  504.812224][    C1]  ? rcu_is_watching+0x15/0xb0
[  504.817007][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  504.823074][    C1]  do_syscall_64+0x353/0x580
[  504.827661][    C1]  ? trace_irq_disable+0x3b/0x140
[  504.832695][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  504.838588][    C1] RIP: 0033:0x7f787519de99
[  504.842999][    C1] Code: Unable to access opcode bytes at 0x7f787519de6f.
[  504.850032][    C1] RSP: 002b:00007f7876071028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f2
[  504.858443][    C1] RAX: fffffffffffffe00 RBX: 00007f7875425fa0 RCX: 00007f787519de99
[  504.866415][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[  504.874385][    C1] RBP: 00007f7875233eaf R08: 0000000000000000 R09: 0000000000000000
[  504.882349][    C1] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000000
[  504.890314][    C1] R13: 00007f7875426038 R14: 00007f7875425fa0 R15: 00007ffde3e5f128
[  504.898394][    C1]  </TASK>