last executing test programs:

7.49061546s ago: executing program 0 (id=371):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x39b3)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r2, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20)
close(r2)
recvmmsg(r0, &(0x7f0000005b80)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/163, 0xa3}], 0x1}, 0x6}], 0x1, 0x21, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000280)=0x1, 0x4)

7.305225151s ago: executing program 0 (id=375):
prlimit64(0x0, 0xe, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0)
syz_mount_image$hfsplus(&(0x7f00000001c0), &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1800880, &(0x7f0000000280)={[{@umask={'umask', 0x3d, 0x1}}, {@nobarrier}, {@part={'part', 0x3d, 0x9}}, {@nls={'nls', 0x3d, 'cp865'}}]}, 0x1, 0x612, &(0x7f0000000680)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000e00)='./proc\x00', &(0x7f00000012c0)='proc\x00', 0x8000, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0)
syz_mount_image$vfat(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0xb6, 0x0, &(0x7f0000000e00))
rename(&(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00')

6.79653611s ago: executing program 1 (id=380):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
iopl(0x3)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
prctl$PR_SET_IO_FLUSHER(0x43, 0x1)
prctl$PR_SET_IO_FLUSHER(0x43, 0x0)

5.517884643s ago: executing program 2 (id=385):
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
chdir(&(0x7f0000000140)='./file0\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80000, 0x89)
ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x3, 0x1731b, 0x3})

5.467238942s ago: executing program 0 (id=386):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)

5.447860811s ago: executing program 1 (id=387):
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000003c0)={0x53, 0x8000, 0x9, {0x0, 0x1}, {0x52, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xf, 0xfff9}, {0x6, 0x5, 0x1, 0x47, 0x2}]})
timerfd_create(0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fea000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r1 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x2e5})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250)

5.01734249s ago: executing program 1 (id=390):
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, &(0x7f00000001c0))
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x0, 0xfff9, 0x20000000, 0x5, 0x50, 0x1000, 0x1}, 0x9c)
r1 = socket$netlink(0x10, 0x3, 0x0)
socket(0x2, 0x80805, 0x0)
sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@nested={0xffffffffffffff85, 0x0, 0x0, 0x0, [@typed={0x3f, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x1c, 0x0, 0x0, @u32=0xc9}]}]}, 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e23, 0x2, @empty, 0x9d7}}, 0x6, 0x0, 0x0, 0xb3, 0xb3550aa4ba878396, 0x0, 0x1}, 0x9c)

4.92252928s ago: executing program 3 (id=391):
openat$random(0xffffffffffffff9c, 0x0, 0x40800, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x777)
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
setreuid(0x0, 0xee00)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000000)='3', 0x4e)
unshare(0x4a000200)

4.831862078s ago: executing program 2 (id=392):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000b80)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b788f8a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d500891e58a3f851ff5c85244beacba25d854577d68ca555e88fc249340ab9bdd905a984c7bbb7bb3c689ef8daa63ca62e496be091cc1c7d4f371acaaec43527aee38", 0xe6}, {&(0x7f0000000cc0)="44900001000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41fb2f8009900000000000000000000000000001c8a9f7956583e26f6f0edc415851d0b8305fe66c2b7c114e3712d87744938848f24a13cb604000000000000000000000000000000c7aa5035897b20a6c23f1fc4af2990c07f6d4b985a3dd9740bd33848702930cd523b91f0e15f2a4d81f18bcf9db2463a8d4a370aa779847642", 0x13c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000e40)="31fdffffffffffffff74098b2e5e55a1828636f60fbfcfdac56c75f1687f0c562874230300d69f117e766bdbad0c2171ad6227e1173afcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbb9de494c9721d9bf80f2f75c3b4bea78e385ea382294882839a22674037b89108a1420e33eb9be6d10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba999d89d0c5d889c8c569334e9547e1e343b451d9025c4e153612d4674b9411fb4de29559900bcb388d291aa839ab0954e6a8dfc19c3", 0xc3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962fd5daa4fc9c5", 0xb3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000001c0)="f6", 0x1}], 0x1}}], 0x4, 0x2090)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

4.144053559s ago: executing program 1 (id=393):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
unshare(0x6020400)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=<r2=>r1, @ANYRES32=r0, @ANYBLOB='\a'], 0x10)
close(r0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[], &(0x7f00000000c0)='GPL\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB='\a'], 0x10)

3.949298171s ago: executing program 4 (id=394):
r0 = socket$packet(0x11, 0x3, 0x300)
bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x1, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0xffffffff, 0x4)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x0)
sendto$packet(r0, &(0x7f0000000040)="20f1ecf1c6f5dfc0917e94b5ea1e0a1bb369a4d29c4a14edd95910c1f9c716e8e5f9", 0x22, 0x4000000, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xff59, 0x0, 0x0, &(0x7f0000000380)}, 0x80)
syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00')
write(r0, &(0x7f0000000000)="01000000", 0x4)

3.803954523s ago: executing program 2 (id=395):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="c744240077dd0000c74424027fbe0000c7442406000000000f011c24b8010000000f01c1450f01ca470f01f866baf80cb8e4f61882ef66bafc0c66b8795966ef40250000000066b8de000f00d02e0f005ffa0f01c92e640fc71f", 0x5a}], 0x1, 0xe8, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000300)=@arm64={0x7, 0x8, 0xf, '\x00', 0xffffffffffffff0a})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3.792849538s ago: executing program 2 (id=396):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000001400)='.\x00', 0x40400, 0x0)
fcntl$notify(r0, 0x402, 0x1a)
symlinkat(&(0x7f0000001440)='.\x00', 0xffffffffffffff9c, &(0x7f0000001480)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f00000014c0)='./file1\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000003580)='./bus\x00', &(0x7f00000035c0), 0xa14000, &(0x7f0000003600)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000003640)='./bus\x00')
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0)
preadv2(r1, &(0x7f0000000040)=[{&(0x7f00000012c0)=""/258, 0x102}], 0x1, 0x7, 0x4, 0x21)

3.743423679s ago: executing program 3 (id=397):
r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x1, 0x0)
fchdir(r1)
mknod(&(0x7f0000000080)='./bus\x00', 0x1024, 0x1000000)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r2 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x70)
getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8)
getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8)

3.606865578s ago: executing program 2 (id=398):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1000800, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5524, &(0x7f00000108c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183b41, 0x12b)
ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000340)=0xfffffff9)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x9, 0x800800})
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x24008818, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./file1\x00', 0x42, 0x1ff)
fallocate(r1, 0x0, 0x22004, 0x100007f)
ioctl$UBLK_U_CMD_START_DEV(r1, 0xc0207506, &(0x7f0000000d40))
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)

3.549826957s ago: executing program 4 (id=399):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
getrandom(&(0x7f0000001380)=""/4096, 0x1000, 0x0)

3.547288745s ago: executing program 3 (id=400):
socket$inet_sctp(0x2, 0x1, 0x84)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x4000)=nil, &(0x7f0000ff0000/0x2000)=nil, 0x0}, 0x68)
openat$rfkill(0xffffffffffffff9c, 0x0, 0x6ad01, 0x0)
r0 = syz_open_procfs(0x0, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000140)='/dev/vcsa\x00')
pread64(r0, &(0x7f0000000180)=""/190, 0xbe, 0xa0000000000000)
syz_read_part_table(0x104f, &(0x7f0000002b00)="$eJzsz72pAkEUBeBzH/NWMbEKczvQIjSxmg2sxiqsyBaU3fUHzEWE70tm7j3MgQlf9Zf1a5hPx7l2SbZJ+qTqkV7TksxW1Q+rRRuXLZe3xmF+vuly6MbL5vg/9aVleQ8r+9MHvwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP+MWAAD//8UcCHM=")

2.942482135s ago: executing program 4 (id=401):
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001000000406a0531030000000000010902398743d90050000904000002030000000921000000012218000905810308"], 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x48, &(0x7f0000000300)=ANY=[@ANYBLOB=',\t'], 0x8)
socket$inet_udp(0x2, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./trace\x00', 0x1ff)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @loopback, @multicast1}}}})

2.76679557s ago: executing program 3 (id=402):
fcntl$lock(0xffffffffffffffff, 0x24, 0x0)
r0 = shmget$private(0x0, 0x800000, 0x54000000, &(0x7f0000800000/0x800000)=nil)
shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x5})
ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
socket$inet6_sctp(0xa, 0x5, 0x84)
syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0)

2.213107535s ago: executing program 1 (id=403):
pread64(0xffffffffffffffff, 0x0, 0x0, 0x41e)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x2000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
write$binfmt_aout(r1, 0x0, 0xffffffdb)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'veth0_to_hsr\x00'})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)

2.169176485s ago: executing program 3 (id=404):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000000)=0x1, 0xffffffffffffffff, 0x0, 0x2, 0x4}}, 0x20)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000280)=0x8)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
dup2(r0, r3)
sendto$inet6(r3, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdf9ba594dd, &(0x7f0000000100)={0xa, 0x4e23, 0x2000006, @private1={0xfc, 0x1, '\x00', 0x1}, 0xffffffff}, 0x1c)
sendto$inet6(r0, &(0x7f00000001c0)="86", 0x1, 0x20024100, &(0x7f00000000c0)={0xa, 0x4e24, 0x8, @private0, 0x2}, 0x1c)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000180)={r2, 0x10}, 0x8)

1.740171859s ago: executing program 0 (id=405):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x22102, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000900)=0x15)
ioctl(r0, 0x404c4701, &(0x7f0000000a00)="01000000000000000000000001000000010000000a0000000000000040000000400000000100000001")
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000c00)=0xf9)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000c20)=0x3f)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000c30)=0x1)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000c40)=0x1c)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0xf9)

1.364165232s ago: executing program 4 (id=406):
r0 = gettid()
fallocate(0xffffffffffffffff, 0x0, 0xbf5, 0x2000402)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
rt_sigtimedwait(&(0x7f0000000000), 0x0, 0xfffffffffffffffd, 0x8)
listen(0xffffffffffffffff, 0xb)

1.024893635s ago: executing program 3 (id=407):
syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x2, 0x0, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x22008041, &(0x7f0000000200)={0xa, 0x2, 0x2, @loopback, 0xfffffffd}, 0x20)
sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c450", 0xba, 0x1, 0x0, 0x0)
splice(r1, 0x0, r0, 0x0, 0x406f413, 0x0)

976.572574ms ago: executing program 4 (id=408):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
userfaultfd(0x1)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000000000008500000059"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x28}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

670.498834ms ago: executing program 4 (id=409):
syz_usb_connect$uac1(0x0, 0x72, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x763, 0x2001, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x6, 0x0, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xd4, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x7, 0x1, 0x8, {0x7, 0x25, 0x1, 0x4, 0x7, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x0, 0x79, 0xd2, {0x7, 0x25, 0x1, 0x0, 0xf1, 0xd}}}}}}}}]}}, 0x0)
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1830335b0100000000000000030000"], 0x0, 0x6, 0x0, 0x0, 0x41000}, 0x94)
write(r1, &(0x7f0000000000)='7', 0x1)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f"], 0x57)

623.687709ms ago: executing program 1 (id=410):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/class/net\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000100), 0x1000)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0xfffffff9, 0x163, 0x17, "00020000f7fd00"})
r2 = syz_open_pts(r1, 0xc0000)
ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, 0x0)

395.224757ms ago: executing program 2 (id=411):
socket$inet_tcp(0x2, 0x1, 0x0)
bind$unix(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000180)='./file0\x00', 0x4, &(0x7f0000000140)={[{@discard_async}]}, 0x1, 0x5599, &(0x7f000000f080)="$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")
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
fallocate(r0, 0x0, 0x80000, 0x4)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x10)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x80, 0x86)
copy_file_range(r2, 0x0, r1, &(0x7f00000000c0)=0x80000, 0x10001, 0x0)

238.655981ms ago: executing program 0 (id=412):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000002c0)=0x6, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000ec0)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000002100)=""/4091, 0xffb, 0x1, 0x0}, &(0x7f0000000000)=0x40)
sendmmsg$inet6(r0, &(0x7f0000007600)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000300)="8522", 0x2}], 0x1}}], 0x1, 0x20000000)

0s ago: executing program 0 (id=413):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1c1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./bus\x00', 0x1d7)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1/file0\x00', 0x0)
mount$bind(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='./file1/file0\x00', 0x0, 0x1085408, 0x0)
mount$overlay(0x0, &(0x7f0000000480)='./bus\x00', &(0x7f00000004c0), 0x40, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000540)='./bus\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f00000005c0)=""/49, 0x31)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.146' (ED25519) to the list of known hosts.
[   79.998839][ T5597] cgroup: Unknown subsys name 'net'
[   80.115828][ T5597] cgroup: Unknown subsys name 'cpuset'
[   80.126836][ T5597] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   81.801544][ T5597] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   85.569553][ T5618] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   85.587976][ T5620] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   85.593393][ T5620] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   85.599964][ T5620] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   85.601876][ T5620] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   85.604650][ T5620] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   85.606207][ T5620] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   85.607171][ T5621] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   85.607909][ T5621] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   85.618493][ T5621] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   85.620602][ T5620] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   85.622591][ T5620] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   85.624049][ T5621] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   85.629889][ T5620] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   85.630359][ T5625] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   85.630796][ T5620] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   85.631066][ T5625] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   85.632618][ T5625] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   85.634018][ T5620] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   85.635655][ T5620] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   85.642890][ T5620] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   85.661253][   T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   85.661939][   T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   85.678820][ T5612] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   85.679407][ T5612] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   87.742530][ T5618] Bluetooth: hci1: command tx timeout
[   87.742782][ T5612] Bluetooth: hci0: command tx timeout
[   87.821971][ T5612] Bluetooth: hci4: command tx timeout
[   87.833449][ T5618] Bluetooth: hci2: command tx timeout
[   87.839712][ T5612] Bluetooth: hci3: command tx timeout
[   87.949545][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.949765][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.950157][ T5610] bridge_slave_0: entered allmulticast mode
[   87.955506][ T5610] bridge_slave_0: entered promiscuous mode
[   88.015088][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.015194][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.015299][ T5610] bridge_slave_1: entered allmulticast mode
[   88.016812][ T5610] bridge_slave_1: entered promiscuous mode
[   88.096773][ T5607] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.096887][ T5607] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.097005][ T5607] bridge_slave_0: entered allmulticast mode
[   88.098575][ T5607] bridge_slave_0: entered promiscuous mode
[   88.165283][ T5607] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.165378][ T5607] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.165493][ T5607] bridge_slave_1: entered allmulticast mode
[   88.166996][ T5607] bridge_slave_1: entered promiscuous mode
[   88.173623][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.173911][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.177834][ T5609] bridge_slave_0: entered allmulticast mode
[   88.183718][ T5609] bridge_slave_0: entered promiscuous mode
[   88.208964][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   88.262152][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.262291][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.262578][ T5609] bridge_slave_1: entered allmulticast mode
[   88.263936][ T5609] bridge_slave_1: entered promiscuous mode
[   88.279127][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   88.280300][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.280682][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.281104][ T5608] bridge_slave_0: entered allmulticast mode
[   88.291266][ T5608] bridge_slave_0: entered promiscuous mode
[   88.302469][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.303017][ T5616] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.303443][ T5616] bridge_slave_0: entered allmulticast mode
[   88.316482][ T5616] bridge_slave_0: entered promiscuous mode
[   88.379167][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.379325][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.379425][ T5608] bridge_slave_1: entered allmulticast mode
[   88.380707][ T5608] bridge_slave_1: entered promiscuous mode
[   88.387038][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.387347][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.387720][ T5616] bridge_slave_1: entered allmulticast mode
[   88.399501][ T5616] bridge_slave_1: entered promiscuous mode
[   88.424021][ T5607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   88.486106][ T5607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   88.488700][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   88.490850][ T5610] team0: Port device team_slave_0 added
[   88.543350][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   88.545196][ T5610] team0: Port device team_slave_1 added
[   88.569556][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   88.573858][ T5616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   88.623090][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   88.625278][ T5616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   88.627285][ T5607] team0: Port device team_slave_0 added
[   88.658009][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0
[   88.658024][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   88.658049][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   88.714620][ T5607] team0: Port device team_slave_1 added
[   88.716654][ T5609] team0: Port device team_slave_0 added
[   88.717235][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1
[   88.717255][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   88.717284][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   88.720817][ T5609] team0: Port device team_slave_1 added
[   88.820705][ T5608] team0: Port device team_slave_0 added
[   88.827623][ T5616] team0: Port device team_slave_0 added
[   88.829754][ T5608] team0: Port device team_slave_1 added
[   88.850623][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_0
[   88.850637][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   88.850656][ T5607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   88.903294][ T5616] team0: Port device team_slave_1 added
[   88.920461][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_1
[   88.920478][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   88.920502][ T5607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   88.978252][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0
[   88.978272][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   88.978300][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   89.036523][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0
[   89.036543][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   89.036569][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   89.089833][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1
[   89.089853][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   89.089880][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   89.116982][ T5610] hsr_slave_0: entered promiscuous mode
[   89.121072][ T5610] hsr_slave_1: entered promiscuous mode
[   89.130412][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1
[   89.130478][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   89.130550][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   89.146907][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0
[   89.146972][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   89.147055][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   89.155943][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1
[   89.155997][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   89.156083][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   89.350745][ T5607] hsr_slave_0: entered promiscuous mode
[   89.353658][ T5607] hsr_slave_1: entered promiscuous mode
[   89.355885][ T5607] debugfs: 'hsr0' already exists in 'hsr'
[   89.356206][ T5607] Cannot create hsr debugfs directory
[   89.465418][ T5616] hsr_slave_0: entered promiscuous mode
[   89.466247][ T5616] hsr_slave_1: entered promiscuous mode
[   89.466771][ T5616] debugfs: 'hsr0' already exists in 'hsr'
[   89.466791][ T5616] Cannot create hsr debugfs directory
[   89.476529][ T5609] hsr_slave_0: entered promiscuous mode
[   89.479205][ T5609] hsr_slave_1: entered promiscuous mode
[   89.482600][ T5609] debugfs: 'hsr0' already exists in 'hsr'
[   89.482654][ T5609] Cannot create hsr debugfs directory
[   89.524881][ T5608] hsr_slave_0: entered promiscuous mode
[   89.525666][ T5608] hsr_slave_1: entered promiscuous mode
[   89.526200][ T5608] debugfs: 'hsr0' already exists in 'hsr'
[   89.526221][ T5608] Cannot create hsr debugfs directory
[   89.822056][ T5618] Bluetooth: hci1: command tx timeout
[   89.822154][ T5612] Bluetooth: hci0: command tx timeout
[   89.902392][ T5618] Bluetooth: hci2: command tx timeout
[   89.902428][ T5618] Bluetooth: hci4: command tx timeout
[   89.902552][ T5612] Bluetooth: hci3: command tx timeout
[   90.097287][ T5610] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   90.110607][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   90.119782][ T5610] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   90.131229][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   90.138360][ T5610] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   90.149322][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   90.150206][ T5610] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   90.167218][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   90.239354][ T5607] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   90.256961][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   90.258111][ T5607] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   90.260987][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   90.300638][ T5607] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   90.317046][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   90.318286][ T5607] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   90.341069][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   90.442155][ T5616] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   90.449801][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   90.470921][ T5616] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   90.483248][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   90.484330][ T5616] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   90.487580][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   90.488892][ T5616] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   90.501244][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   90.628412][ T5608] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   90.642844][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   90.664211][ T5608] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   90.668459][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   90.691176][ T5608] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   90.703449][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   90.725084][ T5608] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   90.728487][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   90.759865][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0
[   90.856523][ T5609] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   90.860352][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   90.880863][ T5610] 8021q: adding VLAN 0 to HW filter on device team0
[   90.892375][ T5609] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   90.895411][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   90.896319][ T5609] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   90.899233][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   90.900609][ T5609] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   90.916098][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   90.957583][ T5607] 8021q: adding VLAN 0 to HW filter on device bond0
[   90.961086][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.961272][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[   91.030059][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.030135][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[   91.085561][ T5607] 8021q: adding VLAN 0 to HW filter on device team0
[   91.128963][ T1263] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.129045][ T1263] bridge0: port 1(bridge_slave_0) entered forwarding state
[   91.176969][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.177139][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[   91.257358][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0
[   91.287515][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0
[   91.334743][ T5616] 8021q: adding VLAN 0 to HW filter on device team0
[   91.382455][   T63] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.382568][   T63] bridge0: port 1(bridge_slave_0) entered forwarding state
[   91.425103][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.425216][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[   91.430310][ T5608] 8021q: adding VLAN 0 to HW filter on device team0
[   91.527211][ T1263] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.527323][ T1263] bridge0: port 1(bridge_slave_0) entered forwarding state
[   91.596497][ T1033] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.596573][ T1033] bridge0: port 2(bridge_slave_1) entered forwarding state
[   91.640323][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0
[   91.793721][ T5609] 8021q: adding VLAN 0 to HW filter on device team0
[   91.858643][   T63] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.858753][   T63] bridge0: port 1(bridge_slave_0) entered forwarding state
[   91.901930][   T54] Bluetooth: hci1: command tx timeout
[   91.902023][ T5612] Bluetooth: hci0: command tx timeout
[   91.904164][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.904278][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[   91.981877][   T54] Bluetooth: hci4: command tx timeout
[   91.981912][   T54] Bluetooth: hci2: command tx timeout
[   91.982114][ T5612] Bluetooth: hci3: command tx timeout
[   92.246719][   T32] cfg80211: failed to load regulatory.db
[   92.537160][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0
[   92.662748][ T5607] veth0_vlan: entered promiscuous mode
[   92.716655][ T5607] veth1_vlan: entered promiscuous mode
[   92.813030][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0
[   92.900755][ T5607] veth0_macvtap: entered promiscuous mode
[   92.963410][ T5607] veth1_macvtap: entered promiscuous mode
[   93.058760][ T5610] veth0_vlan: entered promiscuous mode
[   93.099292][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0
[   93.126791][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0
[   93.128697][ T5610] veth1_vlan: entered promiscuous mode
[   93.167855][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1
[   93.291094][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0
[   93.445406][   T64] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.446775][ T1270] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.470211][ T5610] veth0_macvtap: entered promiscuous mode
[   93.514464][ T5610] veth1_macvtap: entered promiscuous mode
[   93.543327][ T1270] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.620265][   T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.620295][   T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.680917][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0
[   93.707930][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.707969][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.733616][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0
[   93.738631][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1
[   93.779548][ T5608] veth0_vlan: entered promiscuous mode
[   93.836133][ T5608] veth1_vlan: entered promiscuous mode
[   93.916828][ T5616] veth0_vlan: entered promiscuous mode
[   93.973500][ T5607] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   93.986932][ T5618] Bluetooth: hci1: command tx timeout
[   93.987070][ T5612] Bluetooth: hci0: command tx timeout
[   94.055238][ T5616] veth1_vlan: entered promiscuous mode
[   94.069604][ T5618] Bluetooth: hci2: command tx timeout
[   94.069642][ T5618] Bluetooth: hci4: command tx timeout
[   94.069701][ T5612] Bluetooth: hci3: command tx timeout
[   94.071800][   T64] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.073254][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.073378][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   94.073492][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.073622][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.137789][ T5609] veth0_vlan: entered promiscuous mode
[   94.182285][ T5608] veth0_macvtap: entered promiscuous mode
[   94.190955][ T5806] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4'.
[   94.207325][ T1041] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.207347][ T1041] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.229975][ T5609] veth1_vlan: entered promiscuous mode
[   94.240942][ T5608] veth1_macvtap: entered promiscuous mode
[   94.332280][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.332306][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.386051][ T5616] veth0_macvtap: entered promiscuous mode
[   94.400760][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0
[   94.436916][ T5616] veth1_macvtap: entered promiscuous mode
[   94.443780][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1
[   94.473853][ T5609] veth0_macvtap: entered promiscuous mode
[   94.508762][ T5609] veth1_macvtap: entered promiscuous mode
[   94.511835][ T1033] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.511888][ T1033] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   94.511928][ T1033] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.511967][ T1033] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.591001][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0
[   94.616881][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1
[   94.663807][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0
[   94.701265][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1
[   94.776861][ T5816] batman_adv: batadv0: Adding interface: veth0
[   94.776880][ T5816] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   94.776907][ T5816] batman_adv: batadv0: Interface activated: veth0
[   94.778757][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.778778][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.851692][ T1041] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.878390][ T5816] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   94.878419][ T5816] batman_adv: batadv0: Removing interface: batadv_slave_0
[   94.896899][ T5816] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   94.897940][ T5816] batman_adv: batadv0: Removing interface: batadv_slave_1
[   94.914291][ T5816] batman_adv: batadv0: Interface deactivated: veth0
[   94.914316][ T5816] batman_adv: batadv0: Removing interface: veth0
[   94.952403][ T1041] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.993494][   T45] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   94.993546][   T45] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.993585][   T45] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.993623][   T45] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.993662][   T45] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.993702][   T45] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.000813][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.000852][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.260526][   T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.260552][   T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.458892][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.458916][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.547833][   T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.547858][   T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.693151][   T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.693176][   T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.789267][ T5821] loop2: detected capacity change from 0 to 40427
[   95.858142][ T5821] F2FS-fs (loop2): invalid crc value
[   95.970179][ T5834] bridge0: port 3(syz_tun) entered blocking state
[   95.970282][ T5834] bridge0: port 3(syz_tun) entered disabled state
[   95.970444][ T5834] syz_tun: entered allmulticast mode
[   95.994994][ T5834] syz_tun: entered promiscuous mode
[   96.000924][ T5834] bridge0: port 3(syz_tun) entered blocking state
[   96.001058][ T5834] bridge0: port 3(syz_tun) entered forwarding state
[   96.097672][ T5834] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[   96.472878][ T5821] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[   96.495985][ T5821] F2FS-fs (loop2): f2fs_disable_checkpoint starts, unusable: 0
[   96.496034][ T5821] F2FS-fs (loop2): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[   96.496266][ T5821] F2FS-fs (loop2): Start checkpoint disabled!
[   96.566346][ T5821] F2FS-fs (loop2): f2fs_disable_checkpoint finishes, err:0
[   96.583801][ T5821] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[   96.998015][ T1041] kworker/u8:7: attempt to access beyond end of device
[   96.998015][ T1041] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[   96.998674][ T1041] CPU: 1 UID: 0 PID: 1041 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(full) 
[   96.998707][ T1041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   96.998721][ T1041] Workqueue: writeback wb_workfn (flush-7:2)
[   96.998776][ T1041] Call Trace:
[   96.998785][ T1041]  <TASK>
[   96.998794][ T1041]  dump_stack_lvl+0xe8/0x150
[   96.998822][ T1041]  f2fs_stop_checkpoint+0x3f6/0x5d0
[   96.998856][ T1041]  f2fs_write_end_bio+0xda7/0x11c0
[   96.998912][ T1041]  __submit_merged_bio+0x258/0x6a0
[   96.998936][ T1041]  ? rcu_is_watching+0x16/0xb0
[   96.998965][ T1041]  f2fs_submit_merged_write_cond+0x1ef/0x590
[   96.998993][ T1041]  ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10
[   96.999042][ T1041]  f2fs_write_data_pages+0x2a13/0x36e0
[   96.999108][ T1041]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   96.999186][ T1041]  ? lockdep_unlock+0x5c/0xd0
[   96.999232][ T1041]  ? __lock_acquire+0x747/0x2de0
[   96.999273][ T1041]  ? __kasan_check_byte+0x12/0x40
[   96.999298][ T1041]  ? look_up_lock_class+0x57/0x110
[   96.999319][ T1041]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   96.999344][ T1041]  do_writepages+0x338/0x560
[   96.999371][ T1041]  ? __lock_acquire+0x747/0x2de0
[   96.999398][ T1041]  ? reacquire_held_locks+0x117/0x1a0
[   96.999420][ T1041]  ? writeback_sb_inodes+0x450/0x1af0
[   96.999450][ T1041]  __writeback_single_inode+0x136/0x1220
[   96.999477][ T1041]  ? do_raw_spin_unlock+0xf5/0x200
[   96.999505][ T1041]  writeback_sb_inodes+0x9de/0x1af0
[   96.999526][ T1041]  ? __lock_acquire+0x747/0x2de0
[   96.999602][ T1041]  ? __pfx_writeback_sb_inodes+0x10/0x10
[   96.999680][ T1041]  ? rcu_is_watching+0x16/0xb0
[   96.999704][ T1041]  ? queue_io+0x2d3/0x470
[   96.999730][ T1041]  wb_writeback+0x41c/0xad0
[   96.999755][ T1041]  ? queue_io+0x231/0x470
[   96.999786][ T1041]  ? __pfx_wb_writeback+0x10/0x10
[   96.999806][ T1041]  ? do_raw_spin_lock+0x12b/0x2f0
[   96.999848][ T1041]  wb_workfn+0x431/0x10f0
[   96.999907][ T1041]  ? __pfx_wb_workfn+0x10/0x10
[   96.999949][ T1041]  ? do_raw_spin_lock+0x12b/0x2f0
[   97.000004][ T1041]  ? lock_acquire+0x115/0x350
[   97.000039][ T1041]  ? rcu_is_watching+0x16/0xb0
[   97.000065][ T1041]  ? process_scheduled_works+0x97a/0x1630
[   97.000091][ T1041]  process_scheduled_works+0xc3d/0x1630
[   97.000157][ T1041]  ? __pfx_process_scheduled_works+0x10/0x10
[   97.000192][ T1041]  ? assign_work+0x3cf/0x5d0
[   97.000223][ T1041]  worker_thread+0xa47/0xfb0
[   97.000266][ T1041]  ? __kthread_parkme+0x71/0x1f0
[   97.000302][ T1041]  kthread+0x38b/0x480
[   97.000324][ T1041]  ? __pfx_worker_thread+0x10/0x10
[   97.000343][ T1041]  ? __pfx_kthread+0x10/0x10
[   97.000366][ T1041]  ret_from_fork+0x514/0xb70
[   97.000392][ T1041]  ? __pfx_ret_from_fork+0x10/0x10
[   97.000414][ T1041]  ? __switch_to+0xc78/0x1410
[   97.000440][ T1041]  ? __pfx_kthread+0x10/0x10
[   97.000463][ T1041]  ret_from_fork_asm+0x1a/0x30
[   97.000505][ T1041]  </TASK>
[   97.052403][ T1041] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[   97.052730][ T1041] CPU: 1 UID: 0 PID: 1041 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(full) 
[   97.052811][ T1041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   97.052852][ T1041] Workqueue: writeback wb_workfn (flush-7:2)
[   97.052988][ T1041] Call Trace:
[   97.053011][ T1041]  <TASK>
[   97.053034][ T1041]  dump_stack_lvl+0xe8/0x150
[   97.053108][ T1041]  f2fs_stop_checkpoint+0x3f6/0x5d0
[   97.053188][ T1041]  f2fs_write_end_bio+0xda7/0x11c0
[   97.053283][ T1041]  __submit_merged_bio+0x258/0x6a0
[   97.053347][ T1041]  ? rcu_is_watching+0x16/0xb0
[   97.053414][ T1041]  f2fs_submit_merged_write_cond+0x1ef/0x590
[   97.053480][ T1041]  ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10
[   97.053609][ T1041]  f2fs_write_data_pages+0x2a13/0x36e0
[   97.053761][ T1041]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   97.053949][ T1041]  ? lockdep_unlock+0x5c/0xd0
[   97.054060][ T1041]  ? __lock_acquire+0x747/0x2de0
[   97.054181][ T1041]  ? __kasan_check_byte+0x12/0x40
[   97.054252][ T1041]  ? look_up_lock_class+0x57/0x110
[   97.054300][ T1041]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   97.054364][ T1041]  do_writepages+0x338/0x560
[   97.054429][ T1041]  ? __lock_acquire+0x747/0x2de0
[   97.054494][ T1041]  ? reacquire_held_locks+0x117/0x1a0
[   97.054547][ T1041]  ? writeback_sb_inodes+0x450/0x1af0
[   97.054622][ T1041]  __writeback_single_inode+0x136/0x1220
[   97.054688][ T1041]  ? do_raw_spin_unlock+0xf5/0x200
[   97.054772][ T1041]  writeback_sb_inodes+0x9de/0x1af0
[   97.054826][ T1041]  ? __lock_acquire+0x747/0x2de0
[   97.054945][ T1041]  ? __pfx_writeback_sb_inodes+0x10/0x10
[   97.055125][ T1041]  ? rcu_is_watching+0x16/0xb0
[   97.055177][ T1041]  ? queue_io+0x2d3/0x470
[   97.055241][ T1041]  wb_writeback+0x41c/0xad0
[   97.055293][ T1041]  ? queue_io+0x231/0x470
[   97.055365][ T1041]  ? __pfx_wb_writeback+0x10/0x10
[   97.055410][ T1041]  ? do_raw_spin_lock+0x12b/0x2f0
[   97.055526][ T1041]  wb_workfn+0x431/0x10f0
[   97.055627][ T1041]  ? __pfx_wb_workfn+0x10/0x10
[   97.055722][ T1041]  ? do_raw_spin_lock+0x12b/0x2f0
[   97.055810][ T1041]  ? lock_acquire+0x115/0x350
[   97.055839][ T1041]  ? rcu_is_watching+0x16/0xb0
[   97.055861][ T1041]  ? process_scheduled_works+0x97a/0x1630
[   97.055882][ T1041]  process_scheduled_works+0xc3d/0x1630
[   97.055937][ T1041]  ? __pfx_process_scheduled_works+0x10/0x10
[   97.055968][ T1041]  ? assign_work+0x3cf/0x5d0
[   97.055995][ T1041]  worker_thread+0xa47/0xfb0
[   97.056064][ T1041]  ? __kthread_parkme+0x71/0x1f0
[   97.056158][ T1041]  kthread+0x38b/0x480
[   97.056226][ T1041]  ? __pfx_worker_thread+0x10/0x10
[   97.056266][ T1041]  ? __pfx_kthread+0x10/0x10
[   97.056328][ T1041]  ret_from_fork+0x514/0xb70
[   97.056392][ T1041]  ? __pfx_ret_from_fork+0x10/0x10
[   97.056445][ T1041]  ? __switch_to+0xc78/0x1410
[   97.056516][ T1041]  ? __pfx_kthread+0x10/0x10
[   97.056572][ T1041]  ret_from_fork_asm+0x1a/0x30
[   97.056670][ T1041]  </TASK>
[   97.125580][ T1041] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[   97.449162][   T32] loop2: lost filesystem error report for type 5 error -108
[   98.347988][ T5855] loop1: detected capacity change from 0 to 40427
[   98.398619][ T5855] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[   98.398651][ T5855] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   98.438220][ T5855] F2FS-fs (loop1): invalid crc value
[   98.586078][ T5855] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   98.619164][ T5855] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   98.619198][ T5855] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   98.730916][   T33] audit: type=1804 audit(1791818952.776:2): pid=5876 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.11" name="/newroot/3/file0/bus" dev="loop1" ino=10 res=1 errno=0
[   99.508738][ T5886] loop2: detected capacity change from 0 to 64
[   99.954655][ T5896] coredump: 11(syz.2.13): Core dump to core aborted: cannot preserve file permissions
[  100.340290][ T5905] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  100.657778][ T5915] netlink: 'syz.3.26': attribute type 1 has an invalid length.
[  100.658976][ T5915] netlink: 12 bytes leftover after parsing attributes in process `syz.3.26'.
[  100.659011][ T5915] netlink: 12 bytes leftover after parsing attributes in process `syz.3.26'.
[  100.854834][ T5712] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  100.934889][ T5909] loop2: detected capacity change from 0 to 32768
[  100.948215][ T5909] =======================================================
[  100.948215][ T5909] WARNING: The mand mount option has been deprecated and
[  100.948215][ T5909]          and is ignored by this kernel. Remove the mand
[  100.948215][ T5909]          option from the mount to silence this warning.
[  100.948215][ T5909] =======================================================
[  101.056524][ T5712] usb 2-1: New USB device found: idVendor=08b7, idProduct=0000, bcdDevice=0.00
[  101.085257][ T5712] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  101.085286][ T5712] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  101.087947][ T5712] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  101.087994][ T5712] usb 2-1: SerialNumber: syz
[  101.207703][ T5909] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  101.534294][ T5712] usb 2-1: 0:2 : does not exist
[  101.828243][ T5712] usb 2-1: USB disconnect, device number 2
[  102.065459][ T5614] udevd[5614]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  102.632342][ T1223] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  102.812218][ T1223] usb 4-1: New USB device found: idVendor=0525, idProduct=a4a7, bcdDevice=1.00
[  102.813887][ T1223] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  103.027176][ T5951] netlink: 4 bytes leftover after parsing attributes in process `syz.0.32'.
[  103.075349][ T1223] cdc_acm 4-1:1.0: ttyACM0: USB ACM device
[  103.656233][ T5610] ocfs2: Unmounting device (7,2) on (node local)
[  104.065325][ T5953] loop4: detected capacity change from 0 to 32768
[  104.345797][ T5953] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  104.527131][ T5953] XFS (loop4): Ending clean mount
[  104.608330][   T33] audit: type=1800 audit(2000000000.170:3): pid=5953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.33" name="file1" dev="loop4" ino=4422 res=0 errno=-22
[  104.819232][   T33] audit: type=1800 audit(2000000000.380:4): pid=5992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.33" name="file1" dev="loop4" ino=4422 res=0 errno=-22
[  104.949547][ T5991] bpf: recursion limit reached on datapath, buggy bpf program?
[  104.949659][ T5991] Dead loop on virtual device gre0 (net 36), fix it urgently!
[  104.962102][ T5991] bpf: recursion limit reached on datapath, buggy bpf program?
[  104.962422][ T5991] Dead loop on virtual device gre0 (net 36), fix it urgently!
[  104.971677][ T5991] bpf: recursion limit reached on datapath, buggy bpf program?
[  104.971951][ T5991] Dead loop on virtual device gre0 (net 36), fix it urgently!
[  105.000372][ T5991] bpf: recursion limit reached on datapath, buggy bpf program?
[  105.000468][ T5991] Dead loop on virtual device gre0 (net 36), fix it urgently!
[  105.057975][ T5991] bpf: recursion limit reached on datapath, buggy bpf program?
[  105.058076][ T5991] Dead loop on virtual device gre0 (net 36), fix it urgently!
[  105.826385][ T5616] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  105.908113][ T5991] syz.1.39 (5991) used greatest stack depth: 18856 bytes left
[  106.398901][ T5673] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  106.467591][ T5673] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  106.470245][ T6021] netlink: 4 bytes leftover after parsing attributes in process `syz.0.48'.
[  106.588869][ T6026] loop1: detected capacity change from 0 to 64
[  106.686925][ T6028] loop0: detected capacity change from 0 to 512
[  106.840677][ T6030] FAULT_INJECTION: forcing a failure.
[  106.840677][ T6030] name failslab, interval 1, probability 0, space 0, times 1
[  106.840711][ T6030] CPU: 0 UID: 0 PID: 6030 Comm: syz.2.50 Not tainted syzkaller #0 PREEMPT(full) 
[  106.840738][ T6030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  106.840751][ T6030] Call Trace:
[  106.840759][ T6030]  <TASK>
[  106.840769][ T6030]  dump_stack_lvl+0xe8/0x150
[  106.840802][ T6030]  should_fail_ex+0x3eb/0x540
[  106.840832][ T6030]  should_failslab+0xa8/0x100
[  106.840857][ T6030]  __kmalloc_noprof+0xf9/0x710
[  106.840880][ T6030]  ? __se_sys_add_key+0x349/0x420
[  106.840900][ T6030]  ? do_syscall_64+0x166/0x520
[  106.840921][ T6030]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  106.840943][ T6030]  ? mpi_powm+0x1c4/0x2480
[  106.840963][ T6030]  ? mpi_powm+0x1c4/0x2480
[  106.840992][ T6030]  mpi_powm+0x1c4/0x2480
[  106.841039][ T6030]  ? __pfx_mpi_powm+0x10/0x10
[  106.841064][ T6030]  ? lockdep_hardirqs_on+0x7b/0x110
[  106.841101][ T6030]  ? kfree+0x1c5/0x650
[  106.841122][ T6030]  ? rsa_enc+0x2e0/0x480
[  106.841149][ T6030]  rsa_enc+0x338/0x480
[  106.841177][ T6030]  ? __pfx_rsa_enc+0x10/0x10
[  106.841195][ T6030]  ? __virt_addr_valid+0x137/0x390
[  106.841216][ T6030]  ? __virt_addr_valid+0x2e8/0x390
[  106.841240][ T6030]  ? sg_init_one+0xf5/0x1c0
[  106.841265][ T6030]  rsassa_pkcs1_verify+0x52f/0xbb0
[  106.841303][ T6030]  ? __pfx_rsassa_pkcs1_verify+0x10/0x10
[  106.841348][ T6030]  ? rsassa_pkcs1_set_pub_key+0x13d/0x1a0
[  106.841375][ T6030]  public_key_verify_signature+0x79b/0x9e0
[  106.841415][ T6030]  ? __pfx_public_key_verify_signature+0x10/0x10
[  106.841456][ T6030]  ? asymmetric_key_generate_id+0x60/0x170
[  106.841477][ T6030]  ? asymmetric_key_id_same+0x67/0xe0
[  106.841508][ T6030]  x509_check_for_self_signed+0x326/0x430
[  106.841536][ T6030]  x509_cert_parse+0x622/0x7a0
[  106.841564][ T6030]  x509_key_preparse+0x64/0x6d0
[  106.841586][ T6030]  ? down_read+0x2b9/0x320
[  106.841613][ T6030]  asymmetric_key_preparse+0xb9/0x1b0
[  106.841639][ T6030]  __key_create_or_update+0x34f/0xa70
[  106.841673][ T6030]  ? __pfx___key_create_or_update+0x10/0x10
[  106.841702][ T6030]  ? lookup_user_key+0xc82/0x1360
[  106.841738][ T6030]  ? __pfx_lookup_user_key_possessed+0x10/0x10
[  106.841764][ T6030]  ? __pfx_keyring_search_iterator+0x10/0x10
[  106.841795][ T6030]  key_create_or_update+0x42/0x60
[  106.841823][ T6030]  __se_sys_add_key+0x349/0x420
[  106.841850][ T6030]  ? __pfx___se_sys_add_key+0x10/0x10
[  106.841884][ T6030]  ? __x64_sys_add_key+0x20/0xc0
[  106.841910][ T6030]  do_syscall_64+0x166/0x520
[  106.841930][ T6030]  ? trace_irq_disable+0x3b/0x140
[  106.841950][ T6030]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  106.841973][ T6030]  ? clear_bhb_loop+0x70/0xc0
[  106.841997][ T6030]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  106.842020][ T6030] RIP: 0033:0x7f451339e1d9
[  106.842058][ T6030] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  106.842076][ T6030] RSP: 002b:00007f4514274028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[  106.842107][ T6030] RAX: ffffffffffffffda RBX: 00007f4513625fa0 RCX: 00007f451339e1d9
[  106.842125][ T6030] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000
[  106.842141][ T6030] RBP: 00007f4513435888 R08: 0000000032a01265 R09: 0000000000000000
[  106.842156][ T6030] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000
[  106.842170][ T6030] R13: 00007f4513626038 R14: 00007f4513625fa0 R15: 00007ffd26cc2a78
[  106.842208][ T6030]  </TASK>
[  107.255927][ T6028] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  107.256089][ T6028] ext4 filesystem being mounted at /9/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  107.619966][ T6041] loop2: detected capacity change from 0 to 2048
[  107.656582][ T6041] EXT4-fs: Ignoring removed orlov option
[  107.656611][ T6041] EXT4-fs: Ignoring removed i_version option
[  107.707639][ T6028] EXT4-fs (loop0): shut down requested (2)
[  107.733587][ T6041] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  107.733753][ T6041] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  107.973048][ T1223] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[  107.978728][ T5609] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.133399][ T1223] usb 2-1: New USB device found: idVendor=04da, idProduct=390d, bcdDevice=fa.df
[  108.154459][ T1223] usb 2-1: config 201 has an invalid interface number: 249 but max is 0
[  108.154494][ T1223] usb 2-1: config 201 has an invalid descriptor of length 0, skipping remainder of the config
[  108.154514][ T1223] usb 2-1: config 201 has no interface number 0
[  108.154552][ T1223] usb 2-1: config 201 interface 249 altsetting 4 has an endpoint descriptor with address 0xF1, changing to 0x81
[  108.154581][ T1223] usb 2-1: config 201 interface 249 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  108.154609][ T1223] usb 2-1: config 201 interface 249 has no altsetting 0
[  108.171171][ T1223] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.171205][ T1223] usb 2-1: Product: syz
[  108.171222][ T1223] usb 2-1: Manufacturer: syz
[  108.171239][ T1223] usb 2-1: SerialNumber: syz
[  108.358712][ T6041] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.579422][ T1223] ath6kl: Failed to submit usb control message: -71
[  108.579483][ T1223] ath6kl: unable to send the bmi data to the device: -71
[  108.579506][ T1223] ath6kl: Unable to send get target info: -71
[  108.605039][ T1223] ath6kl: Failed to init ath6kl core: -71
[  108.617442][ T1223] ath6kl_usb 2-1:201.249: probe with driver ath6kl_usb failed with error -71
[  108.644129][ T1223] usb 2-1: USB disconnect, device number 3
[  108.737134][ T5808] usb 4-1: USB disconnect, device number 2
[  108.960569][ T6066] process 'syz.4.59' launched './file0' with NULL argv: empty string added
[  109.055676][ T6068] FAULT_INJECTION: forcing a failure.
[  109.055676][ T6068] name failslab, interval 1, probability 0, space 0, times 0
[  109.055708][ T6068] CPU: 1 UID: 0 PID: 6068 Comm: syz.2.60 Not tainted syzkaller #0 PREEMPT(full) 
[  109.055731][ T6068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  109.055744][ T6068] Call Trace:
[  109.055752][ T6068]  <TASK>
[  109.055761][ T6068]  dump_stack_lvl+0xe8/0x150
[  109.055789][ T6068]  should_fail_ex+0x3eb/0x540
[  109.055814][ T6068]  ? __pfx_sock_alloc_inode+0x10/0x10
[  109.055835][ T6068]  should_failslab+0xa8/0x100
[  109.055857][ T6068]  ? __pfx_sock_alloc_inode+0x10/0x10
[  109.055876][ T6068]  kmem_cache_alloc_lru_noprof+0xa2/0x5f0
[  109.055900][ T6068]  ? sock_alloc_inode+0x2c/0x1a0
[  109.055918][ T6068]  ? sock_alloc_inode+0x2c/0x1a0
[  109.055943][ T6068]  ? __pfx_sock_alloc_inode+0x10/0x10
[  109.055961][ T6068]  sock_alloc_inode+0x2c/0x1a0
[  109.055982][ T6068]  ? __pfx_sock_alloc_inode+0x10/0x10
[  109.056001][ T6068]  alloc_inode+0x6a/0x1b0
[  109.056023][ T6068]  __sock_create+0x127/0xac0
[  109.056053][ T6068]  __sys_socket+0xd6/0x1b0
[  109.056078][ T6068]  __x64_sys_socket+0x7a/0x90
[  109.056100][ T6068]  do_syscall_64+0x166/0x520
[  109.056120][ T6068]  ? trace_irq_disable+0x3b/0x140
[  109.056139][ T6068]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  109.056162][ T6068]  ? clear_bhb_loop+0x70/0xc0
[  109.056185][ T6068]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  109.056207][ T6068] RIP: 0033:0x7f451339e1d9
[  109.056228][ T6068] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  109.056246][ T6068] RSP: 002b:00007f4514274028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  109.056268][ T6068] RAX: ffffffffffffffda RBX: 00007f4513625fa0 RCX: 00007f451339e1d9
[  109.056284][ T6068] RDX: 000000000000000c RSI: 0000000000000003 RDI: 0000000000000010
[  109.056296][ T6068] RBP: 00007f4513435888 R08: 0000000000000000 R09: 0000000000000000
[  109.056311][ T6068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  109.056323][ T6068] R13: 00007f4513626038 R14: 00007f4513625fa0 R15: 00007ffd26cc2a78
[  109.056358][ T6068]  </TASK>
[  109.888766][ T6081] loop3: detected capacity change from 0 to 4096
[  109.928412][ T6081] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  110.050154][ T6081] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  110.404884][ T5607] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.571379][ T6094] FAULT_INJECTION: forcing a failure.
[  110.571379][ T6094] name failslab, interval 1, probability 0, space 0, times 0
[  110.571414][ T6094] CPU: 0 UID: 0 PID: 6094 Comm: syz.4.68 Not tainted syzkaller #0 PREEMPT(full) 
[  110.571439][ T6094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  110.571453][ T6094] Call Trace:
[  110.571462][ T6094]  <TASK>
[  110.571479][ T6094]  dump_stack_lvl+0xe8/0x150
[  110.571512][ T6094]  should_fail_ex+0x3eb/0x540
[  110.571541][ T6094]  should_failslab+0xa8/0x100
[  110.571564][ T6094]  ? __proc_create+0x55d/0xad0
[  110.571586][ T6094]  kmem_cache_alloc_noprof+0x9c/0x600
[  110.571611][ T6094]  ? __proc_create+0x55d/0xad0
[  110.571640][ T6094]  __proc_create+0x55d/0xad0
[  110.571670][ T6094]  ? __pfx___proc_create+0x10/0x10
[  110.571701][ T6094]  ? _raw_write_unlock+0x28/0x50
[  110.571722][ T6094]  ? proc_register+0x5d5/0x7f0
[  110.571747][ T6094]  proc_create_data+0xa5/0x190
[  110.571774][ T6094]  cache_register_net+0x45e/0x4c0
[  110.571801][ T6094]  nfsd_idmap_init+0x96/0x1f0
[  110.571822][ T6094]  ? nfsd_net_init+0x5b/0x520
[  110.571847][ T6094]  nfsd_net_init+0x71/0x520
[  110.571871][ T6094]  ops_init+0x35d/0x5d0
[  110.571905][ T6094]  setup_net+0x118/0x350
[  110.571929][ T6094]  ? __pfx_setup_net+0x10/0x10
[  110.571951][ T6094]  ? down_read_killable+0x1b6/0x3b0
[  110.571974][ T6094]  ? __ns_common_init+0x38a/0x590
[  110.572001][ T6094]  copy_net_ns+0x536/0x770
[  110.572028][ T6094]  create_new_namespaces+0x3f0/0x6b0
[  110.572054][ T6094]  ? security_capable+0x7e/0x2c0
[  110.572085][ T6094]  unshare_nsproxy_namespaces+0x144/0x190
[  110.572112][ T6094]  ksys_unshare+0x532/0x890
[  110.572138][ T6094]  ? __pfx_ksys_unshare+0x10/0x10
[  110.572162][ T6094]  ? rcu_is_watching+0x16/0xb0
[  110.572197][ T6094]  __x64_sys_unshare+0x38/0x50
[  110.572218][ T6094]  do_syscall_64+0x166/0x520
[  110.572238][ T6094]  ? trace_irq_disable+0x3b/0x140
[  110.572258][ T6094]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.572281][ T6094]  ? clear_bhb_loop+0x70/0xc0
[  110.572307][ T6094]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.572329][ T6094] RIP: 0033:0x7fdd5af9e1d9
[  110.572351][ T6094] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  110.572370][ T6094] RSP: 002b:00007fdd5bd93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  110.572395][ T6094] RAX: ffffffffffffffda RBX: 00007fdd5b225fa0 RCX: 00007fdd5af9e1d9
[  110.572412][ T6094] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
[  110.572425][ T6094] RBP: 00007fdd5b035888 R08: 0000000000000000 R09: 0000000000000000
[  110.572439][ T6094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  110.572453][ T6094] R13: 00007fdd5b226038 R14: 00007fdd5b225fa0 R15: 00007fff7b8453e8
[  110.572495][ T6094]  </TASK>
[  112.798325][ T6122] FAULT_INJECTION: forcing a failure.
[  112.798325][ T6122] name failslab, interval 1, probability 0, space 0, times 0
[  112.798365][ T6122] CPU: 1 UID: 0 PID: 6122 Comm: syz.1.80 Not tainted syzkaller #0 PREEMPT(full) 
[  112.798393][ T6122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  112.798408][ T6122] Call Trace:
[  112.798417][ T6122]  <TASK>
[  112.798439][ T6122]  dump_stack_lvl+0xe8/0x150
[  112.798471][ T6122]  should_fail_ex+0x3eb/0x540
[  112.798500][ T6122]  ? alloc_slab_obj_exts+0x5c/0x180
[  112.798524][ T6122]  should_failslab+0xa8/0x100
[  112.798550][ T6122]  ? alloc_slab_obj_exts+0x5c/0x180
[  112.798571][ T6122]  __kmalloc_flags_noprof+0x123/0x790
[  112.798599][ T6122]  ? alloc_slab_obj_exts+0x5c/0x180
[  112.798629][ T6122]  alloc_slab_obj_exts+0x5c/0x180
[  112.798655][ T6122]  __memcg_slab_post_alloc_hook+0x5f0/0xdb0
[  112.798704][ T6122]  __kmalloc_cache_noprof+0x361/0x600
[  112.798728][ T6122]  ? __kmalloc_cache_noprof+0x148/0x600
[  112.798749][ T6122]  ? fuse_dentry_init+0x51/0x100
[  112.798770][ T6122]  ? fuse_dentry_init+0x51/0x100
[  112.798798][ T6122]  fuse_dentry_init+0x51/0x100
[  112.798823][ T6122]  __d_alloc+0x50c/0x7f0
[  112.798851][ T6122]  d_make_root+0x41/0x80
[  112.798874][ T6122]  fuse_fill_super_common+0xa6e/0x1100
[  112.798930][ T6122]  ? __pfx_fuse_fill_super_common+0x10/0x10
[  112.798978][ T6122]  fuse_fill_super+0x98/0x120
[  112.799000][ T6122]  ? __pfx_fuse_fill_super+0x10/0x10
[  112.799023][ T6122]  get_tree_nodev+0xbb/0x150
[  112.799048][ T6122]  fuse_get_tree+0x29d/0x3b0
[  112.799075][ T6122]  vfs_get_tree+0x92/0x2a0
[  112.799099][ T6122]  do_new_mount+0x325/0xb00
[  112.799129][ T6122]  ? __pfx_do_new_mount+0x10/0x10
[  112.799154][ T6122]  ? ns_capable+0x84/0xe0
[  112.799179][ T6122]  ? path_mount+0x647/0x1050
[  112.799216][ T6122]  ? user_path_at+0xd4/0x160
[  112.799242][ T6122]  __se_sys_mount+0x31d/0x420
[  112.799272][ T6122]  ? __pfx___se_sys_mount+0x10/0x10
[  112.799303][ T6122]  ? __x64_sys_mount+0x20/0xc0
[  112.799329][ T6122]  do_syscall_64+0x166/0x520
[  112.799357][ T6122]  ? trace_irq_disable+0x3b/0x140
[  112.799378][ T6122]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  112.799402][ T6122]  ? clear_bhb_loop+0x70/0xc0
[  112.799428][ T6122]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  112.799452][ T6122] RIP: 0033:0x7f2c49b9e1d9
[  112.799475][ T6122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  112.799495][ T6122] RSP: 002b:00007f2c47df6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  112.799521][ T6122] RAX: ffffffffffffffda RBX: 00007f2c49e25fa0 RCX: 00007f2c49b9e1d9
[  112.799539][ T6122] RDX: 0000200000002100 RSI: 00002000000001c0 RDI: 0000000000000000
[  112.799554][ T6122] RBP: 00007f2c49c35888 R08: 00002000000002c0 R09: 0000000000000000
[  112.799569][ T6122] R10: 0000000000000080 R11: 0000000000000246 R12: 0000000000000000
[  112.799583][ T6122] R13: 00007f2c49e26038 R14: 00007f2c49e25fa0 R15: 00007ffc08d0e478
[  112.799621][ T6122]  </TASK>
[  114.141707][ T1223] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  114.301684][ T1223] usb 4-1: Using ep0 maxpacket: 8
[  114.304472][ T1223] usb 4-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  114.307397][ T1223] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  114.307424][ T1223] usb 4-1: config 0 has no interface number 0
[  114.307466][ T1223] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  114.307510][ T1223] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  114.376386][ T1223] usb 4-1: config 0 descriptor??
[  114.401818][ T1223] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  114.637644][ T6152] netlink: 156 bytes leftover after parsing attributes in process `syz.2.91'.
[  114.663887][ T6152] netlink: 'syz.2.91': attribute type 3 has an invalid length.
[  114.663911][ T6152] netlink: 12 bytes leftover after parsing attributes in process `syz.2.91'.
[  115.823616][ T5712] usb 4-1: USB disconnect, device number 3
[  116.968906][ T6174] loop3: detected capacity change from 0 to 32768
[  117.008505][ T6174] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  117.088952][ T6174] XFS (loop3): Ending clean mount
[  117.153445][   T33] audit: type=1800 audit(2000000012.720:5): pid=6174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.98" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=4425 res=0 errno=-22
[  117.434289][ T5607] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  118.404382][ T6220] bridge_slave_0: left allmulticast mode
[  118.404411][ T6220] bridge_slave_0: left promiscuous mode
[  118.406717][ T6220] bridge0: port 1(bridge_slave_0) entered disabled state
[  121.625990][ T6244] kvm: pic: non byte write
[  121.626322][ T6244] kvm: pic: non byte write
[  121.626842][ T6244] kvm: pic: non byte write
[  121.704164][ T6220] bridge_slave_1: left allmulticast mode
[  121.704194][ T6220] bridge_slave_1: left promiscuous mode
[  121.706132][ T6220] bridge0: port 2(bridge_slave_1) entered disabled state
[  121.903568][ T6220] bond0: (slave bond_slave_0): Releasing backup interface
[  122.055480][ T6220] bond0: (slave bond_slave_1): Releasing backup interface
[  122.060791][ T6250] FAULT_INJECTION: forcing a failure.
[  122.060791][ T6250] name failslab, interval 1, probability 0, space 0, times 0
[  122.060827][ T6250] CPU: 0 UID: 0 PID: 6250 Comm: syz.1.123 Not tainted syzkaller #0 PREEMPT(full) 
[  122.060854][ T6250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  122.060869][ T6250] Call Trace:
[  122.060878][ T6250]  <TASK>
[  122.060888][ T6250]  dump_stack_lvl+0xe8/0x150
[  122.060921][ T6250]  should_fail_ex+0x3eb/0x540
[  122.060951][ T6250]  should_failslab+0xa8/0x100
[  122.060978][ T6250]  __kmalloc_cache_noprof+0x9e/0x600
[  122.061002][ T6250]  ? apply_subsystem_event_filter+0x1df/0x1780
[  122.061031][ T6250]  ? apply_subsystem_event_filter+0x1df/0x1780
[  122.061057][ T6250]  ? create_filter_start+0x15c/0x1e0
[  122.061084][ T6250]  apply_subsystem_event_filter+0x1df/0x1780
[  122.061123][ T6250]  ? __might_fault+0xaf/0x130
[  122.061159][ T6250]  subsystem_filter_write+0x96/0xf0
[  122.061184][ T6250]  ? __pfx_subsystem_filter_write+0x10/0x10
[  122.061207][ T6250]  vfs_write+0x296/0xba0
[  122.061239][ T6250]  ? __pfx_vfs_write+0x10/0x10
[  122.061264][ T6250]  ? __fget_files+0x2a/0x420
[  122.061283][ T6250]  ? __fget_files+0x3a2/0x420
[  122.061311][ T6250]  ? __fget_files+0x2a/0x420
[  122.061336][ T6250]  ? fdget+0x1ac/0x250
[  122.061365][ T6250]  ksys_write+0x150/0x270
[  122.061389][ T6250]  ? __pfx_ksys_write+0x10/0x10
[  122.061425][ T6250]  do_syscall_64+0x166/0x520
[  122.061446][ T6250]  ? trace_irq_disable+0x3b/0x140
[  122.061466][ T6250]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  122.061489][ T6250]  ? clear_bhb_loop+0x70/0xc0
[  122.061514][ T6250]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  122.061547][ T6250] RIP: 0033:0x7f2c49b9e1d9
[  122.061569][ T6250] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  122.061588][ T6250] RSP: 002b:00007f2c47df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  122.061612][ T6250] RAX: ffffffffffffffda RBX: 00007f2c49e25fa0 RCX: 00007f2c49b9e1d9
[  122.061629][ T6250] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[  122.061641][ T6250] RBP: 00007f2c49c35888 R08: 0000000000000000 R09: 0000000000000000
[  122.061654][ T6250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  122.061667][ T6250] R13: 00007f2c49e26038 R14: 00007f2c49e25fa0 R15: 00007ffc08d0e478
[  122.061711][ T6250]  </TASK>
[  122.370608][ T6220] team0: Port device team_slave_0 removed
[  122.420407][ T6220] team0: Port device team_slave_1 removed
[  122.443028][ T6220] net_ratelimit: 733 callbacks suppressed
[  122.443055][ T6220] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  122.499146][ T6252] vxlan0: entered allmulticast mode
[  122.573857][   T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  122.573923][   T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  122.573961][   T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  122.573998][   T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  122.860948][ T6276] syzkaller0: entered promiscuous mode
[  122.860975][ T6276] syzkaller0: entered allmulticast mode
[  122.880973][ T6276] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487
[  123.471420][ T5673] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  123.586920][ T6300] loop0: detected capacity change from 0 to 4096
[  123.621913][ T6300] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  123.622392][ T5673] usb 2-1: Using ep0 maxpacket: 16
[  123.624007][ T5673] usb 2-1: New USB device found: idVendor=046d, idProduct=c22d, bcdDevice=0.00
[  123.625351][ T5673] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 97, changing to 10
[  123.625385][ T5673] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  123.625429][ T5673] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  123.720345][ T5673] usb 2-1: config 0 descriptor??
[  123.917236][ T6294] loop2: detected capacity change from 0 to 32768
[  123.978578][ T6294] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  124.073681][ T6294] XFS (loop2): Ending clean mount
[  124.114316][ T5609] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  124.116575][   T33] audit: type=1800 audit(2000000019.680:6): pid=6294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.136" name="file1" dev="loop2" ino=4422 res=0 errno=-22
[  124.245336][ T6315] ip_tables: iptables: counters copy to user failed while replacing table
[  124.263267][   T33] audit: type=1800 audit(2000000019.830:7): pid=6314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.136" name="file1" dev="loop2" ino=4422 res=0 errno=-22
[  124.298846][ T5673] lg-g15 0003:046D:C22D.0002: unknown main item tag 0x7
[  124.298889][ T5673] lg-g15 0003:046D:C22D.0002: unknown main item tag 0x0
[  124.298967][ T5673] lg-g15 0003:046D:C22D.0002: unknown main item tag 0x1
[  124.299204][ T5673] lg-g15 0003:046D:C22D.0002: reserved main item tag 0xd
[  124.436813][ T6320] Set syz1 is full, maxelem 256 reached
[  124.448059][ T6320] Set syz1 is full, maxelem 256 reached
[  124.463411][ T6289] loop1: detected capacity change from 0 to 1024
[  124.469239][ T6289] hfsplus: Unknown parameter ' !)'
[  124.520109][ T5673] lg-g15 0003:046D:C22D.0002: hidraw0: USB HID vc3.3b Device [HID 046d:c22d] on usb-dummy_hcd.1-1/input0
[  124.653030][ T5610] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  124.701199][ T6323] netlink: 4 bytes leftover after parsing attributes in process `syz.3.142'.
[  125.674465][ T5808] usb 2-1: USB disconnect, device number 4
[  126.024421][ T6353] netlink: 24 bytes leftover after parsing attributes in process `syz.0.154'.
[  126.105333][ T6353] sch_tbf: burst 88 is lower than device veth3 mtu (1514) !
[  126.111605][ T6357] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.153'.
[  126.173517][ T6351] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.153'.
[  126.173947][ T6354] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.153'.
[  127.785156][ T6411] bridge0: port 2(bridge_slave_1) entered disabled state
[  129.300381][ T6440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  129.385309][   T33] audit: type=1326 audit(2000000024.950:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6446 comm="syz.2.175" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451339e1d9 code=0x7ffc0000
[  129.385658][   T33] audit: type=1326 audit(2000000024.950:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6446 comm="syz.2.175" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451339e1d9 code=0x7ffc0000
[  129.386345][   T33] audit: type=1326 audit(2000000024.950:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6446 comm="syz.2.175" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7f451339e1d9 code=0x7ffc0000
[  129.386659][   T33] audit: type=1326 audit(2000000024.950:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6446 comm="syz.2.175" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451339e1d9 code=0x7ffc0000
[  129.387136][   T33] audit: type=1326 audit(2000000024.950:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6446 comm="syz.2.175" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f451335ea0e code=0x7ffc0000
[  129.387717][   T33] audit: type=1326 audit(2000000024.950:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6446 comm="syz.2.175" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f451335ea0e code=0x7ffc0000
[  129.388939][   T33] audit: type=1326 audit(2000000024.950:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6446 comm="syz.2.175" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451339e1d9 code=0x7ffc0000
[  129.389185][   T33] audit: type=1326 audit(2000000024.950:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6446 comm="syz.2.175" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451339e1d9 code=0x7ffc0000
[  129.389889][   T33] audit: type=1326 audit(2000000024.950:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6446 comm="syz.2.175" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f451339e1d9 code=0x7ffc0000
[  129.390149][   T33] audit: type=1326 audit(2000000024.950:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6446 comm="syz.2.175" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451339e1d9 code=0x7ffc0000
[  129.641807][ T5808] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  129.792463][ T5808] usb 4-1: Using ep0 maxpacket: 32
[  129.795789][ T5808] usb 4-1: New USB device found: idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  129.806771][ T5808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  129.833244][ T5808] usb 4-1: config 0 descriptor??
[  129.926615][ T5808] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  131.431009][ T6476] FAULT_INJECTION: forcing a failure.
[  131.431009][ T6476] name failslab, interval 1, probability 0, space 0, times 0
[  131.431043][ T6476] CPU: 1 UID: 0 PID: 6476 Comm: syz.1.185 Not tainted syzkaller #0 PREEMPT(full) 
[  131.431068][ T6476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  131.431082][ T6476] Call Trace:
[  131.431091][ T6476]  <TASK>
[  131.431101][ T6476]  dump_stack_lvl+0xe8/0x150
[  131.431133][ T6476]  should_fail_ex+0x3eb/0x540
[  131.431163][ T6476]  should_failslab+0xa8/0x100
[  131.431189][ T6476]  __kmalloc_node_track_caller_noprof+0xf6/0x720
[  131.431216][ T6476]  ? nfs_get_tree+0xc28/0x1520
[  131.431237][ T6476]  ? nfs_get_tree+0xc28/0x1520
[  131.431270][ T6476]  kmemdup_nul+0x36/0xf0
[  131.431293][ T6476]  nfs_get_tree+0xc28/0x1520
[  131.431324][ T6476]  vfs_get_tree+0x92/0x2a0
[  131.431351][ T6476]  vfs_cmd_create+0xa2/0x200
[  131.431378][ T6476]  __se_sys_fsconfig+0x6b9/0x810
[  131.431407][ T6476]  ? __pfx___se_sys_fsconfig+0x10/0x10
[  131.431434][ T6476]  ? rcu_is_watching+0x16/0xb0
[  131.431464][ T6476]  ? __x64_sys_fsconfig+0x20/0xc0
[  131.431488][ T6476]  do_syscall_64+0x166/0x520
[  131.431521][ T6476]  ? trace_irq_disable+0x3b/0x140
[  131.431542][ T6476]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  131.431566][ T6476]  ? clear_bhb_loop+0x70/0xc0
[  131.431591][ T6476]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  131.431614][ T6476] RIP: 0033:0x7f2c49b9e1d9
[  131.431636][ T6476] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  131.431656][ T6476] RSP: 002b:00007f2c47df6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af
[  131.431681][ T6476] RAX: ffffffffffffffda RBX: 00007f2c49e25fa0 RCX: 00007f2c49b9e1d9
[  131.431698][ T6476] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003
[  131.431711][ T6476] RBP: 00007f2c49c35888 R08: 0000000000000000 R09: 0000000000000000
[  131.431725][ T6476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  131.431739][ T6476] R13: 00007f2c49e26038 R14: 00007f2c49e25fa0 R15: 00007ffc08d0e478
[  131.431776][ T6476]  </TASK>
[  131.514678][ T5808] gspca_vc032x: reg_w err -71
[  131.514953][ T5808] gspca_vc032x: I2c Bus Busy Wait 00
[  131.514979][ T5808] gspca_vc032x: I2c Bus Busy Wait 00
[  131.515001][ T5808] gspca_vc032x: I2c Bus Busy Wait 00
[  131.515024][ T5808] gspca_vc032x: I2c Bus Busy Wait 00
[  131.515053][ T5808] gspca_vc032x: I2c Bus Busy Wait 00
[  131.515076][ T5808] gspca_vc032x: I2c Bus Busy Wait 00
[  131.515099][ T5808] gspca_vc032x: I2c Bus Busy Wait 00
[  131.515120][ T5808] gspca_vc032x: I2c Bus Busy Wait 00
[  131.515143][ T5808] gspca_vc032x: I2c Bus Busy Wait 00
[  131.515171][ T5808] gspca_vc032x: I2c Bus Busy Wait 00
[  131.515194][ T5808] gspca_vc032x: I2c Bus Busy Wait 00
[  131.515216][ T5808] gspca_vc032x: I2c Bus Busy Wait 00
[  131.515238][ T5808] gspca_vc032x: I2c Bus Busy Wait 00
[  131.515259][ T5808] gspca_vc032x: I2c Bus Busy Wait 00
[  131.515289][ T5808] gspca_vc032x: I2c Bus Busy Wait 00
[  131.515311][ T5808] gspca_vc032x: I2c Bus Busy Wait 00
[  131.533774][ T5808] gspca_vc032x: I2c Bus Busy Wait 00
[  131.533840][ T5808] gspca_vc032x: I2c Bus Busy Wait 00
[  131.533869][ T5808] gspca_vc032x: Unknown sensor...
[  131.534105][ T5808] vc032x 4-1:0.0: probe with driver vc032x failed with error -22
[  131.661784][ T5808] usb 4-1: USB disconnect, device number 4
[  131.929225][ T6485] overlayfs: invalid redirect ((null))
[  132.293401][ T6497] netlink: 12 bytes leftover after parsing attributes in process `syz.2.191'.
[  132.406969][ T6497] netlink: 44 bytes leftover after parsing attributes in process `syz.2.191'.
[  132.712633][ T6513] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  132.762637][ T6514] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer.
[  133.005674][ T6510] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  133.197871][ T1319] ieee802154 phy0 wpan0: encryption failed: -22
[  133.198023][ T1319] ieee802154 phy1 wpan1: encryption failed: -22
[  133.658687][ T6517] loop3: detected capacity change from 0 to 8192
[  135.712839][ T6550] loop4: detected capacity change from 0 to 16
[  135.738066][ T6550] erofs (device loop4): mounted with root inode @ nid 36.
[  135.770438][   T33] kauditd_printk_skb: 6 callbacks suppressed
[  135.770460][   T33] audit: type=1800 audit(2000000031.330:24): pid=6550 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.206" name="file1" dev="loop4" ino=86 res=0 errno=-22
[  135.802822][ T6547] netlink: 4 bytes leftover after parsing attributes in process `syz.0.207'.
[  135.926284][ T6547] netlink: 4 bytes leftover after parsing attributes in process `syz.0.207'.
[  135.930304][ T6547] Zero length message leads to an empty skb
[  135.935400][   T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  135.935547][   T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  135.935645][   T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  135.935729][   T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  136.316668][ T6559] loop2: detected capacity change from 0 to 64
[  136.580838][ T6561] vxlan0: entered allmulticast mode
[  137.246393][ T6579] netlink: 8 bytes leftover after parsing attributes in process `syz.3.218'.
[  137.264761][ T6580] FAULT_INJECTION: forcing a failure.
[  137.264761][ T6580] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  137.264797][ T6580] CPU: 1 UID: 0 PID: 6580 Comm: syz.1.215 Not tainted syzkaller #0 PREEMPT(full) 
[  137.264823][ T6580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  137.264837][ T6580] Call Trace:
[  137.264845][ T6580]  <TASK>
[  137.264855][ T6580]  dump_stack_lvl+0xe8/0x150
[  137.264885][ T6580]  should_fail_ex+0x3eb/0x540
[  137.264916][ T6580]  _copy_from_user+0x2d/0xb0
[  137.264941][ T6580]  ___sys_recvmsg+0x173/0x5a0
[  137.264972][ T6580]  ? __pfx____sys_recvmsg+0x10/0x10
[  137.265000][ T6580]  ? lock_acquire+0x115/0x350
[  137.265066][ T6580]  do_recvmmsg+0x31a/0x7f0
[  137.265099][ T6580]  ? __pfx_do_recvmmsg+0x10/0x10
[  137.265122][ T6580]  ? do_futex+0x3e7/0x4e0
[  137.265171][ T6580]  __x64_sys_recvmmsg+0x198/0x250
[  137.265197][ T6580]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  137.265234][ T6580]  do_syscall_64+0x166/0x520
[  137.265255][ T6580]  ? trace_irq_disable+0x3b/0x140
[  137.265275][ T6580]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  137.265298][ T6580]  ? clear_bhb_loop+0x70/0xc0
[  137.265324][ T6580]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  137.265346][ T6580] RIP: 0033:0x7f2c49b9e1d9
[  137.265367][ T6580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  137.265386][ T6580] RSP: 002b:00007f2c47df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  137.265410][ T6580] RAX: ffffffffffffffda RBX: 00007f2c49e25fa0 RCX: 00007f2c49b9e1d9
[  137.265427][ T6580] RDX: 0000000000000700 RSI: 0000200000000600 RDI: 0000000000000005
[  137.265441][ T6580] RBP: 00007f2c49c35888 R08: 0000000000000000 R09: 0000000000000000
[  137.265455][ T6580] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000
[  137.265469][ T6580] R13: 00007f2c49e26038 R14: 00007f2c49e25fa0 R15: 00007ffc08d0e478
[  137.265505][ T6580]  </TASK>
[  137.267728][ T6579] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  137.411894][ T6581] netlink: 8 bytes leftover after parsing attributes in process `syz.3.218'.
[  137.527772][ T6579] netdevsim netdevsim3 netdevsim0: left promiscuous mode
[  137.632629][ T6581] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  137.648600][ T6581] netdevsim netdevsim3 netdevsim0: left promiscuous mode
[  137.662591][ T6585] loop4: detected capacity change from 0 to 2048
[  137.702016][ T6585] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found!
[  137.744862][ T6585] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  137.849016][ T6590] loop1: detected capacity change from 0 to 512
[  137.872400][ T6590] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  137.968994][ T6590] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1159: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  138.035589][ T6590] EXT4-fs error (device loop1): ext4_validate_block_bitmap:445: comm syz.1.220: bg 0: block 248: padding at end of block bitmap is not set
[  138.035631][ T6590] loop1: lost filesystem error report for type 5 error -117
[  138.041408][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  138.041436][    C0] EXT4-fs (loop1): last error at time 2000000033: ext4_validate_block_bitmap:445
[  138.161805][ T6590] Quota error (device loop1): write_blk: dquota write failed
[  138.161910][ T6590] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota
[  138.161977][ T6590] EXT4-fs error (device loop1): ext4_acquire_dquot:7111: comm syz.1.220: Failed to acquire dquot type 1
[  138.162001][ T6590] loop1: lost filesystem error report for type 5 error -28
[  138.312928][ T6590] EXT4-fs (loop1): 1 truncate cleaned up
[  138.315490][ T6590] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[  138.391467][ T6596] loop0: detected capacity change from 0 to 40427
[  138.393775][ T6596] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  138.393802][ T6596] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  138.463885][ T5608] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[  138.512662][   T45] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-5
[  138.512810][   T45] EXT4-fs error (device loop1): ext4_release_dquot:7147: comm kworker/u8:2: Failed to release dquot type 1
[  138.512834][   T45] loop1: lost filesystem error report for type 5 error -117
[  138.538265][ T6596] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  138.561514][ T6596] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  138.561599][ T6596] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  138.823433][ T6604] FAULT_INJECTION: forcing a failure.
[  138.823433][ T6604] name failslab, interval 1, probability 0, space 0, times 0
[  138.823471][ T6604] CPU: 1 UID: 0 PID: 6604 Comm: syz.4.224 Not tainted syzkaller #0 PREEMPT(full) 
[  138.823499][ T6604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  138.823513][ T6604] Call Trace:
[  138.823523][ T6604]  <TASK>
[  138.823534][ T6604]  dump_stack_lvl+0xe8/0x150
[  138.823568][ T6604]  should_fail_ex+0x3eb/0x540
[  138.823599][ T6604]  should_failslab+0xa8/0x100
[  138.823626][ T6604]  __kmalloc_cache_noprof+0x9e/0x600
[  138.823651][ T6604]  ? __kmalloc_cache_noprof+0x148/0x600
[  138.823671][ T6604]  ? find_css_set+0xc79/0x1e00
[  138.823692][ T6604]  ? find_css_set+0xc79/0x1e00
[  138.823722][ T6604]  find_css_set+0xc79/0x1e00
[  138.823743][ T6604]  ? check_noncircular+0xdb/0x150
[  138.823783][ T6604]  ? __pfx_find_css_set+0x10/0x10
[  138.823841][ T6604]  cgroup_migrate_prepare_dst+0x118/0x620
[  138.823877][ T6604]  cgroup_attach_task+0x480/0x870
[  138.823908][ T6604]  ? __pfx_cgroup_attach_task+0x10/0x10
[  138.823946][ T6604]  ? cgroup_attach_permissions+0x4ec/0x9f0
[  138.823992][ T6604]  __cgroup_procs_write+0x28c/0x2f0
[  138.824028][ T6604]  cgroup_procs_write+0x27/0x50
[  138.824051][ T6604]  ? __pfx_cgroup_procs_write+0x10/0x10
[  138.824072][ T6604]  cgroup_file_write+0x331/0x8f0
[  138.824103][ T6604]  ? __pfx_cgroup_file_write+0x10/0x10
[  138.824128][ T6604]  ? __kmalloc_noprof+0x387/0x710
[  138.824164][ T6604]  ? __pfx_cgroup_file_write+0x10/0x10
[  138.824185][ T6604]  kernfs_fop_write_iter+0x3a4/0x540
[  138.824216][ T6604]  vfs_write+0x612/0xba0
[  138.824250][ T6604]  ? __pfx_vfs_write+0x10/0x10
[  138.824277][ T6604]  ? __fget_files+0x3a2/0x420
[  138.824298][ T6604]  ? __fget_files+0x2a/0x420
[  138.824325][ T6604]  ? fdget+0x1ac/0x250
[  138.824356][ T6604]  ksys_write+0x150/0x270
[  138.824382][ T6604]  ? __pfx_ksys_write+0x10/0x10
[  138.824419][ T6604]  do_syscall_64+0x166/0x520
[  138.824441][ T6604]  ? trace_irq_disable+0x3b/0x140
[  138.824461][ T6604]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  138.824487][ T6604]  ? clear_bhb_loop+0x70/0xc0
[  138.824513][ T6604]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  138.824537][ T6604] RIP: 0033:0x7fdd5af9e1d9
[  138.824560][ T6604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  138.824579][ T6604] RSP: 002b:00007fdd5bd93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  138.824604][ T6604] RAX: ffffffffffffffda RBX: 00007fdd5b225fa0 RCX: 00007fdd5af9e1d9
[  138.824624][ T6604] RDX: 0000000000000015 RSI: 0000200000000640 RDI: 0000000000000004
[  138.824639][ T6604] RBP: 00007fdd5b035888 R08: 0000000000000000 R09: 0000000000000000
[  138.824654][ T6604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  138.824668][ T6604] R13: 00007fdd5b226038 R14: 00007fdd5b225fa0 R15: 00007fff7b8453e8
[  138.824708][ T6604]  </TASK>
[  139.262086][ T6596] syz.0.223: attempt to access beyond end of device
[  139.262086][ T6596] loop0: rw=2049, sector=45096, nr_sectors = 4560 limit=40427
[  139.289791][ T6596] syz.0.223: attempt to access beyond end of device
[  139.289791][ T6596] loop0: rw=2049, sector=49656, nr_sectors = 2976 limit=40427
[  139.296891][ T6596] syz.0.223: attempt to access beyond end of device
[  139.296891][ T6596] loop0: rw=2049, sector=52632, nr_sectors = 616 limit=40427
[  139.298462][ T6596] syz.0.223: attempt to access beyond end of device
[  139.298462][ T6596] loop0: rw=2049, sector=45056, nr_sectors = 8 limit=40427
[  139.326794][ T6596] syz.0.223: attempt to access beyond end of device
[  139.326794][ T6596] loop0: rw=2049, sector=57344, nr_sectors = 2064 limit=40427
[  139.356310][ T6596] syz.0.223: attempt to access beyond end of device
[  139.356310][ T6596] loop0: rw=2049, sector=59408, nr_sectors = 2048 limit=40427
[  139.378453][ T6596] syz.0.223: attempt to access beyond end of device
[  139.378453][ T6596] loop0: rw=2049, sector=61456, nr_sectors = 2048 limit=40427
[  139.399207][ T6596] syz.0.223: attempt to access beyond end of device
[  139.399207][ T6596] loop0: rw=2049, sector=63504, nr_sectors = 2048 limit=40427
[  139.421139][ T6596] syz.0.223: attempt to access beyond end of device
[  139.421139][ T6596] loop0: rw=2049, sector=65552, nr_sectors = 2056 limit=40427
[  139.444799][ T6596] syz.0.223: attempt to access beyond end of device
[  139.444799][ T6596] loop0: rw=2049, sector=67608, nr_sectors = 2072 limit=40427
[  139.621434][ T6609] loop3: detected capacity change from 0 to 512
[  139.630489][ T6609] EXT4-fs (loop3): Test dummy encryption mode enabled
[  139.708705][ T6609] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e064e0ad, mo2=0002]
[  139.713888][ T6609] System zones: 1-12
[  139.765958][ T6609] EXT4-fs (loop3): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  139.772879][ T6607] loop1: detected capacity change from 0 to 4096
[  139.855178][ T6607] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  139.861260][ T6609] EXT4-fs error (device loop3): htree_dirblock_to_tree:1051: inode #2: comm syz.3.227: Directory hole found for htree leaf block 0
[  139.901462][ T6609] EXT4-fs (loop3): Remounting filesystem read-only
[  140.062628][ T5607] EXT4-fs (loop3): unmounting filesystem 00000005-0000-0000-0000-000000000000.
[  140.614883][ T5608] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  140.626602][ T5609] CPU: 1 UID: 0 PID: 5609 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  140.626632][ T5609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  140.626645][ T5609] Call Trace:
[  140.626654][ T5609]  <TASK>
[  140.626663][ T5609]  dump_stack_lvl+0xe8/0x150
[  140.626695][ T5609]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  140.626723][ T5609]  ? __submit_merged_bio+0x258/0x6a0
[  140.626744][ T5609]  f2fs_cache_write_end_io+0x2a5/0x6e0
[  140.626774][ T5609]  ? bio_endio+0x984/0xac0
[  140.626800][ T5609]  __submit_merged_bio+0x258/0x6a0
[  140.626823][ T5609]  ? rcu_is_watching+0x16/0xb0
[  140.626851][ T5609]  f2fs_submit_merged_write+0x2cc/0x610
[  140.626883][ T5609]  ? __pfx_f2fs_submit_merged_write+0x10/0x10
[  140.626920][ T5609]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  140.626955][ T5609]  ? f2fs_cache_gang_lookup_tag+0x1a5/0x1c0
[  140.626986][ T5609]  f2fs_writeback_node_caches+0xf85/0x1120
[  140.627032][ T5609]  ? __pfx_f2fs_writeback_node_caches+0x10/0x10
[  140.627086][ T5609]  ? f2fs_write_checkpoint+0xe1e/0x24d0
[  140.627113][ T5609]  ? up_write+0x19d/0x4a0
[  140.627140][ T5609]  f2fs_write_checkpoint+0xe51/0x24d0
[  140.627197][ T5609]  kill_f2fs_super+0x2dc/0x700
[  140.627225][ T5609]  ? rcu_do_enqueue+0x616/0x870
[  140.627245][ T5609]  ? lockdep_hardirqs_on+0x7b/0x110
[  140.627267][ T5609]  ? __pfx_kill_f2fs_super+0x10/0x10
[  140.627311][ T5609]  ? __pfx_call_rcu+0x10/0x10
[  140.627338][ T5609]  ? shrinker_free+0x2a7/0x3b0
[  140.627363][ T5609]  deactivate_locked_super+0xbe/0x110
[  140.627389][ T5609]  cleanup_mnt+0x204/0x2a0
[  140.627416][ T5609]  task_work_run+0x1d9/0x260
[  140.627442][ T5609]  ? __pfx_task_work_run+0x10/0x10
[  140.627474][ T5609]  exit_to_user_mode_loop+0x204/0x770
[  140.627496][ T5609]  ? rcu_is_watching+0x16/0xb0
[  140.627521][ T5609]  do_syscall_64+0x328/0x520
[  140.627541][ T5609]  ? trace_irq_disable+0x3b/0x140
[  140.627560][ T5609]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  140.627584][ T5609]  ? clear_bhb_loop+0x70/0xc0
[  140.627609][ T5609]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  140.627632][ T5609] RIP: 0033:0x7f705299f417
[  140.627655][ T5609] Code: a2 c7 05 dc 62 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  140.627672][ T5609] RSP: 002b:00007ffcdf7ca048 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  140.627695][ T5609] RAX: 0000000000000000 RBX: 00007f7052a34ccb RCX: 00007f705299f417
[  140.627710][ T5609] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcdf7ca100
[  140.627723][ T5609] RBP: 00007ffcdf7ca100 R08: 00007ffcdf7cb100 R09: 00000000ffffffff
[  140.627738][ T5609] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcdf7cb190
[  140.627751][ T5609] R13: 00007f7052a34ccb R14: 0000000000022443 R15: 00007ffcdf7cb1d0
[  140.627788][ T5609]  </TASK>
[  140.724314][ T5609] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  141.086084][ T6630] loop4: detected capacity change from 0 to 512
[  141.104920][ T6630] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[  141.104941][ T6630] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  141.104955][ T6630] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  141.150690][ T6630] EXT4-fs error (device loop4): ext4_init_orphan_info:619: comm syz.4.235: orphan file block 0: bad magic
[  141.150730][ T6630] loop4: lost filesystem error report for type 5 error -117
[  141.151513][    C1] EXT4-fs (loop4): initial error at time 2000000036: ext4_init_orphan_info:619
[  141.152425][    C1] EXT4-fs (loop4): last error at time 2000000036: ext4_init_orphan_info:619
[  141.197526][ T6630] EXT4-fs (loop4): Remounting filesystem read-only
[  141.199287][ T6630] EXT4-fs (loop4): mount failed
[  141.304732][ T6630] loop4: detected capacity change from 0 to 512
[  141.363273][ T6630] EXT4-fs (loop4): orphan cleanup on readonly fs
[  141.365025][ T6630] EXT4-fs error (device loop4): ext4_orphan_get:1430: comm syz.4.235: bad orphan inode 13
[  141.365061][ T6630] loop4: lost filesystem error report for type 5 error -117
[  141.373113][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  141.373142][    C0] EXT4-fs (loop4): last error at time 2000000036: ext4_orphan_get:1430
[  141.404695][ T6630] ext4_test_bit(bit=12, block=18) = 1
[  141.404748][ T6630] is_bad_inode(inode)=0
[  141.404777][ T6630] NEXT_ORPHAN(inode)=2130706432
[  141.404799][ T6630] max_ino=32
[  141.404822][ T6630] i_nlink=1
[  141.435348][ T6630] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  141.834524][ T5616] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  142.251042][ T6644] netlink: 'syz.0.233': attribute type 1 has an invalid length.
[  142.403943][ T6650] netlink: 'syz.3.239': attribute type 10 has an invalid length.
[  142.449095][ T6644] 8021q: adding VLAN 0 to HW filter on device bond1
[  142.479580][ T6648] bond1: (slave geneve2): making interface the new active one
[  142.492312][ T6648] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  142.548194][ T6650] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  142.583549][ T6650] team0: Port device wlan0 added
[  143.531808][   T32] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  143.684916][   T32] usb 4-1: Using ep0 maxpacket: 32
[  143.701549][   T32] usb 4-1: New USB device found: idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  143.705558][   T32] usb 4-1: config 0 has no interfaces?
[  143.715563][   T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  143.715643][   T32] usb 4-1: Product: syz
[  143.715686][   T32] usb 4-1: Manufacturer: syz
[  143.715734][   T32] usb 4-1: SerialNumber: syz
[  143.762435][   T32] usb 4-1: config 0 descriptor??
[  144.005827][ T5673] usb 4-1: USB disconnect, device number 5
[  144.398646][ T6684] loop1: detected capacity change from 0 to 512
[  144.414325][ T6684] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[  144.414346][ T6684] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  144.479958][ T6684] EXT4-fs (loop1): 1 truncate cleaned up
[  144.493993][ T6684] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  144.887240][ T6695] FAULT_INJECTION: forcing a failure.
[  144.887240][ T6695] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  144.887385][ T6695] CPU: 1 UID: 0 PID: 6695 Comm: syz.4.253 Not tainted syzkaller #0 PREEMPT(full) 
[  144.887415][ T6695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  144.887428][ T6695] Call Trace:
[  144.887438][ T6695]  <TASK>
[  144.887449][ T6695]  dump_stack_lvl+0xe8/0x150
[  144.887480][ T6695]  should_fail_ex+0x3eb/0x540
[  144.887505][ T6695]  strncpy_from_user+0x36/0x2c0
[  144.887529][ T6695]  strncpy_from_user_nofault+0x71/0x150
[  144.887555][ T6695]  bpf_probe_read_user_str+0x2a/0x70
[  144.887579][ T6695]  bpf_prog_f8d8fc7f1e3ff469+0x4e/0x8f
[  144.887601][ T6695]  ? ktime_get+0x45/0x220
[  144.887629][ T6695]  bpf_flow_dissect+0x22e/0x760
[  144.887658][ T6695]  bpf_prog_test_run_flow_dissector+0x3a4/0x610
[  144.887692][ T6695]  ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10
[  144.887715][ T6695]  ? __fget_files+0x2a/0x420
[  144.887740][ T6695]  ? __fget_files+0x2a/0x420
[  144.887764][ T6695]  ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10
[  144.887786][ T6695]  bpf_prog_test_run+0x2c5/0x340
[  144.887810][ T6695]  __sys_bpf+0xb1e/0xe00
[  144.887840][ T6695]  ? __pfx___sys_bpf+0x10/0x10
[  144.887863][ T6695]  ? do_futex+0x3e7/0x4e0
[  144.887910][ T6695]  ? rcu_is_watching+0x16/0xb0
[  144.887935][ T6695]  __x64_sys_bpf+0xba/0xd0
[  144.887957][ T6695]  do_syscall_64+0x166/0x520
[  144.887976][ T6695]  ? trace_irq_disable+0x3b/0x140
[  144.887993][ T6695]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.888014][ T6695]  ? clear_bhb_loop+0x70/0xc0
[  144.888044][ T6695]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.888064][ T6695] RIP: 0033:0x7fdd5af9e1d9
[  144.888083][ T6695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  144.888101][ T6695] RSP: 002b:00007fdd5bd93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  144.888123][ T6695] RAX: ffffffffffffffda RBX: 00007fdd5b225fa0 RCX: 00007fdd5af9e1d9
[  144.888139][ T6695] RDX: 000000000000004c RSI: 0000200000000640 RDI: 000000000000000a
[  144.888152][ T6695] RBP: 00007fdd5b035888 R08: 0000000000000000 R09: 0000000000000000
[  144.888165][ T6695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  144.888178][ T6695] R13: 00007fdd5b226038 R14: 00007fdd5b225fa0 R15: 00007fff7b8453e8
[  144.888212][ T6695]  </TASK>
[  145.465608][ T5608] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  145.780575][ T6702] 8021q: adding VLAN 0 to HW filter on device bond1
[  145.858689][ T6708] gretap1: entered promiscuous mode
[  145.871548][ T6708] bond1: (slave gretap1): making interface the new active one
[  145.874468][ T6708] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  146.509917][ T6722] FAULT_INJECTION: forcing a failure.
[  146.509917][ T6722] name failslab, interval 1, probability 0, space 0, times 0
[  146.509955][ T6722] CPU: 1 UID: 0 PID: 6722 Comm: syz.4.263 Not tainted syzkaller #0 PREEMPT(full) 
[  146.509980][ T6722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  146.509994][ T6722] Call Trace:
[  146.510003][ T6722]  <TASK>
[  146.510014][ T6722]  dump_stack_lvl+0xe8/0x150
[  146.510047][ T6722]  should_fail_ex+0x3eb/0x540
[  146.510075][ T6722]  should_failslab+0xa8/0x100
[  146.510099][ T6722]  ? key_alloc+0x318/0x1020
[  146.510120][ T6722]  kmem_cache_alloc_noprof+0x9c/0x600
[  146.510143][ T6722]  ? do_raw_spin_unlock+0xf5/0x200
[  146.510172][ T6722]  ? key_alloc+0x318/0x1020
[  146.510194][ T6722]  ? key_user_lookup+0x1bc/0x460
[  146.510220][ T6722]  key_alloc+0x318/0x1020
[  146.510257][ T6722]  request_key_auth_new+0x7c1/0xa00
[  146.510293][ T6722]  ? __pfx_request_key_auth_new+0x10/0x10
[  146.510333][ T6722]  request_key_and_link+0xe6b/0x1580
[  146.510355][ T6722]  ? key_task_permission+0x3b8/0x500
[  146.510387][ T6722]  ? __pfx_request_key_and_link+0x10/0x10
[  146.510420][ T6722]  ? __pfx_asymmetric_key_cmp_partial+0x10/0x10
[  146.510446][ T6722]  ? __pfx_keyring_search_iterator+0x10/0x10
[  146.510485][ T6722]  ? down_read+0x2b9/0x320
[  146.510507][ T6722]  ? _copy_from_user+0x94/0xb0
[  146.510535][ T6722]  __se_sys_request_key+0x29a/0x350
[  146.510564][ T6722]  ? __pfx___se_sys_request_key+0x10/0x10
[  146.510605][ T6722]  do_syscall_64+0x166/0x520
[  146.510626][ T6722]  ? trace_irq_disable+0x3b/0x140
[  146.510646][ T6722]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  146.510670][ T6722]  ? clear_bhb_loop+0x70/0xc0
[  146.510695][ T6722]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  146.510717][ T6722] RIP: 0033:0x7fdd5af9e1d9
[  146.510739][ T6722] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  146.510758][ T6722] RSP: 002b:00007fdd5bd93028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9
[  146.510783][ T6722] RAX: ffffffffffffffda RBX: 00007fdd5b225fa0 RCX: 00007fdd5af9e1d9
[  146.510800][ T6722] RDX: 0000200000001fee RSI: 0000200000001ffb RDI: 0000200000000040
[  146.510816][ T6722] RBP: 00007fdd5b035888 R08: 0000000000000000 R09: 0000000000000000
[  146.510830][ T6722] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000000
[  146.510845][ T6722] R13: 00007fdd5b226038 R14: 00007fdd5b225fa0 R15: 00007fff7b8453e8
[  146.510882][ T6722]  </TASK>
[  146.985471][ T6728] Illegal XDP return value 4294967294 on prog  (id 45) dev syz_tun, expect packet loss!
[  147.053341][ T6735] netlink: 12 bytes leftover after parsing attributes in process `syz.2.268'.
[  148.528985][ T1223] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  148.691375][ T1223] usb 4-1: Using ep0 maxpacket: 16
[  148.692151][ T1223] usb 4-1: New USB device found: idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  148.693315][ T1223] usb 4-1: config 0 has an invalid interface number: 34 but max is 0
[  148.693342][ T1223] usb 4-1: config 0 has no interface number 0
[  148.734836][ T1223] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  148.734874][ T1223] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  148.741075][ T1223] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  148.741104][ T1223] usb 4-1: Product: syz
[  148.741120][ T1223] usb 4-1: Manufacturer: syz
[  148.741135][ T1223] usb 4-1: SerialNumber: syz
[  148.790741][ T1223] usb 4-1: config 0 descriptor??
[  148.795030][ T6771] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  148.796991][ T6771] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  148.902120][ T6775] bridge0: port 2(bridge_slave_1) entered disabled state
[  148.902803][ T6775] bridge0: port 1(bridge_slave_0) entered disabled state
[  148.939788][ T6782] loop4: detected capacity change from 0 to 1024
[  148.949619][ T6782] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  148.949980][ T6782] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  148.976808][ T6782] JBD2: no valid journal superblock found
[  149.012348][ T6782] EXT4-fs (loop4): Could not load journal inode
[  149.040427][ T6771] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  149.040531][ T6771] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  149.250884][ T1223] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  149.574688][ T6775] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  149.607282][ T6775] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  150.331441][   T45] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  150.331483][   T45] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  150.331693][ T1041] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  150.331723][ T1041] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  150.331759][ T1041] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  150.331786][ T1041] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  150.331820][ T1041] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  150.331848][ T1041] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  150.482023][ T1223] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  150.482057][ T1223] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9
[  150.486678][ T1223] asix 4-1:0.34: probe with driver asix failed with error -71
[  150.557740][ T1223] usb 4-1: USB disconnect, device number 6
[  151.080600][ T6819] ip_tables: iptables: counters copy to user failed while replacing table
[  151.540420][ T6826] loop4: detected capacity change from 0 to 1024
[  151.600432][ T6826] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  152.150883][ T5616] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  152.420494][ T6837] loop4: detected capacity change from 0 to 1024
[  152.428533][ T6837] EXT4-fs: Ignoring removed mblk_io_submit option
[  152.476345][ T6837] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  152.788096][ T5616] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  152.988190][ T6852] warning: `syz.0.306' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  154.177060][ T6874] ip_tables: iptables: counters copy to user failed while replacing table
[  154.730588][ T6881] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  154.754515][ T6879] FAULT_INJECTION: forcing a failure.
[  154.754515][ T6879] name failslab, interval 1, probability 0, space 0, times 0
[  154.754561][ T6879] CPU: 1 UID: 0 PID: 6879 Comm: syz.4.314 Not tainted syzkaller #0 PREEMPT(full) 
[  154.754588][ T6879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  154.754602][ T6879] Call Trace:
[  154.754611][ T6879]  <TASK>
[  154.754620][ T6879]  dump_stack_lvl+0xe8/0x150
[  154.754654][ T6879]  should_fail_ex+0x3eb/0x540
[  154.754683][ T6879]  should_failslab+0xa8/0x100
[  154.754710][ T6879]  ? alloc_empty_file+0x5b/0x1d0
[  154.754733][ T6879]  kmem_cache_alloc_noprof+0x9c/0x600
[  154.754756][ T6879]  ? stack_depot_save_flags+0x33/0x7f0
[  154.754779][ T6879]  ? alloc_empty_file+0x5b/0x1d0
[  154.754802][ T6879]  ? kmem_cache_alloc_noprof+0x151/0x600
[  154.754826][ T6879]  alloc_empty_file+0x5b/0x1d0
[  154.754848][ T6879]  path_openat+0x9d/0x1da0
[  154.754868][ T6879]  ? register_lock_class+0x31/0x2e0
[  154.754909][ T6879]  do_file_open+0x23e/0x4a0
[  154.754935][ T6879]  ? __pfx_do_file_open+0x10/0x10
[  154.754979][ T6879]  ? _raw_spin_unlock+0x28/0x50
[  154.755000][ T6879]  ? alloc_fd+0x6af/0x760
[  154.755033][ T6879]  do_sys_openat2+0x115/0x200
[  154.755055][ T6879]  ? __se_sys_futex+0x3a8/0x450
[  154.755084][ T6879]  ? __pfx_do_sys_openat2+0x10/0x10
[  154.755112][ T6879]  ? rcu_is_watching+0x16/0xb0
[  154.755137][ T6879]  __x64_sys_openat+0x138/0x170
[  154.755164][ T6879]  do_syscall_64+0x166/0x520
[  154.755185][ T6879]  ? trace_irq_disable+0x3b/0x140
[  154.755203][ T6879]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  154.755226][ T6879]  ? clear_bhb_loop+0x70/0xc0
[  154.755250][ T6879]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  154.755272][ T6879] RIP: 0033:0x7fdd5af5ea0e
[  154.755291][ T6879] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  154.755309][ T6879] RSP: 002b:00007fdd5bd92ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  154.755333][ T6879] RAX: ffffffffffffffda RBX: 00007fdd5bd936c0 RCX: 00007fdd5af5ea0e
[  154.755350][ T6879] RDX: 0000000000000002 RSI: 00007fdd5bd92f90 RDI: ffffffffffffff9c
[  154.755365][ T6879] RBP: 00007fdd5b035888 R08: 0000000000000000 R09: 0000000000000000
[  154.755378][ T6879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  154.755391][ T6879] R13: 00007fdd5b226038 R14: 00007fdd5b225fa0 R15: 00007fff7b8453e8
[  154.755426][ T6879]  </TASK>
[  155.424190][ T6891] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  155.524664][ T1223] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  155.686816][ T1223] usb 5-1: New USB device found: idVendor=0926, idProduct=3333, bcdDevice=0.40
[  155.690099][ T1223] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  155.690152][ T1223] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  155.781239][ T6898] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  155.839948][ T1223] usb 5-1: config 0 descriptor??
[  156.087096][ T1223] usbhid 5-1:0.0: can't add hid device: -71
[  156.087219][ T1223] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  156.119587][ T1223] usb 5-1: USB disconnect, device number 2
[  156.632184][ T1223] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  156.644437][ T6916] netlink: 8 bytes leftover after parsing attributes in process `syz.0.324'.
[  156.793539][ T1223] usb 5-1: New USB device found: idVendor=0458, idProduct=5003, bcdDevice=0.40
[  156.798017][ T1223] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  156.798073][ T1223] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.827636][ T1223] usb 5-1: config 0 descriptor??
[  156.918963][ T6930] loop3: detected capacity change from 0 to 256
[  157.819096][ T6943] loop3: detected capacity change from 0 to 32768
[  157.837807][ T6943] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  157.837839][ T6943] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  157.854033][ T1223] aiptek 5-1:0.0: Aiptek using 400 ms programming speed
[  157.864699][ T1223] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input5
[  157.934895][ T6943] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[  158.083631][ T5744] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  158.083656][ T5744] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  158.373861][ T6777] usb 5-1: USB disconnect, device number 3
[  158.373893][    C0] aiptek 5-1:0.0: aiptek_irq - usb_submit_urb failed with result -19
[  158.636313][ T5744] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 552ms
[  158.687314][ T5744] gfs2: fsid=syz:syz.0: jid=0: Done
[  158.688247][ T6943] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  158.807211][ T6964] 9pnet: p9_errstr2errno: server reported unknown error 184467440
[  159.412597][ T5808] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  159.572244][ T5808] usb 2-1: New USB device found: idVendor=08b7, idProduct=0000, bcdDevice=0.00
[  159.580662][ T5808] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  159.580743][ T5808] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  159.594647][ T5808] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  159.594732][ T5808] usb 2-1: SerialNumber: syz
[  159.940900][ T5808] usb 2-1: 0:2 : does not exist
[  160.154081][ T5808] usb 2-1: USB disconnect, device number 5
[  160.375929][ T6238] udevd[6238]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  160.770919][ T7008] loop3: detected capacity change from 0 to 128
[  160.822014][ T5808] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  160.830160][ T7008] ufs: ufstype=nextstep is supported read-only
[  160.982460][ T5808] usb 2-1: Using ep0 maxpacket: 16
[  160.985310][ T5808] usb 2-1: New USB device found: idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  160.986447][ T5808] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  161.048527][ T5808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.048557][ T5808] usb 2-1: Product: syz
[  161.048573][ T5808] usb 2-1: Manufacturer: syz
[  161.048589][ T5808] usb 2-1: SerialNumber: syz
[  161.079957][ T5808] usb 2-1: config 0 descriptor??
[  161.149962][ T5808] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  161.150003][ T5808] em28xx 2-1:0.0: DVB interface 0 found: bulk
[  161.656770][ T7025] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  161.765287][ T5808] em28xx 2-1:0.0: unknown em28xx chip ID (0)
[  162.023412][ T7034] netlink: 'syz.3.357': attribute type 2 has an invalid length.
[  162.023439][ T7034] netlink: 'syz.3.357': attribute type 1 has an invalid length.
[  162.093993][ T7034] loop3: detected capacity change from 0 to 1024
[  162.099391][ T7034] EXT4-fs (loop3): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0
[  162.099425][ T7034] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[  162.099437][ T7034] EXT4-fs (loop3): can't mount with both data=journal and delalloc
[  162.250967][ T7043] netlink: 4 bytes leftover after parsing attributes in process `syz.4.361'.
[  162.324021][ T5808] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  162.324092][ T5808] em28xx 2-1:0.0: board has no eeprom
[  162.411404][ T5808] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  162.411459][ T5808] em28xx 2-1:0.0: dvb set to bulk mode.
[  162.412803][   T10] em28xx 2-1:0.0: Binding DVB extension
[  162.448718][ T5808] usb 2-1: USB disconnect, device number 6
[  162.458967][ T5808] em28xx 2-1:0.0: Disconnecting em28xx
[  162.635633][ T7046] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  162.635677][ T7046] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  162.635723][ T7046] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  162.786763][ T7052] netlink: 'syz.0.364': attribute type 1 has an invalid length.
[  162.817574][   T10] em28xx 2-1:0.0: Registering input extension
[  162.821534][ T5808] em28xx 2-1:0.0: Closing input extension
[  162.828948][ T7052] 8021q: adding VLAN 0 to HW filter on device bond2
[  162.959955][ T7052] bond2: (slave geneve3): making interface the new active one
[  162.973843][ T7052] bond2: (slave geneve3): Enslaving as an active interface with an up link
[  163.011952][   T45] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  163.027561][   T45] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  163.027710][   T45] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  163.027811][   T45] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  163.078488][ T7062] loop1: detected capacity change from 0 to 1024
[  163.366913][ T5808] em28xx: Freeing device
[  163.581553][ T5612] Bluetooth: hci0: command 0x0c1a tx timeout
[  163.862821][ T6777] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  164.012244][ T6777] usb 1-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  164.013799][ T6777] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  164.042262][ T6777] usb 1-1: config 0 descriptor??
[  164.295472][ T7083] loop0: detected capacity change from 0 to 1024
[  164.511156][ T7106] overlayfs: failed to resolve './cgroup': -2
[  164.752323][ T7083] hfsplus: request for non-existent node 131072 in B*Tree
[  164.752346][ T7083] hfsplus: request for non-existent node 131072 in B*Tree
[  164.758840][ T6777] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  164.760650][ T6777] [drm:udl_init] *ERROR* Selecting channel failed
[  164.910760][ T7112] netlink: 'syz.4.383': attribute type 4 has an invalid length.
[  164.910794][ T7112] netlink: 17 bytes leftover after parsing attributes in process `syz.4.383'.
[  164.929341][ T7112] FAULT_INJECTION: forcing a failure.
[  164.929341][ T7112] name failslab, interval 1, probability 0, space 0, times 0
[  164.929382][ T7112] CPU: 0 UID: 0 PID: 7112 Comm: syz.4.383 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  164.929416][ T7112] Tainted: [L]=SOFTLOCKUP
[  164.929425][ T7112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  164.929439][ T7112] Call Trace:
[  164.929448][ T7112]  <TASK>
[  164.929458][ T7112]  dump_stack_lvl+0xe8/0x150
[  164.929491][ T7112]  should_fail_ex+0x3eb/0x540
[  164.929521][ T7112]  should_failslab+0xa8/0x100
[  164.929545][ T7112]  ? fib_insert_alias+0x300/0x10f0
[  164.929569][ T7112]  kmem_cache_alloc_noprof+0x9c/0x600
[  164.929596][ T7112]  ? rcu_is_watching+0x16/0xb0
[  164.929617][ T7112]  ? fib_insert_alias+0x300/0x10f0
[  164.929652][ T7112]  fib_insert_alias+0x300/0x10f0
[  164.929676][ T7112]  ? lockdep_rtnl_is_held+0x26/0x40
[  164.929699][ T7112]  ? fib_find_node+0x297/0x2f0
[  164.929726][ T7112]  fib_trie_unmerge+0x312/0xce0
[  164.929773][ T7112]  fib_unmerge+0xc5/0x350
[  164.929803][ T7112]  fib4_rule_configure+0x2c9/0x9d0
[  164.929831][ T7112]  fib_newrule+0x61e/0xf20
[  164.929860][ T7112]  ? __lock_acquire+0x747/0x2de0
[  164.929885][ T7112]  ? __pfx_fib_newrule+0x10/0x10
[  164.929947][ T7112]  ? __pfx_fib_nl_newrule+0x10/0x10
[  164.929968][ T7112]  rtnetlink_rcv_msg+0x802/0xc00
[  164.929995][ T7112]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[  164.930016][ T7112]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  164.930041][ T7112]  ? __copy_skb_header+0xa3/0x4a0
[  164.930078][ T7112]  netlink_rcv_skb+0x226/0x4a0
[  164.930102][ T7112]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  164.930128][ T7112]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  164.930165][ T7112]  ? netlink_deliver_tap+0x2e/0x1b0
[  164.930186][ T7112]  ? netlink_deliver_tap+0x2e/0x1b0
[  164.930214][ T7112]  netlink_unicast+0x7bd/0x940
[  164.930248][ T7112]  netlink_sendmsg+0x7c3/0xae0
[  164.930276][ T7112]  ? __pfx_netlink_sendmsg+0x10/0x10
[  164.930308][ T7112]  ? apparmor_socket_sendmsg+0x98/0x360
[  164.930334][ T7112]  ? __pfx_netlink_sendmsg+0x10/0x10
[  164.930355][ T7112]  sock_sendmsg_nosec+0x14e/0x190
[  164.930380][ T7112]  ____sys_sendmsg+0x54e/0x850
[  164.930409][ T7112]  ? __pfx_____sys_sendmsg+0x10/0x10
[  164.930443][ T7112]  ? import_iovec+0x73/0xa0
[  164.930470][ T7112]  ___sys_sendmsg+0x2a5/0x360
[  164.930491][ T7112]  ? __lock_acquire+0x747/0x2de0
[  164.930519][ T7112]  ? __pfx____sys_sendmsg+0x10/0x10
[  164.930545][ T7112]  ? futex_wake+0x51b/0x5f0
[  164.930603][ T7112]  ? __fget_files+0x3a2/0x420
[  164.930624][ T7112]  ? __fget_files+0x2a/0x420
[  164.930657][ T7112]  __x64_sys_sendmsg+0x1b1/0x290
[  164.930683][ T7112]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  164.930731][ T7112]  do_syscall_64+0x166/0x520
[  164.930753][ T7112]  ? trace_irq_disable+0x3b/0x140
[  164.930784][ T7112]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.930808][ T7112]  ? clear_bhb_loop+0x70/0xc0
[  164.930833][ T7112]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.930856][ T7112] RIP: 0033:0x7fdd5af9e1d9
[  164.930878][ T7112] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  164.930897][ T7112] RSP: 002b:00007fdd5bd93028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  164.930923][ T7112] RAX: ffffffffffffffda RBX: 00007fdd5b225fa0 RCX: 00007fdd5af9e1d9
[  164.930941][ T7112] RDX: 0000000000040000 RSI: 0000200000000100 RDI: 0000000000000004
[  164.930955][ T7112] RBP: 00007fdd5b035888 R08: 0000000000000000 R09: 0000000000000000
[  164.930969][ T7112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  164.930983][ T7112] R13: 00007fdd5b226038 R14: 00007fdd5b225fa0 R15: 00007fff7b8453e8
[  164.931021][ T7112]  </TASK>
[  165.464857][ T6777] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 1
[  165.464887][ T6777] [drm] Initialized udl on minor 1
[  165.663127][ T6777] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  165.706754][ T6777] udl 1-1:0.0: [drm] Cannot find any crtc or sizes
[  165.761699][ T6777] usb 1-1: USB disconnect, device number 2
[  166.073798][ T7132] FAULT_INJECTION: forcing a failure.
[  166.073798][ T7132] name failslab, interval 1, probability 0, space 0, times 0
[  166.075038][ T7132] CPU: 0 UID: 60928 PID: 7132 Comm: syz.3.391 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  166.075074][ T7132] Tainted: [L]=SOFTLOCKUP
[  166.075082][ T7132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  166.075096][ T7132] Call Trace:
[  166.075105][ T7132]  <TASK>
[  166.075115][ T7132]  dump_stack_lvl+0xe8/0x150
[  166.075147][ T7132]  should_fail_ex+0x3eb/0x540
[  166.075175][ T7132]  should_failslab+0xa8/0x100
[  166.075201][ T7132]  __kvmalloc_node_noprof+0x171/0x820
[  166.075229][ T7132]  ? __rhashtable_init_noprof+0x5fa/0xbd0
[  166.075251][ T7132]  ? __rhashtable_init_noprof+0x5fa/0xbd0
[  166.075301][ T7132]  __rhashtable_init_noprof+0x5fa/0xbd0
[  166.075331][ T7132]  ipc_init_ids+0x82/0x1f0
[  166.075354][ T7132]  msg_init_ns+0x121/0x180
[  166.075377][ T7132]  copy_ipcs+0x49b/0x6c0
[  166.075405][ T7132]  create_new_namespaces+0x210/0x6b0
[  166.075432][ T7132]  ? security_capable+0x7e/0x2c0
[  166.075463][ T7132]  unshare_nsproxy_namespaces+0x144/0x190
[  166.075489][ T7132]  ksys_unshare+0x532/0x890
[  166.075514][ T7132]  ? __pfx_ksys_unshare+0x10/0x10
[  166.075540][ T7132]  ? rcu_is_watching+0x16/0xb0
[  166.075573][ T7132]  __x64_sys_unshare+0x38/0x50
[  166.075595][ T7132]  do_syscall_64+0x166/0x520
[  166.075616][ T7132]  ? trace_irq_disable+0x3b/0x140
[  166.075636][ T7132]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  166.075660][ T7132]  ? clear_bhb_loop+0x70/0xc0
[  166.075692][ T7132]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  166.075715][ T7132] RIP: 0033:0x7f92d359e1d9
[  166.075736][ T7132] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  166.075755][ T7132] RSP: 002b:00007f92d4382028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  166.075783][ T7132] RAX: ffffffffffffffda RBX: 00007f92d3825fa0 RCX: 00007f92d359e1d9
[  166.075800][ T7132] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000004a000200
[  166.075815][ T7132] RBP: 00007f92d3635888 R08: 0000000000000000 R09: 0000000000000000
[  166.075829][ T7132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  166.075843][ T7132] R13: 00007f92d3826038 R14: 00007f92d3825fa0 R15: 00007ffdb599dcb8
[  166.075879][ T7132]  </TASK>
[  166.276611][ T7129] veth1_macvtap: left promiscuous mode
[  166.360191][ T6777] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  166.514426][ T6777] usb 1-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40
[  166.517265][ T6777] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  166.520277][ T6777] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  166.520309][ T6777] usb 1-1: Product: syz
[  166.520325][ T6777] usb 1-1: Manufacturer: syz
[  166.520341][ T6777] usb 1-1: SerialNumber: syz
[  167.130999][ T7155] overlayfs: failed to clone upperpath
[  167.450545][   T33] audit: type=1326 audit(2000000063.010:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7166 comm="syz.3.400" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d359e1d9 code=0x7ffc0000
[  167.450797][   T33] audit: type=1326 audit(2000000063.010:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7166 comm="syz.3.400" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d359e1d9 code=0x7ffc0000
[  167.451892][   T33] audit: type=1326 audit(2000000063.020:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7166 comm="syz.3.400" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d359e1d9 code=0x7ffc0000
[  167.451942][   T33] audit: type=1326 audit(2000000063.020:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7166 comm="syz.3.400" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d359e1d9 code=0x7ffc0000
[  167.524011][   T33] audit: type=1326 audit(2000000063.090:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7166 comm="syz.3.400" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d359e1d9 code=0x7ffc0000
[  167.528508][   T33] audit: type=1326 audit(2000000063.090:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7166 comm="syz.3.400" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f92d359e1d9 code=0x7ffc0000
[  167.528720][   T33] audit: type=1326 audit(2000000063.090:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7166 comm="syz.3.400" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d359e1d9 code=0x7ffc0000
[  167.528896][   T33] audit: type=1326 audit(2000000063.090:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7166 comm="syz.3.400" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d359e1d9 code=0x7ffc0000
[  167.531470][   T33] audit: type=1326 audit(2000000063.090:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7166 comm="syz.3.400" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f92d359df42 code=0x7ffc0000
[  167.600297][   T33] audit: type=1326 audit(2000000063.120:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7166 comm="syz.3.400" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f92d359dfd7 code=0x7ffc0000
[  167.725198][ T6777] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42
[  167.725248][ T6777] cdc_ncm 1-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048
[  167.725269][ T6777] cdc_ncm 1-1:1.0: setting rx_max = 2048
[  167.925963][ T6777] cdc_ncm 1-1:1.0: setting tx_max = 88
[  167.950886][ T7167] loop3: detected capacity change from 0 to 8192
[  168.167704][ T6777] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[  168.259788][ T5272] veth1_macvtap: entered promiscuous mode
[  168.331662][   T10] usb 1-1: USB disconnect, device number 3
[  168.354960][   T32] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  168.369922][   T10] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP)
[  168.516122][   T32] usb 5-1: New USB device found: idVendor=056a, idProduct=0331, bcdDevice=0.00
[  168.517308][   T32] usb 5-1: config index 0 descriptor too short (expected 34617, got 36)
[  168.517337][   T32] usb 5-1: config 217 has too many interfaces: 67, using maximum allowed: 32
[  168.517359][   T32] usb 5-1: config 217 has 1 interface, different from the descriptor's value: 67
[  168.517415][   T32] usb 5-1: config 217 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  168.517444][   T32] usb 5-1: config 217 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  168.517495][   T32] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  168.865283][   T32] usbhid 5-1:217.0: can't add hid device: -71
[  168.865405][   T32] usbhid 5-1:217.0: probe with driver usbhid failed with error -71
[  168.910793][   T32] usb 5-1: USB disconnect, device number 4
[  170.551556][   T32] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  170.701729][   T32] usb 5-1: Using ep0 maxpacket: 8
[  170.704314][   T32] usb 5-1: New USB device found: idVendor=0763, idProduct=2001, bcdDevice=0.40
[  170.710834][   T32] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  170.740520][   T32] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  170.740553][   T32] usb 5-1: Product: syz
[  170.740569][   T32] usb 5-1: Manufacturer: syz
[  170.740585][   T32] usb 5-1: SerialNumber: syz
[  170.877481][ T7227] 
[  170.879924][ T7227] ======================================================
[  170.886998][ T7227] WARNING: possible circular locking dependency detected
[  170.894093][ T7227] syzkaller #0 Tainted: G             L      
[  170.900462][ T7227] ------------------------------------------------------
[  170.907568][ T7227] syz.0.413/7227 is trying to acquire lock:
[  170.913554][ T7227] ffff8880538e2460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  170.922677][ T7227] 
[  170.922677][ T7227] but task is already holding lock:
[  170.930182][ T7227] ffff8880656d2780 (DCACHE_PAR_LOOKUP){+.+.}-{0:0}, at: __d_alloc_parallel+0x39e/0x1700
[  170.940541][ T7227] 
[  170.940541][ T7227] which lock already depends on the new lock.
[  170.940541][ T7227] 
[  170.951161][ T7227] 
[  170.951161][ T7227] the existing dependency chain (in reverse order) is:
[  170.960265][ T7227] 
[  170.960265][ T7227] -> #2 (DCACHE_PAR_LOOKUP){+.+.}-{0:0}:
[  170.968333][ T7227]        __d_alloc_parallel+0xc32/0x1700
[  170.974654][ T7227]        __lookup_slow+0x82/0x2f0
[  170.979925][ T7227]        lookup_slow+0x59/0x80
[  170.985386][ T7227]        link_path_walk+0xd22/0x1910
[  170.990842][ T7227]        path_openat+0x1c4/0x1da0
[  170.996254][ T7227]        do_file_open+0x23e/0x4a0
[  171.001314][ T7227]        do_sys_openat2+0x115/0x200
[  171.006558][ T7227]        __x64_sys_openat+0x138/0x170
[  171.011988][ T7227]        do_syscall_64+0x166/0x520
[  171.017146][ T7227]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  171.023629][ T7227] 
[  171.023629][ T7227] -> #1 (&type->i_mutex_dir_key#5){++++}-{4:4}:
[  171.032128][ T7227]        down_write+0x91/0x200
[  171.037001][ T7227]        lookup_open+0x246/0x1970
[  171.042080][ T7227]        path_openat+0x673/0x1da0
[  171.047457][ T7227]        do_file_open+0x23e/0x4a0
[  171.052536][ T7227]        do_sys_openat2+0x115/0x200
[  171.058215][ T7227]        __x64_sys_openat+0x138/0x170
[  171.063634][ T7227]        do_syscall_64+0x166/0x520
[  171.068974][ T7227]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  171.075440][ T7227] 
[  171.075440][ T7227] -> #0 (sb_writers#5){.+.+}-{0:0}:
[  171.083267][ T7227]        __lock_acquire+0x164c/0x2de0
[  171.088697][ T7227]        lock_acquire+0x115/0x350
[  171.093809][ T7227]        sb_start_write+0x48/0x1c0
[  171.098989][ T7227]        mnt_want_write+0x41/0x90
[  171.104091][ T7227]        ovl_lookup+0xb93/0x1c80
[  171.109074][ T7227]        lookup_open+0x94b/0x1970
[  171.114195][ T7227]        path_openat+0x673/0x1da0
[  171.119279][ T7227]        do_file_open+0x23e/0x4a0
[  171.124358][ T7227]        do_sys_openat2+0x115/0x200
[  171.129744][ T7227]        __x64_sys_openat+0x138/0x170
[  171.135430][ T7227]        do_syscall_64+0x166/0x520
[  171.140601][ T7227]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  171.147073][ T7227] 
[  171.147073][ T7227] other info that might help us debug this:
[  171.147073][ T7227] 
[  171.157339][ T7227] Chain exists of:
[  171.157339][ T7227]   sb_writers#5 --> &type->i_mutex_dir_key#5 --> DCACHE_PAR_LOOKUP
[  171.157339][ T7227] 
[  171.172062][ T7227]  Possible unsafe locking scenario:
[  171.172062][ T7227] 
[  171.179951][ T7227]        CPU0                    CPU1
[  171.185376][ T7227]        ----                    ----
[  171.186992][ T7214] FAULT_INJECTION: forcing a failure.
[  171.186992][ T7214] name failslab, interval 1, probability 0, space 0, times 0
[  171.187108][ T7214] CPU: 1 UID: 0 PID: 7214 Comm: syz.4.409 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  171.187192][ T7214] Tainted: [L]=SOFTLOCKUP
[  171.187214][ T7214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  171.187248][ T7214] Call Trace:
[  171.187269][ T7214]  <TASK>
[  171.187291][ T7214]  dump_stack_lvl+0xe8/0x150
[  171.187386][ T7214]  should_fail_ex+0x3eb/0x540
[  171.187450][ T7214]  should_failslab+0xa8/0x100
[  171.187506][ T7214]  __kmalloc_cache_noprof+0x9e/0x600
[  171.187590][ T7214]  ? __kmalloc_cache_noprof+0x148/0x600
[  171.187652][ T7214]  ? ip_mc_add_src+0x82e/0x1170
[  171.187706][ T7214]  ? ip_mc_add_src+0x82e/0x1170
[  171.187765][ T7214]  ip_mc_add_src+0x82e/0x1170
[  171.187837][ T7214]  ip_mc_msfilter+0x5aa/0xb00
[  171.187917][ T7214]  do_ip_setsockopt+0x2886/0x2e30
[  171.187982][ T7214]  ? __pfx_do_ip_setsockopt+0x10/0x10
[  171.188047][ T7214]  ? rcu_is_watching+0x16/0xb0
[  171.188100][ T7214]  ? rcu_is_watching+0x16/0xb0
[  171.188154][ T7214]  ? lock_release+0x4b/0x3c0
[  171.188207][ T7214]  ? aa_sock_opt_perm+0xe8/0x1e0
[  171.188276][ T7214]  ip_setsockopt+0x66/0x110
[  171.188336][ T7214]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  171.188415][ T7214]  do_sock_setsockopt+0x17c/0x1b0
[  171.188472][ T7214]  __x64_sys_setsockopt+0x13d/0x1b0
[  171.188535][ T7214]  do_syscall_64+0x166/0x520
[  171.188590][ T7214]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  171.188645][ T7214]  ? clear_bhb_loop+0x70/0xc0
[  171.188705][ T7214]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  171.188760][ T7214] RIP: 0033:0x7fdd5af9e1d9
[  171.188811][ T7214] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  171.188866][ T7214] RSP: 002b:00007fdd5bd93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  171.188908][ T7214] RAX: ffffffffffffffda RBX: 00007fdd5b225fa0 RCX: 00007fdd5af9e1d9
[  171.188958][ T7214] RDX: 0000000000000029 RSI: 0000000000000000 RDI: 0000000000000004
[  171.188991][ T7214] RBP: 00007fdd5b035888 R08: 0000000000000057 R09: 0000000000000000
[  171.189025][ T7214] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000
[  171.189066][ T7214] R13: 00007fdd5b226038 R14: 00007fdd5b225fa0 R15: 00007fff7b8453e8
[  171.189124][ T7214]  </TASK>
[  171.308872][   T32] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  171.312975][   T32] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  171.444232][ T7227]   lock(DCACHE_PAR_LOOKUP);
[  171.448874][ T7227]                                lock(&type->i_mutex_dir_key#5);
[  171.456764][ T7227]                                lock(DCACHE_PAR_LOOKUP);
[  171.463965][ T7227]   rlock(sb_writers#5);
[  171.468264][ T7227] 
[  171.468264][ T7227]  *** DEADLOCK ***
[  171.468264][ T7227] 
[  171.476531][ T7227] locks held by syz.0.413/7227: 2, last CPU#0:
[  171.483252][ T7227]  #0: ffff888054fe3810 (&ovl_i_mutex_dir_key[depth]){++++}-{4:4}, at: lookup_open+0x221/0x1970
[  171.493765][ T7227]  #1: ffff8880656d2780 (DCACHE_PAR_LOOKUP){+.+.}-{0:0}, at: __d_alloc_parallel+0x39e/0x1700
[  171.504006][ T7227] 
[  171.504006][ T7227] stack backtrace:
[  171.510471][ T7227] CPU: 0 UID: 0 PID: 7227 Comm: syz.0.413 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  171.521457][ T7227] Tainted: [L]=SOFTLOCKUP
[  171.525820][ T7227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  171.536001][ T7227] Call Trace:
[  171.539328][ T7227]  <TASK>
[  171.542300][ T7227]  dump_stack_lvl+0xe8/0x150
[  171.546936][ T7227]  print_circular_bug+0x2e2/0x300
[  171.552101][ T7227]  check_noncircular+0x12f/0x150
[  171.557082][ T7227]  __lock_acquire+0x164c/0x2de0
[  171.562001][ T7227]  ? do_raw_spin_unlock+0xf5/0x200
[  171.567258][ T7227]  lock_acquire+0x115/0x350
[  171.571987][ T7227]  ? mnt_want_write+0x41/0x90
[  171.576736][ T7227]  sb_start_write+0x48/0x1c0
[  171.581380][ T7227]  ? mnt_want_write+0x41/0x90
[  171.586132][ T7227]  mnt_want_write+0x41/0x90
[  171.590702][ T7227]  ovl_lookup+0xb93/0x1c80
[  171.593091][   T32] usb 5-1: USB disconnect, device number 5
[  171.601075][ T7227]  ? lock_acquire+0x115/0x350
[  171.606004][ T7227]  ? __pfx_ovl_lookup+0x10/0x10
[  171.610913][ T7227]  ? __d_lookup+0x66/0x790
[  171.615407][ T7227]  ? __pfx___d_alloc_parallel+0x10/0x10
[  171.621812][ T7227]  ? __d_lookup+0x6f3/0x790
[  171.626384][ T7227]  ? d_lookup+0x1f/0xa0
[  171.630588][ T7227]  ? seqcount_lockdep_reader_access+0xa9/0x100
[  171.636796][ T7227]  ? lockdep_hardirqs_on+0x7b/0x110
[  171.642044][ T7227]  lookup_open+0x94b/0x1970
[  171.646873][ T7227]  path_openat+0x673/0x1da0
[  171.652264][ T7227]  do_file_open+0x23e/0x4a0
[  171.656860][ T7227]  ? __pfx_do_file_open+0x10/0x10
[  171.662131][ T7227]  ? _raw_spin_unlock+0x28/0x50
[  171.667033][ T7227]  ? alloc_fd+0x6af/0x760
[  171.671502][ T7227]  do_sys_openat2+0x115/0x200
[  171.676223][ T7227]  ? __se_sys_futex+0x3a8/0x450
[  171.681200][ T7227]  ? __pfx_do_sys_openat2+0x10/0x10
[  171.686436][ T7227]  ? rcu_is_watching+0x16/0xb0
[  171.691243][ T7227]  __x64_sys_openat+0x138/0x170
[  171.696793][ T7227]  do_syscall_64+0x166/0x520
[  171.702094][ T7227]  ? trace_irq_disable+0x3b/0x140
[  171.707613][ T7227]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  171.713742][ T7227]  ? clear_bhb_loop+0x70/0xc0
[  171.720028][ T7227]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  171.725970][ T7227] RIP: 0033:0x7f705299e1d9
[  171.730422][ T7227] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  171.750255][ T7227] RSP: 002b:00007f7053869028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  171.758712][ T7227] RAX: ffffffffffffffda RBX: 00007f7052c25fa0 RCX: 00007f705299e1d9
[  171.766723][ T7227] RDX: 0000000000000000 RSI: 0000200000000580 RDI: ffffffffffffff9c
[  171.775254][ T7227] RBP: 00007f7052a35888 R08: 0000000000000000 R09: 0000000000000000
[  171.783543][ T7227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  171.791693][ T7227] R13: 00007f7052c26038 R14: 00007f7052c25fa0 R15: 00007ffcdf7cadd8
[  171.799809][ T7227]  </TASK>
[  171.840179][ T6238] udevd[6238]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory