last executing test programs:

24.970392122s ago: executing program 3 (id=259):
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='veth1_to_bridge\x00', 0x10)
getsockopt$sock_buf(r0, 0x1, 0x19, &(0x7f0000006080)=""/241, &(0x7f0000000280)=0xf1)

23.487541469s ago: executing program 3 (id=266):
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0x23, &(0x7f0000000140)=ANY=[@ANYBLOB="bf16000000000000620af0ff7f000001620af4ff7f000001620af8ff12344e20620ad8ff12344e20620adcff00000000620ae0ff00000000620ae4ff50021000620ae8ff00000000620ac0ff45000028620ac4ff00000000620ac8ff40060000620accff7f000001620ad0ff7f000001bf61000000000000bfa200000000000007020000f0ffffffb70300000c000000b7040000ffffffffb705000000000000850000005400000015000b0000000000bf07000000000000bf71000000000000bfa200000000000007020000c0ffffffb703000014000000bfa400000000000007040000d8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_usb_connect(0x0, 0x5d, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052413"], 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x4)

20.017493189s ago: executing program 3 (id=282):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x3, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x0, <r1=>0x0}, 0x8)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r1, 0x4)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7ffffffb}]})
close_range(r2, 0xffffffffffffffff, 0x0)

19.455328824s ago: executing program 3 (id=283):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001b40)='./file1\x00', 0x208008de, &(0x7f0000000b40)=ANY=[], 0x80, 0x150a, &(0x7f0000002080)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f00000010c0)=ANY=[], 0x8, 0x303, &(0x7f00000004c0)="$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")
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newtfilter={0x90, 0x2c, 0x200, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x5, 0x7}, {0x2, 0xd}, {0xf, 0x4}}, [@filter_kind_options=@f_basic={{0xa}, {0x60, 0x2, [@TCA_BASIC_EMATCHES={0x5c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x50, 0x2, 0x0, 0x1, [@TCF_EM_META={0x38, 0x1, 0x0, 0x0, {{0xfff9, 0x4, 0x2}, [@TCA_EM_META_LVALUE={0x2c, 0x2, [@TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="4bd6a154a4527142c7", @TCF_META_TYPE_VAR="16e61d64", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="4069520abd711e23d0", @TCF_META_TYPE_VAR="9f8fab8ae52fa0a2fdf1"]}]}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x400, 0x7, 0x81}, {{0x4, 0x1, 0x1}, {0x1}}}}]}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0x600000, 0x2, 0x8132, 0xffffffffffffffff, 0x0)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x20008, 0xd, 0x2}}, 0x30)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x28011, r4, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
lseek(r4, 0x4, 0x3)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff2, 0x4012011, r0, 0x0)
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0x1218088, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x4a, 0x2df, &(0x7f0000000f80)="$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")
fdatasync(r0)

17.584714189s ago: executing program 3 (id=289):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x1000000, &(0x7f0000000100)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}]}})
mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

16.866858551s ago: executing program 3 (id=293):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60242, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000f40)={'pimreg\x00', 0x3c32})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0)
pwritev2(r1, &(0x7f0000000340)=[{&(0x7f00000003c0)="1bbc54a603ff246bd56edbce6558", 0xe}, {&(0x7f0000000040)="010130a7cd08f1cac7c721e886dd", 0xe}], 0x2, 0xa74c, 0x80000000, 0x12)

15.947065246s ago: executing program 32 (id=293):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60242, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000f40)={'pimreg\x00', 0x3c32})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0)
pwritev2(r1, &(0x7f0000000340)=[{&(0x7f00000003c0)="1bbc54a603ff246bd56edbce6558", 0xe}, {&(0x7f0000000040)="010130a7cd08f1cac7c721e886dd", 0xe}], 0x2, 0xa74c, 0x80000000, 0x12)

1.182523897s ago: executing program 2 (id=327):
r0 = socket$nl_route(0x10, 0x3, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800e00010069703665727370616e0000002c0002801400050000000000000000000000000000000002050016000200000004001200"], 0x60}}, 0x0)

1.179035354s ago: executing program 1 (id=328):
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="8b33000000000300f1000500000008000300", @ANYRES16=r2], 0x28}}, 0x0)

1.178131808s ago: executing program 4 (id=329):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@usrquota}, {@grpjquota}, {@nodelalloc}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$eJzs3ctvW1UaAPDPdpMmaWb6mNGo7UjTSh2p81DjPDRqMjObWc3MotJoKrEBqYTEDSVOHMVOaaIuUth1wQKBQEIs2PMXsKErKiTEGvaIBSqCEiRAQjK613abOHGwII1p7u8n3ebch/2dU+s7Ovf4Xt8AMuts8k8uYjgiPoyIo43VrQecbfzZuH9zJllyUa9f/iKXHpestw5tve5IRKxHxEBE/P/fEc/ktsetrq7NT5fLpeXmerG2sFSsrq5duLYwPVeaKy2OTV6cmpocnRif2rO23n7puduX3vlv/9vfvHjv7svvvZtUa7i5b3M79lKj6X1xfNO2QxHxz0cRrAcKzfYM9roi/CTJ5/ebiDiX5v/RKKSfJpAF9Xq9/n39cKfd63XgwMqnY+BcfiQiGuV8fmSkMYb/bQzly5Vq7a9XKyuLs42x8rHoy1+9Vi6NNs8VjkVfLlkfS8sP18fb1ici0jHwK4XBdH1kplKe3d+uDmhzpC3/vy408h/ICKf8kF3yH7JL/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv+QXfIfskv+Qyb979KlZKm37n+fvb66Ml+5fmG2VJ0fWViZGZmpLC+NzFUqc+k9Ows/9n7lSmVp7G+xcqNYK1Vrxerq2pWFyspi7Up6X/+VUt++tAroxvEzdz7ORcT63wfTJdHf3CdX4WCr13PR63uQgd4o9LoDAnrG1B9kl3N8oP0netvHBQOdXrj0cL4QeLzke10BoGfOn/L9H2SV+X/ILvP/kF3G+MAOj+jbYrf5f+DxZP4fsmu4w/O/frXp2V2jEfHriPio0He49awv4CDIf5Zrjv/PH/3jcPve/ty36VcE/RHx/BuXX7sxXastjyXbv3ywvfZ6c/v4phd2PGEAeqWVp608BgCya+P+zZnWsp9xP/9X4yKE7fEPNecmB9LvKIc2cluuVcjt0bUL67ci4uRO8XPN5503TmSGNgrb4p9o/s013iKt76H0uen7E//Upvh/2BT/9M/+X4FsuJP0P6M75V8+zel4kH9b+5/hPbp2onP/l3/Q/xU69H9nuozx7JsvfNox/q2I0zvGb8UbSGO1x0/qdr7L+PeeeuJ3nfbV32q8z07xW5JSsbawVKyurl1If0durrQ4NnlxampydGJ8qpjOURdbM9Xb/ePkB3d3a/9Qh/i7tT/Z9ucu2//d799/8uwu8f90bufP/8Qu8Qcj4i9dxv9q/JOnO+1L4s92aH9+l/jJtoku41df/c/hLg8FAPZBdXVtfrpcLi0rKCj0pHDrl1GNtkKveybgUauuJqfmSdL3uiYAAAAAAAAAAABAt/bjcuJetxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CD4IQAA//9HcdTQ")
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x42, 0xe)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r0, 0x0, 0x0, 0x4, 0x1000000000000})

1.177850211s ago: executing program 2 (id=330):
r0 = creat(0x0, 0xc7)
close(r0)
openat(0xffffffffffffff9c, 0x0, 0x80042, 0x4d)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20)
r2 = syz_open_dev$evdev(&(0x7f00000001c0), 0x2, 0x8000)
ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000080)={0x0, 0x0, 0x0})
ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, "0f9d0000002000000000b82100"})

1.17773584s ago: executing program 2 (id=331):
syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x10000, &(0x7f0000002380)=ANY=[@ANYBLOB='nodots,showexec,dots,uid=', @ANYRESHEX=0xee00, @ANYBLOB=',check=normal,fmask=00000000000000000000002,sys_immutable,nodots,dots,nodots,nodots,nodots,fmask=00000000000000000177777,dots,quiet,nodots,nodots,check=relaxed,nodots,umask=00000000000000000076645,nodots,nodots,nfs=stale_rw,nodots,smackfsfloor=fmask,defcontext=unconfined_u,permit_directio,permit_directio,fscontext=staff_u,seclabel,euid>', @ANYRESDEC, @ANYRES64], 0x0, 0x1f5, &(0x7f0000000600)="$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")
lchown(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)

1.177640568s ago: executing program 4 (id=332):
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000140)={[{@discard}, {@dioread_lock}, {@test_dummy_encryption}]}, 0xfe, 0x244, &(0x7f0000000400)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x15)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x80)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, 0x0, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000))

1.177515152s ago: executing program 1 (id=333):
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
openat(0xffffffffffffff9c, 0x0, 0x80342, 0x168)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000280)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]})
getpid()
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000140)={<r4=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000001c0)={r4, 0x1, r2, 0x1, 0x80000})

1.177420542s ago: executing program 0 (id=334):
unshare(0x62020600)
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r1 = fcntl$dupfd(r0, 0x0, r0)
connect$unix(r1, &(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0)

1.177358288s ago: executing program 2 (id=335):
syz_emit_ethernet(0x0, 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000100)="58000000140019234083feff040d8c560a06580200ff0000000000", 0x1b}], 0x1)
syz_usb_connect$uac3(0x0, 0x9f, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000040ba0d001040000102030109028d000301635006080b00ff010130020904000000010130000a24010a2900010000000c240b07010500000007f800132403060206030407"], 0x0)

1.174629693s ago: executing program 0 (id=336):
gettid()
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)

1.174466554s ago: executing program 1 (id=337):
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
r0 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, 0xfffffffffffffffd)
keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000040)={r0, 0x1}, &(0x7f0000000180)={'enc=', 'pkcs1', ' hash=', {'sha256\x00'}}, &(0x7f0000000280)='P', &(0x7f0000000780))

1.174245713s ago: executing program 2 (id=338):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000240)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2208414, &(0x7f0000000e80)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYBLOB="999c07c03c5bc6a3d07b90faae21d196274f93a6593a9830472d5633665f2f51cfb24aaad481c74e142cd734ec6fd04935a94af71c756dbd6f5e2f39b2c4c30725d103d40d7e65129bb928ef73849dae618e438695e0a9078605ba418298145bf2fec11b0d16763288e7ecfe663aa5ff450d1e46d251160109c0378e04fe2629890c28366a6489e706ecf23195dc7f19e03fad", @ANYRES32=0x0, @ANYRES8=<r0=>0xffffffffffffffff, @ANYBLOB="c5ce1b0300c91520022860834995bd440de70a56f9b17205184d3be668bd36e2d9b2c62fb43e3a2a12e69d2eea113cf5ab1fe015e1203fb7b57c6304b9bbf1de3f4d593fe54ac5721496f9ff26b96c57aaef7987972acd042203fdb0fca1a50c79aa234042b33ec782767b27952e1575c33287da01587fa8979f7bf20617cd24b9b442a044e489b989dfe48e4c0426b1200183940b1b"], 0x41, 0x2bd, &(0x7f00000007c0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fsopen(0x0, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]})
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
setpriority(0x0, 0x0, 0x2a14b58)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000980)={0x6, "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"})
r3 = syz_clone(0x40011, 0x0, 0x0, 0x0, 0x0, 0x0)
exit(0x5)
ppoll(&(0x7f00000000c0)=[{r1, 0xc040}], 0x1, 0x0, 0x0, 0x0)
wait4(r3, 0x0, 0x8, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000021c0)=ANY=[@ANYBLOB="fc0000000301010200000000000000000a000004dc0002800c00028005000100840000002c00018014000300fe80000000000000000000000000002f14000400000000000000000000000000000000011400018008000100ac1e010108000200ac1414aa0c00028005000100060000001400018008000100ffffffff08000200000000001400018008000100ac1414bb080002000a0101022c000180140003000000000000000000000000000000000114000400ff0100000000000000000000000000010c000280050001008800000006000340000400000c00028005000100060000000c00028005000100010000000c00198008000200", @ANYRES16=r4, @ANYRES16=r0, @ANYBLOB="967c625b01e80118fe823ea5ac4e62003baf2f60612dce7651e6ee04e3f1c3dcf25733ed119bb1663981f5fde54e990f16bc6b9fa1ccc963dc7db2bc67f845a1b2951704fc4a9d682f6d56f3379cac88cfed2c20cbe130bf082cfee29928dfe48ec7f046661c4bcf1ad2712c84e80b4ae3b4e57c01b11cf931c638fdd3303f74b3ce3c7d02f3b266073729bbca280c"], 0xfc}, 0x1, 0x0, 0x0, 0x4050}, 0x20008014)
syz_mount_image$ext4(&(0x7f0000000880)='ext4\x00', &(0x7f0000000040)='.\x02\x00', 0x1004e, &(0x7f00000003c0)={[{@errors_continue}, {@usrjquota_path={'usrjquota', 0x3d, '.\x02'}}, {@noinit_itable}, {@nomblk_io_submit}, {@grpquota}, {@jqfmt_vfsold}, {@oldalloc}, {@grpjquota_path={'grpjquota', 0x3d, '.\x02'}}, {}, {@journal_dev={'journal_dev', 0x3d, 0x6}}]}, 0x1, 0x566, &(0x7f00000008c0)="$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")
syz_mount_image$fuse(0x0, 0x0, 0x3a0600b, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0/file1\x00', 0x2040020, 0x0, 0x1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x192)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, 0x0)
ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000240)=0x1112246)
r6 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r6, &(0x7f0000000080)=@file={0x0, '.\x02\x00'}, 0x6e)
socket(0x10, 0x3, 0x0)

1.173998798s ago: executing program 4 (id=339):
capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x5})
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0)
setns(0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/class/net/bridge0/bridge/stp_state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000200)='0f', 0x2)

907.729637ms ago: executing program 4 (id=340):
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x1)
ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000080)={0x0, 0x0, 0x0})

907.55999ms ago: executing program 1 (id=341):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000002c0)={0xe000, 0x108000})
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000040)={0x1000, 0xbdffca2ce2bd349d})

863.969866ms ago: executing program 0 (id=342):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0)

675.199701ms ago: executing program 4 (id=343):
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000006b40)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0x7ff, @loopback, 0xce}, 0x1c, 0x0, 0x0, &(0x7f0000001880)=ANY=[@ANYBLOB="1800000000000000290000003700000084000000000000001800000000000000ebff0f0000000000020000000000000018"], 0x48}}], 0x1, 0x20000010)

607.515032ms ago: executing program 0 (id=344):
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01)
ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)=0x8)
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01)
ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)=0x5fe1)

525.301458ms ago: executing program 1 (id=345):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r1)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r1)
sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)={0x14, r2, 0x1, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0x40)

453.672187ms ago: executing program 4 (id=346):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010002000000106d04e3bf97fcfb3c277d090224000100000002090400050203000300092196004f0122180009058103000480158716146fe56f7f1a788592e6d11971b851d7f50ae9e383aacc23b4186a7cbe163f92092935"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, 0x0, 0x40)

346.72838ms ago: executing program 0 (id=347):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f0000000000), 0x5, 0x4c3, &(0x7f0000000e80)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff)
read(0xffffffffffffffff, 0x0, 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0)
creat(0xfffffffffffffffd, 0xc6)

158.458004ms ago: executing program 1 (id=348):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000640)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRESOCT, @ANYRES8=0x0, @ANYRES32=0x0, @ANYRES64, @ANYRESDEC=0x0], 0x1, 0x304, &(0x7f0000000bc0)="$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")
r0 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12)
write(r2, &(0x7f0000000240)="c7", 0x1)
sendfile(r2, r1, 0x0, 0x7ffff000)
ftruncate(r0, 0x2007ffb)

890.793µs ago: executing program 0 (id=349):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'erspan0\x00'})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004)
ioctl$sock_SIOCBRDELBR(r2, 0x89a2, 0x0)
ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000200)='bridge0\x00')

0s ago: executing program 2 (id=350):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x189080, 0x0)
prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB='extent_cache,acl\x00nolazytime,grpjquota=rootcontext,checkpoint=merge,heap,flush_merge,noinline_dentry,quota,grpquota=(:,age_extent_cache,heap,resgid=', @ANYRESHEX=0x0, @ANYBLOB="2c636865636b706f696e743d6d657267652c7375db6a5f757365723d3a7bc17b285c71002c7065726d69745f646972656374696f2c686173682c7375626a5f757365723d657874656e68652c646566636f6e746578743d7261636b66736465663d657874656e745f63616368652c7375626a5f7479f43133666f1fe17a7974696d652c00000000000000"], 0xf7, 0x555e, &(0x7f0000005a80)="$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")
sched_setscheduler(r1, 0x1, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000005c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_clone3(0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae03, 0x18)
syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='mountinfo\x00')

kernel console output (not intermixed with test programs):

 to HW filter on device bond0
[   90.861235][   T51] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.861363][   T51] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.937295][ T5609] 8021q: adding VLAN 0 to HW filter on device team0
[   90.987286][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.987390][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   91.054910][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.055044][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   91.418410][ T5622] Bluetooth: hci0: command tx timeout
[   91.496053][ T5622] Bluetooth: hci1: command tx timeout
[   91.575339][   T54] Bluetooth: hci3: command tx timeout
[   91.578078][ T5622] Bluetooth: hci2: command tx timeout
[   91.654371][ T5622] Bluetooth: hci4: command tx timeout
[   91.997323][   T58] cfg80211: failed to load regulatory.db
[   92.116334][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0
[   92.241128][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0
[   92.343239][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0
[   92.351712][ T5615] veth0_vlan: entered promiscuous mode
[   92.386428][ T5615] veth1_vlan: entered promiscuous mode
[   92.468196][ T5623] 8021q: adding VLAN 0 to HW filter on device batadv0
[   92.548857][ T5615] veth0_macvtap: entered promiscuous mode
[   92.580777][ T5615] veth1_macvtap: entered promiscuous mode
[   92.620594][ T5614] veth0_vlan: entered promiscuous mode
[   92.654058][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0
[   92.677428][ T5614] veth1_vlan: entered promiscuous mode
[   92.724626][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0
[   92.728340][ T5623] veth0_vlan: entered promiscuous mode
[   92.761003][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1
[   92.805352][ T5623] veth1_vlan: entered promiscuous mode
[   92.828046][ T1027] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.828192][ T1027] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.828234][ T1027] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.828273][ T1027] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.878500][ T5614] veth0_macvtap: entered promiscuous mode
[   92.896412][ T5609] veth0_vlan: entered promiscuous mode
[   92.906213][ T5614] veth1_macvtap: entered promiscuous mode
[   92.965260][ T5609] veth1_vlan: entered promiscuous mode
[   93.002296][ T5623] veth0_macvtap: entered promiscuous mode
[   93.037578][ T5623] veth1_macvtap: entered promiscuous mode
[   93.057454][   T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.057696][   T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.058828][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0
[   93.092032][ T5610] veth0_vlan: entered promiscuous mode
[   93.101831][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1
[   93.163653][ T5610] veth1_vlan: entered promiscuous mode
[   93.175893][ T5609] veth0_macvtap: entered promiscuous mode
[   93.180990][  T766] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.181009][  T766] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.185589][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.225318][ T5609] veth1_macvtap: entered promiscuous mode
[   93.260282][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_0
[   93.292976][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0
[   93.303463][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_1
[   93.338125][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1
[   93.379101][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.379123][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.444876][ T1027] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.444919][ T1027] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.444956][ T1027] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.444990][ T1027] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.445025][ T1027] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.445060][ T1027] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.452561][ T5615] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   93.454618][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.454664][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.454703][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.454741][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.496828][ T5622] Bluetooth: hci0: command tx timeout
[   93.524845][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.575128][ T5622] Bluetooth: hci1: command tx timeout
[   93.594980][ T5610] veth0_macvtap: entered promiscuous mode
[   93.643224][ T5610] veth1_macvtap: entered promiscuous mode
[   93.655089][   T54] Bluetooth: hci3: command tx timeout
[   93.655137][ T5622] Bluetooth: hci2: command tx timeout
[   93.695457][ T1169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.695479][ T1169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.735054][ T5622] Bluetooth: hci4: command tx timeout
[   93.795825][   T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.795862][   T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.862983][  T766] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.863002][  T766] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.901427][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0
[   93.986632][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1
[   94.035597][ T1027] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.035634][ T1027] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.086441][ T5808] FAULT_INJECTION: forcing a failure.
[   94.086441][ T5808] name failslab, interval 1, probability 0, space 0, times 1
[   94.086489][ T5808] CPU: 0 UID: 0 PID: 5808 Comm: syz.2.3 Not tainted syzkaller #0 PREEMPT(full) 
[   94.086513][ T5808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   94.086536][ T5808] Call Trace:
[   94.086544][ T5808]  <TASK>
[   94.086555][ T5808]  dump_stack_lvl+0xe8/0x150
[   94.086606][ T5808]  should_fail_ex+0x3eb/0x540
[   94.086647][ T5808]  should_failslab+0xa8/0x100
[   94.086683][ T5808]  __kmalloc_cache_noprof+0x9e/0x600
[   94.086709][ T5808]  ? __futex_wait+0x3c7/0x470
[   94.086736][ T5808]  ? snd_pcm_oss_change_params_locked+0x16d/0x3c80
[   94.086766][ T5808]  ? snd_pcm_oss_change_params_locked+0x16d/0x3c80
[   94.086803][ T5808]  snd_pcm_oss_change_params_locked+0x16d/0x3c80
[   94.086837][ T5808]  ? __pfx___mutex_trylock_common+0x10/0x10
[   94.086875][ T5808]  ? rcu_is_watching+0x16/0xb0
[   94.086905][ T5808]  ? trace_contention_end+0x3d/0x140
[   94.086939][ T5808]  ? __mutex_lock+0x305/0x15a0
[   94.086973][ T5808]  ? futex_hash+0x275/0x2b0
[   94.087010][ T5808]  ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10
[   94.087041][ T5808]  ? futex_wait+0x2a2/0x390
[   94.087065][ T5808]  ? snd_pcm_oss_sync+0x30e/0xdf0
[   94.087096][ T5808]  ? __pfx___mutex_lock+0x10/0x10
[   94.087126][ T5808]  ? __pfx_ima_file_free+0x10/0x10
[   94.087153][ T5808]  ? __asan_memset+0x22/0x50
[   94.087194][ T5808]  snd_pcm_oss_sync+0x57d/0xdf0
[   94.087232][ T5808]  snd_pcm_oss_release+0xff/0x250
[   94.087263][ T5808]  ? __pfx_snd_pcm_oss_release+0x10/0x10
[   94.087292][ T5808]  __fput+0x413/0xa50
[   94.087324][ T5808]  fput_close_sync+0x11f/0x240
[   94.087348][ T5808]  ? __pfx_fput_close_sync+0x10/0x10
[   94.087374][ T5808]  ? do_raw_spin_unlock+0xf5/0x200
[   94.087403][ T5808]  __se_sys_close+0xa2/0x160
[   94.087431][ T5808]  do_syscall_64+0x166/0x520
[   94.087461][ T5808]  ? trace_irq_disable+0x3b/0x140
[   94.087490][ T5808]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   94.087514][ T5808]  ? clear_bhb_loop+0x70/0xc0
[   94.087542][ T5808]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   94.087564][ T5808] RIP: 0033:0x7f870d39e159
[   94.087601][ T5808] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   94.087620][ T5808] RSP: 002b:00007f870e262028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[   94.087650][ T5808] RAX: ffffffffffffffda RBX: 00007f870d625fa0 RCX: 00007f870d39e159
[   94.087666][ T5808] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[   94.087680][ T5808] RBP: 00007f870d43506b R08: 0000000000000000 R09: 0000000000000000
[   94.087693][ T5808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   94.087706][ T5808] R13: 00007f870d626038 R14: 00007f870d625fa0 R15: 00007ffe0e981ba8
[   94.087740][ T5808]  </TASK>
[   94.123996][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.124017][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.225520][ T1169] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.228663][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.228998][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   94.302510][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.338720][ T5808] loop2: detected capacity change from 0 to 512
[   94.342063][ T5808] EXT4-fs: Ignoring removed orlov option
[   94.342305][ T5808] EXT4-fs: Ignoring removed bh option
[   94.409276][ T5808] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   94.600422][ T5808] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   94.600541][ T5808] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   94.614042][ T5808] EXT4-fs error (device loop2): ext4_search_dir:1476: inode #2: block 3: comm syz.2.3: bad entry in directory: directory entry overrun - offset=16444, inode=113, rec_len=2048, size=2048 fake=0
[   94.617385][ T5808] EXT4-fs (loop2): Remounting filesystem read-only
[   94.711716][ T5808] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore
[   94.711812][ T5808] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[   94.932760][ T5614] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   95.026291][ T1027] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.026314][ T1027] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.161321][ T1178] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.161343][ T1178] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.305141][ T5821] FAULT_INJECTION: forcing a failure.
[   95.305141][ T5821] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   95.305172][ T5821] CPU: 0 UID: 0 PID: 5821 Comm: syz.0.1 Not tainted syzkaller #0 PREEMPT(full) 
[   95.305196][ T5821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   95.305208][ T5821] Call Trace:
[   95.305216][ T5821]  <TASK>
[   95.305226][ T5821]  dump_stack_lvl+0xe8/0x150
[   95.305263][ T5821]  should_fail_ex+0x3eb/0x540
[   95.305303][ T5821]  _copy_from_iter+0x1d3/0x1660
[   95.305340][ T5821]  ? __alloc_skb+0x27a/0x7a0
[   95.305378][ T5821]  ? __alloc_skb+0x27a/0x7a0
[   95.305404][ T5821]  ? __alloc_skb+0x27a/0x7a0
[   95.305428][ T5821]  ? __pfx__copy_from_iter+0x10/0x10
[   95.305462][ T5821]  ? kmem_cache_alloc_node_noprof+0x1f4/0x600
[   95.305488][ T5821]  ? __alloc_skb+0x27a/0x7a0
[   95.305513][ T5821]  ? __alloc_skb+0x27a/0x7a0
[   95.305554][ T5821]  ? netlink_sendmsg+0x5fa/0xae0
[   95.305586][ T5821]  ? skb_put+0x112/0x210
[   95.305615][ T5821]  netlink_sendmsg+0x667/0xae0
[   95.305654][ T5821]  ? __pfx_netlink_sendmsg+0x10/0x10
[   95.305696][ T5821]  ? apparmor_socket_sendmsg+0x98/0x360
[   95.305722][ T5821]  ? __pfx_netlink_sendmsg+0x10/0x10
[   95.305765][ T5821]  sock_sendmsg_nosec+0x13a/0x180
[   95.305802][ T5821]  ____sys_sendmsg+0x54e/0x850
[   95.305834][ T5821]  ? __pfx_____sys_sendmsg+0x10/0x10
[   95.305869][ T5821]  ? import_iovec+0x73/0xa0
[   95.305895][ T5821]  ___sys_sendmsg+0x2a5/0x360
[   95.305920][ T5821]  ? __lock_acquire+0x747/0x2de0
[   95.305952][ T5821]  ? __pfx____sys_sendmsg+0x10/0x10
[   95.306015][ T5821]  ? __fget_files+0x3a2/0x420
[   95.306041][ T5821]  ? __fget_files+0x2a/0x420
[   95.306076][ T5821]  __x64_sys_sendmsg+0x1b1/0x290
[   95.306107][ T5821]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   95.306156][ T5821]  do_syscall_64+0x166/0x520
[   95.306184][ T5821]  ? trace_irq_disable+0x3b/0x140
[   95.306213][ T5821]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   95.306236][ T5821]  ? clear_bhb_loop+0x70/0xc0
[   95.306262][ T5821]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   95.306284][ T5821] RIP: 0033:0x7fecb899e159
[   95.306304][ T5821] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   95.306321][ T5821] RSP: 002b:00007fecb9827028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   95.306345][ T5821] RAX: ffffffffffffffda RBX: 00007fecb8c25fa0 RCX: 00007fecb899e159
[   95.306369][ T5821] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 000000000000000c
[   95.306383][ T5821] RBP: 00007fecb9827090 R08: 0000000000000000 R09: 0000000000000000
[   95.306395][ T5821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   95.306408][ T5821] R13: 00007fecb8c26038 R14: 00007fecb8c25fa0 R15: 00007ffe591edf68
[   95.306441][ T5821]  </TASK>
[   96.443185][ T5831] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore
[   96.443272][ T5831] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[   96.444935][ T5829] FAULT_INJECTION: forcing a failure.
[   96.444935][ T5829] name failslab, interval 1, probability 0, space 0, times 0
[   96.444963][ T5829] CPU: 0 UID: 0 PID: 5829 Comm: syz.3.9 Not tainted syzkaller #0 PREEMPT(full) 
[   96.444987][ T5829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   96.444999][ T5829] Call Trace:
[   96.445008][ T5829]  <TASK>
[   96.445017][ T5829]  dump_stack_lvl+0xe8/0x150
[   96.445055][ T5829]  should_fail_ex+0x3eb/0x540
[   96.445094][ T5829]  should_failslab+0xa8/0x100
[   96.445130][ T5829]  __kmalloc_cache_noprof+0x9e/0x600
[   96.445159][ T5829]  ? __se_sys_mount+0x166/0x420
[   96.445184][ T5829]  ? __se_sys_mount+0x166/0x420
[   96.445210][ T5829]  ? memdup_user+0x99/0xd0
[   96.445240][ T5829]  __se_sys_mount+0x166/0x420
[   96.445272][ T5829]  ? __pfx___se_sys_mount+0x10/0x10
[   96.445305][ T5829]  ? __x64_sys_mount+0x20/0xc0
[   96.445333][ T5829]  do_syscall_64+0x166/0x520
[   96.445363][ T5829]  ? trace_irq_disable+0x3b/0x140
[   96.445392][ T5829]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   96.445414][ T5829]  ? clear_bhb_loop+0x70/0xc0
[   96.445441][ T5829]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   96.445463][ T5829] RIP: 0033:0x7fc1cdd9e159
[   96.445483][ T5829] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   96.445502][ T5829] RSP: 002b:00007fc1cebd7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   96.445525][ T5829] RAX: ffffffffffffffda RBX: 00007fc1ce026090 RCX: 00007fc1cdd9e159
[   96.445541][ T5829] RDX: 0000200000002100 RSI: 00002000000001c0 RDI: 0000000000000000
[   96.445556][ T5829] RBP: 00007fc1cebd7090 R08: 00002000000002c0 R09: 0000000000000000
[   96.445570][ T5829] R10: 0000000000804000 R11: 0000000000000246 R12: 0000000000000001
[   96.445583][ T5829] R13: 00007fc1ce026128 R14: 00007fc1ce026090 R15: 00007fff54168b58
[   96.445617][ T5829]  </TASK>
[   97.320694][ T5841] netlink: 'syz.1.12': attribute type 1 has an invalid length.
[   97.332893][ T5839] syz.2.11 uses obsolete (PF_INET,SOCK_PACKET)
[   97.640440][ T5844] ref_tracker: memory allocation failure, unreliable refcount tracker.
[   98.031995][ T5846] =======================================================
[   98.031995][ T5846] WARNING: The mand mount option has been deprecated and
[   98.031995][ T5846]          and is ignored by this kernel. Remove the mand
[   98.031995][ T5846]          option from the mount to silence this warning.
[   98.031995][ T5846] =======================================================
[   98.272084][   T51] IPVS: starting estimator thread 0...
[   98.365508][ T5847] IPVS: using max 29 ests per chain, 69600 per kthread
[   98.715254][ T5800] usb 4-1: new full-speed USB device number 2 using dummy_hcd
[   98.900760][ T5800] usb 4-1: New USB device found: idVendor=046d, idProduct=c314, bcdDevice=0.40
[   98.925171][ T5800] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   98.925206][ T5800] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   98.968202][ T5800] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[   98.968237][ T5800] usb 4-1: Product: syz
[   98.968255][ T5800] usb 4-1: Manufacturer: syz
[   99.118525][ T5800] hub 4-1:4.0: USB hub found
[   99.247379][ T5860] loop2: detected capacity change from 0 to 2048
[   99.319925][ T5851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   99.335389][ T5851] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   99.457413][ T5867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   99.474926][ T5867] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   99.534482][ T5851] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.15'.
[   99.542817][ T5860] loop2: detected capacity change from 0 to 16
[   99.566239][ T5851] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.15'.
[   99.638412][ T5860] erofs (device loop2): mounted with root inode @ nid 36.
[  100.072435][ T5879] capability: warning: `syz.2.16' uses deprecated v2 capabilities in a way that may be insecure
[  100.515034][ T5878] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17'.
[  100.615677][ T5714] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  100.764196][ T5714] usb 5-1: Using ep0 maxpacket: 16
[  100.765008][ T5714] usb 5-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=0.40
[  100.766547][ T5714] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  100.766570][ T5714] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  100.773199][ T5714] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  100.773252][ T5714] usb 5-1: Product: syz
[  100.773269][ T5714] usb 5-1: Manufacturer: syz
[  100.773295][ T5714] usb 5-1: SerialNumber: syz
[  100.777061][ T5885] netlink: 'syz.1.20': attribute type 1 has an invalid length.
[  100.860480][ T5714] usb 5-1: 0:2 : does not exist
[  100.891118][ T5887] FAULT_INJECTION: forcing a failure.
[  100.891118][ T5887] name failslab, interval 1, probability 0, space 0, times 0
[  100.891198][ T5887] CPU: 0 UID: 0 PID: 5887 Comm: syz.2.19 Not tainted syzkaller #0 PREEMPT(full) 
[  100.891231][ T5887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  100.891247][ T5887] Call Trace:
[  100.891257][ T5887]  <TASK>
[  100.891269][ T5887]  dump_stack_lvl+0xe8/0x150
[  100.891317][ T5887]  should_fail_ex+0x3eb/0x540
[  100.891365][ T5887]  should_failslab+0xa8/0x100
[  100.891407][ T5887]  __kmalloc_cache_noprof+0x9e/0x600
[  100.891444][ T5887]  ? __ipv6_dev_mc_inc+0x447/0xaf0
[  100.891484][ T5887]  ? __ipv6_dev_mc_inc+0x447/0xaf0
[  100.891533][ T5887]  __ipv6_dev_mc_inc+0x447/0xaf0
[  100.891589][ T5887]  addrconf_join_solict+0x104/0x190
[  100.891628][ T5887]  ? __pfx_addrconf_join_solict+0x10/0x10
[  100.891665][ T5887]  ? __ipv6_dev_ac_inc+0x8c8/0xb90
[  100.891709][ T5887]  ? __local_bh_enable_ip+0xd6/0x140
[  100.891750][ T5887]  __ipv6_dev_ac_inc+0x8fd/0xb90
[  100.891814][ T5887]  ipv6_sock_ac_join+0x665/0x820
[  100.891866][ T5887]  ? __pfx_ipv6_sock_ac_join+0x10/0x10
[  100.891910][ T5887]  ? _copy_from_user+0x94/0xb0
[  100.891945][ T5887]  do_ipv6_setsockopt+0x1f56/0x2960
[  100.891987][ T5887]  ? __pfx_do_ipv6_setsockopt+0x10/0x10
[  100.892018][ T5887]  ? aa_inet_opt_perm+0x94d/0xcd0
[  100.892058][ T5887]  ? __pfx_aa_inet_opt_perm+0x10/0x10
[  100.892097][ T5887]  ? __raw_spin_lock_init+0x45/0x100
[  100.892134][ T5887]  ? do_futex+0x3e7/0x4e0
[  100.892159][ T5887]  ? __asan_memcpy+0x40/0x70
[  100.892195][ T5887]  ? lock_acquire+0x115/0x350
[  100.892239][ T5887]  ? aa_sock_opt_perm+0xe1/0x1e0
[  100.892275][ T5887]  ipv6_setsockopt+0x59/0x170
[  100.892314][ T5887]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  100.892346][ T5887]  do_sock_setsockopt+0x17c/0x1b0
[  100.892390][ T5887]  __x64_sys_setsockopt+0x13d/0x1b0
[  100.892428][ T5887]  do_syscall_64+0x166/0x520
[  100.892465][ T5887]  ? trace_irq_disable+0x3b/0x140
[  100.892500][ T5887]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  100.892527][ T5887]  ? clear_bhb_loop+0x70/0xc0
[  100.892559][ T5887]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  100.892586][ T5887] RIP: 0033:0x7f870d39e159
[  100.892611][ T5887] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  100.892633][ T5887] RSP: 002b:00007f870e262028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  100.892662][ T5887] RAX: ffffffffffffffda RBX: 00007f870d625fa0 RCX: 00007f870d39e159
[  100.892683][ T5887] RDX: 000000000000001b RSI: 0000000000000029 RDI: 0000000000000004
[  100.892700][ T5887] RBP: 00007f870d43506b R08: 0000000000000020 R09: 0000000000000000
[  100.892716][ T5887] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000000
[  100.892732][ T5887] R13: 00007f870d626038 R14: 00007f870d625fa0 R15: 00007ffe0e981ba8
[  100.892781][ T5887]  </TASK>
[  101.203474][ T5800] hub 4-1:4.0: config failed, can't read hub descriptor (err -22)
[  101.218442][ T5714] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[  101.292729][ T5800] usb 4-1: USB disconnect, device number 2
[  101.377081][ T5714] usb 5-1: USB disconnect, device number 2
[  101.523867][ T5630] udevd[5630]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  101.611628][ T5896] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  101.811596][ T5902] loop2: detected capacity change from 0 to 512
[  101.850939][ T5902] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  101.871989][ T5903] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  101.894912][ T5800] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[  101.917041][ T5902] EXT4-fs (loop2): orphan cleanup on readonly fs
[  101.917080][ T5902] EXT4-fs error (device loop2): ext4_orphan_get:1429: comm syz.2.26: bad orphan inode 15
[  101.917246][ T5902] loop2: lost filesystem error report for type 5 error -117
[  101.924175][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  101.924492][    C1] EXT4-fs (loop2): initial error at time 1790699410: ext4_orphan_get:1429
[  101.924519][    C1] EXT4-fs (loop2): last error at time 1790699410: ext4_orphan_get:1429
[  101.953212][ T5902] ext4_test_bit(bit=14, block=5) = 0
[  102.008362][ T5902] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  102.055056][ T5800] usb 4-1: New USB device found: idVendor=0b48, idProduct=1003, bcdDevice=1.00
[  102.056450][ T5800] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  102.056511][ T5800] usb 4-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  102.056554][ T5800] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.506898][ T5916] netlink: 12 bytes leftover after parsing attributes in process `syz.1.30'.
[  102.508613][ T5614] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.560687][ T5914] FAULT_INJECTION: forcing a failure.
[  102.560687][ T5914] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  102.560736][ T5914] CPU: 0 UID: 0 PID: 5914 Comm: syz.4.29 Not tainted syzkaller #0 PREEMPT(full) 
[  102.560764][ T5914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  102.560777][ T5914] Call Trace:
[  102.560786][ T5914]  <TASK>
[  102.560795][ T5914]  dump_stack_lvl+0xe8/0x150
[  102.560834][ T5914]  should_fail_ex+0x3eb/0x540
[  102.560877][ T5914]  _copy_from_user+0x2d/0xb0
[  102.560903][ T5914]  kstrtouint_from_user+0xd6/0x180
[  102.560940][ T5914]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  102.560984][ T5914]  ? lock_acquire+0x115/0x350
[  102.561018][ T5914]  proc_fail_nth_write+0x8e/0x210
[  102.561053][ T5914]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  102.561093][ T5914]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  102.561134][ T5914]  vfs_write+0x296/0xba0
[  102.561176][ T5914]  ? __pfx_vfs_write+0x10/0x10
[  102.561207][ T5914]  ? __fget_files+0x2a/0x420
[  102.561234][ T5914]  ? __fget_files+0x3a2/0x420
[  102.561261][ T5914]  ? __fget_files+0x2a/0x420
[  102.561292][ T5914]  ? fdget+0x1ac/0x250
[  102.561327][ T5914]  ksys_write+0x150/0x270
[  102.561360][ T5914]  ? __pfx_ksys_write+0x10/0x10
[  102.561402][ T5914]  do_syscall_64+0x166/0x520
[  102.561432][ T5914]  ? trace_irq_disable+0x3b/0x140
[  102.561461][ T5914]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  102.561485][ T5914]  ? clear_bhb_loop+0x70/0xc0
[  102.561514][ T5914]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  102.561536][ T5914] RIP: 0033:0x7fd7ae99e159
[  102.561557][ T5914] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  102.561575][ T5914] RSP: 002b:00007fd7af868028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  102.561600][ T5914] RAX: ffffffffffffffda RBX: 00007fd7aec25fa0 RCX: 00007fd7ae99e159
[  102.561617][ T5914] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[  102.561630][ T5914] RBP: 00007fd7aea3506b R08: 0000000000000000 R09: 0000000000000000
[  102.561642][ T5914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  102.561653][ T5914] R13: 00007fd7aec26038 R14: 00007fd7aec25fa0 R15: 00007ffe61f3c4b8
[  102.561684][ T5914]  </TASK>
[  102.832987][ T5921] input: syz0 as /devices/virtual/input/input5
[  102.843636][ T5800] dvb_ttusb_budget: cmd xter failed, receive error -71
[  102.843655][ T5800] dvb_ttusb_budget: ttusb_init_controller: error
[  102.843718][ T5800] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  102.980992][ T5800] DVB: Unable to find symbol stv0299_attach()
[  103.031321][ T5800] DVB: Unable to find symbol tda8083_attach()
[  103.031338][ T5800] dvb_ttusb_budget: no frontend driver found for device [0b48:1003]
[  103.053273][ T5800] usb 4-1: USB disconnect, device number 3
[  103.499113][ T5936] loop2: detected capacity change from 0 to 512
[  103.536273][ T5936] EXT4-fs error (device loop2): ext4_orphan_get:1403: inode #15: comm syz.2.36: iget: bad i_size value: 38620345925642
[  103.536458][ T5936] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  103.537444][ T5936] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.36: couldn't read orphan inode 15 (err -117)
[  103.537483][ T5936] loop2: lost filesystem error report for type 5 error -117
[  103.545061][ T5936] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  103.635189][ T5945] EXT4-fs error (device loop2): ext4_validate_block_bitmap:436: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  103.721033][ T5946] loop0: detected capacity change from 0 to 1024
[  103.735911][ T5946] hfsplus: Unknown parameter 'wlan0'
[  103.765433][ T5800] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  103.793363][ T5951] capability: warning: `syz.4.40' uses 32-bit capabilities (legacy support in use)
[  103.838603][ T5614] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.914913][ T5800] usb 4-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=0.40
[  103.915969][ T5800] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  103.915993][ T5800] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  103.916012][ T5800] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  103.916032][ T5800] usb 4-1: config 1 has no interface number 1
[  103.916068][ T5800] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  103.916095][ T5800] usb 4-1: too many endpoints for config 1 interface 2 altsetting 1: 133, using maximum allowed: 30
[  103.916131][ T5800] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 133
[  103.918612][ T5800] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  103.918636][ T5800] usb 4-1: Product: syz
[  103.918651][ T5800] usb 4-1: Manufacturer: syz
[  103.918665][ T5800] usb 4-1: SerialNumber: syz
[  104.265668][ T5800] usb 4-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0
[  104.265748][ T5800] usb 4-1: MIDIStreaming interface descriptor not found
[  104.404065][ T5963] Zero length message leads to an empty skb
[  104.498905][ T5963] loop2: detected capacity change from 0 to 256
[  104.688614][   T27] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  105.035064][   T27] usb 1-1: New USB device found: idVendor=0926, idProduct=3333, bcdDevice=0.40
[  105.061281][   T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  105.061424][   T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  105.200461][   T27] usb 1-1: config 0 descriptor??
[  105.234904][ T5965] x_tables: duplicate underflow at hook 3
[  105.381082][ T5800] usb 4-1: USB disconnect, device number 4
[  105.402181][ T5969] loop4: detected capacity change from 0 to 256
[  105.490586][ T5729] usb 2-1: new full-speed USB device number 2 using dummy_hcd
[  105.535325][   T27] usbhid 1-1:0.0: can't add hid device: -71
[  105.535518][   T27] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  105.559966][   T27] usb 1-1: USB disconnect, device number 2
[  105.614247][ T5729] usb 2-1: device descriptor read/64, error -71
[  105.862006][ T5978] udevd[5978]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  106.014321][ T5800] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  106.207802][ T5800] usb 4-1: Using ep0 maxpacket: 16
[  106.276081][ T5800] usb 4-1: unable to get BOS descriptor or descriptor too short
[  106.277396][ T5800] usb 4-1: New USB device found: idVendor=103d, idProduct=0100, bcdDevice=0.40
[  106.380426][ T5800] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7
[  106.490673][ T5800] usb 4-1: string descriptor 0 read error: -22
[  106.490814][ T5800] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  106.535891][ T5800] usb 4-1: Audio class v2/v3 interfaces need an interface association
[  106.538276][ T5800] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22
[  106.676021][ T5729] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[  106.843187][ T5986] netlink: 72 bytes leftover after parsing attributes in process `syz.2.50'.
[  106.879162][   T27] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  107.284165][ T5993] FAULT_INJECTION: forcing a failure.
[  107.284165][ T5993] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  107.284208][ T5993] CPU: 0 UID: 0 PID: 5993 Comm: syz.4.51 Not tainted syzkaller #0 PREEMPT(full) 
[  107.284232][ T5993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  107.284246][ T5993] Call Trace:
[  107.284255][ T5993]  <TASK>
[  107.284264][ T5993]  dump_stack_lvl+0xe8/0x150
[  107.284301][ T5993]  should_fail_ex+0x3eb/0x540
[  107.284341][ T5993]  _copy_from_user+0x2d/0xb0
[  107.284367][ T5993]  vmemdup_user+0x5e/0xd0
[  107.284395][ T5993]  map_get_next_key+0x1c3/0x610
[  107.284429][ T5993]  ? bpf_lsm_bpf+0x9/0x20
[  107.284448][ T5993]  ? security_bpf+0x7e/0x2d0
[  107.284473][ T5993]  __sys_bpf+0x625/0xe00
[  107.284513][ T5993]  ? __pfx___sys_bpf+0x10/0x10
[  107.284556][ T5993]  ? __fget_files+0x2a/0x420
[  107.284614][ T5993]  __x64_sys_bpf+0xba/0xd0
[  107.284647][ T5993]  do_syscall_64+0x166/0x520
[  107.284675][ T5993]  ? trace_irq_disable+0x3b/0x140
[  107.284704][ T5993]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  107.284726][ T5993]  ? clear_bhb_loop+0x70/0xc0
[  107.284753][ T5993]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  107.284776][ T5993] RIP: 0033:0x7fd7ae99e159
[  107.284795][ T5993] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  107.284813][ T5993] RSP: 002b:00007fd7af826028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  107.284837][ T5993] RAX: ffffffffffffffda RBX: 00007fd7aec26180 RCX: 00007fd7ae99e159
[  107.284853][ T5993] RDX: 0000000000000020 RSI: 0000200000000040 RDI: 0000000000000004
[  107.284867][ T5993] RBP: 00007fd7af826090 R08: 0000000000000000 R09: 0000000000000000
[  107.284881][ T5993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  107.284894][ T5993] R13: 00007fd7aec26218 R14: 00007fd7aec26180 R15: 00007ffe61f3c4b8
[  107.284928][ T5993]  </TASK>
[  107.989301][   T27] usb 1-1: device descriptor read/all, error -71
[  108.119236][ T5998] loop0: detected capacity change from 0 to 256
[  108.258958][ T6008] loop2: detected capacity change from 0 to 256
[  108.498298][ T6012] loop2: detected capacity change from 0 to 512
[  108.538909][ T6012] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002]
[  108.539048][ T6012] System zones: 1-12
[  108.542533][ T6012] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: inode #12: comm syz.2.57: missing EA_INODE flag
[  108.542566][ T6012] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  108.544164][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  108.544183][    C0] EXT4-fs (loop2): initial error at time 1790699416: ext4_xattr_inode_iget:437: inode 12
[  108.544212][    C0] EXT4-fs (loop2): last error at time 1790699416: ext4_xattr_inode_iget:437: inode 12
[  108.628715][ T6012] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.57: error while reading EA inode 12 err=-117
[  108.628746][ T6012] loop2: lost filesystem error report for type 5 error -117
[  108.629403][ T6012] EXT4-fs (loop2): 1 orphan inode deleted
[  108.668817][ T6012] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  108.790836][ T6016] loop1: detected capacity change from 0 to 256
[  108.921951][ T5729] usb 4-1: USB disconnect, device number 5
[  110.081351][ T6027] loop0: detected capacity change from 0 to 512
[  110.115842][ T5614] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.116104][ T6031] loop4: detected capacity change from 0 to 512
[  110.137566][ T6027] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  110.139846][ T6031] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  110.139862][ T6031] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  110.196253][ T6027] EXT4-fs error (device loop0): ext4_iget_extra_inode:5210: inode #15: comm syz.0.59: corrupted in-inode xattr: e_value size too large
[  110.196292][ T6027] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  110.198699][ T6027] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.59: couldn't read orphan inode 15 (err -117)
[  110.198790][ T6027] loop0: lost filesystem error report for type 5 error -117
[  110.212614][ T6032] netlink: 'syz.3.60': attribute type 3 has an invalid length.
[  110.212635][ T6032] netlink: 152 bytes leftover after parsing attributes in process `syz.3.60'.
[  110.212806][ T6032] netlink: 12 bytes leftover after parsing attributes in process `syz.3.60'.
[  110.214192][    C0] EXT4-fs (loop0): error count since last fsck: 2
[  110.214243][    C0] EXT4-fs (loop0): initial error at time 1790699418: ext4_iget_extra_inode:5210: inode 15
[  110.214324][    C0] EXT4-fs (loop0): last error at time 1790699418: ext4_orphan_get:1408
[  110.298787][ T6031] EXT4-fs (loop4): 1 truncate cleaned up
[  110.311731][ T6031] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  110.349082][ T6027] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  110.376495][ T6029] netlink: 'syz.3.60': attribute type 3 has an invalid length.
[  110.376517][ T6029] netlink: 152 bytes leftover after parsing attributes in process `syz.3.60'.
[  110.376550][ T6029] netlink: 12 bytes leftover after parsing attributes in process `syz.3.60'.
[  110.530879][ T6040] netlink: 4 bytes leftover after parsing attributes in process `syz.4.61'.
[  110.544685][    T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!!
[  110.616776][ T6042] netlink: 4 bytes leftover after parsing attributes in process `syz.2.62'.
[  111.225067][ T5610] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  111.436968][ T5609] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  113.434448][ T6069] loop2: detected capacity change from 0 to 512
[  113.472175][ T6069] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002]
[  113.472323][ T6069] System zones: 1-12
[  113.489586][ T6069] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: inode #12: comm syz.2.69: missing EA_INODE flag
[  113.489617][ T6069] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  113.503373][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  113.503397][    C1] EXT4-fs (loop2): initial error at time 1790699421: ext4_xattr_inode_iget:437: inode 12
[  113.503429][    C1] EXT4-fs (loop2): last error at time 1790699421: ext4_xattr_inode_iget:437: inode 12
[  113.559612][ T6069] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.69: error while reading EA inode 12 err=-117
[  113.559651][ T6069] loop2: lost filesystem error report for type 5 error -117
[  113.576625][ T6069] EXT4-fs (loop2): 1 orphan inode deleted
[  113.607537][ T6069] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  113.663992][ T6063] kvm: requested 5028 ns i8254 timer period limited to 200000 ns
[  113.862039][   T27] usb 4-1: new full-speed USB device number 6 using dummy_hcd
[  113.930267][ T6058] syz.2.67 (6058) used greatest stack depth: 18368 bytes left
[  114.049806][   T27] usb 4-1: New USB device found: idVendor=0b48, idProduct=1003, bcdDevice=1.00
[  114.051501][   T27] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  114.051563][   T27] usb 4-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  114.051615][   T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  114.282760][ T6049] syz.4.64 (6049): drop_caches: 2
[  114.695328][ T5614] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  114.932138][ T6085] bond0: invalid ARP target specified
[  115.523846][ T6092] loop2: detected capacity change from 0 to 512
[  115.538053][ T6092] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  115.567444][ T6092] EXT4-fs error (device loop2): ext4_orphan_get:1429: comm syz.2.75: bad orphan inode 131083
[  115.567479][ T6092] loop2: lost filesystem error report for type 5 error -117
[  115.583241][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  115.583268][    C0] EXT4-fs (loop2): initial error at time 1790699423: ext4_orphan_get:1429
[  115.583312][    C0] EXT4-fs (loop2): last error at time 1790699423: ext4_orphan_get:1429
[  115.628433][ T6092] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  115.711898][   T27] dvb_ttusb_budget: cmd xter failed, receive error -71
[  115.711926][   T27] dvb_ttusb_budget: ttusb_init_controller: error
[  115.711938][   T27] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  115.970714][ T6100] tipc: Started in network mode
[  115.970743][ T6100] tipc: Node identity ae03f597ccc, cluster identity 4711
[  115.971736][ T6100] tipc: Enabled bearer <eth:netdevsim0>, priority 10
[  116.005791][   T27] DVB: Unable to find symbol stv0299_attach()
[  116.094630][   T27] DVB: Unable to find symbol tda8083_attach()
[  116.094649][   T27] dvb_ttusb_budget: no frontend driver found for device [0b48:1003]
[  116.104241][   T27] usb 4-1: USB disconnect, device number 6
[  116.398762][ T6110] loop3: detected capacity change from 0 to 256
[  116.517085][ T6111] loop0: detected capacity change from 0 to 4096
[  116.518762][ T5614] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  116.602140][ T6111] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  116.798043][ T6111] ntfs3(loop0): ino=19, mi_enum_attr
[  116.800764][ T6111] ntfs3(loop0): Failed to initialize $Extend/$ObjId.
[  117.097145][ T5800] tipc: Node number set to 1657009559
[  117.145052][   T27] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[  117.316227][   T27] usb 3-1: New USB device found: idVendor=18ec, idProduct=3288, bcdDevice=69.cf
[  117.317474][   T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  117.317508][   T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  117.322188][   T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  117.322215][   T27] usb 3-1: Product: syz
[  117.322232][   T27] usb 3-1: Manufacturer: syz
[  117.322248][   T27] usb 3-1: SerialNumber: syz
[  117.401629][   T27] usb 3-1: config 0 descriptor??
[  117.423495][   T27] uvcvideo 3-1:0.0: Found UVC 0.00 device syz (18ec:3288)
[  117.423557][   T27] uvcvideo 3-1:0.0: No valid video chain found.
[  117.500140][ T6130] loop4: detected capacity change from 0 to 2048
[  117.501165][ T6130] ext4: Unknown parameter 'obj_user'
[  117.670986][ T6117] loop2: detected capacity change from 0 to 1024
[  117.815678][ T6133] bridge1: entered promiscuous mode
[  117.815702][ T6133] bridge1: entered allmulticast mode
[  117.846354][ T6133] team0: Port device bridge1 added
[  119.048405][   T27] usb 4-1: new full-speed USB device number 7 using dummy_hcd
[  119.276871][   T27] usb 4-1: New USB device found: idVendor=0b48, idProduct=1003, bcdDevice=1.00
[  119.292230][   T27] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  119.293322][   T27] usb 4-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  119.294012][   T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  120.684938][ T6157] process 'syz.4.91' launched './file2' with NULL argv: empty string added
[  121.424387][ T6157] netlink: 48 bytes leftover after parsing attributes in process `syz.4.91'.
[  121.627914][ T5729] kernel read not supported for file /video9 (pid: 5729 comm: kworker/1:6)
[  121.771127][ T5800] usb 3-1: USB disconnect, device number 2
[  122.008137][   T27] dvb_ttusb_budget: cmd xter failed, receive error -71
[  122.008156][   T27] dvb_ttusb_budget: ttusb_init_controller: error
[  122.008167][   T27] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  122.087704][ T6163] loop0: detected capacity change from 0 to 4096
[  122.102056][ T6163] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  122.338276][   T27] DVB: Unable to find symbol stv0299_attach()
[  122.905184][ T6163] ntfs3(loop0): ino=19, mi_enum_attr
[  122.905417][ T6163] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  122.972991][ T6163] ntfs3(loop0): Failed to initialize $Extend/$ObjId.
[  123.143110][   T27] DVB: Unable to find symbol tda8083_attach()
[  123.143127][   T27] dvb_ttusb_budget: no frontend driver found for device [0b48:1003]
[  123.155284][   T27] usb 4-1: USB disconnect, device number 7
[  123.303032][ T6190] FAULT_INJECTION: forcing a failure.
[  123.303032][ T6190] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  123.303076][ T6190] CPU: 0 UID: 0 PID: 6190 Comm: syz.4.100 Not tainted syzkaller #0 PREEMPT(full) 
[  123.303101][ T6190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  123.303114][ T6190] Call Trace:
[  123.303123][ T6190]  <TASK>
[  123.303132][ T6190]  dump_stack_lvl+0xe8/0x150
[  123.303200][ T6190]  should_fail_ex+0x3eb/0x540
[  123.303240][ T6190]  _copy_from_iter+0x1d3/0x1660
[  123.303270][ T6190]  ? skb_set_owner_w+0x263/0x3d0
[  123.303327][ T6190]  ? __pfx__copy_from_iter+0x10/0x10
[  123.303370][ T6190]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  123.303404][ T6190]  skb_copy_datagram_from_iter+0xe6/0x720
[  123.303436][ T6190]  ? dev_get_by_index+0x22/0x2d0
[  123.303468][ T6190]  ? skb_put+0x112/0x210
[  123.303496][ T6190]  packet_sendmsg+0x37d5/0x5150
[  123.303531][ T6190]  ? __pfx_aa_label_sk_perm+0x10/0x10
[  123.303562][ T6190]  ? __lock_acquire+0x747/0x2de0
[  123.303595][ T6190]  ? __lock_acquire+0x747/0x2de0
[  123.303625][ T6190]  ? __lock_acquire+0x747/0x2de0
[  123.303656][ T6190]  ? kstrtouint+0x6e/0xe0
[  123.303694][ T6190]  ? __pfx_packet_sendmsg+0x10/0x10
[  123.303714][ T6190]  ? aa_sk_perm+0x6ff/0x8f0
[  123.303750][ T6190]  ? lockdep_count_forward_deps+0x100/0x170
[  123.303777][ T6190]  ? __pfx_aa_sk_perm+0x10/0x10
[  123.303803][ T6190]  ? aa_sock_msg_perm+0x144/0x210
[  123.303833][ T6190]  ? apparmor_socket_sendmsg+0x98/0x360
[  123.303857][ T6190]  ? __pfx_packet_sendmsg+0x10/0x10
[  123.303878][ T6190]  sock_sendmsg_nosec+0x13a/0x180
[  123.303913][ T6190]  __sys_sendto+0x408/0x5a0
[  123.303937][ T6190]  ? ksys_write+0x1e6/0x270
[  123.303970][ T6190]  ? __pfx___sys_sendto+0x10/0x10
[  123.303992][ T6190]  ? __mutex_unlock_slowpath+0x731/0x900
[  123.304036][ T6190]  ? fdget+0x1ac/0x250
[  123.304075][ T6190]  ? __pfx_ksys_write+0x10/0x10
[  123.304109][ T6190]  __x64_sys_sendto+0xde/0x100
[  123.304137][ T6190]  do_syscall_64+0x166/0x520
[  123.304164][ T6190]  ? trace_irq_disable+0x3b/0x140
[  123.304192][ T6190]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  123.304214][ T6190]  ? clear_bhb_loop+0x70/0xc0
[  123.304240][ T6190]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  123.304261][ T6190] RIP: 0033:0x7fd7ae99e159
[  123.304289][ T6190] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  123.304306][ T6190] RSP: 002b:00007fd7af868028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  123.304329][ T6190] RAX: ffffffffffffffda RBX: 00007fd7aec25fa0 RCX: 00007fd7ae99e159
[  123.304345][ T6190] RDX: 000000000000000e RSI: 0000200000000280 RDI: 0000000000000003
[  123.304359][ T6190] RBP: 00007fd7af868090 R08: 0000200000000380 R09: 0000000000000014
[  123.304373][ T6190] R10: 0000000000000015 R11: 0000000000000246 R12: 0000000000000001
[  123.304386][ T6190] R13: 00007fd7aec26038 R14: 00007fd7aec25fa0 R15: 00007ffe61f3c4b8
[  123.304420][ T6190]  </TASK>
[  124.384696][ T5800] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  124.535364][ T5800] usb 2-1: New USB device found: idVendor=06a3, idProduct=0cd0, bcdDevice=0.00
[  124.537014][ T5800] usb 2-1: config 0 has an invalid descriptor of length 34, skipping remainder of the config
[  124.537039][ T5800] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  124.537075][ T5800] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  124.541985][ T5800] usb 2-1: config 0 descriptor??
[  124.640946][ T6212] loop3: detected capacity change from 0 to 512
[  124.644288][ T6212] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  124.669843][ T6212] EXT4-fs (loop3): 1 truncate cleaned up
[  124.673936][ T6212] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  124.764417][   T27] usb 3-1: new full-speed USB device number 3 using dummy_hcd
[  125.063696][   T27] usb 3-1: New USB device found: idVendor=0b48, idProduct=1003, bcdDevice=1.00
[  125.116993][   T27] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  125.119040][   T27] usb 3-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  125.120017][   T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.489582][ T5615] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  126.248859][   T27] dvb_ttusb_budget: cmd xter failed, receive error -71
[  126.248885][   T27] dvb_ttusb_budget: ttusb_init_controller: error
[  126.248897][   T27] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  126.561139][    T9] usb 2-1: USB disconnect, device number 4
[  126.695150][   T27] DVB: Unable to find symbol stv0299_attach()
[  126.911575][   T27] DVB: Unable to find symbol tda8083_attach()
[  126.911596][   T27] dvb_ttusb_budget: no frontend driver found for device [0b48:1003]
[  127.526695][   T27] usb 3-1: USB disconnect, device number 3
[  127.529206][ T6244] loop0: detected capacity change from 0 to 2048
[  129.059319][ T6244] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  129.437780][ T5609] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  129.487265][ T6263] loop1: detected capacity change from 0 to 8
[  129.638829][ T6263] SQUASHFS error: lzo decompression failed, data probably corrupt
[  129.638866][ T6263] SQUASHFS error: Failed to read block 0x82: -5
[  129.638882][ T6263] SQUASHFS error: Unable to read metadata cache entry [80]
[  129.638905][ T6263] SQUASHFS error: Unable to read inode 0x11f
[  129.754435][ T6263] program syz.1.118 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  130.785050][ T6270] loop0: detected capacity change from 0 to 32768
[  130.855219][ T6270] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.120 (6270)
[  132.654192][ T6270] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  132.654239][ T6270] BTRFS info (device loop0): using sha256 checksum algorithm
[  132.929373][ T6300] FAULT_INJECTION: forcing a failure.
[  132.929373][ T6300] name failslab, interval 1, probability 0, space 0, times 0
[  132.929408][ T6300] CPU: 0 UID: 0 PID: 6300 Comm: syz.1.124 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  132.929435][ T6300] Tainted: [L]=SOFTLOCKUP
[  132.929442][ T6300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  132.929454][ T6300] Call Trace:
[  132.929462][ T6300]  <TASK>
[  132.929470][ T6300]  dump_stack_lvl+0xe8/0x150
[  132.929516][ T6300]  should_fail_ex+0x3eb/0x540
[  132.929549][ T6300]  should_failslab+0xa8/0x100
[  132.929581][ T6300]  __kmalloc_node_track_caller_noprof+0xf6/0x720
[  132.929608][ T6300]  ? bpf_insn_prepare_dump+0xc3/0xb00
[  132.929631][ T6300]  ? bpf_insn_prepare_dump+0xc3/0xb00
[  132.929660][ T6300]  kmemdup_noprof+0x2b/0x70
[  132.929686][ T6300]  bpf_insn_prepare_dump+0xc3/0xb00
[  132.929710][ T6300]  ? __mutex_unlock_slowpath+0x731/0x900
[  132.929748][ T6300]  ? __pfx_bpf_insn_prepare_dump+0x10/0x10
[  132.929772][ T6300]  ? bpf_lsm_capable+0x9/0x20
[  132.929790][ T6300]  ? security_capable+0x7e/0x2c0
[  132.929819][ T6300]  bpf_obj_get_info_by_fd+0x1c40/0x3540
[  132.929855][ T6300]  ? __pfx_bpf_obj_get_info_by_fd+0x10/0x10
[  132.929879][ T6300]  ? __lock_acquire+0x747/0x2de0
[  132.929916][ T6300]  ? kstrtoull+0x137/0x1d0
[  132.929973][ T6300]  ? __might_fault+0xaf/0x130
[  132.929995][ T6300]  ? bpf_lsm_bpf+0x9/0x20
[  132.930012][ T6300]  ? security_bpf+0x7e/0x2d0
[  132.930035][ T6300]  __sys_bpf+0xbf7/0xe00
[  132.930073][ T6300]  ? __pfx___sys_bpf+0x10/0x10
[  132.930113][ T6300]  ? __fget_files+0x2a/0x420
[  132.930155][ T6300]  ? ksys_write+0x242/0x270
[  132.930185][ T6300]  ? __pfx_ksys_write+0x10/0x10
[  132.930217][ T6300]  __x64_sys_bpf+0xba/0xd0
[  132.930248][ T6300]  do_syscall_64+0x166/0x520
[  132.930275][ T6300]  ? trace_irq_disable+0x3b/0x140
[  132.930301][ T6300]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  132.930331][ T6300]  ? clear_bhb_loop+0x70/0xc0
[  132.930357][ T6300]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  132.930377][ T6300] RIP: 0033:0x7f4a7719e159
[  132.930399][ T6300] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  132.930416][ T6300] RSP: 002b:00007f4a780f3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  132.930439][ T6300] RAX: ffffffffffffffda RBX: 00007f4a77425fa0 RCX: 00007f4a7719e159
[  132.930453][ T6300] RDX: 0000000000000010 RSI: 0000200000001440 RDI: 000000000000000f
[  132.930466][ T6300] RBP: 00007f4a780f3090 R08: 0000000000000000 R09: 0000000000000000
[  132.930479][ T6300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  132.930491][ T6300] R13: 00007f4a77426038 R14: 00007f4a77425fa0 R15: 00007ffe0f5eb4b8
[  132.930523][ T6300]  </TASK>
[  132.948468][ T1316] ieee802154 phy0 wpan0: encryption failed: -22
[  132.948542][ T1316] ieee802154 phy1 wpan1: encryption failed: -22
[  133.284378][ T6270] BTRFS error (device loop0): open_ctree failed: -EINTR
[  133.325104][ T6304] loop2: detected capacity change from 0 to 16
[  133.353991][ T6304] erofs (device loop2): mounted with root inode @ nid 36.
[  133.503818][ T6311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  133.510649][ T6313] FAULT_INJECTION: forcing a failure.
[  133.510649][ T6313] name failslab, interval 1, probability 0, space 0, times 0
[  133.510745][ T6313] CPU: 0 UID: 0 PID: 6313 Comm: syz.3.126 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  133.510817][ T6313] Tainted: [L]=SOFTLOCKUP
[  133.510845][ T6313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  133.510877][ T6313] Call Trace:
[  133.510897][ T6313]  <TASK>
[  133.510923][ T6313]  dump_stack_lvl+0xe8/0x150
[  133.511015][ T6313]  should_fail_ex+0x3eb/0x540
[  133.511141][ T6313]  ? __pfx_shmem_alloc_inode+0x10/0x10
[  133.511202][ T6313]  should_failslab+0xa8/0x100
[  133.511288][ T6313]  ? __pfx_shmem_alloc_inode+0x10/0x10
[  133.511361][ T6313]  kmem_cache_alloc_lru_noprof+0xa2/0x5f0
[  133.511447][ T6313]  ? shmem_alloc_inode+0x28/0x40
[  133.511515][ T6313]  ? shmem_alloc_inode+0x28/0x40
[  133.511578][ T6313]  ? __pfx_shmem_alloc_inode+0x10/0x10
[  133.511628][ T6313]  shmem_alloc_inode+0x28/0x40
[  133.511681][ T6313]  alloc_inode+0x6a/0x1b0
[  133.511751][ T6313]  new_inode+0x1f/0x170
[  133.511811][ T6313]  ? shmem_get_inode+0x29a/0x1030
[  133.511888][ T6313]  shmem_get_inode+0x3a4/0x1030
[  133.511974][ T6313]  ? __pfx_shmem_get_inode+0x10/0x10
[  133.512059][ T6313]  __shmem_file_setup+0x20b/0x370
[  133.512135][ T6313]  ? __pfx___shmem_file_setup+0x10/0x10
[  133.512248][ T6313]  memfd_alloc_file+0x99/0x540
[  133.512316][ T6313]  ? __pfx_memfd_alloc_file+0x10/0x10
[  133.512404][ T6313]  __se_sys_memfd_create+0x31f/0x410
[  133.512479][ T6313]  do_syscall_64+0x166/0x520
[  133.512555][ T6313]  ? trace_irq_disable+0x3b/0x140
[  133.512621][ T6313]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  133.512643][ T6313]  ? clear_bhb_loop+0x70/0xc0
[  133.512693][ T6313]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  133.512756][ T6313] RIP: 0033:0x7fc1cdd9e159
[  133.512836][ T6313] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  133.512888][ T6313] RSP: 002b:00007fc1cebf7d58 EFLAGS: 00000206 ORIG_RAX: 000000000000013f
[  133.512944][ T6313] RAX: ffffffffffffffda RBX: 000000000000059d RCX: 00007fc1cdd9e159
[  133.512986][ T6313] RDX: 00007fc1cebf7ddc RSI: 0000000000000000 RDI: 00007fc1cde3524b
[  133.513027][ T6313] RBP: 0000200000000000 R08: 00000000ffffffff R09: 0000000000000000
[  133.513060][ T6313] R10: 0000000000000001 R11: 0000000000000206 R12: 0000000000000001
[  133.513093][ T6313] R13: 00007fc1cebf7ddc R14: 00007fc1cebf7de0 R15: 00007fff54168b58
[  133.513177][ T6313]  </TASK>
[  133.556771][ T6311] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  133.719876][   T58] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  133.805659][ T6310] loop4: detected capacity change from 0 to 256
[  133.806995][ T6311] loop1: detected capacity change from 0 to 512
[  133.830306][ T6310] exfat: Unknown parameter '
'
[  133.863561][ T6310] loop4: detected capacity change from 0 to 256
[  133.877490][ T6310] exfat: Unknown parameter '
'
[  133.903610][ T6311] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  133.924992][ T6310] loop4: detected capacity change from 0 to 256
[  133.929173][ T6310] exfat: Unknown parameter '
'
[  133.946249][   T58] usb 2-1: Using ep0 maxpacket: 32
[  133.948493][   T58] usb 2-1: New USB device found: idVendor=046d, idProduct=1cd6, bcdDevice=40.c3
[  133.948535][   T58] usb 2-1: no configurations
[  133.948550][   T58] usb 2-1: can't read configurations, error -22
[  133.980569][ T6311] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  133.980665][ T6311] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  134.026884][ T6310] loop4: detected capacity change from 0 to 256
[  134.028997][ T6310] exfat: Unknown parameter '
'
[  134.074210][   T58] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  134.111594][ T6310] loop4: detected capacity change from 0 to 256
[  134.122484][ T6310] exfat: Unknown parameter '
'
[  134.225711][   T58] usb 2-1: Using ep0 maxpacket: 32
[  134.236466][   T58] usb 2-1: New USB device found: idVendor=046d, idProduct=1cd6, bcdDevice=40.c3
[  134.236509][   T58] usb 2-1: no configurations
[  134.236523][   T58] usb 2-1: can't read configurations, error -22
[  134.237436][   T58] usb usb2-port1: attempt power cycle
[  134.357841][ T6310] loop4: detected capacity change from 0 to 256
[  134.359846][ T6310] exfat: Unknown parameter '
'
[  134.419970][ T6310] loop4: detected capacity change from 0 to 256
[  134.426858][ T6310] exfat: Unknown parameter '
'
[  134.452450][ T6310] loop4: detected capacity change from 0 to 256
[  134.453085][ T6310] exfat: Unknown parameter '
'
[  134.470893][ T6310] exfat: Unknown parameter '
'
[  134.485220][ T6310] exfat: Unknown parameter '
'
[  134.497461][ T6310] exfat: Unknown parameter '
'
[  134.574232][   T58] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  134.599562][   T58] usb 2-1: Using ep0 maxpacket: 32
[  134.600564][   T58] usb 2-1: New USB device found: idVendor=046d, idProduct=1cd6, bcdDevice=40.c3
[  134.600601][   T58] usb 2-1: no configurations
[  134.600614][   T58] usb 2-1: can't read configurations, error -22
[  134.659663][ T6310] exfat: Unknown parameter '
'
[  134.724211][   T58] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  134.745542][   T58] usb 2-1: Using ep0 maxpacket: 32
[  134.746374][   T58] usb 2-1: New USB device found: idVendor=046d, idProduct=1cd6, bcdDevice=40.c3
[  134.746412][   T58] usb 2-1: no configurations
[  134.746425][   T58] usb 2-1: can't read configurations, error -22
[  134.746862][   T58] usb usb2-port1: unable to enumerate USB device
[  134.825234][ T6310] exfat: Unknown parameter '
'
[  134.885373][ T6310] exfat: Unknown parameter '
'
[  134.931999][ T6310] exfat: Unknown parameter '
'
[  135.586170][ T6332] F2FS-fs (loop0): invalid crc value
[  135.766774][ T6332] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  135.825082][ T6332] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  136.297762][ T6352] F2FS-fs (loop0): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 65535, max: 36
[  136.300915][ T6353] F2FS-fs (loop0): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 65535, max: 36
[  136.902189][ T5623] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  137.140415][ T6358] ntfs3: Unknown parameter 'dev/kvm'
[  138.339177][ T6371] set_capacity_and_notify: 9 callbacks suppressed
[  138.339197][ T6371] loop2: detected capacity change from 0 to 512
[  138.375921][ T6371] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  138.411495][ T6371] EXT4-fs error (device loop2): ext4_orphan_get:1429: comm syz.2.144: bad orphan inode 131083
[  138.411529][ T6371] loop2: lost filesystem error report for type 5 error -117
[  138.422306][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  138.422331][    C1] EXT4-fs (loop2): initial error at time 1790699446: ext4_orphan_get:1429
[  138.422358][    C1] EXT4-fs (loop2): last error at time 1790699446: ext4_orphan_get:1429
[  138.458525][ T6371] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  138.828217][ T6381] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  139.056393][ T6381] loop1: detected capacity change from 0 to 32768
[  139.057003][ T6381] gfs2: Unknown parameter '/dev/snd/midiC#D#'
[  140.902075][ T5614] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  140.980009][ T6389] FAULT_INJECTION: forcing a failure.
[  140.980009][ T6389] name failslab, interval 1, probability 0, space 0, times 0
[  140.980041][ T6389] CPU: 1 UID: 0 PID: 6389 Comm: syz.4.150 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  140.980068][ T6389] Tainted: [L]=SOFTLOCKUP
[  140.980076][ T6389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  140.980088][ T6389] Call Trace:
[  140.980096][ T6389]  <TASK>
[  140.980104][ T6389]  dump_stack_lvl+0xe8/0x150
[  140.980141][ T6389]  should_fail_ex+0x3eb/0x540
[  140.980197][ T6389]  should_failslab+0xa8/0x100
[  140.980230][ T6389]  ? anon_vma_clone+0x3b1/0xa20
[  140.980255][ T6389]  kmem_cache_alloc_noprof+0x9c/0x600
[  140.980284][ T6389]  ? anon_vma_clone+0x3b1/0xa20
[  140.980315][ T6389]  anon_vma_clone+0x3b1/0xa20
[  140.980347][ T6389]  __split_vma+0x3e0/0xa70
[  140.980384][ T6389]  ? __pfx___split_vma+0x10/0x10
[  140.980410][ T6389]  ? ima_match_policy+0x21a6/0x2230
[  140.980456][ T6389]  ? lock_acquire+0x115/0x350
[  140.980487][ T6389]  vms_gather_munmap_vmas+0x322/0x1370
[  140.980530][ T6389]  ? process_measurement+0x7b2/0x1c10
[  140.980563][ T6389]  ? __pfx_vms_gather_munmap_vmas+0x10/0x10
[  140.980593][ T6389]  ? up_write+0x19d/0x4a0
[  140.980620][ T6389]  ? __lock_acquire+0x747/0x2de0
[  140.980657][ T6389]  do_vmi_align_munmap+0x2b4/0x4b0
[  140.980716][ T6389]  ? __pfx_do_vmi_align_munmap+0x10/0x10
[  140.980767][ T6389]  ? mas_walk+0x37e/0x490
[  140.980797][ T6389]  ? mas_find+0x642/0xcb0
[  140.980830][ T6389]  do_vmi_munmap+0x252/0x2d0
[  140.980868][ T6389]  do_munmap+0xf5/0x160
[  140.980890][ T6389]  ? __lock_acquire+0x747/0x2de0
[  140.980918][ T6389]  ? __pfx_do_munmap+0x10/0x10
[  140.980961][ T6389]  mremap_to+0x33a/0x8d0
[  140.980999][ T6389]  ? check_prep_vma+0x81d/0xca0
[  140.981028][ T6389]  ? __pfx_mremap_to+0x10/0x10
[  140.981068][ T6389]  ? __pfx_check_prep_vma+0x10/0x10
[  140.981108][ T6389]  __se_sys_mremap+0xf71/0x12e0
[  140.981148][ T6389]  ? ksys_write+0x1e6/0x270
[  140.981177][ T6389]  ? __pfx___se_sys_mremap+0x10/0x10
[  140.981208][ T6389]  ? __mutex_unlock_slowpath+0x731/0x900
[  140.981242][ T6389]  ? __fget_files+0x2a/0x420
[  140.981267][ T6389]  ? __fget_files+0x3a2/0x420
[  140.981293][ T6389]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  140.981328][ T6389]  ? fdget+0x1ac/0x250
[  140.981367][ T6389]  ? __pfx_ksys_write+0x10/0x10
[  140.981401][ T6389]  ? __x64_sys_mremap+0x20/0xc0
[  140.981433][ T6389]  do_syscall_64+0x166/0x520
[  140.981461][ T6389]  ? trace_irq_disable+0x3b/0x140
[  140.981489][ T6389]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  140.981511][ T6389]  ? clear_bhb_loop+0x70/0xc0
[  140.981537][ T6389]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  140.981558][ T6389] RIP: 0033:0x7fd7ae99e159
[  140.981578][ T6389] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  140.981596][ T6389] RSP: 002b:00007fd7af868028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019
[  140.981620][ T6389] RAX: ffffffffffffffda RBX: 00007fd7aec25fa0 RCX: 00007fd7ae99e159
[  140.981635][ T6389] RDX: 0000000000200000 RSI: 0000000000600600 RDI: 0000200000000000
[  140.981649][ T6389] RBP: 00007fd7af868090 R08: 0000200000a00000 R09: 0000000000000000
[  140.981664][ T6389] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001
[  140.981684][ T6389] R13: 00007fd7aec26038 R14: 00007fd7aec25fa0 R15: 00007ffe61f3c4b8
[  140.981719][ T6389]  </TASK>
[  141.361049][ T6397] loop2: detected capacity change from 0 to 2048
[  141.397716][ T6397] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  141.554146][ T6400] loop4: detected capacity change from 0 to 512
[  141.685447][ T6402] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  141.955380][ T6409] netlink: 72 bytes leftover after parsing attributes in process `syz.3.156'.
[  141.960356][ T6409] bonding: bç¡·„ÆQ% is being created...
[  141.972156][ T6409] bonding: bç¡·„ÆQ% creation failed
[  142.208422][ T6403] loop1: detected capacity change from 0 to 32768
[  142.211720][ T6403] jfs: Unknown parameter '
[  142.211720][ T6403] '
[  142.306300][   T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  142.445332][ T6402] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem
[  142.465880][   T10] usb 4-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  142.473251][   T10] usb 4-1: config index 0 descriptor too short (expected 39, got 27)
[  142.473392][   T10] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  142.475403][   T10] usb 4-1: config 0 interface 0 has no altsetting 0
[  142.507954][   T10] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  142.507979][   T10] usb 4-1: Product: syz
[  142.507992][   T10] usb 4-1: Manufacturer: syz
[  142.508005][   T10] usb 4-1: SerialNumber: syz
[  142.541467][   T10] usb 4-1: config 0 descriptor??
[  142.567773][   T10] hub 4-1:0.0: bad descriptor, ignoring hub
[  142.567802][   T10] hub 4-1:0.0: probe with driver hub failed with error -5
[  142.609066][   T10] usb 4-1: selecting invalid altsetting 0
[  142.967753][   T10] usb 4-1: USB disconnect, device number 8
[  143.102061][ T5625] udevd[5625]: setting owner of /dev/snd/controlC3 to uid=0, gid=29 failed: No such file or directory
[  146.246094][   T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  146.405338][   T10] usb 5-1: New USB device found: idVendor=0bda, idProduct=8150, bcdDevice=0.00
[  146.411471][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  146.411499][   T10] usb 5-1: Product: syz
[  146.411516][   T10] usb 5-1: Manufacturer: syz
[  146.411532][   T10] usb 5-1: SerialNumber: syz
[  147.086047][   T10] (unnamed net_device) (uninitialized): Assigned a random MAC address: d6:31:5a:37:9e:83
[  147.163992][   T10] rtl8150 5-1:1.0: eth1: rtl8150 is detected
[  147.525491][ T5713] usb 2-1: new full-speed USB device number 9 using dummy_hcd
[  147.677366][ T5713] usb 2-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40
[  147.678830][ T5713] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  147.678877][ T5713] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18
[  147.683556][ T5713] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  147.683580][ T5713] usb 2-1: SerialNumber: syz
[  147.746723][ T5713] usb 2-1: No union descriptors
[  147.987021][ T5714] usb 2-1: USB disconnect, device number 9
[  148.871865][ T6461] loop3: detected capacity change from 0 to 40427
[  148.933805][ T6461] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504)
[  148.933842][ T6461] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  149.073538][ T6461] F2FS-fs (loop3): invalid crc value
[  149.074644][ T6461] F2FS-fs (loop3): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root and reserve_node
[  149.117415][ T5714] usb 5-1: USB disconnect, device number 3
[  149.743205][ T6461] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  149.842325][ T6461] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  149.842359][ T6461] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  149.988834][ T5615] syz-executor: attempt to access beyond end of device
[  149.988834][ T5615] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  150.021670][ T5615] CPU: 1 UID: 0 PID: 5615 Comm: syz-executor Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  150.021714][ T5615] Tainted: [L]=SOFTLOCKUP
[  150.021723][ T5615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  150.021736][ T5615] Call Trace:
[  150.021745][ T5615]  <TASK>
[  150.021755][ T5615]  dump_stack_lvl+0xe8/0x150
[  150.021794][ T5615]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  150.021828][ T5615]  f2fs_write_end_bio+0xda7/0x11c0
[  150.021881][ T5615]  __submit_merged_bio+0x258/0x6a0
[  150.021907][ T5615]  ? rcu_is_watching+0x16/0xb0
[  150.021947][ T5615]  f2fs_submit_merged_write_cond+0x1ef/0x590
[  150.021977][ T5615]  ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10
[  150.022030][ T5615]  f2fs_write_data_pages+0x2a13/0x36e0
[  150.022101][ T5615]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  150.022130][ T5615]  ? is_bpf_text_address+0x26/0x2b0
[  150.022165][ T5615]  ? arch_stack_walk+0xfb/0x150
[  150.022224][ T5615]  ? add_lock_to_list+0xc7/0x100
[  150.022263][ T5615]  ? lockdep_unlock+0x5c/0xd0
[  150.022286][ T5615]  ? __lock_acquire+0x1511/0x2de0
[  150.022354][ T5615]  ? do_raw_spin_lock+0x12b/0x2f0
[  150.022390][ T5615]  ? do_raw_spin_unlock+0xf5/0x200
[  150.022414][ T5615]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  150.022446][ T5615]  do_writepages+0x338/0x560
[  150.022483][ T5615]  ? do_raw_spin_unlock+0xf5/0x200
[  150.022511][ T5615]  filemap_fdatawrite+0x1e9/0x2f0
[  150.022541][ T5615]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  150.022624][ T5615]  ? do_raw_spin_unlock+0xf5/0x200
[  150.022652][ T5615]  f2fs_sync_dirty_inodes+0x471/0x970
[  150.022701][ T5615]  f2fs_write_checkpoint+0x860/0x24d0
[  150.022772][ T5615]  kill_f2fs_super+0x2dc/0x700
[  150.022811][ T5615]  ? rcu_do_enqueue+0x616/0x870
[  150.022838][ T5615]  ? lockdep_hardirqs_on+0x7b/0x110
[  150.022868][ T5615]  ? __pfx_kill_f2fs_super+0x10/0x10
[  150.022918][ T5615]  ? __pfx_call_rcu+0x10/0x10
[  150.022958][ T5615]  ? shrinker_free+0x2a7/0x3b0
[  150.022988][ T5615]  deactivate_locked_super+0xbe/0x110
[  150.023019][ T5615]  cleanup_mnt+0x3d3/0x460
[  150.023056][ T5615]  task_work_run+0x1d9/0x260
[  150.023088][ T5615]  ? __pfx_task_work_run+0x10/0x10
[  150.023126][ T5615]  exit_to_user_mode_loop+0x204/0x770
[  150.023157][ T5615]  ? rcu_is_watching+0x16/0xb0
[  150.023196][ T5615]  do_syscall_64+0x328/0x520
[  150.023225][ T5615]  ? trace_irq_disable+0x3b/0x140
[  150.023255][ T5615]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.023279][ T5615]  ? clear_bhb_loop+0x70/0xc0
[  150.023308][ T5615]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.023337][ T5615] RIP: 0033:0x7fc1cdd9f397
[  150.023359][ T5615] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  150.023377][ T5615] RSP: 002b:00007fff54167dc8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  150.023401][ T5615] RAX: 0000000000000000 RBX: 00007fc1cde344bb RCX: 00007fc1cdd9f397
[  150.023417][ T5615] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff54167e80
[  150.023431][ T5615] RBP: 00007fff54167e80 R08: 00007fff54168e80 R09: 00000000ffffffff
[  150.023447][ T5615] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff54168f10
[  150.023461][ T5615] R13: 00007fc1cde344bb R14: 0000000000024954 R15: 00007fff54168f50
[  150.023498][ T5615]  </TASK>
[  150.080662][ T5615] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  150.889017][ T6500] netlink: 32 bytes leftover after parsing attributes in process `syz.1.177'.
[  151.922708][ T6508] loop2: detected capacity change from 0 to 256
[  151.929648][ T6507] loop4: detected capacity change from 0 to 1024
[  151.950149][ T6508] exfat: Invalid uid '0x00000000ffffffff'
[  152.005906][ T6507] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  152.109925][ T6514] loop0: detected capacity change from 0 to 256
[  152.110974][ T6514] vfat: Bad value for 'dmask'
[  152.231667][ T5610] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  152.293322][ T6517] loop1: detected capacity change from 0 to 256
[  152.378445][ T6517] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xcf07e9af, utbl_chksum : 0xe619d30d)
[  153.225118][ T6531] loop3: detected capacity change from 0 to 512
[  153.332296][ T6531] EXT4-fs error (device loop3): ext4_orphan_get:1429: comm syz.3.188: bad orphan inode 15
[  153.332332][ T6531] loop3: lost filesystem error report for type 5 error -117
[  153.334144][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  153.334185][    C1] EXT4-fs (loop3): initial error at time 1790699461: ext4_orphan_get:1429
[  153.334209][    C1] EXT4-fs (loop3): last error at time 1790699461: ext4_orphan_get:1429
[  153.344966][ T6531] ext4_test_bit(bit=14, block=5) = 0
[  153.395444][ T6531] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  154.336644][ T6537] EXT4-fs error (device loop3): __ext4_new_inode:1083: comm syz.3.188: reserved inode found cleared - inode=1
[  154.894659][ T6533] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters
[  155.917461][ T6547] loop4: detected capacity change from 0 to 128
[  155.981691][ T6547] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  156.014862][ T6547] ext4 filesystem being mounted at /42/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  156.170207][ T5615] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  156.240926][ T5610] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  156.283581][ T6553] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  158.431335][ T6584] loop0: detected capacity change from 0 to 4096
[  158.445864][ T6584] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  158.474768][ T6584] EXT4-fs warning (device loop0): ext4_enable_quotas:7304: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  158.477583][ T6584] EXT4-fs (loop0): mount failed
[  158.723639][ T6589] loop0: detected capacity change from 0 to 128
[  158.746949][ T6589] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  158.746980][ T6589] FAT-fs (loop0): data area starts beyond volume (36 > 6)
[  158.768206][ T6589] FAT-fs (loop0): Can't find a valid FAT filesystem
[  158.933887][   T33] audit: type=1800 audit(1790699467.133:2): pid=6582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.206" name="file1" dev="sda1" ino=2047 res=0 errno=0
[  158.994758][ T6571] loop2: detected capacity change from 0 to 40427
[  159.017204][ T6571] F2FS-fs (loop2): build fault injection rate: 690
[  159.021799][ T6571] F2FS-fs (loop2): invalid crc value
[  159.153530][ T6571] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  159.179237][ T6571] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  160.396098][ T6607] loop1: detected capacity change from 0 to 512
[  160.434577][ T5614] syz-executor: attempt to access beyond end of device
[  160.434577][ T5614] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  160.435561][ T5614] CPU: 1 UID: 0 PID: 5614 Comm: syz-executor Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  160.435593][ T5614] Tainted: [L]=SOFTLOCKUP
[  160.435601][ T5614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  160.435613][ T5614] Call Trace:
[  160.435622][ T5614]  <TASK>
[  160.435631][ T5614]  dump_stack_lvl+0xe8/0x150
[  160.435666][ T5614]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  160.435696][ T5614]  ? __submit_merged_bio+0x258/0x6a0
[  160.435720][ T5614]  f2fs_cache_write_end_io+0x2a5/0x6e0
[  160.435754][ T5614]  ? bio_endio+0x984/0xac0
[  160.435785][ T5614]  __submit_merged_bio+0x258/0x6a0
[  160.435809][ T5614]  ? rcu_is_watching+0x16/0xb0
[  160.435844][ T5614]  f2fs_submit_merged_write+0x2cc/0x610
[  160.435875][ T5614]  ? __pfx_f2fs_submit_merged_write+0x10/0x10
[  160.435910][ T5614]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  160.435937][ T5614]  ? f2fs_cache_gang_lookup_tag+0x1a5/0x1c0
[  160.435966][ T5614]  f2fs_writeback_node_caches+0xf85/0x1120
[  160.436035][ T5614]  ? __pfx_f2fs_writeback_node_caches+0x10/0x10
[  160.436091][ T5614]  ? f2fs_write_checkpoint+0xe1e/0x24d0
[  160.436141][ T5614]  ? up_write+0x19d/0x4a0
[  160.436168][ T5614]  f2fs_write_checkpoint+0xe51/0x24d0
[  160.436253][ T5614]  kill_f2fs_super+0x2dc/0x700
[  160.436290][ T5614]  ? rcu_do_enqueue+0x616/0x870
[  160.436314][ T5614]  ? lockdep_hardirqs_on+0x7b/0x110
[  160.436340][ T5614]  ? __pfx_kill_f2fs_super+0x10/0x10
[  160.436382][ T5614]  ? __pfx_call_rcu+0x10/0x10
[  160.436417][ T5614]  ? shrinker_free+0x2a7/0x3b0
[  160.436443][ T5614]  deactivate_locked_super+0xbe/0x110
[  160.436473][ T5614]  cleanup_mnt+0x3d3/0x460
[  160.436510][ T5614]  task_work_run+0x1d9/0x260
[  160.436539][ T5614]  ? __pfx_task_work_run+0x10/0x10
[  160.436585][ T5614]  exit_to_user_mode_loop+0x204/0x770
[  160.436612][ T5614]  ? rcu_is_watching+0x16/0xb0
[  160.436647][ T5614]  do_syscall_64+0x328/0x520
[  160.436676][ T5614]  ? trace_irq_disable+0x3b/0x140
[  160.436703][ T5614]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  160.436722][ T5614]  ? clear_bhb_loop+0x70/0xc0
[  160.436749][ T5614]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  160.436771][ T5614] RIP: 0033:0x7f870d39f397
[  160.436791][ T5614] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  160.436809][ T5614] RSP: 002b:00007ffe0e980e18 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  160.436833][ T5614] RAX: 0000000000000000 RBX: 00007f870d4344bb RCX: 00007f870d39f397
[  160.436849][ T5614] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe0e980ed0
[  160.436862][ T5614] RBP: 00007ffe0e980ed0 R08: 00007ffe0e981ed0 R09: 00000000ffffffff
[  160.436877][ T5614] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe0e981f60
[  160.436891][ T5614] R13: 00007f870d4344bb R14: 00000000000271ae R15: 00007ffe0e981fa0
[  160.436927][ T5614]  </TASK>
[  160.587672][ T6607] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  160.587948][ T6607] ext4 filesystem being mounted at /37/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  160.603237][ T5614] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  161.120169][ T5623] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.276655][ T6621] FAULT_INJECTION: forcing a failure.
[  161.276655][ T6621] name failslab, interval 1, probability 0, space 0, times 0
[  161.276690][ T6621] CPU: 0 UID: 0 PID: 6621 Comm: syz.0.220 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  161.276721][ T6621] Tainted: [L]=SOFTLOCKUP
[  161.276730][ T6621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  161.276744][ T6621] Call Trace:
[  161.276752][ T6621]  <TASK>
[  161.276762][ T6621]  dump_stack_lvl+0xe8/0x150
[  161.276802][ T6621]  should_fail_ex+0x3eb/0x540
[  161.276845][ T6621]  should_failslab+0xa8/0x100
[  161.276883][ T6621]  __kmalloc_node_track_caller_noprof+0xf6/0x720
[  161.276913][ T6621]  ? vsnprintf+0x3a0/0xef0
[  161.276938][ T6621]  ? debugfs_create_symlink+0x29/0x1c0
[  161.276971][ T6621]  ? debugfs_create_symlink+0x29/0x1c0
[  161.277014][ T6621]  kstrdup+0x42/0x100
[  161.277044][ T6621]  debugfs_create_symlink+0x29/0x1c0
[  161.277083][ T6621]  ref_tracker_dir_symlink+0x25f/0x440
[  161.277117][ T6621]  ? __pfx_ref_tracker_dir_symlink+0x10/0x10
[  161.277171][ T6621]  ? __lock_acquire+0x747/0x2de0
[  161.277213][ T6621]  ? ida_alloc_range+0x82e/0x870
[  161.277250][ T6621]  net_ns_net_init+0x77/0x110
[  161.277282][ T6621]  ops_init+0x35d/0x5d0
[  161.277318][ T6621]  setup_net+0x118/0x350
[  161.277349][ T6621]  ? __pfx_setup_net+0x10/0x10
[  161.277374][ T6621]  ? down_read_killable+0x1b6/0x3b0
[  161.277410][ T6621]  ? __ns_common_init+0x38a/0x590
[  161.277458][ T6621]  copy_net_ns+0x536/0x770
[  161.277487][ T6621]  create_new_namespaces+0x3f0/0x6b0
[  161.277527][ T6621]  ? security_capable+0x7e/0x2c0
[  161.277560][ T6621]  unshare_nsproxy_namespaces+0x144/0x190
[  161.277599][ T6621]  ksys_unshare+0x53c/0x890
[  161.277638][ T6621]  ? __pfx_ksys_unshare+0x10/0x10
[  161.277676][ T6621]  ? rcu_is_watching+0x16/0xb0
[  161.277723][ T6621]  __x64_sys_unshare+0x38/0x50
[  161.277757][ T6621]  do_syscall_64+0x166/0x520
[  161.277788][ T6621]  ? trace_irq_disable+0x3b/0x140
[  161.277819][ T6621]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  161.277843][ T6621]  ? clear_bhb_loop+0x70/0xc0
[  161.277872][ T6621]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  161.277895][ T6621] RIP: 0033:0x7fecb899e159
[  161.277916][ T6621] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  161.277936][ T6621] RSP: 002b:00007fecb9827028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  161.277961][ T6621] RAX: ffffffffffffffda RBX: 00007fecb8c25fa0 RCX: 00007fecb899e159
[  161.277979][ T6621] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
[  161.277994][ T6621] RBP: 00007fecb8a3506b R08: 0000000000000000 R09: 0000000000000000
[  161.278008][ T6621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  161.278022][ T6621] R13: 00007fecb8c26038 R14: 00007fecb8c25fa0 R15: 00007ffe591edf68
[  161.278059][ T6621]  </TASK>
[  161.609993][ T6626] loop1: detected capacity change from 0 to 256
[  162.900452][ T6646] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  163.124269][ T5713] usb 4-1: new full-speed USB device number 9 using dummy_hcd
[  163.184431][   T33] audit: type=1800 audit(1790699471.393:3): pid=6656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.231" name=08 dev="sda1" ino=2048 res=0 errno=0
[  163.332001][ T5713] usb 4-1: not running at top speed; connect to a high speed hub
[  163.333068][ T5713] usb 4-1: New USB device found: idVendor=06cd, idProduct=0131, bcdDevice=1.00
[  163.649140][ T5713] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  163.771093][ T5713] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  163.771124][ T5713] usb 4-1: Product: syz
[  163.772238][ T5713] usb 4-1: Manufacturer: syz
[  163.772347][ T5713] usb 4-1: SerialNumber: syz
[  164.158346][ T5713] keyspan 4-1:1.0: Keyspan 4 port adapter converter detected
[  164.229106][ T5713] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB0
[  164.276085][ T5713] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB1
[  164.311336][ T5713] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB2
[  164.328538][ T5713] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB3
[  164.374743][ T5758] usb 4-1: USB disconnect, device number 9
[  164.496838][ T5758] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0
[  164.541031][ T5758] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1
[  164.626904][ T5758] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2
[  164.653511][ T5758] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3
[  164.667900][ T6637] loop2: detected capacity change from 0 to 40427
[  164.680799][ T6637] F2FS-fs (loop2): Invalid SB checksum offset: 0
[  164.680820][ T6637] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[  164.692793][ T5758] keyspan 4-1:1.0: device disconnected
[  164.710060][ T6637] F2FS-fs (loop2): invalid crc value
[  164.756339][ T6667] loop4: detected capacity change from 0 to 512
[  164.802518][ T6637] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  164.828499][ T6637] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0
[  164.828527][ T6637] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  164.831427][ T6667] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  164.840710][ T6667] ext4 filesystem being mounted at /54/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  165.171096][ T5610] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  165.187818][ T6678] loop1: detected capacity change from 0 to 512
[  165.283596][ T6678] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002]
[  165.283717][ T6678] System zones: 1-12
[  165.317172][ T6678] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: inode #12: comm syz.1.235: missing EA_INODE flag
[  165.317203][ T6678] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  165.329216][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  165.329238][    C0] EXT4-fs (loop1): initial error at time 1790699473: ext4_xattr_inode_iget:437: inode 12
[  165.329268][    C0] EXT4-fs (loop1): last error at time 1790699473: ext4_xattr_inode_iget:437: inode 12
[  165.359809][ T6678] EXT4-fs error (device loop1): ext4_xattr_inode_iget:442: comm syz.1.235: error while reading EA inode 12 err=-117
[  165.359844][ T6678] loop1: lost filesystem error report for type 5 error -117
[  165.389125][ T6678] EXT4-fs (loop1): 1 orphan inode deleted
[  165.434944][ T6678] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  165.604489][ T6685] loop3: detected capacity change from 0 to 512
[  165.665041][ T6685] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002]
[  165.665172][ T6685] System zones: 1-12
[  165.714841][ T6685] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: inode #12: comm syz.3.238: missing EA_INODE flag
[  165.714876][ T6685] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  165.717891][ T6685] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.238: error while reading EA inode 12 err=-117
[  165.717924][ T6685] loop3: lost filesystem error report for type 5 error -117
[  165.724137][    C1] EXT4-fs (loop3): error count since last fsck: 2
[  165.724160][    C1] EXT4-fs (loop3): initial error at time 1790699473: ext4_xattr_inode_iget:437: inode 12
[  165.724193][    C1] EXT4-fs (loop3): last error at time 1790699473: ext4_xattr_inode_iget:442
[  165.762348][ T6685] EXT4-fs (loop3): 1 orphan inode deleted
[  165.813948][ T6685] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  165.876714][ T6688] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  165.939132][   T33] audit: type=1804 audit(1790699474.143:4): pid=6685 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.238" name="/newroot/50/file0/file1" dev="loop3" ino=18 res=1 errno=0
[  166.102610][ T5615] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  166.225622][ T6696] loop3: detected capacity change from 0 to 16
[  166.258073][ T6696] erofs (device loop3): mounted with root inode @ nid 36.
[  167.227316][ T6701] loop4: detected capacity change from 0 to 40427
[  167.229952][ T6701] f2fs: Unknown parameter 'whint_mode'
[  167.795295][ T5623] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  168.383049][ T6721] loop3: detected capacity change from 0 to 256
[  168.451238][ T6721] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xcab3d314, utbl_chksum : 0xe619d30d)
[  168.950308][ T6726] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  169.364440][ T6733] xt_hashlimit: size too large, truncated to 1048576
[  169.925893][ T6756] loop4: detected capacity change from 0 to 512
[  170.029407][ T6756] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  170.029515][ T6756] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  170.643297][ T6764] loop2: detected capacity change from 0 to 128
[  170.931048][ T6764] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  170.948566][ T6764] ext4 filesystem being mounted at /47/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  171.013235][ T5610] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  171.317028][ T5614] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  171.392487][ T6781] netlink: 48 bytes leftover after parsing attributes in process `syz.0.270'.
[  171.441177][ T6783] loop2: detected capacity change from 0 to 256
[  171.454756][ T5758] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  171.479924][ T6783] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d)
[  171.604378][ T5758] usb 4-1: Using ep0 maxpacket: 32
[  171.609548][ T5758] usb 4-1: New USB device found: idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  171.612247][ T5758] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  171.630284][ T5758] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  171.630351][ T5758] usb 4-1: Product: syz
[  171.630395][ T5758] usb 4-1: Manufacturer: syz
[  171.630420][ T5758] usb 4-1: SerialNumber: syz
[  171.684695][ T5758] usb 4-1: config 0 descriptor??
[  171.706907][ T5758] usb 4-1: No union descriptors
[  171.707911][ T5758] usb 4-1: unsupported MDLM descriptors
[  171.928160][   T27] usb 4-1: USB disconnect, device number 10
[  172.335080][ T6805] netlink: 12 bytes leftover after parsing attributes in process `syz.0.280'.
[  173.587238][ T6809] loop2: detected capacity change from 0 to 2048
[  173.871892][ T6812] tipc: Started in network mode
[  173.872048][ T6812] tipc: Node identity 7f000001, cluster identity 4711
[  173.876589][ T6812] tipc: New replicast peer: 127.0.0.1
[  173.878430][ T6812] tipc: Enabled bearer <udp:syz0>, priority 10
[  174.438272][ T6809]  loop2: p1 < > p4
[  174.438272][ T6809]  p4: <netbsd: >
[  174.441145][ T6809] loop2: p4 size 722688 extends beyond EOD, truncated
[  174.994660][   T27] tipc: Node number set to 2130706433
[  176.021521][ T6818] syz.1.281 (6818) used greatest stack depth: 17448 bytes left
[  176.030771][ T6820] loop3: detected capacity change from 0 to 256
[  176.108108][ T6820] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d)
[  176.183242][ T6820] exFAT-fs (loop3): start_clu is invalid cluster(0x0)
[  176.467271][ T6827] loop4: detected capacity change from 0 to 512
[  177.454006][ T6824] loop2: detected capacity change from 0 to 40427
[  177.466173][ T6824] f2fs: Unknown parameter 'whint_mode'
[  177.794288][   T27] usb 5-1: new full-speed USB device number 4 using dummy_hcd
[  177.906621][ T1169] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.951617][   T27] usb 5-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40
[  177.960786][   T27] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64
[  177.960877][   T27] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18
[  177.980657][   T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  177.980740][   T27] usb 5-1: SerialNumber: syz
[  178.022962][ T6841] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  178.198098][ T1169] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.258060][ T6841] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  178.272306][ T6843] loop0: detected capacity change from 0 to 40427
[  178.284101][ T6843] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  178.284128][ T6843] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  178.312123][ T6843] F2FS-fs (loop0): invalid crc value
[  178.370707][ T1169] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.477831][ T6843] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  178.500234][ T1169] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.517159][ T6843] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  178.517189][ T6843] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  178.739979][   T27] cdc_ether 5-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42
[  178.825349][   T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  178.832008][   T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  178.832812][   T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  178.857837][   T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  178.862005][   T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  179.386309][ T1169] bridge_slave_1: left allmulticast mode
[  179.386370][ T1169] bridge_slave_1: left promiscuous mode
[  179.389111][ T1169] bridge0: port 2(bridge_slave_1) entered disabled state
[  179.451004][ T1169] bridge_slave_0: left allmulticast mode
[  179.451035][ T1169] bridge_slave_0: left promiscuous mode
[  179.451292][ T1169] bridge0: port 1(bridge_slave_0) entered disabled state
[  179.858816][ T6873] netlink: 64 bytes leftover after parsing attributes in process `syz.1.299'.
[  179.858861][ T6873] netlink: 16 bytes leftover after parsing attributes in process `syz.1.299'.
[  179.858875][ T6873] netlink: 16 bytes leftover after parsing attributes in process `syz.1.299'.
[  179.895618][ T6874] loop2: detected capacity change from 0 to 512
[  180.054050][ T6879] netlink: 8 bytes leftover after parsing attributes in process `syz.1.301'.
[  180.056962][ T6879] netlink: 16 bytes leftover after parsing attributes in process `syz.1.301'.
[  180.062979][ T6874] EXT4-fs error (device loop2): ext4_validate_block_bitmap:436: comm syz.2.300: bg 0: block 5: invalid block bitmap
[  180.063019][ T6874] loop2: lost filesystem error report for type 5 error -117
[  180.064355][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  180.064377][    C0] EXT4-fs (loop2): initial error at time 1790699488: ext4_validate_block_bitmap:436
[  180.064399][    C0] EXT4-fs (loop2): last error at time 1790699488: ext4_validate_block_bitmap:436
[  180.142233][ T6874] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6680: Corrupt filesystem
[  180.142265][ T6874] loop2: lost filesystem error report for type 5 error -117
[  180.187676][ T6874] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.300: invalid indirect mapped block 3 (level 2)
[  180.187721][ T6874] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  180.189571][ T6874] EXT4-fs (loop2): 1 orphan inode deleted
[  180.189630][ T6874] EXT4-fs (loop2): 1 truncate cleaned up
[  180.223257][ T6874] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  180.394362][ T5614] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  180.625854][ T5758] usb 5-1: USB disconnect, device number 4
[  180.662810][ T5758] cdc_ether 5-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device
[  180.788134][ T1169] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  180.828617][ T1169] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  180.845420][ T1169] bond0 (unregistering): Released all slaves
[  180.909448][ T6892] FAULT_INJECTION: forcing a failure.
[  180.909448][ T6892] name failslab, interval 1, probability 0, space 0, times 0
[  180.909503][ T6892] CPU: 1 UID: 0 PID: 6892 Comm: syz.4.303 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  180.909535][ T6892] Tainted: [L]=SOFTLOCKUP
[  180.909544][ T6892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  180.909558][ T6892] Call Trace:
[  180.909568][ T6892]  <TASK>
[  180.909578][ T6892]  dump_stack_lvl+0xe8/0x150
[  180.909619][ T6892]  should_fail_ex+0x3eb/0x540
[  180.909662][ T6892]  should_failslab+0xa8/0x100
[  180.909700][ T6892]  __kmalloc_noprof+0xf9/0x710
[  180.909730][ T6892]  ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0
[  180.909759][ T6892]  ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0
[  180.909796][ T6892]  genl_family_rcv_msg_attrs_parse+0xd0/0x2f0
[  180.909833][ T6892]  genl_family_rcv_msg_doit+0xda/0x340
[  180.909868][ T6892]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  180.909897][ T6892]  ? __pfx___mutex_lock+0x10/0x10
[  180.909931][ T6892]  ? __pfx_genl_get_cmd+0x10/0x10
[  180.909954][ T6892]  ? stack_trace_save+0xa9/0x100
[  180.909982][ T6892]  ? __pfx_vdpa_nl_cmd_mgmtdev_get_doit+0x10/0x10
[  180.910008][ T6892]  ? __pfx_vdpa_nl_cmd_mgmtdev_get_dumpit+0x10/0x10
[  180.910044][ T6892]  ? __lock_acquire+0x747/0x2de0
[  180.910086][ T6892]  genl_rcv_msg+0x614/0x7a0
[  180.910121][ T6892]  ? __pfx_genl_rcv_msg+0x10/0x10
[  180.910147][ T6892]  ? __pfx_vdpa_nl_cmd_mgmtdev_get_doit+0x10/0x10
[  180.910190][ T6892]  netlink_rcv_skb+0x226/0x4a0
[  180.910225][ T6892]  ? __pfx_genl_rcv_msg+0x10/0x10
[  180.910252][ T6892]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  180.910302][ T6892]  ? down_read+0x2b9/0x320
[  180.910341][ T6892]  genl_rcv+0x28/0x40
[  180.910364][ T6892]  netlink_unicast+0x7bd/0x940
[  180.910405][ T6892]  netlink_sendmsg+0x7c3/0xae0
[  180.910445][ T6892]  ? __pfx_netlink_sendmsg+0x10/0x10
[  180.910487][ T6892]  ? apparmor_socket_sendmsg+0x98/0x360
[  180.910514][ T6892]  ? __pfx_netlink_sendmsg+0x10/0x10
[  180.910548][ T6892]  sock_sendmsg_nosec+0x13a/0x180
[  180.910593][ T6892]  ____sys_sendmsg+0x54e/0x850
[  180.910630][ T6892]  ? __pfx_____sys_sendmsg+0x10/0x10
[  180.910674][ T6892]  ? import_iovec+0x73/0xa0
[  180.910724][ T6892]  ___sys_sendmsg+0x2a5/0x360
[  180.910752][ T6892]  ? __lock_acquire+0x747/0x2de0
[  180.910787][ T6892]  ? __pfx____sys_sendmsg+0x10/0x10
[  180.910821][ T6892]  ? futex_wait+0x2a2/0x390
[  180.910888][ T6892]  ? __fget_files+0x3a2/0x420
[  180.910917][ T6892]  ? __fget_files+0x2a/0x420
[  180.910956][ T6892]  __x64_sys_sendmsg+0x1b1/0x290
[  180.910990][ T6892]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  180.911051][ T6892]  do_syscall_64+0x166/0x520
[  180.911083][ T6892]  ? trace_irq_disable+0x3b/0x140
[  180.911113][ T6892]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  180.911137][ T6892]  ? clear_bhb_loop+0x70/0xc0
[  180.911166][ T6892]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  180.911189][ T6892] RIP: 0033:0x7fd7ae99e159
[  180.911211][ T6892] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  180.911231][ T6892] RSP: 002b:00007fd7af868028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  180.911258][ T6892] RAX: ffffffffffffffda RBX: 00007fd7aec25fa0 RCX: 00007fd7ae99e159
[  180.911275][ T6892] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004
[  180.911290][ T6892] RBP: 00007fd7aea3506b R08: 0000000000000000 R09: 0000000000000000
[  180.911304][ T6892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  180.911318][ T6892] R13: 00007fd7aec26038 R14: 00007fd7aec25fa0 R15: 00007ffe61f3c4b8
[  180.911356][ T6892]  </TASK>
[  180.935735][ T5622] Bluetooth: hci3: command tx timeout
[  181.971290][ T6909] loop1: detected capacity change from 0 to 256
[  182.794602][ T1169] hsr_slave_0: left promiscuous mode
[  182.801830][ T1169] hsr_slave_1: left promiscuous mode
[  182.814015][ T1169] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  182.831729][ T1169] batman_adv: batadv0: Removing interface: batadv_slave_0
[  182.845982][ T1169] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  182.846006][ T1169] batman_adv: batadv0: Removing interface: batadv_slave_1
[  182.981513][ T6930] loop4: detected capacity change from 0 to 512
[  183.014672][ T5622] Bluetooth: hci3: command tx timeout
[  183.041702][ T1169] veth1_macvtap: left promiscuous mode
[  183.041771][ T1169] veth0_macvtap: left promiscuous mode
[  183.041888][ T1169] veth1_vlan: left promiscuous mode
[  183.041993][ T1169] veth0_vlan: left promiscuous mode
[  183.081899][ T6930] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  183.082019][ T6930] ext4 filesystem being mounted at /69/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  183.327995][ T5610] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  183.329256][ T6917] loop1: detected capacity change from 0 to 40427
[  183.376538][ T6917] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  183.376566][ T6917] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  183.472956][ T6917] F2FS-fs (loop1): invalid crc value
[  183.624828][   T58] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  183.780549][ T6949] loop2: detected capacity change from 0 to 256
[  183.783544][ T6949] exfat: Deprecated parameter 'utf8'
[  183.783723][ T6949] exfat: Deprecated parameter 'utf8'
[  183.802575][   T58] usb 1-1: New USB device found: idVendor=05f9, idProduct=ffff, bcdDevice=1.00
[  183.818665][   T58] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  183.818700][   T58] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 1024
[  183.818729][   T58] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024
[  183.831142][   T58] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  183.831238][   T58] usb 1-1: Product: syz
[  183.831295][   T58] usb 1-1: Manufacturer: syz
[  183.831336][   T58] usb 1-1: SerialNumber: syz
[  183.893557][ T6937] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  183.893723][ T6937] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  183.929637][   T58] usbserial_generic 1-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes.
[  183.929665][   T58] usbserial_generic 1-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver.
[  183.929708][   T58] usbserial_generic 1-1:1.0: generic converter detected
[  183.993974][ T6949] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  184.017115][   T58] usb 1-1: generic converter now attached to ttyUSB0
[  184.201477][ T6917] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  184.269789][ T6917] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  184.269819][ T6917] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  185.094603][ T5622] Bluetooth: hci3: command tx timeout
[  185.132913][ T1169] team0 (unregistering): Port device team_slave_1 removed
[  185.156844][ T6937] loop0: detected capacity change from 0 to 40427
[  185.172408][ T6937] F2FS-fs (loop0): invalid crc value
[  185.206563][ T1169] team0 (unregistering): Port device team_slave_0 removed
[  185.491630][ T6937] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  185.506835][ T6937] F2FS-fs (loop0): f2fs_disable_checkpoint starts, unusable: 0
[  185.506867][ T6937] F2FS-fs (loop0): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[  185.506933][ T6937] F2FS-fs (loop0): Start checkpoint disabled!
[  185.615951][ T6937] F2FS-fs (loop0): f2fs_disable_checkpoint finishes, err:0
[  185.626692][ T6937] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  185.691687][ T6966] loop1: detected capacity change from 0 to 2048
[  185.768039][ T6966] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  185.799046][ T6937] syz.0.315: attempt to access beyond end of device
[  185.799046][ T6937] loop0: rw=2049, sector=77824, nr_sectors = 136 limit=40427
[  185.825650][   T27] usb 1-1: USB disconnect, device number 5
[  186.099603][   T27] generic ttyUSB0: generic converter now disconnected from ttyUSB0
[  186.103618][   T27] usbserial_generic 1-1:1.0: device disconnected
[  186.965167][ T6387] kworker/u8:17: attempt to access beyond end of device
[  186.965167][ T6387] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  186.996012][ T6387] CPU: 1 UID: 0 PID: 6387 Comm: kworker/u8:17 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  186.996051][ T6387] Tainted: [L]=SOFTLOCKUP
[  186.996059][ T6387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  186.996072][ T6387] Workqueue: writeback wb_workfn (flush-7:0)
[  186.996128][ T6387] Call Trace:
[  186.996137][ T6387]  <TASK>
[  186.996146][ T6387]  dump_stack_lvl+0xe8/0x150
[  186.996182][ T6387]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  186.996215][ T6387]  f2fs_write_end_bio+0xda7/0x11c0
[  186.996266][ T6387]  __submit_merged_bio+0x258/0x6a0
[  186.996292][ T6387]  ? rcu_is_watching+0x16/0xb0
[  186.996331][ T6387]  f2fs_submit_merged_write_cond+0x1ef/0x590
[  186.996362][ T6387]  ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10
[  186.996413][ T6387]  f2fs_write_data_pages+0x2a13/0x36e0
[  186.996482][ T6387]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  186.996572][ T6387]  ? do_raw_spin_lock+0x12b/0x2f0
[  186.996614][ T6387]  ? hrtimer_start_range_ns_common+0x7f6/0xb60
[  186.996661][ T6387]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  186.996692][ T6387]  do_writepages+0x338/0x560
[  186.996744][ T6387]  ? reacquire_held_locks+0x117/0x1a0
[  186.996776][ T6387]  ? writeback_sb_inodes+0x450/0x1af0
[  186.996810][ T6387]  __writeback_single_inode+0x136/0x1220
[  186.996841][ T6387]  ? do_raw_spin_unlock+0xf5/0x200
[  186.996869][ T6387]  writeback_sb_inodes+0x9de/0x1af0
[  186.996894][ T6387]  ? __lock_acquire+0x747/0x2de0
[  186.996955][ T6387]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  186.997027][ T6387]  ? rcu_is_watching+0x16/0xb0
[  186.997067][ T6387]  ? queue_io+0x2d3/0x470
[  186.997097][ T6387]  wb_writeback+0x41c/0xad0
[  186.997128][ T6387]  ? queue_io+0x1f1/0x470
[  186.997160][ T6387]  ? __pfx_wb_writeback+0x10/0x10
[  186.997184][ T6387]  ? do_raw_spin_lock+0x12b/0x2f0
[  186.997226][ T6387]  wb_workfn+0x431/0x10f0
[  186.997281][ T6387]  ? __pfx_wb_workfn+0x10/0x10
[  186.997322][ T6387]  ? trace_hrtimer_start+0x82/0x200
[  186.997355][ T6387]  ? do_raw_spin_lock+0x12b/0x2f0
[  186.997389][ T6387]  ? lock_acquire+0x115/0x350
[  186.997426][ T6387]  ? rcu_is_watching+0x16/0xb0
[  186.997465][ T6387]  ? process_scheduled_works+0x97a/0x1630
[  186.997506][ T6387]  process_scheduled_works+0xc3d/0x1630
[  186.997575][ T6387]  ? __pfx_process_scheduled_works+0x10/0x10
[  186.997617][ T6387]  ? assign_work+0x3cf/0x5d0
[  186.997656][ T6387]  worker_thread+0xa47/0xfb0
[  186.997705][ T6387]  ? __kthread_parkme+0x71/0x1f0
[  186.997740][ T6387]  kthread+0x38b/0x480
[  186.997767][ T6387]  ? __pfx_worker_thread+0x10/0x10
[  186.997798][ T6387]  ? __pfx_kthread+0x10/0x10
[  186.997826][ T6387]  ret_from_fork+0x514/0xb70
[  186.997853][ T6387]  ? __pfx_ret_from_fork+0x10/0x10
[  186.997875][ T6387]  ? __switch_to+0xc78/0x1410
[  186.997911][ T6387]  ? __pfx_kthread+0x10/0x10
[  186.997939][ T6387]  ret_from_fork_asm+0x1a/0x30
[  186.997992][ T6387]  </TASK>
[  187.022323][ T6387] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  187.022798][ T6387] CPU: 1 UID: 0 PID: 6387 Comm: kworker/u8:17 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  187.022885][ T6387] Tainted: [L]=SOFTLOCKUP
[  187.022900][ T6387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  187.022941][ T6387] Workqueue: writeback wb_workfn (flush-7:0)
[  187.023053][ T6387] Call Trace:
[  187.023075][ T6387]  <TASK>
[  187.023098][ T6387]  dump_stack_lvl+0xe8/0x150
[  187.023206][ T6387]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  187.023288][ T6387]  f2fs_write_end_bio+0xda7/0x11c0
[  187.023414][ T6387]  __submit_merged_bio+0x258/0x6a0
[  187.023478][ T6387]  ? rcu_is_watching+0x16/0xb0
[  187.023589][ T6387]  f2fs_submit_merged_write_cond+0x1ef/0x590
[  187.023668][ T6387]  ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10
[  187.023824][ T6387]  f2fs_write_data_pages+0x2a13/0x36e0
[  187.023992][ T6387]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  187.024193][ T6387]  ? do_raw_spin_lock+0x12b/0x2f0
[  187.024298][ T6387]  ? hrtimer_start_range_ns_common+0x7f6/0xb60
[  187.024419][ T6387]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  187.024495][ T6387]  do_writepages+0x338/0x560
[  187.024579][ T6387]  ? reacquire_held_locks+0x117/0x1a0
[  187.024662][ T6387]  ? writeback_sb_inodes+0x450/0x1af0
[  187.024744][ T6387]  __writeback_single_inode+0x136/0x1220
[  187.024826][ T6387]  ? do_raw_spin_unlock+0xf5/0x200
[  187.024900][ T6387]  writeback_sb_inodes+0x9de/0x1af0
[  187.024955][ T6387]  ? __lock_acquire+0x747/0x2de0
[  187.025127][ T6387]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  187.025344][ T6387]  ? rcu_is_watching+0x16/0xb0
[  187.025428][ T6387]  ? queue_io+0x2d3/0x470
[  187.025507][ T6387]  wb_writeback+0x41c/0xad0
[  187.025588][ T6387]  ? queue_io+0x1f1/0x470
[  187.025674][ T6387]  ? __pfx_wb_writeback+0x10/0x10
[  187.025723][ T6387]  ? do_raw_spin_lock+0x12b/0x2f0
[  187.025828][ T6387]  wb_workfn+0x431/0x10f0
[  187.025975][ T6387]  ? __pfx_wb_workfn+0x10/0x10
[  187.026077][ T6387]  ? trace_hrtimer_start+0x82/0x200
[  187.026161][ T6387]  ? do_raw_spin_lock+0x12b/0x2f0
[  187.026256][ T6387]  ? lock_acquire+0x115/0x350
[  187.026385][ T6387]  ? rcu_is_watching+0x16/0xb0
[  187.026493][ T6387]  ? process_scheduled_works+0x97a/0x1630
[  187.026595][ T6387]  process_scheduled_works+0xc3d/0x1630
[  187.026767][ T6387]  ? __pfx_process_scheduled_works+0x10/0x10
[  187.026873][ T6387]  ? assign_work+0x3cf/0x5d0
[  187.026971][ T6387]  worker_thread+0xa47/0xfb0
[  187.027105][ T6387]  ? __kthread_parkme+0x71/0x1f0
[  187.027198][ T6387]  kthread+0x38b/0x480
[  187.027263][ T6387]  ? __pfx_worker_thread+0x10/0x10
[  187.027346][ T6387]  ? __pfx_kthread+0x10/0x10
[  187.027413][ T6387]  ret_from_fork+0x514/0xb70
[  187.027484][ T6387]  ? __pfx_ret_from_fork+0x10/0x10
[  187.027549][ T6387]  ? __switch_to+0xc78/0x1410
[  187.027637][ T6387]  ? __pfx_kthread+0x10/0x10
[  187.027711][ T6387]  ret_from_fork_asm+0x1a/0x30
[  187.027867][ T6387]  </TASK>
[  187.070639][ T6387] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  187.236515][ T5622] Bluetooth: hci3: command tx timeout
[  187.528770][ T5623] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  187.683040][ T5273] 8021q: adding VLAN 0 to HW filter on device eth1
[  188.328903][ T6981] loop2: detected capacity change from 0 to 512
[  188.638183][ T6981] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #2: block 8: comm syz.2.323: lblock 0 mapped to illegal pblock 8 (length 1)
[  188.638277][ T6981] loop2: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117
[  188.644121][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  188.644150][    C1] EXT4-fs (loop2): initial error at time 1790699496: ext4_map_blocks:790: inode 2: block 8
[  188.644189][    C1] EXT4-fs (loop2): last error at time 1790699496: ext4_map_blocks:790: inode 2: block 8
[  188.646528][ T6981] EXT4-fs (loop2): Remounting filesystem read-only
[  188.646584][ T6981] EXT4-fs warning (device loop2): dx_probe:791: inode #2: lblock 0: comm syz.2.323: error -EUCLEAN reading directory block
[  188.648991][ T6981] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117
[  188.649192][ T6981] EXT4-fs warning (device loop2): dx_probe:791: inode #2: lblock 0: comm syz.2.323: error -EUCLEAN reading directory block
[  188.649344][ T6981] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117
[  188.653889][ T6981] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  190.092037][ T5614] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  190.242832][ T6997] netlink: 'syz.2.327': attribute type 5 has an invalid length.
[  190.242874][ T6997] netlink: 8 bytes leftover after parsing attributes in process `syz.2.327'.
[  190.348774][ T6999] loop4: detected capacity change from 0 to 512
[  190.363374][ T6999] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  190.424604][ T6999] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  190.424711][ T6999] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  190.552402][ T7001] netlink: 12 bytes leftover after parsing attributes in process `syz.1.328'.
[  190.652461][ T1169] IPVS: stop unused estimator thread 0...
[  190.766926][ T5610] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  190.798561][ T7011] loop2: detected capacity change from 0 to 256
[  191.138598][ T7025] loop4: detected capacity change from 0 to 128
[  191.147939][ T7025] EXT4-fs (loop4): Test dummy encryption mode enabled
[  191.192960][ T7025] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  191.210268][ T7025] ext4 filesystem being mounted at /74/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  191.267478][ T7025] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni"
[  191.344415][   T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  191.392411][ T5610] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  191.507502][   T10] usb 3-1: New USB device found: idVendor=0dba, idProduct=1000, bcdDevice=0.40
[  191.508815][   T10] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  191.508839][   T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  191.512378][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  191.512406][   T10] usb 3-1: Product: syz
[  191.512424][   T10] usb 3-1: Manufacturer: syz
[  191.512439][   T10] usb 3-1: SerialNumber: syz
[  191.867786][   T10] usb 3-1: unit 4 not found!
[  192.011863][ T6854] bridge0: port 1(bridge_slave_0) entered blocking state
[  192.011977][ T6854] bridge0: port 1(bridge_slave_0) entered disabled state
[  192.012161][ T6854] bridge_slave_0: entered allmulticast mode
[  192.019374][ T6854] bridge_slave_0: entered promiscuous mode
[  192.042385][ T5273] 8021q: adding VLAN 0 to HW filter on device eth2
[  192.042879][ T6854] bridge0: port 2(bridge_slave_1) entered blocking state
[  192.043004][ T6854] bridge0: port 2(bridge_slave_1) entered disabled state
[  192.043362][ T6854] bridge_slave_1: entered allmulticast mode
[  192.050409][ T6854] bridge_slave_1: entered promiscuous mode
[  192.083285][   T10] usb 3-1: USB disconnect, device number 4
[  192.132738][ T6854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  192.151529][ T6854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  192.188350][ T5630] udevd[5630]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  192.248315][ T6854] team0: Port device team_slave_0 added
[  192.251387][ T6854] team0: Port device team_slave_1 added
[  192.298645][ T6854] batman_adv: batadv0: Adding interface: batadv_slave_0
[  192.298666][ T6854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  192.298697][ T6854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  192.300753][ T6854] batman_adv: batadv0: Adding interface: batadv_slave_1
[  192.300769][ T6854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  192.300799][ T6854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  192.426428][ T6854] hsr_slave_0: entered promiscuous mode
[  192.427651][ T6854] hsr_slave_1: entered promiscuous mode
[  192.692777][ T6854] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  192.706927][ T6854] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  192.708063][ T6854] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  192.712369][ T6854] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  192.713704][ T6854] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  192.749581][ T6854] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  192.750536][ T6854] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  192.764598][ T6854] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  192.900875][ T6854] 8021q: adding VLAN 0 to HW filter on device bond0
[  192.931723][ T6854] 8021q: adding VLAN 0 to HW filter on device team0
[  192.945884][ T1178] bridge0: port 1(bridge_slave_0) entered blocking state
[  192.946074][ T1178] bridge0: port 1(bridge_slave_0) entered forwarding state
[  192.968364][ T1178] bridge0: port 2(bridge_slave_1) entered blocking state
[  192.968575][ T1178] bridge0: port 2(bridge_slave_1) entered forwarding state
[  193.108761][ T5273] 8021q: adding VLAN 0 to HW filter on device eth3
[  193.443242][ T7077] loop2: detected capacity change from 0 to 128
[  193.450634][ T7077] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  193.453439][ T7077] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  193.895783][ T7096] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  193.895828][ T7096] FAT-fs (loop2): Filesystem has been set read-only
[  194.098395][ T6854] 8021q: adding VLAN 0 to HW filter on device batadv0
[  194.203370][ T7108] loop0: detected capacity change from 0 to 512
[  194.248425][ T7108] EXT4-fs error (device loop0): ext4_orphan_get:1429: comm syz.0.347: bad orphan inode 13
[  194.248460][ T7108] loop0: lost filesystem error report for type 5 error -117
[  194.250598][ T7108] ext4_test_bit(bit=12, block=4) = 1
[  194.250644][ T7108] is_bad_inode(inode)=0
[  194.250673][ T7108] NEXT_ORPHAN(inode)=0
[  194.250696][ T7108] max_ino=32
[  194.250718][ T7108] i_nlink=1
[  194.284943][ T7108] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  194.330716][ T7108] EXT4-fs warning (device loop0): dx_probe:813: inode #2: comm syz.0.347: Hash code is SIPHASH, but hash not in dirent
[  194.330749][ T7108] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.347: Corrupt directory, running e2fsck is recommended
[  194.331357][ T7108] EXT4-fs warning (device loop0): dx_probe:813: inode #2: comm syz.0.347: Hash code is SIPHASH, but hash not in dirent
[  194.331388][ T7108] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.347: Corrupt directory, running e2fsck is recommended
[  194.393019][ T1316] ieee802154 phy0 wpan0: encryption failed: -22
[  194.393080][ T1316] ieee802154 phy1 wpan1: encryption failed: -22
[  194.444265][ T5758] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  194.537394][ T5273] 8021q: adding VLAN 0 to HW filter on device eth4
[  194.582573][ T5609] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  194.594503][ T5758] usb 5-1: Using ep0 maxpacket: 16
[  194.595233][ T5758] usb 5-1: New USB device found: idVendor=046d, idProduct=bfe3, bcdDevice=fc.97
[  194.595275][ T5758] usb 5-1: too many configurations: 125, using maximum allowed: 8
[  194.596486][ T5758] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11
[  194.596518][ T5758] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  194.596551][ T5758] usb 5-1: config 0 interface 0 has no altsetting 0
[  194.599356][ T5758] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11
[  194.599391][ T5758] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  194.599420][ T5758] usb 5-1: config 0 interface 0 has no altsetting 0
[  194.600550][ T5758] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11
[  194.600585][ T5758] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  194.600613][ T5758] usb 5-1: config 0 interface 0 has no altsetting 0
[  194.602641][ T5758] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11
[  194.602671][ T5758] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  194.602699][ T5758] usb 5-1: config 0 interface 0 has no altsetting 0
[  194.603794][ T5758] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11
[  194.603826][ T5758] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  194.603855][ T5758] usb 5-1: config 0 interface 0 has no altsetting 0
[  194.735411][ T5758] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11
[  194.735450][ T5758] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  194.735477][ T5758] usb 5-1: config 0 interface 0 has no altsetting 0
[  194.819355][ T5758] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11
[  194.819392][ T5758] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  194.819420][ T5758] usb 5-1: config 0 interface 0 has no altsetting 0
[  194.844969][ T5758] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11
[  194.845006][ T5758] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  194.845034][ T5758] usb 5-1: config 0 interface 0 has no altsetting 0
[  194.902296][ T5758] usb 5-1: New USB device strings: Mfr=251, Product=60, SerialNumber=39
[  194.902329][ T5758] usb 5-1: Product: syz
[  194.902345][ T5758] usb 5-1: Manufacturer: syz
[  194.902362][ T5758] usb 5-1: SerialNumber: syz
[  194.913566][ T7119] loop1: detected capacity change from 0 to 128
[  194.934643][ T5758] usb 5-1: config 0 descriptor??
[  194.976466][ T7123] bridge0: port 3(erspan0) entered blocking state
[  194.976572][ T7123] bridge0: port 3(erspan0) entered disabled state
[  194.977013][ T7123] erspan0: entered allmulticast mode
[  195.064991][ T7123] erspan0: entered promiscuous mode
[  195.071452][ T7123] bridge0: port 3(erspan0) entered blocking state
[  195.071563][ T7123] bridge0: port 3(erspan0) entered forwarding state
[  195.216144][    C0] raw-gadget.0 gadget.4: ignoring, device is not running
[  195.218039][    C0] raw-gadget.0 gadget.4: ignoring, device is not running
[  195.219943][    C0] raw-gadget.0 gadget.4: ignoring, device is not running
[  195.220990][    C0] raw-gadget.0 gadget.4: ignoring, device is not running
[  195.221367][    C0] raw-gadget.0 gadget.4: ignoring, device is not running
[  195.222012][    C0] raw-gadget.0 gadget.4: ignoring, device is not running
[  195.222425][    C0] raw-gadget.0 gadget.4: ignoring, device is not running
[  195.222792][    C0] raw-gadget.0 gadget.4: ignoring, device is not running
[  195.223171][    C0] raw-gadget.0 gadget.4: ignoring, device is not running
[  195.223564][    C0] raw-gadget.0 gadget.4: ignoring, device is not running
[  195.223729][ T5758] usbhid 5-1:0.0: can't add hid device: -32
[  195.223841][ T5758] usbhid 5-1:0.0: probe with driver usbhid failed with error -32
[  195.346666][ T5758] usb 5-1: USB disconnect, device number 5
[  195.423517][ T7125] loop2: detected capacity 
** replaying previous printk message **
[  195.423517][ T7125] loop2: detected capacity change from 0 to 40427
[  195.425923][ T7125] ------------[ cut here ]------------
[  195.425956][ T7125] UBSAN: shift-out-of-bounds in fs/f2fs/super.c:3949:27
[  195.426009][ T7125] shift exponent 4294967287 is too large for 64-bit type 'sector_t' (aka 'unsigned long long')
[  195.426080][ T7125] CPU: 1 UID: 0 PID: 7125 Comm: syz.2.350 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  195.426157][ T7125] Tainted: [L]=SOFTLOCKUP
[  195.426186][ T7125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  195.426234][ T7125] Call Trace:
[  195.426256][ T7125]  <TASK>
[  195.426273][ T7125]  dump_stack_lvl+0xe8/0x150
[  195.426378][ T7125]  ubsan_epilogue+0xa/0x30
[  195.426441][ T7125]  __ubsan_handle_shift_out_of_bounds+0x36d/0x400
[  195.426555][ T7125]  ? bio_alloc_bioset+0x889/0xc60
[  195.426640][ T7125]  ? folio_unlock+0x101/0x160
[  195.426742][ T7125]  __f2fs_commit_super+0x43e/0x4d0
[  195.426818][ T7125]  sanity_check_area_boundary+0x7c5/0xe20
[  195.426974][ T7125]  f2fs_fill_super+0x1916/0x7c60
[  195.427191][ T7125]  get_tree_bdev_flags+0x430/0x4f0
[  195.427288][ T7125]  ? __pfx_f2fs_fill_super+0x10/0x10
[  195.427370][ T7125]  ? __pfx_get_tree_bdev_flags+0x10/0x10
[  195.427473][ T7125]  vfs_get_tree+0x92/0x2a0
[  195.427555][ T7125]  do_new_mount+0x319/0xdc0
[  195.427643][ T7125]  ? __pfx_do_new_mount+0x10/0x10
[  195.427717][ T7125]  ? ns_capable+0x84/0xe0
[  195.427806][ T7125]  ? path_mount+0x647/0x1050
[  195.427877][ T7125]  ? user_path_at+0xd4/0x160
[  195.427958][ T7125]  __se_sys_mount+0x31d/0x420
[  195.428045][ T7125]  ? __pfx___se_sys_mount+0x10/0x10
[  195.428139][ T7125]  ? __x64_sys_mount+0x20/0xc0
[  195.428206][ T7125]  do_syscall_64+0x166/0x520
[  195.428287][ T7125]  ? trace_irq_disable+0x3b/0x140
[  195.428368][ T7125]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  195.428429][ T7125]  ? clear_bhb_loop+0x70/0xc0
[  195.428501][ T7125]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  195.428566][ T7125] RIP: 0033:0x7f870d39f3ca
[  195.428655][ T7125] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  195.428710][ T7125] RSP: 002b:00007f870e261e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  195.428783][ T7125] RAX: ffffffffffffffda RBX: 00007f870e261ee0 RCX: 00007f870d39f3ca
[  195.428827][ T7125] RDX: 0000200000000040 RSI: 0000200000000240 RDI: 00007f870e261ea0
[  195.428870][ T7125] RBP: 0000200000000040 R08: 00007f870e261ee0 R09: 0000000000000000
[  195.428912][ T7125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000240
[  195.428947][ T7125] R13: 00007f870e261ea0 R14: 000000000000555e R15: 0000200000000780
[  195.429039][ T7125]  </TASK>
[  195.429109][ T7125] ---[ end trace ]---
[  195.429150][ T7125] Kernel panic - not syncing: UBSAN: panic_on_warn set ...
[  195.706433][ T7125] CPU: 1 UID: 0 PID: 7125 Comm: syz.2.350 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  195.717359][ T7125] Tainted: [L]=SOFTLOCKUP
[  195.721715][ T7125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  195.731831][ T7125] Call Trace:
[  195.735153][ T7125]  <TASK>
[  195.738137][ T7125]  vpanic+0x26f/0x710
[  195.742174][ T7125]  panic+0xc5/0xd0
[  195.745946][ T7125]  ? __pfx_panic+0x10/0x10
[  195.750405][ T7125]  ? __pfx__printk+0x10/0x10
[  195.755028][ T7125]  ? console_srcu_read_lock+0x30/0x60
[  195.760439][ T7125]  check_panic_on_warn+0x89/0xb0
[  195.765402][ T7125]  __ubsan_handle_shift_out_of_bounds+0x36d/0x400
[  195.771856][ T7125]  ? bio_alloc_bioset+0x889/0xc60
[  195.776908][ T7125]  ? folio_unlock+0x101/0x160
[  195.781638][ T7125]  __f2fs_commit_super+0x43e/0x4d0
[  195.786802][ T7125]  sanity_check_area_boundary+0x7c5/0xe20
[  195.792571][ T7125]  f2fs_fill_super+0x1916/0x7c60
[  195.797585][ T7125]  get_tree_bdev_flags+0x430/0x4f0
[  195.802734][ T7125]  ? __pfx_f2fs_fill_super+0x10/0x10
[  195.808064][ T7125]  ? __pfx_get_tree_bdev_flags+0x10/0x10
[  195.813737][ T7125]  vfs_get_tree+0x92/0x2a0
[  195.818182][ T7125]  do_new_mount+0x319/0xdc0
[  195.822715][ T7125]  ? __pfx_do_new_mount+0x10/0x10
[  195.827761][ T7125]  ? ns_capable+0x84/0xe0
[  195.832116][ T7125]  ? path_mount+0x647/0x1050
[  195.836735][ T7125]  ? user_path_at+0xd4/0x160
[  195.841352][ T7125]  __se_sys_mount+0x31d/0x420
[  195.846061][ T7125]  ? __pfx___se_sys_mount+0x10/0x10
[  195.851315][ T7125]  ? __x64_sys_mount+0x20/0xc0
[  195.856113][ T7125]  do_syscall_64+0x166/0x520
[  195.860741][ T7125]  ? trace_irq_disable+0x3b/0x140
[  195.865790][ T7125]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  195.871894][ T7125]  ? clear_bhb_loop+0x70/0xc0
[  195.876601][ T7125]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  195.882543][ T7125] RIP: 0033:0x7f870d39f3ca
[  195.886992][ T7125] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  195.906623][ T7125] RSP: 002b:00007f870e261e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  195.915091][ T7125] RAX: ffffffffffffffda RBX: 00007f870e261ee0 RCX: 00007f870d39f3ca
[  195.923088][ T7125] RDX: 0000200000000040 RSI: 0000200000000240 RDI: 00007f870e261ea0
[  195.931077][ T7125] RBP: 0000200000000040 R08: 00007f870e261ee0 R09: 0000000000000000
[  195.939063][ T7125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000240
[  195.947067][ T7125] R13: 00007f870e261ea0 R14: 000000000000555e R15: 0000200000000780
[  195.955073][ T7125]  </TASK>
[  195.958705][ T7125] Kernel Offset: disabled
[  195.963070][ T7125] Rebooting in 86400 seconds..