last executing test programs:

2m21.312418564s ago: executing program 3 (id=675):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80800)
write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})

2m20.996743147s ago: executing program 3 (id=680):
r0 = fsopen(&(0x7f0000000140)='debugfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0xd)
fchdir(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./tracing/events/kvm/kvm_hv_stimer_cleanup/trigger\x00', 0x2d80, 0x82)
preadv2(r2, &(0x7f00000018c0)=[{&(0x7f0000000000)=""/217, 0xd9}], 0x1, 0x800, 0x40, 0x0)

2m20.820306177s ago: executing program 3 (id=682):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x80)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000001400)=ANY=[@ANYBLOB="02000000010005000000000002000000", @ANYRES32=r0, @ANYBLOB="0400060000000000100004000000000020"], 0x2c, 0x1)
symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00')
fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0xee00, 0x1000)
setxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="020000000100020062b2d8ab0400000000000000100006000000000020"], 0x24, 0x3)

2m20.6335433s ago: executing program 3 (id=685):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
syz_mount_image$f2fs(&(0x7f0000010580), &(0x7f00000105c0)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='active_logs=4,jqfmt=vfsv0,prjjquota=f2fs\x00,mode=adaptive,heap,norecovery,fsync_mode=posix,user_xattr,disable_roll_forward,\x00\x00\x00'], 0x1, 0x105c9, &(0x7f0000020bc0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000200)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000040)='./proc/thread-self/fail-nth\x00')

2m19.01630476s ago: executing program 3 (id=695):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x201, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r0, &(0x7f00000003c0)="a6", 0x1, 0x2404c081, &(0x7f0000000300)={0xa, 0x2, 0xffef, @loopback, 0x9}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed', 0x9)
shutdown(r0, 0x1)

2m16.401185688s ago: executing program 3 (id=708):
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2m15.713975815s ago: executing program 32 (id=708):
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

5.377558049s ago: executing program 0 (id=1573):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000005000000850000002e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000600)=r2, 0x4)
sendmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x20000000)
sendmsg$inet(r1, &(0x7f0000002fc0)={0x0, 0x0, 0x0}, 0x20040090)

4.652860055s ago: executing program 0 (id=1585):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000, 0x100, 0x1}, 0x20)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'netdevsim0\x00', <r2=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10)

4.553391438s ago: executing program 1 (id=1576):
r0 = syz_io_uring_setup(0xf04, &(0x7f0000000400)={0x0, 0x595f, 0x8, 0x0, 0x10000051}, &(0x7f0000000140)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0, &(0x7f00000000c0)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x12, 0x1})
io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=<r4=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_setup(0x8, &(0x7f0000000600)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r4, 0x0}])

4.305984105s ago: executing program 0 (id=1577):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/10, 0xa}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, &(0x7f00000002c0)})

3.856711668s ago: executing program 0 (id=1579):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x8000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000000)='2', 0x49)
openat$tun(0xffffffffffffff9c, 0x0, 0x1c1342, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x16, 0x0, 0x0, 0x7fff0026}]})

3.835566242s ago: executing program 5 (id=1580):
ioctl$EXT4_IOC_GETFSUUID(0xffffffffffffffff, 0x8008662c, &(0x7f0000000300))
sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000020}, 0x20000001)
syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newlink={0x3c, 0x10, 0x401, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2400, 0x4100}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x3c}}, 0x4000000)

3.778524895s ago: executing program 1 (id=1582):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004600)=[{{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/217, 0xe088}, {&(0x7f00000020c0)=""/16, 0x10}], 0x2}, 0x3b83}], 0x1, 0x20001000, 0x0)
sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0)

3.2788267s ago: executing program 1 (id=1583):
r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x1)
fchdir(r1)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85)
lseek(r2, 0x100, 0x0)
getdents(r2, 0x0, 0x0)

3.143764371s ago: executing program 4 (id=1584):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42797000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c}]}, @NFT_MSG_DELFLOWTABLE={0x24c, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1, 0x0, 0x4}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xe8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'dvmrp1\x00'}, {0x14, 0x1, 'pimreg1\x00'}, {0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'team_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8, 0x1, 0x1, 0x0, 0x40000000}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x110, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x101}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'wlan1\x00'}, {0xfe45, 0x1, 'veth0\x00'}, {0x14, 0x1, 'pimreg0\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'syzkaller0\x00'}, {0x14, 0x1, 'dvmrp0\x00'}]}]}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x10}}, 0x2dc}}, 0x0)

3.10297691s ago: executing program 2 (id=1586):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x60dc7000)
r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
read(r1, &(0x7f0000000180)=""/236, 0xec)

3.077080006s ago: executing program 1 (id=1587):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./bus\x00', 0x380440e, &(0x7f0000000080)={[{@delalloc}, {@discard}]}, 0x1, 0xbdb, &(0x7f0000001000)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000180)='./file0\x00', 0x24)
setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0)

3.068246438s ago: executing program 5 (id=1588):
bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x50)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r0}, 0xc)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0)

2.934105579s ago: executing program 0 (id=1589):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="bf16000000000000620af0ff0100007f620af4ff0100007f6a0af8ff341200006a0afaff204e0000620ad8ff34124e20620adcff00000000620ae0ff00000000620ae4ff50020010620ae8ff00000000620ac0ff45000028620ac4ff00000000620ac8ff40060000620accff0100007f620ad0ff0100007fbf61000000000000bfa200000000000007020000f0ffffffb70300000c000000b7040000ffffffffb705000000000000850000005400000015000b0000000000bf07000000000000bf71000000000000bfa200000000000007020000c0ffffffb703000014000000bfa400000000000007040000d8ffffffb705000014000000850000006e000000bf710000000000008500000056000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r1)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x0, 0xe, 0x0, &(0x7f0000000600)='\x00'/14, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.66680808s ago: executing program 4 (id=1590):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}})
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x750, 0x0, 0x0, 'queue0\x00', 0x5})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

2.597898196s ago: executing program 5 (id=1591):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6gre0\x00'})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0xc00e}, 0x0)
keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0xc3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'netdevsim0\x00'})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000000)='bridge0\x00')

2.480911703s ago: executing program 1 (id=1592):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
r0 = io_uring_setup(0x46ec, &(0x7f0000000100)={0x0, 0x1f8a, 0x0, 0x2, 0x28c})
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)

2.351120712s ago: executing program 4 (id=1593):
r0 = fsopen(&(0x7f0000000140)='debugfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0xd)
fchdir(r1)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]})
close_range(r2, 0xffffffffffffffff, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./tracing/events/kvm/kvm_hv_stimer_cleanup/trigger\x00', 0x0, 0x8}, 0x18)

2.168644783s ago: executing program 5 (id=1594):
r0 = fanotify_init(0x2, 0x40000)
r1 = epoll_create1(0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
fanotify_mark(r2, 0x21, 0x8000000, r2, 0x0)
io_setup(0x800, &(0x7f0000000440)=<r3=>0x0)
r4 = eventfd(0x0)
io_submit(r3, 0x1, &(0x7f0000000940)=[&(0x7f0000000240)={0x0, 0x0, 0x8, 0x0, 0x0, r4, 0x0, 0x4f}])

2.012579399s ago: executing program 4 (id=1595):
r0 = gettid()
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
listen(r1, 0xfff)
accept$inet6(r1, 0x0, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
listen(r1, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

1.850856216s ago: executing program 2 (id=1596):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
execve(&(0x7f0000000140)='./file0\x00', 0x0, &(0x7f00000004c0)={[&(0x7f00000002c0)='\xf4!. ./{\x00', &(0x7f00000003c0)='/dev/kvm\x00']})

1.750293359s ago: executing program 4 (id=1597):
setns(0xc9, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1})
syz_emit_ethernet(0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0286dd6000000000000d00fc"], 0x0)
write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="000086dde681"], 0xfdef)

1.644030704s ago: executing program 0 (id=1598):
socket$vsock_stream(0x28, 0x1, 0x0)
openat(0xffffffffffffff9c, 0x0, 0xd4cc0, 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f0000002500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa18c56, &(0x7f0000001180)={[{@fat=@gid}, {@utf8}, {@numtail}, {@fat=@codepage={'codepage', 0x3d, '865'}}, {@utf8}, {@utf8no}, {@utf8no}, {@uni_xlate}, {@shortname_mixed}, {@uni_xlateno}, {@utf8no}, {@shortname_win95}, {@fat=@flush}, {@shortname_lower}, {@shortname_mixed}, {@fat=@quiet}, {@shortname_win95}]}, 0x7f, 0x2c1, &(0x7f0000001640)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010100ab51a0407b0500000000000000010902120001200000000904", @ANYRES32, @ANYRES16=r0], 0x0)

1.590062106s ago: executing program 2 (id=1599):
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file1\x00', 0x3000400, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$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")
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000340)={{}, {}, [], {0x4, 0x4}}, 0x24, 0x0)
r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0da6)
fchown(r0, 0xffffffffffffffff, 0xee01)
setresuid(0xee00, 0xee00, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000180)={0x8, {"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", 0x1000}}, 0x1006)

1.523311062s ago: executing program 5 (id=1600):
syz_mount_image$ext4(&(0x7f0000000680)='ext3\x00', &(0x7f0000000040)='./file2\x00', 0x10000, &(0x7f00000000c0)={[{@jqfmt_vfsv1}]}, 0x1, 0x559, &(0x7f0000000100)="$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")
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f0000000340)="23000000010007", 0x7)
syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="041817aaaaaaaaaa10"], 0x1a)
syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="041706aaaaaaaaaa10"], 0x9)

1.210719753s ago: executing program 4 (id=1601):
openat$sequencer2(0xffffff9c, &(0x7f00000021c0), 0xa0000, 0x0)
r0 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000500)={0x0, 0x30b5, 0x0, 0x2, 0x377}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0, &(0x7f0000000300)=<r3=>0x0)
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x6, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=<r4=>0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc74e, 0x8000, 0x10000000, 0x546}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xfffffffc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x3, 0x826, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94)

772.764033ms ago: executing program 2 (id=1602):
r0 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write$binfmt_misc(r3, &(0x7f0000000980), 0xfdef)
tee(r2, r1, 0x3, 0x5)
splice(r2, 0x0, r0, 0x0, 0x4010d00, 0x0)

560.430032ms ago: executing program 5 (id=1603):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pnp/drivers/serial\x00', 0x0, 0x0)
r1 = openat(r0, &(0x7f0000000140)='unbind\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='00:03\n', 0x6)
r2 = openat(r0, &(0x7f0000000480)='bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000500)='00:03\n', 0x6)

268.057849ms ago: executing program 2 (id=1604):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000)
write$vhost_msg_v2(r0, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000080)=""/23, 0x17, 0x0, 0x1, 0x2}}, 0x48)
write$vhost_msg_v2(r0, &(0x7f0000001b80)={0x2, 0x0, {&(0x7f0000000b00)=""/4096, 0x1000, 0x0, 0x1, 0x2}}, 0x48)
write$vhost_msg_v2(r0, &(0x7f00000006c0)={0x2, 0x0, {&(0x7f0000000a80)=""/104, 0x68, 0x0, 0x1, 0x2}}, 0x48)
write$vhost_msg_v2(r0, &(0x7f00000005c0)={0x2, 0x0, {&(0x7f0000000440)=""/174, 0xae, 0x0, 0x2, 0x2}}, 0x48)
write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000280)=""/184, 0x2562bac182d8b35a, 0x0, 0x2, 0x3}}, 0x48)

34.036692ms ago: executing program 1 (id=1605):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x200c9a, &(0x7f0000000280)=ANY=[], 0x1, 0x68b, &(0x7f0000000a40)="$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")
truncate(&(0x7f00000002c0)='./file1\x00', 0x10)
setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x15)
pwrite64(r0, &(0x7f0000000140)="360aa2023c", 0x5, 0x505d)
fallocate(r0, 0x10, 0x37ec, 0x683)
truncate(&(0x7f0000000340)='./file1\x00', 0x20fffbfffc)

0s ago: executing program 2 (id=1606):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x474c, 0x4)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e21, @multicast1}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000040)=0xfffffffc, 0x4)
recvmmsg(r0, &(0x7f0000008000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000005040)=""/25, 0x19}, 0x1000}], 0x1, 0x2003, 0x0)

kernel console output (not intermixed with test programs):

oop2: detected capacity change from 0 to 128
[  183.887502][ T6575] netlink: 4 bytes leftover after parsing attributes in process `syz.4.755'.
[  183.924085][ T6576] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  183.980687][ T6576] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  184.190372][ T5179] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  184.662563][ T4321] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  184.872834][ T4321] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  184.906677][ T4321] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  184.933036][ T4321] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  184.962994][ T4321] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  184.996130][ T4321] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  185.025192][ T6445] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  185.064049][ T6445] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  185.070308][ T4321] usb 3-1: config 0 descriptor??
[  185.110692][ T4291] Bluetooth: hci4: command 0x0419 tx timeout
[  185.118465][ T6445] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  185.160846][   T27] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  185.213525][ T6445] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  185.381350][   T27] usb 5-1: Using ep0 maxpacket: 32
[  185.392484][   T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  185.444525][   T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  185.485256][   T27] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  185.514602][ T4321] plantronics 0003:047F:FFFF.0006: unknown main item tag 0xd
[  185.525715][   T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  185.542787][ T4321] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving
[  185.552060][ T6445] 8021q: adding VLAN 0 to HW filter on device bond0
[  185.582178][   T27] usb 5-1: config 0 descriptor??
[  185.651162][ T4321] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  185.656012][ T5185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  185.701941][ T5185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  185.750216][ T6445] 8021q: adding VLAN 0 to HW filter on device team0
[  185.809718][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  185.859483][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  185.868795][ T4321] usb 3-1: USB disconnect, device number 7
[  185.909731][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  185.916990][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  185.985150][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  186.024432][   T27] savu 0003:1E7D:2D5A.0007: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0
[  186.051083][ T5176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  186.066805][ T5176] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  186.127493][ T5176] bridge0: port 2(bridge_slave_1) entered blocking state
[  186.134817][ T5176] bridge0: port 2(bridge_slave_1) entered forwarding state
[  186.159007][ T6613] fido_id[6613]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  186.212174][ T5176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  186.242104][ T5176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  186.298544][ T5168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  186.315221][   T22] usb 5-1: USB disconnect, device number 8
[  186.342554][ T5168] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  186.391836][ T5168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  186.454522][ T5168] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  186.482393][ T5168] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  186.579583][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  186.598163][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  186.637475][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  186.658206][ T6623] netlink: 'syz.2.768': attribute type 1 has an invalid length.
[  186.681936][ T6617] fido_id[6617]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  186.701626][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  186.743912][ T6445] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  187.257334][ T6637] syz.2.774 sent an empty control message without MSG_MORE.
[  187.549380][ T6643] "syz.4.776" (6643) uses obsolete ecb(arc4) skcipher
[  187.601278][ T6648] netlink: 'syz.2.777': attribute type 1 has an invalid length.
[  187.610789][ T6648] netlink: 'syz.2.777': attribute type 2 has an invalid length.
[  187.865161][ T5185] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  187.883130][ T5185] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  187.928392][ T6445] 8021q: adding VLAN 0 to HW filter on device batadv0
[  188.291013][ T6670] loop9: detected capacity change from 0 to 16384
[  188.400986][ T6675] loop9: detected capacity change from 16384 to 16382
[  188.846780][ T6688] overlayfs: failed to clone upperpath
[  189.714834][ T5179] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  189.743481][ T6706] FAULT_INJECTION: forcing a failure.
[  189.743481][ T6706] name failslab, interval 1, probability 0, space 0, times 0
[  189.757436][ T5179] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  189.825426][ T6706] CPU: 1 PID: 6706 Comm: syz.1.793 Not tainted syzkaller #0
[  189.832903][ T6706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  189.843019][ T6706] Call Trace:
[  189.846334][ T6706]  <TASK>
[  189.849298][ T6706]  dump_stack_lvl+0x188/0x24e
[  189.854020][ T6706]  ? show_regs_print_info+0x12/0x12
[  189.859356][ T6706]  ? load_image+0x410/0x410
[  189.863914][ T6706]  ? __lock_acquire+0x7c40/0x7c40
[  189.869081][ T6706]  ? __x64_sys_unshare+0x34/0x40
[  189.874145][ T6706]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  189.880275][ T6706]  should_fail_ex+0x390/0x4c0
[  189.885007][ T6706]  should_failslab+0x5/0x20
[  189.889554][ T6706]  slab_pre_alloc_hook+0x59/0x300
[  189.894635][ T6706]  ? alloc_super+0x5a/0x930
[  189.899188][ T6706]  __kmem_cache_alloc_node+0x4f/0x270
[  189.904652][ T6706]  ? alloc_super+0x5a/0x930
[  189.909194][ T6706]  kmalloc_trace+0x26/0xe0
[  189.913659][ T6706]  alloc_super+0x5a/0x930
[  189.918061][ T6706]  ? kill_litter_super+0xa0/0xa0
[  189.923052][ T6706]  sget_fc+0x2d4/0x750
[  189.927160][ T6706]  ? kill_litter_super+0xa0/0xa0
[  189.932135][ T6706]  ? mqueue_get_tree+0xe0/0xe0
[  189.936945][ T6706]  get_tree_nodev+0x26/0x160
[  189.941582][ T6706]  vfs_get_tree+0x88/0x270
[  189.946049][ T6706]  fc_mount+0x18/0xa0
[  189.950090][ T6706]  mq_init_ns+0x39d/0x510
[  189.954485][ T6706]  copy_ipcs+0x2de/0x500
[  189.958774][ T6706]  create_new_namespaces+0x212/0x700
[  189.964115][ T6706]  unshare_nsproxy_namespaces+0x116/0x160
[  189.969891][ T6706]  ksys_unshare+0x4f6/0x8e0
[  189.974450][ T6706]  ? sighand_ctor+0x40/0x40
[  189.978999][ T6706]  ? lock_chain_count+0x20/0x20
[  189.983902][ T6706]  ? syscall_enter_from_user_mode+0x21/0x80
[  189.989853][ T6706]  __x64_sys_unshare+0x34/0x40
[  189.994662][ T6706]  do_syscall_64+0x4c/0xa0
[  189.999116][ T6706]  ? clear_bhb_loop+0x60/0xb0
[  190.003833][ T6706]  ? clear_bhb_loop+0x60/0xb0
[  190.008559][ T6706]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  190.014508][ T6706] RIP: 0033:0x7fa4bff9e159
[  190.018964][ T6706] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  190.038618][ T6706] RSP: 002b:00007fa4c0f40028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  190.047087][ T6706] RAX: ffffffffffffffda RBX: 00007fa4c0225fa0 RCX: 00007fa4bff9e159
[  190.055113][ T6706] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000
[  190.063141][ T6706] RBP: 00007fa4c003506b R08: 0000000000000000 R09: 0000000000000000
[  190.071179][ T6706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  190.079191][ T6706] R13: 00007fa4c0226038 R14: 00007fa4c0225fa0 R15: 00007ffdbf1c6238
[  190.087227][ T6706]  </TASK>
[  190.103334][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  190.166087][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  190.197784][ T6445] device veth0_vlan entered promiscuous mode
[  190.215870][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  190.235556][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  190.271677][ T6445] device veth1_vlan entered promiscuous mode
[  190.437235][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  190.452587][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  190.521773][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  190.537934][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  190.574037][ T6445] device veth0_macvtap entered promiscuous mode
[  190.623230][ T6445] device veth1_macvtap entered promiscuous mode
[  190.730899][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  190.746394][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  190.787361][ T6445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  190.833146][ T6445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  190.880672][ T6445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  190.918198][ T6445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  190.970764][ T6445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  191.012926][ T6445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  191.042253][ T6445] batman_adv: batadv0: Interface activated: batadv_slave_0
[  191.094883][ T5176] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  191.122689][ T5176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  191.151113][ T6445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  191.200784][ T6445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  191.250696][ T6445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  191.300664][ T6445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  191.310563][ T6445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  191.363037][ T6445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  191.409967][ T6445] batman_adv: batadv0: Interface activated: batadv_slave_1
[  191.460055][ T5179] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  191.469458][ T5179] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  191.497045][ T6445] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  191.526277][ T6445] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  191.566259][ T6445] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  191.619315][ T6445] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  192.787894][ T5179] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  192.816675][ T5179] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  192.918749][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  192.944488][ T5168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  192.977957][ T5168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  193.031746][ T5168] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  193.162494][ T6776] "syz.2.817" (6776) uses obsolete ecb(arc4) skcipher
[  193.192999][ T6773] netlink: 'syz.4.816': attribute type 10 has an invalid length.
[  193.984632][ T6801] loop9: detected capacity change from 0 to 16384
[  194.140843][ T6802] loop9: detected capacity change from 16384 to 16382
[  194.474329][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  194.480813][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  194.708976][ T6812] loop0: detected capacity change from 0 to 1024
[  194.896964][ T6812] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  194.948969][ T6812] ext4 filesystem being mounted at /172/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  195.000782][ T6818] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set
[  195.044725][ T6823] loop4: detected capacity change from 0 to 512
[  195.059348][ T6812] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.826: bg 0: block 112: padding at end of block bitmap is not set
[  195.087855][ T6823] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  195.199164][ T6823] EXT4-fs (loop4): 1 truncate cleaned up
[  195.223511][ T6823] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  195.231430][ T6812] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 17 with error 117
[  195.260749][ T6812] EXT4-fs (loop0): This should not happen!! Data will be lost
[  195.260749][ T6812] 
[  195.280795][ T4277] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  195.398394][ T6831] overlayfs: failed to clone upperpath
[  195.488928][ T4277] usb 6-1: Using ep0 maxpacket: 8
[  195.515925][ T4277] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  195.564117][ T4277] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  195.584067][ T5187] EXT4-fs error (device loop0): ext4_map_blocks:747: inode #15: block 8: comm kworker/u4:23: lblock 40 mapped to illegal pblock 8 (length 8)
[  195.610676][ T4277] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  195.620970][ T4277] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  195.654485][ T5187] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 40 with max blocks 8 with error 117
[  195.654703][ T4277] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  195.698021][ T5187] EXT4-fs (loop0): This should not happen!! Data will be lost
[  195.698021][ T5187] 
[  195.751015][ T4277] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  195.755698][ T4273] EXT4-fs (loop0): unmounting filesystem.
[  195.760125][ T4277] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  195.816781][ T4282] EXT4-fs (loop4): unmounting filesystem.
[  195.989920][ T4277] usb 6-1: usb_control_msg returned -32
[  195.995926][ T4277] usbtmc 6-1:16.0: can't read capabilities
[  196.792198][ T6865] 9pnet: p9_errstr2errno: server reported unknown error 
[  196.821967][ T6859] usbtmc 6-1:16.0: CHECK_CLEAR_STATUS returned 0
[  197.024426][ T4321] usb 6-1: USB disconnect, device number 2
[  197.101544][ T6869] loop2: detected capacity change from 0 to 512
[  197.238414][ T6869] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 548)
[  197.333607][ T6869] FAT-fs (loop2): Filesystem has been set read-only
[  197.382234][ T6869] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548)
[  197.409820][ T6869] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548)
[  197.481610][ T6876] loop4: detected capacity change from 0 to 2048
[  197.569346][ T6876] Alternate GPT is invalid, using primary GPT.
[  197.612983][ T6876]  loop4: p2 p3 p7
[  198.193669][ T5290] udevd[5290]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  198.197729][ T4284] udevd[4284]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory
[  198.268358][ T5292] udevd[5292]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  198.871596][   T22] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  198.919171][   T22] hid-generic 0000:0000:0000.0008: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  199.007216][ T6914] device sit0 entered promiscuous mode
[  199.091980][ T6914] netlink: 'syz.4.855': attribute type 1 has an invalid length.
[  199.151034][ T6914] netlink: 1 bytes leftover after parsing attributes in process `syz.4.855'.
[  199.736415][ T6931] fuse: Bad value for 'fd'
[  202.028397][ T6984] loop5: detected capacity change from 0 to 512
[  202.086913][ T6984] EXT4-fs: Ignoring removed nobh option
[  202.182732][ T6984] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters
[  202.236541][ T6984] EXT4-fs (loop5): Remounting filesystem read-only
[  202.326425][ T6984] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.875: invalid indirect mapped block 4278190080 (level 0)
[  202.400814][ T6984] EXT4-fs (loop5): Remounting filesystem read-only
[  202.427900][ T6984] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.875: invalid indirect mapped block 1 (level 1)
[  202.558204][ T6984] EXT4-fs (loop5): Remounting filesystem read-only
[  202.623082][ T6984] EXT4-fs (loop5): 1 truncate cleaned up
[  202.646840][ T6984] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  202.804203][ T6984] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  203.048492][ T6445] EXT4-fs (loop5): unmounting filesystem.
[  203.287243][ T7015] loop5: detected capacity change from 0 to 512
[  203.397128][ T7017] loop2: detected capacity change from 0 to 512
[  203.512967][ T7015] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 548)
[  203.530420][ T7017] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[  203.592474][ T7015] FAT-fs (loop5): Filesystem has been set read-only
[  203.613562][ T7017] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.884: invalid indirect mapped block 256 (level 1)
[  203.665093][ T7015] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548)
[  203.711486][ T7015] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548)
[  203.740135][ T7017] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.884: invalid indirect mapped block 2683928664 (level 1)
[  203.798889][ T7017] EXT4-fs (loop2): 1 truncate cleaned up
[  203.817532][ T7017] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  203.840682][ T5067] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  204.042751][ T5067] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  204.070743][ T5067] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  204.073617][ T4681] rpcbind: server 127.0.0.1 not responding, timed out
[  204.114015][ T5067] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  204.150667][ T5067] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  204.211644][ T5067] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[  204.257243][ T5067] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  204.627151][ T7017] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:477: comm syz.2.884: Invalid block bitmap block 3 in block_group 0
[  204.799519][ T7045] loop4: detected capacity change from 0 to 512
[  204.840983][   T22] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  204.877707][ T7045] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  204.927184][ T7045] ext4 filesystem being mounted at /193/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  205.033627][ T4288] EXT4-fs (loop2): unmounting filesystem.
[  205.043043][   T22] usb 6-1: unable to get BOS descriptor or descriptor too short
[  205.067099][   T22] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 109, changing to 10
[  205.079099][ T7045] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #2: comm syz.4.895: corrupted inode contents
[  205.104881][   T22] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0
[  205.145853][   T22] usb 6-1: New USB device found, idVendor=ff35, idProduct=0007, bcdDevice= 0.00
[  205.171847][ T7045] EXT4-fs (loop4): Remounting filesystem read-only
[  205.189182][   T22] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  205.197986][ T7045] EXT4-fs error (device loop4): ext4_dirty_inode:6166: inode #2: comm syz.4.895: mark_inode_dirty error
[  205.252454][ T7045] EXT4-fs (loop4): Remounting filesystem read-only
[  205.291858][ T7045] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #2: comm syz.4.895: corrupted inode contents
[  205.326888][ T7045] EXT4-fs (loop4): Remounting filesystem read-only
[  205.359035][ T7049] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #2: comm syz.4.895: corrupted inode contents
[  205.394972][ T7049] EXT4-fs (loop4): Remounting filesystem read-only
[  205.407199][ T7049] EXT4-fs error (device loop4): ext4_dirty_inode:6166: inode #2: comm syz.4.895: mark_inode_dirty error
[  205.426985][ T7049] EXT4-fs (loop4): Remounting filesystem read-only
[  205.437052][ T7049] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #2: comm syz.4.895: corrupted inode contents
[  205.456248][ T7049] EXT4-fs (loop4): Remounting filesystem read-only
[  205.463607][ T7049] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz.4.895: mark_inode_dirty error
[  205.496019][   T22] usb 6-1: string descriptor 0 read error: -71
[  205.503027][ T7049] EXT4-fs (loop4): Remounting filesystem read-only
[  205.524752][   T22] usb 6-1: MIDIStreaming interface descriptor not found
[  205.529688][ T5067] gud 1-1:1.0: DP-1: Failed to add properties (ret=-71)
[  205.550885][ T7049] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #2: comm syz.4.895: corrupted inode contents
[  205.559017][ T5067] gud 1-1:1.0: Failed to get connectors (error=-71)
[  205.576994][ T5067] gud: probe of 1-1:1.0 failed with error -71
[  205.598070][ T5067] usb 1-1: USB disconnect, device number 10
[  205.605978][ T7049] EXT4-fs (loop4): Remounting filesystem read-only
[  205.625741][ T7049] EXT4-fs error (device loop4): ext4_dirty_inode:6166: inode #2: comm syz.4.895: mark_inode_dirty error
[  205.696484][ T7049] EXT4-fs (loop4): Remounting filesystem read-only
[  205.718027][ T7056] netlink: 'syz.2.898': attribute type 34 has an invalid length.
[  205.729860][   T22] snd-usb-audio: probe of 6-1:1.0 failed with error -12
[  205.760510][ T7045] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #2: comm syz.4.895: corrupted inode contents
[  205.770895][   T22] usb 6-1: USB disconnect, device number 3
[  205.806210][ T4294] udevd[4294]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  206.370266][ T7070] loop0: detected capacity change from 0 to 1024
[  206.401991][ T7070] EXT4-fs: Ignoring removed bh option
[  206.470081][ T7070] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  206.504945][ T7070] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2805: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  206.569922][ T7076] netlink: 44 bytes leftover after parsing attributes in process `syz.1.906'.
[  206.581443][   T22] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  206.637311][ T7076] bridge0: port 2(bridge_slave_1) entered disabled state
[  206.644812][ T7076] bridge0: port 1(bridge_slave_0) entered disabled state
[  206.715073][ T7079] netlink: 32 bytes leftover after parsing attributes in process `syz.1.906'.
[  206.773433][   T22] usb 5-1: Using ep0 maxpacket: 8
[  206.784854][   T22] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  206.806929][ T4273] EXT4-fs (loop0): unmounting filesystem.
[  206.834675][   T22] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  206.878500][   T22] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  206.949738][   T22] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  206.997050][   T22] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  207.037256][   T22] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  207.067072][   T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  207.344665][   T22] usb 5-1: usb_control_msg returned -32
[  207.350433][   T22] usbtmc 5-1:16.0: can't read capabilities
[  207.838715][ T4277] usb 1-1: new full-speed USB device number 11 using dummy_hcd
[  208.047064][ T4277] usb 1-1: New USB device found, idVendor=0582, idProduct=003b, bcdDevice= 0.40
[  208.099228][ T4277] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  208.127770][ T4277] usb 1-1: Product: syz
[  208.148105][ T4277] usb 1-1: Manufacturer: syz
[  208.159252][ T7114] usbtmc 5-1:16.0: usb_control_msg returned -71
[  208.159610][ T4277] usb 1-1: SerialNumber: syz
[  208.269540][ T7123] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  208.371837][    T7] usb 5-1: USB disconnect, device number 9
[  208.532154][ T7127] device bridge_slave_0 left promiscuous mode
[  208.546264][ T7127] bridge0: port 1(bridge_slave_0) entered disabled state
[  208.557107][ T7127] device bridge_slave_1 left promiscuous mode
[  208.578282][ T7127] bridge0: port 2(bridge_slave_1) entered disabled state
[  208.596748][ T7127] bond0: (slave bond_slave_0): Releasing backup interface
[  208.608860][ T7127] bond0: (slave bond_slave_1): Releasing backup interface
[  208.645438][ T7127] team0: Port device team_slave_0 removed
[  208.656203][ T7127] team0: Port device team_slave_1 removed
[  208.670897][ T7127] batman_adv: batadv0: Removing interface: batadv_slave_0
[  208.691642][ T7127] batman_adv: batadv0: Removing interface: batadv_slave_1
[  208.738297][ T7130] team0: Port device xfrm0 added
[  209.037803][ T4277] usb 1-1: MIDIStreaming interface descriptor not found
[  209.325766][ T4277] usb 1-1: USB disconnect, device number 11
[  209.595012][ T7146] loop4: detected capacity change from 0 to 1
[  209.629470][ T7146] loop4: detected capacity change from 1 to 4
[  211.800235][ T7171] loop5: detected capacity change from 0 to 32768
[  211.831541][ T7196] device batadv_slave_1 entered promiscuous mode
[  211.849907][ T7171] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.940 (7171)
[  211.884842][ T7195] device batadv_slave_1 left promiscuous mode
[  211.951935][ T7171] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  211.997247][ T7171] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  212.060058][ T7171] BTRFS info (device loop5): using free space tree
[  212.247433][ T7208] netlink: 'syz.4.950': attribute type 10 has an invalid length.
[  212.341992][ T7208] team0: Device ipvlan1 failed to register rx_handler
[  212.520753][ T7171] BTRFS info (device loop5): enabling ssd optimizations
[  213.679711][ T6445] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  214.374173][ T4321] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  214.402644][ T7286] bridge0: port 3(veth0) entered blocking state
[  214.414331][ T7286] bridge0: port 3(veth0) entered disabled state
[  214.414891][ T5292] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop5 scanned by udevd (5292)
[  214.433737][ T7286] device veth0 entered promiscuous mode
[  214.455105][ T4321] hid-generic 0000:0000:0000.0009: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  215.108448][ T7304] loop0: detected capacity change from 0 to 128
[  215.213944][ T7304] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  216.672153][ T7339] overlayfs: failed to clone lowerpath
[  216.695831][ T7339] overlayfs: failed to clone upperpath
[  216.719488][ T7341] loop3: detected capacity change from 0 to 7
[  216.780837][ T7341] Dev loop3: unable to read RDB block 7
[  216.786984][ T7341]  loop3: unable to read partition table
[  216.831904][ T7341] loop3: partition table beyond EOD, truncated
[  216.867816][ T7341] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5)
[  217.077758][ T7348] loop5: detected capacity change from 0 to 4096
[  217.112120][ T7348] EXT4-fs: Ignoring removed orlov option
[  217.149849][ T7348] EXT4-fs (loop5): Test dummy encryption mode enabled
[  217.258014][ T7348] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  217.382405][ T7348] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  217.668364][ T6445] EXT4-fs (loop5): unmounting filesystem.
[  217.928944][ T7375] FAULT_INJECTION: forcing a failure.
[  217.928944][ T7375] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  218.020199][ T7375] CPU: 1 PID: 7375 Comm: syz.4.996 Not tainted syzkaller #0
[  218.027687][ T7375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  218.037805][ T7375] Call Trace:
[  218.041130][ T7375]  <TASK>
[  218.044103][ T7375]  dump_stack_lvl+0x188/0x24e
[  218.048840][ T7375]  ? show_regs_print_info+0x12/0x12
[  218.054094][ T7375]  ? load_image+0x410/0x410
[  218.058657][ T7375]  ? __lock_acquire+0x7c40/0x7c40
[  218.063744][ T7375]  should_fail_ex+0x390/0x4c0
[  218.068601][ T7375]  prepare_alloc_pages+0x1e1/0x5b0
[  218.074253][ T7375]  __alloc_pages+0x130/0x4f0
[  218.078921][ T7375]  ? kasan_populate_vmalloc_pte+0xa4/0xf0
[  218.084708][ T7375]  ? zone_statistics+0x170/0x170
[  218.089724][ T7375]  ? __rwlock_init+0x140/0x140
[  218.094553][ T7375]  ? do_raw_spin_unlock+0x11d/0x230
[  218.099857][ T7375]  __get_free_pages+0x8/0x30
[  218.104502][ T7375]  kasan_populate_vmalloc_pte+0x31/0xf0
[  218.110091][ T7375]  ? __apply_to_page_range+0x97b/0xd10
[  218.115604][ T7375]  __apply_to_page_range+0x98d/0xd10
[  218.120952][ T7375]  ? kasan_populate_vmalloc+0x70/0x70
[  218.126384][ T7375]  alloc_vmap_area+0x179f/0x18d0
[  218.131401][ T7375]  ? vm_map_ram+0xab0/0xab0
[  218.135960][ T7375]  ? rcu_is_watching+0x11/0xa0
[  218.140793][ T7375]  __get_vm_area_node+0x158/0x330
[  218.145910][ T7375]  __vmalloc_node_range+0x357/0x1380
[  218.151266][ T7375]  ? sock_hash_alloc+0x294/0x510
[  218.156293][ T7375]  ? free_vm_area+0x50/0x50
[  218.160850][ T7375]  ? __kmem_cache_alloc_node+0x19d/0x270
[  218.166624][ T7375]  ? rcu_is_watching+0x11/0xa0
[  218.171456][ T7375]  ? bpf_map_area_alloc+0x47/0xe0
[  218.176630][ T7375]  bpf_map_area_alloc+0xd4/0xe0
[  218.181946][ T7375]  ? sock_hash_alloc+0x294/0x510
[  218.186943][ T7375]  sock_hash_alloc+0x294/0x510
[  218.191760][ T7375]  map_create+0x524/0xff0
[  218.196148][ T7375]  ? security_bpf+0x7a/0xa0
[  218.200706][ T7375]  __sys_bpf+0x38b/0x780
[  218.204998][ T7375]  ? bpf_link_show_fdinfo+0x380/0x380
[  218.210438][ T7375]  ? lock_chain_count+0x20/0x20
[  218.215357][ T7375]  __x64_sys_bpf+0x78/0x90
[  218.219838][ T7375]  do_syscall_64+0x4c/0xa0
[  218.224307][ T7375]  ? clear_bhb_loop+0x60/0xb0
[  218.229118][ T7375]  ? clear_bhb_loop+0x60/0xb0
[  218.233838][ T7375]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  218.239809][ T7375] RIP: 0033:0x7f73e819e159
[  218.244281][ T7375] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  218.264546][ T7375] RSP: 002b:00007f73e90a8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  218.273202][ T7375] RAX: ffffffffffffffda RBX: 00007f73e8425fa0 RCX: 00007f73e819e159
[  218.275770][ T7385] Context (ID=0x0) not attached to queue pair (handle=0x2:0xffffffff)
[  218.281671][ T7375] RDX: 0000000000000050 RSI: 0000200000000040 RDI: 0000000000000000
[  218.281695][ T7375] RBP: 00007f73e823506b R08: 0000000000000000 R09: 0000000000000000
[  218.281706][ T7375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  218.281719][ T7375] R13: 00007f73e8426038 R14: 00007f73e8425fa0 R15: 00007ffda8032e18
[  218.281746][ T7375]  </TASK>
[  218.536068][ T7389] loop5: detected capacity change from 0 to 256
[  218.683345][ T7372] FAULT_INJECTION: forcing a failure.
[  218.683345][ T7372] name failslab, interval 1, probability 0, space 0, times 0
[  218.728858][ T7394] FAULT_INJECTION: forcing a failure.
[  218.728858][ T7394] name failslab, interval 1, probability 0, space 0, times 0
[  218.776971][ T7394] CPU: 0 PID: 7394 Comm: syz.2.1001 Not tainted syzkaller #0
[  218.784782][ T7394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  218.795069][ T7394] Call Trace:
[  218.798650][ T7394]  <TASK>
[  218.801625][ T7394]  dump_stack_lvl+0x188/0x24e
[  218.806356][ T7394]  ? show_regs_print_info+0x12/0x12
[  218.811608][ T7394]  ? load_image+0x410/0x410
[  218.816169][ T7394]  ? __might_sleep+0xd0/0xd0
[  218.820810][ T7394]  ? __lock_acquire+0x7c40/0x7c40
[  218.825889][ T7394]  should_fail_ex+0x390/0x4c0
[  218.830643][ T7394]  should_failslab+0x5/0x20
[  218.835191][ T7394]  slab_pre_alloc_hook+0x59/0x300
[  218.840268][ T7394]  kmem_cache_alloc+0x56/0x2f0
[  218.845088][ T7394]  ? sk_prot_alloc+0x57/0x210
[  218.849831][ T7394]  sk_prot_alloc+0x57/0x210
[  218.854383][ T7394]  ? sk_alloc+0x20/0x330
[  218.858679][ T7394]  sk_alloc+0x36/0x330
[  218.862792][ T7394]  smc_sock_alloc+0x4b/0x570
[  218.867419][ T7394]  smc_create+0xc8/0x290
[  218.871694][ T7394]  __sock_create+0x49a/0x940
[  218.876359][ T7394]  __sys_socket+0xc4/0x190
[  218.880915][ T7394]  __x64_sys_socket+0x76/0x80
[  218.885814][ T7394]  do_syscall_64+0x4c/0xa0
[  218.890274][ T7394]  ? clear_bhb_loop+0x60/0xb0
[  218.895088][ T7394]  ? clear_bhb_loop+0x60/0xb0
[  218.899852][ T7394]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  218.905886][ T7394] RIP: 0033:0x7f2b5639e159
[  218.910473][ T7394] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  218.930220][ T7394] RSP: 002b:00007f2b545f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  218.938723][ T7394] RAX: ffffffffffffffda RBX: 00007f2b56625fa0 RCX: 00007f2b5639e159
[  218.946831][ T7394] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000002b
[  218.954843][ T7394] RBP: 00007f2b5643506b R08: 0000000000000000 R09: 0000000000000000
[  218.962859][ T7394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  218.970963][ T7394] R13: 00007f2b56626038 R14: 00007f2b56625fa0 R15: 00007ffdffb95f48
[  218.978987][ T7394]  </TASK>
[  218.987131][ T7372] CPU: 1 PID: 7372 Comm: syz.0.995 Not tainted syzkaller #0
[  218.994513][ T7372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  219.004613][ T7372] Call Trace:
[  219.007925][ T7372]  <TASK>
[  219.010887][ T7372]  dump_stack_lvl+0x188/0x24e
[  219.015612][ T7372]  ? show_regs_print_info+0x12/0x12
[  219.020870][ T7372]  ? load_image+0x410/0x410
[  219.025435][ T7372]  ? __might_sleep+0xd0/0xd0
[  219.030154][ T7372]  ? __lock_acquire+0x7c40/0x7c40
[  219.035233][ T7372]  should_fail_ex+0x390/0x4c0
[  219.039964][ T7372]  should_failslab+0x5/0x20
[  219.044500][ T7372]  slab_pre_alloc_hook+0x59/0x300
[  219.049580][ T7372]  kmem_cache_alloc+0x56/0x2f0
[  219.054374][ T7372]  ? __mpol_dup+0x76/0x320
[  219.058833][ T7372]  __mpol_dup+0x76/0x320
[  219.063117][ T7372]  ? vma_dup_policy+0xa0/0xa0
[  219.067840][ T7372]  ? mas_pause+0x9/0x40
[  219.072034][ T7372]  ? mbind_range+0x527/0x750
[  219.076666][ T7372]  vma_replace_policy+0x3b/0x2c0
[  219.081655][ T7372]  __se_sys_mbind+0x5f2/0x810
[  219.086388][ T7372]  ? __ia32_sys_get_robust_list+0x100/0x100
[  219.092351][ T7372]  ? __x64_sys_mbind+0xf0/0xf0
[  219.097212][ T7372]  ? lock_chain_count+0x20/0x20
[  219.102111][ T7372]  ? __x64_sys_mbind+0x1d/0xf0
[  219.106915][ T7372]  do_syscall_64+0x4c/0xa0
[  219.111385][ T7372]  ? clear_bhb_loop+0x60/0xb0
[  219.116121][ T7372]  ? clear_bhb_loop+0x60/0xb0
[  219.120858][ T7372]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  219.126821][ T7372] RIP: 0033:0x7f7dd7f9e159
[  219.131363][ T7372] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  219.151118][ T7372] RSP: 002b:00007f7dd8ed9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed
[  219.159966][ T7372] RAX: ffffffffffffffda RBX: 00007f7dd8225fa0 RCX: 00007f7dd7f9e159
[  219.168065][ T7372] RDX: 0000000000000001 RSI: 0000000000600000 RDI: 0000200000000000
[  219.176080][ T7372] RBP: 00007f7dd803506b R08: 0000000000000000 R09: 0000000000000002
[  219.184102][ T7372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  219.192368][ T7372] R13: 00007f7dd8226038 R14: 00007f7dd8225fa0 R15: 00007ffd60ce6468
[  219.200390][ T7372]  </TASK>
[  219.888190][ T7415] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1008'.
[  220.307262][ T7421] loop0: detected capacity change from 0 to 4096
[  220.356612][ T7421] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512)
[  220.371177][ T7424] 8021q: adding VLAN 0 to HW filter on device bond1
[  220.559807][ T7421] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  221.041149][ T4273] ntfs3: loop0: ntfs_sync_fs r=1a failed, -22.
[  221.089540][ T4273] ntfs3: loop0: ntfs_evict_inode r=1a failed, -22.
[  222.142878][ T5067] usb 1-1: new full-speed USB device number 12 using dummy_hcd
[  222.267619][ T7479] FAULT_INJECTION: forcing a failure.
[  222.267619][ T7479] name failslab, interval 1, probability 0, space 0, times 0
[  222.310731][ T7479] CPU: 1 PID: 7479 Comm: syz.1.1027 Not tainted syzkaller #0
[  222.318199][ T7479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  222.328373][ T7479] Call Trace:
[  222.331730][ T7479]  <TASK>
[  222.334714][ T7479]  dump_stack_lvl+0x188/0x24e
[  222.339450][ T7479]  ? show_regs_print_info+0x12/0x12
[  222.344720][ T7479]  ? load_image+0x410/0x410
[  222.349288][ T7479]  ? __might_sleep+0xd0/0xd0
[  222.353936][ T7479]  ? __lock_acquire+0x7c40/0x7c40
[  222.359031][ T7479]  should_fail_ex+0x390/0x4c0
[  222.363792][ T7479]  should_failslab+0x5/0x20
[  222.368359][ T7479]  slab_pre_alloc_hook+0x59/0x300
[  222.372944][ T5067] usb 1-1: config 4 has an invalid interface number: 44 but max is 0
[  222.373416][ T7479]  ? security_prepare_creds+0x47/0x130
[  222.373468][ T7479]  __kmem_cache_alloc_node+0x4f/0x270
[  222.384052][ T7482] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  222.387122][ T7479]  ? security_prepare_creds+0x47/0x130
[  222.387160][ T7479]  __kmalloc+0xa3/0x240
[  222.387193][ T7479]  security_prepare_creds+0x47/0x130
[  222.387224][ T7479]  prepare_creds+0x450/0x610
[  222.394382][ T5067] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  222.401585][ T7479]  set_current_groups+0x18/0x160
[  222.401632][ T7479]  __se_sys_setgroups+0x34b/0x410
[  222.401666][ T7479]  do_syscall_64+0x4c/0xa0
[  222.401687][ T7479]  ? clear_bhb_loop+0x60/0xb0
[  222.428774][ T5067] usb 1-1: config 4 has no interface number 0
[  222.431362][ T7479]  ? clear_bhb_loop+0x60/0xb0
[  222.431398][ T7479]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  222.431427][ T7479] RIP: 0033:0x7fa4bff9e159
[  222.443959][ T5067] usb 1-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  222.445832][ T7479] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  222.445856][ T7479] RSP: 002b:00007fa4c0f40028 EFLAGS: 00000246
[  222.467292][ T5067] usb 1-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20
[  222.471646][ T7479]  ORIG_RAX: 0000000000000074
[  222.471662][ T7479] RAX: ffffffffffffffda RBX: 00007fa4c0225fa0 RCX: 00007fa4bff9e159
[  222.471677][ T7479] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  222.471689][ T7479] RBP: 00007fa4c003506b R08: 0000000000000000 R09: 0000000000000000
[  222.471701][ T7479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  222.471712][ T7479] R13: 00007fa4c0226038 R14: 00007fa4c0225fa0 R15: 00007ffdbf1c6238
[  222.471742][ T7479]  </TASK>
[  222.716819][ T5067] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  222.741696][ T5067] usb 1-1: Product: syz
[  222.755933][ T5067] usb 1-1: Manufacturer: syz
[  222.766454][ T5067] usb 1-1: SerialNumber: syz
[  223.245485][ T5067] dvb-usb: found a 'Gigabyte U7000' in warm state.
[  223.281259][   T22] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  223.304538][ T5067] dvb-usb: will use the device's hardware PID filter (table count: 32).
[  223.318721][ T5067] dvbdev: DVB: registering new adapter (Gigabyte U7000)
[  223.330335][ T5067] usb 1-1: media controller created
[  223.349557][ T5067] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  223.369158][ T7507] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1034'.
[  223.498679][   T22] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  223.511229][ T7470] i2c i2c-1: Invalid block size returned: 206
[  223.532529][   T22] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  223.568308][ T5067] DVB: Unable to find symbol dib7000p_attach()
[  223.570924][   T22] usb 6-1: Product: syz
[  223.577142][ T5067] dvb-usb: no frontend was attached by 'Gigabyte U7000'
[  223.589222][   T22] usb 6-1: Manufacturer: syz
[  223.600664][   T22] usb 6-1: SerialNumber: syz
[  223.761134][ T4291] Bluetooth: hci6: Opcode 0x1003 failed: -110
[  223.849545][   T22] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71
[  223.883876][   T22] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71
[  223.906341][ T5067] rc_core: IR keymap rc-dib0700-rc5 not found
[  223.915853][ T5067] Registered IR keymap rc-empty
[  223.917335][   T22] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71
[  223.931288][ T5067] dvb-usb: could not initialize remote control.
[  223.949926][ T5067] dvb-usb: Gigabyte U7000 successfully initialized and connected.
[  223.951968][   T22] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  223.989430][ T5067] usb 1-1: USB disconnect, device number 12
[  223.999666][   T22] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  224.066608][   T22] lan78xx: probe of 6-1:1.0 failed with error -71
[  224.079533][ T5067] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected.
[  224.120285][   T22] usb 6-1: USB disconnect, device number 4
[  224.697942][ T7529] input: syz1 as /devices/virtual/input/input13
[  224.989292][   T26] kauditd_printk_skb: 497 callbacks suppressed
[  224.989313][   T26] audit: type=1400 audit(1790313981.698:793): apparmor="STATUS" operation="profile_load" info="not policy admin" error=-13 profile="unconfined" pid=7539 comm="syz.4.1042"
[  225.080713][ T4338] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  225.283008][ T4338] usb 1-1: unable to get BOS descriptor or descriptor too short
[  225.293588][ T7520] loop2: detected capacity change from 0 to 32768
[  225.303947][ T4338] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 109, changing to 10
[  225.358320][ T4338] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0
[  225.387906][ T7520] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.1036 (7520)
[  225.398523][ T4338] usb 1-1: New USB device found, idVendor=ff35, idProduct=0007, bcdDevice= 0.00
[  225.435307][ T4338] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  225.472677][ T7520] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  225.530968][ T7520] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  225.555726][ T7520] BTRFS warning (device loop2): the 'inode_cache' option is deprecated and has no effect since 5.11
[  225.610741][ T7520] BTRFS info (device loop2): turning on async discard
[  225.637998][ T7520] BTRFS info (device loop2): using free space tree
[  225.726419][ T4338] usb 1-1: string descriptor 0 read error: -71
[  225.756651][ T4338] usb 1-1: MIDIStreaming interface descriptor not found
[  225.891078][ T4338] snd-usb-audio: probe of 1-1:1.0 failed with error -12
[  225.916161][ T4338] usb 1-1: USB disconnect, device number 13
[  226.041552][ T7520] BTRFS info (device loop2): enabling ssd optimizations
[  226.211715][ T5296] udevd[5296]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  226.288462][ T4288] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  227.139345][   T26] audit: type=1326 audit(1790313983.848:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7596 comm="syz.1.1062" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4bff9e159 code=0x7ffc0000
[  227.235137][   T26] audit: type=1326 audit(1790313983.848:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7596 comm="syz.1.1062" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fa4bff9e159 code=0x7ffc0000
[  227.235744][ T7602] bridge0: port 3(veth0) entered blocking state
[  227.260667][ T5071] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  227.320748][ T7602] bridge0: port 3(veth0) entered disabled state
[  227.346170][   T26] audit: type=1326 audit(1790313983.848:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7596 comm="syz.1.1062" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4bff9e159 code=0x7ffc0000
[  227.367806][ T7602] device veth0 entered promiscuous mode
[  227.399410][ T7602] bridge0: port 3(veth0) entered blocking state
[  227.405907][ T7602] bridge0: port 3(veth0) entered forwarding state
[  227.450521][   T26] audit: type=1326 audit(1790313983.848:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7596 comm="syz.1.1062" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4bff9e159 code=0x7ffc0000
[  227.503277][   T26] audit: type=1326 audit(1790313983.848:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7596 comm="syz.1.1062" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fa4bff9e159 code=0x7ffc0000
[  227.509106][ T5071] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  227.530452][   T26] audit: type=1326 audit(1790313983.848:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7596 comm="syz.1.1062" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4bff9e159 code=0x7ffc0000
[  227.632952][   T26] audit: type=1326 audit(1790313983.848:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7596 comm="syz.1.1062" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4bff9e159 code=0x7ffc0000
[  227.645318][ T5071] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  227.731287][ T5071] usb 1-1: Product: syz
[  227.749939][ T5071] usb 1-1: Manufacturer: syz
[  227.762513][   T26] audit: type=1326 audit(1790313983.848:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7596 comm="syz.1.1062" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7fa4bff9e159 code=0x7ffc0000
[  227.775174][ T5071] usb 1-1: SerialNumber: syz
[  227.877476][   T26] audit: type=1326 audit(1790313983.938:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7596 comm="syz.1.1062" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4bff9e159 code=0x7ffc0000
[  228.101690][ T5071] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71
[  228.140218][ T5071] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71
[  228.181434][ T5071] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71
[  228.214512][ T5071] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  228.259065][ T5071] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  228.308551][ T5071] lan78xx: probe of 1-1:1.0 failed with error -71
[  228.362804][ T5071] usb 1-1: USB disconnect, device number 14
[  228.874591][ T7644] loop2: detected capacity change from 0 to 512
[  228.948265][ T7644] EXT4-fs (loop2): Test dummy encryption mode enabled
[  229.005201][ T7644] EXT4-fs error (device loop2): ext4_orphan_get:1409: inode #11: comm syz.2.1063: casefold flag without casefold feature
[  229.079270][ T7644] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.1063: couldn't read orphan inode 11 (err -117)
[  229.159132][ T7644] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  229.512822][ T4288] EXT4-fs (loop2): unmounting filesystem.
[  229.536827][ T7653] loop0: detected capacity change from 0 to 8192
[  229.549764][ T7668] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1070'.
[  229.686668][ T7653] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  229.727235][ T7668] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  229.736901][ T7668] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  229.746277][ T7668] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  229.754794][ T7653] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[  229.755268][ T7668] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  229.770107][ T7653] REISERFS (device loop0): using ordered data mode
[  229.790681][ T5071] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  229.805064][ T7668] device vxlan0 entered promiscuous mode
[  229.833139][ T7653] reiserfs: using flush barriers
[  229.875214][ T7653] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  229.945313][ T7653] REISERFS (device loop0): checking transaction log (loop0)
[  229.990970][ T5071] usb 5-1: Using ep0 maxpacket: 32
[  230.000259][ T5071] usb 5-1: config 0 has an invalid interface number: 184 but max is 0
[  230.062578][ T5071] usb 5-1: config 0 has no interface number 0
[  230.079039][ T5071] usb 5-1: config 0 interface 184 has no altsetting 0
[  230.093220][ T5071] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  230.110646][ T5071] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  230.137976][ T5071] usb 5-1: Product: syz
[  230.156081][ T5071] usb 5-1: Manufacturer: syz
[  230.195455][ T5071] usb 5-1: SerialNumber: syz
[  230.230229][ T5071] usb 5-1: config 0 descriptor??
[  230.245751][ T5071] smsc75xx v1.0.0
[  230.257203][ T7679] tls_set_device_offload_rx: netdev not found
[  230.470465][ T7653] REISERFS (device loop0): Using tea hash to sort names
[  230.485798][ T7653] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2)
[  230.506930][ T7653] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  230.855855][ T5071] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  230.902137][ T5071] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  230.976371][ T7693] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 5) not found (pos 2)
[  231.335398][ T5071] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71
[  231.370476][ T5071] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71
[  231.428110][ T7704] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4)
[  231.435273][ T7704] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  231.444308][ T7706] vhci_hcd: xmit failed -107
[  231.466421][ T7704] vhci_hcd vhci_hcd.0: Device attached
[  231.467126][ T5071] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  231.504809][ T5179] vhci_hcd: stop threads
[  231.509118][ T5179] vhci_hcd: release socket
[  231.566643][ T5179] vhci_hcd: disconnect device
[  231.578094][ T5071] smsc75xx: probe of 5-1:0.184 failed with error -71
[  231.588700][ T5071] usb 5-1: USB disconnect, device number 10
[  232.712619][ T7735] loop2: detected capacity change from 0 to 8192
[  232.748700][ T3598] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  232.754757][ T7735] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  232.770320][ T7735] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal
[  232.779804][ T7735] REISERFS (device loop2): using ordered data mode
[  232.787470][ T7735] reiserfs: using flush barriers
[  232.794077][ T7735] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  232.817934][ T7735] REISERFS (device loop2): checking transaction log (loop2)
[  233.079003][ T7750] loop5: detected capacity change from 0 to 256
[  233.130975][ T7735] REISERFS (device loop2): Using tea hash to sort names
[  233.161616][ T7750] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d)
[  233.176648][ T7735] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2)
[  233.224828][ T7735] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  234.089147][ T7767] loop5: detected capacity change from 0 to 256
[  234.171909][ T7767] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xeb34f926, utbl_chksum : 0xe619d30d)
[  234.418582][ T7772] loop2: detected capacity change from 0 to 512
[  234.678580][ T7772] EXT4-fs error (device loop2): ext4_orphan_get:1435: comm syz.2.1102: bad orphan inode 11862016
[  234.743583][ T7772] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  234.753231][ T7772] ext4 filesystem being mounted at /222/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  234.881010][   T27] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  234.993245][ T4288] EXT4-fs (loop2): unmounting filesystem.
[  235.056374][ T7792] loop4: detected capacity change from 0 to 256
[  235.070718][   T27] usb 6-1: Using ep0 maxpacket: 8
[  235.077908][   T27] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  235.108458][   T27] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  235.143324][ T7795] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1110'.
[  235.159003][ T7792] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d)
[  235.170888][ T7795] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  235.191048][   T27] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  235.212045][   T27] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  235.244118][   T27] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  235.308899][   T27] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  235.338932][   T27] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  235.590480][   T27] usb 6-1: usb_control_msg returned -32
[  235.600713][   T27] usbtmc 6-1:16.0: can't read capabilities
[  235.611461][ T7795] batman_adv: batadv0: Removing interface: batadv_slave_0
[  235.962721][ T7816] netlink: 'syz.2.1118': attribute type 3 has an invalid length.
[  236.401694][ T7827] usbtmc 6-1:16.0: usb_control_msg returned -32
[  236.550738][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  236.611607][ T4401] usb 6-1: USB disconnect, device number 5
[  236.740934][   T22] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  236.912602][ T7841] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1127'.
[  236.966852][   T22] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  236.989848][   T22] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64
[  237.035359][   T22] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  237.038341][ T7844] overlayfs: failed to clone upperpath
[  237.085450][ T7830] loop2: detected capacity change from 0 to 32768
[  237.091376][   T22] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00
[  237.138550][   T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  237.239130][ T7830] XFS (loop2): Mounting V5 Filesystem
[  237.470045][ T7830] XFS (loop2): Ending clean mount
[  237.638397][   T22] cxacru_cm: 2 callbacks suppressed
[  237.638419][   T22] cxacru 1-1:1.0: send of cm 0x91 failed (-71)
[  237.664798][   T22] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71
[  237.689478][   T22] ATM dev 0: usbatm_atm_init: atm_start failed: -71!
[  237.715555][   T22] cxacru: probe of 1-1:1.0 failed with error -71
[  237.751314][   T22] usb 1-1: USB disconnect, device number 15
[  237.950902][ T4288] XFS (loop2): Unmounting Filesystem
[  238.420727][   T22] usb 6-1: new full-speed USB device number 6 using dummy_hcd
[  238.628400][   T22] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  238.650144][   T22] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  238.668292][ T7890] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  238.696837][   T22] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  238.716682][   T22] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  238.748114][   T22] usb 6-1: Product: syz
[  238.770677][   T22] usb 6-1: Manufacturer: syz
[  238.799097][   T22] hub 6-1:4.0: USB hub found
[  239.007962][   T22] hub 6-1:4.0: config failed, hub has too many ports! (err -19)
[  239.129570][ T7900] input: syz0 as /devices/virtual/input/input14
[  239.312778][ T7906] device lo entered promiscuous mode
[  239.333312][ T7906] device tunl0 entered promiscuous mode
[  239.341409][   T22] usb 6-1: USB disconnect, device number 6
[  239.363777][ T7906] device gre0 entered promiscuous mode
[  239.383732][ T7906] device gretap0 entered promiscuous mode
[  239.398764][ T7906] device erspan0 entered promiscuous mode
[  239.408379][ T7906] device ip_vti0 entered promiscuous mode
[  239.425288][ T7906] device ip6_vti0 entered promiscuous mode
[  239.436588][ T7906] device sit0 entered promiscuous mode
[  239.450203][ T7906] device ip6tnl0 entered promiscuous mode
[  239.456822][ T7906] device ip6gre0 entered promiscuous mode
[  239.463447][ T7906] device syz_tun entered promiscuous mode
[  239.469986][ T7906] device ip6gretap0 entered promiscuous mode
[  239.476745][ T7906] device bridge0 entered promiscuous mode
[  239.494262][ T7906] device vcan0 entered promiscuous mode
[  239.504487][ T7906] device bond0 entered promiscuous mode
[  239.515302][ T7906] device dummy0 entered promiscuous mode
[  239.528368][ T7906] device team0 entered promiscuous mode
[  239.534605][   T22] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  239.543080][ T7906] device xfrm0 entered promiscuous mode
[  239.553411][ T7906] device nlmon0 entered promiscuous mode
[  239.559327][ T7906] device caif0 entered promiscuous mode
[  239.565772][ T7906] device batadv0 entered promiscuous mode
[  239.572710][ T7906] device vxcan0 entered promiscuous mode
[  239.588265][ T7906] device vxcan1 entered promiscuous mode
[  239.600883][ T7906] device veth0 entered promiscuous mode
[  239.612224][ T7906] device veth1 entered promiscuous mode
[  239.623761][ T7906] device wg0 entered promiscuous mode
[  239.639694][ T7906] device wg1 entered promiscuous mode
[  239.645586][ T7906] device wg2 entered promiscuous mode
[  239.660888][ T7906] device veth0_to_bridge entered promiscuous mode
[  239.668817][ T7906] device bridge_slave_0 entered promiscuous mode
[  239.682534][ T7906] device veth1_to_bridge entered promiscuous mode
[  239.696365][ T7906] device bridge_slave_1 entered promiscuous mode
[  239.707890][ T7906] device veth0_to_bond entered promiscuous mode
[  239.715073][ T7906] device bond_slave_0 entered promiscuous mode
[  239.722307][ T7906] device veth1_to_bond entered promiscuous mode
[  239.741183][ T7906] device bond_slave_1 entered promiscuous mode
[  239.748748][   T22] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  239.765605][ T7906] device veth0_to_team entered promiscuous mode
[  239.773401][   T22] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  239.791579][ T7906] device team_slave_0 entered promiscuous mode
[  239.803485][   T22] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  239.814789][ T7906] device veth1_to_team entered promiscuous mode
[  239.825491][ T7906] device team_slave_1 entered promiscuous mode
[  239.833092][   T22] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  239.846903][ T7906] device veth0_to_batadv entered promiscuous mode
[  239.854952][ T7906] device batadv_slave_0 entered promiscuous mode
[  239.862113][   T22] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  239.893415][   T22] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  239.900935][ T7906] device veth1_to_batadv entered promiscuous mode
[  239.923510][ T7906] device batadv_slave_1 entered promiscuous mode
[  239.925563][   T22] usb 5-1: Manufacturer: syz
[  239.949435][   T22] usb 5-1: config 0 descriptor??
[  239.966253][ T7906] device veth0_to_hsr entered promiscuous mode
[  239.986121][ T7906] device veth1_to_hsr entered promiscuous mode
[  240.021042][ T7906] device hsr0 entered promiscuous mode
[  240.033626][ T7906] device veth1_virt_wifi entered promiscuous mode
[  240.069533][ T7906] device veth0_virt_wifi entered promiscuous mode
[  240.086813][ T7906] device virt_wifi0 entered promiscuous mode
[  240.115712][ T7906] device vlan0 entered promiscuous mode
[  240.151168][ T7906] device vlan1 entered promiscuous mode
[  240.158909][ T7906] device macvlan0 entered promiscuous mode
[  240.187677][ T7906] device macvlan1 entered promiscuous mode
[  240.221877][ T7906] device ipvlan0 entered promiscuous mode
[  240.268457][ T7906] device ipvlan1 entered promiscuous mode
[  240.296428][ T7906] device macvtap0 entered promiscuous mode
[  240.320805][ T7906] device macsec0 entered promiscuous mode
[  240.363898][ T7906] device geneve0 entered promiscuous mode
[  240.400529][   T22] appleir 0003:05AC:8243.000A: unknown main item tag 0x0
[  240.408390][   T22] appleir 0003:05AC:8243.000A: No inputs registered, leaving
[  240.410643][ T7906] device geneve1 entered promiscuous mode
[  240.447602][ T7906] device netdevsim0 entered promiscuous mode
[  240.458400][   T22] appleir 0003:05AC:8243.000A: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0
[  240.467825][ T7906] device netdevsim1 entered promiscuous mode
[  240.499183][ T7906] device netdevsim2 entered promiscuous mode
[  240.528621][ T7906] device netdevsim3 entered promiscuous mode
[  240.547860][ T7906] device wlan0 entered promiscuous mode
[  240.580106][ T7906] device wlan1 entered promiscuous mode
[  240.593457][ T7906] device sit1 entered promiscuous mode
[  240.609346][ T7906] device gre1 entered promiscuous mode
[  240.653592][ T7930] netlink: 'syz.5.1159': attribute type 21 has an invalid length.
[  240.670880][ T7930] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1159'.
[  240.688446][ T7930] netlink: 'syz.5.1159': attribute type 21 has an invalid length.
[  240.714329][ T7930] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1159'.
[  241.826483][ T7967] loop2: detected capacity change from 0 to 2048
[  241.918525][ T7967] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  241.973487][ T7967] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  242.201582][ T4288] EXT4-fs (loop2): unmounting filesystem.
[  242.604798][   T22] usb 5-1: USB disconnect, device number 11
[  243.153633][ T7994] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1182'.
[  243.199280][ T7998] loop5: detected capacity change from 0 to 8
[  243.200750][ T7994] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  243.274030][ T7998] SQUASHFS error: Failed to read block 0x71e: -5
[  243.353435][ T7998] SQUASHFS error: Unable to read metadata cache entry [71c]
[  243.374038][ T7998] SQUASHFS error: Unable to read inode 0x11f
[  243.398516][ T7994] batman_adv: batadv0: Removing interface: batadv_slave_1
[  243.607783][ T8000] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1183'.
[  243.945764][ T7992] loop0: detected capacity change from 0 to 32768
[  244.187201][   T26] audit: type=1800 audit(1790314000.898:805): pid=7992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1179" name="file1" dev="loop0" ino=7 res=0 errno=0
[  244.394876][ T8020] loop2: detected capacity change from 0 to 512
[  244.400702][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  244.504691][ T8020] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  244.909146][ T4288] EXT4-fs (loop2): unmounting filesystem.
[  244.934134][ T8010] loop4: detected capacity change from 0 to 32768
[  245.084491][ T8010] ERROR: (device loop4): jfs_readdir: JFS:Dtree error: ino = 2, bn=48, index = 4
[  245.084491][ T8010] 
[  245.159087][ T8010] ERROR: (device loop4): remounting filesystem as read-only
[  245.202206][ T8033] ERROR: (device loop4): jfs_readdir: JFS:Dtree error: ino = 2, bn=48, index = 4
[  245.202206][ T8033] 
[  245.387165][ T8039] device lo entered promiscuous mode
[  245.420475][ T8039] device tunl0 entered promiscuous mode
[  245.461226][ T8039] device gre0 entered promiscuous mode
[  245.498450][ T8039] device gretap0 entered promiscuous mode
[  245.510021][ T8039] device erspan0 entered promiscuous mode
[  245.571199][ T8039] device ip_vti0 entered promiscuous mode
[  245.641532][ T8039] device ip6_vti0 entered promiscuous mode
[  245.674931][ T8039] device sit0 entered promiscuous mode
[  245.722332][ T8039] device ip6tnl0 entered promiscuous mode
[  245.769972][ T8039] device ip6gre0 entered promiscuous mode
[  245.818739][ T8039] device ip6gretap0 entered promiscuous mode
[  245.860007][ T8039] device vcan0 entered promiscuous mode
[  245.884826][ T8039] device bond0 entered promiscuous mode
[  245.904339][ T8039] device bond_slave_0 entered promiscuous mode
[  245.929103][ T8039] device bond_slave_1 entered promiscuous mode
[  245.979208][ T8039] device team0 entered promiscuous mode
[  246.001750][ T8039] device team_slave_0 entered promiscuous mode
[  246.016382][ T8039] device team_slave_1 entered promiscuous mode
[  246.047015][ T8039] device dummy0 entered promiscuous mode
[  246.075758][ T8039] device nlmon0 entered promiscuous mode
[  246.102057][ T8039] device caif0 entered promiscuous mode
[  246.123829][ T8039] device batadv0 entered promiscuous mode
[  246.178707][ T8039] device vxcan0 entered promiscuous mode
[  246.226204][ T8039] device vxcan1 entered promiscuous mode
[  246.314452][ T8039] device veth1 entered promiscuous mode
[  246.425219][ T8039] device wg0 entered promiscuous mode
[  246.447288][ T8052] FAULT_INJECTION: forcing a failure.
[  246.447288][ T8052] name failslab, interval 1, probability 0, space 0, times 0
[  246.460985][ T8039] device wg1 entered promiscuous mode
[  246.477380][ T8039] device wg2 entered promiscuous mode
[  246.492257][ T8052] CPU: 1 PID: 8052 Comm: syz.4.1204 Not tainted syzkaller #0
[  246.499725][ T8052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  246.509849][ T8052] Call Trace:
[  246.513169][ T8052]  <TASK>
[  246.516162][ T8052]  dump_stack_lvl+0x188/0x24e
[  246.520892][ T8052]  ? show_regs_print_info+0x12/0x12
[  246.526142][ T8052]  ? load_image+0x410/0x410
[  246.530705][ T8052]  ? __might_sleep+0xd0/0xd0
[  246.535351][ T8052]  ? __lock_acquire+0x7c40/0x7c40
[  246.540440][ T8052]  should_fail_ex+0x390/0x4c0
[  246.545253][ T8052]  should_failslab+0x5/0x20
[  246.549778][ T8052]  slab_pre_alloc_hook+0x59/0x300
[  246.554838][ T8052]  kmem_cache_alloc+0x56/0x2f0
[  246.559620][ T8052]  ? security_file_alloc+0x30/0x110
[  246.564847][ T8052]  security_file_alloc+0x30/0x110
[  246.569926][ T8052]  __alloc_file+0xc2/0x230
[  246.574377][ T8052]  alloc_empty_file+0x90/0x180
[  246.579166][ T8052]  alloc_file+0x5b/0x5f0
[  246.583427][ T8052]  alloc_file_pseudo+0x180/0x200
[  246.588387][ T8052]  ? alloc_empty_file_noaccount+0x80/0x80
[  246.594141][ T8052]  ? _raw_spin_unlock+0x24/0x40
[  246.599408][ T8052]  anon_inode_getfd+0xc6/0x1b0
[  246.604200][ T8052]  bpf_prog_load+0x114d/0x1530
[  246.609086][ T8052]  ? map_freeze+0x390/0x390
[  246.613618][ T8052]  ? __might_fault+0xa6/0x120
[  246.618321][ T8052]  ? __might_fault+0xa6/0x120
[  246.623007][ T8052]  ? __might_fault+0xc2/0x120
[  246.627696][ T8052]  ? __might_fault+0xa6/0x120
[  246.632393][ T8052]  ? bpf_lsm_bpf+0x5/0x10
[  246.636743][ T8052]  ? security_bpf+0x7a/0xa0
[  246.641308][ T8052]  __sys_bpf+0x5b8/0x780
[  246.645580][ T8052]  ? bpf_link_show_fdinfo+0x380/0x380
[  246.650999][ T8052]  ? lock_chain_count+0x20/0x20
[  246.655896][ T8052]  __x64_sys_bpf+0x78/0x90
[  246.660341][ T8052]  do_syscall_64+0x4c/0xa0
[  246.664786][ T8052]  ? clear_bhb_loop+0x60/0xb0
[  246.669479][ T8052]  ? clear_bhb_loop+0x60/0xb0
[  246.674170][ T8052]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  246.680091][ T8052] RIP: 0033:0x7f73e819e159
[  246.684556][ T8052] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  246.704187][ T8052] RSP: 002b:00007f73e90a8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  246.712626][ T8052] RAX: ffffffffffffffda RBX: 00007f73e8425fa0 RCX: 00007f73e819e159
[  246.720645][ T8052] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005
[  246.728634][ T8052] RBP: 00007f73e823506b R08: 0000000000000000 R09: 0000000000000000
[  246.736657][ T8052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  246.744641][ T8052] R13: 00007f73e8426038 R14: 00007f73e8425fa0 R15: 00007ffda8032e18
[  246.752646][ T8052]  </TASK>
[  246.771484][ T8039] device veth0_to_bridge entered promiscuous mode
[  246.800434][ T8039] device veth1_to_bridge entered promiscuous mode
[  246.838396][ T8039] device veth0_to_bond entered promiscuous mode
[  246.858413][ T8039] device veth1_to_bond entered promiscuous mode
[  246.880029][ T8039] device veth0_to_team entered promiscuous mode
[  246.906162][ T8039] device veth1_to_team entered promiscuous mode
[  246.943264][ T8039] device veth0_to_batadv entered promiscuous mode
[  246.965239][ T8039] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  247.005602][ T8039] device batadv_slave_0 entered promiscuous mode
[  247.056393][ T8039] device veth1_to_batadv entered promiscuous mode
[  247.080535][ T8039] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  247.104601][ T8039] device batadv_slave_1 entered promiscuous mode
[  247.116721][ T8039] device xfrm0 entered promiscuous mode
[  247.128119][ T8039] device veth0_to_hsr entered promiscuous mode
[  247.143376][ T8039] device veth1_virt_wifi entered promiscuous mode
[  247.158197][ T8039] device veth0_virt_wifi entered promiscuous mode
[  247.181779][ T8039] device virt_wifi0 entered promiscuous mode
[  247.239863][ T8039] device vlan0 entered promiscuous mode
[  247.249593][ T8039] device vlan1 entered promiscuous mode
[  247.271569][ T8039] device macvlan0 entered promiscuous mode
[  247.295325][ T8039] device macvlan1 entered promiscuous mode
[  247.313901][ T8039] device ipvlan0 entered promiscuous mode
[  247.319962][ T8039] device ipvlan1 entered promiscuous mode
[  247.354153][ T8039] device macvtap0 entered promiscuous mode
[  247.392151][ T8039] device macsec0 entered promiscuous mode
[  247.409831][ T8039] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  247.428117][ T8039] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  247.440830][ T4291] Bluetooth: hci6: Opcode 0x1003 failed: -110
[  247.446568][ T8039] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  247.510188][ T8039] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  247.527196][ T8039] device geneve0 entered promiscuous mode
[  247.553095][ T8039] device netdevsim0 entered promiscuous mode
[  247.571141][ T8039] device netdevsim1 entered promiscuous mode
[  247.588555][ T8039] device netdevsim2 entered promiscuous mode
[  247.599629][ T8039] device netdevsim3 entered promiscuous mode
[  247.615194][ T8039] device wlan0 entered promiscuous mode
[  247.625368][ T8039] device wlan1 entered promiscuous mode
[  247.634887][ T8039] device gre1 entered promiscuous mode
[  247.706061][ T8039] device macsec1 entered promiscuous mode
[  247.717885][ T8039] device bond1 entered promiscuous mode
[  247.727651][ T8039] device macvlan2 entered promiscuous mode
[  247.736248][ T8039] device macvlan3 entered promiscuous mode
[  247.747032][ T8039] device sit1 entered promiscuous mode
[  247.981410][ T8067] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1208'.
[  248.047566][ T8067] 8021q: adding VLAN 0 to HW filter on device bond2
[  248.156339][ T8070] bond2: (slave batadv1): Error -99 calling set_mac_address
[  248.471617][ T8081] loop4: detected capacity change from 0 to 1024
[  248.479375][ T8081] EXT4-fs: Ignoring removed nomblk_io_submit option
[  248.543909][ T8080] sp0: Synchronizing with TNC
[  248.617228][ T8081] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  249.376782][ T8103] loop5: detected capacity change from 0 to 128
[  249.427005][ T8103] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem
[  249.491302][ T8103] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  249.533855][ T8103] ext2 filesystem being mounted at /69/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  249.566133][    C0] vkms_vblank_simulate: vblank timer overrun
[  249.630275][ T4282] EXT4-fs (loop4): unmounting filesystem.
[  249.766335][ T8103] EXT4-fs error (device loop5): dx_make_map:1328: inode #2: block 33: comm syz.5.1222: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1
[  249.904636][   T26] audit: type=1326 audit(1790314006.618:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8111 comm="syz.2.1225" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5639e159 code=0x7ffc0000
[  249.946564][ T8103] EXT4-fs (loop5): Remounting filesystem read-only
[  249.965323][ T8103] EXT4-fs error (device loop5) in do_split:2097: Corrupt filesystem
[  250.010702][ T8103] EXT4-fs (loop5): Remounting filesystem read-only
[  250.025279][ T8107] EXT4-fs error (device loop5): dx_make_map:1328: inode #2: block 33: comm syz.5.1222: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1
[  250.060893][ T8107] EXT4-fs (loop5): Remounting filesystem read-only
[  250.067543][ T8107] EXT4-fs error (device loop5) in do_split:2097: Corrupt filesystem
[  250.080675][   T26] audit: type=1326 audit(1790314006.658:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8111 comm="syz.2.1225" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5639e159 code=0x7ffc0000
[  250.104725][    C0] vkms_vblank_simulate: vblank timer overrun
[  250.140494][ T8107] EXT4-fs (loop5): Remounting filesystem read-only
[  250.157587][   T26] audit: type=1326 audit(1790314006.668:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8111 comm="syz.2.1225" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f2b5639e159 code=0x7ffc0000
[  250.240262][   T26] audit: type=1326 audit(1790314006.668:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8111 comm="syz.2.1225" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5639e159 code=0x7ffc0000
[  250.265441][ T5071] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  250.344594][ T6445] EXT4-fs (loop5): unmounting filesystem.
[  250.351124][   T26] audit: type=1326 audit(1790314006.668:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8111 comm="syz.2.1225" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5639e159 code=0x7ffc0000
[  250.375121][    C0] vkms_vblank_simulate: vblank timer overrun
[  250.461726][   T26] audit: type=1326 audit(1790314006.668:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8111 comm="syz.2.1225" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2b5635e98e code=0x7ffc0000
[  250.490666][ T5071] usb 3-1: Using ep0 maxpacket: 16
[  250.498491][ T5071] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 8
[  250.549072][ T5071] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[  250.569414][ T5071] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  250.578516][   T26] audit: type=1326 audit(1790314006.668:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8111 comm="syz.2.1225" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2b5639ddeb code=0x7ffc0000
[  250.612807][ T5071] usb 3-1: Product: syz
[  250.628591][ T5071] usb 3-1: Manufacturer: syz
[  250.641929][ T5071] usb 3-1: SerialNumber: syz
[  250.658171][ T5071] usb 3-1: config 0 descriptor??
[  250.667655][   T26] audit: type=1326 audit(1790314006.668:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8111 comm="syz.2.1225" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2b5639ddeb code=0x7ffc0000
[  250.744554][   T26] audit: type=1326 audit(1790314006.678:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8111 comm="syz.2.1225" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2b5639ddeb code=0x7ffc0000
[  250.796410][   T26] audit: type=1326 audit(1790314006.678:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8111 comm="syz.2.1225" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2b5639ddeb code=0x7ffc0000
[  250.884308][ T8133] IPv6: sit1: Disabled Multicast RS
[  250.903609][ T3598] usb 3-1: USB disconnect, device number 8
[  251.105609][ T8137] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1236'.
[  252.234119][ T8162] loop2: detected capacity change from 0 to 32768
[  252.280491][ T8162] ocfs2: Slot 0 on device (7,2) was already allocated to this node!
[  252.302756][ T8162] JBD2: Ignoring recovery information on journal
[  252.445104][ T8162] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  252.795805][ T8171] loop5: detected capacity change from 0 to 128
[  252.835157][ T8171] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  252.845883][ T8171] ext4 filesystem being mounted at /75/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  252.940621][    T0] NOHZ tick-stop error: local softirq work is pending, handler #12!!!
[  253.255807][ T6445] EXT4-fs (loop5): unmounting filesystem.
[  253.271052][ T4321] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  253.384435][ T4288] ocfs2: Unmounting device (7,2) on (node local)
[  253.500778][ T4321] usb 5-1: Using ep0 maxpacket: 32
[  253.536829][ T4321] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  253.569089][ T4321] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  253.616541][ T4321] usb 5-1: config 0 descriptor??
[  253.643005][ T4321] gspca_main: nw80x-2.14.0 probing 055f:d001
[  254.848528][ T4321] gspca_nw80x: reg_w err -71
[  254.853461][ T4321] nw80x: probe of 5-1:0.0 failed with error -71
[  254.872171][ T4321] usb 5-1: USB disconnect, device number 12
[  255.915424][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  255.921870][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  259.750731][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  265.488440][ T8204] loop5: detected capacity change from 0 to 1024
[  266.271152][ T8226] loop0: detected capacity change from 0 to 256
[  266.344877][ T8207] loop4: detected capacity change from 0 to 32768
[  266.374903][ T8226] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d)
[  266.586182][ T8207] XFS (loop4): DAX unsupported by block device. Turning off DAX.
[  266.798214][ T8207] XFS (loop4): Mounting V5 Filesystem
[  266.939838][ T8207] XFS (loop4): Ending clean mount
[  266.988969][ T8207] XFS (loop4): Quotacheck needed: Please wait.
[  267.183227][ T8207] XFS (loop4): Quotacheck: Done.
[  267.206845][ T8252] netlink: 'syz.5.1263': attribute type 7 has an invalid length.
[  267.321585][ T8252] netlink: 'syz.5.1263': attribute type 7 has an invalid length.
[  267.385361][ T4282] XFS (loop4): Unmounting Filesystem
[  267.725846][ T8261] loop2: detected capacity change from 0 to 512
[  267.749780][ T8261] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  267.872326][ T8261] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1262: invalid indirect mapped block 256 (level 2)
[  267.956944][ T8261] EXT4-fs (loop2): 2 truncates cleaned up
[  267.980917][ T8261] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  268.532821][ T4288] EXT4-fs (loop2): unmounting filesystem.
[  268.758187][ T8282] loop0: detected capacity change from 0 to 512
[  268.829651][ T8282] EXT4-fs error (device loop0): ext4_orphan_get:1409: inode #15: comm syz.0.1276: iget: bad i_size value: 38620345925642
[  268.897389][ T8282] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm syz.0.1276: couldn't read orphan inode 15 (err -117)
[  268.910598][ T8282] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  269.261349][ T5185] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm kworker/u4:22: bg 0: block 5: invalid block bitmap
[  269.341051][ T5185] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 96 with error 28
[  269.384107][ T5185] EXT4-fs (loop0): This should not happen!! Data will be lost
[  269.384107][ T5185] 
[  269.406561][ T5185] EXT4-fs (loop0): Total free blocks count 0
[  269.434237][ T5185] EXT4-fs (loop0): Free/Dirty block details
[  269.471713][ T5185] EXT4-fs (loop0): free_blocks=0
[  269.476898][ T5185] EXT4-fs (loop0): dirty_blocks=100
[  269.495020][ T5185] EXT4-fs (loop0): Block reservation details
[  269.515616][ T5185] EXT4-fs (loop0): i_reserved_data_blocks=100
[  269.540687][ T8294] device gretap0 entered promiscuous mode
[  269.547682][ T8294] device vlan2 entered promiscuous mode
[  269.574054][ T4273] EXT4-fs (loop0): unmounting filesystem.
[  269.791263][ T8303] netlink: 'syz.0.1279': attribute type 7 has an invalid length.
[  269.840935][ T8303] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  269.849767][ T8303] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  269.858932][ T8303] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  269.867733][ T8303] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  269.933334][ T8303] netlink: 'syz.0.1279': attribute type 7 has an invalid length.
[  269.939703][ T8307] loop4: detected capacity change from 0 to 2048
[  269.996897][ T8309] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  270.027086][ T8307] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  270.143860][ T8307] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1283: bg 0: block 240: padding at end of block bitmap is not set
[  270.251608][ T8307] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28
[  270.320797][ T8307] EXT4-fs (loop4): This should not happen!! Data will be lost
[  270.320797][ T8307] 
[  270.334343][ T8307] EXT4-fs (loop4): Total free blocks count 0
[  270.379116][ T8307] EXT4-fs (loop4): Free/Dirty block details
[  270.394628][ T8307] EXT4-fs (loop4): free_blocks=0
[  270.406818][ T8307] EXT4-fs (loop4): dirty_blocks=16
[  270.420074][ T8307] EXT4-fs (loop4): Block reservation details
[  270.442824][ T8307] EXT4-fs (loop4): i_reserved_data_blocks=1
[  270.757007][ T4282] EXT4-fs (loop4): unmounting filesystem.
[  271.220644][ T4291] block nbd5: Receive control failed (result -107)
[  271.308873][ T8225] block nbd5: shutting down sockets
[  271.533834][ T8346] loop5: detected capacity change from 0 to 512
[  271.569367][ T8346] EXT4-fs: Ignoring removed nobh option
[  271.762029][ T8346] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  271.771430][ T8346] ext4 filesystem being mounted at /88/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  271.795179][ T8346] EXT4-fs error (device loop5): ext4_do_update_inode:5279: inode #2: comm syz.5.1300: corrupted inode contents
[  271.810198][ T8346] EXT4-fs error (device loop5): ext4_dirty_inode:6166: inode #2: comm syz.5.1300: mark_inode_dirty error
[  271.837861][ T8346] EXT4-fs error (device loop5): ext4_do_update_inode:5279: inode #2: comm syz.5.1300: corrupted inode contents
[  271.899120][ T8357] EXT4-fs error (device loop5): ext4_do_update_inode:5279: inode #2: comm syz.5.1300: corrupted inode contents
[  271.989090][ T8357] EXT4-fs error (device loop5): ext4_dirty_inode:6166: inode #2: comm syz.5.1300: mark_inode_dirty error
[  272.045212][ T8357] EXT4-fs error (device loop5): ext4_do_update_inode:5279: inode #2: comm syz.5.1300: corrupted inode contents
[  272.124841][ T8357] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #2: comm syz.5.1300: mark_inode_dirty error
[  272.182251][ T8357] EXT4-fs error (device loop5): ext4_do_update_inode:5279: inode #2: comm syz.5.1300: corrupted inode contents
[  272.214495][ T8357] EXT4-fs error (device loop5): ext4_dirty_inode:6166: inode #2: comm syz.5.1300: mark_inode_dirty error
[  272.258892][ T8346] EXT4-fs error (device loop5): ext4_do_update_inode:5279: inode #2: comm syz.5.1300: corrupted inode contents
[  272.492309][ T6445] EXT4-fs (loop5): unmounting filesystem.
[  272.870906][ T4321] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  272.900420][ T8376] overlayfs: conflicting lowerdir path
[  272.963155][ T8379] FAULT_INJECTION: forcing a failure.
[  272.963155][ T8379] name failslab, interval 1, probability 0, space 0, times 0
[  272.976231][ T8379] CPU: 0 PID: 8379 Comm: syz.1.1313 Not tainted syzkaller #0
[  272.983661][ T8379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  272.993850][ T8379] Call Trace:
[  272.997159][ T8379]  <TASK>
[  273.000116][ T8379]  dump_stack_lvl+0x188/0x24e
[  273.004936][ T8379]  ? show_regs_print_info+0x12/0x12
[  273.010177][ T8379]  ? load_image+0x410/0x410
[  273.014727][ T8379]  ? __might_sleep+0xd0/0xd0
[  273.019348][ T8379]  ? __lock_acquire+0x7c40/0x7c40
[  273.024412][ T8379]  ? __might_sleep+0xd0/0xd0
[  273.029125][ T8379]  should_fail_ex+0x390/0x4c0
[  273.033850][ T8379]  should_failslab+0x5/0x20
[  273.038386][ T8379]  slab_pre_alloc_hook+0x59/0x300
[  273.043455][ T8379]  kmem_cache_alloc_lru+0x49/0x2e0
[  273.048612][ T8379]  ? sock_alloc_inode+0x24/0xc0
[  273.053607][ T8379]  sock_alloc_inode+0x24/0xc0
[  273.058322][ T8379]  ? sockfs_init_fs_context+0xa0/0xa0
[  273.063742][ T8379]  new_inode_pseudo+0x5f/0x1c0
[  273.068549][ T8379]  __sock_create+0x129/0x940
[  273.073194][ T8379]  __sys_socketpair+0x232/0x540
[  273.078102][ T8379]  __x64_sys_socketpair+0x97/0xb0
[  273.083225][ T8379]  do_syscall_64+0x4c/0xa0
[  273.087678][ T8379]  ? clear_bhb_loop+0x60/0xb0
[  273.092389][ T8379]  ? clear_bhb_loop+0x60/0xb0
[  273.097105][ T8379]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  273.103039][ T8379] RIP: 0033:0x7fa4bff9e159
[  273.107485][ T8379] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  273.127313][ T8379] RSP: 002b:00007fa4c0f40028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035
[  273.135826][ T8379] RAX: ffffffffffffffda RBX: 00007fa4c0225fa0 RCX: 00007fa4bff9e159
[  273.144288][ T8379] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 000000000000001e
[  273.152303][ T8379] RBP: 00007fa4c003506b R08: 0000000000000000 R09: 0000000000000000
[  273.160316][ T8379] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000000
[  273.168328][ T8379] R13: 00007fa4c0226038 R14: 00007fa4c0225fa0 R15: 00007ffdbf1c6238
[  273.176359][ T8379]  </TASK>
[  273.182883][ T8379] socket: no more sockets
[  273.213085][ T4321] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  273.260649][ T4321] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64
[  273.315545][ T4321] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  273.367692][ T4321] usb 6-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00
[  273.437175][ T4321] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  273.966837][ T4321] cxacru_cm: 28 callbacks suppressed
[  273.966860][ T4321] cxacru 6-1:1.0: send of cm 0x91 failed (-71)
[  273.984682][ T4321] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71
[  274.024472][ T4321] ATM dev 0: usbatm_atm_init: atm_start failed: -71!
[  274.037731][ T4321] cxacru: probe of 6-1:1.0 failed with error -71
[  274.086343][ T4321] usb 6-1: USB disconnect, device number 7
[  274.097207][ T8400] loop6: detected capacity change from 0 to 6
[  274.200140][    C1] operation not supported error, dev loop6, sector 0 op 0x9:(WRITE_ZEROES) flags 0x8000800 phys_seg 0 prio class 2
[  274.429748][ T8405] loop2: detected capacity change from 0 to 512
[  274.483738][ T8387] loop4: detected capacity change from 0 to 32768
[  274.518461][ T8387] XFS: attr2 mount option is deprecated.
[  274.576905][ T8405] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  274.603573][ T8405] ext4 filesystem being mounted at /266/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  274.634307][ T8387] XFS (loop4): DAX unsupported by block device. Turning off DAX.
[  274.679511][ T8387] XFS (loop4): Mounting V5 Filesystem
[  274.877984][ T8387] XFS (loop4): Ending clean mount
[  274.983338][ T4288] EXT4-fs (loop2): unmounting filesystem.
[  275.487213][ T8436] loop2: detected capacity change from 0 to 1024
[  275.510835][ T4282] XFS (loop4): Unmounting Filesystem
[  275.710154][ T8439] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1333'.
[  276.753424][ T8463] loop4: detected capacity change from 0 to 256
[  276.845358][ T8463] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d)
[  277.490218][ T8482] loop4: detected capacity change from 0 to 256
[  277.571819][ T8482] exfat: Deprecated parameter 'namecase'
[  277.612971][ T8482] exfat: Deprecated parameter 'namecase'
[  277.824649][ T8482] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d)
[  278.060754][ T8482] exFAT-fs (loop4): invalid start cluster (4278190088)
[  278.773071][   T26] audit: type=1400 audit(1790314035.488:844): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name="test" pid=8505 comm="syz.4.1357" name="test" offset=36
[  278.791975][ T8503] overlayfs: failed to clone upperpath
[  279.489705][ T5067] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  279.512637][ T5067] hid-generic 0000:0000:0000.000B: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  279.522518][ T5071] psmouse serio2: Failed to reset mouse on : -5
[  279.865829][ T8540] FAULT_INJECTION: forcing a failure.
[  279.865829][ T8540] name failslab, interval 1, probability 0, space 0, times 0
[  279.897539][ T8540] CPU: 0 PID: 8540 Comm: syz.2.1370 Not tainted syzkaller #0
[  279.904982][ T8540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  279.915165][ T8540] Call Trace:
[  279.918460][ T8540]  <TASK>
[  279.921430][ T8540]  dump_stack_lvl+0x188/0x24e
[  279.926130][ T8540]  ? show_regs_print_info+0x12/0x12
[  279.931348][ T8540]  ? load_image+0x410/0x410
[  279.935961][ T8540]  ? __might_sleep+0xd0/0xd0
[  279.940923][ T8540]  ? __lock_acquire+0x7c40/0x7c40
[  279.946066][ T8540]  should_fail_ex+0x390/0x4c0
[  279.950772][ T8540]  should_failslab+0x5/0x20
[  279.955293][ T8540]  slab_pre_alloc_hook+0x59/0x300
[  279.960380][ T8540]  ? aa_get_newest_label+0xf9/0x5b0
[  279.965701][ T8540]  ? resv_map_alloc+0x4d/0x2b0
[  279.970500][ T8540]  __kmem_cache_alloc_node+0x4f/0x270
[  279.975893][ T8540]  ? resv_map_alloc+0x4d/0x2b0
[  279.980673][ T8540]  kmalloc_trace+0x26/0xe0
[  279.985112][ T8540]  resv_map_alloc+0x4d/0x2b0
[  279.989719][ T8540]  hugetlbfs_get_inode+0x64/0x510
[  279.994787][ T8540]  hugetlb_file_setup+0x27b/0x610
[  279.999835][ T8540]  newseg+0x412/0xb00
[  280.003868][ T8540]  ? rwsem_write_trylock+0x135/0x1c0
[  280.009199][ T8540]  ? ksys_shmget+0x140/0x140
[  280.013819][ T8540]  ipcget+0x1cd/0xe10
[  280.017817][ T8540]  ? do_futex+0x310/0x320
[  280.022164][ T8540]  ? __ia32_sys_get_robust_list+0x100/0x100
[  280.028171][ T8540]  ? ipc_obtain_object_check+0x1a0/0x1a0
[  280.033834][ T8540]  __x64_sys_shmget+0x13d/0x180
[  280.038711][ T8540]  ? lock_chain_count+0x20/0x20
[  280.043584][ T8540]  ? shm_more_checks+0x80/0x80
[  280.048396][ T8540]  ? lockdep_hardirqs_on+0x94/0x140
[  280.053622][ T8540]  do_syscall_64+0x4c/0xa0
[  280.058145][ T8540]  ? clear_bhb_loop+0x60/0xb0
[  280.062867][ T8540]  ? clear_bhb_loop+0x60/0xb0
[  280.067563][ T8540]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  280.073490][ T8540] RIP: 0033:0x7f2b5639e159
[  280.077940][ T8540] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  280.097592][ T8540] RSP: 002b:00007f2b545f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000001d
[  280.106035][ T8540] RAX: ffffffffffffffda RBX: 00007f2b56625fa0 RCX: 00007f2b5639e159
[  280.114028][ T8540] RDX: 0000000054003f00 RSI: 0000000000800000 RDI: 0000000000000000
[  280.122019][ T8540] RBP: 00007f2b5643506b R08: 0000000000000000 R09: 0000000000000000
[  280.130008][ T8540] R10: 0000200000800000 R11: 0000000000000246 R12: 0000000000000000
[  280.137992][ T8540] R13: 00007f2b56626038 R14: 00007f2b56625fa0 R15: 00007ffdffb95f48
[  280.146005][ T8540]  </TASK>
[  281.395390][ T8571] loop2: detected capacity change from 0 to 512
[  281.425735][ T8571] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
[  282.160526][ T8588] loop2: detected capacity change from 0 to 128
[  282.191450][ T8590] binder: 8587:8590 ioctl 4018620d 0 returned -22
[  282.314273][ T8588] syz.2.1391: attempt to access beyond end of device
[  282.314273][ T8588] loop2: rw=2049, sector=162, nr_sectors = 8 limit=128
[  282.424019][ T5179] kworker/u4:20: attempt to access beyond end of device
[  282.424019][ T5179] loop2: rw=1, sector=170, nr_sectors = 80 limit=128
[  282.856289][ T8599] loop2: detected capacity change from 0 to 512
[  282.914102][ T8599] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  282.979483][ T8599] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  282.997520][ T8599] EXT4-fs (loop2): orphan cleanup on readonly fs
[  283.004823][ T8599] EXT4-fs error (device loop2): ext4_orphan_get:1435: comm syz.2.1397: bad orphan inode 15
[  283.018166][ T8599] ext4_test_bit(bit=14, block=5) = 0
[  283.023972][ T8599] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  283.099392][ T8599] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters
[  283.320755][ T5071] misc userio: Buffer overflowed, userio client isn't keeping up
[  283.333210][ T4288] EXT4-fs (loop2): unmounting filesystem.
[  283.896681][ T8622] fuse: Bad value for 'fd'
[  284.025003][ T8614] loop2: detected capacity change from 0 to 32768
[  284.050776][   T22] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  284.114793][ T8614] XFS (loop2): Mounting V5 Filesystem
[  284.173933][ T8614] XFS (loop2): Ending clean mount
[  284.235824][ T4288] XFS (loop2): Unmounting Filesystem
[  284.282474][   T22] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  284.323557][   T22] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7
[  284.368740][   T22] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  284.398884][   T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  284.426694][   T22] usb 1-1: Product: syz
[  284.431847][   T22] usb 1-1: Manufacturer: syz
[  284.436575][   T22] usb 1-1: SerialNumber: syz
[  284.626844][ T5071] input: PS/2 Generic Mouse as /devices/serio2/input/input15
[  284.890664][ T5071] psmouse serio2: Failed to enable mouse on 
[  285.013187][ T8645] fuse: Bad value for 'fd'
[  285.716688][   T22] cdc_ncm 1-1:1.0: bind() failure
[  285.742276][   T22] usbtest: probe of 1-1:1.1 failed with error -71
[  285.768945][   T22] usb 1-1: USB disconnect, device number 16
[  286.029926][   T26] audit: type=1326 audit(1790314042.738:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8663 comm="syz.4.1423" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f73e819e159 code=0x0
[  286.779198][   T26] audit: type=1807 audit(1790314043.488:846): action=measure res=1
[  286.796158][   T26] audit: type=1807 audit(1790314043.498:847): UNKNOWN= res=0
[  286.798591][ T8677] ima: policy update failed
[  286.832129][   T26] audit: type=1802 audit(1790314043.498:848): pid=8677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.1.1428" res=0 errno=0
[  286.910682][   T26] audit: type=1802 audit(1790314043.538:849): pid=8677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.1428" res=0 errno=0
[  287.042240][ T8682] loop0: detected capacity change from 0 to 1024
[  287.171255][ T8684] ptp: physical clock is free running
[  287.178727][ T8682] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  287.891114][ T4273] EXT4-fs (loop0): unmounting filesystem.
[  289.034024][ T8738] FAULT_INJECTION: forcing a failure.
[  289.034024][ T8738] name failslab, interval 1, probability 0, space 0, times 0
[  289.090855][ T8738] CPU: 0 PID: 8738 Comm: syz.4.1451 Not tainted syzkaller #0
[  289.098294][ T8738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  289.108362][ T8738] Call Trace:
[  289.111655][ T8738]  <TASK>
[  289.114595][ T8738]  dump_stack_lvl+0x188/0x24e
[  289.119294][ T8738]  ? show_regs_print_info+0x12/0x12
[  289.124496][ T8738]  ? load_image+0x410/0x410
[  289.129017][ T8738]  ? __might_sleep+0xd0/0xd0
[  289.133626][ T8738]  ? __lock_acquire+0x7c40/0x7c40
[  289.138676][ T8738]  should_fail_ex+0x390/0x4c0
[  289.143504][ T8738]  should_failslab+0x5/0x20
[  289.148292][ T8738]  slab_pre_alloc_hook+0x59/0x300
[  289.148326][ T8738]  ? kvmalloc_node+0x6c/0x180
[  289.148355][ T8738]  __kmem_cache_alloc_node+0x4f/0x270
[  289.148383][ T8738]  ? kvmalloc_node+0x6c/0x180
[  289.148407][ T8738]  __kmalloc_node+0xa2/0x240
[  289.148434][ T8738]  kvmalloc_node+0x6c/0x180
[  289.177658][ T8738]  bpf_test_run_xdp_live+0x206/0x1a90
[  289.183065][ T8738]  ? verify_lock_unused+0x140/0x140
[  289.188288][ T8738]  ? kasan_set_track+0x60/0x70
[  289.193072][ T8738]  ? __kasan_kmalloc+0x8e/0xa0
[  289.197856][ T8738]  ? __kmalloc+0xb3/0x240
[  289.202205][ T8738]  ? bpf_test_init+0x9f/0x140
[  289.206902][ T8738]  ? bpf_prog_test_run_xdp+0x488/0xf80
[  289.212390][ T8738]  ? __sys_bpf+0x62b/0x780
[  289.216838][ T8738]  ? __x64_sys_bpf+0x78/0x90
[  289.221446][ T8738]  ? do_syscall_64+0x4c/0xa0
[  289.226070][ T8738]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  289.232259][ T8738]  ? xdp_convert_md_to_buff+0x330/0x330
[  289.237873][ T8738]  ? __lock_acquire+0x7c40/0x7c40
[  289.242928][ T8738]  ? trace_raw_output_bpf_test_finish+0xd0/0xd0
[  289.249195][ T8738]  ? bpf_test_init+0x119/0x140
[  289.254014][ T8738]  ? xdp_convert_md_to_buff+0x5b/0x330
[  289.259524][ T8738]  bpf_prog_test_run_xdp+0x757/0xf80
[  289.264837][ T8738]  ? __lock_acquire+0x7c40/0x7c40
[  289.270073][ T8738]  ? dev_put+0x80/0x80
[  289.274173][ T8738]  ? dev_put+0x80/0x80
[  289.278264][ T8738]  bpf_prog_test_run+0x31c/0x390
[  289.283260][ T8738]  __sys_bpf+0x62b/0x780
[  289.287529][ T8738]  ? bpf_link_show_fdinfo+0x380/0x380
[  289.292937][ T8738]  ? lock_chain_count+0x20/0x20
[  289.297914][ T8738]  __x64_sys_bpf+0x78/0x90
[  289.302355][ T8738]  do_syscall_64+0x4c/0xa0
[  289.306788][ T8738]  ? clear_bhb_loop+0x60/0xb0
[  289.311503][ T8738]  ? clear_bhb_loop+0x60/0xb0
[  289.316299][ T8738]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  289.322228][ T8738] RIP: 0033:0x7f73e819e159
[  289.326684][ T8738] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  289.346318][ T8738] RSP: 002b:00007f73e90a8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  289.354777][ T8738] RAX: ffffffffffffffda RBX: 00007f73e8425fa0 RCX: 00007f73e819e159
[  289.362788][ T8738] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a
[  289.370782][ T8738] RBP: 00007f73e823506b R08: 0000000000000000 R09: 0000000000000000
[  289.378775][ T8738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  289.386786][ T8738] R13: 00007f73e8426038 R14: 00007f73e8425fa0 R15: 00007ffda8032e18
[  289.394833][ T8738]  </TASK>
[  289.397918][    C0] vkms_vblank_simulate: vblank timer overrun
[  289.796350][ T8750] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1456'.
[  289.979303][ T8756] loop5: detected capacity change from 0 to 256
[  290.005826][ T8753] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[8754] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[8753]
[  291.110719][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  292.028047][ T8798] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input16
[  292.350767][ T8793] loop5: detected capacity change from 0 to 32768
[  292.516452][ T8793] XFS (loop5): Mounting V5 Filesystem
[  292.543281][ T8816] loop0: detected capacity change from 0 to 4096
[  292.691665][ T8816] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  292.781347][ T8793] XFS (loop5): Ending clean mount
[  293.191806][ T6445] XFS (loop5): Unmounting Filesystem
[  293.717243][   T26] audit: type=1800 audit(1790314050.428:850): pid=8846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1490" name="local" dev="configfs" ino=48670 res=0 errno=0
[  293.724957][ T4273] EXT4-fs (loop0): unmounting filesystem.
[  294.223703][ T8860] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1493'.
[  294.993490][   T26] audit: type=1804 audit(1790314051.698:851): pid=8887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.1500" name="/newroot/116/file0/file1" dev="overlay" ino=642 res=1 errno=0
[  295.020831][ T4323] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  295.230701][ T4323] usb 1-1: Using ep0 maxpacket: 16
[  295.238784][ T4323] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  295.279274][ T4323] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  295.298196][ T8894] FAULT_INJECTION: forcing a failure.
[  295.298196][ T8894] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  295.329109][ T4323] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  295.354385][ T8894] CPU: 1 PID: 8894 Comm: syz.1.1502 Not tainted syzkaller #0
[  295.361931][ T8894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  295.372030][ T8894] Call Trace:
[  295.375347][ T8894]  <TASK>
[  295.378311][ T8894]  dump_stack_lvl+0x188/0x24e
[  295.383038][ T8894]  ? show_regs_print_info+0x12/0x12
[  295.388283][ T8894]  ? load_image+0x410/0x410
[  295.392841][ T8894]  ? __lock_acquire+0x7c40/0x7c40
[  295.397919][ T8894]  ? kasan_set_track+0x60/0x70
[  295.402759][ T8894]  ? slab_post_alloc_hook+0x4b/0x490
[  295.408109][ T8894]  should_fail_ex+0x390/0x4c0
[  295.412850][ T8894]  prepare_alloc_pages+0x1e1/0x5b0
[  295.418033][ T8894]  __alloc_pages+0x130/0x4f0
[  295.422681][ T8894]  ? zone_statistics+0x170/0x170
[  295.427699][ T8894]  __get_free_pages+0x8/0x30
[  295.432356][ T8894]  kasan_populate_vmalloc_pte+0x31/0xf0
[  295.437984][ T8894]  ? __apply_to_page_range+0x97b/0xd10
[  295.443498][ T8894]  __apply_to_page_range+0x98d/0xd10
[  295.448849][ T8894]  ? kasan_populate_vmalloc+0x70/0x70
[  295.454277][ T8894]  alloc_vmap_area+0x179f/0x18d0
[  295.459281][ T8894]  ? vm_map_ram+0xab0/0xab0
[  295.463847][ T8894]  ? rcu_is_watching+0x11/0xa0
[  295.468694][ T8894]  __get_vm_area_node+0x158/0x330
[  295.473786][ T8894]  vmap+0xf5/0x2c0
[  295.477647][ T8894]  ? bpf_ringbuf_alloc+0x30e/0x530
[  295.482813][ T8894]  bpf_ringbuf_alloc+0x30e/0x530
[  295.487802][ T8894]  ringbuf_map_alloc+0x1ac/0x2d0
[  295.492823][ T8894]  map_create+0x524/0xff0
[  295.497211][ T8894]  ? security_bpf+0x7a/0xa0
[  295.501762][ T8894]  __sys_bpf+0x38b/0x780
[  295.506138][ T8894]  ? bpf_link_show_fdinfo+0x380/0x380
[  295.511577][ T8894]  ? lock_chain_count+0x20/0x20
[  295.516493][ T8894]  __x64_sys_bpf+0x78/0x90
[  295.520960][ T8894]  do_syscall_64+0x4c/0xa0
[  295.525425][ T8894]  ? clear_bhb_loop+0x60/0xb0
[  295.530145][ T8894]  ? clear_bhb_loop+0x60/0xb0
[  295.534865][ T8894]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  295.540808][ T8894] RIP: 0033:0x7fa4bff9e159
[  295.545263][ T8894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  295.564915][ T8894] RSP: 002b:00007fa4c0f40028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  295.573382][ T8894] RAX: ffffffffffffffda RBX: 00007fa4c0225fa0 RCX: 00007fa4bff9e159
[  295.581406][ T8894] RDX: 0000000000000050 RSI: 0000200000000440 RDI: 0000000000000000
[  295.589430][ T8894] RBP: 00007fa4c003506b R08: 0000000000000000 R09: 0000000000000000
[  295.597457][ T8894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  295.605559][ T8894] R13: 00007fa4c0226038 R14: 00007fa4c0225fa0 R15: 00007ffdbf1c6238
[  295.613594][ T8894]  </TASK>
[  295.630156][ T4323] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  295.675060][ T4323] usb 1-1: Product: syz
[  295.679467][ T4323] usb 1-1: Manufacturer: syz
[  295.709991][ T4323] usb 1-1: SerialNumber: syz
[  295.717900][ T4321] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  295.782435][ T4321] hid-generic 0000:0000:0000.000C: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  295.938250][ T4323] usb 1-1: 0:2 : does not exist
[  295.965179][ T4323] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[  296.034397][ T4323] usb 1-1: USB disconnect, device number 17
[  296.310802][ T4291] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  296.338454][ T8225] udevd[8225]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  297.737078][ T8940] loop5: detected capacity change from 0 to 256
[  297.800922][ T8940] exfat: Deprecated parameter 'namecase'
[  297.842072][ T8940] exfat: Deprecated parameter 'utf8'
[  297.896043][ T8940] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xea424414, utbl_chksum : 0xe619d30d)
[  298.071124][ T5067] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  298.290772][ T5067] usb 1-1: Using ep0 maxpacket: 8
[  298.304953][ T5067] usb 1-1: unable to get BOS descriptor or descriptor too short
[  298.318185][ T5067] usb 1-1: config 4 interface 0 has no altsetting 0
[  298.333983][ T5067] usb 1-1: string descriptor 0 read error: -22
[  298.340727][ T5067] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  298.354674][ T8957] FAULT_INJECTION: forcing a failure.
[  298.354674][ T8957] name failslab, interval 1, probability 0, space 0, times 0
[  298.368437][ T5067] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3
[  298.377478][ T8957] CPU: 0 PID: 8957 Comm: syz.5.1523 Not tainted syzkaller #0
[  298.384993][ T8957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  298.395101][ T8957] Call Trace:
[  298.398418][ T8957]  <TASK>
[  298.401383][ T8957]  dump_stack_lvl+0x188/0x24e
[  298.406111][ T8957]  ? show_regs_print_info+0x12/0x12
[  298.411379][ T8957]  ? load_image+0x410/0x410
[  298.416028][ T8957]  ? __might_sleep+0xd0/0xd0
[  298.420652][ T8957]  ? __lock_acquire+0x7c40/0x7c40
[  298.425716][ T8957]  ? lockdep_init_map_type+0x98/0x8d0
[  298.431165][ T8957]  should_fail_ex+0x390/0x4c0
[  298.435897][ T8957]  should_failslab+0x5/0x20
[  298.440437][ T8957]  slab_pre_alloc_hook+0x59/0x300
[  298.445793][ T8957]  ? __netlink_kernel_create+0x1ee/0x7b0
[  298.451471][ T8957]  __kmem_cache_alloc_node+0x4f/0x270
[  298.456878][ T8957]  ? __init_waitqueue_head+0xa4/0x140
[  298.462300][ T8957]  ? __netlink_kernel_create+0x1ee/0x7b0
[  298.467976][ T8957]  __kmalloc+0xa3/0x240
[  298.472188][ T8957]  __netlink_kernel_create+0x1ee/0x7b0
[  298.477781][ T8957]  ? netlink_set_err+0x3b0/0x3b0
[  298.482943][ T8957]  uevent_net_init+0xf8/0x2d0
[  298.487670][ T8957]  ? audit_net_init+0xed/0x1f0
[  298.492480][ T8957]  ? alloc_uevent_skb+0x230/0x230
[  298.497561][ T8957]  ? uevent_net_exit+0x1d0/0x1d0
[  298.502571][ T8957]  ? __kmem_cache_alloc_node+0x19d/0x270
[  298.508269][ T8957]  ops_init+0x360/0x5e0
[  298.512485][ T8957]  setup_net+0x4f2/0xbd0
[  298.516772][ T8957]  ? copy_net_ns+0x5b0/0x5b0
[  298.521407][ T8957]  ? copy_net_ns+0x324/0x5b0
[  298.526041][ T8957]  ? down_read_killable+0x1cc/0x340
[  298.531297][ T8957]  copy_net_ns+0x33e/0x5b0
[  298.535771][ T8957]  create_new_namespaces+0x3ce/0x700
[  298.541115][ T8957]  unshare_nsproxy_namespaces+0x116/0x160
[  298.546878][ T8957]  ksys_unshare+0x4f6/0x8e0
[  298.551444][ T8957]  ? sighand_ctor+0x40/0x40
[  298.555997][ T8957]  ? lock_chain_count+0x20/0x20
[  298.560897][ T8957]  ? syscall_enter_from_user_mode+0x21/0x80
[  298.566841][ T8957]  __x64_sys_unshare+0x34/0x40
[  298.571732][ T8957]  do_syscall_64+0x4c/0xa0
[  298.576189][ T8957]  ? clear_bhb_loop+0x60/0xb0
[  298.580993][ T8957]  ? clear_bhb_loop+0x60/0xb0
[  298.585709][ T8957]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  298.591745][ T8957] RIP: 0033:0x7f4ade39e159
[  298.596204][ T8957] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  298.615857][ T8957] RSP: 002b:00007f4adf20b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  298.624326][ T8957] RAX: ffffffffffffffda RBX: 00007f4ade625fa0 RCX: 00007f4ade39e159
[  298.632345][ T8957] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
[  298.640410][ T8957] RBP: 00007f4ade43506b R08: 0000000000000000 R09: 0000000000000000
[  298.648423][ T8957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  298.656433][ T8957] R13: 00007f4ade626038 R14: 00007f4ade625fa0 R15: 00007ffda173bec8
[  298.664473][ T8957]  </TASK>
[  298.680151][ T5067] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  298.727074][ T5067] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  298.747849][ T5067] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  298.759789][ T5067] usb 1-1: media controller created
[  298.811620][ T5067] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  298.989367][ T8957] kobject_uevent: unable to create netlink socket!
[  299.267651][ T8974] loop5: detected capacity change from 0 to 64
[  299.563483][ T8979] netlink: 'syz.1.1531': attribute type 1 has an invalid length.
[  299.925146][ T5067] zl10353_read_register: readreg error (reg=127, ret==0)
[  300.098430][ T5067] usb 1-1: USB disconnect, device number 18
[  300.425555][ T9011] bridge0: port 4(macvlan1) entered blocking state
[  300.449549][ T9011] bridge0: port 4(macvlan1) entered disabled state
[  300.488435][ T9011] device macvlan1 entered promiscuous mode
[  300.531052][ T9011] bridge0: port 4(macvlan1) entered blocking state
[  300.537879][ T9011] bridge0: port 4(macvlan1) entered forwarding state
[  300.572385][ T9014] device macvlan1 left promiscuous mode
[  300.578435][ T9014] bridge0: port 4(macvlan1) entered disabled state
[  300.601054][ T9013] netlink: 'syz.4.1541': attribute type 10 has an invalid length.
[  300.668079][ T9013] team0: Port device wlan1 added
[  301.150128][ T4324] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  301.152766][ T5067] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[  301.348930][ T9042] FAULT_INJECTION: forcing a failure.
[  301.348930][ T9042] name failslab, interval 1, probability 0, space 0, times 0
[  301.376923][ T9042] CPU: 1 PID: 9042 Comm: syz.1.1558 Not tainted syzkaller #0
[  301.384387][ T9042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  301.394483][ T9042] Call Trace:
[  301.397794][ T9042]  <TASK>
[  301.400760][ T9042]  dump_stack_lvl+0x188/0x24e
[  301.405515][ T9042]  ? show_regs_print_info+0x12/0x12
[  301.410838][ T9042]  ? load_image+0x410/0x410
[  301.415426][ T9042]  ? __lock_acquire+0x7c40/0x7c40
[  301.420500][ T9042]  should_fail_ex+0x390/0x4c0
[  301.425215][ T9042]  should_failslab+0x5/0x20
[  301.429735][ T9042]  slab_pre_alloc_hook+0x59/0x300
[  301.434817][ T9042]  ? alloc_pipe_info+0xe4/0x4a0
[  301.439695][ T9042]  __kmem_cache_alloc_node+0x4f/0x270
[  301.445093][ T9042]  ? alloc_pipe_info+0xe4/0x4a0
[  301.449970][ T9042]  kmalloc_trace+0x26/0xe0
[  301.454401][ T9042]  alloc_pipe_info+0xe4/0x4a0
[  301.459115][ T9042]  splice_direct_to_actor+0x95d/0xbd0
[  301.464524][ T9042]  ? aa_path_link+0x8a0/0x8a0
[  301.469232][ T9042]  ? aa_file_perm+0x3ea/0xf00
[  301.473943][ T9042]  ? direct_file_splice_eof+0xa0/0xa0
[  301.479401][ T9042]  ? pipe_to_sendpage+0x320/0x320
[  301.484479][ T9042]  ? common_file_perm+0x171/0x1c0
[  301.489575][ T9042]  ? fsnotify_perm+0x5a/0x550
[  301.494305][ T9042]  ? security_file_permission+0x75/0xa0
[  301.499879][ T9042]  do_splice_direct+0x1ce/0x2f0
[  301.504767][ T9042]  ? splice_direct_to_actor+0xbd0/0xbd0
[  301.510430][ T9042]  ? rcu_read_lock_any_held+0xb0/0x130
[  301.515921][ T9042]  ? do_splice_direct+0x2f0/0x2f0
[  301.520978][ T9042]  ? common_file_perm+0x171/0x1c0
[  301.526060][ T9042]  do_sendfile+0x51b/0xe20
[  301.530503][ T9042]  ? __ia32_sys_get_robust_list+0x100/0x100
[  301.536417][ T9042]  ? do_pwritev+0x3a0/0x3a0
[  301.540971][ T9042]  __se_sys_sendfile64+0x141/0x1a0
[  301.546124][ T9042]  ? lock_chain_count+0x20/0x20
[  301.551001][ T9042]  ? __x64_sys_sendfile64+0xa0/0xa0
[  301.556224][ T9042]  ? lockdep_hardirqs_on+0x94/0x140
[  301.561451][ T9042]  do_syscall_64+0x4c/0xa0
[  301.565894][ T9042]  ? clear_bhb_loop+0x60/0xb0
[  301.570594][ T9042]  ? clear_bhb_loop+0x60/0xb0
[  301.575292][ T9042]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  301.581324][ T9042] RIP: 0033:0x7fa4bff9e159
[  301.585762][ T9042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  301.605498][ T9042] RSP: 002b:00007fa4c0f40028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  301.613950][ T9042] RAX: ffffffffffffffda RBX: 00007fa4c0225fa0 RCX: 00007fa4bff9e159
[  301.621946][ T9042] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003
[  301.629957][ T9042] RBP: 00007fa4c003506b R08: 0000000000000000 R09: 0000000000000000
[  301.638034][ T9042] R10: 0000000000008112 R11: 0000000000000246 R12: 0000000000000000
[  301.646025][ T9042] R13: 00007fa4c0226038 R14: 00007fa4c0225fa0 R15: 00007ffdbf1c6238
[  301.654029][ T9042]  </TASK>
[  301.662192][ T4321] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[  301.667565][ T4323] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  301.828333][ T9030] ceph: No mds server is up or the cluster is laggy
[  301.828540][ T9036] ceph: No mds server is up or the cluster is laggy
[  302.002688][ T4323] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  302.190715][ T4323] usb 6-1: Using ep0 maxpacket: 8
[  302.213745][ T4323] usb 6-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77
[  302.250767][ T4323] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239
[  302.290175][ T4323] usb 6-1: Product: syz
[  302.294816][ T4323] usb 6-1: Manufacturer: syz
[  302.299463][ T4323] usb 6-1: SerialNumber: syz
[  302.326947][ T4323] usb 6-1: config 0 descriptor??
[  302.355070][ T4323] gspca_main: sq905-2.14.0 probing 2770:9120
[  302.567844][ T9051] loop4: detected capacity change from 0 to 32768
[  302.600932][ T4321] usb 3-1: new full-speed USB device number 9 using dummy_hcd
[  302.642275][ T9051] XFS (loop4): Mounting V5 Filesystem
[  302.752149][ T9051] XFS (loop4): Ending clean mount
[  302.822773][ T4321] usb 3-1: not running at top speed; connect to a high speed hub
[  302.841339][ T4321] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  302.898129][ T4321] usb 3-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad
[  302.937989][ T4321] usb 3-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0
[  302.974585][ T4321] usb 3-1: Product: syz
[  302.995171][ T4321] usb 3-1: Manufacturer: syz
[  303.066749][ T4321] usb 3-1: Found UVC 1.00 device syz (225a:e1d4)
[  303.090738][ T4321] usb 3-1: No streaming interface found for terminal 2.
[  303.098749][ T4282] XFS (loop4): Unmounting Filesystem
[  303.282930][   T22] usb 3-1: USB disconnect, device number 9
[  303.374150][ T4323] gspca_sq905: bulk read fail (-22) len 0/4
[  303.380195][ T4323] sq905: probe of 6-1:0.0 failed with error -5
[  303.602232][   T22] usb 6-1: USB disconnect, device number 8
[  304.725768][ T9092] loop4: detected capacity change from 0 to 131072
[  304.737448][ T9092] F2FS-fs (loop4): invalid crc value
[  304.810240][ T9092] F2FS-fs (loop4): Found nat_bits in checkpoint
[  304.867076][ T9092] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  305.575934][ T9123] loop2: detected capacity change from 0 to 4096
[  305.661317][ T9123] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  306.362063][ T4288] EXT4-fs (loop2): unmounting filesystem.
[  307.042870][ T9143] loop2: detected capacity change from 0 to 1024
[  307.098467][ T9149] FAULT_INJECTION: forcing a failure.
[  307.098467][ T9149] name failslab, interval 1, probability 0, space 0, times 0
[  307.120364][ T9149] CPU: 0 PID: 9149 Comm: syz.0.1579 Not tainted syzkaller #0
[  307.127823][ T9149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  307.137918][ T9149] Call Trace:
[  307.141261][ T9149]  <TASK>
[  307.144219][ T9149]  dump_stack_lvl+0x188/0x24e
[  307.148944][ T9149]  ? show_regs_print_info+0x12/0x12
[  307.154184][ T9149]  ? load_image+0x410/0x410
[  307.158822][ T9149]  ? __might_sleep+0xd0/0xd0
[  307.163445][ T9149]  ? __lock_acquire+0x7c40/0x7c40
[  307.168525][ T9149]  should_fail_ex+0x390/0x4c0
[  307.173256][ T9149]  should_failslab+0x5/0x20
[  307.177866][ T9149]  slab_pre_alloc_hook+0x59/0x300
[  307.182931][ T9149]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  307.188957][ T9149]  ? bpf_int_jit_compile+0x238/0xcbe0
[  307.194375][ T9149]  __kmem_cache_alloc_node+0x4f/0x270
[  307.199798][ T9149]  ? bpf_int_jit_compile+0x238/0xcbe0
[  307.205218][ T9149]  kmalloc_trace+0x26/0xe0
[  307.209679][ T9149]  bpf_int_jit_compile+0x238/0xcbe0
[  307.214960][ T9149]  ? slab_free_freelist_hook+0x133/0x1b0
[  307.220652][ T9149]  ? bpf_convert_filter+0x5067/0x5220
[  307.226073][ T9149]  ? __kmem_cache_free+0xb6/0x200
[  307.231156][ T9149]  ? kasan_set_track+0x60/0x70
[  307.235990][ T9149]  ? emit_bpf_dispatcher+0x1060/0x1060
[  307.241591][ T9149]  ? sk_filter_release_rcu+0x110/0x110
[  307.247199][ T9149]  ? rcu_is_watching+0x11/0xa0
[  307.252058][ T9149]  bpf_prog_select_runtime+0x48b/0x7d0
[  307.257643][ T9149]  ? bpf_prog_realloc+0x142/0x1c0
[  307.262720][ T9149]  bpf_prepare_filter+0x100e/0x11b0
[  307.268010][ T9149]  ? seccomp_notify_detach+0x220/0x220
[  307.273535][ T9149]  ? bpf_prog_create+0x1f0/0x1f0
[  307.278520][ T9149]  ? rcu_is_watching+0x11/0xa0
[  307.283333][ T9149]  ? kmemdup+0x42/0x60
[  307.287451][ T9149]  ? memcpy+0x3c/0x60
[  307.291500][ T9149]  bpf_prog_create_from_user+0x2cc/0x420
[  307.297189][ T9149]  ? seccomp_notify_detach+0x220/0x220
[  307.302719][ T9149]  do_seccomp+0x806/0xe00
[  307.307110][ T9149]  ? prctl_set_seccomp+0x60/0x60
[  307.312100][ T9149]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  307.318147][ T9149]  ? lockdep_hardirqs_on+0x94/0x140
[  307.323395][ T9149]  do_syscall_64+0x4c/0xa0
[  307.327848][ T9149]  ? clear_bhb_loop+0x60/0xb0
[  307.332563][ T9149]  ? clear_bhb_loop+0x60/0xb0
[  307.337283][ T9149]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  307.343412][ T9149] RIP: 0033:0x7f7dd7f9e159
[  307.347888][ T9149] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  307.367816][ T9149] RSP: 002b:00007f7dd8ed9028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d
[  307.376285][ T9149] RAX: ffffffffffffffda RBX: 00007f7dd8225fa0 RCX: 00007f7dd7f9e159
[  307.384295][ T9149] RDX: 00002000000000c0 RSI: 0000000000000000 RDI: 0000000000000001
[  307.392297][ T9149] RBP: 00007f7dd803506b R08: 0000000000000000 R09: 0000000000000000
[  307.400315][ T9149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  307.408334][ T9149] R13: 00007f7dd8226038 R14: 00007f7dd8225fa0 R15: 00007ffd60ce6468
[  307.416391][ T9149]  </TASK>
[  307.555291][   T26] audit: type=1800 audit(1790314064.268:852): pid=9143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1578" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=9 res=0 errno=0
[  307.828849][ T9157] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1584'.
[  307.862178][ T9163] netlink: 'syz.5.1588': attribute type 10 has an invalid length.
[  307.984557][ T9163] team0: Port device wlan1 added
[  308.297246][ T9169] bridge0: port 4(netdevsim0) entered blocking state
[  308.329367][ T9169] bridge0: port 4(netdevsim0) entered disabled state
[  308.375536][ T9169] device netdevsim0 entered promiscuous mode
[  308.407298][ T9169] bridge0: port 4(netdevsim0) entered blocking state
[  308.414286][ T9169] bridge0: port 4(netdevsim0) entered forwarding state
[  309.357017][ T9190] loop5: detected capacity change from 0 to 512
[  309.415348][ T9186] loop2: detected capacity change from 0 to 4096
[  309.437402][ T9190] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities
[  309.516677][ T9186] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  310.029716][ T4288] EXT4-fs (loop2): unmounting filesystem.
[  310.339453][ T9214] loop0: detected capacity change from 0 to 256
[  310.768711][ T9216] ------------[ cut here ]------------
[  310.775197][ T9216] sysfs group 'power' not found for kobject 'rfkill21'
[  310.833031][ T9216] WARNING: CPU: 1 PID: 9216 at fs/sysfs/group.c:280 sysfs_remove_group+0x177/0x290
[  310.842775][ T9216] Modules linked in:
[  310.846732][ T9216] CPU: 1 PID: 9216 Comm: syz.5.1603 Not tainted syzkaller #0
[  310.854257][ T9216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  310.864427][ T9216] RIP: 0010:sysfs_remove_group+0x177/0x290
[  310.870315][ T9216] Code: 8b 1b 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 eb 2b cb ff 49 8b 17 48 c7 c7 a0 70 9c 8a 48 89 de e8 f9 6d 45 ff <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 03 e7 79 ff
[  310.890205][ T9216] RSP: 0000:ffffc9000ff0f6e0 EFLAGS: 00010246
[  310.896386][ T9216] RAX: 5ac3f2ae836a4900 RBX: ffffffff8b03c240 RCX: 0000000000080000
[  310.904560][ T9216] RDX: ffffc90004782000 RSI: 0000000000047a3a RDI: 0000000000047a3b
[  310.912646][ T9216] RBP: ffffc9000ff0f818 R08: ffffc9000ff0f367 R09: 1ffff92001fe1e6c
[  310.920911][ T9216] R10: dffffc0000000000 R11: fffff52001fe1e6d R12: 1ffffffff160784c
[  310.929093][ T9216] R13: dffffc0000000000 R14: ffff88807e1ae000 R15: ffff888076a06110
[  310.937226][ T9216] FS:  00007f4adf20b6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  310.946279][ T9216] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  310.952974][ T9216] CR2: 00007f2b571556c8 CR3: 000000005535c000 CR4: 00000000003506e0
[  310.961032][ T9216] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  310.969089][ T9216] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  310.977354][ T9216] Call Trace:
[  310.980707][ T9216]  <TASK>
[  310.983682][ T9216]  ? sysfs_unmerge_group+0x109/0x130
[  310.989040][ T9216]  device_del+0x2ab/0xa80
[  310.993478][ T9216]  ? cancel_work_sync+0x20/0x20
[  310.998396][ T9216]  ? kill_device+0x160/0x160
[  311.003188][ T9216]  ? hci_sock_dev_event+0x2d3/0x5f0
[  311.008768][ T9216]  ? kmem_cache_free+0xf7/0x2a0
[  311.013733][ T9216]  rfkill_unregister+0xb6/0x2f0
[  311.018655][ T9216]  hci_unregister_dev+0x373/0x500
[  311.023788][ T9216]  hci_uart_tty_close+0x268/0x330
[  311.028893][ T9216]  tty_ldisc_reinit+0xe4/0x460
[  311.033793][ T9216]  tty_ldisc_hangup+0x360/0x4a0
[  311.038719][ T9216]  __tty_hangup+0x40e/0x660
[  311.043333][ T9216]  __tty_port_tty_hangup+0x111/0x1a0
[  311.048698][ T9216]  uart_remove_one_port+0x227/0x7c0
[  311.054028][ T9216]  ? kernfs_remove_by_name_ns+0x113/0x150
[  311.059809][ T9216]  ? uart_add_one_port+0x1e70/0x1e70
[  311.065222][ T9216]  ? serial_pnp_probe+0x750/0x750
[  311.070301][ T9216]  serial8250_unregister_port+0xac/0x240
[  311.076055][ T9216]  pnp_device_remove+0x78/0x250
[  311.081011][ T9216]  ? pnp_device_probe+0x4b0/0x4b0
[  311.086108][ T9216]  device_release_driver_internal+0x47d/0x7c0
[  311.092332][ T9216]  unbind_store+0x2e2/0x300
[  311.096905][ T9216]  ? uevent_store+0x70/0x70
[  311.101514][ T9216]  ? __virt_addr_valid+0x188/0x540
[  311.106695][ T9216]  ? __virt_addr_valid+0x467/0x540
[  311.111931][ T9216]  ? sysfs_kf_write+0x183/0x2a0
[  311.116847][ T9216]  ? sysfs_kf_read+0x350/0x350
[  311.121726][ T9216]  kernfs_fop_write_iter+0x3a0/0x520
[  311.127081][ T9216]  vfs_write+0x482/0x9a0
[  311.131462][ T9216]  ? file_end_write+0x250/0x250
[  311.136393][ T9216]  ? __fget_files+0x3fc/0x460
[  311.141209][ T9216]  ? __fdget_pos+0x2ae/0x360
[  311.145943][ T9216]  ? ksys_write+0x70/0x260
[  311.150425][ T9216]  ksys_write+0x14d/0x260
[  311.154882][ T9216]  ? __ia32_sys_read+0x80/0x80
[  311.159709][ T9216]  ? lockdep_hardirqs_on+0x94/0x140
[  311.165023][ T9216]  do_syscall_64+0x4c/0xa0
[  311.169488][ T9216]  ? clear_bhb_loop+0x60/0xb0
[  311.174278][ T9216]  ? clear_bhb_loop+0x60/0xb0
[  311.179002][ T9216]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  311.185011][ T9216] RIP: 0033:0x7f4ade39e159
[  311.189512][ T9216] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  311.209237][ T9216] RSP: 002b:00007f4adf20b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  311.217778][ T9216] RAX: ffffffffffffffda RBX: 00007f4ade625fa0 RCX: 00007f4ade39e159
[  311.225853][ T9216] RDX: 0000000000000006 RSI: 00002000000001c0 RDI: 0000000000000004
[  311.233908][ T9216] RBP: 00007f4ade43506b R08: 0000000000000000 R09: 0000000000000000
[  311.241995][ T9216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  311.250020][ T9216] R13: 00007f4ade626038 R14: 00007f4ade625fa0 R15: 00007ffda173bec8
[  311.258116][ T9216]  </TASK>
[  311.261225][ T9216] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  311.268628][ T9216] CPU: 1 PID: 9216 Comm: syz.5.1603 Not tainted syzkaller #0
[  311.276041][ T9216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  311.286123][ T9216] Call Trace:
[  311.289418][ T9216]  <TASK>
[  311.292362][ T9216]  dump_stack_lvl+0x188/0x24e
[  311.297062][ T9216]  ? memcpy+0x3c/0x60
[  311.301160][ T9216]  ? show_regs_print_info+0x12/0x12
[  311.306379][ T9216]  ? load_image+0x410/0x410
[  311.310918][ T9216]  panic+0x2d3/0x710
[  311.314844][ T9216]  ? bpf_jit_dump+0xd0/0xd0
[  311.319464][ T9216]  __warn+0x2f8/0x4f0
[  311.323468][ T9216]  ? sysfs_remove_group+0x177/0x290
[  311.328708][ T9216]  ? sysfs_remove_group+0x177/0x290
[  311.333944][ T9216]  report_bug+0x2ba/0x4f0
[  311.338330][ T9216]  ? sysfs_remove_group+0x177/0x290
[  311.343553][ T9216]  handle_bug+0x3a/0x70
[  311.347730][ T9216]  exc_invalid_op+0x16/0x40
[  311.352250][ T9216]  asm_exc_invalid_op+0x16/0x20
[  311.357144][ T9216] RIP: 0010:sysfs_remove_group+0x177/0x290
[  311.362981][ T9216] Code: 8b 1b 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 eb 2b cb ff 49 8b 17 48 c7 c7 a0 70 9c 8a 48 89 de e8 f9 6d 45 ff <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 03 e7 79 ff
[  311.382615][ T9216] RSP: 0000:ffffc9000ff0f6e0 EFLAGS: 00010246
[  311.388702][ T9216] RAX: 5ac3f2ae836a4900 RBX: ffffffff8b03c240 RCX: 0000000000080000
[  311.396697][ T9216] RDX: ffffc90004782000 RSI: 0000000000047a3a RDI: 0000000000047a3b
[  311.404713][ T9216] RBP: ffffc9000ff0f818 R08: ffffc9000ff0f367 R09: 1ffff92001fe1e6c
[  311.412705][ T9216] R10: dffffc0000000000 R11: fffff52001fe1e6d R12: 1ffffffff160784c
[  311.420713][ T9216] R13: dffffc0000000000 R14: ffff88807e1ae000 R15: ffff888076a06110
[  311.428744][ T9216]  ? sysfs_unmerge_group+0x109/0x130
[  311.434057][ T9216]  device_del+0x2ab/0xa80
[  311.438415][ T9216]  ? cancel_work_sync+0x20/0x20
[  311.443292][ T9216]  ? kill_device+0x160/0x160
[  311.447994][ T9216]  ? hci_sock_dev_event+0x2d3/0x5f0
[  311.453224][ T9216]  ? kmem_cache_free+0xf7/0x2a0
[  311.458100][ T9216]  rfkill_unregister+0xb6/0x2f0
[  311.463061][ T9216]  hci_unregister_dev+0x373/0x500
[  311.468148][ T9216]  hci_uart_tty_close+0x268/0x330
[  311.473213][ T9216]  tty_ldisc_reinit+0xe4/0x460
[  311.478012][ T9216]  tty_ldisc_hangup+0x360/0x4a0
[  311.482913][ T9216]  __tty_hangup+0x40e/0x660
[  311.487531][ T9216]  __tty_port_tty_hangup+0x111/0x1a0
[  311.492863][ T9216]  uart_remove_one_port+0x227/0x7c0
[  311.498178][ T9216]  ? kernfs_remove_by_name_ns+0x113/0x150
[  311.503957][ T9216]  ? uart_add_one_port+0x1e70/0x1e70
[  311.509287][ T9216]  ? serial_pnp_probe+0x750/0x750
[  311.514336][ T9216]  serial8250_unregister_port+0xac/0x240
[  311.520089][ T9216]  pnp_device_remove+0x78/0x250
[  311.525063][ T9216]  ? pnp_device_probe+0x4b0/0x4b0
[  311.530219][ T9216]  device_release_driver_internal+0x47d/0x7c0
[  311.536334][ T9216]  unbind_store+0x2e2/0x300
[  311.540864][ T9216]  ? uevent_store+0x70/0x70
[  311.545383][ T9216]  ? __virt_addr_valid+0x188/0x540
[  311.550627][ T9216]  ? __virt_addr_valid+0x467/0x540
[  311.555782][ T9216]  ? sysfs_kf_write+0x183/0x2a0
[  311.560673][ T9216]  ? sysfs_kf_read+0x350/0x350
[  311.565466][ T9216]  kernfs_fop_write_iter+0x3a0/0x520
[  311.570793][ T9216]  vfs_write+0x482/0x9a0
[  311.575075][ T9216]  ? file_end_write+0x250/0x250
[  311.579982][ T9216]  ? __fget_files+0x3fc/0x460
[  311.584697][ T9216]  ? __fdget_pos+0x2ae/0x360
[  311.589310][ T9216]  ? ksys_write+0x70/0x260
[  311.593756][ T9216]  ksys_write+0x14d/0x260
[  311.598114][ T9216]  ? __ia32_sys_read+0x80/0x80
[  311.602909][ T9216]  ? lockdep_hardirqs_on+0x94/0x140
[  311.608218][ T9216]  do_syscall_64+0x4c/0xa0
[  311.612663][ T9216]  ? clear_bhb_loop+0x60/0xb0
[  311.617367][ T9216]  ? clear_bhb_loop+0x60/0xb0
[  311.622070][ T9216]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  311.627995][ T9216] RIP: 0033:0x7f4ade39e159
[  311.632432][ T9216] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  311.652096][ T9216] RSP: 002b:00007f4adf20b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  311.660540][ T9216] RAX: ffffffffffffffda RBX: 00007f4ade625fa0 RCX: 00007f4ade39e159
[  311.668710][ T9216] RDX: 0000000000000006 RSI: 00002000000001c0 RDI: 0000000000000004
[  311.676701][ T9216] RBP: 00007f4ade43506b R08: 0000000000000000 R09: 0000000000000000
[  311.684800][ T9216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  311.693307][ T9216] R13: 00007f4ade626038 R14: 00007f4ade625fa0 R15: 00007ffda173bec8
[  311.701317][ T9216]  </TASK>
[  311.704472][ T9216] Kernel Offset: disabled
[  311.708907][ T9216] Rebooting in 86400 seconds..