last executing test programs:

8m12.926574135s ago: executing program 0 (id=283):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x815, &(0x7f0000000180)={[{@data_err_ignore}, {@resgid}, {@abort}, {@barrier_val={'barrier', 0x3d, 0x1}}, {@nobarrier}]}, 0x9, 0x624, &(0x7f0000001340)="$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")
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10)
mkdir(&(0x7f0000000000)='proc_dir\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='proc_dir\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc_dir/scsi/scsi\x00', 0x0, 0x0)
pread64(r4, &(0x7f00000002c0)=""/267, 0x10b, 0x304)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x720, 0x0, 0x0)

8m11.258955054s ago: executing program 0 (id=284):
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatasum}, {@compress_force}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@flushoncommit}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x30, 0x37, 0x65]}}, {@nodiscard}]}, 0xfb, 0x510a, &(0x7f000000d000)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000003b40)={{}, 0x0, 0x6, @unused=[0x3a0e, 0x7, 0x2], @name="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"})
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZE(r3, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3})
pipe2$watch_queue(&(0x7f00000000c0), 0x80)
mount$fuse(0x0, 0x0, 0x0, 0x80c019, 0x0)
mount(0x0, 0x0, &(0x7f0000000000)='tmpfs\x00', 0x2, &(0x7f0000000300)='usrquota')
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)

8m4.30198742s ago: executing program 0 (id=297):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="61636c2c757365725f78617474722c6e6f61636c2c63616368655f73747261746567793d64697361626c65642c6e6f757365725f78617474722c6e6f61636c2c00d4a87b439fa421753f060fe37a330d2dfca47c4e52e78d71fc65b972e2bb306bb4a29b1fe3019842462c5fee84a2e6eb90d57b8725e3a2eff0b0b471dac5c01bee53cd8d"], 0xfe, 0x17d, &(0x7f0000000340)="$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")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x40)
socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@mcast2, @in=@loopback}}, {{@in=@dev}}}, &(0x7f0000000540)=0x119)
getuid()
newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x0, 0x0)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}, {0x2, 0x0, @private=0xa010100}, 0xf5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f4, 0x0, 0x40})
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00'})
r5 = socket$packet(0x11, 0x2, 0x300)
recvfrom$packet(r5, 0x0, 0x0, 0x0, 0x0, 0x0)

8m0.881749401s ago: executing program 0 (id=302):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x300)
r1 = syz_open_dev$video4linux(&(0x7f0000000040), 0x8e3, 0x88800)
close(0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
prlimit64(0x0, 0x7, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$pptp(0x18, 0x1, 0x2)
fsopen(0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000070"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x3008, 0x4, 0x0, 0x7b0, 0x3})
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000010000c0000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000002c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000140000001100010000000000000000000000000a"], 0xc8}}, 0x0)

7m59.861266308s ago: executing program 0 (id=304):
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c0007800800064000000000050001000600"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES16=r0, @ANYRESOCT=r1], 0x48)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000200)=0xd)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000}, 0x38)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000200)={<r3=>0x0, 0x1})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000d6ffffffbfa400000000000007040000f0feefffb7020000080000001821", @ANYRES32, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000300)='GPL\x00', 0x5, 0x1010, &(0x7f0000002500)=""/4112, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f00000002c0)={<r4=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02864c3, &(0x7f0000000380)={&(0x7f0000000340)=[0x0, r3, r4], 0x5, 0x3, 0x1})
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01864c1, &(0x7f0000000140)={r3})
syz_open_dev$tty1(0xc, 0x4, 0x1)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59)
connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000040), 0x3)
syz_mount_image$minix(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x8010, &(0x7f0000000480)=ANY=[@ANYBLOB="00e611ed6229b237ad2a184a94283e2b34c24caf7280c18475708140abe763dfb52cdb0ba0cdc8c572346d0a832984b36248c4fa844eda0af4b1652605421a7821dcfde12aa77458d811a84538a156b05b0ec3eaf24a90ceb5b7463d9fd38b49d41fbfa868653605702abe43d9c2c30aed4da0b8cc18c6b369f086a965442c1217f19a67a534064b7236a6660000000000"], 0x2, 0x18a, &(0x7f00000001c0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)

7m55.722231233s ago: executing program 0 (id=312):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="61636c2c757365725f78617474722c6e6f61636c2c63616368655f73747261746567793d64697361626c65642c6e6f757365725f78617474722c6e6f61636c2c00d4a87b439fa421753f060fe37a330d2dfca47c4e52e78d71fc65b972e2bb306bb4a29b1fe3019842462c5fee84a2e6eb90d57b8725e3a2eff0b0b471dac5c01bee53cd8d"], 0xfe, 0x17d, &(0x7f0000000340)="$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")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x40)
socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@mcast2, @in=@loopback}}, {{@in=@dev}}}, &(0x7f0000000540)=0x119)
getuid()
newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x0, 0x0)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}, {0x2, 0x0, @private=0xa010100}, 0xf5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f4, 0x0, 0x40})
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00'})
r5 = socket$packet(0x11, 0x2, 0x300)
recvfrom$packet(r5, 0x0, 0x0, 0x0, 0x0, 0x0)

7m40.103172475s ago: executing program 32 (id=312):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="61636c2c757365725f78617474722c6e6f61636c2c63616368655f73747261746567793d64697361626c65642c6e6f757365725f78617474722c6e6f61636c2c00d4a87b439fa421753f060fe37a330d2dfca47c4e52e78d71fc65b972e2bb306bb4a29b1fe3019842462c5fee84a2e6eb90d57b8725e3a2eff0b0b471dac5c01bee53cd8d"], 0xfe, 0x17d, &(0x7f0000000340)="$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")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x40)
socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@mcast2, @in=@loopback}}, {{@in=@dev}}}, &(0x7f0000000540)=0x119)
getuid()
newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x0, 0x0)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}, {0x2, 0x0, @private=0xa010100}, 0xf5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f4, 0x0, 0x40})
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00'})
r5 = socket$packet(0x11, 0x2, 0x300)
recvfrom$packet(r5, 0x0, 0x0, 0x0, 0x0, 0x0)

11.834628777s ago: executing program 3 (id=1427):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/ptp/ptp0/n_vclocks\x00', 0x2, 0x0)
write(r0, &(0x7f0000000200)='5\n\x00', 0x2)

11.151400318s ago: executing program 1 (id=1429):
syz_mount_image$minix(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280), 0x1, 0x1d4, &(0x7f00000002c0)="$eJzs2ztuE1EUBuDfjgGJJdBSQENMHgTaSOH9flR0UWKiCAcQoUmEBCyFnbAT2EAKNsAgPwKyRTHMgAeS75NsH8v659wpju914QDHV2fw1Eora8O3RVG8e5/k6d3Dz4Cjqmi4/7cCaM7cYAy/NL0KYPYOVofzn0+t5PPXtxuHj7WS+/fBantUTOWvls1/aA1fz3Qm89eSXC+RLz6O8ucymb/xm/1PT+Vvls6P7v/82cn8rSS3k9xJMvgpdS/J/SQPkjz8Rf/Nqf5PSvYHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4U1pJ5uvma1ygneTZdr93sWL+xDi/UDF/cpxfrJlfqpg/Nc7Pb7zsb1a8BlTVbnj+52rOf6fm/MNxtru3/3y93++9VigUih9F099MwN/WfbPzqru7t39he2d9q7fVe7G8cGV55fKlxaWV7vBc3q1zOgf+ZT83/aZXAgAAAAAAAABU9SjJ46YXAQAAzMQs/k7U9D0CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8P/7HgAA//9hatLm")
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10)
r0 = io_uring_setup(0xc01, &(0x7f0000000000)={0x0, 0x1e78, 0x40, 0x2, 0x207})
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r1 = open(&(0x7f0000000140)='.\x00', 0x18000, 0x112)
getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8)
getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8)
io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f00000003c0), 0x0)
syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000580)='./bus\x00', 0x8, &(0x7f00000005c0)=ANY=[], 0x1, 0x1de, &(0x7f00000006c0)="$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")
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000140)='./file2\x00', 0x80, &(0x7f00000018c0)=ANY=[], 0x7d, 0x1501, &(0x7f00000002c0)="$eJzs3Am4T1X3OPC19t6H62b4JpnP2uvwTYZNkoSSZEiSJCRzQpIkSZK4ZEpCEjLeJHPInG665nnInHTzSpIkJCTZ/+c2/P16h5/3fX/9/vq/d32e5zz2cs7aZ+27nu89w/Pc79ddh1VvVKNKfWaGf4f+bYC//JMEAAkAMBAAcgBAAABlc5bNmb4/i8akf+sk4n9JgxlXugJxJUn/Mzbpf8Ym/c/YpP8Zm/Q/Y5P+Z2zS/4xN+i9EhjYr39WyZdxN3v//f079T5Ll+p8h4D/aIf3/T6P/paOl/xmb9D9jk/5nbNL/jCy40gWIK0w+/xmb9F+IDO0Pf6e84dyVfqct27+wCSGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQ/w+c85cYAPhtfKXrEkIIIYQQQgghxB/Hv3ulKxBCCCGEEEIIIcT/PgQFGgwEkAkyQwJkgUS4CrJCNsgOOSAGV0NOuAZywbWQG/JAXsgH+aEAFIQQCCwwRFAICkMcroMicD0UhWJQHEqAg5JQCm6A0nAjlIGboCzcDOXgFigPFX4+Z7rboTLcAVXgTqgK1aA61IC7oCbcDbXgHqgN90IduA/qwv1QDx6A+tAAGsKD0AgegsbQBJpCM2gOLaDlZfKTc/y9/OehB7wAPaEXJEFv6AMvQl/oB/1hAAyEl2AQvAyD4RUYAkNhGLwKw+E1GAGvw0gYBaPhDRgDY2EcjIcJMBGS4U2YBG/BZHj7oWwwFabBdJgBM2EWvAOzYQ7MhXdhHsyHBZCcZREshiXwHiyF9yEFPoBl8CGkwnJYASthFayGNbAW1sF62AAbYRNshi2wFbbBR7AddsBO2AW7YQ/shY9hH3wC++FTSMPP/sX8s7/Ph24ICKhQoUGDmTATJmACJmIiZsWsmB2zYwxjmBNzYi7MhbkxN+bFvJiE+bEgFkRCQkbGQlgI4xjHIlgEi2JRLI7F0aHDUlgKS+ONWAbLYFksi+WwHJbHClgBb8VbsRJWwspYGatgFayKVbE6Vse78C68G2thLayNtbEO1sG6WBfrYT2sj/WxITbERtgIG2NjbIpNsTk2x5bYElthK2yNrbEttsV22A7bY3vsgB2wI3bETtgJO2Nn7IJdsCt2xW74HD6Hz+Pz+AK+gL2wquqNfbAP9sW+2B8H4AB8CQfhy/gyvoJDcCgOw1fxVXwNR+AZHImjcDSOxkpqLI7D8chqIiZjMmaGSTgZJ+MUnIpTcTrOwJk4C2fhbJyDc/BdnIfzcT4uxIW4GJfgElyK72MKpuAyPIupuBxX4EpchatxFa7FdbgWN+BG3ICbcTNuxa34EX6EO3AH7sJduAf34Mf4MX6Cn+AQTMM0PIAH8CAexEN4CA/jYTyCR/AoHsVjeAyP43E8gSfxFJ7E03gaz+BZPAcA5/E8XsALeBEvpn/4VTqjjMqkMqkElaASVaLKqrKq7Cq7iqmYyqlyqlwql8qtcqu8Kq/Kr/KrgqqgIkWKVaQKqUIqruKqiCqiiqqiqrgqrpxyqpQqpUqr0qqMKqPKqptVOXWLKq8qqDbuVnWrqqTausrqDlVFVVFVVTVVXdVQNVRNVVPVUrVUbVVb1VF1VF11v6qnemN/bKDSO9NIDcXGahg2Vc1Uc9VCvYYPq1ZqBLZWbVRb9agahSOxvWrlOqgnVEc1Djupp9R4fFp1UROxq3pWdVPPqe7qedVDtXY9VS81BXurPmo69lX9VH81QM3Gaiq9Y9XVK+r5zEPVMPWqWoyvqRHqdTVSjVKj1RtqjBqrxqnxaoKaqJLVm2qSektNVm+rKWqqmqamqxlqppql3lGz1Rw1V72r5qn5aoFaqBapxWqJek8tVe+rFPWBWqY+VKlquVqhVqpVarVao9aqdWq92qA2qk1qs9qitqpt6iO1Xe1QO9UutVvtUXvVx2qf+kTtV5+qNPWZOqD+og6qz9Uh9YU6rL5UR9RX6qj6Wh1T36jj6lt1Qp1Up9R36rT6Xp1RZ9U59YM6r35UF9RP6qLyCjRqpbU2OtCZdGadoLPoRH2Vzqqz6ew6h47pq3VOfY3Opa/VuXUendfk0/l1AV1Qh5q01awjXUgX1nF9nS6ir9dFdTFdXJfQTpfUpfQNurS+UZfRN+my+mZdTt+iy+sKuqIHfZuupG/XlfUduoq+U1fV1XR1XUPfpWvqu3UtfY+ure/VdfR9uq6+X9fTD+j6uoFuqB/UjfRDurFuopvqZrq5bqFb6od1K/2Ibq3b6Lb6Ud1OP6bb68d1B/2E7qif1J30U7qzflp30c/orvpZ3U0/p7vrn/RF7XVP3Usn6d66j35R99X9dH89QA/UL+lB+mU9WL+ih+iheph+VQ/Xr+kR+nU9Uo/So/Ubeoweq8fp8XqCnqiT9Zt6kn5LT9Zv6yl6qp6mp+sZeqbu/+tMc/+J/Lf+Tv7gn8++VW/TH+nteofeqXfp3XqP3qv36n16n96v9+s0naYP6AP6oD6oD+lD+rA+rI/oI/qoPqqP6WP6uD6uT+iT+gf9nT6tv9dn9Fl9Vv+gz+vz+sKvPwMwaJTRxpjAZDKZTYLJYhLNVSaryWaymxwmZq42Oc01Jpe51uQ2eUxek8/kNwVMQRMaMtawiUwhU9jEzXWmiLneFDXFTHFTwjhT0pQyN/yP8y9XX0vT0rQyrUxr09q0NW1NO9POtDftTQfTwXQ0HU0n08l0Np1NF9PFdDVdTTfTzXQ33U0P08P0ND1NkkkyfcyLpq/pZ/qbAWageckMMoPMYDPYDDFDzDAzzAw3w80IM8KMNCPNaDPajDFjzDgzzkwwE0yyz2EmmUlmsplsppgpZtrAHGaGmWFmmVlmtplt5pq5Zp6ZZxaYBWaRWWSWmCVmqVlqUkyKWWaWmVSz3Cw3K81Ks9qsNmvNWrPerDcbzUaz2Ww2qWab2Wa2m+1mp9lpdpvdZq/Za/aZfWa/2W/STJo5YA6Yg+agOWQOmcPmsDlijpij5qg5Zo6Z4+a4OWFOmFPmlDltTpsz5ow5Z86Z8+a8uWAumIvmYvptX6ACFZjABJmCTEFCkBAkBolB1iBrkD3IHsSCWJAzyBnkCq4Ncgd5grxBviB/UCAoGIQBBTbgIAoKBYWDeHBdUCS4PigaFAuKByUCF5QMSgU3BKWDG4MywU1B2eDmoFxwS1A+qBBUDG4NbgsqBbcHlYM7girBnUHVoFpQPagR3BXUDO4OagX3BLWDe4M6wX1B3eD+oF7wQFA/aBA0DB4MGgUPBY2DJkHToFnQPGgRtPxD5/f+TJ5HXM+wV5gU9g77hC+GfcN+Yf9wQDgwfCkcFL4cDg5fCYeEQ8Nh4avh8PC1cET4ejgyHBWODt8Ix4Rjw3Hh+HBCODFMDt8MJ4VvhZPDt8Mp4dRwWjA9nBHODGeF74Szwznh3PDdcF44P1wQLgwXhYtD/OWWGFLCD8Jl4Ydharg8XBGuDFeFq8M14dpwXbg+3BBuDDeFm8sO+uXQcHu4I9wZ7gp3h3vCveHH4b7wk3B/+GmYFn4WHgj/Eh4MPw8PhV+Eh8MvwyPhV+HR8OvwWPhNeDz8NjwRngxPhd+Fp8PvwzPh2fBc+EN4PvwxvBD+FF4MffrNffrlnQwZykSZKIESKJESKStlpeyUnWIUo5yUk3JRLspNuSkv5aX8lJ8KUkFKx8RUiApRnOJUhIpQUSpKxak4OXJUikpRaSpNZagMlaWyVI7KUXkqTxWpIt1Gt9HtdDvdQXfQnXQnVaNqVINqUE2qSbWoFtWm2lSH6lBdqkv1qB7Vp/rUkBpSI2pEjakxNaWm1JyaU0tqSa2oFbWm1tSW2lI7akftqT11oA7UkTpSJ+pEnakzdaEu1JW6UjfqRt2pO/WgHtSTelISJVEf6kN9qS/1p/40kAbSIBpEg2kwDaEhNIyG0XAaTiNoBI2kUTSa3qAxNJbG0XiaQBMpmZJpEk2iyTSZptAUmkbTaAbNoFk0i2bTbJpLc2kezaMFtIAW0SJaQktoKS2lFEqhZbSMUimVVtAKWkWraA2toXW0jjbQBtpEm2gLbaFttI2203baSTtpN+2mvbSX9tE+2k/7KY3S6AAdoIN0kA7RITpMh+kIHaGjdJSO0TE6TsfpBJ2gU3SKTtNpOkNn6Bydo/P0I12gn+gieUqwWWyivcpmtdlsdpvD/nWc1+az+W0BW9CGNrfN87uYrLVFbTFb3Jawzpa0pewNfxOXtxVsRXurvc1Wsrfbyra8zQL/Na5p77a17D22tr3X1rB3/S6uY++zde1Dtp5tYuvbZrahbWEb2YdsY9vENrXNbHPbwrazj9n29nHbwT5hO9on/yZeat+36+x6u8FutPvsJ/ac/cEetV/b8/ZH29P2sgPtS3aQfdkOtq/YIXbo72MAO9q+YcfYsXacHW8n2Il/E0+z0+0MO9POsu/Y2XbO38RL7Ht2nk2xC+xCu8gu/jlOrynFfmCX2Q9tql1uV9iVdpVdbdfYtf+31pV2s91it9q99mO73e6wO+0uu9vu+TlOX8d++6lNs5/ZI/Yre9B+bg/ZY/aw/fLnOH19x+w39rj91p6wJ+0p+509bb+3Z+zZn9efvvbv7E/2ovUWGFmxZsMBZ+LMnMBZOJGv4qycjbNzDo7x1ZyTr+FcfC3n5jycl/Nxfi7ABTlkYsvMERfiwhzn67gIX89FuRgX5xLsuCSX4hu4NN/IZfgmLss3czm+hctzBa7It/JtXIlv58p8B1fhO7kqV+PqXIPv4pp8N9fie7g238t1+D6uy/dzPX6A63MDbsgPciN+iBtzE27Kzbg5t+CW/DC34ke4Nbfhtvwot+PHuD0/zh34Ce7IT3Infoo789PchZ/hrvwsd+PnuDs/zz34Be7JvTiJe3MffpH7cj/uzwN4IL/Eg/hlHsyv8BAeysP4VR7Or/EIfp1H8igezW/wGB7L43g8T+CJnMxv8iR+iyfz2zyFp/I0ns4zeCbP4nd4Ns/hufwuz+P5vIAX8iJezEv4PV7K73MKf8DL+ENO5eW8glfyKl7Na3gtr+P1vIE38ibezFt4K2/jj3g77+CdvIt38x7eyx/zPv6E9/OnnMaf8QH+Cx/kz/kQf8GH+Us+wl/xUf6aj/E3fJy/5RN8kk/xd3yav+czfJbP8Q98nn/kC/wTX2TPEGGkIh2ZKIgyRZmjhChLlBhdFWWNskXZoxxRLLo6yhldE+WKro1yR3mivFG+KH9UICoYhRFFNuIoigpFhaN4dF1UJLo+KhoVi4pHJSIXlYxKRTdEpaMbozLRTVHZ6OaoXHRLVD6qEFWMbo1uiypFt0eVozuiKtGdUdWoWlQ9qhHdFdWM7o5qRfdEtaN7ozLRfVHd6P6oXvRAVD9qEDWMHowaRQ9FjaMmUdOoWdQ8ahG1jB6OWkWPRK2jNlHb6NGoXfRY1D56POoQPRF1jJ68tL9Y8MvV9K/2J0W9I/3rG7J79KL44viS+HvxpfH34ynxD+LL4h/GU+PL4yviK+Or4qvja+Jr4+vi6+Mb4hvjm+Kb41viW+Pe18gMDtMfhMG4wGVymV2Cy+IS3VUuq8vmsrscLuaudjndNS6Xu9bldnlcXpfP5XcFXEEXOnLWsYtcIVfYxd11roi73hV1xVxxV8I5V9KVci1cS9fStXKPuNaujWvrHnWPusfcY+7xhF8Ld53cU66ze9p1cc+4Z9yzrpt7znV3z7se7gXX0/VySS7J9XF9XF/X1/V3/d1AN9ANcoPcYDfYDXFD3DA3zA13w90IN8KNdCPdaDfajXFj3Dg3zk1wE1yyS3aT3CQ32U12U9wUN81NczPcDDfLzXKz3Ww3181189w8t8AtcIvcIrfELXFL3VKX4lLcMrfMpbpUt8KtcKvcKrfGrXHr3Dq3wW1wm9wmt8VtcdvcNrfdbXc73U632+12e91et8/tc/vdfpfm0twBd8AddAfdIfeFO+y+dEfcV+6o+9odc9+44+5bd8KddKec16fd9+6MO+vOuR/cefeju+B+chedd8mxN2OTYm/FJsfejk2JTY1Ni02PzYjNjM2KvRObHZsTmxt7NzYvNj+2ILYwtii2OLYk9l5saez9WErsg9iy2Iex1Njy2IrYytiq2OqY9wW2R76QL+zj/jpfxF/vi/pivrgv4Z0v6Uv5G3xpf6Mv42/yZf3Nvpy/xZf3FXxF38Q39c18c9/Ct/QP+1b+Ed/at/Ft/aO+nX/Mt/eP+w7+Cd/RP+k7+ad8Z/+07+Kf8V39s/N/7bLv4V/wPX0vn+R7+z7+Rd/X9/P9/QA/0L/kB/mX/WD/ih/ih/ph/lU/3L/mR/jX/Ug/yo/2b/gxfqwf58f7CX6iT/Zv+kn+LT/Zv+2n+Kl+mp/uZ/iZfpZ/x8/2c/xc/66f5+f7BX6hX+QX+yX+Pb/Uv+9T/Ad+mf/Qp/rlfoVf6Vf51X6NX+vX+fV+g9/oN/nNfovf6rf5j/x2v8Pv9Lv8br/H7/Uf+33+E7/ff+rT/Gf+gP+LP+g/94f8F/6w/9If8V/5o/5rf8x/44/7b/0Jf9Kf8t/50/57f8af9ef8D/68/9Ff8D/5i/I3a0IIIYQQ/xR9mf29/87/qV+3dH0AINuOfIf/es5NuX8Z91P7OsYA4IleXRv8tjVokJSU9OuxqRqCwgsBIHYp/+fvH/g1Xg5t4THoAG2g9N+tr5+q+PN93383f/xmgESALL/lpD8eJcJfz3/jP5i/yXt8ufkXAhQtfCkn/US/xZfmL/MP5t/T7jLzZ/k8GaD1f8nJCpfiS/OXgkfgSejwuyOFEEIIIYQQQohf9FPnu13u+Tb9+Ty/uZSTGS7Fl3s+v4zKf8QahBBCCCGEEEII8d97+rnujz/coUObzv/Jg8x/jjL+BAMEgD9BGTL48w+u9G8mIYQQQgghxB/t0k3/la5ECCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYTIuP79bwhT//TBV3qNQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghxJX2fwIAAP//5g1V0w==")
truncate(&(0x7f0000000080)='./file2\x00', 0x6000)
fcntl$lock(0xffffffffffffffff, 0x26, 0x0)
close(0xffffffffffffffff)
openat(0xffffffffffffff9c, 0x0, 0x10b442, 0x0)
syz_mount_image$hfs(&(0x7f0000001600), &(0x7f0000000080)='./file0\x00', 0x1122000, &(0x7f00000000c0)=ANY=[@ANYBLOB='iocharset=iso8859-14,file_umask-01777777777777777777773,gid=', @ANYRESHEX, @ANYBLOB=',gid=', @ANYRESHEX, @ANYBLOB=',quiet,\x00'], 0x25, 0x304, &(0x7f0000000240)="$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")

11.064853243s ago: executing program 2 (id=1432):
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES16=r0, @ANYRESOCT=r1], 0x48)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000200)=0xd)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000}, 0x38)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, 0x0, 0x4000084)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000200)={<r4=>0x0, 0x1})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000d6ffffffbfa400000000000007040000f0feefffb7020000080000001821", @ANYRES32, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000300)='GPL\x00', 0x5, 0x1010, &(0x7f0000002500)=""/4112, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f00000002c0)={<r5=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02864c3, &(0x7f0000000380)={&(0x7f0000000340)=[0x0, r4, r5], 0x5, 0x3, 0x1})
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01864c1, &(0x7f0000000140)={r4})
syz_open_dev$tty1(0xc, 0x4, 0x1)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59)
connect$inet6(r6, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000040), 0x3)
syz_mount_image$minix(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x8010, &(0x7f0000000480)=ANY=[@ANYBLOB="00e611ed6229b237ad2a184a94283e2b34c24caf7280c18475708140abe763dfb52cdb0ba0cdc8c572346d0a832984b36248c4fa844eda0af4b1652605421a7821dcfde12aa77458d811a84538a156b05b0ec3eaf24a90ceb5b7463d9fd38b49d41fbfa868653605702abe43d9c2c30aed4da0b8cc18c6b369f086a965442c1217f19a67a534064b7236a6660000000000"], 0x2, 0x18a, &(0x7f00000001c0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)

11.050767044s ago: executing program 3 (id=1433):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='md0\x00', 0x4)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./img\x00', 0x42, 0x1b6)
ftruncate(r1, 0x2000000)
pwrite64(r1, &(0x7f0000000280)="6269746d04000000001000000500000000000000", 0x14, 0x1000)
r2 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x2)
ioctl$LOOP_SET_FD(r2, 0x4c00, r1)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0)
ioctl(r3, 0x40480923, &(0x7f0000000400)="000000000000000000000000000000000100000000040000010000000100000000000000010000000000000000000000010000000100"/72)
ioctl(r3, 0x40140921, &(0x7f0000000500)="000000000700000000000000000000000600")
r4 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write(r4, &(0x7f0000000640)='8\x00', 0x2)
close(r4)
ioctl(r3, 0x400c0930, &(0x7f0000000700))

9.803980562s ago: executing program 1 (id=1434):
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$UHID_INPUT(r0, 0x0, 0x0)
r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, &(0x7f0000000080)='0.0.0.0:0:/\x00', 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, 0x0, 0x0)
syz_emit_ethernet(0x7e, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r3, &(0x7f0000000000)='3', 0x4e)
socket$inet(0x2, 0xa, 0x2)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)

8.933468282s ago: executing program 2 (id=1437):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x20000045, 0x0, 0x0)
setsockopt$sock_int(r3, 0x1, 0x12, 0x0, 0x0)
mknodat$loop(0xffffffffffffff9c, 0x0, 0x6000, 0x1)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x486180, 0x0)
fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f00000000c0)='\x8d@}/\x00', 0x0, r4)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x181002, 0x0)
ioctl$TIOCMBIC(r5, 0x5417, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88040, 0x12)
fcntl$setlease(r6, 0x400, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2040, 0x0)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000000)={[{@nolazytime}, {@resuid}, {@jqfmt_vfsv1}, {@errors_continue}, {@nobh}, {@usrjquota, 0x2e}], [], 0x2e}, 0x1, 0x472, &(0x7f0000000ac0)="$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")

8.12538514s ago: executing program 3 (id=1438):
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x143182)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x5338}, {0x0}], 0x10000000000000f0)
mkdir(0x0, 0x1ff)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000)
openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x8a2b81)
r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, 0x0, 0x24000840)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={0x0}, 0x1, 0x0, 0x0, 0xb0}, 0x0)
openat$cgroup_procs(r1, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE_SWAP_PAGES(0xffffffffffffffff, 0x3309)
syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2004010, &(0x7f00000000c0)=ANY=[], 0x3, 0x204, &(0x7f0000000300)="$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")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020660b, &(0x7f0000000100)={0x4, 0xfffffffffffffffd, 0x1, 0x7fff})

8.002276526s ago: executing program 1 (id=1439):
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {0x0, [0x5f]}}, 0x0, 0x1b, 0x0, 0xa}, 0x28)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$UHID_INPUT(r2, &(0x7f0000001980)={0x9, {"a2e3ad214fc752f91b5d090936f70e0dd038e7ff7fc6e5539b324c078b089b3934076d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b35310d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e01000000138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12d3099dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f6dc7bcbf2a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509301815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827466cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d951061ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033095563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db87195358bfee2916580dacae008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2df086dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36ffffffff00000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817b97c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d00000f4ff000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1061}}, 0x1006)

7.186552154s ago: executing program 5 (id=1441):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
syz_genetlink_get_family_id$gtp(&(0x7f0000000940), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x24040810)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
ptrace$peekuser(0x3, r0, 0x1)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10)
listen(r2, 0x9)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
sendto$inet(r3, &(0x7f00000000c0)="ab", 0xfffd, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10)
readv(r1, &(0x7f0000000b40)=[{&(0x7f0000000cc0)=""/154, 0xfdef}, {0x0}, {0x0}], 0x3)
sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000140011f225bd7000fddbcf250284", @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x40)

6.194072821s ago: executing program 5 (id=1442):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002b80)=@delchain={0x264, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x238, 0x2, [@TCA_BPF_ACT={0x234, 0x1, [@m_xt={0x144, 0x5, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x2a, 0x6, {0x7, 'raw\x00', 0x7, 0x100}}]}, {0xed, 0x6, "a5fd64840366fd7ad44f3f053221ded9ced495590e2bc8690a2765e56ded8425cb3eb0e04bbcfec50e639bf373167e617b24eccd260f28bb850873b1e2154b158987d6e585e10ffeaba32641bae47de041e1169d8e4a65b8ce3633a4469c93c5228320c572237d92a9ae6bbc2d2bd3a2d1e27de283017ecf9fca6b2cd8a119dee59702830717b694625f60f5c81f688775c5e292f76a0ffa39e1d2cabd639d1c111c01e0d2f9faa220154db33399242bca9f4fac65c74cb6264c28ac7a50037564c7b417fb61d617d212ab3243c30e0e82d9a12651b74553d539b991a302489af94626e5aac41c53b2"}, {0xc, 0x7, {0x1, 0xeb0757422c733451}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_bpf={0xbc, 0x8, 0x0, 0x0, {{0x8}, {0x18, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}, @TCA_ACT_BPF_OPS={0x4}]}, {0x7d, 0x6, "5d3aee85a6264cff4a2163adaec321e008985cfa435b8922eeb16f1932265618158a3fe72c442a68b182e8f673f9251a03dc831c5947be17ca906c3dcb99adb55bc5f0ad8886f235f45d7e29bb727715f2e7a3200ac63eb79f7a023835874514b60b0177c40370157c0c21b37875e7e4a2e75b3cc54be7d719"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_police={0x30, 0x9, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x264}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

5.918949603s ago: executing program 5 (id=1443):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, 0x0, &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/ptp/ptp0/n_vclocks\x00', 0x2, 0x0)
write(r0, &(0x7f0000000200)='5\n\x00', 0x2)

5.56038311s ago: executing program 1 (id=1444):
syz_mount_image$minix(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280), 0x1, 0x1d4, &(0x7f00000002c0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10)
r0 = io_uring_setup(0xc01, &(0x7f0000000000)={0x0, 0x1e78, 0x40, 0x2, 0x207})
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r1 = open(&(0x7f0000000140)='.\x00', 0x18000, 0x112)
getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8)
getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8)
io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f00000003c0), 0x0)
syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000580)='./bus\x00', 0x8, &(0x7f00000005c0)=ANY=[], 0x1, 0x1de, &(0x7f00000006c0)="$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")
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000140)='./file2\x00', 0x80, &(0x7f00000018c0)=ANY=[], 0x7d, 0x1501, &(0x7f00000002c0)="$eJzs3Am4T1X3OPC19t6H62b4JpnP2uvwTYZNkoSSZEiSJCRzQpIkSZK4ZEpCEjLeJHPInG665nnInHTzSpIkJCTZ/+c2/P16h5/3fX/9/vq/d32e5zz2cs7aZ+27nu89w/Pc79ddh1VvVKNKfWaGf4f+bYC//JMEAAkAMBAAcgBAAABlc5bNmb4/i8akf+sk4n9JgxlXugJxJUn/Mzbpf8Ym/c/YpP8Zm/Q/Y5P+Z2zS/4xN+i9EhjYr39WyZdxN3v//f079T5Ll+p8h4D/aIf3/T6P/paOl/xmb9D9jk/5nbNL/jCy40gWIK0w+/xmb9F+IDO0Pf6e84dyVfqct27+wCSGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQ/w+c85cYAPhtfKXrEkIIIYQQQgghxB/Hv3ulKxBCCCGEEEIIIcT/PgQFGgwEkAkyQwJkgUS4CrJCNsgOOSAGV0NOuAZywbWQG/JAXsgH+aEAFIQQCCwwRFAICkMcroMicD0UhWJQHEqAg5JQCm6A0nAjlIGboCzcDOXgFigPFX4+Z7rboTLcAVXgTqgK1aA61IC7oCbcDbXgHqgN90IduA/qwv1QDx6A+tAAGsKD0AgegsbQBJpCM2gOLaDlZfKTc/y9/OehB7wAPaEXJEFv6AMvQl/oB/1hAAyEl2AQvAyD4RUYAkNhGLwKw+E1GAGvw0gYBaPhDRgDY2EcjIcJMBGS4U2YBG/BZHj7oWwwFabBdJgBM2EWvAOzYQ7MhXdhHsyHBZCcZREshiXwHiyF9yEFPoBl8CGkwnJYASthFayGNbAW1sF62AAbYRNshi2wFbbBR7AddsBO2AW7YQ/shY9hH3wC++FTSMPP/sX8s7/Ph24ICKhQoUGDmTATJmACJmIiZsWsmB2zYwxjmBNzYi7MhbkxN+bFvJiE+bEgFkRCQkbGQlgI4xjHIlgEi2JRLI7F0aHDUlgKS+ONWAbLYFksi+WwHJbHClgBb8VbsRJWwspYGatgFayKVbE6Vse78C68G2thLayNtbEO1sG6WBfrYT2sj/WxITbERtgIG2NjbIpNsTk2x5bYElthK2yNrbEttsV22A7bY3vsgB2wI3bETtgJO2Nn7IJdsCt2xW74HD6Hz+Pz+AK+gL2wquqNfbAP9sW+2B8H4AB8CQfhy/gyvoJDcCgOw1fxVXwNR+AZHImjcDSOxkpqLI7D8chqIiZjMmaGSTgZJ+MUnIpTcTrOwJk4C2fhbJyDc/BdnIfzcT4uxIW4GJfgElyK72MKpuAyPIupuBxX4EpchatxFa7FdbgWN+BG3ICbcTNuxa34EX6EO3AH7sJduAf34Mf4MX6Cn+AQTMM0PIAH8CAexEN4CA/jYTyCR/AoHsVjeAyP43E8gSfxFJ7E03gaz+BZPAcA5/E8XsALeBEvpn/4VTqjjMqkMqkElaASVaLKqrKq7Cq7iqmYyqlyqlwql8qtcqu8Kq/Kr/KrgqqgIkWKVaQKqUIqruKqiCqiiqqiqrgqrpxyqpQqpUqr0qqMKqPKqptVOXWLKq8qqDbuVnWrqqTausrqDlVFVVFVVTVVXdVQNVRNVVPVUrVUbVVb1VF1VF11v6qnemN/bKDSO9NIDcXGahg2Vc1Uc9VCvYYPq1ZqBLZWbVRb9agahSOxvWrlOqgnVEc1Djupp9R4fFp1UROxq3pWdVPPqe7qedVDtXY9VS81BXurPmo69lX9VH81QM3Gaiq9Y9XVK+r5zEPVMPWqWoyvqRHqdTVSjVKj1RtqjBqrxqnxaoKaqJLVm2qSektNVm+rKWqqmqamqxlqppql3lGz1Rw1V72r5qn5aoFaqBapxWqJek8tVe+rFPWBWqY+VKlquVqhVqpVarVao9aqdWq92qA2qk1qs9qitqpt6iO1Xe1QO9UutVvtUXvVx2qf+kTtV5+qNPWZOqD+og6qz9Uh9YU6rL5UR9RX6qj6Wh1T36jj6lt1Qp1Up9R36rT6Xp1RZ9U59YM6r35UF9RP6qLyCjRqpbU2OtCZdGadoLPoRH2Vzqqz6ew6h47pq3VOfY3Opa/VuXUendfk0/l1AV1Qh5q01awjXUgX1nF9nS6ir9dFdTFdXJfQTpfUpfQNurS+UZfRN+my+mZdTt+iy+sKuqIHfZuupG/XlfUduoq+U1fV1XR1XUPfpWvqu3UtfY+ure/VdfR9uq6+X9fTD+j6uoFuqB/UjfRDurFuopvqZrq5bqFb6od1K/2Ibq3b6Lb6Ud1OP6bb68d1B/2E7qif1J30U7qzflp30c/orvpZ3U0/p7vrn/RF7XVP3Usn6d66j35R99X9dH89QA/UL+lB+mU9WL+ih+iheph+VQ/Xr+kR+nU9Uo/So/Ubeoweq8fp8XqCnqiT9Zt6kn5LT9Zv6yl6qp6mp+sZeqbu/+tMc/+J/Lf+Tv7gn8++VW/TH+nteofeqXfp3XqP3qv36n16n96v9+s0naYP6AP6oD6oD+lD+rA+rI/oI/qoPqqP6WP6uD6uT+iT+gf9nT6tv9dn9Fl9Vv+gz+vz+sKvPwMwaJTRxpjAZDKZTYLJYhLNVSaryWaymxwmZq42Oc01Jpe51uQ2eUxek8/kNwVMQRMaMtawiUwhU9jEzXWmiLneFDXFTHFTwjhT0pQyN/yP8y9XX0vT0rQyrUxr09q0NW1NO9POtDftTQfTwXQ0HU0n08l0Np1NF9PFdDVdTTfTzXQ33U0P08P0ND1NkkkyfcyLpq/pZ/qbAWageckMMoPMYDPYDDFDzDAzzAw3w80IM8KMNCPNaDPajDFjzDgzzkwwE0yyz2EmmUlmsplsppgpZtrAHGaGmWFmmVlmtplt5pq5Zp6ZZxaYBWaRWWSWmCVmqVlqUkyKWWaWmVSz3Cw3K81Ks9qsNmvNWrPerDcbzUaz2Ww2qWab2Wa2m+1mp9lpdpvdZq/Za/aZfWa/2W/STJo5YA6Yg+agOWQOmcPmsDlijpij5qg5Zo6Z4+a4OWFOmFPmlDltTpsz5ow5Z86Z8+a8uWAumIvmYvptX6ACFZjABJmCTEFCkBAkBolB1iBrkD3IHsSCWJAzyBnkCq4Ncgd5grxBviB/UCAoGIQBBTbgIAoKBYWDeHBdUCS4PigaFAuKByUCF5QMSgU3BKWDG4MywU1B2eDmoFxwS1A+qBBUDG4NbgsqBbcHlYM7girBnUHVoFpQPagR3BXUDO4OagX3BLWDe4M6wX1B3eD+oF7wQFA/aBA0DB4MGgUPBY2DJkHToFnQPGgRtPxD5/f+TJ5HXM+wV5gU9g77hC+GfcN+Yf9wQDgwfCkcFL4cDg5fCYeEQ8Nh4avh8PC1cET4ejgyHBWODt8Ix4Rjw3Hh+HBCODFMDt8MJ4VvhZPDt8Mp4dRwWjA9nBHODGeF74Szwznh3PDdcF44P1wQLgwXhYtD/OWWGFLCD8Jl4Ydharg8XBGuDFeFq8M14dpwXbg+3BBuDDeFm8sO+uXQcHu4I9wZ7gp3h3vCveHH4b7wk3B/+GmYFn4WHgj/Eh4MPw8PhV+Eh8MvwyPhV+HR8OvwWPhNeDz8NjwRngxPhd+Fp8PvwzPh2fBc+EN4PvwxvBD+FF4MffrNffrlnQwZykSZKIESKJESKStlpeyUnWIUo5yUk3JRLspNuSkv5aX8lJ8KUkFKx8RUiApRnOJUhIpQUSpKxak4OXJUikpRaSpNZagMlaWyVI7KUXkqTxWpIt1Gt9HtdDvdQXfQnXQnVaNqVINqUE2qSbWoFtWm2lSH6lBdqkv1qB7Vp/rUkBpSI2pEjakxNaWm1JyaU0tqSa2oFbWm1tSW2lI7akftqT11oA7UkTpSJ+pEnakzdaEu1JW6UjfqRt2pO/WgHtSTelISJVEf6kN9qS/1p/40kAbSIBpEg2kwDaEhNIyG0XAaTiNoBI2kUTSa3qAxNJbG0XiaQBMpmZJpEk2iyTSZptAUmkbTaAbNoFk0i2bTbJpLc2kezaMFtIAW0SJaQktoKS2lFEqhZbSMUimVVtAKWkWraA2toXW0jjbQBtpEm2gLbaFttI2203baSTtpN+2mvbSX9tE+2k/7KY3S6AAdoIN0kA7RITpMh+kIHaGjdJSO0TE6TsfpBJ2gU3SKTtNpOkNn6Bydo/P0I12gn+gieUqwWWyivcpmtdlsdpvD/nWc1+az+W0BW9CGNrfN87uYrLVFbTFb3Jawzpa0pewNfxOXtxVsRXurvc1Wsrfbyra8zQL/Na5p77a17D22tr3X1rB3/S6uY++zde1Dtp5tYuvbZrahbWEb2YdsY9vENrXNbHPbwrazj9n29nHbwT5hO9on/yZeat+36+x6u8FutPvsJ/ac/cEetV/b8/ZH29P2sgPtS3aQfdkOtq/YIXbo72MAO9q+YcfYsXacHW8n2Il/E0+z0+0MO9POsu/Y2XbO38RL7Ht2nk2xC+xCu8gu/jlOrynFfmCX2Q9tql1uV9iVdpVdbdfYtf+31pV2s91it9q99mO73e6wO+0uu9vu+TlOX8d++6lNs5/ZI/Yre9B+bg/ZY/aw/fLnOH19x+w39rj91p6wJ+0p+509bb+3Z+zZn9efvvbv7E/2ovUWGFmxZsMBZ+LMnMBZOJGv4qycjbNzDo7x1ZyTr+FcfC3n5jycl/Nxfi7ABTlkYsvMERfiwhzn67gIX89FuRgX5xLsuCSX4hu4NN/IZfgmLss3czm+hctzBa7It/JtXIlv58p8B1fhO7kqV+PqXIPv4pp8N9fie7g238t1+D6uy/dzPX6A63MDbsgPciN+iBtzE27Kzbg5t+CW/DC34ke4Nbfhtvwot+PHuD0/zh34Ce7IT3Infoo789PchZ/hrvwsd+PnuDs/zz34Be7JvTiJe3MffpH7cj/uzwN4IL/Eg/hlHsyv8BAeysP4VR7Or/EIfp1H8igezW/wGB7L43g8T+CJnMxv8iR+iyfz2zyFp/I0ns4zeCbP4nd4Ns/hufwuz+P5vIAX8iJezEv4PV7K73MKf8DL+ENO5eW8glfyKl7Na3gtr+P1vIE38ibezFt4K2/jj3g77+CdvIt38x7eyx/zPv6E9/OnnMaf8QH+Cx/kz/kQf8GH+Us+wl/xUf6aj/E3fJy/5RN8kk/xd3yav+czfJbP8Q98nn/kC/wTX2TPEGGkIh2ZKIgyRZmjhChLlBhdFWWNskXZoxxRLLo6yhldE+WKro1yR3mivFG+KH9UICoYhRFFNuIoigpFhaN4dF1UJLo+KhoVi4pHJSIXlYxKRTdEpaMbozLRTVHZ6OaoXHRLVD6qEFWMbo1uiypFt0eVozuiKtGdUdWoWlQ9qhHdFdWM7o5qRfdEtaN7ozLRfVHd6P6oXvRAVD9qEDWMHowaRQ9FjaMmUdOoWdQ8ahG1jB6OWkWPRK2jNlHb6NGoXfRY1D56POoQPRF1jJ68tL9Y8MvV9K/2J0W9I/3rG7J79KL44viS+HvxpfH34ynxD+LL4h/GU+PL4yviK+Or4qvja+Jr4+vi6+Mb4hvjm+Kb41viW+Pe18gMDtMfhMG4wGVymV2Cy+IS3VUuq8vmsrscLuaudjndNS6Xu9bldnlcXpfP5XcFXEEXOnLWsYtcIVfYxd11roi73hV1xVxxV8I5V9KVci1cS9fStXKPuNaujWvrHnWPusfcY+7xhF8Ld53cU66ze9p1cc+4Z9yzrpt7znV3z7se7gXX0/VySS7J9XF9XF/X1/V3/d1AN9ANcoPcYDfYDXFD3DA3zA13w90IN8KNdCPdaDfajXFj3Dg3zk1wE1yyS3aT3CQ32U12U9wUN81NczPcDDfLzXKz3Ww3181189w8t8AtcIvcIrfELXFL3VKX4lLcMrfMpbpUt8KtcKvcKrfGrXHr3Dq3wW1wm9wmt8VtcdvcNrfdbXc73U632+12e91et8/tc/vdfpfm0twBd8AddAfdIfeFO+y+dEfcV+6o+9odc9+44+5bd8KddKec16fd9+6MO+vOuR/cefeju+B+chedd8mxN2OTYm/FJsfejk2JTY1Ni02PzYjNjM2KvRObHZsTmxt7NzYvNj+2ILYwtii2OLYk9l5saez9WErsg9iy2Iex1Njy2IrYytiq2OqY9wW2R76QL+zj/jpfxF/vi/pivrgv4Z0v6Uv5G3xpf6Mv42/yZf3Nvpy/xZf3FXxF38Q39c18c9/Ct/QP+1b+Ed/at/Ft/aO+nX/Mt/eP+w7+Cd/RP+k7+ad8Z/+07+Kf8V39s/N/7bLv4V/wPX0vn+R7+z7+Rd/X9/P9/QA/0L/kB/mX/WD/ih/ih/ph/lU/3L/mR/jX/Ug/yo/2b/gxfqwf58f7CX6iT/Zv+kn+LT/Zv+2n+Kl+mp/uZ/iZfpZ/x8/2c/xc/66f5+f7BX6hX+QX+yX+Pb/Uv+9T/Ad+mf/Qp/rlfoVf6Vf51X6NX+vX+fV+g9/oN/nNfovf6rf5j/x2v8Pv9Lv8br/H7/Uf+33+E7/ff+rT/Gf+gP+LP+g/94f8F/6w/9If8V/5o/5rf8x/44/7b/0Jf9Kf8t/50/57f8af9ef8D/68/9Ff8D/5i/I3a0IIIYQQ/xR9mf29/87/qV+3dH0AINuOfIf/es5NuX8Z91P7OsYA4IleXRv8tjVokJSU9OuxqRqCwgsBIHYp/+fvH/g1Xg5t4THoAG2g9N+tr5+q+PN93383f/xmgESALL/lpD8eJcJfz3/jP5i/yXt8ufkXAhQtfCkn/US/xZfmL/MP5t/T7jLzZ/k8GaD1f8nJCpfiS/OXgkfgSejwuyOFEEIIIYQQQohf9FPnu13u+Tb9+Ty/uZSTGS7Fl3s+v4zKf8QahBBCCCGEEEII8d97+rnujz/coUObzv/Jg8x/jjL+BAMEgD9BGTL48w+u9G8mIYQQQgghxB/t0k3/la5ECCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYTIuP79bwhT//TBV3qNQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghxJX2fwIAAP//5g1V0w==")
truncate(&(0x7f0000000080)='./file2\x00', 0x6000)
fcntl$lock(0xffffffffffffffff, 0x26, 0x0)
close(0xffffffffffffffff)
openat(0xffffffffffffff9c, 0x0, 0x10b442, 0x0)
syz_mount_image$hfs(&(0x7f0000001600), &(0x7f0000000080)='./file0\x00', 0x1122000, &(0x7f00000000c0)=ANY=[@ANYBLOB='iocharset=iso8859-14,file_umask-01777777777777777777773,gid=', @ANYRESHEX, @ANYBLOB=',gid=', @ANYRESHEX, @ANYBLOB=',quiet,\x00'], 0x25, 0x304, &(0x7f0000000240)="$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")

5.308699082s ago: executing program 4 (id=1445):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6)
r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8042, 0x0)
write$P9_RSTATu(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="390200000200000005f8000000000000000000000000000000000000000000000000000000000300000000000000000000001b00046e6f6465767b65766f6f7e0539c6000500", @ANYRES32=0x0, @ANYRES32=0x0], 0x239)

5.308497082s ago: executing program 5 (id=1446):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040))
setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8)

5.260599784s ago: executing program 2 (id=1447):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000001c0)={<r1=>0xffffffffffffffff}, 0x111, 0x3}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0xffffffff, @loopback, 0xc}, {0xa, 0x4e1e, 0x800000d, @local}, r1, 0x800}}, 0x48)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0)
writev(r0, 0x0, 0x0)
setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f00000002c0)=0xc5c4, 0x4)
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0)
write$sysctl(r3, &(0x7f00000000c0)='2\x00', 0x2)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0xd, r4}, 0x38)

5.251039585s ago: executing program 3 (id=1448):
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x100, 0x103)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}})
read$FUSE(r0, &(0x7f0000004280)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x2b, 0xffffffde, 0x318145a8, 0x0, 0xfffe, 0x2, 0xfffffff6, 0x0, 0x0, 0x8, 0x100}}, 0x50)
close(r0)
chown(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)

3.956842745s ago: executing program 4 (id=1449):
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$UHID_INPUT(r0, 0x0, 0x0)
r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, &(0x7f0000000080)='0.0.0.0:0:/\x00', 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, 0x0, 0x0)
syz_emit_ethernet(0x7e, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r3, &(0x7f0000000000)='3', 0x4e)
socket$inet(0x2, 0xa, 0x2)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)

3.934377716s ago: executing program 5 (id=1450):
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x1210080, &(0x7f0000000280)={[{@umask={'umask', 0x3d, 0xeef}}, {}, {@type={'type', 0x3d, "c3da0558"}}, {@creator={'creator', 0x3d, "0de07c34"}}, {@part={'part', 0x3d, 0x3ff}}, {}, {@dir_umask}, {}, {}, {@iocharset={'iocharset', 0x3d, 'cp865'}}]}, 0x4, 0x31d, &(0x7f0000001200)="$eJzs3T1rFE8cB/Dv7D3/E/Jfk0jAMhqwCkksFBuDBBvfgEUInskFwq0RNIIGxNNaxE4QLO2sRd+CNuIb0CqFWGkTLFyZp3247O7dXrzbhHw/kPN2dx5+s7NzO3MhLojoxLq68vXNhT35IyoASgAuAw6AOlAGcBoz9fvbO1s7Xmsjq6CSyiF/BHROcSDN+nYrKavMp3IYrtwqYzy6j4bD933/W89UP0cSCxVH6LF/gAPUzOhUx+sjj2w4OrpdJ0ukh8U+9vEAE0WGQ0RExTP3f8fcJcbN/N1xgDkzDz/u9//Y/Ga/uDiOhOD+7+htX8jz8786FK731BJO9r5jV4lJZSVeE354uqvQV1asA0SvVaWKxWlsbnmt+Y4q4CmuGJFk0+p1A7YhSlq0Vf3PbMLaNENW27ONqTZUZBuWUuKfyl3jh+94Gd9jT+zapz5iEh/FZ7EmXLzCRjD/K/tCnhx1ftyuntLxL/RopatTxVoZrt9PqUrO2B54/zZsZSPtvNZRkrEkkaWI7vm7a+N8UU3PhUnEv1bQrVtMb53KNZWYaynY/p2Ya7o7V2Oz4rXm1+94mV+l/DOJKzrxXNwQs/iBd1iJzP8dmXoO6SMzNsqFSmmujMz2lFXKlH6MUQP4dq6RScq1xI7O9gy3cAkT9x7utpue17o7jDe1XLnsUBlePLne6AvRXI5yjxnVNg2wuttudiJ7Dl3pH9/3Ew+VMYomV1RTL74Om7zbboqO3jxcFegEBdpDy+mJASwDMHvsJ8IgtT8OctXCAvvK/guA3pN8QdqoRnBB2qpih0qo9TVSGgNUev1Ru+kN9lFEx0vY6ZhZLToYKoKcdwm9/ousVxbUp458cTNWI36vwiMlLqasgCbV63/9reCCYlPniWP2TY8119nzwLmuGh3YGp90F+uaOHEUfyuZ/1cZYgVfcJPf/xMRERERERERERERERERERERERERHTd5/xphkD8niNe4dwL/4w0iIiIiIiIiIiIiIiIiIiIiIiIiIiIiosOJPP8XKKknxlQLf/5vqY/n/9rnUhDRwP4GAAD//wAOX1k=")
syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0)
close(r0)

3.913987177s ago: executing program 1 (id=1451):
syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000240)='./file0\x00', 0x10, &(0x7f0000000000)={[{@noquota}]}, 0x45, 0x48d, &(0x7f0000000280)="$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")
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0xa40, 0x0)
write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380), 0x4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040004)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'wlan0\x00', &(0x7f0000000000)=@ethtool_stats={0x11}})
r4 = socket(0x11, 0x800000003, 0x1000)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b29, &(0x7f0000000000)={'wlan0\x00'})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b28, &(0x7f0000000000)={'wlan1\x00'})
write(r0, &(0x7f0000001040)="f71e47ae39c492890a8a1496ca2925bcf88fb47f179d10159213319fb34a970673f6d37747b4c05c690c775146adf004ea9d47b7", 0x34)

3.899227638s ago: executing program 3 (id=1452):
syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010c001ddf8208c007121522300000000109021b0001000000010904010001faf48d00090582"], 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
write$char_usb(r0, &(0x7f0000001300)="92", 0x2)
syz_open_dev$char_usb(0xc, 0xb4, 0x10000)

3.409455311s ago: executing program 4 (id=1453):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_DEL(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8030}, 0x50)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}})
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x3c, r5, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4044851}, 0x0)
sendmsg$key(r2, 0x0, 0x0)
bind$inet(r1, 0x0, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, 0x0)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, 0x0, 0x4040000)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(0x0, r6)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan0\x00'})
sendmsg$NL802154_CMD_NEW_SEC_DEV(r6, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040040}, 0x20040)
keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0)
vmsplice(r2, 0x0, 0x0, 0xc)

2.833253848s ago: executing program 2 (id=1454):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nvmet\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x2, 0x0)
write(r0, &(0x7f0000000200)='1', 0x1)

1.480863031s ago: executing program 5 (id=1455):
openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000100)=0x4)
syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904008100ffffff02"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23})
r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
writev(r0, &(0x7f0000000180)=[{&(0x7f0000000040)="e2", 0x1}], 0x1)

1.361276286s ago: executing program 4 (id=1456):
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0500000040000000060000000800000000000000", @ANYRES32, @ANYRES32], 0x48)
mmap$IORING_OFF_SQ_RING(0x0, 0xbfffec, 0xb, 0x20010, 0xffffffffffffffff, 0x0)
capset(0x0, 0x0)
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8a241, 0x0)
ioctl$COMEDI_INSNLIST(r0, 0x8010640b, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xf, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38}, 0x94)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
syz_emit_ethernet(0x42, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800480000340000000000069078ac141400ac1e", @ANYRES64, @ANYRES32=0x41424344, @ANYBLOB="5000000041ca74169b1edc90780000"], 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0)
r1 = syz_open_dev$vim2m(0x0, 0x8, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000040)={0x1, @raw_data="314f7e6bd786b7a883a0e2464f045aa85b95b2ef5c6b04d64d8dbf2477ef378e98503b2e25894c20fec6597efdbf10d67e01b26e16cee7160d8c8ac4a46a070d875ddb6fe7e23a762443e4cb4033e7d5f45fe92672f3662eb5c7692c9d3e853cb4e33b30541de2a24af27b389b9bac421643b8edf80b53478bc81e32841d48190b025e3a64fc158356f00414a442eff9997e0a541d8ca69e0bf8324a49abd989fc53729368592c6d1e2bc61484b29815da9622f82b05dcfca7836af3ad8959bada528ba269264748"})
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x1000002d, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xe11, 0xffffffff}, 0x0)
mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./my_sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0)
write(r2, &(0x7f0000000800)='1', 0x1)

1.250235752s ago: executing program 4 (id=1457):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x20000045, 0x0, 0x0)
setsockopt$sock_int(r3, 0x1, 0x12, 0x0, 0x0)
mknodat$loop(0xffffffffffffff9c, 0x0, 0x6000, 0x1)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x486180, 0x0)
fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f00000000c0)='\x8d@}/\x00', 0x0, r4)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x181002, 0x0)
ioctl$TIOCMBIC(r5, 0x5417, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88040, 0x12)
fcntl$setlease(r6, 0x400, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2040, 0x0)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000000)={[{@nolazytime}, {@resuid}, {@jqfmt_vfsv1}, {@errors_continue}, {@nobh}, {@usrjquota, 0x2e}], [], 0x2e}, 0x1, 0x472, &(0x7f0000000ac0)="$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")

1.110201518s ago: executing program 2 (id=1458):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, 0x0, &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/ptp/ptp0/n_vclocks\x00', 0x2, 0x0)
write(r0, &(0x7f0000000200)='5\n\x00', 0x2)

295.729716ms ago: executing program 1 (id=1459):
r0 = getpid()
syz_usb_connect(0x5, 0x36, 0x0, 0x0)
syz_open_dev$I2C(&(0x7f0000000080), 0x1, 0x2a100)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpid()
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = syz_open_dev$sndctrl(0x0, 0x0, 0x801)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f00000003c0)=0x1)
r4 = syz_pidfd_open(r0, 0x0)
setns(r4, 0x24020000)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xb, 0x0, 0x100000}, 0x20)

281.931527ms ago: executing program 3 (id=1460):
r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2)
ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000080)={0x1, 0x4, 0x7, 0x20, 0x1, 0x0, 0x4})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/target/core/rd_mcp_0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/target/core/rd_mcp_0/ramdisk0\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/target/core/rd_mcp_0/ramdisk0/control\x00', 0x1, 0x0)
close(r1)
r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/target/usb_gadget\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/target/usb_gadget/naa.6001405c935d7912\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1/nexus\x00', 0x1, 0x0)
write(r3, &(0x7f0000000400)='naa.6001405c935d7912\n', 0x16)

167.976263ms ago: executing program 2 (id=1461):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6)
r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8042, 0x0)
write$P9_RSTATu(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="390200000200000005f8000000000000000000000000000000000000000000000000000000000300000000000000000000001b00046e6f6465767b65766f6f7e0539c6000500", @ANYRES32=0x0, @ANYRES32=0x0], 0x239)

0s ago: executing program 4 (id=1462):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040))
setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8)

kernel console output (not intermixed with test programs):

s2: fsid=syz:syz.0: first mount done, others may mount
[  367.548694][ T7312] overlayfs: failed to resolve './bus': -2
[  368.482860][ T7315] loop4: detected capacity change from 0 to 512
[  368.503817][ T7315] EXT4-fs (loop4): Ignoring removed nobh option
[  369.074747][ T7315] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13
[  369.092069][ T7315] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.690: attempt to clear invalid blocks 1 len 1
[  369.106511][ T7315] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  369.122143][ T7315] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.690: invalid indirect mapped block 1819239214 (level 0)
[  369.136581][ T7315] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.690: invalid indirect mapped block 1819239214 (level 1)
[  369.153399][ T7315] EXT4-fs (loop4): 1 truncate cleaned up
[  369.159094][ T7315] EXT4-fs (loop4): mounted filesystem without journal. Opts: nolazytime,resuid=0x0000000000000000,jqfmt=vfsv1,errors=continue,nobh,usrjquota=..,errors=continue. Quota mode: writeback.
[  369.804501][ T7322] loop2: detected capacity change from 0 to 32768
[  369.882645][ T7322] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.694 (7322)
[  369.960511][ T7322] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  369.969585][ T7322] BTRFS info (device loop2): setting nodatasum
[  369.975906][ T7322] BTRFS info (device loop2): force zlib compression, level 3
[  369.983385][ T7322] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8)
[  369.992646][ T7322] BTRFS info (device loop2): use lzo compression, level 0
[  370.000373][ T7322] BTRFS info (device loop2): turning on flush-on-commit
[  370.007551][ T7322] BTRFS info (device loop2): enabling auto defrag
[  370.014166][ T7322] BTRFS info (device loop2): max_inline at 4096
[  370.020523][ T7322] BTRFS info (device loop2): using free space tree
[  370.027172][ T7322] BTRFS info (device loop2): has skinny extents
[  370.631426][ T7322] BTRFS info (device loop2): enabling ssd optimizations
[  371.864362][ T7363] netlink: 44 bytes leftover after parsing attributes in process `syz.3.701'.
[  372.959846][ T7361] loop3: detected capacity change from 0 to 64
[  373.045938][ T7374] nr0: tun_chr_ioctl cmd 1074025677
[  373.051566][ T7374] nr0: linktype set to 0
[  374.597046][ T7389] loop4: detected capacity change from 0 to 512
[  374.765899][ T7369] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  375.046036][ T7369] usb 6-1: Using ep0 maxpacket: 8
[  375.166532][ T7369] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  375.269537][ T7389] EXT4-fs (loop4): Ignoring removed nobh option
[  375.303983][ T7369] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  375.344901][ T7394] overlayfs: failed to resolve './bus': -2
[  375.493779][ T7389] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13
[  375.503785][ T7389] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.707: attempt to clear invalid blocks 1 len 1
[  375.520568][ T7389] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  375.535216][ T7389] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.707: invalid indirect mapped block 1819239214 (level 0)
[  375.559117][ T7389] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.707: invalid indirect mapped block 1819239214 (level 1)
[  375.577730][ T7389] EXT4-fs (loop4): 1 truncate cleaned up
[  375.583409][ T7389] EXT4-fs (loop4): mounted filesystem without journal. Opts: nolazytime,resuid=0x0000000000000000,jqfmt=vfsv1,errors=continue,nobh,usrjquota=..,errors=continue. Quota mode: writeback.
[  375.847479][ T7369] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  375.929659][ T7369] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  376.429709][ T7400] netlink: 44 bytes leftover after parsing attributes in process `syz.2.708'.
[  376.479635][ T7400] loop2: detected capacity change from 0 to 64
[  376.753345][ T7402] loop1: detected capacity change from 0 to 164
[  376.793167][ T7369] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  376.802723][ T7369] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  377.066036][ T7369] usb 6-1: GET_CAPABILITIES returned 0
[  377.075948][ T7369] usbtmc 6-1:16.0: can't read capabilities
[  377.165845][ T3517] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  377.785891][ T3517] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  377.832864][ T3517] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  377.872380][ T3517] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  377.899781][ T3517] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  378.087622][ T7404] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  378.101727][ T4910] usb 6-1: USB disconnect, device number 2
[  378.258700][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[  378.265130][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[  379.655889][ T7421] nr0: tun_chr_ioctl cmd 1074025677
[  379.665435][ T7421] nr0: linktype set to 0
[  380.150981][ T7438] overlayfs: failed to resolve './bus': -2
[  380.317416][ T7435] loop2: detected capacity change from 0 to 512
[  381.128083][ T7369] usb 2-1: USB disconnect, device number 5
[  381.417169][ T7435] EXT4-fs (loop2): Ignoring removed nobh option
[  381.592756][ T7435] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13
[  382.541298][ T7447] netlink: 44 bytes leftover after parsing attributes in process `syz.3.723'.
[  382.629680][ T7435] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.719: attempt to clear invalid blocks 1 len 1
[  382.711996][ T7435] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  382.838204][ T7459] netlink: 8 bytes leftover after parsing attributes in process `syz.1.725'.
[  382.863588][ T7435] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.719: invalid indirect mapped block 1819239214 (level 0)
[  383.815799][ T7435] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.719: invalid indirect mapped block 1819239214 (level 1)
[  383.994724][ T7435] EXT4-fs (loop2): 1 truncate cleaned up
[  384.016002][ T7435] EXT4-fs (loop2): mounted filesystem without journal. Opts: nolazytime,resuid=0x0000000000000000,jqfmt=vfsv1,errors=continue,nobh,usrjquota=..,errors=continue. Quota mode: writeback.
[  385.244313][ T7474] loop1: detected capacity change from 0 to 64
[  385.300537][ T7480] loop4: detected capacity change from 0 to 256
[  385.366505][ T7480] exfat: Deprecated parameter 'namecase'
[  385.372316][ T7480] exfat: Deprecated parameter 'namecase'
[  385.463591][ T7480] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d)
[  386.329410][ T4187] exFAT-fs (loop4): invalid start cluster (4278190088)
[  387.551378][ T7502] overlayfs: failed to resolve './bus': -2
[  388.148743][ T4496] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  388.176263][ T4496] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  388.322580][ T7513] loop2: detected capacity change from 0 to 256
[  391.175027][ T7524] syz.3.744 (7524): drop_caches: 2
[  392.645151][ T7543] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  393.465996][ T7549] overlayfs: failed to resolve './bus': -2
[  394.460757][ T7545] team0 (unregistering): Port device team_slave_0 removed
[  394.562145][ T7545] team0 (unregistering): Port device team_slave_1 removed
[  397.991507][ T4232] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[  398.268140][ T4232] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[  398.582969][ T7588] syz.5.765 (7588): drop_caches: 2
[  398.751016][ T7590] loop3: detected capacity change from 0 to 256
[  398.769049][ T7578] ceph: No mds server is up or the cluster is laggy
[  398.804952][ T7590] exfat: Deprecated parameter 'namecase'
[  398.849468][ T7590] exfat: Deprecated parameter 'namecase'
[  398.918764][ T7590] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d)
[  398.955226][ T7592] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  398.974145][ T6936] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[  399.672032][ T7599] device syzkaller0 entered promiscuous mode
[  399.904286][ T4189] exFAT-fs (loop3): invalid start cluster (4278190088)
[  402.383221][ T7628] comedi comedi1: pc212e: a I/O base address must be specified
[  402.400666][ T7628] overlayfs: failed to resolve './file1': -2
[  403.219390][ T7634] loop3: detected capacity change from 0 to 256
[  403.272494][ T7636] syz.4.780 (7636): drop_caches: 2
[  403.278844][ T7634] exfat: Deprecated parameter 'namecase'
[  403.284527][ T7634] exfat: Deprecated parameter 'namecase'
[  403.317515][ T7634] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d)
[  403.546158][ T7640] netlink: 44 bytes leftover after parsing attributes in process `syz.5.781'.
[  403.565832][ T7640] loop5: detected capacity change from 0 to 64
[  403.626580][ T7369] usb 2-1: new full-speed USB device number 6 using dummy_hcd
[  404.223645][ T4189] exFAT-fs (loop3): invalid start cluster (4278190088)
[  404.232117][ T7369] usb 2-1: no configurations
[  404.237941][ T7369] usb 2-1: can't read configurations, error -22
[  404.405740][ T7369] usb 2-1: new full-speed USB device number 7 using dummy_hcd
[  404.865234][ T7664] loop4: detected capacity change from 0 to 256
[  404.901273][ T7666] nr0: tun_chr_ioctl cmd 1074025677
[  404.910542][ T7664] exfat: Deprecated parameter 'namecase'
[  404.919883][ T7664] exfat: Deprecated parameter 'namecase'
[  404.929610][ T7666] nr0: linktype set to 0
[  404.956060][ T7369] usb 2-1: no configurations
[  404.961384][ T7369] usb 2-1: can't read configurations, error -22
[  404.974015][ T7664] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d)
[  404.979816][ T7369] usb usb2-port1: attempt power cycle
[  405.007445][ T7668] device syzkaller0 entered promiscuous mode
[  405.849487][ T4187] exFAT-fs (loop4): invalid start cluster (4278190088)
[  406.260910][ T7676] loop5: detected capacity change from 0 to 40427
[  406.320584][ T7676] F2FS-fs (loop5): Invalid SB checksum offset: 0
[  406.327286][ T7676] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[  406.337762][ T7676] F2FS-fs (loop5): invalid crc value
[  406.406622][ T7682] comedi comedi1: pc212e: a I/O base address must be specified
[  406.424395][ T7682] overlayfs: failed to resolve './file1': -2
[  406.509007][ T7676] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  406.727055][ T7676] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0
[  406.734459][ T7676] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  407.619406][ T7694] handle_bad_sector: 1513 callbacks suppressed
[  407.619444][ T7694] attempt to access beyond end of device
[  407.619444][ T7694] loop5: rw=10241, want=53256, limit=40427
[  408.445905][ T5671] attempt to access beyond end of device
[  408.445905][ T5671] loop5: rw=2049, want=45104, limit=40427
[  410.122021][ T7708] netlink: 76 bytes leftover after parsing attributes in process `syz.3.803'.
[  410.444593][ T7708] netlink: 12 bytes leftover after parsing attributes in process `syz.3.803'.
[  410.454374][ T7708] netlink: 20 bytes leftover after parsing attributes in process `syz.3.803'.
[  410.463486][ T7708] netlink: 20 bytes leftover after parsing attributes in process `syz.3.803'.
[  410.538023][ T7718] netlink: 8 bytes leftover after parsing attributes in process `syz.2.804'.
[  410.835904][ T7726] netlink: 44 bytes leftover after parsing attributes in process `syz.3.807'.
[  411.054577][ T7725] loop1: detected capacity change from 0 to 32768
[  411.092812][ T7726] loop3: detected capacity change from 0 to 64
[  411.104794][ T7725] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.806 (7725)
[  411.453148][ T7731] loop5: detected capacity change from 0 to 16
[  411.470335][ T7725] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  411.479212][ T7725] BTRFS info (device loop1): setting nodatasum
[  411.485448][ T7725] BTRFS info (device loop1): force zlib compression, level 3
[  411.493049][ T7725] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8)
[  411.502358][ T7725] BTRFS info (device loop1): use lzo compression, level 0
[  411.509561][ T7725] BTRFS info (device loop1): turning on flush-on-commit
[  411.516580][ T7725] BTRFS info (device loop1): enabling auto defrag
[  411.523072][ T7725] BTRFS info (device loop1): max_inline at 4096
[  411.529427][ T7725] BTRFS info (device loop1): using free space tree
[  411.536434][ T7725] BTRFS info (device loop1): has skinny extents
[  411.646163][ T7725] BTRFS info (device loop1): enabling ssd optimizations
[  411.797011][ T7731] erofs: (device loop5): mounted with root inode @ nid 36.
[  413.475370][ T7777] tmpfs: Unknown parameter 'noswap'
[  413.929284][ T7785] netlink: 8 bytes leftover after parsing attributes in process `syz.2.818'.
[  415.471388][ T7801] loop5: detected capacity change from 0 to 16
[  415.630229][ T7801] erofs: (device loop5): mounted with root inode @ nid 36.
[  415.892325][ T7802] syz.2.825 (7802): drop_caches: 2
[  416.295012][ T7808] loop3: detected capacity change from 0 to 32768
[  416.420021][ T7812] loop1: detected capacity change from 0 to 256
[  416.431281][ T7808] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.826 (7808)
[  416.655094][ T7808] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  416.663999][ T7808] BTRFS info (device loop3): setting nodatasum
[  416.670251][ T7808] BTRFS info (device loop3): force zlib compression, level 3
[  416.677690][ T7808] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8)
[  416.687017][ T7808] BTRFS info (device loop3): use lzo compression, level 0
[  416.694458][ T7808] BTRFS info (device loop3): turning on flush-on-commit
[  416.701508][ T7808] BTRFS info (device loop3): enabling auto defrag
[  416.708028][ T7808] BTRFS info (device loop3): max_inline at 4096
[  416.714445][ T7808] BTRFS info (device loop3): using free space tree
[  416.721050][ T7808] BTRFS info (device loop3): has skinny extents
[  417.246515][ T7831] netlink: 44 bytes leftover after parsing attributes in process `syz.1.830'.
[  417.663426][ T7830] loop1: detected capacity change from 0 to 64
[  418.040928][ T7808] BTRFS info (device loop3): enabling ssd optimizations
[  420.184453][ T7864] netlink: 8 bytes leftover after parsing attributes in process `syz.4.835'.
[  420.377405][ T7866] nr0: tun_chr_ioctl cmd 1074025677
[  420.382898][ T7866] nr0: linktype set to 0
[  420.389869][ T7866] netlink: 76 bytes leftover after parsing attributes in process `syz.4.838'.
[  420.398928][ T7866] netlink: 12 bytes leftover after parsing attributes in process `syz.4.838'.
[  420.408147][ T7866] netlink: 20 bytes leftover after parsing attributes in process `syz.4.838'.
[  420.424633][ T7866] netlink: 20 bytes leftover after parsing attributes in process `syz.4.838'.
[  420.781280][ T7870] loop2: detected capacity change from 0 to 16
[  420.900165][ T7873] loop4: detected capacity change from 0 to 256
[  420.936019][ T7870] erofs: (device loop2): mounted with root inode @ nid 36.
[  422.137869][ T7888] netlink: 44 bytes leftover after parsing attributes in process `syz.3.844'.
[  422.681248][ T7893] loop4: detected capacity change from 0 to 1024
[  422.773319][ T7893] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[  422.793513][ T7888] loop3: detected capacity change from 0 to 64
[  422.843080][ T7879] loop1: detected capacity change from 0 to 32768
[  422.878880][ T7893] EXT4-fs (loop4): barriers disabled
[  422.884235][ T7893] JBD2: no valid journal superblock found
[  422.905748][ T7893] EXT4-fs (loop4): error loading journal
[  422.993484][ T7879] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[  423.022613][ T7879] JBD2: Ignoring recovery information on journal
[  423.195389][ T7879] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  424.497713][ T7899] netlink: 8 bytes leftover after parsing attributes in process `syz.5.848'.
[  424.625564][ T7879] ocfs2: Unmounting device (7,1) on (node local)
[  424.704047][ T7903] nr0: tun_chr_ioctl cmd 1074025677
[  424.721314][ T7903] nr0: linktype set to 0
[  424.741061][ T7903] netlink: 56 bytes leftover after parsing attributes in process `syz.5.850'.
[  425.010601][ T7908] loop2: detected capacity change from 0 to 16
[  425.121254][ T7908] erofs: (device loop2): mounted with root inode @ nid 36.
[  425.359450][ T7913] syz.1.851 (7913): drop_caches: 2
[  425.785998][ T7924] netlink: 44 bytes leftover after parsing attributes in process `syz.5.858'.
[  426.869169][ T7922] loop5: detected capacity change from 0 to 64
[  427.067907][ T7935] netlink: 8 bytes leftover after parsing attributes in process `syz.2.860'.
[  427.239932][ T7937] loop5: detected capacity change from 0 to 32768
[  427.429333][ T7937] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.861 (7937)
[  427.479078][ T7937] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[  427.487884][ T7937] BTRFS info (device loop5): setting nodatasum
[  427.494057][ T7937] BTRFS info (device loop5): force zlib compression, level 3
[  427.501492][ T7937] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_LZO (0x8)
[  427.510725][ T7937] BTRFS info (device loop5): use lzo compression, level 0
[  427.517884][ T7937] BTRFS info (device loop5): turning on flush-on-commit
[  427.524833][ T7937] BTRFS info (device loop5): enabling auto defrag
[  427.531331][ T7937] BTRFS info (device loop5): max_inline at 4096
[  427.537680][ T7937] BTRFS info (device loop5): using free space tree
[  427.544446][ T7937] BTRFS info (device loop5): has skinny extents
[  427.710858][   T26] audit: type=1326 audit(1790183564.419:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7952 comm="syz.2.863" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33b6aff159 code=0x7ffc0000
[  428.439637][   T26] audit: type=1326 audit(1790183565.149:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7952 comm="syz.2.863" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33b6aff159 code=0x7ffc0000
[  428.473992][   T26] audit: type=1326 audit(1790183565.159:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7952 comm="syz.2.863" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33b6aff159 code=0x7ffc0000
[  428.521936][   T26] audit: type=1326 audit(1790183565.189:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7952 comm="syz.2.863" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f33b6aff159 code=0x7ffc0000
[  428.555018][   T26] audit: type=1326 audit(1790183565.159:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7952 comm="syz.2.863" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33b6aff159 code=0x7ffc0000
[  428.623827][ T7937] BTRFS info (device loop5): enabling ssd optimizations
[  428.757398][   T26] audit: type=1326 audit(1790183565.209:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7952 comm="syz.2.863" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33b6aff159 code=0x7ffc0000
[  429.172058][ T7969] loop1: detected capacity change from 0 to 1024
[  429.198960][   T26] audit: type=1326 audit(1790183565.209:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7952 comm="syz.2.863" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33b6aff159 code=0x7ffc0000
[  429.355967][   T26] audit: type=1326 audit(1790183565.209:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7952 comm="syz.2.863" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33b6aff159 code=0x7ffc0000
[  429.380043][   T26] audit: type=1326 audit(1790183565.209:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7952 comm="syz.2.863" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f33b6aff159 code=0x7ffc0000
[  429.407162][   T26] audit: type=1326 audit(1790183565.209:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7952 comm="syz.2.863" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33b6aff159 code=0x7ffc0000
[  429.441018][ T7973] syz.2.867 (7973): drop_caches: 2
[  429.488453][ T7969] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[  429.571168][ T7969] EXT4-fs (loop1): barriers disabled
[  429.600782][ T7969] JBD2: no valid journal superblock found
[  429.644815][ T7969] EXT4-fs (loop1): error loading journal
[  430.462991][ T4179] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop5 scanned by udevd (4179)
[  430.559807][ T7990] loop2: detected capacity change from 0 to 1024
[  431.018169][ T7990] EXT4-fs error (device loop2): ext4_fill_super:4872: comm syz.2.870: inode #2: comm syz.2.870: iget: illegal inode #
[  431.045672][ T7990] EXT4-fs (loop2): Remounting filesystem read-only
[  431.052588][ T7990] EXT4-fs (loop2): get root inode failed
[  431.063493][ T7990] EXT4-fs (loop2): mount failed
[  431.215283][ T8004] loop3: detected capacity change from 0 to 16
[  431.235848][ T8005] netlink: 8 bytes leftover after parsing attributes in process `syz.4.873'.
[  431.369738][ T7998] loop1: detected capacity change from 0 to 32768
[  431.402868][ T8004] erofs: (device loop3): mounted with root inode @ nid 36.
[  431.404795][ T7998] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  431.418399][ T7998] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  431.473999][ T7998] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[  431.507780][    T7] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  431.519612][    T7] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  432.047316][    T7] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 527ms
[  432.107327][    T7] gfs2: fsid=syz:syz.0: jid=0: Done
[  432.156166][ T7998] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  433.491925][ T8027] xt_hashlimit: size too large, truncated to 1048576
[  434.025303][ T8031] loop3: detected capacity change from 0 to 32768
[  435.678771][ T8039] loop1: detected capacity change from 0 to 1024
[  435.872013][ T8039] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[  435.936690][ T8039] EXT4-fs (loop1): barriers disabled
[  435.942346][ T8039] JBD2: no valid journal superblock found
[  435.959169][ T8039] EXT4-fs (loop1): error loading journal
[  436.447930][ T8054] netlink: 8 bytes leftover after parsing attributes in process `syz.2.885'.
[  436.513168][ T8056] netlink: 44 bytes leftover after parsing attributes in process `syz.3.886'.
[  436.526798][ T8056] loop3: detected capacity change from 0 to 64
[  437.862998][ T8069] loop1: detected capacity change from 0 to 256
[  437.884299][ T8069] exfat: Deprecated parameter 'namecase'
[  437.898310][ T8069] exfat: Deprecated parameter 'namecase'
[  437.917389][ T8069] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d)
[  439.025901][ T8081] loop4: detected capacity change from 0 to 32768
[  439.322255][ T8088] netlink: 44 bytes leftover after parsing attributes in process `syz.1.891'.
[  439.334178][ T8088] loop1: detected capacity change from 0 to 64
[  439.497944][ T8093] overlayfs: failed to resolve './bus': -2
[  439.727084][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[  439.738910][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[  441.148771][ T8110] netlink: 12 bytes leftover after parsing attributes in process `syz.3.896'.
[  441.228941][ T8112] netlink: 8 bytes leftover after parsing attributes in process `syz.1.899'.
[  441.391772][ T8116] netlink: 44 bytes leftover after parsing attributes in process `syz.3.900'.
[  441.405489][ T8116] loop3: detected capacity change from 0 to 64
[  442.402372][ T8125] loop1: detected capacity change from 0 to 1024
[  442.567073][ T8125] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[  443.317523][ T8125] EXT4-fs (loop1): barriers disabled
[  443.323001][ T8125] JBD2: no valid journal superblock found
[  443.329045][ T8125] EXT4-fs (loop1): error loading journal
[  444.351328][   T26] kauditd_printk_skb: 2 callbacks suppressed
[  444.351372][   T26] audit: type=1800 audit(1790183581.059:45): pid=8132 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.903" name=80 dev="sda1" ino=2048 res=0 errno=0
[  444.614495][ T8143] loop4: detected capacity change from 0 to 1024
[  444.926618][ T8143] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[  445.266835][ T8143] EXT4-fs (loop4): barriers disabled
[  445.324171][ T8143] JBD2: no valid journal superblock found
[  445.365341][ T8143] EXT4-fs (loop4): error loading journal
[  445.861128][ T8155] netlink: 8 bytes leftover after parsing attributes in process `syz.5.911'.
[  445.947024][ T8159] netlink: 12 bytes leftover after parsing attributes in process `syz.1.910'.
[  446.100856][ T8163] loop5: detected capacity change from 0 to 256
[  446.270501][ T8167] overlayfs: failed to resolve './bus': -2
[  446.480350][ T8163] exfat: Deprecated parameter 'namecase'
[  446.696148][ T8163] exfat: Deprecated parameter 'namecase'
[  446.788322][ T8163] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d)
[  447.373249][ T8171] netlink: 44 bytes leftover after parsing attributes in process `syz.3.914'.
[  447.728642][ T8176] loop1: detected capacity change from 0 to 32768
[  447.998207][ T8173] loop3: detected capacity change from 0 to 64
[  448.124804][ T8181] syz.2.917 (8181): drop_caches: 2
[  449.652443][ T8191] loop4: detected capacity change from 0 to 1024
[  450.361190][ T8191] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[  450.438687][ T8201] netlink: 44 bytes leftover after parsing attributes in process `syz.1.921'.
[  450.461233][ T8201] loop1: detected capacity change from 0 to 64
[  450.478908][ T8204] netlink: 8 bytes leftover after parsing attributes in process `syz.2.924'.
[  450.542091][ T8191] EXT4-fs (loop4): barriers disabled
[  450.547891][ T8191] JBD2: no valid journal superblock found
[  450.553682][ T8191] EXT4-fs (loop4): error loading journal
[  450.782158][ T8213] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  450.793425][ T8213] hpfs: hpfs_map_sector(): read error
[  451.454751][ T8211] overlayfs: failed to resolve './bus': -2
[  451.505336][ T8218] nr0: tun_chr_ioctl cmd 1074025677
[  451.527190][ T8215] netlink: 32 bytes leftover after parsing attributes in process `syz.2.927'.
[  451.536099][ T8218] nr0: linktype set to 0
[  454.333281][ T8241] loop3: detected capacity change from 0 to 32768
[  454.530437][ T8249] netlink: 44 bytes leftover after parsing attributes in process `syz.1.935'.
[  454.556099][ T8249] loop1: detected capacity change from 0 to 64
[  454.609371][ T8251] comedi comedi1: pc212e: a I/O base address must be specified
[  455.436023][ T8254] loop4: detected capacity change from 0 to 16
[  455.545524][ T8254] erofs: (device loop4): mounted with root inode @ nid 36.
[  457.862739][ T4265] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[  457.945782][ T8279] loop4: detected capacity change from 0 to 1024
[  457.991325][ T8279] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[  458.008997][ T8279] EXT4-fs (loop4): barriers disabled
[  458.030354][ T8283] nr0: tun_chr_ioctl cmd 1074025677
[  458.030379][ T8279] JBD2: no valid journal superblock found
[  458.036021][ T8283] nr0: linktype set to 0
[  458.048550][ T8283] netlink: 24 bytes leftover after parsing attributes in process `syz.1.945'.
[  458.075788][ T8279] EXT4-fs (loop4): error loading journal
[  458.136345][ T4265] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[  458.189057][ T8285] netlink: 44 bytes leftover after parsing attributes in process `syz.1.947'.
[  458.207019][ T8285] loop1: detected capacity change from 0 to 64
[  458.480134][ T8290] loop5: detected capacity change from 0 to 512
[  458.584033][ T8295] comedi comedi1: pc212e: a I/O base address must be specified
[  458.603650][ T8295] overlayfs: failed to resolve './file1': -2
[  459.347150][ T4265] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[  459.369989][ T8290] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem
[  459.522219][ T8299] netlink: 44 bytes leftover after parsing attributes in process `syz.2.951'.
[  459.534136][ T8299] loop2: detected capacity change from 0 to 64
[  459.554551][ T8269] ceph: No mds server is up or the cluster is laggy
[  459.690555][ T8304] loop4: detected capacity change from 0 to 16
[  459.713462][ T8290] EXT4-fs (loop5): failed to open journal device unknown-block(0,0) -6
[  459.810203][ T8303] loop1: detected capacity change from 0 to 32768
[  459.855813][ T8304] erofs: (device loop4): mounted with root inode @ nid 36.
[  460.890136][ T8318] loop1: detected capacity change from 0 to 1024
[  460.920128][ T8321] netlink: 44 bytes leftover after parsing attributes in process `syz.2.953'.
[  460.931666][ T8322] overlayfs: failed to resolve './bus': -2
[  461.212215][ T8329] ptp ptp0: max value is 1
[  461.332787][ T8330] netlink: 44 bytes leftover after parsing attributes in process `syz.4.960'.
[  461.664703][ T8318] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[  461.689110][ T8328] loop4: detected capacity change from 0 to 64
[  461.734542][ T8318] EXT4-fs (loop1): barriers disabled
[  461.746106][ T8318] JBD2: no valid journal superblock found
[  461.751883][ T8318] EXT4-fs (loop1): error loading journal
[  462.030919][ T8313] loop2: detected capacity change from 0 to 64
[  463.044159][ T8347] device syzkaller0 entered promiscuous mode
[  463.116126][ T8347] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  463.203484][ T8346] tipc: Resetting bearer <eth:syzkaller0>
[  463.425885][ T8357] loop5: detected capacity change from 0 to 256
[  463.448125][ T8346] tipc: Disabling bearer <eth:syzkaller0>
[  463.475595][ T8353] netlink: 44 bytes leftover after parsing attributes in process `syz.1.965'.
[  463.529098][ T8353] loop1: detected capacity change from 0 to 64
[  463.906324][ T8365] FAULT_INJECTION: forcing a failure.
[  463.906324][ T8365] name failslab, interval 1, probability 0, space 0, times 0
[  463.975829][ T8365] CPU: 1 PID: 8365 Comm: syz.5.968 Not tainted syzkaller #0
[  463.983171][ T8365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  463.993381][ T8365] Call Trace:
[  463.996661][ T8365]  <TASK>
[  463.999597][ T8365]  dump_stack_lvl+0x188/0x250
[  464.004295][ T8365]  ? show_regs_print_info+0x20/0x20
[  464.009495][ T8365]  ? load_image+0x410/0x410
[  464.013996][ T8365]  ? __might_sleep+0xf0/0xf0
[  464.018584][ T8365]  ? __lock_acquire+0x7b50/0x7b50
[  464.023638][ T8365]  should_fail+0x383/0x4b0
[  464.028056][ T8365]  should_failslab+0x5/0x20
[  464.032551][ T8365]  slab_pre_alloc_hook+0x51/0xc0
[  464.037480][ T8365]  ? sockfs_init_fs_context+0xa0/0xa0
[  464.042847][ T8365]  ? sock_alloc_inode+0x17/0xb0
[  464.047688][ T8365]  kmem_cache_alloc+0x3d/0x280
[  464.052440][ T8365]  ? sockfs_init_fs_context+0xa0/0xa0
[  464.057805][ T8365]  sock_alloc_inode+0x17/0xb0
[  464.062489][ T8365]  ? sockfs_init_fs_context+0xa0/0xa0
[  464.067863][ T8365]  new_inode_pseudo+0x5f/0x210
[  464.072627][ T8365]  __sock_create+0x128/0x910
[  464.077226][ T8365]  __sys_socket+0xe2/0x170
[  464.081641][ T8365]  __x64_sys_socket+0x76/0x80
[  464.086312][ T8365]  do_syscall_64+0x4c/0xa0
[  464.090724][ T8365]  ? clear_bhb_loop+0x30/0x80
[  464.095406][ T8365]  ? clear_bhb_loop+0x30/0x80
[  464.100072][ T8365]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  464.105974][ T8365] RIP: 0033:0x7f49ce5df159
[  464.110407][ T8365] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  464.130006][ T8365] RSP: 002b:00007f49cc837028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  464.138416][ T8365] RAX: ffffffffffffffda RBX: 00007f49ce866fa0 RCX: 00007f49ce5df159
[  464.146383][ T8365] RDX: 0000000000000002 RSI: 000000000000000a RDI: 0000000000000002
[  464.154349][ T8365] RBP: 00007f49ce67606b R08: 0000000000000000 R09: 0000000000000000
[  464.162311][ T8365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  464.170297][ T8365] R13: 00007f49ce867038 R14: 00007f49ce866fa0 R15: 00007ffef2c62ea8
[  464.178271][ T8365]  </TASK>
[  464.181288][    C1] vkms_vblank_simulate: vblank timer overrun
[  464.296896][ T8365] socket: no more sockets
[  464.879308][ T4235] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[  464.902524][ T4235] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[  465.117996][ T8374] loop1: detected capacity change from 0 to 32768
[  465.382279][ T8376] loop2: detected capacity change from 0 to 1024
[  465.390331][ T4235] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[  465.461134][ T8365] ceph: No mds server is up or the cluster is laggy
[  465.916418][ T4235] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[  466.136010][ T8376] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[  466.225183][ T8376] EXT4-fs (loop2): barriers disabled
[  467.014594][ T8386] overlayfs: failed to resolve './bus': -2
[  467.218233][ T8376] JBD2: no valid journal superblock found
[  467.315783][ T8376] EXT4-fs (loop2): error loading journal
[  467.940177][ T8399] loop1: detected capacity change from 0 to 512
[  468.130630][ T8399] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[  468.298107][ T8403] nr0: tun_chr_ioctl cmd 1074025677
[  468.303967][ T8403] nr0: linktype set to 0
[  468.330907][ T8399] EXT4-fs (loop1): failed to open journal device unknown-block(0,0) -6
[  468.346789][ T8403] netlink: 24 bytes leftover after parsing attributes in process `syz.4.978'.
[  468.694924][ T8409] loop4: detected capacity change from 0 to 256
[  469.265461][ T8418] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  469.276713][ T8418] hpfs: hpfs_map_sector(): read error
[  470.054035][ T8426] overlayfs: failed to resolve './bus': -2
[  470.650968][ T8433] loop2: detected capacity change from 0 to 32768
[  470.726069][ T8433] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  470.734268][ T8433] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  470.768972][ T8433] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[  470.779870][ T4232] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  470.801132][ T4232] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  470.983945][ T4232] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 182ms
[  471.005836][ T4232] gfs2: fsid=syz:syz.0: jid=0: Done
[  471.011114][ T8433] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  471.120873][ T8440] loop5: detected capacity change from 0 to 256
[  471.217489][ T8440] exfat: Deprecated parameter 'namecase'
[  471.268139][ T8440] exfat: Deprecated parameter 'namecase'
[  471.301344][ T8442] loop3: detected capacity change from 0 to 1024
[  471.394320][ T8442] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[  471.461976][ T8440] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d)
[  471.498540][ T8442] EXT4-fs (loop3): barriers disabled
[  471.503909][ T8442] JBD2: no valid journal superblock found
[  471.571462][ T8442] EXT4-fs (loop3): error loading journal
[  472.342430][ T5671] exFAT-fs (loop5): invalid start cluster (4278190088)
[  472.426729][ T8447] loop2: detected capacity change from 0 to 1024
[  472.523193][ T8449] netlink: 44 bytes leftover after parsing attributes in process `syz.4.990'.
[  472.881173][ T8447] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[  472.948197][ T8447] EXT4-fs (loop2): barriers disabled
[  472.953622][ T8447] JBD2: no valid journal superblock found
[  473.579289][ T8447] EXT4-fs (loop2): error loading journal
[  473.618399][ T8448] loop4: detected capacity change from 0 to 64
[  473.947375][ T8456] nr0: tun_chr_ioctl cmd 1074025677
[  473.972050][ T8456] nr0: linktype set to 0
[  474.214843][ T8456] netlink: 16 bytes leftover after parsing attributes in process `syz.5.991'.
[  474.244234][ T8460] loop2: detected capacity change from 0 to 512
[  474.371496][ T8460] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  474.643813][ T8460] EXT4-fs (loop2): failed to open journal device unknown-block(0,0) -6
[  475.017006][ T8473] tipc: Enabling of bearer <eth:syzk> rejected, failed to enable media
[  475.057038][ T8464] device syzkaller0 entered promiscuous mode
[  476.383478][ T8490] overlayfs: failed to resolve './bus': -2
[  476.899624][ T8494] loop3: detected capacity change from 0 to 32768
[  477.105750][ T8501] overlayfs: failed to resolve './bus': -2
[  477.178816][ T8497] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1003'.
[  477.902367][ T8506] loop5: detected capacity change from 0 to 1024
[  477.920600][ T8497] loop4: detected capacity change from 0 to 64
[  478.365899][ T8510] hpfs: Bad magic ... probably not HPFS
[  478.505783][ T8506] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[  478.527916][ T8513] nr0: tun_chr_ioctl cmd 1074025677
[  478.533246][ T8513] nr0: linktype set to 0
[  478.592914][ T8513] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1007'.
[  478.622098][ T8506] EXT4-fs (loop5): barriers disabled
[  478.636971][ T8506] JBD2: no valid journal superblock found
[  478.721215][ T8506] EXT4-fs (loop5): error loading journal
[  478.999703][ T8516] loop2: detected capacity change from 0 to 64
[  479.188209][ T8524] loop1: detected capacity change from 0 to 512
[  479.459435][ T8524] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[  480.228644][ T8534] loop4: detected capacity change from 0 to 256
[  480.239276][ T8535] overlayfs: failed to resolve './bus': -2
[  480.345866][ T8524] EXT4-fs (loop1): failed to open journal device unknown-block(0,0) -6
[  483.297780][ T8551] tipc: Enabling of bearer <eth:syzk> rejected, failed to enable media
[  483.576329][ T8551] device syzkaller0 entered promiscuous mode
[  484.101554][ T8559] overlayfs: failed to resolve './bus': -2
[  484.251144][ T8558] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1018'.
[  484.277827][ T8557] loop1: detected capacity change from 0 to 64
[  484.957266][ T8568] loop4: detected capacity change from 0 to 16
[  485.076620][ T8568] erofs: (device loop4): mounted with root inode @ nid 36.
[  487.168713][ T8578] loop1: detected capacity change from 0 to 256
[  487.592529][ T8584] loop3: detected capacity change from 0 to 1024
[  487.647798][ T8584] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[  487.683124][ T8584] EXT4-fs (loop3): barriers disabled
[  487.688540][ T8584] JBD2: no valid journal superblock found
[  487.725161][ T8584] EXT4-fs (loop3): error loading journal
[  489.214635][ T8590] nr0: tun_chr_ioctl cmd 1074025677
[  489.241513][ T8590] nr0: linktype set to 0
[  489.262636][ T8590] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1019'.
[  489.652202][ T8594] overlayfs: failed to resolve './bus': -2
[  490.836042][ T8601] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1030'.
[  491.804354][ T8600] loop5: detected capacity change from 0 to 64
[  492.202956][ T8609] tipc: Enabling of bearer <eth:syzkall> rejected, failed to enable media
[  492.216072][ T8609] device syzkaller0 entered promiscuous mode
[  492.234478][ T8611] overlayfs: failed to resolve './bus': -2
[  492.611235][ T8620] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  492.622509][ T8620] hpfs: hpfs_map_sector(): read error
[  493.114655][ T8614] loop4: detected capacity change from 0 to 32768
[  494.057350][ T8614] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  494.065610][ T8614] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  494.097515][ T8614] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[  494.107146][ T5766] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  494.113997][ T5766] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  494.428215][ T5766] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 314ms
[  494.437270][ T5766] gfs2: fsid=syz:syz.0: jid=0: Done
[  494.442711][ T8614] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  495.241474][ T8636] loop4: detected capacity change from 0 to 256
[  495.630626][ T8640] nr0: tun_chr_ioctl cmd 1074025677
[  495.638461][ T8638] nvmet: adding nsid 1 to subsystem testsubsys
[  495.664314][ T8640] nr0: linktype set to 0
[  495.673258][   T26] audit: type=1800 audit(1790183632.379:46): pid=8638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1038" name="device_path" dev="configfs" ino=69523 res=0 errno=0
[  495.674886][ T8640] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1039'.
[  495.788377][   T26] audit: type=1800 audit(1790183632.409:47): pid=8638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1038" name="buffered_io" dev="configfs" ino=69524 res=0 errno=0
[  495.856042][   T26] audit: type=1800 audit(1790183632.439:48): pid=8638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1038" name="enable" dev="configfs" ino=69529 res=0 errno=0
[  495.961141][ T5766] nvmet: connect request for invalid subsystem testsubsys!
[  495.977935][ T8638] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys"
[  496.088769][ T8646] loop2: detected capacity change from 0 to 32768
[  496.577764][ T8651] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1042'.
[  496.654374][ T8651] loop3: detected capacity change from 0 to 64
[  496.853723][ T8656] loop4: detected capacity change from 0 to 1024
[  497.033307][ T8656] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[  497.128722][ T8656] EXT4-fs (loop4): barriers disabled
[  497.172254][ T8664] loop2: detected capacity change from 0 to 512
[  497.185733][ T8656] JBD2: no valid journal superblock found
[  497.700096][ T8669] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  497.711110][ T8669] hpfs: hpfs_map_sector(): read error
[  498.341724][ T8656] EXT4-fs (loop4): error loading journal
[  499.227722][ T8664] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  499.238819][ T8674] loop1: detected capacity change from 0 to 1024
[  499.984239][ T8674] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[  500.116215][ T8674] EXT4-fs (loop1): barriers disabled
[  500.135531][ T8674] JBD2: no valid journal superblock found
[  500.142900][ T8664] EXT4-fs (loop2): failed to open journal device unknown-block(0,0) -6
[  500.185953][ T8674] EXT4-fs (loop1): error loading journal
[  500.203973][ T8684] nr0: tun_chr_ioctl cmd 1074025677
[  500.216044][ T8684] nr0: linktype set to 0
[  500.221365][ T8684] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1053'.
[  501.037354][ T8687] overlayfs: failed to resolve './bus': -2
[  501.091552][ T8692] syz.4.1055 (8692): drop_caches: 2
[  501.517034][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[  501.523460][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[  501.612707][ T8694] syz.2.1056 (8694): drop_caches: 2
[  502.228017][ T8704] loop5: detected capacity change from 0 to 256
[  502.508669][ T8711] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  502.519924][ T8711] hpfs: hpfs_map_sector(): read error
[  503.304174][ T8713] loop3: detected capacity change from 0 to 1024
[  503.350937][ T8715] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1061'.
[  503.393683][ T8715] loop5: detected capacity change from 0 to 64
[  503.414311][ T8713] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[  503.438104][ T8713] EXT4-fs (loop3): barriers disabled
[  503.475823][ T8713] JBD2: no valid journal superblock found
[  503.492641][ T8713] EXT4-fs (loop3): error loading journal
[  503.726154][ T8719] loop2: detected capacity change from 0 to 512
[  504.009572][ T8721] loop3: detected capacity change from 0 to 512
[  504.029454][ T8719] EXT4-fs (loop2): Ignoring removed nobh option
[  504.144570][ T8719] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13
[  504.153609][ T8719] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.1059: attempt to clear invalid blocks 1 len 1
[  504.192782][ T8719] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  504.207321][ T8719] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1059: invalid indirect mapped block 1819239214 (level 0)
[  504.221982][ T8719] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1059: invalid indirect mapped block 1819239214 (level 1)
[  504.240026][ T8719] EXT4-fs (loop2): 1 truncate cleaned up
[  504.246302][ T8719] EXT4-fs (loop2): mounted filesystem without journal. Opts: nolazytime,resuid=0x0000000000000000,jqfmt=vfsv1,errors=continue,nobh,usrjquota=..,errors=continue. Quota mode: writeback.
[  504.541191][ T8727] netlink: 'syz.1.1065': attribute type 1 has an invalid length.
[  504.561339][ T8727] netlink: set zone limit has 8 unknown bytes
[  504.766162][ T8721] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  504.940780][ T8731] overlayfs: failed to resolve './bus': -2
[  505.283189][ T8735] loop5: detected capacity change from 0 to 512
[  505.413887][ T8735] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem
[  505.655234][ T8721] EXT4-fs (loop3): failed to open journal device unknown-block(0,0) -6
[  505.703742][ T8739] syz.1.1068 (8739): drop_caches: 2
[  505.854572][ T8735] EXT4-fs (loop5): failed to open journal device unknown-block(0,0) -6
[  505.990815][ T8744] loop1: detected capacity change from 0 to 256
[  506.776395][ T8754] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  506.787594][ T8754] hpfs: hpfs_map_sector(): read error
[  507.066307][ T8750] nr0: tun_chr_ioctl cmd 1074025677
[  507.082143][ T8750] nr0: linktype set to 0
[  507.114623][ T8756] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1069'.
[  507.574592][ T8763] loop5: detected capacity change from 0 to 1024
[  507.647806][ T8763] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[  507.720015][ T8766] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  507.813639][ T8763] EXT4-fs (loop5): barriers disabled
[  507.857812][ T8763] JBD2: no valid journal superblock found
[  507.896873][ T8763] EXT4-fs (loop5): error loading journal
[  509.522055][ T8786] syz.1.1081 (8786): drop_caches: 2
[  511.194516][ T8795] loop3: detected capacity change from 0 to 512
[  511.246634][ T8795] EXT4-fs (loop3): Ignoring removed nobh option
[  511.306724][ T8795] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13
[  511.325880][ T8795] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.1079: attempt to clear invalid blocks 1 len 1
[  511.347760][ T8795] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  511.362220][ T8795] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1079: invalid indirect mapped block 1819239214 (level 0)
[  511.383249][ T8795] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1079: invalid indirect mapped block 1819239214 (level 1)
[  511.418066][ T8795] EXT4-fs (loop3): 1 truncate cleaned up
[  511.423769][ T8795] EXT4-fs (loop3): mounted filesystem without journal. Opts: nolazytime,resuid=0x0000000000000000,jqfmt=vfsv1,errors=continue,nobh,usrjquota=..,errors=continue. Quota mode: writeback.
[  511.535081][ T8801] loop1: detected capacity change from 0 to 256
[  511.800319][ T8803] loop1: detected capacity change from 0 to 512
[  511.858984][ T8803] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[  512.117319][ T8803] EXT4-fs (loop1): failed to open journal device unknown-block(0,0) -6
[  512.486771][ T8810] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  512.498644][ T8810] hpfs: hpfs_map_sector(): read error
[  514.740788][ T8822] nr0: tun_chr_ioctl cmd 1074025677
[  514.856408][ T8822] nr0: linktype set to 0
[  514.941351][ T8822] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1090'.
[  514.948026][ T8829] FAULT_INJECTION: forcing a failure.
[  514.948026][ T8829] name failslab, interval 1, probability 0, space 0, times 0
[  515.620244][ T8829] CPU: 1 PID: 8829 Comm: syz.2.1092 Not tainted syzkaller #0
[  515.627677][ T8829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  515.637766][ T8829] Call Trace:
[  515.641088][ T8829]  <TASK>
[  515.644043][ T8829]  dump_stack_lvl+0x188/0x250
[  515.648767][ T8829]  ? show_regs_print_info+0x20/0x20
[  515.654001][ T8829]  ? load_image+0x410/0x410
[  515.658528][ T8829]  ? __might_sleep+0xf0/0xf0
[  515.663142][ T8829]  ? __lock_acquire+0x7b50/0x7b50
[  515.668214][ T8829]  should_fail+0x383/0x4b0
[  515.672660][ T8829]  should_failslab+0x5/0x20
[  515.677210][ T8829]  slab_pre_alloc_hook+0x51/0xc0
[  515.682336][ T8829]  __kmalloc_node+0x6d/0x3a0
[  515.686966][ T8829]  ? kvmalloc_node+0x84/0x130
[  515.691723][ T8829]  ? rcu_is_watching+0x11/0xa0
[  515.696526][ T8829]  kvmalloc_node+0x84/0x130
[  515.701059][ T8829]  ceph_msg_new2+0x162/0x4a0
[  515.705685][ T8829]  ceph_monc_init+0x5e0/0xa00
[  515.710411][ T8829]  ceph_create_client+0x221/0x300
[  515.715469][ T8829]  ceph_get_tree+0xf6/0x1290
[  515.720091][ T8829]  ? bpf_lsm_capable+0x5/0x10
[  515.724798][ T8829]  ? security_capable+0x85/0xb0
[  515.729693][ T8829]  vfs_get_tree+0x88/0x270
[  515.734163][ T8829]  vfs_fsconfig_locked+0x22f/0x400
[  515.739307][ T8829]  __se_sys_fsconfig+0x69e/0x7e0
[  515.744277][ T8829]  ? __x64_sys_fsconfig+0xc0/0xc0
[  515.749360][ T8829]  ? lockdep_hardirqs_on+0x94/0x140
[  515.754616][ T8829]  ? __x64_sys_fsconfig+0x1c/0xc0
[  515.759691][ T8829]  do_syscall_64+0x4c/0xa0
[  515.764133][ T8829]  ? clear_bhb_loop+0x30/0x80
[  515.768835][ T8829]  ? clear_bhb_loop+0x30/0x80
[  515.773542][ T8829]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  515.779467][ T8829] RIP: 0033:0x7f33b6aff159
[  515.783905][ T8829] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  515.803532][ T8829] RSP: 002b:00007f33b4d57028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af
[  515.811987][ T8829] RAX: ffffffffffffffda RBX: 00007f33b6d86fa0 RCX: 00007f33b6aff159
[  515.820012][ T8829] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003
[  515.828021][ T8829] RBP: 00007f33b6b9606b R08: 0000000000000000 R09: 0000000000000000
[  515.836038][ T8829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  515.844038][ T8829] R13: 00007f33b6d87038 R14: 00007f33b6d86fa0 R15: 00007ffc65991298
[  515.852056][ T8829]  </TASK>
[  515.873762][ T8833] loop1: detected capacity change from 0 to 256
[  515.922021][ T8833] exfat: Deprecated parameter 'namecase'
[  515.945098][ T8833] exfat: Deprecated parameter 'namecase'
[  515.972585][ T8833] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d)
[  517.013093][ T8841] loop2: detected capacity change from 0 to 32768
[  517.527663][ T4188] exFAT-fs (loop1): invalid start cluster (4278190088)
[  517.739184][ T8848] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1098'.
[  518.169485][ T8848] loop4: detected capacity change from 0 to 64
[  519.650618][ T8861] loop1: detected capacity change from 0 to 1024
[  519.926024][ T8861] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[  520.659949][ T8861] EXT4-fs (loop1): barriers disabled
[  520.665278][ T8861] JBD2: no valid journal superblock found
[  520.720568][ T8861] EXT4-fs (loop1): error loading journal
[  520.746638][ T8875] nr0: tun_chr_ioctl cmd 1074025677
[  520.787526][ T8877] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1099'.
[  520.796936][ T8875] nr0: linktype set to 0
[  520.804875][ T8877] loop5: detected capacity change from 0 to 64
[  520.823085][ T8875] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1106'.
[  521.248855][ T8881] FAULT_INJECTION: forcing a failure.
[  521.248855][ T8881] name failslab, interval 1, probability 0, space 0, times 0
[  521.300310][ T8881] CPU: 0 PID: 8881 Comm: syz.3.1108 Not tainted syzkaller #0
[  521.307747][ T8881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  521.317830][ T8881] Call Trace:
[  521.321134][ T8881]  <TASK>
[  521.324083][ T8881]  dump_stack_lvl+0x188/0x250
[  521.328793][ T8881]  ? show_regs_print_info+0x20/0x20
[  521.334018][ T8881]  ? load_image+0x410/0x410
[  521.338557][ T8881]  ? __might_sleep+0xf0/0xf0
[  521.343175][ T8881]  ? __lock_acquire+0x7b50/0x7b50
[  521.348231][ T8881]  should_fail+0x383/0x4b0
[  521.352682][ T8881]  should_failslab+0x5/0x20
[  521.357202][ T8881]  slab_pre_alloc_hook+0x51/0xc0
[  521.362177][ T8881]  __kmalloc_node+0x6d/0x3a0
[  521.366792][ T8881]  ? kvmalloc_node+0x84/0x130
[  521.371502][ T8881]  ? rcu_is_watching+0x11/0xa0
[  521.376331][ T8881]  kvmalloc_node+0x84/0x130
[  521.380872][ T8881]  ceph_msg_new2+0x162/0x4a0
[  521.385509][ T8881]  ceph_monc_init+0x5e0/0xa00
[  521.390233][ T8881]  ceph_create_client+0x221/0x300
[  521.395291][ T8881]  ceph_get_tree+0xf6/0x1290
[  521.399907][ T8881]  ? bpf_lsm_capable+0x5/0x10
[  521.404604][ T8881]  ? security_capable+0x85/0xb0
[  521.409482][ T8881]  vfs_get_tree+0x88/0x270
[  521.413923][ T8881]  vfs_fsconfig_locked+0x22f/0x400
[  521.419054][ T8881]  __se_sys_fsconfig+0x69e/0x7e0
[  521.424023][ T8881]  ? __x64_sys_fsconfig+0xc0/0xc0
[  521.429081][ T8881]  ? lockdep_hardirqs_on+0x94/0x140
[  521.434312][ T8881]  ? __x64_sys_fsconfig+0x1c/0xc0
[  521.439363][ T8881]  do_syscall_64+0x4c/0xa0
[  521.443890][ T8881]  ? clear_bhb_loop+0x30/0x80
[  521.448610][ T8881]  ? clear_bhb_loop+0x30/0x80
[  521.453322][ T8881]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  521.459247][ T8881] RIP: 0033:0x7f56986dc159
[  521.463687][ T8881] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  521.483312][ T8881] RSP: 002b:00007f5696934028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af
[  521.491852][ T8881] RAX: ffffffffffffffda RBX: 00007f5698963fa0 RCX: 00007f56986dc159
[  521.499846][ T8881] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003
[  521.508086][ T8881] RBP: 00007f569877306b R08: 0000000000000000 R09: 0000000000000000
[  521.516098][ T8881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  521.524116][ T8881] R13: 00007f5698964038 R14: 00007f5698963fa0 R15: 00007fffeff070d8
[  521.532165][ T8881]  </TASK>
[  521.535265][    C0] vkms_vblank_simulate: vblank timer overrun
[  523.325924][ T8890] loop3: detected capacity change from 0 to 32768
[  524.100509][ T8898] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1112'.
[  524.116870][ T8898] loop5: detected capacity change from 0 to 64
[  524.267494][ T8903] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1114'.
[  524.294434][ T8903] loop3: detected capacity change from 0 to 64
[  524.476329][ T4235] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  525.315504][ T8910] ptp ptp0: max value is 1
[  525.589409][ T8916] loop5: detected capacity change from 0 to 32768
[  526.899724][ T8916] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  526.907961][ T8916] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  526.928752][ T8918] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1118'.
[  526.990400][ T8918] loop3: detected capacity change from 0 to 64
[  527.035353][ T8916] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[  527.046729][ T4693] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  527.054924][ T4693] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  527.065845][ T4235] usb 3-1: device descriptor read/all, error -71
[  527.224999][ T4693] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 170ms
[  527.236563][ T4693] gfs2: fsid=syz:syz.0: jid=0: Done
[  527.250095][ T8916] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  527.445850][ T4235] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  527.558369][ T8930] loop3: detected capacity change from 0 to 32768
[  528.521392][ T4235] usb 3-1: Using ep0 maxpacket: 8
[  528.651164][ T4235] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  528.683668][ T4235] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  528.709805][ T8940] loop4: detected capacity change from 0 to 1024
[  528.730544][ T8940] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[  528.752008][ T8940] EXT4-fs (loop4): barriers disabled
[  528.753271][ T4235] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  528.757406][ T8940] JBD2: no valid journal superblock found
[  528.757418][ T8940] EXT4-fs (loop4): error loading journal
[  528.779861][ T4235] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  528.806520][ T8943] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1126'.
[  528.820659][ T8943] loop1: detected capacity change from 0 to 64
[  528.825423][ T4235] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  528.859655][ T4235] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  529.355051][ T4235] usb 3-1: GET_CAPABILITIES returned 0
[  529.361013][ T4235] usbtmc 3-1:16.0: can't read capabilities
[  529.377388][ T8955] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1128'.
[  529.391411][ T8955] loop5: detected capacity change from 0 to 64
[  529.435580][ T8958] ptp ptp0: max value is 1
[  530.151453][ T4910] usb 3-1: USB disconnect, device number 5
[  531.487776][ T8962] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1134'.
[  531.506465][ T8962] loop1: detected capacity change from 0 to 64
[  531.782588][ T8972] loop5: detected capacity change from 0 to 32768
[  531.841067][ T8972] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  531.849472][ T8972] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  531.937330][ T8972] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[  531.946741][ T4235] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  531.986953][ T4235] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  532.009051][ T8977] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1140'.
[  532.155410][ T8981] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1141'.
[  532.947116][ T8981] loop1: detected capacity change from 0 to 64
[  533.001539][ T8984] loop2: detected capacity change from 0 to 1024
[  533.010273][ T4235] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 1023ms
[  533.035194][ T8986] loop4: detected capacity change from 0 to 256
[  533.042033][ T4235] gfs2: fsid=syz:syz.0: jid=0: Done
[  533.050468][ T8972] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  533.075242][ T8984] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[  533.157896][ T8984] EXT4-fs (loop2): barriers disabled
[  533.186998][ T8986] exfat: Deprecated parameter 'namecase'
[  533.192847][ T8986] exfat: Deprecated parameter 'namecase'
[  533.198994][ T8984] JBD2: no valid journal superblock found
[  533.204779][ T8984] EXT4-fs (loop2): error loading journal
[  533.319393][ T8986] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d)
[  533.503522][ T8992] loop1: detected capacity change from 0 to 1024
[  533.544869][ T8990] loop3: detected capacity change from 0 to 32768
[  533.699430][ T8992] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[  533.734845][ T8992] EXT4-fs (loop1): barriers disabled
[  533.746128][ T8992] JBD2: no valid journal superblock found
[  533.751882][ T8992] EXT4-fs (loop1): error loading journal
[  535.645159][ T4187] exFAT-fs (loop4): invalid start cluster (4278190088)
[  536.009858][ T9008] ptp ptp0: max value is 1
[  536.361139][ T9014] loop4: detected capacity change from 0 to 512
[  537.406397][ T9014] EXT4-fs (loop4): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue. Quota mode: writeback.
[  537.550535][ T9014] EXT4-fs warning (device loop4): verify_group_input:165: Last group not full
[  537.777546][ T9033] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1155'.
[  537.808660][ T9033] loop2: detected capacity change from 0 to 64
[  538.126872][ T9037] loop3: detected capacity change from 0 to 32768
[  538.228870][ T9040] syz.4.1157 (9040): drop_caches: 2
[  541.166284][ T9052] ptp ptp0: max value is 1
[  541.311951][ T9054] nr0: tun_chr_ioctl cmd 1074025677
[  541.382500][ T9054] nr0: linktype set to 0
[  541.426677][ T9056] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1149'.
[  543.299679][ T9069] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  544.352834][ T9079] overlayfs: failed to resolve './bus': -2
[  544.893657][ T9075] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1169'.
[  544.909808][ T9075] loop4: detected capacity change from 0 to 64
[  544.991471][ T9085] loop2: detected capacity change from 0 to 512
[  545.184595][ T9085] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  545.215176][ T9087] syz.1.1173 (9087): drop_caches: 2
[  545.261390][ T9089] ptp ptp0: max value is 1
[  545.353591][ T9085] EXT4-fs (loop2): failed to open journal device unknown-block(0,0) -6
[  545.871742][ T9100] nr0: tun_chr_ioctl cmd 1074025677
[  545.962601][ T9100] nr0: linktype set to 0
[  546.289381][ T9103] ipt_CLUSTERIP: Please specify destination IP
[  549.097447][   T26] audit: type=1800 audit(1790183685.809:49): pid=9117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1180" name=80 dev="sda1" ino=2048 res=0 errno=0
[  549.256430][ T9125] overlayfs: failed to resolve './bus': -2
[  550.190447][ T9132] ptp ptp0: max value is 1
[  550.421503][ T9134] loop4: detected capacity change from 0 to 1024
[  550.491307][ T9134] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[  550.567606][ T9134] EXT4-fs (loop4): barriers disabled
[  550.572941][ T9134] JBD2: no valid journal superblock found
[  550.615683][ T9134] EXT4-fs (loop4): error loading journal
[  551.573779][ T9142] tipc: Enabling of bearer <eth:syzkaller> rejected, failed to enable media
[  551.751872][ T9135] loop3: detected capacity change from 0 to 32768
[  551.860017][ T9135] XFS (loop3): Mounting V5 Filesystem
[  551.935504][ T9135] XFS (loop3): Ending clean mount
[  552.111662][ T9160] loop1: detected capacity change from 0 to 16
[  552.155566][ T9160] erofs: (device loop1): mounted with root inode @ nid 36.
[  552.372074][ T4189] XFS (loop3): Unmounting Filesystem
[  553.190654][ T9166] loop5: detected capacity change from 0 to 256
[  553.261903][ T9166] exfat: Deprecated parameter 'namecase'
[  553.283313][ T9166] exfat: Deprecated parameter 'namecase'
[  553.336360][ T9166] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d)
[  553.355733][   T23] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  553.655742][   T23] usb 4-1: Using ep0 maxpacket: 8
[  554.218550][ T5671] exFAT-fs (loop5): invalid start cluster (4278190088)
[  554.266471][   T23] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  554.315724][   T23] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  554.345684][   T23] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  554.381046][   T23] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  554.425663][   T23] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  554.445638][   T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  554.643246][ T9172] input: syz0 as /devices/virtual/input/input7
[  555.306052][   T23] usb 4-1: usb_control_msg returned -71
[  555.314282][   T23] usbtmc 4-1:16.0: can't read capabilities
[  555.484102][   T23] usb 4-1: USB disconnect, device number 4
[  555.498841][ T9178] loop2: detected capacity change from 0 to 256
[  555.855722][ T9181] loop3: detected capacity change from 0 to 32768
[  555.929484][ T9184] loop2: detected capacity change from 0 to 1024
[  555.954520][ T9181] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  555.962971][ T9181] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  555.993815][ T9181] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[  556.002645][ T4232] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  556.009934][ T4232] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  556.066444][ T9187] loop4: detected capacity change from 0 to 1024
[  556.096062][ T9188] loop5: detected capacity change from 0 to 512
[  556.124638][ T4232] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 114ms
[  556.149876][ T9187] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[  556.162856][ T9184] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[  556.202575][ T9184] EXT4-fs (loop2): barriers disabled
[  556.206055][ T4232] gfs2: fsid=syz:syz.0: jid=0: Done
[  556.212026][ T9184] JBD2: no valid journal superblock found
[  556.233422][ T9184] EXT4-fs (loop2): error loading journal
[  556.294884][ T9193] overlayfs: failed to resolve './bus': -2
[  557.247438][ T9187] EXT4-fs (loop4): barriers disabled
[  557.253024][ T9187] JBD2: no valid journal superblock found
[  557.295993][ T9187] EXT4-fs (loop4): error loading journal
[  557.316769][ T9181] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  557.325580][ T9188] EXT4-fs (loop5): Ignoring removed nobh option
[  557.812797][ T9188] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13
[  558.118460][ T9188] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #13: comm syz.5.1198: attempt to clear invalid blocks 1 len 1
[  558.719132][ T9188] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  558.751943][ T9188] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.1198: invalid indirect mapped block 1819239214 (level 0)
[  558.869110][ T9211] loop4: detected capacity change from 0 to 64
[  559.616384][ T9188] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.1198: invalid indirect mapped block 1819239214 (level 1)
[  559.631822][ T9188] EXT4-fs (loop5): 1 truncate cleaned up
[  559.637662][ T9188] EXT4-fs (loop5): mounted filesystem without journal. Opts: nolazytime,resuid=0x0000000000000000,jqfmt=vfsv1,errors=continue,nobh,usrjquota=..,errors=continue. Quota mode: writeback.
[  559.951413][ T9214] nr0: tun_chr_ioctl cmd 1074025677
[  559.960419][ T9214] nr0: linktype set to 0
[  559.966400][ T9214] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1205'.
[  560.300403][ T9218] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1202'.
[  561.133865][ T9218] loop1: detected capacity change from 0 to 64
[  561.217424][ T9225] tipc: Enabling of bearer <eth:syzkaller> rejected, failed to enable media
[  561.598643][ T9225] device syzkaller0 entered promiscuous mode
[  562.587845][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[  562.594219][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[  564.782408][ T9240] loop3: detected capacity change from 0 to 1024
[  564.870686][ T9246] loop1: detected capacity change from 0 to 1024
[  564.881072][ T9243] syz.4.1215 (9243): drop_caches: 2
[  564.900898][ T9240] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[  565.008693][ T9248] overlayfs: failed to resolve './bus': -2
[  565.313005][ T9240] EXT4-fs (loop3): barriers disabled
[  565.823931][ T9246] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[  565.861508][ T9240] JBD2: no valid journal superblock found
[  565.874603][ T9246] EXT4-fs (loop1): barriers disabled
[  565.897844][ T9240] EXT4-fs (loop3): error loading journal
[  565.925745][ T9246] JBD2: no valid journal superblock found
[  565.931526][ T9246] EXT4-fs (loop1): error loading journal
[  566.381000][ T9252] loop5: detected capacity change from 0 to 32768
[  567.818746][ T9252] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  567.827056][ T9252] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  567.852508][ T9252] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[  567.894246][ T4290] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  567.901318][ T4290] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  567.964695][ T4290] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 63ms
[  567.972349][ T4290] gfs2: fsid=syz:syz.0: jid=0: Done
[  567.978075][ T9252] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  568.410699][ T9267] loop1: detected capacity change from 0 to 256
[  568.556700][ T9267] exfat: Deprecated parameter 'namecase'
[  568.562405][ T9267] exfat: Deprecated parameter 'namecase'
[  568.739021][ T9267] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d)
[  569.466594][ T4188] exFAT-fs (loop1): invalid start cluster (4278190088)
[  570.897977][ T9278] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1218'.
[  570.942836][ T9278] loop2: detected capacity change from 0 to 64
[  572.975713][ T9289] loop4: detected capacity change from 0 to 256
[  573.185891][ T9297] overlayfs: failed to resolve './bus': -2
[  573.696652][ T9291] device syzkaller0 entered promiscuous mode
[  574.063576][ T9298] loop2: detected capacity change from 0 to 512
[  574.322255][ T9301] syz.1.1229 (9301): drop_caches: 2
[  574.559988][ T9303] loop1: detected capacity change from 0 to 1024
[  574.589854][ T9298] EXT4-fs (loop2): Ignoring removed nobh option
[  575.951419][ T9298] EXT4-fs: failed to create workqueue
[  575.996447][ T9298] EXT4-fs (loop2): mount failed
[  576.239355][ T9314] loop3: detected capacity change from 0 to 256
[  576.283207][ T9303] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[  576.326488][ T9314] exfat: Deprecated parameter 'namecase'
[  576.356048][ T9314] exfat: Deprecated parameter 'namecase'
[  576.371327][ T9303] EXT4-fs (loop1): barriers disabled
[  576.415789][ T9303] JBD2: no valid journal superblock found
[  576.439876][ T9303] EXT4-fs (loop1): error loading journal
[  576.518999][ T9314] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d)
[  577.310574][ T4189] exFAT-fs (loop3): invalid start cluster (4278190088)
[  577.398475][ T9320] loop5: detected capacity change from 0 to 32768
[  577.532097][ T9326] comedi comedi1: pc212e: a I/O base address must be specified
[  578.928498][ T9326] overlayfs: failed to resolve './file1': -2
[  579.035826][ T9320] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  579.044054][ T9320] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  579.072826][ T9320] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[  579.083475][ T4693] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  579.112157][ T4693] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  579.346248][ T9329] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1237'.
[  579.392164][ T9329] loop3: detected capacity change from 0 to 64
[  581.124363][ T4693] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 2012ms
[  581.217035][ T4693] gfs2: fsid=syz:syz.0: jid=0: Done
[  581.222306][ T9320] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  581.236990][ T9320] gfs2: fsid=syz:syz.0: can't start logd thread: -4
[  581.408350][ T9340] loop2: detected capacity change from 0 to 64
[  583.331008][ T9345] loop1: detected capacity change from 0 to 256
[  583.440780][ T9349] overlayfs: failed to resolve './bus': -2
[  586.068962][ T9362] device syzkaller0 entered promiscuous mode
[  587.640277][ T9371] syz.5.1249 (9371): drop_caches: 2
[  587.661155][ T9374] nr0: tun_chr_ioctl cmd 1074025677
[  587.667836][ T9374] nr0: linktype set to 0
[  587.673184][ T9374] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1251'.
[  588.846249][ T9381] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1253'.
[  588.902099][ T9381] loop5: detected capacity change from 0 to 64
[  589.039917][ T9383] loop4: detected capacity change from 0 to 512
[  589.123420][ T9391] overlayfs: failed to resolve './bus': -2
[  589.612646][ T9389] loop2: detected capacity change from 0 to 1024
[  590.126207][ T9385] FAULT_INJECTION: forcing a failure.
[  590.126207][ T9385] name failslab, interval 1, probability 0, space 0, times 0
[  590.139598][ T9385] CPU: 0 PID: 9385 Comm: syz.1.1254 Not tainted syzkaller #0
[  590.146994][ T9385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  590.157059][ T9385] Call Trace:
[  590.160357][ T9385]  <TASK>
[  590.163297][ T9385]  dump_stack_lvl+0x188/0x250
[  590.167994][ T9385]  ? show_regs_print_info+0x20/0x20
[  590.173203][ T9385]  ? load_image+0x410/0x410
[  590.177724][ T9385]  should_fail+0x383/0x4b0
[  590.182151][ T9385]  should_failslab+0x5/0x20
[  590.186665][ T9385]  slab_pre_alloc_hook+0x51/0xc0
[  590.191608][ T9385]  ? __sigqueue_alloc+0x3a6/0x4b0
[  590.196641][ T9385]  kmem_cache_alloc+0x3d/0x280
[  590.201432][ T9385]  __sigqueue_alloc+0x3a6/0x4b0
[  590.206291][ T9385]  __send_signal+0x223/0xd40
[  590.210892][ T9385]  do_notify_parent+0xa90/0xc90
[  590.215747][ T9385]  ? trace_signal_generate+0x1c0/0x1c0
[  590.221212][ T9385]  ? __lock_acquire+0x7b50/0x7b50
[  590.226258][ T9385]  release_task+0x1190/0x15f0
[  590.230951][ T9385]  ? do_exit+0x14e2/0x2110
[  590.235368][ T9385]  ? delayed_put_task_struct+0x260/0x260
[  590.241004][ T9385]  ? _raw_write_lock_irq+0xb7/0xf0
[  590.246125][ T9385]  ? _raw_write_lock_irqsave+0x100/0x100
[  590.251769][ T9385]  ? _raw_write_unlock_irq+0x1f/0x40
[  590.257062][ T9385]  ? lockdep_hardirqs_on+0x94/0x140
[  590.262279][ T9385]  do_exit+0x14e2/0x2110
[  590.266538][ T9385]  ? put_task_struct+0x80/0x80
[  590.271310][ T9385]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  590.277298][ T9385]  ? _raw_spin_lock_irq+0xb7/0xf0
[  590.282330][ T9385]  do_group_exit+0x12c/0x2f0
[  590.286928][ T9385]  ? lockdep_hardirqs_on+0x94/0x140
[  590.292137][ T9385]  get_signal+0x7eb/0x12e0
[  590.296569][ T9385]  arch_do_signal_or_restart+0xe6/0x12a0
[  590.302227][ T9385]  ? futex_exit_release+0x1c0/0x1c0
[  590.307433][ T9385]  ? get_sigframe_size+0x10/0x10
[  590.312375][ T9385]  ? __context_tracking_exit+0x4c/0x80
[  590.317848][ T9385]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  590.323847][ T9385]  ? exit_to_user_mode_loop+0x3b/0x130
[  590.329334][ T9385]  exit_to_user_mode_loop+0x9e/0x130
[  590.334625][ T9385]  exit_to_user_mode_prepare+0xee/0x180
[  590.340172][ T9385]  syscall_exit_to_user_mode+0x16/0x40
[  590.345638][ T9385]  do_syscall_64+0x58/0xa0
[  590.350056][ T9385]  ? clear_bhb_loop+0x30/0x80
[  590.354732][ T9385]  ? clear_bhb_loop+0x30/0x80
[  590.359430][ T9385]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  590.365331][ T9385] RIP: 0033:0x7f5e2bfe0159
[  590.369753][ T9385] Code: Unable to access opcode bytes at RIP 0x7f5e2bfe012f.
[  590.377126][ T9385] RSP: 002b:00007f5e2a2380e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  590.385569][ T9385] RAX: fffffffffffffe00 RBX: 00007f5e2c267fa8 RCX: 00007f5e2bfe0159
[  590.393543][ T9385] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f5e2c267fa8
[  590.401529][ T9385] RBP: 00007f5e2c267fa0 R08: 0000000000000000 R09: 0000000000000000
[  590.409505][ T9385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  590.417477][ T9385] R13: 00007f5e2c268038 R14: 00007fff93573190 R15: 00007fff93573278
[  590.425460][ T9385]  </TASK>
[  591.763139][ T9389] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[  591.787571][ T9389] EXT4-fs (loop2): barriers disabled
[  591.792943][ T9389] JBD2: no valid journal superblock found
[  591.809243][ T9389] EXT4-fs (loop2): error loading journal
[  591.830215][ T9397] loop1: detected capacity change from 0 to 256
[  593.280423][ T9407] loop5: detected capacity change from 0 to 512
[  593.427519][ T9407] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem
[  593.497461][ T9409] ptp ptp0: max value is 1
[  593.732114][ T9407] EXT4-fs (loop5): failed to open journal device unknown-block(0,0) -6
[  594.882718][ T9421] nr0: tun_chr_ioctl cmd 1074025677
[  595.817840][ T9421] nr0: linktype set to 0
[  595.856728][ T9421] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1265'.
[  596.082489][ T9427] FAULT_INJECTION: forcing a failure.
[  596.082489][ T9427] name failslab, interval 1, probability 0, space 0, times 0
[  596.095129][ T9427] CPU: 0 PID: 9427 Comm: syz.5.1268 Not tainted syzkaller #0
[  596.102512][ T9427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  596.112583][ T9427] Call Trace:
[  596.115868][ T9427]  <TASK>
[  596.118814][ T9427]  dump_stack_lvl+0x188/0x250
[  596.123523][ T9427]  ? show_regs_print_info+0x20/0x20
[  596.128744][ T9427]  ? load_image+0x410/0x410
[  596.133285][ T9427]  should_fail+0x383/0x4b0
[  596.137725][ T9427]  should_failslab+0x5/0x20
[  596.142242][ T9427]  slab_pre_alloc_hook+0x51/0xc0
[  596.147212][ T9427]  ? __sigqueue_alloc+0x3a6/0x4b0
[  596.152267][ T9427]  kmem_cache_alloc+0x3d/0x280
[  596.157085][ T9427]  __sigqueue_alloc+0x3a6/0x4b0
[  596.161963][ T9427]  __send_signal+0x223/0xd40
[  596.166578][ T9427]  do_notify_parent+0xa90/0xc90
[  596.171459][ T9427]  ? trace_signal_generate+0x1c0/0x1c0
[  596.176941][ T9427]  ? __lock_acquire+0x7b50/0x7b50
[  596.182020][ T9427]  release_task+0x1190/0x15f0
[  596.186731][ T9427]  ? do_exit+0x14e2/0x2110
[  596.191168][ T9427]  ? delayed_put_task_struct+0x260/0x260
[  596.196826][ T9427]  ? _raw_write_lock_irq+0xb7/0xf0
[  596.201963][ T9427]  ? _raw_write_lock_irqsave+0x100/0x100
[  596.207625][ T9427]  ? _raw_write_unlock_irq+0x1f/0x40
[  596.212935][ T9427]  ? lockdep_hardirqs_on+0x94/0x140
[  596.218175][ T9427]  do_exit+0x14e2/0x2110
[  596.222446][ T9427]  ? put_task_struct+0x80/0x80
[  596.227248][ T9427]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  596.233279][ T9427]  ? _raw_spin_lock_irq+0xb7/0xf0
[  596.238326][ T9427]  do_group_exit+0x12c/0x2f0
[  596.242926][ T9427]  ? lockdep_hardirqs_on+0x94/0x140
[  596.248150][ T9427]  get_signal+0x7eb/0x12e0
[  596.252606][ T9427]  arch_do_signal_or_restart+0xe6/0x12a0
[  596.258275][ T9427]  ? futex_exit_release+0x1c0/0x1c0
[  596.263490][ T9427]  ? get_sigframe_size+0x10/0x10
[  596.268461][ T9427]  ? __context_tracking_exit+0x4c/0x80
[  596.273954][ T9427]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  596.279963][ T9427]  ? exit_to_user_mode_loop+0x3b/0x130
[  596.285441][ T9427]  exit_to_user_mode_loop+0x9e/0x130
[  596.290745][ T9427]  exit_to_user_mode_prepare+0xee/0x180
[  596.296309][ T9427]  syscall_exit_to_user_mode+0x16/0x40
[  596.301792][ T9427]  do_syscall_64+0x58/0xa0
[  596.306223][ T9427]  ? clear_bhb_loop+0x30/0x80
[  596.310953][ T9427]  ? clear_bhb_loop+0x30/0x80
[  596.315646][ T9427]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  596.321556][ T9427] RIP: 0033:0x7f49ce5df159
[  596.325984][ T9427] Code: Unable to access opcode bytes at RIP 0x7f49ce5df12f.
[  596.333408][ T9427] RSP: 002b:00007f49cc8370e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  596.341850][ T9427] RAX: fffffffffffffe00 RBX: 00007f49ce866fa8 RCX: 00007f49ce5df159
[  596.349834][ T9427] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f49ce866fa8
[  596.357822][ T9427] RBP: 00007f49ce866fa0 R08: 0000000000000000 R09: 0000000000000000
[  596.365806][ T9427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  596.373789][ T9427] R13: 00007f49ce867038 R14: 00007ffef2c62dc0 R15: 00007ffef2c62ea8
[  596.381787][ T9427]  </TASK>
[  596.478667][ T9430] device syzkaller0 entered promiscuous mode
[  596.667143][ T9432] loop3: detected capacity change from 0 to 1024
[  596.684414][ T9432] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[  596.730553][ T9432] EXT4-fs (loop3): barriers disabled
[  596.745709][ T9432] JBD2: no valid journal superblock found
[  596.751483][ T9432] EXT4-fs (loop3): error loading journal
[  598.901727][ T9448] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1267'.
[  598.937851][ T9448] loop1: detected capacity change from 0 to 64
[  599.320501][ T9457] loop2: detected capacity change from 0 to 64
[  599.921839][ T9456] loop4: detected capacity change from 0 to 32768
[  599.952714][ T4205] Bluetooth: hci1: SCO packet for unknown connection handle 0
[  599.972699][ T9455] FAULT_INJECTION: forcing a failure.
[  599.972699][ T9455] name failslab, interval 1, probability 0, space 0, times 0
[  600.649881][ T9455] CPU: 1 PID: 9455 Comm: syz.1.1275 Not tainted syzkaller #0
[  600.657319][ T9455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  600.667391][ T9455] Call Trace:
[  600.670689][ T9455]  <TASK>
[  600.673635][ T9455]  dump_stack_lvl+0x188/0x250
[  600.678334][ T9455]  ? show_regs_print_info+0x20/0x20
[  600.683555][ T9455]  ? load_image+0x410/0x410
[  600.688087][ T9455]  ? __might_sleep+0xf0/0xf0
[  600.692702][ T9455]  ? __lock_acquire+0x7b50/0x7b50
[  600.697758][ T9455]  ? lock_chain_count+0x20/0x20
[  600.702643][ T9455]  should_fail+0x383/0x4b0
[  600.707095][ T9455]  should_failslab+0x5/0x20
[  600.711634][ T9455]  slab_pre_alloc_hook+0x51/0xc0
[  600.716597][ T9455]  __kmalloc_node+0x6d/0x3a0
[  600.721217][ T9455]  ? kvmalloc_node+0x84/0x130
[  600.725927][ T9455]  kvmalloc_node+0x84/0x130
[  600.730460][ T9455]  v4l2_ctrl_new+0x70f/0x1310
[  600.735179][ T9455]  v4l2_ctrl_new_std+0x247/0x300
[  600.740143][ T9455]  ? handler_new_ref+0x8d0/0x8d0
[  600.745112][ T9455]  ? media_request_object_init+0x88/0xe0
[  600.750757][ T9455]  ? v4l2_ctrl_handler_init_class+0x204/0x2d0
[  600.756849][ T9455]  vim2m_open+0x151/0x630
[  600.761215][ T9455]  v4l2_open+0x201/0x340
[  600.765495][ T9455]  chrdev_open+0x585/0x5f0
[  600.769940][ T9455]  ? cd_forget+0x160/0x160
[  600.774384][ T9455]  ? fsnotify_perm+0x3a7/0x560
[  600.779163][ T9455]  ? cd_forget+0x160/0x160
[  600.783574][ T9455]  do_dentry_open+0x7f7/0xf90
[  600.788251][ T9455]  ? vfs_open+0x2b/0x80
[  600.792404][ T9455]  path_openat+0x2718/0x2fb0
[  600.797003][ T9455]  ? __kasan_slab_alloc+0xa9/0xc0
[  600.802035][ T9455]  ? do_filp_open+0x400/0x400
[  600.806740][ T9455]  do_filp_open+0x1df/0x400
[  600.811276][ T9455]  ? vfs_tmpfile+0x300/0x300
[  600.815885][ T9455]  ? _raw_spin_unlock+0x24/0x40
[  600.820750][ T9455]  ? alloc_fd+0x59e/0x650
[  600.825093][ T9455]  do_sys_openat2+0x14b/0x500
[  600.829795][ T9455]  ? __lock_acquire+0x7b50/0x7b50
[  600.834852][ T9455]  ? do_sys_open+0xe0/0xe0
[  600.839264][ T9455]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  600.845239][ T9455]  ? lock_chain_count+0x20/0x20
[  600.850085][ T9455]  __x64_sys_openat+0x135/0x160
[  600.854931][ T9455]  do_syscall_64+0x4c/0xa0
[  600.859334][ T9455]  ? clear_bhb_loop+0x30/0x80
[  600.864005][ T9455]  ? clear_bhb_loop+0x30/0x80
[  600.868676][ T9455]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  600.874580][ T9455] RIP: 0033:0x7f5e2bfe0159
[  600.878987][ T9455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  600.898580][ T9455] RSP: 002b:00007f5e2a238028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  600.906985][ T9455] RAX: ffffffffffffffda RBX: 00007f5e2c267fa0 RCX: 00007f5e2bfe0159
[  600.914988][ T9455] RDX: 0000000000000002 RSI: 0000200000000040 RDI: ffffffffffffff9c
[  600.922956][ T9455] RBP: 00007f5e2c07706b R08: 0000000000000000 R09: 0000000000000000
[  600.930943][ T9455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  600.938939][ T9455] R13: 00007f5e2c268038 R14: 00007f5e2c267fa0 R15: 00007fff93573278
[  600.946938][ T9455]  </TASK>
[  602.878965][ T9467] FAULT_INJECTION: forcing a failure.
[  602.878965][ T9467] name failslab, interval 1, probability 0, space 0, times 0
[  602.936398][ T9468] nr0: tun_chr_ioctl cmd 1074025677
[  602.941769][ T9468] nr0: linktype set to 0
[  602.975296][ T9467] CPU: 0 PID: 9467 Comm: syz.4.1279 Not tainted syzkaller #0
[  602.982710][ T9467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  602.992788][ T9467] Call Trace:
[  602.996089][ T9467]  <TASK>
[  602.999023][ T9467]  dump_stack_lvl+0x188/0x250
[  603.003707][ T9467]  ? show_regs_print_info+0x20/0x20
[  603.008917][ T9467]  ? load_image+0x410/0x410
[  603.013439][ T9467]  ? __might_sleep+0xf0/0xf0
[  603.018037][ T9467]  ? __lock_acquire+0x7b50/0x7b50
[  603.023104][ T9467]  should_fail+0x383/0x4b0
[  603.027562][ T9467]  should_failslab+0x5/0x20
[  603.028298][ T9468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1278'.
[  603.032090][ T9467]  slab_pre_alloc_hook+0x51/0xc0
[  603.032118][ T9467]  ? mempool_free+0x320/0x320
[  603.050602][ T9467]  ? mempool_init_node+0x1e5/0x480
[  603.055736][ T9467]  kmem_cache_alloc+0x3d/0x280
[  603.060659][ T9467]  ? mempool_free+0x320/0x320
[  603.065389][ T9467]  mempool_init_node+0x1e5/0x480
[  603.070401][ T9467]  ? mempool_alloc_slab+0x60/0x60
[  603.075444][ T9467]  ? mempool_free+0x320/0x320
[  603.080163][ T9467]  mempool_create+0x7d/0xc0
[  603.084695][ T9467]  ceph_osdc_init+0x4cb/0x8a0
[  603.089403][ T9467]  ceph_create_client+0x242/0x300
[  603.094452][ T9467]  ceph_get_tree+0xf6/0x1290
[  603.099077][ T9467]  ? bpf_lsm_capable+0x5/0x10
[  603.103774][ T9467]  ? security_capable+0x85/0xb0
[  603.108636][ T9467]  vfs_get_tree+0x88/0x270
[  603.113077][ T9467]  vfs_fsconfig_locked+0x22f/0x400
[  603.118184][ T9467]  __se_sys_fsconfig+0x69e/0x7e0
[  603.123147][ T9467]  ? __x64_sys_fsconfig+0xc0/0xc0
[  603.128188][ T9467]  ? lockdep_hardirqs_on+0x94/0x140
[  603.133400][ T9467]  ? __x64_sys_fsconfig+0x1c/0xc0
[  603.138421][ T9467]  do_syscall_64+0x4c/0xa0
[  603.142836][ T9467]  ? clear_bhb_loop+0x30/0x80
[  603.147515][ T9467]  ? clear_bhb_loop+0x30/0x80
[  603.152190][ T9467]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  603.158081][ T9467] RIP: 0033:0x7f796550f159
[  603.162493][ T9467] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  603.182105][ T9467] RSP: 002b:00007f7963767028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af
[  603.190522][ T9467] RAX: ffffffffffffffda RBX: 00007f7965796fa0 RCX: 00007f796550f159
[  603.198495][ T9467] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003
[  603.206473][ T9467] RBP: 00007f79655a606b R08: 0000000000000000 R09: 0000000000000000
[  603.214450][ T9467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  603.222437][ T9467] R13: 00007f7965797038 R14: 00007f7965796fa0 R15: 00007ffc9edb5298
[  603.230418][ T9467]  </TASK>
[  603.424047][ T9473] loop2: detected capacity change from 0 to 1024
[  603.556980][ T9473] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[  603.590847][ T9473] EXT4-fs (loop2): barriers disabled
[  603.605618][ T9473] JBD2: no valid journal superblock found
[  603.622581][ T9473] EXT4-fs (loop2): error loading journal
[  604.870463][ T9482] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1285'.
[  604.882186][ T9482] loop1: detected capacity change from 0 to 64
[  605.034788][ T9483] loop4: detected capacity change from 0 to 512
[  605.134391][ T9483] EXT4-fs (loop4): Ignoring removed nobh option
[  605.185185][ T9485] loop3: detected capacity change from 0 to 32768
[  605.267605][ T9483] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13
[  605.435933][ T9483] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.1284: attempt to clear invalid blocks 1 len 1
[  605.466996][ T9483] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  605.481646][ T9483] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1284: invalid indirect mapped block 1819239214 (level 0)
[  605.499258][ T9489] loop5: detected capacity change from 0 to 64
[  605.505745][ T9483] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1284: invalid indirect mapped block 1819239214 (level 1)
[  605.523903][ T9483] EXT4-fs (loop4): 1 truncate cleaned up
[  605.523927][ T9483] EXT4-fs (loop4): mounted filesystem without journal. Opts: nolazytime,resuid=0x0000000000000000,jqfmt=vfsv1,errors=continue,nobh,usrjquota=..,errors=continue. Quota mode: writeback.
[  605.827423][ T9496] loop3: detected capacity change from 0 to 32768
[  605.842653][ T9495] loop1: detected capacity change from 0 to 64
[  607.892447][ T9505] nr0: tun_chr_ioctl cmd 1074025677
[  607.892607][ T9505] nr0: linktype set to 0
[  607.899077][ T9505] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1292'.
[  608.146365][ T9510] device syzkaller0 entered promiscuous mode
[  608.161382][ T9513] syz.3.1296 (9513): drop_caches: 2
[  608.595436][ T9517] loop3: detected capacity change from 0 to 64
[  608.827672][ T9521] loop1: detected capacity change from 0 to 512
[  608.872852][ T9524] loop2: detected capacity change from 0 to 512
[  608.890652][ T9521] EXT4-fs (loop1): Ignoring removed nobh option
[  608.936670][ T9521] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13
[  608.972301][ T9524] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  608.981662][ T9521] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.1300: attempt to clear invalid blocks 1 len 1
[  608.995350][ T9521] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  609.010134][ T9521] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1300: invalid indirect mapped block 1819239214 (level 0)
[  609.027215][ T9521] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1300: invalid indirect mapped block 1819239214 (level 1)
[  609.042216][ T9521] EXT4-fs (loop1): 1 truncate cleaned up
[  609.047978][ T9521] EXT4-fs (loop1): mounted filesystem without journal. Opts: nolazytime,resuid=0x0000000000000000,jqfmt=vfsv1,errors=continue,nobh,usrjquota=..,errors=continue. Quota mode: writeback.
[  609.374115][ T9529] loop3: detected capacity change from 0 to 32768
[  609.395119][ T9524] EXT4-fs (loop2): failed to open journal device unknown-block(0,0) -6
[  609.649637][ T9534] FAULT_INJECTION: forcing a failure.
[  609.649637][ T9534] name failslab, interval 1, probability 0, space 0, times 0
[  609.738250][ T9534] CPU: 0 PID: 9534 Comm: syz.5.1295 Not tainted syzkaller #0
[  609.745675][ T9534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  609.755755][ T9534] Call Trace:
[  609.759048][ T9534]  <TASK>
[  609.761995][ T9534]  dump_stack_lvl+0x188/0x250
[  609.766718][ T9534]  ? show_regs_print_info+0x20/0x20
[  609.771947][ T9534]  ? load_image+0x410/0x410
[  609.776482][ T9534]  ? __might_sleep+0xf0/0xf0
[  609.781107][ T9534]  ? __lock_acquire+0x7b50/0x7b50
[  609.786167][ T9534]  should_fail+0x383/0x4b0
[  609.790624][ T9534]  should_failslab+0x5/0x20
[  609.795145][ T9534]  slab_pre_alloc_hook+0x51/0xc0
[  609.800102][ T9534]  __kmalloc_node+0x6d/0x3a0
[  609.804727][ T9534]  ? kvmalloc_node+0x84/0x130
[  609.809427][ T9534]  ? rcu_is_watching+0x11/0xa0
[  609.814214][ T9534]  kvmalloc_node+0x84/0x130
[  609.818742][ T9534]  ceph_msg_new2+0x162/0x4a0
[  609.823368][ T9534]  ceph_monc_init+0x5e0/0xa00
[  609.828090][ T9534]  ceph_create_client+0x221/0x300
[  609.833144][ T9534]  ceph_get_tree+0xf6/0x1290
[  609.837759][ T9534]  ? bpf_lsm_capable+0x5/0x10
[  609.842462][ T9534]  ? security_capable+0x85/0xb0
[  609.847353][ T9534]  vfs_get_tree+0x88/0x270
[  609.851800][ T9534]  vfs_fsconfig_locked+0x22f/0x400
[  609.856936][ T9534]  __se_sys_fsconfig+0x69e/0x7e0
[  609.861911][ T9534]  ? __x64_sys_fsconfig+0xc0/0xc0
[  609.866996][ T9534]  ? lockdep_hardirqs_on+0x94/0x140
[  609.872231][ T9534]  ? __x64_sys_fsconfig+0x1c/0xc0
[  609.877284][ T9534]  do_syscall_64+0x4c/0xa0
[  609.881725][ T9534]  ? clear_bhb_loop+0x30/0x80
[  609.886426][ T9534]  ? clear_bhb_loop+0x30/0x80
[  609.891134][ T9534]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  609.897076][ T9534] RIP: 0033:0x7f49ce5df159
[  609.901518][ T9534] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  609.921149][ T9534] RSP: 002b:00007f49cc837028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af
[  609.929583][ T9534] RAX: ffffffffffffffda RBX: 00007f49ce866fa0 RCX: 00007f49ce5df159
[  609.937575][ T9534] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003
[  609.945569][ T9534] RBP: 00007f49ce67606b R08: 0000000000000000 R09: 0000000000000000
[  609.953560][ T9534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  609.961552][ T9534] R13: 00007f49ce867038 R14: 00007f49ce866fa0 R15: 00007ffef2c62ea8
[  609.969572][ T9534]  </TASK>
[  609.997277][ T9539] loop4: detected capacity change from 0 to 1024
[  611.025819][ T9547] loop2: detected capacity change from 0 to 32768
[  611.052468][ T9548] nr0: tun_chr_ioctl cmd 1074025677
[  611.063265][ T9548] nr0: linktype set to 0
[  611.070057][ T9548] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1307'.
[  611.551476][ T9539] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[  611.572444][ T9539] EXT4-fs (loop4): barriers disabled
[  611.577849][ T9539] JBD2: no valid journal superblock found
[  611.584236][ T9539] EXT4-fs (loop4): error loading journal
[  611.885536][ T9557] loop5: detected capacity change from 0 to 256
[  611.911207][ T9553] syz.1.1304 (9553): drop_caches: 2
[  613.318679][ T9570] loop1: detected capacity change from 0 to 512
[  613.340462][ T9565] loop2: detected capacity change from 0 to 64
[  613.372827][ T9570] EXT4-fs (loop1): Ignoring removed nobh option
[  613.429830][ T9570] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13
[  613.449728][ T9570] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.1312: attempt to clear invalid blocks 1 len 1
[  613.463404][ T9570] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  613.477936][ T9570] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1312: invalid indirect mapped block 1819239214 (level 0)
[  613.505655][ T9570] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1312: invalid indirect mapped block 1819239214 (level 1)
[  613.521282][ T9577] syz.4.1313 (9577): drop_caches: 2
[  613.528323][ T9570] EXT4-fs (loop1): 1 truncate cleaned up
[  613.533999][ T9570] EXT4-fs (loop1): mounted filesystem without journal. Opts: nolazytime,resuid=0x0000000000000000,jqfmt=vfsv1,errors=continue,nobh,usrjquota=..,errors=continue. Quota mode: writeback.
[  613.643118][ T9574] sg_write: data in/out 768/2 bytes for SCSI command 0x0-- guessing data in;
[  613.643118][ T9574]    program syz.4.1313 not setting count and/or reply_len properly
[  613.840007][ T9582] loop2: detected capacity change from 0 to 32768
[  613.961062][ T9589] loop5: detected capacity change from 0 to 512
[  614.089213][ T9589] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem
[  614.812529][ T9600] loop4: detected capacity change from 0 to 1024
[  615.340502][ T9600] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[  615.413692][ T9600] EXT4-fs (loop4): barriers disabled
[  615.754344][ T9589] EXT4-fs (loop5): failed to open journal device unknown-block(0,0) -6
[  615.779303][ T9600] JBD2: no valid journal superblock found
[  615.825745][ T9600] EXT4-fs (loop4): error loading journal
[  616.495636][ T9608] loop1: detected capacity change from 0 to 32768
[  616.867250][ T9614] loop5: detected capacity change from 0 to 64
[  618.744022][ T9624] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  618.929746][ T9627] ptp ptp0: max value is 1
[  619.766070][ T9630] loop2: detected capacity change from 0 to 512
[  620.705310][ T9638] syz.3.1328 (9638): drop_caches: 2
[  620.717513][ T9638] sg_write: data in/out 768/2 bytes for SCSI command 0x0-- guessing data in;
[  620.717513][ T9638]    program syz.3.1328 not setting count and/or reply_len properly
[  620.762187][ T9630] EXT4-fs (loop2): Ignoring removed nobh option
[  621.017084][ T9630] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13
[  621.176182][ T9630] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.1326: attempt to clear invalid blocks 1 len 1
[  621.420827][ T9630] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  621.562157][ T9630] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1326: invalid indirect mapped block 1819239214 (level 0)
[  621.582133][ T9630] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1326: invalid indirect mapped block 1819239214 (level 1)
[  621.606527][ T9630] EXT4-fs (loop2): 1 truncate cleaned up
[  621.612307][ T9630] EXT4-fs (loop2): mounted filesystem without journal. Opts: nolazytime,resuid=0x0000000000000000,jqfmt=vfsv1,errors=continue,nobh,usrjquota=..,errors=continue. Quota mode: writeback.
[  621.990282][ T9649] FAULT_INJECTION: forcing a failure.
[  621.990282][ T9649] name failslab, interval 1, probability 0, space 0, times 0
[  622.030943][ T9652] loop5: detected capacity change from 0 to 1024
[  622.085881][ T9649] CPU: 1 PID: 9649 Comm: syz.1.1332 Not tainted syzkaller #0
[  622.093310][ T9649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  622.103382][ T9649] Call Trace:
[  622.106689][ T9649]  <TASK>
[  622.109649][ T9649]  dump_stack_lvl+0x188/0x250
[  622.114386][ T9649]  ? show_regs_print_info+0x20/0x20
[  622.119615][ T9649]  ? load_image+0x410/0x410
[  622.124161][ T9649]  ? __might_sleep+0xf0/0xf0
[  622.128780][ T9649]  ? __lock_acquire+0x7b50/0x7b50
[  622.133846][ T9649]  should_fail+0x383/0x4b0
[  622.138307][ T9649]  should_failslab+0x5/0x20
[  622.142835][ T9649]  slab_pre_alloc_hook+0x51/0xc0
[  622.147807][ T9649]  __kmalloc_node+0x6d/0x3a0
[  622.152433][ T9649]  ? kvmalloc_node+0x84/0x130
[  622.157137][ T9649]  ? rcu_is_watching+0x11/0xa0
[  622.161963][ T9649]  kvmalloc_node+0x84/0x130
[  622.166489][ T9649]  ceph_msg_new2+0x162/0x4a0
[  622.171116][ T9649]  ceph_monc_init+0x5e0/0xa00
[  622.175838][ T9649]  ceph_create_client+0x221/0x300
[  622.180902][ T9649]  ceph_get_tree+0xf6/0x1290
[  622.185517][ T9649]  ? bpf_lsm_capable+0x5/0x10
[  622.190217][ T9649]  ? security_capable+0x85/0xb0
[  622.195099][ T9649]  vfs_get_tree+0x88/0x270
[  622.199564][ T9649]  vfs_fsconfig_locked+0x22f/0x400
[  622.204706][ T9649]  __se_sys_fsconfig+0x69e/0x7e0
[  622.209672][ T9649]  ? __x64_sys_fsconfig+0xc0/0xc0
[  622.212723][ T9652] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[  622.214743][ T9649]  ? lockdep_hardirqs_on+0x94/0x140
[  622.229519][ T9649]  ? __x64_sys_fsconfig+0x1c/0xc0
[  622.234607][ T9649]  do_syscall_64+0x4c/0xa0
[  622.239056][ T9649]  ? clear_bhb_loop+0x30/0x80
[  622.243781][ T9649]  ? clear_bhb_loop+0x30/0x80
[  622.248496][ T9649]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  622.254412][ T9649] RIP: 0033:0x7f5e2bfe0159
[  622.258850][ T9649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  622.278477][ T9649] RSP: 002b:00007f5e2a238028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af
[  622.286919][ T9649] RAX: ffffffffffffffda RBX: 00007f5e2c267fa0 RCX: 00007f5e2bfe0159
[  622.288988][ T9652] EXT4-fs (loop5): barriers disabled
[  622.294922][ T9649] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003
[  622.294937][ T9649] RBP: 00007f5e2c07706b R08: 0000000000000000 R09: 0000000000000000
[  622.294951][ T9649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  622.324174][ T9649] R13: 00007f5e2c268038 R14: 00007f5e2c267fa0 R15: 00007fff93573278
[  622.332182][ T9649]  </TASK>
[  622.335295][    C1] vkms_vblank_simulate: vblank timer overrun
[  622.349438][ T9652] JBD2: no valid journal superblock found
[  622.355244][ T9652] EXT4-fs (loop5): error loading journal
[  623.829987][ T9670] loop4: detected capacity change from 0 to 512
[  623.877938][ T9670] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  623.930670][ T9674] ptp ptp0: max value is 1
[  624.046353][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[  624.053001][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[  625.615104][ T9684] loop2: detected capacity change from 0 to 32768
[  625.626113][ T9685] loop5: detected capacity change from 0 to 256
[  625.694546][ T9670] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6
[  626.178340][ T9692] sg_write: data in/out 768/2 bytes for SCSI command 0x0-- guessing data in;
[  626.178340][ T9692]    program syz.1.1343 not setting count and/or reply_len properly
[  626.274649][ T9695] loop3: detected capacity change from 0 to 256
[  626.508194][ T9695] exfat: Deprecated parameter 'namecase'
[  626.513887][ T9695] exfat: Deprecated parameter 'namecase'
[  627.006641][ T9695] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d)
[  627.029085][ T9689] syz.1.1343 (9689): drop_caches: 2
[  627.588291][ T9705] loop5: detected capacity change from 0 to 512
[  627.719339][ T9705] EXT4-fs (loop5): Ignoring removed nobh option
[  628.222415][ T9705] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13
[  628.231464][ T9705] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #13: comm syz.5.1345: attempt to clear invalid blocks 1 len 1
[  628.245482][ T9705] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  628.260357][ T9705] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.1345: invalid indirect mapped block 1819239214 (level 0)
[  628.277896][ T9705] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.1345: invalid indirect mapped block 1819239214 (level 1)
[  628.293543][ T9705] EXT4-fs (loop5): 1 truncate cleaned up
[  628.299267][ T9705] EXT4-fs (loop5): mounted filesystem without journal. Opts: nolazytime,resuid=0x0000000000000000,jqfmt=vfsv1,errors=continue,nobh,usrjquota=..,errors=continue. Quota mode: writeback.
[  628.301756][ T9711] FAULT_INJECTION: forcing a failure.
[  628.301756][ T9711] name failslab, interval 1, probability 0, space 0, times 0
[  628.416573][ T9711] CPU: 1 PID: 9711 Comm: syz.4.1347 Not tainted syzkaller #0
[  628.423992][ T9711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  628.434065][ T9711] Call Trace:
[  628.437365][ T9711]  <TASK>
[  628.440326][ T9711]  dump_stack_lvl+0x188/0x250
[  628.445031][ T9711]  ? show_regs_print_info+0x20/0x20
[  628.450240][ T9711]  ? load_image+0x410/0x410
[  628.454744][ T9711]  ? __might_sleep+0xf0/0xf0
[  628.459348][ T9711]  ? __lock_acquire+0x7b50/0x7b50
[  628.464374][ T9711]  should_fail+0x383/0x4b0
[  628.468789][ T9711]  should_failslab+0x5/0x20
[  628.473283][ T9711]  slab_pre_alloc_hook+0x51/0xc0
[  628.478212][ T9711]  ? mempool_free+0x320/0x320
[  628.482912][ T9711]  ? mempool_init_node+0x1e5/0x480
[  628.488050][ T9711]  kmem_cache_alloc+0x3d/0x280
[  628.492838][ T9711]  ? mempool_free+0x320/0x320
[  628.497642][ T9711]  mempool_init_node+0x1e5/0x480
[  628.502611][ T9711]  ? mempool_alloc_slab+0x60/0x60
[  628.507651][ T9711]  ? mempool_free+0x320/0x320
[  628.512345][ T9711]  mempool_create+0x7d/0xc0
[  628.516866][ T9711]  ceph_osdc_init+0x4cb/0x8a0
[  628.521565][ T9711]  ceph_create_client+0x242/0x300
[  628.526610][ T9711]  ceph_get_tree+0xf6/0x1290
[  628.531223][ T9711]  ? bpf_lsm_capable+0x5/0x10
[  628.535916][ T9711]  ? security_capable+0x85/0xb0
[  628.540785][ T9711]  vfs_get_tree+0x88/0x270
[  628.545357][ T9711]  vfs_fsconfig_locked+0x22f/0x400
[  628.550489][ T9711]  __se_sys_fsconfig+0x69e/0x7e0
[  628.555448][ T9711]  ? __x64_sys_fsconfig+0xc0/0xc0
[  628.560523][ T9711]  ? lockdep_hardirqs_on+0x94/0x140
[  628.565742][ T9711]  ? __x64_sys_fsconfig+0x1c/0xc0
[  628.570776][ T9711]  do_syscall_64+0x4c/0xa0
[  628.575180][ T9711]  ? clear_bhb_loop+0x30/0x80
[  628.579858][ T9711]  ? clear_bhb_loop+0x30/0x80
[  628.584552][ T9711]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  628.590454][ T9711] RIP: 0033:0x7f796550f159
[  628.594860][ T9711] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  628.614469][ T9711] RSP: 002b:00007f7963767028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af
[  628.622898][ T9711] RAX: ffffffffffffffda RBX: 00007f7965796fa0 RCX: 00007f796550f159
[  628.630868][ T9711] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003
[  628.638878][ T9711] RBP: 00007f79655a606b R08: 0000000000000000 R09: 0000000000000000
[  628.646860][ T9711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  628.654826][ T9711] R13: 00007f7965797038 R14: 00007f7965796fa0 R15: 00007ffc9edb5298
[  628.662796][ T9711]  </TASK>
[  628.665908][    C1] vkms_vblank_simulate: vblank timer overrun
[  628.874010][ T9722] loop2: detected capacity change from 0 to 1024
[  628.965813][ T9722] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[  629.076138][ T9722] EXT4-fs (loop2): barriers disabled
[  629.108487][ T9722] JBD2: no valid journal superblock found
[  629.134177][ T9722] EXT4-fs (loop2): error loading journal
[  630.460195][ T9735] loop5: detected capacity change from 0 to 32768
[  631.853853][ T9735] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[  631.863069][ T9735] BTRFS info (device loop5): setting nodatasum
[  631.870325][ T9735] BTRFS info (device loop5): force zlib compression, level 3
[  631.877781][ T9735] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_LZO (0x8)
[  631.887122][ T9735] BTRFS info (device loop5): use lzo compression, level 0
[  631.894261][ T9735] BTRFS info (device loop5): turning on flush-on-commit
[  631.901248][ T9735] BTRFS info (device loop5): enabling auto defrag
[  631.907781][ T9735] BTRFS info (device loop5): max_inline at 4096
[  631.914097][ T9735] BTRFS info (device loop5): using free space tree
[  631.920652][ T9735] BTRFS info (device loop5): has skinny extents
[  631.986823][   T26] audit: type=1800 audit(1790183768.639:50): pid=9742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1357" name=80 dev="sda1" ino=2048 res=0 errno=0
[  632.134729][ T9735] BTRFS info (device loop5): enabling ssd optimizations
[  632.161104][ T9765] loop4: detected capacity change from 0 to 256
[  634.183843][ T9776] loop4: detected capacity change from 0 to 512
[  634.430348][ T9776] EXT4-fs (loop4): Ignoring removed nobh option
[  634.495553][ T9776] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13
[  634.504737][ T9776] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.1361: attempt to clear invalid blocks 1 len 1
[  634.533270][ T9776] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  634.547626][ T9776] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1361: invalid indirect mapped block 1819239214 (level 0)
[  634.561896][ T9776] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1361: invalid indirect mapped block 1819239214 (level 1)
[  634.577304][ T9776] EXT4-fs (loop4): 1 truncate cleaned up
[  634.582943][ T9776] EXT4-fs (loop4): mounted filesystem without journal. Opts: nolazytime,resuid=0x0000000000000000,jqfmt=vfsv1,errors=continue,nobh,usrjquota=..,errors=continue. Quota mode: writeback.
[  634.973982][ T9775] loop2: detected capacity change from 0 to 64
[  634.980491][ T9782] FAULT_INJECTION: forcing a failure.
[  634.980491][ T9782] name failslab, interval 1, probability 0, space 0, times 0
[  635.089845][ T9782] CPU: 1 PID: 9782 Comm: syz.4.1363 Not tainted syzkaller #0
[  635.097365][ T9782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  635.107431][ T9782] Call Trace:
[  635.110709][ T9782]  <TASK>
[  635.113651][ T9782]  dump_stack_lvl+0x188/0x250
[  635.118327][ T9782]  ? show_regs_print_info+0x20/0x20
[  635.123545][ T9782]  ? load_image+0x410/0x410
[  635.128043][ T9782]  ? __might_sleep+0xf0/0xf0
[  635.132633][ T9782]  ? __lock_acquire+0x7b50/0x7b50
[  635.137681][ T9782]  should_fail+0x383/0x4b0
[  635.142097][ T9782]  should_failslab+0x5/0x20
[  635.146598][ T9782]  slab_pre_alloc_hook+0x51/0xc0
[  635.151539][ T9782]  __kmalloc_node+0x6d/0x3a0
[  635.156266][ T9782]  ? kvmalloc_node+0x84/0x130
[  635.160945][ T9782]  ? rcu_is_watching+0x11/0xa0
[  635.165707][ T9782]  kvmalloc_node+0x84/0x130
[  635.170328][ T9782]  ceph_msg_new2+0x162/0x4a0
[  635.174937][ T9782]  ceph_monc_init+0x5e0/0xa00
[  635.179658][ T9782]  ceph_create_client+0x221/0x300
[  635.184683][ T9782]  ceph_get_tree+0xf6/0x1290
[  635.189296][ T9782]  ? bpf_lsm_capable+0x5/0x10
[  635.193973][ T9782]  ? security_capable+0x85/0xb0
[  635.198816][ T9782]  vfs_get_tree+0x88/0x270
[  635.203229][ T9782]  vfs_fsconfig_locked+0x22f/0x400
[  635.208349][ T9782]  __se_sys_fsconfig+0x69e/0x7e0
[  635.213335][ T9782]  ? __x64_sys_fsconfig+0xc0/0xc0
[  635.218390][ T9782]  ? lockdep_hardirqs_on+0x94/0x140
[  635.223629][ T9782]  ? __x64_sys_fsconfig+0x1c/0xc0
[  635.228657][ T9782]  do_syscall_64+0x4c/0xa0
[  635.233067][ T9782]  ? clear_bhb_loop+0x30/0x80
[  635.237738][ T9782]  ? clear_bhb_loop+0x30/0x80
[  635.242431][ T9782]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  635.248319][ T9782] RIP: 0033:0x7f796550f159
[  635.252736][ T9782] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  635.272538][ T9782] RSP: 002b:00007f7963767028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af
[  635.280955][ T9782] RAX: ffffffffffffffda RBX: 00007f7965796fa0 RCX: 00007f796550f159
[  635.288930][ T9782] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003
[  635.296900][ T9782] RBP: 00007f79655a606b R08: 0000000000000000 R09: 0000000000000000
[  635.304884][ T9782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  635.312854][ T9782] R13: 00007f7965797038 R14: 00007f7965796fa0 R15: 00007ffc9edb5298
[  635.320853][ T9782]  </TASK>
[  635.473644][ T4189] exFAT-fs (loop3): invalid start cluster (4278190088)
[  636.652643][ T9796] device syzkaller0 entered promiscuous mode
[  639.326929][ T9814] loop3: detected capacity change from 0 to 32768
[  639.380162][ T9814] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1371 (9814)
[  639.436655][ T9816] loop5: detected capacity change from 0 to 256
[  639.456083][ T9818] loop4: detected capacity change from 0 to 256
[  639.536673][ T9816] exfat: Deprecated parameter 'namecase'
[  639.545319][ T9814] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  639.554109][ T9814] BTRFS info (device loop3): setting nodatasum
[  639.560316][ T9814] BTRFS info (device loop3): force zlib compression, level 3
[  639.567713][ T9814] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8)
[  639.576963][ T9814] BTRFS info (device loop3): use lzo compression, level 0
[  639.584077][ T9814] BTRFS info (device loop3): turning on flush-on-commit
[  639.591260][ T9814] BTRFS info (device loop3): enabling auto defrag
[  639.597778][ T9814] BTRFS info (device loop3): max_inline at 4096
[  639.604094][ T9814] BTRFS info (device loop3): using free space tree
[  639.608587][ T9816] exfat: Deprecated parameter 'namecase'
[  639.610646][ T9814] BTRFS info (device loop3): has skinny extents
[  639.712962][ T9816] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d)
[  640.120854][ T9839] loop4: detected capacity change from 0 to 64
[  642.015802][ T9814] BTRFS info (device loop3): enabling ssd optimizations
[  642.844581][ T9857] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  643.927130][ T9857] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  644.148319][ T9869] loop3: detected capacity change from 0 to 256
[  644.160707][ T9868] device syzkaller0 entered promiscuous mode
[  644.297521][ T5671] exFAT-fs (loop5): invalid start cluster (4278190088)
[  644.590025][ T9880] loop3: detected capacity change from 0 to 64
[  647.337377][ T9896] loop2: detected capacity change from 0 to 512
[  648.028359][ T9899] ptp ptp0: max value is 1
[  648.312020][ T9896] EXT4-fs (loop2): Ignoring removed nobh option
[  648.362975][ T9896] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13
[  648.371885][ T9896] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.1373: attempt to clear invalid blocks 1 len 1
[  648.385240][ T9896] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  648.399652][ T9896] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1373: invalid indirect mapped block 1819239214 (level 0)
[  648.414009][ T9896] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1373: invalid indirect mapped block 1819239214 (level 1)
[  648.432828][ T9896] EXT4-fs (loop2): 1 truncate cleaned up
[  648.438843][ T9896] EXT4-fs (loop2): mounted filesystem without journal. Opts: nolazytime,resuid=0x0000000000000000,jqfmt=vfsv1,errors=continue,nobh,usrjquota=..,errors=continue. Quota mode: writeback.
[  650.041377][ T9917] loop2: detected capacity change from 0 to 256
[  650.056480][ T9917] exfat: Deprecated parameter 'namecase'
[  650.083905][ T9917] exfat: Deprecated parameter 'namecase'
[  650.091888][ T9910] device syzkaller0 entered promiscuous mode
[  650.281667][ T9921] loop4: detected capacity change from 0 to 64
[  651.084288][ T9917] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d)
[  651.430574][ T4186] exFAT-fs (loop2): invalid start cluster (4278190088)
[  651.921395][ T9924] loop4: detected capacity change from 0 to 32768
[  651.964385][ T9924] 
[  651.964385][ T9924]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  651.964385][ T9924] 
[  653.013518][ T9942] loop2: detected capacity change from 0 to 1024
[  653.117651][ T9924] 
[  653.117651][ T9924]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  653.117651][ T9924] 
[  653.253402][ T9924] 
[  653.253402][ T9924]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  653.253402][ T9924] 
[  653.286057][ T9942] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[  653.308821][ T9950] loop3: detected capacity change from 0 to 512
[  654.506181][ T9924] 
[  654.506181][ T9924]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  654.506181][ T9924] 
[  654.528537][ T9942] EXT4-fs (loop2): barriers disabled
[  654.534029][ T9942] JBD2: no valid journal superblock found
[  654.548229][ T9950] EXT4-fs (loop3): Ignoring removed nobh option
[  654.557784][ T9924] 
[  654.557784][ T9924]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  654.557784][ T9924] 
[  654.626533][ T9950] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13
[  654.635659][ T9950] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.1408: attempt to clear invalid blocks 1 len 1
[  654.649380][ T9950] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  654.655319][ T9942] EXT4-fs (loop2): error loading journal
[  654.664060][ T9950] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1408: invalid indirect mapped block 1819239214 (level 0)
[  654.687718][ T9950] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1408: invalid indirect mapped block 1819239214 (level 1)
[  654.703168][ T9950] EXT4-fs (loop3): 1 truncate cleaned up
[  654.708882][ T9950] EXT4-fs (loop3): mounted filesystem without journal. Opts: nolazytime,resuid=0x0000000000000000,jqfmt=vfsv1,errors=continue,nobh,usrjquota=..,errors=continue. Quota mode: writeback.
[  654.710759][ T9924] 
[  654.710759][ T9924]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  654.710759][ T9924] 
[  654.754882][  T276] 
[  654.754882][  T276]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  654.754882][  T276] 
[  654.955326][ T4187] 
[  654.955326][ T4187]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  654.955326][ T4187] 
[  655.282643][ T4187] 
[  655.282643][ T4187]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  655.282643][ T4187] 
[  655.738539][ T9962] loop2: detected capacity change from 0 to 64
[  657.899758][ T9969] device syzkaller0 entered promiscuous mode
[  658.008533][ T9975] loop5: detected capacity change from 0 to 256
[  658.223909][ T9978] loop2: detected capacity change from 0 to 64
[  660.059170][ T9993] loop3: detected capacity change from 0 to 512
[  660.068416][ T9994] loop1: detected capacity change from 0 to 1024
[  660.205639][ T9993] EXT4-fs (loop3): Ignoring removed nobh option
[  660.217042][ T9994] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[  660.258980][ T9994] EXT4-fs (loop1): barriers disabled
[  660.323670][T10002] loop2: detected capacity change from 0 to 128
[  660.435979][ T9994] JBD2: no valid journal superblock found
[  660.442168][ T9994] EXT4-fs (loop1): error loading journal
[  660.695607][T10002] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  660.714686][T10002] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  661.108417][ T9993] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13
[  661.128918][ T9993] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.1421: attempt to clear invalid blocks 1 len 1
[  661.209740][ T9993] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  661.224279][ T9993] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1421: invalid indirect mapped block 1819239214 (level 0)
[  661.607747][ T9993] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1421: invalid indirect mapped block 1819239214 (level 1)
[  661.623413][ T9993] EXT4-fs (loop3): 1 truncate cleaned up
[  661.629652][ T9993] EXT4-fs (loop3): mounted filesystem without journal. Opts: nolazytime,resuid=0x0000000000000000,jqfmt=vfsv1,errors=continue,nobh,usrjquota=..,errors=continue. Quota mode: writeback.
[  662.790389][T10025] loop1: detected capacity change from 0 to 256
[  662.905206][T10028] loop2: detected capacity change from 0 to 64
[  664.941738][T10042] loop5: detected capacity change from 0 to 1024
[  664.955067][T10030] md: could not open device unknown-block(7,0).
[  665.003367][T10030] md: error, md_import_device() returned -16
[  665.188790][T10042] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[  665.496416][T10042] EXT4-fs (loop5): barriers disabled
[  665.582118][T10042] JBD2: no valid journal superblock found
[  665.677672][T10042] EXT4-fs (loop5): error loading journal
[  666.275792][T10055] loop2: detected capacity change from 0 to 512
[  666.789995][T10055] EXT4-fs (loop2): Ignoring removed nobh option
[  667.316855][T10056] loop3: detected capacity change from 0 to 16
[  667.909834][T10056] erofs: (device loop3): erofs_read_superblock: blkszbits 9 isn't supported on this platform
[  668.276561][T10055] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13
[  668.290369][T10055] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.1437: attempt to clear invalid blocks 1 len 1
[  668.307137][T10055] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  668.321998][T10055] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1437: invalid indirect mapped block 1819239214 (level 0)
[  668.354296][T10055] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1437: invalid indirect mapped block 1819239214 (level 1)
[  668.369878][T10055] EXT4-fs (loop2): 1 truncate cleaned up
[  668.375673][T10055] EXT4-fs (loop2): mounted filesystem without journal. Opts: nolazytime,resuid=0x0000000000000000,jqfmt=vfsv1,errors=continue,nobh,usrjquota=..,errors=continue. Quota mode: writeback.
[  668.425314][T10074] loop1: detected capacity change from 0 to 256
[  670.058437][T10090] loop5: detected capacity change from 0 to 64
[  670.633116][T10096] loop1: detected capacity change from 0 to 512
[  670.782689][T10096] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[  670.805740][ T4231] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  671.105660][ T4231] usb 4-1: Using ep0 maxpacket: 8
[  672.406291][ T4231] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  672.427257][ T4231] usb 4-1: config 0 has no interface number 0
[  672.433519][ T4231] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  672.464251][T10096] EXT4-fs (loop1): failed to open journal device unknown-block(0,0) -6
[  672.472851][ T4231] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  672.491341][ T4231] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  672.503170][ T4231] usb 4-1: config 0 descriptor??
[  672.560871][ T4231] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  672.573016][   T26] audit: type=1800 audit(1790183809.279:51): pid=10104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1454" name="attr_allow_any_host" dev="configfs" ino=73147 res=0 errno=0
[  672.890306][ T5123] usb 4-1: USB disconnect, device number 5
[  672.896643][ T4233] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  673.289427][T10113] loop4: detected capacity change from 0 to 512
[  673.296406][ T4233] usb 6-1: Using ep0 maxpacket: 8
[  673.343316][T10113] EXT4-fs (loop4): Ignoring removed nobh option
[  673.382111][T10113] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13
[  673.391190][T10113] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.1457: attempt to clear invalid blocks 1 len 1
[  673.411842][T10113] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  673.426476][T10113] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1457: invalid indirect mapped block 1819239214 (level 0)
[  673.449983][T10113] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1457: invalid indirect mapped block 1819239214 (level 1)
[  673.475880][ T4233] usb 6-1: unable to get BOS descriptor or descriptor too short
[  673.493974][T10113] EXT4-fs (loop4): 1 truncate cleaned up
[  673.499794][T10113] EXT4-fs (loop4): mounted filesystem without journal. Opts: nolazytime,resuid=0x0000000000000000,jqfmt=vfsv1,errors=continue,nobh,usrjquota=..,errors=continue. Quota mode: writeback.
[  673.704889][ T4233] usb 6-1: config 4 interface 0 has no altsetting 0
[  674.057055][ T4233] usb 6-1: string descriptor 0 read error: -22
[  674.092315][ T4233] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  674.235187][ T4233] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3
[  674.371983][T10123] 
[  674.374347][T10123] ======================================================
[  674.381373][T10123] WARNING: possible circular locking dependency detected
[  674.388406][T10123] syzkaller #0 Not tainted
[  674.392828][T10123] ------------------------------------------------------
[  674.399850][T10123] syz.3.1460/10123 is trying to acquire lock:
[  674.405925][T10123] ffff8880170673f0 (&sb->s_type->i_mutex_key#22){++++}-{3:3}, at: configfs_depend_item_unlocked+0x14f/0x430
[  674.417440][T10123] 
[  674.417440][T10123] but task is already holding lock:
[  674.424813][T10123] ffffffff8cf20cc8 (tpg_instances_lock){+.+.}-{3:3}, at: usbg_make_tpg+0xf5/0x550
[  674.434057][T10123] 
[  674.434057][T10123] which lock already depends on the new lock.
[  674.434057][T10123] 
[  674.444465][T10123] 
[  674.444465][T10123] the existing dependency chain (in reverse order) is:
[  674.453494][T10123] 
[  674.453494][T10123] -> #2 (tpg_instances_lock){+.+.}-{3:3}:
[  674.461464][T10123]        __mutex_lock_common+0x1e5/0x2400
[  674.467207][T10123]        mutex_lock_nested+0x17/0x20
[  674.472538][T10123]        usbg_make_tpg+0xf5/0x550
[  674.477583][T10123]        target_fabric_make_tpg+0xa0/0x6d0
[  674.483406][T10123]        configfs_mkdir+0x511/0x9e0
[  674.488622][T10123]        vfs_mkdir+0x386/0x570
[  674.493406][T10123]        do_mkdirat+0x1dd/0x5c0
[  674.498292][T10123]        __x64_sys_mkdirat+0x85/0x90
[  674.503600][T10123]        do_syscall_64+0x4c/0xa0
[  674.508551][T10123]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  674.514982][T10123] 
[  674.514982][T10123] -> #1 (&subsys->su_mutex){+.+.}-{3:3}:
[  674.522817][T10123]        __mutex_lock_common+0x1e5/0x2400
[  674.528561][T10123]        mutex_lock_nested+0x17/0x20
[  674.533864][T10123]        configfs_rmdir+0x638/0x980
[  674.539079][T10123]        vfs_rmdir+0x19d/0x410
[  674.543866][T10123]        do_rmdir+0x27f/0x710
[  674.548557][T10123]        __x64_sys_rmdir+0x45/0x50
[  674.553679][T10123]        do_syscall_64+0x4c/0xa0
[  674.558633][T10123]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  674.565083][T10123] 
[  674.565083][T10123] -> #0 (&sb->s_type->i_mutex_key#22){++++}-{3:3}:
[  674.573800][T10123]        __lock_acquire+0x2c66/0x7b50
[  674.579197][T10123]        lock_acquire+0x19e/0x400
[  674.584253][T10123]        down_write+0x38/0x60
[  674.588973][T10123]        configfs_depend_item_unlocked+0x14f/0x430
[  674.595499][T10123]        usbg_make_tpg+0x1dd/0x550
[  674.600642][T10123]        target_fabric_make_tpg+0xa0/0x6d0
[  674.606472][T10123]        configfs_mkdir+0x511/0x9e0
[  674.611697][T10123]        vfs_mkdir+0x386/0x570
[  674.616485][T10123]        do_mkdirat+0x1dd/0x5c0
[  674.621367][T10123]        __x64_sys_mkdirat+0x85/0x90
[  674.626671][T10123]        do_syscall_64+0x4c/0xa0
[  674.631626][T10123]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  674.638064][T10123] 
[  674.638064][T10123] other info that might help us debug this:
[  674.638064][T10123] 
[  674.648305][T10123] Chain exists of:
[  674.648305][T10123]   &sb->s_type->i_mutex_key#22 --> &subsys->su_mutex --> tpg_instances_lock
[  674.648305][T10123] 
[  674.662946][T10123]  Possible unsafe locking scenario:
[  674.662946][T10123] 
[  674.670409][T10123]        CPU0                    CPU1
[  674.675815][T10123]        ----                    ----
[  674.681197][T10123]   lock(tpg_instances_lock);
[  674.685905][T10123]                                lock(&subsys->su_mutex);
[  674.693048][T10123]                                lock(tpg_instances_lock);
[  674.700264][T10123]   lock(&sb->s_type->i_mutex_key#22);
[  674.705752][T10123] 
[  674.705752][T10123]  *** DEADLOCK ***
[  674.705752][T10123] 
[  674.713941][T10123] 4 locks held by syz.3.1460/10123:
[  674.719185][T10123]  #0: ffff88814628a460 (sb_writers#14){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90
[  674.728464][T10123]  #1: ffff888077e0e9d0 (&sb->s_type->i_mutex_key#7/1){+.+.}-{3:3}, at: filename_create+0x20b/0x450
[  674.739319][T10123]  #2: ffffffff8cc24710 (&subsys->su_mutex){+.+.}-{3:3}, at: configfs_mkdir+0x4b5/0x9e0
[  674.749099][T10123]  #3: ffffffff8cf20cc8 (tpg_instances_lock){+.+.}-{3:3}, at: usbg_make_tpg+0xf5/0x550
[  674.759049][T10123] 
[  674.759049][T10123] stack backtrace:
[  674.764942][T10123] CPU: 1 PID: 10123 Comm: syz.3.1460 Not tainted syzkaller #0
[  674.772413][T10123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  674.782483][T10123] Call Trace:
[  674.785786][T10123]  <TASK>
[  674.788738][T10123]  dump_stack_lvl+0x188/0x250
[  674.793439][T10123]  ? load_image+0x410/0x410
[  674.797962][T10123]  ? show_regs_print_info+0x20/0x20
[  674.803190][T10123]  ? print_circular_bug+0x12b/0x1a0
[  674.808415][T10123]  check_noncircular+0x296/0x330
[  674.813390][T10123]  ? look_up_lock_class+0x71/0x110
[  674.818524][T10123]  ? add_chain_block+0x9b0/0x9b0
[  674.823506][T10123]  ? lockdep_lock+0xf1/0x1f0
[  674.828123][T10123]  ? mark_lock+0x94/0x320
[  674.832473][T10123]  ? mark_lock+0x94/0x320
[  674.836818][T10123]  ? _find_first_zero_bit+0xd1/0xf0
[  674.842046][T10123]  __lock_acquire+0x2c66/0x7b50
[  674.846943][T10123]  ? verify_lock_unused+0x140/0x140
[  674.852183][T10123]  ? __mutex_trylock_common+0x15c/0x260
[  674.857743][T10123]  ? rcu_lock_release+0x20/0x20
[  674.862634][T10123]  lock_acquire+0x19e/0x400
[  674.867180][T10123]  ? configfs_depend_item_unlocked+0x14f/0x430
[  674.873371][T10123]  ? __might_sleep+0xf0/0xf0
[  674.877989][T10123]  ? __kasan_kmalloc+0xc6/0xe0
[  674.882782][T10123]  ? read_lock_is_recursive+0x10/0x10
[  674.888176][T10123]  ? mutex_lock_io_nested+0x60/0x60
[  674.893418][T10123]  down_write+0x38/0x60
[  674.897602][T10123]  ? configfs_depend_item_unlocked+0x14f/0x430
[  674.903792][T10123]  configfs_depend_item_unlocked+0x14f/0x430
[  674.909804][T10123]  usbg_make_tpg+0x1dd/0x550
[  674.914424][T10123]  ? mutex_lock_io_nested+0x60/0x60
[  674.919658][T10123]  ? usbg_drop_tport+0x20/0x20
[  674.924449][T10123]  ? vscnprintf+0x80/0x80
[  674.928823][T10123]  target_fabric_make_tpg+0xa0/0x6d0
[  674.934140][T10123]  ? target_fabric_release_wwn+0xa0/0xa0
[  674.939801][T10123]  configfs_mkdir+0x511/0x9e0
[  674.944497][T10123]  vfs_mkdir+0x386/0x570
[  674.948793][T10123]  do_mkdirat+0x1dd/0x5c0
[  674.953143][T10123]  ? vfs_mkdir+0x570/0x570
[  674.957587][T10123]  __x64_sys_mkdirat+0x85/0x90
[  674.962376][T10123]  do_syscall_64+0x4c/0xa0
[  674.966856][T10123]  ? clear_bhb_loop+0x30/0x80
[  674.971562][T10123]  ? clear_bhb_loop+0x30/0x80
[  674.976262][T10123]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  674.982188][T10123] RIP: 0033:0x7f56986dc159
[  674.986624][T10123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  675.006256][T10123] RSP: 002b:00007f5696934028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  675.014692][T10123] RAX: ffffffffffffffda RBX: 00007f5698963fa0 RCX: 00007f56986dc159
[  675.022685][T10123] RDX: 00000000000001ff RSI: 0000200000000380 RDI: ffffffffffffff9c
[  675.030677][T10123] RBP: 00007f569877306b R08: 0000000000000000 R09: 0000000000000000
[  675.038666][T10123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  675.046654][T10123] R13: 00007f5698964038 R14: 00007f5698963fa0 R15: 00007fffeff070d8
[  675.054657][T10123]  </TASK>
[  675.069494][ T4233] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  675.097757][ T4233] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  675.218887][ T4233] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  675.226603][ T4233] usb 6-1: media controller created
[  675.649473][ T4233] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  676.447039][ T4233] zl10353_read_register: readreg error (reg=127, ret==0)
[  676.473339][ T4233] usb 6-1: USB disconnect, device number 3