last executing test programs:

20.901856793s ago: executing program 3 (id=338):
r0 = socket$xdp(0x2c, 0x3, 0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
r2 = getpid()
prlimit64(r2, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prlimit64(r2, 0x7, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x0, 0x0)
r3 = getpid()
r4 = syz_open_dev$video4linux(&(0x7f0000000180), 0x401, 0x2400)
ioctl$VIDIOC_SUBDEV_S_FMT(r4, 0xc0585605, &(0x7f0000000000)={0x0, 0x0, {0x9, 0x9b, 0x4003, 0x5, 0x7, 0xc, 0x340, 0x7}})
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
sendmsg$tipc(r1, &(0x7f00000005c0)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x4, 0x80000000}}, './file0\x00'})
r7 = socket$inet6(0xa, 0x2, 0x0)
r8 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r8)
getsockname$packet(r8, &(0x7f0000000180)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4800000010003704000000000500000000000000", @ANYRES32=r9, @ANYBLOB="c3040580000000002800128008000100677265001c00028005000a000000000008000700ac1414aa"], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x48000)
sendmmsg$inet(r7, &(0x7f0000001580)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @private=0x1}, 0x10, 0x0, 0x0, &(0x7f0000000d00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @empty, @remote}}}], 0x20}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40000)
r10 = socket(0x10, 0x3, 0x0)
write(r10, &(0x7f00000000c0)="1c0000001d005f0214fffffffffffff8070000001800000004000000", 0x1c)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1e, 0xe, &(0x7f0000002040)=ANY=[@ANYBLOB="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", @ANYBLOB="1d139ea82bf95c2a5474d4a0d51d574c1e80c08468a1d0ffcaa5beda1d1e735401cddf133954ac1858a89458dfcc08fd460fd4095d862fefdd7b67249f863619a16200c3158d5c0f1d41e7e236a48ed97a83105f991550cd52d04afc5d4236e333c523630f55e3335db9f3008ffba8c0caf3b9cea8aa798e4b36b3cd801c9bb3c666bd5a41ea3c09e7583961eb53a6c5948b47502e0d4b2959fb217a2ea66fd7e4f5eaa78c31c69a1c9d5f"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000400), 0x5d, 0x10, &(0x7f0000000040), 0x10}, 0x4b)

17.676561843s ago: executing program 3 (id=344):
syz_emit_ethernet(0x7c, &(0x7f0000000340)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x46, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0x0, 0x9, "e1a35395c496dde8f58808a466d0005f7e8284b900aa1b9d582a89d2ba1a3912806ff9e6e29bdb48761a3f9e0100000000000000c15b9516396b05e49693"}}}}}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000f89000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000180)={0x8d099b6c9fbba5a2, 0x0, {[0x7, 0x10004, 0xf, 0x0, 0x8, 0x1, 0x2005a6d7718, 0x20000000000007]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x13)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
fcntl$notify(0xffffffffffffffff, 0x402, 0x31)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/udp6\x00')
preadv(r5, &(0x7f0000000340)=[{&(0x7f0000000240)=""/208, 0xd0}], 0x1, 0x10001, 0x2)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000400)=[@textreal={0x8, 0x0}], 0x1, 0xb6a352f5b485c74f, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r6 = socket$vsock_stream(0x28, 0x1, 0x0)
getsockopt(r6, 0x28, 0x7, 0x0, &(0x7f0000000280))
r7 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VIDIOC_S_FREQUENCY(r7, 0x402c5639, &(0x7f0000000080)={0x3, 0x5, 0x10})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r7}, './file0\x00'})

15.631260264s ago: executing program 3 (id=351):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002a80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xfffd}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x8, 0x3, "e4edf2b7"}, @NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xe, 0x1, 'connlabel\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2f}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}]}], {0x14}}, 0xe8}}, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x41}, 0x800, 0x0, 0x3, 0x9, 0x1}, 0x20)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000200), 0x1, 0x586, &(0x7f0000000840)="$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")
chdir(&(0x7f0000000000)='./file0\x00')
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0)
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000440)={"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"})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020660b, &(0x7f00000001c0)={0x2335d8fa, 0x110000002000005})
r5 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r6=>r2}, './file0\x00'})
recvmsg$unix(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000580)=""/260, 0x104}], 0x1}, 0x20)
syz_mount_image$iso9660(&(0x7f0000000380), &(0x7f00000000c0)='./file0\x00', 0x204818, &(0x7f0000000000)={[{@map_off}, {@check_strict}, {@cruft}, {@dmode={'dmode', 0x3d, 0x4}}, {@unhide}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@unhide}]}, 0xff, 0x544, &(0x7f0000001000)="$eJzs3V9v01YfwPGfS/sQ5ZGqRw8TQlWBQ9mkIpXgJBAUceU5J+mBxI5sB7VXqKIpqkhhokxae8O4YZu0vQh2uRexd4T2EjbZTvqHJjHQv6u+nwjOiX3s8zup5Z/cxscCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADEcmu2XbSkabzOkhrNrQV+a/dtf+sDC+TWvmJMvyJW/E9yObmSLrry1e7qy/F/czKbvpuVXFzkZPu/l//34NLkxGD7MQF/lt+/cE+bW9vPV3q97qujCuQMunpx9LqG9kzom5bT0MqEvqpWKvadxXqo6qapw+Uw0i3lBtqJ/EDNu7dUsVotK11Y9jteo+Y09WDh/dsl266oh4W2doLQ9+48LITuomk2jddI2sSr4zb34wPxkYlUpJ2WUmvrvW45awBxo+KnNCplNSrZpVKxWCoVK/eq9+7b9uSBBfZH5ECLozto8e90hGdv4HAm+vlfmmLEk44siRr6cqUmgfjSGrG+b5D/v7mjx/a7N/8PsvyV3dUzkuT/a+m7a6Py/4hYTu61KVuyLc9lRXrSk668OvWITvbVEC2eGAnFFyMtcZIlqr9ESVUqUhFbnsii1CUUJXUx0hQtoSxLKJHo5IhyJRAtjkTiSyBK5sWVW6KkKFWpSlmUaCnIsvjSEU8aUhMn2cuarCefe1mUNSrGnUbFkcPID467rpTGjJb8j8M70vM3cBh/D/I/AAAAAAA4t6zkt+/x9f+UXE1qddPU9mmHBQAAAAAAjlDyl//ZuJiKa1fF4vofAAAAAIDzxkrusbNEJC/X09qaWMntUvwSAAAAAACAcyL5+/+1uEjmQLku1s50KVz/AwAAAABwTvycOcd+2L5o/fmXBMGU9ba99LW1kczN62xcSLe78PEeo/qMNd3fSVJU0mJy0tWzVi5ttDMJ5od+sZYVh7UbgLMTwI+fE8ClSflVbqRtbqym5epgTdpLvm6auuD6zQdFcZzpiUgvRd+/WP9BkuH/4rWmrZys97qFpy97q0ksb+O9vN3oT6B4YB7FMbG8TuZbSO65GDriqeRGjH6/eUvW1ntde+/4J9LNJ/b3+GZ6TJ/vZC5tNdef8Ta/f/y5uM9iYdTo+1EUDznyd3IzbXNz/mZaDImilBVFaW8Uwz+Lw0dRzoqifMgoAOC0rGVkIUsO5N0vOMt9WXaXz8zu72Q+bTM/k5xYJ2eGnNHtrDO6fcjs9seBZyCNyrFxv799lFXfxxu8H9lv2CxZ8Ud44fXGd3J5c2v79vrGyrPus+6LUqlcse/a9r2STCXD6BfkHgDAEHufsWMNzf+ZT+Gx7mZcVf9/5ysFBXkqL6Unq7KQ3G2QfONg6F7ze76GsJBx1ZpP0mT6hJeFMVd1/0nuchjstzS27f4YyifwkwAA4OTMZeThT8n/CxnX3ftz+fir4/yep7UBAIDjoYMPVj76yQoC035SrFaLTrSoVeC7j1Rgag2tjBfpwF10vIZW7cCPfNdvxpXHpqZDFXbabT+IVN0PVNsPzVIyfaDqP/o91C3Hi4wbtpvaCbVyfS9y3EjVTOiqdufbpgkXdZBsHLa1a+rGdSLjeyr0O4GrC0qFWu9paGrai0zdxFVPtQPTcoKceuw3Oy2tajp0A9OO/HSHg76MV/eDVrLbwml/2AAAnBGbW9vPV3q97qtjrAztOHfiQwUAAH0ZWRoAAAAAAAAAAAAAAAAAAAAAAJwBJ3H/H5VzXhlMBX1W4qFyBJXMU8ebYz85AThW/wQAAP//rVVPjw==")
open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000080)=ANY=[@ANYBLOB="16000000020000001d"], 0x0)
sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
setsockopt$sock_int(r5, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4)
close(0x4)

12.802354478s ago: executing program 3 (id=363):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000580)='./cgroup\x00', 0x5, &(0x7f0000000440)=ANY=[@ANYRES16=0x0, @ANYRESOCT=r0, @ANYRESHEX, @ANYBLOB="73325bb9629cd81d63ae646d452628", @ANYRES64, @ANYRES32, @ANYRES16, @ANYRESHEX], 0x9c, 0x1a2, &(0x7f0000000840)="$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")
brk(0x7fffffffffffffff)
r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
readahead(r1, 0x0, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x86}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
prctl$PR_GET_IO_FLUSHER(0x4)
syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
syz_clone(0xb6ab5700, 0x0, 0x0, &(0x7f0000000280), 0x0, 0x0)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r5, 0x0, 0x4004080)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r2])
read$FUSE(r6, &(0x7f000000a400)={0x2020, 0x0, <r7=>0x0}, 0x2020)
write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x2d, 0x0, 0x114454b0, 0x0, 0x6, 0x9d, 0x2, 0x0, 0x0, 0x100, 0x4}}, 0x50)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x421042, 0x13b)

10.625326358s ago: executing program 3 (id=364):
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000140))
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
syz_mount_image$xfs(&(0x7f0000000000), &(0x7f0000009780)='./bus\x00', 0x0, &(0x7f0000000040)={[{@nolargeio}, {@noikeep}, {@prjquota}]}, 0x1, 0x97a6, &(0x7f0000012f40)="$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")
r3 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
fallocate(r3, 0x1, 0x0, 0x1001f0)
r4 = creat(&(0x7f0000000080)='./bus\x00', 0x120)
getpid()
r5 = getpid()
syz_pidfd_open(r5, 0x0)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="a400000010001fff000000000100007f84000000", @ANYRES32=0x0, @ANYBLOB="00000000022100007c0012800b00010067656e65766500006c000280050009000100000008000b40000007f5060005004e20000005000a000100000005000a000000000014000700000000000000000000000000000000000500040002000000050003000a00000005000900000000001400070020"], 0xa4}}, 0x0)
syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41)
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x1, 0x6d0, &(0x7f0000001340)="$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")
r6 = socket(0x10, 0x3, 0x5)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'bond0\x00', <r8=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000200)={'batadv0\x00', <r9=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000ec0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21, 0x20}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r8}, @IFLA_HSR_SLAVE2={0x8, 0x2, r9}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0)
r10 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600000f500142f00fe8000000000000000000000000000aafe8000000000000000000000000000aa00004e20", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000301e90860000"], 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000900)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x3, 0x6, '\x00', 0x30, 0x3a, 0xff, @private2, @mcast2, {[], @dest_unreach={0x1, 0x2, 0x0, 0x81, '\x00', {0xc, 0x6, "de2efd", 0x281, 0x2f, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, @private2={0xfc, 0x2, '\x00', 0x1}}}}}}}}, 0x0)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x48}, @NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xdc}}, 0x0)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c1)

10.541343368s ago: executing program 2 (id=366):
r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b6e", @ANYRESOCT], 0x0)
syz_usb_control_io$uac1(r1, &(0x7f0000001400)={0x14, &(0x7f00000001c0)={0x0, 0x9, 0xff, {0xff, 0x2, "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"}}, &(0x7f0000000300)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x448}}}, &(0x7f00000016c0)={0x44, &(0x7f0000001440)={0x40, 0x10, 0xb0, "a43fc02ec2f03fa76cb44e86b7df602f3c59669eaf5a99e86b761a807f158fd10d1b3983cf804e8bada19e06c78ab29f8aefa9d5b0190e8755a24ba54278039a6f13d161b69062a4afee590487b890ffdf4f4dee429f8f6312e7160853c8be69265d982708e7a13e7696aae04a5bbf6e490d6c73e137819a6bde5861ce3e666f1a32eb7a14e27bb654635845290a66b6b8118dacd27eb9f9ef5297687d163f3381c29fdfb709e1232e54055bddd518b8"}, &(0x7f0000001500)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000001540)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000001580)={0x20, 0x81, 0x2, "2703"}, &(0x7f00000015c0)={0x20, 0x82, 0x2, "90dd"}, &(0x7f0000001600)={0x20, 0x83, 0x1, 'w'}, &(0x7f0000001640)={0x20, 0x84, 0x4, "8547c6b7"}, &(0x7f0000001680)={0x20, 0x85, 0x3, 'jO-'}})
syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x72, &(0x7f0000000080)=ANY=[@ANYRES8=r0]}]})
syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0)

8.834681621s ago: executing program 0 (id=372):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000441000/0x3000)=nil, 0x3000, 0x300000b, 0x810, 0xffffffffffffffff, 0xec776000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r1, 0x6, &(0x7f0000000000))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0)
write$dsp(r2, &(0x7f0000002000)='`', 0x88020)

8.221338344s ago: executing program 0 (id=375):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000080)={<r2=>0xffffffffffffffff})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
close(r3)
splice(r2, 0x0, r3, 0x0, 0x4ffe6, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x18, 0x140c, 0x2b704dca589bc224, 0x70bd27, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x1}]}, 0x18}}, 0x40004)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
sched_getparam(r4, &(0x7f0000000140))
r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r9}, &(0x7f00000006c0), &(0x7f0000000700)=r8}, 0x20)
recvmsg$unix(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002380)}, 0x2000)
shutdown(r7, 0x2)

6.82206796s ago: executing program 2 (id=379):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x4b4001, 0x43)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r2=>r0, {0xfffffff9}}, './file0\x00'})
read$FUSE(r1, &(0x7f0000000100)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r2, &(0x7f0000002140)={0x50, 0x0, r3, {0x7, 0x2d, 0xe4, 0xffffffff83120050, 0x4, 0x5, 0x9, 0x6, 0x0, 0x0, 0x110, 0x1}}, 0x50)
fchdir(r2)
ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f00000021c0)={0x3d3, 0x0, 0x6, 0x1, 0x49})
gettid()
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000002200)={'caif0\x00', 0x1})
read$msr(r2, &(0x7f0000002240)=""/216, 0xd8)
ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000002340)={0x400, 0x4})
connect$rose(r1, &(0x7f0000002380)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}, 0x1c)
fsync(r1)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xb, 0x1010, r2, 0x48b5000)
fsetxattr$security_ima(r0, &(0x7f00000023c0), &(0x7f0000002400)=@ng={0x4, 0xc, "e3e7d4107c3541ce0ace9ae50b33be"}, 0x11, 0x3)
fallocate(r0, 0x40, 0x7, 0x3)
ioctl$BLKROGET(r1, 0x125e, &(0x7f0000002440))
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0xd8c79000)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000002480)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000024c0)={0xaa, 0x80})
unlinkat(r2, &(0x7f0000002500)='./file0/file0\x00', 0x200)
move_mount(r2, &(0x7f0000002540)='./file0\x00', r2, &(0x7f0000002580)='./file0/file0\x00', 0x242)
ioctl$XFS_IOC_FSCOUNTS(r0, 0x80205871, &(0x7f00000025c0))
ioctl$F2FS_IOC_GET_COMPRESS_OPTION(0xffffffffffffffff, 0x8002f515, &(0x7f0000002600))
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002800)={&(0x7f0000002640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9c, 0x9c, 0xa, [@fwd={0x4}, @type_tag={0xb, 0x0, 0x0, 0x12, 0x1}, @func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{0xc, 0x4}, {0x3, 0x5}, {0xa, 0x1}, {0xb, 0x5}, {0xf, 0x3}, {0x3, 0x3}, {0x6, 0x2}]}, @typedef={0xb, 0x0, 0x0, 0x8, 0x1}, @var={0x1, 0x0, 0x0, 0xe, 0x1, 0x2}, @const={0xb}, @type_tag={0x5, 0x0, 0x0, 0x12, 0x5}, @type_tag={0x1, 0x0, 0x0, 0x12, 0x4}]}, {0x0, [0x0, 0x5f, 0x2e, 0x61, 0x5f, 0x5f, 0x0, 0x30]}}, &(0x7f0000002700)=""/253, 0xbe, 0xfd, 0x0, 0x3}, 0x28)
ioctl$VIDIOC_SUBDEV_G_EDID(r2, 0xc0285628, &(0x7f0000002880)={0x0, 0x1b, 0x989, '\x00', &(0x7f0000002840)=0x5})
sendfile(r5, r5, &(0x7f00000028c0)=0x8, 0x2)
mount$tmpfs(0x0, &(0x7f0000002900)='./file0/file0\x00', &(0x7f0000002940), 0x230c884, &(0x7f0000002980)={[{@mpol={'mpol', 0x3d, {'default', '=relative', @val={0x3a, [0x2f, 0x2c, 0x33, 0x32, 0x34, 0x31]}}}}, {@quota}, {@mode={'mode', 0x3d, 0xfff}}, {@size={'size', 0x3d, [0x31]}}, {@grpquota}, {@grpquota}, {@nr_inodes={'nr_inodes', 0x3d, [0x33]}}, {@usrquota_inode_hardlimit={'usrquota_inode_hardlimit', 0x3d, [0x34]}}, {@inode32}], [{@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@subj_type={'subj_type', 0x3d, '{,//'}}, {@appraise_type}, {@func={'func', 0x3d, 'POLICY_CHECK'}}, {@measure}, {@measure}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}]})
sendmsg$inet(r4, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002ac0)="2408174ca68dee94596f8d26815494695b0af59302a5ab9b5c8c671ee974006626b534cb8816078a931dcadc704b", 0x2e}], 0x1, &(0x7f0000002b40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x88000000}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}], 0x50}, 0x0)

6.565565568s ago: executing program 0 (id=381):
r0 = syz_open_dev$vim2m(0x0, 0x3, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @pix={0x1000, 0x3, 0x3234564e, 0x6, 0x5, 0x3, 0x6, 0x7, 0x0, 0x8, 0x2, 0x6}})

6.565314428s ago: executing program 2 (id=382):
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000001c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000430109029200030172e5000904000000010100000a24010000000201020c0d240700000500006e626805000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8, @ANYBLOB="05", @ANYRES16], 0x0)

6.554146876s ago: executing program 3 (id=383):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000080), 0x0, 0x0, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r3 = mq_open(&(0x7f00005a1ffb)='eth0\x04', 0x42, 0x0, 0x0)
mq_notify(r3, &(0x7f0000000280)={0x0, 0xd, 0x4, @thr={0x0, 0x0}})
mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, 0x0, 0x4005c)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r4=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0)
socket$pppoe(0x18, 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x43, 0x4, @mcast1, 0x1}}}, &(0x7f0000000040)=0x84)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x24004880}, 0x0)

6.48606499s ago: executing program 0 (id=384):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
move_pages(0x0, 0x2, &(0x7f0000000080)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa07, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x3, 0x2})
getpgrp(0x0)
r1 = syz_open_dev$dvb_frontend(&(0x7f0000000100), 0x0, 0x400)
ioctl$FE_GET_INFO(r1, 0x80a86f3d, &(0x7f0000000140))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCX_GET(r2, 0x40189206, &(0x7f0000000280)={&(0x7f00000011c0), 0x0})

5.14948357s ago: executing program 4 (id=387):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r4 = inotify_init1(0x80000)
truncate(&(0x7f00000001c0)='./file0\x00', 0x8)
inotify_add_watch(r4, 0x0, 0x60000726)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x10000, 0x1)
syz_clone3(&(0x7f0000000300)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', 0x0})
r5 = add_key$user(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000280)="674afde9affdbd80bb188d05006277fdb01b4c07bec5175321fd0677c53218a125a0b8e4de084efcfd", 0x29, 0xfffffffffffffffe)
keyctl$set_timeout(0xf, r5, 0x3)
r6 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x0, @host}, 0x10)
unshare(0x4a000200)
r7 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={'\x00', 0x1, 0xbdc5, 0xe, 0x8c, 0x8})
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000008c0)={0x38, r8, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001019}, 0x20040004)

4.155824463s ago: executing program 4 (id=388):
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
pipe2(&(0x7f0000000040), 0x84880)
syz_usb_connect$uac1(0x0, 0xa4, 0x0, 0x0)

4.117208503s ago: executing program 1 (id=389):
syz_emit_ethernet(0x7c, &(0x7f0000000340)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x46, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0x0, 0x9, "e1a35395c496dde8f58808a466d0005f7e8284b900aa1b9d582a89d2ba1a3912806ff9e6e29bdb48761a3f9e0100000000000000c15b9516396b05e49693"}}}}}}, 0x0)

3.993227254s ago: executing program 1 (id=390):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x29, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x500}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)

3.773789632s ago: executing program 0 (id=391):
r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b6e", @ANYRESOCT], 0x0)
syz_usb_control_io$uac1(r1, &(0x7f0000001400)={0x14, &(0x7f00000001c0)={0x0, 0x9, 0xff, {0xff, 0x2, "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"}}, &(0x7f0000000300)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x448}}}, &(0x7f00000016c0)={0x44, &(0x7f0000001440)={0x40, 0x10, 0xb0, "a43fc02ec2f03fa76cb44e86b7df602f3c59669eaf5a99e86b761a807f158fd10d1b3983cf804e8bada19e06c78ab29f8aefa9d5b0190e8755a24ba54278039a6f13d161b69062a4afee590487b890ffdf4f4dee429f8f6312e7160853c8be69265d982708e7a13e7696aae04a5bbf6e490d6c73e137819a6bde5861ce3e666f1a32eb7a14e27bb654635845290a66b6b8118dacd27eb9f9ef5297687d163f3381c29fdfb709e1232e54055bddd518b8"}, &(0x7f0000001500)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000001540)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000001580)={0x20, 0x81, 0x2, "2703"}, &(0x7f00000015c0)={0x20, 0x82, 0x2, "90dd"}, &(0x7f0000001600)={0x20, 0x83, 0x1, 'w'}, &(0x7f0000001640)={0x20, 0x84, 0x4, "8547c6b7"}, &(0x7f0000001680)={0x20, 0x85, 0x3, 'jO-'}})
syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x72, &(0x7f0000000080)=ANY=[@ANYRES8=r0]}]})
syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0)

3.773036261s ago: executing program 1 (id=392):
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r1 = socket$inet6(0xa, 0x2, 0x0)
getsockopt$inet6_udp_int(r1, 0x11, 0x67, 0x0, &(0x7f0000000140))
migrate_pages(r0, 0x5, &(0x7f0000000040)=0x9, &(0x7f0000000080)=0x272)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$FS_IOC_GETVERSION(r2, 0x40045b0a, 0x0)
r3 = accept$packet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x14)
setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f00000000c0)={0x6, &(0x7f0000000080)=[{0xffff, 0x8, 0xd, 0x7}, {0xeea, 0x3, 0x5, 0x7}, {0x4, 0x3, 0x6}, {0x0, 0x9, 0xde, 0x4}, {0x4, 0x3, 0x40, 0x6}, {0xd8, 0xe, 0x1, 0x80000000}]}, 0x10)

3.569539353s ago: executing program 1 (id=393):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x2, 0x6, 0x520, 0x370, 0x370, 0x0, 0xd0, 0x370, 0x450, 0x1b0, 0x450, 0x450, 0x450, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [0xff, 0xff000000], [0x0, 0xff000000], 'syzkaller0\x00', 'pimreg0\x00', {0xff}, {}, 0x0, 0x2}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff, 0x8, 0x7}, {}, 0x2}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x3ff}}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0xff], [], 'bond_slave_1\x00', 'pim6reg1\x00', {0xff}}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4, 0x0, 0x2b}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xffffff00, 0xffffffff, 0xff000000], [0xffffffff, 0xffffffff, 0x0, 0xffffffff], 'geneve1\x00', 'team_slave_1\x00', {0xff}, {}, 0x32, 0x9, 0x1, 0x40}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x1, 0x24, 0x1}, {0x4, 0x4}, {0x2, 0x5, 0x5}, 0x4, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xc, &(0x7f0000000280)=0x100000001, 0x4)
setxattr$security_ima(0x0, 0x0, &(0x7f0000000100)=@sha1={0x1, "135e05ce8ce63c18f826a69c16e06c678ba7da37"}, 0x15, 0x1)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = socket$inet6(0xa, 0x1, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x2810000, &(0x7f0000000880), 0x1, 0x57a, &(0x7f0000000300)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x400, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb0300"], 0x50}}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev={0xfe, 0x80, '\x00', 0xfe}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
r6 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0)
ioctl$VIDIOC_ENUMINPUT(r6, 0xc050561a, &(0x7f0000000180)={0x2, "625fa4f0bfbd34d6c45994507144bf82e69024165d61e1961ac8cbd54b3cd9ae", 0x0, 0xa9, 0x0, 0xff0000})
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
prctl$PR_SET_IO_FLUSHER(0x34, 0x2)

3.569429233s ago: executing program 4 (id=394):
r0 = syz_open_dev$vim2m(0x0, 0x3, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @pix={0x1000, 0x3, 0x3234564e, 0x6, 0x5, 0x3, 0x6, 0x7, 0x0, 0x8, 0x2, 0x6}})

3.436507141s ago: executing program 2 (id=395):
r0 = socket$xdp(0x2c, 0x3, 0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
r2 = getpid()
prlimit64(r2, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prlimit64(r2, 0x7, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x0, 0x0)
r3 = getpid()
r4 = syz_open_dev$video4linux(&(0x7f0000000180), 0x401, 0x2400)
ioctl$VIDIOC_SUBDEV_S_FMT(r4, 0xc0585605, &(0x7f0000000000)={0x0, 0x0, {0x9, 0x9b, 0x4003, 0x5, 0x7, 0xc, 0x340, 0x7}})
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
sendmsg$tipc(r1, &(0x7f00000005c0)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r7=>r0, {0x4, 0x80000000}}, './file0\x00'})
r8 = socket$inet6(0xa, 0x2, 0x0)
r9 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r9)
getsockname$packet(r9, &(0x7f0000000180)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmmsg$inet(r8, &(0x7f0000001580)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @private=0x1}, 0x10, 0x0, 0x0, &(0x7f0000000d00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @empty, @remote}}}], 0x20}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40000)
ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000180)={r0})
r11 = socket(0x10, 0x3, 0x0)
write(r11, &(0x7f00000000c0)="1c0000001d005f0214fffffffffffff8070000001800000004000000", 0x1c)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1e, 0xe, &(0x7f0000002040)=ANY=[@ANYBLOB="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", @ANYBLOB="1d139ea82bf95c2a5474d4a0d51d574c1e80c08468a1d0ffcaa5beda1d1e735401cddf133954ac1858a89458dfcc08fd460fd4095d862fefdd7b67249f863619a16200c3158d5c0f1d41e7e236a48ed97a83105f991550cd52d04afc5d4236e333c523630f55e3335db9f3008ffba8c0caf3b9cea8aa798e4b36b3cd801c9bb3c666bd5a41ea3c09e7583961eb53a6c5948b47502e0d4b2959fb217a2ea66fd7e4f5eaa78c31c69a1c9d5f"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000400), 0x5d, 0x10, &(0x7f0000000040), 0x10}, 0x4b)

2.796235108s ago: executing program 4 (id=396):
syz_emit_ethernet(0x7c, &(0x7f0000000340)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x46, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0x0, 0x9, "e1a35395c496dde8f58808a466d0005f7e8284b900aa1b9d582a89d2ba1a3912806ff9e6e29bdb48761a3f9e0100000000000000c15b9516396b05e49693"}}}}}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000f89000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000180)={0x8d099b6c9fbba5a2, 0x0, {[0x7, 0x10004, 0xf, 0x0, 0x8, 0x1, 0x2005a6d7718, 0x20000000000007]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x13)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
fcntl$notify(0xffffffffffffffff, 0x402, 0x31)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/udp6\x00')
preadv(r5, &(0x7f0000000340)=[{&(0x7f0000000240)=""/208, 0xd0}], 0x1, 0x10001, 0x2)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000400)=[@textreal={0x8, 0x0}], 0x1, 0xb6a352f5b485c74f, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r6 = socket$vsock_stream(0x28, 0x1, 0x0)
getsockopt(r6, 0x28, 0x7, 0x0, &(0x7f0000000280))
openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000f92000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000002c0)="66b849000f00d0b9b10a00000f320f72f000c4e2e18e2e66baf80cb83086778fef66bafc0cec0f35672e660f3881bef76fea01000000b4002e266436660fc737c4c37579b7009000006d", 0x4a}], 0x1, 0x0, &(0x7f0000000200), 0x0)

1.826403586s ago: executing program 2 (id=397):
open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000080)=ANY=[@ANYBLOB="16000000020000001d"], 0x0)

1.733584944s ago: executing program 1 (id=398):
syz_emit_ethernet(0x7c, &(0x7f0000000340)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x46, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0x0, 0x9, "e1a35395c496dde8f58808a466d0005f7e8284b900aa1b9d582a89d2ba1a3912806ff9e6e29bdb48761a3f9e0100000000000000c15b9516396b05e49693"}}}}}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000f89000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000180)={0x8d099b6c9fbba5a2, 0x0, {[0x7, 0x10004, 0xf, 0x0, 0x8, 0x1, 0x2005a6d7718, 0x20000000000007]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x13)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
fcntl$notify(0xffffffffffffffff, 0x402, 0x31)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/udp6\x00')
preadv(r5, &(0x7f0000000340)=[{&(0x7f0000000240)=""/208, 0xd0}], 0x1, 0x10001, 0x2)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000400)=[@textreal={0x8, 0x0}], 0x1, 0xb6a352f5b485c74f, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r6 = socket$vsock_stream(0x28, 0x1, 0x0)
getsockopt(r6, 0x28, 0x7, 0x0, &(0x7f0000000280))
r7 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VIDIOC_S_FREQUENCY(r7, 0x402c5639, &(0x7f0000000080)={0x3, 0x5, 0x10})
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000f92000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000002c0)="66b849000f00d0b9b10a00000f320f72f000c4e2e18e2e66baf80cb83086778fef66bafc0cec0f35672e660f3881bef76fea01000000b4002e266436660fc737c4c37579b7009000006d", 0x4a}], 0x1, 0x0, &(0x7f0000000200), 0x0)

1.671324519s ago: executing program 2 (id=399):
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
pipe2(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x84880)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000001c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000430109029200030172e5000904000000010100000a24010000000201020c0d240700000500006e626805000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05", @ANYRES16=r0], 0x0)

1.197569536s ago: executing program 4 (id=400):
syz_emit_ethernet(0x0, 0x0, 0x0)

377.292901ms ago: executing program 4 (id=401):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000007c0)=@acquire={0x128, 0x17, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @in=@loopback, {@in6=@mcast1, @in6=@remote, 0x4e21, 0x0, 0x0, 0x80}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4e23, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x80}, {0x0, 0x80, 0x0, 0x0, 0x74, 0x0, 0x1}, {}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0x0, 0x70bd25}}, 0x128}}, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000040), 0xfffc, 0x0)
r0 = socket(0x2, 0x80805, 0x0)
syz_mount_image$hpfs(&(0x7f0000000100), &(0x7f0000009ec0)='./file1\x00', 0x3200041, &(0x7f0000000180)={[{@err_ro}, {@chkdsk_no}, {@case_asis}, {@check_none}]}, 0x1, 0x9e15, &(0x7f000000a040)="$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")
mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0)
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)
r1 = userfaultfd(0x1)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={<r3=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
getrlimit(0x1, &(0x7f0000000080))
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
getsockname(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={<r7=>r3, @in6={{0xa, 0x43, 0x4, @mcast1, 0x1}}}, &(0x7f0000000040)=0x84)
sendmsg$NFQNL_MSG_CONFIG(r0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000740)={r7}, &(0x7f00000000c0)=0x8)

376.7035ms ago: executing program 0 (id=402):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
accept4(r2, 0x0, 0x0, 0x800)
syz_open_dev$media(&(0x7f0000000100), 0x0, 0x0)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
syz_mount_image$vfat(&(0x7f0000000ac0), &(0x7f0000000040)='./file0\x00', 0x802, &(0x7f0000000480)=ANY=[], 0x1, 0x2a4, &(0x7f00000001c0)="$eJzs3T9rc2UUAPBzkzSNOqSIiyJ4QQen0rq6NEoFsZMSQR002BYkCYUWAlYwduoncPR7+BFcXPwGgqvg1g6VKzf33ia16R/65k3h7e83nd7nnvOc3KckU06+eXPY3z1I4uTsz2i1kqhtxVacJ7EWtaj8FI0AAF4c51kW/2QPyWzUFt8NALAMxed/4bF7AQCW47Mvvvyks7Oz/WmatuL19umom0TE8HTULdY7+/FdDGIvNqIdFxHZpSL+6OOd7WikubV4ZzgedfPM4de/l/U7f0dM8jejHWvz8zfTwmX+y1V3aXT2V6o/2vHa/Pz3/p8fw3F0m/Hu2zP9r0c7/vg2DmIQu5HnTvN/3EzTD7Ofz374Kt8mz09q0V2d3DeV1Zd0JAAAAAAAAAAAAAAAAAAAAAAAPAHraZoU43sm83vyS5P5OaNu/WKyvp5WZuf7jKv5QElVqJgPlEU5omecxS/VfJ2NNE2z8sZpfiPeaPhhAQAAAAAAAAAAAAAAAAAAAMgdfX/c7w0Ge4cLCappANXX+h9aZ2vmyltx3O/Vby64ev+9ZqcN5L3eenM0GrGgx3JX8FLez8Irr04P9/MogupgFrrXqx8URY/7vbRcqh5yv5fctVerOrhfZ5ea8ayNZZN/iYvs6pm2Llu9mtVc0NNovjJ36d8sy+5X5/2/ijMqrySTERv3232lDOa+wDxoXT+L324ueONbRn0hbzwAAAAAAAAAAAAAAAAAAMA10y/9zlk8uTW19tyaAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAlm/7+fxW0IuLqlWvBuEy+7Z4yaMbh0SO/RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ6A/wIAAP//4ipOSw==")
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (fail_nth: 2)

0s ago: executing program 1 (id=403):
bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0e00007a0f000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x29, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x500}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)

kernel console output (not intermixed with test programs):

system being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  100.632832][ T5050] loop1: detected capacity change from 0 to 32768
[  100.699603][ T5050] (syz.1.87,5050,1):ocfs2_init_global_system_inodes:462 ERROR: status = -22
[  100.708924][ T5050] (syz.1.87,5050,1):ocfs2_init_global_system_inodes:464 ERROR: Unable to load system inode 4, possibly corrupt fs?
[  100.708959][ T5050] (syz.1.87,5050,1):ocfs2_init_global_system_inodes:473 ERROR: status = -22
[  100.714298][ T5065] loop0: detected capacity change from 0 to 1024
[  100.725127][ T5050] (syz.1.87,5050,1):ocfs2_initialize_super:2281 ERROR: status = -22
[  100.745428][ T5050] (syz.1.87,5050,1):ocfs2_fill_super:1177 ERROR: status = -22
[  100.844867][ T5065] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,lazytime,journal_dev=0x0000000000000001,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback.
[  100.871741][ T5065] EXT4-fs error (device loop0): ext4_get_first_dir_block:3619: inode #11: comm syz.0.88: directory missing '..'
[  100.874761][ T5067] loop4: detected capacity change from 0 to 8192
[  101.058984][ T5067] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal
[  101.113447][ T5067] REISERFS (device loop4): using ordered data mode
[  101.165663][ T5067] reiserfs: using flush barriers
[  101.374230][ T5067] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  101.704475][ T5067] REISERFS (device loop4): checking transaction log (loop4)
[  101.808696][ T5076] loop3: detected capacity change from 0 to 2048
[  101.848502][ T5076] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  101.881010][ T5067] REISERFS (device loop4): Using r5 hash to sort names
[  101.915330][ T5067] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  102.000866][ T5067] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "journal_ioprio=0x0000000000000006"
[  102.060444][ T5080] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  102.179470][ T5071] loop1: detected capacity change from 0 to 32768
[  102.186225][ T4228] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  102.227270][ T5071] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[  102.240828][ T5071] BTRFS info (device loop1): force zlib compression, level 3
[  102.250913][ T5071] BTRFS warning (device loop1): the 'inode_cache' option is deprecated and has no effect since 5.11
[  102.268604][ T5071] BTRFS info (device loop1): use zlib compression, level 3
[  102.277765][ T5071] BTRFS info (device loop1): allowing degraded mounts
[  102.318848][ T5071] BTRFS info (device loop1): enabling disk space caching
[  102.343841][ T5071] BTRFS error (device loop1): cannot disable free space tree
[  102.373170][ T5071] BTRFS error (device loop1): open_ctree failed: -22
[  102.384570][ T4174] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by udevd (4174)
[  102.432438][ T4317] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  102.721784][ T4317] usb 5-1: device descriptor read/64, error -71
[  102.847680][ T5092] netlink: 8 bytes leftover after parsing attributes in process `syz.0.100'.
[  102.912539][ T4228] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  102.991787][ T4228] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  103.032330][ T4317] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  103.212825][ T4228] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  103.248420][ T4228] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67
[  103.272217][ T4317] usb 5-1: device descriptor read/64, error -71
[  103.336576][ T4228] usb 3-1: SerialNumber: syz
[  103.376408][ T4650] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  103.412576][ T4317] usb usb5-port1: attempt power cycle
[  103.434085][ T5071] loop1: detected capacity change from 0 to 32768
[  103.495316][ T5071] blk_update_request: I/O error, dev loop14, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  103.507108][ T5071] lbmIODone: I/O error in JFS log
[  103.526127][ T5071] *** Log Format Error ! ***
[  103.543091][ T5094] loop0: detected capacity change from 0 to 4096
[  103.556477][ T5071] lmLogInit: exit(-22)
[  103.560596][ T5071] lmLogOpen: exit(-22)
[  103.565870][ T5095] jfs: Unrecognized mount option "l2tp" or missing value
[  103.629859][ T5071] non-latin1 character 0xffff found in JFS file name
[  103.647204][ T5071] mount with iocharset=utf8 to access
[  103.684581][ T4228] usb 3-1: 0:2 : does not exist
[  103.696774][ T4228] usb 3-1: unit 5 not found!
[  103.733212][ T4228] usb 3-1: USB disconnect, device number 7
[  103.777505][ T4650] usb 4-1: Using ep0 maxpacket: 16
[  103.892210][ T4317] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  103.918692][ T5097] qrtr: Invalid version 6
[  104.001478][ T4174] udevd[4174]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  104.360831][ T4650] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  104.402209][ T4317] usb 5-1: device not accepting address 7, error -71
[  104.462079][ T4650] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  104.478768][ T4650] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[  104.493239][ T4650] usb 4-1: config 0 interface 0 has no altsetting 0
[  104.500595][ T4650] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  104.509884][ T4650] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  104.531554][ T4650] usb 4-1: config 0 descriptor??
[  104.606472][ T5106] syz.1.103 uses obsolete (PF_INET,SOCK_PACKET)
[  104.811143][ T5111] loop0: detected capacity change from 0 to 4096
[  104.851264][ T5111] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  104.930202][ T5111] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[  104.951307][ T5111] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  104.965116][ T5111] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn.
[  104.990792][ T5111] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  104.993205][ T5088] udc-core: couldn't find an available UDC or it's busy
[  105.004331][ T5111] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  105.024266][ T5111] ntfs: volume version 3.1.
[  105.027957][ T5088] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  105.031513][ T5111] ntfs: (device loop0): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty.
[  105.053898][ T4650] hid (null): unknown global tag 0x49
[  105.059882][ T5111] ntfs: (device loop0): load_system_files(): Failed to load $LogFile.  Will not be able to remount read-write.  Mount in Windows.
[  105.068679][ T4650] hid (null): nested delimiters
[  105.086831][ T5111] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[  105.119490][ T5111] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[  105.271544][ T4650] usb 4-1: USB disconnect, device number 7
[  106.607149][ T5131] loop4: detected capacity change from 0 to 512
[  106.944480][ T5131] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  106.956284][ T5131] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  107.621440][ T5147] FAULT_INJECTION: forcing a failure.
[  107.621440][ T5147] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  107.657334][ T5147] CPU: 0 PID: 5147 Comm: syz.0.116 Not tainted syzkaller #0
[  107.664645][ T5147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  107.674717][ T5147] Call Trace:
[  107.678004][ T5147]  <TASK>
[  107.680936][ T5147]  dump_stack_lvl+0x188/0x250
[  107.685629][ T5147]  ? show_regs_print_info+0x20/0x20
[  107.690835][ T5147]  ? load_image+0x400/0x400
[  107.695340][ T5147]  ? __lock_acquire+0x7d10/0x7d10
[  107.700368][ T5147]  ? mark_lock+0x94/0x320
[  107.704695][ T5147]  should_fail+0x38c/0x4c0
[  107.709116][ T5147]  _copy_from_user+0x2e/0x170
[  107.713797][ T5147]  __copy_msghdr_from_user+0xc9/0x630
[  107.719183][ T5147]  ? __ia32_sys_shutdown+0x1d0/0x1d0
[  107.719576][ T4317] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  107.724473][ T5147]  ? rcu_is_watching+0x11/0xa0
[  107.724494][ T5147]  ? verify_lock_unused+0x140/0x140
[  107.724510][ T5147]  ? kfree+0x4a/0x2a0
[  107.724529][ T5147]  ___sys_sendmsg+0x19a/0x2e0
[  107.750524][ T5147]  ? __sys_sendmsg+0x2a0/0x2a0
[  107.755325][ T5147]  ? __might_fault+0xb3/0x110
[  107.760015][ T5147]  __sys_sendmmsg+0x2ba/0x500
[  107.764702][ T5147]  ? __ia32_sys_sendmsg+0x80/0x80
[  107.769738][ T5147]  ? __context_tracking_exit+0x4c/0x80
[  107.775207][ T5147]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  107.781195][ T5147]  ? lock_chain_count+0x20/0x20
[  107.786044][ T5147]  ? vtime_user_exit+0x2c8/0x3e0
[  107.790988][ T5147]  __x64_sys_sendmmsg+0x9c/0xb0
[  107.795843][ T5147]  do_syscall_64+0x4c/0xa0
[  107.800259][ T5147]  ? clear_bhb_loop+0x30/0x80
[  107.804931][ T5147]  ? clear_bhb_loop+0x30/0x80
[  107.809621][ T5147]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  107.815522][ T5147] RIP: 0033:0x7effbd98d799
[  107.819940][ T5147] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  107.839545][ T5147] RSP: 002b:00007effbbbe7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  107.847964][ T5147] RAX: ffffffffffffffda RBX: 00007effbdc06fa0 RCX: 00007effbd98d799
[  107.855943][ T5147] RDX: 0000000000000300 RSI: 0000200000004d00 RDI: 0000000000000005
[  107.863936][ T5147] RBP: 00007effbbbe7090 R08: 0000000000000000 R09: 0000000000000000
[  107.871922][ T5147] R10: 0000000000000f1c R11: 0000000000000246 R12: 0000000000000001
[  107.879896][ T5147] R13: 00007effbdc07038 R14: 00007effbdc06fa0 R15: 00007ffd66c89ec8
[  107.887891][ T5147]  </TASK>
[  107.891066][    C0] vkms_vblank_simulate: vblank timer overrun
[  107.905032][ T5129] loop2: detected capacity change from 0 to 32768
[  108.022215][ T4317] usb 4-1: Using ep0 maxpacket: 16
[  108.041089][ T5129] XFS (loop2): Mounting V5 Filesystem
[  108.138702][ T5129] XFS (loop2): Ending clean mount
[  108.152381][ T4317] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  108.182073][ T4317] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  108.217087][ T4317] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[  108.252086][ T4317] usb 4-1: config 0 interface 0 has no altsetting 0
[  108.258735][ T4317] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  108.312130][ T4317] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  108.321649][ T5160] loop4: detected capacity change from 0 to 4096
[  108.343799][ T4317] usb 4-1: config 0 descriptor??
[  108.351887][ T5129] XFS (loop2): Quotacheck needed: Please wait.
[  108.418457][ T5150] loop0: detected capacity change from 0 to 32768
[  108.427247][ T5129] XFS (loop2): Quotacheck: Done.
[  108.492354][ T5129] sctp: [Deprecated]: syz.2.113 (pid 5129) Use of int in max_burst socket option.
[  108.492354][ T5129] Use struct sctp_assoc_value instead
[  108.715487][ T5150] XFS (loop0): Mounting V5 Filesystem
[  108.786937][ T4195] XFS (loop2): Unmounting Filesystem
[  108.806821][ T5170] qrtr: Invalid version 6
[  108.964595][ T5172] udc-core: couldn't find an available UDC or it's busy
[  109.027236][ T5172] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  109.066735][ T5150] XFS (loop0): Ending clean mount
[  109.133800][ T4317] hid (null): unknown global tag 0x49
[  109.141591][ T4317] hid (null): nested delimiters
[  109.288201][ T5150] XFS (loop0): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair.
[  109.334796][ T4650] XFS (loop0): Corruption warning: Metadata has LSN (1:1536) ahead of current LSN (1:80). Please unmount and run xfs_repair (>= v4.3) to resolve.
[  109.349972][   T21] usb 4-1: USB disconnect, device number 8
[  109.383803][ T4650] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x3a/0xd0, xfs_cntbt block 0x8 
[  109.432557][ T4650] XFS (loop0): Unmount and run xfs_repair
[  109.438313][ T4650] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  109.452091][ T4650] 00000000: 41 42 33 43 00 00 00 03 ff ff ff ff ff ff ff ff  AB3C............
[  109.460993][ T4650] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 06 00  ................
[  109.492078][ T4650] 00000020: 00 00 00 00 00 00 42 cb 9f 91 9c b7 20 0a 10 1d  ......B..... ...
[  109.522080][ T4650] 00000030: 00 00 00 00 83 85 41 d8 00 00 00 07 00 00 00 01  ......A.........
[  109.530961][ T4650] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[  109.560834][ T4650] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  109.603481][ T4650] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  109.700854][ T4650] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  109.773996][ T5150] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x8 len 4 error 74
[  109.845960][ T5150] XFS (loop0): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x515/0x8b0 (fs/xfs/xfs_trans_buf.c:296).  Shutting down filesystem.
[  109.981623][ T5150] XFS (loop0): Please unmount the filesystem and rectify the problem(s)
[  110.422668][ T4185] XFS (loop0): Unmounting Filesystem
[  110.494527][ T5186] program syz.3.120 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  110.858008][ T5189] device team_slave_0 entered promiscuous mode
[  110.864679][ T5189] device team_slave_1 entered promiscuous mode
[  110.891256][ T5193] loop1: detected capacity change from 0 to 512
[  111.084121][ T5193] EXT4-fs error (device loop1): ext4_iget_extra_inode:4566: inode #15: comm syz.1.124: corrupted in-inode xattr
[  111.141218][ T5193] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.124: couldn't read orphan inode 15 (err -117)
[  111.167242][ T5189] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  111.205008][ T5193] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  111.223937][ T5176] loop4: detected capacity change from 0 to 32768
[  111.395907][ T5203] loop2: detected capacity change from 0 to 512
[  111.753037][ T5203] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  111.764248][ T5203] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  112.075454][ T5176] XFS (loop4): Mounting V5 Filesystem
[  112.374678][ T5176] XFS (loop4): Ending clean mount
[  112.661094][ T4186] XFS (loop4): Unmounting Filesystem
[  112.880980][ T5228] loop0: detected capacity change from 0 to 1024
[  112.918402][ T5228] EXT4-fs (loop0): EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31
[  113.698394][ T5229] netlink: 'syz.0.131': attribute type 10 has an invalid length.
[  113.706261][ T5229] netlink: 2 bytes leftover after parsing attributes in process `syz.0.131'.
[  113.715160][ T5229] device bond0 entered promiscuous mode
[  113.720744][ T5229] device bond_slave_0 entered promiscuous mode
[  113.727357][ T5229] device bond_slave_1 entered promiscuous mode
[  113.734499][ T5229] bridge0: port 3(bond0) entered blocking state
[  113.740807][ T5229] bridge0: port 3(bond0) entered disabled state
[  113.752050][ T5229] bridge0: port 3(bond0) entered blocking state
[  113.758593][ T5229] bridge0: port 3(bond0) entered forwarding state
[  114.270963][ T5232] netlink: 19 bytes leftover after parsing attributes in process `syz.3.127'.
[  114.378932][ T5240] FAULT_INJECTION: forcing a failure.
[  114.378932][ T5240] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  114.429878][ T5240] CPU: 0 PID: 5240 Comm: syz.2.134 Not tainted syzkaller #0
[  114.437199][ T5240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  114.447261][ T5240] Call Trace:
[  114.450551][ T5240]  <TASK>
[  114.453488][ T5240]  dump_stack_lvl+0x188/0x250
[  114.458178][ T5240]  ? show_regs_print_info+0x20/0x20
[  114.463379][ T5240]  ? load_image+0x400/0x400
[  114.467890][ T5240]  ? __lock_acquire+0x7d10/0x7d10
[  114.472916][ T5240]  ? mark_lock+0x94/0x320
[  114.477252][ T5240]  should_fail+0x38c/0x4c0
[  114.481679][ T5240]  prepare_alloc_pages+0x1e4/0x5f0
[  114.486804][ T5240]  __alloc_pages+0x11b/0x480
[  114.491406][ T5240]  ? zone_statistics+0x170/0x170
[  114.496355][ T5240]  ? snd_seq_write+0x1f4/0x810
[  114.501121][ T5240]  ? __mutex_lock_common+0x465/0x2400
[  114.505724][ T5226] loop1: detected capacity change from 0 to 32768
[  114.506502][ T5240]  ? rcu_lock_release+0x5/0x20
[  114.517645][ T5240]  kmalloc_large_node+0x7d/0x190
[  114.522587][ T5240]  __kmalloc_node+0x232/0x3b0
[  114.527267][ T5240]  ? mutex_lock_io_nested+0x60/0x60
[  114.532476][ T5240]  kvmalloc_node+0x84/0x130
[  114.536986][ T5240]  snd_seq_pool_init+0x68/0x340
[  114.541835][ T5240]  snd_seq_write+0x2c0/0x810
[  114.546418][ T5240]  ? aa_path_link+0x880/0x880
[  114.551092][ T5240]  ? snd_seq_read+0x6e0/0x6e0
[  114.555762][ T5240]  ? end_current_label_crit_section+0x14b/0x170
[  114.561988][ T5240]  ? common_file_perm+0x171/0x1c0
[  114.566998][ T5240]  ? fsnotify_perm+0x5d/0x560
[  114.571656][ T5240]  ? security_file_permission+0x75/0xa0
[  114.577181][ T5240]  ? snd_seq_read+0x6e0/0x6e0
[  114.581845][ T5240]  vfs_write+0x30b/0xd60
[  114.586076][ T5240]  ? file_end_write+0x250/0x250
[  114.590908][ T5240]  ? __fget_files+0x40f/0x480
[  114.595572][ T5240]  ? __fdget_pos+0x1e2/0x370
[  114.600138][ T5240]  ? ksys_write+0x71/0x260
[  114.604561][ T5240]  ksys_write+0x152/0x260
[  114.608870][ T5240]  ? __ia32_sys_read+0x80/0x80
[  114.613622][ T5240]  ? lockdep_hardirqs_on+0x94/0x140
[  114.618803][ T5240]  do_syscall_64+0x4c/0xa0
[  114.623199][ T5240]  ? clear_bhb_loop+0x30/0x80
[  114.627855][ T5240]  ? clear_bhb_loop+0x30/0x80
[  114.632512][ T5240]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  114.638387][ T5240] RIP: 0033:0x7f153883e799
[  114.642785][ T5240] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  114.662377][ T5240] RSP: 002b:00007f1536a98028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  114.670774][ T5240] RAX: ffffffffffffffda RBX: 00007f1538ab7fa0 RCX: 00007f153883e799
[  114.678728][ T5240] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[  114.686680][ T5240] RBP: 00007f1536a98090 R08: 0000000000000000 R09: 0000000000000000
[  114.694630][ T5240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  114.702581][ T5240] R13: 00007f1538ab8038 R14: 00007f1538ab7fa0 R15: 00007ffd51dbdba8
[  114.710541][ T5240]  </TASK>
[  114.725228][ T5242] netlink: 14 bytes leftover after parsing attributes in process `syz.3.135'.
[  114.807962][ T5242] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  114.833652][ T5242] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  114.861293][ T5226] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[  114.897539][ T5226] BTRFS info (device loop1): force zlib compression, level 3
[  114.912066][ T5226] BTRFS warning (device loop1): the 'inode_cache' option is deprecated and has no effect since 5.11
[  114.952119][ T5242] bond0 (unregistering): Released all slaves
[  114.961974][ T5226] BTRFS info (device loop1): use zlib compression, level 3
[  114.974448][ T5226] BTRFS info (device loop1): allowing degraded mounts
[  114.978977][ T5243] loop3: detected capacity change from 0 to 8192
[  114.981363][ T5226] BTRFS info (device loop1): enabling disk space caching
[  115.022281][ T5226] BTRFS error (device loop1): cannot disable free space tree
[  115.060031][ T5243]  loop3: AHDI p1 p4
[  115.065345][ T5226] BTRFS error (device loop1): open_ctree failed: -22
[  115.183626][ T5243] loop3: p4 size 16776960 extends beyond EOD, truncated
[  115.192196][ T4392] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  115.262611][ T5251] loop0: detected capacity change from 0 to 1024
[  115.293394][ T5252] overlayfs: conflicting lowerdir path
[  115.316963][ T5252] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready
[  115.356098][ T5251] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  115.412165][ T5251] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869)
[  115.423936][ T5252] 8021q: adding VLAN 0 to HW filter on device bond0
[  115.442078][ T4392] usb 5-1: Using ep0 maxpacket: 16
[  115.457463][ T5251] EXT4-fs (loop0): filesystem has both journal inode and journal device!
[  115.484892][ T5252] bond0: (slave rose0): Enslaving as an active interface with an up link
[  116.236047][ T4392] usb 5-1: config 252 has an invalid interface number: 15 but max is 0
[  116.499596][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  116.613793][ T5257] netlink: 'syz.0.132': attribute type 10 has an invalid length.
[  116.621550][ T5257] netlink: 2 bytes leftover after parsing attributes in process `syz.0.132'.
[  116.660929][ T4392] usb 5-1: config 252 has no interface number 0
[  116.679240][ T4392] usb 5-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  117.601275][ T5269] loop2: detected capacity change from 0 to 512
[  117.757670][ T5275] loop1: detected capacity change from 0 to 4096
[  117.792169][ T4392] usb 5-1: string descriptor 0 read error: -71
[  117.800966][ T4392] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29
[  117.843721][ T4370] udevd[4370]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  117.854077][ T4392] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  117.876183][ T4655] udevd[4655]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  117.912218][ T4392] usb 5-1: can't set config #252, error -71
[  117.928615][ T4392] usb 5-1: USB disconnect, device number 9
[  117.934630][ T5269] EXT4-fs error (device loop2): ext4_iget_extra_inode:4566: inode #15: comm syz.2.141: corrupted in-inode xattr
[  117.935290][ T5269] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.141: couldn't read orphan inode 15 (err -117)
[  117.964973][ T5275] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  117.989763][ T5269] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  118.048421][ T4370] udevd[4370]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  118.089800][ T4655] udevd[4655]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  118.246233][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  118.264960][ T4655] udevd[4655]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  118.278736][ T5286] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0.
[  118.329271][ T5289] loop4: detected capacity change from 0 to 4096
[  118.603095][ T5295] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  118.633195][ T5289] capability: warning: `syz.4.143' uses 32-bit capabilities (legacy support in use)
[  118.865622][ T5302] netlink: 24 bytes leftover after parsing attributes in process `syz.2.145'.
[  118.897465][ T5302] vivid-000: disconnect
[  118.909948][ T5301] vivid-000: reconnect
[  118.938630][ T5304] loop1: detected capacity change from 0 to 4096
[  119.014621][ T5313] loop4: detected capacity change from 0 to 512
[  119.163973][ T5313] EXT4-fs error (device loop4): ext4_iget_extra_inode:4566: inode #15: comm syz.4.147: corrupted in-inode xattr
[  119.180134][ T5318] loop2: detected capacity change from 0 to 512
[  119.183942][ T5320] loop3: detected capacity change from 0 to 512
[  119.232616][ T5320] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  119.257060][ T5320] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  119.284792][ T5313] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.147: couldn't read orphan inode 15 (err -117)
[  119.299280][ T5320] EXT4-fs (loop3): 1 truncate cleaned up
[  119.299667][ T5313] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  119.952335][ T5316] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  119.971975][ T5328] netlink: 'syz.1.149': attribute type 10 has an invalid length.
[  119.979817][ T5328] netlink: 2 bytes leftover after parsing attributes in process `syz.1.149'.
[  119.988745][ T5328] device bond0 entered promiscuous mode
[  119.994385][ T5328] device bond_slave_0 entered promiscuous mode
[  120.000893][ T5328] device bond_slave_1 entered promiscuous mode
[  120.007832][ T5328] bridge0: port 3(bond0) entered blocking state
[  120.014247][ T5328] bridge0: port 3(bond0) entered disabled state
[  120.025069][ T5328] bridge0: port 3(bond0) entered blocking state
[  120.031367][ T5328] bridge0: port 3(bond0) entered forwarding state
[  120.060087][ T5320] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier=0x0000000000000101,errors=remount-ro,. Quota mode: none.
[  120.292085][ T5318] EXT4-fs error (device loop2): ext4_iget_extra_inode:4566: inode #15: comm syz.2.148: corrupted in-inode xattr
[  120.354531][ T5318] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.148: couldn't read orphan inode 15 (err -117)
[  120.424235][ T5318] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  120.435493][ T4228] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  120.628995][ T5320] EXT4-fs error (device loop3): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.3.142: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  120.768847][ T5320] EXT4-fs (loop3): Remounting filesystem read-only
[  120.849586][ T5337] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0.
[  121.322245][ T5320] EXT4-fs error (device loop3) in ext4_delete_entry:2800: Corrupt filesystem
[  121.337345][ T4228] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  121.347111][ T5320] EXT4-fs (loop3): Remounting filesystem read-only
[  121.357649][ T4228] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  121.360875][ T5320] EXT4-fs warning (device loop3): ext4_rename_delete:3792: inode #2: comm syz.3.142: Deleting old file: nlink 4, error=-117
[  121.402779][ T5342] loop4: detected capacity change from 0 to 1024
[  121.417940][ T5342] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  121.469327][ T5342] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869)
[  121.503431][ T4228] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  121.511462][ T5342] EXT4-fs (loop4): filesystem has both journal inode and journal device!
[  121.527694][ T4228] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67
[  121.572291][ T4228] usb 1-1: SerialNumber: syz
[  121.935711][ T4228] usb 1-1: 0:2 : does not exist
[  121.940636][ T4228] usb 1-1: unit 1 not found!
[  122.118333][ T4228] usb 1-1: USB disconnect, device number 10
[  122.313264][ T5344] loop2: detected capacity change from 0 to 32768
[  122.334096][ T5344] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.152 (5344)
[  122.366866][ T5344] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[  122.397176][ T5344] BTRFS info (device loop2): force zlib compression, level 3
[  122.445628][ T5344] BTRFS warning (device loop2): the 'inode_cache' option is deprecated and has no effect since 5.11
[  122.510005][ T5344] BTRFS info (device loop2): use zlib compression, level 3
[  123.020795][ T5344] BTRFS info (device loop2): allowing degraded mounts
[  123.037017][ T5344] BTRFS info (device loop2): enabling disk space caching
[  123.044363][ T5344] BTRFS error (device loop2): cannot disable free space tree
[  123.136167][ T5344] BTRFS error (device loop2): open_ctree failed: -22
[  123.168952][ T5373] FAULT_INJECTION: forcing a failure.
[  123.168952][ T5373] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  123.233020][ T5373] CPU: 0 PID: 5373 Comm: syz.0.156 Not tainted syzkaller #0
[  123.240517][ T5373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  123.250576][ T5373] Call Trace:
[  123.253862][ T5373]  <TASK>
[  123.256795][ T5373]  dump_stack_lvl+0x188/0x250
[  123.261485][ T5373]  ? show_regs_print_info+0x20/0x20
[  123.266693][ T5373]  ? load_image+0x400/0x400
[  123.271208][ T5373]  ? __lock_acquire+0x7d10/0x7d10
[  123.276241][ T5373]  ? mark_lock+0x94/0x320
[  123.280574][ T5373]  should_fail+0x38c/0x4c0
[  123.285004][ T5373]  prepare_alloc_pages+0x1e4/0x5f0
[  123.290130][ T5373]  __alloc_pages+0x11b/0x480
[  123.294730][ T5373]  ? zone_statistics+0x170/0x170
[  123.299677][ T5373]  ? snd_seq_write+0x1f4/0x810
[  123.304507][ T5373]  ? __mutex_lock_common+0x465/0x2400
[  123.309887][ T5373]  ? rcu_lock_release+0x5/0x20
[  123.314660][ T5373]  kmalloc_large_node+0x7d/0x190
[  123.319606][ T5373]  __kmalloc_node+0x232/0x3b0
[  123.324287][ T5373]  ? mutex_lock_io_nested+0x60/0x60
[  123.329501][ T5373]  kvmalloc_node+0x84/0x130
[  123.334012][ T5373]  snd_seq_pool_init+0x68/0x340
[  123.338882][ T5373]  snd_seq_write+0x2c0/0x810
[  123.343486][ T5373]  ? aa_path_link+0x880/0x880
[  123.348177][ T5373]  ? snd_seq_read+0x6e0/0x6e0
[  123.352892][ T5373]  ? end_current_label_crit_section+0x14b/0x170
[  123.359142][ T5373]  ? common_file_perm+0x171/0x1c0
[  123.364174][ T5373]  ? fsnotify_perm+0x5d/0x560
[  123.368853][ T5373]  ? security_file_permission+0x75/0xa0
[  123.374416][ T5373]  ? snd_seq_read+0x6e0/0x6e0
[  123.379114][ T5373]  vfs_write+0x30b/0xd60
[  123.383364][ T5373]  ? file_end_write+0x250/0x250
[  123.388224][ T5373]  ? __fget_files+0x40f/0x480
[  123.393000][ T5373]  ? __fdget_pos+0x1e2/0x370
[  123.397591][ T5373]  ? ksys_write+0x71/0x260
[  123.402011][ T5373]  ksys_write+0x152/0x260
[  123.406346][ T5373]  ? __ia32_sys_read+0x80/0x80
[  123.411115][ T5373]  ? lockdep_hardirqs_on+0x94/0x140
[  123.416325][ T5373]  do_syscall_64+0x4c/0xa0
[  123.420749][ T5373]  ? clear_bhb_loop+0x30/0x80
[  123.425429][ T5373]  ? clear_bhb_loop+0x30/0x80
[  123.430118][ T5373]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  123.436017][ T5373] RIP: 0033:0x7effbd98d799
[  123.440438][ T5373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  123.460052][ T5373] RSP: 002b:00007effbbbe7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  123.468481][ T5373] RAX: ffffffffffffffda RBX: 00007effbdc06fa0 RCX: 00007effbd98d799
[  123.476466][ T5373] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000003
[  123.484450][ T5373] RBP: 00007effbbbe7090 R08: 0000000000000000 R09: 0000000000000000
[  123.492436][ T5373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  123.500409][ T5373] R13: 00007effbdc07038 R14: 00007effbdc06fa0 R15: 00007ffd66c89ec8
[  123.508472][ T5373]  </TASK>
[  124.002286][ T4229] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  124.228717][ T5376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.150'.
[  124.632200][ T4229] usb 4-1: Using ep0 maxpacket: 16
[  124.677732][ T5395] loop4: detected capacity change from 0 to 1024
[  124.741405][ T5395] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  124.762116][ T5395] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869)
[  124.762349][ T4229] usb 4-1: config 252 has an invalid interface number: 15 but max is 0
[  124.771744][ T5395] EXT4-fs (loop4): filesystem has both journal inode and journal device!
[  124.827063][ T4229] usb 4-1: config 252 has no interface number 0
[  125.425271][ T4229] usb 4-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  125.473477][ T5399] netlink: 'syz.4.161': attribute type 10 has an invalid length.
[  125.481284][ T5399] netlink: 2 bytes leftover after parsing attributes in process `syz.4.161'.
[  125.490323][ T5399] device bond0 entered promiscuous mode
[  125.495982][ T5399] device bond_slave_0 entered promiscuous mode
[  125.502681][ T5399] device bond_slave_1 entered promiscuous mode
[  125.510446][ T5399] bridge0: port 3(bond0) entered blocking state
[  125.516879][ T5399] bridge0: port 3(bond0) entered disabled state
[  125.527585][ T5399] bridge0: port 3(bond0) entered blocking state
[  125.533977][ T5399] bridge0: port 3(bond0) entered forwarding state
[  126.102575][ T4229] usb 4-1: string descriptor 0 read error: -71
[  126.109029][ T4229] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29
[  126.158604][ T4229] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  126.243704][ T5405] xt_policy: neither incoming nor outgoing policy selected
[  126.272972][ T4229] usb 4-1: can't set config #252, error -71
[  126.291620][ T4229] usb 4-1: USB disconnect, device number 9
[  126.337769][ T5408] loop3: detected capacity change from 0 to 512
[  126.355295][ T5397] loop0: detected capacity change from 0 to 32768
[  126.377560][ T5397] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.171 (5397)
[  126.418648][ T5408] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  126.438977][ T5408] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  126.453710][ T5397] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm
[  126.489952][ T5408] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2002e01c, mo2=0006]
[  126.512263][ T5397] BTRFS info (device loop0): force zlib compression, level 3
[  126.522452][ T5408] System zones: 0-2, 18-18, 34-35
[  126.531934][ T5408] EXT4-fs (loop3): mounted filesystem without journal. Opts: noinit_itable,,errors=continue. Quota mode: none.
[  126.635215][ T5397] BTRFS warning (device loop0): the 'inode_cache' option is deprecated and has no effect since 5.11
[  126.700941][ T5397] BTRFS info (device loop0): use zlib compression, level 3
[  126.732097][ T4390] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  126.734102][ T5397] BTRFS info (device loop0): allowing degraded mounts
[  126.769310][ T5397] BTRFS info (device loop0): enabling disk space caching
[  126.789023][ T5397] BTRFS error (device loop0): cannot disable free space tree
[  126.858348][ T5397] BTRFS error (device loop0): open_ctree failed: -22
[  126.958600][ T5413] overlayfs: conflicting lowerdir path
[  126.996593][ T5415] loop4: detected capacity change from 0 to 512
[  127.015140][ T5413] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  127.124650][ T5415] EXT4-fs error (device loop4): ext4_iget_extra_inode:4566: inode #15: comm syz.4.162: corrupted in-inode xattr
[  127.150639][ T5415] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.162: couldn't read orphan inode 15 (err -117)
[  127.172347][ T4390] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  127.184230][ T4390] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  127.202614][ T4390] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01
[  127.211672][ T4390] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  127.222996][ T4390] usb 2-1: config 0 descriptor??
[  127.227370][ T5415] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  127.502452][ T5420] loop3: detected capacity change from 0 to 1024
[  127.586353][ T5429] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0.
[  127.999023][ T5420] hfsplus: bad catalog entry type
[  128.050687][ T4477] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  128.123753][ T4390] usbhid 2-1:0.0: can't add hid device: -71
[  128.129749][ T4390] usbhid: probe of 2-1:0.0 failed with error -71
[  128.158645][ T4390] usb 2-1: USB disconnect, device number 9
[  128.302197][ T4477] usb 3-1: Using ep0 maxpacket: 16
[  128.360591][ T5435] loop4: detected capacity change from 0 to 1024
[  128.383022][ T4434] hfsplus: b-tree write err: -5, ino 4
[  128.422302][ T4477] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  128.453780][ T4477] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  128.469220][ T5397] loop0: detected capacity change from 0 to 32768
[  128.486090][ T4477] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[  128.534685][ T4477] usb 3-1: config 0 interface 0 has no altsetting 0
[  128.589067][ T5443] loop1: detected capacity change from 0 to 256
[  128.606903][ T4477] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  128.646138][ T4477] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  128.697631][ T4477] usb 3-1: config 0 descriptor??
[  128.823771][ T5443] udc-core: couldn't find an available UDC or it's busy
[  128.834176][ T5449] loop4: detected capacity change from 0 to 512
[  128.860863][ T5443] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  128.931514][ T5449] EXT4-fs error (device loop4): ext4_iget_extra_inode:4566: inode #15: comm syz.4.186: corrupted in-inode xattr
[  128.998390][ T5449] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.186: couldn't read orphan inode 15 (err -117)
[  129.030819][ T5449] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  129.081924][ T5444] loop0: detected capacity change from 0 to 32768
[  129.112176][ T4327] usb 2-1: new full-speed USB device number 10 using dummy_hcd
[  129.132176][ T5444] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.175 (5444)
[  129.160227][ T5444] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm
[  129.170112][ T5444] BTRFS info (device loop0): force zlib compression, level 3
[  129.177958][ T5444] BTRFS warning (device loop0): the 'inode_cache' option is deprecated and has no effect since 5.11
[  129.187438][ T5430] udc-core: couldn't find an available UDC or it's busy
[  129.189324][ T5444] BTRFS info (device loop0): use zlib compression, level 3
[  129.215919][ T5430] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  129.232521][ T5444] BTRFS info (device loop0): allowing degraded mounts
[  129.242312][ T5444] BTRFS info (device loop0): enabling disk space caching
[  129.263803][ T4477] hid (null): unknown global tag 0x49
[  129.270819][ T5444] BTRFS error (device loop0): cannot disable free space tree
[  129.290185][ T5444] BTRFS error (device loop0): open_ctree failed: -22
[  129.352156][ T4174] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by udevd (4174)
[  129.480420][ T4390] usb 3-1: USB disconnect, device number 8
[  129.522282][ T4327] usb 2-1: config 0 has an invalid interface number: 69 but max is 0
[  129.542263][ T4327] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  129.617703][ T4327] usb 2-1: config 0 has no interface number 0
[  129.627849][ T4327] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0
[  129.658082][ T4327] usb 2-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  129.872594][ T4327] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[  129.918851][ T4327] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.932678][ T4327] usb 2-1: Product: syz
[  129.942351][ T4327] usb 2-1: Manufacturer: syz
[  129.952322][ T4327] usb 2-1: SerialNumber: syz
[  129.972465][ T4327] usb 2-1: config 0 descriptor??
[  130.035869][ T4327] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[  130.060116][ T5444] loop0: detected capacity change from 0 to 32768
[  130.074088][ T4327] cyberjack ttyUSB0: usb_submit_urb(read int) failed
[  130.193656][ T4327] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[  130.223664][ T5444] blk_update_request: I/O error, dev loop14, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  130.246023][ T4228] usb 2-1: USB disconnect, device number 10
[  130.261363][ T4228] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[  130.280825][ T4228] cyberjack 2-1:0.69: device disconnected
[  130.287638][ T5444] lbmIODone: I/O error in JFS log
[  130.292914][ T5444] *** Log Format Error ! ***
[  130.305235][ T5444] lmLogInit: exit(-22)
[  130.310597][ T5444] lmLogOpen: exit(-22)
[  130.324780][ T5465] jfs: Unrecognized mount option "l2tp" or missing value
[  130.425108][ T5444] non-latin1 character 0xffff found in JFS file name
[  130.432972][ T5444] mount with iocharset=utf8 to access
[  130.532176][ T4390] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  130.796080][ T4390] usb 3-1: Using ep0 maxpacket: 16
[  130.849006][ T5475] loop1: detected capacity change from 0 to 512
[  130.912346][ T4390] usb 3-1: config 252 has an invalid interface number: 15 but max is 0
[  130.935136][ T4390] usb 3-1: config 252 has no interface number 0
[  130.961860][ T4390] usb 3-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  131.017984][ T5475] EXT4-fs error (device loop1): ext4_iget_extra_inode:4566: inode #15: comm syz.1.183: corrupted in-inode xattr
[  131.028793][ T5468] loop0: detected capacity change from 0 to 32768
[  131.075357][ T5468] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.181 (5468)
[  131.106891][ T5475] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.183: couldn't read orphan inode 15 (err -117)
[  131.143706][ T5469] loop3: detected capacity change from 0 to 32768
[  131.152463][ T4390] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29
[  131.162113][ T5468] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  131.191387][ T5468] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  131.203010][ T4390] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  131.211036][ T4390] usb 3-1: Product: syz
[  131.215646][ T5475] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  131.219175][ T5480] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  131.235202][ T5468] BTRFS info (device loop0): trying to use backup root at mount time
[  131.244744][ T5468] BTRFS info (device loop0): setting nodatasum
[  131.251007][ T5468] BTRFS info (device loop0): force zlib compression, level 3
[  131.258641][ T4390] usb 3-1: Manufacturer: syz
[  131.322370][ T5468] BTRFS info (device loop0): setting nodatacow
[  131.337750][ T5482] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  131.346818][ T5482] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  131.487008][ T5468] BTRFS info (device loop0): disabling tree log
[  132.036243][ T4390] usb 3-1: SerialNumber: syz
[  132.664895][ T1419] ieee802154 phy0 wpan0: encryption failed: -22
[  132.671453][ T1419] ieee802154 phy1 wpan1: encryption failed: -22
[  132.699563][ T5468] BTRFS info (device loop0): using free space tree
[  132.741605][ T5469] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz.3.180 (5469)
[  132.812784][ T5468] BTRFS info (device loop0): has skinny extents
[  132.978223][ T4390] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  133.055790][ T5494] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0.
[  133.476469][ T5468] BTRFS error (device loop0): open_ctree failed: -12
[  133.634846][ T4432] usb 3-1: Failed to submit usb control message: -71
[  133.641947][ T4432] usb 3-1: unable to send the bmi data to the device: -71
[  133.651915][ T4174] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by udevd (4174)
[  133.668926][ T4432] usb 3-1: unable to get target info from device
[  133.681026][ T4432] usb 3-1: could not get target info (-71)
[  133.693719][ T4432] usb 3-1: could not probe fw (-71)
[  133.787302][ T4327] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  133.866190][ T4228] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  133.882912][    T7] usb 3-1: USB disconnect, device number 9
[  134.005007][ T5513] netlink: 24 bytes leftover after parsing attributes in process `syz.3.191'.
[  134.038854][ T5513] netlink: 'syz.3.191': attribute type 1 has an invalid length.
[  134.073104][ T5513] netlink: 200 bytes leftover after parsing attributes in process `syz.3.191'.
[  134.162315][ T4327] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  134.176062][ T4327] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  134.202235][ T4320] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  134.252269][ T4228] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  134.262991][ T4327] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  134.275205][ T4327] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67
[  134.283522][ T4228] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  134.293183][ T4327] usb 2-1: SerialNumber: syz
[  134.370400][ T5516] loop3: detected capacity change from 0 to 8192
[  134.377129][ T4228] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  134.392329][ T4228] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67
[  134.422824][ T4228] usb 5-1: SerialNumber: syz
[  134.457251][ T5516] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[  134.472145][ T4320] usb 1-1: Using ep0 maxpacket: 16
[  134.519510][ T5516] REISERFS (device loop3): using ordered data mode
[  134.552535][ T5516] reiserfs: using flush barriers
[  134.584147][ T4327] usb 2-1: 0:2 : does not exist
[  134.592448][ T4320] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  134.615645][ T5516] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 7, max trans age 7
[  134.649629][ T4320] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  134.691622][ T4327] usb 2-1: USB disconnect, device number 11
[  134.706123][ T5516] REISERFS (device loop3): checking transaction log (loop3)
[  134.721141][ T4320] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[  134.740885][ T4228] debugfs: Directory 'card3' with parent 'sound' already present!
[  134.760800][ T5516] REISERFS (device loop3): Using r5 hash to sort names
[  134.764427][ T4228] usb 5-1: 0:2 : does not exist
[  134.785596][ T4320] usb 1-1: config 0 interface 0 has no altsetting 0
[  134.795851][ T4320] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  134.815894][ T5516] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  134.821211][ T4320] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  134.852622][ T4228] usb 5-1: USB disconnect, device number 10
[  134.866231][ T5516] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  134.921636][ T4320] usb 1-1: config 0 descriptor??
[  135.102931][ T4655] udevd[4655]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  135.138836][ T5532] FAULT_INJECTION: forcing a failure.
[  135.138836][ T5532] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  135.207327][ T5532] CPU: 1 PID: 5532 Comm: syz.1.193 Not tainted syzkaller #0
[  135.214660][ T5532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  135.224727][ T5532] Call Trace:
[  135.228015][ T5532]  <TASK>
[  135.230958][ T5532]  dump_stack_lvl+0x188/0x250
[  135.235660][ T5532]  ? show_regs_print_info+0x20/0x20
[  135.240875][ T5532]  ? load_image+0x400/0x400
[  135.245402][ T5532]  ? __lock_acquire+0x7d10/0x7d10
[  135.250443][ T5532]  should_fail+0x38c/0x4c0
[  135.254878][ T5532]  _copy_to_user+0x2e/0x130
[  135.259397][ T5532]  simple_read_from_buffer+0xe3/0x150
[  135.264789][ T5532]  proc_fail_nth_read+0x1a6/0x220
[  135.269828][ T5532]  ? proc_fault_inject_write+0x310/0x310
[  135.275471][ T5532]  ? fsnotify_perm+0x254/0x560
[  135.280252][ T5532]  ? proc_fault_inject_write+0x310/0x310
[  135.285901][ T5532]  vfs_read+0x301/0xd60
[  135.290082][ T5532]  ? kernel_read+0x1e0/0x1e0
[  135.294692][ T5532]  ? __fget_files+0x40f/0x480
[  135.299388][ T5532]  ? mutex_lock_nested+0x17/0x20
[  135.304323][ T5532]  ? __fdget_pos+0x2bf/0x370
[  135.308908][ T5532]  ? ksys_read+0x71/0x260
[  135.313244][ T5532]  ksys_read+0x152/0x260
[  135.317482][ T5532]  ? vfs_write+0xd60/0xd60
[  135.321886][ T5532]  ? lockdep_hardirqs_on+0x94/0x140
[  135.327068][ T5532]  do_syscall_64+0x4c/0xa0
[  135.331469][ T5532]  ? clear_bhb_loop+0x30/0x80
[  135.336124][ T5532]  ? clear_bhb_loop+0x30/0x80
[  135.340789][ T5532]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  135.346671][ T5532] RIP: 0033:0x7fc558c03fce
[  135.351073][ T5532] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  135.370660][ T5532] RSP: 002b:00007fc556e9cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  135.379057][ T5532] RAX: ffffffffffffffda RBX: 00007fc556e9d6c0 RCX: 00007fc558c03fce
[  135.387023][ T5532] RDX: 000000000000000f RSI: 00007fc556e9d0a0 RDI: 0000000000000005
[  135.395000][ T5532] RBP: 00007fc556e9d090 R08: 0000000000000000 R09: 0000000000000000
[  135.402962][ T5532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  135.410919][ T5532] R13: 00007fc558ebd038 R14: 00007fc558ebcfa0 R15: 00007ffd84fa01a8
[  135.418887][ T5532]  </TASK>
[  135.425763][ T5511] udc-core: couldn't find an available UDC or it's busy
[  135.456063][ T5538] netlink: 12 bytes leftover after parsing attributes in process `syz.2.196'.
[  135.482187][ T5511] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  135.503736][ T4320] hid (null): unknown global tag 0x49
[  135.686971][ T5544] netlink: 8 bytes leftover after parsing attributes in process `syz.1.197'.
[  136.292379][ T4320] usb 1-1: USB disconnect, device number 11
[  136.672111][ T4228] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  136.745706][ T5552] loop2: detected capacity change from 0 to 32768
[  136.820611][ T5552] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  136.851563][ T5551] loop4: detected capacity change from 0 to 32768
[  136.886804][ T5552] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  136.903328][ T5552] BTRFS info (device loop2): trying to use backup root at mount time
[  136.912625][ T5551] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz.4.201 (5551)
[  136.941918][ T5556] loop0: detected capacity change from 0 to 512
[  136.950493][ T5552] BTRFS info (device loop2): setting nodatasum
[  136.966282][ T5552] BTRFS info (device loop2): force zlib compression, level 3
[  136.975649][ T5552] BTRFS info (device loop2): setting nodatacow
[  136.982982][ T5552] BTRFS info (device loop2): disabling tree log
[  136.989620][ T5552] BTRFS info (device loop2): using free space tree
[  136.995931][ T5556] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  137.004774][ T5552] BTRFS info (device loop2): has skinny extents
[  137.053905][ T5556] EXT4-fs (loop0): 1 truncate cleaned up
[  137.092247][ T5556] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier=0x0000000000000101,errors=remount-ro,. Quota mode: none.
[  137.093481][ T4228] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  137.117155][ T4228] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  137.120891][ T4655] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by udevd (4655)
[  137.126945][ T4228] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  137.126984][ T4228] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  137.127004][ T4228] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.134451][ T4228] usb 2-1: config 0 descriptor??
[  137.205912][ T5556] EXT4-fs error (device loop0): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.0.202: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  137.210282][ T5552] BTRFS info (device loop2): enabling ssd optimizations
[  137.226093][    C0] vkms_vblank_simulate: vblank timer overrun
[  137.232681][ T5556] EXT4-fs (loop0): Remounting filesystem read-only
[  137.273791][ T5556] EXT4-fs error (device loop0) in ext4_delete_entry:2800: Corrupt filesystem
[  137.283016][ T4320] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  137.366848][ T5556] EXT4-fs (loop0): Remounting filesystem read-only
[  137.400446][ T5556] EXT4-fs warning (device loop0): ext4_rename_delete:3792: inode #2: comm syz.0.202: Deleting old file: nlink 4, error=-117
[  137.403078][ T5552] BTRFS info (device loop2): balance: start -d -m -s
[  137.429606][ T5552] BTRFS info (device loop2): relocating block group 6881280 flags data|metadata
[  137.533016][ T5552] BTRFS info (device loop2): found 1 extents, stage: move data extents
[  137.587895][ T5552] BTRFS info (device loop2): relocating block group 5242880 flags data|metadata
[  137.683036][ T5548] udc-core: couldn't find an available UDC or it's busy
[  137.690014][ T5548] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  137.727228][ T4320] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  137.742056][ T4320] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  137.804761][ T5552] BTRFS info (device loop2): found 10 extents, stage: move data extents
[  137.839083][ T5588] loop0: detected capacity change from 0 to 256
[  137.885174][ T4320] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  137.903151][ T4320] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67
[  137.905699][ T5552] BTRFS info (device loop2): found 2 extents, stage: update data pointers
[  137.911262][ T4320] usb 4-1: SerialNumber: syz
[  137.972436][ T5588] netlink: 24 bytes leftover after parsing attributes in process `syz.0.207'.
[  137.998773][ T5552] BTRFS info (device loop2): relocating block group 1048576 flags system
[  138.025637][ T5588] attempt to access beyond end of device
[  138.025637][ T5588] loop0: rw=524288, want=276, limit=256
[  138.095458][ T5588] attempt to access beyond end of device
[  138.095458][ T5588] loop0: rw=0, want=264, limit=256
[  138.113061][ T5552] BTRFS info (device loop2): found 1 extents, stage: move data extents
[  138.127811][ T5584] loop4: detected capacity change from 0 to 40427
[  138.144016][ T5552] BTRFS info (device loop2): balance: ended with status: 0
[  138.199244][ T5584] F2FS-fs (loop4): invalid crc value
[  138.211022][ T5584] F2FS-fs (loop4): Found nat_bits in checkpoint
[  138.222399][ T4228] usbhid 2-1:0.0: can't add hid device: -71
[  138.232113][ T4228] usbhid: probe of 2-1:0.0 failed with error -71
[  138.274470][ T4320] usb 4-1: 0:2 : does not exist
[  138.280783][ T4228] usb 2-1: USB disconnect, device number 12
[  138.302764][ T5595] loop0: detected capacity change from 0 to 256
[  138.327632][ T4320] usb 4-1: USB disconnect, device number 10
[  138.340744][ T5584] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  138.384697][ T4174] udevd[4174]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  138.428812][ T5595] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001207b, chksum : 0x1e861e4d, utbl_chksum : 0xe619d30d)
[  138.515469][ T5597] 9pnet: Insufficient options for proto=fd
[  138.928295][ T5603] netlink: 8 bytes leftover after parsing attributes in process `syz.4.209'.
[  139.753577][ T5607] loop1: detected capacity change from 0 to 512
[  139.842238][ T5607] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  139.866002][ T5607] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[  139.897196][ T5607] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2002e01c, mo2=0006]
[  139.904733][ T5602] loop3: detected capacity change from 0 to 32768
[  139.905365][ T4327] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  139.919677][ T5607] System zones: 0-2, 18-18, 34-35
[  139.953010][ T5607] EXT4-fs (loop1): mounted filesystem without journal. Opts: noinit_itable,,errors=continue. Quota mode: none.
[  140.024310][ T5602] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.211 (5602)
[  140.024774][ T4395] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  140.077779][ T5602] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm
[  140.122197][ T5602] BTRFS info (device loop3): force zlib compression, level 3
[  140.129643][ T5602] BTRFS warning (device loop3): the 'inode_cache' option is deprecated and has no effect since 5.11
[  140.182290][ T5602] BTRFS info (device loop3): use zlib compression, level 3
[  140.191971][ T5602] BTRFS info (device loop3): allowing degraded mounts
[  140.212186][ T5602] BTRFS info (device loop3): enabling disk space caching
[  140.239830][ T5602] BTRFS error (device loop3): cannot disable free space tree
[  140.255193][ T5602] BTRFS error (device loop3): open_ctree failed: -22
[  140.289853][ T5611] loop2: detected capacity change from 0 to 32768
[  140.312209][ T4395] usb 1-1: Using ep0 maxpacket: 16
[  140.321760][ T5611] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.210 (5611)
[  140.360114][ T5611] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[  140.372192][ T4327] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  140.416980][ T5611] BTRFS info (device loop2): force zlib compression, level 3
[  140.432349][ T4395] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  140.463591][ T5611] BTRFS warning (device loop2): the 'inode_cache' option is deprecated and has no effect since 5.11
[  140.463682][ T4395] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  140.509777][ T5611] BTRFS info (device loop2): use zlib compression, level 3
[  140.522102][ T4327] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  140.524989][ T4395] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[  140.541405][ T4327] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  140.552463][ T5611] BTRFS info (device loop2): allowing degraded mounts
[  140.559517][ T5611] BTRFS info (device loop2): enabling disk space caching
[  140.567222][ T4327] usb 5-1: SerialNumber: syz
[  140.589851][ T5611] BTRFS error (device loop2): cannot disable free space tree
[  140.610091][ T4395] usb 1-1: config 0 interface 0 has no altsetting 0
[  140.622149][ T4395] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  140.651548][ T4395] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  140.657866][ T4327] usb 5-1: bad CDC descriptors
[  140.683178][ T5611] BTRFS error (device loop2): open_ctree failed: -22
[  140.699086][ T4395] usb 1-1: config 0 descriptor??
[  140.773676][ T5614] loop1: detected capacity change from 0 to 32768
[  140.796479][ T5614] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.215 (5614)
[  140.829167][ T5614] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  140.861238][ T5614] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  140.882151][ T5614] BTRFS info (device loop1): trying to use backup root at mount time
[  140.899047][ T5614] BTRFS info (device loop1): setting nodatasum
[  140.911404][ T5614] BTRFS info (device loop1): force zlib compression, level 3
[  140.926458][ T4327] usb 5-1: USB disconnect, device number 11
[  140.938944][ T5602] blk_update_request: I/O error, dev loop14, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  140.966664][ T5602] lbmIODone: I/O error in JFS log
[  140.977812][ T5614] BTRFS info (device loop1): setting nodatacow
[  140.992828][ T5602] *** Log Format Error ! ***
[  141.007922][ T5614] BTRFS info (device loop1): disabling tree log
[  141.008150][ T5602] lmLogInit: exit(-22)
[  141.038483][ T5602] lmLogOpen: exit(-22)
[  141.038803][ T5614] BTRFS info (device loop1): using free space tree
[  141.053012][ T5618] jfs: Unrecognized mount option "l2tp" or missing value
[  141.082306][ T5614] BTRFS info (device loop1): has skinny extents
[  141.148008][ T5602] non-latin1 character 0xffff found in JFS file name
[  141.163034][ T5609] udc-core: couldn't find an available UDC or it's busy
[  141.169999][ T5609] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  141.175638][ T5602] mount with iocharset=utf8 to access
[  141.221318][ T5628] FAULT_INJECTION: forcing a failure.
[  141.221318][ T5628] name failslab, interval 1, probability 0, space 0, times 1
[  141.223681][ T4395] hid (null): unknown global tag 0x49
[  141.240542][ T5628] CPU: 1 PID: 5628 Comm: syz.3.216 Not tainted syzkaller #0
[  141.247846][ T5628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  141.257903][ T5628] Call Trace:
[  141.261188][ T5628]  <TASK>
[  141.264115][ T5628]  dump_stack_lvl+0x188/0x250
[  141.268802][ T5628]  ? show_regs_print_info+0x20/0x20
[  141.274018][ T5628]  ? load_image+0x400/0x400
[  141.278536][ T5628]  ? __might_sleep+0xf0/0xf0
[  141.283127][ T5628]  ? __lock_acquire+0x7d10/0x7d10
[  141.288174][ T5628]  ? netlink_insert+0xe95/0x11f0
[  141.293159][ T5628]  should_fail+0x38c/0x4c0
[  141.297700][ T5628]  should_failslab+0x5/0x20
[  141.302208][ T5628]  slab_pre_alloc_hook+0x51/0xc0
[  141.307154][ T5628]  kmem_cache_alloc_node+0x47/0x2d0
[  141.312352][ T5628]  ? __alloc_skb+0xf4/0x750
[  141.316866][ T5628]  __alloc_skb+0xf4/0x750
[  141.321204][ T5628]  netlink_sendmsg+0x654/0xbe0
[  141.325981][ T5628]  ? netlink_getsockopt+0x570/0x570
[  141.331192][ T5628]  ? aa_sock_msg_perm+0x94/0x150
[  141.336138][ T5628]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  141.341428][ T5628]  ? security_socket_sendmsg+0x7c/0xa0
[  141.346587][ T5611] blk_update_request: I/O error, dev loop14, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  141.346887][ T5628]  ? netlink_getsockopt+0x570/0x570
[  141.362977][ T5628]  ____sys_sendmsg+0x5b7/0x8f0
[  141.367761][ T5628]  ? __sys_sendmsg_sock+0x30/0x30
[  141.372802][ T5628]  ? import_iovec+0x6f/0xa0
[  141.377315][ T5628]  ___sys_sendmsg+0x236/0x2e0
[  141.378266][ T5611] lbmIODone: I/O error in JFS log
[  141.381998][ T5628]  ? __sys_sendmsg+0x2a0/0x2a0
[  141.391756][ T5628]  ? vfs_write+0x8b2/0xd60
[  141.396195][ T5628]  __se_sys_sendmsg+0x1af/0x290
[  141.399538][ T5611] *** Log Format Error ! ***
[  141.401046][ T5628]  ? __x64_sys_sendmsg+0x80/0x80
[  141.409242][ T5611] lmLogInit: exit(-22)
[  141.410526][ T5628]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  141.415239][ T5611] lmLogOpen: exit(-22)
[  141.420559][ T5628]  ? lockdep_hardirqs_on+0x94/0x140
[  141.420587][ T5628]  do_syscall_64+0x4c/0xa0
[  141.420604][ T5628]  ? clear_bhb_loop+0x30/0x80
[  141.425851][ T5635] jfs: Unrecognized mount option "l2tp" or missing value
[  141.429820][ T5628]  ? clear_bhb_loop+0x30/0x80
[  141.450552][ T5628]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  141.456464][ T5628] RIP: 0033:0x7f63dd9c5799
[  141.461022][ T5628] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  141.480635][ T5628] RSP: 002b:00007f63dbc1f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  141.489059][ T5628] RAX: ffffffffffffffda RBX: 00007f63ddc3efa0 RCX: 00007f63dd9c5799
[  141.497054][ T5628] RDX: 0000000000000010 RSI: 0000200000000680 RDI: 000000000000000b
[  141.505037][ T5628] RBP: 00007f63dbc1f090 R08: 0000000000000000 R09: 0000000000000000
[  141.513012][ T5628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  141.521043][ T5628] R13: 00007f63ddc3f038 R14: 00007f63ddc3efa0 R15: 00007ffe5d791868
[  141.529028][ T5628]  </TASK>
[  141.548169][ T4327] usb 1-1: USB disconnect, device number 12
[  141.627301][ T5614] BTRFS info (device loop1): enabling ssd optimizations
[  143.826678][ T5662] netlink: 8 bytes leftover after parsing attributes in process `syz.0.222'.
[  144.110544][ T5664] set_capacity_and_notify: 2 callbacks suppressed
[  144.110560][ T5664] loop4: detected capacity change from 0 to 256
[  144.251527][ T5664] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  144.509863][ T5654] loop3: detected capacity change from 0 to 32768
[  144.564821][ T5654] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.221 (5654)
[  144.613242][ T5654] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  144.662084][ T5654] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  144.722063][ T5654] BTRFS info (device loop3): trying to use backup root at mount time
[  144.770766][ T5654] BTRFS info (device loop3): setting nodatasum
[  144.793363][ T5654] BTRFS info (device loop3): force zlib compression, level 3
[  144.826185][ T5654] BTRFS info (device loop3): setting nodatacow
[  144.852106][ T5654] BTRFS info (device loop3): disabling tree log
[  144.858410][ T5654] BTRFS info (device loop3): using free space tree
[  144.885903][ T5654] BTRFS info (device loop3): has skinny extents
[  145.094819][ T5668] loop0: detected capacity change from 0 to 32768
[  145.235311][ T5671] loop1: detected capacity change from 0 to 32768
[  145.246590][ T5668] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.227 (5668)
[  145.347714][ T5688] loop4: detected capacity change from 0 to 40427
[  145.364007][ T5671] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz.1.225 (5671)
[  145.381080][ T5668] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm
[  145.441722][ T5688] F2FS-fs (loop4): invalid crc value
[  145.463448][ T5688] F2FS-fs (loop4): Found nat_bits in checkpoint
[  145.467099][ T5668] BTRFS info (device loop0): force zlib compression, level 3
[  145.492136][ T4327] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  145.499549][ T5688] F2FS-fs (loop4): Start checkpoint disabled!
[  145.500124][ T4653] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by udevd (4653)
[  145.518066][ T5668] BTRFS warning (device loop0): the 'inode_cache' option is deprecated and has no effect since 5.11
[  145.529480][ T5688] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  145.537721][ T5654] BTRFS info (device loop3): enabling ssd optimizations
[  145.545138][ T5668] BTRFS info (device loop0): use zlib compression, level 3
[  145.593935][ T5668] BTRFS info (device loop0): allowing degraded mounts
[  145.607558][ T5668] BTRFS info (device loop0): enabling disk space caching
[  145.612442][ T5705] IPv6: sit1: Disabled Multicast RS
[  145.641277][ T5668] BTRFS error (device loop0): cannot disable free space tree
[  145.719387][ T5654] BTRFS info (device loop3): balance: start -d -m -s
[  145.728150][ T5668] BTRFS error (device loop0): open_ctree failed: -22
[  145.738955][ T5654] BTRFS info (device loop3): relocating block group 6881280 flags data|metadata
[  145.917342][ T5654] BTRFS info (device loop3): found 2 extents, stage: move data extents
[  145.925918][ T4327] usb 3-1: config 0 has an invalid interface number: 64 but max is 0
[  145.944331][ T4327] usb 3-1: config 0 has no interface number 0
[  145.977872][ T4434] attempt to access beyond end of device
[  145.977872][ T4434] loop4: rw=2049, want=40984, limit=40427
[  146.014294][ T5654] BTRFS info (device loop3): relocating block group 5242880 flags data|metadata
[  146.162395][ T4327] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07
[  146.179225][ T5654] BTRFS info (device loop3): found 10 extents, stage: move data extents
[  146.179277][ T4327] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  146.251419][ T4327] usb 3-1: Product: syz
[  146.267374][ T4327] usb 3-1: Manufacturer: syz
[  146.289538][ T4327] usb 3-1: SerialNumber: syz
[  146.318150][ T4327] usb 3-1: config 0 descriptor??
[  146.341405][ T5654] BTRFS info (device loop3): found 2 extents, stage: update data pointers
[  146.359641][ T5671] loop1: detected capacity change from 0 to 32768
[  146.410086][ T5654] BTRFS info (device loop3): relocating block group 1048576 flags system
[  146.450190][ T5671] blk_update_request: I/O error, dev loop14, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  146.481803][ T5671] lbmIODone: I/O error in JFS log
[  146.487790][ T5654] BTRFS info (device loop3): found 1 extents, stage: move data extents
[  146.507802][ T5671] *** Log Format Error ! ***
[  146.519733][ T5671] lmLogInit: exit(-22)
[  146.536942][ T5671] lmLogOpen: exit(-22)
[  146.541130][ T5708] jfs: Unrecognized mount option "l2tp" or missing value
[  146.541668][ T5668] loop0: detected capacity change from 0 to 32768
[  146.560395][ T5654] BTRFS info (device loop3): balance: ended with status: 0
[  146.633862][ T5668] blk_update_request: I/O error, dev loop14, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  146.654040][ T5668] lbmIODone: I/O error in JFS log
[  146.665963][ T5668] *** Log Format Error ! ***
[  146.670778][ T5668] lmLogInit: exit(-22)
[  146.677007][ T5668] lmLogOpen: exit(-22)
[  146.683870][ T5711] jfs: Unrecognized mount option "l2tp" or missing value
[  146.782501][ T4327] usb 3-1: Found UVC 0.08 device syz (046d:0823)
[  146.791093][ T4327] usb 3-1: No valid video chain found.
[  146.817579][ T4327] usb 3-1: USB disconnect, device number 10
[  147.092084][ T4264] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  147.222692][ T5722] loop2: detected capacity change from 0 to 128
[  147.228621][ T4317] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  147.337542][ T4264] usb 1-1: Using ep0 maxpacket: 32
[  147.463082][ T4264] usb 1-1: config 0 has an invalid interface number: 188 but max is 0
[  147.472093][ T4264] usb 1-1: config 0 has no interface number 0
[  147.486432][ T4264] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  147.623046][ T4317] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  147.666567][ T4264] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  147.691518][ T4264] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  147.701045][ T4264] usb 1-1: Product: syz
[  147.717212][ T4264] usb 1-1: Manufacturer: syz
[  147.721898][ T4264] usb 1-1: SerialNumber: syz
[  147.733395][ T4317] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  147.745959][ T4317] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  147.749389][ T4264] usb 1-1: config 0 descriptor??
[  147.761769][ T4317] usb 2-1: SerialNumber: syz
[  147.782464][ T5715] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  147.797585][ T5724] loop4: detected capacity change from 0 to 32768
[  147.813039][ T4317] usb 2-1: bad CDC descriptors
[  147.819935][ T5728] kvm: pic: non byte write
[  147.878522][ T5724] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.235 (5724)
[  148.017772][ T5715] loop0: detected capacity change from 0 to 64
[  148.050789][ T5724] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  148.082637][ T4228] usb 2-1: USB disconnect, device number 13
[  148.090571][ T5724] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  148.167814][ T5736] netlink: 8 bytes leftover after parsing attributes in process `syz.3.237'.
[  148.321159][ T5724] BTRFS info (device loop4): trying to use backup root at mount time
[  149.863043][ T5732] sched: RT throttling activated
[  149.922141][ T5724] BTRFS info (device loop4): setting nodatasum
[  149.981938][ T5724] BTRFS info (device loop4): force zlib compression, level 3
[  150.031263][ T4264] asix: probe of 1-1:0.188 failed with error -71
[  150.047448][ T4264] usb 1-1: USB disconnect, device number 13
[  150.079881][ T5724] BTRFS info (device loop4): setting nodatacow
[  150.095229][ T5724] BTRFS info (device loop4): disabling tree log
[  150.101515][ T5724] BTRFS info (device loop4): using free space tree
[  150.142808][ T5724] BTRFS info (device loop4): has skinny extents
[  150.315109][ T5724] BTRFS info (device loop4): enabling ssd optimizations
[  150.509947][ T5744] loop1: detected capacity change from 0 to 32768
[  150.591168][ T5744] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.242 (5744)
[  150.661410][ T5744] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[  150.701731][ T5744] BTRFS info (device loop1): force zlib compression, level 3
[  150.762176][ T5744] BTRFS warning (device loop1): the 'inode_cache' option is deprecated and has no effect since 5.11
[  150.786553][ T5776] netlink: 4 bytes leftover after parsing attributes in process `syz.3.246'.
[  150.848093][ T5744] BTRFS info (device loop1): use zlib compression, level 3
[  150.925495][ T5744] BTRFS info (device loop1): allowing degraded mounts
[  151.035848][ T5744] BTRFS info (device loop1): enabling disk space caching
[  151.156353][ T5744] BTRFS error (device loop1): cannot disable free space tree
[  151.360087][ T5744] BTRFS error (device loop1): open_ctree failed: -22
[  152.113557][ T5746] loop2: detected capacity change from 0 to 32768
[  152.232691][ T5746] XFS: noattr2 mount option is deprecated.
[  152.246378][ T5746] xfs: Bad value for 'allocsize'
[  152.581294][ T5746] device syzkaller0 entered promiscuous mode
[  152.601891][ T5744] loop1: detected capacity change from 0 to 32768
[  152.673811][ T5744] blk_update_request: I/O error, dev loop14, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  152.692386][ T5744] lbmIODone: I/O error in JFS log
[  152.697470][ T5744] *** Log Format Error ! ***
[  152.702201][ T4228] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  152.712935][ T5744] lmLogInit: exit(-22)
[  152.717036][ T5744] lmLogOpen: exit(-22)
[  152.733075][ T5784] jfs: Unrecognized mount option "l2tp" or missing value
[  152.872147][    T7] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  152.996744][ T4228] usb 4-1: Using ep0 maxpacket: 8
[  153.148215][ T5789] loop1: detected capacity change from 0 to 40427
[  153.167438][ T4228] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  153.197130][ T4228] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  153.226621][ T4228] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  153.250166][ T5789] F2FS-fs (loop1): invalid crc value
[  153.253147][ T4228] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[  153.273617][ T5789] F2FS-fs (loop1): Found nat_bits in checkpoint
[  153.302368][ T4478] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  153.308171][ T4228] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  153.316228][ T5789] F2FS-fs (loop1): Start checkpoint disabled!
[  153.338463][ T5789] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  153.340995][ T4228] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  153.352124][    T7] usb 5-1: Using ep0 maxpacket: 32
[  153.395290][ T4228] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  153.405622][ T5789] netlink: 104 bytes leftover after parsing attributes in process `syz.1.250'.
[  153.418923][ T4228] usb 4-1: config 0 descriptor??
[  153.419990][ T5789] attempt to access beyond end of device
[  153.419990][ T5789] loop1: rw=2049, want=45104, limit=40427
[  153.442540][ T5780] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  153.477164][    T7] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  153.498907][    T7] usb 5-1: config 0 has no interfaces?
[  153.567891][ T4474] attempt to access beyond end of device
[  153.567891][ T4474] loop1: rw=2049, want=40976, limit=40427
[  153.672406][    T7] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  153.681817][ T4478] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  153.692451][    T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.700488][    T7] usb 5-1: Product: syz
[  153.705575][ T4478] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  153.730394][    T7] usb 5-1: Manufacturer: syz
[  153.735387][    T7] usb 5-1: SerialNumber: syz
[  153.777026][    T7] usb 5-1: config 0 descriptor??
[  153.802383][ T4478] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  153.811577][ T4478] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67
[  153.819987][ T4478] usb 3-1: SerialNumber: syz
[  153.917614][ T5800] netlink: 8 bytes leftover after parsing attributes in process `syz.1.252'.
[  154.528482][ T4393] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  154.553257][ T4229] usb 4-1: USB disconnect, device number 11
[  154.636450][ T5804] loop1: detected capacity change from 0 to 2
[  154.695963][ T5804] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  154.773923][ T4478] usb 3-1: 0:2 : does not exist
[  154.819879][ T5806] netlink: 'syz.1.255': attribute type 12 has an invalid length.
[  154.828297][ T5806] netlink: 132 bytes leftover after parsing attributes in process `syz.1.255'.
[  154.841029][ T4478] usb 3-1: USB disconnect, device number 11
[  154.965673][ T5810] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  154.972258][ T4393] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  155.056661][ T5812] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  155.064800][ T5812] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  155.074116][ T4393] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  155.095278][ T4655] udevd[4655]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  155.154005][ T4393] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  155.202281][ T4393] usb 1-1: SerialNumber: syz
[  155.384683][ T4393] usb 1-1: bad CDC descriptors
[  155.825141][ T4478] usb 1-1: USB disconnect, device number 14
[  155.838134][ T4393] usb 5-1: USB disconnect, device number 12
[  155.903371][ T5818] loop2: detected capacity change from 0 to 64
[  155.921146][ T5821] loop4: detected capacity change from 0 to 256
[  155.931586][ T5822] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  156.062356][ T5824] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  156.070408][ T5824] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  156.104485][ T5814] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  156.112715][ T5814] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  158.468834][ T5836] loop3: detected capacity change from 0 to 2048
[  158.661708][ T5842] netlink: 8 bytes leftover after parsing attributes in process `syz.0.265'.
[  159.298946][ T5836] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none.
[  159.397635][ T5850] openvswitch: netlink: Missing valid actions attribute.
[  159.422071][ T5850] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  159.462385][ T5852] loop1: detected capacity change from 0 to 1024
[  159.496780][ T5854] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  159.567389][ T5847] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  159.575494][ T5847] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  159.690823][ T5856] xt_hashlimit: Unknown mode mask 80FF, kernel too old?
[  159.858247][ T4317] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  160.003973][ T4478] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  160.106293][ T5854] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  160.114324][ T5854] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  160.282537][ T4317] usb 5-1: config 0 has an invalid interface number: 64 but max is 0
[  160.330917][ T4317] usb 5-1: config 0 has no interface number 0
[  160.612494][ T4317] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07
[  160.669191][ T4317] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  160.779921][ T4317] usb 5-1: Product: syz
[  160.842265][ T4317] usb 5-1: Manufacturer: syz
[  160.862099][ T4478] usb 1-1: Using ep0 maxpacket: 8
[  160.897616][ T4317] usb 5-1: SerialNumber: syz
[  160.998442][ T4317] usb 5-1: config 0 descriptor??
[  161.238561][ T4478] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  161.250249][ T4478] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  161.259975][ T4478] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  161.269685][ T4478] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[  161.280851][ T4478] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  161.290998][ T4478] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  161.300532][ T4478] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  161.310059][ T4478] usb 1-1: config 0 descriptor??
[  161.332702][ T5848] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  161.419601][ T5866] netlink: 8 bytes leftover after parsing attributes in process `syz.2.271'.
[  161.947286][ T4478] usb 1-1: USB disconnect, device number 15
[  161.955195][ T4327] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  162.112720][ T4317] usb 5-1: Found UVC 0.08 device syz (046d:0823)
[  162.119172][ T4317] usb 5-1: No valid video chain found.
[  162.137639][ T4317] usb 5-1: USB disconnect, device number 13
[  162.274513][ T5870] loop2: detected capacity change from 0 to 32768
[  162.316572][ T5870] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.273 (5870)
[  162.334283][ T5870] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  162.345968][ T5870] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  162.356985][ T4327] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  162.367698][ T4327] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  162.377713][ T5870] BTRFS info (device loop2): trying to use backup root at mount time
[  162.386213][ T5870] BTRFS info (device loop2): setting nodatasum
[  162.392902][ T5870] BTRFS info (device loop2): force zlib compression, level 3
[  162.400293][ T5870] BTRFS info (device loop2): setting nodatacow
[  162.406968][ T5870] BTRFS info (device loop2): disabling tree log
[  162.413519][ T5870] BTRFS info (device loop2): using free space tree
[  162.420182][ T5870] BTRFS info (device loop2): has skinny extents
[  162.449100][ T5870] BTRFS info (device loop2): enabling ssd optimizations
[  162.494873][ T4327] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  162.526712][ T4327] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67
[  162.535311][ T4327] usb 2-1: SerialNumber: syz
[  162.825232][ T4327] usb 2-1: 0:2 : does not exist
[  162.838715][ T4327] usb 2-1: USB disconnect, device number 14
[  163.076664][ T5894] loop4: detected capacity change from 0 to 3
[  163.077542][ T4174] udevd[4174]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  163.179079][ T5894] attempt to access beyond end of device
[  163.179079][ T5894] loop4: rw=2048, want=8, limit=3
[  163.264940][ T5894] SQUASHFS error: Failed to read block 0x0: -5
[  163.271149][ T5894] unable to read squashfs_super_block
[  163.661541][ T5894] loop4: detected capacity change from 0 to 32768
[  163.712604][ T5894] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.275 (5894)
[  163.729092][ T5894] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  163.738182][ T5894] BTRFS info (device loop4): setting nodatacow, compression disabled
[  163.746587][ T5894] BTRFS info (device loop4): force clearing of disk cache
[  163.754342][ T5894] BTRFS info (device loop4): enabling ssd optimizations
[  163.761291][ T5894] BTRFS info (device loop4): using spread ssd allocation scheme
[  163.769503][ T5894] BTRFS info (device loop4): turning off barriers
[  163.776214][ T5894] BTRFS info (device loop4): disabling free space tree
[  163.788458][ T5894] BTRFS info (device loop4): not using ssd optimizations
[  163.795804][ T5894] BTRFS info (device loop4): not using spread ssd allocation scheme
[  163.809914][ T5894] BTRFS info (device loop4): has skinny extents
[  163.840863][ T5894] BTRFS info (device loop4): clearing free space tree
[  163.848583][ T5894] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  163.859952][ T5894] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  163.872682][    T7] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  164.382208][    T7] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  164.449454][ T5927] netlink: 8 bytes leftover after parsing attributes in process `syz.1.279'.
[  164.572946][    T7] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  164.609857][    T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  164.746506][    T7] usb 3-1: SerialNumber: syz
[  164.972848][    T7] usb 3-1: bad CDC descriptors
[  165.208580][ T5929] loop1: detected capacity change from 0 to 2048
[  165.322670][ T4173] usb 3-1: USB disconnect, device number 12
[  165.330308][ T5929] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none.
[  165.694804][ T5943] xt_hashlimit: Unknown mode mask 80FF, kernel too old?
[  165.823127][ T5942] loop4: detected capacity change from 0 to 512
[  166.035970][ T5942] EXT4-fs (loop4): Ignoring removed nobh option
[  166.086462][ T5942] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  166.156198][ T5942] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  166.192237][ T5942] EXT4-fs (loop4): 1 truncate cleaned up
[  166.197918][ T5942] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nobh,debug_want_extra_isize=0x0000000000000068,mb_optimize_scan=0x0000000000000001,max_batch_time=0x0000000000000007,dioread_lock,. Quota mode: none.
[  166.335229][ T5949] openvswitch: netlink: Missing valid actions attribute.
[  166.354204][ T5949] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  166.626095][ T5925] loop3: detected capacity change from 0 to 32768
[  166.657997][ T5942] netlink: 104 bytes leftover after parsing attributes in process `syz.4.283'.
[  166.682084][ T4173] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  166.682803][ T5925] gfs2: Bad value for 'quota_quantum'
[  166.711334][ T5946] loop2: detected capacity change from 0 to 32768
[  166.761740][ T5946] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.297 (5946)
[  166.808408][ T5946] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  166.832151][ T5946] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  166.854541][ T5946] BTRFS info (device loop2): trying to use backup root at mount time
[  166.889768][ T5946] BTRFS info (device loop2): setting nodatasum
[  166.897914][ T5946] BTRFS info (device loop2): force zlib compression, level 3
[  166.931644][ T5946] BTRFS info (device loop2): setting nodatacow
[  166.951863][ T5946] BTRFS info (device loop2): disabling tree log
[  166.978752][ T5946] BTRFS info (device loop2): using free space tree
[  166.997185][ T5946] BTRFS info (device loop2): has skinny extents
[  167.092288][ T4173] usb 2-1: config 0 has an invalid interface number: 64 but max is 0
[  167.100947][ T4173] usb 2-1: config 0 has no interface number 0
[  167.107280][ T5946] BTRFS info (device loop2): enabling ssd optimizations
[  167.202096][ T4308] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  167.272189][ T4173] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07
[  167.291560][ T4173] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  167.299657][ T4173] usb 2-1: Product: syz
[  167.312094][ T4173] usb 2-1: Manufacturer: syz
[  167.316868][ T4173] usb 2-1: SerialNumber: syz
[  167.335676][ T4173] usb 2-1: config 0 descriptor??
[  167.501495][ T5973] loop0: detected capacity change from 0 to 32768
[  167.572184][ T4308] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  167.583187][ T4308] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  167.601377][ T5973] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz.0.288 (5973)
[  167.668286][ T4174] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by udevd (4174)
[  167.679728][ T4308] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  167.697004][ T4308] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67
[  167.706783][ T4308] usb 5-1: SerialNumber: syz
[  167.742208][ T4173] usb 2-1: Found UVC 0.08 device syz (046d:0823)
[  167.748599][ T4173] usb 2-1: No valid video chain found.
[  167.796680][ T4173] usb 2-1: USB disconnect, device number 15
[  168.019109][ T4308] usb 5-1: 0:2 : does not exist
[  168.082532][ T4308] usb 5-1: USB disconnect, device number 14
[  168.224317][ T5982] loop0: detected capacity change from 0 to 3
[  168.263084][ T5982] attempt to access beyond end of device
[  168.263084][ T5982] loop0: rw=2048, want=8, limit=3
[  168.296170][ T5982] SQUASHFS error: Failed to read block 0x0: -5
[  168.318311][ T5982] unable to read squashfs_super_block
[  168.336837][ T4655] udevd[4655]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  168.470205][ T5976] loop3: detected capacity change from 0 to 32768
[  168.503199][ T5976] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.291 (5976)
[  168.515814][    T7] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  168.599051][ T5976] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm
[  168.657273][ T5976] BTRFS info (device loop3): force zlib compression, level 3
[  168.689960][ T5987] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  168.721087][ T5976] BTRFS warning (device loop3): the 'inode_cache' option is deprecated and has no effect since 5.11
[  168.761087][ T5987] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  168.779800][ T5976] BTRFS info (device loop3): use zlib compression, level 3
[  168.787272][ T5976] BTRFS info (device loop3): allowing degraded mounts
[  168.790009][ T5987] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  168.798809][ T5976] BTRFS info (device loop3): enabling disk space caching
[  168.809690][ T5976] BTRFS error (device loop3): cannot disable free space tree
[  168.823902][ T5976] BTRFS error (device loop3): open_ctree failed: -22
[  168.892902][ T5994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.294'.
[  169.042609][    T7] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  169.121214][    T7] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  169.383134][    T7] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  169.491146][    T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67
[  169.550936][    T7] usb 2-1: SerialNumber: syz
[  169.610419][ T5998] xt_hashlimit: Unknown mode mask 80FF, kernel too old?
[  169.669911][ T5982] loop0: detected capacity change from 0 to 32768
[  169.701123][ T5982] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.293 (5982)
[  169.894426][    T7] usb 2-1: 0:2 : does not exist
[  169.927738][    T7] usb 2-1: USB disconnect, device number 16
[  170.029433][ T6004] netlink: 8 bytes leftover after parsing attributes in process `syz.2.299'.
[  170.300578][ T5982] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  170.401014][ T5982] BTRFS info (device loop0): setting nodatacow, compression disabled
[  170.581013][ T5982] BTRFS info (device loop0): force clearing of disk cache
[  170.598868][ T5982] BTRFS info (device loop0): enabling ssd optimizations
[  170.632182][ T5982] BTRFS info (device loop0): using spread ssd allocation scheme
[  170.642244][ T4308] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  170.697199][ T5982] BTRFS info (device loop0): turning off barriers
[  170.704422][ T5982] BTRFS info (device loop0): disabling free space tree
[  170.711304][ T5982] BTRFS info (device loop0): not using ssd optimizations
[  170.753134][ T4174] udevd[4174]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  170.769302][ T5982] BTRFS info (device loop0): not using spread ssd allocation scheme
[  170.784914][ T5982] BTRFS info (device loop0): has skinny extents
[  170.849965][ T5976] loop3: detected capacity change from 0 to 32768
[  170.885473][ T6019] loop2: detected capacity change from 0 to 256
[  170.974165][ T5976] blk_update_request: I/O error, dev loop14, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  170.985480][ T5982] BTRFS info (device loop0): clearing free space tree
[  171.005755][ T6019] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x769352d4, utbl_chksum : 0xe619d30d)
[  171.018265][ T4308] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  171.037532][ T4308] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  171.077110][ T5982] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  171.100532][ T6021] loop1: detected capacity change from 0 to 32768
[  171.102689][ T5976] lbmIODone: I/O error in JFS log
[  171.116836][ T5982] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  171.118024][ T6021] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.302 (6021)
[  171.157256][ T5976] *** Log Format Error ! ***
[  171.197380][ T5976] lmLogInit: exit(-22)
[  171.201862][ T5976] lmLogOpen: exit(-22)
[  171.222341][ T6030] jfs: Unrecognized mount option "l2tp" or missing value
[  171.243127][ T4308] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  171.262358][ T4308] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67
[  171.272180][ T4308] usb 5-1: SerialNumber: syz
[  171.314568][ T6021] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  171.342338][ T6021] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  171.389118][ T6039] openvswitch: netlink: Missing valid actions attribute.
[  171.397069][ T6021] BTRFS info (device loop1): trying to use backup root at mount time
[  171.413614][ T6021] BTRFS info (device loop1): setting nodatasum
[  171.419959][ T6039] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  171.434037][ T6021] BTRFS info (device loop1): force zlib compression, level 3
[  171.449322][ T6021] BTRFS info (device loop1): setting nodatacow
[  171.482171][ T6021] BTRFS info (device loop1): disabling tree log
[  171.502214][ T6021] BTRFS info (device loop1): using free space tree
[  171.522585][ T6021] BTRFS info (device loop1): has skinny extents
[  171.614490][ T4308] usb 5-1: 0:2 : does not exist
[  171.713323][ T5978] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  171.743223][ T4308] usb 5-1: USB disconnect, device number 15
[  171.815341][ T6059] binder: 6041:6059 ioctl c0306201 2000000003c0 returned -14
[  172.529589][ T6021] BTRFS info (device loop1): enabling ssd optimizations
[  172.775392][ T6067] netlink: 8 bytes leftover after parsing attributes in process `syz.2.307'.
[  172.912296][ T5978] usb 4-1: config 0 has an invalid interface number: 64 but max is 0
[  172.930654][ T5978] usb 4-1: config 0 has no interface number 0
[  173.094783][ T5978] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07
[  173.110744][ T5978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  173.121518][ T5978] usb 4-1: Product: syz
[  173.136753][ T5978] usb 4-1: Manufacturer: syz
[  173.141878][ T5978] usb 4-1: SerialNumber: syz
[  173.249067][ T5978] usb 4-1: config 0 descriptor??
[  173.421557][ T6069] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  173.470363][ T6069] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  173.492265][ T6069] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  173.600946][ T6075] loop0: detected capacity change from 0 to 256
[  173.659541][ T6078] xt_hashlimit: Unknown mode mask 80FF, kernel too old?
[  173.675416][ T5978] usb 4-1: Found UVC 0.08 device syz (046d:0823)
[  173.681850][ T5978] usb 4-1: No valid video chain found.
[  173.695504][ T6075] FAT-fs (loop0): Directory bread(block 64) failed
[  173.702427][ T6075] FAT-fs (loop0): Directory bread(block 65) failed
[  173.709020][ T6075] FAT-fs (loop0): Directory bread(block 66) failed
[  173.715741][ T6075] FAT-fs (loop0): Directory bread(block 67) failed
[  173.722421][ T6075] FAT-fs (loop0): Directory bread(block 68) failed
[  173.729055][ T6075] FAT-fs (loop0): Directory bread(block 69) failed
[  173.736235][ T6075] FAT-fs (loop0): Directory bread(block 70) failed
[  173.746001][ T5978] usb 4-1: USB disconnect, device number 12
[  173.748562][ T6075] FAT-fs (loop0): Directory bread(block 71) failed
[  173.758915][ T6075] FAT-fs (loop0): Directory bread(block 72) failed
[  173.777822][ T6075] FAT-fs (loop0): Directory bread(block 73) failed
[  173.937339][ T4389] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  174.245742][ T4875] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  174.371842][ T6094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.313'.
[  175.182536][ T4389] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  175.238511][ T4389] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  175.437612][ T4389] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  175.456140][ T4389] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67
[  175.483089][ T4389] usb 5-1: SerialNumber: syz
[  175.494523][ T6087] loop2: detected capacity change from 0 to 32768
[  175.556228][ T6087] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.315 (6087)
[  175.617416][ T6087] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[  175.627690][ T6087] BTRFS info (device loop2): force zlib compression, level 3
[  175.635809][ T6087] BTRFS warning (device loop2): the 'inode_cache' option is deprecated and has no effect since 5.11
[  175.647217][ T6087] BTRFS info (device loop2): use zlib compression, level 3
[  175.654794][ T4479] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  175.662852][ T6087] BTRFS info (device loop2): allowing degraded mounts
[  175.669633][ T6087] BTRFS info (device loop2): enabling disk space caching
[  175.677299][ T6087] BTRFS error (device loop2): cannot disable free space tree
[  175.686754][ T6087] BTRFS error (device loop2): open_ctree failed: -22
[  175.702179][ T4390] Bluetooth: hci1: command 0x0406 tx timeout
[  175.708469][ T4390] Bluetooth: hci3: command 0x0406 tx timeout
[  175.715351][ T4390] Bluetooth: hci4: command 0x0406 tx timeout
[  175.721578][ T4390] Bluetooth: hci0: command 0x0406 tx timeout
[  175.727994][ T4390] Bluetooth: hci2: command 0x0406 tx timeout
[  175.747085][ T4875] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  175.778713][ T4875] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  175.784448][ T4389] usb 5-1: 0:2 : does not exist
[  175.818913][ T4389] usb 5-1: USB disconnect, device number 16
[  175.887392][ T4875] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  175.912092][ T4479] usb 4-1: Using ep0 maxpacket: 8
[  175.916904][ T4875] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67
[  175.925355][ T4875] usb 2-1: SerialNumber: syz
[  176.005836][ T6087] loop2: detected capacity change from 0 to 32768
[  176.032259][ T4479] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  176.043437][ T4479] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  176.053172][ T4479] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  176.075227][ T4479] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[  176.094722][ T4479] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  176.111273][ T6087] blk_update_request: I/O error, dev loop14, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  176.113241][ T4479] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  176.123016][ T6087] lbmIODone: I/O error in JFS log
[  176.132693][ T4479] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  176.137159][ T6087] *** Log Format Error ! ***
[  176.149969][ T6087] lmLogInit: exit(-22)
[  176.154797][ T6087] lmLogOpen: exit(-22)
[  176.181303][ T6087] jfs: Unrecognized mount option "l2tp" or missing value
[  176.185988][ T4479] usb 4-1: config 0 descriptor??
[  176.234533][ T4875] usb 2-1: 0:2 : does not exist
[  176.240002][ T6096] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  176.249246][ T6103] FAULT_INJECTION: forcing a failure.
[  176.249246][ T6103] name failslab, interval 1, probability 0, space 0, times 0
[  176.272232][ T6103] CPU: 1 PID: 6103 Comm: syz.0.329 Not tainted syzkaller #0
[  176.280007][ T6103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  176.290193][ T6103] Call Trace:
[  176.293470][ T6103]  <TASK>
[  176.296388][ T6103]  dump_stack_lvl+0x188/0x250
[  176.301057][ T6103]  ? show_regs_print_info+0x20/0x20
[  176.306248][ T6103]  ? load_image+0x400/0x400
[  176.310736][ T6103]  ? __might_sleep+0xf0/0xf0
[  176.315309][ T6103]  ? __lock_acquire+0x7d10/0x7d10
[  176.320317][ T6103]  ? copy_from_kernel_nofault_allowed+0xb9/0x130
[  176.326631][ T6103]  should_fail+0x38c/0x4c0
[  176.331038][ T6103]  should_failslab+0x5/0x20
[  176.335526][ T6103]  slab_pre_alloc_hook+0x51/0xc0
[  176.340447][ T6103]  __kmalloc+0x6b/0x330
[  176.344584][ T6103]  ? tomoyo_encode+0x27e/0x540
[  176.349341][ T6103]  tomoyo_encode+0x27e/0x540
[  176.353914][ T6103]  tomoyo_realpath_from_path+0x5cd/0x610
[  176.359535][ T6103]  tomoyo_path_number_perm+0x242/0x660
[  176.364984][ T6103]  ? verify_lock_unused+0x140/0x140
[  176.370172][ T6103]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  176.375615][ T6103]  ? ksys_write+0x1c6/0x260
[  176.380130][ T6103]  security_file_ioctl+0x6c/0xa0
[  176.385053][ T6103]  __se_sys_ioctl+0x48/0x170
[  176.389627][ T6103]  do_syscall_64+0x4c/0xa0
[  176.394026][ T6103]  ? clear_bhb_loop+0x30/0x80
[  176.398685][ T6103]  ? clear_bhb_loop+0x30/0x80
[  176.403350][ T6103]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  176.409239][ T6103] RIP: 0033:0x7effbd98d799
[  176.413645][ T6103] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  176.433238][ T6103] RSP: 002b:00007effbbbe7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  176.441639][ T6103] RAX: ffffffffffffffda RBX: 00007effbdc06fa0 RCX: 00007effbd98d799
[  176.449591][ T6103] RDX: 0000200000000040 RSI: 0000000000005609 RDI: 0000000000000003
[  176.457541][ T6103] RBP: 00007effbbbe7090 R08: 0000000000000000 R09: 0000000000000000
[  176.465492][ T6103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  176.473444][ T6103] R13: 00007effbdc07038 R14: 00007effbdc06fa0 R15: 00007ffd66c89ec8
[  176.481406][ T6103]  </TASK>
[  176.520910][ T4875] usb 2-1: USB disconnect, device number 17
[  176.600091][ T6103] ERROR: Out of memory at tomoyo_realpath_from_path.
[  176.654539][ T6109] Unknown options in mask b7f2
[  176.698839][ T6109] loop0: detected capacity change from 0 to 1024
[  176.776774][ T4174] udevd[4174]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  176.811173][ T6109] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  176.816036][ T4389] usb 4-1: USB disconnect, device number 13
[  176.881632][ T6105] loop2: detected capacity change from 0 to 32768
[  176.892362][ T5978] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  176.906767][ T6105] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.318 (6105)
[  176.951007][ T6105] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  176.960688][ T6105] BTRFS info (device loop2): setting nodatacow, compression disabled
[  176.974141][ T6105] BTRFS info (device loop2): force clearing of disk cache
[  176.981444][ T6105] BTRFS info (device loop2): enabling ssd optimizations
[  176.991860][ T6105] BTRFS info (device loop2): using spread ssd allocation scheme
[  177.001763][ T6105] BTRFS info (device loop2): turning off barriers
[  177.011539][ T6105] BTRFS info (device loop2): disabling free space tree
[  177.021750][ T6105] BTRFS info (device loop2): not using ssd optimizations
[  177.033985][ T6105] BTRFS info (device loop2): not using spread ssd allocation scheme
[  177.041997][ T6105] BTRFS info (device loop2): has skinny extents
[  177.078462][ T6105] BTRFS info (device loop2): clearing free space tree
[  177.088512][ T6105] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  177.099438][ T6105] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  177.282284][ T5978] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  177.292569][ T5978] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  177.392431][ T5978] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  177.407898][ T5978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67
[  177.417547][ T5978] usb 5-1: SerialNumber: syz
[  177.638438][ T6141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.322'.
[  178.245061][ T5978] usb 5-1: 0:2 : does not exist
[  178.285945][ T5978] usb 5-1: USB disconnect, device number 17
[  178.395407][ T6145] xt_hashlimit: Unknown mode mask 80FF, kernel too old?
[  178.406814][ T6139] loop3: detected capacity change from 0 to 32768
[  178.796721][ T4174] udevd[4174]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  181.597045][ T6152] netlink: 8 bytes leftover after parsing attributes in process `syz.4.327'.
[  181.643444][ T6139] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.321 (6139)
[  181.831846][ T6158] loop1: detected capacity change from 0 to 256
[  181.893210][ T6139] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  181.902959][ T6139] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  182.099662][ T6139] BTRFS info (device loop3): trying to use backup root at mount time
[  182.118119][ T6158] sctp: [Deprecated]: syz.1.331 (pid 6158) Use of struct sctp_assoc_value in delayed_ack socket option.
[  182.118119][ T6158] Use struct sctp_sack_info instead
[  182.167503][ T6139] BTRFS info (device loop3): setting nodatasum
[  182.214571][ T6139] BTRFS info (device loop3): force zlib compression, level 3
[  182.252170][ T4390] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  182.288477][ T6139] BTRFS info (device loop3): setting nodatacow
[  182.338746][ T6139] BTRFS info (device loop3): disabling tree log
[  182.346493][ T6164] netlink: 28 bytes leftover after parsing attributes in process `syz.1.331'.
[  182.386636][ T6139] BTRFS info (device loop3): using free space tree
[  182.407279][ T6164] netlink: 28 bytes leftover after parsing attributes in process `syz.1.331'.
[  182.435554][ T6139] BTRFS info (device loop3): has skinny extents
[  182.492632][ T4390] usb 5-1: Using ep0 maxpacket: 8
[  182.579396][ T6139] BTRFS error (device loop3): open_ctree failed: -12
[  182.612266][ T4390] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  182.665495][ T4390] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  182.712623][ T4390] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  182.734106][ T4390] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[  182.769730][ T4174] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by udevd (4174)
[  182.791777][ T4390] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  182.812143][ T4390] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  182.841530][ T4390] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  182.877771][ T4390] usb 5-1: config 0 descriptor??
[  182.915114][ T6160] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  183.070892][ T6187] loop2: detected capacity change from 0 to 32768
[  183.116200][ T6187] XFS (loop2): invalid log iosize: 0 [not 12-30]
[  183.494233][ T4227] usb 5-1: USB disconnect, device number 18
[  184.312989][ T4327] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  184.360904][ T6205] netlink: 8 bytes leftover after parsing attributes in process `syz.3.338'.
[  184.675868][ T4271] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  186.342220][ T4327] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  186.352417][ T4327] usb 1-1: config 0 interface 0 has no altsetting 0
[  186.512160][ T4327] usb 1-1: string descriptor 0 read error: -71
[  186.519160][ T4327] usb 1-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce
[  186.572193][ T4271] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  187.395226][ T4271] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  187.404626][ T4327] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  187.415111][ T4327] usb 1-1: config 0 descriptor??
[  187.437055][ T4327] usb 1-1: can't set config #0, error -71
[  187.452353][ T4271] usb 3-1: string descriptor 0 read error: -71
[  187.464892][ T4271] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  187.479825][ T4327] usb 1-1: USB disconnect, device number 16
[  187.487778][ T4271] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67
[  187.500921][ T6219] netlink: 'syz.2.347': attribute type 6 has an invalid length.
[  187.512189][ T4271] usb 3-1: can't set config #1, error -71
[  187.521052][ T4271] usb 3-1: USB disconnect, device number 13
[  187.571859][ T6223] cgroup: Unknown subsys name 'noxattr'
[  187.773828][ T6229] loop2: detected capacity change from 0 to 4096
[  188.380179][ T6229] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512)
[  188.462594][ T6232] Unknown options in mask b7f2
[  188.527866][ T6229] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  188.566308][ T6232] loop3: detected capacity change from 0 to 1024
[  188.574628][ T6236] netlink: 8 bytes leftover after parsing attributes in process `syz.4.353'.
[  188.826752][ T6232] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  189.772243][ T6249] netlink: 8 bytes leftover after parsing attributes in process `syz.1.354'.
[  190.637370][ T6229] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  191.182658][ T6268] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  191.242233][ T4392] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  191.274649][ T6271] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  191.282845][ T6271] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  191.423449][ T6272] loop3: detected capacity change from 0 to 8
[  191.573257][ T6272] SQUASHFS error: Failed to read block 0xe000000000001ea: -5
[  191.630600][ T6272] unable to read xattr id index table
[  191.652601][ T4392] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  191.696621][ T4392] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  192.635936][ T4392] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  193.132080][ T4392] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67
[  193.140183][ T4392] usb 2-1: SerialNumber: syz
[  193.674413][ T4392] usb 2-1: 0:2 : does not exist
[  193.679319][ T4392] usb 2-1: unit 5 not found!
[  193.802187][ T4389] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  193.833693][ T4392] usb 2-1: USB disconnect, device number 18
[  194.107876][ T1419] ieee802154 phy0 wpan0: encryption failed: -22
[  194.114770][ T1419] ieee802154 phy1 wpan1: encryption failed: -22
[  194.132136][ T4389] usb 3-1: Using ep0 maxpacket: 8
[  194.253245][ T4389] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  194.355872][ T4389] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  194.482140][ T4389] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  194.513410][ T6297] netlink: 34 bytes leftover after parsing attributes in process `syz.0.370'.
[  194.552722][ T4389] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[  194.573170][ T4174] udevd[4174]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  194.702679][ T4389] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  194.965717][ T4389] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  195.170758][ T6300] FAULT_INJECTION: forcing a failure.
[  195.170758][ T6300] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  195.199191][ T4389] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  195.216472][ T4389] usb 3-1: config 0 descriptor??
[  195.243032][ T6286] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  195.277328][ T6300] CPU: 0 PID: 6300 Comm: syz.4.371 Not tainted syzkaller #0
[  195.284648][ T6300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  195.294892][ T6300] Call Trace:
[  195.298174][ T6300]  <TASK>
[  195.301105][ T6300]  dump_stack_lvl+0x188/0x250
[  195.305812][ T6300]  ? show_regs_print_info+0x20/0x20
[  195.311021][ T6300]  ? load_image+0x400/0x400
[  195.315534][ T6300]  ? __lock_acquire+0x7d10/0x7d10
[  195.320563][ T6300]  should_fail+0x38c/0x4c0
[  195.324987][ T6300]  _copy_to_user+0x2e/0x130
[  195.329489][ T6300]  simple_read_from_buffer+0xe3/0x150
[  195.334870][ T6300]  proc_fail_nth_read+0x1a6/0x220
[  195.339911][ T6300]  ? proc_fault_inject_write+0x310/0x310
[  195.345547][ T6300]  ? fsnotify_perm+0x254/0x560
[  195.350314][ T6300]  ? proc_fault_inject_write+0x310/0x310
[  195.355948][ T6300]  vfs_read+0x301/0xd60
[  195.360114][ T6300]  ? kernel_read+0x1e0/0x1e0
[  195.364703][ T6300]  ? __fget_files+0x40f/0x480
[  195.369385][ T6300]  ? mutex_lock_nested+0x17/0x20
[  195.374328][ T6300]  ? __fdget_pos+0x2bf/0x370
[  195.378916][ T6300]  ? ksys_read+0x71/0x260
[  195.383243][ T6300]  ksys_read+0x152/0x260
[  195.387486][ T6300]  ? vfs_write+0xd60/0xd60
[  195.391906][ T6300]  ? lockdep_hardirqs_on+0x94/0x140
[  195.397105][ T6300]  do_syscall_64+0x4c/0xa0
[  195.401516][ T6300]  ? clear_bhb_loop+0x30/0x80
[  195.406187][ T6300]  ? clear_bhb_loop+0x30/0x80
[  195.410869][ T6300]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  195.416769][ T6300] RIP: 0033:0x7f25a6a89fce
[  195.421186][ T6300] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  195.440809][ T6300] RSP: 002b:00007f25a4d22fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  195.449243][ T6300] RAX: ffffffffffffffda RBX: 00007f25a4d236c0 RCX: 00007f25a6a89fce
[  195.457225][ T6300] RDX: 000000000000000f RSI: 00007f25a4d230a0 RDI: 0000000000000006
[  195.465195][ T6300] RBP: 00007f25a4d23090 R08: 0000000000000000 R09: 0000000000000000
[  195.473168][ T6300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  195.481247][ T6300] R13: 00007f25a6d43038 R14: 00007f25a6d42fa0 R15: 00007fffa6b54d58
[  195.489236][ T6300]  </TASK>
[  195.537493][ T6304] Unknown options in mask b7f2
[  195.567030][ T6281] loop3: detected capacity change from 0 to 32768
[  195.607608][ T6304] loop1: detected capacity change from 0 to 1024
[  195.624055][ T6281] XFS: noikeep mount option is deprecated.
[  195.709944][ T6281] XFS (loop3): Mounting V5 Filesystem
[  195.751774][ T6304] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  195.872132][ T6281] XFS (loop3): Ending clean mount
[  195.887624][ T6281] XFS (loop3): Quotacheck needed: Please wait.
[  196.025310][ T4230] usb 3-1: USB disconnect, device number 14
[  196.128713][ T6281] XFS (loop3): Quotacheck: Done.
[  196.201620][ T6324] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  196.355243][ T6326] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  196.363271][ T6326] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  197.449262][ T4196] XFS (loop3): Unmounting Filesystem
[  197.557408][ T4271] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  197.952515][ T4271] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  198.353881][ T4271] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  198.452257][ T4271] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  198.522134][ T4271] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67
[  198.581168][ T4271] usb 2-1: SerialNumber: syz
[  198.894937][ T4271] usb 2-1: 0:2 : does not exist
[  199.822881][ T4271] usb 2-1: USB disconnect, device number 19
[  200.072855][ T4174] udevd[4174]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  200.670354][ T6374] loop1: detected capacity change from 0 to 1024
[  201.252172][ T6374] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  201.270817][ T6371] EXT4-fs error (device loop1): ext4_lookup:1858: comm syz.1.393: inode #12: comm syz.1.393: iget: illegal inode #
[  201.283777][ T4389] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  201.292211][ T6371] EXT4-fs error (device loop1): ext4_lookup:1858: comm syz.1.393: inode #12: comm syz.1.393: iget: illegal inode #
[  202.292085][ T4389] usb 1-1: Using ep0 maxpacket: 8
[  202.462239][ T4389] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  202.592659][ T4389] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  202.602708][ T4389] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  202.612613][ T4389] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[  202.629981][ T4389] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  202.640711][ T4389] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  202.654179][ T4389] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  202.683010][ T4389] usb 1-1: config 0 descriptor??
[  202.734964][ T6368] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  202.765982][ T6392] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  202.946363][ T6396] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  202.954428][ T6396] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  203.607715][ T4227] usb 1-1: USB disconnect, device number 17
[  203.633116][ T6400] loop4: detected capacity change from 0 to 128
[  203.714981][ T6400] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  203.731362][ T6403] loop0: detected capacity change from 0 to 256
[  203.752331][ T6400] hpfs: filesystem error: improperly stopped
[  203.764398][ T6400] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  203.806535][ T6403] FAULT_INJECTION: forcing a failure.
[  203.806535][ T6403] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  203.819603][ T6403] CPU: 1 PID: 6403 Comm: syz.0.402 Not tainted syzkaller #0
[  203.826871][ T6403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  203.836905][ T6403] Call Trace:
[  203.840169][ T6403]  <TASK>
[  203.843084][ T6403]  dump_stack_lvl+0x188/0x250
[  203.847763][ T6403]  ? show_regs_print_info+0x20/0x20
[  203.852945][ T6403]  ? load_image+0x400/0x400
[  203.857436][ T6403]  ? __lock_acquire+0x7d10/0x7d10
[  203.862451][ T6403]  should_fail+0x38c/0x4c0
[  203.866865][ T6403]  strncpy_from_user+0x32/0x360
[  203.871701][ T6403]  getname_flags+0xef/0x500
[  203.876194][ T6403]  __x64_sys_mkdirat+0x78/0x90
[  203.880969][ T6403]  do_syscall_64+0x4c/0xa0
[  203.885375][ T6403]  ? clear_bhb_loop+0x30/0x80
[  203.890037][ T6403]  ? clear_bhb_loop+0x30/0x80
[  203.894710][ T6403]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  203.900588][ T6403] RIP: 0033:0x7effbd98d799
[  203.904986][ T6403] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  203.924590][ T6403] RSP: 002b:00007effbbbc6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  203.932992][ T6403] RAX: ffffffffffffffda RBX: 00007effbdc07090 RCX: 00007effbd98d799
[  203.940947][ T6403] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c
[  203.948913][ T6403] RBP: 00007effbbbc6090 R08: 0000000000000000 R09: 0000000000000000
[  203.956883][ T6403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  203.964862][ T6403] R13: 00007effbdc07128 R14: 00007effbdc07090 R15: 00007ffd66c89ec8
[  203.972824][ T6403]  </TASK>
[  203.980041][ T6400] hpfs: You really don't want any checks? You are crazy...
[  204.046465][ T6400] hpfs: hpfs_map_sector(): read error
[  204.052510][ T6400] hpfs: code page support is disabled
[  204.058898][ T6400] ==================================================================
[  204.067357][ T6400] BUG: KASAN: use-after-free in strcmp+0x67/0xb0
[  204.073694][ T6400] Read of size 1 at addr ffff88805150a8a6 by task syz.4.401/6400
[  204.081389][ T6400] 
[  204.083694][ T6400] CPU: 0 PID: 6400 Comm: syz.4.401 Not tainted syzkaller #0
[  204.090952][ T6400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  204.100995][ T6400] Call Trace:
[  204.104264][ T6400]  <TASK>
[  204.107198][ T6400]  dump_stack_lvl+0x188/0x250
[  204.111890][ T6400]  ? show_regs_print_info+0x20/0x20
[  204.117097][ T6400]  ? _printk+0xda/0x130
[  204.121256][ T6400]  ? strcmp+0x67/0xb0
[  204.125254][ T6400]  ? load_image+0x400/0x400
[  204.129762][ T6400]  ? _raw_spin_lock_irqsave+0xbc/0x100
[  204.135237][ T6400]  print_address_description+0x60/0x2d0
[  204.140792][ T6400]  ? strcmp+0x67/0xb0
[  204.144774][ T6400]  kasan_report+0xdf/0x130
[  204.149292][ T6400]  ? strcmp+0x67/0xb0
[  204.153287][ T6400]  strcmp+0x67/0xb0
[  204.157104][ T6400]  hpfs_get_ea+0x132/0xdd0
[  204.161530][ T6400]  ? hpfs_read_ea+0xc20/0xc20
[  204.166211][ T6400]  ? __getblk_gfp+0x52/0xb60
[  204.170798][ T6400]  ? __might_sleep+0xf0/0xf0
[  204.175411][ T6400]  ? __bread_gfp+0x132/0x380
[  204.180017][ T6400]  ? hpfs_map_sector+0x14a/0x2e0
[  204.184987][ T6400]  ? hpfs_map_fnode+0x27a/0x690
[  204.189851][ T6400]  hpfs_read_inode+0x1a3/0x1050
[  204.194712][ T6400]  ? __lock_acquire+0x7d10/0x7d10
[  204.199745][ T6400]  ? hpfs_init_inode+0x2c0/0x2c0
[  204.204678][ T6400]  ? bpf_lsm_inode_alloc_security+0x5/0x10
[  204.210493][ T6400]  ? do_raw_spin_unlock+0x11d/0x230
[  204.215705][ T6400]  ? hpfs_init_inode+0x1cc/0x2c0
[  204.220654][ T6400]  hpfs_fill_super+0x135a/0x1fd0
[  204.225625][ T6400]  ? hpfs_mount+0x40/0x40
[  204.229968][ T6400]  ? snprintf+0xe5/0x140
[  204.234224][ T6400]  ? set_blocksize+0x1f3/0x370
[  204.238998][ T6400]  ? sb_set_blocksize+0xa5/0xe0
[  204.243851][ T6400]  mount_bdev+0x287/0x3c0
[  204.248193][ T6400]  ? hpfs_mount+0x40/0x40
[  204.252543][ T6400]  legacy_get_tree+0xe6/0x180
[  204.257236][ T6400]  ? hpfs_ioctl+0x260/0x260
[  204.261754][ T6400]  vfs_get_tree+0x88/0x270
[  204.266186][ T6400]  do_new_mount+0x24a/0xa40
[  204.270713][ T6400]  __se_sys_mount+0x2e3/0x3d0
[  204.275406][ T6400]  ? __x64_sys_mount+0xc0/0xc0
[  204.280187][ T6400]  ? lockdep_hardirqs_on+0x94/0x140
[  204.285421][ T6400]  ? __x64_sys_mount+0x1c/0xc0
[  204.290206][ T6400]  do_syscall_64+0x4c/0xa0
[  204.294630][ T6400]  ? clear_bhb_loop+0x30/0x80
[  204.299308][ T6400]  ? clear_bhb_loop+0x30/0x80
[  204.303980][ T6400]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  204.309884][ T6400] RIP: 0033:0x7f25a6acaa0a
[  204.314300][ T6400] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  204.333890][ T6400] RSP: 002b:00007f25a4d22e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  204.342288][ T6400] RAX: ffffffffffffffda RBX: 00007f25a4d22ee0 RCX: 00007f25a6acaa0a
[  204.350242][ T6400] RDX: 0000200000000100 RSI: 0000200000009ec0 RDI: 00007f25a4d22ea0
[  204.358212][ T6400] RBP: 0000200000000100 R08: 00007f25a4d22ee0 R09: 0000000003200041
[  204.366185][ T6400] R10: 0000000003200041 R11: 0000000000000246 R12: 0000200000009ec0
[  204.374143][ T6400] R13: 00007f25a4d22ea0 R14: 0000000000009e15 R15: 0000200000000180
[  204.382107][ T6400]  </TASK>
[  204.385109][ T6400] 
[  204.387413][ T6400] The buggy address belongs to the page:
[  204.393025][ T6400] page:ffffea0001454280 refcount:0 mapcount:0 mapping:0000000000000000 index:0x100 pfn:0x5150a
[  204.403333][ T6400] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  204.410454][ T6400] raw: 00fff00000000000 dead000000000100 dead000000000122 0000000000000000
[  204.419016][ T6400] raw: 0000000000000100 0000000000000000 00000000ffffffff 0000000000000000
[  204.427569][ T6400] page dumped because: kasan: bad access detected
[  204.434000][ T6400] page_owner tracks the page as freed
[  204.439343][ T6400] page last allocated via order 0, migratetype Movable, gfp_mask 0x1100cca(GFP_HIGHUSER_MOVABLE), pid 5611, ts 139991296914, free_ts 140851078814
[  204.454162][ T6400]  get_page_from_freelist+0x1bbd/0x1ca0
[  204.459702][ T6400]  __alloc_pages+0x1ee/0x480
[  204.464278][ T6400]  alloc_pages_vma+0x393/0x7c0
[  204.469025][ T6400]  shmem_alloc_and_acct_page+0x47f/0xbe0
[  204.474636][ T6400]  shmem_getpage_gfp+0x14f4/0x2d40
[  204.479725][ T6400]  shmem_write_begin+0xcd/0x1a0
[  204.484551][ T6400]  generic_perform_write+0x2b6/0x550
[  204.489814][ T6400]  __generic_file_write_iter+0x25f/0x4e0
[  204.495427][ T6400]  generic_file_write_iter+0xa6/0x1b0
[  204.500777][ T6400]  vfs_write+0x745/0xd60
[  204.505002][ T6400]  ksys_write+0x152/0x260
[  204.509314][ T6400]  do_syscall_64+0x4c/0xa0
[  204.513709][ T6400]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  204.519582][ T6400] page last free stack trace:
[  204.524228][ T6400]  free_unref_page_prepare+0x637/0x6c0
[  204.529667][ T6400]  free_unref_page_list+0x119/0x820
[  204.534840][ T6400]  release_pages+0x186c/0x1be0
[  204.539585][ T6400]  __pagevec_release+0x6d/0xe0
[  204.544327][ T6400]  shmem_undo_range+0x62b/0x1930
[  204.549240][ T6400]  shmem_evict_inode+0x220/0xa40
[  204.554155][ T6400]  evict+0x4c9/0x8d0
[  204.558031][ T6400]  __dentry_kill+0x431/0x650
[  204.562604][ T6400]  dentry_kill+0xb8/0x290
[  204.567268][ T6400]  dput+0xd8/0x1a0
[  204.570962][ T6400]  __fput+0x5ee/0x930
[  204.574932][ T6400]  task_work_run+0x125/0x1a0
[  204.579503][ T6400]  exit_to_user_mode_loop+0x10f/0x130
[  204.584862][ T6400]  exit_to_user_mode_prepare+0xee/0x180
[  204.590391][ T6400]  syscall_exit_to_user_mode+0x16/0x40
[  204.595827][ T6400]  do_syscall_64+0x58/0xa0
[  204.600225][ T6400] 
[  204.602625][ T6400] Memory state around the buggy address:
[  204.608243][ T6400]  ffff88805150a780: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  204.616285][ T6400]  ffff88805150a800: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  204.624327][ T6400] >ffff88805150a880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  204.632368][ T6400]                                ^
[  204.637457][ T6400]  ffff88805150a900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  204.645506][ T6400]  ffff88805150a980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  204.653655][ T6400] ==================================================================
[  204.661697][ T6400] Disabling lock debugging due to kernel taint
[  204.689111][ T6400] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  204.696339][ T6400] CPU: 0 PID: 6400 Comm: syz.4.401 Tainted: G    B             syzkaller #0
[  204.705024][ T6400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  204.715085][ T6400] Call Trace:
[  204.718372][ T6400]  <TASK>
[  204.721300][ T6400]  dump_stack_lvl+0x188/0x250
[  204.725988][ T6400]  ? show_regs_print_info+0x20/0x20
[  204.731191][ T6400]  ? load_image+0x400/0x400
[  204.735704][ T6400]  panic+0x2e5/0x810
[  204.739601][ T6400]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  204.745758][ T6400]  ? bpf_jit_dump+0xd0/0xd0
[  204.750263][ T6400]  ? _raw_spin_unlock_irqrestore+0x10d/0x120
[  204.756242][ T6400]  ? _raw_spin_unlock+0x40/0x40
[  204.761093][ T6400]  ? strcmp+0x67/0xb0
[  204.765085][ T6400]  check_panic_on_warn+0x80/0xa0
[  204.770026][ T6400]  ? strcmp+0x67/0xb0
[  204.773990][ T6400]  end_report+0x6d/0xf0
[  204.778129][ T6400]  kasan_report+0x102/0x130
[  204.782623][ T6400]  ? strcmp+0x67/0xb0
[  204.786584][ T6400]  strcmp+0x67/0xb0
[  204.790371][ T6400]  hpfs_get_ea+0x132/0xdd0
[  204.794770][ T6400]  ? hpfs_read_ea+0xc20/0xc20
[  204.799429][ T6400]  ? __getblk_gfp+0x52/0xb60
[  204.804008][ T6400]  ? __might_sleep+0xf0/0xf0
[  204.808583][ T6400]  ? __bread_gfp+0x132/0x380
[  204.813151][ T6400]  ? hpfs_map_sector+0x14a/0x2e0
[  204.818092][ T6400]  ? hpfs_map_fnode+0x27a/0x690
[  204.822942][ T6400]  hpfs_read_inode+0x1a3/0x1050
[  204.827785][ T6400]  ? __lock_acquire+0x7d10/0x7d10
[  204.832795][ T6400]  ? hpfs_init_inode+0x2c0/0x2c0
[  204.837712][ T6400]  ? bpf_lsm_inode_alloc_security+0x5/0x10
[  204.843503][ T6400]  ? do_raw_spin_unlock+0x11d/0x230
[  204.848685][ T6400]  ? hpfs_init_inode+0x1cc/0x2c0
[  204.853604][ T6400]  hpfs_fill_super+0x135a/0x1fd0
[  204.858530][ T6400]  ? hpfs_mount+0x40/0x40
[  204.862840][ T6400]  ? snprintf+0xe5/0x140
[  204.867068][ T6400]  ? set_blocksize+0x1f3/0x370
[  204.871826][ T6400]  ? sb_set_blocksize+0xa5/0xe0
[  204.876660][ T6400]  mount_bdev+0x287/0x3c0
[  204.880973][ T6400]  ? hpfs_mount+0x40/0x40
[  204.885288][ T6400]  legacy_get_tree+0xe6/0x180
[  204.889947][ T6400]  ? hpfs_ioctl+0x260/0x260
[  204.894438][ T6400]  vfs_get_tree+0x88/0x270
[  204.898838][ T6400]  do_new_mount+0x24a/0xa40
[  204.903324][ T6400]  __se_sys_mount+0x2e3/0x3d0
[  204.907984][ T6400]  ? __x64_sys_mount+0xc0/0xc0
[  204.912741][ T6400]  ? lockdep_hardirqs_on+0x94/0x140
[  204.917939][ T6400]  ? __x64_sys_mount+0x1c/0xc0
[  204.922686][ T6400]  do_syscall_64+0x4c/0xa0
[  204.927084][ T6400]  ? clear_bhb_loop+0x30/0x80
[  204.931748][ T6400]  ? clear_bhb_loop+0x30/0x80
[  204.936407][ T6400]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  204.942325][ T6400] RIP: 0033:0x7f25a6acaa0a
[  204.946731][ T6400] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  204.966330][ T6400] RSP: 002b:00007f25a4d22e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  204.974726][ T6400] RAX: ffffffffffffffda RBX: 00007f25a4d22ee0 RCX: 00007f25a6acaa0a
[  204.982681][ T6400] RDX: 0000200000000100 RSI: 0000200000009ec0 RDI: 00007f25a4d22ea0
[  204.990636][ T6400] RBP: 0000200000000100 R08: 00007f25a4d22ee0 R09: 0000000003200041
[  204.998596][ T6400] R10: 0000000003200041 R11: 0000000000000246 R12: 0000200000009ec0
[  205.006547][ T6400] R13: 00007f25a4d22ea0 R14: 0000000000009e15 R15: 0000200000000180
[  205.014505][ T6400]  </TASK>
[  205.017826][ T6400] Kernel Offset: disabled
[  205.022144][ T6400] Rebooting in 86400 seconds..