last executing test programs:

9.532465724s ago: executing program 3 (id=1214):
pread64(0xffffffffffffffff, 0x0, 0x0, 0xa96)
socketpair(0x1, 0x1, 0x0, 0x0)
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0), 0x2000400, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn'])
chdir(&(0x7f0000000140)='./file0\x00')
unlink(&(0x7f0000000100)='./file0\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0)
lseek(r0, 0x2, 0x0)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x0, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0)
getdents(r0, 0x0, 0x58)

8.826261873s ago: executing program 0 (id=1215):
mount(0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x4e24, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffff8}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c)

8.703144619s ago: executing program 3 (id=1218):
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002fc0)={0x0, 0x0, 0x0}, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x48e02, 0x0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x8000)
io_submit(0x0, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b7, 0x80, 0x800, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x800)
sendto$inet(r0, &(0x7f0000000900)="2e552f5d9fd8b0d9627c49f8f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9135a01c95d4a068ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf321068551a584262d7a74a344e428c77c8af755e72904b0ca8a0bb359fb0", 0xffffff5d, 0x12, 0x0, 0x0)
poll(&(0x7f0000000780), 0x0, 0x4)
recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x0)

6.875626846s ago: executing program 2 (id=1223):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
setrlimit(0x6, &(0x7f0000000080)={0x63, 0xf1})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo\x00')
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
getdents(r3, &(0x7f0000000f40)=""/243, 0xf3)

6.690731315s ago: executing program 3 (id=1225):
socket$nl_netfilter(0x10, 0x3, 0xc)
fsopen(&(0x7f0000000000)='nfs\x00', 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x815, &(0x7f0000000180)={[{@data_err_ignore}, {@resgid}, {@abort}, {@barrier_val={'barrier', 0x3d, 0x1}}, {@nobarrier}]}, 0x9, 0x624, &(0x7f0000001340)="$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")
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x500, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)

6.689983065s ago: executing program 0 (id=1234):
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x200c801, &(0x7f0000000000)={[{@nogrpid}]}, 0x1, 0x637, &(0x7f0000000100)="$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")
r0 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
r2 = inotify_init1(0x80000)
inotify_add_watch(r2, &(0x7f0000000080)='./debug\x00', 0x100)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)

6.576084199s ago: executing program 1 (id=1227):
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000003c0)={0x0, 0x0, "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", "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"})
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000440)=""/53, 0x0, 0x26000})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680))
r1 = eventfd2(0x1, 0x80001)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000})
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096})
connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10)

5.657730214s ago: executing program 2 (id=1239):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4008094)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0)
r2 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x24004800}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000020603000000000000000000070000000c000780080012400000000d0500010006000000050005000200000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e6574"], 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x2004c004)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x14004017}, 0x80)

5.657060154s ago: executing program 1 (id=1229):
pread64(0xffffffffffffffff, 0x0, 0x0, 0xa96)
socketpair(0x1, 0x1, 0x0, 0x0)
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0), 0x2000400, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn'])
chdir(&(0x7f0000000140)='./file0\x00')
unlink(&(0x7f0000000100)='./file0\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0)
lseek(r0, 0x2, 0x0)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x0, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0)
getdents(r0, 0x0, 0x58)

5.586892109s ago: executing program 2 (id=1230):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0)
write(r1, &(0x7f0000000180)='md0\x00', 0x4)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/block/md0/md/metadata_version\x00', 0x1, 0x0)
write(r2, &(0x7f0000000280)='external:test\x00', 0xe)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0)
write(r3, &(0x7f0000000380)='1:0\x00', 0x4)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/md0/md/dev-ram0/state\x00', 0x1, 0x0)
write(r4, &(0x7f0000000480)='external_bbl\x00', 0xd)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/dev-ram0/bad_blocks\x00', 0x1, 0x0)
write(r5, &(0x7f0000000580)='0 8\n', 0x4)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4}, {0xfffffffc}, {0x0, 0x0, 0x1}, {0x0, 0x8, 0x1}, 0x0, 0x3f0, 0x5, 0x0, 0x1, 0x0, 0x80000000, 0x2, 0x1, 0x0, 0x9, 0x0, 0x1e, 0x0, 0x0, 0x6})

5.469201634s ago: executing program 4 (id=1231):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='md0', 0x3)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0)
write(r1, &(0x7f0000000240)='2', 0x1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0)
write(r2, &(0x7f00000002c0)='1:0', 0x3)
write(0xffffffffffffffff, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r3, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/array_state\x00', 0x1, 0x0)
write(r4, &(0x7f0000000540)='readonly', 0x8)

5.459520855s ago: executing program 1 (id=1232):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, 0x0)
syz_open_dev$I2C(&(0x7f0000000040), 0x5, 0x140)
syz_usb_connect$uac3(0x4, 0x12b, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000140)={0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

5.458892436s ago: executing program 0 (id=1244):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r0 = epoll_create1(0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0xffff, 0x4)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xa002803f})
socket(0x10, 0x3, 0x0)
socket(0x15, 0x5, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet6_sctp(0xa, 0x1, 0x84)
pselect6(0x40, &(0x7f00000001c0)={0x3, 0x0, 0x3, 0xfffffffffffffffd, 0xff}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

5.304272318s ago: executing program 3 (id=1233):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="8ee8c9b8ee088ed8660f3801b2d6352ed9ff660f3882040f01cf0fc72d2626652e0f01ca0fc7386635002000000f22e0", 0xffffffffffffff8b}], 0x1, 0x50, 0x0, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
pipe(&(0x7f0000000240))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

5.303633198s ago: executing program 4 (id=1235):
syz_mount_image$hfs(&(0x7f0000001600), &(0x7f0000000040)='./file1\x00', 0x2000000, &(0x7f00000006c0)=ANY=[@ANYBLOB="66696c655f756d61736b3d303030303030342c696f636861727365743d6d61637475726b6973682c63726561746f723dc5bb28ea2c71756965742c71756965742c007d50d44000f3370c9b0275036759e83e895eefc88f891a88146fbad315342ebaf1cd8298a6d0a7ca281d6cf5f63deaa1f2ed0b667424a2c66bfa5b21425fcda4a70c494ac54bec5038995b93f8bb3463038920ad9e9d3bbe87638ce08df5f5243213763f0a00"/183], 0x2, 0x2fd, &(0x7f0000001100)="$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")
syz_mount_image$exfat(0x0, &(0x7f0000000540)='./bus\x00', 0x2200048, 0x0, 0xff, 0x0, &(0x7f0000000240))
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x200041a, &(0x7f0000000140)=ANY=[@ANYBLOB="6465636f6d706f73652c6e6f626172726965722c6e6c733d63703737352c004ced152ed09fe8115489d9663b017f412168f2c35d21aff719da4cdf06e768be9440ad63ddad24a1cc0173a9ee54ecb163908c4f9c408f630f15"], 0x1, 0x5ef, &(0x7f0000001080)="$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")
chdir(0x0)
openat(0xffffffffffffff9c, 0x0, 0xc4842, 0x1ff)
syz_mount_image$minix(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280), 0x1, 0x1d4, &(0x7f00000002c0)="$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")
openat(0xffffffffffffff9c, 0x0, 0x0, 0x10)
io_uring_setup(0xc01, 0x0)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r0 = open(&(0x7f0000000140)='.\x00', 0x18000, 0x112)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)

4.523545363s ago: executing program 2 (id=1236):
syz_mount_image$jfs(&(0x7f0000000380), &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000, &(0x7f0000002580)=ANY=[@ANYRES16=0x0, @ANYRESDEC, @ANYRESHEX, @ANYRES32=0x0, @ANYBLOB="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", @ANYBLOB="f415eacf6f10b66ebc1e4c2c1212f670786ec8fc47e959021152fffe7993373cf12e7435104c66e74abc10bf9b8e9092742786095b01d38c6856e2e092c302b8d105ac05b01e1d406092b34b38fc72eedaaa0e7aae6b33ece8bcd506981320b3bcab0edb2b", @ANYRES64, @ANYRES64, @ANYRESOCT], 0x41, 0x5f12, &(0x7f000000c9c0)="$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")
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4000000, 0x0, 0x0, 0x0, &(0x7f00000000c0))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140))
mkdir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40))
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
rename(&(0x7f0000000800)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000900)='dir0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0)
lseek(r0, 0x3, 0x1)
getdents64(r0, 0x0, 0x0)
syz_read_part_table(0x5df, &(0x7f0000000000)="$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")

4.521041954s ago: executing program 1 (id=1248):
ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8801}, 0x10000)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000900)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@multicast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e20, 0x71a, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x300, 0x1000000000000192, 0x9ba3, 0xffff, 0x82519, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x70bd26, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x844)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r2, 0x800448d4, &(0x7f0000000000)={0x2, 0x200, "00e300", 0x0, 0x1})

4.123437308s ago: executing program 1 (id=1237):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x5, 0x1f, 0x0, &(0x7f0000000100)="66d4492a0a1b30e6f5d85a6d99", 0x0, 0xca, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x9}, 0x50)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'ipvlan1\x00', <r3=>0x0})
bind$packet(r0, &(0x7f0000000300)={0x11, 0x5, r3, 0x1, 0x5, 0x6, @broadcast}, 0x14)
r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000200)={0x0, 0x1, 0x0, &(0x7f0000000480)=""/39, 0x0, 0x8000000})
ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000001740))
r5 = syz_open_procfs(0x0, &(0x7f0000000040)='statm\x00')
dup3(r0, r5, 0x0)
ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f00000000c0)={0x0, r5})

4.061023031s ago: executing program 3 (id=1238):
r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000000080)={[{@init_itable_val}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@grpjquota}]}, 0x3, 0x436, &(0x7f0000000140)="$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")
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0)
syz_emit_ethernet(0x5a, 0x0, 0x0)
pwrite64(r1, &(0x7f00000005c0)='\x00', 0x1, 0x4fed0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
openat(r2, &(0x7f00000001c0)='./file1\x00', 0x80342, 0x171)
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x80382, 0x0)
kcmp(0x0, 0x0, 0x2, r0, r3)
syz_open_dev$usbmon(0x0, 0x7, 0x0)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
nanosleep(0x0, 0x0)

4.060881691s ago: executing program 4 (id=1240):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x6, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108)
socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x8000)
read(r2, &(0x7f0000000200)=""/209, 0xd1)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r2, 0x40045304, &(0x7f0000000000))

3.895496166s ago: executing program 4 (id=1241):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000040000000800000001", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x50)
capset(&(0x7f0000000400)={0x20080522}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000418110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b707000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bd8900000000000007080000f8ffffffbf9400000000000007040000f0ffffffb70200000800000018270000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9100000000000056070000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

3.882187349s ago: executing program 1 (id=1242):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
setrlimit(0x6, &(0x7f0000000080)={0x63, 0xf1})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo\x00')
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
getdents(r3, &(0x7f0000000f40)=""/243, 0xf3)

3.104859354s ago: executing program 0 (id=1243):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400))
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000001500)={@my=0x1})
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001"], 0x64}}, 0x40110)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0)
r2 = eventfd(0xf7b2)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000040)={0x0, r2})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)

1.690830933s ago: executing program 3 (id=1245):
mount(0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x4e24, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffff8}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c)

1.689944733s ago: executing program 0 (id=1256):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5f7, @name="ac2ad54970138065d4b1a10a14b7e65642722c3da99ba40f000026e78ffc1e0a"})
r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000000)={r4, r4, r4}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={'sha384\x00'}})

1.685119024s ago: executing program 2 (id=1257):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a})
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x24000044)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x112)
write(r1, &(0x7f0000000000)='3', 0x4e)
timer_create(0x4, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x2)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @aes256, 0x1, '\x00', @a})
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r0, 0xc0406619, &(0x7f0000000140)={@id={0x2, 0x0, @a}})

1.470864059s ago: executing program 4 (id=1246):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000042003303"], 0x14}, 0x1, 0x0, 0x0, 0x4015}, 0x24040004)
recvmmsg(r3, &(0x7f0000001a80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0xffff}, {{0x0, 0x0, &(0x7f00000005c0)}, 0x81}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000380)=""/247, 0xf7}, {&(0x7f0000000500)=""/100, 0x64}, {&(0x7f0000000840)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001900)=""/22, 0x16}, {&(0x7f0000000580)=""/127, 0x7f}], 0x6, &(0x7f0000001a40)=""/23, 0x17}, 0x8000}], 0x4, 0x12000, 0x0)

1.470073769s ago: executing program 2 (id=1259):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
syz_open_dev$usbfs(0x0, 0x75, 0x109301)
socket$nl_generic(0x10, 0x3, 0x10)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
connect$packet(r2, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14)
shutdown(r2, 0x1)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)
syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff)

53.052439ms ago: executing program 4 (id=1247):
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x20, 0x1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}})
open(&(0x7f00000001c0)='./file0\x00', 0x60840, 0x5a)
read$FUSE(r0, &(0x7f0000004280)={0x2020, 0x0, <r1=>0x0}, 0x2020)
syz_fuse_handle_req(r0, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x2b, 0xffffffde, 0x318145a8, 0xfffe, 0xfffe, 0x2, 0xfffff7f6, 0x0, 0x0, 0x8, 0x100}}, 0x50)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x9, 0x0, 0x7fff0000}]})
close_range(r2, 0xffffffffffffffff, 0x0)
r3 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0)
mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r3, 0x0)

0s ago: executing program 0 (id=1249):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, 0x0, 0x0)
syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa00010, &(0x7f00000013c0)=ANY=[@ANYRES8=r0, @ANYRESDEC=0x0, @ANYBLOB=',session=00000000000000000003,dmode=00000000000000000000016,measure,euid<', @ANYRESDEC=0x0, @ANYBLOB="2c6575027d3e", @ANYRESDEC=r0, @ANYBLOB="2c6d61736b3d4d41595f455845432c646f6e745f6d6561737572652c736d61636b665c2c617070726169730101747970653d696d617369672c657569643c4dceae4ea24d8c747e9aad700f2d6693c7d149bd67cd4c57f2edd10f2d0a2b14d016b9a19f5037374a03e08b9d6f45f76fb66bba0a06fb7b12a4ddedfe8db56690d74e3a58841f8c1a92320ec7a1733357da5ad89cffb484ab621ec15fb7d02aeb32eb3d568104d4b22b05c4a5a9a813b926a82d558947252feb36ca1071185c5195223346bb286729d96998ffda1c0bf052bb3ea7dd0e082fa46c603f75033e813cc049a1daf0f012", @ANYRESDEC=0x0, @ANYRESHEX=r0], 0x1, 0xc43, &(0x7f00000001c0)="$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")
sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, 0x0, 0x200040d4)
syz_mount_image$squashfs(&(0x7f0000000400), &(0x7f0000000200)='./file0\x00', 0x4000000, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES16=0x0], 0x1, 0x1a2, &(0x7f0000000040)="$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")
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r2)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="66eac3", 0x3)
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file2\x00', 0x800000, &(0x7f0000000100)=ANY=[@ANYBLOB="706172743d30783030303030303030303030da3c312c626172726965722c626172726965722c626172726965722c706172743d3078303030303030303030303030303030632c6e6c733d63703835302c63726561746f723d7f0e5bc82c666f7263652c000000"], 0x1, 0x5e5, &(0x7f0000000680)="$eJzs3UFvHGcZB/D/bGLHDlK6SZOmICSscgA1IrG9kQkSElAKslCFKnHp1Uo2tZVNGtlb5PYAAXFuv0I5mDMHTihIOXDmKxj1iODum9HMzno3ydZZJ8a7Cb+fNPs+s+/MO8/7aHYys1a0Af5vrX6QmUfzyeqV97bL9d2dVmd3p3W3Hyc5k6SRzCUpyrf/kuTL5EF6S77e7xhqn1J8vnpz/eFnl3trc/VSbV8ctt94DnJp9nKt2uMab/mFxxvMcCHJhbqFidvv++fI7hf8XAIA06xITo16v5mcrW/Wy+eA3l1x7x77pfZg0gkAAADACXhtL3vZzrlJ5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvk/r3/4t6afTjhRT93/+frd9LHb/UHk06AQAAAAAAAAA4Bt/ay162c66/vl9Uf/N/q1q5WL1+LR9nK+1s5mq2s5ZuutnMUpLm0ECz22vd7ubSGHsuj9xz+WTmCwAAAAAAAACvqN9ndfD3fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmAZFcqrXVMvFftxM43SSuSSz5XYPkof9+GX2aNIJAAAAwAl4bS972c65/vp+UT3zv1E998/l49xLNxvpppN2blXfBfSe+hu7O63O7k7rbrk8Pe5P/nOkNKoR0/vuYfSRF6stLh3ssZqf51e5koW8n81s5NdZSzftLOTdKlpLkWb97UWzn+fofH/82Nr7z8r1zSqT+dzORpXb1dzMR+nkVhrVHKptDj/i78rqFD+qjVmjW3VbzugXdTsdmlVFZg4qsljXvqzG+cMrccTz5MkjLaVx8B3UxeOr+Zl+cLZuy1q/O801n1keOvveOLwSyeLyv++vd+7dWb+9dWV6pvScnjwnWkOVuHzkSuzv7//2xKdwTGbravSuoke7Wr5V7XsuG/llPsqttHMji7mRlVxPKyv5QVaG6nppjM9a42jXt29/tw5mkvysbqdDWdfzQ3UdvtI1q77hdwZVunD8/wqc/kYdlCfrO1N3RTr/xLW5X4nXD6/EH/fL163OvTub62v3xzzed+q2rMBPn68Sp4++yzjK8+XCwfCPnx1l3+sj+5aqvosHfY2n+i4d9D3rkzpb38M9PdJy1Xd5ZF+r6ntzqG/UXQ4AU+/s22dn5/81/4/5L+b/ML8+/97cO2dunPnmbGb+fvqvp/7c+FPjh8Xb+SK/GTz/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAz2/rk0/vrHU67U2BYPLBXJJxN+7/7tOkc35FgwlfmID/uWvdu/evbX3y6fc27q592P6wfe/60sry9euLK9+/ce32Rqe92HuddJoAwDEa3PRPOhMAAAAAAAAAAAAAAOCrnMR/J570HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgFfb6geZeZQiS4tXF8v13Z1Wp1z68WDLuSRFGfwtyZfJg/SWNIeGK77qOMXnqzfXH352eTDWXH/74rD9xvNYLo0ncnrR8ZZfeLzBDBeSXKhbmLj/BgAA//9gDAG4")
openat$dir(0xffffffffffffff9c, 0x0, 0x101000, 0x108)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0)

kernel console output (not intermixed with test programs):

tadv_slave_1
[   71.239894][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.249895][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   71.261025][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.272101][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   71.282679][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.292844][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   71.303605][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.316305][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1
[   71.328500][ T4187] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   71.338055][ T4187] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   71.348012][ T4187] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   71.357810][ T4187] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   71.377688][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   71.386545][  T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.394662][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   71.404232][  T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.416833][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   71.514894][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[   71.521574][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[   71.601829][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.622827][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.665555][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   71.716268][ T4271] loop2: detected capacity change from 0 to 4096
[   71.717502][  T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.744493][ T4271] =======================================================
[   71.744493][ T4271] WARNING: The mand mount option has been deprecated and
[   71.744493][ T4271]          and is ignored by this kernel. Remove the mand
[   71.744493][ T4271]          option from the mount to silence this warning.
[   71.744493][ T4271] =======================================================
[   71.783328][  T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.813509][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   71.830130][ T4244] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.838017][ T4244] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.876754][ T4271] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[   71.893778][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   71.960680][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.993475][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.024843][ T4273] loop3: detected capacity change from 0 to 2048
[   72.044528][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   72.052964][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.081357][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.088938][  T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.115220][ T4273] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   72.121686][  T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.136243][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   72.151213][ T4269] Bluetooth: hci0: command 0x0419 tx timeout
[   72.163561][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   72.173402][ T4269] Bluetooth: hci1: command 0x0419 tx timeout
[   72.209734][ T4269] Bluetooth: hci3: command 0x0419 tx timeout
[   72.224766][ T4269] Bluetooth: hci2: command 0x0419 tx timeout
[   72.235510][   T23] Bluetooth: hci4: command 0x0419 tx timeout
[   72.294305][ T4194] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22.
[   72.962340][ T4288] overlayfs: failed to resolve './file1/file0': -2
[   74.013408][ T4316] loop3: detected capacity change from 0 to 64
[   74.982511][ T4318] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   75.431768][ T4332] 8021q: adding VLAN 0 to HW filter on device bond1
[   75.446710][ T4333] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   75.526914][ T4336] bond1: (slave geneve2): making interface the new active one
[   75.538491][ T4336] bond1: (slave geneve2): Enslaving as an active interface with an up link
[   75.547725][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[   75.574386][ T4336] syz.1.18 (4336) used greatest stack depth: 17968 bytes left
[   75.896516][ T4357] loop3: detected capacity change from 0 to 128
[   76.038200][ T4357] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   76.106200][ T4357] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   76.674585][ T4375] syz.1.28 uses obsolete (PF_INET,SOCK_PACKET)
[   76.688659][ T4374] loop4: detected capacity change from 0 to 128
[   76.838936][ T4374] loop4: detected capacity change from 0 to 128
[   76.896742][ T4374] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   76.911126][ T4374] ext4 filesystem being mounted at /4/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   77.234265][   T26] audit: type=1326 audit(1790276854.609:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4385 comm="syz.4.31" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ea5cb0159 code=0x7ffc0000
[   77.291831][   T26] audit: type=1326 audit(1790276854.609:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4385 comm="syz.4.31" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ea5cb0159 code=0x7ffc0000
[   77.322980][   T26] audit: type=1326 audit(1790276854.629:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4385 comm="syz.4.31" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0ea5cb0159 code=0x7ffc0000
[   77.410525][   T26] audit: type=1326 audit(1790276854.629:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4385 comm="syz.4.31" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ea5cb0159 code=0x7ffc0000
[   77.527547][   T26] audit: type=1326 audit(1790276854.639:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4385 comm="syz.4.31" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0ea5cb0159 code=0x7ffc0000
[   78.666615][ T4404] loop2: detected capacity change from 0 to 512
[   78.679238][   T26] audit: type=1326 audit(1790276854.639:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4385 comm="syz.4.31" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ea5cb0159 code=0x7ffc0000
[   78.863910][   T26] audit: type=1326 audit(1790276854.639:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4385 comm="syz.4.31" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f0ea5cb0159 code=0x7ffc0000
[   78.897974][ T4404] EXT4-fs error (device loop2): ext4_orphan_get:1410: inode #15: comm syz.2.36: iget: bad extended attribute block 134217728
[   78.899186][    C0] sched: RT throttling activated
[   79.076118][ T4404] EXT4-fs (loop2): Remounting filesystem read-only
[   79.151015][ T4404] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.36: couldn't read orphan inode 15 (err -117)
[   79.173320][   T26] audit: type=1326 audit(1790276854.639:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4385 comm="syz.4.31" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ea5cb0159 code=0x7ffc0000
[   79.290747][ T4404] EXT4-fs (loop2): Remounting filesystem read-only
[   79.336699][ T4404] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none.
[   79.389317][   T26] audit: type=1326 audit(1790276854.639:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4385 comm="syz.4.31" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f0ea5cb0159 code=0x7ffc0000
[   79.541084][ T4404] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.36: invalid indirect mapped block 234881024 (level 0)
[   79.587429][   T26] audit: type=1326 audit(1790276854.639:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4385 comm="syz.4.31" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ea5cb0159 code=0x7ffc0000
[   79.640048][ T4359] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set
[   79.678554][ T4404] EXT4-fs (loop2): Remounting filesystem read-only
[   79.719001][ T4359] EXT4-fs (loop2): Remounting filesystem read-only
[   79.727342][ T4404] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.36: invalid indirect mapped block 768 (level 1)
[   79.836302][ T4404] EXT4-fs (loop2): Remounting filesystem read-only
[   81.389145][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #1a!!!
[   81.409137][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #21a!!!
[   81.429136][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #29a!!!
[   82.600840][ T4470] FAULT_INJECTION: forcing a failure.
[   82.600840][ T4470] name failslab, interval 1, probability 0, space 0, times 1
[   82.613964][ T4470] CPU: 0 PID: 4470 Comm: syz.4.51 Not tainted syzkaller #0
[   82.621433][ T4470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   82.631539][ T4470] Call Trace:
[   82.634863][ T4470]  <TASK>
[   82.637840][ T4470]  dump_stack_lvl+0x188/0x250
[   82.642591][ T4470]  ? show_regs_print_info+0x20/0x20
[   82.647838][ T4470]  ? load_image+0x410/0x410
[   82.652404][ T4470]  ? __might_sleep+0xf0/0xf0
[   82.657076][ T4470]  ? __lock_acquire+0x7b50/0x7b50
[   82.662160][ T4470]  should_fail+0x383/0x4b0
[   82.666646][ T4470]  should_failslab+0x5/0x20
[   82.671201][ T4470]  slab_pre_alloc_hook+0x51/0xc0
[   82.676181][ T4470]  ? copy_utsname+0x117/0x430
[   82.680902][ T4470]  kmem_cache_alloc+0x3d/0x280
[   82.685723][ T4470]  copy_utsname+0x117/0x430
[   82.687910][ T4474] netlink: 12 bytes leftover after parsing attributes in process `syz.2.53'.
[   82.690305][ T4470]  create_new_namespaces+0x17b/0x700
[   82.690338][ T4470]  ? bpf_lsm_capable+0x5/0x10
[   82.690367][ T4470]  unshare_nsproxy_namespaces+0x116/0x160
[   82.715278][ T4470]  ksys_unshare+0x4f6/0x8e0
[   82.719823][ T4470]  ? __lock_acquire+0x7b50/0x7b50
[   82.724887][ T4470]  ? sighand_ctor+0x40/0x40
[   82.729420][ T4470]  ? lock_chain_count+0x20/0x20
[   82.734306][ T4470]  ? syscall_enter_from_user_mode+0x21/0x70
[   82.740231][ T4470]  __x64_sys_unshare+0x34/0x40
[   82.745058][ T4470]  do_syscall_64+0x4c/0xa0
[   82.749520][ T4470]  ? clear_bhb_loop+0x30/0x80
[   82.754228][ T4470]  ? clear_bhb_loop+0x30/0x80
[   82.758930][ T4470]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   82.764881][ T4470] RIP: 0033:0x7f0ea5cb0159
[   82.769327][ T4470] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   82.789096][ T4470] RSP: 002b:00007f0ea3f08028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[   82.797604][ T4470] RAX: ffffffffffffffda RBX: 00007f0ea5f37fa0 RCX: 00007f0ea5cb0159
[   82.805752][ T4470] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000006000080
[   82.813774][ T4470] RBP: 00007f0ea5d4706b R08: 0000000000000000 R09: 0000000000000000
[   82.821827][ T4470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   82.829823][ T4470] R13: 00007f0ea5f38038 R14: 00007f0ea5f37fa0 R15: 00007ffc4f7e37e8
[   82.837864][ T4470]  </TASK>
[   82.881212][ T4477] loop3: detected capacity change from 0 to 512
[   82.901030][ T4474] netlink: 12 bytes leftover after parsing attributes in process `syz.2.53'.
[   83.077456][ T4481] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   83.244390][ T4487] loop3: detected capacity change from 0 to 256
[   83.309684][ T4486] md: md0 stopped.
[   83.589532][ T4497] cramfs: checking physical address 0x0000000022b6c000 for linear cramfs image
[   83.619795][ T4498] loop3: detected capacity change from 0 to 2048
[   83.637178][ T4497] cramfs: wrong magic
[   83.674001][ T4497] cramfs: wrong magic
[   83.688711][ T4498] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   83.916202][ T4507] binder: 4506:4507 ioctl c0306201 200000000680 returned -14
[   84.089269][ T4230] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   84.303380][ T4489] loop0: detected capacity change from 0 to 32768
[   84.423364][ T4489] XFS (loop0): Mounting V5 Filesystem
[   84.503460][ T4489] XFS (loop0): Ending clean mount
[   84.509837][ T4230] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   84.525228][ T4230] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   84.584821][ T4230] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   84.614388][ T4230] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   84.789667][ T4230] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   84.838901][ T4230] usb 4-1: config 0 descriptor??
[   85.540648][ T4489] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x3a/0xd0, xfs_bnobt block 0x4 
[   85.635402][ T4489] XFS (loop0): Unmount and run xfs_repair
[   85.642539][ T4489] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[   85.653441][ T4489] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[   85.662714][ T4550] capability: warning: `syz.1.70' uses deprecated v2 capabilities in a way that may be insecure
[   85.667496][ T4489] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[   85.696642][ T4489] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[   85.706356][ T4489] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[   85.752296][ T4489] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[   85.764634][ T4489] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   85.774044][ T4489] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   85.856940][ T4489] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   85.896827][ T4489] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x4 len 4 error 74
[   85.926051][ T4489] XFS (loop0): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x515/0x8b0 (fs/xfs/xfs_trans_buf.c:296).  Shutting down filesystem.
[   85.999564][ T4489] XFS (loop0): Please unmount the filesystem and rectify the problem(s)
[   86.047758][ T4560] loop4: detected capacity change from 0 to 512
[   86.127752][ T4230] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving
[   86.307487][ T4230] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[   86.328175][ T4187] XFS (loop0): Unmounting Filesystem
[   87.572719][ T2300] cfg80211: failed to load regulatory.db
[   89.242087][ T4606] input: syz1 as /devices/virtual/input/input5
[   89.329361][ T1325] usb 4-1: USB disconnect, device number 2
[   89.647078][ T4619] batman_adv: batadv0: Adding interface: macvtap1
[   89.671408][ T4619] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.711667][ T4619] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active
[   89.804409][ T4623] batman_adv: batadv0: Removing interface: macvtap1
[   89.904301][ T4628] netlink: 4 bytes leftover after parsing attributes in process `syz.4.91'.
[   90.026049][ T4625] bond0: option arp_validate: invalid value ()
[   90.115478][ T4640] netlink: 4 bytes leftover after parsing attributes in process `syz.4.93'.
[   90.609196][ T4230] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   90.832243][ T4673] loop2: detected capacity change from 0 to 256
[   90.869437][ T4230] usb 5-1: Using ep0 maxpacket: 16
[   91.024997][ T4230] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[   91.229489][ T4230] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[   91.248869][ T4230] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   91.278657][ T4230] usb 5-1: Product: syz
[   91.290189][ T4230] usb 5-1: Manufacturer: syz
[   91.297670][ T4230] usb 5-1: SerialNumber: syz
[   91.328711][ T4230] usb 5-1: config 0 descriptor??
[   91.372441][ T4230] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[   91.391236][ T4230] em28xx 5-1:0.0: DVB interface 0 found: bulk
[   91.929375][ T4710] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   92.039362][ T4230] em28xx 5-1:0.0: unknown em28xx chip ID (0)
[   92.080902][ T4713] loop2: detected capacity change from 0 to 128
[   92.127462][ T4703] loop3: detected capacity change from 0 to 32768
[   92.146674][ T4713] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[   92.165435][ T4713] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   92.238453][ T4703] XFS (loop3): Mounting V5 Filesystem
[   92.256894][ T4713] overlayfs: upper fs needs to support d_type.
[   92.280303][ T4713] overlayfs: upper fs does not support tmpfile.
[   92.358328][ T4703] XFS (loop3): Ending clean mount
[   92.491060][ T1325] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x3a/0xd0, xfs_bnobt block 0x4 
[   92.512996][ T1325] XFS (loop3): Unmount and run xfs_repair
[   92.518817][ T1325] XFS (loop3): First 128 bytes of corrupted metadata buffer:
[   92.548146][ T1325] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[   92.556963][ T4723] zram0: detected capacity change from 0 to 8
[   92.584160][ T1325] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[   92.593437][ T1325] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[   92.602764][ T1325] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[   92.611882][ T1325] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[   92.623215][ T1325] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   92.633706][ T1325] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   92.642759][ T1325] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   92.652704][ T4703] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x4 len 4 error 74
[   92.682532][ T4703] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x515/0x8b0 (fs/xfs/xfs_trans_buf.c:296).  Shutting down filesystem.
[   92.737766][ T4703] XFS (loop3): Please unmount the filesystem and rectify the problem(s)
[   92.761994][ T4731] netlink: 8 bytes leftover after parsing attributes in process `syz.2.116'.
[   92.824878][ T4197] XFS (loop3): Unmounting Filesystem
[   92.840151][ T4230] em28xx 5-1:0.0: failed to get i2c transfer status from bridge register (error=-5)
[   92.879431][ T4230] em28xx 5-1:0.0: board has no eeprom
[   93.010911][ T4230] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[   93.018824][ T4230] em28xx 5-1:0.0: dvb set to bulk mode.
[   93.039993][   T21] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   93.052493][ T4230] usb 5-1: USB disconnect, device number 2
[   93.070151][ T4230] em28xx 5-1:0.0: Disconnecting em28xx
[   93.076247][ T2300] em28xx 5-1:0.0: Binding DVB extension
[   93.191198][ T2300] em28xx 5-1:0.0: Registering input extension
[   93.197983][ T4230] em28xx 5-1:0.0: Closing input extension
[   93.278020][ T4230] em28xx 5-1:0.0: Freeing device
[   93.400418][   T21] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 221, changing to 7
[   93.582263][ T4751] md: md0 stopped.
[   93.587263][   T21] usb 3-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40
[   93.606299][   T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   93.636123][   T21] usb 3-1: Product: syz
[   93.655990][   T21] usb 3-1: Manufacturer: syz
[   93.673734][   T21] usb 3-1: SerialNumber: syz
[   93.754507][ T4753] loop4: detected capacity change from 0 to 128
[   93.875147][ T4753] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[   93.939616][ T4753] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   94.030311][ T4753] overlayfs: upper fs needs to support d_type.
[   94.057232][ T4753] overlayfs: upper fs does not support tmpfile.
[   94.069687][   T21] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found
[   94.162023][ T4746] loop0: detected capacity change from 0 to 32768
[   94.297948][   T21] usb 3-1: USB disconnect, device number 2
[   94.415632][ T4746] XFS (loop0): Mounting V5 Filesystem
[   94.584559][ T4746] XFS (loop0): Ending clean mount
[   94.627969][ T4180] udevd[4180]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   94.711921][   T26] kauditd_printk_skb: 10 callbacks suppressed
[   94.711938][   T26] audit: type=1800 audit(1790276872.089:22): pid=4746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.122" name="file1" dev="loop0" ino=6150 res=0 errno=0
[   94.807732][   T26] audit: type=1800 audit(1790276872.129:23): pid=4746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.122" name="file1" dev="loop0" ino=6150 res=0 errno=0
[   95.112754][ T4771] md/raid10:md0: not clean -- starting background reconstruction
[   95.137476][ T4771] md/raid10:md0: active with 1 out of 2 devices
[   95.158951][ T4771] md0: detected capacity change from 0 to 2048
[   95.196981][ T4773] md: couldn't update array info. -22
[   95.221637][ T4775] md: resync of RAID array md0
[   95.246572][ T4775] md: md0: resync done.
[   95.432836][ T4777] sd 0:0:1:0: PR command failed: 2
[   95.438066][ T4777] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[   95.456497][ T4187] XFS (loop0): Unmounting Filesystem
[   95.470472][ T4777] sd 0:0:1:0: Add. Sense: Invalid command operation code
[   97.326240][ T4814] loop4: detected capacity change from 0 to 2048
[   97.441677][ T4815] netlink: 'syz.0.138': attribute type 27 has an invalid length.
[   97.469377][ T4820] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   97.518398][ T4814] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   97.536057][ T4814] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   97.644591][ T4814] fs-verity: sha512 using implementation "sha512-avx2"
[   97.744083][ T4814] fs-verity (loop4, inode 13): Error -28 writing Merkle tree block 16
[   97.757327][ T4815] bond0: (slave bond_slave_0): Releasing backup interface
[   97.777720][ T4814] fs-verity (loop4, inode 13): Error -28 building Merkle tree
[   98.538613][ T4841] batman_adv: batadv0: Adding interface: dummy0
[   98.575694][ T4838] can: request_module (can-proto-0) failed.
[   98.606319][ T4841] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   98.670516][ T4841] batman_adv: batadv0: Interface activated: dummy0
[   98.706798][ T4838] batadv0: mtu less than device minimum
[   98.745233][ T4838] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   98.745273][ T4849] file system registered
[   98.760990][ T4838] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   98.773523][ T4838] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   98.786089][ T4838] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   98.798715][ T4838] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   98.811248][ T4838] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   98.823761][ T4838] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   98.836276][ T4838] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   98.848781][ T4838] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   98.951829][ T4849] read descriptors
[   98.996814][ T4197] ffs_data_put(): freeing
[   99.055446][ T4832] loop4: detected capacity change from 0 to 32768
[   99.182816][ T4857] device syzkaller0 entered promiscuous mode
[   99.222731][ T4832] XFS (loop4): Mounting V5 Filesystem
[   99.332452][ T4832] XFS (loop4): Ending clean mount
[   99.360855][ T4870] loop0: detected capacity change from 0 to 512
[   99.396954][   T26] audit: type=1800 audit(1790276876.769:24): pid=4832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.142" name="file1" dev="loop4" ino=6150 res=0 errno=0
[   99.466247][   T26] audit: type=1800 audit(1790276876.809:25): pid=4832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.142" name="file1" dev="loop4" ino=6150 res=0 errno=0
[   99.538376][ T4870] EXT4-fs warning (device loop0): read_mmp_block:115: Error -117 while reading MMP block 12
[  100.170987][ T4188] XFS (loop4): Unmounting Filesystem
[  100.375249][ T4891] fuse: Bad value for 'fd'
[  101.379301][ T1325] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  101.629388][ T1325] usb 3-1: Using ep0 maxpacket: 32
[  101.833274][ T1325] usb 3-1: config 1 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  101.852271][ T1325] usb 3-1: config 1 interface 0 has no altsetting 0
[  102.019329][ T1325] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  102.028448][ T1325] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.049203][ T1325] usb 3-1: Product: syz
[  102.053436][ T1325] usb 3-1: Manufacturer: syz
[  102.058069][ T1325] usb 3-1: SerialNumber: syz
[  102.239152][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!!
[  102.259131][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!!
[  102.269134][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!!
[  102.279134][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!!
[  102.289137][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!!
[  102.299134][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!!
[  102.309135][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!!
[  103.395168][ T1325] usb 3-1: USB disconnect, device number 3
[  103.825093][   T26] audit: type=1800 audit(1790276882.200:26): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.186" name="ipv4_address" dev="configfs" ino=35139 res=0 errno=0
[  103.876565][   T26] audit: type=1800 audit(1790276882.230:27): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.186" name="num" dev="configfs" ino=35140 res=0 errno=0
[  103.910444][ T4923] loop3: detected capacity change from 0 to 32768
[  103.934467][   T26] audit: type=1800 audit(1790276882.230:28): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.186" name="local" dev="configfs" ino=35141 res=0 errno=0
[  104.117920][ T4923] XFS (loop3): Mounting V5 Filesystem
[  104.249231][ T1325] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  104.257670][ T4923] XFS (loop3): Ending clean mount
[  104.302655][   T26] audit: type=1800 audit(1790276882.680:29): pid=4923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.173" name="file1" dev="loop3" ino=6150 res=0 errno=0
[  104.349221][   T26] audit: type=1800 audit(1790276882.700:30): pid=4923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.173" name="file1" dev="loop3" ino=6150 res=0 errno=0
[  104.519603][ T1325] usb 3-1: Using ep0 maxpacket: 8
[  104.639563][ T1325] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  104.679327][ T1325] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  104.752884][ T1325] pvrusb2: Hardware description: Terratec Grabster AV400
[  104.780120][ T1325] pvrusb2: **********
[  104.784186][ T1325] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  104.821090][ T1325] pvrusb2: Important functionality might not be entirely working.
[  104.828971][ T1325] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  104.876244][ T1325] pvrusb2: **********
[  104.958619][ T4197] XFS (loop3): Unmounting Filesystem
[  104.977035][ T2426] pvrusb2: Invalid write control endpoint
[  105.175461][ T2426] pvrusb2: Invalid write control endpoint
[  105.186257][ T2426] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  105.198334][   T21] usb 3-1: USB disconnect, device number 4
[  105.206826][ T2426] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  105.215088][ T2426] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  105.233063][ T2426] pvrusb2: Device being rendered inoperable
[  105.267998][ T2426] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  105.284463][ T2426] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  105.320731][ T2426] pvrusb2: Attached sub-driver cx25840
[  105.326681][ T2426] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  105.361411][ T2426] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  106.074827][ T4981] loop2: detected capacity change from 0 to 512
[  106.162509][ T4981] EXT4-fs warning (device loop2): read_mmp_block:115: Error -117 while reading MMP block 12
[  110.985017][ T5008] loop2: detected capacity change from 0 to 32768
[  111.342605][ T5008] XFS (loop2): Mounting V5 Filesystem
[  112.104901][ T5008] XFS (loop2): Ending clean mount
[  112.265905][   T26] audit: type=1800 audit(1790276890.640:31): pid=5008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.202" name="file1" dev="loop2" ino=6150 res=0 errno=0
[  112.308250][   T26] audit: type=1800 audit(1790276890.650:32): pid=5008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.202" name="file1" dev="loop2" ino=6150 res=0 errno=0
[  112.381393][ T5046] overlayfs: failed to clone upperpath
[  112.434339][ T5047] overlayfs: failed to clone upperpath
[  112.472573][ T5048] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0
[  113.603626][ T4194] XFS (loop2): Unmounting Filesystem
[  114.749356][ T4230] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  114.795085][ T5105] loop0: detected capacity change from 0 to 512
[  114.840701][ T5105] EXT4-fs (loop0): Test dummy encryption mode enabled
[  114.933402][ T5105] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,acl,usrquota,nodioread_nolock,,errors=continue. Quota mode: writeback.
[  114.962533][ T5105] jffs2: notice: (5105) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  115.119566][ T4230] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  115.139254][ T4230] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  115.201663][ T4230] usb 3-1: config 0 descriptor??
[  115.276281][ T4230] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  115.330276][ T5110] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[  115.406242][ T5111] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  115.586637][ T5118] loop3: detected capacity change from 0 to 32768
[  115.675898][ T5118] XFS (loop3): Mounting V5 Filesystem
[  115.734991][ T5118] XFS (loop3): Ending clean mount
[  115.755375][   T26] audit: type=1800 audit(1790276894.130:33): pid=5118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.234" name="file1" dev="loop3" ino=6150 res=0 errno=0
[  115.799980][   T26] audit: type=1800 audit(1790276894.170:34): pid=5118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.234" name="file1" dev="loop3" ino=6150 res=0 errno=0
[  116.281365][ T4197] XFS (loop3): Unmounting Filesystem
[  116.546731][ T5146] overlayfs: overlapping lowerdir path
[  117.259273][ T4230] gspca_stv06xx: I2C: Read error writing address: -71
[  117.404431][ T4230] usb 3-1: USB disconnect, device number 5
[  117.938940][ T5171] device-mapper: ioctl: Unable to rename non-existent device,  to uuid .2\´£«.j—DH
[  118.590245][ T5193] netlink: 24 bytes leftover after parsing attributes in process `syz.2.252'.
[  118.625766][ T5193] netlink: 6 bytes leftover after parsing attributes in process `syz.2.252'.
[  118.664441][ T5193] Zero length message leads to an empty skb
[  119.020815][ T5202] using random self ethernet address
[  119.062004][   T26] audit: type=1800 audit(1790276897.440:35): pid=5173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.246" name="bus" dev="ramfs" ino=35343 res=0 errno=0
[  119.098482][ T5202] using random host ethernet address
[  119.155962][   T26] audit: type=1800 audit(1790276897.510:36): pid=5203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.254" name="UDC" dev="configfs" ino=35377 res=0 errno=0
[  119.195861][ T5202] configfs-gadget gadget: afunc_bind:1164 Error!
[  119.290141][ T5202] udc dummy_udc.0: failed to start g1: -19
[  119.411692][ T5212] loop3: detected capacity change from 0 to 512
[  119.439311][ T5209] loop0: detected capacity change from 0 to 512
[  119.454651][ T5212] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled
[  119.509581][   T26] audit: type=1800 audit(1790276897.890:37): pid=5216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.257" name="protocol" dev="configfs" ino=35447 res=0 errno=0
[  119.547226][ T5212] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,jqfmt=vfsv0,,errors=continue. Quota mode: writeback.
[  119.572602][ T5212] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  119.613316][ T5209] EXT4-fs (loop0): Ignoring removed oldalloc option
[  119.634472][   T26] audit: type=1800 audit(1790276897.930:38): pid=5216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.257" name="local" dev="configfs" ino=35449 res=0 errno=0
[  119.843211][ T5228] device bridge0 entered promiscuous mode
[  119.850812][ T5228] device vlan2 entered promiscuous mode
[  119.856752][ T5209] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,noauto_da_alloc,oldalloc,,errors=continue. Quota mode: none.
[  120.664262][ T5240] loop2: detected capacity change from 0 to 2048
[  120.747922][ T5240]  loop2: p1 < > p4
[  121.334948][ T5240] loop2: p4 size 8388608 extends beyond EOD, truncated
[  121.844322][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  121.867880][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[  122.368136][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[  122.411672][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  122.964669][ T5279] kvm: emulating exchange as write
[  122.987003][ T5279] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  123.244006][ T5256] loop0: detected capacity change from 0 to 32768
[  123.339518][ T5256] (syz.0.268,5256,1):ocfs2_slot_map_physical_size:223 ERROR: Slot map file is too small!  (size 2, needed 8)
[  124.134999][ T5290] bridge0: port 2(bridge_slave_1) entered disabled state
[  124.144193][ T5290] bridge0: port 1(bridge_slave_0) entered disabled state
[  124.196089][ T5258] loop0: detected capacity change from 0 to 32768
[  124.226410][ T5258] (syz.0.268,5258,1):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options
[  124.255703][ T5258] (syz.0.268,5258,1):ocfs2_fill_super:1177 ERROR: status = -22
[  124.462921][ T5310] net_ratelimit: 10 callbacks suppressed
[  124.462940][ T5310] ip_tables: iptables: counters copy to user failed while replacing table
[  125.082656][ T5290] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  125.158522][ T5290] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  126.906330][ T5339] IPVS: fo: FWM 3 0x00000003 - no destination available
[  127.307958][ T5290] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  127.318442][ T5290] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  127.336187][ T5290] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  127.345784][ T5290] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  127.404538][ T5351] APIC base relocation is unsupported by KVM
[  127.480404][ T5356] netlink: 4 bytes leftover after parsing attributes in process `syz.1.301'.
[  127.483776][ T5256] FAULT_INJECTION: forcing a failure.
[  127.483776][ T5256] name failslab, interval 1, probability 0, space 0, times 0
[  127.509587][ T5356] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  127.517068][ T5356] batadv0: mtu less than device minimum
[  127.550895][ T5256] CPU: 1 PID: 5256 Comm: syz.0.268 Not tainted syzkaller #0
[  127.558262][ T5256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  127.568368][ T5256] Call Trace:
[  127.571705][ T5256]  <TASK>
[  127.574672][ T5256]  dump_stack_lvl+0x188/0x250
[  127.579406][ T5256]  ? show_regs_print_info+0x20/0x20
[  127.581781][ T5356] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  127.584653][ T5256]  ? load_image+0x410/0x410
[  127.599539][ T5256]  ? __might_sleep+0xf0/0xf0
[  127.601114][ T5356] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  127.604165][ T5256]  ? __lock_acquire+0x7b50/0x7b50
[  127.619553][ T5256]  should_fail+0x383/0x4b0
[  127.620493][ T5356] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  127.624026][ T5256]  should_failslab+0x5/0x20
[  127.639003][ T5256]  slab_pre_alloc_hook+0x51/0xc0
[  127.640399][ T5356] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  127.643984][ T5256]  ? __kernfs_new_node+0xe3/0x6b0
[  127.644030][ T5256]  kmem_cache_alloc+0x3d/0x280
[  127.644055][ T5256]  __kernfs_new_node+0xe3/0x6b0
[  127.644102][ T5256]  ? lock_chain_count+0x20/0x20
[  127.660616][ T5356] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  127.664270][ T5256]  ? kernfs_new_node+0x250/0x250
[  127.675126][ T5356] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  127.684388][ T5256]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  127.684423][ T5256]  ? lockdep_hardirqs_on+0x94/0x140
[  127.684450][ T5256]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  127.695396][ T5356] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  127.699738][ T5256]  ? _raw_spin_unlock+0x40/0x40
[  127.699775][ T5256]  kernfs_new_node+0x148/0x250
[  127.736973][ T5256]  kernfs_create_dir_ns+0x40/0x120
[  127.742140][ T5256]  sysfs_create_dir_ns+0x12c/0x290
[  127.747302][ T5256]  ? sysfs_warn_dup+0xa0/0xa0
[  127.752018][ T5256]  ? ____sys_sendmsg+0x5be/0x8f0
[  127.757006][ T5256]  ? do_raw_spin_unlock+0x11d/0x230
[  127.762260][ T5256]  kobject_add_internal+0x5ba/0xcd0
[  127.767507][ T5256]  kobject_add+0x160/0x230
[  127.771981][ T5256]  ? kobject_init+0x1c0/0x1c0
[  127.776734][ T5256]  ? kobject_init+0x7b/0x1c0
[  127.781371][ T5256]  get_device_parent+0x37d/0x3e0
[  127.786374][ T5256]  device_add+0x31b/0x1050
[  127.790855][ T5256]  ib_register_device+0xfc3/0x12e0
[  127.796204][ T5256]  ? remove_all_compat_devs+0x260/0x260
[  127.801908][ T5256]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  127.807951][ T5256]  ? lock_chain_count+0x20/0x20
[  127.812854][ T5256]  ? __rwlock_init+0x140/0x140
[  127.817664][ T5256]  ? memset+0x1e/0x40
[  127.821696][ T5256]  ? lockdep_init_map_type+0x98/0x900
[  127.827124][ T5256]  ? lockdep_softirqs_off+0x430/0x430
[  127.832567][ T5256]  ? memset+0x1e/0x40
[  127.836610][ T5256]  ? __raw_spin_lock_init+0x41/0x100
[  127.842208][ T5256]  siw_newlink+0xa5b/0xf30
[  127.846678][ T5256]  nldev_newlink+0x524/0x580
[  127.851317][ T5256]  ? nldev_set_doit+0x420/0x420
[  127.856307][ T5256]  ? lockdep_lock+0xf1/0x1f0
[  127.861044][ T5256]  ? aa_get_newest_label+0xf5/0x5a0
[  127.866299][ T5256]  ? end_current_label_crit_section+0x170/0x170
[  127.872653][ T5256]  ? end_current_label_crit_section+0x170/0x170
[  127.878965][ T5256]  ? bpf_lsm_capable+0x5/0x10
[  127.883697][ T5256]  ? security_capable+0x85/0xb0
[  127.888618][ T5256]  ? nldev_set_doit+0x420/0x420
[  127.893522][ T5256]  rdma_nl_rcv+0x6d8/0xa00
[  127.898093][ T5256]  ? rdma_nl_net_init+0x190/0x190
[  127.903257][ T5256]  ? rcu_lock_release+0x5/0x20
[  127.908103][ T5256]  netlink_unicast+0x78f/0x940
[  127.913022][ T5256]  netlink_sendmsg+0x8ba/0xbe0
[  127.917880][ T5256]  ? netlink_getsockopt+0x570/0x570
[  127.923158][ T5256]  ? aa_sock_msg_perm+0x94/0x150
[  127.928162][ T5256]  ? apparmor_socket_sendmsg+0x88/0x230
[  127.933754][ T5256]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  127.939095][ T5256]  ? security_socket_sendmsg+0x7c/0xa0
[  127.944731][ T5256]  ? netlink_getsockopt+0x570/0x570
[  127.950109][ T5256]  ____sys_sendmsg+0x5be/0x8f0
[  127.955026][ T5256]  ? __sys_sendmsg_sock+0x30/0x30
[  127.960112][ T5256]  ? import_iovec+0x6f/0xa0
[  127.964670][ T5256]  ___sys_sendmsg+0x236/0x2e0
[  127.969444][ T5256]  ? __sys_sendmsg+0x290/0x290
[  127.974312][ T5256]  __se_sys_sendmsg+0x1b7/0x2a0
[  127.979258][ T5256]  ? __x64_sys_sendmsg+0x80/0x80
[  127.984435][ T5256]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  127.990587][ T5256]  ? lockdep_hardirqs_on+0x94/0x140
[  127.995989][ T5256]  do_syscall_64+0x4c/0xa0
[  128.000473][ T5256]  ? clear_bhb_loop+0x30/0x80
[  128.005200][ T5256]  ? clear_bhb_loop+0x30/0x80
[  128.010024][ T5256]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  128.015975][ T5256] RIP: 0033:0x7fad4268f159
[  128.020442][ T5256] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  128.040097][ T5256] RSP: 002b:00007fad408e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  128.048614][ T5256] RAX: ffffffffffffffda RBX: 00007fad42916fa0 RCX: 00007fad4268f159
[  128.056644][ T5256] RDX: 0000000000004000 RSI: 0000200000000240 RDI: 0000000000000004
[  128.064655][ T5256] RBP: 00007fad4272606b R08: 0000000000000000 R09: 0000000000000000
[  128.072678][ T5256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  128.080711][ T5256] R13: 00007fad42917038 R14: 00007fad42916fa0 R15: 00007ffc7d58f818
[  128.088743][ T5256]  </TASK>
[  128.107334][ T5256] kobject_add_internal failed for infiniband (error: -12 parent: virtual)
[  128.117052][ T5256] siw: device registration error -12
[  128.185416][ T5356] batman_adv: batadv0: Removing interface: batadv_slave_1
[  128.247702][ T5360] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  128.639308][ T4263] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  128.815919][ T5393] Invalid option length (1047276) for dns_resolver key
[  128.899182][ T4263] usb 4-1: Using ep0 maxpacket: 8
[  129.019419][ T4263] usb 4-1: config 1 interface 0 altsetting 12 bulk endpoint 0x1 has invalid maxpacket 520
[  129.039247][ T4263] usb 4-1: config 1 interface 0 has no altsetting 0
[  129.099442][    T7] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  129.199562][ T4263] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  129.220377][ T4263] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.236512][ T4263] usb 4-1: Product: syz
[  129.245484][ T4263] usb 4-1: Manufacturer: syz
[  129.254753][ T4263] usb 4-1: SerialNumber: syz
[  129.300259][ T5370] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  129.349212][    T7] usb 1-1: Using ep0 maxpacket: 32
[  129.489346][    T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 128, changing to 11
[  129.510442][    T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  129.840249][    T7] usb 1-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68
[  129.887701][    T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  130.004294][    T7] usb 1-1: Product: syz
[  130.095661][    T7] usb 1-1: Manufacturer: syz
[  130.114853][    T7] usb 1-1: SerialNumber: syz
[  130.165747][    T7] usb 1-1: config 0 descriptor??
[  130.245063][    T7] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input7
[  130.454304][ T4263] usb 4-1: USB disconnect, device number 3
[  130.497665][    T7] usb 1-1: USB disconnect, device number 2
[  130.500185][    C1] xpad 1-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19
[  130.512463][    C1] xpad 1-1:0.0: xpad_irq_in - usb_submit_urb failed with result -19
[  130.945798][ T5439] net_ratelimit: 12 callbacks suppressed
[  130.945840][ T5439] ip_tables: iptables: counters copy to user failed while replacing table
[  131.805158][ T5448] loop2: detected capacity change from 0 to 512
[  131.852003][ T5443] loop3: detected capacity change from 0 to 4096
[  131.885248][ T5448] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  131.914184][ T5448] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  131.959366][ T5448] EXT4-fs (loop2): invalid inodes per group: 0
[  131.959366][ T5448] 
[  131.978408][ T5443] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  132.078097][ T5448] netlink: 'syz.2.335': attribute type 4 has an invalid length.
[  132.835067][ T5472] jffs2: notice: (5472) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  133.009827][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[  133.016339][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[  133.837863][ T5498] gadgetfs: bound to dummy_udc driver
[  133.847522][ T5501] jffs2: notice: (5501) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  134.179456][ T4263] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  134.219184][    C0] gadgetfs: connected
[  134.224750][ T4263] gadgetfs: disconnected
[  134.549120][    C0] gadgetfs: connected
[  134.589466][ T4263] usb 1-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00
[  134.615654][ T5501] jffs2: fork failed for JFFS2 garbage collect thread: 4
[  134.623322][ T5496] gadgetfs: suspended from state 3
[  134.652251][ T4263] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  134.661272][ T5496] gadgetfs: disconnected
[  134.742771][ T4263] usb 1-1: can't set config #1, error -71
[  134.763634][ T4263] usb 1-1: USB disconnect, device number 3
[  135.484226][ T5527] vivid-001: disconnect
[  135.545270][ T5530] loop3: detected capacity change from 0 to 512
[  135.656022][ T5530] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  135.732411][ T5521] vivid-001: reconnect
[  135.893579][ T5535] netlink: 4 bytes leftover after parsing attributes in process `syz.1.358'.
[  135.897309][ T5530] EXT4-fs (loop3): 1 truncate cleaned up
[  135.927056][ T5530] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,stripe=0x00000000000000dc,errors=remount-ro,grpjquota=,data_err=ignore,noblock_validity,. Quota mode: none.
[  136.834338][ T5530] EXT4-fs error (device loop3): xattr_find_entry:297: inode #15: comm syz.3.356: corrupted xattr entries
[  136.853021][ T5530] EXT4-fs (loop3): Remounting filesystem read-only
[  138.183850][ T5567] netlink: 14 bytes leftover after parsing attributes in process `syz.1.370'.
[  138.212951][ T5567] batman_adv: batadv0: Interface deactivated: dummy0
[  138.254861][ T5567] batman_adv: batadv0: Removing interface: dummy0
[  138.514559][ T5587] loop2: detected capacity change from 0 to 512
[  138.542939][ T5587] EXT4-fs (loop2): Ignoring removed oldalloc option
[  138.575566][ T5587] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.375: bg 0: block 5: invalid block bitmap
[  138.600821][ T5587] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  138.614219][ T5587] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.375: invalid indirect mapped block 3 (level 2)
[  138.632507][ T5587] EXT4-fs (loop2): 1 orphan inode deleted
[  138.638521][ T5587] EXT4-fs (loop2): 1 truncate cleaned up
[  138.650467][ T5587] EXT4-fs (loop2): mounted filesystem without journal. Opts: oldalloc,,errors=continue. Quota mode: writeback.
[  139.031815][ T5608] sch_tbf: burst 21990 is lower than device lo mtu (65550) !
[  139.064374][ T5613] netlink: 12 bytes leftover after parsing attributes in process `syz.4.389'.
[  139.270038][   T26] audit: type=1800 audit(1790276917.630:39): pid=5620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.392" name="size" dev="configfs" ino=37018 res=0 errno=0
[  139.343472][   T26] audit: type=1800 audit(1790276917.630:40): pid=5620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.392" name="zoned" dev="configfs" ino=37019 res=0 errno=0
[  139.364040][   T26] audit: type=1800 audit(1790276917.630:41): pid=5620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.392" name="power" dev="configfs" ino=37020 res=0 errno=0
[  140.642207][ T5642] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  140.724817][ T5644] loop2: detected capacity change from 0 to 512
[  140.737605][   T26] audit: type=1326 audit(1790276919.110:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5641 comm="syz.4.398" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0ea5cb0159 code=0x0
[  140.784414][ T5648] FAULT_INJECTION: forcing a failure.
[  140.784414][ T5648] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  140.909576][ T5648] CPU: 1 PID: 5648 Comm: syz.3.401 Not tainted syzkaller #0
[  140.916941][ T5648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  140.927042][ T5648] Call Trace:
[  140.930358][ T5648]  <TASK>
[  140.933323][ T5648]  dump_stack_lvl+0x188/0x250
[  140.938049][ T5648]  ? show_regs_print_info+0x20/0x20
[  140.943301][ T5648]  ? load_image+0x410/0x410
[  140.947855][ T5648]  ? __lock_acquire+0x7b50/0x7b50
[  140.952940][ T5648]  should_fail+0x383/0x4b0
[  140.957437][ T5648]  prepare_alloc_pages+0x1e3/0x5b0
[  140.962635][ T5648]  __alloc_pages+0x11b/0x480
[  140.967268][ T5648]  ? zone_statistics+0x170/0x170
[  140.972262][ T5648]  ? alloc_pages+0x452/0x560
[  140.976907][ T5648]  kimage_alloc_pages+0xc6/0x360
[  140.981915][ T5648]  kimage_alloc_page+0x8d/0x910
[  140.986822][ T5648]  ? arch_crash_save_vmcoreinfo+0xe0/0xe0
[  140.992596][ T5648]  ? arch_kexec_pre_free_pages+0x10/0x10
[  140.998288][ T5648]  kimage_load_segment+0x4f3/0xa20
[  141.003462][ T5648]  do_kexec_load+0x46b/0x630
[  141.008102][ T5648]  __se_sys_kexec_load+0x170/0x1c0
[  141.013259][ T5648]  do_syscall_64+0x4c/0xa0
[  141.017710][ T5648]  ? clear_bhb_loop+0x30/0x80
[  141.022428][ T5648]  ? clear_bhb_loop+0x30/0x80
[  141.027176][ T5648]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  141.033106][ T5648] RIP: 0033:0x7fcae2050159
[  141.037690][ T5648] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  141.057351][ T5648] RSP: 002b:00007fcae02a8028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6
[  141.065815][ T5648] RAX: ffffffffffffffda RBX: 00007fcae22d7fa0 RCX: 00007fcae2050159
[  141.073834][ T5648] RDX: 00002000000002c0 RSI: 0000000000000001 RDI: 0000000000000002
[  141.081848][ T5648] RBP: 00007fcae20e706b R08: 0000000000000000 R09: 0000000000000000
[  141.089867][ T5648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  141.098101][ T5648] R13: 00007fcae22d8038 R14: 00007fcae22d7fa0 R15: 00007ffc44b08958
[  141.106143][ T5648]  </TASK>
[  141.126817][ T5644] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,usrquota,minixdf,nombcache,. Quota mode: writeback.
[  141.196061][ T5644] ext4 filesystem being mounted at /77/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  141.663549][ T5661] EXT4-fs error (device loop2): ext4_ind_map_blocks:604: inode #18: comm syz.2.400: Can't allocate blocks for non-extent mapped inodes with bigalloc
[  141.707806][ T5660] loop3: detected capacity change from 0 to 512
[  141.809494][ T5660] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  141.832335][ T5661] EXT4-fs (loop2): Remounting filesystem read-only
[  141.846532][ T5660] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002]
[  141.896282][ T5660] System zones: 1-12
[  141.903298][ T5660] EXT4-fs error (device loop3): ext4_orphan_get:1436: comm syz.3.404: bad orphan inode 131072
[  141.925973][ T5660] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,data=journal,norecovery,,errors=continue. Quota mode: none.
[  142.420577][ T5689] kvm: pic: non byte write
[  142.659449][ T4233] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  142.808294][ T5706] netlink: 'syz.2.418': attribute type 8 has an invalid length.
[  142.826496][ T5706] sch_fq: defrate 0 ignored.
[  142.835638][ T5706] dummy0 speed is unknown, defaulting to 1000
[  142.864971][ T5706] dummy0 speed is unknown, defaulting to 1000
[  142.882390][ T5706] dummy0 speed is unknown, defaulting to 1000
[  142.904506][ T5707] netlink: 4 bytes leftover after parsing attributes in process `syz.2.418'.
[  142.939200][ T4233] usb 1-1: Using ep0 maxpacket: 32
[  143.069553][ T4233] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  143.187575][ T5706] infiniband syz0: set down
[  143.217795][    T7] dummy0 speed is unknown, defaulting to 1000
[  143.253805][ T5706] infiniband syz0: added dummy0
[  143.304802][ T4233] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  143.347437][ T4233] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  143.429363][ T4233] usb 1-1: Product: syz
[  143.433639][ T4233] usb 1-1: Manufacturer: syz
[  143.479236][ T4233] usb 1-1: SerialNumber: syz
[  143.514811][ T5706] RDS/IB: syz0: added
[  143.545401][ T4233] usb 1-1: config 0 descriptor??
[  143.564023][ T5706] smc: adding ib device syz0 with port count 1
[  143.582997][ T5706] smc:    ib device syz0 port 1 has pnetid 
[  143.596016][   T21] dummy0 speed is unknown, defaulting to 1000
[  143.603414][ T5688] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  143.687137][ T5706] dummy0 speed is unknown, defaulting to 1000
[  144.422648][    T7] usb 1-1: USB disconnect, device number 4
[  144.564145][ T5730] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  145.100853][ T5726] bridge0: port 2(bridge_slave_1) entered disabled state
[  145.108645][ T5726] bridge0: port 1(bridge_slave_0) entered disabled state
[  146.244943][ T5726] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  146.294619][ T5762] loop0: detected capacity change from 0 to 128
[  146.372385][ T5762] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  146.430891][   T26] audit: type=1800 audit(1790276924.810:43): pid=5762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.431" name="file1" dev="loop0" ino=94 res=0 errno=0
[  146.959830][ T5726] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  146.968744][ T5726] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  146.978007][ T5726] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  146.987192][ T5726] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  147.006914][ T5706] dummy0 speed is unknown, defaulting to 1000
[  147.013329][ T5738] netlink: 4 bytes leftover after parsing attributes in process `syz.4.426'.
[  147.030766][ T5753] device syzkaller0 entered promiscuous mode
[  147.230294][ T5770] device syzkaller0 entered promiscuous mode
[  147.662613][ T5706] dummy0 speed is unknown, defaulting to 1000
[  147.852820][ T5782] loop0: detected capacity change from 0 to 512
[  147.945569][ T5782] EXT4-fs (loop0): bad s_min_extra_isize: 544
[  147.960464][ T5706] dummy0 speed is unknown, defaulting to 1000
[  148.106858][ T5793] bridge0: port 3(syz_tun) entered blocking state
[  148.149793][ T5793] bridge0: port 3(syz_tun) entered disabled state
[  148.196712][ T5793] device syz_tun entered promiscuous mode
[  148.276710][ T5793] bridge0: port 3(syz_tun) entered blocking state
[  148.283319][ T5793] bridge0: port 3(syz_tun) entered forwarding state
[  148.315092][ T5800] loop3: detected capacity change from 0 to 164
[  148.362845][ T5706] dummy0 speed is unknown, defaulting to 1000
[  148.874615][ T5817] FAULT_INJECTION: forcing a failure.
[  148.874615][ T5817] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  148.909153][ T5817] CPU: 1 PID: 5817 Comm: syz.2.451 Not tainted syzkaller #0
[  148.917090][ T5817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  148.927275][ T5817] Call Trace:
[  148.930600][ T5817]  <TASK>
[  148.933575][ T5817]  dump_stack_lvl+0x188/0x250
[  148.938309][ T5817]  ? show_regs_print_info+0x20/0x20
[  148.943560][ T5817]  ? load_image+0x410/0x410
[  148.948131][ T5817]  ? __lock_acquire+0x7b50/0x7b50
[  148.953231][ T5817]  should_fail+0x383/0x4b0
[  148.957697][ T5817]  prepare_alloc_pages+0x1e3/0x5b0
[  148.962954][ T5817]  __alloc_pages+0x11b/0x480
[  148.967602][ T5817]  ? zone_statistics+0x170/0x170
[  148.972604][ T5817]  ? alloc_pages+0x452/0x560
[  148.977256][ T5817]  kimage_alloc_pages+0xc6/0x360
[  148.982248][ T5817]  kimage_alloc_page+0x8d/0x910
[  148.987172][ T5817]  kimage_load_segment+0x605/0xa20
[  148.992355][ T5817]  do_kexec_load+0x46b/0x630
[  148.997005][ T5817]  __se_sys_kexec_load+0x170/0x1c0
[  149.002170][ T5817]  do_syscall_64+0x4c/0xa0
[  149.006814][ T5817]  ? clear_bhb_loop+0x30/0x80
[  149.011541][ T5817]  ? clear_bhb_loop+0x30/0x80
[  149.016270][ T5817]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  149.022215][ T5817] RIP: 0033:0x7f3562d1e159
[  149.026678][ T5817] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  149.046962][ T5817] RSP: 002b:00007f3560f76028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6
[  149.055436][ T5817] RAX: ffffffffffffffda RBX: 00007f3562fa5fa0 RCX: 00007f3562d1e159
[  149.063593][ T5817] RDX: 00002000000002c0 RSI: 0000000000000001 RDI: 0000000000000002
[  149.071659][ T5817] RBP: 00007f3562db506b R08: 0000000000000000 R09: 0000000000000000
[  149.079687][ T5817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  149.087707][ T5817] R13: 00007f3562fa6038 R14: 00007f3562fa5fa0 R15: 00007ffe5bea7468
[  149.095788][ T5817]  </TASK>
[  149.787007][ T5838] device syzkaller0 entered promiscuous mode
[  150.108889][ T5852] process 'syz.4.463' launched './file0' with NULL argv: empty string added
[  150.553450][ T5870] bridge0: port 3(vxlan0) entered blocking state
[  150.567519][ T5870] bridge0: port 3(vxlan0) entered disabled state
[  150.589633][ T5870] device vxlan0 entered promiscuous mode
[  152.954239][ T5893] netlink: 8 bytes leftover after parsing attributes in process `syz.4.475'.
[  153.007193][ T5895] kvm: pic: level sensitive irq not supported
[  153.029034][ T5894] netlink: 8 bytes leftover after parsing attributes in process `syz.4.475'.
[  153.296622][ T5920] device syzkaller0 entered promiscuous mode
[  155.197738][ T5972] device syzkaller0 entered promiscuous mode
[  156.660539][ T5982] loop0: detected capacity change from 0 to 131072
[  156.787373][ T5982] F2FS-fs (loop0): Found nat_bits in checkpoint
[  156.832918][ T5982] F2FS-fs (loop0): recover fsync data on readonly fs
[  156.845153][ T5982] F2FS-fs (loop0): Mounted with checkpoint version = 1b41e955
[  157.002832][ T5982] F2FS-fs (loop0): Inconsistent error blkaddr:5633, sit bitmap:0
[  157.011219][ T5982] CPU: 1 PID: 5982 Comm: syz.0.501 Not tainted syzkaller #0
[  157.018559][ T5982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  157.028683][ T5982] Call Trace:
[  157.032090][ T5982]  <TASK>
[  157.035343][ T5982]  dump_stack_lvl+0x188/0x250
[  157.040084][ T5982]  ? show_regs_print_info+0x20/0x20
[  157.045339][ T5982]  ? pagecache_get_page+0xbcf/0xf20
[  157.050586][ T5982]  ? f2fs_get_next_page_offset+0x6a0/0x6a0
[  157.056450][ T5982]  ? unlock_page+0x17c/0x1f0
[  157.061087][ T5982]  f2fs_is_valid_blkaddr+0xc4a/0x1260
[  157.066523][ T5982]  f2fs_get_read_data_page+0x2c4/0x580
[  157.072126][ T5982]  ? f2fs_get_block+0x2a0/0x2a0
[  157.077042][ T5982]  f2fs_find_data_page+0x1c2/0x5d0
[  157.082211][ T5982]  __f2fs_find_entry+0x59f/0xd90
[  157.087267][ T5982]  f2fs_lookup+0x22e/0x970
[  157.091741][ T5982]  ? f2fs_encrypted_symlink_getattr+0x50/0x50
[  157.097908][ T5982]  __lookup_slow+0x29d/0x410
[  157.102550][ T5982]  ? lookup_one_len+0x2d0/0x2d0
[  157.107462][ T5982]  ? down_read+0x1aa/0x2e0
[  157.111925][ T5982]  lookup_slow+0x53/0x70
[  157.116214][ T5982]  walk_component+0x314/0x460
[  157.120940][ T5982]  path_lookupat+0x148/0x420
[  157.125587][ T5982]  filename_lookup+0x21e/0x550
[  157.130405][ T5982]  ? __lock_acquire+0x7b50/0x7b50
[  157.135484][ T5982]  ? hashlen_string+0x110/0x110
[  157.140410][ T5982]  ? strncpy_from_user+0x1f4/0x350
[  157.145576][ T5982]  ? getname_flags+0x1f9/0x4f0
[  157.150389][ T5982]  user_path_at_empty+0x40/0x190
[  157.155374][ T5982]  __se_sys_mount+0x2a4/0x3d0
[  157.160111][ T5982]  ? __x64_sys_mount+0xc0/0xc0
[  157.164949][ T5982]  ? lockdep_hardirqs_on+0x94/0x140
[  157.170192][ T5982]  ? __x64_sys_mount+0x1c/0xc0
[  157.175008][ T5982]  do_syscall_64+0x4c/0xa0
[  157.179474][ T5982]  ? clear_bhb_loop+0x30/0x80
[  157.184202][ T5982]  ? clear_bhb_loop+0x30/0x80
[  157.188948][ T5982]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  157.195015][ T5982] RIP: 0033:0x7fad4268f159
[  157.199485][ T5982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  157.219573][ T5982] RSP: 002b:00007fad408e7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  157.228036][ T5982] RAX: ffffffffffffffda RBX: 00007fad42916fa0 RCX: 00007fad4268f159
[  157.236069][ T5982] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000000000000
[  157.244087][ T5982] RBP: 00007fad4272606b R08: 0000000000000000 R09: 0000000000000000
[  157.252101][ T5982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  157.260243][ T5982] R13: 00007fad42917038 R14: 00007fad42916fa0 R15: 00007ffc7d58f818
[  157.268379][ T5982]  </TASK>
[  158.042055][ T6003] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0
[  158.192627][ T6012] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  159.970495][ T6049] FAULT_INJECTION: forcing a failure.
[  159.970495][ T6049] name failslab, interval 1, probability 0, space 0, times 0
[  160.019938][ T6049] CPU: 1 PID: 6049 Comm: syz.2.517 Not tainted syzkaller #0
[  160.027350][ T6049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  160.037460][ T6049] Call Trace:
[  160.040900][ T6049]  <TASK>
[  160.043875][ T6049]  dump_stack_lvl+0x188/0x250
[  160.048606][ T6049]  ? show_regs_print_info+0x20/0x20
[  160.053854][ T6049]  ? load_image+0x410/0x410
[  160.058533][ T6049]  ? __might_sleep+0xf0/0xf0
[  160.063174][ T6049]  ? __lock_acquire+0x7b50/0x7b50
[  160.068258][ T6049]  ? memset+0x1e/0x40
[  160.072285][ T6049]  should_fail+0x383/0x4b0
[  160.076759][ T6049]  should_failslab+0x5/0x20
[  160.081306][ T6049]  slab_pre_alloc_hook+0x51/0xc0
[  160.086293][ T6049]  ? new_inode_pseudo+0x77/0x210
[  160.091311][ T6049]  kmem_cache_alloc+0x3d/0x280
[  160.096127][ T6049]  new_inode_pseudo+0x77/0x210
[  160.100942][ T6049]  alloc_anon_inode+0x1b/0x300
[  160.105753][ T6049]  dma_buf_export+0x58e/0x9a0
[  160.110477][ T6049]  udmabuf_create+0x1089/0x15b0
[  160.115392][ T6049]  ? udmabuf_ioctl+0x300/0x300
[  160.120205][ T6049]  ? __might_fault+0xb3/0x110
[  160.124937][ T6049]  ? _copy_from_user+0x111/0x170
[  160.129920][ T6049]  udmabuf_ioctl+0x1f3/0x300
[  160.134591][ T6049]  ? sync_print_fence+0x4b0/0x4b0
[  160.139677][ T6049]  ? bpf_lsm_file_ioctl+0x5/0x10
[  160.144675][ T6049]  ? security_file_ioctl+0x7c/0xa0
[  160.149837][ T6049]  ? sync_print_fence+0x4b0/0x4b0
[  160.154914][ T6049]  __se_sys_ioctl+0xfa/0x170
[  160.159548][ T6049]  do_syscall_64+0x4c/0xa0
[  160.164009][ T6049]  ? clear_bhb_loop+0x30/0x80
[  160.168726][ T6049]  ? clear_bhb_loop+0x30/0x80
[  160.173450][ T6049]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  160.179389][ T6049] RIP: 0033:0x7f3562d1e159
[  160.183851][ T6049] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  160.203671][ T6049] RSP: 002b:00007f3560f76028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  160.212137][ T6049] RAX: ffffffffffffffda RBX: 00007f3562fa5fa0 RCX: 00007f3562d1e159
[  160.220180][ T6049] RDX: 00002000000002c0 RSI: 0000000040187542 RDI: 0000000000000004
[  160.228196][ T6049] RBP: 00007f3562db506b R08: 0000000000000000 R09: 0000000000000000
[  160.236219][ T6049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  160.244314][ T6049] R13: 00007f3562fa6038 R14: 00007f3562fa5fa0 R15: 00007ffe5bea7468
[  160.252347][ T6049]  </TASK>
[  161.139305][ T6062] overlayfs: overlapping lowerdir path
[  162.142276][ T6066] netlink: 'syz.4.522': attribute type 8 has an invalid length.
[  162.236322][ T6066] sch_fq: defrate 0 ignored.
[  162.310182][ T6066] rdma_rxe: rxe_register_device failed with error -23
[  162.391171][ T6071] netlink: 4 bytes leftover after parsing attributes in process `syz.4.522'.
[  163.345476][ T6066] rdma_rxe: failed to add dummy0
[  163.592003][ T6084] loop2: detected capacity change from 0 to 164
[  164.952824][ T6100] loop3: detected capacity change from 0 to 256
[  165.027274][ T6104] loop2: detected capacity change from 0 to 512
[  165.093845][ T6100] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xdbae3f17, utbl_chksum : 0xe619d30d)
[  165.112731][ T6104] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled
[  165.145122][ T6104] EXT4-fs (loop2): inline encryption not supported
[  165.175576][ T6104] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  165.252742][ T6107] netlink: 28 bytes leftover after parsing attributes in process `syz.4.533'.
[  165.297213][ T6104] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  165.387144][ T6107] netlink: 28 bytes leftover after parsing attributes in process `syz.4.533'.
[  165.465338][ T6104] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.532: bg 0: block 248: padding at end of block bitmap is not set
[  165.581179][ T6107] device ip6gretap0 entered promiscuous mode
[  165.597461][ T6104] Quota error (device loop2): write_blk: dquota write failed
[  165.638367][ T6104] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota
[  165.650042][ T6107] device syz_tun entered promiscuous mode
[  165.695846][ T6112] netlink: 'syz.1.534': attribute type 2 has an invalid length.
[  165.720793][ T6104] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.532: Failed to acquire dquot type 1
[  165.778449][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready
[  165.807867][ T6104] EXT4-fs (loop2): 1 truncate cleaned up
[  165.831118][ T6104] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,inlinecrypt,nombcache,,errors=continue. Quota mode: writeback.
[  165.860842][ T6100] exfat: Unknown parameter 'ŸÂbË‘WYÈe&7aØÈ!±ÄŒOײ$¾¶3L'~ÒüIgù7ñ«æ'Í›zñÉ{Œ—2Ÿ–2s(Í4’…Ì#nšþó\éF†é'
[  166.927138][ T4230] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  168.065721][ T6155] 8021q: adding VLAN 0 to HW filter on device bond1
[  168.152771][  T154] bond1: (slave geneve2): link status definitely down, disabling slave
[  168.221987][  T154] bond1: now running without any active interface!
[  168.282928][   T26] audit: type=1800 audit(1790276946.660:44): pid=6164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.544" name="UDC" dev="configfs" ino=38825 res=0 errno=0
[  168.318735][ T6164] configfs-gadget gadget: afunc_bind:1164 Error!
[  168.359383][ T6164] udc dummy_udc.0: failed to start g1: -19
[  168.549539][ T6175] FAULT_INJECTION: forcing a failure.
[  168.549539][ T6175] name failslab, interval 1, probability 0, space 0, times 0
[  168.608634][ T6175] CPU: 1 PID: 6175 Comm: syz.0.547 Not tainted syzkaller #0
[  168.616010][ T6175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  168.626125][ T6175] Call Trace:
[  168.629442][ T6175]  <TASK>
[  168.632492][ T6175]  dump_stack_lvl+0x188/0x250
[  168.637218][ T6175]  ? show_regs_print_info+0x20/0x20
[  168.642494][ T6175]  ? load_image+0x410/0x410
[  168.647050][ T6175]  ? __might_sleep+0xf0/0xf0
[  168.651690][ T6175]  ? __lock_acquire+0x7b50/0x7b50
[  168.656770][ T6175]  should_fail+0x383/0x4b0
[  168.661350][ T6175]  should_failslab+0x5/0x20
[  168.665940][ T6175]  slab_pre_alloc_hook+0x51/0xc0
[  168.670941][ T6175]  kmem_cache_alloc_node_trace+0x4a/0x2f0
[  168.676711][ T6175]  ? bdi_alloc+0x4b/0x130
[  168.681110][ T6175]  bdi_alloc+0x4b/0x130
[  168.685323][ T6175]  __alloc_disk_node+0x7f/0x4f0
[  168.690237][ T6175]  __blk_alloc_disk+0x2a/0x60
[  168.694979][ T6175]  dm_create+0x57f/0xf90
[  168.699284][ T6175]  dev_create+0x12e/0x2c0
[  168.703679][ T6175]  ? list_devices+0x820/0x820
[  168.708407][ T6175]  ? __might_fault+0xb3/0x110
[  168.713169][ T6175]  ? _copy_from_user+0x111/0x170
[  168.718154][ T6175]  dm_ctl_ioctl+0x947/0xd00
[  168.722797][ T6175]  ? list_devices+0x820/0x820
[  168.727522][ T6175]  ? dm_poll+0x120/0x120
[  168.731863][ T6175]  ? bpf_lsm_file_ioctl+0x5/0x10
[  168.736872][ T6175]  ? security_file_ioctl+0x7c/0xa0
[  168.742038][ T6175]  ? dm_poll+0x120/0x120
[  168.746336][ T6175]  __se_sys_ioctl+0xfa/0x170
[  168.750975][ T6175]  do_syscall_64+0x4c/0xa0
[  168.755435][ T6175]  ? clear_bhb_loop+0x30/0x80
[  168.760158][ T6175]  ? clear_bhb_loop+0x30/0x80
[  168.764887][ T6175]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  168.770848][ T6175] RIP: 0033:0x7fad4268f159
[  168.775320][ T6175] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  168.794973][ T6175] RSP: 002b:00007fad408e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  168.803652][ T6175] RAX: ffffffffffffffda RBX: 00007fad42916fa0 RCX: 00007fad4268f159
[  168.811675][ T6175] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003
[  168.819698][ T6175] RBP: 00007fad4272606b R08: 0000000000000000 R09: 0000000000000000
[  168.827716][ T6175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  168.835735][ T6175] R13: 00007fad42917038 R14: 00007fad42916fa0 R15: 00007ffc7d58f818
[  168.843773][ T6175]  </TASK>
[  168.953581][ T6188] overlayfs: overlapping lowerdir path
[  169.841591][ T6182] netlink: 8 bytes leftover after parsing attributes in process `syz.3.549'.
[  170.238451][ T6190] bridge0: port 1(bridge_slave_0) entered disabled state
[  170.251483][ T6205] loop0: detected capacity change from 0 to 164
[  170.281874][ T6190] bridge0: port 2(bridge_slave_1) entered disabled state
[  170.417707][ T6205] rock: corrupted directory entry. extent=134217760 out of volume (nzones=41)
[  170.564812][ T6203] netlink: 'syz.4.550': attribute type 16 has an invalid length.
[  170.627516][ T6203] netlink: 'syz.4.550': attribute type 17 has an invalid length.
[  170.825980][ T6203] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready
[  170.911575][ T6203] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  171.109239][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  171.369155][ T6230] Illegal XDP return value 4294967274, expect packet loss!
[  172.604572][ T6246] bonding: bond1 is being created...
[  172.905374][ T6257] 8021q: adding VLAN 0 to HW filter on device bond1
[  174.376249][ T6279] netlink: 'syz.2.576': attribute type 2 has an invalid length.
[  174.495045][ T6282] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  174.655424][ T6289] netlink: 36 bytes leftover after parsing attributes in process `syz.4.577'.
[  176.221774][ T6319] FAULT_INJECTION: forcing a failure.
[  176.221774][ T6319] name failslab, interval 1, probability 0, space 0, times 0
[  176.305560][ T6319] CPU: 1 PID: 6319 Comm: syz.3.584 Not tainted syzkaller #0
[  176.313040][ T6319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  176.323129][ T6319] Call Trace:
[  176.326460][ T6319]  <TASK>
[  176.329416][ T6319]  dump_stack_lvl+0x188/0x250
[  176.334164][ T6319]  ? show_regs_print_info+0x20/0x20
[  176.339406][ T6319]  ? load_image+0x410/0x410
[  176.343955][ T6319]  ? __might_sleep+0xf0/0xf0
[  176.348673][ T6319]  ? __lock_acquire+0x7b50/0x7b50
[  176.353735][ T6319]  should_fail+0x383/0x4b0
[  176.358189][ T6319]  should_failslab+0x5/0x20
[  176.362728][ T6319]  slab_pre_alloc_hook+0x51/0xc0
[  176.367693][ T6319]  kmem_cache_alloc_node_trace+0x4a/0x2f0
[  176.373435][ T6319]  ? bdi_alloc+0x4b/0x130
[  176.378279][ T6319]  bdi_alloc+0x4b/0x130
[  176.382467][ T6319]  __alloc_disk_node+0x7f/0x4f0
[  176.387380][ T6319]  __blk_alloc_disk+0x2a/0x60
[  176.392090][ T6319]  dm_create+0x57f/0xf90
[  176.396370][ T6319]  dev_create+0x12e/0x2c0
[  176.400759][ T6319]  ? list_devices+0x820/0x820
[  176.405460][ T6319]  ? __might_fault+0xb3/0x110
[  176.410187][ T6319]  ? _copy_from_user+0x111/0x170
[  176.415292][ T6319]  dm_ctl_ioctl+0x947/0xd00
[  176.419835][ T6319]  ? list_devices+0x820/0x820
[  176.424539][ T6319]  ? dm_poll+0x120/0x120
[  176.428881][ T6319]  ? bpf_lsm_file_ioctl+0x5/0x10
[  176.433896][ T6319]  ? security_file_ioctl+0x7c/0xa0
[  176.439032][ T6319]  ? dm_poll+0x120/0x120
[  176.443314][ T6319]  __se_sys_ioctl+0xfa/0x170
[  176.448035][ T6319]  do_syscall_64+0x4c/0xa0
[  176.452477][ T6319]  ? clear_bhb_loop+0x30/0x80
[  176.457176][ T6319]  ? clear_bhb_loop+0x30/0x80
[  176.461896][ T6319]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  176.467819][ T6319] RIP: 0033:0x7fcae2050159
[  176.472266][ T6319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  176.491910][ T6319] RSP: 002b:00007fcae02a8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  176.500358][ T6319] RAX: ffffffffffffffda RBX: 00007fcae22d7fa0 RCX: 00007fcae2050159
[  176.508361][ T6319] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003
[  176.516359][ T6319] RBP: 00007fcae20e706b R08: 0000000000000000 R09: 0000000000000000
[  176.524447][ T6319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  176.532446][ T6319] R13: 00007fcae22d8038 R14: 00007fcae22d7fa0 R15: 00007ffc44b08958
[  176.540467][ T6319]  </TASK>
[  176.660068][ T6326] netlink: 8 bytes leftover after parsing attributes in process `syz.0.586'.
[  176.941121][ T6332] loop3: detected capacity change from 0 to 512
[  177.268353][ T6332] EXT4-fs (loop3): Ignoring removed bh option
[  177.320737][ T6343] netlink: 'syz.0.589': attribute type 2 has an invalid length.
[  179.371850][ T6366] batman_adv: batadv0: Adding interface: ip6gretap1
[  179.378690][ T6366] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  179.606035][ T6366] batman_adv: batadv0: Interface activated: ip6gretap1
[  179.669223][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  180.460416][ T6332] fscrypt: Error allocating hmac(sha512): -2
[  180.479229][ T6332] EXT4-fs (loop3): Error processing option "test_dummy_encryption" [-2]
[  180.611794][ T6375] netlink: 20 bytes leftover after parsing attributes in process `syz.4.596'.
[  181.965372][ T6408] overlayfs: failed to clone lowerpath
[  182.959266][ T4231] Bluetooth: hci1: command 0x0406 tx timeout
[  184.366603][ T6450] loop3: detected capacity change from 0 to 256
[  184.457235][ T6450] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  185.038991][ T6450] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  186.240099][ T4231] Bluetooth: hci3: command 0x0406 tx timeout
[  186.246905][ T4231] Bluetooth: hci4: command 0x0406 tx timeout
[  186.275491][ T6481] loop3: detected capacity change from 0 to 64
[  186.339468][ T4231] Bluetooth: hci0: command 0x0406 tx timeout
[  186.421144][ T4231] Bluetooth: hci2: command 0x0406 tx timeout
[  186.519152][   T26] audit: type=1800 audit(1790276964.860:45): pid=6483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.627" name="subclass" dev="configfs" ino=40240 res=0 errno=0
[  187.139241][ T4231] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  187.258111][ T6501] loop3: detected capacity change from 0 to 1024
[  187.321360][ T6501] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  187.351070][ T6501] EXT4-fs (loop3): fragment/cluster size (16384) != block size (1024)
[  187.409685][ T4231] usb 1-1: Using ep0 maxpacket: 16
[  187.760238][ T4231] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  188.379568][ T4231] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  188.395914][ T4231] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  188.411410][ T4231] usb 1-1: Product: syz
[  188.418497][ T4231] usb 1-1: Manufacturer: syz
[  188.423742][ T4231] usb 1-1: SerialNumber: syz
[  188.453494][ T4231] usb 1-1: config 0 descriptor??
[  188.511815][ T4231] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  188.532647][ T4231] em28xx 1-1:0.0: DVB interface 0 found: bulk
[  189.605899][ T6538] gadgetfs: bound to dummy_udc driver
[  189.609846][ T4231] em28xx 1-1:0.0: unknown em28xx chip ID (0)
[  189.889264][ T4191] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  189.919092][    C0] gadgetfs: connected
[  189.925844][ T6538] gadgetfs: suspended from state 3
[  189.938853][ T6538] gadgetfs: disconnected
[  190.239400][ T4231] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  190.258986][ T4231] em28xx 1-1:0.0: board has no eeprom
[  190.328130][ T6552] loop2: detected capacity change from 0 to 1024
[  190.669956][ T4231] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  190.709305][ T4231] em28xx 1-1:0.0: dvb set to bulk mode.
[  190.733848][ T5352] em28xx 1-1:0.0: Binding DVB extension
[  190.882686][ T4231] usb 1-1: USB disconnect, device number 5
[  190.941681][ T4231] em28xx 1-1:0.0: Disconnecting em28xx
[  191.024976][ T5352] em28xx 1-1:0.0: Registering input extension
[  191.037411][ T4231] em28xx 1-1:0.0: Closing input extension
[  191.107356][ T4231] em28xx 1-1:0.0: Freeing device
[  192.205964][ T1237] hfsplus: b-tree write err: -5, ino 25
[  192.220307][ T1237] hfsplus: b-tree write err: -5, ino 4
[  192.227425][ T6572] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  192.254136][ T1237] hfsplus: b-tree write err: -5, ino 2
[  192.260849][ T1237] hfsplus: b-tree write err: -5, ino 26
[  192.268935][ T1237] hfsplus: b-tree write err: -5, ino 27
[  192.424057][ T6576] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  192.433277][ T6576] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  192.453480][ T6573] kvm: pic: non byte write
[  192.528692][ T6581] netlink: 'syz.1.648': attribute type 16 has an invalid length.
[  192.549611][ T6581] netlink: 'syz.1.648': attribute type 17 has an invalid length.
[  192.580803][ T6581] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  192.604549][ T6581] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  192.636693][ T6581] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  192.785283][ T6581] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  192.889193][   T21] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  192.993019][ T6581] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  193.254977][ T6581] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  193.468676][ T6581] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  193.477735][ T6581] IPv6: ADDRCONF(NETDEV_CHANGE): sit0: link becomes ready
[  193.491111][ T6581] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready
[  193.507420][ T6581] IPv6: ADDRCONF(NETDEV_CHANGE): ip6gre0: link becomes ready
[  193.517090][ T6581] IPv6: ADDRCONF(NETDEV_CHANGE): ip6gretap0: link becomes ready
[  193.535246][ T6581] 8021q: adding VLAN 0 to HW filter on device bond0
[  193.542988][ T6581] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  193.553910][ T6581] 8021q: adding VLAN 0 to HW filter on device team0
[  193.562802][ T6581] IPv6: ADDRCONF(NETDEV_CHANGE): nlmon0: link becomes ready
[  193.572417][ T6581] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  193.735156][   T21] usb 4-1: Using ep0 maxpacket: 32
[  193.817333][ T6607] loop0: detected capacity change from 0 to 256
[  193.879516][   T21] usb 4-1: config 245 has an invalid interface number: 214 but max is 0
[  193.887935][   T21] usb 4-1: config 245 has no interface number 0
[  193.919160][   T21] usb 4-1: config 245 interface 214 altsetting 70 bulk endpoint 0x5 has invalid maxpacket 64
[  193.979637][   T21] usb 4-1: config 245 interface 214 has no altsetting 0
[  194.159674][   T21] usb 4-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=1e.fa
[  194.172305][   T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  194.189533][   T21] usb 4-1: Product: syz
[  194.201046][   T21] usb 4-1: Manufacturer: syz
[  194.210544][   T21] usb 4-1: SerialNumber: syz
[  194.240479][ T6586] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  194.393478][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[  194.404790][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[  195.029526][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  195.193800][ T4231] usb 4-1: USB disconnect, device number 4
[  195.206268][ T4231] f81534a_ctrl 4-1:245.214: failed to set register 0x116: -19
[  195.219335][ T4231] f81534a_ctrl 4-1:245.214: failed to enable ports: -19
[  195.733903][ T6650] netlink: 'syz.2.665': attribute type 16 has an invalid length.
[  195.771053][ T6650] netlink: 'syz.2.665': attribute type 17 has an invalid length.
[  195.790244][ T6650] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  195.820134][ T6650] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  195.847836][ T6650] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  195.867211][ T6650] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  195.890093][ T6650] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  195.907582][ T6650] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  195.924962][ T6650] IPv6: ADDRCONF(NETDEV_CHANGE): sit0: link becomes ready
[  195.947898][ T6650] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready
[  195.958726][ T6650] IPv6: ADDRCONF(NETDEV_CHANGE): ip6gre0: link becomes ready
[  195.968431][ T6650] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready
[  195.978102][ T6650] IPv6: ADDRCONF(NETDEV_CHANGE): ip6gretap0: link becomes ready
[  195.991112][ T6650] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  195.998899][ T6650] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  196.007622][ T6650] 8021q: adding VLAN 0 to HW filter on device bond0
[  196.015651][ T6650] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  196.028970][ T6650] 8021q: adding VLAN 0 to HW filter on device team0
[  196.037693][ T6650] rdma_rxe: ignoring netdev event = 14 for dummy0
[  196.057330][ T6650] infiniband syz0: set active
[  196.063258][ T6650] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready
[  196.077177][ T6650] infiniband syz0: set active
[  196.082789][ T6650] infiniband syz0: set active
[  196.088433][ T6650] IPv6: ADDRCONF(NETDEV_CHANGE): nlmon0: link becomes ready
[  196.103421][ T6650] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  196.134018][ T4231] dummy0 speed is unknown, defaulting to 1000
[  196.148496][ T4233] dummy0 speed is unknown, defaulting to 1000
[  196.167130][ T5352] dummy0 speed is unknown, defaulting to 1000
[  196.176583][ T4231] dummy0 speed is unknown, defaulting to 1000
[  196.432427][ T6671] netlink: 14 bytes leftover after parsing attributes in process `syz.2.675'.
[  196.433219][ T6675] loop3: detected capacity change from 0 to 1024
[  196.449372][ T6671] rdma_rxe: ignoring netdev event = 10 for dummy0
[  196.485052][ T6671] infiniband syz0: set down
[  196.508498][ T4231] infiniband syz0: ib_query_port failed (-19)
[  196.644035][ T4246] smc: removing ib device syz0
[  197.595242][ T6690] JFS: discard option not supported on device
[  197.609942][  T150] block nbd0: Attempted send on invalid socket
[  197.618131][  T150] blk_update_request: I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  197.633403][  T150] block nbd0: Attempted send on invalid socket
[  197.639701][  T150] blk_update_request: I/O error, dev nbd0, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  197.651081][ T6690] Mount JFS Failure: -5
[  197.655344][ T6690] jfs_mount failed w/return code = -5
[  197.702480][ T6691] bridge0: port 3(syz_tun) entered blocking state
[  197.716005][ T6691] bridge0: port 3(syz_tun) entered disabled state
[  197.761176][ T1237] hfsplus: b-tree write err: -5, ino 25
[  197.768510][ T1237] hfsplus: b-tree write err: -5, ino 4
[  197.793607][ T1237] hfsplus: b-tree write err: -5, ino 2
[  197.817130][ T1237] hfsplus: b-tree write err: -5, ino 26
[  197.849443][ T1237] hfsplus: b-tree write err: -5, ino 27
[  198.095434][ T6702] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  198.103639][ T6702] IPv6: NLM_F_CREATE should be set when creating new route
[  198.171162][ T6703] netlink: 28 bytes leftover after parsing attributes in process `syz.1.682'.
[  199.313754][ T6704] bridge0: port 2(bridge_slave_1) entered disabled state
[  199.321934][ T6704] bridge0: port 1(bridge_slave_0) entered disabled state
[  199.952428][ T6704] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  200.040838][ T6704] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  201.165632][ T6704] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  201.180643][ T6704] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  201.193606][ T6704] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  201.205152][ T6704] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  201.336796][ T6709] netlink: 'syz.1.684': attribute type 1 has an invalid length.
[  201.422386][ T6712] bridge0: port 3(syz_tun) entered disabled state
[  201.483896][ T6712] bridge0: port 1(bridge_slave_0) entered disabled state
[  201.498020][ T6712] bridge0: port 2(bridge_slave_1) entered disabled state
[  201.623322][ T6716] netlink: 'syz.0.683': attribute type 16 has an invalid length.
[  201.638437][ T6716] netlink: 'syz.0.683': attribute type 17 has an invalid length.
[  201.656077][ T6716] bridge0: port 3(syz_tun) entered blocking state
[  201.662702][ T6716] bridge0: port 3(syz_tun) entered forwarding state
[  201.683193][ T6716] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  201.691434][ T6716] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  201.703414][ T6716] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready
[  201.714650][ T6716] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  202.655367][ T6758] loop0: detected capacity change from 0 to 1024
[  202.936502][ T6767] bridge0: port 3(syz_tun) entered blocking state
[  203.018140][ T6767] bridge0: port 3(syz_tun) entered disabled state
[  203.147326][ T6767] device syz_tun entered promiscuous mode
[  203.174041][ T6774] loop3: detected capacity change from 0 to 256
[  203.351974][ T4246] hfsplus: b-tree write err: -5, ino 25
[  203.408407][ T4246] hfsplus: b-tree write err: -5, ino 4
[  203.435248][ T4246] hfsplus: b-tree write err: -5, ino 2
[  203.447763][ T6767] bridge0: port 3(syz_tun) entered blocking state
[  203.454379][ T6767] bridge0: port 3(syz_tun) entered forwarding state
[  203.519017][ T4246] hfsplus: b-tree write err: -5, ino 26
[  203.549823][ T4246] hfsplus: b-tree write err: -5, ino 27
[  203.690431][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  203.751906][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0.257: link becomes ready
[  203.778165][ T6778] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  203.969195][   T26] audit: type=1804 audit(1790276982.340:46): pid=6783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.694" name="/newroot/109/file0" dev="fuse" ino=1 res=1 errno=0
[  204.057627][   T26] audit: type=1800 audit(1790276982.360:47): pid=6783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.694" name="/" dev="fuse" ino=1 res=0 errno=0
[  205.179298][   T26] audit: type=1804 audit(1790276982.360:48): pid=6783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.694" name="/newroot/109/file0" dev="fuse" ino=1 res=1 errno=0
[  205.307346][ T6804] loop3: detected capacity change from 0 to 512
[  205.349826][   T26] audit: type=1800 audit(1790276983.730:49): pid=6801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.697" name="UDC" dev="configfs" ino=40751 res=0 errno=0
[  205.377995][ T6801] configfs-gadget gadget: afunc_bind:1164 Error!
[  205.395193][ T6804] EXT4-fs (loop3): Test dummy encryption mode enabled
[  205.409419][ T6801] udc dummy_udc.0: failed to start g1: -19
[  205.550605][ T6804] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,acl,usrquota,nodioread_nolock,,errors=continue. Quota mode: writeback.
[  205.598572][ T6808] IPVS: fo: FWM 3 0x00000003 - no destination available
[  205.651251][ T6804] jffs2: notice: (6804) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  205.947870][ T6824] netlink: 14 bytes leftover after parsing attributes in process `syz.0.715'.
[  206.167384][ T6834] vivid-001: disconnect
[  206.743107][ T6821] vivid-001: reconnect
[  206.999574][ T6844] gadgetfs: bound to dummy_udc driver
[  207.114187][ T6839] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  207.142166][ T6839] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  207.270774][   T13] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  207.299079][    C0] gadgetfs: connected
[  207.303429][ T6844] gadgetfs: suspended from state 3
[  207.308669][ T6844] gadgetfs: disconnected
[  207.474517][ T6863] loop3: detected capacity change from 0 to 1024
[  207.617605][ T6866] loop2: detected capacity change from 0 to 512
[  207.804675][ T6866] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  207.907185][ T6866] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002]
[  207.930257][ T6866] System zones: 1-12
[  207.952191][ T6866] EXT4-fs error (device loop2): ext4_orphan_get:1436: comm syz.2.717: bad orphan inode 131072
[  208.036342][ T6866] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,data=journal,norecovery,,errors=continue. Quota mode: none.
[  208.908837][ T1237] hfsplus: b-tree write err: -5, ino 25
[  208.914950][ T1237] hfsplus: b-tree write err: -5, ino 4
[  208.920655][ T1237] hfsplus: b-tree write err: -5, ino 2
[  208.959117][ T1237] hfsplus: b-tree write err: -5, ino 26
[  208.965452][ T1237] hfsplus: b-tree write err: -5, ino 27
[  209.185987][ T6888] loop3: detected capacity change from 0 to 2048
[  209.253889][ T6888]  loop3: p1 < > p4
[  209.260927][ T6888] loop3: p4 size 8388608 extends beyond EOD, truncated
[  209.432402][ T6893] loop0: detected capacity change from 0 to 512
[  209.562862][ T6895] netlink: 14 bytes leftover after parsing attributes in process `syz.4.721'.
[  209.596288][ T6893] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  209.740814][ T6893] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002]
[  209.763190][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  209.778311][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  209.798595][ T6893] System zones: 1-12
[  209.852536][ T6910] vivid-001: disconnect
[  210.139483][ T6893] EXT4-fs error (device loop0): ext4_orphan_get:1436: comm syz.0.731: bad orphan inode 131072
[  210.387032][ T6899] vivid-001: reconnect
[  210.416695][ T6893] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,data=journal,norecovery,,errors=continue. Quota mode: none.
[  210.913688][ T6931] netlink: 28 bytes leftover after parsing attributes in process `syz.3.739'.
[  210.944469][ T6931] netlink: 28 bytes leftover after parsing attributes in process `syz.3.739'.
[  210.982521][ T6931] device ip6gretap0 entered promiscuous mode
[  211.006738][ T6931] device syz_tun entered promiscuous mode
[  211.018847][ T6934] loop0: detected capacity change from 0 to 1024
[  211.026820][ T6931] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[  211.057104][ T6931] Cannot create hsr debugfs directory
[  211.063230][ T6931] hsr1: Slave A (ip6gretap0) is not up; please bring it up to get a fully working HSR network
[  211.075240][ T6931] hsr1: Slave B (syz_tun) is not up; please bring it up to get a fully working HSR network
[  211.315725][ T6948] bridge0: port 4(syz_tun) entered blocking state
[  211.326293][ T6948] bridge0: port 4(syz_tun) entered disabled state
[  211.516847][ T6953] loop3: detected capacity change from 0 to 164
[  211.711205][ T4299] hfsplus: b-tree write err: -5, ino 25
[  211.717190][ T4299] hfsplus: b-tree write err: -5, ino 4
[  211.733422][ T4299] hfsplus: b-tree write err: -5, ino 2
[  211.749851][ T4299] hfsplus: b-tree write err: -5, ino 26
[  211.770147][ T4299] hfsplus: b-tree write err: -5, ino 27
[  213.554768][ T6951] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  213.616641][ T6951] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  213.788422][ T6970] loop2: detected capacity change from 0 to 256
[  214.104306][ T6951] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  214.114913][ T6951] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  214.125231][ T6951] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  214.135824][ T6951] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  214.236871][ T6981] loop0: detected capacity change from 0 to 512
[  214.385345][ T6981] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  214.631511][ T6981] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: comm syz.0.741: inode #88: comm syz.0.741: iget: illegal inode #
[  214.653030][ T6981] EXT4-fs (loop0): Remounting filesystem read-only
[  214.659854][ T6981] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.741: error while reading EA inode 88 err=-117
[  214.678995][ T6981] EXT4-fs (loop0): Remounting filesystem read-only
[  214.687988][ T6981] EXT4-fs (loop0): 1 orphan inode deleted
[  214.693965][ T6981] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,noinit_itable,debug_want_extra_isize=0x000000000000002a,jqfmt=vfsold,nodelalloc,bsdgroups,. Quota mode: none.
[  215.230364][ T6963] netlink: 14 bytes leftover after parsing attributes in process `syz.3.737'.
[  215.436860][ T6991] binder: BINDER_SET_CONTEXT_MGR already set
[  215.455595][ T1325] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  215.470647][ T6991] binder: 6986:6991 ioctl 4018620d 200000000100 returned -16
[  215.531755][ T6991] binder: BINDER_SET_CONTEXT_MGR already set
[  215.537809][ T6991] binder: 6986:6991 ioctl 4018620d 200000004a80 returned -16
[  215.648021][ T6999] netlink: 28 bytes leftover after parsing attributes in process `syz.1.745'.
[  215.667816][ T6999] netlink: 28 bytes leftover after parsing attributes in process `syz.1.745'.
[  215.769850][ T7005] loop0: detected capacity change from 0 to 512
[  215.814893][ T7005] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled
[  215.825540][ T7005] EXT4-fs (loop0): inline encryption not supported
[  215.850286][ T7005] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  215.897300][ T7005] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  215.958302][ T7005] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.760: bg 0: block 248: padding at end of block bitmap is not set
[  215.979549][ T7005] Quota error (device loop0): write_blk: dquota write failed
[  215.987321][ T7005] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota
[  215.999397][ T7005] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.760: Failed to acquire dquot type 1
[  216.014098][ T7005] EXT4-fs (loop0): 1 truncate cleaned up
[  216.022376][ T7005] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,inlinecrypt,nombcache,,errors=continue. Quota mode: writeback.
[  216.066540][ T1111] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  216.282986][ T7023] loop0: detected capacity change from 0 to 1024
[  216.379751][ T7028] device syzkaller0 entered promiscuous mode
[  219.085785][ T7060] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  219.093142][ T7060] IPv6: NLM_F_CREATE should be set when creating new route
[  219.113592][ T1237] hfsplus: b-tree write err: -5, ino 25
[  219.125907][ T1237] hfsplus: b-tree write err: -5, ino 4
[  219.139498][ T1237] hfsplus: b-tree write err: -5, ino 2
[  219.186805][ T1237] hfsplus: b-tree write err: -5, ino 26
[  219.318247][ T1237] hfsplus: b-tree write err: -5, ino 27
[  219.589241][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  219.909201][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  220.084448][ T7070] loop0: detected capacity change from 0 to 256
[  220.213867][ T7070] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  220.257021][ T7070] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  220.429749][ T7070] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000ff98, chksum : 0x84a6b859, utbl_chksum : 0xe619d30d)
[  220.501135][ T7064] bridge0: port 3(syz_tun) entered disabled state
[  221.509007][   T26] audit: type=1800 audit(1790276999.880:50): pid=7102 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.768" name="ipv4_address" dev="configfs" ino=42083 res=0 errno=0
[  221.624812][   T26] audit: type=1800 audit(1790276999.890:51): pid=7102 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.768" name="num" dev="configfs" ino=42084 res=0 errno=0
[  221.652063][   T26] audit: type=1800 audit(1790276999.910:52): pid=7102 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.768" name="local" dev="configfs" ino=42085 res=0 errno=0
[  221.669590][ T7096] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
[  225.507381][ T7191] batman_adv: batadv0: Removing interface: batadv_slave_0
[  225.534187][ T7193] loop2: detected capacity change from 0 to 512
[  225.568447][ T7191] batman_adv: batadv0: Removing interface: batadv_slave_1
[  225.588206][ T7198] netlink: 'syz.4.792': attribute type 1 has an invalid length.
[  225.616710][ T7196] 8021q: adding VLAN 0 to HW filter on device batadv0
[  225.717254][ T7193] zram: Cannot change disksize for initialized device
[  227.669185][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  227.669184][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  228.481190][ T7252] FAULT_INJECTION: forcing a failure.
[  228.481190][ T7252] name failslab, interval 1, probability 0, space 0, times 0
[  228.525849][ T7252] CPU: 0 PID: 7252 Comm: syz.3.809 Not tainted syzkaller #0
[  228.533223][ T7252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  228.543353][ T7252] Call Trace:
[  228.546674][ T7252]  <TASK>
[  228.549638][ T7252]  dump_stack_lvl+0x188/0x250
[  228.554367][ T7252]  ? show_regs_print_info+0x20/0x20
[  228.559611][ T7252]  ? load_image+0x410/0x410
[  228.564373][ T7252]  ? __might_sleep+0xf0/0xf0
[  228.569108][ T7252]  ? __lock_acquire+0x7b50/0x7b50
[  228.574277][ T7252]  ? lockdep_init_map_type+0x98/0x900
[  228.579713][ T7252]  should_fail+0x383/0x4b0
[  228.584192][ T7252]  should_failslab+0x5/0x20
[  228.588751][ T7252]  slab_pre_alloc_hook+0x51/0xc0
[  228.593732][ T7252]  ? security_inode_alloc+0x30/0x110
[  228.599059][ T7252]  kmem_cache_alloc+0x3d/0x280
[  228.603895][ T7252]  security_inode_alloc+0x30/0x110
[  228.609056][ T7252]  inode_init_always+0x8e5/0xc90
[  228.614042][ T7252]  new_inode_pseudo+0x8e/0x210
[  228.618940][ T7252]  new_inode+0x25/0x1d0
[  228.623233][ T7252]  proc_pid_make_inode+0x20/0x1a0
[  228.629325][ T7252]  proc_pident_instantiate+0x69/0x2a0
[  228.634762][ T7252]  proc_pident_lookup+0x1cb/0x270
[  228.639844][ T7252]  ? mem_rw+0x5b0/0x5b0
[  228.644064][ T7252]  path_openat+0x1046/0x2fb0
[  228.648749][ T7252]  ? do_filp_open+0x400/0x400
[  228.653496][ T7252]  do_filp_open+0x1df/0x400
[  228.658055][ T7252]  ? vfs_tmpfile+0x300/0x300
[  228.662706][ T7252]  ? noop_direct_IO+0x10/0x10
[  228.667454][ T7252]  ? _raw_spin_unlock+0x24/0x40
[  228.672354][ T7252]  ? alloc_fd+0x59e/0x650
[  228.676775][ T7252]  do_sys_openat2+0x14b/0x500
[  228.681501][ T7252]  ? __lock_acquire+0x7b50/0x7b50
[  228.686571][ T7252]  ? do_sys_open+0xe0/0xe0
[  228.691024][ T7252]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  228.697080][ T7252]  ? lock_chain_count+0x20/0x20
[  228.702008][ T7252]  __x64_sys_openat+0x135/0x160
[  228.706917][ T7252]  do_syscall_64+0x4c/0xa0
[  228.711382][ T7252]  ? clear_bhb_loop+0x30/0x80
[  228.716109][ T7252]  ? clear_bhb_loop+0x30/0x80
[  228.720868][ T7252]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  228.726810][ T7252] RIP: 0033:0x7fcae201098e
[  228.731274][ T7252] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  228.751053][ T7252] RSP: 002b:00007fcae02a7ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  228.759629][ T7252] RAX: ffffffffffffffda RBX: 00007fcae02a86c0 RCX: 00007fcae201098e
[  228.767781][ T7252] RDX: 0000000000000002 RSI: 00007fcae02a7f90 RDI: ffffffffffffff9c
[  228.775805][ T7252] RBP: 00007fcae20e706b R08: 0000000000000000 R09: 0000000000000000
[  228.783827][ T7252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  228.791838][ T7252] R13: 00007fcae22d8038 R14: 00007fcae22d7fa0 R15: 00007ffc44b08958
[  228.799877][ T7252]  </TASK>
[  230.087476][ T7270] device syzkaller0 entered promiscuous mode
[  230.098498][ T1325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  230.111730][ T7270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  232.120096][ T7290] device syzkaller0 entered promiscuous mode
[  232.168706][ T7290] tipc: Started in network mode
[  232.208018][ T7300] tmpfs: Unknown parameter 'usrquota'
[  232.232980][ T7290] tipc: Node identity 32e195b7fe3, cluster identity 4711
[  232.266494][ T7290] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  232.291338][ T7301] loop2: detected capacity change from 0 to 8
[  232.350719][ T7289] tipc: Resetting bearer <eth:syzkaller0>
[  233.133139][ T7289] tipc: Disabling bearer <eth:syzkaller0>
[  233.367852][ T7311] netlink: 4 bytes leftover after parsing attributes in process `syz.0.825'.
[  234.635709][ T7328] loop3: detected capacity change from 0 to 256
[  234.811082][ T7328] exfat: Deprecated parameter 'utf8'
[  234.853012][ T7328] exfat: Deprecated parameter 'namecase'
[  234.858792][ T7328] exfat: Deprecated parameter 'namecase'
[  235.149418][ T7328] exfat: Deprecated parameter 'utf8'
[  235.675455][ T7328] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d)
[  237.176435][ T7348] device syzkaller0 entered promiscuous mode
[  237.197927][ T7356] loop2: detected capacity change from 0 to 1024
[  237.247637][ T7354] tipc: Started in network mode
[  237.282612][ T7354] tipc: Node identity e27bfa5182f4, cluster identity 4711
[  237.383847][ T7354] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  237.844314][ T7346] tipc: Resetting bearer <eth:syzkaller0>
[  238.240976][ T7346] tipc: Disabling bearer <eth:syzkaller0>
[  240.607588][ T7407] netlink: 20 bytes leftover after parsing attributes in process `syz.2.855'.
[  240.641154][ T7407] netlink: 20 bytes leftover after parsing attributes in process `syz.2.855'.
[  242.130596][ T7420] binder: BINDER_SET_CONTEXT_MGR already set
[  242.136864][ T7420] binder: 7419:7420 ioctl 4018620d 200000000100 returned -16
[  242.209628][ T7422] loop3: detected capacity change from 0 to 512
[  242.217144][ T7420] binder: BINDER_SET_CONTEXT_MGR already set
[  242.229180][ T7420] binder: 7419:7420 ioctl 4018620d 200000004a80 returned -16
[  242.266805][ T7422] EXT4-fs (loop3): Ignoring removed mblk_io_submit option
[  242.381052][ T7422] EXT4-fs error (device loop3): ext4_iget_extra_inode:4573: inode #15: comm syz.3.861: corrupted in-inode xattr
[  242.391994][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  242.417146][ T1325] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  242.539697][ T7422] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.861: couldn't read orphan inode 15 (err -117)
[  242.558621][ T7422] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_dev=0x0000000000000003,inode_readahead_blks=0x0000000008000000,quota,noload,user_xattr,mblk_io_submit,noinit_itable,noblock_validity,max_dir_size_kb=0x0000000000000009,init_itable=0x0000000000000fff,,errors=continue. Quota mode: writeback.
[  242.652258][ T1325] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  242.747142][ T7422] futex_wake_op: syz.3.861 tries to shift op by 144; fix this program
[  243.529559][ T7441] Invalid ELF header type: 2 != 1
[  243.669216][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  245.958627][ T7477] loop3: detected capacity change from 0 to 512
[  246.106768][ T7477] EXT4-fs (loop3): 1 truncate cleaned up
[  246.142858][ T7477] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none.
[  246.715485][ T7477] EXT4-fs error (device loop3): xattr_find_entry:297: inode #12: comm syz.3.874: corrupted xattr entries
[  246.785315][ T7477] EXT4-fs (loop3): Remounting filesystem read-only
[  247.705220][ T7477] EXT4-fs error (device loop3): xattr_find_entry:297: inode #12: comm syz.3.874: corrupted xattr entries
[  247.754191][ T7477] EXT4-fs (loop3): Remounting filesystem read-only
[  248.832969][ T7480] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set
[  248.948451][ T7480] EXT4-fs (loop3): Remounting filesystem read-only
[  249.103149][ T7551] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  250.444190][ T7564] Set syz0 is full, maxelem 0 reached
[  252.720169][ T2300] cp2112 0003:10C4:EA90.0003: hidraw0: USB HID v0.00 Device [syz0] on syz0
[  252.786058][ T2300] cp2112 0003:10C4:EA90.0003: Part Number: 0x0C Device Version: 0x02
[  252.947754][ T2300] cp2112 0003:10C4:EA90.0003: error reading lock byte: -5
[  253.128055][ T7594] fido_id[7594]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  253.209509][ T7598] autofs4:pid:7598:autofs_fill_super: called with bogus options
[  253.709290][ T7623] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  253.719874][ T7623] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  253.728629][ T7623] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  253.737890][ T7623] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  253.767272][ T7623] bond0: (slave vxlan0): Enslaving as an active interface with an up link
[  255.561313][ T7657] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.913'.
[  255.573909][ T7657] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.913'.
[  255.646785][ T7662] 9pnet: p9_errstr2errno: server reported unknown error õ€ÿ00000000000000000011
[  256.112532][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[  256.132896][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[  256.407505][ T7669] loop0: detected capacity change from 0 to 2048
[  256.451325][ T7669] UDF-fs: bad mount option "00000000000000000000" or missing value
[  256.609392][ T7678] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  256.649733][ T7676] loop0: detected capacity change from 0 to 1024
[  256.710643][ T7676] hfsplus: unable to parse mount options
[  256.734015][ T7676] netlink: 8 bytes leftover after parsing attributes in process `syz.0.918'.
[  262.269158][ T2300] usb 3-1: new full-speed USB device number 6 using dummy_hcd
[  263.148072][ T7712] bridge0: port 3(syz_tun) entered disabled state
[  263.459413][ T2300] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  263.468569][ T2300] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  263.525391][ T2300] usb 3-1: config 0 descriptor??
[  263.591449][ T2300] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  263.809289][ T2300] gp8psk: usb in 128 operation failed.
[  264.299276][ T2300] gp8psk: usb in 146 operation failed.
[  264.304930][ T2300] gp8psk: failed to get FW version
[  264.329234][ T2300] gp8psk: usb in 149 operation failed.
[  264.334905][ T2300] gp8psk: failed to get FPGA version
[  264.359258][ T2300] gp8psk: usb in 138 operation failed.
[  264.364951][ T2300] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  264.389223][ T2300] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[  264.419127][ T2300] usb 3-1: USB disconnect, device number 6
[  264.482990][ T7712] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  264.514752][ T7712] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  265.403280][ T7712] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  265.419824][ T7712] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  265.429539][ T7712] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  265.438602][ T7712] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  265.760168][ T7762] netlink: 'syz.3.947': attribute type 1 has an invalid length.
[  265.785732][ T4269] hid-generic 0008:046D:C082.0004: hidraw0: <UNKNOWN> HID v0.04 Device [syz0] on syz0
[  265.940890][ T7762] 8021q: adding VLAN 0 to HW filter on device bond1
[  265.987359][ T7764] bond1: (slave gretap1): making interface the new active one
[  265.998083][ T7764] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  266.449379][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  267.056655][ T7775] fido_id[7775]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  267.251193][ T7792] 9pnet_virtio: no channels available for device 127.0.0.1
[  267.996177][ T7798] device syzkaller0 entered promiscuous mode
[  268.448385][ T7814] jffs2: notice: (7814) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  269.649106][ T7814] jffs2: fork failed for JFFS2 garbage collect thread: 4
[  269.858182][ T7824] xt_hashlimit: size too large, truncated to 1048576
[  270.023837][ T7831] device syzkaller0 entered promiscuous mode
[  270.380886][ T7839] using random self ethernet address
[  270.386292][ T7839] using random host ethernet address
[  270.417283][ T7839] using random self ethernet address
[  270.437927][ T7839] using random host ethernet address
[  270.551565][ T7839] ODEBUG: Out of memory. ODEBUG disabled
[  271.000123][ T7860] netlink: 4 bytes leftover after parsing attributes in process `syz.1.973'.
[  271.017379][ T7858] overlayfs: './file0' not a directory
[  271.154755][ T7867] loop0: detected capacity change from 0 to 8
[  271.250554][ T7867] SQUASHFS error: zlib decompression failed, data probably corrupt
[  271.270600][ T7867] SQUASHFS error: Failed to read block 0x9b: -5
[  271.295435][ T7867] SQUASHFS error: Unable to read metadata cache entry [99]
[  271.340342][ T7867] SQUASHFS error: Unable to read inode 0x127
[  273.716779][ T7885] binder: BINDER_SET_CONTEXT_MGR already set
[  273.878031][ T7885] binder: 7884:7885 ioctl 4018620d 200000000100 returned -16
[  273.940370][ T7885] binder: BINDER_SET_CONTEXT_MGR already set
[  273.946432][ T7885] binder: 7884:7885 ioctl 4018620d 200000004a80 returned -16
[  274.212120][ T7892] capability: warning: `syz.1.981' uses 32-bit capabilities (legacy support in use)
[  275.669204][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  275.849395][ T7909] tipc: Started in network mode
[  275.854437][ T7909] tipc: Node identity ac1414aa, cluster identity 4711
[  275.904247][ T7909] tipc: Enabled bearer <udp:s>, priority 10
[  275.961445][ T7912] dwc3 pcspkr: missing memory resource
[  277.197566][ T4269] tipc: Node number set to 2886997162
[  277.303228][ T7931] binder: 7928:7931 unknown command 0
[  277.319744][ T7931] binder: 7928:7931 ioctl c0306201 2000000001c0 returned -22
[  280.923080][ T8004] device syzkaller0 entered promiscuous mode
[  281.161994][ T8015] device syzkaller0 entered promiscuous mode
[  281.526795][ T8035] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1024'.
[  281.652544][ T8039] netlink: 'syz.1.1025': attribute type 3 has an invalid length.
[  282.859420][ T8072] loop3: detected capacity change from 0 to 2048
[  283.735959][ T8072] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  283.744875][ T8072] UDF-fs: Scanning with blocksize 512 failed
[  283.778215][ T8072] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  284.240897][ T8087] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1042'.
[  284.632928][ T8095] device syzkaller0 entered promiscuous mode
[  286.029363][ T8108] configfs-gadget gadget: afunc_bind:1164 Error!
[  286.035989][ T8108] udc dummy_udc.0: failed to start g1: -19
[  286.265483][ T8120] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1053'.
[  286.285347][ T8122] netlink: 'syz.3.1054': attribute type 10 has an invalid length.
[  286.306069][ T8122] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  286.320372][ T8120] af_packet: tpacket_rcv: packet too big, clamped from 64521 to 3956. macoff=92
[  286.484586][ T8126] device bridge0 entered promiscuous mode
[  286.568784][ T8126] device vlan3 entered promiscuous mode
[  286.660241][ T8130] ip_tables: iptables: counters copy to user failed while replacing table
[  287.565709][ T8149] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1064'.
[  288.436843][ T8161] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  288.458413][ T8161] Cannot find map_set index 2 as target
[  289.600786][ T8185] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1075'.
[  290.860017][ T8185] batman_adv: batadv0: Interface deactivated: ip6gretap1
[  293.575701][ T2300] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  293.625541][ T8254] device syzkaller0 entered promiscuous mode
[  295.549162][ T2300] usb 3-1: device descriptor read/all, error -71
[  296.192361][ T8284] tipc: Failed to remove unknown binding: 66,1,1/0:455588011/455588013
[  296.518145][ T8300] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1106'.
[  296.539521][ T8300] unsupported nlmsg_type 40
[  297.147565][ T8316] netlink: 'syz.4.1109': attribute type 12 has an invalid length.
[  297.156179][ T8316] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1109'.
[  297.167926][ T8316] 8021q: adding VLAN 0 to HW filter on device bond0
[  297.295688][ T8320] device syzkaller0 entered promiscuous mode
[  298.129193][ T8338] netlink: 'syz.2.1117': attribute type 1 has an invalid length.
[  301.955781][ T8380] device syzkaller0 entered promiscuous mode
[  303.003278][ T8395] jffs2: notice: (8395) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  304.275578][ T8421] device syzkaller0 entered promiscuous mode
[  304.400162][ T8428] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1139'.
[  304.529174][ T8434] device syz_tun left promiscuous mode
[  304.596369][ T8430] md: could not open device unknown-block(1,0).
[  304.785999][ T8441] autofs4:pid:8441:autofs_fill_super: called with bogus options
[  310.814474][ T8490] loop3: detected capacity change from 0 to 128
[  311.768203][ T8490] ufs: ufstype=openstep is supported read-only
[  311.805787][ T8473] syz.2.1154 (8473): drop_caches: 2
[  311.832951][ T8490] ufs: this is not a 44bsd filesystem
[  311.868720][ T8508] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1159'.
[  311.896932][ T8510] ip_tables: iptables: counters copy to user failed while replacing table
[  311.938815][ T8508] loop0: detected capacity change from 0 to 512
[  312.053869][ T8508] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  312.066064][ T8508] EXT4-fs (loop0): orphan cleanup on readonly fs
[  312.085105][ T8508] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 24 vs 41 free clusters
[  312.109619][ T8508] Quota error (device loop0): write_blk: dquota write failed
[  312.118146][ T8508] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota
[  312.139187][ T8508] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.1159: Failed to acquire dquot type 0
[  312.164420][ T8508] EXT4-fs (loop0): 1 truncate cleaned up
[  312.177871][ T8508] EXT4-fs (loop0): mounted filesystem without journal. Opts: lazytime,noblock_validity,inode_readahead_blks=0x0000000000001000,barrier=0x0000000000000000,journal_dev=0x0000000000000005,dioread_lock,data_err=ignore,noinit_itable,resgid=0x000000000000ee002,errors=continue. Quota mode: writeback.
[  312.326570][ T8518] loop3: detected capacity change from 0 to 1764
[  312.354145][ T8520] overlayfs: failed to clone lowerpath
[  313.684090][ T8534] Cannot find map_set index 2 as target
[  313.761014][ T8538] Process accounting resumed
[  315.464839][ T8553] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  315.576549][ T8556] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  315.697592][ T8552] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  315.995510][ T8564] ip_tables: iptables: counters copy to user failed while replacing table
[  317.271850][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[  317.278218][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[  318.418079][ T8536] Set syz1 is full, maxelem 65536 reached
[  318.605765][ T8624] device syzkaller0 entered promiscuous mode
[  319.430570][ T8628] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1201'.
[  319.939235][ T4269] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  320.189143][ T4269] usb 3-1: Using ep0 maxpacket: 16
[  320.309484][ T4269] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  320.339165][ T4269] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  320.539407][ T4269] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  320.569820][ T4269] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  320.608922][ T4269] usb 3-1: Product: syz
[  320.639109][ T4269] usb 3-1: Manufacturer: syz
[  320.643783][ T4269] usb 3-1: SerialNumber: syz
[  321.049255][ T4269] usb 3-1: 0:2 : does not exist
[  321.762958][ T4269] usb 3-1: USB disconnect, device number 9
[  321.776093][ T8658] tipc: Failed to remove unknown binding: 66,1,1/2886997162:2632409246/2632409248
[  322.096709][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  324.021393][ T8690] loop0: detected capacity change from 0 to 1024
[  324.094790][ T8696] loop3: detected capacity change from 0 to 1024
[  324.115693][ T8690] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[  324.185838][ T8690] EXT4-fs (loop0): fragment/cluster size (16384) != block size (1024)
[  324.289616][ T8696] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[  324.561698][ T8696] EXT4-fs (loop3): barriers disabled
[  324.739138][ T8696] JBD2: no valid journal superblock found
[  324.745041][ T8696] EXT4-fs (loop3): error loading journal
[  324.863917][ T8702] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1226'.
[  325.109933][ T8710] tipc: Failed to remove unknown binding: 66,1,1/0:136583713/136583715
[  325.161140][ T8715] md: could not open device unknown-block(1,0).
[  326.785175][ T8741] loop3: detected capacity change from 0 to 512
[  327.635853][ T8741] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  327.678350][ T8741] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  327.769359][ T8741] EXT4-fs (loop3): 1 truncate cleaned up
[  327.785477][ T8741] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,dioread_nolock,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,bsdgroups,grpjquota=,,errors=continue. Quota mode: none.
[  327.868639][ T8741] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: comm syz.3.1238: inode #4294967040: comm syz.3.1238: iget: illegal inode #
[  328.338071][ T8741] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.1238: error while reading EA inode 4294967040 err=-117
[  328.865034][ T8741] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2812: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  330.690058][ T8769] 
[  330.692502][ T8769] ======================================================
[  330.699550][ T8769] WARNING: possible circular locking dependency detected
[  330.706618][ T8769] syzkaller #0 Not tainted
[  330.711064][ T8769] ------------------------------------------------------
[  330.718123][ T8769] syz.2.1259/8769 is trying to acquire lock:
[  330.724133][ T8769] ffff888028528478 (&hdev->lock){+.+.}-{3:3}, at: l2cap_chan_connect+0xfb/0xe20
[  330.733242][ T8769] 
[  330.733242][ T8769] but task is already holding lock:
[  330.740638][ T8769] ffffffff8d5b37c8 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_dlc_open+0x99/0x10c0
[  330.749659][ T8769] 
[  330.749659][ T8769] which lock already depends on the new lock.
[  330.749659][ T8769] 
[  330.760092][ T8769] 
[  330.760092][ T8769] the existing dependency chain (in reverse order) is:
[  330.769139][ T8769] 
[  330.769139][ T8769] -> #2 (rfcomm_mutex){+.+.}-{3:3}:
[  330.776592][ T8769]        __mutex_lock_common+0x1e5/0x2400
[  330.782381][ T8769]        mutex_lock_nested+0x17/0x20
[  330.787733][ T8769]        rfcomm_security_cfm+0x95/0x780
[  330.793341][ T8769]        hci_auth_complete_evt+0x388/0xbb0
[  330.799192][ T8769]        hci_event_packet+0x701/0x1310
[  330.804716][ T8769]        hci_rx_work+0x255/0xa10
[  330.809697][ T8769]        process_one_work+0x867/0xff0
[  330.815114][ T8769]        worker_thread+0xad7/0x12a0
[  330.820360][ T8769]        kthread+0x42e/0x520
[  330.824991][ T8769]        ret_from_fork+0x1f/0x30
[  330.829970][ T8769] 
[  330.829970][ T8769] -> #1 (hci_cb_list_lock){+.+.}-{3:3}:
[  330.837741][ T8769]        __mutex_lock_common+0x1e5/0x2400
[  330.843527][ T8769]        mutex_lock_nested+0x17/0x20
[  330.849026][ T8769]        hci_remote_features_evt+0x5d9/0xa10
[  330.855045][ T8769]        hci_event_packet+0x600/0x1310
[  330.860544][ T8769]        hci_rx_work+0x255/0xa10
[  330.865537][ T8769]        process_one_work+0x867/0xff0
[  330.870947][ T8769]        worker_thread+0xad7/0x12a0
[  330.876189][ T8769]        kthread+0x42e/0x520
[  330.880822][ T8769]        ret_from_fork+0x1f/0x30
[  330.885813][ T8769] 
[  330.885813][ T8769] -> #0 (&hdev->lock){+.+.}-{3:3}:
[  330.893166][ T8769]        __lock_acquire+0x2c66/0x7b50
[  330.898588][ T8769]        lock_acquire+0x19e/0x400
[  330.903660][ T8769]        __mutex_lock_common+0x1e5/0x2400
[  330.909419][ T8769]        mutex_lock_nested+0x17/0x20
[  330.914742][ T8769]        l2cap_chan_connect+0xfb/0xe20
[  330.920253][ T8769]        l2cap_sock_connect+0x5a3/0x770
[  330.925840][ T8769]        kernel_connect+0x11c/0x180
[  330.931082][ T8769]        rfcomm_dlc_open+0x600/0x10c0
[  330.936495][ T8769]        rfcomm_sock_connect+0x2e9/0x600
[  330.942162][ T8769]        __sys_connect+0x3cb/0x450
[  330.947745][ T8769]        __x64_sys_connect+0x76/0x80
[  330.953074][ T8769]        do_syscall_64+0x4c/0xa0
[  330.958059][ T8769]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  330.964512][ T8769] 
[  330.964512][ T8769] other info that might help us debug this:
[  330.964512][ T8769] 
[  330.974770][ T8769] Chain exists of:
[  330.974770][ T8769]   &hdev->lock --> hci_cb_list_lock --> rfcomm_mutex
[  330.974770][ T8769] 
[  330.987512][ T8769]  Possible unsafe locking scenario:
[  330.987512][ T8769] 
[  330.994996][ T8769]        CPU0                    CPU1
[  331.000477][ T8769]        ----                    ----
[  331.005957][ T8769]   lock(rfcomm_mutex);
[  331.010263][ T8769]                                lock(hci_cb_list_lock);
[  331.017322][ T8769]                                lock(rfcomm_mutex);
[  331.024049][ T8769]   lock(&hdev->lock);
[  331.028275][ T8769] 
[  331.028275][ T8769]  *** DEADLOCK ***
[  331.028275][ T8769] 
[  331.036588][ T8769] 1 lock held by syz.2.1259/8769:
[  331.041648][ T8769]  #0: ffffffff8d5b37c8 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_dlc_open+0x99/0x10c0
[  331.051114][ T8769] 
[  331.051114][ T8769] stack backtrace:
[  331.057032][ T8769] CPU: 1 PID: 8769 Comm: syz.2.1259 Not tainted syzkaller #0
[  331.064443][ T8769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  331.074544][ T8769] Call Trace:
[  331.077873][ T8769]  <TASK>
[  331.080838][ T8769]  dump_stack_lvl+0x188/0x250
[  331.085571][ T8769]  ? load_image+0x410/0x410
[  331.090123][ T8769]  ? show_regs_print_info+0x20/0x20
[  331.095366][ T8769]  ? print_circular_bug+0x12b/0x1a0
[  331.100824][ T8769]  check_noncircular+0x296/0x330
[  331.105844][ T8769]  ? add_chain_block+0x9b0/0x9b0
[  331.110801][ T8769]  ? lockdep_lock+0xf1/0x1f0
[  331.115414][ T8769]  ? mark_lock+0x94/0x320
[  331.119759][ T8769]  ? _find_first_zero_bit+0xd1/0xf0
[  331.125001][ T8769]  __lock_acquire+0x2c66/0x7b50
[  331.129913][ T8769]  ? finish_lock_switch+0x12d/0x290
[  331.135155][ T8769]  ? finish_task_switch+0x1e4/0x650
[  331.140413][ T8769]  ? verify_lock_unused+0x140/0x140
[  331.145663][ T8769]  ? __schedule+0x11cb/0x4350
[  331.150405][ T8769]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  331.156445][ T8769]  lock_acquire+0x19e/0x400
[  331.161068][ T8769]  ? l2cap_chan_connect+0xfb/0xe20
[  331.166227][ T8769]  ? __might_sleep+0xf0/0xf0
[  331.170923][ T8769]  ? read_lock_is_recursive+0x10/0x10
[  331.176329][ T8769]  ? preempt_schedule+0xbc/0xd0
[  331.181209][ T8769]  ? preempt_schedule_common+0xa5/0xd0
[  331.186746][ T8769]  __mutex_lock_common+0x1e5/0x2400
[  331.192009][ T8769]  ? l2cap_chan_connect+0xfb/0xe20
[  331.197161][ T8769]  ? preempt_schedule_thunk+0x16/0x18
[  331.202647][ T8769]  ? l2cap_chan_connect+0xfb/0xe20
[  331.207798][ T8769]  ? _raw_read_unlock+0x36/0x40
[  331.212662][ T8769]  ? mutex_lock_io_nested+0x60/0x60
[  331.217892][ T8769]  ? mark_lock+0x94/0x320
[  331.222242][ T8769]  mutex_lock_nested+0x17/0x20
[  331.227045][ T8769]  l2cap_chan_connect+0xfb/0xe20
[  331.231996][ T8769]  ? asm_sysvec_reschedule_ipi+0x16/0x20
[  331.237663][ T8769]  ? l2cap_chan_busy+0x90/0x90
[  331.242475][ T8769]  ? l2cap_sock_connect+0x559/0x770
[  331.247750][ T8769]  l2cap_sock_connect+0x5a3/0x770
[  331.252839][ T8769]  ? do_syscall_64+0x4c/0xa0
[  331.257463][ T8769]  ? entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  331.263551][ T8769]  ? l2cap_sock_bind+0x870/0x870
[  331.268529][ T8769]  ? kernel_connect+0xd2/0x180
[  331.273312][ T8769]  kernel_connect+0x11c/0x180
[  331.278002][ T8769]  ? kernel_accept+0x420/0x420
[  331.282790][ T8769]  ? rfcomm_dlc_open+0x5c4/0x10c0
[  331.287873][ T8769]  rfcomm_dlc_open+0x600/0x10c0
[  331.292740][ T8769]  ? lockdep_hardirqs_on_prepare+0x7c0/0x7c0
[  331.298767][ T8769]  ? rfcomm_dlc_free+0x40/0x40
[  331.303555][ T8769]  ? __local_bh_enable_ip+0x147/0x1c0
[  331.308999][ T8769]  ? _local_bh_enable+0xa0/0xa0
[  331.313921][ T8769]  ? do_raw_spin_unlock+0x11d/0x230
[  331.319146][ T8769]  rfcomm_sock_connect+0x2e9/0x600
[  331.324307][ T8769]  ? rfcomm_sock_bind+0x550/0x550
[  331.329353][ T8769]  __sys_connect+0x3cb/0x450
[  331.334123][ T8769]  ? __sys_connect_file+0x170/0x170
[  331.339348][ T8769]  __x64_sys_connect+0x76/0x80
[  331.344250][ T8769]  do_syscall_64+0x4c/0xa0
[  331.348733][ T8769]  ? clear_bhb_loop+0x30/0x80
[  331.353436][ T8769]  ? clear_bhb_loop+0x30/0x80
[  331.358133][ T8769]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  331.364045][ T8769] RIP: 0033:0x7f3562d1e159
[  331.368470][ T8769] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  331.388180][ T8769] RSP: 002b:00007f3560f55028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  331.396606][ T8769] RAX: ffffffffffffffda RBX: 00007f3562fa6090 RCX: 00007f3562d1e159
[  331.404596][ T8769] RDX: 0000000000000014 RSI: 0000200000000200 RDI: 0000000000000008
[  331.412623][ T8769] RBP: 00007f3562db506b R08: 0000000000000000 R09: 0000000000000000
[  331.420651][ T8769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  331.428688][ T8769] R13: 00007f3562fa6128 R14: 00007f3562fa6090 R15: 00007ffe5bea7468
[  331.436687][ T8769]  </TASK>
[  332.619707][ T8776] loop0: detected capacity change from 0 to 2048
[  332.710013][ T8776] UDF-fs: bad mount option "00000000000000000000" or missing value
[  332.810515][ T8785] loop0: detected capacity change from 0 to 1024
[  332.827290][ T8785] hfsplus: unable to parse mount options
[  332.836267][ T8785] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1249'.
[  333.519253][ T1325] Bluetooth: hci4: command 0x0405 tx timeout