last executing test programs:

5.399638652s ago: executing program 1 (id=1135):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002480)=@newtfilter={0x8ac, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x878, 0x2, [@TCA_U32_POLICE={0x850, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x80000, 0x3, 0xf, 0xfdb, 0x1, 0x80, 0x7, 0x7, 0x40000000, 0xaa04, 0x80000001, 0x99, 0x8000, 0x1000, 0x3, 0x0, 0x7fffffff, 0x80, 0x1, 0x7, 0x0, 0x9, 0x4, 0x5, 0x80000001, 0x2, 0xe0, 0x9, 0x1, 0x80000000, 0x1, 0xffff8001, 0x9, 0x10001, 0x7, 0x10000, 0x30, 0x803, 0x1000, 0xfff, 0x7, 0x2, 0x5, 0x48a, 0x4, 0x1000, 0x7, 0x7198, 0x8, 0x80000001, 0x20001, 0x101, 0x3, 0x7, 0x2, 0x8, 0x10001, 0x2, 0xffffffff, 0x0, 0x6, 0x9, 0x13, 0x2, 0xffff, 0x80, 0xbf77, 0x8, 0xc52, 0x6, 0x9, 0x7, 0x9, 0x5, 0x8, 0x3, 0x8, 0x6, 0x5, 0x1, 0x3, 0x7fffffff, 0x8, 0x2845, 0x2, 0xe9, 0x2a, 0x3, 0x891, 0x8, 0x1, 0x12, 0x6, 0xfff, 0xbfffc9b5, 0x4, 0x2, 0x6, 0x6, 0xaa, 0x0, 0x8, 0x0, 0x0, 0x5, 0x1, 0x2, 0x40, 0x4, 0x7, 0xa, 0x8000, 0x4, 0xffffff2d, 0x0, 0xffff7fff, 0x2, 0x3, 0xffffffa7, 0xebb, 0x8, 0xfcb, 0x8, 0x1, 0x9, 0x6fe68a84, 0x200, 0x1, 0xfffffff9, 0xb, 0x1, 0xab, 0x9, 0x7, 0x0, 0xe, 0x10001, 0x8, 0xa, 0x6, 0x0, 0xa1, 0x4, 0xffff519d, 0x9, 0x4, 0x202, 0x3, 0x1, 0x2, 0x9, 0x4ae, 0x8, 0x1e9, 0x9, 0x181, 0x200, 0x4, 0x4, 0x1, 0x5, 0x5, 0x7, 0x5, 0x400, 0x7, 0x80, 0x2, 0x2, 0x1, 0x5, 0x101, 0x7, 0x4, 0x6, 0x7e32, 0x8800, 0x4, 0xf85f, 0x10003, 0x800, 0xffffffff, 0x3, 0x4af, 0x7e21, 0x1, 0x5027, 0x8, 0x10000, 0x4, 0x3, 0x7, 0x680, 0xc1, 0x2, 0x7, 0x8, 0x4, 0x74dc, 0x400000, 0x3fd, 0x92c, 0xffff32d2, 0x4, 0xafcf, 0x7f, 0x5, 0x5, 0x0, 0x8, 0x200, 0x4a, 0x4000, 0x0, 0x9, 0x10000, 0x4d4fbb35, 0xb2, 0x4, 0x5, 0x0, 0x100, 0x8001, 0x6, 0xfffffff8, 0x9, 0x2, 0x7f, 0x2, 0xc, 0xe, 0x94, 0x3b0, 0x401, 0x118966c9, 0xe56, 0x8, 0x4, 0x1800000, 0x6a, 0x9d5, 0x200, 0x2, 0x40, 0x7, 0x8000, 0x7e, 0x84, 0x5, 0x7, 0x4, 0x3, 0xff, 0xe, 0x4, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x1, 0x5, 0x53e5, 0x7f, 0x4, 0x3000000, 0x0, 0xf0000000, 0x3, 0xfff, 0xe, 0x7, 0xf6, 0x1fc, 0xffffffff, 0x800001, 0xfffffff8, 0x8001, 0x103, 0x3, 0xfff, 0x80, 0x1, 0x5, 0xffff, 0x6, 0x1, 0x7, 0x9, 0x2, 0x0, 0x5, 0xe184, 0x4, 0x1, 0xadd, 0x1, 0x16, 0x4, 0xa35c, 0xc, 0x80, 0xff, 0x6, 0x2, 0xd, 0x4, 0x4003, 0x5, 0x4, 0x401, 0x4, 0x4, 0x6, 0x3, 0x8, 0xfffffffc, 0x3, 0xc1, 0x2, 0xffff, 0x80, 0xfffffff1, 0x7ff, 0x9, 0x7ff, 0x2, 0x6, 0x200080, 0x200, 0x1000, 0xb11a, 0x0, 0x5, 0x8, 0xf49d, 0x5, 0x3361, 0x435, 0x7fffffff, 0x2, 0x6, 0xc4, 0x9, 0x0, 0xee2, 0x2, 0x401, 0xfffffffa, 0x8004, 0x2, 0x0, 0x5, 0x5dd3c81c, 0xffffffff, 0x7, 0x3, 0x81, 0x9, 0x5, 0xfffffffc, 0x2, 0x1, 0x8, 0x6, 0x0, 0x6, 0xc, 0x8, 0x6, 0x100, 0x1, 0xb5a, 0xa, 0x2, 0x18, 0x8, 0x31, 0x1ff, 0x4, 0x9, 0x400, 0x2, 0x6, 0x7, 0x9, 0x91e7, 0x5, 0x7, 0x81eb, 0x400, 0xffff, 0x9, 0x9, 0x6, 0x7, 0x6, 0xea, 0x3, 0x9, 0x4, 0x3, 0x7, 0x0, 0x8, 0x1, 0xbf0, 0x7, 0x7, 0x0, 0x7, 0x6, 0x3, 0x9, 0x0, 0x9c4, 0x7fff, 0x7, 0x800, 0x5, 0x9, 0x10001, 0x4, 0x2a64aeea, 0x0, 0x5, 0x2, 0x1, 0xf, 0x1ff, 0x400, 0x3, 0x3ff, 0x80007, 0x39, 0x0, 0x8, 0xffffffff, 0x0, 0x8, 0x6, 0x9, 0x2, 0x2, 0x401, 0x9, 0x800, 0x9, 0xeb, 0x8, 0x6ed, 0x5, 0x2004, 0x4c3e, 0x1ff, 0x381, 0x4282, 0x4, 0x7, 0x1, 0x4, 0xfffffff7, 0x5, 0x7, 0x0, 0x46, 0x9, 0x3, 0xe, 0x6, 0x9, 0x4, 0x1, 0x4, 0xfffeffff, 0xe, 0x3ff, 0x80000000, 0x7, 0x80, 0x7, 0x42b, 0x7, 0x7, 0xfff, 0x5, 0x8, 0xffffffff, 0xffff671f, 0x7, 0x4, 0x80, 0x6, 0x4, 0xd, 0x1, 0xff, 0x2, 0x5be228d5, 0x2, 0x0, 0x8, 0xaff0, 0x8021, 0x3, 0x1, 0x7, 0x0, 0x51e, 0x2, 0x6, 0x4, 0xfffffffc, 0xd97, 0xa8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x4, 0x6, 0x0, {0x7, 0x2, 0x3, 0x4, 0x4, 0x8}, {0x6, 0x1, 0x9, 0xe23, 0x100, 0x5}, 0x7, 0x99, 0xef2}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xadd1}]}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0x8ac}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040084)

5.300043745s ago: executing program 0 (id=1136):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1)
getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000390400000000fbdbdf2500000000", @ANYRES32=r2, @ANYBLOB="01990000419a04002800128008000100736974001c00028008000300ac1414bb0500040000"], 0x48}, 0x1, 0x0, 0x0, 0x20060094}, 0x0)
sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @local}, 0x14)

5.136296899s ago: executing program 1 (id=1138):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r1 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
socket(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@rand_addr=0x64010100, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {0x0, 0x0, 0xfffffffffffffff7, 0x4}, 0x0, 0x6e6bb9, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0xfffffffc, 0x6c}, 0x0, @in6=@empty, 0xfffffffc, 0x0, 0x2, 0x7, 0x200}}, 0xe8)
sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0)

4.789696787s ago: executing program 0 (id=1140):
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
io_setup(0x8, &(0x7f0000000600))
syz_emit_ethernet(0x82, 0x0, 0x0)
r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x48}}, 0x0)
bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=ANY=[@ANYBLOB="02181207350000002bbd7000fcdbdf25030005003320000002004e23000000000000000000000000020013000000000025bd700000350000020013000700000025bd70000735000005000700338000000a004e2000000002ff01000000000000000000000000000101000080000000001e0008000807000094386da3389c697f1872e9cbc70af68e4b7fd50ad6d718772c84bc3694d09254296a78446df6ef556e8237df5bd0c4bd55775324487c7683f87ff13b4edb9019d61b31333e54fd6fc7c2d6b566f928342a3fe8f671c0756766e8148ffaa4cd7ab5efe7da029766f6d811466e860dd5b928ee2b03e39caf9255968cb1d034ecffa386857bd2fca2a0ac28191afcb71da076c5387259b4e78c360ba372c76a1ef658b70eb053294cd365e32e86d81f2fc0b7132870b86ac88708f5fff5ae173f33ba491ba97cc4541af267cc24d139864953a5c41b4e4b60b38dcb1ebf032999cbe3000000000000000700080068010000215263e40e2549a94c632f1001a79a5df576e3e37fcc03bb3c79b1e3d0507f8c5bf72a12c89f5bafc28b18f6e900000002001000000004d6000004d200000000"], 0x1a8}}, 0x8000)
r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r6 = dup3(r5, r4, 0x0)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x2000000)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000440)='B'})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xf0ff, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000340)={@fd={0x66642a85, 0x0, r4}, @fd={0x66642a85, 0x0, r7}, @fd={0x66642a85, 0x0, r4}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}, 0x440}], 0x0, 0x0, 0x0})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380))
sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0x74, 0x0, 0x0, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6c}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x180000}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4f}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x20004001}, 0x200000d4)
write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a)
sendfile(r0, r2, 0x0, 0xffffffff000)

3.669998523s ago: executing program 1 (id=1144):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0xfffff, [{0xfffffffd, 0x1}, {0x10, 0x4}]}]}}, &(0x7f0000001f00)=""/4096, 0x36, 0x1000, 0x1}, 0x28)

3.507064617s ago: executing program 1 (id=1146):
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
r0 = syz_open_dev$cec(0x0, 0x0, 0x103000)
r1 = epoll_create1(0x80000)
syz_clone3(&(0x7f0000000540)={0x901400, &(0x7f0000000040)=<r2=>0xffffffffffffffff, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x200f})
ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0x9, 0x6, 0x4d, 0x3, 0x1ff, "2179d46fd08e3c0ced34c7b4c7e6d7", "7ca24a13", '\x00', "94a200", ["060300000000000000001000", "bed0f3d6ce7a5f7389827f04", "0022010400000000fbea00", "0000001b00"]})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0)
r3 = syz_open_dev$video4linux(&(0x7f00000002c0), 0x10000, 0x0)
ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r3, 0xc0305616, &(0x7f0000000240))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
syz_clone3(&(0x7f00000005c0)={0x1a000200, 0x0, 0x0, 0x0, {0x34}, &(0x7f0000000400)=""/27, 0x1b, 0x0, &(0x7f0000000580)}, 0x58)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00d091615d00"/28], 0x50)

2.899471411s ago: executing program 0 (id=1152):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40940, 0x0)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x2)
r1 = epoll_create(0x200)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0xa0000019})
ppoll(&(0x7f0000000dc0), 0x0, &(0x7f0000000e40)={0x0, 0x3938700}, 0x0, 0x0)

2.880119692s ago: executing program 4 (id=1153):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
syz_io_uring_setup(0x867, &(0x7f0000000140)={0x0, 0x9164, 0x1000, 0x1, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000), &(0x7f0000000000))
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0)
r2 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=<r3=>0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4)
sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r5, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}}, 0x0)
read$nci(r2, &(0x7f0000000200)=""/100, 0x64)
write$nci(r2, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6)
read$nci(r2, &(0x7f00000002c0)=""/100, 0x64)
write$nci(r2, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14)
read$nci(r2, &(0x7f0000000380)=""/100, 0x64)
write$nci(r2, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4)
sendmsg$NFC_CMD_START_POLL(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r5, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0)
read$nci(r2, &(0x7f0000000500)=""/100, 0x64)
read$nci(r2, &(0x7f00000005c0)=""/100, 0x64)
write$nci(r2, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5)
read$nci(r2, &(0x7f0000000680)=""/100, 0x64)
write$nci(r2, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4)

2.53035783s ago: executing program 2 (id=1155):
r0 = socket(0x1e, 0x1, 0x0)
write$binfmt_misc(r0, 0x0, 0x0)

2.462468392s ago: executing program 3 (id=1156):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0xfffff, [{0xfffffffd, 0x1}, {0x10, 0x4}]}]}}, &(0x7f0000001f00)=""/4096, 0x36, 0x1000, 0x1}, 0x28)

2.266749626s ago: executing program 2 (id=1157):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000680)="4137a29b582bd471798f15f967e7f8118e1abf61ebd7d146a12a42f6ffd2340daaa8dcf6da818cc0efac75e8c35abbde7a18e0226b424f5557c71db5d327baccef203377178ddb12221cdaf45711a2535ae87e6ab62ecba71b6f2ac0f6c9ead0ec52116d305204537900daaad0d6e4dd9d3ad654711b72964f28b8b5d231d709bf3cd4a0477ef446e7da5eaa15cc39e9c57d89217e33a93e080000000000000086448a8e871cf560229a3cc36317ac47bae1596458badc9ebde2c707dea2e18f859e20f7595cce0a88485e5223b2c8fc38", 0xd1}], 0x1}}], 0x1, 0x0)

2.265678176s ago: executing program 3 (id=1158):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x8, &(0x7f00000000c0)={[{@lazytime}, {@nouid32}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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")
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
open(&(0x7f0000000140)='.\x00', 0x8000, 0x112)
unlinkat(r0, &(0x7f0000000780)='./file0\x00', 0x200)

2.164126259s ago: executing program 0 (id=1159):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001a40)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xa}, {0x0, 0xfff3}, {0xb, 0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x10, 0x4, 0x0, 0x9, 0x3, 0xfffa, 0x6, 0x7}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)

2.008541732s ago: executing program 0 (id=1160):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000002540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94)

1.944083234s ago: executing program 2 (id=1161):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x5}, 0x8)
sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f00000002c0)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000891)
sendmsg$inet_sctp(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000480)="87", 0x1}], 0x1, 0x0, 0x0, 0x80}, 0x4048000)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB='\v'], 0xa)

1.807819927s ago: executing program 0 (id=1162):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000440)='./file0\x00', 0x300000a, &(0x7f0000000740)={[{@nodatacow}, {@datasum}, {@nodiscard}, {@clear_cache}, {@ssd_spread}, {@discard_sync}, {@treelog}, {@thread_pool={'thread_pool', 0x3d, 0x8}}, {@flushoncommit}, {@ssd_spread}, {@ssd_spread}, {@nossd}]}, 0x3, 0x55a3, &(0x7f000000e0c0)="$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")
r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
ioctl$FITRIM(r1, 0xc4009420, &(0x7f0000000180)={0x5, 0x10000})
pwrite64(0xffffffffffffffff, &(0x7f0000000c00), 0x0, 0x0)
r2 = creat(&(0x7f0000000380)='./bus\x00', 0x130)
io_setup(0x202, &(0x7f0000000200)=<r3=>0x0)
sendmsg$SOCK_DESTROY(r2, &(0x7f0000001000)={&(0x7f0000000080), 0xc, &(0x7f0000000fc0)={&(0x7f0000000b40)={0x3bc, 0x15, 0x100, 0x70bd2b, 0x25dfdbff, {0x1f, 0x6}, [@INET_DIAG_REQ_BYTECODE={0xe, 0x1, "b3bd222a3f1bd23646a5"}, @INET_DIAG_REQ_BYTECODE={0xc6, 0x1, "7d2d8b077e8ddf7d50a7ee33e3b7c46b55b3d922a5229e2964234a88f07014f06a5e0f0ecd7aa2e359b9c2d059463762e00381bc7f98783e0a5667b657603de119c00a143baed3353cfda17ec61d4f429992a53ccb4eef3dc534a98233e5c84a2ab7523854f69929ea123325243b6e1de1a07f098e7e9a5042f04eeb07d96839d63407b3fc3c1ed45dd68611cee7ef26a122db55b91f97abdcf2db402796f44fdd0eb50bca870517c47b715c4c1b5e6f4083c5a58d0b3df4675e4ccfe5223b242b90"}, @INET_DIAG_REQ_BYTECODE={0x18, 0x1, "46169b8a407aab0dd2d93c128df495dcfae76fb9"}, @INET_DIAG_REQ_BYTECODE={0xd7, 0x1, "082de8ec154ce2e570249fefb48b7695540fc177049edbb7b7f30536420caf2aa2d39584bc016f11f2c1731499db3a3b21d45b0e162e32c61ea42880f07077646a8fddf148d626d5eb89226ee2feebcf352494de9ea90abe1eb358507f52f30cadb99797b3a8269c76fb3275b1f8f4b7c9ab49255ef9851f70598f2b35c7672ba0bdee5bbb6af2aca5549d501a8282a61aa0a6136f33bda79417a927171b82876d4a64ae4c0e0b85bb0658a716e9b6982c9698e896f9c79927381cf729c85add786c635bf4dd0ef2f29f2ea7e954ea78fb54be"}, @INET_DIAG_REQ_BYTECODE={0x3f, 0x1, "c881c7daeecd59fa148d42869fe4d56207b7f62f0cc374f49967935d311d5eac417fadcf0ab230ce580eb55ce7ff0efb7b4bd336bf8da8c9e681fd"}, @INET_DIAG_REQ_BYTECODE={0xf2, 0x1, "979d871d8b20182b5db17c185b3ca321be1cfab2ac51970f15eba7a6e5cf5fba36dd0c4ae7feeba289a26252c6d778c4c842523fe140b3d56397a86aad5d3c87d4f97449135babfe8dfb9b43b12fdb55e7a46fba4912dec6765ab5152daa15b29d8ad33f2f3d393d7061146eeb65eb8f81c0e4d9cd4d5d586546a9fb5d82fae2f64420fe41dea6080f232b1f80ae50fb218f4a2971879669b7018ff03550ceacda327cd7b0a32e4deb7ee9d129ff63ef9975f698cf098d9a0b3e4b35f573e519f2504f5e5acb606d0e5aea1d051a11da81216f932c23a89465635949463086e86b81846bb829c943eab343c8c6f8"}, @INET_DIAG_REQ_BYTECODE={0x4a, 0x1, "814718435d3564536f73cf53f7a8ff7536f86597cba969800063c8ef3a7a83f8412b0fcdb7d447d0281cb3a7bf99d3b2a5b288d91cc4154a797a531bbba6eeff0b5a13847ec3"}, @INET_DIAG_REQ_BYTECODE={0x60, 0x1, "78931fcc724ab84cddb54de8f1c552df2ec18a92c946bf26c2bf2ede36de411aaeae843988fd3a99fe1abbe5b837de084a4537a1161668c2e7fae9600f1ed1ec00b762661cc3a159cfdaf7004242fd89734ac1f9d3e672c41cccc7d4"}]}, 0x3bc}, 0x1, 0x0, 0x0, 0x10840}, 0x14)
io_submit(r3, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x2, 0x1, 0xfff0, r2, &(0x7f0000000000), 0x100000}])
r4 = syz_open_dev$loop(&(0x7f0000000580), 0x0, 0x20200)
ioctl$LOOP_SET_STATUS(r4, 0x4c02, &(0x7f0000000240)={0x0, {}, 0x0, {}, 0x40000202, 0x4, 0x100005, 0x0, "9e959f16deab7b08aa26e66c4056a516950600000000000000eef4fb0efcc1d8a6078ed9d5f8643902dd8f6fac274de9d940ffa5e592bbd48685450d00002000", "f625c14dc8df6aa3a893ecf2a0c5f5f09163c400", [0xa, 0x3a]})
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, 0x0, 0x20000000)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, 0x0, &(0x7f0000001200)='syzkaller\x00'}, 0x94)
r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r5, 0xffffffffffffffff, 0x1, 0x0, @val=@iter={0x0}}, 0x40)
r7 = socket$packet(0x11, 0x3, 0x300)
r8 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'geneve0\x00', <r9=>0x0})
sendto$packet(r7, &(0x7f00000000c0)="f4416eb4e859495d589fefa788a8", 0xe, 0x0, &(0x7f0000002780)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @link_local}, 0x14)
socket$inet_udp(0x2, 0x2, 0x0)
r10 = socket$pppl2tp(0x18, 0x1, 0x1)
writev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000280)="4cf9bac429", 0x5}], 0x1)
io_pgetevents(r3, 0xb, 0x0, 0x0, 0x0, &(0x7f0000000900)={&(0x7f00000008c0)={[0x4]}, 0x8})
connect$pppl2tp(r10, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x3, 0x400000, 0x1, 0x2}}, 0x2e)
ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000000c0)=0x1)

1.754061358s ago: executing program 3 (id=1163):
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
io_setup(0x8, &(0x7f0000000600))
syz_emit_ethernet(0x82, 0x0, 0x0)
r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x48}}, 0x0)
bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1a8}}, 0x8000)
r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r6 = dup3(r5, r4, 0x0)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x2000000)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000440)='B'})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xf0ff, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000340)={@fd={0x66642a85, 0x0, r4}, @fd={0x66642a85, 0x0, r7}, @fd={0x66642a85, 0x0, r4}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}, 0x440}], 0x0, 0x0, 0x0})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380))
sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0x74, 0x0, 0x0, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6c}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x180000}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4f}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x20004001}, 0x200000d4)
write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a)
sendfile(r0, r2, 0x0, 0xffffffff000)

1.589930762s ago: executing program 2 (id=1164):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'vlan0\x00', 0x1000})
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x29)
write(r1, &(0x7f0000000000)='7', 0x1)
memfd_secret(0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
mount(&(0x7f0000000180)=@sg0, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', &(0x7f0000000240)='overlay\x00', 0xa00, &(0x7f0000000280)='++-[&*\'\xfe%*})\x00')
listen(r2, 0x10040)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x5, 0x0, 0x6}}}}}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='\x00', 0x89901)
mount_setattr(r4, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x200005, 0xd, 0x80000}, 0x20)
socket$nl_route(0x10, 0x3, 0x0)
socket(0xa, 0x3, 0x87)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
syz_emit_vhci(0x0, 0x7)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000340)=ANY=[@ANYRES32=r3], &(0x7f0000000380)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r5 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)

1.582775202s ago: executing program 4 (id=1165):
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f00000000c0)={0x3, 0x2, 0x6, 0x2, 0xa})

1.136019233s ago: executing program 4 (id=1166):
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
recvmmsg(r0, 0x0, 0x0, 0x2, 0x0)
r2 = socket$kcm(0x2b, 0x1, 0x0)
shutdown(r2, 0x1)
connect$pppoe(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, {0x1, @empty, 'ip_vti0\x00'}}, 0x1e)
connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x1, @multicast, 'ip6tnl0\x00'}}, 0x1e)
socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
syz_fuse_handle_req(r3, &(0x7f0000006300), 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x22110079, 0x1000, 0x0, 0x7fc, 0x58, 0x0, 0x0, 0x6, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2)
syz_fuse_handle_req(r3, &(0x7f0000004300)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x78, 0x0, 0x100000000, {0x20000, 0xcb7b, 0x0, {0x5, 0x0, 0x48b, 0xa, 0x400000000000004, 0xd, 0xfff7ffff, 0x6, 0x101, 0x4000, 0xffff1854, 0xffffffffffffffff, 0x0, 0x3, 0xf}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

759.579992ms ago: executing program 1 (id=1167):
r0 = epoll_create1(0x0)
r1 = socket$unix(0x1, 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000))
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xa0028000})

648.746514ms ago: executing program 4 (id=1168):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c0002403c00"], 0xdc}}, 0x0)

464.009839ms ago: executing program 4 (id=1169):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40940, 0x0)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x2)
r1 = epoll_create(0x200)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0xa0000019})
ppoll(&(0x7f0000000dc0), 0x0, &(0x7f0000000e40)={0x0, 0x3938700}, 0x0, 0x0)

463.762659ms ago: executing program 1 (id=1170):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x20000023896)
close(0x3)

433.4136ms ago: executing program 3 (id=1171):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000680)="4137a29b582bd471798f15f967e7f8118e1abf61ebd7d146a12a42f6ffd2340daaa8dcf6da818cc0efac75e8c35abbde7a18e0226b424f5557c71db5d327baccef203377178ddb12221cdaf45711a2535ae87e6ab62ecba71b6f2ac0f6c9ead0ec52116d305204537900daaad0d6e4dd9d3ad654711b72964f28b8b5d231d709bf3cd4a0477ef446e7da5eaa15cc39e9c57d89217e33a93e080000000000000086448a8e871cf560229a3cc36317ac47bae1596458badc9ebde2c707dea2e18f859e20f7595cce0a88485e5223b2c8fc38", 0xd1}], 0x1}}], 0x1, 0x0)

255.640084ms ago: executing program 2 (id=1172):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000002540)=ANY=[@ANYBLOB="611534000000000061134c0000000000bfa000000000000007000000080000002d0301000000000095000000000000006916000000000000bf670000000000003506070038fc1f806706000002000000160300000ee60060bf050000000000000f650000000000006507f9ff01000000070700004ddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f674629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5480a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f815f8989d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0453bedf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a57ff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee15620789c524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b4dc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca87ddd9d064e081383409ed2912c811ae63f03212a5331c2a4ead000000000000000000005574d074fa7e93447a88c0fbab48660aae"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94)

202.844335ms ago: executing program 4 (id=1173):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)=<r1=>0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r2)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4db}, 0x94)
write$nci(r0, &(0x7f0000000300)=@NCI_OP_CORE_INIT_RSP={0x0, 0x0, 0x2, 0x1, 0x11}, 0x14)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000200)={0x0, 0x20000, 0x800, 0x8}, 0x20)
read$nci(r0, &(0x7f0000000200), 0x100)
write$nci(r0, &(0x7f0000000300)=@NCI_OP_RF_DISCOVER_MAP_RSP={0x1, 0x0, 0x2, 0x0, 0x1}, 0x4)
sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0)
write$nci(r0, &(0x7f0000000300)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x2}, 0x5)
write$nci(r0, &(0x7f0000000380)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x2, {0x1, 0x7, 0x0, 0x3}}, 0x7)

198.028505ms ago: executing program 3 (id=1174):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180), 0x0)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x5}, 0x8)
sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f00000002c0)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000891)
sendmsg$inet_sctp(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000480)="87", 0x1}], 0x1, 0x0, 0x0, 0x80}, 0x4048000)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB='\v'], 0xa)

54.734958ms ago: executing program 2 (id=1175):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
syz_io_uring_setup(0x867, &(0x7f0000000140)={0x0, 0x9164, 0x1000, 0x1, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000), &(0x7f0000000000))
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0)
r2 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=<r3=>0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4)
sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r5, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}}, 0x0)
read$nci(r2, &(0x7f0000000200)=""/100, 0x64)
write$nci(r2, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6)
read$nci(r2, &(0x7f00000002c0)=""/100, 0x64)
write$nci(r2, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14)
read$nci(r2, &(0x7f0000000380)=""/100, 0x64)
write$nci(r2, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4)
sendmsg$NFC_CMD_START_POLL(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r5, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0)
read$nci(r2, &(0x7f0000000500)=""/100, 0x64)
read$nci(r2, &(0x7f00000005c0)=""/100, 0x64)
write$nci(r2, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5)
read$nci(r2, &(0x7f0000000680)=""/100, 0x64)
write$nci(r2, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4)

0s ago: executing program 3 (id=1176):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x304000, 0x800, 0x0, 0x3}, 0x20)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x6101})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2901, 0x0)
close(r3)
socket$can_raw(0x1d, 0x3, 0x1)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local})
write$tun(r1, &(0x7f00000001c0)=ANY=[], 0xc2)
sched_setscheduler(0x0, 0x2, 0x0)
write$tun(r1, &(0x7f00000001c0)=ANY=[], 0x16)

kernel console output (not intermixed with test programs):

cuous mode
[  155.985080][  T127] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  156.176141][ T5299] Invalid ELF header magic: != ELF
[  156.181304][  T127] usb 3-1: unable to get BOS descriptor or descriptor too short
[  156.201693][  T127] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  156.227723][  T127] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  156.240423][  T127] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  156.273875][  T127] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  156.295935][  T127] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  156.308712][  T127] usb 3-1: Product: syz
[  156.313016][  T127] usb 3-1: Manufacturer: syz
[  156.318960][  T127] usb 3-1: SerialNumber: syz
[  158.620878][ T5312] netlink: 'syz.1.272': attribute type 10 has an invalid length.
[  158.671849][ T5319] netlink: 'syz.4.273': attribute type 10 has an invalid length.
[  159.808244][  T127] snd-usb-audio: probe of 3-1:1.0 failed with error -22
[  159.818890][  T127] usb 3-1: USB disconnect, device number 2
[  159.871856][ T4319] snd-usb-audio: probe of 4-1:1.0 failed with error -22
[  159.895378][ T4319] usb 4-1: USB disconnect, device number 3
[  160.117195][ T5028] udevd[5028]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  160.955301][ T5340] netlink: 4 bytes leftover after parsing attributes in process `syz.2.281'.
[  161.005368][ T4266] udevd[4266]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  161.081641][ T5345] misc userio: Invalid payload size
[  161.094928][ T5345] misc userio: Invalid payload size
[  161.109458][ T5345] misc userio: Invalid payload size
[  161.234868][ T5349] Invalid ELF header magic: != ELF
[  161.356036][ T5355] netlink: 'syz.4.284': attribute type 10 has an invalid length.
[  161.500998][ T5357] device syzkaller0 entered promiscuous mode
[  162.254811][ T4378] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  162.966545][ T4378] usb 2-1: unable to get BOS descriptor or descriptor too short
[  162.983181][ T4378] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  162.993426][ T4378] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  163.002982][ T4378] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  163.033172][ T4378] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  163.047378][ T4378] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  163.058570][ T4378] usb 2-1: Product: syz
[  163.062776][ T4378] usb 2-1: Manufacturer: syz
[  163.070022][ T4378] usb 2-1: SerialNumber: syz
[  165.238944][ T5360] netlink: 'syz.4.286': attribute type 10 has an invalid length.
[  165.541331][ T4378] snd-usb-audio: probe of 2-1:1.0 failed with error -22
[  165.582945][ T5352] udevd[5352]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  165.600954][ T4378] usb 2-1: USB disconnect, device number 4
[  165.611564][ T5394] netlink: 'syz.3.296': attribute type 10 has an invalid length.
[  165.701301][ T5394] team0 (unregistering): Port device team_slave_0 removed
[  165.776925][ T5394] team0 (unregistering): Port device team_slave_1 removed
[  166.019633][ T5400] Invalid ELF header magic: != ELF
[  166.268649][ T5406] misc userio: Invalid payload size
[  166.305056][ T5406] misc userio: Invalid payload size
[  166.324706][ T5406] misc userio: Invalid payload size
[  166.599261][    C0] IPv4: Oversized IP packet from 172.20.20.24
[  166.811809][ T5421] Invalid ELF header magic: != ELF
[  168.304380][ T5425] device syzkaller0 entered promiscuous mode
[  169.615366][  T127] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  169.830052][  T127] usb 5-1: unable to get BOS descriptor or descriptor too short
[  169.851786][  T127] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  169.867587][  T127] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  169.878388][  T127] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  169.926363][  T127] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  169.943830][  T127] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  169.962455][  T127] usb 5-1: Product: syz
[  169.983529][  T127] usb 5-1: Manufacturer: syz
[  169.997052][  T127] usb 5-1: SerialNumber: syz
[  171.425508][ T5468] Invalid ELF header magic: != ELF
[  171.793971][ T5438] netlink: 'syz.0.305': attribute type 10 has an invalid length.
[  171.907899][ T5438] team0 (unregistering): Port device team_slave_0 removed
[  171.950047][ T5438] team0 (unregistering): Port device team_slave_1 removed
[  171.970086][ T5447] netlink: 'syz.3.309': attribute type 10 has an invalid length.
[  172.129435][ T5471] netlink: 20 bytes leftover after parsing attributes in process `syz.1.316'.
[  172.784611][ T5477] Invalid ELF header magic: != ELF
[  174.117576][  T127] snd-usb-audio: probe of 5-1:1.0 failed with error -22
[  174.136809][  T127] usb 5-1: USB disconnect, device number 4
[  174.338149][ T5491] misc userio: Invalid payload size
[  174.519307][ T5352] udevd[5352]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  174.556013][ T5498] misc userio: Invalid payload size
[  174.618648][ T5491] misc userio: Invalid payload size
[  176.356601][ T5513] netlink: 'syz.1.327': attribute type 10 has an invalid length.
[  176.603955][ T5515] device syzkaller0 entered promiscuous mode
[  176.678582][ T5519] fuse: Bad value for 'fd'
[  177.692436][ T5523] Invalid ELF header magic: != ELF
[  178.774615][ T4400] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  179.737026][ T4400] usb 3-1: unable to get BOS descriptor or descriptor too short
[  179.928987][ T5536] ALSA: mixer_oss: invalid OSS volume ''
[  179.939801][ T4400] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  179.950137][ T4400] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  179.959214][ T4400] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  179.975037][ T4400] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  179.984276][ T4400] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  179.992709][ T4400] usb 3-1: Product: syz
[  179.997085][ T4400] usb 3-1: Manufacturer: syz
[  180.001721][ T4400] usb 3-1: SerialNumber: syz
[  180.257396][ T5551] misc userio: Invalid payload size
[  180.292392][ T5551] misc userio: Invalid payload size
[  180.298436][ T5551] misc userio: Invalid payload size
[  182.748488][ T5573] fuse: Bad value for 'fd'
[  185.327844][ T4400] snd-usb-audio: probe of 3-1:1.0 failed with error -22
[  185.344230][ T4400] usb 3-1: USB disconnect, device number 3
[  185.716705][ T5352] udevd[5352]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  187.089265][ T5671] misc userio: Invalid payload size
[  187.144877][ T5671] misc userio: Invalid payload size
[  187.150530][ T5671] misc userio: Invalid payload size
[  188.097859][ T5592] loop0: detected capacity change from 0 to 32768
[  188.143600][ T5592] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.344 (5592)
[  188.269341][ T5685] fuse: Bad value for 'fd'
[  188.872490][ T5592] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  189.050389][ T5592] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  189.091588][ T5592] BTRFS info (device loop0): setting nodatacow, compression disabled
[  189.161027][ T5592] BTRFS info (device loop0): setting datasum, datacow enabled
[  189.204572][ T5592] BTRFS info (device loop0): force clearing of disk cache
[  189.242348][ T5592] BTRFS info (device loop0): enabling ssd optimizations
[  189.298801][ T5592] BTRFS info (device loop0): using spread ssd allocation scheme
[  189.367948][ T5592] BTRFS info (device loop0): turning on sync discard
[  189.434663][ T5592] BTRFS info (device loop0): turning on flush-on-commit
[  189.441733][ T5592] BTRFS info (device loop0): not using ssd optimizations
[  189.448893][ T5592] BTRFS info (device loop0): not using spread ssd allocation scheme
[  189.457602][ T5592] BTRFS info (device loop0): using free space tree
[  189.532459][ T5592] BTRFS error (device loop0): open_ctree failed: -12
[  189.594366][ T5691] device syzkaller0 entered promiscuous mode
[  189.784539][ T4317] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  190.482654][ T4317] usb 5-1: unable to get BOS descriptor or descriptor too short
[  190.492016][ T4317] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  190.502787][ T4317] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  190.520752][ T4317] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  190.570333][ T4317] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  190.642473][ T4317] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  190.665673][ T4317] usb 5-1: Product: syz
[  190.742496][ T4317] usb 5-1: Manufacturer: syz
[  190.774085][ T4317] usb 5-1: SerialNumber: syz
[  191.747500][ T5752] netlink: 20 bytes leftover after parsing attributes in process `syz.3.363'.
[  191.963126][ T4317] snd-usb-audio: probe of 5-1:1.0 failed with error -22
[  192.152123][ T4317] usb 5-1: USB disconnect, device number 5
[  192.166865][ T5352] udevd[5352]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  192.535690][ T5757] misc userio: Invalid payload size
[  192.542010][ T5757] misc userio: Invalid payload size
[  192.549473][ T5757] misc userio: Invalid payload size
[  193.551500][ T5751] netlink: 'syz.3.363': attribute type 10 has an invalid length.
[  194.292267][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  194.299912][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  194.632804][ T5770] overlayfs: overlapping lowerdir path
[  194.734402][ T5775] overlayfs: overlapping lowerdir path
[  196.970554][ T5800] misc userio: Invalid payload size
[  196.988708][ T4320] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  196.989030][ T5800] misc userio: Invalid payload size
[  197.036253][ T5800] misc userio: Invalid payload size
[  197.074613][ T5776] loop1: detected capacity change from 0 to 32768
[  197.103270][ T5776] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.368 (5776)
[  197.147607][ T5776] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  197.170660][ T5776] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  197.193740][ T5776] BTRFS info (device loop1): setting nodatacow, compression disabled
[  197.211720][ T4320] usb 4-1: config 0 interface 0 altsetting 255 has an invalid endpoint with address 0xFF, skipping
[  197.212729][ T5776] BTRFS info (device loop1): setting datasum, datacow enabled
[  197.254571][ T4320] usb 4-1: config 0 interface 0 has no altsetting 0
[  197.280848][ T5776] BTRFS info (device loop1): force clearing of disk cache
[  197.281224][ T4320] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  197.316409][ T5776] BTRFS info (device loop1): enabling ssd optimizations
[  197.340268][ T5776] BTRFS info (device loop1): using spread ssd allocation scheme
[  197.359926][ T4320] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  197.376550][ T5776] BTRFS info (device loop1): turning on sync discard
[  197.385606][ T4320] usb 4-1: Product: syz
[  197.399966][ T4320] usb 4-1: Manufacturer: syz
[  197.406372][ T5776] BTRFS info (device loop1): turning on flush-on-commit
[  197.420654][ T4320] usb 4-1: SerialNumber: syz
[  197.442201][ T4320] usb 4-1: config 0 descriptor??
[  197.452307][ T5776] BTRFS info (device loop1): not using ssd optimizations
[  197.469851][ T5776] BTRFS info (device loop1): not using spread ssd allocation scheme
[  197.505130][ T5776] BTRFS info (device loop1): using free space tree
[  197.511186][ T4320] snd-usb-audio: probe of 4-1:0.0 failed with error -22
[  197.878394][ T5352] udevd[5352]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  197.879932][ T4262] usb 4-1: USB disconnect, device number 4
[  198.180716][ T5776] BTRFS error (device loop1): open_ctree failed: -12
[  200.408141][ T5028] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by udevd (5028)
[  200.883862][ T5892] overlayfs: overlapping lowerdir path
[  200.899877][ T5892] overlayfs: overlapping lowerdir path
[  201.884823][ T4288] Bluetooth: hci0: command 0x0406 tx timeout
[  201.964616][ T4288] Bluetooth: hci1: command 0x0406 tx timeout
[  201.970726][ T4283] Bluetooth: hci3: command 0x0406 tx timeout
[  201.971596][ T4290] Bluetooth: hci2: command 0x0406 tx timeout
[  204.198051][ T5903] misc userio: Invalid payload size
[  204.207523][ T5903] misc userio: Invalid payload size
[  204.215182][ T5903] misc userio: Invalid payload size
[  204.484636][ T5719] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  204.681583][ T5719] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  204.842596][ T5719] usb 3-1: config 0 interface 0 has no altsetting 0
[  204.998901][ T5719] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  205.211644][ T5719] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  205.237937][ T5719] usb 3-1: Product: syz
[  205.264613][ T5719] usb 3-1: Manufacturer: syz
[  205.269260][ T5719] usb 3-1: SerialNumber: syz
[  205.309494][ T5719] usb 3-1: config 0 descriptor??
[  205.362719][ T5719] usb 3-1: selecting invalid altsetting 0
[  205.683623][ T5719] usb 3-1: USB disconnect, device number 4
[  206.454987][ T5911] loop0: detected capacity change from 0 to 32768
[  206.665783][ T5911] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  206.813875][ T5911] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  206.953639][ T5911] BTRFS info (device loop0): setting nodatacow, compression disabled
[  207.085454][ T5911] BTRFS info (device loop0): setting datasum, datacow enabled
[  207.200055][ T5911] BTRFS info (device loop0): force clearing of disk cache
[  207.295469][ T5911] BTRFS info (device loop0): enabling ssd optimizations
[  207.383873][ T5911] BTRFS info (device loop0): using spread ssd allocation scheme
[  207.456007][ T5911] BTRFS info (device loop0): turning on sync discard
[  207.520400][ T5911] BTRFS info (device loop0): turning on flush-on-commit
[  207.558497][ T5911] BTRFS info (device loop0): not using ssd optimizations
[  207.596042][ T5944] overlayfs: overlapping lowerdir path
[  207.617655][ T5944] overlayfs: overlapping lowerdir path
[  207.677788][ T5911] BTRFS info (device loop0): not using spread ssd allocation scheme
[  207.762565][ T5911] BTRFS info (device loop0): using free space tree
[  208.425408][    C0] IPv4: Oversized IP packet from 172.20.20.24
[  208.559388][ T5911] BTRFS error (device loop0): open_ctree failed: -12
[  211.811513][ T5999] misc userio: Invalid payload size
[  211.882215][ T5999] misc userio: Invalid payload size
[  211.899980][ T5999] misc userio: Invalid payload size
[  211.924646][ T5717] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  212.116637][ T5717] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  212.152051][ T5717] usb 1-1: config 0 interface 0 has no altsetting 0
[  212.196940][ T5717] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  212.232922][ T5717] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  212.253181][ T5717] usb 1-1: Product: syz
[  212.273650][ T5717] usb 1-1: Manufacturer: syz
[  212.417929][ T5717] usb 1-1: SerialNumber: syz
[  212.446844][ T5717] usb 1-1: config 0 descriptor??
[  213.308431][ T6015] tc action pedit 'at' offset 5 out of bounds
[  213.314954][ T6015] tc action pedit 'at' offset 5 out of bounds
[  213.321036][ T6015] tc action pedit 'at' offset 5 out of bounds
[  213.327173][ T6015] tc action pedit 'at' offset 5 out of bounds
[  213.333248][ T6015] tc action pedit 'at' offset 5 out of bounds
[  213.339365][ T6015] tc action pedit 'at' offset 5 out of bounds
[  213.345468][ T6015] tc action pedit 'at' offset 5 out of bounds
[  213.351641][ T6015] tc action pedit 'at' offset 5 out of bounds
[  213.357761][ T6015] tc action pedit 'at' offset 5 out of bounds
[  213.363868][ T6015] tc action pedit 'at' offset 5 out of bounds
[  213.370006][ T6015] 0: reclassify loop, rule prio 0, protocol 800
[  213.545006][ T5717] usb 1-1: selecting invalid altsetting 0
[  213.732068][ T5717] usb 1-1: USB disconnect, device number 2
[  216.097678][ T4266] udevd[4266]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  217.200696][ T6051] 9pnet_virtio: no channels available for device syz
[  217.373869][ T6059] misc userio: Invalid payload size
[  217.399626][ T6059] misc userio: Invalid payload size
[  218.149075][ T6059] misc userio: Invalid payload size
[  218.742043][ T6067] FAULT_INJECTION: forcing a failure.
[  218.742043][ T6067] name failslab, interval 1, probability 0, space 0, times 0
[  218.755392][ T6067] CPU: 0 PID: 6067 Comm: syz.4.429 Not tainted syzkaller #0
[  218.762672][ T6067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  218.772731][ T6067] Call Trace:
[  218.776037][ T6067]  <TASK>
[  218.778964][ T6067]  dump_stack_lvl+0x188/0x24e
[  218.783660][ T6067]  ? show_regs_print_info+0x12/0x12
[  218.788942][ T6067]  ? load_image+0x410/0x410
[  218.793453][ T6067]  ? __might_sleep+0xd0/0xd0
[  218.798045][ T6067]  ? __lock_acquire+0x7c40/0x7c40
[  218.803073][ T6067]  should_fail_ex+0x390/0x4c0
[  218.807773][ T6067]  should_failslab+0x5/0x20
[  218.812307][ T6067]  slab_pre_alloc_hook+0x59/0x300
[  218.817372][ T6067]  ? tty_alloc_file+0x4b/0x90
[  218.822036][ T6067]  __kmem_cache_alloc_node+0x4f/0x270
[  218.827400][ T6067]  ? tty_alloc_file+0x4b/0x90
[  218.832069][ T6067]  kmalloc_trace+0x26/0xe0
[  218.836577][ T6067]  tty_alloc_file+0x4b/0x90
[  218.841071][ T6067]  ptmx_open+0x4f/0x2c0
[  218.845219][ T6067]  ? pty_start+0x140/0x140
[  218.849627][ T6067]  chrdev_open+0x585/0x5f0
[  218.854056][ T6067]  ? cd_forget+0x160/0x160
[  218.858464][ T6067]  ? fsnotify_perm+0x39b/0x550
[  218.863227][ T6067]  ? cd_forget+0x160/0x160
[  218.867661][ T6067]  do_dentry_open+0x7dd/0x10b0
[  218.872427][ T6067]  path_openat+0x2674/0x2f10
[  218.877020][ T6067]  ? verify_lock_unused+0x140/0x140
[  218.882223][ T6067]  ? do_sys_openat2+0xdd/0x4f0
[  218.886986][ T6067]  ? do_filp_open+0x420/0x420
[  218.891659][ T6067]  do_filp_open+0x1ee/0x420
[  218.896152][ T6067]  ? vfs_tmpfile+0x470/0x470
[  218.900740][ T6067]  ? _raw_spin_unlock+0x24/0x40
[  218.905593][ T6067]  ? alloc_fd+0x590/0x640
[  218.909933][ T6067]  do_sys_openat2+0x14b/0x4f0
[  218.914622][ T6067]  ? do_sys_open+0xe0/0xe0
[  218.919042][ T6067]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  218.925026][ T6067]  ? lock_chain_count+0x20/0x20
[  218.929872][ T6067]  __x64_sys_openat+0x135/0x160
[  218.934720][ T6067]  do_syscall_64+0x4c/0xa0
[  218.939141][ T6067]  ? clear_bhb_loop+0x60/0xb0
[  218.943814][ T6067]  ? clear_bhb_loop+0x60/0xb0
[  218.948595][ T6067]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  218.954499][ T6067] RIP: 0033:0x7f625f79e159
[  218.958922][ T6067] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  218.978525][ T6067] RSP: 002b:00007f6260695028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  218.986935][ T6067] RAX: ffffffffffffffda RBX: 00007f625fa25fa0 RCX: 00007f625f79e159
[  218.994909][ T6067] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffffffffff9c
[  219.002878][ T6067] RBP: 00007f625f835024 R08: 0000000000000000 R09: 0000000000000000
[  219.010844][ T6067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  219.018806][ T6067] R13: 00007f625fa26038 R14: 00007f625fa25fa0 R15: 00007ffeac2fda98
[  219.026778][ T6067]  </TASK>
[  219.946440][ T6073] pci 0000:00:04.0: [1af4:1000] type 00 class 0x020000
[  219.978583][ T6073] pci 0000:00:04.0: BAR 0 [io  0xc040-0xc07f]
[  220.050795][ T6073] pci 0000:00:04.0: BAR 1 [mem 0xfe801000-0xfe80107f]
[  221.017188][ T6073] pci 0000:00:04.0: BAR 1 [mem 0xc0000000-0xc000007f]: assigned
[  221.091285][ T6073] pci 0000:00:04.0: BAR 0 [io  0x1000-0x103f]: assigned
[  221.173844][ T4283] Bluetooth: hci0: unexpected subevent 0x19 length: 4 < 28
[  221.231460][ T6073] virtio-pci 0000:00:04.0: virtio_pci: leaving for legacy driver
[  221.497647][ T6098] loop4: detected capacity change from 0 to 32768
[  221.516542][ T6098] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.437 (6098)
[  221.562603][ T6098] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  221.573195][ T6098] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  221.588120][ T6098] BTRFS info (device loop4): setting nodatacow, compression disabled
[  221.603156][ T6098] BTRFS info (device loop4): setting datasum, datacow enabled
[  221.613652][ T6098] BTRFS info (device loop4): force clearing of disk cache
[  221.626021][ T6098] BTRFS info (device loop4): enabling ssd optimizations
[  221.633050][ T6098] BTRFS info (device loop4): using spread ssd allocation scheme
[  221.652946][ T6098] BTRFS info (device loop4): turning on sync discard
[  221.663276][ T6098] BTRFS info (device loop4): turning on flush-on-commit
[  221.673019][ T6098] BTRFS info (device loop4): not using ssd optimizations
[  221.683827][ T6098] BTRFS info (device loop4): not using spread ssd allocation scheme
[  221.694376][ T6098] BTRFS info (device loop4): using free space tree
[  221.857989][ T6098] BTRFS info (device loop4): rebuilding free space tree
[  221.936998][ T6098] BTRFS info (device loop4): balance: start -d -m
[  221.965130][ T6098] BTRFS info (device loop4): relocating block group 6881280 flags data|metadata
[  222.091837][ T6098] BTRFS info (device loop4): relocating block group 5242880 flags data|metadata
[  222.322661][ T6098] BTRFS info (device loop4): found 13 extents, stage: move data extents
[  222.357929][ T6098] BTRFS info (device loop4): balance: canceled
[  222.555289][ T4275] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  233.322402][ T6240] device wlan0 entered promiscuous mode
[  233.384405][ T6240] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  235.357024][ T6268] netlink: 8 bytes leftover after parsing attributes in process `syz.2.459'.
[  235.475482][ T6269] block device autoloading is deprecated and will be removed.
[  236.838974][ T6285] ALSA: mixer_oss: invalid OSS volume ''
[  236.940995][   T26] audit: type=1326 audit(1788602780.918:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6294 comm="syz.1.469" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07c539e159 code=0x7ffc0000
[  237.103491][   T26] audit: type=1326 audit(1788602780.918:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6294 comm="syz.1.469" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07c539e159 code=0x7ffc0000
[  237.286513][   T26] audit: type=1326 audit(1788602780.918:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6294 comm="syz.1.469" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07c539e159 code=0x7ffc0000
[  237.310866][   T26] audit: type=1326 audit(1788602780.918:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6294 comm="syz.1.469" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f07c539e159 code=0x7ffc0000
[  238.702218][ T6310] netlink: 8 bytes leftover after parsing attributes in process `syz.2.472'.
[  239.051604][   T26] audit: type=1326 audit(1788602780.918:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6294 comm="syz.1.469" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07c539e159 code=0x7ffc0000
[  239.585735][   T26] audit: type=1326 audit(1788602780.918:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6294 comm="syz.1.469" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07c539e159 code=0x7ffc0000
[  240.095192][   T26] audit: type=1326 audit(1788602780.918:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6294 comm="syz.1.469" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07c539e159 code=0x7ffc0000
[  241.442437][   T26] audit: type=1326 audit(1788602780.928:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6294 comm="syz.1.469" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7f07c539e159 code=0x7ffc0000
[  241.860360][   T26] audit: type=1326 audit(1788602780.928:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6294 comm="syz.1.469" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07c539e159 code=0x7ffc0000
[  241.886260][   T26] audit: type=1326 audit(1788602780.928:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6294 comm="syz.1.469" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f07c539e159 code=0x7ffc0000
[  243.415823][ T6341] ALSA: mixer_oss: invalid OSS volume ''
[  244.386265][ T6383] netlink: 16 bytes leftover after parsing attributes in process `syz.1.495'.
[  245.349657][ T6385] ALSA: mixer_oss: invalid OSS volume ''
[  245.419719][ T6394] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus
[  245.472395][ T5664] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  245.495765][ T5664] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  245.595841][ T5660] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  246.279847][ T6419] loop1: detected capacity change from 0 to 1024
[  246.325299][ T6419] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  246.363423][ T6419] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869)
[  246.393856][ T6419] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #3: comm syz.1.507: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  246.421660][ T6419] EXT4-fs (loop1): no journal found
[  246.427496][ T6419] EXT4-fs (loop1): can't get journal size
[  246.449732][ T6419] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  246.518319][ T6419] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #16: comm syz.1.507: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 1796(4), depth 0(0)
[  246.655459][ T4276] EXT4-fs (loop1): unmounting filesystem.
[  247.564830][ T4283] Bluetooth: hci4: command 0x0406 tx timeout
[  248.724589][ T6459] FAULT_INJECTION: forcing a failure.
[  248.724589][ T6459] name failslab, interval 1, probability 0, space 0, times 0
[  248.763716][ T6459] CPU: 0 PID: 6459 Comm: syz.1.520 Not tainted syzkaller #0
[  248.771062][ T6459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  248.781177][ T6459] Call Trace:
[  248.783853][ T6461] overlayfs: unrecognized mount option "++-[&*'þ%*})" or missing value
[  248.784458][ T6459]  <TASK>
[  248.784468][ T6459]  dump_stack_lvl+0x188/0x24e
[  248.784502][ T6459]  ? show_regs_print_info+0x12/0x12
[  248.805580][ T6459]  ? load_image+0x410/0x410
[  248.810132][ T6459]  ? __might_sleep+0xd0/0xd0
[  248.814749][ T6459]  ? __lock_acquire+0x7c40/0x7c40
[  248.819814][ T6459]  should_fail_ex+0x390/0x4c0
[  248.824534][ T6459]  should_failslab+0x5/0x20
[  248.829149][ T6459]  slab_pre_alloc_hook+0x59/0x300
[  248.834213][ T6459]  kmem_cache_alloc_lru+0x49/0x2e0
[  248.839382][ T6459]  ? __d_alloc+0x2e/0x6e0
[  248.843745][ T6459]  __d_alloc+0x2e/0x6e0
[  248.847933][ T6459]  ? d_alloc_pseudo+0xe/0x70
[  248.852560][ T6459]  d_alloc_pseudo+0x19/0x70
[  248.857108][ T6459]  alloc_file_pseudo+0xe0/0x200
[  248.862175][ T6459]  ? alloc_empty_file_noaccount+0x80/0x80
[  248.867932][ T6459]  ? anon_inode_make_secure_inode+0xf7/0x160
[  248.873956][ T6459]  ? do_compat_epoll_pwait+0x1c0/0x1c0
[  248.879454][ T6459]  ? _raw_spin_unlock+0x24/0x40
[  248.884328][ T6459]  __se_sys_memfd_secret+0x125/0x2f0
[  248.889630][ T6459]  do_syscall_64+0x4c/0xa0
[  248.894057][ T6459]  ? clear_bhb_loop+0x60/0xb0
[  248.898774][ T6459]  ? clear_bhb_loop+0x60/0xb0
[  248.903468][ T6459]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  248.909371][ T6459] RIP: 0033:0x7f07c539e159
[  248.913790][ T6459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  248.933413][ T6459] RSP: 002b:00007f07c61ae028 EFLAGS: 00000246 ORIG_RAX: 00000000000001bf
[  248.941832][ T6459] RAX: ffffffffffffffda RBX: 00007f07c5626090 RCX: 00007f07c539e159
[  248.949823][ T6459] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  248.957798][ T6459] RBP: 00007f07c5435024 R08: 0000000000000000 R09: 0000000000000000
[  248.965768][ T6459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  248.973739][ T6459] R13: 00007f07c5626128 R14: 00007f07c5626090 R15: 00007fffc02e8778
[  248.981722][ T6459]  </TASK>
[  250.823816][ T6490] loop2: detected capacity change from 0 to 2048
[  251.033581][ T6490] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  251.157610][ T4280] EXT4-fs (loop2): unmounting filesystem.
[  251.291610][ T4283] Bluetooth: hci3: unexpected subevent 0x19 length: 4 < 28
[  252.884555][ T4317] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  253.849540][ T6523] loop4: detected capacity change from 0 to 512
[  253.856663][ T4317] usb 2-1: device descriptor read/64, error -71
[  253.980981][ T6504] netlink: 16 bytes leftover after parsing attributes in process `syz.2.536'.
[  254.020585][ T6523] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  254.034813][ T6523] ext4 filesystem being mounted at /110/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  254.134674][ T4317] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  254.191306][ T4283] Bluetooth: hci0: unexpected subevent 0x19 length: 4 < 28
[  254.294534][ T4317] usb 2-1: device descriptor read/64, error -71
[  254.414726][ T4317] usb usb2-port1: attempt power cycle
[  254.432264][ T6536] loop0: detected capacity change from 0 to 1024
[  254.564072][   T26] kauditd_printk_skb: 1 callbacks suppressed
[  254.564086][   T26] audit: type=1800 audit(1788602798.538:80): pid=6523 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.542" name="file1" dev="loop4" ino=15 res=0 errno=0
[  254.601018][ T6536] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  254.619817][ T6536] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  254.688580][ T4275] EXT4-fs (loop4): unmounting filesystem.
[  254.737779][ T6536] EXT4-fs error (device loop0): ext4_map_blocks:747: inode #15: block 3: comm syz.0.546: lblock 3 mapped to illegal pblock 3 (length 3)
[  254.834667][ T4317] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  254.864946][ T6536] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  254.895093][ T4317] usb 2-1: device descriptor read/8, error -71
[  254.931165][ T6536] EXT4-fs (loop0): This should not happen!! Data will be lost
[  254.931165][ T6536] 
[  255.157549][ T6549] FAULT_INJECTION: forcing a failure.
[  255.157549][ T6549] name fail_futex, interval 1, probability 0, space 0, times 0
[  255.174591][ T4317] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  255.184339][ T6549] CPU: 0 PID: 6549 Comm: syz.4.549 Not tainted syzkaller #0
[  255.191752][ T6549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  255.201908][ T6549] Call Trace:
[  255.205268][ T6549]  <TASK>
[  255.208186][ T6549]  dump_stack_lvl+0x188/0x24e
[  255.212885][ T6549]  ? show_regs_print_info+0x12/0x12
[  255.218079][ T6549]  ? load_image+0x410/0x410
[  255.222573][ T6549]  ? kmem_cache_alloc+0x18b/0x2f0
[  255.227586][ T6549]  ? alloc_file+0x5b/0x5f0
[  255.231997][ T6549]  ? __se_sys_memfd_secret+0x125/0x2f0
[  255.237894][ T6549]  ? do_syscall_64+0x4c/0xa0
[  255.242505][ T6549]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  255.248570][ T6549]  should_fail_ex+0x390/0x4c0
[  255.253245][ T6549]  get_futex_key+0x1b1/0x1000
[  255.257923][ T6549]  ? futex_setup_timer+0xc0/0xc0
[  255.262860][ T6549]  futex_wake+0x123/0x4f0
[  255.267178][ T6549]  ? verify_lock_unused+0x140/0x140
[  255.272371][ T6549]  ? lockdep_init_map_type+0x98/0x8d0
[  255.277752][ T6549]  ? futex_wake_mark+0x150/0x150
[  255.282681][ T6549]  do_futex+0x2e2/0x320
[  255.286832][ T6549]  ? __ia32_sys_get_robust_list+0x100/0x100
[  255.292714][ T6549]  ? fd_install+0x5c/0x4e0
[  255.297128][ T6549]  __se_sys_futex+0x381/0x410
[  255.301795][ T6549]  ? __x64_sys_futex+0xf0/0xf0
[  255.306550][ T6549]  ? __x64_sys_futex+0x1d/0xf0
[  255.311301][ T6549]  do_syscall_64+0x4c/0xa0
[  255.315707][ T6549]  ? clear_bhb_loop+0x60/0xb0
[  255.320397][ T6549]  ? clear_bhb_loop+0x60/0xb0
[  255.325069][ T6549]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  255.330953][ T6549] RIP: 0033:0x7f625f79e159
[  255.335364][ T6549] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  255.354963][ T6549] RSP: 002b:00007f62606950e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  255.363363][ T6549] RAX: ffffffffffffffda RBX: 00007f625fa25fa8 RCX: 00007f625f79e159
[  255.371319][ T6549] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f625fa25fac
[  255.379281][ T6549] RBP: 00007f625fa25fa0 R08: 0006d46db480c8e4 R09: 0000000000000000
[  255.387264][ T6549] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000
[  255.395240][ T6549] R13: 00007f625fa26038 R14: 00007ffeac2fd9b0 R15: 00007ffeac2fda98
[  255.403215][ T6549]  </TASK>
[  255.452669][ T4317] usb 2-1: device descriptor read/8, error -71
[  255.455475][ T6549] overlayfs: unrecognized mount option "++-[&*'þ%*})" or missing value
[  255.550082][ T5664] EXT4-fs error (device loop0): ext4_map_blocks:747: inode #15: comm kworker/u4:30: lblock 0 mapped to illegal pblock 0 (length 3)
[  255.582001][ T6551] device bridge1 entered promiscuous mode
[  255.595034][ T4317] usb usb2-port1: unable to enumerate USB device
[  255.601473][ T5664] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117
[  255.638579][ T5664] EXT4-fs (loop0): This should not happen!! Data will be lost
[  255.638579][ T5664] 
[  255.688372][ T5664] EXT4-fs error (device loop0): ext4_map_blocks:747: inode #15: block 7: comm kworker/u4:30: lblock 7 mapped to illegal pblock 7 (length 9)
[  255.726559][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  255.733161][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  255.839266][ T5664] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 9 with error 117
[  255.910077][ T5664] EXT4-fs (loop0): This should not happen!! Data will be lost
[  255.910077][ T5664] 
[  256.002812][ T4273] EXT4-fs (loop0): unmounting filesystem.
[  257.612284][ T6573] loop4: detected capacity change from 0 to 512
[  257.657660][ T6573] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  257.699255][ T6573] System zones: 1-12
[  257.802170][ T6573] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.558: missing EA_INODE flag
[  257.866003][ T6573] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.558: error while reading EA inode 12 err=-117
[  257.901381][ T6573] EXT4-fs (loop4): 1 orphan inode deleted
[  257.919426][ T6573] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  258.090270][ T6588] FAULT_INJECTION: forcing a failure.
[  258.090270][ T6588] name failslab, interval 1, probability 0, space 0, times 0
[  258.118829][ T4275] EXT4-fs (loop4): unmounting filesystem.
[  258.138940][ T6588] CPU: 1 PID: 6588 Comm: syz.0.563 Not tainted syzkaller #0
[  258.146281][ T6588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  258.156359][ T6588] Call Trace:
[  258.159653][ T6588]  <TASK>
[  258.162599][ T6588]  dump_stack_lvl+0x188/0x24e
[  258.167317][ T6588]  ? show_regs_print_info+0x12/0x12
[  258.172556][ T6588]  ? load_image+0x410/0x410
[  258.177096][ T6588]  ? __might_sleep+0xd0/0xd0
[  258.181715][ T6588]  ? __lock_acquire+0x7c40/0x7c40
[  258.186778][ T6588]  should_fail_ex+0x390/0x4c0
[  258.191500][ T6588]  should_failslab+0x5/0x20
[  258.196026][ T6588]  slab_pre_alloc_hook+0x59/0x300
[  258.201081][ T6588]  ? memcg_list_lru_alloc+0x331/0xb00
[  258.206503][ T6588]  __kmem_cache_alloc_node+0x4f/0x270
[  258.211905][ T6588]  ? memcg_list_lru_alloc+0x331/0xb00
[  258.217308][ T6588]  __kmalloc+0xa3/0x240
[  258.221501][ T6588]  memcg_list_lru_alloc+0x331/0xb00
[  258.226733][ T6588]  ? slab_pre_alloc_hook+0xb1/0x300
[  258.231957][ T6588]  ? memcg_reparent_list_lrus+0x850/0x850
[  258.237717][ T6588]  ? get_obj_cgroup_from_current+0xd0/0x280
[  258.243648][ T6588]  ? get_obj_cgroup_from_current+0xd0/0x280
[  258.249579][ T6588]  slab_pre_alloc_hook+0x2ad/0x300
[  258.254722][ T6588]  ? slab_pre_alloc_hook+0xb1/0x300
[  258.259958][ T6588]  kmem_cache_alloc_lru+0x49/0x2e0
[  258.265101][ T6588]  ? __d_alloc+0x2e/0x6e0
[  258.269470][ T6588]  __d_alloc+0x2e/0x6e0
[  258.273651][ T6588]  ? d_alloc_pseudo+0xe/0x70
[  258.278261][ T6588]  d_alloc_pseudo+0x19/0x70
[  258.282767][ T6588]  alloc_file_pseudo+0xe0/0x200
[  258.287623][ T6588]  ? alloc_empty_file_noaccount+0x80/0x80
[  258.293342][ T6588]  ? anon_inode_make_secure_inode+0xf7/0x160
[  258.299356][ T6588]  ? do_compat_epoll_pwait+0x1c0/0x1c0
[  258.304820][ T6588]  ? _raw_spin_unlock+0x24/0x40
[  258.309680][ T6588]  __se_sys_memfd_secret+0x125/0x2f0
[  258.314976][ T6588]  do_syscall_64+0x4c/0xa0
[  258.319398][ T6588]  ? clear_bhb_loop+0x60/0xb0
[  258.324083][ T6588]  ? clear_bhb_loop+0x60/0xb0
[  258.328764][ T6588]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  258.334663][ T6588] RIP: 0033:0x7f79e6b9e159
[  258.339080][ T6588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  258.358701][ T6588] RSP: 002b:00007f79e7a68028 EFLAGS: 00000246 ORIG_RAX: 00000000000001bf
[  258.367123][ T6588] RAX: ffffffffffffffda RBX: 00007f79e6e25fa0 RCX: 00007f79e6b9e159
[  258.375097][ T6588] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  258.383071][ T6588] RBP: 00007f79e6c35024 R08: 0000000000000000 R09: 0000000000000000
[  258.391040][ T6588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  258.399013][ T6588] R13: 00007f79e6e26038 R14: 00007f79e6e25fa0 R15: 00007ffd994e6d78
[  258.406995][ T6588]  </TASK>
[  258.484624][  T955] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  258.491016][ T6592] netlink: 8 bytes leftover after parsing attributes in process `syz.2.566'.
[  258.644673][  T955] usb 2-1: device descriptor read/64, error -71
[  258.662754][ T6599] overlayfs: unrecognized mount option "++-[&*'þ%*})" or missing value
[  258.929991][  T955] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  259.220538][  T955] usb 2-1: device descriptor read/64, error -71
[  260.505973][  T955] usb usb2-port1: attempt power cycle
[  261.181556][ T6656] loop2: detected capacity change from 0 to 512
[  261.321906][ T6656] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  261.349402][ T6656] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  261.438186][ T6656] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 1120 free clusters
[  261.473809][ T6656] Quota error (device loop2): write_blk: dquota write failed
[  261.488423][ T6656] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5
[  261.506134][ T6656] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota
[  261.524727][ T6656] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.579: Failed to acquire dquot type 1
[  261.714357][ T6674] loop1: detected capacity change from 0 to 164
[  261.743306][ T4280] EXT4-fs (loop2): unmounting filesystem.
[  261.780762][ T6674] rock: corrupted directory entry. extent=134217760 out of volume (nzones=41)
[  262.365219][ T6686] FAULT_INJECTION: forcing a failure.
[  262.365219][ T6686] name fail_futex, interval 1, probability 0, space 0, times 0
[  262.378322][ T6686] CPU: 1 PID: 6686 Comm: syz.2.591 Not tainted syzkaller #0
[  262.385638][ T6686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  262.395716][ T6686] Call Trace:
[  262.399006][ T6686]  <TASK>
[  262.401948][ T6686]  dump_stack_lvl+0x188/0x24e
[  262.406662][ T6686]  ? show_regs_print_info+0x12/0x12
[  262.411912][ T6686]  ? load_image+0x410/0x410
[  262.416461][ T6686]  ? kmem_cache_alloc+0x18b/0x2f0
[  262.421509][ T6686]  ? alloc_file+0x5b/0x5f0
[  262.425949][ T6686]  ? __se_sys_memfd_secret+0x125/0x2f0
[  262.431437][ T6686]  ? do_syscall_64+0x4c/0xa0
[  262.436052][ T6686]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  262.442156][ T6686]  should_fail_ex+0x390/0x4c0
[  262.446879][ T6686]  get_futex_key+0x1b1/0x1000
[  262.451601][ T6686]  ? futex_setup_timer+0xc0/0xc0
[  262.456582][ T6686]  futex_wake+0x123/0x4f0
[  262.460934][ T6686]  ? verify_lock_unused+0x140/0x140
[  262.466163][ T6686]  ? lockdep_init_map_type+0x98/0x8d0
[  262.471658][ T6686]  ? futex_wake_mark+0x150/0x150
[  262.476630][ T6686]  do_futex+0x2e2/0x320
[  262.480813][ T6686]  ? __ia32_sys_get_robust_list+0x100/0x100
[  262.486736][ T6686]  ? fd_install+0x5c/0x4e0
[  262.491203][ T6686]  __se_sys_futex+0x381/0x410
[  262.495915][ T6686]  ? __x64_sys_futex+0xf0/0xf0
[  262.500697][ T6686]  ? __x64_sys_futex+0x1d/0xf0
[  262.505475][ T6686]  do_syscall_64+0x4c/0xa0
[  262.509883][ T6686]  ? clear_bhb_loop+0x60/0xb0
[  262.514555][ T6686]  ? clear_bhb_loop+0x60/0xb0
[  262.519252][ T6686]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  262.525259][ T6686] RIP: 0033:0x7f65ed39e159
[  262.529677][ T6686] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  262.549282][ T6686] RSP: 002b:00007f65ee2800e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  262.557690][ T6686] RAX: ffffffffffffffda RBX: 00007f65ed625fa8 RCX: 00007f65ed39e159
[  262.565658][ T6686] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f65ed625fac
[  262.573734][ T6686] RBP: 00007f65ed625fa0 R08: 001358c6a0b09ea4 R09: 0000000000000000
[  262.581701][ T6686] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000
[  262.589668][ T6686] R13: 00007f65ed626038 R14: 00007fff62c6d200 R15: 00007fff62c6d2e8
[  262.597650][ T6686]  </TASK>
[  262.690406][ T6687] overlayfs: unrecognized mount option "++-[&*'þ%*})" or missing value
[  262.774649][ T5719] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  263.001580][ T5719] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid wMaxPacketSize 0
[  263.041063][ T5719] usb 2-1: config 0 interface 0 has no altsetting 0
[  263.081449][ T5719] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  263.134523][ T5719] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  263.152954][ T5719] usb 2-1: Product: syz
[  263.166539][ T5719] usb 2-1: Manufacturer: syz
[  263.174696][ T5719] usb 2-1: SerialNumber: syz
[  263.211642][ T5719] usb 2-1: config 0 descriptor??
[  263.235994][ T5719] usb 2-1: selecting invalid altsetting 0
[  263.434253][ T4320] usb 2-1: USB disconnect, device number 12
[  264.699669][ T6737] process 'syz.4.611' launched './file2' with NULL argv: empty string added
[  264.890493][ T6741] loop1: detected capacity change from 0 to 1024
[  264.932583][ T6741] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  265.057592][ T6745] FAULT_INJECTION: forcing a failure.
[  265.057592][ T6745] name failslab, interval 1, probability 0, space 0, times 0
[  265.065908][ T6741] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  265.107268][ T6745] CPU: 0 PID: 6745 Comm: syz.2.612 Not tainted syzkaller #0
[  265.114610][ T6745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  265.124683][ T6745] Call Trace:
[  265.127984][ T6745]  <TASK>
[  265.130929][ T6745]  dump_stack_lvl+0x188/0x24e
[  265.135627][ T6745]  ? show_regs_print_info+0x12/0x12
[  265.140833][ T6745]  ? load_image+0x410/0x410
[  265.145361][ T6745]  ? __might_sleep+0xd0/0xd0
[  265.149952][ T6745]  ? __lock_acquire+0x7c40/0x7c40
[  265.154984][ T6745]  should_fail_ex+0x390/0x4c0
[  265.159686][ T6745]  should_failslab+0x5/0x20
[  265.164176][ T6745]  slab_pre_alloc_hook+0x59/0x300
[  265.169209][ T6745]  kmem_cache_alloc+0x56/0x2f0
[  265.173965][ T6745]  ? security_file_alloc+0x30/0x110
[  265.179173][ T6745]  security_file_alloc+0x30/0x110
[  265.184208][ T6745]  __alloc_file+0xc2/0x230
[  265.188620][ T6745]  alloc_empty_file+0x90/0x180
[  265.193370][ T6745]  alloc_file+0x5b/0x5f0
[  265.197604][ T6745]  alloc_file_pseudo+0x180/0x200
[  265.202530][ T6745]  ? alloc_empty_file_noaccount+0x80/0x80
[  265.208248][ T6745]  ? anon_inode_make_secure_inode+0xf7/0x160
[  265.214222][ T6745]  ? do_compat_epoll_pwait+0x1c0/0x1c0
[  265.219681][ T6745]  ? _raw_spin_unlock+0x24/0x40
[  265.224536][ T6745]  __se_sys_memfd_secret+0x125/0x2f0
[  265.229828][ T6745]  do_syscall_64+0x4c/0xa0
[  265.234259][ T6745]  ? clear_bhb_loop+0x60/0xb0
[  265.238932][ T6745]  ? clear_bhb_loop+0x60/0xb0
[  265.243601][ T6745]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  265.249489][ T6745] RIP: 0033:0x7f65ed39e159
[  265.253892][ T6745] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  265.273608][ T6745] RSP: 002b:00007f65ee280028 EFLAGS: 00000246 ORIG_RAX: 00000000000001bf
[  265.282036][ T6745] RAX: ffffffffffffffda RBX: 00007f65ed625fa0 RCX: 00007f65ed39e159
[  265.290009][ T6745] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  265.297980][ T6745] RBP: 00007f65ed435024 R08: 0000000000000000 R09: 0000000000000000
[  265.305944][ T6745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  265.313908][ T6745] R13: 00007f65ed626038 R14: 00007f65ed625fa0 R15: 00007fff62c6d2e8
[  265.321913][ T6745]  </TASK>
[  265.324972][    C0] vkms_vblank_simulate: vblank timer overrun
[  265.346713][ T6741] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters
[  265.382108][ T6745] overlayfs: unrecognized mount option "++-[&*'þ%*})" or missing value
[  265.407259][ T6741] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2805: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  265.524287][ T4276] EXT4-fs (loop1): unmounting filesystem.
[  265.634614][   T14] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  265.826108][   T14] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid wMaxPacketSize 0
[  265.843380][   T14] usb 1-1: config 0 interface 0 has no altsetting 0
[  265.859415][   T14] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  265.868840][   T14] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  265.877465][   T14] usb 1-1: Product: syz
[  265.881922][   T14] usb 1-1: Manufacturer: syz
[  265.901485][   T14] usb 1-1: SerialNumber: syz
[  265.932091][   T14] usb 1-1: config 0 descriptor??
[  265.983638][   T14] usb 1-1: selecting invalid altsetting 0
[  266.187502][   T14] usb 1-1: USB disconnect, device number 3
[  266.912733][ T6785] loop1: detected capacity change from 0 to 512
[  267.010466][ T6785] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  267.024802][ T6785] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  267.367590][ T6785] capability: warning: `syz.1.627' uses 32-bit capabilities (legacy support in use)
[  267.802419][ T6802] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus
[  267.811038][ T6805] FAULT_INJECTION: forcing a failure.
[  267.811038][ T6805] name failslab, interval 1, probability 0, space 0, times 0
[  267.824271][ T6801] Invalid ELF header magic: != ELF
[  267.852127][ T6805] CPU: 0 PID: 6805 Comm: syz.2.631 Not tainted syzkaller #0
[  267.859473][ T6805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  267.869538][ T6805] Call Trace:
[  267.872830][ T6805]  <TASK>
[  267.875754][ T6805]  dump_stack_lvl+0x188/0x24e
[  267.880444][ T6805]  ? show_regs_print_info+0x12/0x12
[  267.885660][ T6805]  ? load_image+0x410/0x410
[  267.890173][ T6805]  ? __might_sleep+0xd0/0xd0
[  267.894771][ T6805]  ? __lock_acquire+0x7c40/0x7c40
[  267.899828][ T6805]  should_fail_ex+0x390/0x4c0
[  267.904525][ T6805]  should_failslab+0x5/0x20
[  267.909027][ T6805]  slab_pre_alloc_hook+0x59/0x300
[  267.914078][ T6805]  kmem_cache_alloc+0x56/0x2f0
[  267.918844][ T6805]  ? security_file_alloc+0x30/0x110
[  267.924048][ T6805]  security_file_alloc+0x30/0x110
[  267.929079][ T6805]  __alloc_file+0xc2/0x230
[  267.933502][ T6805]  alloc_empty_file+0x90/0x180
[  267.938273][ T6805]  alloc_file+0x5b/0x5f0
[  267.942553][ T6805]  alloc_file_pseudo+0x180/0x200
[  267.947499][ T6805]  ? alloc_empty_file_noaccount+0x80/0x80
[  267.953217][ T6805]  ? anon_inode_make_secure_inode+0xf7/0x160
[  267.959204][ T6805]  ? do_compat_epoll_pwait+0x1c0/0x1c0
[  267.964664][ T6805]  ? _raw_spin_unlock+0x24/0x40
[  267.969523][ T6805]  __se_sys_memfd_secret+0x125/0x2f0
[  267.974817][ T6805]  do_syscall_64+0x4c/0xa0
[  267.979238][ T6805]  ? clear_bhb_loop+0x60/0xb0
[  267.983917][ T6805]  ? clear_bhb_loop+0x60/0xb0
[  267.988623][ T6805]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  267.994619][ T6805] RIP: 0033:0x7f65ed39e159
[  267.999044][ T6805] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  268.018654][ T6805] RSP: 002b:00007f65ee280028 EFLAGS: 00000246 ORIG_RAX: 00000000000001bf
[  268.027073][ T6805] RAX: ffffffffffffffda RBX: 00007f65ed625fa0 RCX: 00007f65ed39e159
[  268.035048][ T6805] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  268.043021][ T6805] RBP: 00007f65ed435024 R08: 0000000000000000 R09: 0000000000000000
[  268.050993][ T6805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  268.058961][ T6805] R13: 00007f65ed626038 R14: 00007f65ed625fa0 R15: 00007fff62c6d2e8
[  268.066947][ T6805]  </TASK>
[  268.070033][    C0] vkms_vblank_simulate: vblank timer overrun
[  268.182280][ T6805] overlayfs: unrecognized mount option "++-[&*'þ%*})" or missing value
[  268.355188][ T4276] EXT4-fs (loop1): unmounting filesystem.
[  268.904658][ T4320] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  269.116146][ T4320] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid wMaxPacketSize 0
[  269.143633][ T4320] usb 4-1: config 0 interface 0 has no altsetting 0
[  269.223141][ T4320] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  269.272088][ T4320] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  269.306084][ T6837] autofs4:pid:6837:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.768), cmd(0xc0189375)
[  269.317243][ T4320] usb 4-1: Product: syz
[  269.319632][ T6837] autofs4:pid:6837:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375)
[  269.353992][ T4320] usb 4-1: Manufacturer: syz
[  269.384509][ T4320] usb 4-1: SerialNumber: syz
[  269.412799][ T4320] usb 4-1: config 0 descriptor??
[  269.436933][ T4320] usb 4-1: selecting invalid altsetting 0
[  269.633273][ T4378] usb 4-1: USB disconnect, device number 5
[  270.071517][ T6852] loop1: detected capacity change from 0 to 2048
[  270.129675][ T6852] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  270.251127][ T4276] EXT4-fs (loop1): unmounting filesystem.
[  270.337985][ T6859] FAULT_INJECTION: forcing a failure.
[  270.337985][ T6859] name failslab, interval 1, probability 0, space 0, times 0
[  270.351613][ T6859] CPU: 0 PID: 6859 Comm: syz.1.648 Not tainted syzkaller #0
[  270.358942][ T6859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  270.369020][ T6859] Call Trace:
[  270.372326][ T6859]  <TASK>
[  270.375361][ T6859]  dump_stack_lvl+0x188/0x24e
[  270.380078][ T6859]  ? show_regs_print_info+0x12/0x12
[  270.385316][ T6859]  ? load_image+0x410/0x410
[  270.389855][ T6859]  ? __might_sleep+0xd0/0xd0
[  270.394464][ T6859]  ? __lock_acquire+0x7c40/0x7c40
[  270.399515][ T6859]  should_fail_ex+0x390/0x4c0
[  270.404228][ T6859]  should_failslab+0x5/0x20
[  270.408749][ T6859]  slab_pre_alloc_hook+0x59/0x300
[  270.413802][ T6859]  kmem_cache_alloc+0x56/0x2f0
[  270.418585][ T6859]  ? __alloc_file+0x25/0x230
[  270.423288][ T6859]  __alloc_file+0x25/0x230
[  270.427725][ T6859]  alloc_empty_file+0x90/0x180
[  270.432515][ T6859]  alloc_file+0x5b/0x5f0
[  270.436783][ T6859]  alloc_file_pseudo+0x180/0x200
[  270.441755][ T6859]  ? alloc_empty_file_noaccount+0x80/0x80
[  270.447538][ T6859]  ? anon_inode_make_secure_inode+0xf7/0x160
[  270.453676][ T6859]  ? do_compat_epoll_pwait+0x1c0/0x1c0
[  270.459178][ T6859]  ? _raw_spin_unlock+0x24/0x40
[  270.464052][ T6859]  __se_sys_memfd_secret+0x125/0x2f0
[  270.469361][ T6859]  do_syscall_64+0x4c/0xa0
[  270.473784][ T6859]  ? clear_bhb_loop+0x60/0xb0
[  270.478506][ T6859]  ? clear_bhb_loop+0x60/0xb0
[  270.483213][ T6859]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  270.489135][ T6859] RIP: 0033:0x7f07c539e159
[  270.493557][ T6859] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  270.513221][ T6859] RSP: 002b:00007f07c61cf028 EFLAGS: 00000246 ORIG_RAX: 00000000000001bf
[  270.521662][ T6859] RAX: ffffffffffffffda RBX: 00007f07c5625fa0 RCX: 00007f07c539e159
[  270.529659][ T6859] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  270.537630][ T6859] RBP: 00007f07c5435024 R08: 0000000000000000 R09: 0000000000000000
[  270.545601][ T6859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  270.553590][ T6859] R13: 00007f07c5626038 R14: 00007f07c5625fa0 R15: 00007fffc02e8778
[  270.561616][ T6859]  </TASK>
[  270.622890][ T6859] overlayfs: unrecognized mount option "++-[&*'þ%*})" or missing value
[  270.632492][ T6861] Invalid ELF header magic: != ELF
[  271.841604][ T6875] device syzkaller0 entered promiscuous mode
[  271.892562][ T6875] tipc: Started in network mode
[  271.923028][ T6875] tipc: Node identity 424213ca1ae9, cluster identity 4711
[  271.968523][ T6875] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  272.087671][ T6877] device syzkaller0 entered promiscuous mode
[  272.132245][ T6882] tipc: Resetting bearer <eth:syzkaller0>
[  272.193654][ T6874] tipc: Resetting bearer <eth:syzkaller0>
[  272.302263][ T6865] loop0: detected capacity change from 0 to 32768
[  272.369641][ T6865] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.649 (6865)
[  272.391355][ T6874] tipc: Disabling bearer <eth:syzkaller0>
[  273.177302][ T6865] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  273.194643][ T6865] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  273.221780][ T6865] BTRFS info (device loop0): setting nodatacow, compression disabled
[  273.284706][ T6865] BTRFS info (device loop0): setting datasum, datacow enabled
[  273.292242][ T6865] BTRFS info (device loop0): force clearing of disk cache
[  273.350381][ T6865] BTRFS info (device loop0): enabling ssd optimizations
[  273.394608][ T6865] BTRFS info (device loop0): using spread ssd allocation scheme
[  273.402310][ T6865] BTRFS info (device loop0): turning on sync discard
[  273.464595][ T6865] BTRFS info (device loop0): turning on flush-on-commit
[  273.475085][ T6865] BTRFS info (device loop0): not using ssd optimizations
[  273.500587][ T6865] BTRFS info (device loop0): not using spread ssd allocation scheme
[  273.535233][ T6865] BTRFS info (device loop0): using free space tree
[  273.750164][ T6154] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  273.959984][ T6154] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid wMaxPacketSize 0
[  273.975918][ T6154] usb 5-1: config 0 interface 0 has no altsetting 0
[  274.014125][ T6154] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  274.030175][ T6154] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  274.044694][ T6154] usb 5-1: Product: syz
[  274.051191][ T6154] usb 5-1: Manufacturer: syz
[  274.059092][ T6154] usb 5-1: SerialNumber: syz
[  274.077269][ T6154] usb 5-1: config 0 descriptor??
[  274.124750][ T6154] usb 5-1: selecting invalid altsetting 0
[  274.190649][ T6865] BTRFS error (device loop0): open_ctree failed: -12
[  274.299609][ T4378] usb 5-1: USB disconnect, device number 6
[  274.672139][ T6921] FAULT_INJECTION: forcing a failure.
[  274.672139][ T6921] name failslab, interval 1, probability 0, space 0, times 0
[  274.693766][ T6921] CPU: 1 PID: 6921 Comm: syz.0.663 Not tainted syzkaller #0
[  274.701110][ T6921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  274.711203][ T6921] Call Trace:
[  274.714495][ T6921]  <TASK>
[  274.717439][ T6921]  dump_stack_lvl+0x188/0x24e
[  274.722155][ T6921]  ? show_regs_print_info+0x12/0x12
[  274.727390][ T6921]  ? load_image+0x410/0x410
[  274.731911][ T6921]  ? __might_sleep+0xd0/0xd0
[  274.736505][ T6921]  ? __lock_acquire+0x7c40/0x7c40
[  274.741537][ T6921]  should_fail_ex+0x390/0x4c0
[  274.746224][ T6921]  should_failslab+0x5/0x20
[  274.750723][ T6921]  slab_pre_alloc_hook+0x59/0x300
[  274.755758][ T6921]  ? memcg_list_lru_alloc+0x331/0xb00
[  274.761138][ T6921]  __kmem_cache_alloc_node+0x4f/0x270
[  274.766515][ T6921]  ? memcg_list_lru_alloc+0x331/0xb00
[  274.771898][ T6921]  __kmalloc+0xa3/0x240
[  274.776062][ T6921]  memcg_list_lru_alloc+0x331/0xb00
[  274.781268][ T6921]  ? slab_pre_alloc_hook+0xb1/0x300
[  274.786466][ T6921]  ? memcg_reparent_list_lrus+0x850/0x850
[  274.792196][ T6921]  ? get_obj_cgroup_from_current+0xd0/0x280
[  274.798095][ T6921]  ? get_obj_cgroup_from_current+0xd0/0x280
[  274.803999][ T6921]  slab_pre_alloc_hook+0x2ad/0x300
[  274.809113][ T6921]  ? slab_pre_alloc_hook+0xb1/0x300
[  274.814313][ T6921]  kmem_cache_alloc_lru+0x49/0x2e0
[  274.819425][ T6921]  ? __d_alloc+0x2e/0x6e0
[  274.823761][ T6921]  __d_alloc+0x2e/0x6e0
[  274.827920][ T6921]  ? d_alloc_pseudo+0xe/0x70
[  274.832513][ T6921]  d_alloc_pseudo+0x19/0x70
[  274.837020][ T6921]  alloc_file_pseudo+0xe0/0x200
[  274.841879][ T6921]  ? alloc_empty_file_noaccount+0x80/0x80
[  274.847602][ T6921]  ? anon_inode_make_secure_inode+0xf7/0x160
[  274.853588][ T6921]  ? do_compat_epoll_pwait+0x1c0/0x1c0
[  274.859052][ T6921]  ? _raw_spin_unlock+0x24/0x40
[  274.863912][ T6921]  __se_sys_memfd_secret+0x125/0x2f0
[  274.869206][ T6921]  do_syscall_64+0x4c/0xa0
[  274.873631][ T6921]  ? clear_bhb_loop+0x60/0xb0
[  274.878314][ T6921]  ? clear_bhb_loop+0x60/0xb0
[  274.883000][ T6921]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  274.888901][ T6921] RIP: 0033:0x7f79e6b9e159
[  274.893316][ T6921] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  274.912929][ T6921] RSP: 002b:00007f79e7a47028 EFLAGS: 00000246 ORIG_RAX: 00000000000001bf
[  274.921347][ T6921] RAX: ffffffffffffffda RBX: 00007f79e6e26090 RCX: 00007f79e6b9e159
[  274.929322][ T6921] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  274.937294][ T6921] RBP: 00007f79e6c35024 R08: 0000000000000000 R09: 0000000000000000
[  274.945269][ T6921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  274.953237][ T6921] R13: 00007f79e6e26128 R14: 00007f79e6e26090 R15: 00007ffd994e6d78
[  274.961217][ T6921]  </TASK>
[  275.019496][ T6922] overlayfs: unrecognized mount option "++-[&*'þ%*})" or missing value
[  277.172522][ T6945] loop1: detected capacity change from 0 to 32768
[  277.214793][ T6945] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.672 (6945)
[  277.242237][ T6945] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  277.261484][ T6945] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  277.279243][ T6945] BTRFS info (device loop1): setting nodatacow, compression disabled
[  277.287889][ T6945] BTRFS info (device loop1): setting datasum, datacow enabled
[  277.310969][ T6945] BTRFS info (device loop1): force clearing of disk cache
[  277.319219][ T6945] BTRFS info (device loop1): enabling ssd optimizations
[  277.368819][ T6945] BTRFS info (device loop1): using spread ssd allocation scheme
[  277.388527][ T6945] BTRFS info (device loop1): turning on sync discard
[  277.408779][ T6945] BTRFS info (device loop1): turning on flush-on-commit
[  277.429067][ T6945] BTRFS info (device loop1): not using ssd optimizations
[  277.450184][ T6945] BTRFS info (device loop1): not using spread ssd allocation scheme
[  277.462021][ T6945] BTRFS info (device loop1): using free space tree
[  277.513072][ T6945] BTRFS info (device loop1): rebuilding free space tree
[  277.687446][ T6945] BTRFS info (device loop1): balance: start -d -m
[  277.737323][ T6945] BTRFS info (device loop1): relocating block group 6881280 flags data|metadata
[  278.257178][ T6945] BTRFS info (device loop1): relocating block group 5242880 flags data|metadata
[  278.333399][ T6945] BTRFS info (device loop1): balance: canceled
[  278.485528][ T4276] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  278.672499][ T5717] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  278.866105][ T6978] md: array md0 already initialised!
[  278.878549][ T5717] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid wMaxPacketSize 0
[  278.889036][ T5717] usb 5-1: config 0 interface 0 has no altsetting 0
[  278.889839][ T6978] md: personality for level  is not loaded!
[  278.901752][ T5717] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  278.922749][ T5717] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  278.933300][ T5717] usb 5-1: Product: syz
[  278.937809][ T5717] usb 5-1: Manufacturer: syz
[  278.943082][ T5717] usb 5-1: SerialNumber: syz
[  278.970375][ T5717] usb 5-1: config 0 descriptor??
[  278.988671][ T5717] usb 5-1: selecting invalid altsetting 0
[  279.058698][ T4323] tipc: Node number set to 1487606730
[  279.194313][ T5717] usb 5-1: USB disconnect, device number 7
[  280.011728][ T7008] FAULT_INJECTION: forcing a failure.
[  280.011728][ T7008] name fail_futex, interval 1, probability 0, space 0, times 0
[  280.029996][ T7008] CPU: 0 PID: 7008 Comm: syz.4.689 Not tainted syzkaller #0
[  280.037327][ T7008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  280.047398][ T7008] Call Trace:
[  280.050664][ T7008]  <TASK>
[  280.053581][ T7008]  dump_stack_lvl+0x188/0x24e
[  280.058258][ T7008]  ? show_regs_print_info+0x12/0x12
[  280.063474][ T7008]  ? load_image+0x410/0x410
[  280.067964][ T7008]  ? kmem_cache_alloc+0x18b/0x2f0
[  280.072978][ T7008]  ? alloc_file+0x5b/0x5f0
[  280.077396][ T7008]  ? __se_sys_memfd_secret+0x125/0x2f0
[  280.082876][ T7008]  ? do_syscall_64+0x4c/0xa0
[  280.087463][ T7008]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  280.093545][ T7008]  should_fail_ex+0x390/0x4c0
[  280.098217][ T7008]  get_futex_key+0x1b1/0x1000
[  280.102915][ T7008]  ? futex_setup_timer+0xc0/0xc0
[  280.107887][ T7008]  futex_wake+0x123/0x4f0
[  280.112224][ T7008]  ? verify_lock_unused+0x140/0x140
[  280.117490][ T7008]  ? lockdep_init_map_type+0x98/0x8d0
[  280.122875][ T7008]  ? futex_wake_mark+0x150/0x150
[  280.127838][ T7008]  do_futex+0x2e2/0x320
[  280.131988][ T7008]  ? __ia32_sys_get_robust_list+0x100/0x100
[  280.137879][ T7008]  ? fd_install+0x5c/0x4e0
[  280.142315][ T7008]  __se_sys_futex+0x381/0x410
[  280.146997][ T7008]  ? __x64_sys_futex+0xf0/0xf0
[  280.151804][ T7008]  ? __x64_sys_futex+0x1d/0xf0
[  280.156561][ T7008]  do_syscall_64+0x4c/0xa0
[  280.160973][ T7008]  ? clear_bhb_loop+0x60/0xb0
[  280.165642][ T7008]  ? clear_bhb_loop+0x60/0xb0
[  280.170308][ T7008]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  280.176204][ T7008] RIP: 0033:0x7f625f79e159
[  280.180616][ T7008] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  280.200218][ T7008] RSP: 002b:00007f62606950e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  280.208654][ T7008] RAX: ffffffffffffffda RBX: 00007f625fa25fa8 RCX: 00007f625f79e159
[  280.216619][ T7008] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f625fa25fac
[  280.224578][ T7008] RBP: 00007f625fa25fa0 R08: 00397e67a9614da4 R09: 0000000000000000
[  280.232538][ T7008] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000
[  280.240514][ T7008] R13: 00007f625fa26038 R14: 00007ffeac2fd9b0 R15: 00007ffeac2fda98
[  280.248513][ T7008]  </TASK>
[  280.297692][ T7008] overlayfs: unrecognized mount option "++-[&*'þ%*})" or missing value
[  280.474695][ T7013] device syzkaller0 entered promiscuous mode
[  281.234931][ T5717] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  281.437811][ T5717] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid wMaxPacketSize 0
[  281.452331][ T5717] usb 1-1: config 0 interface 0 has no altsetting 0
[  281.489619][ T5717] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  281.498970][ T5717] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  281.507362][ T5717] usb 1-1: Product: syz
[  281.512021][ T5717] usb 1-1: Manufacturer: syz
[  281.516977][ T5717] usb 1-1: SerialNumber: syz
[  281.531318][ T5717] usb 1-1: config 0 descriptor??
[  281.553953][ T5717] usb 1-1: selecting invalid altsetting 0
[  281.761014][    T7] usb 1-1: USB disconnect, device number 4
[  283.505537][ T7046] md: array md0 already has disks!
[  283.541148][ T7046] md: could not open device unknown-block(1,1).
[  283.596515][ T7046] md: error, md_import_device() returned -16
[  283.631930][ T7050] md: personality for level  is not loaded!
[  283.741733][ T7046] md: could not open device unknown-block(1,2).
[  283.770676][ T7046] md: error, md_import_device() returned -16
[  285.282973][ T7070] FAULT_INJECTION: forcing a failure.
[  285.282973][ T7070] name failslab, interval 1, probability 0, space 0, times 0
[  285.304590][ T7070] CPU: 1 PID: 7070 Comm: syz.4.713 Not tainted syzkaller #0
[  285.311927][ T7070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  285.322008][ T7070] Call Trace:
[  285.325323][ T7070]  <TASK>
[  285.328272][ T7070]  dump_stack_lvl+0x188/0x24e
[  285.333008][ T7070]  ? show_regs_print_info+0x12/0x12
[  285.338251][ T7070]  ? load_image+0x410/0x410
[  285.342824][ T7070]  ? __might_sleep+0xd0/0xd0
[  285.347451][ T7070]  ? __lock_acquire+0x7c40/0x7c40
[  285.352519][ T7070]  should_fail_ex+0x390/0x4c0
[  285.357241][ T7070]  should_failslab+0x5/0x20
[  285.361792][ T7070]  slab_pre_alloc_hook+0x59/0x300
[  285.362518][ T7075] overlayfs: unrecognized mount option "++-[&*'þ%*})" or missing value
[  285.366833][ T7070]  kmem_cache_alloc+0x56/0x2f0
[  285.366862][ T7070]  ? security_file_alloc+0x30/0x110
[  285.366887][ T7070]  security_file_alloc+0x30/0x110
[  285.366909][ T7070]  __alloc_file+0xc2/0x230
[  285.394538][ T7070]  alloc_empty_file+0x90/0x180
[  285.399322][ T7070]  alloc_file+0x5b/0x5f0
[  285.403573][ T7070]  alloc_file_pseudo+0x180/0x200
[  285.408516][ T7070]  ? alloc_empty_file_noaccount+0x80/0x80
[  285.414239][ T7070]  ? anon_inode_make_secure_inode+0xf7/0x160
[  285.420225][ T7070]  ? do_compat_epoll_pwait+0x1c0/0x1c0
[  285.425694][ T7070]  ? _raw_spin_unlock+0x24/0x40
[  285.430558][ T7070]  __se_sys_memfd_secret+0x125/0x2f0
[  285.435887][ T7070]  do_syscall_64+0x4c/0xa0
[  285.440315][ T7070]  ? clear_bhb_loop+0x60/0xb0
[  285.444998][ T7070]  ? clear_bhb_loop+0x60/0xb0
[  285.449682][ T7070]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  285.455581][ T7070] RIP: 0033:0x7f625f79e159
[  285.460000][ T7070] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  285.479623][ T7070] RSP: 002b:00007f6260695028 EFLAGS: 00000246 ORIG_RAX: 00000000000001bf
[  285.488080][ T7070] RAX: ffffffffffffffda RBX: 00007f625fa25fa0 RCX: 00007f625f79e159
[  285.496062][ T7070] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  285.504036][ T7070] RBP: 00007f625f835024 R08: 0000000000000000 R09: 0000000000000000
[  285.512007][ T7070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  285.519996][ T7070] R13: 00007f625fa26038 R14: 00007f625fa25fa0 R15: 00007ffeac2fda98
[  285.527984][ T7070]  </TASK>
[  285.601319][ T7074] device syzkaller0 entered promiscuous mode
[  285.652488][ T7078] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus
[  290.308905][ T7097] netlink: 'syz.1.720': attribute type 1 has an invalid length.
[  290.449566][ T7099] device gretap1 entered promiscuous mode
[  290.788362][ T7124] loop1: detected capacity change from 0 to 2048
[  290.792845][ T7128] loop3: detected capacity change from 0 to 1024
[  290.846270][ T7128] ext4: Unknown parameter 'context'
[  290.872442][ T7124] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  290.953364][ T5717] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  291.399977][ T5717] usb 5-1: unable to get BOS descriptor or descriptor too short
[  291.921296][ T7136] ALSA: mixer_oss: invalid OSS volume ''
[  292.008154][ T5717] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  292.075876][ T5717] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  292.127622][ T5717] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  292.193118][ T5717] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  292.227619][ T5717] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  292.249139][ T5717] usb 5-1: Product: syz
[  292.330257][ T7149] loop0: detected capacity change from 0 to 1024
[  292.341783][ T5717] usb 5-1: Manufacturer: syz
[  292.387154][ T5717] usb 5-1: SerialNumber: syz
[  292.633789][ T7149] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended
[  293.115319][ T7149] EXT4-fs (loop0): Errors on filesystem, clearing orphan list.
[  293.122980][ T7149] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  293.216667][   T26] audit: type=1800 audit(1788602837.198:81): pid=7124 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.728" name="file1" dev="loop1" ino=15 res=0 errno=0
[  293.304641][   T26] audit: type=1800 audit(1788602837.228:82): pid=7135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.728" name="file1" dev="loop1" ino=15 res=0 errno=0
[  293.430539][ T4276] EXT4-fs (loop1): unmounting filesystem.
[  293.442715][ T4273] EXT4-fs (loop0): unmounting filesystem.
[  293.530935][ T7163] loop2: detected capacity change from 0 to 1024
[  293.579998][ T5717] snd-usb-audio: probe of 5-1:1.0 failed with error -22
[  293.614222][ T7163] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  293.626627][ T7165] loop0: detected capacity change from 0 to 512
[  293.642258][ T7165] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  293.666474][ T5717] usb 5-1: USB disconnect, device number 8
[  293.897899][ T4280] EXT4-fs (loop2): unmounting filesystem.
[  293.898880][ T6706] udevd[6706]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  294.178554][ T7178] md: array md0 already has disks!
[  294.223395][ T7178] md: could not open device unknown-block(1,1).
[  294.250785][ T7178] md: error, md_import_device() returned -16
[  295.100275][ T7182] ALSA: mixer_oss: invalid OSS volume ''
[  295.136453][ T7184] md: personality for level  is not loaded!
[  295.209590][ T7160] loop3: detected capacity change from 0 to 32768
[  295.297251][ T7160] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.738 (7160)
[  295.374734][ T7188] md: could not open device unknown-block(1,2).
[  295.381069][ T7188] md: error, md_import_device() returned -16
[  295.431526][ T7196] loop1: detected capacity change from 0 to 128
[  295.440228][ T7160] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  295.492172][ T7160] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  295.520938][ T7160] BTRFS info (device loop3): setting nodatacow, compression disabled
[  295.553456][ T7160] BTRFS info (device loop3): setting datasum, datacow enabled
[  295.581659][ T7160] BTRFS info (device loop3): force clearing of disk cache
[  295.605850][ T7160] BTRFS info (device loop3): enabling ssd optimizations
[  295.620562][ T7160] BTRFS info (device loop3): using spread ssd allocation scheme
[  295.637390][ T7160] BTRFS info (device loop3): turning on sync discard
[  295.652426][ T7160] BTRFS info (device loop3): turning on flush-on-commit
[  295.695789][ T7160] BTRFS info (device loop3): not using ssd optimizations
[  295.714828][ T7160] BTRFS info (device loop3): not using spread ssd allocation scheme
[  295.722909][ T7160] BTRFS info (device loop3): using free space tree
[  295.785638][ T7201] loop1: detected capacity change from 0 to 1024
[  295.834870][ T7201] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended
[  295.896090][ T7201] EXT4-fs (loop1): Errors on filesystem, clearing orphan list.
[  295.903676][ T7201] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  296.082274][ T4276] EXT4-fs (loop1): unmounting filesystem.
[  296.181738][ T7160] BTRFS info (device loop3): rebuilding free space tree
[  296.327630][ T7160] BTRFS info (device loop3): balance: start -d -m
[  296.349269][ T7160] BTRFS info (device loop3): relocating block group 6881280 flags data|metadata
[  296.524927][ T7160] BTRFS info (device loop3): relocating block group 5242880 flags data|metadata
[  296.692383][ T7160] BTRFS info (device loop3): balance: canceled
[  296.955507][ T4274] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  297.807698][ T7239] ALSA: mixer_oss: invalid OSS volume ''
[  297.919505][ T7248] loop1: detected capacity change from 0 to 512
[  300.318789][ T7275] ALSA: mixer_oss: invalid OSS volume ''
[  302.971379][ T7316] ALSA: mixer_oss: invalid OSS volume ''
[  303.205662][ T7330] netlink: 'syz.1.789': attribute type 10 has an invalid length.
[  303.278681][ T7333] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus
[  305.012110][ T7350] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  305.658274][ T7367] usb usb8: usbfs: process 7367 (syz.1.799) did not claim interface 0 before use
[  306.610885][ T7368] ALSA: mixer_oss: invalid OSS volume ''
[  307.311953][ T7389] device syzkaller0 entered promiscuous mode
[  307.663328][ T7395] loop4: detected capacity change from 0 to 128
[  307.725967][ T7395] EXT4-fs: Ignoring removed i_version option
[  307.959171][ T7395] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  308.040139][ T7395] ext4 filesystem being mounted at /154/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  308.224805][   T26] audit: type=1800 audit(1788602852.208:83): pid=7395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.808" name="file1" dev="loop4" ino=12 res=0 errno=0
[  308.401986][ T4275] EXT4-fs (loop4): unmounting filesystem.
[  308.512561][ T7418] input: syz0 as /devices/virtual/input/input32
[  310.401352][ T7440] loop2: detected capacity change from 0 to 512
[  310.481907][ T7440] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2
[  310.496574][ T7440] EXT4-fs error (device loop2): ext4_iget_extra_inode:4763: inode #15: comm syz.2.822: corrupted in-inode xattr
[  310.566839][ T7440] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.822: couldn't read orphan inode 15 (err -117)
[  310.641825][ T7440] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  310.652937][ T7444] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  310.879566][ T4280] EXT4-fs (loop2): unmounting filesystem.
[  310.939660][ T7457] loop4: detected capacity change from 0 to 512
[  311.044156][ T7457] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  311.086064][ T7462] input: syz0 as /devices/virtual/input/input33
[  311.273343][ T4275] EXT4-fs (loop4): unmounting filesystem.
[  311.830899][ T7482] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  312.211250][ T7497] loop3: detected capacity change from 0 to 512
[  312.287139][ T7497] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  312.377588][ T7497] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  312.449488][ T7499] type: 16084 invalid
[  312.469531][ T7497] EXT4-fs (loop3): 1 truncate cleaned up
[  312.489225][ T7502] loop0: detected capacity change from 0 to 1024
[  312.512850][ T7497] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  312.566088][ T7502] EXT4-fs: Ignoring removed nomblk_io_submit option
[  312.706401][ T7502] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  312.957873][ T4274] EXT4-fs (loop3): unmounting filesystem.
[  313.276351][ T4273] EXT4-fs (loop0): unmounting filesystem.
[  313.542195][ T7514] netlink: 28 bytes leftover after parsing attributes in process `syz.3.845'.
[  313.745659][ T7515] Invalid ELF header magic: != ELF
[  314.081568][ T7536] device syzkaller0 entered promiscuous mode
[  314.441558][ T7550] netlink: 28 bytes leftover after parsing attributes in process `syz.4.860'.
[  314.966576][ T7548] loop1: detected capacity change from 0 to 32768
[  314.991313][ T7548] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.859 (7548)
[  315.046723][ T7548] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  315.065318][ T7548] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  315.084575][ T7548] BTRFS info (device loop1): setting nodatacow, compression disabled
[  315.114225][ T7548] BTRFS info (device loop1): setting datasum, datacow enabled
[  315.141266][ T7548] BTRFS info (device loop1): force clearing of disk cache
[  315.174805][ T7548] BTRFS info (device loop1): enabling ssd optimizations
[  315.181806][ T7548] BTRFS info (device loop1): using spread ssd allocation scheme
[  315.224786][ T7548] BTRFS info (device loop1): turning on sync discard
[  315.257321][ T7548] BTRFS info (device loop1): turning on flush-on-commit
[  315.270372][ T7548] BTRFS info (device loop1): not using ssd optimizations
[  315.292677][ T7548] BTRFS info (device loop1): not using spread ssd allocation scheme
[  315.317699][ T7548] BTRFS info (device loop1): using free space tree
[  315.605121][ T7548] BTRFS info (device loop1): rebuilding free space tree
[  315.748437][ T7548] BTRFS info (device loop1): balance: start -d -m
[  315.791511][ T7548] BTRFS info (device loop1): relocating block group 6881280 flags data|metadata
[  315.968113][ T7548] BTRFS info (device loop1): relocating block group 5242880 flags data|metadata
[  316.032821][ T7548] BTRFS info (device loop1): balance: canceled
[  316.187197][ T4276] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  317.177958][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  317.184379][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  317.961502][ T7593] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  318.239808][ T7616] netlink: 28 bytes leftover after parsing attributes in process `syz.3.871'.
[  318.250891][ T7614] loop1: detected capacity change from 0 to 2048
[  318.382178][ T7614] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  318.457296][ T7620] Invalid ELF header magic: != ELF
[  318.498213][   T26] audit: type=1804 audit(1788602862.478:84): pid=7614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.869" name="/newroot/206/file1/file1" dev="loop1" ino=15 res=1 errno=0
[  318.624060][ T4276] EXT4-fs (loop1): unmounting filesystem.
[  319.395145][ T7637] device syzkaller0 entered promiscuous mode
[  324.087971][ T7665] netlink: 56 bytes leftover after parsing attributes in process `syz.3.883'.
[  324.214869][ T7669] netlink: 32 bytes leftover after parsing attributes in process `syz.1.885'.
[  324.583806][ T7680] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus
[  325.366671][ T7699] device syzkaller0 entered promiscuous mode
[  325.602731][ T7704] netlink: 56 bytes leftover after parsing attributes in process `syz.2.896'.
[  328.789651][ T7723] netlink: 32 bytes leftover after parsing attributes in process `syz.2.900'.
[  329.163508][ T7747] netlink: 56 bytes leftover after parsing attributes in process `syz.3.908'.
[  330.118945][ T7751] ALSA: mixer_oss: invalid OSS volume ''
[  330.482727][ T7768] device syzkaller0 entered promiscuous mode
[  330.499411][ T7775] netlink: 32 bytes leftover after parsing attributes in process `syz.1.920'.
[  330.656458][ T7784] loop1: detected capacity change from 0 to 764
[  330.743714][ T7787] loop1: detected capacity change from 0 to 512
[  330.751856][ T7787] EXT4-fs: Ignoring removed orlov option
[  330.759205][ T7787] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  330.801831][ T7787] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #16: comm syz.1.922: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 28(0), depth 0(0)
[  330.821330][ T7765] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  330.822869][ T7787] EXT4-fs error (device loop1): ext4_orphan_get:1414: comm syz.1.922: couldn't read orphan inode 16 (err -117)
[  330.843440][ T7787] EXT4-fs (loop1): 1 orphan inode deleted
[  330.852588][ T7787] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  330.874826][ T7787] EXT4-fs error (device loop1): ext4_find_dest_de:2115: inode #12: block 7: comm syz.1.922: bad entry in directory: rec_len is too small for name_len - offset=0, inode=13, rec_len=16, size=56 fake=0
[  331.115275][ T4276] EXT4-fs (loop1): unmounting filesystem.
[  331.533973][ T7797] netlink: 32 bytes leftover after parsing attributes in process `syz.3.924'.
[  331.784749][   T26] audit: type=1800 audit(1788602875.478:85): pid=7794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.923" name="console" dev="configfs" ino=44863 res=0 errno=0
[  332.899660][ T7810] overlayfs: failed to resolve './file0': -2
[  333.552140][ T7806] ALSA: mixer_oss: invalid OSS volume ''
[  333.798768][ T7803] loop3: detected capacity change from 0 to 32768
[  333.832194][ T7803] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.927 (7803)
[  333.943910][ T7803] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  333.973962][ T7803] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  334.012562][ T7803] BTRFS info (device loop3): setting nodatacow, compression disabled
[  334.046451][ T7803] BTRFS info (device loop3): setting datasum, datacow enabled
[  334.054008][ T7803] BTRFS info (device loop3): force clearing of disk cache
[  334.077939][ T7803] BTRFS info (device loop3): enabling ssd optimizations
[  334.120367][ T7803] BTRFS info (device loop3): using spread ssd allocation scheme
[  334.149167][ T7803] BTRFS info (device loop3): turning on sync discard
[  334.170752][ T7803] BTRFS info (device loop3): turning on flush-on-commit
[  334.188376][ T7803] BTRFS info (device loop3): not using ssd optimizations
[  334.208312][ T7803] BTRFS info (device loop3): not using spread ssd allocation scheme
[  334.235613][ T7803] BTRFS info (device loop3): using free space tree
[  334.464229][ T7803] BTRFS info (device loop3): rebuilding free space tree
[  334.665625][ T7803] BTRFS info (device loop3): balance: start -d -m
[  334.699983][ T7803] BTRFS info (device loop3): relocating block group 6881280 flags data|metadata
[  334.837779][ T7803] BTRFS info (device loop3): relocating block group 5242880 flags data|metadata
[  334.967379][ T7803] BTRFS info (device loop3): balance: canceled
[  335.162982][ T4274] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  336.154214][ T7856] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  336.443732][ T7867] input: syz0 as /devices/virtual/input/input34
[  337.695645][ T7883] overlayfs: failed to resolve './file0': -2
[  338.413398][ T7875] ALSA: mixer_oss: invalid OSS volume ''
[  338.704387][ T7895] loop2: detected capacity change from 0 to 1024
[  338.726020][ T7895] EXT4-fs: Ignoring removed nomblk_io_submit option
[  338.818131][ T7895] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  339.290001][ T4280] EXT4-fs (loop2): unmounting filesystem.
[  339.504153][ T7906] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  339.727645][ T7922] device syzkaller0 entered promiscuous mode
[  339.813738][   T26] audit: type=1800 audit(1788602883.788:86): pid=7927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.951" name="console" dev="configfs" ino=45001 res=0 errno=0
[  342.509583][ T7949] loop4: detected capacity change from 0 to 1024
[  342.526057][ T7949] EXT4-fs: Ignoring removed nomblk_io_submit option
[  342.594022][ T7949] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  342.972285][ T4275] EXT4-fs (loop4): unmounting filesystem.
[  349.286747][ T8033] device syzkaller0 entered promiscuous mode
[  349.515841][ T8055] FAULT_INJECTION: forcing a failure.
[  349.515841][ T8055] name failslab, interval 1, probability 0, space 0, times 0
[  349.529647][ T8055] CPU: 1 PID: 8055 Comm: syz.3.994 Not tainted syzkaller #0
[  349.536973][ T8055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  349.547057][ T8055] Call Trace:
[  349.550505][ T8055]  <TASK>
[  349.553523][ T8055]  dump_stack_lvl+0x188/0x24e
[  349.558339][ T8055]  ? show_regs_print_info+0x12/0x12
[  349.563695][ T8055]  ? load_image+0x410/0x410
[  349.568252][ T8055]  ? __might_sleep+0xd0/0xd0
[  349.572977][ T8055]  ? __lock_acquire+0x7c40/0x7c40
[  349.578035][ T8055]  should_fail_ex+0x390/0x4c0
[  349.582798][ T8055]  should_failslab+0x5/0x20
[  349.587375][ T8055]  slab_pre_alloc_hook+0x59/0x300
[  349.592451][ T8055]  kmem_cache_alloc+0x56/0x2f0
[  349.597222][ T8055]  ? security_file_alloc+0x30/0x110
[  349.602501][ T8055]  security_file_alloc+0x30/0x110
[  349.607524][ T8055]  __alloc_file+0xc2/0x230
[  349.612032][ T8055]  alloc_empty_file+0x90/0x180
[  349.616799][ T8055]  alloc_file+0x5b/0x5f0
[  349.621680][ T8055]  alloc_file_pseudo+0x180/0x200
[  349.626635][ T8055]  ? alloc_empty_file_noaccount+0x80/0x80
[  349.632357][ T8055]  ? anon_inode_make_secure_inode+0xf7/0x160
[  349.638464][ T8055]  ? do_compat_epoll_pwait+0x1c0/0x1c0
[  349.643924][ T8055]  ? _raw_spin_unlock+0x24/0x40
[  349.648856][ T8055]  __se_sys_memfd_secret+0x125/0x2f0
[  349.654221][ T8055]  do_syscall_64+0x4c/0xa0
[  349.658638][ T8055]  ? clear_bhb_loop+0x60/0xb0
[  349.663323][ T8055]  ? clear_bhb_loop+0x60/0xb0
[  349.668019][ T8055]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  349.673952][ T8055] RIP: 0033:0x7feae6d9e159
[  349.677118][ T4262] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  349.678446][ T8055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  349.705687][ T8055] RSP: 002b:00007feae7caf028 EFLAGS: 00000246 ORIG_RAX: 00000000000001bf
[  349.714098][ T8055] RAX: ffffffffffffffda RBX: 00007feae7026090 RCX: 00007feae6d9e159
[  349.722069][ T8055] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  349.730036][ T8055] RBP: 00007feae6e35024 R08: 0000000000000000 R09: 0000000000000000
[  349.738013][ T8055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  349.746072][ T8055] R13: 00007feae7026128 R14: 00007feae7026090 R15: 00007fff9b10b688
[  349.754057][ T8055]  </TASK>
[  349.769823][ T8055] overlayfs: unrecognized mount option "++-[&*'þ%*})" or missing value
[  349.869449][ T4262] usb 2-1: unable to get BOS descriptor or descriptor too short
[  349.888884][ T4262] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  349.909557][ T4262] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  349.919102][ T4262] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  349.972373][ T4262] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  349.981866][ T4262] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  349.990244][ T4262] usb 2-1: Product: syz
[  349.994667][ T4262] usb 2-1: Manufacturer: syz
[  349.999430][ T4262] usb 2-1: SerialNumber: syz
[  352.342391][ T4262] snd-usb-audio: probe of 2-1:1.0 failed with error -22
[  352.383649][ T4262] usb 2-1: USB disconnect, device number 13
[  352.416860][ T7764] udevd[7764]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  353.664688][ T8089] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1004'.
[  353.938653][ T8089] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1004'.
[  354.113309][ T8099] device syzkaller0 entered promiscuous mode
[  354.138903][ T8106] FAULT_INJECTION: forcing a failure.
[  354.138903][ T8106] name fail_futex, interval 1, probability 0, space 0, times 0
[  354.174201][ T8106] CPU: 0 PID: 8106 Comm: syz.3.1010 Not tainted syzkaller #0
[  354.181624][ T8106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  354.196693][ T8106] Call Trace:
[  354.200434][ T8106]  <TASK>
[  354.206416][ T8106]  dump_stack_lvl+0x188/0x24e
[  354.213122][ T8106]  ? show_regs_print_info+0x12/0x12
[  354.218430][ T8106]  ? load_image+0x410/0x410
[  354.222973][ T8106]  ? kmem_cache_alloc+0x18b/0x2f0
[  354.228024][ T8106]  ? alloc_file+0x5b/0x5f0
[  354.232460][ T8106]  ? __se_sys_memfd_secret+0x125/0x2f0
[  354.237921][ T8106]  ? do_syscall_64+0x4c/0xa0
[  354.242514][ T8106]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  354.251033][ T8106]  should_fail_ex+0x390/0x4c0
[  354.255843][ T8106]  get_futex_key+0x1b1/0x1000
[  354.260653][ T8106]  ? futex_setup_timer+0xc0/0xc0
[  354.265786][ T8106]  futex_wake+0x123/0x4f0
[  354.270242][ T8106]  ? verify_lock_unused+0x140/0x140
[  354.275536][ T8106]  ? lockdep_init_map_type+0x98/0x8d0
[  354.280915][ T8106]  ? futex_wake_mark+0x150/0x150
[  354.285891][ T8106]  do_futex+0x2e2/0x320
[  354.290050][ T8106]  ? __ia32_sys_get_robust_list+0x100/0x100
[  354.296219][ T8106]  ? fd_install+0x5c/0x4e0
[  354.300662][ T8106]  __se_sys_futex+0x381/0x410
[  354.305359][ T8106]  ? __x64_sys_futex+0xf0/0xf0
[  354.310234][ T8106]  ? __x64_sys_futex+0x1d/0xf0
[  354.315006][ T8106]  do_syscall_64+0x4c/0xa0
[  354.319437][ T8106]  ? clear_bhb_loop+0x60/0xb0
[  354.324347][ T8106]  ? clear_bhb_loop+0x60/0xb0
[  354.329108][ T8106]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  354.335520][ T8106] RIP: 0033:0x7feae6d9e159
[  354.339925][ T8106] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  354.359567][ T8106] RSP: 002b:00007feae7caf0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  354.370203][ T8106] RAX: ffffffffffffffda RBX: 00007feae7026098 RCX: 00007feae6d9e159
[  354.380433][ T8106] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007feae702609c
[  354.391388][ T8106] RBP: 00007feae7026090 R08: 0005a34681b58264 R09: 0000000000000000
[  354.399366][ T8106] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000
[  354.407357][ T8106] R13: 00007feae7026128 R14: 00007fff9b10b5a0 R15: 00007fff9b10b688
[  354.415362][ T8106]  </TASK>
[  354.442082][ T8089] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1004'.
[  354.443217][ T8104] overlayfs: unrecognized mount option "++-[&*'þ%*})" or missing value
[  355.555733][ T8123] syz.4.1014 uses obsolete (PF_INET,SOCK_PACKET)
[  356.124553][ T4262] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  356.334310][ T4262] usb 1-1: unable to get BOS descriptor or descriptor too short
[  356.343672][ T4262] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  356.354342][ T4262] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  356.368039][ T4262] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  356.383589][ T4262] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  356.392888][ T4262] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  356.401063][ T4262] usb 1-1: Product: syz
[  356.405548][ T4262] usb 1-1: Manufacturer: syz
[  356.410194][ T4262] usb 1-1: SerialNumber: syz
[  358.775165][ T4262] snd-usb-audio: probe of 1-1:1.0 failed with error -22
[  358.784337][ T4262] usb 1-1: USB disconnect, device number 5
[  359.023654][ T8153] netlink: 'syz.4.1019': attribute type 10 has an invalid length.
[  359.041918][ T8139] udevd[8139]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  359.863584][ T8161] FAULT_INJECTION: forcing a failure.
[  359.863584][ T8161] name fail_futex, interval 1, probability 0, space 0, times 0
[  359.876578][ T8161] CPU: 0 PID: 8161 Comm: syz.2.1026 Not tainted syzkaller #0
[  359.883975][ T8161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  359.894054][ T8161] Call Trace:
[  359.897354][ T8161]  <TASK>
[  359.900310][ T8161]  dump_stack_lvl+0x188/0x24e
[  359.905034][ T8161]  ? show_regs_print_info+0x12/0x12
[  359.910268][ T8161]  ? load_image+0x410/0x410
[  359.914793][ T8161]  ? kmem_cache_alloc+0x18b/0x2f0
[  359.919819][ T8161]  ? alloc_file+0x5b/0x5f0
[  359.924232][ T8161]  ? __se_sys_memfd_secret+0x125/0x2f0
[  359.929694][ T8161]  ? do_syscall_64+0x4c/0xa0
[  359.934299][ T8161]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  359.940380][ T8161]  should_fail_ex+0x390/0x4c0
[  359.945066][ T8161]  get_futex_key+0x1b1/0x1000
[  359.949756][ T8161]  ? futex_setup_timer+0xc0/0xc0
[  359.954719][ T8161]  futex_wake+0x123/0x4f0
[  359.959062][ T8161]  ? verify_lock_unused+0x140/0x140
[  359.964268][ T8161]  ? lockdep_init_map_type+0x98/0x8d0
[  359.969652][ T8161]  ? futex_wake_mark+0x150/0x150
[  359.974601][ T8161]  do_futex+0x2e2/0x320
[  359.978758][ T8161]  ? __ia32_sys_get_robust_list+0x100/0x100
[  359.984651][ T8161]  ? fd_install+0x5c/0x4e0
[  359.989080][ T8161]  __se_sys_futex+0x381/0x410
[  359.993763][ T8161]  ? __x64_sys_futex+0xf0/0xf0
[  359.998531][ T8161]  ? __x64_sys_futex+0x1d/0xf0
[  360.003292][ T8161]  do_syscall_64+0x4c/0xa0
[  360.007714][ T8161]  ? clear_bhb_loop+0x60/0xb0
[  360.012398][ T8161]  ? clear_bhb_loop+0x60/0xb0
[  360.017079][ T8161]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  360.022980][ T8161] RIP: 0033:0x7f65ed39e159
[  360.027393][ T8161] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  360.047001][ T8161] RSP: 002b:00007f65ee2800e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  360.055419][ T8161] RAX: ffffffffffffffda RBX: 00007f65ed625fa8 RCX: 00007f65ed39e159
[  360.063389][ T8161] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f65ed625fac
[  360.071360][ T8161] RBP: 00007f65ed625fa0 R08: 00308d9ad789cb64 R09: 0000000000000000
[  360.079422][ T8161] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000
[  360.087391][ T8161] R13: 00007f65ed626038 R14: 00007fff62c6d200 R15: 00007fff62c6d2e8
[  360.095377][ T8161]  </TASK>
[  360.145727][ T8161] overlayfs: unrecognized mount option "++-[&*'þ%*})" or missing value
[  360.276718][ T8166] device syzkaller0 entered promiscuous mode
[  362.594687][ T4319] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  362.786893][ T4319] usb 1-1: unable to get BOS descriptor or descriptor too short
[  362.824249][ T4319] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  362.849521][ T4319] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  362.886991][ T4319] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  362.930941][ T4319] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  362.963940][ T4319] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  362.987902][ T4319] usb 1-1: Product: syz
[  363.007064][ T4319] usb 1-1: Manufacturer: syz
[  363.023146][ T4319] usb 1-1: SerialNumber: syz
[  365.307701][ T4319] snd-usb-audio: probe of 1-1:1.0 failed with error -22
[  365.414676][ T4319] usb 1-1: USB disconnect, device number 6
[  365.533600][ T8139] udevd[8139]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  366.202993][ T8225] autofs4:pid:8225:autofs_fill_super: called with bogus options
[  366.675564][ T8244] FAULT_INJECTION: forcing a failure.
[  366.675564][ T8244] name failslab, interval 1, probability 0, space 0, times 0
[  366.692312][ T8244] CPU: 0 PID: 8244 Comm: syz.2.1047 Not tainted syzkaller #0
[  366.699737][ T8244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  366.709818][ T8244] Call Trace:
[  366.713089][ T8244]  <TASK>
[  366.716016][ T8244]  dump_stack_lvl+0x188/0x24e
[  366.720701][ T8244]  ? show_regs_print_info+0x12/0x12
[  366.725902][ T8244]  ? load_image+0x410/0x410
[  366.730429][ T8244]  ? __might_sleep+0xd0/0xd0
[  366.735024][ T8244]  ? __lock_acquire+0x7c40/0x7c40
[  366.740082][ T8244]  should_fail_ex+0x390/0x4c0
[  366.744757][ T8244]  should_failslab+0x5/0x20
[  366.749257][ T8244]  slab_pre_alloc_hook+0x59/0x300
[  366.754364][ T8244]  kmem_cache_alloc+0x56/0x2f0
[  366.759114][ T8244]  ? security_file_alloc+0x30/0x110
[  366.764307][ T8244]  security_file_alloc+0x30/0x110
[  366.769329][ T8244]  __alloc_file+0xc2/0x230
[  366.773739][ T8244]  alloc_empty_file+0x90/0x180
[  366.778492][ T8244]  alloc_file+0x5b/0x5f0
[  366.782725][ T8244]  alloc_file_pseudo+0x180/0x200
[  366.787654][ T8244]  ? alloc_empty_file_noaccount+0x80/0x80
[  366.793382][ T8244]  ? anon_inode_make_secure_inode+0xf7/0x160
[  366.799355][ T8244]  ? do_compat_epoll_pwait+0x1c0/0x1c0
[  366.804802][ T8244]  ? _raw_spin_unlock+0x24/0x40
[  366.809663][ T8244]  __se_sys_memfd_secret+0x125/0x2f0
[  366.815005][ T8244]  do_syscall_64+0x4c/0xa0
[  366.819436][ T8244]  ? clear_bhb_loop+0x60/0xb0
[  366.824112][ T8244]  ? clear_bhb_loop+0x60/0xb0
[  366.828784][ T8244]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  366.834683][ T8244] RIP: 0033:0x7f65ed39e159
[  366.839120][ T8244] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  366.858716][ T8244] RSP: 002b:00007f65ee280028 EFLAGS: 00000246 ORIG_RAX: 00000000000001bf
[  366.867119][ T8244] RAX: ffffffffffffffda RBX: 00007f65ed625fa0 RCX: 00007f65ed39e159
[  366.875078][ T8244] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  366.883064][ T8244] RBP: 00007f65ed435024 R08: 0000000000000000 R09: 0000000000000000
[  366.891044][ T8244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  366.899016][ T8244] R13: 00007f65ed626038 R14: 00007f65ed625fa0 R15: 00007fff62c6d2e8
[  366.907001][ T8244]  </TASK>
[  366.948053][ T8247] overlayfs: unrecognized mount option "++-[&*'þ%*})" or missing value
[  367.392207][ T8249] device syzkaller0 entered promiscuous mode
[  368.144622][ T4396] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  368.349002][ T4396] usb 4-1: unable to get BOS descriptor or descriptor too short
[  368.391926][ T4396] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  368.407956][ T4396] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  368.427427][ T4396] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  368.482077][ T4396] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  368.496581][ T4396] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  368.508681][ T4396] usb 4-1: Product: syz
[  368.512892][ T4396] usb 4-1: Manufacturer: syz
[  368.519832][ T4396] usb 4-1: SerialNumber: syz
[  368.812408][ T8270] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1054'.
[  371.699565][ T4396] snd-usb-audio: probe of 4-1:1.0 failed with error -22
[  371.752021][ T4396] usb 4-1: USB disconnect, device number 6
[  371.798911][ T8303] input: syz0 as /devices/virtual/input/input35
[  371.869152][ T8310] tun0: tun_chr_ioctl cmd 1074025677
[  371.883367][ T8310] tun0: linktype set to 289
[  372.914063][ T8295] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  373.012374][ T8324] FAULT_INJECTION: forcing a failure.
[  373.012374][ T8324] name fail_futex, interval 1, probability 0, space 0, times 0
[  373.025692][ T8324] CPU: 0 PID: 8324 Comm: syz.3.1069 Not tainted syzkaller #0
[  373.033108][ T8324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  373.043200][ T8324] Call Trace:
[  373.046505][ T8324]  <TASK>
[  373.049461][ T8324]  dump_stack_lvl+0x188/0x24e
[  373.054189][ T8324]  ? show_regs_print_info+0x12/0x12
[  373.059435][ T8324]  ? load_image+0x410/0x410
[  373.063981][ T8324]  ? kmem_cache_alloc+0x18b/0x2f0
[  373.069053][ T8324]  ? alloc_file+0x5b/0x5f0
[  373.073500][ T8324]  ? __se_sys_memfd_secret+0x125/0x2f0
[  373.078999][ T8324]  ? do_syscall_64+0x4c/0xa0
[  373.083623][ T8324]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  373.089737][ T8324]  should_fail_ex+0x390/0x4c0
[  373.094562][ T8324]  get_futex_key+0x1b1/0x1000
[  373.099245][ T8324]  ? futex_setup_timer+0xc0/0xc0
[  373.104788][ T8324]  futex_wake+0x123/0x4f0
[  373.109107][ T8324]  ? verify_lock_unused+0x140/0x140
[  373.114312][ T8324]  ? lockdep_init_map_type+0x98/0x8d0
[  373.119676][ T8324]  ? futex_wake_mark+0x150/0x150
[  373.124607][ T8324]  do_futex+0x2e2/0x320
[  373.128752][ T8324]  ? __ia32_sys_get_robust_list+0x100/0x100
[  373.134640][ T8324]  ? fd_install+0x5c/0x4e0
[  373.139091][ T8324]  __se_sys_futex+0x381/0x410
[  373.143780][ T8324]  ? __x64_sys_futex+0xf0/0xf0
[  373.148546][ T8324]  ? __x64_sys_futex+0x1d/0xf0
[  373.153313][ T8324]  do_syscall_64+0x4c/0xa0
[  373.157734][ T8324]  ? clear_bhb_loop+0x60/0xb0
[  373.162419][ T8324]  ? clear_bhb_loop+0x60/0xb0
[  373.167108][ T8324]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  373.173011][ T8324] RIP: 0033:0x7feae6d9e159
[  373.177435][ T8324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  373.197050][ T8324] RSP: 002b:00007feae7cd00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  373.205484][ T8324] RAX: ffffffffffffffda RBX: 00007feae7025fa8 RCX: 00007feae6d9e159
[  373.213460][ T8324] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007feae7025fac
[  373.221435][ T8324] RBP: 00007feae7025fa0 R08: 00397e6d1cdb00a4 R09: 0000000000000000
[  373.229408][ T8324] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000
[  373.237377][ T8324] R13: 00007feae7026038 R14: 00007fff9b10b5a0 R15: 00007fff9b10b688
[  373.245362][ T8324]  </TASK>
[  373.307571][ T8139] udevd[8139]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  373.314690][ T8324] overlayfs: unrecognized mount option "++-[&*'þ%*})" or missing value
[  373.448202][ T8333] device syzkaller0 entered promiscuous mode
[  373.968376][ T4323] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  374.204683][ T4323] usb 5-1: unable to get BOS descriptor or descriptor too short
[  374.257659][ T4323] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  374.384223][ T4323] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  374.506058][ T4323] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  374.683725][ T4323] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  374.695855][ T4323] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  374.714580][ T4323] usb 5-1: Product: syz
[  374.718792][ T4323] usb 5-1: Manufacturer: syz
[  374.723395][ T4323] usb 5-1: SerialNumber: syz
[  374.745591][ T8344] loop0: detected capacity change from 0 to 1024
[  374.762397][ T8344] EXT4-fs: Ignoring removed nomblk_io_submit option
[  374.851613][ T8344] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  375.944744][   T26] audit: type=1800 audit(1788602919.928:87): pid=8344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1077" name="file1" dev="loop0" ino=15 res=0 errno=0
[  376.069678][ T8364] input: syz0 as /devices/virtual/input/input36
[  376.227326][ T4323] snd-usb-audio: probe of 5-1:1.0 failed with error -22
[  376.318181][ T4323] usb 5-1: USB disconnect, device number 9
[  376.370813][ T4273] EXT4-fs (loop0): unmounting filesystem.
[  376.585221][ T8139] udevd[8139]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  376.835356][ T8380] device syzkaller0 entered promiscuous mode
[  376.938371][ T8387] loop2: detected capacity change from 0 to 128
[  377.012617][ T8384] FAULT_INJECTION: forcing a failure.
[  377.012617][ T8384] name failslab, interval 1, probability 0, space 0, times 0
[  377.036493][ T8390] loop0: detected capacity change from 0 to 512
[  377.064268][ T8387] device syzkaller0 entered promiscuous mode
[  377.074120][ T8384] CPU: 0 PID: 8384 Comm: syz.4.1085 Not tainted syzkaller #0
[  377.081563][ T8384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  377.091646][ T8384] Call Trace:
[  377.094946][ T8384]  <TASK>
[  377.097900][ T8384]  dump_stack_lvl+0x188/0x24e
[  377.102607][ T8384]  ? show_regs_print_info+0x12/0x12
[  377.107823][ T8384]  ? load_image+0x410/0x410
[  377.112350][ T8384]  ? __might_sleep+0xd0/0xd0
[  377.116955][ T8384]  ? __lock_acquire+0x7c40/0x7c40
[  377.122008][ T8384]  should_fail_ex+0x390/0x4c0
[  377.126707][ T8384]  should_failslab+0x5/0x20
[  377.131215][ T8384]  slab_pre_alloc_hook+0x59/0x300
[  377.136248][ T8384]  kmem_cache_alloc+0x56/0x2f0
[  377.141017][ T8384]  ? security_file_alloc+0x30/0x110
[  377.146228][ T8384]  security_file_alloc+0x30/0x110
[  377.151258][ T8384]  __alloc_file+0xc2/0x230
[  377.155683][ T8384]  alloc_empty_file+0x90/0x180
[  377.160456][ T8384]  alloc_file+0x5b/0x5f0
[  377.164707][ T8384]  alloc_file_pseudo+0x180/0x200
[  377.169650][ T8384]  ? alloc_empty_file_noaccount+0x80/0x80
[  377.175369][ T8384]  ? anon_inode_make_secure_inode+0xf7/0x160
[  377.181362][ T8384]  ? do_compat_epoll_pwait+0x1c0/0x1c0
[  377.186832][ T8384]  ? _raw_spin_unlock+0x24/0x40
[  377.191697][ T8384]  __se_sys_memfd_secret+0x125/0x2f0
[  377.196999][ T8384]  do_syscall_64+0x4c/0xa0
[  377.201424][ T8384]  ? clear_bhb_loop+0x60/0xb0
[  377.206112][ T8384]  ? clear_bhb_loop+0x60/0xb0
[  377.210806][ T8384]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  377.216720][ T8384] RIP: 0033:0x7f625f79e159
[  377.221144][ T8384] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  377.240765][ T8384] RSP: 002b:00007f6260695028 EFLAGS: 00000246 ORIG_RAX: 00000000000001bf
[  377.249206][ T8384] RAX: ffffffffffffffda RBX: 00007f625fa25fa0 RCX: 00007f625f79e159
[  377.257187][ T8384] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  377.265161][ T8384] RBP: 00007f625f835024 R08: 0000000000000000 R09: 0000000000000000
[  377.273131][ T8384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  377.281104][ T8384] R13: 00007f625fa26038 R14: 00007f625fa25fa0 R15: 00007ffeac2fda98
[  377.289093][ T8384]  </TASK>
[  377.303978][ T8391] overlayfs: unrecognized mount option "++-[&*'þ%*})" or missing value
[  377.341316][ T8390] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  377.374728][ T8390] ext4 filesystem being mounted at /176/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  377.513852][   T26] audit: type=1800 audit(1788602921.488:88): pid=8390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1088" name="file1" dev="loop0" ino=15 res=0 errno=0
[  378.560006][ T4273] EXT4-fs (loop0): unmounting filesystem.
[  378.627021][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  378.633362][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  384.110388][ T8455] FAULT_INJECTION: forcing a failure.
[  384.110388][ T8455] name failslab, interval 1, probability 0, space 0, times 0
[  384.138744][ T8455] CPU: 0 PID: 8455 Comm: syz.2.1108 Not tainted syzkaller #0
[  384.146184][ T8455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  384.156278][ T8455] Call Trace:
[  384.159576][ T8455]  <TASK>
[  384.162525][ T8455]  dump_stack_lvl+0x188/0x24e
[  384.162964][ T8456] overlayfs: unrecognized mount option "++-[&*'þ%*})" or missing value
[  384.167221][ T8455]  ? show_regs_print_info+0x12/0x12
[  384.167256][ T8455]  ? load_image+0x410/0x410
[  384.167282][ T8455]  ? __might_sleep+0xd0/0xd0
[  384.189841][ T8455]  ? __lock_acquire+0x7c40/0x7c40
[  384.194904][ T8455]  should_fail_ex+0x390/0x4c0
[  384.199613][ T8455]  should_failslab+0x5/0x20
[  384.204146][ T8455]  slab_pre_alloc_hook+0x59/0x300
[  384.209220][ T8455]  kmem_cache_alloc+0x56/0x2f0
[  384.214020][ T8455]  ? security_file_alloc+0x30/0x110
[  384.219257][ T8455]  security_file_alloc+0x30/0x110
[  384.224325][ T8455]  __alloc_file+0xc2/0x230
[  384.228775][ T8455]  alloc_empty_file+0x90/0x180
[  384.233576][ T8455]  alloc_file+0x5b/0x5f0
[  384.237830][ T8455]  alloc_file_pseudo+0x180/0x200
[  384.242775][ T8455]  ? alloc_empty_file_noaccount+0x80/0x80
[  384.248499][ T8455]  ? anon_inode_make_secure_inode+0xf7/0x160
[  384.254498][ T8455]  ? do_compat_epoll_pwait+0x1c0/0x1c0
[  384.259967][ T8455]  ? _raw_spin_unlock+0x24/0x40
[  384.264829][ T8455]  __se_sys_memfd_secret+0x125/0x2f0
[  384.270126][ T8455]  do_syscall_64+0x4c/0xa0
[  384.274551][ T8455]  ? clear_bhb_loop+0x60/0xb0
[  384.279234][ T8455]  ? clear_bhb_loop+0x60/0xb0
[  384.283916][ T8455]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  384.289818][ T8455] RIP: 0033:0x7f65ed39e159
[  384.294237][ T8455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  384.313851][ T8455] RSP: 002b:00007f65ee25f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001bf
[  384.322270][ T8455] RAX: ffffffffffffffda RBX: 00007f65ed626090 RCX: 00007f65ed39e159
[  384.330248][ T8455] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  384.338218][ T8455] RBP: 00007f65ed435024 R08: 0000000000000000 R09: 0000000000000000
[  384.346186][ T8455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  384.354154][ T8455] R13: 00007f65ed626128 R14: 00007f65ed626090 R15: 00007fff62c6d2e8
[  384.362142][ T8455]  </TASK>
[  386.329360][ T8465] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1112'.
[  387.764738][   T26] audit: type=1800 audit(1788602931.568:89): pid=8491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1117" name="console" dev="configfs" ino=47118 res=0 errno=0
[  389.042998][ T8512] loop4: detected capacity change from 0 to 512
[  389.072285][ T8514] FAULT_INJECTION: forcing a failure.
[  389.072285][ T8514] name failslab, interval 1, probability 0, space 0, times 0
[  389.127600][ T8517] overlayfs: unrecognized mount option "++-[&*'þ%*})" or missing value
[  389.193724][ T8512] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  389.214938][ T8514] CPU: 0 PID: 8514 Comm: syz.2.1126 Not tainted syzkaller #0
[  389.219136][ T8512] ext4 filesystem being mounted at /222/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  389.222342][ T8514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  389.242828][ T8514] Call Trace:
[  389.246102][ T8514]  <TASK>
[  389.249019][ T8514]  dump_stack_lvl+0x188/0x24e
[  389.253694][ T8514]  ? show_regs_print_info+0x12/0x12
[  389.258895][ T8514]  ? load_image+0x410/0x410
[  389.263414][ T8514]  ? __might_sleep+0xd0/0xd0
[  389.268014][ T8514]  ? __lock_acquire+0x7c40/0x7c40
[  389.273079][ T8514]  should_fail_ex+0x390/0x4c0
[  389.277786][ T8514]  should_failslab+0x5/0x20
[  389.282306][ T8514]  slab_pre_alloc_hook+0x59/0x300
[  389.287358][ T8514]  kmem_cache_alloc+0x56/0x2f0
[  389.292146][ T8514]  ? security_file_alloc+0x30/0x110
[  389.297372][ T8514]  security_file_alloc+0x30/0x110
[  389.302418][ T8514]  __alloc_file+0xc2/0x230
[  389.306857][ T8514]  alloc_empty_file+0x90/0x180
[  389.311641][ T8514]  alloc_file+0x5b/0x5f0
[  389.315904][ T8514]  alloc_file_pseudo+0x180/0x200
[  389.320862][ T8514]  ? alloc_empty_file_noaccount+0x80/0x80
[  389.326602][ T8514]  ? anon_inode_make_secure_inode+0xf7/0x160
[  389.332612][ T8514]  ? do_compat_epoll_pwait+0x1c0/0x1c0
[  389.338101][ T8514]  ? _raw_spin_unlock+0x24/0x40
[  389.342994][ T8514]  __se_sys_memfd_secret+0x125/0x2f0
[  389.348310][ T8514]  do_syscall_64+0x4c/0xa0
[  389.352752][ T8514]  ? clear_bhb_loop+0x60/0xb0
[  389.357452][ T8514]  ? clear_bhb_loop+0x60/0xb0
[  389.362156][ T8514]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  389.368078][ T8514] RIP: 0033:0x7f65ed39e159
[  389.372507][ T8514] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  389.392135][ T8514] RSP: 002b:00007f65ee280028 EFLAGS: 00000246 ORIG_RAX: 00000000000001bf
[  389.400574][ T8514] RAX: ffffffffffffffda RBX: 00007f65ed625fa0 RCX: 00007f65ed39e159
[  389.408573][ T8514] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  389.416564][ T8514] RBP: 00007f65ed435024 R08: 0000000000000000 R09: 0000000000000000
[  389.424553][ T8514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  389.432550][ T8514] R13: 00007f65ed626038 R14: 00007f65ed625fa0 R15: 00007fff62c6d2e8
[  389.440567][ T8514]  </TASK>
[  390.090038][ T8512] EXT4-fs error (device loop4): ext4_empty_dir:3136: inode #12: comm syz.4.1125: invalid size
[  390.176060][ T4275] EXT4-fs (loop4): unmounting filesystem.
[  390.645525][ T4262] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  390.846357][ T4262] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  390.872069][ T4262] usb 5-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  390.929741][ T4262] usb 5-1: config 0 interface 0 has no altsetting 0
[  391.008527][ T8535] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  391.033392][ T4262] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  391.077350][ T4262] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  391.114249][ T8544] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1136'.
[  391.128860][ T4262] usb 5-1: Product: syz
[  391.133081][ T4262] usb 5-1: Manufacturer: syz
[  391.153747][ T4262] usb 5-1: SerialNumber: syz
[  391.195535][ T4262] usb 5-1: config 0 descriptor??
[  391.255708][ T4262] snd-usb-audio: probe of 5-1:0.0 failed with error -22
[  391.288373][ T8139] udevd[8139]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  391.464411][ T4262] usb 5-1: USB disconnect, device number 10
[  392.330697][ T8558] loop3: detected capacity change from 0 to 512
[  392.367030][ T8559] FAULT_INJECTION: forcing a failure.
[  392.367030][ T8559] name failslab, interval 1, probability 0, space 0, times 0
[  392.389910][ T8559] CPU: 1 PID: 8559 Comm: syz.4.1142 Not tainted syzkaller #0
[  392.397347][ T8559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  392.407437][ T8559] Call Trace:
[  392.410751][ T8559]  <TASK>
[  392.413697][ T8559]  dump_stack_lvl+0x188/0x24e
[  392.418422][ T8559]  ? show_regs_print_info+0x12/0x12
[  392.423672][ T8559]  ? load_image+0x410/0x410
[  392.428257][ T8559]  ? __might_sleep+0xd0/0xd0
[  392.432879][ T8559]  ? __lock_acquire+0x7c40/0x7c40
[  392.437945][ T8559]  should_fail_ex+0x390/0x4c0
[  392.442669][ T8559]  should_failslab+0x5/0x20
[  392.447213][ T8559]  slab_pre_alloc_hook+0x59/0x300
[  392.452319][ T8559]  kmem_cache_alloc+0x56/0x2f0
[  392.457118][ T8559]  ? security_file_alloc+0x30/0x110
[  392.462356][ T8559]  security_file_alloc+0x30/0x110
[  392.467414][ T8559]  __alloc_file+0xc2/0x230
[  392.471865][ T8559]  alloc_empty_file+0x90/0x180
[  392.476664][ T8559]  alloc_file+0x5b/0x5f0
[  392.480960][ T8559]  alloc_file_pseudo+0x180/0x200
[  392.485933][ T8559]  ? alloc_empty_file_noaccount+0x80/0x80
[  392.491682][ T8559]  ? anon_inode_make_secure_inode+0xf7/0x160
[  392.497713][ T8559]  ? do_compat_epoll_pwait+0x1c0/0x1c0
[  392.503202][ T8559]  ? _raw_spin_unlock+0x24/0x40
[  392.508093][ T8559]  __se_sys_memfd_secret+0x125/0x2f0
[  392.513426][ T8559]  do_syscall_64+0x4c/0xa0
[  392.517881][ T8559]  ? clear_bhb_loop+0x60/0xb0
[  392.522596][ T8559]  ? clear_bhb_loop+0x60/0xb0
[  392.527344][ T8559]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  392.533248][ T8559] RIP: 0033:0x7f625f79e159
[  392.537663][ T8559] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  392.557273][ T8559] RSP: 002b:00007f6260695028 EFLAGS: 00000246 ORIG_RAX: 00000000000001bf
[  392.565687][ T8559] RAX: ffffffffffffffda RBX: 00007f625fa25fa0 RCX: 00007f625f79e159
[  392.573667][ T8559] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  392.581635][ T8559] RBP: 00007f625f835024 R08: 0000000000000000 R09: 0000000000000000
[  392.589603][ T8559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  392.597571][ T8559] R13: 00007f625fa26038 R14: 00007f625fa25fa0 R15: 00007ffeac2fda98
[  392.605555][ T8559]  </TASK>
[  392.647469][ T8559] overlayfs: unrecognized mount option "++-[&*'þ%*})" or missing value
[  392.675021][ T8558] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  392.754703][ T8558] ext4 filesystem being mounted at /253/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  392.822944][ T8558] EXT4-fs error (device loop3): ext4_empty_dir:3136: inode #12: comm syz.3.1141: invalid size
[  392.985198][ T4274] EXT4-fs (loop3): unmounting filesystem.
[  393.771765][ T8589] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  394.200208][ T8609] loop3: detected capacity change from 0 to 512
[  394.377005][ T8609] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  394.394626][ T8609] ext4 filesystem being mounted at /257/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  394.472183][ T8609] EXT4-fs error (device loop3): ext4_empty_dir:3136: inode #12: comm syz.3.1158: invalid size
[  394.607073][ T4274] EXT4-fs (loop3): unmounting filesystem.
[  394.853621][ T8624] FAULT_INJECTION: forcing a failure.
[  394.853621][ T8624] name failslab, interval 1, probability 0, space 0, times 0
[  394.894717][ T8624] CPU: 1 PID: 8624 Comm: syz.2.1164 Not tainted syzkaller #0
[  394.902151][ T8624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  394.912233][ T8624] Call Trace:
[  394.915535][ T8624]  <TASK>
[  394.918483][ T8624]  dump_stack_lvl+0x188/0x24e
[  394.923226][ T8624]  ? show_regs_print_info+0x12/0x12
[  394.928470][ T8624]  ? load_image+0x410/0x410
[  394.933012][ T8624]  ? __might_sleep+0xd0/0xd0
[  394.937647][ T8624]  ? __lock_acquire+0x7c40/0x7c40
[  394.942713][ T8624]  should_fail_ex+0x390/0x4c0
[  394.947431][ T8624]  should_failslab+0x5/0x20
[  394.951961][ T8624]  slab_pre_alloc_hook+0x59/0x300
[  394.957021][ T8624]  kmem_cache_alloc+0x56/0x2f0
[  394.961810][ T8624]  ? security_file_alloc+0x30/0x110
[  394.967047][ T8624]  security_file_alloc+0x30/0x110
[  394.972108][ T8624]  __alloc_file+0xc2/0x230
[  394.976558][ T8624]  alloc_empty_file+0x90/0x180
[  394.981359][ T8624]  alloc_file+0x5b/0x5f0
[  394.985635][ T8624]  alloc_file_pseudo+0x180/0x200
[  394.990617][ T8624]  ? alloc_empty_file_noaccount+0x80/0x80
[  394.996370][ T8624]  ? anon_inode_make_secure_inode+0xf7/0x160
[  395.002390][ T8624]  ? do_compat_epoll_pwait+0x1c0/0x1c0
[  395.007893][ T8624]  ? _raw_spin_unlock+0x24/0x40
[  395.012799][ T8624]  __se_sys_memfd_secret+0x125/0x2f0
[  395.018130][ T8624]  do_syscall_64+0x4c/0xa0
[  395.022585][ T8624]  ? clear_bhb_loop+0x60/0xb0
[  395.027296][ T8624]  ? clear_bhb_loop+0x60/0xb0
[  395.032007][ T8624]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  395.037936][ T8624] RIP: 0033:0x7f65ed39e159
[  395.042376][ T8624] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  395.062012][ T8624] RSP: 002b:00007f65ee280028 EFLAGS: 00000246 ORIG_RAX: 00000000000001bf
[  395.070458][ T8624] RAX: ffffffffffffffda RBX: 00007f65ed625fa0 RCX: 00007f65ed39e159
[  395.078456][ T8624] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  395.086457][ T8624] RBP: 00007f65ed435024 R08: 0000000000000000 R09: 0000000000000000
[  395.094458][ T8624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  395.102452][ T8624] R13: 00007f65ed626038 R14: 00007f65ed625fa0 R15: 00007fff62c6d2e8
[  395.110470][ T8624]  </TASK>
[  395.146987][ T8626] overlayfs: unrecognized mount option "++-[&*'þ%*})" or missing value
[  395.968264][ T8618] loop0: detected capacity change from 0 to 32768
[  396.024811][ T8618] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.1162 (8618)
[  396.102343][ T8618] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  396.159213][ T8618] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  396.179126][ T8618] BTRFS info (device loop0): setting nodatacow, compression disabled
[  396.188049][ T8618] BTRFS info (device loop0): setting datasum, datacow enabled
[  396.196447][ T8618] BTRFS info (device loop0): force clearing of disk cache
[  396.204928][ T8618] BTRFS info (device loop0): enabling ssd optimizations
[  396.245499][ T8618] BTRFS info (device loop0): using spread ssd allocation scheme
[  396.253399][ T8618] BTRFS info (device loop0): turning on sync discard
[  396.260544][ T8618] BTRFS info (device loop0): turning on flush-on-commit
[  396.267957][ T8618] BTRFS info (device loop0): not using ssd optimizations
[  396.276908][ T8618] BTRFS info (device loop0): not using spread ssd allocation scheme
[  396.285740][ T8618] BTRFS info (device loop0): using free space tree
[  396.325622][ T8618] BTRFS info (device loop0): rebuilding free space tree
[  396.338283][ T8650] 
[  396.340678][ T8650] ======================================================
[  396.347723][ T8650] WARNING: possible circular locking dependency detected
[  396.354871][ T8650] syzkaller #0 Not tainted
[  396.359298][ T8650] ------------------------------------------------------
[  396.368244][ T8650] syz.4.1173/8650 is trying to acquire lock:
[  396.374240][ T8650] ffff8880556fe350 (&ndev->req_lock){+.+.}-{3:3}, at: nci_start_poll+0x529/0xcc0
[  396.383537][ T8650] 
[  396.383537][ T8650] but task is already holding lock:
[  396.390915][ T8650] ffff8880556ff510 (&genl_data->genl_data_mutex){+.+.}-{3:3}, at: nfc_genl_start_poll+0x1c9/0x340
[  396.401691][ T8650] 
[  396.401691][ T8650] which lock already depends on the new lock.
[  396.401691][ T8650] 
[  396.412195][ T8650] 
[  396.412195][ T8650] the existing dependency chain (in reverse order) is:
[  396.421225][ T8650] 
[  396.421225][ T8650] -> #3 (&genl_data->genl_data_mutex){+.+.}-{3:3}:
[  396.429958][ T8650]        __mutex_lock+0x12d/0xae0
[  396.435013][ T8650]        nfc_urelease_event_work+0x120/0x310
[  396.441031][ T8650]        process_one_work+0x8ab/0x1160
[  396.446599][ T8650]        worker_thread+0xaf5/0x12a0
[  396.451829][ T8650]        kthread+0x29d/0x330
[  396.456568][ T8650]        ret_from_fork+0x1f/0x30
[  396.461577][ T8650] 
[  396.461577][ T8650] -> #2 (nfc_devlist_mutex){+.+.}-{3:3}:
[  396.469431][ T8650]        __mutex_lock+0x12d/0xae0
[  396.474482][ T8650]        nfc_register_device+0x38/0x300
[  396.480058][ T8650]        nci_register_device+0x89f/0x9f0
[  396.485712][ T8650]        virtual_ncidev_open+0x55/0xc0
[  396.491315][ T8650]        misc_open+0x31f/0x390
[  396.496126][ T8650]        chrdev_open+0x585/0x5f0
[  396.501091][ T8650]        do_dentry_open+0x7dd/0x10b0
[  396.506407][ T8650]        path_openat+0x2674/0x2f10
[  396.511547][ T8650]        do_filp_open+0x1ee/0x420
[  396.516598][ T8650]        do_sys_openat2+0x14b/0x4f0
[  396.521826][ T8650]        __x64_sys_openat+0x135/0x160
[  396.527244][ T8650]        do_syscall_64+0x4c/0xa0
[  396.532218][ T8650]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  396.538673][ T8650] 
[  396.538673][ T8650] -> #1 (nci_mutex){+.+.}-{3:3}:
[  396.545832][ T8650]        __mutex_lock+0x12d/0xae0
[  396.550894][ T8650]        virtual_nci_close+0x13/0x40
[  396.556214][ T8650]        nci_dev_up+0x976/0xd90
[  396.561082][ T8650]        nfc_dev_up+0x15d/0x310
[  396.565959][ T8650]        nfc_genl_dev_up+0x85/0xd0
[  396.571098][ T8650]        genl_family_rcv_msg_doit+0x22f/0x350
[  396.577344][ T8650]        genl_rcv_msg+0x601/0x790
[  396.582396][ T8650]        netlink_rcv_skb+0x1ef/0x440
[  396.588831][ T8650]        genl_rcv+0x24/0x40
[  396.593363][ T8650]        netlink_unicast+0x7ad/0x920
[  396.598682][ T8650]        netlink_sendmsg+0x8ad/0xbd0
[  396.603989][ T8650]        ____sys_sendmsg+0x5ed/0x9a0
[  396.609441][ T8650]        ___sys_sendmsg+0x2a2/0x360
[  396.614684][ T8650]        __se_sys_sendmsg+0x1c3/0x2b0
[  396.620091][ T8650]        do_syscall_64+0x4c/0xa0
[  396.625063][ T8650]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  396.631511][ T8650] 
[  396.631511][ T8650] -> #0 (&ndev->req_lock){+.+.}-{3:3}:
[  396.639201][ T8650]        __lock_acquire+0x2d18/0x7c40
[  396.644626][ T8650]        lock_acquire+0x1bb/0x4a0
[  396.649689][ T8650]        __mutex_lock+0x12d/0xae0
[  396.654737][ T8650]        nci_start_poll+0x529/0xcc0
[  396.659962][ T8650]        nfc_start_poll+0x141/0x2c0
[  396.665183][ T8650]        nfc_genl_start_poll+0x1d7/0x340
[  396.670846][ T8650]        genl_family_rcv_msg_doit+0x22f/0x350
[  396.676937][ T8650]        genl_rcv_msg+0x601/0x790
[  396.681988][ T8650]        netlink_rcv_skb+0x1ef/0x440
[  396.687316][ T8650]        genl_rcv+0x24/0x40
[  396.691848][ T8650]        netlink_unicast+0x7ad/0x920
[  396.697164][ T8650]        netlink_sendmsg+0x8ad/0xbd0
[  396.702499][ T8650]        ____sys_sendmsg+0x5ed/0x9a0
[  396.707823][ T8650]        ___sys_sendmsg+0x2a2/0x360
[  396.713051][ T8650]        __se_sys_sendmsg+0x1c3/0x2b0
[  396.718460][ T8650]        do_syscall_64+0x4c/0xa0
[  396.723433][ T8650]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  396.729879][ T8650] 
[  396.729879][ T8650] other info that might help us debug this:
[  396.729879][ T8650] 
[  396.740126][ T8650] Chain exists of:
[  396.740126][ T8650]   &ndev->req_lock --> nfc_devlist_mutex --> &genl_data->genl_data_mutex
[  396.740126][ T8650] 
[  396.754584][ T8650]  Possible unsafe locking scenario:
[  396.754584][ T8650] 
[  396.762062][ T8650]        CPU0                    CPU1
[  396.767443][ T8650]        ----                    ----
[  396.772821][ T8650]   lock(&genl_data->genl_data_mutex);
[  396.778307][ T8650]                                lock(nfc_devlist_mutex);
[  396.785443][ T8650]                                lock(&genl_data->genl_data_mutex);
[  396.793529][ T8650]   lock(&ndev->req_lock);
[  396.797962][ T8650] 
[  396.797962][ T8650]  *** DEADLOCK ***
[  396.797962][ T8650] 
[  396.806119][ T8650] 4 locks held by syz.4.1173/8650:
[  396.811242][ T8650]  #0: ffffffff8ddbd2b0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40
[  396.819463][ T8650]  #1: ffffffff8ddbd0c8 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x107/0x790
[  396.828467][ T8650]  #2: ffff8880556ff510 (&genl_data->genl_data_mutex){+.+.}-{3:3}, at: nfc_genl_start_poll+0x1c9/0x340
[  396.839564][ T8650]  #3: ffff8880556ff100 (&dev->mutex){....}-{3:3}, at: nfc_start_poll+0x4f/0x2c0
[  396.848744][ T8650] 
[  396.848744][ T8650] stack backtrace:
[  396.854647][ T8650] CPU: 1 PID: 8650 Comm: syz.4.1173 Not tainted syzkaller #0
[  396.862043][ T8650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  396.872117][ T8650] Call Trace:
[  396.875414][ T8650]  <TASK>
[  396.878359][ T8650]  dump_stack_lvl+0x188/0x24e
[  396.883073][ T8650]  ? load_image+0x410/0x410
[  396.887616][ T8650]  ? show_regs_print_info+0x12/0x12
[  396.892853][ T8650]  ? print_circular_bug+0x12b/0x1a0
[  396.898092][ T8650]  check_noncircular+0x296/0x330
[  396.903061][ T8650]  ? add_chain_block+0x9b0/0x9b0
[  396.908043][ T8650]  ? lockdep_lock+0x15c/0x1f0
[  396.912768][ T8650]  ? _find_first_zero_bit+0xd2/0x100
[  396.918117][ T8650]  __lock_acquire+0x2d18/0x7c40
[  396.922997][ T8650]  ? kasan_set_track+0x4b/0x70
[  396.927900][ T8650]  ? nfc_llcp_general_bytes+0x39/0x160
[  396.933388][ T8650]  ? genl_family_rcv_msg_doit+0x22f/0x350
[  396.939124][ T8650]  ? netlink_unicast+0x7ad/0x920
[  396.944088][ T8650]  ? netlink_sendmsg+0x8ad/0xbd0
[  396.949036][ T8650]  ? ____sys_sendmsg+0x5ed/0x9a0
[  396.954003][ T8650]  ? __se_sys_sendmsg+0x1c3/0x2b0
[  396.959045][ T8650]  ? do_syscall_64+0x4c/0xa0
[  396.963663][ T8650]  ? verify_lock_unused+0x140/0x140
[  396.968893][ T8650]  ? mark_lock+0x94/0x320
[  396.973257][ T8650]  lock_acquire+0x1bb/0x4a0
[  396.977780][ T8650]  ? nci_start_poll+0x529/0xcc0
[  396.982652][ T8650]  ? kasan_quarantine_put+0xd4/0x210
[  396.987967][ T8650]  ? __might_sleep+0xd0/0xd0
[  396.992581][ T8650]  ? read_lock_is_recursive+0x10/0x10
[  396.997988][ T8650]  ? slab_free_freelist_hook+0x133/0x1b0
[  397.003664][ T8650]  ? nfc_llcp_build_gb+0x31f/0x3e0
[  397.008804][ T8650]  ? __kmem_cache_free+0xb6/0x200
[  397.013857][ T8650]  __mutex_lock+0x12d/0xae0
[  397.018413][ T8650]  ? nci_start_poll+0x529/0xcc0
[  397.023283][ T8650]  ? nfc_llcp_general_bytes+0x160/0x160
[  397.028852][ T8650]  ? nfc_get_device+0x82/0xd0
[  397.033818][ T8650]  ? nci_start_poll+0x529/0xcc0
[  397.038846][ T8650]  ? nfc_release+0x233/0x2e0
[  397.043479][ T8650]  ? mutex_lock_nested+0x10/0x10
[  397.048444][ T8650]  ? kobject_put+0x416/0x450
[  397.053101][ T8650]  ? _raw_spin_unlock+0x24/0x40
[  397.058071][ T8650]  nci_start_poll+0x529/0xcc0
[  397.062769][ T8650]  ? __mutex_trylock_common+0x15c/0x260
[  397.068346][ T8650]  ? nci_dev_down+0x40/0x40
[  397.072872][ T8650]  ? trace_contention_end+0x5f/0x170
[  397.078186][ T8650]  ? __mutex_lock+0x1ab/0xae0
[  397.082883][ T8650]  ? trace_contention_end+0x5f/0x170
[  397.088198][ T8650]  ? __mutex_lock+0x1ab/0xae0
[  397.092897][ T8650]  ? nfc_start_poll+0x4f/0x2c0
[  397.097692][ T8650]  ? mutex_lock_nested+0x10/0x10
[  397.102648][ T8650]  ? mutex_lock_nested+0x10/0x10
[  397.107602][ T8650]  ? nfc_get_device+0x82/0xd0
[  397.112306][ T8650]  ? nfc_release+0x2e0/0x2e0
[  397.116930][ T8650]  nfc_start_poll+0x141/0x2c0
[  397.121635][ T8650]  nfc_genl_start_poll+0x1d7/0x340
[  397.126777][ T8650]  genl_family_rcv_msg_doit+0x22f/0x350
[  397.132352][ T8650]  ? end_current_label_crit_section+0x170/0x170
[  397.138811][ T8650]  ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0
[  397.144739][ T8650]  ? bpf_lsm_capable+0x5/0x10
[  397.149552][ T8650]  ? security_capable+0x85/0xb0
[  397.154516][ T8650]  genl_rcv_msg+0x601/0x790
[  397.159039][ T8650]  ? genl_bind+0x360/0x360
[  397.163470][ T8650]  ? nfc_genl_dev_down+0xd0/0xd0
[  397.168441][ T8650]  netlink_rcv_skb+0x1ef/0x440
[  397.173235][ T8650]  ? genl_bind+0x360/0x360
[  397.177676][ T8650]  ? netlink_ack+0x1160/0x1160
[  397.182470][ T8650]  ? down_read+0x1a8/0x2d0
[  397.186947][ T8650]  genl_rcv+0x24/0x40
[  397.190952][ T8650]  netlink_unicast+0x7ad/0x920
[  397.195746][ T8650]  netlink_sendmsg+0x8ad/0xbd0
[  397.200531][ T8650]  ? netlink_getsockopt+0x550/0x550
[  397.205748][ T8650]  ? apparmor_socket_sendmsg+0x8a/0x330
[  397.211326][ T8650]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  397.216693][ T8650]  ? security_socket_sendmsg+0x7c/0xa0
[  397.222181][ T8650]  ? netlink_getsockopt+0x550/0x550
[  397.227404][ T8650]  ____sys_sendmsg+0x5ed/0x9a0
[  397.232205][ T8650]  ? __sys_sendmsg_sock+0x30/0x30
[  397.237254][ T8650]  ? __import_iovec+0x306/0x510
[  397.242133][ T8650]  ? import_iovec+0x6f/0xa0
[  397.246681][ T8650]  ___sys_sendmsg+0x2a2/0x360
[  397.251389][ T8650]  ? __sys_sendmsg+0x2a0/0x2a0
[  397.256197][ T8650]  __se_sys_sendmsg+0x1c3/0x2b0
[  397.261080][ T8650]  ? __x64_sys_sendmsg+0x80/0x80
[  397.266055][ T8650]  ? lockdep_hardirqs_on+0x94/0x140
[  397.271379][ T8650]  do_syscall_64+0x4c/0xa0
[  397.275823][ T8650]  ? clear_bhb_loop+0x60/0xb0
[  397.280527][ T8650]  ? clear_bhb_loop+0x60/0xb0
[  397.285231][ T8650]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  397.291152][ T8650] RIP: 0033:0x7f625f79e159
[  397.295584][ T8650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  397.315210][ T8650] RSP: 002b:00007f6260674028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  397.323647][ T8650] RAX: ffffffffffffffda RBX: 00007f625fa26090 RCX: 00007f625f79e159
[  397.331650][ T8650] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000005
[  397.339640][ T8650] RBP: 00007f625f835024 R08: 0000000000000000 R09: 0000000000000000
[  397.347639][ T8650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  397.355625][ T8650] R13: 00007f625fa26128 R14: 00007f625fa26090 R15: 00007ffeac2fda98
[  397.363621][ T8650]  </TASK>
[  397.414943][ T8618] BTRFS info (device loop0): balance: start -d -m
[  397.426964][ T8618] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata
[  397.585753][ T8679] loop0: detected capacity change from 32768 to 0
[  397.597751][ T8618] syz.0.1162: attempt to access beyond end of device
[  397.597751][ T8618] loop0: rw=145409, sector=128, nr_sectors = 8 limit=0
[  397.621484][ T8618] BTRFS warning (device loop0): lost page write due to IO error on /dev/loop0 (-5)
[  397.631036][ T8618] BTRFS error (device loop0): bdev /dev/loop0 errs: wr 1, rd 0, flush 0, corrupt 0, gen 0
[  397.641627][ T8618] BTRFS error (device loop0): error writing primary super block to device 1
[  397.657008][ T8618] BTRFS: error (device loop0) in write_all_supers:4421: errno=-5 IO failure (1 errors while writing supers)
[  397.668726][ T8618] BTRFS info (device loop0: state E): forced readonly
[  397.675563][ T8618] BTRFS warning (device loop0: state E): Skipping commit of aborted transaction.
[  397.684758][ T8618] BTRFS: error (device loop0: state EA) in cleanup_transaction:2013: errno=-5 IO failure
[  397.695218][ T8618] BTRFS info (device loop0: state EA): balance: ended with status: -5
[  397.698241][ T8681] BTRFS error (device loop0: state EMA): Remounting read-write after error is not allowed
[  397.824025][ T4273] BTRFS info (device loop0: state EA): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  399.152971][ T8650] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  399.161908][ T8650] nci: nci_start_poll: failed to set local general bytes
[  399.179588][ T8642] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512