last executing test programs:

9.633394442s ago: executing program 4 (id=584):
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4004)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, 0x0, 0x0)
statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/../file0\x00', 0x100, 0x800, &(0x7f0000000500))
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = fsopen(&(0x7f0000000280)='ext4\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, 0x0, &(0x7f0000000040)='c:::\x00', 0x0)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x3, 0x200}})
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newlink={0x54, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}, @IFLA_IFALIASn={0x4}, @IFLA_VFINFO_LIST={0x4}, @IFLA_GROUP={0x8, 0x1b, 0x7}, @IFLA_GROUP={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)

6.520718794s ago: executing program 1 (id=604):
r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x142780)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
syz_io_uring_setup(0x2f84, &(0x7f0000000140)={0x0, 0x2d09, 0x400, 0x1, 0x9d}, 0x0, 0x0, &(0x7f0000000000))
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000), 0x10)
pipe2$watch_queue(&(0x7f0000000080), 0x80)
socket$tipc(0x1e, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0)
lseek(r3, 0x9, 0x4)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000001580)={{<r4=>r1, &(0x7f0000000000)='\x00', 0x34002, &(0x7f00000001c0)={@align=0x1, {0x6, 0xd5, 0x7}}, 0x9, &(0x7f0000000200)={@_ha_fsid}, &(0x7f0000000240)=0x5}, 0x4, &(0x7f0000001500)=[{0x3, 0x4, &(0x7f0000000280)='$\x00', &(0x7f00000002c0)="684872de0a8e4a4847869b1b726f46d5eac3cb3604ba822c1a7869b104635de690b4af14075fea6339890f103eaa8d03246eec283922d6fa5030f68309d20518dbcdb518900749c417e97bf2d27eafef5b98c77d920989c74708ee2a4aab06b34e8a9e3d2a6b3eae522ac6ff88c76e", 0x6f, 0x22}, {0x1, 0x1, &(0x7f0000000340)='/dev/nbd#\x00', &(0x7f0000000380)="21c6fac70fb7a3c9a47ac43c957847472acb47a00e00d55666b116690fe7d254dadf1172f7a6949519c3daea9add3a0c9f02386f500709df5c0bddfa05cf44e5884d8886d6cfb9edfcfc47dbb61a90989ec9cf81d97f2396c9949650f3ba9415cadb1c8f8c76f68d80e6e458c476e2188b73c68aa5a76766e21bcc40132c22bbd9a2707a6daedbe87712aead083d10ae7b800dbd0ba5b38cedcac33df97b977eebfbe103bee3d68fefbecc9a6d4b9517360d57a46ccca8a197b4c3b153f4", 0xbe, 0x10}, {0x3, 0xfffffff0, &(0x7f0000000440)='/dev/nbd#\x00', &(0x7f0000000480)="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", 0x1000, 0x20}, {0x1, 0x2, &(0x7f0000001480)='/dev/nbd#\x00', &(0x7f00000014c0)="843ec988c439c74a99dc303df1f21ec8aa712fd8d8dfebca1d9c582660a98f46fe9d69a922e4d119c9a75d9df3b7c4a5e3402d19c623", 0x36, 0x32}]})
ioctl$FS_IOC_SETFSLABEL(r4, 0x41009432, &(0x7f0000001600)="97a4fe3e52f1c94b718d874d7a880515a65b5e281ddbebb31c9980b60543e4dbdcdb06456f58225755ccbef7b280f12e7885d10fcbaf120b59d3c0603696ca60892307f3603e5f801b632d0548fe0e51fb9499842c76cf17a5755ab156afd3cebe270608075b55b318fb566e910ec883272d7e2ac9ad244f2b99c6bcf5e7a415d627b893c4a6f0122b207c95069eb05cf036eb8775e543ce3c7245ab24ece6960a8e122e4a2c20f0d780ec7e7a8630a51694c15f843a04a10fa1e9fc68992e5ae9ea1075c214269ef837518d58c4e52aab6ea5692675fc6d1f71647264d7b1b32ac882901d5c73d95699ca3822f72d6af53a6665bd864bf5554f98c1f59c1289")
r5 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c)
r6 = socket(0x1e, 0x4, 0x2)
setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c)
sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
recvmsg$unix(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20)
sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x4000000000000bb, 0x0)
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
ioctl$NILFS_IOCTL_GET_SUSTAT(r4, 0x80306e85, &(0x7f0000001700))
ioctl$NBD_DO_IT(r0, 0xab03)
ioctl$NBD_CLEAR_SOCK(r0, 0xab04)
syz_mount_image$sysv(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x2100412, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYRES64, @ANYRES8, @ANYRES64, @ANYRES64=r0], 0x0, 0x9eb7, &(0x7f000000c3c0)="$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")

5.899799247s ago: executing program 4 (id=606):
syz_mount_image$reiserfs(&(0x7f0000000140), &(0x7f0000001140)='./file6\x00', 0x98, &(0x7f0000000280), 0x1, 0x10ef, &(0x7f00000022c0)="$eJzs2DGLE0EYBuB3dg/kqshcvx5oYSHHHfEPXKGQxsLaLljZmUrJz/HnyFX2R3pTBOyVTQwJEhDJYuB4Hlh252Vmvp1yvgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvLPlekosmqdusSVKSrrubLJJ02/zx17ZJydv3k9mrj+PXs8209FmT0q9aj+vN01rHdVxv6suL22d19unzh3avZEmX+9V8ev5mOehR+trtoDsCAADAw/DzaKMT1wcAAAD+ZrBGAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAA6vajSVKSrrubLJJ0p/0tAAAA4EglTd6NDuWbNsDOi3wblZRHu+RH6edc58uB9QAAAMC/KXv38ec5z5O9/DJnubrajH+/srxN2iTXf+xzv5pP18/lfFr+5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAGCqAAAA//9TGNII")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x100)
truncate(&(0x7f0000000080)='./file0\x00', 0x3a6800)
write$usbip_server(r0, &(0x7f0000000500)=@ret_unlink={{0x4, 0x400, 0x0, 0x0, 0xf79}, {0xafe}}, 0x30)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv6_delroute={0x24, 0x19, 0x1, 0x70bd66, 0xfffffffe, {0xa, 0x0, 0x10, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1100}, [@RTA_PRIORITY={0x8, 0x6, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008880}, 0x4002050)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r2 = socket$inet_icmp(0x2, 0x2, 0x1)
close(r2)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00')
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@RTM_NEWMDB={0x38, 0x54, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x47deeee379674db5, 0x2, {@ip4=@empty}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004810)
ioctl$TUNSETIFINDEX(r6, 0x400454da, &(0x7f0000000040))
statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x100, 0x2, &(0x7f0000000300))
getsockopt$sock_cred(r6, 0x1, 0x11, 0x0, &(0x7f0000003c40))
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
pread64(r6, &(0x7f0000000500)=""/31, 0x1f, 0x40000000007)

4.68291349s ago: executing program 1 (id=619):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f00000058c0)=[{{&(0x7f0000000300)={0xa, 0x4e24, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0xae00000}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000880)='*', 0x1}], 0x1}}, {{&(0x7f0000000940)={0xa, 0x4e24, 0xff, @private2, 0x3}, 0x1c, &(0x7f0000000c00)=[{&(0x7f0000000980)='6', 0x1}], 0x1}}], 0x2, 0x5)
shutdown(r0, 0x1)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000540)={0x0, 0x1, 0x4, "b66cd9e3"}, 0xc)

4.493046133s ago: executing program 1 (id=610):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000007c0)={'wpan0\x00', <r2=>0x0})
sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x3c, r1, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8004}, 0x800)

4.354711062s ago: executing program 1 (id=612):
r0 = socket$xdp(0x2c, 0x3, 0x0)
unshare(0x2040400)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x28000, 0x800, 0x3, 0x5}, 0x20)

4.24657581s ago: executing program 1 (id=613):
syz_mount_image$reiserfs(&(0x7f0000000140), &(0x7f0000001140)='./file6\x00', 0x98, &(0x7f0000000280), 0x1, 0x10ef, &(0x7f00000022c0)="$eJzs2DGLE0EYBuB3dg/kqshcvx5oYSHHHfEPXKGQxsLaLljZmUrJz/HnyFX2R3pTBOyVTQwJEhDJYuB4Hlh252Vmvp1yvgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvLPlekosmqdusSVKSrrubLJJ02/zx17ZJydv3k9mrj+PXs8209FmT0q9aj+vN01rHdVxv6suL22d19unzh3avZEmX+9V8ev5mOehR+trtoDsCAADAw/DzaKMT1wcAAAD+ZrBGAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAA6vajSVKSrrubLJJ0p/0tAAAA4EglTd6NDuWbNsDOi3wblZRHu+RH6edc58uB9QAAAMC/KXv38ec5z5O9/DJnubrajH+/srxN2iTXf+xzv5pP18/lfFr+5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAGCqAAAA//9TGNII")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x100)
truncate(&(0x7f0000000080)='./file0\x00', 0x3a6800)
write$usbip_server(r0, &(0x7f0000000500)=@ret_unlink={{0x4, 0x400, 0x0, 0x0, 0xf79}, {0xafe}}, 0x30)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv6_delroute={0x24, 0x19, 0x1, 0x70bd66, 0xfffffffe, {0xa, 0x0, 0x10, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1100}, [@RTA_PRIORITY={0x8, 0x6, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008880}, 0x4002050)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r2 = socket$inet_icmp(0x2, 0x2, 0x1)
close(r2)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00')
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@RTM_NEWMDB={0x38, 0x54, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x47deeee379674db5, 0x2, {@ip4=@empty}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004810)
ioctl$TUNSETIFINDEX(r6, 0x400454da, &(0x7f0000000040))
statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x100, 0x2, &(0x7f0000000300))
getsockopt$sock_cred(r6, 0x1, 0x11, 0x0, &(0x7f0000003c40))
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
pread64(r6, &(0x7f0000000500)=""/31, 0x1f, 0x40000000007)

3.085184599s ago: executing program 4 (id=618):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0xffffffffffffff77, 0x10008095, 0x0, 0x0)

2.590367143s ago: executing program 2 (id=622):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0xec, 0x10, 0x1437c0b97b9646a5, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xc15}, [@IFLA_LINKINFO={0xc4, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xb4, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1c, 0x10}}, @IFLA_VLAN_INGRESS_QOS={0x28, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x6ce1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0xf3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0xb}}]}, @IFLA_VLAN_EGRESS_QOS={0x34, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8001, 0xffff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0xfffff001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x7}}]}, @IFLA_VLAN_INGRESS_QOS={0x40, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1ff, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0xa}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0x1ff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0xff}}]}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0xec}, 0x1, 0x0, 0x0, 0x4028011}, 0x8000)

2.122745785s ago: executing program 2 (id=626):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback, 0x20}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c)

1.992598854s ago: executing program 2 (id=628):
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000140)=0x1ff, 0x4)
fsopen(&(0x7f0000000040)='aio\x00', 0x1)
sendto$inet(0xffffffffffffffff, 0x0, 0xffef, 0x20000000, &(0x7f0000000240)={0x2, 0x4e22, @remote}, 0x10)
recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x2020, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x2810400, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000540)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
ftruncate(r0, 0x5)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1000649, &(0x7f00000003c0), 0x2, 0x60d, &(0x7f0000000800)="$eJzs3c9rG9kdAPDvjGzXTtw6KSU0gVJDDwmU+EcaSNtTkktz6CHQHErpISa2g4mcmNiBJg3UuTXQQym9lpJL/4HeS+i1t1Joe9vzQnZZvOxhd4mWGc0kWllyFMX64cznA5LevBnpva+enueNxk8TQGXNZ3dpxOmIuJlEzLWsm43myvliu71PHt/Kbkk0Gr/4OImkyCu3f1k8Hs/ukojpiPj31Yhv1/aXu/3w0Z2VeqPpdxGLO5tbi9sPH53f2Fy5vXZ77e7yhR9fvLT0k+WLy4cSZxnXdPG4/p/6+SQux43J365GWxyHZT7m42URYmv+RERcyhId3pejpgwhGXE96E+t+DxORsSpmItavtQ0Fxt/GGnlgIFq1CIaQEUl+j9UVDkOKI/tB3EcPM5eXGkeAO2Pf6L53UhM58dGx/aSliOj5vHuiUMoPyvjy8dn/pLdosv3EBOHUE43u08i4rud4k/yup0ovjE5tpdG2vK8LL0UEVPFe5H2Wf582/KwP39vE39rO2TxXi4es/yrfZY/6vgBqKbnV4od+W629Hr/l40My/FPdBj/zHbYd/Vj1Pu/7uO/cn8/nX9HnraNw7Ixz/XOLznZnvHB02t/6lZ+6/gvu2Xll2PBYXjxJOJMW/y/zwdzyav2Tzq0f7bJzR7L+Nl/P7rWbV3/8R/OGafGs4izHY9/kq+VtLizuVXmtZ2fXFzfqK8tNe87lvGPf/36b93KH4f2jy7xH9T+Wd5Wj2X8/fqzzW7rZt8Yf/rhVHIjT00VOb9Z2dm5vxwxlfy82KQl/8LBdSm3KV8ji//cDzr3/wPizxt6t8f4t355Z6+Z2v+Z7bn99/1Vyb1s9FiHbrL4V/ts/z/2WMZnv3rwvbasmTJxUPwz+18q6fU9BwAAAAAAgCpK83OwSbrwKp2mCwvNObzfiWNp/d72zg/X7z24uxpxLv9/yMm0PNM911xOsuXl4v9hy+ULbcs/ioiTEfHn2ky+vHDrXn111MEDAAAAAAAAAAAAAAAAAADAmDhezP8vr1P9aa05/78nO6cGXDtg4AZ5gTlgvOn/UF15/+/3Cq7AkWb/D9Wl/0N16f9QXfo/VJf+D9XVU/+fGnw9gOGz/4fq0v8BAAAA4L108vvP/59ExO5PZ/JbtJzpmxxpzYBBe/s+Pj+QegDDVxvq04Bx8urUv+n/UDk9jf8/L34ccPDVAUYg6ZSZDw4aB3f+5x2f2aun7/JkAAAAAAAAAAAAAKias6fN/4eqSuOfo64CMCLvMJHfbwDAEeen/6G6HOMDb5rFP91txbvN/wcAAAAAAAAAAAAA3sJsfkvSheISoLORpgsLEd+MiBMxmaxv1NeWIuJbEfG/2uQ3suXlUVcaAAAAAAAAAAAAAAAAAAAA3jPbDx/dWanX1+63Jr7Yl/N+J8qroI5LfVoTkQy/0JmIGIfYB5OYaMlJInazlh+Lit3fjrGoRppXY8R/mAAAAAAAAAAAAAAAAAAAoIJa5h53duavQ64RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzf6+v/959I3vA6o44RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADiavgoAAP//F1A3Eg==")
write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0xff2e)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r1, &(0x7f0000000380)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f00000000c0)='O', 0x1}], 0x1}}, {{&(0x7f0000000280)={0xa, 0x4e24, 0x5, @local, 0x6}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='\t', 0x1}], 0x1}}], 0x2, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
unshare(0x24020400)

1.726757232s ago: executing program 0 (id=630):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

1.595110321s ago: executing program 0 (id=632):
socket$caif_stream(0x25, 0x1, 0x3)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'hsr0\x00'})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x801)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x4040080}, 0x0)
sendmsg$nl_route(r1, 0x0, 0x8000002)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='htcp', 0x4)
socket$packet(0x11, 0x2, 0x300)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b7, 0x80, 0x0, 0x1, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x24000000)
sendto$inet(r3, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0)
recvfrom$inet(r3, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500)

1.268095293s ago: executing program 4 (id=633):
r0 = socket$packet(0x11, 0x2, 0x300)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
bind$packet(r0, &(0x7f0000000040)={0x11, 0x4, 0x0, 0x1, 0x3, 0x6, @remote}, 0x14)

1.17340199s ago: executing program 1 (id=634):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x3}, 0x4)
socket(0xa, 0x1, 0x0)
pselect6(0x40, &(0x7f0000000080)={0x0, 0x4, 0x0, 0x400000000, 0x0, 0x0, 0x200, 0x80}, 0x0, &(0x7f0000000140)={0x18, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x0, 0x1981}, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x48}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000780)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f0000000380)="fc5cc45c490704289349a8af1d25", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f00000003c0)=0x2, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c)

1.078809676s ago: executing program 0 (id=635):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x60, 0x8}, {0x16, 0x4, 0x4, 0x10000000}]})

1.075414006s ago: executing program 4 (id=636):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg', 0x3)
r1 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00'}, 0x94)
clock_gettime(0x0, &(0x7f0000000000))
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r2, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024)
socket(0x80000000000000a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4)
readv(r2, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1)
socket(0x10, 0x2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
recvmsg(r3, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0)
sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4d2f02, 0x0)

929.957966ms ago: executing program 2 (id=637):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', <r1=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100001f000000000000000000", @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0)

929.529286ms ago: executing program 3 (id=638):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r1, 0x7, 0x4, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0)

876.97863ms ago: executing program 0 (id=639):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10)

586.795459ms ago: executing program 3 (id=640):
r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301)
ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000380)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x13ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0})

586.641539ms ago: executing program 0 (id=641):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0)
close(r0)
recvfrom(r1, 0x0, 0x0, 0x10100, 0x0, 0x0)

547.255463ms ago: executing program 0 (id=642):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
pipe(&(0x7f0000000080))
pselect6(0x40, &(0x7f0000000100)={0x0, 0xf, 0x1000, 0x0, 0x801, 0x100}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x8, 0x5, 0xa1, 0x2, 0xa, "b1171ca9b552e3ab818dcc7ad074a9f0f384e9"})

522.337034ms ago: executing program 3 (id=643):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r1, 0x3)

422.790951ms ago: executing program 2 (id=644):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800700, &(0x7f00000009c0)={[{@usrjquota}, {@data_err_ignore}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@grpquota}, {@usrjquota}, {@oldalloc}]}, 0x3, 0x44a, &(0x7f0000000400)="$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")
creat(&(0x7f0000000040)='./file1\x00', 0x2)

392.373403ms ago: executing program 3 (id=645):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)={0x14, r1, 0x711, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x24004894}, 0x0)

296.865439ms ago: executing program 3 (id=646):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x2, 0x1}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000001b40)=[{0x14, 0x0, [0x4, 0x730d7562, 0x7fff, 0xc, 0x1, 0x8, 0x3, 0xd1da4368, 0xf, 0x9, 0x5, 0x6, 0xc, 0x8, 0x6, 0x5]}, {0x2b, 0x0, [0x800, 0x1, 0x7fffffff, 0x7, 0x0, 0x3, 0x1, 0x9, 0x1, 0x7, 0x9bfb, 0x4, 0x7, 0xfffffff7, 0x8, 0x7ff]}], r1, 0x1, 0x1, 0x90}}, 0x20)

190.748357ms ago: executing program 3 (id=647):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x74, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xfffffffe, 0x3}}}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x4, 0x5, 0x0, 0x1, 0xfffffffb, 0x3, 0x1}}, {0x6, 0x2, [0xfff]}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40088c1}, 0x40a4)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x7fffe, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xb, 0xb}, {0x4, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x80000000}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44040}, 0x8000)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', <r7=>0x0})
sendto$packet(r0, &(0x7f00000002c0)="0503d6fcd3fc140000004788031c", 0xe, 0x4, &(0x7f0000000140)={0x11, 0x2, r7, 0x1, 0x0, 0x6, @multicast}, 0x14)

144.24304ms ago: executing program 4 (id=648):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0x20d0}}}}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syz_tun\x00'})
setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c5805000000451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c)

0s ago: executing program 2 (id=649):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000340)=0x6, 0x4)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000100)}], 0x2)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a0001000000ff7f0000000080"], 0x24}}, 0x10048000)

kernel console output (not intermixed with test programs):

16.477316][ T2422] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  116.492469][ T4808] VFS: Found a Xenix FS (block size = 512) on device loop4
[  116.528040][ T4808] sysv_free_block: trying to free block not in datazone
[  116.544504][ T2422] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  116.588734][ T2422] pvrusb2: Invalid write control endpoint
[  116.759316][ T4808] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  116.780530][ T4816] pvrusb2: Attempted to execute control transfer when device not ok
[  117.024154][ T2422] pvrusb2: Invalid write control endpoint
[  117.049292][ T2422] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  117.085129][ T4812] loop3: detected capacity change from 0 to 8192
[  117.119165][ T2422] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  117.127159][ T4228] usb 1-1: USB disconnect, device number 9
[  117.127607][ T2422] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  117.143454][ T2422] pvrusb2: Device being rendered inoperable
[  117.149510][ T2422] cx25840 2-0044: Unable to detect h/w, assuming cx23887
[  117.156603][ T2422] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c)
[  117.285941][ T4812] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[  117.306437][ T4812] REISERFS (device loop3): using ordered data mode
[  117.325384][ T2422] pvrusb2: Attached sub-driver cx25840
[  117.327827][ T4812] reiserfs: using flush barriers
[  117.332315][ T2422] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  117.346545][ T4812] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  117.347819][ T2422] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  117.389474][ T4812] REISERFS (device loop3): checking transaction log (loop3)
[  118.194789][ T4800] loop1: detected capacity change from 0 to 32768
[  118.284893][ T4831] netlink: 12 bytes leftover after parsing attributes in process `syz.0.134'.
[  118.292345][ T4800] 
[  118.292345][ T4800]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  118.292345][ T4800] 
[  118.310458][ T4831] netlink: 4 bytes leftover after parsing attributes in process `syz.0.134'.
[  118.323634][ T4831] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  118.332453][ T4831] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  118.341236][ T4831] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  118.350164][ T4831] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  118.434198][ T4812] REISERFS (device loop3): Using tea hash to sort names
[  118.458101][ T4812] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  118.623247][ T4800] rdma_rxe: rxe_register_device failed with error -23
[  118.630575][ T4228] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  118.671389][ T4800] rdma_rxe: failed to add lo
[  118.871178][ T4812] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 2) not found (pos 4)
[  119.010948][ T4840] ERROR: (device loop1): diWrite: ixpxd invalid
[  119.010948][ T4840] 
[  119.097640][ T4228] usb 1-1: Using ep0 maxpacket: 8
[  119.113476][ T4840] ERROR: (device loop1): txCommit: 
[  119.113476][ T4840] 
[  119.217885][ T4228] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  119.239052][ T4833] loop4: detected capacity change from 0 to 131072
[  119.243344][ T4228] usb 1-1: config 0 has no interface number 0
[  119.254903][ T4190] 
[  119.254903][ T4190]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  119.254903][ T4190] 
[  119.268119][ T4190] 
[  119.268119][ T4190]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  119.268119][ T4190] 
[  119.316736][ T4228] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 108, changing to 10
[  119.359922][ T4833] F2FS-fs (loop4): Found nat_bits in checkpoint
[  119.404486][ T4228] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 24578, setting to 1024
[  119.427321][ T4833] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  119.477653][ T4228] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  119.501742][ T4228] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  119.531168][ T4228] usb 1-1: config 0 descriptor??
[  119.593333][ T4228] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  119.627693][ T4225] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  119.723840][ T4850] loop3: detected capacity change from 0 to 8192
[  119.773470][ T4850] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[  119.784132][ T4850] REISERFS (device loop3): using ordered data mode
[  119.791242][ T4850] reiserfs: using flush barriers
[  119.802646][ T4850] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  119.808953][ T4228] usb 1-1: USB disconnect, device number 10
[  119.837758][ T4225] usb 3-1: device descriptor read/64, error -71
[  119.842828][ T4850] REISERFS (device loop3): checking transaction log (loop3)
[  119.852097][ T4728] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  120.079180][ T4850] REISERFS (device loop3): Using tea hash to sort names
[  120.086466][ T4850] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  120.097756][ T4728] usb 2-1: Using ep0 maxpacket: 8
[  120.122634][ T4225] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  120.225020][ T4728] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  120.234531][ T4728] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  120.290073][ T4728] pvrusb2: Hardware description: Terratec Grabster AV400
[  120.298172][ T4728] pvrusb2: **********
[  120.302205][ T4728] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  120.313143][ T4728] pvrusb2: Important functionality might not be entirely working.
[  120.327967][ T4225] usb 3-1: device descriptor read/64, error -71
[  120.365575][ T4728] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  120.417700][ T4728] pvrusb2: **********
[  120.458728][ T4225] usb usb3-port1: attempt power cycle
[  120.469181][ T4857] netlink: 48 bytes leftover after parsing attributes in process `syz.3.140'.
[  120.484522][ T4857] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744071562264580)
[  120.495562][ T4857] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647
[  120.507705][ T4857] netlink: 48 bytes leftover after parsing attributes in process `syz.3.140'.
[  120.516921][ T4857] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744071562264580)
[  120.533592][ T2422] pvrusb2: Invalid write control endpoint
[  120.539709][ T4857] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647
[  120.563577][ T4855] loop0: detected capacity change from 0 to 256
[  120.604580][ T4855] exfat: Bad value for 'umask'
[  120.736983][ T2422] pvrusb2: Invalid write control endpoint
[  120.744798][ T2422] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  120.765899][ T2422] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  120.776698][ T2422] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  120.821376][ T2422] pvrusb2: Device being rendered inoperable
[  120.828051][ T2422] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  120.835321][ T2422] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  120.866755][ T2422] pvrusb2: Attached sub-driver cx25840
[  120.887722][ T4225] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  120.905066][ T2422] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  120.915384][ T2422] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  121.021748][ T4877] pvrusb2: Attempted to execute control transfer when device not ok
[  121.068165][ T4225] usb 3-1: device descriptor read/8, error -71
[  121.357955][ T4225] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  121.502008][ T4225] usb 3-1: device descriptor read/8, error -71
[  121.678436][ T4225] usb usb3-port1: unable to enumerate USB device
[  121.820245][ T4883] loop4: detected capacity change from 0 to 764
[  121.840928][ T4881] loop3: detected capacity change from 0 to 512
[  121.865214][ T4878] loop0: detected capacity change from 0 to 8192
[  121.889036][ T4881] EXT4-fs (loop3): Ignoring removed oldalloc option
[  121.940603][ T4881] EXT4-fs (loop3): 1 truncate cleaned up
[  121.953194][ T4878] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[  121.963123][ T4878] REISERFS (device loop0): using ordered data mode
[  121.968912][ T4881] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,bsdgroups,nouid32,errors=remount-ro,jqfmt=vfsv1,oldalloc,stripe=0x0000000000000005,. Quota mode: writeback.
[  121.971642][ T4878] reiserfs: using flush barriers
[  121.994515][ T4878] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  122.015751][ T4878] REISERFS (device loop0): checking transaction log (loop0)
[  122.132109][ T4883] loop4: detected capacity change from 0 to 764
[  122.180836][ T4878] REISERFS (device loop0): Using tea hash to sort names
[  122.190228][ T4878] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  122.414968][ T4883] loop4: detected capacity change from 0 to 764
[  122.468926][ T4894] loop2: detected capacity change from 0 to 128
[  122.538009][ T4894] VFS: Found a Xenix FS (block size = 512) on device loop2
[  122.563642][ T4894] sysv_free_block: trying to free block not in datazone
[  122.593549][ T4894] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  122.605165][ T4883] loop4: detected capacity change from 0 to 764
[  122.760855][ T4896] netlink: 12 bytes leftover after parsing attributes in process `syz.4.151'.
[  122.800886][ T4896] netlink: 4 bytes leftover after parsing attributes in process `syz.4.151'.
[  122.842218][ T4896] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  122.851393][ T4896] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  122.860474][ T4896] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  122.866918][ T4730] usb 2-1: USB disconnect, device number 5
[  122.869319][ T4896] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  123.018291][ T4904] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 2) not found (pos 4)
[  123.272282][ T4898] ntfs: volume version 3.1.
[  123.327257][ T4898] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[  123.400287][ T4898] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[  123.446925][ T4898] ntfs: (device loop2): load_system_files(): Failed to determine if Windows is hibernated.  Mounting read-only.  Run chkdsk.
[  123.472014][ T4898] ntfs: (device loop2): ntfs_read_locked_attr_inode(): Failed with error code -2 while reading attribute inode (mft_no 0x1a, type 0x80, name_len 4).  Marking corrupt inode and base inode 0x1a as bad.  Run chkdsk.
[  123.507420][ T4898] ntfs: (device loop2): load_and_init_usnjrnl(): Failed to load $UsnJrnl/$DATA/$Max attribute.
[  123.536973][ T4898] ntfs: (device loop2): load_system_files(): Failed to load $UsnJrnl.  Will not be able to remount read-write.  Run chkdsk.
[  123.539268][ T4891] 
[  123.539268][ T4891]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  123.539268][ T4891] 
[  123.587732][ T4228] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  123.786953][ T4891] read_mapping_page failed!
[  123.804551][ T4891] ERROR: (device loop3): txCommit: 
[  123.804551][ T4891] 
[  123.815285][ T4912] netlink: 4 bytes leftover after parsing attributes in process `syz.1.155'.
[  123.823660][ T4891] ERROR: (device loop3): remounting filesystem as read-only
[  123.924028][ T4910] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[  123.953870][ T4910] REISERFS (device loop0): using ordered data mode
[  123.984048][ T4910] reiserfs: using flush barriers
[  123.989713][ T4915] ERROR: (device loop3): diWrite: ixpxd invalid
[  123.989713][ T4915] 
[  123.995578][ T4228] usb 5-1: Using ep0 maxpacket: 8
[  124.029922][ T4910] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  124.046749][ T4915] ERROR: (device loop3): txCommit: 
[  124.046749][ T4915] 
[  124.061734][ T4910] REISERFS (device loop0): checking transaction log (loop0)
[  124.887845][ T4228] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  124.895964][ T4228] usb 5-1: config 0 has no interface number 0
[  124.927653][ T4228] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 108, changing to 10
[  124.938779][ T4910] REISERFS (device loop0): Using tea hash to sort names
[  124.946621][ T4910] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  124.947648][ T4228] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 24578, setting to 1024
[  125.011365][ T4228] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  125.025592][ T4920] set_capacity_and_notify: 3 callbacks suppressed
[  125.025608][ T4920] loop1: detected capacity change from 0 to 8192
[  125.040407][ T4228] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.062192][ T4228] usb 5-1: config 0 descriptor??
[  125.096655][ T4920] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[  125.107381][ T4920] REISERFS (device loop1): using ordered data mode
[  125.121156][ T4228] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  125.133694][ T4920] reiserfs: using flush barriers
[  125.157417][ T4920] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  125.204701][ T4920] REISERFS (device loop1): checking transaction log (loop1)
[  125.345048][ T4929] FAULT_INJECTION: forcing a failure.
[  125.345048][ T4929] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  125.363054][ T4228] usb 5-1: USB disconnect, device number 3
[  125.390499][ T4929] CPU: 1 PID: 4929 Comm: syz.0.160 Not tainted syzkaller #0
[  125.397874][ T4929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  125.407968][ T4929] Call Trace:
[  125.411274][ T4929]  <TASK>
[  125.414235][ T4929]  dump_stack_lvl+0x188/0x250
[  125.418994][ T4929]  ? show_regs_print_info+0x20/0x20
[  125.424317][ T4929]  ? load_image+0x400/0x400
[  125.429031][ T4929]  ? __lock_acquire+0x7d10/0x7d10
[  125.434081][ T4929]  ? __lock_acquire+0x12e8/0x7d10
[  125.439117][ T4929]  ? verify_lock_unused+0x140/0x140
[  125.444416][ T4929]  should_fail+0x38c/0x4c0
[  125.448853][ T4929]  prepare_alloc_pages+0x1e4/0x5f0
[  125.453975][ T4929]  __alloc_pages+0x11b/0x480
[  125.458571][ T4929]  ? zone_statistics+0x170/0x170
[  125.463520][ T4929]  ? count_memcg_event_mm+0x324/0x370
[  125.468894][ T4929]  ? remove_device_exclusive_entry+0xa90/0xa90
[  125.475059][ T4929]  alloc_pages_vma+0x393/0x7c0
[  125.479856][ T4929]  handle_mm_fault+0x23be/0x4410
[  125.484874][ T4929]  ? get_page+0xe0/0xe0
[  125.489045][ T4929]  ? vmacache_find+0x238/0x590
[  125.493833][ T4929]  ? find_vma+0xd2/0x230
[  125.498085][ T4929]  do_user_addr_fault+0x489/0xc80
[  125.503601][ T4929]  exc_page_fault+0x60/0x100
[  125.508196][ T4929]  asm_exc_page_fault+0x22/0x30
[  125.513132][ T4929] RIP: 0033:0x7f46606f8ae3
[  125.517552][ T4929] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c
[  125.537330][ T4929] RSP: 002b:00007f465ea9a470 EFLAGS: 00010202
[  125.543408][ T4929] RAX: 0000000000006000 RBX: 00007f465ea9a530 RCX: 00007f465667b000
[  125.551383][ T4929] RDX: 00007f465ea9a6d0 RSI: 0000000000000001 RDI: 00007f465ea9a5d0
[  125.559459][ T4929] RBP: 0000000000000007 R08: 000000000000000a R09: 00000000000002d0
[  125.567787][ T4929] R10: 000000000000031a R11: 00007f465ea9a530 R12: 0000000000002001
[  125.575769][ T4929] R13: 00007f46608f7600 R14: 00000000000000b5 R15: 00007f465ea9a5d0
[  125.583787][ T4929]  </TASK>
[  125.604068][ T4920] REISERFS (device loop1): Using tea hash to sort names
[  125.611961][ T4920] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  125.753305][ T4929] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[  125.788040][ T4929] loop0: detected capacity change from 0 to 128
[  125.826153][ T4929] VFS: Found a Xenix FS (block size = 512) on device loop0
[  125.836176][ T4929] sysv_free_block: trying to free block not in datazone
[  125.851635][ T4929] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  125.972321][ T4939] loop2: detected capacity change from 0 to 128
[  126.014082][ T4939] VFS: Found a Xenix FS (block size = 512) on device loop2
[  126.032088][ T4939] sysv_free_block: trying to free block not in datazone
[  126.086438][ T4939] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  126.146310][ T4945] loop1: detected capacity change from 0 to 128
[  126.182855][ T4944] loop4: detected capacity change from 0 to 1024
[  126.197656][ T4938] loop3: detected capacity change from 0 to 8192
[  126.243747][ T4944] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  126.258363][ T4945] VFS: Found a Xenix FS (block size = 512) on device loop1
[  126.281374][ T4938] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[  126.318626][ T4945] sysv_free_block: trying to free block not in datazone
[  126.326979][ T4945] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  126.337888][ T4938] REISERFS (device loop3): using ordered data mode
[  126.344822][ T4938] reiserfs: using flush barriers
[  126.378607][ T4944] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,journal_dev=0x0000000000000007,journal_ioprio=0x0000000000000006,noinit_itable,nogrpid,jqfmt=vfsv0,jqfmt=vfsv0,noinit_itable,mb_optimize_scan=0x0000000000000000,usrquota,dioread_nolock,,errors=continue. Quota mode: writeback.
[  126.497607][ T4938] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  126.530035][ T4944] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  126.576605][ T4944] EXT4-fs error (device loop4): ext4_free_blocks:6232: comm syz.4.166: Freeing blocks not in datazone - block = 0, count = 16
[  126.679906][ T4938] REISERFS (device loop3): checking transaction log (loop3)
[  126.819363][ T4944] EXT4-fs (loop4): shut down requested (0)
[  127.616563][ T4938] REISERFS (device loop3): Using tea hash to sort names
[  127.626351][ T4947] loop0: detected capacity change from 0 to 32768
[  127.639065][ T4938] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  127.730560][ T4963] netlink: 12 bytes leftover after parsing attributes in process `syz.4.166'.
[  127.888896][ T4947] XFS (loop0): Mounting V5 Filesystem
[  128.072151][ T4980] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 2) not found (pos 4)
[  128.297994][ T4947] XFS (loop0): Ending clean mount
[  128.399498][ T4947] XFS (loop0): Quotacheck needed: Please wait.
[  128.549586][ T4947] XFS (loop0): Quotacheck: Done.
[  128.644440][ T4977] loop1: detected capacity change from 0 to 8192
[  128.649857][ T4979] loop2: detected capacity change from 0 to 8192
[  128.682661][ T4977] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[  128.702284][ T4977] REISERFS (device loop1): using ordered data mode
[  128.723693][ T4977] reiserfs: using flush barriers
[  128.767147][ T4977] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  128.796679][ T4979] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal
[  128.808497][ T4977] REISERFS (device loop1): checking transaction log (loop1)
[  128.863385][ T4987] netlink: 12 bytes leftover after parsing attributes in process `syz.3.176'.
[  128.873776][ T4987] netlink: 4 bytes leftover after parsing attributes in process `syz.3.176'.
[  128.883140][ T4979] REISERFS (device loop2): using ordered data mode
[  128.888048][ T4987] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  128.898709][ T4987] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  128.907438][ T4987] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  128.914286][ T4979] reiserfs: using flush barriers
[  128.916258][ T4987] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  128.962145][ T4979] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  129.000121][ T4184] XFS (loop0): Unmounting Filesystem
[  129.019651][ T4979] REISERFS (device loop2): checking transaction log (loop2)
[  129.120367][ T4977] REISERFS (device loop1): Using tea hash to sort names
[  129.132261][ T4977] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  129.237642][ T1108] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  129.304714][ T4990] loop4: detected capacity change from 0 to 128
[  129.329262][ T4979] REISERFS (device loop2): Using tea hash to sort names
[  129.353766][ T4990] VFS: Found a Xenix FS (block size = 512) on device loop4
[  129.354922][ T4979] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  129.363939][ T4990] sysv_free_block: trying to free block not in datazone
[  129.405851][ T4990] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  129.507790][ T1108] usb 4-1: Using ep0 maxpacket: 8
[  129.645387][ T1108] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  129.653856][ T4994] FAULT_INJECTION: forcing a failure.
[  129.653856][ T4994] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  129.670501][ T1108] usb 4-1: config 0 has no interface number 0
[  129.671796][ T4994] CPU: 1 PID: 4994 Comm: syz.0.177 Not tainted syzkaller #0
[  129.677132][ T1108] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 108, changing to 10
[  129.683999][ T4994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  129.684017][ T4994] Call Trace:
[  129.684025][ T4994]  <TASK>
[  129.684034][ T4994]  dump_stack_lvl+0x188/0x250
[  129.684065][ T4994]  ? show_regs_print_info+0x20/0x20
[  129.684090][ T4994]  ? load_image+0x400/0x400
[  129.684110][ T4994]  ? __lock_acquire+0x7d10/0x7d10
[  129.684129][ T4994]  ? __lock_acquire+0x12e8/0x7d10
[  129.684158][ T4994]  should_fail+0x38c/0x4c0
[  129.684185][ T4994]  prepare_alloc_pages+0x1e4/0x5f0
[  129.684215][ T4994]  __alloc_pages+0x11b/0x480
[  129.684241][ T4994]  ? zone_statistics+0x170/0x170
[  129.684272][ T4994]  ? count_memcg_event_mm+0x324/0x370
[  129.684291][ T4994]  ? remove_device_exclusive_entry+0xa90/0xa90
[  129.684314][ T4994]  alloc_pages_vma+0x393/0x7c0
[  129.684343][ T4994]  handle_mm_fault+0x23be/0x4410
[  129.684377][ T4994]  ? get_page+0xe0/0xe0
[  129.684405][ T4994]  ? vmacache_find+0x238/0x590
[  129.684428][ T4994]  ? find_vma+0xd2/0x230
[  129.698236][ T1108] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 24578, setting to 1024
[  129.705954][ T4994]  do_user_addr_fault+0x489/0xc80
[  129.709525][ T1108] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  129.712188][ T4994]  exc_page_fault+0x60/0x100
[  129.716847][ T1108] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  129.722065][ T4994]  asm_exc_page_fault+0x22/0x30
[  129.722090][ T4994] RIP: 0033:0x7f46606f8ae3
[  129.722111][ T4994] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c
[  129.722128][ T4994] RSP: 002b:00007f465ea9a470 EFLAGS: 00010202
[  129.722148][ T4994] RAX: 0000000000007000 RBX: 00007f465ea9a530 RCX: 00007f465667b000
[  129.722163][ T4994] RDX: 00007f465ea9a6d0 RSI: 0000000000000015 RDI: 00007f465ea9a5d0
[  129.722176][ T4994] RBP: 0000000000000005 R08: 000000000000000a R09: 00000000000002d0
[  129.722188][ T4994] R10: 000000000000031a R11: 00007f465ea9a530 R12: 0000000000000601
[  129.722202][ T4994] R13: 00007f46608f7600 R14: 00000000000000b5 R15: 00007f465ea9a5d0
[  129.722230][ T4994]  </TASK>
[  129.766337][ T4994] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[  129.800234][ T1108] usb 4-1: config 0 descriptor??
[  129.949310][ T4999] VFS: Found a Xenix FS (block size = 512) on device loop4
[  129.960798][ T1108] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  129.977093][ T4994] VFS: Found a Xenix FS (block size = 512) on device loop0
[  129.984120][ T4999] sysv_free_block: trying to free block not in datazone
[  129.990339][ T4994] sysv_free_block: trying to free block not in datazone
[  130.024512][ T4994] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  130.025293][ T4999] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  130.242701][ T1108] usb 4-1: USB disconnect, device number 4
[  131.757750][ T4730] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  131.997595][ T5041] set_capacity_and_notify: 2 callbacks suppressed
[  131.997612][ T5041] loop1: detected capacity change from 0 to 8192
[  131.997638][ T4730] usb 1-1: Using ep0 maxpacket: 32
[  132.053154][ T5041] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[  132.077920][ T5041] REISERFS (device loop1): using ordered data mode
[  132.090422][ T5041] reiserfs: using flush barriers
[  132.124601][ T5041] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  132.157810][ T4730] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  132.194205][ T4730] usb 1-1: config 0 interface 0 has no altsetting 0
[  132.208000][ T5041] REISERFS (device loop1): checking transaction log (loop1)
[  132.249437][ T4730] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
[  132.279878][ T4730] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.301581][ T5046] loop3: detected capacity change from 0 to 128
[  132.328781][ T4730] usb 1-1: config 0 descriptor??
[  132.377350][ T5046] VFS: Found a Xenix FS (block size = 512) on device loop3
[  132.391312][ T5043] loop4: detected capacity change from 0 to 8192
[  132.405704][ T5046] sysv_free_block: trying to free block not in datazone
[  132.437169][ T5041] REISERFS (device loop1): Using tea hash to sort names
[  132.441973][ T5046] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  132.465378][ T5041] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  132.484345][ T5043] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal
[  132.526050][ T5043] REISERFS (device loop4): using ordered data mode
[  132.567809][ T5043] reiserfs: using flush barriers
[  132.647197][ T5043] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  132.725927][ T5043] REISERFS (device loop4): checking transaction log (loop4)
[  132.811116][ T1433] ieee802154 phy0 wpan0: encryption failed: -22
[  132.817678][ T1433] ieee802154 phy1 wpan1: encryption failed: -22
[  132.902435][ T4730] corsair-cpro 0003:1B1C:0C10.0001: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.0-1/input0
[  133.058107][ T5043] REISERFS (device loop4): Using tea hash to sort names
[  133.069614][ T5043] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  133.123918][ T5058] loop3: detected capacity change from 0 to 128
[  133.188539][ T5058] VFS: Found a Xenix FS (block size = 512) on device loop3
[  133.196180][ T5058] sysv_free_block: trying to free block not in datazone
[  133.243623][ T5058] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  133.258262][ T5056] loop1: detected capacity change from 0 to 4096
[  133.291232][ T5056] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512)
[  133.400868][ T5035] loop0: detected capacity change from 0 to 1024
[  133.435908][ T5056] ntfs3: loop1: Inode r=19 is not in use!
[  133.478205][ T5056] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  133.559159][ T5035] hfsplus: failed to load root directory
[  133.664167][ T5035] udc-core: couldn't find an available UDC or it's busy
[  133.674199][ T5064] block device autoloading is deprecated and will be removed.
[  133.681965][ T5035] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  133.765102][ T5071] netlink: 12 bytes leftover after parsing attributes in process `syz.4.199'.
[  133.785927][ T4730] corsair-cpro: probe of 0003:1B1C:0C10.0001 failed with error -71
[  133.821940][ T4730] usb 1-1: USB disconnect, device number 11
[  133.848500][ T5071] netlink: 4 bytes leftover after parsing attributes in process `syz.4.199'.
[  133.953002][ T5062] md: could not open device unknown-block(0,0).
[  133.974028][ T5062] md: md_import_device returned -6
[  133.988512][ T5064] md: md2 stopped.
[  134.005705][ T5075] fido_id[5075]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  134.324391][ T5090] netlink: 'syz.1.201': attribute type 5 has an invalid length.
[  134.493478][ T5096] loop4: detected capacity change from 0 to 128
[  134.572140][ T5088] loop2: detected capacity change from 0 to 8192
[  134.597275][ T5090] loop1: detected capacity change from 0 to 8192
[  134.620203][ T5096] VFS: Found a Xenix FS (block size = 512) on device loop4
[  134.643916][ T5096] sysv_free_block: trying to free block not in datazone
[  134.682666][ T5096] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  134.692217][ T5088] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal
[  134.724223][ T5088] REISERFS (device loop2): using ordered data mode
[  134.731636][ T5088] reiserfs: using flush barriers
[  134.745687][ T5090] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal
[  134.757799][ T5090] REISERFS (device loop1): using ordered data mode
[  134.779046][ T5088] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  134.794914][ T5104] loop0: detected capacity change from 0 to 8192
[  134.815828][ T5090] reiserfs: using flush barriers
[  134.878007][ T5088] REISERFS (device loop2): checking transaction log (loop2)
[  134.886909][ T5090] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  134.898047][ T5104] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[  134.917832][ T5104] REISERFS (device loop0): using ordered data mode
[  134.924390][ T5104] reiserfs: using flush barriers
[  134.941995][ T5090] REISERFS (device loop1): checking transaction log (loop1)
[  134.951148][ T5090] REISERFS (device loop1): Using r5 hash to sort names
[  134.996126][ T5108] VFS: Found a Xenix FS (block size = 512) on device loop4
[  135.020902][ T5104] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  135.037967][ T5104] REISERFS (device loop0): checking transaction log (loop0)
[  135.089450][ T5108] sysv_free_block: trying to free block not in datazone
[  135.101551][ T5108] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  135.318216][ T5104] REISERFS (device loop0): Using tea hash to sort names
[  135.318528][ T5104] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  135.443648][ T5088] REISERFS (device loop2): Using tea hash to sort names
[  135.480463][ T5088] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  135.562522][ T5111] netlink: 12 bytes leftover after parsing attributes in process `syz.4.210'.
[  135.596189][ T5111] netlink: 17 bytes leftover after parsing attributes in process `syz.4.210'.
[  135.804018][ T5115] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback.
[  135.831860][ T5115] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  136.166888][ T5127] netlink: 28 bytes leftover after parsing attributes in process `syz.0.212'.
[  136.345176][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!!
[  136.447596][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!!
[  136.910515][ T5132] netlink: 12 bytes leftover after parsing attributes in process `syz.3.215'.
[  136.937678][ T1108] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  136.942546][ T5132] netlink: 4 bytes leftover after parsing attributes in process `syz.3.215'.
[  137.037196][ T5131] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal
[  137.064775][ T5131] REISERFS (device loop4): using ordered data mode
[  137.081889][ T5131] reiserfs: using flush barriers
[  137.115807][ T5131] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  137.184064][ T5131] REISERFS (device loop4): checking transaction log (loop4)
[  137.307840][ T1108] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 190, changing to 11
[  137.327595][ T1108] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 42878, setting to 1024
[  137.347629][ T1108] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  137.377287][ T1108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.388308][ T5131] REISERFS (device loop4): Using tea hash to sort names
[  137.398605][ T1108] usb 2-1: config 0 descriptor??
[  137.416284][ T5131] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  137.417845][ T5115] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  137.843407][ T5148] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 2) not found (pos 4)
[  138.081042][ T5150] set_capacity_and_notify: 3 callbacks suppressed
[  138.081061][ T5150] loop0: detected capacity change from 0 to 128
[  138.217844][ T1108] usbhid 2-1:0.0: can't add hid device: -32
[  138.229230][ T1108] usbhid: probe of 2-1:0.0 failed with error -32
[  138.246593][ T5150] VFS: Found a Xenix FS (block size = 512) on device loop0
[  138.269150][ T5150] sysv_free_block: trying to free block not in datazone
[  138.324154][ T5152] capability: warning: `syz.3.221' uses 32-bit capabilities (legacy support in use)
[  138.354234][ T5150] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  138.423102][ T5152] loop3: detected capacity change from 0 to 128
[  138.492123][ T4580] usb 2-1: USB disconnect, device number 6
[  138.686533][ T5157] FAULT_INJECTION: forcing a failure.
[  138.686533][ T5157] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  138.779162][ T5157] CPU: 0 PID: 5157 Comm: syz.0.224 Not tainted syzkaller #0
[  138.786687][ T5157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  138.796808][ T5157] Call Trace:
[  138.800128][ T5157]  <TASK>
[  138.803114][ T5157]  dump_stack_lvl+0x188/0x250
[  138.807829][ T5157]  ? show_regs_print_info+0x20/0x20
[  138.813060][ T5157]  ? load_image+0x400/0x400
[  138.817584][ T5157]  ? __lock_acquire+0x7d10/0x7d10
[  138.822632][ T5157]  ? __lock_acquire+0x12e8/0x7d10
[  138.827869][ T5157]  should_fail+0x38c/0x4c0
[  138.832492][ T5157]  prepare_alloc_pages+0x1e4/0x5f0
[  138.837720][ T5157]  __alloc_pages+0x11b/0x480
[  138.842351][ T5157]  ? zone_statistics+0x170/0x170
[  138.847433][ T5157]  ? count_memcg_event_mm+0x324/0x370
[  138.852836][ T5157]  ? remove_device_exclusive_entry+0xa90/0xa90
[  138.859735][ T5157]  alloc_pages_vma+0x393/0x7c0
[  138.864644][ T5157]  handle_mm_fault+0x23be/0x4410
[  138.869710][ T5157]  ? get_page+0xe0/0xe0
[  138.874012][ T5157]  ? vmacache_find+0x238/0x590
[  138.878811][ T5157]  ? find_vma+0xd2/0x230
[  138.880263][ T5155] loop3: detected capacity change from 0 to 8192
[  138.883085][ T5157]  do_user_addr_fault+0x489/0xc80
[  138.894470][ T5157]  exc_page_fault+0x60/0x100
[  138.899104][ T5157]  asm_exc_page_fault+0x22/0x30
[  138.904089][ T5157] RIP: 0033:0x7f46606f8ae3
[  138.908551][ T5157] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c
[  138.928493][ T5157] RSP: 002b:00007f465ea9a470 EFLAGS: 00010202
[  138.934687][ T5157] RAX: 0000000000009000 RBX: 00007f465ea9a530 RCX: 00007f465667b000
[  138.942779][ T5157] RDX: 00007f465ea9a6d0 RSI: 0000000000000011 RDI: 00007f465ea9a5d0
[  138.950900][ T5157] RBP: 0000000000000004 R08: 0000000000000007 R09: 000000000000005f
[  138.959104][ T5157] R10: 0000000000000060 R11: 00007f465ea9a530 R12: 0000000000000201
[  138.963447][ T5159] loop4: detected capacity change from 0 to 8192
[  138.967484][ T5157] R13: 00007f46608f7600 R14: 00000000000000b5 R15: 00007f465ea9a5d0
[  138.967520][ T5157]  </TASK>
[  139.014497][ T5157] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[  139.053194][ T5157] loop0: detected capacity change from 0 to 128
[  139.055054][ T5155] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[  139.161942][ T5157] VFS: Found a Xenix FS (block size = 512) on device loop0
[  139.173544][ T5155] REISERFS (device loop3): using ordered data mode
[  139.230216][ T5157] sysv_free_block: trying to free block not in datazone
[  139.238036][ T5155] reiserfs: using flush barriers
[  139.272833][ T5155] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  139.328252][ T5155] REISERFS (device loop3): checking transaction log (loop3)
[  139.374972][ T5157] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  139.784955][ T5155] REISERFS (device loop3): Using tea hash to sort names
[  139.817950][ T5155] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  139.894290][ T5175] netlink: 12 bytes leftover after parsing attributes in process `syz.0.228'.
[  139.981961][ T5175] netlink: 4 bytes leftover after parsing attributes in process `syz.0.228'.
[  140.267642][ T4228] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  140.374696][ T5168] loop1: detected capacity change from 0 to 32768
[  140.491541][ T5168] 
[  140.491541][ T5168]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  140.491541][ T5168] 
[  140.558154][ T4228] usb 5-1: Using ep0 maxpacket: 16
[  140.688265][ T4228] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0
[  140.707629][ T5168] read_mapping_page failed!
[  140.765418][ T4228] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x8 has an invalid bInterval 255, changing to 11
[  140.971728][ T5168] ERROR: (device loop1): txCommit: 
[  140.971728][ T5168] 
[  141.039187][ T4228] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x8 has invalid maxpacket 59391, setting to 1024
[  141.154193][ T5188] ERROR: (device loop1): diWrite: ixpxd invalid
[  141.154193][ T5188] 
[  141.187762][ T4228] usb 5-1: config 0 interface 0 has no altsetting 0
[  141.205111][ T5188] ERROR: (device loop1): txCommit: 
[  141.205111][ T5188] 
[  141.235532][ T4228] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice= 2.eb
[  141.297713][ T4228] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  141.318994][ T5191] loop0: detected capacity change from 0 to 4096
[  141.363521][ T4190] 
[  141.363521][ T4190]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  141.363521][ T4190] 
[  141.376948][ T4228] usb 5-1: config 0 descriptor??
[  141.393357][ T4190] 
[  141.393357][ T4190]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  141.393357][ T4190] 
[  141.418114][ T5177] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  141.669381][ T5177] loop4: detected capacity change from 0 to 1024
[  141.718286][ T5177] hfsplus: unable to parse mount options
[  141.735766][ T5177] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  141.860386][ T5207] FAULT_INJECTION: forcing a failure.
[  141.860386][ T5207] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  141.879202][ T5207] CPU: 1 PID: 5207 Comm: syz.0.239 Not tainted syzkaller #0
[  141.886704][ T5207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  141.896789][ T5207] Call Trace:
[  141.900238][ T5207]  <TASK>
[  141.903191][ T5207]  dump_stack_lvl+0x188/0x250
[  141.908006][ T5207]  ? show_regs_print_info+0x20/0x20
[  141.913234][ T5207]  ? load_image+0x400/0x400
[  141.917762][ T5207]  ? __lock_acquire+0x7d10/0x7d10
[  141.922812][ T5207]  ? __lock_acquire+0x12e8/0x7d10
[  141.927860][ T5207]  ? verify_lock_unused+0x140/0x140
[  141.933271][ T5207]  should_fail+0x38c/0x4c0
[  141.937715][ T5207]  prepare_alloc_pages+0x1e4/0x5f0
[  141.942964][ T5207]  __alloc_pages+0x11b/0x480
[  141.947581][ T5207]  ? zone_statistics+0x170/0x170
[  141.952641][ T5207]  ? count_memcg_event_mm+0x324/0x370
[  141.958072][ T5207]  ? remove_device_exclusive_entry+0xa90/0xa90
[  141.964433][ T5207]  alloc_pages_vma+0x393/0x7c0
[  141.969227][ T5207]  handle_mm_fault+0x23be/0x4410
[  141.970946][ T4580] usb 5-1: USB disconnect, device number 4
[  141.974382][ T5207]  ? get_page+0xe0/0xe0
[  141.984490][ T5207]  ? vmacache_find+0x238/0x590
[  141.989369][ T5207]  ? find_vma+0xd2/0x230
[  141.993647][ T5207]  do_user_addr_fault+0x489/0xc80
[  141.998713][ T5207]  exc_page_fault+0x60/0x100
[  142.003446][ T5207]  asm_exc_page_fault+0x22/0x30
[  142.008322][ T5207] RIP: 0033:0x7f46606f8ae3
[  142.012758][ T5207] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c
[  142.032393][ T5207] RSP: 002b:00007f465ea9a470 EFLAGS: 00010202
[  142.038481][ T5207] RAX: 000000000000a000 RBX: 00007f465ea9a530 RCX: 00007f465667b000
[  142.046469][ T5207] RDX: 00007f465ea9a6d0 RSI: 0000000000000039 RDI: 00007f465ea9a5d0
[  142.054477][ T5207] RBP: 0000000000000006 R08: 0000000000000007 R09: 000000000000005f
[  142.062558][ T5207] R10: 0000000000000060 R11: 00007f465ea9a530 R12: 0000000000000c01
[  142.070560][ T5207] R13: 00007f46608f7600 R14: 00000000000000b5 R15: 00007f465ea9a5d0
[  142.078759][ T5207]  </TASK>
[  142.146490][ T5207] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[  142.159408][ T5207] loop0: detected capacity change from 0 to 128
[  142.186793][ T5207] VFS: Found a Xenix FS (block size = 512) on device loop0
[  142.206950][ T5207] sysv_free_block: trying to free block not in datazone
[  142.232640][ T5207] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  142.394336][ T5209] loop1: detected capacity change from 0 to 32768
[  142.512058][ T5213] ERROR: (device loop1): dbAdjCtl: the maximum free buddy is not the old root
[  142.512058][ T5213] 
[  142.568784][ T5213] ERROR: (device loop1): remounting filesystem as read-only
[  142.949386][ T5222] netlink: 12 bytes leftover after parsing attributes in process `syz.3.243'.
[  142.967930][ T5222] netlink: 4 bytes leftover after parsing attributes in process `syz.3.243'.
[  142.977059][ T5222] netlink: 12 bytes leftover after parsing attributes in process `syz.3.243'.
[  143.008387][ T5222] netlink: 4 bytes leftover after parsing attributes in process `syz.3.243'.
[  143.063886][ T5217] XFS (loop4): Mounting V5 Filesystem
[  143.135419][ T5217] XFS (loop4): Ending clean mount
[  143.281074][ T5233] x_tables: duplicate underflow at hook 1
[  143.287978][ T5233] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  143.307979][ T4580] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  143.451480][ T5217] XFS (loop4): Unmounting Filesystem
[  143.567666][ T4580] usb 4-1: Using ep0 maxpacket: 8
[  143.650425][ T4225] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  143.688127][ T4580] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  143.696177][ T4580] usb 4-1: config 0 has no interface number 0
[  143.766893][ T4580] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 30838, setting to 64
[  143.837591][ T4580] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  143.891705][ T4580] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  143.920670][ T4225] usb 1-1: Using ep0 maxpacket: 8
[  143.963490][ T4580] usb 4-1: config 0 descriptor??
[  144.038036][ T4225] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  144.070675][ T4580] iowarrior 4-1:0.1: no interrupt-in endpoint found
[  144.117396][ T4225] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  144.317748][ T4580] usb 4-1: USB disconnect, device number 5
[  144.635325][ T4225] pvrusb2: Hardware description: Terratec Grabster AV400
[  144.677612][ T4225] pvrusb2: **********
[  144.687960][ T4225] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  144.737617][ T4225] pvrusb2: Important functionality might not be entirely working.
[  144.788334][ T4225] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  144.840763][ T4225] pvrusb2: **********
[  144.889106][ T2422] pvrusb2: Invalid write control endpoint
[  144.994894][ T2422] pvrusb2: Invalid write control endpoint
[  145.007649][ T2422] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  145.040767][ T2422] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  145.068355][ T2422] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  145.101879][ T2422] pvrusb2: Device being rendered inoperable
[  145.119534][ T2422] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  145.126921][ T2422] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b)
[  145.166424][ T2422] pvrusb2: Attached sub-driver cx25840
[  145.216288][ T2422] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  145.278263][ T2422] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  145.393852][ T5261] pvrusb2: Attempted to execute control transfer when device not ok
[  145.776655][ T5251] set_capacity_and_notify: 1 callbacks suppressed
[  145.776827][ T5251] loop1: detected capacity change from 0 to 32768
[  146.162590][ T5251] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.248 (5251)
[  146.219441][ T5251] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  146.228387][ T5251] BTRFS info (device loop1): using free space tree
[  146.235102][ T5251] BTRFS info (device loop1): has skinny extents
[  146.439995][ T5278] loop2: detected capacity change from 0 to 128
[  146.552898][ T5259] loop3: detected capacity change from 0 to 32768
[  146.554298][ T5251] BTRFS info (device loop1): enabling ssd optimizations
[  146.577211][ T5254] loop4: detected capacity change from 0 to 32768
[  146.579575][ T5278] VFS: Found a Xenix FS (block size = 512) on device loop2
[  146.628992][ T5251] netlink: 'syz.1.248': attribute type 2 has an invalid length.
[  146.639193][ T5278] sysv_free_block: trying to free block not in datazone
[  146.665670][ T5278] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  146.715366][ T5254] 
[  146.715366][ T5254]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  146.715366][ T5254] 
[  146.755313][ T5254] read_mapping_page failed!
[  146.767576][ T5254] ERROR: (device loop4): txCommit: 
[  146.767576][ T5254] 
[  146.995232][  T144] ERROR: (device loop4): diWrite: ixpxd invalid
[  146.995232][  T144] 
[  147.013299][  T144] ERROR: (device loop4): txCommit: 
[  147.013299][  T144] 
[  147.055996][  T144] jfs_write_inode: jfs_commit_inode failed!
[  147.092408][ T4185] 
[  147.092408][ T4185]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  147.092408][ T4185] 
[  147.111513][ T4185] 
[  147.111513][ T4185]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  147.111513][ T4185] 
[  147.570154][ T5259] loop3: detected capacity change from 0 to 4096
[  148.274378][ T5308] usb 1-1: USB disconnect, device number 12
[  148.397787][ T5322] netlink: 12 bytes leftover after parsing attributes in process `syz.2.260'.
[  148.397821][ T5322] netlink: 4 bytes leftover after parsing attributes in process `syz.2.260'.
[  148.398001][ T5322] netlink: 12 bytes leftover after parsing attributes in process `syz.2.260'.
[  148.398019][ T5322] netlink: 4 bytes leftover after parsing attributes in process `syz.2.260'.
[  148.681561][ T4728] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  148.997818][ T4728] usb 3-1: Using ep0 maxpacket: 8
[  149.148455][ T4728] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  149.591322][ T5345] loop1: detected capacity change from 0 to 1024
[  149.607862][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!!
[  149.919877][ T5343] xt_CT: No such helper "netbios-ns"
[  150.192267][ T4728] usb 3-1: config 0 has no interface number 0
[  150.198690][ T4728] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 30838, setting to 64
[  150.210230][ T4728] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  150.219617][ T4728] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  150.245872][ T4728] usb 3-1: config 0 descriptor??
[  150.287276][  T144] hfsplus: b-tree write err: -5, ino 3
[  150.301600][ T4728] iowarrior 3-1:0.1: no interrupt-in endpoint found
[  150.367183][ T5335] loop0: detected capacity change from 0 to 8192
[  150.426308][ T5335] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[  150.466663][ T5335] REISERFS (device loop0): using ordered data mode
[  150.505009][ T4728] usb 3-1: USB disconnect, device number 12
[  150.525105][ T5335] reiserfs: using flush barriers
[  150.533576][ T5354] loop3: detected capacity change from 0 to 128
[  150.577820][ T5335] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  150.618614][ T5354] VFS: Found a Xenix FS (block size = 512) on device loop3
[  150.626826][ T5354] sysv_free_block: trying to free block not in datazone
[  150.645282][ T5335] REISERFS (device loop0): checking transaction log (loop0)
[  150.654721][ T5354] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  150.914808][ T5335] REISERFS (device loop0): Using tea hash to sort names
[  150.959215][ T5335] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  151.064277][ T5358] loop3: detected capacity change from 0 to 8192
[  151.161778][ T5358] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[  151.199272][ T5358] REISERFS (device loop3): using ordered data mode
[  151.239470][ T5358] reiserfs: using flush barriers
[  151.270888][ T5358] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  151.358069][ T5358] REISERFS (device loop3): checking transaction log (loop3)
[  151.421185][ T5356] loop1: detected capacity change from 0 to 32768
[  151.600841][ T5356] 
[  151.600841][ T5356]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  151.600841][ T5356] 
[  151.671263][ T5364] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 2) not found (pos 4)
[  151.922281][ T5356] read_mapping_page failed!
[  151.980183][ T5356] ERROR: (device loop1): txCommit: 
[  151.980183][ T5356] 
[  151.990230][ T5358] REISERFS (device loop3): Using tea hash to sort names
[  152.076083][ T5358] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  152.257692][ T5373] loop2: detected capacity change from 0 to 256
[  152.286282][    T9] ERROR: (device loop1): diWrite: ixpxd invalid
[  152.286282][    T9] 
[  152.309605][    T9] ERROR: (device loop1): txCommit: 
[  152.309605][    T9] 
[  152.355182][    T9] jfs_write_inode: jfs_commit_inode failed!
[  152.362581][ T4190] 
[  152.362581][ T4190]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  152.362581][ T4190] 
[  152.377417][ T4190] 
[  152.377417][ T4190]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  152.377417][ T4190] 
[  152.454664][ T5373] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[  152.773456][ T5389] netlink: 12 bytes leftover after parsing attributes in process `syz.4.279'.
[  152.774180][ T5388] capability: warning: `syz.0.278' uses deprecated v2 capabilities in a way that may be insecure
[  152.895719][ T5389] netlink: 4 bytes leftover after parsing attributes in process `syz.4.279'.
[  153.020722][ T5384] loop1: detected capacity change from 0 to 8192
[  153.328425][ T5384] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[  153.411227][ T5384] REISERFS (device loop1): using ordered data mode
[  153.633314][ T5384] reiserfs: using flush barriers
[  153.701638][ T5384] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  153.788009][ T5384] REISERFS (device loop1): checking transaction log (loop1)
[  153.850489][ T5399] loop3: detected capacity change from 0 to 8192
[  153.977759][ T5399] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[  153.987592][ T4728] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  153.998219][ T5399] REISERFS (device loop3): using ordered data mode
[  154.004824][ T5399] reiserfs: using flush barriers
[  154.068312][ T5399] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  154.149679][ T5406] loop2: detected capacity change from 0 to 32768
[  154.163017][ T5399] REISERFS (device loop3): checking transaction log (loop3)
[  154.185382][ T5406] 
[  154.185382][ T5406]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  154.185382][ T5406] 
[  154.257710][ T4728] usb 5-1: Using ep0 maxpacket: 8
[  154.265203][ T5384] REISERFS (device loop1): Using tea hash to sort names
[  154.303473][ T5384] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  154.378727][ T5406] ERROR: (device loop2): diWrite: ixpxd invalid
[  154.378727][ T5406] 
[  154.407955][ T4728] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  154.416142][ T4728] usb 5-1: config 0 has no interface number 0
[  154.446169][ T4728] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 30838, setting to 64
[  154.461210][ T5406] ERROR: (device loop2): txCommit: 
[  154.461210][ T5406] 
[  154.472754][ T4728] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  154.493379][ T4728] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  154.519686][ T5399] REISERFS (device loop3): Using tea hash to sort names
[  154.536689][ T5399] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  154.563852][ T4728] usb 5-1: config 0 descriptor??
[  154.571880][ T4193] 
[  154.571880][ T4193]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  154.571880][ T4193] 
[  154.596940][ T4193] 
[  154.596940][ T4193]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  154.596940][ T4193] 
[  154.639371][ T4728] iowarrior 5-1:0.1: no interrupt-in endpoint found
[  154.845761][ T4728] usb 5-1: USB disconnect, device number 5
[  155.232388][ T5427] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 2) not found (pos 4)
[  155.985011][ T5431] loop4: detected capacity change from 0 to 8192
[  156.110410][ T5431] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal
[  156.126594][ T5431] REISERFS (device loop4): using ordered data mode
[  156.134088][ T5431] reiserfs: using flush barriers
[  156.140439][ T5431] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  156.194944][ T5417] loop0: detected capacity change from 0 to 32768
[  156.228353][ T5431] REISERFS (device loop4): checking transaction log (loop4)
[  156.313380][ T5417] 
[  156.313380][ T5417]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  156.313380][ T5417] 
[  156.405844][ T5417] read_mapping_page failed!
[  156.431397][ T5417] ERROR: (device loop0): txCommit: 
[  156.431397][ T5417] 
[  156.491260][ T5417] ERROR: (device loop0): remounting filesystem as read-only
[  156.573820][ T5460] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  156.592695][    C1] vkms_vblank_simulate: vblank timer overrun
[  156.644274][ T5431] REISERFS (device loop4): Using tea hash to sort names
[  156.669003][ T5417] ERROR: (device loop0): diWrite: ixpxd invalid
[  156.669003][ T5417] 
[  156.690204][ T5431] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  156.742178][ T5417] ERROR: (device loop0): txCommit: 
[  156.742178][ T5417] 
[  157.118933][ T5478] FAULT_INJECTION: forcing a failure.
[  157.118933][ T5478] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  157.152398][ T5478] CPU: 0 PID: 5478 Comm: syz.2.297 Not tainted syzkaller #0
[  157.159914][ T5478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  157.170002][ T5478] Call Trace:
[  157.173430][ T5478]  <TASK>
[  157.176467][ T5478]  dump_stack_lvl+0x188/0x250
[  157.181350][ T5478]  ? show_regs_print_info+0x20/0x20
[  157.186696][ T5478]  ? load_image+0x400/0x400
[  157.191243][ T5478]  ? __lock_acquire+0x7d10/0x7d10
[  157.196314][ T5478]  ? __lock_acquire+0x12e8/0x7d10
[  157.201428][ T5478]  ? verify_lock_unused+0x140/0x140
[  157.206664][ T5478]  should_fail+0x38c/0x4c0
[  157.211210][ T5478]  prepare_alloc_pages+0x1e4/0x5f0
[  157.216361][ T5478]  __alloc_pages+0x11b/0x480
[  157.220991][ T5478]  ? zone_statistics+0x170/0x170
[  157.226073][ T5478]  ? count_memcg_event_mm+0x324/0x370
[  157.231656][ T5478]  ? remove_device_exclusive_entry+0xa90/0xa90
[  157.237934][ T5478]  alloc_pages_vma+0x393/0x7c0
[  157.243274][ T5478]  handle_mm_fault+0x23be/0x4410
[  157.248341][ T5478]  ? get_page+0xe0/0xe0
[  157.252537][ T5478]  ? vmacache_find+0x238/0x590
[  157.257329][ T5478]  ? find_vma+0xd2/0x230
[  157.261605][ T5478]  do_user_addr_fault+0x489/0xc80
[  157.266671][ T5478]  exc_page_fault+0x60/0x100
[  157.271300][ T5478]  asm_exc_page_fault+0x22/0x30
[  157.276266][ T5478] RIP: 0033:0x7feeb4a23ae3
[  157.280889][ T5478] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c
[  157.300523][ T5478] RSP: 002b:00007feeb2dc5470 EFLAGS: 00010202
[  157.306631][ T5478] RAX: 000000000000d000 RBX: 00007feeb2dc5530 RCX: 00007feeaa9a6000
[  157.314778][ T5478] RDX: 00007feeb2dc56d0 RSI: 0000000000000031 RDI: 00007feeb2dc55d0
[  157.322871][ T5478] RBP: 0000000000000004 R08: 0000000000000006 R09: 0000000000000010
[  157.330874][ T5478] R10: 0000000000000020 R11: 00007feeb2dc5530 R12: 0000000000000c01
[  157.339054][ T5478] R13: 00007feeb4c22600 R14: 00000000000000b5 R15: 00007feeb2dc55d0
[  157.347075][ T5478]  </TASK>
[  157.367161][ T5478] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[  157.411429][ T5478] loop2: detected capacity change from 0 to 128
[  157.433563][ T5467] loop1: detected capacity change from 0 to 32768
[  157.513924][ T5467] 
[  157.513924][ T5467]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  157.513924][ T5467] 
[  157.545323][ T5478] VFS: Found a Xenix FS (block size = 512) on device loop2
[  157.576335][ T5478] sysv_free_block: trying to free block not in datazone
[  157.644448][ T5478] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  157.669951][ T5467] ERROR: (device loop1): diWrite: ixpxd invalid
[  157.669951][ T5467] 
[  157.708030][ T5467] ERROR: (device loop1): txCommit: 
[  157.708030][ T5467] 
[  157.716432][ T5490] loop3: detected capacity change from 0 to 128
[  157.762569][ T4190] 
[  157.762569][ T4190]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  157.762569][ T4190] 
[  157.787576][ T4228] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  157.817739][ T4190] 
[  157.817739][ T4190]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  157.817739][ T4190] 
[  157.830035][ T5490] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  157.859623][ T5493] loop2: detected capacity change from 0 to 8192
[  157.877737][ T5490] ext4 filesystem being mounted at /65/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  157.892685][ T5493] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal
[  157.904507][ T5493] REISERFS (device loop2): using ordered data mode
[  157.911797][ T5493] reiserfs: using flush barriers
[  157.927032][ T5493] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  157.968877][ T5493] REISERFS (device loop2): checking transaction log (loop2)
[  158.067257][ T4228] usb 5-1: Using ep0 maxpacket: 8
[  158.207186][ T5493] REISERFS (device loop2): Using tea hash to sort names
[  158.215131][ T4228] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  158.230221][ T4228] usb 5-1: config 0 has no interface number 0
[  158.236459][ T4228] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 108, changing to 10
[  158.267292][ T5493] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  158.275271][ T5498] loop1: detected capacity change from 0 to 4096
[  158.303528][ T4228] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 24578, setting to 1024
[  158.339022][ T4228] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  158.360704][ T4228] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  158.565076][ T4228] usb 5-1: config 0 descriptor??
[  158.581660][ T5505] loop3: detected capacity change from 0 to 2048
[  158.630618][ T4228] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  158.706142][ T5505] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  158.757479][ T5516] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 2) not found (pos 4)
[  158.858743][ T4228] usb 5-1: USB disconnect, device number 6
[  158.912513][ T5498] EXT4-fs (loop1): Test dummy encryption mode enabled
[  159.009348][ T5498] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8843c01c, mo2=0003]
[  159.044776][ T5498] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,delalloc,bsdgroups,test_dummy_encryption,errors=continue,bsddf,noauto_da_alloc,noblock_validity,,errors=continue. Quota mode: writeback.
[  159.341381][ T5498] fscrypt (loop1): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))")
[  159.411261][ T5533] fscrypt (loop1): Error allocating 'xts(aes)' transform: -4
[  159.499833][ T5534] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[  159.546060][   T26] audit: type=1800 audit(1775320039.059:7): pid=5534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.301" name="bus" dev="loop1" ino=18 res=0 errno=0
[  159.942611][ T5560] xt_CT: You must specify a L4 protocol and not use inversions on it
[  160.532411][ T5528] loop0: detected capacity change from 0 to 32768
[  160.669366][ T5566] FAULT_INJECTION: forcing a failure.
[  160.669366][ T5566] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  160.725676][ T5528] 
[  160.725676][ T5528]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  160.725676][ T5528] 
[  160.781093][ T5568] 8021q: VLANs not supported on hsr0
[  160.827649][ T5566] CPU: 1 PID: 5566 Comm: syz.4.311 Not tainted syzkaller #0
[  160.835084][ T5566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  160.845547][ T5566] Call Trace:
[  160.848875][ T5566]  <TASK>
[  160.851835][ T5566]  dump_stack_lvl+0x188/0x250
[  160.856548][ T5566]  ? show_regs_print_info+0x20/0x20
[  160.861872][ T5566]  ? load_image+0x400/0x400
[  160.866489][ T5566]  ? __lock_acquire+0x7d10/0x7d10
[  160.871549][ T5566]  ? __lock_acquire+0x12e8/0x7d10
[  160.873753][ T5569] read_mapping_page failed!
[  160.876773][ T5566]  ? verify_lock_unused+0x140/0x140
[  160.876810][ T5566]  should_fail+0x38c/0x4c0
[  160.891055][ T5566]  prepare_alloc_pages+0x1e4/0x5f0
[  160.896303][ T5566]  __alloc_pages+0x11b/0x480
[  160.900932][ T5566]  ? zone_statistics+0x170/0x170
[  160.906276][ T5566]  ? count_memcg_event_mm+0x324/0x370
[  160.911766][ T5566]  ? remove_device_exclusive_entry+0xa90/0xa90
[  160.917949][ T5566]  alloc_pages_vma+0x393/0x7c0
[  160.922877][ T5566]  handle_mm_fault+0x23be/0x4410
[  160.925085][ T5569] ERROR: (device loop0): txCommit: 
[  160.925085][ T5569] 
[  160.927853][ T5566]  ? get_page+0xe0/0xe0
[  160.927889][ T5566]  ? vmacache_find+0x238/0x590
[  160.927913][ T5566]  ? find_vma+0xd2/0x230
[  160.927935][ T5566]  do_user_addr_fault+0x489/0xc80
[  160.927973][ T5566]  exc_page_fault+0x60/0x100
[  160.927999][ T5566]  asm_exc_page_fault+0x22/0x30
[  160.928019][ T5566] RIP: 0033:0x7f59517b2ae3
[  160.928040][ T5566] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c
[  160.987524][ T5566] RSP: 002b:00007f594fb54470 EFLAGS: 00010202
[  160.993709][ T5566] RAX: 000000000000e000 RBX: 00007f594fb54530 RCX: 00007f5947735000
[  161.001710][ T5566] RDX: 00007f594fb546d0 RSI: 0000000000000000 RDI: 00007f594fb545d0
[  161.009705][ T5566] RBP: 0000000000000004 R08: 0000000000000006 R09: 0000000000000010
[  161.017705][ T5566] R10: 0000000000000020 R11: 00007f594fb54530 R12: 0000000000000201
[  161.025707][ T5566] R13: 00007f59519b1600 R14: 00000000000000b5 R15: 00007f594fb545d0
[  161.033822][ T5566]  </TASK>
[  161.054143][ T5566] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[  161.069574][ T5566] loop4: detected capacity change from 0 to 128
[  161.112678][ T5566] VFS: Found a Xenix FS (block size = 512) on device loop4
[  161.144275][ T5566] sysv_free_block: trying to free block not in datazone
[  161.163861][ T5566] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  161.171224][ T4348] ERROR: (device loop0): diWrite: ixpxd invalid
[  161.171224][ T4348] 
[  161.187709][ T4348] ERROR: (device loop0): txCommit: 
[  161.187709][ T4348] 
[  161.195792][ T4348] jfs_write_inode: jfs_commit_inode failed!
[  161.204136][ T4184] 
[  161.204136][ T4184]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  161.204136][ T4184] 
[  161.247103][ T4184] 
[  161.247103][ T4184]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  161.247103][ T4184] 
[  161.486577][ T5584] loop5: detected capacity change from 0 to 7
[  161.514498][ T5351] Dev loop5: unable to read RDB block 7
[  161.544238][ T5351]  loop5: unable to read partition table
[  161.565731][ T5351] loop5: partition table beyond EOD, truncated
[  161.603599][ T5584] Dev loop5: unable to read RDB block 7
[  161.620190][ T5584]  loop5: unable to read partition table
[  161.626019][ T5584] loop5: partition table beyond EOD, truncated
[  161.637840][ T4730] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  161.654378][ T5584] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  161.837849][ T5308] usb 3-1: new full-speed USB device number 13 using dummy_hcd
[  161.868462][ T5602] loop1: detected capacity change from 0 to 128
[  161.912120][ T5602] VFS: Found a Xenix FS (block size = 512) on device loop1
[  161.929131][ T5602] sysv_free_block: trying to free block not in datazone
[  161.937865][ T4730] usb 4-1: Using ep0 maxpacket: 8
[  161.947799][ T5602] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  161.973297][ T5606] loop0: detected capacity change from 0 to 16
[  162.021875][ T4174] udevd[4174]: incorrect erofs checksum on /dev/loop0
[  162.031554][ T5606] erofs: (device loop0): erofs_superblock_csum_verify: invalid checksum 0x2f5bfce6, 0x02d6543f expected
[  162.046440][ T4174] udevd[4174]: incorrect erofs checksum on /dev/loop0
[  162.083608][ T4730] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  162.103490][ T4730] usb 4-1: config 0 has no interface number 0
[  162.110008][ T4730] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 108, changing to 10
[  162.132066][ T4730] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 24578, setting to 1024
[  162.151317][ T4730] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  162.164908][ T4730] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  162.198669][ T4730] usb 4-1: config 0 descriptor??
[  162.249496][ T5308] usb 3-1: unable to get BOS descriptor or descriptor too short
[  162.307853][ T5308] usb 3-1: not running at top speed; connect to a high speed hub
[  162.402912][ T5308] usb 3-1: config 3 has an invalid interface number: 27 but max is 0
[  162.427891][ T5308] usb 3-1: config 3 has no interface number 0
[  162.529441][ T4730] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  162.567018][ T4730] usb 4-1: USB disconnect, device number 6
[  162.704201][ T5308] usb 3-1: config 3 interface 27 has no altsetting 0
[  162.779938][ T5611] loop1: detected capacity change from 0 to 32768
[  162.807163][ T5619] x_tables: duplicate underflow at hook 3
[  162.849153][ T5611] 
[  162.849153][ T5611]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  162.849153][ T5611] 
[  162.870296][ T5308] usb 3-1: New USB device found, idVendor=19d2, idProduct=f421, bcdDevice=bb.f2
[  162.888042][ T5308] usb 3-1: New USB device strings: Mfr=36, Product=2, SerialNumber=3
[  162.904680][ T5620] loop4: detected capacity change from 0 to 8192
[  162.911719][ T5611] read_mapping_page failed!
[  162.916264][ T5611] ERROR: (device loop1): txCommit: 
[  162.916264][ T5611] 
[  162.924401][ T5308] usb 3-1: Product: syz
[  162.929320][ T5308] usb 3-1: Manufacturer: syz
[  162.934049][ T5308] usb 3-1: SerialNumber: syz
[  162.953494][ T5621] loop0: detected capacity change from 0 to 4096
[  162.972977][ T5620] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal
[  162.996090][ T5620] REISERFS (device loop4): using ordered data mode
[  163.003558][ T5623] ERROR: (device loop1): diWrite: ixpxd invalid
[  163.003558][ T5623] 
[  163.003694][ T5620] reiserfs: using flush barriers
[  163.027154][ T5623] ERROR: (device loop1): txCommit: 
[  163.027154][ T5623] 
[  163.028161][ T5621] EXT4-fs (loop0): Test dummy encryption mode enabled
[  163.035536][ T5620] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  163.059155][ T5620] REISERFS (device loop4): checking transaction log (loop4)
[  163.156588][ T5627] FAULT_INJECTION: forcing a failure.
[  163.156588][ T5627] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  163.170797][ T5627] CPU: 0 PID: 5627 Comm: syz.3.330 Not tainted syzkaller #0
[  163.178224][ T5627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  163.188307][ T5627] Call Trace:
[  163.191614][ T5627]  <TASK>
[  163.194572][ T5627]  dump_stack_lvl+0x188/0x250
[  163.199296][ T5627]  ? show_regs_print_info+0x20/0x20
[  163.204526][ T5627]  ? load_image+0x400/0x400
[  163.209153][ T5627]  ? __lock_acquire+0x7d10/0x7d10
[  163.214378][ T5627]  ? __lock_acquire+0x12e8/0x7d10
[  163.219425][ T5627]  ? verify_lock_unused+0x140/0x140
[  163.224755][ T5627]  should_fail+0x38c/0x4c0
[  163.229208][ T5627]  prepare_alloc_pages+0x1e4/0x5f0
[  163.234541][ T5627]  __alloc_pages+0x11b/0x480
[  163.239291][ T5627]  ? zone_statistics+0x170/0x170
[  163.244284][ T5627]  ? count_memcg_event_mm+0x324/0x370
[  163.249687][ T5627]  ? remove_device_exclusive_entry+0xa90/0xa90
[  163.255877][ T5627]  alloc_pages_vma+0x393/0x7c0
[  163.260686][ T5627]  handle_mm_fault+0x23be/0x4410
[  163.265678][ T5627]  ? get_page+0xe0/0xe0
[  163.269882][ T5627]  ? vmacache_find+0x238/0x590
[  163.274691][ T5627]  ? find_vma+0xd2/0x230
[  163.279058][ T5627]  do_user_addr_fault+0x489/0xc80
[  163.284130][ T5627]  exc_page_fault+0x60/0x100
[  163.288840][ T5627]  asm_exc_page_fault+0x22/0x30
[  163.293711][ T5627] RIP: 0033:0x7f996fd32ae3
[  163.298151][ T5627] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c
[  163.317967][ T5627] RSP: 002b:00007f996e0d4470 EFLAGS: 00010202
[  163.324167][ T5627] RAX: 000000000000f000 RBX: 00007f996e0d4530 RCX: 00007f9965cb5000
[  163.327131][ T5620] REISERFS (device loop4): Using tea hash to sort names
[  163.332456][ T5627] RDX: 00007f996e0d46d0 RSI: 0000000000000035 RDI: 00007f996e0d45d0
[  163.332476][ T5627] RBP: 0000000000000008 R08: 0000000000000006 R09: 0000000000000010
[  163.332490][ T5627] R10: 0000000000000020 R11: 00007f996e0d4530 R12: 0000000000000301
[  163.332503][ T5627] R13: 00007f996ff31600 R14: 00000000000000b5 R15: 00007f996e0d45d0
[  163.332535][ T5627]  </TASK>
[  163.389069][ T5621] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0103]
[  163.404979][ T4190] 
[  163.404979][ T4190]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  163.404979][ T4190] 
[  163.408058][ T5621] System zones: 0-5
[  163.425565][ T4190] 
[  163.425565][ T4190]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  163.425565][ T4190] 
[  163.437912][ T5620] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  163.461963][ T5627] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[  163.471647][ T5627] loop3: detected capacity change from 0 to 128
[  163.629396][ T5621] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,delalloc,journal_ioprio=0x0000000000000000,test_dummy_encryption,nodiscard,min_batch_time=0x0000000000000004,nodiscard,abort,,errors=continue. Quota mode: writeback.
[  163.748807][ T5621] EXT4-fs (loop0): shut down requested (0)
[  163.775287][ T5627] VFS: Found a Xenix FS (block size = 512) on device loop3
[  163.795207][ T5627] sysv_free_block: trying to free block not in datazone
[  163.840947][ T5627] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  163.864622][ T5633] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 2) not found (pos 4)
[  164.609072][ T5658] loop0: detected capacity change from 0 to 128
[  164.634192][ T5658] VFS: Found a Xenix FS (block size = 512) on device loop0
[  164.658182][ T5658] sysv_free_block: trying to free block not in datazone
[  164.667897][ T4225] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  164.687344][ T5658] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  164.937643][ T4225] usb 4-1: Using ep0 maxpacket: 32
[  165.118306][ T5308] usb 3-1: bad CDC descriptors
[  165.134971][ T5308] usb 3-1: USB disconnect, device number 13
[  165.217822][ T4225] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15
[  165.237385][ T4225] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  165.255761][ T4225] usb 4-1: Product: syz
[  165.260384][ T4225] usb 4-1: Manufacturer: syz
[  165.265004][ T4225] usb 4-1: SerialNumber: syz
[  165.284820][ T4225] usb 4-1: config 0 descriptor??
[  165.444831][ T5660] loop0: detected capacity change from 0 to 32768
[  165.480549][ T5660] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.336 (5660)
[  165.519489][ T5308] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  165.566313][ T4225] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: version d4.15 found at bus 004 address 007
[  165.588260][ T5660] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  165.617948][ T5660] BTRFS info (device loop0): enabling auto defrag
[  165.634144][ T5660] BTRFS info (device loop0): enabling all of the rescue options
[  165.657963][ T5660] BTRFS info (device loop0): ignoring data csums
[  165.680631][ T5660] BTRFS info (device loop0): ignoring bad roots
[  165.703775][ T5660] BTRFS info (device loop0): disabling log replay at mount time
[  165.721840][ T5660] BTRFS info (device loop0): disabling auto defrag
[  165.754812][ T5660] BTRFS info (device loop0): enabling disk space caching
[  165.777783][ T5308] usb 3-1: Using ep0 maxpacket: 8
[  165.783493][ T5660] BTRFS info (device loop0): turning off barriers
[  165.793737][ T5660] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  165.815087][ T5660] BTRFS info (device loop0): trying to use backup root at mount time
[  165.840083][ T5660] BTRFS error (device loop0): cannot disable free space tree
[  165.872827][ T5660] BTRFS error (device loop0): open_ctree failed: -22
[  165.897886][ T5308] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  165.907162][ T5308] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  165.977108][ T4174] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by udevd (4174)
[  165.992004][ T5308] pvrusb2: Hardware description: Terratec Grabster AV400
[  166.001246][ T5308] pvrusb2: **********
[  166.005438][ T5308] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  166.025795][ T5308] pvrusb2: Important functionality might not be entirely working.
[  166.035340][ T5308] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  166.048247][ T5308] pvrusb2: **********
[  166.209259][ T2422] pvrusb2: Invalid write control endpoint
[  166.275814][ T2422] pvrusb2: Invalid write control endpoint
[  166.275854][ T2422] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  166.275864][ T2422] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  166.275874][ T2422] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  166.275884][ T2422] pvrusb2: Device being rendered inoperable
[  166.275926][ T2422] cx25840 2-0044: Unable to detect h/w, assuming cx23887
[  166.275982][ T2422] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b)
[  166.279797][ T2422] pvrusb2: Attached sub-driver cx25840
[  166.279814][ T2422] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  166.279826][ T2422] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  166.310809][ T5654] i2c i2c-1: failure reading status
[  166.317606][ T5307] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  166.437423][ T5637] loop1: detected capacity change from 0 to 131072
[  166.758320][ T5637] F2FS-fs (loop1): Found nat_bits in checkpoint
[  166.846901][ T5683] i2c i2c-1: adapter quirk: no zero length (addr 0x0009, size 0, read)
[  167.550165][ T5307] usb 1-1: Using ep0 maxpacket: 8
[  167.687827][ T5307] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  167.687859][ T5307] usb 1-1: config 0 has no interface number 0
[  167.687893][ T5307] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 108, changing to 10
[  167.687924][ T5307] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 24578, setting to 1024
[  167.687966][ T5307] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  167.687993][ T5307] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  167.690136][ T5307] usb 1-1: config 0 descriptor??
[  167.695781][ T5682] loop4: detected capacity change from 0 to 8192
[  167.748244][ T5307] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  167.822438][ T5682] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal
[  167.878708][ T5682] REISERFS (device loop4): using ordered data mode
[  167.897746][ T5682] reiserfs: using flush barriers
[  167.918847][ T5682] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  167.943686][ T5682] REISERFS (device loop4): checking transaction log (loop4)
[  167.970860][   T23] usb 4-1: USB disconnect, device number 7
[  167.977980][ T4728] usb 1-1: USB disconnect, device number 13
[  168.800021][ T4730] usb 3-1: USB disconnect, device number 14
[  169.044288][ T5682] REISERFS (device loop4): Using tea hash to sort names
[  169.080175][ T5695] loop3: detected capacity change from 0 to 8192
[  169.087652][ T5682] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  169.141183][ T5695] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[  169.188328][ T5695] REISERFS (device loop3): using ordered data mode
[  169.197600][ T5695] reiserfs: using flush barriers
[  169.224106][ T5695] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  169.288174][ T5695] REISERFS (device loop3): checking transaction log (loop3)
[  169.367674][ T4730] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  169.420712][ T5697] loop0: detected capacity change from 0 to 8192
[  169.533510][ T5697] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[  169.560413][ T5697] REISERFS (device loop0): using ordered data mode
[  169.578366][ T5697] reiserfs: using flush barriers
[  169.606033][ T5697] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  169.685929][ T5695] REISERFS (device loop3): Using tea hash to sort names
[  169.734809][ T5695] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  169.770385][ T5715] netlink: 'syz.1.348': attribute type 21 has an invalid length.
[  169.785874][ T5697] REISERFS (device loop0): checking transaction log (loop0)
[  169.823734][ T5715] IPv6: NLM_F_CREATE should be specified when creating new route
[  169.860992][ T4730] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  169.873206][ T5715] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  169.881291][ T5715] IPv6: NLM_F_CREATE should be set when creating new route
[  169.888789][ T5715] IPv6: NLM_F_CREATE should be set when creating new route
[  169.896120][ T5715] IPv6: NLM_F_CREATE should be set when creating new route
[  170.057874][ T4730] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  170.087752][ T4730] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  170.134886][ T4730] usb 3-1: Product: syz
[  170.157646][ T4730] usb 3-1: Manufacturer: syz
[  170.163649][ T5697] REISERFS (device loop0): Using tea hash to sort names
[  170.172639][ T4730] usb 3-1: SerialNumber: syz
[  170.203818][ T5697] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  170.313703][ T5729] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0
[  171.357873][ T4730] cdc_ncm 3-1:1.0: bind() failure
[  171.547943][ T5308] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  171.692716][ T5749] FAULT_INJECTION: forcing a failure.
[  171.692716][ T5749] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  171.827674][ T5308] usb 5-1: Using ep0 maxpacket: 8
[  171.875147][ T5749] CPU: 0 PID: 5749 Comm: syz.1.360 Not tainted syzkaller #0
[  171.882588][ T5749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  171.892849][ T5749] Call Trace:
[  171.896264][ T5749]  <TASK>
[  171.899213][ T5749]  dump_stack_lvl+0x188/0x250
[  171.904014][ T5749]  ? show_regs_print_info+0x20/0x20
[  171.909237][ T5749]  ? load_image+0x400/0x400
[  171.913766][ T5749]  ? __lock_acquire+0x7d10/0x7d10
[  171.918840][ T5749]  ? __lock_acquire+0x12e8/0x7d10
[  171.923893][ T5749]  should_fail+0x38c/0x4c0
[  171.928526][ T5749]  prepare_alloc_pages+0x1e4/0x5f0
[  171.933763][ T5749]  __alloc_pages+0x11b/0x480
[  171.938395][ T5749]  ? zone_statistics+0x170/0x170
[  171.943634][ T5749]  ? count_memcg_event_mm+0x324/0x370
[  171.949310][ T5749]  ? remove_device_exclusive_entry+0xa90/0xa90
[  171.955688][ T5749]  alloc_pages_vma+0x393/0x7c0
[  171.960510][ T5749]  handle_mm_fault+0x23be/0x4410
[  171.965609][ T5749]  ? get_page+0xe0/0xe0
[  171.970028][ T5749]  ? vmacache_find+0x238/0x590
[  171.975182][ T5749]  ? find_vma+0xd2/0x230
[  171.979467][ T5749]  do_user_addr_fault+0x489/0xc80
[  171.984593][ T5749]  exc_page_fault+0x60/0x100
[  171.989308][ T5749]  asm_exc_page_fault+0x22/0x30
[  171.994180][ T5749] RIP: 0033:0x7f01868bdae3
[  171.998969][ T5749] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c
[  172.019208][ T5749] RSP: 002b:00007f0184c5f470 EFLAGS: 00010202
[  172.025304][ T5749] RAX: 000000000000f000 RBX: 00007f0184c5f530 RCX: 00007f017c840000
[  172.033298][ T5749] RDX: 00007f0184c5f6d0 RSI: 0000000000000035 RDI: 00007f0184c5f5d0
[  172.041375][ T5749] RBP: 0000000000000008 R08: 0000000000000006 R09: 0000000000000010
[  172.049368][ T5749] R10: 0000000000000020 R11: 00007f0184c5f530 R12: 0000000000000301
[  172.057619][ T5749] R13: 00007f0186abc600 R14: 00000000000000b5 R15: 00007f0184c5f5d0
[  172.065628][ T5749]  </TASK>
[  172.128248][ T5308] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  172.158039][ T5308] usb 5-1: config 0 has no interface number 0
[  172.260125][ T5308] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 105, changing to 10
[  172.467099][ T5308] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 25090, setting to 1024
[  172.560775][ T4730] cdc_ncm: probe of 3-1:1.1 failed with error -71
[  172.634333][ T5308] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  172.769450][ T5308] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  173.015863][ T5308] usb 5-1: config 0 descriptor??
[  173.197651][ T4730] cdc_mbim: probe of 3-1:1.1 failed with error -71
[  173.217696][ T4730] usbtest: probe of 3-1:1.1 failed with error -71
[  173.218401][ T5308] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  173.244354][ T4730] usb 3-1: USB disconnect, device number 15
[  173.328105][ T5749] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[  173.338580][ T5749] loop1: detected capacity change from 0 to 128
[  173.379102][ T5308] usb 5-1: USB disconnect, device number 7
[  173.404725][ T5749] VFS: Found a Xenix FS (block size = 512) on device loop1
[  173.456606][ T5749] sysv_free_block: trying to free block not in datazone
[  173.498181][ T5749] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  173.503471][ T5769] loop3: detected capacity change from 0 to 2048
[  173.614206][ T5769] Alternate GPT is invalid, using primary GPT.
[  173.644060][ T5769]  loop3: p1 p2 p3
[  173.653039][ T5767] loop0: detected capacity change from 0 to 8192
[  173.703117][ T5779] loop2: detected capacity change from 0 to 128
[  173.726593][ T5767] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[  173.753183][ T5767] REISERFS (device loop0): using ordered data mode
[  173.773265][ T5779] VFS: Found a Xenix FS (block size = 512) on device loop2
[  173.782340][ T5767] reiserfs: using flush barriers
[  173.788074][ T5779] sysv_free_block: trying to free block not in datazone
[  173.810914][ T5779] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  173.828258][ T5767] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  173.899667][ T5775] loop1: detected capacity change from 0 to 4096
[  173.984312][ T5767] REISERFS (device loop0): checking transaction log (loop0)
[  174.124466][ T5769] ODEBUG: Out of memory. ODEBUG disabled
[  174.295762][ T5769] syz.3.363 (5769): drop_caches: 2
[  174.410902][ T5785] device syzkaller0 entered promiscuous mode
[  175.039102][ T5351] udevd[5351]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  175.326394][ T5351] udevd[5351]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[  175.419041][ T5767] REISERFS (device loop0): Using tea hash to sort names
[  175.426383][ T5767] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  175.511819][ T4174] udevd[4174]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[  175.737118][ T5799] loop4: detected capacity change from 0 to 8192
[  175.814752][ T5799] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal
[  175.834511][ T5799] REISERFS (device loop4): using ordered data mode
[  175.844551][ T5799] reiserfs: using flush barriers
[  175.851139][ T5799] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  175.870472][ T5799] REISERFS (device loop4): checking transaction log (loop4)
[  175.949286][ T5799] REISERFS (device loop4): Using tea hash to sort names
[  175.956934][ T5799] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  176.140580][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[  176.147575][ T5351] udevd[5351]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[  176.163634][ T5823] loop2: detected capacity change from 0 to 4096
[  176.202601][ T5819] loop1: detected capacity change from 0 to 8192
[  176.462309][ T5823] ntfs: volume version 3.1.
[  176.477638][ T5819] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[  176.487001][ T5819] REISERFS (device loop1): using ordered data mode
[  176.556851][ T5828] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 2) not found (pos 4)
[  176.800944][ T5819] reiserfs: using flush barriers
[  176.842218][ T5819] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  176.962374][ T5819] REISERFS (device loop1): checking transaction log (loop1)
[  177.263684][ T5820] loop3: detected capacity change from 0 to 32768
[  177.328363][ T5820] 
[  177.328363][ T5820]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  177.328363][ T5820] 
[  177.475806][ T5819] REISERFS (device loop1): Using tea hash to sort names
[  177.525006][ T5819] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  177.861810][ T5825] loop0: detected capacity change from 0 to 32768
[  178.218207][ T5825] 
[  178.218207][ T5825]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  178.218207][ T5825] 
[  178.554427][ T4184] 
[  178.554427][ T4184]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  178.554427][ T4184] 
[  178.657695][ T4184] 
[  178.657695][ T4184]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  178.657695][ T4184] 
[  178.796722][ T4346] 
[  178.796722][ T4346]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  178.796722][ T4346] 
[  178.809072][ T4346] 
[  178.809072][ T4346]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  178.809072][ T4346] 
[  178.890324][  T277] 
[  178.890324][  T277]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  178.890324][  T277] 
[  178.935034][ T4191] 
[  178.935034][ T4191]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  178.935034][ T4191] 
[  178.966468][ T4191] 
[  178.966468][ T4191]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  178.966468][ T4191] 
[  179.000126][ T5865] loop1: detected capacity change from 0 to 128
[  179.012053][ T5866] loop4: detected capacity change from 0 to 512
[  179.116452][ T5866] EXT4-fs (loop4): inline encryption not supported
[  179.126984][ T5865] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[  179.164561][ T5866] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  179.299703][ T5865] EXT4-fs (loop1): mounted filesystem without journal. Opts: minixdf,,errors=continue. Quota mode: none.
[  179.347954][ T5865] ext2 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  179.352508][ T5866] EXT4-fs (loop4): 1 truncate cleaned up
[  179.373511][ T5866] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000020000,stripe=0x0000000000004000,inlinecrypt,max_batch_time=0x0000000000000004,,errors=continue. Quota mode: none.
[  179.660423][ T5887] netlink: 8 bytes leftover after parsing attributes in process `syz.2.401'.
[  179.708068][ T5885] loop1: detected capacity change from 0 to 1024
[  179.730913][ T5889] loop4: detected capacity change from 0 to 2048
[  179.760911][ T5885] EXT4-fs (loop1): inline encryption not supported
[  179.807218][ T5891] netlink: 1 bytes leftover after parsing attributes in process `syz.2.402'.
[  179.810162][ T5889] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_lock,,errors=continue. Quota mode: none.
[  179.833628][ T5885] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,inlinecrypt,,errors=continue. Quota mode: none.
[  179.881241][ T5885] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  179.914653][ T5885] EXT4-fs error (device loop1): ext4_map_blocks:739: inode #15: comm syz.1.397: lblock 0 mapped to illegal pblock 0 (length 1)
[  179.922408][ T5897] sctp: [Deprecated]: syz.2.403 (pid 5897) Use of int in maxseg socket option.
[  179.922408][ T5897] Use struct sctp_assoc_value instead
[  179.948969][ T5885] EXT4-fs error (device loop1): ext4_map_blocks:739: inode #15: comm syz.1.397: lblock 0 mapped to illegal pblock 0 (length 1)
[  180.095076][ T5903] loop2: detected capacity change from 0 to 128
[  180.097565][ T5885] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  180.133050][ T5885] EXT4-fs (loop1): This should not happen!! Data will be lost
[  180.133050][ T5885] 
[  180.414998][ T5917] loop3: detected capacity change from 0 to 128
[  180.516177][ T5917] FAT-fs (loop3): bogus logical sector size 759
[  180.533017][ T5917] FAT-fs (loop3): Can't find a valid FAT filesystem
[  180.648036][ T5932] loop4: detected capacity change from 0 to 128
[  180.656881][ T5935] loop1: detected capacity change from 0 to 128
[  180.747692][ T5932] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_lock,nodelalloc,,errors=continue. Quota mode: none.
[  180.769220][ T5932] ext4 filesystem being mounted at /87/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  180.819614][ T5944] loop0: detected capacity change from 0 to 164
[  180.897808][ T5944] Unable to read rock-ridge attributes
[  180.921111][ T5944] Unable to read rock-ridge attributes
[  180.960872][ T5944] iso9660: Corrupted directory entry in block 4 of inode 1792
[  181.083311][ T5952] netlink: 12 bytes leftover after parsing attributes in process `syz.1.429'.
[  181.165256][ T5952] netlink: 12 bytes leftover after parsing attributes in process `syz.1.429'.
[  181.246410][ T5958] lo speed is unknown, defaulting to 1000
[  181.393356][ T5970] loop2: detected capacity change from 0 to 128
[  181.405484][ T5966] batman_adv: Cannot find parent device
[  181.478923][ T5966] device ip6erspan0 entered promiscuous mode
[  182.012282][ T5981] netlink: 68 bytes leftover after parsing attributes in process `syz.0.441'.
[  182.955214][ T5997] netlink: 8 bytes leftover after parsing attributes in process `syz.0.448'.
[  183.367503][    C0] sched: RT throttling activated
[  183.553152][ T6007] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  183.624501][ T6012] EXT4-fs (loop0): Ignoring removed nobh option
[  183.624874][ T6007] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  183.657282][ T6007] EXT4-fs (loop4): 1 truncate cleaned up
[  183.663958][ T6007] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,user_xattr,. Quota mode: none.
[  183.664289][ T6012] EXT4-fs (loop0): 1 truncate cleaned up
[  183.715057][ T6012] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,jqfmt=vfsv1,noload,errors=remount-ro,usrjquota=,nobh,. Quota mode: none.
[  183.895524][ T6012] team0: Device gtp0 is of different type
[  184.027736][ T6018] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled
[  184.087693][ T6018] EXT4-fs (loop1): mounted filesystem without journal. Opts: data_err=ignore,noblock_validity,noload,auto_da_alloc=0x0000000000000a5a,jqfmt=vfsv0,nodiscard,nombcache,,errors=continue. Quota mode: writeback.
[  184.221873][ T6025] set_capacity_and_notify: 3 callbacks suppressed
[  184.221891][ T6025] loop4: detected capacity change from 0 to 1024
[  184.298654][ T6027] process 'syz.0.461' launched './file0' with NULL argv: empty string added
[  184.321507][ T6027] Invalid argument reading file caps for ./file0
[  184.509468][ T6025] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,block_validity,nodioread_nolock,nodelalloc,resuid=0x0000000000000000,errors=remount-ro,. Quota mode: none.
[  184.553053][ T6025] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  184.949373][ T6049] loop4: detected capacity change from 0 to 8192
[  184.983775][ T6056] loop2: detected capacity change from 0 to 512
[  185.101360][ T6058] loop0: detected capacity change from 0 to 512
[  185.212998][ T6059] lo speed is unknown, defaulting to 1000
[  185.272081][ T6056] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  185.446239][ T6058] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,grpquota,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback.
[  185.560125][ T6058] ext4 filesystem being mounted at /101/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  186.097663][ T4580] Bluetooth: hci2: command 0x0406 tx timeout
[  186.116710][ T4580] Bluetooth: hci1: command 0x0406 tx timeout
[  186.136949][ T4580] Bluetooth: hci3: command 0x0406 tx timeout
[  186.164017][ T4580] Bluetooth: hci4: command 0x0406 tx timeout
[  186.191168][ T4580] Bluetooth: hci0: command 0x0406 tx timeout
[  186.603776][ T6098] qrtr: Invalid version 238
[  187.609354][ T6118] loop1: detected capacity change from 0 to 256
[  188.405487][ T6136] netlink: 220 bytes leftover after parsing attributes in process `syz.3.503'.
[  188.452571][ T6136] netlink: 8 bytes leftover after parsing attributes in process `syz.3.503'.
[  188.460770][ T6138] device syzkaller0 entered promiscuous mode
[  188.618110][ T6140] device syzkaller0 entered promiscuous mode
[  188.690005][ T6142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.506'.
[  189.288722][ T6151] lo speed is unknown, defaulting to 1000
[  190.002151][ T6159] loop1: detected capacity change from 0 to 128
[  190.078579][ T6159] FAT-fs (loop1): Unrecognized mount option ".!%}#" or missing value
[  190.232719][ T6167] syz.3.515 (6167) used obsolete PPPIOCDETACH ioctl
[  190.362827][ T6172] loop1: detected capacity change from 0 to 512
[  190.444982][ T6175] netlink: 'syz.3.520': attribute type 1 has an invalid length.
[  190.467796][ T6172] EXT4-fs (loop1): inline encryption not supported
[  190.474730][ T6172] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  190.541909][ T6175] 8021q: adding VLAN 0 to HW filter on device bond1
[  190.599587][ T6172] EXT4-fs (loop1): 1 truncate cleaned up
[  190.607867][ T6172] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000020000,stripe=0x0000000000004000,inlinecrypt,max_batch_time=0x0000000000000004,,errors=continue. Quota mode: none.
[  190.918736][   T23] hid-generic 0000:0000:000E.0002: unknown main item tag 0x0
[  190.927262][   T23] hid-generic 0000:0000:000E.0002: unknown main item tag 0x0
[  190.939210][ T6178] bond1: (slave veth5): Enslaving as an active interface with a down link
[  190.957696][   T23] hid-generic 0000:0000:000E.0002: unknown main item tag 0x0
[  190.966034][   T23] hid-generic 0000:0000:000E.0002: unknown main item tag 0x0
[  190.994338][ T6175] 8021q: adding VLAN 0 to HW filter on device batadv1
[  191.007639][   T23] hid-generic 0000:0000:000E.0002: unknown main item tag 0x0
[  191.015376][   T23] hid-generic 0000:0000:000E.0002: unknown main item tag 0x0
[  191.036681][   T23] hid-generic 0000:0000:000E.0002: unknown main item tag 0x0
[  191.048809][ T6175] bond1: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  191.067171][   T23] hid-generic 0000:0000:000E.0002: unknown main item tag 0x0
[  191.067390][   T23] hid-generic 0000:0000:000E.0002: unknown main item tag 0x0
[  191.145094][   T23] hid-generic 0000:0000:000E.0002: unknown main item tag 0x0
[  191.183065][   T23] hid-generic 0000:0000:000E.0002: unknown main item tag 0x0
[  191.220991][   T23] hid-generic 0000:0000:000E.0002: unknown main item tag 0x0
[  191.259268][   T23] hid-generic 0000:0000:000E.0002: unknown main item tag 0x0
[  191.266990][   T23] hid-generic 0000:0000:000E.0002: unknown main item tag 0x0
[  191.327554][   T23] hid-generic 0000:0000:000E.0002: unknown main item tag 0x0
[  191.335706][   T23] hid-generic 0000:0000:000E.0002: unknown main item tag 0x0
[  191.357551][   T23] hid-generic 0000:0000:000E.0002: unknown main item tag 0x0
[  191.380027][   T23] hid-generic 0000:0000:000E.0002: hidraw0: <UNKNOWN> HID v2000.00 Device [syz0] on syz0
[  191.600053][ T6186] fido_id[6186]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  192.079992][ T6212] loop3: detected capacity change from 0 to 128
[  192.395253][ T6226] netlink: 188 bytes leftover after parsing attributes in process `syz.3.533'.
[  192.478816][ T6226] netlink: 40 bytes leftover after parsing attributes in process `syz.3.533'.
[  192.492039][   T26] audit: type=1326 audit(1775320072.009:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6227 comm="syz.1.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0186a06819 code=0x7ffc0000
[  192.505288][ T6230] loop2: detected capacity change from 0 to 2048
[  192.555422][   T26] audit: type=1326 audit(1775320072.009:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6227 comm="syz.1.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0186a06819 code=0x7ffc0000
[  192.682297][   T26] audit: type=1326 audit(1775320072.039:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6227 comm="syz.1.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f0186a06819 code=0x7ffc0000
[  192.705012][ T6230] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  192.853295][ T6234] lo speed is unknown, defaulting to 1000
[  192.865628][   T26] audit: type=1326 audit(1775320072.039:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6227 comm="syz.1.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0186a06819 code=0x7ffc0000
[  192.978066][   T26] audit: type=1326 audit(1775320072.039:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6227 comm="syz.1.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0186a06819 code=0x7ffc0000
[  193.097828][   T26] audit: type=1326 audit(1775320072.039:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6227 comm="syz.1.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0186a06819 code=0x7ffc0000
[  193.136627][ T6246] tipc: Started in network mode
[  193.162811][ T6248] loop2: detected capacity change from 0 to 256
[  193.176667][ T6246] tipc: Node identity ac14140f, cluster identity 4711
[  193.187930][   T26] audit: type=1326 audit(1775320072.049:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6227 comm="syz.1.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0186a06819 code=0x7ffc0000
[  193.214798][ T6246] tipc: Enabled bearer <udp:s>, priority 10
[  193.257583][   T26] audit: type=1326 audit(1775320072.049:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6227 comm="syz.1.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0186a06819 code=0x7ffc0000
[  193.285461][ T6248] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  193.357944][   T26] audit: type=1326 audit(1775320072.059:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6227 comm="syz.1.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f0186a06819 code=0x7ffc0000
[  193.398263][ T6250] loop1: detected capacity change from 0 to 512
[  193.455458][ T6250] EXT4-fs (loop1): Ignoring removed orlov option
[  193.477920][ T6250] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled
[  193.492421][   T26] audit: type=1326 audit(1775320072.059:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6227 comm="syz.1.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0186a06819 code=0x7ffc0000
[  193.521153][ T6250] EXT4-fs (loop1): Ignoring removed mblk_io_submit option
[  193.653412][ T6250] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable,norecovery,abort,resgid=0x0000000000000000,orlov,jqfmt=vfsold,mblk_io_submit,max_dir_size_kb=0x0000000000000100,min_batch_time=0x000000000000007a,bsdgroups,,errors=continue. Quota mode: writeback.
[  193.767764][ T6250] ext4 filesystem being mounted at /110/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  194.255650][ T1433] ieee802154 phy0 wpan0: encryption failed: -22
[  194.262358][ T1433] ieee802154 phy1 wpan1: encryption failed: -22
[  194.341969][ T4724] tipc: Node number set to 2886997007
[  194.614325][ T6265] loop4: detected capacity change from 0 to 128
[  194.723703][ T6265] EXT4-fs (loop4): mounted filesystem without journal. Opts: nouid32,delalloc,,errors=continue. Quota mode: none.
[  194.768142][ T6265] ext4 filesystem being mounted at /102/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  195.561068][ T6298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.559'.
[  195.597729][ T6298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.559'.
[  195.645118][ T6298] netlink: 4 bytes leftover after parsing attributes in process `syz.2.559'.
[  195.971863][ T6308] tipc: Started in network mode
[  195.981422][ T6311] sg_write: data in/out 422877/370 bytes for SCSI command 0x0-- guessing data in;
[  195.981422][ T6311]    program syz.3.566 not setting count and/or reply_len properly
[  196.007934][ T6308] tipc: Node identity 4, cluster identity 4711
[  196.014323][ T6308] tipc: Node number set to 4
[  196.171635][ T6314] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  196.341741][ T6322] loop4: detected capacity change from 0 to 1024
[  196.349573][ T6326] loop0: detected capacity change from 0 to 512
[  196.403177][ T6325] loop1: detected capacity change from 0 to 2048
[  196.409039][ T6326] EXT4-fs (loop0): Ignoring removed orlov option
[  196.434185][ T6326] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled
[  196.466976][ T6322] EXT4-fs (loop4): inline encryption not supported
[  196.489993][ T6325] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,,errors=continue. Quota mode: none.
[  196.524088][ T6326] EXT4-fs (loop0): Ignoring removed mblk_io_submit option
[  196.583955][ T6322] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #3: block 2: comm syz.4.571: lblock 2 mapped to illegal pblock 2 (length 1)
[  196.632819][ T6326] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable,norecovery,abort,resgid=0x0000000000000000,orlov,jqfmt=vfsold,mblk_io_submit,max_dir_size_kb=0x0000000000000100,min_batch_time=0x000000000000007a,bsdgroups,,errors=continue. Quota mode: writeback.
[  196.669357][ T6326] ext4 filesystem being mounted at /109/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  196.696082][ T6322] EXT4-fs (loop4): Remounting filesystem read-only
[  196.737658][ T6322] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #3: block 48: comm syz.4.571: lblock 0 mapped to illegal pblock 48 (length 1)
[  196.852374][ T6322] EXT4-fs (loop4): Remounting filesystem read-only
[  196.898573][ T6322] EXT4-fs error (device loop4): ext4_acquire_dquot:6234: comm syz.4.571: Failed to acquire dquot type 0
[  196.914627][ T6322] EXT4-fs (loop4): Remounting filesystem read-only
[  196.987170][ T6322] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5854: Corrupt filesystem
[  197.070148][ T6322] EXT4-fs (loop4): Remounting filesystem read-only
[  197.083328][ T6322] EXT4-fs error (device loop4): ext4_evict_inode:282: inode #11: comm syz.4.571: mark_inode_dirty error
[  197.101818][ T6322] EXT4-fs (loop4): Remounting filesystem read-only
[  197.111990][ T6322] EXT4-fs warning (device loop4): ext4_evict_inode:285: couldn't mark inode dirty (err -117)
[  197.127274][ T6322] EXT4-fs (loop4): 1 orphan inode deleted
[  197.138798][ T4280] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:7: lblock 1 mapped to illegal pblock 1 (length 1)
[  197.162891][ T6322] EXT4-fs (loop4): mounted filesystem without journal. Opts: abort,noblock_validity,grpquota,errors=remount-ro,auto_da_alloc,inlinecrypt,. Quota mode: writeback.
[  197.186057][ T4280] EXT4-fs (loop4): Remounting filesystem read-only
[  197.221636][ T4280] EXT4-fs error (device loop4): ext4_release_dquot:6270: comm kworker/u4:7: Failed to release dquot type 0
[  197.329862][ T4280] EXT4-fs (loop4): Remounting filesystem read-only
[  197.345934][ T6322] EXT4-fs error (device loop4): __ext4_get_inode_loc:4327: comm syz.4.571: Invalid inode table block 1 in block_group 0
[  197.396868][ T6322] EXT4-fs (loop4): Remounting filesystem read-only
[  197.442687][ T6322] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5854: Corrupt filesystem
[  197.487051][ T6322] EXT4-fs (loop4): Remounting filesystem read-only
[  197.514284][ T6322] EXT4-fs error (device loop4): ext4_quota_off:6540: inode #3: comm syz.4.571: mark_inode_dirty error
[  197.601134][ T6322] EXT4-fs (loop4): Remounting filesystem read-only
[  198.028812][ T6361] netlink: 8 bytes leftover after parsing attributes in process `syz.1.585'.
[  198.131339][ T6363] netlink: 20 bytes leftover after parsing attributes in process `syz.3.586'.
[  198.235455][ T6365] loop1: detected capacity change from 0 to 512
[  198.344122][ T6370] loop0: detected capacity change from 0 to 128
[  198.350559][ T6367] lo speed is unknown, defaulting to 1000
[  198.355129][ T6369] loop3: detected capacity change from 0 to 1024
[  198.388815][ T6365] tmpfs: Bad value for 'nr_inodes'
[  198.522114][ T6370] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  198.629151][ T6369] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,block_validity,nodioread_nolock,nodelalloc,resuid=0x0000000000000000,errors=remount-ro,. Quota mode: none.
[  198.658023][ T6370] FAT-fs (loop0): Filesystem has been set read-only
[  198.665675][ T6370] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  198.674351][ T6370] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  198.689242][ T6370] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  198.697994][ T6370] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  198.706969][ T6370] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  198.737166][ T6370] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  198.762167][ T6370] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  198.768101][ T6369] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  198.803428][ T6370] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  198.834632][ T6370] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  198.879663][ T6368] EXT4-fs error (device loop3): ext4_map_blocks:739: inode #15: comm syz.3.589: lblock 0 mapped to illegal pblock 0 (length 1)
[  198.892802][ T6370] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  198.947936][ T6368] EXT4-fs (loop3): Remounting filesystem read-only
[  198.938639][ T6386] infiniband syz0: set active
[  198.964501][ T6386] infiniband syz0: set active
[  198.965090][ T6368] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #15: comm syz.3.589: lblock 0 mapped to illegal pblock 0 (length 1)
[  199.003976][ T6370] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  199.014610][ T6368] EXT4-fs (loop3): Remounting filesystem read-only
[  199.043398][ T6370] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  199.052447][ T6368] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #15: comm syz.3.589: lblock 0 mapped to illegal pblock 0 (length 1)
[  199.057741][ T4724] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  199.097784][ T6370] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  199.103497][ T6368] EXT4-fs (loop3): Remounting filesystem read-only
[  199.126794][ T6370] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  199.142946][ T6386] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  199.150820][ T6368] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #15: comm syz.3.589: lblock 0 mapped to illegal pblock 0 (length 1)
[  199.196648][ T6370] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  199.220611][ T6386] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  199.234561][ T6368] EXT4-fs (loop3): Remounting filesystem read-only
[  199.234831][ T6370] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  199.256386][ T6368] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #15: comm syz.3.589: lblock 0 mapped to illegal pblock 0 (length 1)
[  199.270259][ T6370] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  199.288424][ T6370] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  199.297407][ T6386] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  199.308309][ T6368] EXT4-fs (loop3): Remounting filesystem read-only
[  199.314007][ T6370] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  199.337667][ T4724] usb 3-1: Using ep0 maxpacket: 16
[  199.342653][ T6369] EXT4-fs error (device loop3): ext4_free_blocks:6232: comm syz.3.589: Freeing blocks not in datazone - block = 0, count = 1
[  199.343191][ T6370] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  199.381922][ T6369] EXT4-fs (loop3): Remounting filesystem read-only
[  199.397692][ T6370] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  199.406896][ T6370] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  199.424045][ T4730] lo speed is unknown, defaulting to 1000
[  199.442329][   T23] lo speed is unknown, defaulting to 1000
[  199.457828][ T4724] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  199.467365][ T6370] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  199.475346][ T4724] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 33863, setting to 1024
[  199.502381][ T6370] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  199.537698][ T6370] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  199.569026][ T6370] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  199.636668][ T6370] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  199.658053][ T4724] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[  199.667311][ T4724] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  199.687630][ T4724] usb 3-1: Product: syz
[  199.692019][ T4724] usb 3-1: Manufacturer: syz
[  199.692396][ T6370] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  199.706760][ T4724] usb 3-1: SerialNumber: syz
[  199.726014][ T6392] loop3: detected capacity change from 0 to 4096
[  199.744359][ T4724] usb 3-1: config 0 descriptor??
[  199.791661][ T4724] hub 3-1:0.0: bad descriptor, ignoring hub
[  199.802265][ T6370] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  199.825499][ T4724] hub: probe of 3-1:0.0 failed with error -5
[  199.833217][ T6370] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  199.846014][ T6392] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,barrier=0x0000000000000857,,errors=continue. Quota mode: writeback.
[  199.867698][ T6370] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  199.890462][ T6370] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  199.923811][ T4724] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input8
[  199.968957][ T6370] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  200.041936][ T6383] loop2: detected capacity change from 0 to 256
[  200.057623][ T6370] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  200.103293][   T26] kauditd_printk_skb: 24 callbacks suppressed
[  200.103309][   T26] audit: type=1800 audit(1775320079.619:39): pid=6370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.588" name="file1" dev="loop0" ino=1048630 res=0 errno=0
[  200.219656][ T6383] FAT-fs (loop2): Directory bread(block 64) failed
[  200.275001][ T6383] FAT-fs (loop2): Directory bread(block 65) failed
[  200.301127][ T6395] loop1: detected capacity change from 0 to 128
[  200.309281][ T6383] FAT-fs (loop2): Directory bread(block 66) failed
[  200.316012][ T6383] FAT-fs (loop2): Directory bread(block 67) failed
[  200.414565][ T6383] FAT-fs (loop2): Directory bread(block 68) failed
[  200.480434][ T6383] FAT-fs (loop2): Directory bread(block 69) failed
[  200.487137][ T6383] FAT-fs (loop2): Directory bread(block 70) failed
[  200.506348][ T6395] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  200.617986][ T6395] ext4 filesystem being mounted at /123/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  200.666802][ T6383] FAT-fs (loop2): Directory bread(block 71) failed
[  200.696703][ T6383] FAT-fs (loop2): Directory bread(block 72) failed
[  200.736079][ T6383] FAT-fs (loop2): Directory bread(block 73) failed
[  200.741437][ T6404] loop3: detected capacity change from 0 to 512
[  200.808042][ T6406] batman_adv: batadv0: Adding interface: gretap1
[  200.857416][ T6406] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  200.900168][ T6404] EXT4-fs (loop3): Ignoring removed bh option
[  200.919013][ T6404] EXT4-fs (loop3): Ignoring removed mblk_io_submit option
[  200.964447][ T6406] batman_adv: batadv0: Interface activated: gretap1
[  202.709704][ T6421] loop4: detected capacity change from 0 to 8192
[  202.746490][ T6419] loop3: detected capacity change from 0 to 512
[  202.791540][ T6421] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal
[  202.823198][ T6421] REISERFS (device loop4): using ordered data mode
[  202.824345][ T6430] loop0: detected capacity change from 0 to 736
[  202.846317][ T6421] reiserfs: using flush barriers
[  202.855302][ T6419] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities
[  202.872892][ T6421] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  202.906321][ T6421] REISERFS (device loop4): checking transaction log (loop4)
[  203.133544][ T6421] REISERFS (device loop4): Using tea hash to sort names
[  203.151023][ T6421] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  203.169472][ T5308] usb 3-1: USB disconnect, device number 16
[  203.507039][ T6436] loop0: detected capacity change from 0 to 8192
[  203.541727][ T6444] loop3: detected capacity change from 0 to 128
[  203.766827][ T6442] loop1: detected capacity change from 0 to 8192
[  203.829806][ T6436] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[  203.843194][ T6436] REISERFS (device loop0): using ordered data mode
[  203.854710][ T6436] reiserfs: using flush barriers
[  203.898180][ T6449] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 2) not found (pos 4)
[  204.011292][ T6436] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  204.159364][ T6436] REISERFS (device loop0): checking transaction log (loop0)
[  204.420225][ T6442] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[  204.499012][ T6436] REISERFS (device loop0): Using tea hash to sort names
[  204.524525][ T6442] REISERFS (device loop1): using ordered data mode
[  204.538002][ T6436] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  204.588666][ T6442] reiserfs: using flush barriers
[  204.622447][ T6442] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  204.623915][ T6454] program syz.2.620 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  204.713930][ T6442] REISERFS (device loop1): checking transaction log (loop1)
[  205.085461][ T6459] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 2) not found (pos 4)
[  205.187305][ T6442] REISERFS (device loop1): Using tea hash to sort names
[  205.231244][ T6442] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  205.449945][ T6469] netlink: 72 bytes leftover after parsing attributes in process `syz.3.627'.
[  205.727708][ T6481] loop2: detected capacity change from 0 to 128
[  205.798845][ T6482] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 2) not found (pos 4)
[  206.303279][ T6486] loop3: detected capacity change from 0 to 4096
[  206.327539][ T6486] EXT4-fs (loop3): Ignoring removed bh option
[  206.364385][ T6486] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,bh,grpquota,stripe=0x0000000000000001,. Quota mode: writeback.
[  206.813879][ T6503] team0 (unregistering): Port device team_slave_0 removed
[  206.844430][ T6503] team0 (unregistering): Port device team_slave_1 removed
[  206.978966][ T6516] program syz.3.643 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  207.039934][ T6519] loop2: detected capacity change from 0 to 512
[  207.084857][ T6519] EXT4-fs (loop2): Ignoring removed oldalloc option
[  207.130304][ T6519] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.644: inode #1: comm syz.2.644: iget: illegal inode #
[  207.170638][ T6519] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.644: error while reading EA inode 1 err=-117
[  207.193926][ T6519] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.644: inode #1: comm syz.2.644: iget: illegal inode #
[  207.219058][ T6519] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.644: error while reading EA inode 1 err=-117
[  207.298202][ T6519] EXT4-fs (loop2): 1 orphan inode deleted
[  207.319497][ T6526] device syzkaller0 entered promiscuous mode
[  207.337927][ T6519] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrjquota=,data_err=ignore,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,oldalloc,,errors=continue. Quota mode: writeback.
[  207.392219][ T6519] EXT4-fs error (device loop2): ext4_lookup:1862: inode #2: comm syz.2.644: deleted inode referenced: 15
[  207.433445][ T6528] 
[  207.435832][ T6528] =============================
[  207.451869][ T6528] WARNING: suspicious RCU usage
[  207.457259][ T6528] syzkaller #0 Not tainted
[  207.462479][ T6528] -----------------------------
[  207.480496][ T6528] include/linux/rhashtable.h:594 suspicious rcu_dereference_check() usage!
[  207.489378][ T6528] 
[  207.489378][ T6528] other info that might help us debug this:
[  207.489378][ T6528] 
[  207.499980][ T6528] 
[  207.499980][ T6528] rcu_scheduler_active = 2, debug_locks = 1
[  207.508467][ T6528] 1 lock held by syz.4.648/6528:
[  207.513794][ T6528]  #0: ffffffff8d43cb48 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x136/0x1250
[  207.524010][ T6528] 
[  207.524010][ T6528] stack backtrace:
[  207.530603][ T6528] CPU: 0 PID: 6528 Comm: syz.4.648 Not tainted syzkaller #0
[  207.537914][ T6528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  207.547989][ T6528] Call Trace:
[  207.551292][ T6528]  <TASK>
[  207.554262][ T6528]  dump_stack_lvl+0x188/0x250
[  207.558963][ T6528]  ? load_image+0x400/0x400
[  207.563487][ T6528]  ? show_regs_print_info+0x20/0x20
[  207.568808][ T6528]  ? lockdep_rcu_suspicious+0x110/0x180
[  207.574378][ T6528]  ? local_bh_enable+0x20/0x20
[  207.579252][ T6528]  rhltable_lookup+0x7a9/0x7c0
[  207.584040][ T6528]  ? local_bh_enable+0x20/0x20
[  207.588929][ T6528]  ? mr_mfc_find_parent+0x190/0x190
[  207.594232][ T6528]  ? mark_lock+0x94/0x320
[  207.598591][ T6528]  ? local_bh_enable+0x20/0x20
[  207.603460][ T6528]  ? mark_lock+0x94/0x320
[  207.607898][ T6528]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  207.613908][ T6528]  ? lock_chain_count+0x20/0x20
[  207.618782][ T6528]  mr_mfc_find_any_parent+0xb6/0x1e0
[  207.624267][ T6528]  ? local_bh_enable+0x20/0x20
[  207.629143][ T6528]  ip_mr_forward+0x24c/0xf90
[  207.633861][ T6528]  ipmr_mfc_add+0x23cc/0x2d40
[  207.638579][ T6528]  ? ipmr_mfc_delete+0x5f0/0x5f0
[  207.644068][ T6528]  ? __lock_acquire+0x7d10/0x7d10
[  207.649146][ T6528]  ip_mroute_setsockopt+0xeaf/0x1250
[  207.654465][ T6528]  ? ipmr_rule_default+0x70/0x70
[  207.659447][ T6528]  ? __might_sleep+0xf0/0xf0
[  207.664280][ T6528]  ip_setsockopt+0x568/0x3130
[  207.669015][ T6528]  ? ipv4_pktinfo_prepare+0x6f0/0x6f0
[  207.674506][ T6528]  ? aa_sk_perm+0x7dc/0x910
[  207.679120][ T6528]  ? aa_af_perm+0x340/0x340
[  207.683643][ T6528]  ? __fget_files+0x40f/0x480
[  207.688349][ T6528]  ? aa_sock_opt_perm+0x74/0x100
[  207.693400][ T6528]  ? sock_common_setsockopt+0x32/0xb0
[  207.698787][ T6528]  ? raw_setsockopt+0xc5/0x180
[  207.703563][ T6528]  ? sock_common_recvmsg+0x1c0/0x1c0
[  207.708875][ T6528]  __sys_setsockopt+0x2bf/0x3d0
[  207.713852][ T6528]  __x64_sys_setsockopt+0xb1/0xc0
[  207.718903][ T6528]  do_syscall_64+0x4c/0xa0
[  207.723409][ T6528]  ? clear_bhb_loop+0x30/0x80
[  207.728101][ T6528]  ? clear_bhb_loop+0x30/0x80
[  207.732799][ T6528]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  207.738802][ T6528] RIP: 0033:0x7f59518fb819
[  207.743242][ T6528] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  207.763073][ T6528] RSP: 002b:00007f594fb55028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  207.771529][ T6528] RAX: ffffffffffffffda RBX: 00007f5951b74fa0 RCX: 00007f59518fb819
[  207.779546][ T6528] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000005
[  207.787765][ T6528] RBP: 00007f5951991c91 R08: 000000000000003c R09: 0000000000000000
[  207.795762][ T6528] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000
[  207.803747][ T6528] R13: 00007f5951b75038 R14: 00007f5951b74fa0 R15: 00007ffeebd14578
[  207.811755][ T6528]  </TASK>
[  207.926082][ T6528] 
[  207.928753][ T6528] =============================
[  207.933621][ T6528] WARNING: suspicious RCU usage
[  207.944832][ T6528] syzkaller #0 Not tainted
[  207.950841][ T6528] -----------------------------
[  207.955833][ T6528] include/linux/rhashtable.h:369 suspicious rcu_dereference_check() usage!
[  207.971004][ T6528] 
[  207.971004][ T6528] other info that might help us debug this:
[  207.971004][ T6528] 
[  207.984787][ T6528] 
[  207.984787][ T6528] rcu_scheduler_active = 2, debug_locks = 1
[  207.996748][ T6528] 1 lock held by syz.4.648/6528:
[  208.004315][ T6528]  #0: ffffffff8d43cb48 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x136/0x1250
[  208.020663][ T6528] 
[  208.020663][ T6528] stack backtrace:
[  208.026792][ T6528] CPU: 0 PID: 6528 Comm: syz.4.648 Not tainted syzkaller #0
[  208.034288][ T6528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  208.044551][ T6528] Call Trace:
[  208.047846][ T6528]  <TASK>
[  208.050900][ T6528]  dump_stack_lvl+0x188/0x250
[  208.055620][ T6528]  ? load_image+0x400/0x400
[  208.060170][ T6528]  ? show_regs_print_info+0x20/0x20
[  208.065600][ T6528]  ? lockdep_rcu_suspicious+0x110/0x180
[  208.071465][ T6528]  ? local_bh_enable+0x20/0x20
[  208.076271][ T6528]  rhltable_lookup+0x52a/0x7c0
[  208.081153][ T6528]  ? local_bh_enable+0x20/0x20
[  208.085951][ T6528]  ? mr_mfc_find_parent+0x190/0x190
[  208.091205][ T6528]  ? mark_lock+0x94/0x320
[  208.095648][ T6528]  ? local_bh_enable+0x20/0x20
[  208.100439][ T6528]  ? mark_lock+0x94/0x320
[  208.105004][ T6528]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  208.111029][ T6528]  ? lock_chain_count+0x20/0x20
[  208.115908][ T6528]  mr_mfc_find_any_parent+0xb6/0x1e0
[  208.121324][ T6528]  ? local_bh_enable+0x20/0x20
[  208.126120][ T6528]  ip_mr_forward+0x24c/0xf90
[  208.130934][ T6528]  ipmr_mfc_add+0x23cc/0x2d40
[  208.135656][ T6528]  ? ipmr_mfc_delete+0x5f0/0x5f0
[  208.140711][ T6528]  ? __lock_acquire+0x7d10/0x7d10
[  208.145795][ T6528]  ip_mroute_setsockopt+0xeaf/0x1250
[  208.151112][ T6528]  ? ipmr_rule_default+0x70/0x70
[  208.156182][ T6528]  ? __might_sleep+0xf0/0xf0
[  208.160798][ T6528]  ip_setsockopt+0x568/0x3130
[  208.165534][ T6528]  ? ipv4_pktinfo_prepare+0x6f0/0x6f0
[  208.170938][ T6528]  ? aa_sk_perm+0x7dc/0x910
[  208.175474][ T6528]  ? aa_af_perm+0x340/0x340
[  208.180001][ T6528]  ? __fget_files+0x40f/0x480
[  208.184706][ T6528]  ? aa_sock_opt_perm+0x74/0x100
[  208.189899][ T6528]  ? sock_common_setsockopt+0x32/0xb0
[  208.195381][ T6528]  ? raw_setsockopt+0xc5/0x180
[  208.200260][ T6528]  ? sock_common_recvmsg+0x1c0/0x1c0
[  208.205572][ T6528]  __sys_setsockopt+0x2bf/0x3d0
[  208.210480][ T6528]  __x64_sys_setsockopt+0xb1/0xc0
[  208.215540][ T6528]  do_syscall_64+0x4c/0xa0
[  208.219985][ T6528]  ? clear_bhb_loop+0x30/0x80
[  208.224686][ T6528]  ? clear_bhb_loop+0x30/0x80
[  208.229386][ T6528]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  208.235298][ T6528] RIP: 0033:0x7f59518fb819
[  208.239735][ T6528] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  208.259365][ T6528] RSP: 002b:00007f594fb55028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  208.267840][ T6528] RAX: ffffffffffffffda RBX: 00007f5951b74fa0 RCX: 00007f59518fb819
[  208.275834][ T6528] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000005
[  208.283818][ T6528] RBP: 00007f5951991c91 R08: 000000000000003c R09: 0000000000000000
[  208.291811][ T6528] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000
[  208.299857][ T6528] R13: 00007f5951b75038 R14: 00007f5951b74fa0 R15: 00007ffeebd14578
[  208.307869][ T6528]  </TASK>
[  208.313000][ T6528] 
[  208.315365][ T6528] =============================
[  208.320538][ T6528] WARNING: suspicious RCU usage
[  208.325490][ T6528] syzkaller #0 Not tainted
[  208.332711][ T6528] -----------------------------
[  208.337802][ T6528] include/linux/rhashtable.h:614 suspicious rcu_dereference_check() usage!
[  208.346424][ T6528] 
[  208.346424][ T6528] other info that might help us debug this:
[  208.346424][ T6528] 
[  208.357077][ T6528] 
[  208.357077][ T6528] rcu_scheduler_active = 2, debug_locks = 1
[  208.365396][ T6528] 1 lock held by syz.4.648/6528:
[  208.371055][ T6528]  #0: ffffffff8d43cb48 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x136/0x1250
[  208.381164][ T6528] 
[  208.381164][ T6528] stack backtrace:
[  208.387231][ T6528] CPU: 0 PID: 6528 Comm: syz.4.648 Not tainted syzkaller #0
[  208.394530][ T6528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  208.404782][ T6528] Call Trace:
[  208.408077][ T6528]  <TASK>
[  208.411026][ T6528]  dump_stack_lvl+0x188/0x250
[  208.415731][ T6528]  ? load_image+0x400/0x400
[  208.420260][ T6528]  ? show_regs_print_info+0x20/0x20
[  208.425531][ T6528]  ? lockdep_rcu_suspicious+0x110/0x180
[  208.431183][ T6528]  ? local_bh_enable+0x20/0x20
[  208.435988][ T6528]  rhltable_lookup+0x61e/0x7c0
[  208.440806][ T6528]  ? local_bh_enable+0x20/0x20
[  208.445702][ T6528]  ? mr_mfc_find_parent+0x190/0x190
[  208.450920][ T6528]  ? mark_lock+0x94/0x320
[  208.455266][ T6528]  ? local_bh_enable+0x20/0x20
[  208.460052][ T6528]  ? mark_lock+0x94/0x320
[  208.464399][ T6528]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  208.470403][ T6528]  ? lock_chain_count+0x20/0x20
[  208.475275][ T6528]  mr_mfc_find_any_parent+0xb6/0x1e0
[  208.480592][ T6528]  ? local_bh_enable+0x20/0x20
[  208.485557][ T6528]  ip_mr_forward+0x24c/0xf90
[  208.490200][ T6528]  ipmr_mfc_add+0x23cc/0x2d40
[  208.495262][ T6528]  ? ipmr_mfc_delete+0x5f0/0x5f0
[  208.500224][ T6528]  ? __lock_acquire+0x7d10/0x7d10
[  208.505295][ T6528]  ip_mroute_setsockopt+0xeaf/0x1250
[  208.510611][ T6528]  ? ipmr_rule_default+0x70/0x70
[  208.515587][ T6528]  ? __might_sleep+0xf0/0xf0
[  208.520202][ T6528]  ip_setsockopt+0x568/0x3130
[  208.525198][ T6528]  ? ipv4_pktinfo_prepare+0x6f0/0x6f0
[  208.530595][ T6528]  ? aa_sk_perm+0x7dc/0x910
[  208.535121][ T6528]  ? aa_af_perm+0x340/0x340
[  208.539908][ T6528]  ? __fget_files+0x40f/0x480
[  208.544616][ T6528]  ? aa_sock_opt_perm+0x74/0x100
[  208.549575][ T6528]  ? sock_common_setsockopt+0x32/0xb0
[  208.555065][ T6528]  ? raw_setsockopt+0xc5/0x180
[  208.560020][ T6528]  ? sock_common_recvmsg+0x1c0/0x1c0
[  208.565769][ T6528]  __sys_setsockopt+0x2bf/0x3d0
[  208.570742][ T6528]  __x64_sys_setsockopt+0xb1/0xc0
[  208.575799][ T6528]  do_syscall_64+0x4c/0xa0
[  208.580237][ T6528]  ? clear_bhb_loop+0x30/0x80
[  208.584934][ T6528]  ? clear_bhb_loop+0x30/0x80
[  208.589785][ T6528]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  208.595970][ T6528] RIP: 0033:0x7f59518fb819
[  208.600382][ T6528] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  208.620615][ T6528] RSP: 002b:00007f594fb55028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  208.629145][ T6528] RAX: ffffffffffffffda RBX: 00007f5951b74fa0 RCX: 00007f59518fb819
[  208.637145][ T6528] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000005
[  208.645222][ T6528] RBP: 00007f5951991c91 R08: 000000000000003c R09: 0000000000000000
[  208.653637][ T6528] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000
[  208.661603][ T6528] R13: 00007f5951b75038 R14: 00007f5951b74fa0 R15: 00007ffeebd14578
[  208.669733][ T6528]  </TASK>