last executing test programs:

2m32.188257458s ago: executing program 2 (id=198):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/mtrr\x00', 0x2, 0x0)
close(0x3)

2m32.112068041s ago: executing program 2 (id=201):
mknodat$null(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x1d4e, 0x103)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, 0x0)
mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000000), 0x1000000, &(0x7f0000000440)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}})
syz_fuse_handle_req(r0, &(0x7f00000004c0)="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", 0x2000, &(0x7f00000024c0)={&(0x7f0000002580)={0x50, 0x0, 0x7, {0x7, 0x29, 0x1000, 0x24ff871999b45d65, 0xe87, 0xc, 0xb, 0x8000005, 0x0, 0x0, 0x100, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000001c0)={@remote}, 0x14)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r1, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000004780)='./file0\x00', &(0x7f00000047c0)='system.posix_acl_access\x00', &(0x7f0000004800)={{}, {0x1, 0x2}, [], {0x4, 0x7}, [], {0x10, 0x3}, {0x20, 0x2}}, 0x24, 0x1)

2m32.065875842s ago: executing program 2 (id=204):
socket$inet6(0xa, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000000840)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000880), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000008c0)=0xce0, 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$team(&(0x7f00000009c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000a00))
sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x4c004)

2m28.879412853s ago: executing program 2 (id=226):
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000480)='.\x00', &(0x7f00000004c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f0000000540)='./file0/../file0\x00', &(0x7f0000000580)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$9p_rdma(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', &(0x7f0000000740), 0x20000, &(0x7f0000000800)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@sq={'sq', 0x3d, 0xc2d}}, {@rq={'rq', 0x3d, 0x5}}, {@timeout={'timeout', 0x3d, 0x9ff}}], [{@seclabel}, {@obj_role={'obj_role', 0x3d, 'mountinfo\x00'}}, {@measure}, {@seclabel}]}})
open_tree(0xffffffffffffff9c, &(0x7f0000000600)='\x00', 0x89901)

2m28.688373128s ago: executing program 2 (id=228):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x2088000, &(0x7f0000000180)={[{@nouid32}, {@nobh}, {@quota}]}, 0x1, 0x560, &(0x7f0000002a40)="$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")
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f0000002300), 0x651, 0x0)
recvmmsg(r0, &(0x7f0000002340), 0x10106, 0x2, 0x0)
recvfrom$unix(r0, 0x0, 0x0, 0x10002, 0x0, 0x0)

2m28.21104759s ago: executing program 2 (id=241):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000005b00), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000005b40)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000005b80)={<r1=>0xffffffffffffffff}, 0x2, 0x3}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000005cc0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x5, @loopback, 0x7}, {0xa, 0x4e24, 0xf107, @empty, 0x8000}, r1, 0x1}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000005d40)={0x4, 0x8, 0xfa00, {r1, 0xc}}, 0x10)

2m28.18446175s ago: executing program 32 (id=241):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000005b00), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000005b40)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000005b80)={<r1=>0xffffffffffffffff}, 0x2, 0x3}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000005cc0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x5, @loopback, 0x7}, {0xa, 0x4e24, 0xf107, @empty, 0x8000}, r1, 0x1}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000005d40)={0x4, 0x8, 0xfa00, {r1, 0xc}}, 0x10)

1m38.26443374s ago: executing program 1 (id=802):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = fanotify_init(0x200, 0x0)
fanotify_mark(r0, 0x1, 0x1000103d, 0xffffffffffffffff, 0x0)

1m38.225144602s ago: executing program 1 (id=804):
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
syz_usb_connect$midi(0x0, 0x4b, &(0x7f00000008c0)={{0x12, 0x1, 0xe47d08e528669856, 0x0, 0x0, 0x0, 0x20, 0x763, 0x1031, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x39, 0x1, 0x1, 0x80, 0x0, 0x5, "", {{{0x9, 0x4, 0x0, 0x0, 0x3, 0x1, 0x3, 0x0, 0x6, [], [{{0x9, 0x5, 0x6, 0x0, 0x3ff, 0x8, 0x4, 0x5, {0x4}}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x5, 0x3, 0x0, {0x4}}}, {{0x9, 0x5, 0x2, 0x8, 0x610, 0x9, 0xb, 0x53, {0x4}}}]}}}}}]}}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0})
sendto$inet(r1, &(0x7f0000000280), 0xffffffffffffff94, 0x0, 0x0, 0x0)
r2 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x1, 0x1009, 0x7c}, {0x3, 0x2, 0x0, 0x401, 0x8001}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080)
sendmsg$nl_route_sched(r2, 0x0, 0x40810)
recvfrom$inet(r1, &(0x7f00000005c0)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
shutdown(r1, 0x0)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000000)={@empty, 0x45})
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xc, 0x4, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1m35.109365931s ago: executing program 1 (id=848):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3200002, &(0x7f0000000140)={[{@norecovery}, {@quota}]}, 0x3, 0x610, &(0x7f0000000800)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000780)=""/77, 0x23)
getdents64(r0, 0x0, 0xc00)

1m35.013167753s ago: executing program 1 (id=849):
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54dabaa5206d4a2a060b5ccc774b3ec4c81a1a9852327ff871d16d0d9344e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9aeb8576d329be6e4bb168f1434000000", @ANYRESHEX=0x0], 0xfd, 0x296, &(0x7f0000001080)="$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")
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000b80), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c00), 0x80, &(0x7f0000000c40)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r0, &(0x7f0000002f80)={0x2020, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000004fc0)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000005040)='./file0\x00', 0x0, 0x18)
syz_fuse_handle_req(r0, &(0x7f0000005080)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000007080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007140)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f0000007180)="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", 0x2000, &(0x7f0000009180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000009240)={0x150, 0x0, 0x100, [{{0x4, 0x3, 0x7, 0x3, 0x9, 0x10005, {0x6, 0x9, 0x1000000000004, 0x40, 0x6, 0x0, 0x2, 0x1, 0x3, 0x8000, 0xde, 0x0, 0x0, 0x8001, 0x80000000}}, {0x400000000000001, 0x0, 0x1, 0x32540194, '\x00'}}, {{0xffffffffffffffff, 0x1, 0x7fd, 0x7fffffffffffffff, 0xfff, 0x7ff, {0x3, 0x9, 0x2, 0x6, 0xe2, 0x2, 0x2, 0x6, 0x7, 0x6000, 0x0, r2, r3, 0x1, 0x3}}, {0x0, 0x407, 0x1, 0x300, '\x00'}}]}, 0x0, 0x0, 0x0})
getdents64(r4, 0x0, 0x0)

1m34.782630279s ago: executing program 1 (id=850):
r0 = socket$inet(0x2, 0x1, 0x6)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10)
listen(r0, 0x5)
setsockopt$inet_buf(r0, 0x0, 0x1, &(0x7f0000000300)="800001000000000000000001", 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./mnt\x00', 0x1ff)
mount$nfs4(&(0x7f0000000400)='127.0.0.1:/root\x00', &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x0, &(0x7f00000004c0)={[{'addr=127.0.0.1'}, {'timeo=1'}]})
mount$nfs(0x0, 0x0, &(0x7f0000000100), 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000500)=ANY=[], 0x1d)
r1 = accept$inet(r0, 0x0, 0x0)
read(r1, &(0x7f0000000100), 0x4)
read(r1, &(0x7f0000000304), 0x4)
write(r1, &(0x7f0000000300), 0x100)

1m34.566381784s ago: executing program 1 (id=855):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x6, &(0x7f0000000900)=ANY=[@ANYBLOB="b700000000000000bf160000000000007961a800000000001501010000000000850000005f00000095"], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000980)={r0, 0x0, 0xe, 0x0, &(0x7f0000000a00)="c0bc0477e35a1cee487b9c245ea4", 0x0, 0x8000006, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m34.545046265s ago: executing program 33 (id=855):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x6, &(0x7f0000000900)=ANY=[@ANYBLOB="b700000000000000bf160000000000007961a800000000001501010000000000850000005f00000095"], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000980)={r0, 0x0, 0xe, 0x0, &(0x7f0000000a00)="c0bc0477e35a1cee487b9c245ea4", 0x0, 0x8000006, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

14.345181275s ago: executing program 0 (id=1579):
r0 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./tracing\x00', 0x1d6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./file7\x00', 0x16c)
renameat2(0xffffffffffffff9c, &(0x7f0000000a40)='./file7\x00', 0xffffffffffffff9c, &(0x7f0000000a80)='./tracing\x00', 0x2)

13.930411676s ago: executing program 0 (id=1581):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000800)=[@in={0x2, 0x4e21, @local}], 0x10)
sendmsg$inet_sctp(r0, &(0x7f0000000840)={&(0x7f0000000880)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000008c0)=[{&(0x7f0000000900)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000940)={0x0, 0x80000001, 0x30}, 0xc)
r1 = dup(r0)
write$cgroup_subtree(r1, &(0x7f0000000a00)=ANY=[], 0x32600)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000a40)={0x7, 0x5404, 0x204, 0x5, 0x4, 0x1, 0x1, 0x80000001}, 0x20)
write$binfmt_format(r1, &(0x7f00000000c0)='0\x00', 0x2)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000a80)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0xffcc)

13.559960785s ago: executing program 5 (id=1589):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001540)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000015c0)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000000100)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x10}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x40003}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x50}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000400)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {}, {0x1, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x0, 0x583e}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240408a0}, 0x4890)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000001800)={'syzkaller0\x00', @multicast})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000001840), r4)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000001880)={0x0, 0x0, &(0x7f00000018c0)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)

13.085864487s ago: executing program 0 (id=1594):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f00000002c0)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0)
r1 = memfd_create(&(0x7f0000000240)='rootmode', 0x0)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0)
r2 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000300)={0xaa, 0x68})
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1})
pwrite64(r1, &(0x7f0000000380)="b8", 0x1, 0xfff)
openat$dir(0xffffffffffffff9c, 0x0, 0xa880, 0x97)
r3 = socket$netlink(0x10, 0x3, 0xc)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000002fc0)=0x1, 0x4)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r4, &(0x7f0000004e80)={0x2, 0x4e22, @empty}, 0x10)
listen(r4, 0x2400000)
mount$9p_tcp(&(0x7f0000004ec0), &(0x7f0000004f00)='.\x00', &(0x7f0000004f40), 0x8010, &(0x7f0000004f80)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000404e22'])
close_range(r0, 0xffffffffffffffff, 0x0)

13.050939749s ago: executing program 5 (id=1597):
syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_disconn_rsp={{0x7, 0x9d, 0x4}, {0x7}}]}}, 0x11)

12.99438553s ago: executing program 6 (id=1599):
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r1)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
epoll_create1(0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000300))
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[], 0x1c}}, 0x4008054)
r2 = socket(0x1e, 0x4, 0x0)
write$nci(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16=r2], 0x14)

12.814608724s ago: executing program 6 (id=1601):
r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000a40), 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffff95})

12.204933619s ago: executing program 5 (id=1602):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
fsopen(&(0x7f0000000180)='autofs\x00', 0x1)
mlock(&(0x7f0000171000/0x1000)=nil, 0x1000)
munlockall()
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)

12.204506279s ago: executing program 0 (id=1603):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000880)='/dev/comedi3\x00', 0x0, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000008c0)={'pcl818\x00', [0x100, 0xa, 0x13600, 0xf61c691, 0x2, 0x10005, 0x201, 0x3, 0x80006, 0x15, 0xd, 0x7, 0x7, 0x1, 0x6, 0x101, 0x6, 0x9, 0x20003, 0x7fffffff, 0xb740, 0x7ffc, 0x7, 0x20001e58, 0x8, 0x37f93244, 0x3, 0x0, 0x9, 0x1, 0xd1]})
socket$igmp(0x2, 0x3, 0x2)
r1 = socket$xdp(0x2c, 0x3, 0x0)
mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xb, 0x11, r1, 0x100000000)
ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f000008ff40)={0x1, &(0x7f000008fe00)=[{0x4000000, 0xf, &(0x7f00000009c0)=[0x0, 0x7f, 0x0, 0x84, 0x6, 0x4, 0x1, 0x7ff, 0x1, 0x4, 0xc, 0x6, 0x4, 0x8842, 0x7], 0x2, 0x1}]})

12.145514951s ago: executing program 6 (id=1604):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000680)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0)
close(r2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000700)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, 0x0, 0x20040084)
sendmsg$nl_route_sched(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x9, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x2, 0x8001, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x65c, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x801, 0x1, 0x9, 0x6, 0x4, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x1, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x4, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000001100)={'syzkaller0\x00', @multicast})
r6 = socket$kcm(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001140)={'syzkaller0\x00', <r7=>0x0})
sendmsg$kcm(r6, &(0x7f0000001180)={&(0x7f00000011c0)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000001240)=[{&(0x7f0000001280)="c2", 0x1}], 0x1}, 0x20004014)

12.145400261s ago: executing program 5 (id=1605):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)={0x2c, r1, 0x1, 0x0, 0x25dfdbff, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1743}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2c}]]}, 0x2c}, 0x1, 0x0, 0x0, 0xc804}, 0x0)

12.142245361s ago: executing program 3 (id=1606):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000300)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010007"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20)
bind$inet6(r1, &(0x7f0000000480)={0xa, 0xe22, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0x4c, &(0x7f0000000500)={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0xff, @empty, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "fe8000000000"}}}}}}}, 0x0)

12.050703854s ago: executing program 0 (id=1607):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001540)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000015c0)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000000100)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x10}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x40003}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x50}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000400)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {}, {0x1, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x0, 0x583e}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240408a0}, 0x4890)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000001800)={'syzkaller0\x00', @multicast})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000001840), r4)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000001880)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000001900)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)

12.050547534s ago: executing program 5 (id=1608):
socket$kcm(0x10, 0x2, 0x0)
syz_open_dev$loop(0x0, 0xb, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000))
r0 = socket$inet6(0xa, 0x802, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000130001000400"/20, @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000080)={'dummy0\x00'})

12.050481824s ago: executing program 3 (id=1609):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socket$inet6(0xa, 0x80002, 0x0)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x38, 0x1403, 0xc23, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syz_tun\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x14f7325d9d03b00}, 0x4000)

12.050390994s ago: executing program 3 (id=1610):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fddbdf253900001008000300", @ANYRES32=r2, @ANYBLOB="24005a8020000180140005"], 0x40}, 0x1, 0x0, 0x0, 0x24040887}, 0x0)

4.190972334s ago: executing program 4 (id=1647):
r0 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f00000000c0)={'/sys/block/md', @num=0x0, '/md/', @array='max_read_errors\x00'}, 0x1, 0x0)
write$md_sysfs(r0, 0x0, 0x0)
write$md_sysfs(r0, &(0x7f0000000180)=@num=0x56f46404, 0x14)

4.174993324s ago: executing program 4 (id=1648):
syslog(0x3, &(0x7f00000000c0)=""/185, 0x64075da62934d5d1)
madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

4.059300857s ago: executing program 4 (id=1649):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x40042, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x1, &(0x7f0000000440)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e)
sendmmsg$unix(r3, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000000580), 0x4000087, 0x2, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x370, 0x238, 0x11, 0x148, 0x238, 0x0, 0x2d8, 0x2a8, 0x2a8, 0x2d8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1f0, 0x238, 0x0, {}, [@common=@inet=@socket2={{0x28}}, @common=@inet=@hashlimit3={{0x158}, {'bridge0\x00', {0x6, 0x6, 0x40, 0x6, 0x0, 0x3, 0x5, 0x8, 0x0, 0x20}, {0x5}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0xfffffffe}}}, {{@ip={@multicast2, @remote, 0x0, 0x0, 'vlan0\x00', 'macvlan1\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0)
r5 = socket(0x28, 0x801, 0x0)
connect$vsock_stream(r5, &(0x7f0000000240)={0x28, 0x0, 0x2711, @my=0x1}, 0x10)
mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}})

3.189910079s ago: executing program 4 (id=1650):
r0 = openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0)
read(r0, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x401, 0xffffeffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503, 0x802}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2800c008}, 0x44)

226.411435ms ago: executing program 6 (id=1651):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0xfdfffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x2000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

91.432628ms ago: executing program 6 (id=1652):
syz_io_uring_setup(0x1418, &(0x7f0000000000)={0x0, 0x91c1, 0x8, 0x1, 0x276}, 0x0, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
timerfd_create(0x0, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0)
sendmmsg(r0, &(0x7f00000020c0)=[{{&(0x7f0000002140)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f00000021c0)=@l2tp6={0xa, 0x0, 0x7080000, @loopback, 0xa, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000002240)=ANY=[@ANYRES64=r0], 0x108}}], 0x2, 0xc040)

71.735998ms ago: executing program 6 (id=1653):
syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000068e04d206f0e2c586831010203010902240001000000000904000002ff47d000090589e702008000040905", @ANYBLOB="02370942fb2756227fc3b65f17e78b61d082c2f0830d6c8d776b448d42a75e3dbfe6881a3f870555aaff59848ee7a6e85bf05f6ef16510b7e7b0ffd24e44d72415ef862881695459f197"], 0x0)
syz_open_dev$evdev(&(0x7f0000000180), 0x72, 0x0)

58.218059ms ago: executing program 3 (id=1654):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x0, 0x0)
ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000180)={0x4000000, 0xf, &(0x7f00000001c0)=[0x6, 0x4d5, 0x2, 0x9, 0x4, 0xffffffff, 0x8, 0x5, 0x5, 0x8, 0x1, 0x4, 0x3a4, 0x7, 0x9], 0x3, 0x2000000})

51.462539ms ago: executing program 5 (id=1655):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)=<r1=>0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r2)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x40040)
write$nci(r0, &(0x7f0000000240)=@NCI_OP_NFCEE_DISCOVER_NTF={0x2, 0x1, 0x3, 0x0, 0x5, {0x1, 0x9, "189bcc"}}, 0x8)
write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="500404"], 0x7)
write$nci(r0, &(0x7f0000000300)=@NCI_OP_RF_DISCOVER_MAP_RSP={0x1, 0x0, 0x2, 0x0, 0x1}, 0x4)
sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)={0x24, r3, 0x1, 0x70bd28, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffff3d}]}, 0x24}, 0x1, 0x0, 0x0, 0x4851}, 0x0)
write$nci(r0, &(0x7f0000000440)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0xf, {0x1, 0xd, "299506ad626d94209abe7953d5"}}, 0x12)

51.324879ms ago: executing program 4 (id=1656):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c)
sendmsg$inet6(r0, &(0x7f00000002c0)={&(0x7f0000000300)={0xa, 0x4e24, 0xb, @loopback, 0x5}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000380)="13", 0x1}], 0x1}, 0x48043)
r2 = dup(r0)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000003c0)='ip6gretap0\x00', 0x10)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x48, 0xff}, 0x9c)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c)
write$tun(r2, &(0x7f0000000580)=ANY=[], 0xfdef)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000005c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0xfffffff7, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c)

30.747609ms ago: executing program 0 (id=1657):
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000006c0)='./proc\x00', &(0x7f0000000700)='proc\x00', 0x4000, 0x0)
getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1e, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000c40)='100', 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/vhci\x00', 0x8002, 0x0)
write(r1, &(0x7f00000002c0)="ff80", 0x2)
close(r1)
openat(0xffffffffffffff9c, 0x0, 0xa6c81, 0xc0)

30.653509ms ago: executing program 3 (id=1658):
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl(r0, 0x40186f40, &(0x7f0000000280))

4.144221ms ago: executing program 3 (id=1659):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000340)=[@in6={0xa, 0x4e24, 0xfffffffe, @loopback, 0x5}], 0x1c)
sendmsg$inet6(r0, &(0x7f0000000380)={&(0x7f00000003c0)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000440)="91", 0x1}], 0x1}, 0x48043)
r2 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00', 0x2000})
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000540)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2a}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c)
pipe2$9p(&(0x7f0000000600)={<r3=>0xffffffffffffffff}, 0x0)
splice(r3, 0x0, r0, 0x0, 0x317e, 0x4)

0s ago: executing program 4 (id=1660):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x40042, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x1, &(0x7f0000000440)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e)
sendmmsg$unix(r3, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000000580), 0x4000087, 0x2, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x370, 0x238, 0x11, 0x148, 0x238, 0x0, 0x2d8, 0x2a8, 0x2a8, 0x2d8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1f0, 0x238, 0x0, {}, [@common=@inet=@socket2={{0x28}}, @common=@inet=@hashlimit3={{0x158}, {'bridge0\x00', {0x6, 0x6, 0x40, 0x6, 0x0, 0x3, 0x5, 0x8, 0x0, 0x20}, {0x5}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0xfffffffe}}}, {{@ip={@multicast2, @remote, 0x0, 0x0, 'vlan0\x00', 'macvlan1\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0)
r5 = socket(0x28, 0x801, 0x0)
connect$vsock_stream(r5, &(0x7f0000000240)={0x28, 0x0, 0x2711, @my=0x1}, 0x10)
mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}})

kernel console output (not intermixed with test programs):

2][ T5567] loop0: p240 start 53543428 is beyond EOD, truncated
[   93.783496][ T5567] loop0: p241 start 53543428 is beyond EOD, truncated
[   93.806534][ T5567] loop0: p242 start 53543428 is beyond EOD, truncated
[   93.807714][ T5567] loop0: p243 start 53543428 is beyond EOD, truncated
[   93.816585][ T5567] loop0: p244 start 53543428 is beyond EOD, truncated
[   93.817910][ T5567] loop0: p245 start 53543428 is beyond EOD, truncated
[   93.819197][ T5567] loop0: p246 start 53543428 is beyond EOD, truncated
[   93.820441][ T5567] loop0: p247 start 53543428 is beyond EOD, truncated
[   93.821670][ T5567] loop0: p248 start 53543428 is beyond EOD, truncated
[   93.822885][ T5567] loop0: p249 start 53543428 is beyond EOD, truncated
[   93.824107][ T5567] loop0: p250 start 53543428 is beyond EOD, truncated
[   93.827650][ T5608] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   93.829859][ T5608] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   93.831068][ T5608] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   93.840650][ T5567] loop0: p251 start 53543428 is beyond EOD, truncated
[   93.841889][ T5567] loop0: p252 start 53543428 is beyond EOD, truncated
[   93.846069][ T5567] loop0: p253 start 53543428 is beyond EOD, truncated
[   93.850068][ T5612] netlink: 16 bytes leftover after parsing attributes in process `syz.4.345'.
[   93.851847][ T5567] loop0: p254 start 53543428 is beyond EOD, truncated
[   93.853998][ T5610] device syzkaller0 entered promiscuous mode
[   93.870077][ T5567] loop0: p255 start 53543428 is beyond EOD, truncated
[   93.875890][ T5608] netlink: 72 bytes leftover after parsing attributes in process `syz.1.343'.
[   93.957726][   T27] kauditd_printk_skb: 112 callbacks suppressed
[   93.957735][   T27] audit: type=1326 audit(93.950:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5619 comm="syz.0.348" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1b7a228 code=0x0
[   94.137489][ T5649] netlink: 4 bytes leftover after parsing attributes in process `syz.1.356'.
[   94.184849][ T5652] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   94.189648][ T5652] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   94.191370][ T5652] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   94.218362][ T5652] netlink: 72 bytes leftover after parsing attributes in process `syz.1.357'.
[   94.220976][ T5659] loop4: detected capacity change from 0 to 512
[   94.256167][ T5659] loop4: detected capacity change from 0 to 1024
[   94.274981][ T5656] loop5: detected capacity change from 0 to 8192
[   94.277008][ T5659] EXT4-fs: Ignoring removed bh option
[   94.281959][ T5656] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   94.349182][ T5659] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   94.426725][ T5668] device syzkaller0 entered promiscuous mode
[   94.563004][ T4332] Bluetooth: hci4: unexpected event 0x1c length: 7 > 5
[   95.040598][ T5696] netlink: 4 bytes leftover after parsing attributes in process `syz.1.367'.
[   95.118989][ T5706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   95.127935][ T5706] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   95.146309][ T4501] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   95.160547][ T5711] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   95.163107][ T5711] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   95.164490][ T5711] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   95.176846][ T5711] netlink: 72 bytes leftover after parsing attributes in process `syz.1.371'.
[   95.288753][ T5729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   95.290492][ T5729] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   95.294262][ T5729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   95.295926][ T5729] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   95.339288][ T4501] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   95.341381][ T4501] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[   95.343092][ T4501] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[   95.344748][ T4501] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64
[   95.346798][ T4501] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64
[   95.348518][ T4501] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64
[   95.350565][ T4501] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64
[   95.352305][ T4501] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64
[   95.353912][ T4501] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64
[   95.355503][ T4501] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[   95.358512][ T4501] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[   95.360815][ T4501] usb 1-1: config 1 interface 0 altsetting 0 has 9 endpoint descriptors, different from the interface descriptor's value: 14
[   95.366071][ T4501] usb 1-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00
[   95.368244][ T4501] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.369739][ T4501] usb 1-1: Product: syz
[   95.370407][ T4501] usb 1-1: Manufacturer: syz
[   95.371352][ T4501] usb 1-1: SerialNumber: syz
[   95.375307][ T5686] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   95.376725][ T5686] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   95.378085][ T5686] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   95.379617][ T5686] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   95.381168][ T5686] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   95.383662][ T5686] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   95.386620][ T5686] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   95.388018][ T5686] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   95.390308][ T4501] keyspan 1-1:1.0: Keyspan 2 port adapter converter detected
[   95.391943][ T4501] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 7
[   95.395283][ T4501] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 5
[   95.398049][ T4501] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[   95.400069][ T4501] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 3
[   95.401467][ T4501] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 4
[   95.402802][ T4501] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 6
[   95.404406][ T4501] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[   95.581343][ T4343] EXT4-fs (loop4): unmounting filesystem.
[   95.720493][ T5745] netlink: 4 bytes leftover after parsing attributes in process `syz.4.379'.
[   95.745190][ T5749] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   95.751795][ T5748] tipc: Disabling bearer <eth:syzkaller0>
[   95.760646][ T3902] usb 1-1: USB disconnect, device number 3
[   95.765377][ T3902] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[   95.773154][ T3902] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[   95.778820][ T3902] keyspan 1-1:1.0: device disconnected
[   95.812891][ T5753] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   95.818111][ T5753] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   95.819517][ T5753] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   95.845312][ T5753] netlink: 28 bytes leftover after parsing attributes in process `syz.3.382'.
[   95.863118][ T5758] device syzkaller1 entered promiscuous mode
[   95.910198][ T5766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   95.913418][ T5766] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   95.941476][ T5770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   95.943770][ T5770] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   96.242643][ T5783] tipc: Started in network mode
[   96.243640][ T5783] tipc: Node identity e2205bf7ac28, cluster identity 4711
[   96.244867][ T5783] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   96.247750][ T5782] tipc: Disabling bearer <eth:syzkaller0>
[   96.292496][ T5785] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   96.305391][ T5785] netlink: 28 bytes leftover after parsing attributes in process `syz.0.396'.
[   96.334167][ T5787] loop3: detected capacity change from 0 to 1024
[   96.350860][ T5789] loop0: detected capacity change from 0 to 128
[   96.509484][ T5804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   96.513005][ T5804] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   96.597875][ T5811] tipc: Started in network mode
[   96.598961][ T5811] tipc: Node identity badf74ffa07d, cluster identity 4711
[   96.600304][ T5811] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   96.604286][ T5810] tipc: Disabling bearer <eth:syzkaller0>
[   96.662699][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   96.676860][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   96.709971][ T5814] netlink: 28 bytes leftover after parsing attributes in process `syz.4.408'.
[   96.733706][ T5822] loop4: detected capacity change from 0 to 256
[   96.781775][ T5826] loop1: detected capacity change from 0 to 4096
[   96.813629][ T5826] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   96.845862][ T4330] EXT4-fs (loop1): unmounting filesystem.
[   96.909728][ T5834] loop1: detected capacity change from 0 to 512
[   96.920847][ T5834] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   97.047937][ T5848] loop4: detected capacity change from 0 to 256
[   97.137785][ T4332] Bluetooth: hci2: unexpected subevent 0x1a length: 66 > 6
[   97.340907][ T5848] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010321, chksum : 0x3a8a43f6, utbl_chksum : 0xe619d30d)
[   97.419368][ T5854] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   97.423607][ T5854] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   97.424975][ T5854] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   97.427834][ T5854] device bridge_slave_0 left promiscuous mode
[   97.428967][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.494127][ T5864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   97.495999][ T5864] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   97.510641][ T5854] device bridge_slave_1 left promiscuous mode
[   97.511966][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.559329][ T5854] bond0: (slave bond_slave_0): Releasing backup interface
[   97.586114][ T5867] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found!
[   97.592462][ T5854] bond0: (slave bond_slave_1): Releasing backup interface
[   97.601289][ T5867] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   97.652325][ T5854] team0: Failed to send options change via netlink (err -105)
[   97.659807][ T5854] team0: Failed to send port change of device team_slave_0 via netlink (err -105)
[   97.662067][ T5854] team0: Port device team_slave_0 removed
[   97.675096][ T5854] team0: Failed to send options change via netlink (err -105)
[   97.677402][ T5854] team0: Failed to send port change of device team_slave_1 via netlink (err -105)
[   97.679799][ T5854] team0: Port device team_slave_1 removed
[   97.681497][ T5854] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   97.683075][ T5854] batman_adv: batadv0: Removing interface: batadv_slave_0
[   97.685070][ T5854] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   97.687106][ T5854] batman_adv: batadv0: Removing interface: batadv_slave_1
[   97.795879][ T5881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   97.800615][ T5881] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   98.276737][ T4330] EXT4-fs (loop1): unmounting filesystem.
[   98.304483][ T5889] set_capacity_and_notify: 2 callbacks suppressed
[   98.304493][ T5889] loop1: detected capacity change from 0 to 128
[   98.414395][ T5896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   98.416465][ T5896] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   98.947664][ T5911] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   98.997289][ T5915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   98.999425][ T5915] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   99.012679][ T5917] loop3: detected capacity change from 0 to 128
[   99.033377][ T5917] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   99.046013][ T5917] fscrypt (loop3, inode 12): Can't use IV_INO_LBLK_32 policy on filesystem 'loop3' because it doesn't have stable inode numbers
[   99.059794][ T4329] EXT4-fs (loop3): unmounting filesystem.
[   99.183834][ T5934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   99.187938][ T5934] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   99.524457][ T5946] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   99.529669][ T5946] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   99.531068][ T5946] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   99.694990][ T5967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   99.697651][ T5967] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   99.811244][ T5976] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   99.813636][ T5976] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   99.815059][ T5976] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  100.096133][ T4332] Bluetooth: hci3: command 0x0405 tx timeout
[  100.168867][ T5976] team0: Mode "active" not found
[  100.171462][ T5978] __nla_validate_parse: 1 callbacks suppressed
[  100.171473][ T5978] netlink: 36 bytes leftover after parsing attributes in process `syz.3.465'.
[  100.287063][ T5991] loop4: detected capacity change from 0 to 128
[  100.301372][ T5993] netem: incorrect gi model size
[  100.302581][ T5993] netem: change failed
[  100.402454][ T4332] Bluetooth: hci0: unexpected event for opcode 0x0c13
[  100.407810][ T6007] loop1: detected capacity change from 0 to 512
[  100.419414][ T6007] EXT4-fs (loop1): 1 truncate cleaned up
[  100.420508][ T6007] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  100.594803][ T6015] loop3: detected capacity change from 0 to 736
[  100.745740][ T6021] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  100.748630][ T6021] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  100.750064][ T6021] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  100.771773][ T6021] team0: Mode "active" not found
[  100.853455][ T6027] loop4: detected capacity change from 0 to 16
[  100.857536][ T6027] erofs: (device loop4): mounted with root inode @ nid 36.
[  100.971370][ T6040] loop0: detected capacity change from 0 to 512
[  100.994484][ T6040] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  101.001387][ T6040] EXT4-fs (loop0): 1 truncate cleaned up
[  101.011555][ T6040] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  101.014112][ T4330] EXT4-fs (loop1): unmounting filesystem.
[  101.086012][ T6045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  101.087663][ T6045] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  101.090646][ T6047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  101.094099][ T6047] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  101.109327][ T6049] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  101.111666][ T6049] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  101.113310][ T6049] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  101.150817][ T6049] team0: Mode "active" not found
[  101.272099][ T4331] EXT4-fs (loop0): unmounting filesystem.
[  101.287536][ T6058] loop5: detected capacity change from 0 to 2048
[  101.312155][ T6058] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  101.359377][ T5165] EXT4-fs (loop5): unmounting filesystem.
[  101.539367][ T6081] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  101.878318][ T6081] team0: Mode "activeback" not found
[  101.959627][ T6108] loop4: detected capacity change from 0 to 512
[  102.089133][ T6117] syz.5.516 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000
[  102.094322][ T6117] CPU: 0 PID: 6117 Comm: syz.5.516 Not tainted syzkaller #0
[  102.095720][ T6117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  102.097690][ T6117] Call trace:
[  102.098315][ T6117]  dump_backtrace+0x1c4/0x1f0
[  102.099238][ T6117]  show_stack+0x2c/0x3c
[  102.100052][ T6117]  __dump_stack+0x30/0x40
[  102.100947][ T6117]  dump_stack_lvl+0xf4/0x15c
[  102.101193][ T6126] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  102.101770][ T6117]  dump_stack+0x1c/0x5c
[  102.103750][ T6117]  dump_header+0xc0/0x724
[  102.104390][ T6126] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  102.104547][ T6117]  oom_kill_process+0x35c/0x660
[  102.106091][ T6129] loop0: detected capacity change from 0 to 512
[  102.106768][ T6117]  out_of_memory+0xbf0/0xf70
[  102.108598][ T6117]  mem_cgroup_out_of_memory+0x228/0x2d0
[  102.109591][ T6117]  try_charge_memcg+0xa4c/0x1390
[  102.110477][ T6117]  __memcg_kmem_charge_page+0x304/0x54c
[  102.111443][ T6117]  __alloc_pages+0x200/0x544
[  102.112222][ T6117]  alloc_pages+0x434/0x6fc
[  102.113118][ T6117]  pte_alloc_one+0x2c/0x254
[  102.114034][ T6117]  handle_mm_fault+0x1c78/0x3018
[  102.114988][ T6117]  do_page_fault+0x310/0x99c
[  102.115146][ T6126] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  102.115872][ T6117]  do_translation_fault+0x94/0xc8
[  102.115893][ T6117]  do_mem_abort+0x70/0x198
[  102.115900][ T6117]  el0_da+0x74/0x14c
[  102.115907][ T6117]  el0t_64_sync_handler+0x90/0xf0
[  102.115913][ T6117]  el0t_64_sync+0x18c/0x190
[  102.143492][ T6129] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  102.155972][ T6117] memory: usage 0kB, limit 0kB, failcnt 19
[  102.157149][ T6117] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[  102.158564][ T6117] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[  102.160374][ T6117] Memory cgroup stats for /syz5/test:
[  102.160641][ T6117] anon 0
[  102.160641][ T6117] file 0
[  102.160641][ T6117] kernel 0
[  102.160641][ T6117] kernel_stack 0
[  102.160641][ T6117] pagetables 0
[  102.160641][ T6117] sec_pagetables 0
[  102.160641][ T6117] percpu 0
[  102.160641][ T6117] sock 0
[  102.160641][ T6117] vmalloc 0
[  102.160641][ T6117] shmem 0
[  102.160641][ T6117] zswap 0
[  102.160641][ T6117] zswapped 0
[  102.160641][ T6117] file_mapped 0
[  102.160641][ T6117] file_dirty 0
[  102.160641][ T6117] file_writeback 0
[  102.160641][ T6117] swapcached 0
[  102.160641][ T6117] anon_thp 0
[  102.160641][ T6117] file_thp 0
[  102.160641][ T6117] shmem_thp 0
[  102.160641][ T6117] inactive_anon 0
[  102.160641][ T6117] active_anon 0
[  102.160641][ T6117] inactive_file 0
[  102.160641][ T6117] active_file 0
[  102.160641][ T6117] unevictable 0
[  102.160641][ T6117] slab_reclaimable 0
[  102.160641][ T6117] slab_unreclaimable 0
[  102.160641][ T6117] slab 0
[  102.160641][ T6117] workingset_refault_anon 0
[  102.160971][ T6129] fs-verity: sha256 using implementation "sha256-ce"
[  102.161653][ T6117] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0,oom_memcg=/syz5/test,task_memcg=/syz5/test,task=syz.5.516,pid=6117,uid=0
[  102.185476][ T6117] Memory cgroup out of memory: Killed process 6117 (syz.5.516) total-vm:102208kB, anon-rss:1384kB, file-rss:21768kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[  102.209663][ T6129] EXT4-fs warning (device loop0): ext4_begin_enable_verity:137: inode #15: comm syz.0.518: verity is only allowed on extent-based files
[  102.214820][ T6134] team0: Mode "activeback" not found
[  102.246910][ T4331] EXT4-fs (loop0): unmounting filesystem.
[  102.280712][ T6142] exfat: Deprecated parameter 'namecase'
[  102.282229][ T6142] exfat: Deprecated parameter 'namecase'
[  102.302267][ T6142] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d)
[  102.321979][ T6147] sch_tbf: peakrate 2147483647 is lower than or equals to rate 2831036522994172386 !
[  102.333764][ T6142] exFAT-fs (loop1): hint_cluster is invalid (4278190089)
[  102.341278][ T6142] exFAT-fs (loop1): error, failed to bmap (inode : 000000005857930c iblock : 8, err : -5)
[  102.343543][ T6142] exFAT-fs (loop1): error, invalid access to FAT (entry 0xff000008)
[  102.344982][ T6142] exFAT-fs (loop1): error, invalid access to FAT (entry 0xff000008)
[  102.362404][ T4930] kworker/u4:12: attempt to access beyond end of device
[  102.362404][ T4930] loop1: rw=1, sector=34225520825, nr_sectors = 1 limit=256
[  102.365284][ T4930] Buffer I/O error on dev loop1, logical block 34225520825, lost async page write
[  102.376228][ T4930] kworker/u4:12: attempt to access beyond end of device
[  102.376228][ T4930] loop1: rw=1, sector=34225520826, nr_sectors = 1 limit=256
[  102.378654][ T4930] Buffer I/O error on dev loop1, logical block 34225520826, lost async page write
[  102.380343][ T4930] kworker/u4:12: attempt to access beyond end of device
[  102.380343][ T4930] loop1: rw=1, sector=34225520827, nr_sectors = 1 limit=256
[  102.382892][ T4930] Buffer I/O error on dev loop1, logical block 34225520827, lost async page write
[  102.384558][ T4930] kworker/u4:12: attempt to access beyond end of device
[  102.384558][ T4930] loop1: rw=1, sector=34225520828, nr_sectors = 1 limit=256
[  102.390356][ T4930] Buffer I/O error on dev loop1, logical block 34225520828, lost async page write
[  102.391896][ T4930] kworker/u4:12: attempt to access beyond end of device
[  102.391896][ T4930] loop1: rw=1, sector=34225520829, nr_sectors = 1 limit=256
[  102.394249][ T4930] Buffer I/O error on dev loop1, logical block 34225520829, lost async page write
[  102.397876][ T4930] kworker/u4:12: attempt to access beyond end of device
[  102.397876][ T4930] loop1: rw=1, sector=34225520830, nr_sectors = 1 limit=256
[  102.400288][ T4930] Buffer I/O error on dev loop1, logical block 34225520830, lost async page write
[  102.401765][ T4930] kworker/u4:12: attempt to access beyond end of device
[  102.401765][ T4930] loop1: rw=1, sector=34225520831, nr_sectors = 1 limit=256
[  102.404064][ T4930] Buffer I/O error on dev loop1, logical block 34225520831, lost async page write
[  102.472113][ T6168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  102.474307][ T6168] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  102.486679][ T6165] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  102.502487][ T6165] EXT4-fs (loop3): 1 truncate cleaned up
[  102.503664][ T6165] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  102.662781][ T6176] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  102.667120][ T6176] FAULT_INJECTION: forcing a failure.
[  102.667120][ T6176] name failslab, interval 1, probability 0, space 0, times 0
[  102.669042][ T6176] CPU: 0 PID: 6176 Comm: syz.5.536 Not tainted syzkaller #0
[  102.670230][ T6176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  102.671947][ T6176] Call trace:
[  102.672507][ T6176]  dump_backtrace+0x1c4/0x1f0
[  102.673329][ T6176]  show_stack+0x2c/0x3c
[  102.674058][ T6176]  __dump_stack+0x30/0x40
[  102.674820][ T6176]  dump_stack_lvl+0xf4/0x15c
[  102.675641][ T6176]  dump_stack+0x1c/0x5c
[  102.676357][ T6176]  should_fail_ex+0x3cc/0x524
[  102.677169][ T6176]  __should_failslab+0xc0/0x11c
[  102.678036][ T6176]  should_failslab+0x10/0x28
[  102.678837][ T6176]  __kmem_cache_alloc_node+0x7c/0x318
[  102.679815][ T6176]  kmalloc_trace+0x48/0x94
[  102.680617][ T6176]  alloc_mnt_ns+0xc0/0x3b4
[  102.681420][ T6176]  __arm64_sys_open_tree+0x2d8/0x844
[  102.682390][ T6176]  invoke_syscall+0x98/0x290
[  102.683206][ T6176]  el0_svc_common+0x13c/0x258
[  102.683999][ T6176]  do_el0_svc+0x5c/0x134
[  102.684749][ T6176]  el0_svc+0x58/0x12c
[  102.685445][ T6176]  el0t_64_sync_handler+0x84/0xf0
[  102.686347][ T6176]  el0t_64_sync+0x18c/0x190
[  102.695814][   T24] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  102.722328][ T6180] netlink: 36 bytes leftover after parsing attributes in process `syz.5.538'.
[  102.876266][   T24] usb 1-1: Using ep0 maxpacket: 16
[  102.880210][   T24] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  102.882189][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.883849][   T24] usb 1-1: Product: syz
[  102.884618][   T24] usb 1-1: Manufacturer: syz
[  102.885607][   T24] usb 1-1: SerialNumber: syz
[  102.887708][   T24] r8152-cfgselector 1-1: config 0 descriptor??
[  103.123840][   T24] r8152-cfgselector 1-1: Unknown version 0x0000
[  103.125357][   T24] r8152-cfgselector 1-1: bad CDC descriptors
[  103.128637][   T24] r8152-cfgselector 1-1: Unknown version 0x0000
[  103.130448][   T24] r8152-cfgselector 1-1: USB disconnect, device number 4
[  103.176515][ T6206] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  103.180196][ T6206] EXT4-fs (loop1): 1 truncate cleaned up
[  103.181448][ T6206] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  103.197611][ T4330] EXT4-fs (loop1): unmounting filesystem.
[  103.311233][ T4329] EXT4-fs (loop3): unmounting filesystem.
[  103.333123][ T6212] netlink: 36 bytes leftover after parsing attributes in process `syz.3.549'.
[  103.463038][ T6213] set_capacity_and_notify: 3 callbacks suppressed
[  103.463059][ T6213] loop1: detected capacity change from 0 to 4096
[  103.662477][ T6213] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  103.741934][ T6222] rxe_eth0 speed is unknown, defaulting to 1000
[  103.884614][ T6227] loop5: detected capacity change from 0 to 16
[  103.965575][ T6227] erofs: (device loop5): mounted with root inode @ nid 36.
[  104.124422][ T6228] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  104.192005][ T4330] EXT4-fs (loop1): unmounting filesystem.
[  104.244476][ T6239] loop1: detected capacity change from 0 to 8
[  104.260214][ T6239] SQUASHFS error: Unable to read inode 0x2000
[  104.323368][ T6246] netlink: 36 bytes leftover after parsing attributes in process `syz.0.560'.
[  104.543294][ T6266] loop0: detected capacity change from 0 to 512
[  104.563186][ T6266] EXT4-fs (loop0): 1 truncate cleaned up
[  104.564287][ T6266] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  104.574311][ T6266] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.568: bg 0: block 465: padding at end of block bitmap is not set
[  104.579096][ T6266] EXT4-fs (loop0): Remounting filesystem read-only
[  104.594129][ T4331] EXT4-fs (loop0): unmounting filesystem.
[  104.599099][ T6262] loop1: detected capacity change from 0 to 32768
[  104.630271][ T6269] loop0: detected capacity change from 0 to 512
[  104.639462][ T6262]  loop1: p1 p3 < p5 > p4
[  104.661222][ T6269] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  104.684214][ T6269] Quota error (device loop0): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8
[  104.690494][ T6269] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  104.692678][ T6269] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.569: Failed to acquire dquot type 0
[  104.710465][ T4331] EXT4-fs (loop0): unmounting filesystem.
[  104.775597][ T6275] FAULT_INJECTION: forcing a failure.
[  104.775597][ T6275] name fail_futex, interval 1, probability 0, space 0, times 1
[  104.779552][ T5013] udevd[5013]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[  104.779619][ T4802] udevd[4802]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[  104.782940][ T5473] udevd[5473]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  104.783808][ T6275] CPU: 1 PID: 6275 Comm: syz.0.570 Not tainted syzkaller #0
[  104.786163][ T6275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  104.788092][ T6275] Call trace:
[  104.788735][ T6275]  dump_backtrace+0x1c4/0x1f0
[  104.789608][ T6275]  show_stack+0x2c/0x3c
[  104.790481][ T6275]  __dump_stack+0x30/0x40
[  104.791375][ T6275]  dump_stack_lvl+0xf4/0x15c
[  104.792338][ T6275]  dump_stack+0x1c/0x5c
[  104.793128][ T6275]  should_fail_ex+0x3cc/0x524
[  104.794021][ T6275]  should_fail+0x14/0x24
[  104.794844][ T6275]  get_futex_key+0x904/0xfb0
[  104.795694][ T6275]  futex_wake+0x10c/0x458
[  104.796583][ T6275]  do_futex+0x2c4/0x340
[  104.797384][ T6275]  __arm64_sys_futex+0x390/0x414
[  104.798298][ T6275]  invoke_syscall+0x98/0x290
[  104.799151][ T6275]  el0_svc_common+0x13c/0x258
[  104.800004][ T6275]  do_el0_svc+0x5c/0x134
[  104.800807][ T6275]  el0_svc+0x58/0x12c
[  104.801557][ T6275]  el0t_64_sync_handler+0x84/0xf0
[  104.802478][ T6275]  el0t_64_sync+0x18c/0x190
[  104.814844][ T4990] udevd[4990]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory
[  104.842943][ T6277] netlink: 36 bytes leftover after parsing attributes in process `syz.0.571'.
[  105.002774][ T6291] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  105.004447][ T6291] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  105.014927][ T6291] team0: Mode changed to "activebackup"
[  105.295954][ T6307] netlink: 36 bytes leftover after parsing attributes in process `syz.0.578'.
[  105.562668][ T6308] Illegal XDP return value 5 on prog  (id 40) dev N/A, expect packet loss!
[  105.585290][ T6308] loop5: detected capacity change from 0 to 512
[  105.793961][ T6308] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  105.868473][ T6320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  105.875956][ T6320] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  105.962864][ T6329] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  106.039625][ T6337] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  106.041127][ T6337] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  106.048496][ T5165] EXT4-fs (loop5): unmounting filesystem.
[  106.068431][ T6337] team0: Unable to change to the same mode the team is in
[  106.101512][   T27] audit: type=1326 audit(362.088:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6344 comm="syz.5.590" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa6d7a228 code=0x7ffc0000
[  106.118060][   T27] audit: type=1326 audit(362.108:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6344 comm="syz.5.590" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa6d7a228 code=0x7ffc0000
[  106.123240][   T27] audit: type=1326 audit(362.108:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6344 comm="syz.5.590" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa6d7a228 code=0x7ffc0000
[  106.132718][   T27] audit: type=1326 audit(362.108:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6344 comm="syz.5.590" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa6d7a228 code=0x7ffc0000
[  106.150696][   T27] audit: type=1326 audit(362.108:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6344 comm="syz.5.590" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=97 compat=0 ip=0xffffa6d7a228 code=0x7ffc0000
[  106.163770][   T27] audit: type=1326 audit(362.108:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6344 comm="syz.5.590" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa6d7a228 code=0x7ffc0000
[  106.173798][   T27] audit: type=1326 audit(362.108:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6344 comm="syz.5.590" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa6d7a228 code=0x7ffc0000
[  106.178749][   T27] audit: type=1326 audit(362.108:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6344 comm="syz.5.590" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa6d7a228 code=0x7ffc0000
[  106.240620][ T4332] Bluetooth: Wrong link type (-22)
[  106.243197][ T6360] loop3: detected capacity change from 0 to 128
[  106.263940][ T6360] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  107.464948][ T6401] loop5: detected capacity change from 0 to 512
[  107.473022][ T6401] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  107.541568][ T6401] EXT4-fs (loop5): 1 truncate cleaned up
[  107.542644][ T6401] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  107.625141][ T4501] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  107.634347][ T4329] EXT4-fs (loop3): unmounting filesystem.
[  107.666932][ T6418] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  107.669682][ T6418] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  107.671265][ T6418] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  107.696998][ T6418] team0: Mode changed to "activebackup"
[  107.698706][ T6422] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  107.772141][ T6430] loop3: detected capacity change from 0 to 16
[  107.780129][ T6430] erofs: (device loop3): mounted with root inode @ nid 36.
[  107.808433][ T4501] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  107.810570][ T4501] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  107.812255][ T4501] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  107.814652][ T4501] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  107.827152][ T4501] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  107.842888][ T4501] usb 1-1: config 0 descriptor??
[  107.871848][ T5165] EXT4-fs (loop5): unmounting filesystem.
[  108.114210][ T6470] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  108.144807][ T6470] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  108.156018][ T6470] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  108.180628][ T4342] Bluetooth: hci3: unexpected cc 0x206e length: 9 > 3
[  108.195714][ T6470] team0: Unable to change to the same mode the team is in
[  108.253019][ T4501] plantronics 0003:047F:FFFF.0001: ignoring exceeding usage max
[  108.257324][ T4501] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving
[  108.269573][ T4501] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  108.357465][ T6498] netlink: 36 bytes leftover after parsing attributes in process `syz.4.622'.
[  108.428010][ T6504] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  108.435986][ T6504] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  108.471398][ T6513] netlink: 64 bytes leftover after parsing attributes in process `syz.1.627'.
[  108.519318][ T6520] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  108.553219][ T6523] set_capacity_and_notify: 2 callbacks suppressed
[  108.553231][ T6523] loop1: detected capacity change from 0 to 512
[  108.613269][ T6523] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  108.631522][ T4330] EXT4-fs (loop1): unmounting filesystem.
[  109.464897][ T4416] usb 1-1: USB disconnect, device number 5
[  109.518830][ T6543] netlink: 36 bytes leftover after parsing attributes in process `syz.1.634'.
[  109.770235][ T6568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  109.787685][ T6568] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  109.849354][ T6582] dns_resolver: Unsupported server list version (0)
[  109.884427][ T6589] binder: 6587:6589 ioctl c0306201 20000180 returned -14
[  109.892546][ T6589] binder: 6587:6589 tried to acquire reference to desc 0, got 1 instead
[  109.894520][ T6589] binder: 6587:6589 ioctl c0306201 20000280 returned -14
[  109.900860][ T6589] binder: 6587:6589 got transaction with invalid fd, 14906
[  109.902208][ T6589] binder: 6589:6587 translate fd array failed
[  109.903331][ T6589] binder: 6587:6589 transaction call to 6587:0 failed 5/29201/-9, size 112-4280 line 3503
[  109.920560][ T3902] binder: undelivered TRANSACTION_ERROR: 29201
[  109.949970][ T6599] loop1: detected capacity change from 0 to 1024
[  109.953066][ T6584] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  109.961734][ T6599] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 2: comm syz.1.650: lblock 2 mapped to illegal pblock 2 (length 1)
[  109.964494][ T6599] __quota_error: 16 callbacks suppressed
[  109.964504][ T6599] Quota error (device loop1): qtree_write_dquot: dquota write failed
[  109.968673][ T6599] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 48: comm syz.1.650: lblock 0 mapped to illegal pblock 48 (length 1)
[  109.971312][ T6599] Quota error (device loop1): v2_write_file_info: Can't write info structure
[  109.972765][ T6599] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.650: Failed to acquire dquot type 0
[  109.978232][ T6599] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Corrupt filesystem
[  109.980075][ T6599] EXT4-fs error (device loop1): ext4_evict_inode:281: inode #11: comm syz.1.650: mark_inode_dirty error
[  110.398322][ T6599] EXT4-fs warning (device loop1): ext4_evict_inode:284: couldn't mark inode dirty (err -117)
[  110.586040][   T39] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1)
[  110.592575][   T39] Quota error (device loop1): remove_tree: Can't read quota data block 1
[  110.594405][   T39] EXT4-fs error (device loop1): ext4_release_dquot:6877: comm kworker/u4:2: Failed to release dquot type 0
[  110.704371][ T6599] EXT4-fs (loop1): 1 orphan inode deleted
[  110.787287][ T6599] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  110.818942][ T6599] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 48: comm syz.1.650: lblock 0 mapped to illegal pblock 48 (length 1)
[  110.849753][ T6599] Quota error (device loop1): v2_write_file_info: Can't write info structure
[  110.938582][ T6610] loop5: detected capacity change from 0 to 2048
[  110.974818][ T4342] Bluetooth: hci0: unexpected event for opcode 0x0c46
[  110.979920][ T6610] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found!
[  110.994913][ T6610] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  111.242328][ T6631] loop5: detected capacity change from 0 to 1024
[  111.256234][ T6631] EXT4-fs: Ignoring removed bh option
[  111.275748][ T6631] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  111.566981][ T6631] EXT4-fs error (device loop5): ext4_map_blocks:747: inode #15: block 3: comm syz.5.663: lblock 3 mapped to illegal pblock 3 (length 3)
[  111.572021][ T6631] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  111.574469][ T6631] EXT4-fs (loop5): This should not happen!! Data will be lost
[  111.574469][ T6631] 
[  111.585209][ T6631] EXT4-fs error (device loop5): ext4_map_blocks:747: inode #15: block 8: comm syz.5.663: lblock 8 mapped to illegal pblock 8 (length 8)
[  111.589457][ T6631] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  111.591637][ T6631] EXT4-fs (loop5): This should not happen!! Data will be lost
[  111.591637][ T6631] 
[  111.607694][ T4330] EXT4-fs (loop1): unmounting filesystem.
[  111.609039][ T4330] EXT4-fs error (device loop1): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0
[  111.611260][ T4330] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Corrupt filesystem
[  111.612941][ T4330] EXT4-fs error (device loop1): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error
[  111.623539][ T5165] EXT4-fs (loop5): unmounting filesystem.
[  111.656014][ T6638] loop5: detected capacity change from 0 to 128
[  111.659210][ T6638] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  111.749723][ T6644] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  111.752666][ T4342] Bluetooth: hci0: unexpected event for opcode 0x0000
[  111.827356][ T4342] Bluetooth: hci4: unexpected cc 0x206e length: 9 > 3
[  112.742010][ T6708] ip_tables: iptables: counters copy to user failed while replacing table
[  112.837988][ T6713] usb usb5: usbfs: process 6713 (syz.5.695) did not claim interface 0 before use
[  112.871838][ T4342] Bluetooth: hci2: unexpected cc 0x206e length: 9 > 3
[  112.873086][ T4342] Bluetooth: hci2: unexpected event for opcode 0x206e
[  112.887621][ T6715] loop1: detected capacity change from 0 to 164
[  112.991725][ T6723] netlink: 'syz.4.701': attribute type 2 has an invalid length.
[  112.993128][ T6723] netlink: 'syz.4.701': attribute type 1 has an invalid length.
[  113.094508][    T7] usb 1-1: new full-speed USB device number 6 using dummy_hcd
[  113.228267][ T6728] loop5: detected capacity change from 0 to 32768
[  113.275628][    T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 4
[  113.279149][    T7] usb 1-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb
[  113.280630][    T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.281975][    T7] usb 1-1: Product: syz
[  113.282872][    T7] usb 1-1: Manufacturer: syz
[  113.283655][    T7] usb 1-1: SerialNumber: syz
[  113.306908][    T7] usb 1-1: config 0 descriptor??
[  113.309975][ T6722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  113.311625][ T6728]  loop5: p1 p9 p11
[  113.312947][ T6722] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  113.319179][ T6722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  113.320921][ T6722] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  113.486420][ T6764] loop3: detected capacity change from 0 to 128
[  113.516965][    T7] usbtouchscreen: probe of 1-1:0.0 failed with error -71
[  113.522479][    T7] usb 1-1: USB disconnect, device number 6
[  113.573059][ T6769] loop1: detected capacity change from 0 to 128
[  113.593751][ T6769] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  113.644051][ T4330] EXT4-fs (loop1): unmounting filesystem.
[  113.742695][ T4342] Bluetooth: hci2: unexpected event for opcode 0x0c38
[  113.766158][ T6784] loop3: detected capacity change from 0 to 256
[  113.788631][ T6784] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001207b, chksum : 0x1e861e4d, utbl_chksum : 0xe619d30d)
[  113.862089][ T4342] Bluetooth: hci1: unexpected cc 0x206e length: 9 > 3
[  113.868190][ T6790] loop3: detected capacity change from 0 to 164
[  113.962290][ T6792] loop5: detected capacity change from 0 to 256
[  113.969044][ T6792] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  114.226689][ T6807] loop0: detected capacity change from 0 to 1024
[  114.243705][ T6807] EXT4-fs: Ignoring removed bh option
[  114.258917][ T6807] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  114.278371][ T4331] EXT4-fs (loop0): unmounting filesystem.
[  114.440007][ T6825] netlink: 20 bytes leftover after parsing attributes in process `syz.0.742'.
[  114.546136][ T6834] FAULT_INJECTION: forcing a failure.
[  114.546136][ T6834] name failslab, interval 1, probability 0, space 0, times 0
[  114.549577][ T6834] CPU: 1 PID: 6834 Comm: syz.3.744 Not tainted syzkaller #0
[  114.550798][ T6834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  114.552591][ T6834] Call trace:
[  114.553194][ T6834]  dump_backtrace+0x1c4/0x1f0
[  114.554070][ T6834]  show_stack+0x2c/0x3c
[  114.554809][ T6834]  __dump_stack+0x30/0x40
[  114.555564][ T6834]  dump_stack_lvl+0xf4/0x15c
[  114.556377][ T6834]  dump_stack+0x1c/0x5c
[  114.557102][ T6834]  should_fail_ex+0x3cc/0x524
[  114.557917][ T6834]  __should_failslab+0xc0/0x11c
[  114.558776][ T6834]  should_failslab+0x10/0x28
[  114.559595][ T6834]  __kmem_cache_alloc_node+0x7c/0x318
[  114.560567][ T6834]  __kmalloc+0xc4/0x180
[  114.561328][ T6834]  io_alloc_page_table+0x80/0x104
[  114.562222][ T6834]  io_rsrc_data_alloc+0xb4/0x3a8
[  114.563127][ T6834]  io_sqe_buffers_register+0x2f0/0x628
[  114.564111][ T6834]  io_register_rsrc+0x2d8/0x328
[  114.564958][ T6834]  __arm64_sys_io_uring_register+0x6d4/0xccc
[  114.566024][ T6834]  invoke_syscall+0x98/0x290
[  114.566825][ T6834]  el0_svc_common+0x13c/0x258
[  114.567657][ T6834]  do_el0_svc+0x5c/0x134
[  114.568409][ T6834]  el0_svc+0x58/0x12c
[  114.569122][ T6834]  el0t_64_sync_handler+0x84/0xf0
[  114.570030][ T6834]  el0t_64_sync+0x18c/0x190
[  114.638787][ T4342] Bluetooth: Wrong link type (-22)
[  114.639963][ T4342] Bluetooth: hci4: link tx timeout
[  114.641119][ T4342] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa
[  114.734344][ T3902] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  114.902427][ T6841] loop5: detected capacity change from 0 to 256
[  114.914289][ T3902] usb 1-1: Using ep0 maxpacket: 32
[  114.917109][ T3902] usb 1-1: unable to get BOS descriptor or descriptor too short
[  114.920030][ T6841] exFAT-fs (loop5): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d)
[  114.920578][ T3902] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  114.924927][ T3902] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1552, setting to 64
[  114.931433][ T3902] usb 1-1: New USB device found, idVendor=0763, idProduct=1031, bcdDevice= 1.08
[  114.933529][ T3902] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.936177][ T3902] usb 1-1: Product: syz
[  114.938093][ T3902] usb 1-1: Manufacturer: syz
[  114.938859][ T3902] usb 1-1: SerialNumber: syz
[  115.019388][ T6847] batman_adv: batadv0: Adding interface: syzkaller0
[  115.021155][ T6847] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  115.026790][ T6847] batman_adv: batadv0: Interface activated: syzkaller0
[  115.100730][ T6846] batman_adv: batadv0: Interface deactivated: syzkaller0
[  115.145412][ T6846] batman_adv: batadv0: Removing interface: syzkaller0
[  115.202559][ T6848] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  115.347061][ T6858] binder: 6857:6858 ioctl c0306201 20000180 returned -14
[  115.350465][ T6858] binder: 6857:6858 got transaction to invalid handle, 1
[  115.352107][ T6858] binder: 6858:6857 cannot find target node
[  115.353249][ T6858] binder: 6857:6858 transaction call to 0:0 failed 9/29201/-22, size 112-4280 line 3062
[  115.355985][ T4929] binder: undelivered TRANSACTION_ERROR: 29201
[  115.387085][ T6860] netlink: 20 bytes leftover after parsing attributes in process `syz.3.755'.
[  115.392253][ T6860] device vlan2 entered promiscuous mode
[  115.393385][ T6860] device dummy0 entered promiscuous mode
[  115.569586][ T6867] loop3: detected capacity change from 0 to 512
[  115.766478][ T4342] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  115.768312][ T4342] Bluetooth: hci0: Injecting HCI hardware error event
[  115.771233][ T4332] Bluetooth: hci0: hardware error 0x00
[  115.806957][ T6875] netlink: 'syz.3.760': attribute type 16 has an invalid length.
[  115.808435][ T6875] netlink: 'syz.3.760': attribute type 17 has an invalid length.
[  115.822664][ T6875] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  115.824706][ T6875] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  115.826225][ T6875] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  115.852215][ T6877] loop5: detected capacity change from 0 to 736
[  115.964319][ T6875] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  115.976978][ T6885] loop1: detected capacity change from 0 to 1024
[  116.060275][ T6887] netlink: 20 bytes leftover after parsing attributes in process `syz.4.766'.
[  116.063986][ T6887] device vlan3 entered promiscuous mode
[  116.068635][ T6887] device bridge0 entered promiscuous mode
[  116.089591][ T6889] loop5: detected capacity change from 0 to 2048
[  116.121755][ T6889] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  116.132948][ T6892] binder: 6891:6892 ioctl c0306201 20000180 returned -14
[  116.139011][ T6892] binder: 6891:6892 got transaction to invalid handle, 1
[  116.140640][ T6892] binder: 6892:6891 cannot find target node
[  116.141830][ T6892] binder: 6891:6892 transaction call to 0:0 failed 13/29201/-22, size 112-4280 line 3062
[  116.157594][ T4416] binder: undelivered TRANSACTION_ERROR: 29201
[  116.684612][ T6923] netlink: 20 bytes leftover after parsing attributes in process `syz.4.778'.
[  116.714183][ T4342] Bluetooth: hci4: command 0x0406 tx timeout
[  116.740693][ T6927] binder: 6926:6927 ioctl c0306201 20000180 returned -14
[  116.747920][ T6927] binder: 6926:6927 ioctl c0306201 20000280 returned -14
[  116.751327][ T6927] binder: 6926:6927 got transaction to invalid handle, 1
[  116.758736][ T6927] binder: 6927:6926 cannot find target node
[  116.761154][ T6927] binder: 6926:6927 transaction call to 0:0 failed 16/29201/-22, size 112-4280 line 3062
[  116.766792][ T4411] binder: undelivered TRANSACTION_ERROR: 29201
[  116.839488][ T6941] netlink: 4 bytes leftover after parsing attributes in process `syz.4.784'.
[  117.493095][ T4347] Bluetooth: hci0: unexpected cc 0x206e length: 9 > 3
[  117.494743][ T4347] Bluetooth: hci0: unexpected event for opcode 0x206e
[  117.519226][ T3902] snd-usb-audio: probe of 1-1:1.0 failed with error -2
[  117.543101][ T3902] usb 1-1: USB disconnect, device number 7
[  117.769808][ T4755] udevd[4755]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  117.878634][ T6984] binder: 6983:6984 ioctl c0306201 20000180 returned -14
[  117.881801][ T6984] binder: 6983:6984 ioctl c0306201 20000280 returned -14
[  117.883630][ T6984] binder: 6983:6984 got transaction to invalid handle, 1
[  117.885610][ T6984] binder: 6984:6983 cannot find target node
[  118.084081][ T4332] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  125.913433][ T2065] ieee802154 phy0 wpan0: encryption failed: -22
[  125.914632][ T2065] ieee802154 phy1 wpan1: encryption failed: -22
[  128.003311][ T6989] netlink: 4 bytes leftover after parsing attributes in process `syz.1.798'.
[  128.049189][ T7014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  128.055431][ T7014] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  128.096150][ T7017] set_capacity_and_notify: 3 callbacks suppressed
[  128.096159][ T7017] loop5: detected capacity change from 0 to 1024
[  128.097112][ T7020] netlink: 8 bytes leftover after parsing attributes in process `syz.0.807'.
[  128.124064][ T7022] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  128.597116][ T7047] netlink: 4 bytes leftover after parsing attributes in process `syz.3.813'.
[  128.752658][ T4929] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  128.853218][   T27] audit: type=1326 audit(384.831:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7052 comm="syz.3.816" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f37a228 code=0x7ffc0000
[  128.857643][   T27] audit: type=1326 audit(384.841:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7052 comm="syz.3.816" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f37a228 code=0x7ffc0000
[  128.863237][   T27] audit: type=1326 audit(384.851:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7052 comm="syz.3.816" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f37a228 code=0x7ffc0000
[  128.867818][   T27] audit: type=1326 audit(384.851:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7052 comm="syz.3.816" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f37a228 code=0x7ffc0000
[  128.872325][   T27] audit: type=1326 audit(384.851:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7052 comm="syz.3.816" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff7f37a228 code=0x7ffc0000
[  128.877290][   T27] audit: type=1326 audit(384.851:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7052 comm="syz.3.816" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f37a228 code=0x7ffc0000
[  128.881557][   T27] audit: type=1326 audit(384.851:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7052 comm="syz.3.816" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f37a228 code=0x7ffc0000
[  128.886254][   T27] audit: type=1326 audit(384.851:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7052 comm="syz.3.816" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f37a228 code=0x7ffc0000
[  128.891162][   T27] audit: type=1326 audit(384.851:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7052 comm="syz.3.816" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f37a228 code=0x7ffc0000
[  128.896711][   T27] audit: type=1326 audit(384.851:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7052 comm="syz.3.816" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=172 compat=0 ip=0xffff7f37a228 code=0x7ffc0000
[  128.942764][ T4929] usb 1-1: Using ep0 maxpacket: 32
[  128.967318][ T4929] usb 1-1: unable to get BOS descriptor or descriptor too short
[  128.977469][ T4929] usb 1-1: config 7 has an invalid interface number: 55 but max is 1
[  128.979154][ T4929] usb 1-1: config 7 has an invalid interface number: 68 but max is 1
[  128.984269][ T4929] usb 1-1: config 7 has no interface number 0
[  128.986720][ T4929] usb 1-1: config 7 has no interface number 1
[  128.992362][ T4929] usb 1-1: config 7 interface 68 altsetting 127 endpoint 0xD has invalid maxpacket 512, setting to 64
[  129.000470][ T4929] usb 1-1: config 7 interface 55 has no altsetting 0
[  129.004036][ T4929] usb 1-1: config 7 interface 68 has no altsetting 0
[  129.008538][ T4929] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice=cd.48
[  129.011792][ T4929] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.015946][ T4929] usb 1-1: Product: syz
[  129.016881][ T4929] usb 1-1: Manufacturer: syz
[  129.018505][ T4929] usb 1-1: SerialNumber: syz
[  129.184441][ T7078] netlink: 4 bytes leftover after parsing attributes in process `syz.5.825'.
[  129.246449][ T4929] usb 1-1: USB disconnect, device number 8
[  129.272239][ T7084] loop3: detected capacity change from 0 to 1024
[  129.348176][ T4332] Bluetooth: hci4: unknown advertising packet type: 0x07
[  129.348232][ T4332] Bluetooth: hci4: unknown advertising packet type: 0x8a
[  129.349662][ T4332] Bluetooth: hci4: unknown advertising packet type: 0x7a
[  130.183241][ T7113] loop5: detected capacity change from 0 to 256
[  130.192734][   T22] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  130.201969][ T7113] ip_tables: iptables: counters copy to user failed while replacing table
[  130.205859][ T7113] ip_tables: iptables: counters copy to user failed while replacing table
[  130.240576][ T7118] loop5: detected capacity change from 0 to 512
[  130.365476][ T7123] netlink: 4 bytes leftover after parsing attributes in process `syz.3.841'.
[  130.473888][ T4332] Bluetooth: hci3: unexpected event 0x1c length: 7 > 5
[  130.667204][   T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  130.670204][   T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  130.671807][   T22] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  130.674850][   T22] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  130.676418][   T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  130.682584][   T22] usb 1-1: config 0 descriptor??
[  131.198926][ T7142] loop1: detected capacity change from 0 to 1024
[  131.220292][ T7142] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended
[  131.241339][ T7142] EXT4-fs (loop1): Errors on filesystem, clearing orphan list.
[  131.244002][ T7142] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  131.270310][ T4330] EXT4-fs (loop1): unmounting filesystem.
[  131.313962][ T7146] loop1: detected capacity change from 0 to 128
[  131.347222][   T22] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[  131.348867][   T22] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[  131.350322][   T22] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[  131.351670][   T22] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[  131.357357][   T22] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[  131.359623][   T22] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[  131.361012][   T22] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[  131.362740][   T22] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[  131.364159][   T22] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[  131.365658][   T22] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[  131.367382][   T22] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving
[  131.371055][   T22] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  131.456262][ T4330] FAT-fs (loop1): error, invalid access to FAT (entry 0xffff0000)
[  131.457905][ T4330] FAT-fs (loop1): Filesystem has been set read-only
[  131.463034][ T4330] FAT-fs (loop1): error, corrupted directory (invalid entries)
[  131.464856][ T4330] FAT-fs (loop1): error, corrupted directory (invalid entries)
[  131.670275][ T7152] netlink: 4 bytes leftover after parsing attributes in process `syz.4.853'.
[  131.690215][ T7158] netlink: 4 bytes leftover after parsing attributes in process `syz.5.854'.
[  131.810107][ T4347] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  131.825426][ T4347] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  131.827985][ T4347] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  131.830443][ T4347] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  131.832054][ T4347] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  131.835364][ T4347] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  132.233729][ T7163] rxe_eth0 speed is unknown, defaulting to 1000
[  132.280245][ T7183] loop3: detected capacity change from 0 to 256
[  132.301724][ T7183] exfat: Deprecated parameter 'namecase'
[  132.308979][ T7183] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  132.319341][ T7183] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d)
[  132.388143][ T7192] loop5: detected capacity change from 0 to 1024
[  132.388935][ T7163] chnl_net:caif_netlink_parms(): no params data found
[  132.525429][ T7163] bridge0: port 1(bridge_slave_0) entered blocking state
[  132.529580][ T7163] bridge0: port 1(bridge_slave_0) entered disabled state
[  132.531415][ T7163] device bridge_slave_0 entered promiscuous mode
[  132.895968][ T4332] Bluetooth: hci4: unexpected event 0x1c length: 7 > 5
[  133.122258][  T115] usb 1-1: reset high-speed USB device number 9 using dummy_hcd
[  133.163706][ T7163] bridge0: port 2(bridge_slave_1) entered blocking state
[  133.165286][ T7163] bridge0: port 2(bridge_slave_1) entered disabled state
[  133.167116][ T7163] device bridge_slave_1 entered promiscuous mode
[  133.177100][ T7163] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  133.180310][ T7163] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  133.198624][ T7207] loop3: detected capacity change from 0 to 512
[  133.209742][ T7163] team0: Port device team_slave_0 added
[  133.249932][ T7163] team0: Port device team_slave_1 added
[  133.256214][ T7163] batman_adv: batadv0: Adding interface: batadv_slave_0
[  133.257417][ T7163] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  133.264767][ T7163] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  133.266860][ T7207] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  133.267758][ T7163] batman_adv: batadv0: Adding interface: batadv_slave_1
[  133.270563][ T7163] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  133.276546][ T7163] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  133.277844][ T7207] EXT4-fs (loop3): 1 truncate cleaned up
[  133.279466][ T7207] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  133.306190][ T4329] EXT4-fs (loop3): unmounting filesystem.
[  133.343650][ T7163] device hsr_slave_0 entered promiscuous mode
[  133.382790][ T7163] device hsr_slave_1 entered promiscuous mode
[  133.422036][ T7163] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  133.423414][ T7163] Cannot create hsr debugfs directory
[  133.460983][ T7225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  133.462773][ T7225] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  133.922555][ T4332] Bluetooth: hci2: command 0x0409 tx timeout
[  133.968141][   T22] usb 1-1: USB disconnect, device number 9
[  135.992544][ T4332] Bluetooth: hci2: command 0x041b tx timeout
[  138.071615][ T4332] Bluetooth: hci2: command 0x040f tx timeout
[  140.151280][ T4332] Bluetooth: hci2: command 0x0419 tx timeout
[  144.487947][ T7229] netlink: 204 bytes leftover after parsing attributes in process `syz.0.874'.
[  144.534278][ T7268] loop0: detected capacity change from 0 to 512
[  144.574620][ T7163] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  144.583611][ T7274] loop5: detected capacity change from 0 to 512
[  144.586627][ T7274] ext4: Unknown parameter 'rootcontext'
[  144.602435][ T7163] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  144.674477][ T7163] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  144.996110][ T7163] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  145.009562][ T7282] ip_tables: iptables: counters copy to user failed while replacing table
[  145.023770][ T7287] loop5: detected capacity change from 0 to 1024
[  145.150636][ T7163] 8021q: adding VLAN 0 to HW filter on device bond0
[  145.439907][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  145.444129][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  145.451308][ T7163] 8021q: adding VLAN 0 to HW filter on device team0
[  145.460758][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  145.462738][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  145.464459][ T1588] bridge0: port 1(bridge_slave_0) entered blocking state
[  145.465767][ T1588] bridge0: port 1(bridge_slave_0) entered forwarding state
[  145.467540][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  145.475477][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  145.477542][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  145.479445][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  145.480891][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  145.484727][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  145.489122][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  145.503141][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  145.508834][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  145.516243][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  145.523696][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  145.525990][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  145.529743][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  145.535253][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  145.539841][ T7163] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  145.542567][ T7163] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  145.544317][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  145.546103][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  145.626621][ T7163] 8021q: adding VLAN 0 to HW filter on device batadv0
[  145.632410][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  145.634217][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  146.475648][ T7326] loop3: detected capacity change from 0 to 128
[  146.521463][ T7331] loop5: detected capacity change from 0 to 128
[  146.535719][ T7331] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  146.537965][ T7326] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  146.888962][ T5165] EXT4-fs (loop5): unmounting filesystem.
[  146.928551][ T4329] EXT4-fs (loop3): unmounting filesystem.
[  146.959084][ T7163] device veth0_vlan entered promiscuous mode
[  146.968484][ T7163] device veth1_vlan entered promiscuous mode
[  146.984418][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  146.996123][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  147.008976][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  147.015210][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  147.021529][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  147.026018][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  147.027787][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  147.113614][ T7351] Bluetooth: MGMT ver 1.22
[  147.370162][ T7351] netlink: 'syz.5.904': attribute type 16 has an invalid length.
[  147.371930][ T7351] netlink: 'syz.5.904': attribute type 17 has an invalid length.
[  147.386278][ T7351] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  147.388479][ T7351] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  147.389945][ T7351] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  147.408903][ T7355] ip_tables: iptables: counters copy to user failed while replacing table
[  147.420373][ T7351] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  147.449498][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  147.452429][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  147.452491][ T7357] loop0: detected capacity change from 0 to 128
[  147.454355][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  147.460774][ T7163] device veth0_macvtap entered promiscuous mode
[  147.475229][ T7163] device veth1_macvtap entered promiscuous mode
[  147.488580][ T7357] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  147.492243][ T7163] batman_adv: batadv0: Interface activated: batadv_slave_0
[  147.494025][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  147.495915][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  147.497828][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  147.499762][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  147.508320][ T7163] batman_adv: batadv0: Interface activated: batadv_slave_1
[  147.511698][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  147.516451][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  147.518726][ T7357] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1)
[  147.520022][ T7163] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  147.522678][ T7163] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  147.524414][ T7163] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  147.524628][ T7357] FAT-fs (loop0): Filesystem has been set read-only
[  147.526055][ T7163] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  147.557781][ T4331] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  147.577996][ T5022] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  147.583095][ T5022] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  147.587421][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  147.597525][ T1667] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  147.599205][ T1667] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  147.602106][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  147.647380][ T7363] loop0: detected capacity change from 0 to 8
[  147.710869][ T7370] netlink: 12 bytes leftover after parsing attributes in process `syz.0.913'.
[  147.833684][ T7377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  147.836740][ T7377] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  147.844691][ T7377] loop5: detected capacity change from 0 to 512
[  147.860472][ T7377] EXT4-fs: Ignoring removed i_version option
[  147.927741][ T7377] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  147.929847][   T27] kauditd_printk_skb: 34 callbacks suppressed
[  147.929857][   T27] audit: type=1326 audit(403.913:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7381 comm="syz.0.920" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1b7a228 code=0x7ffc0000
[  147.935176][   T27] audit: type=1326 audit(403.913:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7381 comm="syz.0.920" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1b7a228 code=0x7ffc0000
[  147.943320][   T27] audit: type=1326 audit(403.923:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7381 comm="syz.0.920" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1b7a228 code=0x7ffc0000
[  147.947052][   T27] audit: type=1326 audit(403.923:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7381 comm="syz.0.920" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1b7a228 code=0x7ffc0000
[  147.948294][ T7389] netlink: 8 bytes leftover after parsing attributes in process `syz.0.921'.
[  147.955643][ T7377] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  147.958872][   T27] audit: type=1326 audit(403.923:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7381 comm="syz.0.920" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=167 compat=0 ip=0xffffa1b7a228 code=0x7ffc0000
[  147.967094][   T27] audit: type=1326 audit(403.923:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7381 comm="/selinux/avc/ca" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1b7a228 code=0x7ffc0000
[  147.972049][   T27] audit: type=1326 audit(403.923:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7381 comm="/selinux/avc/ca" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1b7a228 code=0x7ffc0000
[  147.976697][   T27] audit: type=1326 audit(403.923:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7381 comm="syz.0.920" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1b7a228 code=0x7ffc0000
[  147.976755][ T7391] loop3: detected capacity change from 0 to 2048
[  147.981659][   T27] audit: type=1326 audit(403.923:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7381 comm="syz.0.920" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1b7a228 code=0x7ffc0000
[  147.986511][   T27] audit: type=1326 audit(403.923:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7381 comm="/selinux/avc/ca" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=446 compat=0 ip=0xffffa1b7a228 code=0x7ffc0000
[  148.004813][ T7391] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  148.059764][ T7398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  148.065145][ T7400] loop0: detected capacity change from 0 to 512
[  148.066130][ T7398] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  148.090427][ T7400] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  148.101086][ T7400] EXT4-fs (loop0): re-mounted. Quota mode: writeback.
[  148.115134][ T4331] EXT4-fs (loop0): unmounting filesystem.
[  148.482319][ T7411] netlink: 'syz.0.926': attribute type 16 has an invalid length.
[  148.483872][ T7411] netlink: 'syz.0.926': attribute type 17 has an invalid length.
[  148.503885][ T7411] device sit0 left promiscuous mode
[  148.515562][ T7411] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  148.517323][ T7411] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  148.518760][ T7411] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  148.522277][ T7411] 8021q: adding VLAN 0 to HW filter on device team0
[  148.533601][ T7422] netlink: 12 bytes leftover after parsing attributes in process `syz.4.930'.
[  148.570267][ T7411] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  148.708795][ T5165] EXT4-fs (loop5): unmounting filesystem.
[  148.807535][ T7433] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  148.809195][ T7433] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[  148.811419][ T7433] System zones: 0-1, 15-15, 18-18, 34-34
[  148.813052][ T7433] EXT4-fs (loop3): orphan cleanup on readonly fs
[  148.814808][ T7433] EXT4-fs warning (device loop3): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  148.817717][ T7433] EXT4-fs (loop3): Cannot turn on quotas: error -117
[  148.819260][ T7433] EXT4-fs error (device loop3): ext4_orphan_get:1435: comm syz.3.935: bad orphan inode 16
[  148.822525][ T7433] ext4_test_bit(bit=15, block=18) = 1
[  148.823775][ T7433] is_bad_inode(inode)=0
[  148.824539][ T7433] NEXT_ORPHAN(inode)=0
[  148.825435][ T7433] max_ino=32
[  148.826035][ T7433] i_nlink=2
[  148.826830][ T7433] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  149.148840][ T7433] fscrypt (loop3, inode 16): Error -61 getting encryption context
[  149.164917][ T4329] EXT4-fs (loop3): unmounting filesystem.
[  149.190331][ T4347] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  149.210217][ T7443] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  149.234463][ T7443] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  149.264719][ T7455] netlink: 12 bytes leftover after parsing attributes in process `syz.0.941'.
[  149.274795][ T7456] netlink: 4 bytes leftover after parsing attributes in process `syz.3.940'.
[  149.360096][ T4347] Bluetooth: hci2: command 0x0401 tx timeout
[  149.373123][ T7265] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  149.406353][ T7458] input: syz0 as /devices/virtual/input/input3
[  150.132319][ T7163] EXT4-fs (loop6): unmounting filesystem.
[  150.283926][ T7498] ip_tables: iptables: counters copy to user failed while replacing table
[  150.365359][ T7489] set_capacity_and_notify: 4 callbacks suppressed
[  150.365369][ T7489] loop3: detected capacity change from 0 to 128
[  150.375785][ T7489] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  150.388175][ T7489] FAT-fs (loop3): error, clusters badly computed (3 != 1)
[  150.389549][ T7489] FAT-fs (loop3): Filesystem has been set read-only
[  150.989692][ T4329] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  151.038626][ T7509] netlink: 12 bytes leftover after parsing attributes in process `syz.0.959'.
[  151.149542][ T7524] loop5: detected capacity change from 0 to 16
[  151.157146][ T7524] erofs: (device loop5): mounted with root inode @ nid 36.
[  151.161433][ T7524] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  151.169156][ T7524] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -59 in[61, 4035] out[1851]
[  151.175281][ T7524] erofs: (device loop5): z_erofs_read_folio: failed to read, err [-117]
[  151.178918][ T7524] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  151.182055][ T7524] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -59 in[61, 4035] out[1851]
[  151.184265][ T7524] erofs: (device loop5): z_erofs_read_folio: failed to read, err [-117]
[  151.278059][ T7537] input: syz0 as /devices/virtual/input/input4
[  151.295161][ T7539] loop6: detected capacity change from 0 to 512
[  151.322879][ T7539] loop6: detected capacity change from 0 to 1024
[  151.328782][ T7539] EXT4-fs: Ignoring removed bh option
[  151.364659][ T7539] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  151.392779][ T7550] netlink: 20 bytes leftover after parsing attributes in process `syz.3.972'.
[  151.473287][ T7556] loop5: detected capacity change from 0 to 2048
[  151.543414][ T4332] Bluetooth: hci2: unexpected event 0x1c length: 7 > 5
[  151.784459][ T7561] netlink: 28 bytes leftover after parsing attributes in process `syz.4.975'.
[  151.788997][ T7556] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  151.809232][ T5165] EXT4-fs (loop5): unmounting filesystem.
[  151.856784][ T7567] loop5: detected capacity change from 0 to 4096
[  151.870251][ T7567] EXT4-fs: Ignoring removed orlov option
[  151.874208][ T7567] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  151.903106][ T5165] EXT4-fs (loop5): unmounting filesystem.
[  151.922209][ T7573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  151.928975][ T7573] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  152.042193][ T7579] netlink: 20 bytes leftover after parsing attributes in process `syz.4.983'.
[  152.143307][ T7583] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  152.469427][ T7595] loop5: detected capacity change from 0 to 128
[  152.482880][ T7595] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  152.497632][ T7595] fscrypt (loop5, inode 12): Can't use IV_INO_LBLK_64 policy on filesystem 'loop5' because it doesn't have stable inode numbers
[  152.508214][ T5165] EXT4-fs (loop5): unmounting filesystem.
[  152.651892][ T7163] EXT4-fs (loop6): unmounting filesystem.
[  152.742198][ T7604] netlink: 20 bytes leftover after parsing attributes in process `syz.0.994'.
[  153.207352][ T7613] loop5: detected capacity change from 0 to 4096
[  153.439665][ T7613] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  153.606482][ T4347] Bluetooth: hci1: command 0x0406 tx timeout
[  153.657269][ T5165] EXT4-fs (loop5): unmounting filesystem.
[  153.748341][ T7639] loop5: detected capacity change from 0 to 2048
[  153.767461][ T7639] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  153.873055][ T7651] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1007'.
[  153.876751][ T7651] device vlan2 entered promiscuous mode
[  153.877995][ T7651] device dummy0 entered promiscuous mode
[  154.606912][ T5165] EXT4-fs (loop5): unmounting filesystem.
[  154.658567][ T7675] loop3: detected capacity change from 0 to 8
[  154.680530][ T7675] SQUASHFS error: Failed to read block 0x260685: -5
[  154.683703][ T7675] SQUASHFS error: Unable to read metadata cache entry [260685]
[  154.687401][ T7675] SQUASHFS error: Unable to read directory block [260685:0]
[  154.800256][ T7691] FAT-fs (loop0): bogus logical sector size 65535
[  154.801458][ T7691] FAT-fs (loop0): Can't find a valid FAT filesystem
[  155.205764][ T7265] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  155.347161][ T7718] input: syz0 as /devices/virtual/input/input5
[  155.498159][ T7733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  155.504954][ T7733] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  155.558569][ T7740] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  155.667953][ T7745] set_capacity_and_notify: 2 callbacks suppressed
[  155.667985][ T7745] loop0: detected capacity change from 0 to 1024
[  156.612266][ T4332] Bluetooth: hci1: unexpected event 0x1c length: 7 > 5
[  156.853229][ T7783] loop5: detected capacity change from 0 to 164
[  156.917024][ T7785] loop5: detected capacity change from 0 to 512
[  156.945102][ T7785] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2
[  156.947514][ T7785] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.1057: invalid indirect mapped block 256 (level 1)
[  156.955165][ T7785] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.1057: invalid indirect mapped block 2683928664 (level 1)
[  156.958553][ T7785] EXT4-fs (loop5): 1 truncate cleaned up
[  156.963071][ T7785] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  156.989236][   T22] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  157.169169][   T22] usb 1-1: Using ep0 maxpacket: 8
[  157.172521][   T22] usb 1-1: unable to get BOS descriptor or descriptor too short
[  157.174859][   T22] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 512, setting to 64
[  157.176729][   T22] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x80, skipping
[  157.178455][   T22] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 32
[  157.180381][   T22] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 512, setting to 64
[  157.184038][   T22] usb 1-1: New USB device found, idVendor=0499, idProduct=104e, bcdDevice= 0.40
[  157.185548][   T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  157.186863][   T22] usb 1-1: Product: syz
[  157.187584][   T22] usb 1-1: Manufacturer: syz
[  157.188341][   T22] usb 1-1: SerialNumber: syz
[  157.191635][ T7775] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  157.398576][   T22] usb 1-1: MIDIStreaming interface descriptor not found
[  157.405879][   T22] usb 1-1: USB disconnect, device number 10
[  157.620516][ T7805] udevd[7805]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  158.064530][ T5165] EXT4-fs (loop5): unmounting filesystem.
[  159.291280][ T7858] loop5: detected capacity change from 0 to 512
[  159.509109][ T4332] Bluetooth: hci3: unexpected event 0x1c length: 7 > 5
[  159.818049][ T7851] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  159.837559][ T7863] capability: warning: `syz.0.1082' uses deprecated v2 capabilities in a way that may be insecure
[  159.978888][ T7871] loop0: detected capacity change from 0 to 128
[  160.000575][ T7871] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  160.049257][ T7875] fuse: Bad value for 'fd'
[  160.080213][   T27] kauditd_printk_skb: 5 callbacks suppressed
[  160.080225][   T27] audit: type=1326 audit(417.072:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7876 comm="syz.4.1088" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa877a228 code=0x7ffc0000
[  160.086488][   T27] audit: type=1326 audit(417.072:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7876 comm="syz.4.1088" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa877a228 code=0x7ffc0000
[  160.094616][   T27] audit: type=1326 audit(417.072:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7876 comm="syz.4.1088" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa877a228 code=0x7ffc0000
[  160.099694][   T27] audit: type=1326 audit(417.072:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7876 comm="syz.4.1088" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa877a228 code=0x7ffc0000
[  160.104371][   T27] audit: type=1326 audit(417.072:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7876 comm="syz.4.1088" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=146 compat=0 ip=0xffffa877a228 code=0x7ffc0000
[  160.111374][   T27] audit: type=1326 audit(417.072:273): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=7876 comm="syz.4.1088" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa877a228 code=0x7ffc0000
[  160.116211][   T27] audit: type=1326 audit(417.072:274): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=7876 comm="syz.4.1088" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa877a228 code=0x7ffc0000
[  160.122763][   T27] audit: type=1326 audit(417.072:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7876 comm="syz.4.1088" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa877a228 code=0x7ffc0000
[  160.127070][   T27] audit: type=1326 audit(417.072:276): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=7876 comm="syz.4.1088" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa877a228 code=0x7ffc0000
[  160.131784][   T27] audit: type=1326 audit(417.072:277): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=7876 comm="syz.4.1088" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa877a228 code=0x7ffc0000
[  160.687823][ T4331] EXT4-fs (loop0): unmounting filesystem.
[  161.137227][ T7910] device syzkaller0 entered promiscuous mode
[  161.145606][ T7916] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1102'.
[  161.148618][ T7910] tipc: Started in network mode
[  161.149911][ T7910] tipc: Node identity a6abc498445d, cluster identity 4711
[  161.152696][ T7910] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  161.154656][ T7909] tipc: Resetting bearer <eth:syzkaller0>
[  161.188354][ T7918] loop6: detected capacity change from 0 to 512
[  161.191212][ T7909] tipc: Disabling bearer <eth:syzkaller0>
[  161.222288][ T7922] loop5: detected capacity change from 0 to 1024
[  161.231737][ T7265] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  161.254938][ T7918] loop6: detected capacity change from 0 to 512
[  161.264905][ T7918] ext4: Unknown parameter 'seclabel'
[  161.288830][ T7918] loop6: detected capacity change from 0 to 1024
[  161.300175][ T7918] EXT4-fs: Ignoring removed bh option
[  161.338219][ T7932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  161.342841][ T7928] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1108'.
[  161.345327][ T7918] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  161.393194][ T7932] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  161.519470][ T4332] Bluetooth: hci2: unexpected event 0x1c length: 7 > 5
[  161.828017][ T7945] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1114'.
[  161.834739][ T7945] 8021q: VLANs not supported on vcan0
[  161.912833][ T7953] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  162.041806][ T7967] netlink: 'syz.5.1121': attribute type 3 has an invalid length.
[  162.043468][ T7967] netlink: 'syz.5.1121': attribute type 3 has an invalid length.
[  162.140132][ T7973] loop5: detected capacity change from 0 to 1024
[  162.146759][ T7973] EXT4-fs: Ignoring removed orlov option
[  162.172143][ T7978] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1125'.
[  162.175015][ T7973] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  162.211740][ T5165] EXT4-fs (loop5): unmounting filesystem.
[  162.274668][ T7983] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1127'.
[  162.283061][ T7983] device vlan2 entered promiscuous mode
[  162.284323][ T7983] device bond0 entered promiscuous mode
[  162.315872][ T7985] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  162.546562][ T7163] EXT4-fs (loop6): unmounting filesystem.
[  162.608437][ T8001] loop0: detected capacity change from 0 to 1024
[  162.633711][ T8003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  162.635698][ T8003] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  162.803291][ T8006] loop5: detected capacity change from 0 to 512
[  162.812261][ T8006] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  162.821604][ T8006] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  162.935036][ T8013] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1138'.
[  162.941547][ T8012] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1139'.
[  163.221832][ T8012] device vlan3 entered promiscuous mode
[  163.223186][ T8012] device bridge0 entered promiscuous mode
[  163.277791][ T8017] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  163.528456][ T4332] Bluetooth: hci1: unexpected event 0x1c length: 7 > 5
[  163.801959][ T5165] EXT4-fs (loop5): unmounting filesystem.
[  163.810471][ T8032] loop0: detected capacity change from 0 to 512
[  164.016152][ T8048] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1152'.
[  175.041897][ T8062] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  175.078786][ T8079] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1163'.
[  175.151355][ T8087] loop0: detected capacity change from 0 to 512
[  175.158728][ T8089] loop5: detected capacity change from 0 to 512
[  175.180155][ T8089] ext3: Unknown parameter 'noacl'
[  175.197617][ T8087] loop0: detected capacity change from 0 to 1024
[  175.212795][ T8087] EXT4-fs: Ignoring removed bh option
[  175.222042][ T8091] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  175.332969][ T8087] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  175.351769][ T8101] loop6: detected capacity change from 0 to 512
[  175.355932][ T8101] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  175.378599][ T8101] EXT4-fs error (device loop6): ext4_orphan_get:1435: comm syz.6.1170: bad orphan inode 11
[  175.381895][ T8101] EXT4-fs (loop6): Remounting filesystem read-only
[  175.383163][ T8101] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  175.393295][ T8101] EXT4-fs error (device loop6): __ext4_new_inode:1083: comm syz.6.1170: reserved inode found cleared - inode=18
[  176.729308][ T8101] EXT4-fs (loop6): Remounting filesystem read-only
[  176.750800][ T7163] EXT4-fs (loop6): unmounting filesystem.
[  176.835623][ T8119] binder: 8118:8119 tried to acquire reference to desc 0, got 1 instead
[  176.839557][ T8119] binder: 8118:8119 got transaction with invalid parent offset or type
[  176.840988][ T8119] binder_debug: 2 callbacks suppressed
[  176.840994][ T8119] binder: 8119:8118 failed to fixup parent
[  176.844817][ T8119] binder: 8118:8119 transaction async to 8118:0 failed 24/29201/-22, size 88-24 line 3557
[  176.846932][ T7204] binder: undelivered TRANSACTION_ERROR: 29201
[  176.890764][ T8126] loop5: detected capacity change from 0 to 512
[  176.893973][ T8126] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  176.897236][ T8128] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  176.922755][ T8126] EXT4-fs (loop5): 1 truncate cleaned up
[  176.923874][ T8126] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  176.927871][ T8126] EXT4-fs (loop5): shut down requested (1)
[  176.986639][ T8133] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1180'.
[  176.996719][ T5165] EXT4-fs (loop5): unmounting filesystem.
[  177.001986][ T8136] loop6: detected capacity change from 0 to 512
[  177.046682][ T4332] Bluetooth: hci2: unexpected event for opcode 0x1804
[  177.047077][ T8137] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  177.051197][ T8139] loop5: detected capacity change from 0 to 256
[  177.052819][ T8139] FAT-fs (loop5): Unrecognized mount option "suortname=winnt" or missing value
[  177.947958][ T4331] EXT4-fs (loop0): unmounting filesystem.
[  178.042812][ T8159] loop0: detected capacity change from 0 to 2048
[  178.059246][ T8159] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  178.061357][ T8159] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[  178.064024][ T8159] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  178.116828][ T8161] device syzkaller0 entered promiscuous mode
[  178.127264][ T8161] tipc: Started in network mode
[  178.128156][ T8161] tipc: Node identity 42c1a56abd28, cluster identity 4711
[  178.135594][ T8161] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  178.160000][ T8160] tipc: Resetting bearer <eth:syzkaller0>
[  178.239342][ T8160] tipc: Disabling bearer <eth:syzkaller0>
[  178.360691][ T8189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  178.363422][ T8189] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  178.459266][ T8199] binder: 8198:8199 ioctl c0306201 20000180 returned -14
[  178.473500][ T8199] binder: 8198:8199 ioctl c0306201 20000280 returned -14
[  178.475049][ T8199] binder: 8198:8199 got transaction to invalid handle, 1
[  178.476574][ T8199] binder: 8199:8198 cannot find target node
[  178.479496][ T8199] binder: 8198:8199 transaction call to 0:0 failed 27/29201/-22, size 112-4280 line 3062
[  178.481877][ T4336] binder: undelivered TRANSACTION_ERROR: 29201
[  178.519770][ T8205] device syzkaller0 entered promiscuous mode
[  178.524651][ T8205] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  178.532368][ T8204] tipc: Resetting bearer <eth:syzkaller0>
[  178.600435][ T8204] tipc: Disabling bearer <eth:syzkaller0>
[  179.004964][ T8239] binder: 8238:8239 ioctl c0306201 20000180 returned -14
[  179.007285][ T8239] binder: 8238:8239 ioctl c0306201 20000280 returned -14
[  179.008889][ T8239] binder: 8238:8239 got transaction to invalid handle, 1
[  179.011511][ T8239] binder: 8239:8238 cannot find target node
[  179.013773][ T8239] binder: 8238:8239 transaction call to 0:0 failed 30/29201/-22, size 112-4280 line 3062
[  179.018115][   T14] binder: undelivered TRANSACTION_ERROR: 29201
[  179.044566][   T27] kauditd_printk_skb: 9 callbacks suppressed
[  179.044578][   T27] audit: type=1326 audit(436.032:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8242 comm="syz.0.1222" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1b7a228 code=0x7ffc0000
[  179.051431][   T27] audit: type=1326 audit(436.042:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8242 comm="syz.0.1222" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1b7a228 code=0x7ffc0000
[  179.060718][   T27] audit: type=1326 audit(436.042:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8242 comm="syz.0.1222" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1b7a228 code=0x7ffc0000
[  179.070822][   T27] audit: type=1326 audit(436.042:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8242 comm="syz.0.1222" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1b7a228 code=0x7ffc0000
[  179.080219][   T27] audit: type=1326 audit(436.042:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8242 comm="syz.0.1222" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=215 compat=0 ip=0xffffa1b7a228 code=0x7ffc0000
[  179.087885][   T27] audit: type=1326 audit(436.042:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8242 comm="syz.0.1222" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1b7a228 code=0x7ffc0000
[  179.098014][   T27] audit: type=1326 audit(436.042:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8242 comm="syz.0.1222" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1b7a228 code=0x7ffc0000
[  179.109389][   T27] audit: type=1326 audit(436.042:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8242 comm="syz.0.1222" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1b7a228 code=0x7ffc0000
[  179.115821][   T27] audit: type=1326 audit(436.042:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8242 comm="syz.0.1222" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1b7a228 code=0x7ffc0000
[  179.122164][   T27] audit: type=1326 audit(436.042:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8242 comm="syz.0.1222" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffffa1b7a228 code=0x7ffc0000
[  179.134673][ T8252] loop0: detected capacity change from 0 to 256
[  179.149694][ T8252] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbf4f98ab, utbl_chksum : 0xe619d30d)
[  179.268985][ T8266] binder: 8265:8266 ioctl c0306201 20000180 returned -14
[  179.271353][ T8266] binder: 8265:8266 ioctl c0306201 20000280 returned -14
[  179.276566][ T8266] binder: 8265:8266 got transaction to invalid handle, 1
[  179.277913][ T8266] binder: 8266:8265 cannot find target node
[  179.328850][ T8273] loop5: detected capacity change from 0 to 8
[  179.390757][ T8273] SQUASHFS error: Failed to read block 0x4de: -5
[  179.392958][ T8273] SQUASHFS error: Failed to read block 0x4de: -5
[  179.394236][ T8273] SQUASHFS error: Failed to read block 0x4de: -5
[  179.395319][ T8273] SQUASHFS error: Failed to read block 0x4de: -5
[  179.539111][   T14] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  179.724793][   T14] usb 1-1: Using ep0 maxpacket: 16
[  179.728163][   T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  179.733821][   T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  179.735665][   T14] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  179.741560][   T14] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  179.743123][   T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  179.752543][   T14] usb 1-1: config 0 descriptor??
[  179.889560][ T8326] EXT4-fs: inline encryption not supported
[  179.916656][ T8326] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  179.918267][ T8326] EXT4-fs (loop6): Test dummy encryption mode enabled
[  179.931901][ T8326] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=284ec118, mo2=0003]
[  179.933514][ T8326] System zones: 0-5
[  179.954628][ T8326] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  180.054890][ T7163] EXT4-fs (loop6): unmounting filesystem.
[  180.161339][   T14] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[  180.162685][   T14] microsoft 0003:045E:07DA.0003: ignoring exceeding usage max
[  180.164627][   T14] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[  180.165845][   T14] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[  180.167116][   T14] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[  180.168353][   T14] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[  180.170262][   T14] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[  180.171492][   T14] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[  180.175732][   T14] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[  180.177072][   T14] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[  180.178333][   T14] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[  180.181006][   T14] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[  180.182355][   T14] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[  180.183605][   T14] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[  180.184827][   T14] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[  180.188585][   T14] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0003/input/input6
[  180.263605][   T14] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[  180.374452][ T3902] usb 1-1: USB disconnect, device number 11
[  181.602630][   T24] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  181.660230][ T4332] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  181.662173][ T4332] Bluetooth: hci3: Injecting HCI hardware error event
[  181.665433][ T4332] Bluetooth: hci3: hardware error 0x00
[  181.913606][ T8397] set_capacity_and_notify: 1 callbacks suppressed
[  181.913616][ T8397] loop5: detected capacity change from 0 to 1024
[  181.945671][ T8397] EXT4-fs: Ignoring removed bh option
[  181.963457][ T8397] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  182.114973][   T24] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  182.116897][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  182.118776][   T24] usb 1-1: Product: syz
[  182.119965][   T24] usb 1-1: Manufacturer: syz
[  182.120803][   T24] usb 1-1: SerialNumber: syz
[  182.245372][ T5165] EXT4-fs (loop5): unmounting filesystem.
[  182.332335][ T8429] loop6: detected capacity change from 0 to 164
[  182.376680][ T8429] iso9660: Corrupted directory entry in block 2 of inode 1920
[  182.383513][   T24] rtl8150 1-1:1.0: couldn't reset the device
[  182.384630][   T24] rtl8150: probe of 1-1:1.0 failed with error -5
[  182.389800][   T24] usb 1-1: USB disconnect, device number 12
[  182.467139][ T8441] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1297'.
[  182.489944][ T8437] device syzkaller0 entered promiscuous mode
[  182.494721][ T8437] tipc: Started in network mode
[  182.495801][ T8437] tipc: Node identity ded042d3ff24, cluster identity 4711
[  182.498691][ T8437] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  182.501271][ T8436] tipc: Resetting bearer <eth:syzkaller0>
[  182.570153][ T8436] tipc: Disabling bearer <eth:syzkaller0>
[  182.612992][ T8445] loop6: detected capacity change from 0 to 256
[  183.154819][ T8460] loop5: detected capacity change from 0 to 16
[  183.256688][ T8466] loop5: detected capacity change from 0 to 256
[  183.290029][ T8466] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  183.386897][ T8470] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1309'.
[  183.494296][ T8472] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  183.552834][ T8478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  183.555420][ T8478] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  183.561311][ T8471] tipc: Disabling bearer <eth:syzkaller0>
[  183.780443][ T8495] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1320'.
[  183.833531][ T8498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  183.835300][ T8498] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  184.100453][ T8500] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1322'.
[  184.198848][ T8503] loop0: detected capacity change from 0 to 1024
[  184.266449][ T4427] hfsplus: b-tree write err: -5, ino 25
[  184.267677][ T4427] hfsplus: b-tree write err: -5, ino 4
[  184.268870][ T4427] hfsplus: b-tree write err: -5, ino 2
[  184.271159][ T4427] hfsplus: b-tree write err: -5, ino 26
[  184.314923][ T8509] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  184.389212][ T4332] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  184.440408][ T8520] loop5: detected capacity change from 0 to 2048
[  184.452021][ T8520] UDF-fs: bad mount option "uid=ÿÿÿÿÿ" or missing value
[  184.453569][ T8508] tipc: Disabling bearer <eth:syzkaller0>
[  184.605319][ T8530] mmap: syz.5.1330 (8530) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  184.998436][ T8539] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1337'.
[  185.222100][ T8549] loop6: detected capacity change from 0 to 164
[  185.302060][ T8554] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  185.360388][ T8553] tipc: Disabling bearer <eth:syzkaller0>
[  185.407615][ T8563] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1348'.
[  185.792527][ T8587] ip_tables: iptables: counters copy to user failed while replacing table
[  185.828742][ T8589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  185.838790][ T8589] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  186.312280][ T8591] device syzkaller0 entered promiscuous mode
[  187.349999][ T2065] ieee802154 phy0 wpan0: encryption failed: -22
[  187.351604][ T2065] ieee802154 phy1 wpan1: encryption failed: -22
[  187.568622][ T8620] loop0: detected capacity change from 0 to 1024
[  187.703930][ T8629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  187.708892][ T8629] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  188.187617][ T8644] binder: 8643:8644 ioctl c0306201 20000180 returned -14
[  188.192916][ T8644] binder: 8643:8644 got transaction to invalid handle, 1
[  188.194398][ T8644] binder_debug: 2 callbacks suppressed
[  188.194412][ T8644] binder: 8644:8643 cannot find target node
[  188.196490][ T8644] binder: 8643:8644 transaction call to 0:0 failed 37/29201/-22, size 112-4280 line 3062
[  188.199140][   T14] binder: undelivered TRANSACTION_ERROR: 29201
[  188.707961][ T8657] device syzkaller0 entered promiscuous mode
[  188.919084][  T115] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  189.102981][  T115] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  189.105104][  T115] usb 1-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3
[  189.107028][  T115] usb 1-1: Product: syz
[  189.107879][  T115] usb 1-1: Manufacturer: syz
[  189.108952][  T115] usb 1-1: SerialNumber: syz
[  189.115066][  T115] usb 1-1: config 0 descriptor??
[  189.119516][  T115] ch341 1-1:0.0: ch341-uart converter detected
[  189.760659][ T8674] syz.6.1390 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  190.465425][ T8653] loop0: detected capacity change from 0 to 1024
[  190.495405][ T8653] EXT4-fs (loop0): INFO: recovery required on readonly filesystem
[  190.499367][  T115] ch341-uart ttyUSB0: break control not supported, using simulated break
[  190.501768][  T115] usb 1-1: ch341-uart converter now attached to ttyUSB0
[  190.504176][ T8653] EXT4-fs (loop0): write access will be enabled during recovery
[  190.505624][ T8653] EXT4-fs (loop0): barriers disabled
[  190.506502][ T8653] JBD2: no valid journal superblock found
[  190.507587][ T8653] EXT4-fs (loop0): error loading journal
[  190.525228][   T14] usb 1-1: USB disconnect, device number 13
[  190.532446][   T14] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0
[  190.534425][   T14] ch341 1-1:0.0: device disconnected
[  191.283787][ T8714] rxe_eth0 speed is unknown, defaulting to 1000
[  192.322709][ T8733] 9pnet_fd: p9_fd_create_tcp (8733): problem connecting socket to 127.0.0.1
[  192.744069][ T8746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  192.748971][ T8746] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  192.773720][ T4332] Bluetooth: hci2: unknown advertising packet type: 0xff
[  192.773761][ T4332] Bluetooth: hci2: unknown advertising packet type: 0xfa
[  192.775078][ T4332] Bluetooth: hci2: unknown advertising packet type: 0x09
[  192.776209][ T4332] Bluetooth: hci2: unknown advertising packet type: 0x05
[  192.777396][ T4332] Bluetooth: hci2: Dropping invalid advertising data
[  192.779843][ T4332] Bluetooth: hci2: Malformed LE Event: 0x02
[  193.443531][   T27] kauditd_printk_skb: 47 callbacks suppressed
[  193.443618][   T27] audit: type=1326 audit(450.432:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8769 comm="syz.3.1415" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f37a228 code=0x7ffc0000
[  193.448918][   T27] audit: type=1326 audit(450.432:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8769 comm="syz.3.1415" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f37a228 code=0x7ffc0000
[  193.453752][   T27] audit: type=1326 audit(450.432:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8769 comm="syz.3.1415" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f37a228 code=0x7ffc0000
[  193.458182][   T27] audit: type=1326 audit(450.432:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8769 comm="syz.3.1415" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f37a228 code=0x7ffc0000
[  193.462993][   T27] audit: type=1326 audit(450.432:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8769 comm="syz.3.1415" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff7f37a228 code=0x7ffc0000
[  193.467637][   T27] audit: type=1326 audit(450.432:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8769 comm="syz.3.1415" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f37a228 code=0x7ffc0000
[  193.472478][   T27] audit: type=1326 audit(450.432:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8769 comm="syz.3.1415" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f37a228 code=0x7ffc0000
[  193.477211][   T27] audit: type=1326 audit(450.432:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8769 comm="syz.3.1415" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f37a228 code=0x7ffc0000
[  193.481939][   T27] audit: type=1326 audit(450.432:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8769 comm="syz.3.1415" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f37a228 code=0x7ffc0000
[  193.488919][   T27] audit: type=1326 audit(450.432:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8769 comm="syz.3.1415" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=441 compat=0 ip=0xffff7f37a228 code=0x7ffc0000
[  194.394045][ T8778] 9pnet_fd: p9_fd_create_tcp (8778): problem connecting socket to 127.0.0.1
[  195.030886][ T4785] wlan1: Trigger new scan to find an IBSS to join
[  196.069154][ T4332] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  196.070995][ T4332] Bluetooth: hci4: Injecting HCI hardware error event
[  196.073134][ T4332] Bluetooth: hci4: hardware error 0x00
[  196.297762][ T8762] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  196.325926][ T8812] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1433'.
[  196.367353][ T8816] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  196.376855][ T8818] loop6: detected capacity change from 0 to 1024
[  197.310719][ T8865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  197.313051][ T8865] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  197.994815][ T8870] page:000000005e0cd95f refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x118000
[  197.996687][ T8870] flags: 0x5ffc00000000000(node=0|zone=2|lastcpupid=0x7ff)
[  197.997947][ T8870] raw: 05ffc00000000000 0000000000000000 dead000000000122 0000000000000000
[  198.000739][ T8870] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[  198.002187][ T8870] page dumped because: unmovable page
[  198.079141][ T4930] wlan1: Trigger new scan to find an IBSS to join
[  198.389232][ T4332] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  198.945493][ T8882] FAULT_INJECTION: forcing a failure.
[  198.945493][ T8882] name fail_futex, interval 1, probability 0, space 0, times 0
[  198.947954][ T8882] CPU: 1 PID: 8882 Comm: syz.6.1463 Not tainted syzkaller #0
[  198.949202][ T8882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  198.951180][ T8882] Call trace:
[  198.951826][ T8882]  dump_backtrace+0x1c4/0x1f0
[  198.952813][ T8882]  show_stack+0x2c/0x3c
[  198.953682][ T8882]  __dump_stack+0x30/0x40
[  198.954592][ T8882]  dump_stack_lvl+0xf4/0x15c
[  198.955551][ T8882]  dump_stack+0x1c/0x5c
[  198.956427][ T8882]  should_fail_ex+0x3cc/0x524
[  198.957385][ T8882]  should_fail+0x14/0x24
[  198.958190][ T8882]  get_futex_key+0x904/0xfb0
[  198.959044][ T8882]  futex_wake+0x10c/0x458
[  198.959935][ T8882]  do_futex+0x2c4/0x340
[  198.960798][ T8882]  __arm64_sys_futex+0x390/0x414
[  198.961790][ T8882]  invoke_syscall+0x98/0x290
[  198.962734][ T8882]  el0_svc_common+0x13c/0x258
[  198.963674][ T8882]  do_el0_svc+0x5c/0x134
[  198.964457][ T8882]  el0_svc+0x58/0x12c
[  198.965270][ T8882]  el0t_64_sync_handler+0x84/0xf0
[  198.966198][ T8882]  el0t_64_sync+0x18c/0x190
[  199.019636][ T4785] wlan1: Creating new IBSS network, BSSID 0a:1d:e2:bb:71:95
[  199.037979][ T8886] loop6: detected capacity change from 0 to 1024
[  199.922420][ T8894] FAULT_INJECTION: forcing a failure.
[  199.922420][ T8894] name failslab, interval 1, probability 0, space 0, times 0
[  199.924974][ T8894] CPU: 1 PID: 8894 Comm: syz.6.1466 Not tainted syzkaller #0
[  199.926175][ T8894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  199.927864][ T8894] Call trace:
[  199.928492][ T8894]  dump_backtrace+0x1c4/0x1f0
[  199.929366][ T8894]  show_stack+0x2c/0x3c
[  199.930102][ T8894]  __dump_stack+0x30/0x40
[  199.930834][ T8894]  dump_stack_lvl+0xf4/0x15c
[  199.931654][ T8894]  dump_stack+0x1c/0x5c
[  199.932378][ T8894]  should_fail_ex+0x3cc/0x524
[  199.933194][ T8894]  __should_failslab+0xc0/0x11c
[  199.934074][ T8894]  should_failslab+0x10/0x28
[  199.934903][ T8894]  __kmem_cache_alloc_node+0x7c/0x318
[  199.935858][ T8894]  __kmalloc+0xc4/0x180
[  199.936571][ T8894]  security_sk_alloc+0x54/0x140
[  199.937407][ T8894]  sk_prot_alloc+0xe0/0x1e8
[  199.938193][ T8894]  sk_alloc+0x44/0x3a0
[  199.938909][ T8894]  bt_sock_alloc+0x4c/0x34c
[  199.939701][ T8894]  rfcomm_sock_alloc+0x5c/0x204
[  199.940550][ T8894]  rfcomm_sock_create+0xc8/0x294
[  199.941418][ T8894]  bt_sock_create+0x14c/0x24c
[  199.942222][ T8894]  __sock_create+0x448/0x8a8
[  199.943019][ T8894]  __sys_socket+0xc0/0x1b0
[  199.943774][ T8894]  __arm64_sys_socket+0x7c/0x94
[  199.944614][ T8894]  invoke_syscall+0x98/0x290
[  199.945408][ T8894]  el0_svc_common+0x13c/0x258
[  199.946213][ T8894]  do_el0_svc+0x5c/0x134
[  199.946968][ T8894]  el0_svc+0x58/0x12c
[  199.947662][ T8894]  el0t_64_sync_handler+0x84/0xf0
[  199.948534][ T8894]  el0t_64_sync+0x18c/0x190
[  200.026175][ T8900] loop6: detected capacity change from 0 to 2048
[  200.032053][ T8900] UDF-fs: bad mount option "uid=ÿÿÿÿÿ" or missing value
[  200.945797][ T8909] loop6: detected capacity change from 0 to 1024
[  200.967210][ T8909] hfsplus: invalid secondary volume header
[  200.968614][ T8909] hfsplus: unable to find HFS+ superblock
[  200.980338][ T8909] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1472'.
[  201.084763][ T8911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  201.086407][ T8911] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  203.945176][ T8933] loop0: detected capacity change from 0 to 2048
[  203.960454][ T8933] UDF-fs: bad mount option "uid=ÿÿÿÿÿ" or missing value
[  204.358906][ T8939] netlink: 'syz.6.1481': attribute type 1 has an invalid length.
[  204.372745][ T8941] device-mapper: table: 248:1: cache: Error opening metadata device (-ENODEV)
[  204.374714][ T8941] device-mapper: ioctl: error adding target to table
[  204.635861][ T8960] device syzkaller0 entered promiscuous mode
[  204.754625][ T8966] netem: change failed
[  204.798804][ T8970] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  204.801363][ T8972] sch_tbf: burst 21990 is lower than device lo mtu (65550) !
[  204.898646][ T4332] Bluetooth: Wrong link type (-22)
[  204.899771][ T4332] Bluetooth: hci1: link tx timeout
[  204.903537][ T4332] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa
[  204.907417][ T4332] Bluetooth: hci1: link tx timeout
[  204.908472][ T4332] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  205.521736][ T8997] loop0: detected capacity change from 0 to 1024
[  205.656670][ T9004] device syzkaller0 entered promiscuous mode
[  206.762799][ T9037] device syzkaller0 entered promiscuous mode
[  206.902576][ T9048] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1524'.
[  206.954396][ T9054] loop5: detected capacity change from 0 to 2048
[  206.956586][ T9054] UDF-fs: bad mount option "uid=ÿÿÿÿÿ" or missing value
[  206.966938][ T4332] Bluetooth: hci1: command 0x0406 tx timeout
[  207.010960][ T8137] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  207.679971][ T9033] 9pnet_fd: p9_fd_create_tcp (9033): problem connecting socket to 127.0.0.1
[  207.748548][ T9065] FAULT_INJECTION: forcing a failure.
[  207.748548][ T9065] name failslab, interval 1, probability 0, space 0, times 0
[  207.755248][ T9065] CPU: 1 PID: 9065 Comm: syz.6.1530 Not tainted syzkaller #0
[  207.756589][ T9065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  207.758357][ T9065] Call trace:
[  207.759000][ T9065]  dump_backtrace+0x1c4/0x1f0
[  207.759970][ T9065]  show_stack+0x2c/0x3c
[  207.760830][ T9065]  __dump_stack+0x30/0x40
[  207.761640][ T9065]  dump_stack_lvl+0xf4/0x15c
[  207.762443][ T9065]  dump_stack+0x1c/0x5c
[  207.763176][ T9065]  should_fail_ex+0x3cc/0x524
[  207.763994][ T9065]  __should_failslab+0xc0/0x11c
[  207.764769][ T9065]  should_failslab+0x10/0x28
[  207.765604][ T9065]  __kmem_cache_alloc_node+0x7c/0x318
[  207.766525][ T9065]  __kmalloc+0xc4/0x180
[  207.767249][ T9065]  ops_init+0x90/0x53c
[  207.767984][ T9065]  setup_net+0x494/0xb6c
[  207.768743][ T9065]  copy_net_ns+0x2b8/0x578
[  207.769531][ T9065]  create_new_namespaces+0x30c/0x604
[  207.770430][ T9065]  unshare_nsproxy_namespaces+0x108/0x160
[  207.771469][ T9065]  ksys_unshare+0x3f0/0x70c
[  207.772289][ T9065]  __arm64_sys_unshare+0x3c/0x50
[  207.773159][ T9065]  invoke_syscall+0x98/0x290
[  207.773992][ T9065]  el0_svc_common+0x13c/0x258
[  207.774790][ T9065]  do_el0_svc+0x5c/0x134
[  207.775537][ T9065]  el0_svc+0x58/0x12c
[  207.776239][ T9065]  el0t_64_sync_handler+0x84/0xf0
[  207.777085][ T9065]  el0t_64_sync+0x18c/0x190
[  207.865454][ T9075] device syzkaller0 entered promiscuous mode
[  207.877556][ T9077] loop0: detected capacity change from 0 to 1024
[  207.979830][ T9081] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1537'.
[  208.921608][ T9117] device syzkaller0 entered promiscuous mode
[  209.311914][ T9090] 9pnet_fd: p9_fd_create_tcp (9090): problem connecting socket to 127.0.0.1
[  209.790695][ T9126] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1551'.
[  209.964441][ T4347] Bluetooth: hci2: unexpected event for opcode 0x204e
[  210.504568][ T9249] loop6: detected capacity change from 0 to 1024
[  211.470608][ T9095] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  211.516769][ T9265] device syzkaller0 entered promiscuous mode
[  211.591439][ T9273] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1568'.
[  211.691461][ T9282] loop5: detected capacity change from 0 to 1024
[  211.768960][ T9286] device syzkaller0 entered promiscuous mode
[  212.465838][ T9279] 9pnet_fd: p9_fd_create_tcp (9279): problem connecting socket to 127.0.0.1
[  212.563672][ T9320] 9pnet_fd: p9_fd_create_unix (9320): problem connecting socket: ./proc/thread-self/fail-nth: -2
[  212.764077][ T9336] device syzkaller0 entered promiscuous mode
[  214.052406][ T9358] 9pnet_fd: p9_fd_create_tcp (9358): problem connecting socket to 127.0.0.1
[  214.157921][ T9424] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1606'.
[  214.196307][ T9427] device syzkaller0 entered promiscuous mode
[  214.208356][ T9429] device syzkaller0 entered promiscuous mode
[  226.025425][ T9431] batman_adv: batadv0: Adding interface: dummy0
[  226.026566][ T9431] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  226.031432][ T9431] batman_adv: batadv0: Interface activated: dummy0
[  226.163214][ T9438] batadv0: mtu less than device minimum
[  226.166102][ T9438] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  226.169480][ T9438] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  226.172697][ T9438] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  226.175825][ T9438] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  226.179025][ T9438] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  226.182142][ T9438] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  226.185205][ T9438] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  226.188243][ T9438] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  226.191444][ T9438] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  226.265864][ T9543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  226.272936][ T9543] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  226.358063][ T9555] FAULT_INJECTION: forcing a failure.
[  226.358063][ T9555] name failslab, interval 1, probability 0, space 0, times 0
[  226.363512][ T9555] CPU: 0 PID: 9555 Comm: syz.0.1657 Not tainted syzkaller #0
[  226.364844][ T9555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  226.366599][ T9555] Call trace:
[  226.367176][ T9555]  dump_backtrace+0x1c4/0x1f0
[  226.367992][ T9555]  show_stack+0x2c/0x3c
[  226.368686][ T9555]  __dump_stack+0x30/0x40
[  226.369581][ T9555]  dump_stack_lvl+0xf4/0x15c
[  226.370545][ T9555]  dump_stack+0x1c/0x5c
[  226.371401][ T9555]  should_fail_ex+0x3cc/0x524
[  226.372353][ T9555]  __should_failslab+0xc0/0x11c
[  226.373322][ T9555]  should_failslab+0x10/0x28
[  226.374216][ T9555]  kmem_cache_alloc+0x88/0x310
[  226.375142][ T9555]  __kernfs_new_node+0xec/0x5fc
[  226.376164][ T9555]  kernfs_new_node+0x120/0x230
[  226.377109][ T9555]  __kernfs_create_file+0x60/0x2e0
[  226.378195][ T9555]  sysfs_add_file_mode_ns+0x1e8/0x2a4
[  226.379332][ T9555]  internal_create_group+0x3e8/0xb24
[  226.380424][ T9555]  sysfs_create_groups+0x60/0x134
[  226.381461][ T9555]  device_add_attrs+0xdc/0x6f8
[  226.382454][ T9555]  device_add+0x5ac/0xe4c
[  226.383382][ T9555]  rfkill_register+0x140/0x89c
[  226.384399][ T9555]  hci_register_dev+0x388/0x888
[  226.385376][ T9555]  vhci_create_device+0x34c/0x684
[  226.386410][ T9555]  vhci_write+0x30c/0x3b4
[  226.387327][ T9555]  vfs_write+0x3c8/0x7c8
[  226.388190][ T9555]  ksys_write+0x12c/0x228
[  226.389080][ T9555]  __arm64_sys_write+0x7c/0x90
[  226.390080][ T9555]  invoke_syscall+0x98/0x290
[  226.391024][ T9555]  el0_svc_common+0x13c/0x258
[  226.392020][ T9555]  do_el0_svc+0x5c/0x134
[  226.392918][ T9555]  el0_svc+0x58/0x12c
[  226.393754][ T9555]  el0t_64_sync_handler+0x84/0xf0
[  226.394803][ T9555]  el0t_64_sync+0x18c/0x190
[  226.417236][ T9552] 
[  226.417678][ T9552] ======================================================
[  226.418925][ T9552] WARNING: possible circular locking dependency detected
[  226.420255][ T9552] syzkaller #0 Not tainted
[  226.421167][ T9552] ------------------------------------------------------
[  226.422606][ T9552] syz.5.1655/9552 is trying to acquire lock:
[  226.423741][ T9552] ffff0000cb2a1350 (&ndev->req_lock){+.+.}-{3:3}, at: nci_start_poll+0x450/0xadc
[  226.425478][ T9552] 
[  226.425478][ T9552] but task is already holding lock:
[  226.426973][ T9552] ffff0000cb2a5528 (&genl_data->genl_data_mutex){+.+.}-{3:3}, at: nfc_genl_start_poll+0x1a0/0x2f4
[  226.429103][ T9552] 
[  226.429103][ T9552] which lock already depends on the new lock.
[  226.429103][ T9552] 
[  226.430993][ T9552] 
[  226.430993][ T9552] the existing dependency chain (in reverse order) is:
[  226.432586][ T9552] 
[  226.432586][ T9552] -> #3 (&genl_data->genl_data_mutex){+.+.}-{3:3}:
[  226.434297][ T9552]        __mutex_lock_common+0x1a0/0x1f3c
[  226.435495][ T9552]        mutex_lock_nested+0x38/0x44
[  226.436597][ T9552]        nfc_urelease_event_work+0x108/0x2b8
[  226.437794][ T9552]        process_one_work+0x7e4/0x13bc
[  226.438867][ T9552]        worker_thread+0x8cc/0xfe8
[  226.439808][ T9552]        kthread+0x254/0x2e0
[  226.440733][ T9552]        ret_from_fork+0x10/0x20
[  226.441712][ T9552] 
[  226.441712][ T9552] -> #2 (nfc_devlist_mutex){+.+.}-{3:3}:
[  226.443262][ T9552]        __mutex_lock_common+0x1a0/0x1f3c
[  226.444374][ T9552]        mutex_lock_nested+0x38/0x44
[  226.445419][ T9552]        nfc_register_device+0x48/0x300
[  226.446510][ T9552]        nci_register_device+0x6b8/0x7e4
[  226.447572][ T9552]        virtual_ncidev_open+0x6c/0xd8
[  226.448726][ T9552]        misc_open+0x310/0x388
[  226.449708][ T9552]        chrdev_open+0x3d0/0x51c
[  226.450737][ T9552]        do_dentry_open+0x738/0xf8c
[  226.451795][ T9552]        vfs_open+0x7c/0x90
[  226.452697][ T9552]        path_openat+0x1fc0/0x27a0
[  226.453752][ T9552]        do_filp_open+0x198/0x38c
[  226.454717][ T9552]        do_sys_openat2+0x134/0x3fc
[  226.455777][ T9552]        __arm64_sys_openat+0x11c/0x150
[  226.456820][ T9552]        invoke_syscall+0x98/0x290
[  226.457745][ T9552]        el0_svc_common+0x13c/0x258
[  226.458684][ T9552]        do_el0_svc+0x5c/0x134
[  226.459529][ T9552]        el0_svc+0x58/0x12c
[  226.460355][ T9552]        el0t_64_sync_handler+0x84/0xf0
[  226.461329][ T9552]        el0t_64_sync+0x18c/0x190
[  226.462388][ T9552] 
[  226.462388][ T9552] -> #1 (nci_mutex){+.+.}-{3:3}:
[  226.463812][ T9552]        __mutex_lock_common+0x1a0/0x1f3c
[  226.464859][ T9552]        mutex_lock_nested+0x38/0x44
[  226.465947][ T9552]        virtual_nci_close+0x28/0x58
[  226.467042][ T9552]        nci_dev_up+0x704/0xaa0
[  226.467956][ T9552]        nfc_dev_up+0x138/0x2e0
[  226.468817][ T9552]        nfc_genl_dev_up+0x98/0xdc
[  226.469722][ T9552]        genl_family_rcv_msg_doit+0x210/0x308
[  226.470776][ T9552]        genl_rcv_msg+0x424/0x600
[  226.471620][ T9552]        netlink_rcv_skb+0x220/0x3ec
[  226.472538][ T9552]        genl_rcv+0x38/0x50
[  226.473427][ T9552]        netlink_unicast+0x5fc/0x80c
[  226.474476][ T9552]        netlink_sendmsg+0x6f0/0x9d8
[  226.475511][ T9552]        ____sys_sendmsg+0x588/0x90c
[  226.476608][ T9552]        __sys_sendmsg+0x288/0x374
[  226.477659][ T9552]        __arm64_sys_sendmsg+0x80/0x94
[  226.478711][ T9552]        invoke_syscall+0x98/0x290
[  226.479766][ T9552]        el0_svc_common+0x13c/0x258
[  226.480863][ T9552]        do_el0_svc+0x5c/0x134
[  226.481817][ T9552]        el0_svc+0x58/0x12c
[  226.482726][ T9552]        el0t_64_sync_handler+0x84/0xf0
[  226.483752][ T9552]        el0t_64_sync+0x18c/0x190
[  226.484682][ T9552] 
[  226.484682][ T9552] -> #0 (&ndev->req_lock){+.+.}-{3:3}:
[  226.486252][ T9552]        __lock_acquire+0x3504/0x7280
[  226.487263][ T9552]        lock_acquire+0x210/0x63c
[  226.488232][ T9552]        __mutex_lock_common+0x1a0/0x1f3c
[  226.489329][ T9552]        mutex_lock_nested+0x38/0x44
[  226.490433][ T9552]        nci_start_poll+0x450/0xadc
[  226.491516][ T9552]        nfc_start_poll+0x124/0x284
[  226.492515][ T9552]        nfc_genl_start_poll+0x1b0/0x2f4
[  226.493593][ T9552]        genl_family_rcv_msg_doit+0x210/0x308
[  226.494740][ T9552]        genl_rcv_msg+0x424/0x600
[  226.495616][ T9552]        netlink_rcv_skb+0x220/0x3ec
[  226.496530][ T9552]        genl_rcv+0x38/0x50
[  226.497299][ T9552]        netlink_unicast+0x5fc/0x80c
[  226.498226][ T9552]        netlink_sendmsg+0x6f0/0x9d8
[  226.499144][ T9552]        ____sys_sendmsg+0x588/0x90c
[  226.500034][ T9552]        __sys_sendmsg+0x288/0x374
[  226.500906][ T9552]        __arm64_sys_sendmsg+0x80/0x94
[  226.502031][ T9552]        invoke_syscall+0x98/0x290
[  226.503069][ T9552]        el0_svc_common+0x13c/0x258
[  226.504058][ T9552]        do_el0_svc+0x5c/0x134
[  226.504948][ T9552]        el0_svc+0x58/0x12c
[  226.505794][ T9552]        el0t_64_sync_handler+0x84/0xf0
[  226.506816][ T9552]        el0t_64_sync+0x18c/0x190
[  226.507736][ T9552] 
[  226.507736][ T9552] other info that might help us debug this:
[  226.507736][ T9552] 
[  226.509537][ T9552] Chain exists of:
[  226.509537][ T9552]   &ndev->req_lock --> nfc_devlist_mutex --> &genl_data->genl_data_mutex
[  226.509537][ T9552] 
[  226.512081][ T9552]  Possible unsafe locking scenario:
[  226.512081][ T9552] 
[  226.513408][ T9552]        CPU0                    CPU1
[  226.514358][ T9552]        ----                    ----
[  226.515316][ T9552]   lock(&genl_data->genl_data_mutex);
[  226.516313][ T9552]                                lock(nfc_devlist_mutex);
[  226.517613][ T9552]                                lock(&genl_data->genl_data_mutex);
[  226.519076][ T9552]   lock(&ndev->req_lock);
[  226.519892][ T9552] 
[  226.519892][ T9552]  *** DEADLOCK ***
[  226.519892][ T9552] 
[  226.521308][ T9552] 4 locks held by syz.5.1655/9552:
[  226.522222][ T9552]  #0: ffff800018afd110 (cb_lock){++++}-{3:3}, at: genl_rcv+0x28/0x50
[  226.523775][ T9552]  #1: ffff800018afcf28 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0xec/0x600
[  226.525453][ T9552]  #2: ffff0000cb2a5528 (&genl_data->genl_data_mutex){+.+.}-{3:3}, at: nfc_genl_start_poll+0x1a0/0x2f4
[  226.527464][ T9552]  #3: ffff0000cb2a5100 (&dev->mutex){....}-{3:3}, at: nfc_start_poll+0x5c/0x284
[  226.529110][ T9552] 
[  226.529110][ T9552] stack backtrace:
[  226.530139][ T9552] CPU: 1 PID: 9552 Comm: syz.5.1655 Not tainted syzkaller #0
[  226.531439][ T9552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  226.533224][ T9552] Call trace:
[  226.533814][ T9552]  dump_backtrace+0x1c4/0x1f0
[  226.534649][ T9552]  show_stack+0x2c/0x3c
[  226.535384][ T9552]  __dump_stack+0x30/0x40
[  226.536170][ T9552]  dump_stack_lvl+0xf4/0x15c
[  226.536993][ T9552]  dump_stack+0x1c/0x5c
[  226.537757][ T9552]  print_circular_bug+0x148/0x1b0
[  226.538670][ T9552]  check_noncircular+0x290/0x370
[  226.539581][ T9552]  __lock_acquire+0x3504/0x7280
[  226.540458][ T9552]  lock_acquire+0x210/0x63c
[  226.541274][ T9552]  __mutex_lock_common+0x1a0/0x1f3c
[  226.542196][ T9552]  mutex_lock_nested+0x38/0x44
[  226.543054][ T9552]  nci_start_poll+0x450/0xadc
[  226.543902][ T9552]  nfc_start_poll+0x124/0x284
[  226.544751][ T9552]  nfc_genl_start_poll+0x1b0/0x2f4
[  226.545662][ T9552]  genl_family_rcv_msg_doit+0x210/0x308
[  226.546778][ T9552]  genl_rcv_msg+0x424/0x600
[  226.547648][ T9552]  netlink_rcv_skb+0x220/0x3ec
[  226.548566][ T9552]  genl_rcv+0x38/0x50
[  226.549322][ T9552]  netlink_unicast+0x5fc/0x80c
[  226.550228][ T9552]  netlink_sendmsg+0x6f0/0x9d8
[  226.551135][ T9552]  ____sys_sendmsg+0x588/0x90c
[  226.552000][ T9552]  __sys_sendmsg+0x288/0x374
[  226.552830][ T9552]  __arm64_sys_sendmsg+0x80/0x94
[  226.553857][ T9552]  invoke_syscall+0x98/0x290
[  226.554798][ T9552]  el0_svc_common+0x13c/0x258
[  226.555758][ T9552]  do_el0_svc+0x5c/0x134
[  226.556567][ T9552]  el0_svc+0x58/0x12c
[  226.557286][ T9552]  el0t_64_sync_handler+0x84/0xf0
[  226.558166][ T9552]  el0t_64_sync+0x18c/0x190
[  229.271130][ T9552] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  229.272844][ T9552] nci: nci_start_poll: failed to set local general bytes
[  229.277227][ T9551] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  231.509278][ T9231] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)