last executing test programs:

2m29.998480951s ago: executing program 0 (id=1):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x400, &(0x7f00000001c0)=ANY=[], 0x1, 0x5514, &(0x7f0000005d80)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
r1 = open(0x0, 0x14927e, 0x0)
fallocate(r1, 0x0, 0x0, 0x1000f4)
open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
userfaultfd(0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)
syz_clone3(&(0x7f0000000080)={0x801400, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mknodat$null(r2, &(0x7f0000000000)='./file1\x00', 0x2000, 0x103)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)

2m27.035787845s ago: executing program 2 (id=8):
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
syz_usb_connect(0x5, 0x52, &(0x7f0000000280)=ANY=[@ANYBLOB="120100036ffa680863070120ff2c0102030109024000021109400c0904080601ff8bbd020a240107000d020102052405039ae8ead6"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0})
bpf$PROG_LOAD(0x5, 0x0, 0x0)

2m23.316385108s ago: executing program 2 (id=20):
creat(&(0x7f0000000000)='./file0\x00', 0x6a)
mount$9p_fd(0x0, 0x0, 0x0, 0x8, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000640)={[{@lazytime}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000}}, {@barrier_val}, {@journal_dev={'journal_dev', 0x3d, 0x5}}, {@dioread_lock}, {@data_err_ignore}, {@noinit_itable}, {@resgid={'resgid', 0x3d, 0xee00}, 0x32}]}, 0x9b, 0x4fc, &(0x7f0000000140)="$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")

2m22.520168641s ago: executing program 2 (id=22):
capset(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7)
getpid()
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, 0x0, 0x0)
syz_mount_image$msdos(&(0x7f00000006c0), &(0x7f0000000280)='./file0\x00', 0xc0, &(0x7f0000000080)=ANY=[@ANYBLOB="646f74732c6e66732c71756965742c6e6f646f74732c636865636b3d7374726963742c6e66733d7374616c655f72772c646f74732c6572726f72733d636f6e74696e7565008000000000000074732c00"], 0x1, 0x246, &(0x7f00000002c0)="$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")
sendto(0xffffffffffffffff, &(0x7f0000000540), 0x0, 0x40000001, 0x0, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
setgroups(0x0, 0x0)
read$FUSE(r4, &(0x7f0000003680)={0x2020}, 0x2020)

2m21.308704864s ago: executing program 2 (id=27):
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000))
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c)
mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always'])
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x2, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x20044000)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2$9p(0x0, 0x4880)
ptrace(0x10, r3)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x31000000, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000100001070000000000002200"/28], 0x1c}}, 0x0)
sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000940)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x8000)
ptrace$pokeuser(0x6, r3, 0x388, 0x41d9fda7)
chdir(&(0x7f0000000140)='./file0\x00')
r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r6)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.parent_freezing\x00', 0x275a, 0x0)
write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b)

2m20.317742903s ago: executing program 1 (id=29):
socket$nl_route(0x10, 0x3, 0x0)
timerfd_create(0x0, 0x80000)
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
dup(r0)
socket$packet(0x11, 0x2, 0x300)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000cc0))
open$dir(&(0x7f0000000140)='./file0\x00', 0x840, 0xd5)
epoll_create1(0x0)
open$dir(&(0x7f0000000180)='./file0\x00', 0x207e, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
r1 = syz_open_dev$tty1(0xc, 0x4, 0x4)
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4)
madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0x6, 0x20c4, 0x100}})

2m20.150146318s ago: executing program 2 (id=30):
socket$nl_route(0x10, 0x3, 0x0)
timerfd_create(0x0, 0x80000)
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
dup(r0)
socket$packet(0x11, 0x2, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
open$dir(&(0x7f0000000140)='./file0\x00', 0x840, 0xd5)
epoll_create1(0x0)
open$dir(&(0x7f0000000180)='./file0\x00', 0x207e, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be20000d072f5b89c3043c47c896ce0bc8731fa595b6b4d45ef26dcca5582054d54d53cd2b685b431c70ea948259c4c869b4fc8db714e4b94bdae214fa68a051d4dca7d2647bec1fc89398d2b9000f224891060017c4700de60beac671e8e8f00cb03588aa6007e71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c59005cff414ed55b0d18a9d446935fb332bb593ee341ab59016f81860324b800c00000000000092d9c5fe34ccb80a61ffcb3363073fd8962823ee45f5d7394e9510f4ac6c702cfabe8a9c55c8dafcdb110036e14c1035cafdfef6a358cbfadb3579a285580a3c080d4e0a48d7bdc38a0437c8c1b3aa408a0000000000002248950b000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
r1 = syz_open_dev$tty1(0xc, 0x4, 0x4)
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4)
madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0x6, 0x20c4, 0x100}})

2m19.682412722s ago: executing program 1 (id=34):
syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x2010410, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32)
syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
ftruncate(r0, 0x6000000)

2m19.658605022s ago: executing program 2 (id=35):
r0 = syz_usb_connect$rtl8150(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_ep_write(r0, 0x2, 0x0, 0x0)

2m19.240959714s ago: executing program 32 (id=35):
r0 = syz_usb_connect$rtl8150(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_ep_write(r0, 0x2, 0x0, 0x0)

2m19.208010962s ago: executing program 1 (id=38):
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000005000000095"], 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

2m18.923210205s ago: executing program 1 (id=40):
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000))
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c)
mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always'])
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x2, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x20044000)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2$9p(0x0, 0x4880)
ptrace(0x10, r3)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x31000000, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000100001070000000000002200"/28], 0x1c}}, 0x0)
sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000940)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x8000)
ptrace$pokeuser(0x6, r3, 0x388, 0x41d9fda7)
chdir(&(0x7f0000000140)='./file0\x00')
r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r6)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.parent_freezing\x00', 0x275a, 0x0)
write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b)

2m17.90243327s ago: executing program 1 (id=41):
r0 = socket$igmp6(0xa, 0x3, 0x2)
sendmmsg$inet6(r0, &(0x7f0000001800)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0x1, @empty, 0x3}, 0x1c, 0x0}}], 0x1, 0x4048080)

2m17.419856944s ago: executing program 1 (id=42):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x5, &(0x7f0000000040)=0x24, 0x5)
r1 = creat(0x0, 0x94)
connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000001040), 0xa)
syz_emit_ethernet(0x3e, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000f, 0x30, 0xffffffffffffffff, 0xd925000)
openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(0x0, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xea5bc50b6199d77e)
read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0)

2m16.999905933s ago: executing program 33 (id=42):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x5, &(0x7f0000000040)=0x24, 0x5)
r1 = creat(0x0, 0x94)
connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000001040), 0xa)
syz_emit_ethernet(0x3e, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000f, 0x30, 0xffffffffffffffff, 0xd925000)
openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(0x0, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xea5bc50b6199d77e)
read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0)

2m14.843883513s ago: executing program 34 (id=1):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x400, &(0x7f00000001c0)=ANY=[], 0x1, 0x5514, &(0x7f0000005d80)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
r1 = open(0x0, 0x14927e, 0x0)
fallocate(r1, 0x0, 0x0, 0x1000f4)
open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
userfaultfd(0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)
syz_clone3(&(0x7f0000000080)={0x801400, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mknodat$null(r2, &(0x7f0000000000)='./file1\x00', 0x2000, 0x103)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)

1m49.495440057s ago: executing program 7 (id=50):
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000))
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c)
mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always'])
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x2, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x20044000)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2$9p(0x0, 0x4880)
ptrace(0x10, r3)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x31000000, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000100001070000000000002200"/28], 0x1c}}, 0x0)
sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000940)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x8000)
ptrace$pokeuser(0x6, r3, 0x388, 0x41d9fda7)
chdir(&(0x7f0000000140)='./file0\x00')
r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r6)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.parent_freezing\x00', 0x275a, 0x0)
write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b)

1m48.324923785s ago: executing program 7 (id=91):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000580)=ANY=[@ANYBLOB="40010a"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, &(0x7f0000000240)={0x14, &(0x7f0000000080)={0x20, 0xd, 0x39, {0x39, 0xaa7a5fa03d094f81, "6546a0f16533dc6db2e29406cfa00994034f1fcae38185cab85354638c03303ee837cc13e7720c5d3fc4447d947962d851ca119ed8169d"}}, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc09}}}, &(0x7f0000000780)={0x34, &(0x7f00000002c0)={0x40, 0x16, 0x65, "e9f05eb2a68b80ea66bd9c7352a005613cbac014743f263e5dab6b1b4c788765f20f6becb78011db90e86082664260ddc148c58e77f1b456565a0b71b0280148bbd17ef4fa32955d4b6f896c160006599280fea0ba4465a1b65d4a1e1b6064cd87cbc49f91"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000003c0)={0x0, 0x8, 0x1}, &(0x7f00000006c0)={0xc0, 0xa1, 0x4, 0x1}, &(0x7f0000000700)={0x40, 0xa0, 0x4, 0xfffff549}, &(0x7f0000000740)={0xc0, 0xa2, 0x2f, "ac7660f317cf20d51b909f730e003b05f69335234aa3891b0c5a0da7a61c46736f8d4b62ac8cacda7d5f317ae869dd"}})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000280)={0x40, 0x16, 0x1, "87"}, 0x0, 0x0})

1m47.679254646s ago: executing program 7 (id=93):
setresuid(0x0, 0xee01, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94)

1m46.27837954s ago: executing program 35 (id=93):
setresuid(0x0, 0xee01, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94)

24.875286867s ago: executing program 4 (id=258):
socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5524, &(0x7f00000108c0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c399000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
symlinkat(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="5953fdfffffffddbdf256b"], 0x38}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000)

20.819278894s ago: executing program 4 (id=268):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fsopen(0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10)
sendto$inet(0xffffffffffffffff, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00)

17.88609188s ago: executing program 5 (id=270):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bfd000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000240)={0x0, &(0x7f0000000480)=[@rdmsr={0x66, 0x18, {0x40000092}}], 0xffffffffffffff42})
ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r3, 0x4068aea3, &(0x7f0000000180)={0xc7, 0x0, 0x1})
ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17.474136288s ago: executing program 6 (id=274):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'macvlan1\x00'})
syz_genetlink_get_family_id$netlbl_calipso(0x0, 0xffffffffffffffff)
socket$unix(0x1, 0x1, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000380)=@framed, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xd, 0x0, &(0x7f0000000280)="63ec33c9e9b986000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0)
recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
setsockopt$TIPC_CONN_TIMEOUT(r3, 0x10f, 0x82, &(0x7f00000001c0)=0x1, 0x4)

16.100408116s ago: executing program 5 (id=276):
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x800092, &(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x46, 0x2d8, &(0x7f0000000d80)="$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")
capset(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2})
socket$packet(0x11, 0x3, 0x300)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000484100100000000004e438d2fd00000000004a7b720000000000000000", 0x35}], 0x1)
bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$sock_int(r3, 0x1, 0x2b, &(0x7f0000000080)=0xcba, 0x4)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0)
pread64(0xffffffffffffffff, &(0x7f00000003c0)=""/179, 0xb3, 0x2000000000040)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, 0x0, 0x0)

14.603092676s ago: executing program 4 (id=280):
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa041, 0xd)

13.1495951s ago: executing program 6 (id=281):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800004, &(0x7f0000000580)={[{@debug}, {@delalloc}, {@inlinecrypt}, {@test_dummy_encryption}, {@i_version}, {@oldalloc}, {@delalloc}, {@barrier}]}, 0x1, 0xbc8, &(0x7f0000002380)="$eJzs3M9rHNcdAPDvjH7alrtyKaXuxSql2FC6ll1kalOoXVx66aHQXgsW8soIrX8gqTiSdVgl/0BIcg7kEkhiEnyIz74kkGsuiXONySFggmIlEEKiMPtDWku7+mGtNIr8+cDTvDdvZt73q5F23oPdDeC5NZT9SCOOR8SVJKJQ359GRG+11h9RqR23tDg/9u3i/FgSy8v/+SqJJCKeLM6PNa6V1LdH6o3+iPj470n88qX1407Pzk2OlsulqXr79Mz1W6enZ+f+NHF99FrpWunGmXN/GTk7cm74/EjHcv3u84v3v/ndP7+ofP/2D3e/fvXNJC7GQL2vOY961js2FEMrv5Nm3REx2oHr7wdd9Xya80y6Nzkp3eWgAABoK22aw/06CtEVq5O3QnzwSa7BAQAAAB2x3BWxDAAAABxwifU/AAAAHHCN9wE8WZwfa5R835Gwtx5fiojBWv5L9VLr6Y5KddsfPRFx+EkSzR9rTWqn7dhQRDz67Px7WYkWn0PebZWFiPhNq/ufVPMfrH8Sem3+aUQMd2D8oTXtn1P+Fzswft75A/B8enCp9iBb//xLV+Y/0eL5193i2fUs8n7+NeZ/S+vmf6v5d7WZ//17i2Pceev12+36svz/ev8f7zZKNn623VFS2/B4IeK33a3yT1byT9rkf2WLYxR+vF1q15d3/stvRJyM1vk3JBt/P9Hp8Ylyabj2s+UYCx+NvNNu/Lzzz+7/4Tb5b3D/+7N9t566Uvsv9fnf5cv32vVtnn/6ZW/y32qtt77nhdGZmakzEb3Jv9bvP7txvo1jGtfI8j/1+43//1v9/WevCZX630aW+UJ9m7VfXDPm3+7eeX+j/LO1X573/+r2739138tbHOMPH75yql1f8/o3K9n4j5LaWhgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGtKIGIgkLUZEUq2nabEYcSQifhWH0/LN6Zk/jt/8/42rWV/EYPSk4xPl0nBEFGrtJGufqdZX22fXtP8cEcci4rXCoWq7OHazfDXv5AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFhxJCIGIkmLEZFGxFIhTYvFvKMCAAAAOm4w7wAAAACAXWf9DwAAAAef9T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC77NiJBw+TiKhcOFQtmd56X0+ukQG7Lc07ACA3XXkHAOSmO+8AgNxsc41vugAHULJJf3/bnr6OxwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/nXy+IOHSURULhyqlkxvva+n5Rkn9jA6YDeleQcA5KZro87uvYsD2HvP/C9+tLNxAHuv9RofeJ4km/T3rx5Tebqnb9diAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGD/GaiWJC1GRFqtp2mxGHE0IgajJxmfKJeGI+IXEfFpoacva/flHTQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdNz07NzlaLpemnqWS7Ox0FRWVpkqyP8KoVfJ+ZQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA/Ts3OTo+VyaWo670gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAvE3Pzk2OlsulqS1U7m3n4KZK3jkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJCfnwIAAP//198NMw==")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@mcast1, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x3c}, @in6=@rand_addr=' \x01\x00', {0x0, 0x0, 0x82, 0x0, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0)

13.14913381s ago: executing program 5 (id=282):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)
setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x2, 0x4000000, 0xffffffff}, 0x10)
r5 = socket(0x10, 0x2, 0x0)
write(r5, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c)
recvmmsg(r5, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f00000000c0), 0x0, 0x236, &(0x7f0000000300)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r6, 0x800c6613, &(0x7f00000006c0)=@v1={0x0, @adiantum, 0x4, @desc1})
r7 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x200000, 0x0)
fchdir(r7)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

13.123866355s ago: executing program 4 (id=283):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000000000407d1e9c3100000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x10, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x800}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r4=>0x0})
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r4, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "feff02", 0x30, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, {[], @param_prob={0x4, 0x1, 0x0, 0x1, {0x3, 0x6, "db887a", 0xfffb, 0x2b, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @private2}}}}}}}, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="3400000010000104000009040000000000000000", @ANYRES32=r7, @ANYBLOB="d500000000000200140012000c000100627269646765"], 0x34}}, 0x0)
r8 = socket(0x10, 0x803, 0x0)
r9 = socket(0x1, 0x1, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="400000001400b59500000000fcff00000a400000", @ANYRES32=r10, @ANYBLOB="1400020000000000000000000000e5"], 0x40}}, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
r12 = socket(0x10, 0x2, 0xf)
sendmsg$nl_route(r12, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r12, &(0x7f00000001c0)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r13, 0x8821}}, 0x20}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

11.655056873s ago: executing program 6 (id=288):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bfd000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000240)={0x0, &(0x7f0000000480)=[@rdmsr={0x66, 0x18, {0x40000092}}], 0xffffffffffffff42})
ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r3, 0x4068aea3, &(0x7f0000000180)={0xc7, 0x0, 0x1})
ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10.806592845s ago: executing program 8 (id=290):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fsopen(0x0, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10)
sendto$inet(r3, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00)

9.489751433s ago: executing program 8 (id=291):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_emit_ethernet(0xf6, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
bpf$ITER_CREATE(0x1d, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r3, 0x0, 0x0)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000300)='westwood', 0x8)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4c00000012000126000000000700074e23000000000000000000194b1cec000000000001000000fdffffff00000100"/56, @ANYRES32=0x0, @ANYBLOB="00000000ff7f00000700000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20000193}, 0x40000)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket(0x10, 0x3, 0x0)
unshare(0x3c000280)
writev(0xffffffffffffffff, 0x0, 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}})
syz_genetlink_get_family_id$nl80211(0x0, r6)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="580000001000ffff27bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="150c0000000000002c0012800e0001006970366772657461700000001800028014000700fc0000000000000000000000000000000a000100aaaaaaaaaa160040"], 0x58}, 0x1, 0x0, 0x0, 0x28001}, 0x8000)

9.422168814s ago: executing program 3 (id=292):
syz_clone(0x40011, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
r1 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0xfffd, 0x0, 0x9, 0x7}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa4, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080)
sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)

9.22671915s ago: executing program 4 (id=293):
r0 = socket$packet(0x11, 0x3, 0x300)
unshare(0x62040200)
sched_setscheduler(0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8})
fcntl$lock(r1, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9})
fcntl$lock(r1, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x2, 0x73e9})
setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000080)={0x0, 0x1, 0x6}, 0x10)

8.186461525s ago: executing program 3 (id=294):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f00000003c0), 0x76, 0x101301)
ioctl$USBDEVFS_BULK(r3, 0xc0185502, 0x0)

8.178728499s ago: executing program 6 (id=295):
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa041, 0xd)

8.087984347s ago: executing program 8 (id=296):
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002140), 0x8004, &(0x7f0000004600)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r0, &(0x7f0000006e80)={0x2020, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0}, 0x2082)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000002100)='./file0/file0/file0\x00', 0x0, 0x60002, 0x0)
write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1, {0x7, 0x29, 0xffffffff, 0x84a09431, 0x8, 0x20, 0x81, 0x4000}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f0000000000)="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", 0x2000, &(0x7f0000004540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004480)={0x90, 0x0, 0x6, {0x3, 0x0, 0x207fffffff, 0x1fffffffffffd, 0x80000400, 0x9, {0x1, 0x9, 0x8, 0x1, 0x10001, 0x5, 0x8, 0x123, 0xdab5, 0xa000, 0x0, r2, r3, 0xfffffffb, 0xffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
read$FUSE(r0, &(0x7f0000002240)={0x2020, 0x0, <r4=>0x0}, 0x2020)
write$FUSE_STATFS(r0, &(0x7f0000004280)={0x60, 0xffffffffffffffda, r4, {{0x800, 0x1, 0x1, 0x9, 0x7, 0x6e2, 0x9, 0x2}}}, 0x60)

7.845713261s ago: executing program 6 (id=297):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0xd, 0x8b, 0xd, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xe, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x4, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r6, {0xc}, {0x8}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0xc, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x1], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)

7.436208639s ago: executing program 8 (id=298):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800004, &(0x7f0000000580)={[{@debug}, {@delalloc}, {@inlinecrypt}, {@test_dummy_encryption}, {@i_version}, {@oldalloc}, {@delalloc}, {@barrier}]}, 0x1, 0xbc8, &(0x7f0000002380)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@mcast1, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x3c}, @in6=@rand_addr=' \x01\x00', {0x0, 0x0, 0x82, 0x0, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0)

7.06981214s ago: executing program 3 (id=299):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000004c0)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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")
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x9, 0x200, 0x8, 0x8, 0x2}, 0x50)
syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
mmap(&(0x7f00003f6000/0x2000)=nil, 0x2000, 0x3000001, 0x13, r0, 0x10e000)
prctl$PR_GET_TAGGED_ADDR_CTRL(0x38)
mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f00000003c0)=""/195)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), 0x0, 0xce, r0}, 0x38)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x4b, &(0x7f00000001c0), 0x4)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400})
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, 0x0, &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f0000000040)="a308d894dc43de27f51014c0d3691d97", 0x10)
truncate(&(0x7f0000000140)='./file2\x00', 0xff)

6.297815237s ago: executing program 5 (id=300):
r0 = socket$inet6(0xa, 0x2, 0x0)
write$tun(r0, &(0x7f0000000380)={@val={0x0, 0xf9}, @void, @x25={0x1, 0xfa, 0x27}}, 0x7)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r0, &(0x7f0000000a80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/29, 0x1d}, 0x42}], 0x1, 0x221, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
r1 = inotify_init()
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000000300)={0xffffffffffffffff, &(0x7f0000000040)='GPL\x00', 0x141800, &(0x7f00000000c0)={@align=0x9, {0xe76, 0x8, 0xfff, 0x7}}, 0x7, &(0x7f0000000180), &(0x7f0000000280)=0x910})
socket(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)

6.256087343s ago: executing program 6 (id=301):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c011703010902240001010000000904690202ff5aa30009050402100000fa"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000580)=ANY=[@ANYBLOB="40010a"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, &(0x7f0000000240)={0x14, &(0x7f0000000080)={0x20, 0xd, 0x39, {0x39, 0xaa7a5fa03d094f81, "6546a0f16533dc6db2e29406cfa00994034f1fcae38185cab85354638c03303ee837cc13e7720c5d3fc4447d947962d851ca119ed8169d"}}, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc09}}}, &(0x7f0000000780)={0x34, &(0x7f00000002c0)={0x40, 0x16, 0x65, "e9f05eb2a68b80ea66bd9c7352a005613cbac014743f263e5dab6b1b4c788765f20f6becb78011db90e86082664260ddc148c58e77f1b456565a0b71b0280148bbd17ef4fa32955d4b6f896c160006599280fea0ba4465a1b65d4a1e1b6064cd87cbc49f91"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000003c0)={0x0, 0x8, 0x1}, &(0x7f00000006c0)={0xc0, 0xa1, 0x4, 0x1}, &(0x7f0000000700)={0x40, 0xa0, 0x4, 0xfffff549}, &(0x7f0000000740)={0xc0, 0xa2, 0x2f, "ac7660f317cf20d51b909f730e003b05f69335234aa3891b0c5a0da7a61c46736f8d4b62ac8cacda7d5f317ae869dd"}})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000280)={0x40, 0x16, 0x1, "87"}, 0x0, 0x0})

4.664789266s ago: executing program 8 (id=302):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fsopen(0x0, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10)
sendto$inet(r3, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00)

4.478238775s ago: executing program 3 (id=303):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
getpid()
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x9, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x28, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x1000, 0xffff, 0x0, 0x8000, 0x4, 0x8008, 0x400, 0x80, 0x3, 0x5, 0x6, 0x8, 0x4, 0x3, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e5, 0xc488, 0xf9, 0xe, 0x2c0, 0x6c7, 0x9, 0xffffffff, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xf, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa5, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x7, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x0, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x226, 0x5, 0x4, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb3e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c)
pipe2(0x0, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r3 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x2})
io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)

4.052556585s ago: executing program 4 (id=304):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x549, &(0x7f0000001800)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
getgroups(0x0, 0x0)
setregid(0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@gettclass={0x24, 0x2a, 0x10, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xf, 0x8}, {0xffe0, 0x8}, {0x10, 0x10}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x4, 0xf}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = socket(0x10, 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
r5 = inotify_init1(0x0)
inotify_add_watch(r5, &(0x7f00000000c0)='./file1\x00', 0x12000335)
preadv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000000)=""/172, 0xac}], 0x1, 0x3ff, 0x8)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000780)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x5a, @dev={0xfe, 0x80, '\x00', 0xf}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7800, 0x7f, 0xfffffffc, 0xdc66}})
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x940650, 0x0, 0x1, 0x0, &(0x7f00000000c0))
r6 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000100)='.log\x00', 0x20642, 0x101)
ioctl$BTRFS_IOC_LOGICAL_INO(r6, 0xc0389424, &(0x7f0000000140)={0x49a0, 0x0, '\x00', 0x0, &(0x7f00000000c0)})
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
socket$nl_netfilter(0x10, 0x3, 0xc)

3.023269773s ago: executing program 3 (id=305):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10)
setxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="0200000001000600000000000400050000000000100007000000000020"], 0x24, 0x1)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000080))
llistxattr(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r3=>0x0})
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000100000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000007c0)={r5, r3, 0x25, 0x0, @val=@tcx}, 0x1c)
syz_emit_ethernet(0xd81, &(0x7f0000000f00)={@local, @empty, @void, {@llc_tr={0x11, {@snap={0x1, 0x1, "1d", "f09c60", 0xfbfb, "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"}}}}}, 0x0)

2.258691465s ago: executing program 3 (id=306):
socket$igmp6(0xa, 0x3, 0x2)
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00'})
sendmsg$nl_route_sched(r0, 0x0, 0x24040084)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000))
syz_io_uring_complete(0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710431000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)

2.249741807s ago: executing program 5 (id=307):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
socket$tipc(0x1e, 0x2, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, r1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, 0x0, 0x0, 0x2, 0x0)
openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r5 = timerfd_create(0x0, 0x0)
timerfd_settime(r5, 0x3, 0x0, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x200a4800)
recvmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42)
connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e21, @broadcast}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r7 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffffffffffffba, &(0x7f0000000080)=[{&(0x7f0000000500)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00b17d10cc40a88035b96648e582006e9644fb02faf23884372d474d8235b094550aff7f", 0x33fe0}], 0x1}, 0x8000)
r8 = socket(0x15, 0x5, 0x0)
getsockopt(r8, 0x200000000114, 0x2711, 0x0, &(0x7f0000000000))
listen(r0, 0x10040)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000080)=0xc)

2.197202945s ago: executing program 8 (id=308):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = eventfd2(0x8, 0x80001)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000002c0)={r2, 0x5, 0x2, r2})
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r2, 0x5, 0x1, r2})

0s ago: executing program 5 (id=309):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}}, 0x24}}, 0x0)
pipe2$9p(0x0, 0x80000)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"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"})
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)=@x86={0x42, 0x1, 0x8, 0x0, 0x75, 0x1a, 0x10, 0x0, 0x0, 0x82, 0x9, 0x0, 0x0, 0x8, 0xffffffb8, 0x8, 0xff, 0xff})

kernel console output (not intermixed with test programs):

3] veth1_macvtap: entered promiscuous mode
[   99.721691][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.742734][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.768403][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0
[   99.799848][ T1116] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.843999][ T1116] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.938164][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1
[   99.971779][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.995946][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.051042][   T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  100.080433][   T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  100.108080][   T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  100.136313][   T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  100.340626][ T5971] loop0: detected capacity change from 0 to 40427
[  100.357109][ T5970] loop2: detected capacity change from 0 to 40427
[  100.478633][ T5970] F2FS-fs (loop2): invalid crc value
[  100.733939][ T5979] loop1: detected capacity change from 0 to 256
[  100.747248][ T5979] msdos: Bad value for 'uid'
[  100.752120][ T5979] msdos: Bad value for 'uid'
[  101.451696][ T5986] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  101.678027][ T5970] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  101.695039][ T5971] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  101.733739][ T5971] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  101.745508][ T5970] F2FS-fs (loop2): Start checkpoint disabled!
[  101.767093][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.813753][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.832709][ T5970] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0
[  101.876613][ T5970] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  101.950785][   T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.960813][   T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.258471][ T5993] loop1: detected capacity change from 0 to 1024
[  102.296784][ T5993] =======================================================
[  102.296784][ T5993] WARNING: The mand mount option has been deprecated and
[  102.296784][ T5993]          and is ignored by this kernel. Remove the mand
[  102.296784][ T5993]          option from the mount to silence this warning.
[  102.296784][ T5993] =======================================================
[  102.650650][ T5993] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  102.747584][ T5993] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  102.902022][ T6005] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  103.660846][  T147] EXT4-fs error (device loop1): ext4_map_blocks:821: inode #15: comm kworker/u8:6: lblock 0 mapped to illegal pblock 0 (length 1)
[  103.761696][  T147] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  103.809397][  T147] EXT4-fs (loop1): This should not happen!! Data will be lost
[  103.809397][  T147] 
[  103.876023][ T5844] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  103.940934][ T6010] loop3: detected capacity change from 0 to 4096
[  103.969817][ T6010] EXT4-fs: inline encryption not supported
[  103.985873][   T29] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  104.033880][ T6010] EXT4-fs (loop3): Test dummy encryption mode enabled
[  104.078657][ T6010] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  104.101098][ T6010] System zones: 0-5
[  104.135310][ T6010] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  104.199986][   T29] usb 5-1: config 220 has an invalid interface number: 76 but max is 2
[  104.215658][   T29] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  104.238498][   T29] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  104.249731][   T29] usb 5-1: config 220 has no interface number 2
[  104.250577][ T6010] fs-verity (loop3, inode 13): Unknown hash algorithm number: 3
[  104.260550][   T29] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  104.278629][   T29] usb 5-1: config 220 interface 0 has no altsetting 0
[  104.321848][   T29] usb 5-1: config 220 interface 76 has no altsetting 0
[  104.342136][   T29] usb 5-1: config 220 interface 1 has no altsetting 0
[  104.363410][   T29] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  104.387567][   T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.396533][   T29] usb 5-1: Product: syz
[  104.402632][   T29] usb 5-1: Manufacturer: syz
[  104.408761][   T29] usb 5-1: SerialNumber: syz
[  104.432594][ T5854] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.442638][ T5847] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  104.528815][ T6017] kvm: Disabled LAPIC found during irq injection
[  104.623269][ T5847] usb 3-1: Using ep0 maxpacket: 8
[  104.641597][ T5847] usb 3-1: unable to get BOS descriptor or descriptor too short
[  104.669366][ T5847] usb 3-1: config 17 has an invalid interface number: 8 but max is 1
[  104.680366][ T5847] usb 3-1: config 17 has 1 interface, different from the descriptor's value: 2
[  104.712344][ T5847] usb 3-1: config 17 has no interface number 0
[  104.731544][ T5847] usb 3-1: config 17 interface 8 altsetting 6 endpoint 0x3 has invalid maxpacket 60136, setting to 1024
[  104.767529][   T29] usb 5-1: selecting invalid altsetting 0
[  104.778773][ T5847] usb 3-1: config 17 interface 8 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 1024
[  104.794836][   T29] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  104.812798][ T5847] usb 3-1: config 17 interface 8 has no altsetting 0
[  104.817986][ T6021] loop1: detected capacity change from 0 to 128
[  104.847362][   T29] uvcvideo 5-1:220.0: No valid video chain found.
[  104.864413][ T5847] usb 3-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff
[  104.892369][ T5847] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.905202][   T29] usb 5-1: selecting invalid altsetting 0
[  104.934422][   T29] usbtest 5-1:220.1: probe with driver usbtest failed with error -22
[  104.944697][ T5847] usb 3-1: Product: syz
[  104.956680][ T5847] usb 3-1: Manufacturer: syz
[  104.988532][ T5847] usb 3-1: SerialNumber: syz
[  105.012632][   T29] usb 5-1: USB disconnect, device number 2
[  105.031787][ T6015] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  105.295680][ T5847] usb 3-1: selecting invalid altsetting 0
[  105.384921][ T5847] usb 3-1: USB disconnect, device number 2
[  105.534502][ T6019] loop3: detected capacity change from 0 to 40427
[  105.568139][ T6019] F2FS-fs (loop3): build fault injection rate: 771
[  105.587497][ T6019] F2FS-fs (loop3): invalid crc value
[  105.668060][ T6028] loop1: detected capacity change from 0 to 128
[  105.717097][ T6028] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  105.744968][ T6028] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  105.827341][ T6032] loop4: detected capacity change from 0 to 512
[  105.847940][ T6032] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  105.880814][ T5844] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  105.916799][ T6019] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  105.924001][ T6032] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  105.942281][ T6019] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  106.002640][ T6032] EXT4-fs (loop4): 1 truncate cleaned up
[  106.007436][ T6019] syz.3.14: attempt to access beyond end of device
[  106.007436][ T6019] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  106.059086][ T6032] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  106.076284][ T5854] syz-executor: attempt to access beyond end of device
[  106.076284][ T5854] loop3: rw=2049, sector=45112, nr_sectors = 8 limit=40427
[  106.110366][ T5854] CPU: 1 UID: 0 PID: 5854 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  106.110394][ T5854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  106.110415][ T5854] Call Trace:
[  106.110428][ T5854]  <TASK>
[  106.110438][ T5854]  dump_stack_lvl+0xe8/0x150
[  106.110474][ T5854]  f2fs_handle_critical_error+0x37c/0x540
[  106.110521][ T5854]  f2fs_write_end_io+0x1274/0x1740
[  106.110560][ T5854]  __submit_merged_bio+0x256/0x700
[  106.110591][ T5854]  __submit_merged_write_cond+0x3c9/0x4e0
[  106.110627][ T5854]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  106.110677][ T5854]  f2fs_write_data_pages+0x287e/0x34f0
[  106.110742][ T5854]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  106.110785][ T5854]  ? __pfx_css_rstat_updated+0x10/0x10
[  106.110840][ T5854]  ? arch_stack_walk+0xe3/0x150
[  106.110862][ T5854]  ? unwind_next_frame+0xa5/0x23c0
[  106.110881][ T5854]  ? rcu_is_watching+0x15/0xb0
[  106.110900][ T5854]  ? __bfs+0x153/0x290
[  106.110917][ T5854]  ? __pfx_hlock_conflict+0x10/0x10
[  106.110957][ T5854]  ? lockdep_unlock+0x5d/0xd0
[  106.110982][ T5854]  ? __lock_acquire+0x146e/0x2cf0
[  106.111016][ T5854]  ? is_bpf_text_address+0x292/0x2b0
[  106.111061][ T5854]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  106.111093][ T5854]  do_writepages+0x32e/0x550
[  106.111130][ T5854]  ? do_raw_spin_unlock+0xf5/0x210
[  106.111160][ T5854]  filemap_fdatawrite+0x1e9/0x2f0
[  106.111187][ T5854]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  106.111253][ T5854]  ? do_raw_spin_unlock+0xf5/0x210
[  106.111279][ T5854]  f2fs_sync_dirty_inodes+0x30e/0x860
[  106.111307][ T5854]  f2fs_write_checkpoint+0x9df/0x26a0
[  106.111336][ T5854]  ? lockdep_hardirqs_on+0x7a/0x110
[  106.111391][ T5854]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  106.111444][ T5854]  ? kfree+0x1c5/0x650
[  106.111470][ T5854]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  106.111501][ T5854]  kill_f2fs_super+0x314/0x720
[  106.111538][ T5854]  ? __pfx_kill_f2fs_super+0x10/0x10
[  106.111580][ T5854]  ? lockdep_hardirqs_on+0x7a/0x110
[  106.111617][ T5854]  deactivate_locked_super+0xbc/0x130
[  106.111648][ T5854]  cleanup_mnt+0x437/0x4d0
[  106.111667][ T5854]  ? _raw_spin_unlock_irq+0x23/0x50
[  106.111692][ T5854]  task_work_run+0x1d9/0x270
[  106.111720][ T5854]  ? __pfx_task_work_run+0x10/0x10
[  106.111754][ T5854]  exit_to_user_mode_loop+0xed/0x480
[  106.111782][ T5854]  ? rcu_is_watching+0x15/0xb0
[  106.111808][ T5854]  do_syscall_64+0x32d/0xf80
[  106.111831][ T5854]  ? trace_irq_disable+0x3b/0x150
[  106.111861][ T5854]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  106.111880][ T5854]  ? clear_bhb_loop+0x40/0x90
[  106.111905][ T5854]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  106.111924][ T5854] RIP: 0033:0x7fd1a539d9d7
[  106.111956][ T5854] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  106.111971][ T5854] RSP: 002b:00007ffc6131a578 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  106.111991][ T5854] RAX: 0000000000000000 RBX: 00007fd1a5432050 RCX: 00007fd1a539d9d7
[  106.112004][ T5854] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc6131a630
[  106.112015][ T5854] RBP: 00007ffc6131a630 R08: 00007ffc6131b630 R09: 00000000ffffffff
[  106.112028][ T5854] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc6131b6c0
[  106.112040][ T5854] R13: 00007fd1a5432050 R14: 0000000000019dd5 R15: 00007ffc6131b700
[  106.112071][ T5854]  </TASK>
[  106.112570][ T5854] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  106.124202][   T30] audit: type=1800 audit(1773936440.878:3): pid=6032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.18" name="file1" dev="loop4" ino=15 res=0 errno=0
[  106.508330][ T6036] loop2: detected capacity change from 0 to 512
[  106.553707][ T6036] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  106.567576][   T30] audit: type=1800 audit(1773936440.878:4): pid=6032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.18" name="file1" dev="loop4" ino=15 res=0 errno=0
[  106.605931][ T6036] EXT4-fs (loop2): blocks per group (42) and clusters per group (32768) inconsistent
[  106.795780][ T5843] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.929280][ T6045] loop4: detected capacity change from 0 to 256
[  107.042334][ T6047] xt_hashlimit: overflow, rate too high: 9223372036854775808
[  107.289312][ T6049] loop2: detected capacity change from 0 to 512
[  107.830964][ T6052] loop1: detected capacity change from 0 to 16
[  108.007802][ T6052] erofs (device loop1): mounted with root inode @ nid 36.
[  108.797158][ T5859] erofs (device loop1): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 9000
[  108.815258][   T30] audit: type=1800 audit(1773936443.568:5): pid=6063 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.25" name="file2" dev="loop1" ino=89 res=0 errno=0
[  109.709396][ T6083] loop1: detected capacity change from 0 to 128
[  109.827073][ T6083] syz.1.34: attempt to access beyond end of device
[  109.827073][ T6083] loop1: rw=2049, sector=154, nr_sectors = 96 limit=128
[  109.861020][ T6083] syz.1.34: attempt to access beyond end of device
[  109.861020][ T6083] loop1: rw=2049, sector=138, nr_sectors = 16 limit=128
[  110.276639][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.428779][ T5850] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  110.444631][ T5850] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  110.457903][ T5850] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  110.470995][ T5850] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  110.503311][ T5847] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  111.203527][ T5850] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  111.375293][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.387657][ T5847] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  111.421369][ T5847] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  111.540354][ T5847] usb 4-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00
[  111.551258][ T5847] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  111.564176][ T5847] usb 4-1: config 0 descriptor??
[  111.594079][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.712574][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.048923][ T5847] logitech-djreceiver 0003:046D:C71F.0001: ignoring exceeding usage max
[  112.101152][ T5847] logitech-djreceiver 0003:046D:C71F.0001: item fetching failed at offset 5/7
[  112.143461][ T5847] logitech-djreceiver 0003:046D:C71F.0001: logi_dj_probe: parse failed
[  112.163118][ T5847] logitech-djreceiver 0003:046D:C71F.0001: probe with driver logitech-djreceiver failed with error -22
[  112.272231][ T5847] usb 4-1: USB disconnect, device number 2
[  112.414618][   T13] bridge_slave_1: left allmulticast mode
[  112.425148][   T13] bridge_slave_1: left promiscuous mode
[  112.427513][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  112.458390][   T13] bridge_slave_0: left allmulticast mode
[  112.473306][   T13] bridge_slave_0: left promiscuous mode
[  112.485322][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  112.551792][ T5859] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  112.565696][ T5859] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  112.575841][ T5859] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  112.584475][ T5859] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  112.599542][ T5859] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  112.994269][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  113.010931][ T6111] loop4: detected capacity change from 0 to 40427
[  113.022003][ T6116] loop3: detected capacity change from 0 to 512
[  113.030451][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  113.054210][ T6111] F2FS-fs (loop4): build fault injection rate: 174
[  113.061590][ T6111] F2FS-fs (loop4): build fault injection type: 0x3bfe8c
[  113.070661][   T13] bond0 (unregistering): Released all slaves
[  113.081326][ T6111] F2FS-fs (loop4): invalid crc value
[  113.102647][ T6116] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  113.117397][ T6116] ext4 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  113.306363][ T5859] Bluetooth: hci3: command tx timeout
[  113.688712][ T6125] EXT4-fs error (device loop3): ext4_do_update_inode:5572: inode #2: comm syz.3.47: corrupted inode contents
[  113.709525][ T6125] EXT4-fs error (device loop3): ext4_dirty_inode:6453: inode #2: comm syz.3.47: mark_inode_dirty error
[  113.750925][ T6125] EXT4-fs error (device loop3): ext4_do_update_inode:5572: inode #2: comm syz.3.47: corrupted inode contents
[  113.766120][ T6125] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #2: comm syz.3.47: mark_inode_dirty error
[  113.815541][ T6125] EXT4-fs warning (device loop3): ext4_es_cache_extent:1082: inode #2: comm syz.3.47: ES cache extent failed: add [0,1,21,0x1] conflict with existing [0,8,576460752303423487,0x18]
[  113.815541][ T6125] 
[  114.098232][ T6111] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  114.131457][ T6111] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  114.137469][ T5854] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  114.350672][ T6098] chnl_net:caif_netlink_parms(): no params data found
[  114.659254][ T5859] Bluetooth: hci2: command tx timeout
[  114.852770][ T5850] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  114.864544][ T5850] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  114.874755][ T5850] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  114.886101][ T5850] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  114.895242][ T5850] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  115.146043][   T13] hsr_slave_0: left promiscuous mode
[  115.171422][   T13] hsr_slave_1: left promiscuous mode
[  115.186195][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  115.205831][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  115.228587][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  115.247081][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  115.321916][ T6128] loop3: detected capacity change from 0 to 40427
[  115.351594][ T6128] F2FS-fs (loop3): invalid crc value
[  115.373390][ T5850] Bluetooth: hci3: command tx timeout
[  115.390210][   T13] veth1_macvtap: left promiscuous mode
[  115.422616][   T13] veth0_macvtap: left promiscuous mode
[  115.438157][   T13] veth1_vlan: left promiscuous mode
[  115.444856][   T13] veth0_vlan: left promiscuous mode
[  115.619132][ T6128] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  115.641157][ T6128] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  115.769854][ T5854] syz-executor: attempt to access beyond end of device
[  115.769854][ T5854] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  115.829751][ T5854] CPU: 1 UID: 0 PID: 5854 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  115.829779][ T5854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  115.829792][ T5854] Call Trace:
[  115.829801][ T5854]  <TASK>
[  115.829810][ T5854]  dump_stack_lvl+0xe8/0x150
[  115.829847][ T5854]  f2fs_handle_critical_error+0x37c/0x540
[  115.829885][ T5854]  f2fs_write_end_io+0x1274/0x1740
[  115.829932][ T5854]  __submit_merged_bio+0x256/0x700
[  115.829977][ T5854]  __submit_merged_write_cond+0x3c9/0x4e0
[  115.830011][ T5854]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  115.830064][ T5854]  f2fs_write_data_pages+0x287e/0x34f0
[  115.830135][ T5854]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  115.830284][ T5854]  ? unwind_get_return_address+0x4d/0x90
[  115.830309][ T5854]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  115.830366][ T5854]  ? check_noncircular+0xda/0x150
[  115.830405][ T5854]  ? lockdep_unlock+0x5d/0xd0
[  115.830432][ T5854]  ? __lock_acquire+0x146e/0x2cf0
[  115.830489][ T5854]  ? do_raw_spin_lock+0x12b/0x2f0
[  115.830530][ T5854]  ? do_raw_spin_unlock+0xf5/0x210
[  115.830558][ T5854]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  115.830591][ T5854]  do_writepages+0x32e/0x550
[  115.830628][ T5854]  ? do_raw_spin_unlock+0xf5/0x210
[  115.830667][ T5854]  filemap_fdatawrite+0x1e9/0x2f0
[  115.830694][ T5854]  ? look_up_lock_class+0x57/0x110
[  115.830723][ T5854]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  115.830807][ T5854]  ? do_raw_spin_unlock+0xf5/0x210
[  115.830842][ T5854]  f2fs_sync_dirty_inodes+0x30e/0x860
[  115.830889][ T5854]  f2fs_write_checkpoint+0x9df/0x26a0
[  115.830965][ T5854]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  115.831056][ T5854]  kill_f2fs_super+0x314/0x720
[  115.831099][ T5854]  ? __pfx_kill_f2fs_super+0x10/0x10
[  115.831150][ T5854]  ? lockdep_hardirqs_on+0x7a/0x110
[  115.831194][ T5854]  deactivate_locked_super+0xbc/0x130
[  115.831229][ T5854]  cleanup_mnt+0x437/0x4d0
[  115.831250][ T5854]  ? _raw_spin_unlock_irq+0x23/0x50
[  115.831280][ T5854]  task_work_run+0x1d9/0x270
[  115.831312][ T5854]  ? __pfx_task_work_run+0x10/0x10
[  115.831352][ T5854]  exit_to_user_mode_loop+0xed/0x480
[  115.831382][ T5854]  ? rcu_is_watching+0x15/0xb0
[  115.831410][ T5854]  do_syscall_64+0x32d/0xf80
[  115.831436][ T5854]  ? trace_irq_disable+0x3b/0x150
[  115.831462][ T5854]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  115.831485][ T5854]  ? clear_bhb_loop+0x40/0x90
[  115.831512][ T5854]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  115.831534][ T5854] RIP: 0033:0x7fd1a539d9d7
[  115.831567][ T5854] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  115.831584][ T5854] RSP: 002b:00007ffc6131a578 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  115.831605][ T5854] RAX: 0000000000000000 RBX: 00007fd1a5432050 RCX: 00007fd1a539d9d7
[  115.831618][ T5854] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc6131a630
[  115.831630][ T5854] RBP: 00007ffc6131a630 R08: 00007ffc6131b630 R09: 00000000ffffffff
[  115.831644][ T5854] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc6131b6c0
[  115.831656][ T5854] R13: 00007fd1a5432050 R14: 000000000001c38a R15: 00007ffc6131b700
[  115.831695][ T5854]  </TASK>
[  116.165940][ T5854] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  116.741584][ T5850] Bluetooth: hci2: command tx timeout
[  116.811462][   T13] team0 (unregistering): Port device team_slave_1 removed
[  116.860578][ T6170] loop4: detected capacity change from 0 to 512
[  116.874610][ T6170] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  116.887641][   T13] team0 (unregistering): Port device team_slave_0 removed
[  116.917930][ T6170] EXT4-fs (loop4): 1 truncate cleaned up
[  116.936257][ T6170] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  116.973290][ T5850] Bluetooth: hci5: command tx timeout
[  117.533763][ T5850] Bluetooth: hci3: command tx timeout
[  117.967632][ T6098] bridge0: port 1(bridge_slave_0) entered blocking state
[  117.974957][  T808] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  117.989137][ T6098] bridge0: port 1(bridge_slave_0) entered disabled state
[  117.996965][ T6098] bridge_slave_0: entered allmulticast mode
[  118.005796][ T6098] bridge_slave_0: entered promiscuous mode
[  118.055983][ T6098] bridge0: port 2(bridge_slave_1) entered blocking state
[  118.063842][ T6098] bridge0: port 2(bridge_slave_1) entered disabled state
[  118.074627][ T6098] bridge_slave_1: entered allmulticast mode
[  118.082966][ T6098] bridge_slave_1: entered promiscuous mode
[  118.171461][ T6098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  118.195730][  T808] usb 5-1: Using ep0 maxpacket: 16
[  118.201228][ T6181] netlink: 'syz.3.57': attribute type 9 has an invalid length.
[  118.211364][ T6181] netlink: 'syz.3.57': attribute type 11 has an invalid length.
[  118.220381][  T808] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  118.236290][ T6181] netlink: 'syz.3.57': attribute type 12 has an invalid length.
[  118.245054][  T808] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  118.256092][  T808] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[  118.273622][ T6181] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.57'.
[  118.284072][ T6098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  118.296634][  T808] usb 5-1: config 0 interface 0 has no altsetting 0
[  118.304065][  T808] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  118.314754][  T808] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.360201][  T808] usb 5-1: config 0 descriptor??
[  118.647045][ T6098] team0: Port device team_slave_0 added
[  118.686859][ T6098] team0: Port device team_slave_1 added
[  118.813901][ T5850] Bluetooth: hci2: command tx timeout
[  118.833014][ T6098] batman_adv: batadv0: Adding interface: batadv_slave_0
[  118.863242][ T6098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  118.930458][ T6098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  119.002962][ T6098] batman_adv: batadv0: Adding interface: batadv_slave_1
[  119.012460][ T6098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  119.043072][ T6098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  119.054016][ T5850] Bluetooth: hci5: command tx timeout
[  119.065914][ T6109] chnl_net:caif_netlink_parms(): no params data found
[  119.148849][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.427918][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.611923][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.617773][ T5850] Bluetooth: hci3: command tx timeout
[  119.725091][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.753312][ T6098] hsr_slave_0: entered promiscuous mode
[  119.761936][ T6098] hsr_slave_1: entered promiscuous mode
[  119.814448][ T6133] chnl_net:caif_netlink_parms(): no params data found
[  119.865598][  T808] usbhid 5-1:0.0: can't add hid device: -71
[  119.873737][  T808] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  119.899034][  T808] usb 5-1: USB disconnect, device number 3
[  119.976842][ T5843] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  120.141741][ T6206] loop4: detected capacity change from 0 to 128
[  120.337439][ T6109] bridge0: port 1(bridge_slave_0) entered blocking state
[  120.353725][ T6109] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.370219][ T6109] bridge_slave_0: entered allmulticast mode
[  120.381120][ T6109] bridge_slave_0: entered promiscuous mode
[  120.452836][ T6109] bridge0: port 2(bridge_slave_1) entered blocking state
[  120.461363][ T6109] bridge0: port 2(bridge_slave_1) entered disabled state
[  120.481899][ T6109] bridge_slave_1: entered allmulticast mode
[  120.500319][ T6109] bridge_slave_1: entered promiscuous mode
[  120.886350][ T6133] bridge0: port 1(bridge_slave_0) entered blocking state
[  120.895150][ T5850] Bluetooth: hci2: command tx timeout
[  120.902151][ T6133] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.910842][ T6133] bridge_slave_0: entered allmulticast mode
[  120.920807][ T6133] bridge_slave_0: entered promiscuous mode
[  120.936310][ T6109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  120.996260][ T6133] bridge0: port 2(bridge_slave_1) entered blocking state
[  121.004567][ T6133] bridge0: port 2(bridge_slave_1) entered disabled state
[  121.011984][ T6133] bridge_slave_1: entered allmulticast mode
[  121.021541][ T6133] bridge_slave_1: entered promiscuous mode
[  121.037888][ T6109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  121.133328][ T5850] Bluetooth: hci5: command tx timeout
[  121.180366][ T6109] team0: Port device team_slave_0 added
[  121.290720][ T6109] team0: Port device team_slave_1 added
[  121.298978][   T13] bridge_slave_1: left allmulticast mode
[  121.305157][   T13] bridge_slave_1: left promiscuous mode
[  121.313345][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  121.324495][   T13] bridge_slave_0: left allmulticast mode
[  121.330250][   T13] bridge_slave_0: left promiscuous mode
[  121.336805][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  121.685791][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  121.704667][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  121.728109][   T13] bond0 (unregistering): Released all slaves
[  121.835101][ T6133] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  121.912153][ T6109] batman_adv: batadv0: Adding interface: batadv_slave_0
[  121.919242][ T6109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  121.946450][ T6109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  121.995127][ T6133] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  122.057717][ T6109] batman_adv: batadv0: Adding interface: batadv_slave_1
[  122.066170][ T6109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  122.093332][ T6109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  122.264462][ T6224] loop4: detected capacity change from 0 to 40427
[  122.277150][ T6133] team0: Port device team_slave_0 added
[  122.304990][ T6133] team0: Port device team_slave_1 added
[  122.312638][ T6224] F2FS-fs (loop4): invalid crc value
[  122.447677][ T6224] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  122.496498][ T6224] F2FS-fs (loop4): Start checkpoint disabled!
[  122.534168][ T6224] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0
[  122.559232][ T6224] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  122.574755][ T6228] loop3: detected capacity change from 0 to 512
[  122.587724][ T6228] EXT4-fs: Ignoring removed orlov option
[  122.621520][ T6228] EXT4-fs (loop3): Test dummy encryption mode enabled
[  122.780154][ T6228] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  122.797609][   T13] hsr_slave_0: left promiscuous mode
[  122.808922][   T13] hsr_slave_1: left promiscuous mode
[  122.825584][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  122.836522][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  122.847686][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  122.857203][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  122.876604][   T13] veth1_macvtap: left promiscuous mode
[  122.882544][   T13] veth0_macvtap: left promiscuous mode
[  122.889217][   T13] veth1_vlan: left promiscuous mode
[  122.896870][ T6228] EXT4-fs (loop3): 1 truncate cleaned up
[  122.910602][ T6228] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  122.921159][   T13] veth0_vlan: left promiscuous mode
[  122.950453][ T6228] fscrypt: AES-256-XTS using implementation "xts-aes-aesni-avx"
[  123.551359][ T5850] Bluetooth: hci5: command tx timeout
[  123.676763][ T5854] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  123.745225][  T147] kworker/u8:6: attempt to access beyond end of device
[  123.745225][  T147] loop4: rw=1, sector=77824, nr_sectors = 4096 limit=40427
[  123.830170][  T147] kworker/u8:6: attempt to access beyond end of device
[  123.830170][  T147] loop4: rw=1, sector=49152, nr_sectors = 4096 limit=40427
[  123.851417][ T6236] loop3: detected capacity change from 0 to 256
[  123.876217][  T147] kworker/u8:6: attempt to access beyond end of device
[  123.876217][  T147] loop4: rw=1, sector=57344, nr_sectors = 360 limit=40427
[  123.898050][  T147] kworker/u8:6: attempt to access beyond end of device
[  123.898050][  T147] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  123.925145][  T147] CPU: 0 UID: 0 PID: 147 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) 
[  123.925171][  T147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  123.925184][  T147] Workqueue: writeback wb_workfn (flush-7:4)
[  123.925223][  T147] Call Trace:
[  123.925230][  T147]  <TASK>
[  123.925239][  T147]  dump_stack_lvl+0xe8/0x150
[  123.925272][  T147]  f2fs_handle_critical_error+0x37c/0x540
[  123.925308][  T147]  f2fs_write_end_io+0x1274/0x1740
[  123.925349][  T147]  __submit_merged_bio+0x256/0x700
[  123.925384][  T147]  __submit_merged_write_cond+0x3c9/0x4e0
[  123.925421][  T147]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  123.925474][  T147]  f2fs_write_data_pages+0x287e/0x34f0
[  123.925551][  T147]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  123.925660][  T147]  ? __lock_acquire+0x6b5/0x2cf0
[  123.925711][  T147]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  123.925743][  T147]  do_writepages+0x32e/0x550
[  123.925776][  T147]  ? reacquire_held_locks+0x104/0x190
[  123.925798][  T147]  ? writeback_sb_inodes+0x477/0x1a20
[  123.925831][  T147]  __writeback_single_inode+0x133/0x11a0
[  123.925860][  T147]  ? do_raw_spin_unlock+0xf5/0x210
[  123.925891][  T147]  writeback_sb_inodes+0x992/0x1a20
[  123.925951][  T147]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  123.925975][  T147]  ? do_raw_spin_lock+0x12b/0x2f0
[  123.926043][  T147]  ? rcu_is_watching+0x15/0xb0
[  123.926075][  T147]  wb_writeback+0x456/0xb70
[  123.926105][  T147]  ? queue_io+0x1d1/0x4a0
[  123.926139][  T147]  ? __pfx_wb_writeback+0x10/0x10
[  123.926163][  T147]  ? do_raw_spin_lock+0x12b/0x2f0
[  123.926206][  T147]  wb_workfn+0x414/0xf50
[  123.926231][  T147]  ? look_up_lock_class+0x57/0x110
[  123.926270][  T147]  ? __pfx_wb_workfn+0x10/0x10
[  123.926296][  T147]  ? do_raw_spin_lock+0x12b/0x2f0
[  123.926325][  T147]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  123.926374][  T147]  ? process_one_work+0x8bb/0x1780
[  123.926403][  T147]  process_one_work+0x9ab/0x1780
[  123.926457][  T147]  ? __pfx_process_one_work+0x10/0x10
[  123.926485][  T147]  ? do_raw_spin_lock+0x12b/0x2f0
[  123.926537][  T147]  worker_thread+0xba8/0x11e0
[  123.926567][  T147]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  123.926592][  T147]  ? __kthread_parkme+0x7a/0x1f0
[  123.926613][  T147]  ? __kthread_parkme+0x19c/0x1f0
[  123.926641][  T147]  kthread+0x388/0x470
[  123.926665][  T147]  ? __pfx_worker_thread+0x10/0x10
[  123.926683][  T147]  ? __pfx_kthread+0x10/0x10
[  123.926709][  T147]  ret_from_fork+0x51e/0xb90
[  123.926742][  T147]  ? __pfx_ret_from_fork+0x10/0x10
[  123.926770][  T147]  ? __switch_to+0xc7d/0x1450
[  123.926800][  T147]  ? __pfx_kthread+0x10/0x10
[  123.926826][  T147]  ret_from_fork_asm+0x1a/0x30
[  123.926865][  T147]  </TASK>
[  123.928269][  T147] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  124.288402][ T6238] loop3: detected capacity change from 0 to 512
[  124.316658][ T6238] EXT4-fs: Ignoring removed nomblk_io_submit option
[  124.358602][ T6238] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #11: comm syz.3.68: iget: bad extended attribute block 3153
[  124.376726][ T6238] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  124.380765][ T6238] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.68: couldn't read orphan inode 11 (err -117)
[  124.390504][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  124.390607][    C0] EXT4-fs (loop3): initial error at time 1773936459: ext4_orphan_get:1391: inode 11
[  124.390638][    C0] EXT4-fs (loop3): last error at time 1773936459: ext4_orphan_get:1391: inode 11
[  124.433871][ T6238] loop3: lost filesystem error report for type 5 error -117
[  124.437433][ T6238] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  124.581033][ T5854] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  124.708650][   T13] team0 (unregistering): Port device team_slave_1 removed
[  124.789898][   T13] team0 (unregistering): Port device team_slave_0 removed
[  125.058790][ T6133] batman_adv: batadv0: Adding interface: batadv_slave_0
[  125.083329][ T6133] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  125.143397][ T6133] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  125.193810][ T6109] hsr_slave_0: entered promiscuous mode
[  125.212465][ T6109] hsr_slave_1: entered promiscuous mode
[  125.231900][ T6109] debugfs: 'hsr0' already exists in 'hsr'
[  125.250636][ T6109] Cannot create hsr debugfs directory
[  125.335752][ T6133] batman_adv: batadv0: Adding interface: batadv_slave_1
[  125.358444][ T6133] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  125.390649][ T6241] loop3: detected capacity change from 0 to 40427
[  125.428526][ T6241] F2FS-fs (loop3): build fault injection rate: 771
[  125.439383][ T6241] F2FS-fs (loop3): invalid crc value
[  125.455369][ T6133] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  125.658022][ T6241] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  125.681926][ T6241] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  125.805317][ T6243] loop4: detected capacity change from 0 to 40427
[  125.828793][ T6243] F2FS-fs (loop4): invalid crc value
[  125.976330][ T5854] syz-executor: attempt to access beyond end of device
[  125.976330][ T5854] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  125.992234][ T5854] CPU: 0 UID: 0 PID: 5854 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  125.992262][ T5854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  125.992275][ T5854] Call Trace:
[  125.992283][ T5854]  <TASK>
[  125.992292][ T5854]  dump_stack_lvl+0xe8/0x150
[  125.992329][ T5854]  f2fs_handle_critical_error+0x37c/0x540
[  125.992367][ T5854]  f2fs_write_end_io+0x1274/0x1740
[  125.992413][ T5854]  __submit_merged_bio+0x256/0x700
[  125.992450][ T5854]  __submit_merged_write_cond+0x3c9/0x4e0
[  125.992490][ T5854]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  125.992552][ T5854]  f2fs_write_data_pages+0x287e/0x34f0
[  125.992583][ T5854]  ? is_bpf_text_address+0x26/0x2b0
[  125.992656][ T5854]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  125.992706][ T5854]  ? do_raw_spin_lock+0x12b/0x2f0
[  125.992767][ T5854]  ? do_raw_spin_unlock+0xf5/0x210
[  125.992801][ T5854]  ? __lock_acquire+0x6b5/0x2cf0
[  125.992860][ T5854]  ? __lock_acquire+0x6b5/0x2cf0
[  125.992897][ T5854]  ? do_raw_spin_lock+0x12b/0x2f0
[  125.992935][ T5854]  ? do_raw_spin_unlock+0xf5/0x210
[  125.992961][ T5854]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  125.992994][ T5854]  do_writepages+0x32e/0x550
[  125.993032][ T5854]  ? do_raw_spin_unlock+0xf5/0x210
[  125.993063][ T5854]  filemap_fdatawrite+0x1e9/0x2f0
[  125.993093][ T5854]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  125.993170][ T5854]  ? do_raw_spin_unlock+0xf5/0x210
[  125.993203][ T5854]  f2fs_sync_dirty_inodes+0x30e/0x860
[  125.993242][ T5854]  f2fs_write_checkpoint+0x9df/0x26a0
[  125.993304][ T5854]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  125.993376][ T5854]  ? kfree+0x1c5/0x650
[  125.993404][ T5854]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  125.993438][ T5854]  kill_f2fs_super+0x314/0x720
[  125.993477][ T5854]  ? __pfx_kill_f2fs_super+0x10/0x10
[  125.993526][ T5854]  ? lockdep_hardirqs_on+0x7a/0x110
[  125.993570][ T5854]  deactivate_locked_super+0xbc/0x130
[  125.993604][ T5854]  cleanup_mnt+0x437/0x4d0
[  125.993624][ T5854]  ? _raw_spin_unlock_irq+0x23/0x50
[  125.993652][ T5854]  task_work_run+0x1d9/0x270
[  125.993684][ T5854]  ? __pfx_task_work_run+0x10/0x10
[  125.993725][ T5854]  exit_to_user_mode_loop+0xed/0x480
[  125.993753][ T5854]  ? rcu_is_watching+0x15/0xb0
[  125.993780][ T5854]  do_syscall_64+0x32d/0xf80
[  125.993805][ T5854]  ? trace_irq_disable+0x3b/0x150
[  125.993855][ T5854]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.993878][ T5854]  ? clear_bhb_loop+0x40/0x90
[  125.993905][ T5854]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.993926][ T5854] RIP: 0033:0x7fd1a539d9d7
[  125.993947][ T5854] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  125.993964][ T5854] RSP: 002b:00007ffc6131a578 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  125.993985][ T5854] RAX: 0000000000000000 RBX: 00007fd1a5432050 RCX: 00007fd1a539d9d7
[  125.993998][ T5854] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc6131a630
[  125.994011][ T5854] RBP: 00007ffc6131a630 R08: 00007ffc6131b630 R09: 00000000ffffffff
[  125.994024][ T5854] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc6131b6c0
[  125.994036][ T5854] R13: 00007fd1a5432050 R14: 000000000001eb67 R15: 00007ffc6131b700
[  125.994073][ T5854]  </TASK>
[  126.162390][ T6243] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  126.232288][ T5854] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  126.350646][ T6243] F2FS-fs (loop4): Start checkpoint disabled!
[  126.374499][ T6243] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0
[  126.397680][ T6243] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  126.458179][ T6133] hsr_slave_0: entered promiscuous mode
[  126.475566][ T6133] hsr_slave_1: entered promiscuous mode
[  126.498879][ T6133] debugfs: 'hsr0' already exists in 'hsr'
[  126.520643][ T6133] Cannot create hsr debugfs directory
[  126.587832][ T1178] kworker/u8:11: attempt to access beyond end of device
[  126.587832][ T1178] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  126.629330][ T1178] CPU: 0 UID: 0 PID: 1178 Comm: kworker/u8:11 Not tainted syzkaller #0 PREEMPT(full) 
[  126.629359][ T1178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  126.629372][ T1178] Workqueue: writeback wb_workfn (flush-7:4)
[  126.629404][ T1178] Call Trace:
[  126.629412][ T1178]  <TASK>
[  126.629421][ T1178]  dump_stack_lvl+0xe8/0x150
[  126.629455][ T1178]  f2fs_handle_critical_error+0x37c/0x540
[  126.629496][ T1178]  f2fs_write_end_io+0x1274/0x1740
[  126.629539][ T1178]  __submit_merged_bio+0x256/0x700
[  126.629575][ T1178]  __submit_merged_write_cond+0x3c9/0x4e0
[  126.629620][ T1178]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  126.629673][ T1178]  f2fs_write_data_pages+0x287e/0x34f0
[  126.629742][ T1178]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  126.629787][ T1178]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  126.629869][ T1178]  ? seqcount_lockdep_reader_access+0xd4/0x100
[  126.629900][ T1178]  ? ktime_get+0x1f5/0x220
[  126.629928][ T1178]  ? lapic_next_event+0x11/0x20
[  126.629967][ T1178]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  126.629999][ T1178]  do_writepages+0x32e/0x550
[  126.630033][ T1178]  ? reacquire_held_locks+0x104/0x190
[  126.630055][ T1178]  ? writeback_sb_inodes+0x477/0x1a20
[  126.630089][ T1178]  __writeback_single_inode+0x133/0x11a0
[  126.630119][ T1178]  ? do_raw_spin_unlock+0xf5/0x210
[  126.630150][ T1178]  writeback_sb_inodes+0x992/0x1a20
[  126.630208][ T1178]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  126.630232][ T1178]  ? do_raw_spin_lock+0x12b/0x2f0
[  126.630301][ T1178]  ? rcu_is_watching+0x15/0xb0
[  126.630332][ T1178]  wb_writeback+0x456/0xb70
[  126.630363][ T1178]  ? queue_io+0x1d1/0x4a0
[  126.630397][ T1178]  ? __pfx_wb_writeback+0x10/0x10
[  126.630421][ T1178]  ? do_raw_spin_lock+0x12b/0x2f0
[  126.630465][ T1178]  wb_workfn+0x414/0xf50
[  126.630490][ T1178]  ? look_up_lock_class+0x57/0x110
[  126.630530][ T1178]  ? __pfx_wb_workfn+0x10/0x10
[  126.630556][ T1178]  ? do_raw_spin_lock+0x12b/0x2f0
[  126.630583][ T1178]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  126.630640][ T1178]  ? process_one_work+0x8bb/0x1780
[  126.630670][ T1178]  process_one_work+0x9ab/0x1780
[  126.630725][ T1178]  ? __pfx_process_one_work+0x10/0x10
[  126.630753][ T1178]  ? do_raw_spin_lock+0x12b/0x2f0
[  126.630797][ T1178]  worker_thread+0xba8/0x11e0
[  126.630828][ T1178]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  126.630853][ T1178]  ? __kthread_parkme+0x7a/0x1f0
[  126.630875][ T1178]  ? __kthread_parkme+0x19c/0x1f0
[  126.630903][ T1178]  kthread+0x388/0x470
[  126.630928][ T1178]  ? __pfx_worker_thread+0x10/0x10
[  126.630946][ T1178]  ? __pfx_kthread+0x10/0x10
[  126.630973][ T1178]  ret_from_fork+0x51e/0xb90
[  126.631007][ T1178]  ? __pfx_ret_from_fork+0x10/0x10
[  126.631035][ T1178]  ? __switch_to+0xc7d/0x1450
[  126.631065][ T1178]  ? __pfx_kthread+0x10/0x10
[  126.631092][ T1178]  ret_from_fork_asm+0x1a/0x30
[  126.631130][ T1178]  </TASK>
[  126.938091][ T1178] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  126.998717][ T6098] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  127.105054][ T6098] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  127.122175][ T6098] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  127.195560][ T6098] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  127.781209][ T6280] loop4: detected capacity change from 0 to 256
[  127.794448][ T6280] exfat: Bad value for 'uid'
[  127.799486][ T6280] exfat: Bad value for 'uid'
[  127.823360][ T5847] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  127.952284][ T6282] loop4: detected capacity change from 0 to 256
[  127.983918][ T5847] usb 4-1: Using ep0 maxpacket: 32
[  128.028719][ T6282] FAT-fs (loop4): Directory bread(block 64) failed
[  128.045271][ T6109] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  128.052575][ T6282] FAT-fs (loop4): Directory bread(block 65) failed
[  128.067491][ T5847] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  128.084619][ T6282] FAT-fs (loop4): Directory bread(block 66) failed
[  128.108719][ T6109] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  128.116109][ T5847] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  128.118807][ T6282] FAT-fs (loop4): Directory bread(block 67) failed
[  128.141395][ T5847] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  128.151282][ T6282] FAT-fs (loop4): Directory bread(block 68) failed
[  128.161517][ T5847] usb 4-1: Product: syz
[  128.169092][ T5847] usb 4-1: Manufacturer: syz
[  128.181828][ T6282] FAT-fs (loop4): Directory bread(block 69) failed
[  128.199969][ T6109] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  128.207762][ T6282] FAT-fs (loop4): Directory bread(block 70) failed
[  128.215569][ T6282] FAT-fs (loop4): Directory bread(block 71) failed
[  128.226018][ T6282] FAT-fs (loop4): Directory bread(block 72) failed
[  128.240619][ T6109] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  128.248991][ T6282] FAT-fs (loop4): Directory bread(block 73) failed
[  128.257292][ T5847] hub 4-1:4.0: USB hub found
[  128.399954][ T5847] hub 4-1:4.0: config failed, can't read hub descriptor (err -22)
[  128.466973][ T5847] usb 4-1: USB disconnect, device number 3
[  128.757594][ T6133] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  128.799582][ T6133] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  128.867476][ T6133] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  128.902373][ T6133] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  129.003041][ T6098] 8021q: adding VLAN 0 to HW filter on device bond0
[  129.163945][    T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  129.202777][ T6098] 8021q: adding VLAN 0 to HW filter on device team0
[  129.240590][   T58] bridge0: port 1(bridge_slave_0) entered blocking state
[  129.248611][   T58] bridge0: port 1(bridge_slave_0) entered forwarding state
[  129.303764][  T147] bridge0: port 2(bridge_slave_1) entered blocking state
[  129.311304][  T147] bridge0: port 2(bridge_slave_1) entered forwarding state
[  129.351973][ T6109] 8021q: adding VLAN 0 to HW filter on device bond0
[  129.371158][    T9] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  129.404788][ T5922] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  129.416026][    T9] usb 5-1: config 220 has 1 interface, different from the descriptor's value: 3
[  129.433053][    T9] usb 5-1: config 220 interface 0 has no altsetting 0
[  129.443606][    T9] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  129.452871][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.466521][    T9] usb 5-1: Product: syz
[  129.471320][    T9] usb 5-1: Manufacturer: syz
[  129.478395][    T9] usb 5-1: SerialNumber: syz
[  129.574130][ T5922] usb 4-1: Using ep0 maxpacket: 32
[  129.586987][ T5922] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  129.610814][ T6133] 8021q: adding VLAN 0 to HW filter on device bond0
[  129.611593][ T5922] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  129.649925][ T6109] 8021q: adding VLAN 0 to HW filter on device team0
[  129.658568][ T5922] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.680196][ T5922] usb 4-1: Product: syz
[  129.698479][ T5922] usb 4-1: Manufacturer: syz
[  129.717988][ T5922] usb 4-1: SerialNumber: syz
[  129.739240][    T9] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  129.752642][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  129.760285][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  129.768853][    T9] uvcvideo 5-1:220.0: No valid video chain found.
[  129.779787][ T5922] usb 4-1: config 0 descriptor??
[  129.826146][    T9] usb 5-1: USB disconnect, device number 4
[  129.837432][ T5922] usb 4-1: No union descriptors
[  129.879943][ T5922] usb 4-1: unsupported MDLM descriptors
[  129.890246][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  129.897715][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  129.997250][ T5922] usb 4-1: USB disconnect, device number 4
[  130.019996][ T6133] 8021q: adding VLAN 0 to HW filter on device team0
[  130.088755][ T1178] bridge0: port 1(bridge_slave_0) entered blocking state
[  130.096258][ T1178] bridge0: port 1(bridge_slave_0) entered forwarding state
[  130.197020][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  130.204390][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  130.705615][ T6098] 8021q: adding VLAN 0 to HW filter on device batadv0
[  131.168179][ T6109] 8021q: adding VLAN 0 to HW filter on device batadv0
[  131.317346][ T6133] 8021q: adding VLAN 0 to HW filter on device batadv0
[  132.005535][ T6098] veth0_vlan: entered promiscuous mode
[  132.102545][ T6098] veth1_vlan: entered promiscuous mode
[  132.879180][ T6098] veth0_macvtap: entered promiscuous mode
[  132.892324][ T6098] veth1_macvtap: entered promiscuous mode
[  133.072454][ T6098] batman_adv: batadv0: Interface activated: batadv_slave_0
[  133.142171][ T6098] batman_adv: batadv0: Interface activated: batadv_slave_1
[  133.239450][   T43] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  133.291789][ T6109] veth0_vlan: entered promiscuous mode
[  133.302364][ T6384] loop3: detected capacity change from 0 to 2048
[  133.322174][   T43] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  133.427346][ T6133] veth0_vlan: entered promiscuous mode
[  133.464292][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[  133.474588][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[  133.544391][   T43] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  133.566719][ T6384] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  133.579832][   T43] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  133.692009][   T30] audit: type=1800 audit(1773936468.458:6): pid=6392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.80" name="file1" dev="loop3" ino=15 res=0 errno=0
[  133.923331][ T6394] loop4: detected capacity change from 0 to 256
[  133.937118][ T6394] msdos: Bad value for 'uid'
[  133.942049][ T6394] msdos: Bad value for 'uid'
[  134.510222][ T6109] veth1_vlan: entered promiscuous mode
[  134.571646][ T6133] veth1_vlan: entered promiscuous mode
[  134.578781][ T5854] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  135.025262][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  135.062066][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  135.381805][ T6109] veth0_macvtap: entered promiscuous mode
[  135.411285][ T6133] veth0_macvtap: entered promiscuous mode
[  135.450444][   T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  135.481422][ T6109] veth1_macvtap: entered promiscuous mode
[  135.494413][   T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  135.584643][ T6133] veth1_macvtap: entered promiscuous mode
[  136.500690][ T6109] batman_adv: batadv0: Interface activated: batadv_slave_0
[  136.539415][ T6133] batman_adv: batadv0: Interface activated: batadv_slave_0
[  136.590953][ T6109] batman_adv: batadv0: Interface activated: batadv_slave_1
[  136.644019][ T6133] batman_adv: batadv0: Interface activated: batadv_slave_1
[  136.738885][   T43] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  136.771280][   T43] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  136.808740][   T43] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  136.828912][   T43] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  136.891893][   T43] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  136.899429][ T6427] loop4: detected capacity change from 0 to 512
[  136.944464][   T43] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  137.030247][   T43] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  137.075177][ T6427] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  137.075452][   T43] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  137.088524][ T6427] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  137.138936][ T6431] loop5: detected capacity change from 0 to 256
[  137.324922][ T6431] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x8978cc48, utbl_chksum : 0xe619d30d)
[  137.548239][ T6433] EXT4-fs warning (device loop4): ext4_group_extend:1885: will only finish group (16384 blocks, 16256 new)
[  137.564293][ T6433] EXT4-fs warning (device loop4): ext4_group_extend:1890: can't read last block, resize aborted
[  138.150234][ T6431] exFAT-fs (loop5): start_clu is invalid cluster(0xffffffff)
[  138.308775][ T5843] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  138.621954][ T1113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  138.646883][ T1113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  138.746775][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  138.774269][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  138.838503][ T6441] loop4: detected capacity change from 0 to 256
[  139.158207][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  139.195349][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  139.267934][   T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  139.289842][   T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  142.908372][   T12] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.200226][ T6485] loop6: detected capacity change from 0 to 256
[  143.311430][ T6485] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x8978cc48, utbl_chksum : 0xe619d30d)
[  143.407783][   T12] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.567978][ T6485] exFAT-fs (loop6): error, invalid access to FAT (entry 0xffffffff)
[  143.697272][ T6485] exFAT-fs (loop6): Filesystem has been set read-only
[  144.406297][ T6491] loop3: detected capacity change from 0 to 512
[  144.431980][ T6494] loop5: detected capacity change from 0 to 256
[  144.480569][ T5859] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  144.500298][ T5859] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  144.512654][ T5859] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  144.521268][ T6491] EXT4-fs: Ignoring removed oldalloc option
[  144.528675][ T5859] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  144.540460][ T5859] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  144.572360][   T12] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.586206][ T6491] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  144.732223][ T6491] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.100: iget: bad i_size value: 38620345925642
[  144.854505][ T6500] loop6: detected capacity change from 0 to 512
[  144.872575][ T6486] loop4: detected capacity change from 0 to 40427
[  144.931923][ T6500] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.102: inode has both inline data and extents flags
[  144.940658][ T6491] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  144.966471][ T6486] F2FS-fs (loop4): invalid crc value
[  145.022930][ T6500] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  145.023183][    C0] EXT4-fs (loop6): error count since last fsck: 1
[  145.040514][    C0] EXT4-fs (loop6): initial error at time 1773936479: ext4_orphan_get:1391: inode 15
[  145.050185][    C0] EXT4-fs (loop6): last error at time 1773936479: ext4_orphan_get:1391: inode 15
[  145.073177][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  145.080093][    C1] EXT4-fs (loop3): initial error at time 1773936479: ext4_orphan_get:1391: inode 15
[  145.089839][    C1] EXT4-fs (loop3): last error at time 1773936479: ext4_orphan_get:1391: inode 15
[  145.108945][ T6491] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.100: couldn't read orphan inode 15 (err -117)
[  145.125066][   T12] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.138153][ T6500] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.102: couldn't read orphan inode 15 (err -117)
[  145.167059][ T6491] loop3: lost filesystem error report for type 5 error -117
[  145.186021][ T6500] loop6: lost filesystem error report for type 5 error -117
[  145.212086][ T6500] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  145.340937][ T6491] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  145.431003][ T6486] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  145.447310][ T6109] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  145.488066][ T6486] F2FS-fs (loop4): Start checkpoint disabled!
[  145.513314][  T808] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  145.531187][ T6486] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0
[  145.569154][ T6486] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  145.661332][ T6510] loop6: detected capacity change from 0 to 512
[  145.683828][  T808] usb 6-1: device descriptor read/64, error -71
[  145.705080][ T6510] EXT4-fs: Ignoring removed i_version option
[  145.801465][ T6510] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  145.859355][   T58] kworker/u8:4: attempt to access beyond end of device
[  145.859355][   T58] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  145.886390][   T43] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm kworker/u8:3: bg 0: block 5: invalid block bitmap
[  145.922183][   T58] CPU: 1 UID: 0 PID: 58 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) 
[  145.922212][   T58] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  145.922225][   T58] Workqueue: writeback wb_workfn (flush-7:4)
[  145.922260][   T58] Call Trace:
[  145.922268][   T58]  <TASK>
[  145.922277][   T58]  dump_stack_lvl+0xe8/0x150
[  145.922313][   T58]  f2fs_handle_critical_error+0x37c/0x540
[  145.922350][   T58]  f2fs_write_end_io+0x1274/0x1740
[  145.922396][   T58]  __submit_merged_bio+0x256/0x700
[  145.922434][   T58]  __submit_merged_write_cond+0x3c9/0x4e0
[  145.922479][   T58]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  145.922537][   T58]  f2fs_write_data_pages+0x287e/0x34f0
[  145.922624][   T58]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  145.922674][   T58]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  145.922740][   T58]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  145.922798][   T58]  ? __lock_acquire+0x6b5/0x2cf0
[  145.922847][   T58]  ? __pfx_f2fs_inode_chksum_set+0x10/0x10
[  145.922875][   T58]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  145.922907][   T58]  do_writepages+0x32e/0x550
[  145.922943][   T58]  ? reacquire_held_locks+0x104/0x190
[  145.922965][   T58]  ? writeback_sb_inodes+0x477/0x1a20
[  145.923000][   T58]  __writeback_single_inode+0x133/0x11a0
[  145.923029][   T58]  ? do_raw_spin_unlock+0xf5/0x210
[  145.923058][   T58]  writeback_sb_inodes+0x992/0x1a20
[  145.923111][   T58]  ? __lock_acquire+0x6b5/0x2cf0
[  145.923148][   T58]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  145.923172][   T58]  ? do_raw_spin_lock+0x12b/0x2f0
[  145.923245][   T58]  ? rcu_is_watching+0x15/0xb0
[  145.923277][   T58]  wb_writeback+0x456/0xb70
[  145.923306][   T58]  ? queue_io+0x1d1/0x4a0
[  145.923342][   T58]  ? __pfx_wb_writeback+0x10/0x10
[  145.923366][   T58]  ? do_raw_spin_lock+0x12b/0x2f0
[  145.923412][   T58]  wb_workfn+0x414/0xf50
[  145.923431][   T58]  ? ktime_get+0x1f5/0x220
[  145.923460][   T58]  ? look_up_lock_class+0x57/0x110
[  145.923501][   T58]  ? __pfx_wb_workfn+0x10/0x10
[  145.923526][   T58]  ? irqentry_exit+0x61a/0x700
[  145.923552][   T58]  ? lockdep_hardirqs_on+0x7a/0x110
[  145.923588][   T58]  ? irqentry_exit+0x61a/0x700
[  145.923612][   T58]  ? trace_irq_disable+0x3b/0x150
[  145.923670][   T58]  ? process_one_work+0x8bb/0x1780
[  145.923699][   T58]  process_one_work+0x9ab/0x1780
[  145.923754][   T58]  ? __pfx_process_one_work+0x10/0x10
[  145.923782][   T58]  ? do_raw_spin_lock+0x12b/0x2f0
[  145.923828][   T58]  worker_thread+0xba8/0x11e0
[  145.923860][   T58]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  145.923886][   T58]  ? __kthread_parkme+0x7a/0x1f0
[  145.923908][   T58]  ? __kthread_parkme+0x19c/0x1f0
[  145.923936][   T58]  kthread+0x388/0x470
[  145.923961][   T58]  ? __pfx_worker_thread+0x10/0x10
[  145.923979][   T58]  ? __pfx_kthread+0x10/0x10
[  145.924006][   T58]  ret_from_fork+0x51e/0xb90
[  145.924041][   T58]  ? __pfx_ret_from_fork+0x10/0x10
[  145.924069][   T58]  ? __switch_to+0xc7d/0x1450
[  145.924102][   T58]  ? __pfx_kthread+0x10/0x10
[  145.924129][   T58]  ret_from_fork_asm+0x1a/0x30
[  145.924171][   T58]  </TASK>
[  146.308196][  T808] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  146.320998][   T58] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  146.331817][   T43] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 384 with error 28
[  146.358400][   T43] EXT4-fs (loop3): This should not happen!! Data will be lost
[  146.358400][   T43] 
[  146.371791][   T43] EXT4-fs (loop3): Total free blocks count 0
[  146.379301][   T43] EXT4-fs (loop3): Free/Dirty block details
[  146.415407][ T6109] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  146.453699][  T808] usb 6-1: device descriptor read/64, error -71
[  146.464897][   T43] EXT4-fs (loop3): free_blocks=0
[  146.471762][   T43] EXT4-fs (loop3): dirty_blocks=384
[  146.477819][   T43] EXT4-fs (loop3): Block reservation details
[  146.484191][   T43] EXT4-fs (loop3): i_reserved_data_blocks=384
[  146.563673][  T808] usb usb6-port1: attempt power cycle
[  146.573278][ T5850] Bluetooth: hci5: command tx timeout
[  146.666462][ T5854] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  146.718023][   T12] bridge_slave_1: left allmulticast mode
[  146.730343][   T12] bridge_slave_1: left promiscuous mode
[  146.750917][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  146.790122][   T12] bridge_slave_0: left allmulticast mode
[  146.800771][   T12] bridge_slave_0: left promiscuous mode
[  146.811186][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  146.903298][  T808] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  146.934047][  T808] usb 6-1: device descriptor read/8, error -71
[  147.183373][  T808] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  147.234446][  T808] usb 6-1: device descriptor read/8, error -71
[  147.331291][ T6527] netlink: 32 bytes leftover after parsing attributes in process `syz.4.105'.
[  147.355349][  T808] usb usb6-port1: unable to enumerate USB device
[  147.398873][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  147.419162][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  147.432487][   T12] bond0 (unregistering): Released all slaves
[  147.493575][ T6527] netlink: 76 bytes leftover after parsing attributes in process `syz.4.105'.
[  147.507634][ T6527] tipc: Started in network mode
[  147.529629][ T6527] tipc: Node identity ffffffff, cluster identity 4711
[  147.559131][ T6527] tipc: Node number set to 4294967295
[  147.607506][ T6493] chnl_net:caif_netlink_parms(): no params data found
[  147.796075][ T6535] loop4: detected capacity change from 0 to 256
[  147.900470][ T6535] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x5955b8de, utbl_chksum : 0xe619d30d)
[  147.926218][ T6536] loop3: detected capacity change from 0 to 128
[  147.937742][ T6536] EXT4-fs (loop3): Test dummy encryption mode enabled
[  147.964789][ T6536] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  147.977839][ T6536] ext4 filesystem being mounted at /36/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  148.821629][ T5850] Bluetooth: hci5: command tx timeout
[  150.323363][ T5892] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  150.515435][ T5892] usb 6-1: config 220 has an invalid interface number: 76 but max is 2
[  150.528069][ T5892] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  150.547753][ T5892] usb 6-1: config 220 has an invalid descriptor of length 178, skipping remainder of the config
[  150.573848][ T5892] usb 6-1: config 220 has no interface number 2
[  150.595437][ T5892] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  150.631177][ T5892] usb 6-1: config 220 interface 0 has no altsetting 0
[  150.651087][ T5892] usb 6-1: config 220 interface 76 has no altsetting 0
[  150.678792][ T5892] usb 6-1: config 220 interface 1 has no altsetting 0
[  150.715787][ T5892] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  150.739331][ T5892] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  150.766207][ T5892] usb 6-1: Product: syz
[  150.779607][ T5892] usb 6-1: Manufacturer: syz
[  150.796383][ T5892] usb 6-1: SerialNumber: syz
[  150.893596][ T5859] Bluetooth: hci5: command tx timeout
[  151.078222][ T5854] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  151.165723][ T5892] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  151.190530][ T5892] uvcvideo 6-1:220.0: No valid video chain found.
[  151.234591][ T5892] usb 6-1: selecting invalid altsetting 0
[  151.336897][ T5892] usb 6-1: selecting invalid altsetting 0
[  151.351493][ T5892] usbtest 6-1:220.1: probe with driver usbtest failed with error -22
[  151.387987][ T5892] usb 6-1: USB disconnect, device number 6
[  152.768698][ T6573] loop3: detected capacity change from 0 to 2048
[  152.805926][ T6493] bridge0: port 1(bridge_slave_0) entered blocking state
[  152.862203][ T6493] bridge0: port 1(bridge_slave_0) entered disabled state
[  152.875172][ T6573] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  152.915223][    T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  152.926548][ T6493] bridge_slave_0: entered allmulticast mode
[  152.960550][ T6573] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  152.975116][ T5859] Bluetooth: hci5: command tx timeout
[  152.992856][ T6493] bridge_slave_0: entered promiscuous mode
[  153.032096][   T12] hsr_slave_0: left promiscuous mode
[  153.047593][   T12] hsr_slave_1: left promiscuous mode
[  153.070274][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  153.079094][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  153.092382][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  153.105351][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  153.117484][    T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  153.141950][    T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  153.158937][    T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  153.183027][   T12] veth1_macvtap: left promiscuous mode
[  153.192202][    T9] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  153.201748][   T12] veth0_macvtap: left promiscuous mode
[  153.212172][   T12] veth1_vlan: left promiscuous mode
[  153.234418][    T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  153.243637][   T12] veth0_vlan: left promiscuous mode
[  153.309246][    T9] usb 7-1: config 0 descriptor??
[  153.471787][ T5854] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  153.777294][ T6592] loop3: detected capacity change from 0 to 256
[  153.788887][    T9] plantronics 0003:047F:FFFF.0002: unbalanced delimiter at end of report description
[  153.812262][    T9] plantronics 0003:047F:FFFF.0002: parse failed
[  153.819386][    T9] plantronics 0003:047F:FFFF.0002: probe with driver plantronics failed with error -22
[  153.982018][ T6592] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x8978cc48, utbl_chksum : 0xe619d30d)
[  154.091737][   T29] usb 7-1: USB disconnect, device number 2
[  156.958220][ T6611] loop5: detected capacity change from 0 to 1024
[  156.979774][ T6611] EXT4-fs: Ignoring removed bh option
[  156.995468][   T12] team0 (unregistering): Port device team_slave_1 removed
[  157.082471][ T6616] loop4: detected capacity change from 0 to 2048
[  157.089665][ T6611] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  157.110822][   T12] team0 (unregistering): Port device team_slave_0 removed
[  157.145431][ T6611] EXT4-fs error (device loop5): ext4_find_dest_de:2050: inode #12: block 7: comm syz.5.128: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0
[  157.174679][ T6611] EXT4-fs (loop5): Remounting filesystem read-only
[  157.263414][ T6616] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  157.303738][ T6098] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  157.319074][ T6616] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  157.381246][   T30] audit: type=1800 audit(1773936492.158:7): pid=6616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.129" name="file2" dev="loop4" ino=16 res=0 errno=0
[  157.485171][ T5843] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  157.692442][ T6624] mmap: syz.5.130 (6624) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  157.827727][ T6626] loop4: detected capacity change from 0 to 256
[  157.844127][ T6493] bridge0: port 2(bridge_slave_1) entered blocking state
[  157.869160][ T6493] bridge0: port 2(bridge_slave_1) entered disabled state
[  157.885875][ T6493] bridge_slave_1: entered allmulticast mode
[  157.909922][ T6493] bridge_slave_1: entered promiscuous mode
[  158.283107][ T6493] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  158.939977][ T6493] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  159.237460][ T6642] loop6: detected capacity change from 0 to 1024
[  159.306609][ T6642] EXT4-fs: Ignoring removed bh option
[  159.360233][ T6642] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  159.439780][ T6493] team0: Port device team_slave_0 added
[  159.486619][ T6642] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  159.554721][ T6493] team0: Port device team_slave_1 added
[  159.634334][ T6642] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  160.052902][ T6493] batman_adv: batadv0: Adding interface: batadv_slave_0
[  160.072202][ T6493] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  160.109683][ T6109] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  160.141859][ T6493] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  160.166023][ T6493] batman_adv: batadv0: Adding interface: batadv_slave_1
[  160.191340][ T6493] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  160.324633][ T6493] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  161.762262][ T6493] hsr_slave_0: entered promiscuous mode
[  161.780232][ T6683] loop4: detected capacity change from 0 to 256
[  161.802029][ T6493] hsr_slave_1: entered promiscuous mode
[  161.835889][ T6493] debugfs: 'hsr0' already exists in 'hsr'
[  161.866474][ T6493] Cannot create hsr debugfs directory
[  163.074458][ T5975] f2fs_ckpt-7:0: attempt to access beyond end of device
[  163.074458][ T5975] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  163.129409][ T5975] CPU: 0 UID: 0 PID: 5975 Comm: f2fs_ckpt-7:0 Not tainted syzkaller #0 PREEMPT(full) 
[  163.129443][ T5975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  163.129456][ T5975] Call Trace:
[  163.129465][ T5975]  <TASK>
[  163.129474][ T5975]  dump_stack_lvl+0xe8/0x150
[  163.129510][ T5975]  f2fs_handle_critical_error+0x37c/0x540
[  163.129546][ T5975]  f2fs_write_end_io+0x1274/0x1740
[  163.129590][ T5975]  __submit_merged_bio+0x256/0x700
[  163.129626][ T5975]  __submit_merged_write_cond+0x3c9/0x4e0
[  163.129664][ T5975]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  163.129717][ T5975]  f2fs_write_data_pages+0x287e/0x34f0
[  163.129747][ T5975]  ? unwind_next_frame+0xa5/0x23c0
[  163.129806][ T5975]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  163.129852][ T5975]  ? do_raw_spin_lock+0x12b/0x2f0
[  163.129908][ T5975]  ? do_raw_spin_unlock+0xf5/0x210
[  163.129935][ T5975]  ? __bfs+0x153/0x290
[  163.129952][ T5975]  ? __pfx_hlock_conflict+0x10/0x10
[  163.129994][ T5975]  ? lockdep_unlock+0x5d/0xd0
[  163.130021][ T5975]  ? __lock_acquire+0x146e/0x2cf0
[  163.130076][ T5975]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  163.130115][ T5975]  do_writepages+0x32e/0x550
[  163.130150][ T5975]  ? do_raw_spin_unlock+0xf5/0x210
[  163.130178][ T5975]  filemap_fdatawrite+0x1e9/0x2f0
[  163.130207][ T5975]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  163.130279][ T5975]  ? do_raw_spin_unlock+0xf5/0x210
[  163.130310][ T5975]  f2fs_sync_dirty_inodes+0x30e/0x860
[  163.130344][ T5975]  f2fs_write_checkpoint+0x9df/0x26a0
[  163.130399][ T5975]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  163.130462][ T5975]  ? down_write+0x16d/0x200
[  163.130490][ T5975]  ? __pfx_down_write+0x10/0x10
[  163.130514][ T5975]  ? uplift_priority+0xdb/0x730
[  163.130541][ T5975]  ? __schedule+0x167b/0x5590
[  163.130568][ T5975]  __write_checkpoint_sync+0x124/0x2b0
[  163.130595][ T5975]  ? __pfx___write_checkpoint_sync+0x10/0x10
[  163.130631][ T5975]  ? __pfx___schedule+0x10/0x10
[  163.130670][ T5975]  __checkpoint_and_complete_reqs+0x53/0x2d0
[  163.130700][ T5975]  issue_checkpoint_thread+0xd6/0x280
[  163.130726][ T5975]  ? __pfx_issue_checkpoint_thread+0x10/0x10
[  163.130748][ T5975]  ? __pfx_autoremove_wake_function+0x10/0x10
[  163.130778][ T5975]  ? __kthread_parkme+0x7a/0x1f0
[  163.130810][ T5975]  kthread+0x388/0x470
[  163.130836][ T5975]  ? __pfx_issue_checkpoint_thread+0x10/0x10
[  163.130856][ T5975]  ? __pfx_kthread+0x10/0x10
[  163.130882][ T5975]  ret_from_fork+0x51e/0xb90
[  163.130916][ T5975]  ? __pfx_ret_from_fork+0x10/0x10
[  163.130942][ T5975]  ? __switch_to+0xc7d/0x1450
[  163.130975][ T5975]  ? __pfx_kthread+0x10/0x10
[  163.131001][ T5975]  ret_from_fork_asm+0x1a/0x30
[  163.131039][ T5975]  </TASK>
[  163.404686][ T5975] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  163.413373][ T5975] CPU: 0 UID: 0 PID: 5975 Comm: f2fs_ckpt-7:0 Not tainted syzkaller #0 PREEMPT(full) 
[  163.413404][ T5975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  163.413417][ T5975] Call Trace:
[  163.413425][ T5975]  <TASK>
[  163.413434][ T5975]  dump_stack_lvl+0xe8/0x150
[  163.413539][ T5975]  f2fs_handle_critical_error+0x37c/0x540
[  163.413578][ T5975]  f2fs_write_end_io+0x1274/0x1740
[  163.413619][ T5975]  __submit_merged_bio+0x256/0x700
[  163.413659][ T5975]  __submit_merged_write_cond+0x3c9/0x4e0
[  163.413696][ T5975]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  163.413748][ T5975]  f2fs_write_data_pages+0x287e/0x34f0
[  163.413779][ T5975]  ? unwind_next_frame+0xa5/0x23c0
[  163.413838][ T5975]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  163.413884][ T5975]  ? do_raw_spin_lock+0x12b/0x2f0
[  163.413937][ T5975]  ? do_raw_spin_unlock+0xf5/0x210
[  163.413967][ T5975]  ? __bfs+0x153/0x290
[  163.413986][ T5975]  ? __pfx_hlock_conflict+0x10/0x10
[  163.414028][ T5975]  ? lockdep_unlock+0x5d/0xd0
[  163.414055][ T5975]  ? __lock_acquire+0x146e/0x2cf0
[  163.414110][ T5975]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  163.414142][ T5975]  do_writepages+0x32e/0x550
[  163.414180][ T5975]  ? do_raw_spin_unlock+0xf5/0x210
[  163.414211][ T5975]  filemap_fdatawrite+0x1e9/0x2f0
[  163.414241][ T5975]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  163.414313][ T5975]  ? do_raw_spin_unlock+0xf5/0x210
[  163.414345][ T5975]  f2fs_sync_dirty_inodes+0x30e/0x860
[  163.414383][ T5975]  f2fs_write_checkpoint+0x9df/0x26a0
[  163.414439][ T5975]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  163.414508][ T5975]  ? down_write+0x16d/0x200
[  163.414538][ T5975]  ? __pfx_down_write+0x10/0x10
[  163.414564][ T5975]  ? uplift_priority+0xdb/0x730
[  163.414593][ T5975]  ? __schedule+0x167b/0x5590
[  163.414623][ T5975]  __write_checkpoint_sync+0x124/0x2b0
[  163.414652][ T5975]  ? __pfx___write_checkpoint_sync+0x10/0x10
[  163.414689][ T5975]  ? __pfx___schedule+0x10/0x10
[  163.414729][ T5975]  __checkpoint_and_complete_reqs+0x53/0x2d0
[  163.414761][ T5975]  issue_checkpoint_thread+0xd6/0x280
[  163.414788][ T5975]  ? __pfx_issue_checkpoint_thread+0x10/0x10
[  163.414813][ T5975]  ? __pfx_autoremove_wake_function+0x10/0x10
[  163.414842][ T5975]  ? __kthread_parkme+0x7a/0x1f0
[  163.414874][ T5975]  kthread+0x388/0x470
[  163.414899][ T5975]  ? __pfx_issue_checkpoint_thread+0x10/0x10
[  163.414919][ T5975]  ? __pfx_kthread+0x10/0x10
[  163.414945][ T5975]  ret_from_fork+0x51e/0xb90
[  163.414979][ T5975]  ? __pfx_ret_from_fork+0x10/0x10
[  163.415007][ T5975]  ? __switch_to+0xc7d/0x1450
[  163.415038][ T5975]  ? __pfx_kthread+0x10/0x10
[  163.415065][ T5975]  ret_from_fork_asm+0x1a/0x30
[  163.415101][ T5975]  </TASK>
[  163.415111][ T5975] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  163.815685][ T6713] ipip0: entered promiscuous mode
[  163.830167][ T6713] ipip0: entered allmulticast mode
[  168.944388][ T6723] netlink: 'syz.6.155': attribute type 29 has an invalid length.
[  169.210500][ T6753] loop5: detected capacity change from 0 to 512
[  169.248999][ T6753] EXT4-fs: Ignoring removed oldalloc option
[  169.280807][ T6751] xt_hashlimit: size too large, truncated to 1048576
[  169.371036][ T6753] EXT4-fs (loop5): 1 truncate cleaned up
[  169.488134][ T6753] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  169.522733][ T6765] veth0_vlan: entered allmulticast mode
[  170.488083][ T6098] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  170.531024][ T6778] loop3: detected capacity change from 0 to 256
[  171.713181][ T6493] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  171.846992][ T6493] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  172.738169][ T6493] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  172.870686][ T6493] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  173.936212][ T6810] loop4: detected capacity change from 0 to 512
[  174.405204][ T6810] EXT4-fs: Ignoring removed nobh option
[  174.629379][ T6810] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  174.742755][ T6810] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  174.837446][ T6493] 8021q: adding VLAN 0 to HW filter on device bond0
[  174.899542][ T6493] 8021q: adding VLAN 0 to HW filter on device team0
[  175.578300][ T6810] EXT4-fs error (device loop4): ext4_generic_delete_entry:2666: inode #12: block 32: comm syz.4.169: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0
[  175.669009][ T6810] EXT4-fs error (device loop4) in ext4_delete_entry:2737: Corrupt filesystem
[  175.721407][ T6805] bridge0: port 1(bridge_slave_0) entered blocking state
[  175.729293][ T6805] bridge0: port 1(bridge_slave_0) entered forwarding state
[  175.875460][ T6805] bridge0: port 2(bridge_slave_1) entered blocking state
[  175.883171][ T6805] bridge0: port 2(bridge_slave_1) entered forwarding state
[  175.972724][ T5843] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  176.478373][ T6845] loop5: detected capacity change from 0 to 512
[  176.568935][ T6845] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  176.661968][ T5892] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  176.815920][ T6849] loop6: detected capacity change from 0 to 256
[  176.830832][ T6849] exfat: Deprecated parameter 'utf8'
[  176.837197][ T6849] exfat: Deprecated parameter 'namecase'
[  176.843506][ T6849] exfat: Deprecated parameter 'namecase'
[  177.378600][ T6849] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  177.673851][   T30] audit: type=1326 audit(1773936512.448:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6842 comm="syz.6.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fb299c799 code=0x7ffc0000
[  177.697373][   T30] audit: type=1326 audit(1773936512.458:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6842 comm="syz.6.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fb299c799 code=0x7ffc0000
[  178.553226][ T6845] EXT4-fs (loop5): 1 truncate cleaned up
[  178.671467][   T30] audit: type=1326 audit(1773936512.458:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6842 comm="syz.6.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=102 compat=0 ip=0x7f4fb299c799 code=0x7ffc0000
[  178.704824][   T30] audit: type=1326 audit(1773936512.458:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6842 comm="syz.6.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fb299c799 code=0x7ffc0000
[  178.731710][ T6845] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  179.105011][   T30] audit: type=1326 audit(1773936512.458:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6842 comm="syz.6.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fb299c799 code=0x7ffc0000
[  179.695402][ T5892] usb 5-1: Using ep0 maxpacket: 32
[  179.701213][   T30] audit: type=1326 audit(1773936512.458:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6842 comm="syz.6.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4fb299c799 code=0x7ffc0000
[  179.757264][   T30] audit: type=1326 audit(1773936512.458:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6842 comm="syz.6.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fb299c799 code=0x7ffc0000
[  179.863234][  T808] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  179.871778][   T30] audit: type=1326 audit(1773936512.458:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6842 comm="syz.6.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fb299c799 code=0x7ffc0000
[  180.038135][ T5892] usb 5-1: device descriptor read/all, error -71
[  180.112490][ T6862] loop3: detected capacity change from 0 to 512
[  180.351487][ T6862] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors
[  180.986590][ T6862] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 2)!
[  181.019058][ T6862] EXT4-fs (loop3): group descriptors corrupted!
[  181.139350][ T6098] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  181.236349][  T808] usb 6-1: device not accepting address 7, error -71
[  181.341932][ T6493] 8021q: adding VLAN 0 to HW filter on device batadv0
[  181.675188][ T6883] loop5: detected capacity change from 0 to 512
[  181.755946][ T6883] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  181.846000][ T6883] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  181.858122][ T6895] Illegal XDP return value 4294967274 on prog  (id 24) dev syz_tun, expect packet loss!
[  181.949162][ T6883] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=84ec018, mo2=0002]
[  182.210263][ T6883] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4222: comm syz.5.181: Allocating blocks 41-42 which overlap fs metadata
[  182.293593][ T6883] loop5: lost filesystem error report for type 5 error -117
[  182.303152][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  182.318341][    C0] EXT4-fs (loop5): initial error at time 1773936517: ext4_mb_mark_diskspace_used:4222
[  182.330685][    C0] EXT4-fs (loop5): last error at time 1773936517: ext4_mb_mark_diskspace_used:4222
[  182.642776][ T6883] Quota error (device loop5): write_blk: dquota write failed
[  183.355345][ T6883] Quota error (device loop5): find_free_dqentry: Can't write quota data block 5
[  183.555144][ T6493] veth0_vlan: entered promiscuous mode
[  183.588743][ T6493] veth1_vlan: entered promiscuous mode
[  183.711717][ T6883] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[  183.770675][ T6883] EXT4-fs error (device loop5): ext4_acquire_dquot:7001: comm syz.5.181: Failed to acquire dquot type 1
[  183.801954][ T6493] veth0_macvtap: entered promiscuous mode
[  183.840755][ T6883] loop5: lost filesystem error report for type 5 error -117
[  184.419878][ T6493] veth1_macvtap: entered promiscuous mode
[  185.116252][ T6883] EXT4-fs error (device loop5): mb_free_blocks:2047: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  185.308800][ T6883] EXT4-fs error (device loop5): ext4_do_update_inode:5572: inode #12: comm syz.5.181: corrupted inode contents
[  185.339142][ T6493] batman_adv: batadv0: Interface activated: batadv_slave_0
[  185.383346][ T6883] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  185.400675][ T6883] EXT4-fs error (device loop5): ext4_dirty_inode:6453: inode #12: comm syz.5.181: mark_inode_dirty error
[  185.431091][ T6883] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  185.439825][ T6493] batman_adv: batadv0: Interface activated: batadv_slave_1
[  185.460525][ T6883] EXT4-fs error (device loop5): ext4_do_update_inode:5572: inode #12: comm syz.5.181: corrupted inode contents
[  185.480445][ T6927] loop3: detected capacity change from 0 to 512
[  185.593384][ T6883] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  185.596533][ T6883] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #12: comm syz.5.181: mark_inode_dirty error
[  185.690786][ T6927] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  185.767274][ T6883] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  185.776339][ T6927] ext4 filesystem being mounted at /56/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  185.799084][ T6883] EXT4-fs error (device loop5): ext4_do_update_inode:5572: inode #12: comm syz.5.181: corrupted inode contents
[  186.545754][ T6883] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  186.598985][ T6883] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem
[  186.729108][ T6883] loop5: lost filesystem error report for type 5 error -117
[  186.736301][ T6883] EXT4-fs error (device loop5): ext4_do_update_inode:5572: inode #12: comm syz.5.181: corrupted inode contents
[  186.756886][ T6883] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  186.759808][ T6883] EXT4-fs error (device loop5): ext4_truncate:4590: inode #12: comm syz.5.181: mark_inode_dirty error
[  186.785138][ T6883] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  186.787169][ T6883] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem
[  186.808765][ T6883] loop5: lost filesystem error report for type 5 error -117
[  186.817479][ T6883] EXT4-fs (loop5): 1 truncate cleaned up
[  186.907893][ T6939] EXT4-fs error (device loop3): ext4_do_update_inode:5572: inode #2: comm syz.3.192: corrupted inode contents
[  186.997558][ T6939] EXT4-fs error (device loop3): ext4_dirty_inode:6453: inode #2: comm syz.3.192: mark_inode_dirty error
[  187.114183][ T6939] EXT4-fs error (device loop3): ext4_do_update_inode:5572: inode #2: comm syz.3.192: corrupted inode contents
[  187.237400][ T6939] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #2: comm syz.3.192: mark_inode_dirty error
[  187.361364][ T6941] EXT4-fs warning (device loop3): ext4_es_cache_extent:1082: inode #2: comm syz.3.192: ES cache extent failed: add [0,1,20,0x1] conflict with existing [0,8,576460752303423487,0x18]
[  187.361364][ T6941] 
[  187.495543][ T6883] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  187.534961][ T6946] loop4: detected capacity change from 0 to 16
[  187.595196][ T6883] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  187.630709][ T6946] erofs (device loop4): mounted with root inode @ nid 36.
[  187.699657][ T6946] netlink: 8 bytes leftover after parsing attributes in process `syz.4.194'.
[  187.768151][ T6945] erofs (device loop4): readahead error at folio 2 @ nid 89
[  187.810125][ T6945] syz.4.194: attempt to access beyond end of device
[  187.810125][ T6945] loop4: rw=524288, sector=8, nr_sectors = 24 limit=16
[  187.903471][ T6945] syz.4.194: attempt to access beyond end of device
[  187.903471][ T6945] loop4: rw=524288, sector=16, nr_sectors = 40 limit=16
[  187.952315][ T6945] syz.4.194: attempt to access beyond end of device
[  187.952315][ T6945] loop4: rw=0, sector=16, nr_sectors = 8 limit=16
[  188.012023][ T6945] erofs (device loop4): read error -5 @ 1 of nid 89
[  188.037061][   T30] audit: type=1800 audit(1773936522.818:16): pid=6945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.194" name="file2" dev="loop4" ino=89 res=0 errno=0
[  188.790123][ T6963] netlink: 388 bytes leftover after parsing attributes in process `syz.5.196'.
[  192.484391][ T6476] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  192.624526][ T5854] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  192.744830][ T6476] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  192.868363][   T13] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  193.767110][   T13] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  194.751563][ T6987] loop4: detected capacity change from 0 to 256
[  194.824508][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[  194.839359][ T6989] loop5: detected capacity change from 0 to 1024
[  194.841448][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[  195.048190][ T6992] loop3: detected capacity change from 0 to 512
[  195.109512][ T6992] EXT4-fs: Ignoring removed oldalloc option
[  195.489704][ T6992] EXT4-fs (loop3): 1 truncate cleaned up
[  195.794036][ T6992] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  195.852672][ T7001] loop4: detected capacity change from 0 to 512
[  196.026646][ T7001] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  196.123481][ T7001] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  196.986122][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  197.153966][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  197.237796][ T5854] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  197.261409][ T7012] loop6: detected capacity change from 0 to 512
[  197.415536][ T5843] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  197.745584][ T7012] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  197.770718][ T6805] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  197.799653][ T7012] ext4 filesystem being mounted at /34/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  198.764728][ T6805] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  199.752174][ T7027] EXT4-fs error (device loop6): ext4_do_update_inode:5572: inode #2: comm syz.6.207: corrupted inode contents
[  199.768742][ T7027] EXT4-fs error (device loop6): ext4_dirty_inode:6453: inode #2: comm syz.6.207: mark_inode_dirty error
[  199.782551][ T7027] EXT4-fs error (device loop6): ext4_do_update_inode:5572: inode #2: comm syz.6.207: corrupted inode contents
[  200.092100][ T7027] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #2: comm syz.6.207: mark_inode_dirty error
[  200.165504][ T7029] EXT4-fs warning (device loop6): ext4_es_cache_extent:1082: inode #2: comm syz.6.207: ES cache extent failed: add [0,1,20,0x1] conflict with existing [0,8,576460752303423487,0x18]
[  200.165504][ T7029] 
[  200.603929][ T6109] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  200.900910][ T7045] loop4: detected capacity change from 0 to 256
[  201.664226][ T7048] netlink: 'syz.3.214': attribute type 4 has an invalid length.
[  201.718235][ T7055] netlink: 'syz.3.214': attribute type 4 has an invalid length.
[  202.302738][ T7045] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d)
[  203.288417][ T7071] loop8: detected capacity change from 0 to 512
[  203.317316][ T7071] EXT4-fs: Ignoring removed oldalloc option
[  203.395402][ T7061] bridge0: port 2(bridge_slave_1) entered disabled state
[  203.406018][ T7061] bridge0: port 1(bridge_slave_0) entered disabled state
[  203.463162][ T7071] EXT4-fs (loop8): 1 truncate cleaned up
[  203.505656][ T7071] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  204.588419][ T7061] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  204.639466][ T7061] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  205.022690][ T7088] bridge0: port 2(bridge_slave_1) entered disabled state
[  205.030652][ T7088] bridge0: port 1(bridge_slave_0) entered disabled state
[  205.038914][ T7088] bridge0: entered allmulticast mode
[  205.172967][   T36] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  205.200758][   T36] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  205.211150][   T36] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  205.243787][   T36] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  205.402459][ T7100] loop4: detected capacity change from 0 to 1024
[  205.472409][ T7100] EXT4-fs: Ignoring removed bh option
[  205.532683][ T7102] loop3: detected capacity change from 0 to 256
[  205.818475][ T7100] EXT4-fs: inline encryption not supported
[  206.207836][ T7100] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  206.299135][ T7100] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  206.396455][ T7100] EXT4-fs error (device loop4): ext4_map_blocks:779: inode #3: block 2: comm syz.4.221: lblock 2 mapped to illegal pblock 2 (length 1)
[  206.453555][ T7100] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  206.459245][ T7100] Quota error (device loop4): qtree_write_dquot: dquota write failed
[  206.468726][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  206.468756][    C1] EXT4-fs (loop4): initial error at time 1773936541: ext4_map_blocks:779: inode 3: block 2
[  206.468796][    C1] EXT4-fs (loop4): last error at time 1773936541: ext4_map_blocks:779: inode 3: block 2
[  206.659337][ T7100] EXT4-fs error (device loop4): ext4_map_blocks:779: inode #3: block 48: comm syz.4.221: lblock 0 mapped to illegal pblock 48 (length 1)
[  206.728344][ T7100] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  206.728748][ T7100] Quota error (device loop4): v2_write_file_info: Can't write info structure
[  206.797156][ T7100] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.221: Failed to acquire dquot type 0
[  206.811136][   T29] usb 7-1: new full-speed USB device number 3 using dummy_hcd
[  206.844378][ T7100] loop4: lost filesystem error report for type 5 error -117
[  206.861165][ T7100] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6249: Corrupt filesystem
[  206.908414][ T7100] loop4: lost filesystem error report for type 5 error -117
[  206.939439][ T7100] EXT4-fs error (device loop4): ext4_evict_inode:255: inode #11: comm syz.4.221: mark_inode_dirty error
[  206.961863][ T7115] devpts: Bad value for 'max'
[  206.971472][ T7111] loop3: detected capacity change from 0 to 8192
[  207.013946][ T7100] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  207.015584][ T7100] EXT4-fs warning (device loop4): ext4_evict_inode:258: couldn't mark inode dirty (err -117)
[  207.038659][   T29] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  207.071717][ T7011]  loop3: p1 < > p2 p4 < p5 >
[  207.073451][   T29] usb 7-1: config 1 has no interface number 0
[  207.091893][ T7011] loop3: partition table partially beyond EOD, truncated
[  207.095380][ T7100] EXT4-fs (loop4): 1 orphan inode deleted
[  207.110930][   T29] usb 7-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[  207.130309][  T139] EXT4-fs error (device loop4): ext4_map_blocks:779: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1)
[  207.141775][ T7011] loop3: p1 start 134217728 is beyond EOD, truncated
[  207.171361][   T29] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 4
[  207.175333][ T7011] loop3: p2 size 591360 extends beyond EOD, 
[  207.195145][ T7100] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  207.199314][ T7011] truncated
[  207.223827][   T29] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 4
[  207.267870][   T29] usb 7-1: New USB device found, idVendor=0e41, idProduct=4650, bcdDevice= 0.40
[  207.268587][  T139] Quota error (device loop4): remove_tree: Can't read quota data block 1
[  207.300659][   T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  207.311074][ T7100] EXT4-fs (loop4): shut down requested (1)
[  207.322836][  T139] EXT4-fs error (device loop4): ext4_release_dquot:7037: comm kworker/u8:5: Failed to release dquot type 0
[  207.349619][   T29] usb 7-1: Product: syz
[  207.358220][ T7011] loop3: p5 size 591360 extends beyond EOD, truncated
[  207.369154][   T29] usb 7-1: Manufacturer: syz
[  207.403198][   T29] usb 7-1: SerialNumber: syz
[  207.463703][ T7111]  loop3: p1 < > p2 p4 < p5 >
[  207.472902][ T7111] loop3: partition table partially beyond EOD, truncated
[  207.526104][ T7111] loop3: p1 start 134217728 is beyond EOD, truncated
[  207.573399][ T7111] loop3: p2 size 591360 extends beyond EOD, truncated
[  207.629958][ T7111] loop3: p5 size 591360 extends beyond EOD, truncated
[  207.667148][   T29] usb 7-1: 1:0 : does not exist
[  207.749390][   T29] usb 7-1: BAAD MICROPHONE c_chmask mismatch
[  208.361628][ T5843] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  208.654965][ T6493] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  208.897640][ T7133] xt_hashlimit: size too large, truncated to 1048576
[  208.967065][ T7138] loop4: detected capacity change from 0 to 256
[  208.985530][ T7129] loop3: detected capacity change from 0 to 4096
[  209.052249][ T7138] exfat: Deprecated parameter 'namecase'
[  209.419650][ T7138] exfat: Deprecated parameter 'utf8'
[  209.753223][ T7138] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x22785e93, utbl_chksum : 0xe619d30d)
[  209.834800][ T7129] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  209.880194][   T29] snd-usb-audio 7-1:1.1: probe with driver snd-usb-audio failed with error -22
[  210.269714][   T29] snd_usb_variax 7-1:1.1: Line 6 PODxt Live found
[  211.044188][   T29] snd_usb_variax 7-1:1.1: set_interface failed
[  211.063795][   T29] snd_usb_variax 7-1:1.1: Line 6 PODxt Live now disconnected
[  211.149782][   T29] snd_usb_variax 7-1:1.1: probe with driver snd_usb_variax failed with error -71
[  211.310361][ T7154] loop8: detected capacity change from 0 to 1024
[  211.440663][   T29] usb 7-1: USB disconnect, device number 3
[  211.475560][ T7154] EXT4-fs: Ignoring removed nomblk_io_submit option
[  211.577930][ T7154] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003]
[  211.699622][ T7154] System zones: 0-1, 3-36
[  211.760965][ T5854] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  211.782144][ T7019] udevd[7019]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  211.813629][ T7154] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  211.919988][ T7013] udevd[7013]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory
[  211.942855][ T7164] loop4: detected capacity change from 0 to 256
[  211.978352][ T6974] udevd[6974]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  211.978366][ T7154] EXT4-fs error (device loop8): ext4_iget_extra_inode:5028: inode #15: comm syz.8.232: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled
[  212.014571][ T7011] udevd[7011]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[  212.076754][ T7164] FAT-fs (loop4): Directory bread(block 64) failed
[  212.109744][ T7164] FAT-fs (loop4): Directory bread(block 65) failed
[  212.155777][ T7164] FAT-fs (loop4): Directory bread(block 66) failed
[  212.192800][ T7164] FAT-fs (loop4): Directory bread(block 67) failed
[  212.232276][ T7164] FAT-fs (loop4): Directory bread(block 68) failed
[  212.270606][ T6493] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  212.294177][ T7164] FAT-fs (loop4): Directory bread(block 69) failed
[  212.338285][ T7164] FAT-fs (loop4): Directory bread(block 70) failed
[  212.359035][ T7164] FAT-fs (loop4): Directory bread(block 71) failed
[  212.381956][ T7164] FAT-fs (loop4): Directory bread(block 72) failed
[  212.409700][ T7164] FAT-fs (loop4): Directory bread(block 73) failed
[  212.501811][ T7011] udevd[7011]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[  212.525461][ T6971] udevd[6971]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  212.564484][ T6974] udevd[6974]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory
[  212.746586][ T7178] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  212.927525][ T7178] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type
[  212.939060][ T7178] overlayfs: failed to look up (tracing) for ino (-66)
[  215.107635][ T7186] syz.4.234: attempt to access beyond end of device
[  215.107635][ T7186] loop4: rw=2049, sector=1224, nr_sectors = 320 limit=256
[  215.124420][ T7186] syz.4.234: attempt to access beyond end of device
[  215.124420][ T7186] loop4: rw=2049, sector=1576, nr_sectors = 256 limit=256
[  215.140960][ T7186] syz.4.234: attempt to access beyond end of device
[  215.140960][ T7186] loop4: rw=2049, sector=1864, nr_sectors = 1476 limit=256
[  216.316038][ T7207] loop3: detected capacity change from 0 to 128
[  216.552712][ T7214] loop8: detected capacity change from 0 to 512
[  216.591110][ T7214] EXT4-fs: Ignoring removed oldalloc option
[  216.640492][ T7214] EXT4-fs (loop8): 1 truncate cleaned up
[  216.676606][ T7214] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  217.118510][ T7222] loop5: detected capacity change from 0 to 1024
[  217.149897][ T7222] EXT4-fs: Ignoring removed i_version option
[  217.480584][ T5860] Bluetooth: hci4: command 0x0406 tx timeout
[  217.487332][ T5860] Bluetooth: hci0: command 0x0406 tx timeout
[  217.495509][ T5860] Bluetooth: hci1: command 0x0406 tx timeout
[  217.523179][ T7222] EXT4-fs (loop5): Test dummy encryption mode enabled
[  217.580348][ T7221] loop4: detected capacity change from 0 to 4096
[  217.623603][ T7221] EXT4-fs: inline encryption not supported
[  217.678906][ T7221] EXT4-fs: Ignoring removed i_version option
[  217.717438][ T7222] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  217.738002][ T7221] EXT4-fs: Ignoring removed oldalloc option
[  217.846924][ T7221] EXT4-fs (loop4): Test dummy encryption mode enabled
[  217.858259][ T6493] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  217.942395][ T7221] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  217.967161][ T7221] System zones: 0-5
[  217.977654][ T7235] netlink: 20 bytes leftover after parsing attributes in process `syz.3.245'.
[  217.989491][ T7235] netlink: 20 bytes leftover after parsing attributes in process `syz.3.245'.
[  217.999008][ T7235] Zero length message leads to an empty skb
[  218.041974][ T7221] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  218.339692][ T6098] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  219.606633][ T7247] loop8: detected capacity change from 0 to 512
[  220.411770][ T7247] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  220.435619][ T7247] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  222.712193][ T7253] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  222.737051][ T7258] loop5: detected capacity change from 0 to 512
[  222.755147][ T6493] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  222.766246][ T7258] EXT4-fs: Ignoring removed nobh option
[  222.788204][ T7258] EXT4-fs (loop5): Test dummy encryption mode enabled
[  222.852783][ T7258] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.248: iget: bad i_size value: -3674898675588399094
[  222.939773][ T7258] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  222.940440][ T7258] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.248: couldn't read orphan inode 15 (err -117)
[  222.949832][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  222.949859][    C0] EXT4-fs (loop5): initial error at time 1773936557: ext4_orphan_get:1391: inode 15
[  222.949893][    C0] EXT4-fs (loop5): last error at time 1773936557: ext4_orphan_get:1391: inode 15
[  223.006652][ T7258] loop5: lost filesystem error report for type 5 error -117
[  223.034331][ T7258] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  223.085907][ T5843] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  223.212499][   T30] audit: type=1804 audit(1773936557.988:17): pid=7258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.248" name="/newroot/35/file1/bus" dev="loop5" ino=18 res=1 errno=0
[  223.395238][ T6098] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  223.430448][ T7273] loop8: detected capacity change from 0 to 256
[  224.465777][ T7283] loop5: detected capacity change from 0 to 512
[  224.510644][ T7283] EXT4-fs: Ignoring removed oldalloc option
[  224.634735][ T7283] EXT4-fs (loop5): 1 truncate cleaned up
[  224.663334][ T7283] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  226.239559][ T6098] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  226.368795][ T7300] loop3: detected capacity change from 0 to 4096
[  226.388266][ T7300] EXT4-fs: inline encryption not supported
[  226.436084][ T7300] EXT4-fs: Ignoring removed i_version option
[  226.478744][ T7300] EXT4-fs: Ignoring removed oldalloc option
[  226.561013][ T7300] EXT4-fs (loop3): Test dummy encryption mode enabled
[  226.620144][ T7300] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  226.633054][ T7300] System zones: 0-5
[  226.656142][ T7300] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  226.742452][ T7289] loop4: detected capacity change from 0 to 40427
[  226.763839][    T9] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  226.777178][ T7289] F2FS-fs (loop4): invalid crc value
[  226.823202][  T993] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  226.857014][   T30] audit: type=1800 audit(1773936561.638:18): pid=7300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.261" name="file1" dev="loop3" ino=15 res=0 errno=0
[  226.965135][    T9] usb 6-1: Using ep0 maxpacket: 16
[  226.979111][    T9] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  227.004783][    T9] usb 6-1: config 0 has no interface number 0
[  227.013442][ T5854] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  227.030747][    T9] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  227.048810][  T993] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  227.120046][    T9] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  227.130762][  T993] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  227.160780][  T993] usb 7-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  227.170615][    T9] usb 6-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[  227.187126][ T7289] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  227.199151][  T993] usb 7-1: Product: syz
[  227.204223][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  227.217461][  T993] usb 7-1: SerialNumber: syz
[  227.245514][ T7289] F2FS-fs (loop4): Start checkpoint disabled!
[  227.255089][ T7316] loop8: detected capacity change from 0 to 256
[  227.285071][    T9] usb 6-1: config 0 descriptor??
[  227.292055][ T7289] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0
[  227.300627][ T7316] vfat: Bad value for 'dmask'
[  227.333760][ T7289] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  227.749803][ T7323] syz.4.258: attempt to access beyond end of device
[  227.749803][ T7323] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  227.768345][ T7323] netlink: 36 bytes leftover after parsing attributes in process `syz.4.258'.
[  228.010649][ T7324] netlink: 'syz.3.266': attribute type 9 has an invalid length.
[  228.018983][ T7324] netlink: 'syz.3.266': attribute type 11 has an invalid length.
[  228.026895][ T7324] netlink: 'syz.3.266': attribute type 12 has an invalid length.
[  228.034844][ T7324] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.266'.
[  228.477561][ T6805] kworker/u8:13: attempt to access beyond end of device
[  228.477561][ T6805] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  228.535883][    T9] usbhid 6-1:0.1: can't add hid device: -71
[  228.542415][    T9] usbhid 6-1:0.1: probe with driver usbhid failed with error -71
[  228.554344][    T9] usb 6-1: USB disconnect, device number 9
[  229.128776][ T6805] CPU: 1 UID: 0 PID: 6805 Comm: kworker/u8:13 Not tainted syzkaller #0 PREEMPT(full) 
[  229.128809][ T6805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  229.128825][ T6805] Workqueue: writeback wb_workfn (flush-7:4)
[  229.128865][ T6805] Call Trace:
[  229.128875][ T6805]  <TASK>
[  229.128886][ T6805]  dump_stack_lvl+0xe8/0x150
[  229.128926][ T6805]  f2fs_handle_critical_error+0x37c/0x540
[  229.128971][ T6805]  f2fs_write_end_io+0x1274/0x1740
[  229.129029][ T6805]  __submit_merged_bio+0x256/0x700
[  229.129073][ T6805]  __submit_merged_write_cond+0x3c9/0x4e0
[  229.129120][ T6805]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  229.129182][ T6805]  f2fs_write_data_pages+0x287e/0x34f0
[  229.129263][ T6805]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  229.129297][ T6805]  ? cfg80211_inform_single_bss_data+0x13c6/0x1b70
[  229.129387][ T6805]  ? __lock_acquire+0x6b5/0x2cf0
[  229.129446][ T6805]  ? unwind_next_frame+0xa5/0x23c0
[  229.129505][ T6805]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  229.129542][ T6805]  do_writepages+0x32e/0x550
[  229.129583][ T6805]  ? reacquire_held_locks+0x104/0x190
[  229.129608][ T6805]  ? writeback_sb_inodes+0x477/0x1a20
[  229.129648][ T6805]  __writeback_single_inode+0x133/0x11a0
[  229.129681][ T6805]  ? do_raw_spin_unlock+0xf5/0x210
[  229.129718][ T6805]  writeback_sb_inodes+0x992/0x1a20
[  229.129786][ T6805]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  229.129814][ T6805]  ? do_raw_spin_lock+0x12b/0x2f0
[  229.129895][ T6805]  ? rcu_is_watching+0x15/0xb0
[  229.129931][ T6805]  wb_writeback+0x456/0xb70
[  229.129967][ T6805]  ? queue_io+0x1d1/0x4a0
[  229.130015][ T6805]  ? __pfx_wb_writeback+0x10/0x10
[  229.130043][ T6805]  ? do_raw_spin_lock+0x12b/0x2f0
[  229.130094][ T6805]  wb_workfn+0x414/0xf50
[  229.130122][ T6805]  ? look_up_lock_class+0x57/0x110
[  229.130169][ T6805]  ? __pfx_wb_workfn+0x10/0x10
[  229.130372][ T6805]  ? do_raw_spin_lock+0x12b/0x2f0
[  229.130405][ T6805]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  229.130457][ T6805]  ? process_one_work+0x8bb/0x1780
[  229.130498][ T6805]  process_one_work+0x9ab/0x1780
[  229.130557][ T6805]  ? __pfx_process_one_work+0x10/0x10
[  229.130586][ T6805]  ? do_raw_spin_lock+0x12b/0x2f0
[  229.130634][ T6805]  worker_thread+0xba8/0x11e0
[  229.130668][ T6805]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  229.130697][ T6805]  ? __kthread_parkme+0x7a/0x1f0
[  229.130721][ T6805]  ? __kthread_parkme+0x19c/0x1f0
[  229.130751][ T6805]  kthread+0x388/0x470
[  229.130778][ T6805]  ? __pfx_worker_thread+0x10/0x10
[  229.130796][ T6805]  ? __pfx_kthread+0x10/0x10
[  229.130825][ T6805]  ret_from_fork+0x51e/0xb90
[  229.130861][ T6805]  ? __pfx_ret_from_fork+0x10/0x10
[  229.130891][ T6805]  ? __switch_to+0xc7d/0x1450
[  229.130926][ T6805]  ? __pfx_kthread+0x10/0x10
[  229.130955][ T6805]  ret_from_fork_asm+0x1a/0x30
[  229.130997][ T6805]  </TASK>
[  229.563714][ T6805] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  230.511081][  T993] cdc_ncm 7-1:1.0: MAC-Address: 42:42:42:42:42:42
[  230.550445][  T993] cdc_ncm 7-1:1.0: dwNtbInMaxSize=177 is too small. Using 2048
[  230.761208][ T7339] loop3: detected capacity change from 0 to 512
[  230.959066][ T7339] EXT4-fs (loop3): 1 truncate cleaned up
[  230.975936][ T7339] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  231.215033][  T993] cdc_ncm 7-1:1.0: setting rx_max = 2048
[  231.447215][ T5854] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  231.548196][  T993] cdc_ncm 7-1:1.0: setting tx_max = 88
[  233.028381][  T993] cdc_ncm 7-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.6-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[  233.061030][  T993] usb 7-1: USB disconnect, device number 4
[  233.069435][  T993] cdc_ncm 7-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.6-1, CDC NCM (NO ZLP)
[  233.436195][ T7371] loop5: detected capacity change from 0 to 256
[  236.443960][ T7402] loop6: detected capacity change from 0 to 4096
[  236.463410][ T7402] EXT4-fs: inline encryption not supported
[  236.507808][ T7402] EXT4-fs: Ignoring removed i_version option
[  236.539608][ T7402] EXT4-fs: Ignoring removed oldalloc option
[  236.589453][ T7402] EXT4-fs (loop6): Test dummy encryption mode enabled
[  236.648830][ T7402] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  236.681551][ T7402] System zones: 0-5
[  236.699216][   T24] usb 5-1: new full-speed USB device number 7 using dummy_hcd
[  236.736911][ T7402] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  237.313021][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  237.380471][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  237.635780][ T6109] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  237.660038][   T24] usb 5-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[  237.968855][ T5859] Bluetooth: hci3: command 0x0406 tx timeout
[  237.980367][ T5850] Bluetooth: hci2: command 0x0406 tx timeout
[  238.221225][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  238.274510][   T24] usb 5-1: config 0 descriptor??
[  238.570168][ T7421] loop5: detected capacity change from 0 to 128
[  239.796894][ T7421] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  239.812572][ T7421] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  239.965718][   T24] usbhid 5-1:0.0: can't add hid device: -71
[  239.981066][   T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  240.041145][   T24] usb 5-1: USB disconnect, device number 7
[  242.440172][ T7467] loop3: detected capacity change from 0 to 512
[  242.492468][ T7467] EXT4-fs: Ignoring removed bh option
[  242.564589][ T7468] loop8: detected capacity change from 0 to 4096
[  242.585831][ T7467] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  242.598085][ T7468] EXT4-fs: inline encryption not supported
[  242.621863][ T7468] EXT4-fs: Ignoring removed i_version option
[  242.660650][ T7468] EXT4-fs: Ignoring removed oldalloc option
[  242.706258][ T7468] EXT4-fs (loop8): Test dummy encryption mode enabled
[  242.756361][ T7468] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  242.771350][ T7468] System zones: 0-5
[  242.810070][ T7467] EXT4-fs (loop3): 1 truncate cleaned up
[  242.842533][ T7468] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  242.862918][ T7467] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  244.267140][ T6098] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  244.702052][  T993] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  244.787309][ T6493] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  244.830300][ T5854] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  244.891949][  T993] usb 7-1: Using ep0 maxpacket: 16
[  244.945105][  T993] usb 7-1: config 1 has an invalid interface number: 105 but max is 0
[  244.985682][  T993] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  245.015270][  T993] usb 7-1: config 1 has no interface number 0
[  245.068982][  T993] usb 7-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  245.108672][  T993] usb 7-1: config 1 interface 105 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  245.157096][  T993] usb 7-1: config 1 interface 105 has no altsetting 0
[  245.172509][  T993] usb 7-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  245.184019][  T993] usb 7-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  245.929851][  T993] usb 7-1: Product: syz
[  245.948581][  T993] usb 7-1: Manufacturer: syz
[  245.963972][  T993] usb 7-1: SerialNumber: syz
[  246.080395][ T7482] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  246.147427][ T7498] loop4: detected capacity change from 0 to 512
[  247.069438][ T7498] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  247.082596][  T993] aqc111 7-1:1.105: probe with driver aqc111 failed with error -22
[  247.164353][ T7498] ext4 filesystem being mounted at /71/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  248.378482][ T7516] EXT4-fs error (device loop4): ext4_do_update_inode:5572: inode #2: comm syz.4.304: corrupted inode contents
[  248.589160][ T7520] netlink: 'syz.5.307': attribute type 9 has an invalid length.
[  248.599244][ T7520] netlink: 'syz.5.307': attribute type 11 has an invalid length.
[  248.608416][ T7520] netlink: 'syz.5.307': attribute type 12 has an invalid length.
[  248.616662][ T7520] netlink: 210020 bytes leftover after parsing attributes in process `syz.5.307'.
[  248.644522][ T7516] EXT4-fs error (device loop4): ext4_dirty_inode:6453: inode #2: comm syz.4.304: mark_inode_dirty error
[  248.659123][ T7516] EXT4-fs error (device loop4): ext4_do_update_inode:5572: inode #2: comm syz.4.304: corrupted inode contents
[  248.673609][ T7516] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #2: comm syz.4.304: mark_inode_dirty error
[  248.700393][ T7515] EXT4-fs warning (device loop4): ext4_es_cache_extent:1082: inode #2: comm syz.4.304: ES cache extent failed: add [0,1,20,0x1] conflict with existing [0,8,576460752303423487,0x18]
[  248.700393][ T7515] 
[  249.235367][   T31] INFO: task syz.0.1:5991 blocked for more than 143 seconds.
[  249.275232][  T808] usb 7-1: USB disconnect, device number 5
[  249.301880][   T31]       Not tainted syzkaller #0
[  249.336390][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  249.408666][   T31] task:syz.0.1         state:D stack:24880 pid:5991  tgid:5968  ppid:5842   task_flags:0x400040 flags:0x00080002
[  249.468532][   T31] Call Trace:
[  249.488414][   T31]  <TASK>
[  249.515059][   T31]  __schedule+0x1665/0x5590
[  249.539020][   T31]  ? blk_mq_flush_plug_list+0x443/0x570
[  249.553052][   T31]  ? __pfx_blk_mq_flush_plug_list+0x10/0x10
[  249.567705][   T31]  ? __blk_flush_plug+0x416/0x4d0
[  249.581195][   T31]  ? __pfx___schedule+0x10/0x10
[  249.597625][   T31]  ? schedule+0x90/0x360
[  249.620653][   T31]  schedule+0x164/0x360
[  249.634855][   T31]  schedule_preempt_disabled+0x13/0x30
[  249.652016][   T31]  rwsem_down_write_slowpath+0x883/0x1080
[  249.667312][   T31]  ? rwsem_down_write_slowpath+0x4a3/0x1080
[  249.689854][   T31]  ? __pfx_rwsem_down_write_slowpath+0x10/0x10
[  249.712549][   T31]  ? lockdep_hardirqs_on+0x7a/0x110
[  249.733310][   T31]  ? irqentry_exit+0x61a/0x700
[  249.751878][   T31]  ? rcu_is_watching+0x15/0xb0
[  249.759510][   T31]  down_write+0x1bc/0x200
[  249.782251][   T31]  ? __pfx_down_write+0x10/0x10
[  249.832203][   T31]  collapse_single_pmd+0x24ff/0x4510
[  249.882570][   T31]  ? collapse_single_pmd+0x1a9c/0x4510
[  249.957191][   T31]  ? __pfx___schedule+0x10/0x10
[  250.006301][   T31]  ? __pfx_collapse_single_pmd+0x10/0x10
[  250.030054][   T31]  ? irqentry_exit+0x61a/0x700
[  250.049653][   T31]  ? lockdep_hardirqs_on+0x7a/0x110
[  250.065687][   T31]  ? irqentry_exit+0x61a/0x700
[  250.080517][   T31]  ? rcu_is_watching+0x15/0xb0
[  250.097896][   T31]  ? __thp_vma_allowable_orders+0x893/0x960
[  250.113272][   T31]  madvise_collapse+0x34c/0x820
[  250.136760][   T31]  madvise_vma_behavior+0x1094/0x4460
[  250.150735][   T31]  ? do_raw_spin_lock+0x12b/0x2f0
[  250.165748][   T31]  ? __pfx_madvise_vma_behavior+0x10/0x10
[  250.189624][   T31]  ? do_raw_spin_lock+0x12b/0x2f0
[  250.200860][   T31]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  250.214875][   T31]  ? debug_object_assert_init+0x209/0x370
[  250.234560][   T31]  ? rcu_is_watching+0x15/0xb0
[  250.246914][   T31]  ? trace_hrtimer_start+0x82/0x230
[  250.268476][   T31]  ? finish_task_switch+0x41f/0xbe0
[  250.286893][   T31]  ? lockdep_hardirqs_on+0x7a/0x110
[  250.300894][   T31]  ? finish_task_switch+0x41f/0xbe0
[  250.316992][   T31]  ? rcu_is_watching+0x15/0xb0
[  250.332249][   T31]  ? trace_sched_exit_tp+0x3a/0x150
[  250.348160][   T31]  ? __schedule+0x167b/0x5590
[  250.359600][   T31]  ? mas_prev_slot+0xb7b/0xbf0
[  250.371831][   T31]  ? find_vma_prev+0x123/0x1b0
[  250.388353][   T31]  ? __pfx_find_vma_prev+0x10/0x10
[  250.402441][   T31]  ? futex_unqueue+0x22/0x240
[  250.431179][   T31]  ? __futex_wait+0x371/0x420
[  250.445645][   T31]  ? lockdep_hardirqs_on+0x7a/0x110
[  250.464398][   T31]  madvise_walk_vmas+0x573/0xae0
[  250.478914][   T31]  ? __pfx_madvise_walk_vmas+0x10/0x10
[  250.500531][   T31]  ? blk_start_plug+0x6e/0x1b0
[  250.515669][   T31]  madvise_do_behavior+0x386/0x540
[  250.545690][   T31]  ? __pfx_madvise_do_behavior+0x10/0x10
[  250.561821][   T31]  ? down_read+0x270/0x2e0
[  250.580621][   T31]  ? madvise_lock+0x146/0x2e0
[  250.599226][   T31]  do_madvise+0x1fa/0x2e0
[  250.619478][   T31]  ? __pfx_do_madvise+0x10/0x10
[  250.636451][   T31]  ? __se_sys_futex+0x3a8/0x450
[  250.655908][   T31]  ? rcu_is_watching+0x15/0xb0
[  250.670329][   T31]  __x64_sys_madvise+0xa6/0xc0
[  250.686089][   T31]  do_syscall_64+0x14d/0xf80
[  250.700956][   T31]  ? trace_irq_disable+0x3b/0x150
[  250.718665][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  250.740958][   T31]  ? clear_bhb_loop+0x40/0x90
[  250.757418][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  250.779673][   T31] RIP: 0033:0x7fe78619c799
[  250.789436][   T31] RSP: 002b:00007fe78703e028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c
[  250.810913][   T31] RAX: ffffffffffffffda RBX: 00007fe786416090 RCX: 00007fe78619c799
[  250.838468][   T31] RDX: 0000000000000019 RSI: 0000000000c00000 RDI: 0000200000000000
[  250.865517][   T31] RBP: 00007fe786232c99 R08: 0000000000000000 R09: 0000000000000000
[  250.883862][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  250.907027][   T31] R13: 00007fe786416128 R14: 00007fe786416090 R15: 00007fff9cc30488
[  250.918326][   T31]  </TASK>
[  251.054567][   T31] 
[  251.054567][   T31] Showing all locks held in the system:
[  251.065037][   T31] 1 lock held by khungtaskd/31:
[  251.074809][ T5843] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  251.084383][   T31]  #0: ffffffff8e75d6a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  251.151186][   T31] 3 locks held by kworker/u8:6/147:
[  251.173157][   T31]  #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x894/0x1780
[  251.200460][   T31]  #1: ffffc90002f07c40 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_one_work+0x8bb/0x1780
[  251.219240][   T31]  #2: ffffffff8e7637b8 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[  251.266458][   T31] 4 locks held by udevd/5213:
[  251.281236][   T31] 2 locks held by getty/5601:
[  251.291910][   T31]  #0: ffff8880373b10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  251.314063][   T31]  #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0
[  251.337150][   T31] 1 lock held by syz.0.1/5991:
[  251.366345][   T31]  #0: ffff88807cff4e38 (&mm->mmap_lock){++++}-{4:4}, at: collapse_single_pmd+0x24ff/0x4510
[  251.395889][   T31] 1 lock held by sed/7543:
[  251.406989][   T31] 
[  251.415615][   T31] =============================================
[  251.415615][   T31] 
[  251.432611][   T31] NMI backtrace for cpu 1
[  251.432637][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  251.432660][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  251.432679][   T31] Call Trace:
[  251.432687][   T31]  <TASK>
[  251.432696][   T31]  dump_stack_lvl+0xe8/0x150
[  251.432735][   T31]  nmi_cpu_backtrace+0x274/0x2d0
[  251.432767][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  251.432799][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  251.432834][   T31]  sys_info+0x135/0x170
[  251.432860][   T31]  watchdog+0x1002/0x1060
[  251.432895][   T31]  ? watchdog+0x1da/0x1060
[  251.432924][   T31]  kthread+0x388/0x470
[  251.432953][   T31]  ? __pfx_watchdog+0x10/0x10
[  251.432974][   T31]  ? __pfx_kthread+0x10/0x10
[  251.433000][   T31]  ret_from_fork+0x51e/0xb90
[  251.433034][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  251.433062][   T31]  ? __switch_to+0xc7d/0x1450
[  251.433091][   T31]  ? __pfx_kthread+0x10/0x10
[  251.433115][   T31]  ret_from_fork_asm+0x1a/0x30
[  251.433149][   T31]  </TASK>
[  251.545132][   T31] Sending NMI from CPU 1 to CPUs 0:
[  251.551794][    C0] NMI backtrace for cpu 0
[  251.551819][    C0] CPU: 0 UID: 0 PID: 6851 Comm: kworker/u8:14 Not tainted syzkaller #0 PREEMPT(full) 
[  251.551840][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  251.551854][    C0] Workqueue: events_unbound nsim_dev_trap_report_work
[  251.551892][    C0] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70
[  251.551917][    C0] Code: 89 fb e8 23 00 00 00 48 8b 3d f4 ec 58 0c 48 89 de 5b e9 d3 2a 5e 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <f3> 0f 1e fa 48 8b 04 24 65 48 8b 0d d8 ec 57 11 65 8b 15 f9 ec 57
[  251.551933][    C0] RSP: 0000:ffffc9000251f9f8 EFLAGS: 00000246
[  251.551948][    C0] RAX: 0000000000000003 RBX: 0000000000000033 RCX: 0000000000000001
[  251.551959][    C0] RDX: ffffffff898bd35a RSI: ffffffff8fbd7bb0 RDI: 000000000000002e
[  251.551971][    C0] RBP: 000000000000002e R08: ffff88803341db80 R09: 0000000000000003
[  251.551983][    C0] R10: 000000000000002e R11: 0000000000000000 R12: 0000000000000005
[  251.551993][    C0] R13: ffffffff8c7d7721 R14: ffffffff8c7d7720 R15: 000000000000002e
[  251.552006][    C0] FS:  0000000000000000(0000) GS:ffff888125436000(0000) knlGS:0000000000000000
[  251.552027][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  251.552039][    C0] CR2: 00007f8e6b74d000 CR3: 000000000e54a000 CR4: 00000000003526f0
[  251.552056][    C0] Call Trace:
[  251.552062][    C0]  <TASK>
[  251.552069][    C0]  in_aton+0x1c8/0x440
[  251.552101][    C0]  nsim_dev_trap_report_work+0x50d/0xb80
[  251.552139][    C0]  ? process_one_work+0x8bb/0x1780
[  251.552165][    C0]  process_one_work+0x9ab/0x1780
[  251.552202][    C0]  ? __pfx_process_one_work+0x10/0x10
[  251.552227][    C0]  ? do_raw_spin_lock+0x12b/0x2f0
[  251.552258][    C0]  worker_thread+0xba8/0x11e0
[  251.552280][    C0]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  251.552303][    C0]  ? __kthread_parkme+0x7a/0x1f0
[  251.552321][    C0]  ? __kthread_parkme+0x19c/0x1f0
[  251.552342][    C0]  kthread+0x388/0x470
[  251.552362][    C0]  ? __pfx_worker_thread+0x10/0x10
[  251.552377][    C0]  ? __pfx_kthread+0x10/0x10
[  251.552398][    C0]  ret_from_fork+0x51e/0xb90
[  251.552425][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  251.552449][    C0]  ? __switch_to+0xc7d/0x1450
[  251.552474][    C0]  ? __pfx_kthread+0x10/0x10
[  251.552495][    C0]  ret_from_fork_asm+0x1a/0x30
[  251.552523][    C0]  </TASK>
[  251.873377][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  251.880817][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  251.890344][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  251.900806][   T31] Call Trace:
[  251.904150][   T31]  <TASK>
[  251.907130][   T31]  vpanic+0x56c/0xa60
[  251.911190][   T31]  ? __pfx___schedule+0x10/0x10
[  251.916617][   T31]  ? __pfx_vpanic+0x10/0x10
[  251.921914][   T31]  ? nmi_trigger_cpumask_backtrace+0x1f4/0x300
[  251.929159][   T31]  panic+0xc5/0xd0
[  251.933163][   T31]  ? __pfx_panic+0x10/0x10
[  251.937935][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  251.944233][   T31]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  251.952017][   T31]  watchdog+0x105b/0x1060
[  251.956778][   T31]  ? watchdog+0x1da/0x1060
[  251.961448][   T31]  kthread+0x388/0x470
[  251.965579][   T31]  ? __pfx_watchdog+0x10/0x10
[  251.970532][   T31]  ? __pfx_kthread+0x10/0x10
[  251.975197][   T31]  ret_from_fork+0x51e/0xb90
[  251.980491][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  251.985667][   T31]  ? __switch_to+0xc7d/0x1450
[  251.990486][   T31]  ? __pfx_kthread+0x10/0x10
[  251.995562][   T31]  ret_from_fork_asm+0x1a/0x30
[  252.000570][   T31]  </TASK>
[  252.006406][   T31] Kernel Offset: disabled
[  252.011757][   T31] Rebooting in 86400 seconds..