last executing test programs:

10.644171303s ago: executing program 0 (id=748):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./dev\x00', 0x4, &(0x7f00000001c0), 0x41, 0x30f5, &(0x7f00000036c0)="$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")
syz_clone(0x1204000, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f00000000c0), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
ftruncate(r0, 0x4a8e)

10.473492721s ago: executing program 4 (id=750):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000400), 0x318, 0x0)
recvmmsg(r1, &(0x7f0000000440), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000480)=0x2)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1200000001000000080000000b00000000000000", @ANYRES32, @ANYBLOB="0000000000e1cb4468870d27d2da71f6b04c0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
unshare(0x26000700)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x4006}, 0x4)
write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x35)
connect$inet(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x14, &(0x7f00000004c0)=[{&(0x7f0000000500)=' ', 0x100120}], 0x1}, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x2, &(0x7f0000000580)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700)
setsockopt$packet_rx_ring(r4, 0x107, 0x5, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x50)
mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r5, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r5}, 0x4)

9.515564578s ago: executing program 4 (id=753):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x24008810}, 0x8010)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000)
sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000000130005002cbd70000000010000000000", @ANYRES32=r2, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x884)

7.783197665s ago: executing program 4 (id=761):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$TCSETSW2(0xffffffffffffffff, 0x560d, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x2, 0x7fff7ffb}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001040)={0x1, &(0x7f0000001100)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000001140)={0x1, &(0x7f0000001180)=[{0x6, 0x0, 0x0, 0x7fff0000}]})

7.453609699s ago: executing program 2 (id=762):
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f00000003c0)='./dev\x00', &(0x7f0000000400)='devtmpfs\x00', 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x1ff)
mount(&(0x7f00000004c0)=@filename='./dev/sda1\x00', &(0x7f0000000500)='./mnt\x00', &(0x7f0000000540)='ext4\x00', 0x8410, 0x0)
chdir(&(0x7f0000000580)='./mnt\x00')
r0 = open(0x0, 0x64842, 0x0)
pwritev2(r0, &(0x7f0000000600)=[{&(0x7f0000000640)="85", 0x78c00}], 0x300, 0x1200, 0x0, 0x3)

7.006914455s ago: executing program 3 (id=764):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000400), 0x318, 0x0)
recvmmsg(r1, &(0x7f0000000440), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000480)=0x2)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1200000001000000080000000b00000000000000", @ANYRES32, @ANYBLOB="0000000000e1cb4468870d27d2da71f6b04c0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
unshare(0x26000700)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x4006}, 0x4)
write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x35)
connect$inet(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x14, &(0x7f00000004c0)=[{&(0x7f0000000500)=' ', 0x100120}], 0x1}, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x2, &(0x7f0000000580)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700)
setsockopt$packet_rx_ring(r4, 0x107, 0x5, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x50)
mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r5, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r5}, 0x4)

6.196606337s ago: executing program 0 (id=765):
write$tun(0xffffffffffffffff, &(0x7f0000000840)=ANY=[@ANYBLOB="0180ffff190a0400000000010800060400080b42657497bde0000001ffffffffff"], 0x26)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000004c0)={[0xd, 0x0, 0xe9b, 0x22, 0x20000008, 0x7, 0x911d, 0x7, 0x8, 0xafa, 0x5, 0x1006, 0xc, 0x8, 0x8000, 0xffffffffffffffff], 0x1000, 0x12200})
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

6.129595124s ago: executing program 2 (id=766):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./sys\x00', 0x2000010, &(0x7f0000000140)={[{@dioread_nolock}, {@stripe={'stripe', 0x3d, 0x4c3}}, {@data_journal}, {@i_version}]}, 0x1, 0x27a6, &(0x7f00000001c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002980)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f00000029c0), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28011, r0, 0x0)
write(0xffffffffffffffff, &(0x7f0000002a40)="aebb8a4e", 0x4)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

6.129429535s ago: executing program 1 (id=767):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, 0x0}], 0x1, 0x6d, 0x0, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000080)={0x3, 0xbde, 0x0, &(0x7f0000000180)="a1984ec3aec3fc2e025f90eda6dbc903939aac644fd36f1e65174cae030c42cbacc392851a695f247112e91f059460a2c031929dc0515ac7cd20775ff9da9c2b6cb48968dcd6d8d982c492932c572f084d3af58650d207eec0794b3e47c5678c36b99eed61e1dbac68ce8a79aa21a51202018bdc4a51489844f785887083841d65c129992bbe5a51c71b95a9847d2bdede66c6e3184c386faf938fd6db888e73a5c0dcc69c3de7458e68ed3322", 0x0, 0xad})
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0x10, 0x0, 0x8, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff, 0x1})
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000100)=0x9000)
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x100000)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

6.097492808s ago: executing program 3 (id=768):
close(0x3)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000001380)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000001400), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000001440), 0x4000087, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x7, 0x401d031, 0xffffffffffffffff, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000001580), &(0x7f00000015c0)='./proc_mnt\x00', 0x4008, &(0x7f0000001600)={[{@fat=@nfs_stale_rw}, {@rodir}, {@shortname_lower}, {@uni_xlate}, {@numtail}, {@uni_xlate}, {@shortname_mixed}, {@uni_xlateno}, {@shortname_winnt}, {@fat=@sys_immutable}, {@fat=@discard}, {@rodir}, {@fat=@usefree}]}, 0x81, 0x2f8, &(0x7f00000016c0)="$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")

4.487619692s ago: executing program 4 (id=769):
syz_clone(0x1204000, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$inet6(0xa, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0x10, 0x800, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendto$inet6(r0, &(0x7f0000000000), 0x0, 0x800, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000640)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRESOCT, @ANYRES8=0x0, @ANYRES32=0x0, @ANYRES64, @ANYRESDEC=0x0], 0x1, 0x304, &(0x7f0000000bc0)="$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")
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b)
lsetxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0/file0\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
fdatasync(r1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
ftruncate(r1, 0x4a8e)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
recvfrom(0xffffffffffffffff, &(0x7f0000000580)=""/60, 0x3c, 0x40, 0x0, 0x0)

4.388845012s ago: executing program 0 (id=770):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x9, 0xe1, 0x6, 0x9e9, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x8001, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x3, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff4, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x1000, 0x31, 0x101, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x7f, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x202, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xfff, 0x4, 0x7f, 0x9, 0x5, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0xa, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x6, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0x2000, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x14002, 0xffff, 0x400]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}}, @NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x88}}, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

3.951630077s ago: executing program 2 (id=771):
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1000, 0x1)
r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000001340)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000003380)={0x50, 0x0, r1, {0x7, 0x1f, 0x4001ffe, 0xa68d7c519dc00fb1, 0xffbc, 0x6, 0x1d45, 0x0, 0x0, 0x0, 0x40}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f0000003400)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000005400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000054c0)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f0000005500)='./file0\x00', 0x101001, 0x12)
ppoll(&(0x7f0000005540)=[{r2}], 0x1, 0x0, 0x0, 0x0)
write$FUSE_NOTIFY_POLL(r0, &(0x7f0000005580)={0x18, 0x1, 0x0, {0x1}}, 0x18)

3.950013477s ago: executing program 3 (id=772):
syz_ublk_setup_io_uring(0x1d, &(0x7f00000000c0)={0x0, 0x30b5, 0x0, 0x3, 0x8000158}, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000028c0)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000002900)='./proc\x00', &(0x7f0000002940)='proc\x00', 0x4000, 0x0)
mknod(&(0x7f0000000140)='./file0\x00', 0x8001420, 0x0)
open$dir(&(0x7f0000000180)='./file0\x00', 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./mnt\x00', 0x1ff)
mount(&(0x7f00000002c0)=@filename='./dev/sda1\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000340)='ext4\x00', 0x8410, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./mnt\x00', 0x0, 0x21)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x4004662b, 0x0)

3.809595161s ago: executing program 1 (id=773):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$netlink(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[], 0x10}], 0x1, 0x0, 0x0, 0x8000}, 0x20000000)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000)
getsockname(0xffffffffffffffff, &(0x7f0000000380)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x4, &(0x7f0000000480), 0x1, 0x76a, &(0x7f0000001800)="$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")
openat$tun(0xffffffffffffff9c, &(0x7f0000001f80), 0x8082, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001fc0)={'veth0\x00'})
setsockopt$packet_int(r1, 0x107, 0xf, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x13)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
dup(r2)
prlimit64(0x0, 0xe, &(0x7f0000002000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000002040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000002080)=0x2)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f00000020c0)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000002140)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f00000021c0), 0x318, 0x0)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002200)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x8000, '\x00', 0x0, 0x0}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000002280)={r6, &(0x7f00000022c0), 0x0}, 0x20)
sched_setaffinity(0x0, 0x8, &(0x7f0000002340)=0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000002380)={0xd, 0x4, &(0x7f0000002440)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000002480)='GPL\x00', 0x2, 0xfd90, &(0x7f00000024c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f00000025c0), 0x1f2, 0x10, &(0x7f0000002600), 0xfffffe51}, 0x48)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002680)={&(0x7f00000026c0)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x2100000000000000)

3.619653791s ago: executing program 0 (id=774):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000400), 0x318, 0x0)
recvmmsg(r1, &(0x7f0000000440), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000480)=0x2)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1200000001000000080000000b00000000000000", @ANYRES32, @ANYBLOB="0000000000e1cb4468870d27d2da71f6b04c0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
unshare(0x26000700)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x4006}, 0x4)
write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x35)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10)
recvmsg(r5, &(0x7f0000000540)={0x0, 0x2, &(0x7f0000000580)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700)
setsockopt$packet_rx_ring(r4, 0x107, 0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x50)
setsockopt$sock_int(r4, 0x1, 0x2c, &(0x7f0000000080)=0xbfe, 0x4)

2.819258722s ago: executing program 1 (id=775):
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000800)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000840)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000880)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000008c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000900)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000980), 0x651, 0x0)
getpeername$inet6(0xffffffffffffffff, 0x0, 0x0)
madvise(0xfffffffffffffffc, 0x0, 0x12)
dup(0xffffffffffffffff)
r3 = gettid()
mkdirat(0xffffffffffffffff, 0x0, 0x190)
rt_sigqueueinfo(r3, 0x1d, &(0x7f0000000a40)={0x0, 0xfffffffd, 0x1})

2.791557955s ago: executing program 3 (id=776):
r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x1, 0x2a002)
ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, 0x0)

2.74157252s ago: executing program 2 (id=777):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000380)}, 0x20)
close(0x3)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r2, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10004000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r6}, &(0x7f0000000280), &(0x7f0000000240)=r3}, 0x20)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4)
sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000)

2.529873982s ago: executing program 0 (id=778):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000400), 0x318, 0x0)
recvmmsg(r1, &(0x7f0000000440), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000480)=0x2)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1200000001000000080000000b00000000000000", @ANYRES32, @ANYBLOB="0000000000e1cb4468870d27d2da71f6b04c0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
unshare(0x26000700)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x4006}, 0x4)
connect$inet(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x14, &(0x7f00000004c0)=[{&(0x7f0000000500)=' ', 0x100120}], 0x1}, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x2, &(0x7f0000000580)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700)
setsockopt$packet_rx_ring(r4, 0x107, 0x5, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x50)
mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r5, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r5}, 0x4)

2.503408094s ago: executing program 3 (id=779):
getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000d00)=<r0=>0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1a00444, &(0x7f0000000d40)={[{@grpjquota_path={'grpjquota', 0x3d, './file0/file0'}}, {@noblock_validity}], [{@euid_lt={'euid<', r0}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}, 0x1, 0xbbb, &(0x7f0000000140)="$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")
syncfs(0xffffffffffffffff)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_udp_int(r1, 0x11, 0xb, 0xfffffffffffffffe, &(0x7f00000000c0))
socket(0x10, 0x803, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000ec0)='ext4\x00', &(0x7f0000000f00)='./file1\x00', 0x80080, &(0x7f0000000f40)={[{@noquota}, {@abort}, {@bh}, {@delalloc}, {@jqfmt_vfsold}, {@noquota}]}, 0x0, 0x4ab, &(0x7f0000000f80)="$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")
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000001440)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000001480)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000014c0)=0x2)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000001500)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
socket$igmp(0x2, 0x3, 0x2)
connect$unix(r3, &(0x7f0000001580)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000001600), 0x318, 0x0)
recvmmsg(r3, &(0x7f0000001640), 0x10106, 0x2, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000001680)=0x2)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r5, &(0x7f00000016c0)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x4e22, @broadcast}, 0x2, 0x0, 0x3}}, 0x26)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xc, 0x110, r4, 0x0)
r7 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r7, &(0x7f0000001800)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x0, @multicast2}, 0x2, 0x1}}, 0x2e)
setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r7, 0x111, 0x3, 0x1, 0x4)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0)

2.417611853s ago: executing program 2 (id=780):
r0 = syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000002500)=ANY=[@ANYBLOB="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", @ANYRES64=0x0], 0x2, 0x55aa, &(0x7f0000003800)="$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")
ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, 0x0)

1.785374778s ago: executing program 1 (id=781):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000880)=0x34, 0x4)

1.505433316s ago: executing program 0 (id=782):
syz_mount_image$f2fs(&(0x7f0000000880), &(0x7f00000008c0)='./file1\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYRES32, @ANYRESHEX], 0xff, 0x5534, &(0x7f0000002e80)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f00000083c0)='./file0\x00', 0x1c0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000002dc0)='./bus\x00', 0x40, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000002e00)='./bus\x00', 0x1c1002, 0x12)
write(r1, &(0x7f0000002e40)="c7", 0x1)
sendfile(r1, r0, 0x0, 0x3ffff)

1.47577753s ago: executing program 4 (id=783):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, 0x0}], 0x1, 0x6d, 0x0, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000080)={0x3, 0xbde, 0x0, &(0x7f0000000180)="a1984ec3aec3fc2e025f90eda6dbc903939aac644fd36f1e65174cae030c42cbacc392851a695f247112e91f059460a2c031929dc0515ac7cd20775ff9da9c2b6cb48968dcd6d8d982c492932c572f084d3af58650d207eec0794b3e47c5678c36b99eed61e1dbac68ce8a79aa21a51202018bdc4a51489844f785887083841d65c129992bbe5a51c71b95a9847d2bdede66c6e3184c386faf938fd6db888e73a5c0dcc69c3de7458e68ed3322", 0x0, 0xad})
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0x10, 0x0, 0x8, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff, 0x1})
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000100)=0x9000)
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x100000)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.325812235s ago: executing program 1 (id=784):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x9, 0xe1, 0x6, 0x9e9, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x8001, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x3, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff4, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x1000, 0x31, 0x101, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x7f, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x202, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xfff, 0x4, 0x7f, 0x9, 0x5, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0xa, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x6, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0x2000, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x14002, 0xffff, 0x400]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}}, @NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x88}}, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r4 = dup(r3)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

618.776077ms ago: executing program 4 (id=785):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x40000096, 0x0, 0x4}]})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000)
r3 = userfaultfd(0x801)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x428})
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_REGISTER(r3, 0xc020aa04, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2})
r4 = socket(0x11, 0x3, 0x0)
bind$packet(r4, 0x0, 0x0)
setsockopt$packet_int(r4, 0x107, 0xf, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r5 = syz_open_dev$tty20(0xc, 0x4, 0x1)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x80078b, &(0x7f00000001c0)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x60}}, {@norecovery}, {@resgid}, {@sysvgroups}, {@nogrpid}]}, 0x0, 0x491, &(0x7f0000000440)="$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")
madvise(&(0x7f0000328000/0x1000)=nil, 0x1000, 0xb)
ioctl$TIOCGICOUNT(r5, 0x545d, 0x0)

485.352721ms ago: executing program 3 (id=786):
syz_ublk_setup_io_uring(0x1d, &(0x7f00000000c0)={0x0, 0x30b5, 0x0, 0x3, 0x8000158}, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000028c0)='./proc\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000002980)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
mknod(&(0x7f0000000140)='./file0\x00', 0x8001420, 0x0)
open$dir(&(0x7f0000000180)='./file0\x00', 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./mnt\x00', 0x1ff)
mount(&(0x7f00000002c0)=@filename='./dev/sda1\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000340)='ext4\x00', 0x8410, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./mnt\x00', 0x0, 0x21)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x4004662b, 0x0)

324.492927ms ago: executing program 1 (id=787):
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1000, 0x1)
r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000001340)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000003380)={0x50, 0x0, r1, {0x7, 0x1f, 0x4001ffe, 0xa68d7c519dc00fb1, 0xffbc, 0x6, 0x1d45, 0x0, 0x0, 0x0, 0x40}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f0000003400)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000005400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000054c0)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f0000005500)='./file0\x00', 0x101001, 0x12)
ppoll(&(0x7f0000005540)=[{r2}], 0x1, 0x0, 0x0, 0x0)
write$FUSE_NOTIFY_POLL(r0, &(0x7f0000005580)={0x18, 0x1, 0x0, {0x1}}, 0x18)

0s ago: executing program 2 (id=788):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000400), 0x318, 0x0)
recvmmsg(r1, &(0x7f0000000440), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000480)=0x2)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1200000001000000080000000b00000000000000", @ANYRES32, @ANYBLOB="0000000000e1cb4468870d27d2da71f6b04c0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
unshare(0x26000700)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x4006}, 0x4)
write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x35)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r5, &(0x7f0000000400)={0x2, 0x4e20, @loopback}, 0x10)
recvmsg(r5, &(0x7f0000000540)={0x0, 0x2, &(0x7f0000000580)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700)
setsockopt$packet_rx_ring(r4, 0x107, 0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x50)
setsockopt$sock_int(r4, 0x1, 0x2c, &(0x7f0000000080)=0xbfe, 0x4)

kernel console output (not intermixed with test programs):

14: 00007f9fca825fa0 R15: 00007ffc63d03678
[   79.190597][ T4598]  </TASK>
[   79.270041][ T4598] ERROR: Out of memory at tomoyo_realpath_from_path.
[   79.277532][ T4354] usb 3-1: USB disconnect, device number 2
[   79.384673][ T4264] usb 1-1: reset full-speed USB device number 4 using dummy_hcd
[   79.394643][ T4605] FAULT_INJECTION: forcing a failure.
[   79.394643][ T4605] name failslab, interval 1, probability 0, space 0, times 0
[   79.413915][ T4605] CPU: 1 PID: 4605 Comm: syz.4.57 Not tainted syzkaller #0
[   79.421182][ T4605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   79.431270][ T4605] Call Trace:
[   79.434579][ T4605]  <TASK>
[   79.437535][ T4605]  dump_stack_lvl+0x188/0x24e
[   79.442260][ T4605]  ? show_regs_print_info+0x12/0x12
[   79.447494][ T4605]  ? load_image+0x410/0x410
[   79.452041][ T4605]  ? __might_sleep+0xd0/0xd0
[   79.456666][ T4605]  ? __lock_acquire+0x7ea0/0x7ea0
[   79.461738][ T4605]  ? __d_lookup+0x8b/0x7c0
[   79.466720][ T4605]  should_fail_ex+0x390/0x4c0
[   79.471442][ T4605]  should_failslab+0x5/0x20
[   79.475969][ T4605]  slab_pre_alloc_hook+0x59/0x300
[   79.481038][ T4605]  kmem_cache_alloc_lru+0x49/0x2e0
[   79.486186][ T4605]  ? __d_alloc+0x2e/0x6e0
[   79.490556][ T4605]  __d_alloc+0x2e/0x6e0
[   79.494759][ T4605]  d_alloc+0x46/0x250
[   79.498781][ T4605]  lookup_one_qstr_excl+0xc6/0x240
[   79.503932][ T4605]  filename_create+0x242/0x450
[   79.508738][ T4605]  ? kern_path_create+0x50/0x50
[   79.513640][ T4605]  do_symlinkat+0xc1/0x400
[   79.518093][ T4605]  ? vfs_symlink+0x3d0/0x3d0
[   79.522716][ T4605]  ? getname_flags+0x206/0x500
[   79.527511][ T4605]  __x64_sys_symlink+0x7a/0x90
[   79.532298][ T4605]  do_syscall_64+0x4c/0xa0
[   79.536711][ T4605]  ? clear_bhb_loop+0x60/0xb0
[   79.541382][ T4605]  ? clear_bhb_loop+0x60/0xb0
[   79.546060][ T4605]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   79.551953][ T4605] RIP: 0033:0x7fa8c49a94d9
[   79.556447][ T4605] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   79.576052][ T4605] RSP: 002b:00007fa8c58c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058
[   79.584465][ T4605] RAX: ffffffffffffffda RBX: 00007fa8c4c25fa0 RCX: 00007fa8c49a94d9
[   79.592455][ T4605] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000200000000000
[   79.600419][ T4605] RBP: 00007fa8c4a3804e R08: 0000000000000000 R09: 0000000000000000
[   79.608399][ T4605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   79.616395][ T4605] R13: 00007fa8c4c26038 R14: 00007fa8c4c25fa0 R15: 00007ffe220c9b38
[   79.624394][ T4605]  </TASK>
[   79.678051][ T4264] usb 1-1: device descriptor read/64, error -32
[   79.784420][ T4612] can0: slcan on ttyS3.
[   79.880724][ T4611] can0 (unregistered): slcan off ttyS3.
[   80.127905][ T4355] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   80.319535][ T4355] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   80.366004][ T4355] usb 3-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00
[   80.395234][ T4355] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   80.416896][ T4639] FAULT_INJECTION: forcing a failure.
[   80.416896][ T4639] name failslab, interval 1, probability 0, space 0, times 0
[   80.463118][ T4639] CPU: 1 PID: 4639 Comm: syz.0.66 Not tainted syzkaller #0
[   80.470392][ T4639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   80.480475][ T4639] Call Trace:
[   80.483772][ T4639]  <TASK>
[   80.486718][ T4639]  dump_stack_lvl+0x188/0x24e
[   80.491418][ T4639]  ? show_regs_print_info+0x12/0x12
[   80.496644][ T4639]  ? load_image+0x410/0x410
[   80.501165][ T4639]  ? __might_sleep+0xd0/0xd0
[   80.505760][ T4639]  ? __lock_acquire+0x7ea0/0x7ea0
[   80.510796][ T4639]  should_fail_ex+0x390/0x4c0
[   80.515483][ T4639]  should_failslab+0x5/0x20
[   80.519987][ T4639]  slab_pre_alloc_hook+0x59/0x300
[   80.525015][ T4639]  ? alloc_workqueue+0x175/0x14a0
[   80.530044][ T4639]  __kmem_cache_alloc_node+0x4f/0x270
[   80.535428][ T4639]  ? alloc_workqueue+0x175/0x14a0
[   80.540455][ T4639]  __kmalloc+0xa3/0x240
[   80.544618][ T4639]  alloc_workqueue+0x175/0x14a0
[   80.549480][ T4639]  ? kobject_set_name_vargs+0xc6/0x110
[   80.554953][ T4639]  ? rcu_is_watching+0x11/0xa0
[   80.559730][ T4639]  ? kobject_set_name_vargs+0xc6/0x110
[   80.565190][ T4639]  ? kfree+0x30/0x1a0
[   80.569188][ T4639]  ? kobject_set_name_vargs+0xc6/0x110
[   80.574652][ T4639]  ? dev_set_name+0xdf/0x130
[   80.579248][ T4639]  ? apply_workqueue_attrs+0x180/0x180
[   80.584724][ T4639]  hci_register_dev+0x212/0x8a0
[   80.589584][ T4639]  hci_uart_tty_ioctl+0x819/0xa10
[   80.594615][ T4639]  ? hci_uart_tty_write+0x10/0x10
[   80.599639][ T4639]  tty_ioctl+0x878/0xba0
[   80.603878][ T4639]  ? security_file_ioctl+0x7c/0xa0
[   80.609028][ T4639]  ? tty_get_icount+0xa0/0xa0
[   80.613703][ T4639]  __se_sys_ioctl+0xfa/0x170
[   80.618309][ T4639]  do_syscall_64+0x4c/0xa0
[   80.622749][ T4639]  ? clear_bhb_loop+0x60/0xb0
[   80.627433][ T4639]  ? clear_bhb_loop+0x60/0xb0
[   80.632132][ T4639]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   80.638050][ T4639] RIP: 0033:0x7f19599a94d9
[   80.642468][ T4639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   80.662077][ T4639] RSP: 002b:00007f195a8da028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   80.670499][ T4639] RAX: ffffffffffffffda RBX: 00007f1959c25fa0 RCX: 00007f19599a94d9
[   80.678472][ T4639] RDX: 0000000000000004 RSI: 00000000400455c8 RDI: 0000000000000003
[   80.686450][ T4639] RBP: 00007f1959a3804e R08: 0000000000000000 R09: 0000000000000000
[   80.694427][ T4639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   80.702403][ T4639] R13: 00007f1959c26038 R14: 00007f1959c25fa0 R15: 00007fffccb04618
[   80.710395][ T4639]  </TASK>
[   80.736403][    T7] usb 1-1: USB disconnect, device number 4
[   80.796239][ T4618] device-mapper: ioctl: device has been removed from the dev hash table.
[   80.922733][ T4639] Bluetooth: Can't register HCI device
[   80.977835][ T4355] wacom 0003:056A:033B.0004: Unknown device_type for 'HID 056a:033b'. Assuming pen.
[   81.020339][ T4355] wacom 0003:056A:033B.0004: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.2-1/input0
[   81.053380][ T4355] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/0003:056A:033B.0004/input/input6
[   81.463331][   T14] cfg80211: failed to load regulatory.db
[   81.639171][    T7] usb 3-1: USB disconnect, device number 3
[   82.497618][ T4696] rxe_eth0 speed is unknown, defaulting to 1000
[   82.787951][ T4354] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   82.825528][ T4355] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   82.978907][ T4354] usb 5-1: Using ep0 maxpacket: 32
[   83.000170][ T4354] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   83.026292][ T4354] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   83.045023][ T4355] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[   83.062975][ T4355] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   83.085650][ T4355] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[   83.107810][ T4354] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[   83.126182][ T4354] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[   83.135298][ T4355] usb 4-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00
[   83.151870][ T4354] usb 5-1: Product: syz
[   83.156091][ T4354] usb 5-1: Manufacturer: syz
[   83.161308][ T4355] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   83.200111][ T4355] gspca_main: spca501-2.14.0 probing 0000:0000
[   83.209098][ T4354] hub 5-1:4.0: USB hub found
[   83.395373][ T4354] hub 5-1:4.0: 2 ports detected
[   83.404096][ T4355] gspca_spca501: reg write: error -71
[   83.415160][ T4355] spca501 4-1:1.0: Reg write failed for 0x02,0x0f,0x05
[   83.424445][ T4355] spca501: probe of 4-1:1.0 failed with error -22
[   83.431887][ T4355] uvcvideo 4-1:1.0: Found multiple Units with ID 1
[   83.440814][ T4355] usb 4-1: Found UVC 71.01 device <unnamed> (0000:0000)
[   83.448545][ T4355] usb 4-1: No streaming interface found for terminal 2.
[   83.476293][ T4355] usb 4-1: USB disconnect, device number 3
[   83.597818][ T4329] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   83.623184][ T4354] hub 5-1:4.0: hub_hub_status failed (err = -71)
[   83.638071][ T4354] hub 5-1:4.0: config failed, can't get hub status (err -71)
[   83.685115][ T4354] usb 5-1: USB disconnect, device number 2
[   83.810511][ T4329] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[   83.826567][ T4329] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[   83.837545][ T4329] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[   83.850648][ T4329] usb 2-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00
[   83.860512][ T4329] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   83.893444][ T4726] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[   83.903213][ T4726] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[   83.918556][ T4329] pl2303 2-1:1.0: pl2303 converter detected
[   83.945899][ T4329] usb 2-1: pl2303 converter now attached to ttyUSB0
[   84.163478][ T4738] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000
[   84.193683][ T4726] pl2303 2-1:1.0: pl2303_vendor_write - failed to write [0007]: -71
[   84.198467][    T7] usb 2-1: USB disconnect, device number 2
[   84.225614][ T4726] pl2303 ttyUSB0: pl2303_get_line_request - failed: -19
[   84.259722][ T4726] pl2303 ttyUSB0: pl2303_set_line_request - failed: -19
[   84.281697][ T4726] pl2303 2-1:1.0: pl2303_vendor_read - failed to read [000a]: -19
[   84.311104][ T4726] pl2303 ttyUSB0: failed to submit interrupt urb: -19
[   84.357397][    T7] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0
[   84.383259][    T7] pl2303 2-1:1.0: device disconnected
[   84.586069][ T4752] FAULT_INJECTION: forcing a failure.
[   84.586069][ T4752] name failslab, interval 1, probability 0, space 0, times 0
[   84.616905][ T4752] CPU: 0 PID: 4752 Comm: syz.0.90 Not tainted syzkaller #0
[   84.624191][ T4752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   84.634288][ T4752] Call Trace:
[   84.637581][ T4752]  <TASK>
[   84.640550][ T4752]  dump_stack_lvl+0x188/0x24e
[   84.645256][ T4752]  ? show_regs_print_info+0x12/0x12
[   84.650462][ T4752]  ? load_image+0x410/0x410
[   84.655005][ T4752]  ? __might_sleep+0xd0/0xd0
[   84.659609][ T4752]  ? __lock_acquire+0x7ea0/0x7ea0
[   84.663566][ T4754] FAULT_INJECTION: forcing a failure.
[   84.663566][ T4754] name failslab, interval 1, probability 0, space 0, times 0
[   84.664742][ T4752]  should_fail_ex+0x390/0x4c0
[   84.682086][ T4752]  should_failslab+0x5/0x20
[   84.686618][ T4752]  slab_pre_alloc_hook+0x59/0x300
[   84.691667][ T4752]  ? memcg_list_lru_alloc+0x22d/0xb00
[   84.697078][ T4752]  __kmem_cache_alloc_node+0x4f/0x270
[   84.702489][ T4752]  ? memcg_list_lru_alloc+0x22d/0xb00
[   84.707878][ T4752]  __kmalloc+0xa3/0x240
[   84.712067][ T4752]  memcg_list_lru_alloc+0x22d/0xb00
[   84.717281][ T4752]  ? slab_pre_alloc_hook+0xb1/0x300
[   84.722503][ T4752]  ? memcg_reparent_list_lrus+0x850/0x850
[   84.728260][ T4752]  ? get_obj_cgroup_from_current+0xd0/0x280
[   84.734184][ T4752]  slab_pre_alloc_hook+0x2ad/0x300
[   84.739326][ T4752]  ? slab_pre_alloc_hook+0xb1/0x300
[   84.744907][ T4752]  kmem_cache_alloc_lru+0x49/0x2e0
[   84.750076][ T4752]  ? __d_alloc+0x2e/0x6e0
[   84.754434][ T4752]  __d_alloc+0x2e/0x6e0
[   84.758624][ T4752]  d_alloc_parallel+0xdc/0x1590
[   84.763519][ T4752]  ? verify_lock_unused+0x140/0x140
[   84.768766][ T4752]  ? lockdep_softirqs_off+0x430/0x430
[   84.774270][ T4752]  ? lockdep_softirqs_off+0x430/0x430
[   84.779675][ T4752]  ? d_hash_and_lookup+0x1b0/0x1b0
[   84.784816][ T4752]  ? __init_waitqueue_head+0xa4/0x140
[   84.790224][ T4752]  __lookup_slow+0x134/0x3f0
[   84.794846][ T4752]  ? lookup_one_len+0x2d0/0x2d0
[   84.799748][ T4752]  lookup_one_len+0x19d/0x2d0
[   84.804455][ T4752]  ? lookup_one_common+0x450/0x450
[   84.809605][ T4752]  binderfs_create_file+0x6a/0x3c0
[   84.814748][ T4752]  ? __debugfs_create_file+0x467/0x500
[   84.820229][ T4752]  binder_open+0x8e8/0xb60
[   84.824657][ T4752]  ? binder_mmap+0x310/0x310
[   84.829257][ T4752]  ? fsnotify_perm+0x248/0x550
[   84.834042][ T4752]  ? binder_mmap+0x310/0x310
[   84.838644][ T4752]  do_dentry_open+0x7dd/0x10b0
[   84.843435][ T4752]  path_openat+0x2674/0x2f10
[   84.848141][ T4752]  ? kasan_set_track+0x60/0x70
[   84.852921][ T4752]  ? verify_lock_unused+0x140/0x140
[   84.858138][ T4752]  ? do_sys_openat2+0xdd/0x4f0
[   84.862924][ T4752]  ? do_filp_open+0x420/0x420
[   84.867632][ T4752]  do_filp_open+0x1ee/0x420
[   84.872251][ T4752]  ? vfs_tmpfile+0x490/0x490
[   84.876931][ T4752]  ? _raw_spin_unlock+0x24/0x40
[   84.881817][ T4752]  ? alloc_fd+0x590/0x640
[   84.886174][ T4752]  do_sys_openat2+0x14b/0x4f0
[   84.890877][ T4752]  ? do_sys_open+0xe0/0xe0
[   84.895320][ T4752]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[   84.901328][ T4752]  ? fd_install+0x2d4/0x4e0
[   84.905858][ T4752]  ? lock_chain_count+0x20/0x20
[   84.910749][ T4752]  __x64_sys_openat+0x135/0x160
[   84.915675][ T4752]  do_syscall_64+0x4c/0xa0
[   84.920742][ T4752]  ? clear_bhb_loop+0x60/0xb0
[   84.925436][ T4752]  ? clear_bhb_loop+0x60/0xb0
[   84.930129][ T4752]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   84.936030][ T4752] RIP: 0033:0x7f19599a94d9
[   84.940451][ T4752] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   84.960065][ T4752] RSP: 002b:00007f195a8da028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[   84.968506][ T4752] RAX: ffffffffffffffda RBX: 00007f1959c25fa0 RCX: 00007f19599a94d9
[   84.976500][ T4752] RDX: 0000000000000802 RSI: 0000200000000100 RDI: ffffffffffffff9c
[   84.984490][ T4752] RBP: 00007f1959a3804e R08: 0000000000000000 R09: 0000000000000000
[   84.992487][ T4752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   85.000472][ T4752] R13: 00007f1959c26038 R14: 00007f1959c25fa0 R15: 00007fffccb04618
[   85.008479][ T4752]  </TASK>
[   85.011509][ T4754] CPU: 1 PID: 4754 Comm: syz.4.91 Not tainted syzkaller #0
[   85.018736][ T4754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   85.021584][ T4752] binder: Unable to create file 4751 in binderfs (error -12)
[   85.028876][ T4754] Call Trace:
[   85.028889][ T4754]  <TASK>
[   85.028896][ T4754]  dump_stack_lvl+0x188/0x24e
[   85.028928][ T4754]  ? show_regs_print_info+0x12/0x12
[   85.052329][ T4754]  ? load_image+0x410/0x410
[   85.056937][ T4754]  ? __lock_acquire+0x7ea0/0x7ea0
[   85.061987][ T4754]  ? mark_lock+0x94/0x320
[   85.066333][ T4754]  should_fail_ex+0x390/0x4c0
[   85.071022][ T4754]  should_failslab+0x5/0x20
[   85.075525][ T4754]  slab_pre_alloc_hook+0x59/0x300
[   85.080553][ T4754]  ? inotify_handle_inode_event+0x17c/0x4e0
[   85.086454][ T4754]  __kmem_cache_alloc_node+0x4f/0x270
[   85.091834][ T4754]  ? inotify_handle_inode_event+0x17c/0x4e0
[   85.097728][ T4754]  __kmalloc+0xa3/0x240
[   85.101891][ T4754]  inotify_handle_inode_event+0x17c/0x4e0
[   85.107730][ T4754]  fsnotify+0x19e1/0x1df0
[   85.112082][ T4754]  ? __might_fault+0xa6/0x120
[   85.116758][ T4754]  ? dnotify_free_mark+0x60/0x60
[   85.121726][ T4754]  ? fsnotify+0x53e/0x1df0
[   85.126145][ T4754]  ? fsnotify_clear_child_dentry_flag+0xe0/0xe0
[   85.132398][ T4754]  __fsnotify_parent+0x57e/0x820
[   85.137348][ T4754]  ? fsnotify_set_children_dentry_flags+0x220/0x220
[   85.143943][ T4754]  ? proc_fail_nth_read+0x220/0x220
[   85.149144][ T4754]  ? common_file_perm+0x171/0x1c0
[   85.154177][ T4754]  vfs_write+0x6f2/0x9a0
[   85.158615][ T4754]  ? file_end_write+0x250/0x250
[   85.163470][ T4754]  ? __fget_files+0x28/0x460
[   85.168159][ T4754]  ? __fget_files+0x3fc/0x460
[   85.172871][ T4754]  ? __fdget_pos+0x2ae/0x360
[   85.177572][ T4754]  ? ksys_write+0x70/0x260
[   85.182029][ T4754]  ksys_write+0x14d/0x260
[   85.186378][ T4754]  ? __ia32_sys_read+0x80/0x80
[   85.191145][ T4754]  ? lockdep_hardirqs_on+0x94/0x140
[   85.196347][ T4754]  do_syscall_64+0x4c/0xa0
[   85.200768][ T4754]  ? clear_bhb_loop+0x60/0xb0
[   85.205447][ T4754]  ? clear_bhb_loop+0x60/0xb0
[   85.210131][ T4754]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   85.216031][ T4754] RIP: 0033:0x7fa8c49a94d9
[   85.220447][ T4754] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   85.240061][ T4754] RSP: 002b:00007fa8c58c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   85.248486][ T4754] RAX: ffffffffffffffda RBX: 00007fa8c4c25fa0 RCX: 00007fa8c49a94d9
[   85.256456][ T4754] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000004
[   85.264446][ T4754] RBP: 00007fa8c4a3804e R08: 0000000000000000 R09: 0000000000000000
[   85.272503][ T4754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   85.280476][ T4754] R13: 00007fa8c4c26038 R14: 00007fa8c4c25fa0 R15: 00007ffe220c9b38
[   85.288486][ T4754]  </TASK>
[   85.460108][ T4329] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   85.547815][ T4769] sd 0:0:1:0: PR command failed: 1026
[   85.553523][ T4769] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[   85.569367][   T26] audit: type=1800 audit(1794604465.133:6): pid=4763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.97" name="bus" dev="sda1" ino=2047 res=0 errno=0
[   85.616035][ T4769] sd 0:0:1:0: Add. Sense: Invalid command operation code
[   85.657967][ T4329] usb 4-1: Using ep0 maxpacket: 8
[   85.666359][ T4329] usb 4-1: too many configurations: 209, using maximum allowed: 8
[   85.687914][ T4329] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   85.707764][ T4329] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[   85.716804][ T4329] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   85.810250][ T4329] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   85.857811][ T4329] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[   85.866754][ T4329] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   85.968832][ T4329] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   86.028726][ T4329] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[   86.081405][ T4329] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   86.139306][ T4329] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   86.179032][ T4329] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[   86.217815][ T4329] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   86.300950][ T4329] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   86.337749][ T4329] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[   86.346692][ T4329] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   86.448646][ T4329] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   86.497220][ T4329] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[   86.517769][ T4329] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   86.542544][ T4794] FAULT_INJECTION: forcing a failure.
[   86.542544][ T4794] name failslab, interval 1, probability 0, space 0, times 0
[   86.543136][ T4329] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   86.577822][ T4329] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[   86.587569][ T4794] CPU: 0 PID: 4794 Comm: syz.1.107 Not tainted syzkaller #0
[   86.594915][ T4794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   86.597797][ T4329] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   86.604991][ T4794] Call Trace:
[   86.605008][ T4794]  <TASK>
[   86.605018][ T4794]  dump_stack_lvl+0x188/0x24e
[   86.605054][ T4794]  ? show_regs_print_info+0x12/0x12
[   86.605078][ T4794]  ? load_image+0x410/0x410
[   86.637947][ T4329] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   86.638490][ T4794]  ? __lock_acquire+0x7ea0/0x7ea0
[   86.638524][ T4794]  ? mark_lock+0x94/0x320
[   86.655331][ T4329] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[   86.657924][ T4794]  should_fail_ex+0x390/0x4c0
[   86.657955][ T4794]  should_failslab+0x5/0x20
[   86.657971][ T4794]  slab_pre_alloc_hook+0x59/0x300
[   86.657991][ T4794]  ? inotify_handle_inode_event+0x17c/0x4e0
[   86.678356][ T4329] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   86.681030][ T4794]  __kmem_cache_alloc_node+0x4f/0x270
[   86.699315][ T4329] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   86.703075][ T4794]  ? inotify_handle_inode_event+0x17c/0x4e0
[   86.718018][ T4329] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=77
[   86.723695][ T4794]  __kmalloc+0xa3/0x240
[   86.723723][ T4794]  inotify_handle_inode_event+0x17c/0x4e0
[   86.723752][ T4794]  fsnotify+0x19e1/0x1df0
[   86.745036][ T4329] usb 4-1: Product: syz
[   86.746004][ T4794]  ? __might_fault+0xa6/0x120
[   86.754956][ T4794]  ? dnotify_free_mark+0x60/0x60
[   86.755187][ T4329] usb 4-1: Manufacturer: syz
[   86.759955][ T4794]  ? fsnotify+0x53e/0x1df0
[   86.759978][ T4794]  ? fsnotify_clear_child_dentry_flag+0xe0/0xe0
[   86.760009][ T4794]  __fsnotify_parent+0x57e/0x820
[   86.773647][ T4329] usb 4-1: SerialNumber: syz
[   86.775239][ T4794]  ? fsnotify_set_children_dentry_flags+0x220/0x220
[   86.775271][ T4794]  ? proc_fail_nth_read+0x220/0x220
[   86.797834][ T4794]  ? common_file_perm+0x171/0x1c0
[   86.802876][ T4794]  vfs_write+0x6f2/0x9a0
[   86.807140][ T4794]  ? file_end_write+0x250/0x250
[   86.811997][ T4794]  ? __fget_files+0x28/0x460
[   86.816624][ T4794]  ? __fget_files+0x3fc/0x460
[   86.821387][ T4794]  ? __fdget_pos+0x2ae/0x360
[   86.826378][ T4794]  ? ksys_write+0x70/0x260
[   86.830920][ T4794]  ksys_write+0x14d/0x260
[   86.835281][ T4794]  ? __ia32_sys_read+0x80/0x80
[   86.840164][ T4794]  ? lockdep_hardirqs_on+0x94/0x140
[   86.845672][ T4794]  do_syscall_64+0x4c/0xa0
[   86.850124][ T4794]  ? clear_bhb_loop+0x60/0xb0
[   86.854828][ T4794]  ? clear_bhb_loop+0x60/0xb0
[   86.859519][ T4794]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   86.865419][ T4794] RIP: 0033:0x7fdf795a94d9
[   86.870075][ T4794] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   86.889716][ T4794] RSP: 002b:00007fdf7a4aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   86.899468][ T4794] RAX: ffffffffffffffda RBX: 00007fdf79825fa0 RCX: 00007fdf795a94d9
[   86.907528][ T4794] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000004
[   86.916535][ T4794] RBP: 00007fdf7963804e R08: 0000000000000000 R09: 0000000000000000
[   86.924557][ T4794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   86.932577][ T4794] R13: 00007fdf79826038 R14: 00007fdf79825fa0 R15: 00007ffccf4b12d8
[   86.941043][ T4794]  </TASK>
[   86.965362][ T4329] cdc_wdm: probe of 4-1:1.0 failed with error -22
[   87.388658][ T4803] device-mapper: table: 248:0: crypt: Error allocating crypto tfm (-ENOENT)
[   87.406112][ T4803] device-mapper: ioctl: error adding target to table
[   87.915687][ T4831] netlink: 'syz.2.118': attribute type 1 has an invalid length.
[   87.951015][ T4831] netlink: 8 bytes leftover after parsing attributes in process `syz.2.118'.
[   88.050274][ T4831] device macvlan2 entered promiscuous mode
[   88.147869][ T4264] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   88.281448][    T7] usb 4-1: USB disconnect, device number 4
[   88.357340][ T4264] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   88.387721][ T4264] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   88.395880][ T4845] FAULT_INJECTION: forcing a failure.
[   88.395880][ T4845] name failslab, interval 1, probability 0, space 0, times 0
[   88.407809][ T4264] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[   88.435332][ T4845] CPU: 1 PID: 4845 Comm: syz.3.123 Not tainted syzkaller #0
[   88.439982][ T4264] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   88.442681][ T4845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   88.442700][ T4845] Call Trace:
[   88.442712][ T4845]  <TASK>
[   88.442720][ T4845]  dump_stack_lvl+0x188/0x24e
[   88.460014][ T4264] usb 1-1: config 0 descriptor??
[   88.460781][ T4845]  ? show_regs_print_info+0x12/0x12
[   88.481803][ T4845]  ? load_image+0x410/0x410
[   88.486321][ T4845]  ? __might_sleep+0xd0/0xd0
[   88.490918][ T4845]  ? __lock_acquire+0x7ea0/0x7ea0
[   88.495951][ T4845]  should_fail_ex+0x390/0x4c0
[   88.500638][ T4845]  should_failslab+0x5/0x20
[   88.505150][ T4845]  slab_pre_alloc_hook+0x59/0x300
[   88.510175][ T4845]  ? do_raw_spin_lock+0x128/0x2f0
[   88.515203][ T4845]  kmem_cache_alloc_lru+0x49/0x2e0
[   88.520316][ T4845]  ? __d_alloc+0x2e/0x6e0
[   88.524658][ T4845]  __d_alloc+0x2e/0x6e0
[   88.528822][ T4845]  d_alloc_parallel+0xdc/0x1590
[   88.533678][ T4845]  ? __d_lookup+0x8b/0x7c0
[   88.538098][ T4845]  ? __lock_acquire+0x7ea0/0x7ea0
[   88.543157][ T4845]  ? __d_lookup+0x8b/0x7c0
[   88.547606][ T4845]  ? d_hash_and_lookup+0x1b0/0x1b0
[   88.552754][ T4845]  path_openat+0x949/0x2f10
[   88.557288][ T4845]  ? kasan_set_track+0x60/0x70
[   88.562254][ T4845]  ? verify_lock_unused+0x140/0x140
[   88.567485][ T4845]  ? do_filp_open+0x420/0x420
[   88.572204][ T4845]  do_filp_open+0x1ee/0x420
[   88.576746][ T4845]  ? vfs_tmpfile+0x490/0x490
[   88.581351][ T4845]  ? noop_direct_IO+0x10/0x10
[   88.586038][ T4845]  ? _raw_spin_unlock+0x24/0x40
[   88.590893][ T4845]  ? alloc_fd+0x590/0x640
[   88.595231][ T4845]  do_sys_openat2+0x14b/0x4f0
[   88.599923][ T4845]  ? do_sys_open+0xe0/0xe0
[   88.604569][ T4845]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[   88.610554][ T4845]  ? lock_chain_count+0x20/0x20
[   88.615413][ T4845]  __x64_sys_openat+0x135/0x160
[   88.620291][ T4845]  do_syscall_64+0x4c/0xa0
[   88.624713][ T4845]  ? clear_bhb_loop+0x60/0xb0
[   88.629397][ T4845]  ? clear_bhb_loop+0x60/0xb0
[   88.634104][ T4845]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   88.640025][ T4845] RIP: 0033:0x7f9fca569d0e
[   88.644452][ T4845] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   88.664068][ T4845] RSP: 002b:00007f9fcb45fec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[   88.672485][ T4845] RAX: ffffffffffffffda RBX: 00007f9fcb4606c0 RCX: 00007f9fca569d0e
[   88.680461][ T4845] RDX: 0000000000000002 RSI: 00007f9fcb45ff90 RDI: ffffffffffffff9c
[   88.688432][ T4845] RBP: 00007f9fca63804e R08: 0000000000000000 R09: 0000000000000000
[   88.696403][ T4845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   88.704396][ T4845] R13: 00007f9fca826038 R14: 00007f9fca825fa0 R15: 00007ffc63d03678
[   88.712397][ T4845]  </TASK>
[   89.136479][ T4264] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0
[   89.152882][ T4264] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0
[   89.174834][ T4264] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0
[   89.205415][ T4264] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0
[   89.223590][ T4264] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0
[   89.243853][ T4264] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0
[   89.259367][ T4264] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0
[   89.299643][ T4264] cp2112 0003:10C4:EA90.0005: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0
[   89.401251][ T4264] cp2112 0003:10C4:EA90.0005: Part Number: 0x00 Device Version: 0x00
[   89.601960][ T4264] cp2112 0003:10C4:EA90.0005: error requesting SMBus config
[   89.623618][ T4264] cp2112: probe of 0003:10C4:EA90.0005 failed with error -71
[   89.666198][ T4264] usb 1-1: USB disconnect, device number 5
[   89.926821][ T4871] fido_id[4871]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[   91.085149][ T4884] loop0: detected capacity change from 0 to 32768
[   91.243908][ T4884] XFS (loop0): Mounting V5 Filesystem
[   91.347875][ T4395] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   91.409461][ T4884] XFS (loop0): Ending clean mount
[   91.526131][ T4267] udevd[4267]: symlink '../../loop0' '/dev/disk/by-diskseq/72.tmp-b7:0' failed: Read-only file system
[   91.565411][ T4267] udevd[4267]: symlink '../../loop0' '/dev/disk/by-uuid/d7dc424e-7990-42cb-9f91-9cb7200a101d.tmp-b7:0' failed: Read-only file system
[   91.581344][ T4395] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 18
[   91.596928][ T4395] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00
[   91.647211][ T4395] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   91.751819][ T4284] XFS (loop0): Unmounting Filesystem
[   91.865699][ T4269] udevd[4269]: symlink '../../loop0' '/dev/disk/by-diskseq/72.tmp-b7:0' failed: Read-only file system
[   91.893071][ T4269] udevd[4269]: symlink '../../loop0' '/dev/disk/by-uuid/d7dc424e-7990-42cb-9f91-9cb7200a101d.tmp-b7:0' failed: Read-only file system
[   91.919846][ T4395] cdc_acm 5-1:1.0: ttyACM0: USB ACM device
[   92.048822][ T4269] udevd[4269]: symlink '../../loop0' '/dev/disk/by-diskseq/72.tmp-b7:0' failed: Read-only file system
[   92.094453][ T4269] udevd[4269]: symlink '../../loop0' '/dev/disk/by-diskseq/72.tmp-b7:0' failed: Read-only file system
[   92.146058][ T4395] usb 5-1: USB disconnect, device number 3
[   92.907769][ T4395] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[   93.099568][ T4395] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[   93.140393][ T4395] usb 3-1: config 0 interface 0 has no altsetting 0
[   93.157375][ T4395] usb 3-1: New USB device found, idVendor=0925, idProduct=8888, bcdDevice= 0.00
[   93.180873][   T14] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   93.201943][ T4395] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   93.212508][ T4954] loop0: detected capacity change from 0 to 32768
[   93.230503][ T4395] usb 3-1: config 0 descriptor??
[   93.252786][ T4951] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   93.304618][ T4954] XFS (loop0): Mounting V5 Filesystem
[   93.401216][ T4954] XFS (loop0): Ending clean mount
[   93.410319][   T14] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   93.427861][   T14] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   93.451685][   T14] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   93.502071][   T14] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[   93.539332][   T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[   93.558026][   T14] usb 2-1: Product: syz
[   93.562274][   T14] usb 2-1: Manufacturer: syz
[   93.567295][   T14] usb 2-1: SerialNumber: syz
[   93.610943][ T4284] XFS (loop0): Unmounting Filesystem
[   93.677086][ T4395] smartjoyplus 0003:0925:8888.0006: unexpected long global item
[   93.698910][ T4395] smartjoyplus 0003:0925:8888.0006: parse failed
[   93.705394][ T4395] smartjoyplus: probe of 0003:0925:8888.0006 failed with error -22
[   93.827370][   T14] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[   93.888036][   T14] usb 3-1: USB disconnect, device number 4
[   94.047918][    T7] usb 2-1: USB disconnect, device number 3
[   94.060583][    T7] usblp0: removed
[   95.101012][ T4355] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   95.277762][ T4329] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   95.297907][ T4355] usb 3-1: Using ep0 maxpacket: 32
[   95.312058][ T4355] usb 3-1: config 0 has an invalid interface number: 67 but max is 0
[   95.329756][ T4355] usb 3-1: config 0 has no interface number 0
[   95.343356][ T4355] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[   95.361492][ T4355] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.381753][ T4355] usb 3-1: Product: syz
[   95.385974][ T4355] usb 3-1: Manufacturer: syz
[   95.393200][ T4355] usb 3-1: SerialNumber: syz
[   95.415902][ T4355] usb 3-1: config 0 descriptor??
[   95.424171][ T4354] usb 4-1: new full-speed USB device number 5 using dummy_hcd
[   95.438743][ T4355] smsc95xx v2.0.0
[   95.467831][ T4329] usb 1-1: Using ep0 maxpacket: 32
[   95.476810][ T4329] usb 1-1: config index 0 descriptor too short (expected 29220, got 36)
[   95.493551][ T4329] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[   95.504195][ T4329] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81
[   95.524059][ T4329] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   95.537130][ T4329] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   95.557042][ T4329] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   95.577075][ T4329] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[   95.595282][ T4329] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   95.613332][ T4329] usb 1-1: config 0 descriptor??
[   95.622271][ T4354] usb 4-1: not running at top speed; connect to a high speed hub
[   95.651282][ T4354] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   95.665366][ T4354] usb 4-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad
[   95.675139][ T4354] usb 4-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0
[   95.683979][ T4354] usb 4-1: Product: syz
[   95.689073][ T4354] usb 4-1: Manufacturer: syz
[   95.718771][ T4354] usb 4-1: Found UVC 1.00 device syz (225a:e1d4)
[   95.848249][ T4355] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[   95.871119][ T4329] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[   95.883962][ T4355] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[   95.914832][ T4354] usb 4-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround.
[   95.932182][ T4354] uvcvideo 4-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26).
[   95.941815][ T4354] uvcvideo 4-1:1.1: Failed to initialize the device (-5).
[   95.959886][ T4354] usb 4-1: USB disconnect, device number 5
[   96.167391][    C1] usblp0: nonzero read bulk status received: -71
[   96.178778][ T4329] usb 1-1: USB disconnect, device number 6
[   96.188508][ T5003] usblp0: error -71 reading from printer
[   96.195615][ T5003] usblp0: removed
[   97.107259][ T4355] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[   97.130961][ T4355] smsc95xx: probe of 3-1:0.67 failed with error -71
[   97.151713][ T4355] usb 3-1: USB disconnect, device number 5
[   97.522576][ T5030] loop4: detected capacity change from 0 to 32768
[   97.533830][ T5054] FAULT_INJECTION: forcing a failure.
[   97.533830][ T5054] name failslab, interval 1, probability 0, space 0, times 0
[   97.550044][ T5054] CPU: 0 PID: 5054 Comm: syz.0.189 Not tainted syzkaller #0
[   97.557385][ T5054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   97.567568][ T5054] Call Trace:
[   97.570878][ T5054]  <TASK>
[   97.574096][ T5054]  dump_stack_lvl+0x188/0x24e
[   97.578821][ T5054]  ? show_regs_print_info+0x12/0x12
[   97.584058][ T5054]  ? load_image+0x410/0x410
[   97.589124][ T5054]  ? __might_sleep+0xd0/0xd0
[   97.593750][ T5054]  ? __lock_acquire+0x7ea0/0x7ea0
[   97.598931][ T5054]  should_fail_ex+0x390/0x4c0
[   97.604398][ T5054]  should_failslab+0x5/0x20
[   97.608924][ T5054]  slab_pre_alloc_hook+0x59/0x300
[   97.613980][ T5054]  ? register_netdevice+0x555/0x1b80
[   97.619270][ T5054]  __kmem_cache_alloc_node+0x4f/0x270
[   97.624652][ T5054]  ? register_netdevice+0x555/0x1b80
[   97.630247][ T5054]  kmalloc_trace+0x26/0xe0
[   97.635609][ T5054]  register_netdevice+0x555/0x1b80
[   97.641036][ T5054]  ? net_generic+0x1e/0x240
[   97.645562][ T5054]  ? netif_stacked_transfer_operstate+0x200/0x200
[   97.652014][ T5054]  ? kvmalloc_node+0x6c/0x180
[   97.656711][ T5054]  ? rcu_is_watching+0x11/0xa0
[   97.661503][ T5054]  ? net_generic+0x1e/0x240
[   97.666028][ T5054]  ip6_tnl_create2+0x80/0x140
[   97.670719][ T5054]  ip6_tnl_locate+0x731/0x830
[   97.675410][ T5054]  ? ip6_tnl_unlink+0x2c0/0x2c0
[   97.680263][ T5054]  ? __might_fault+0xa6/0x120
[   97.684942][ T5054]  ? ip6_tnl_siocdevprivate+0x5ed/0xb60
[   97.690491][ T5054]  ip6_tnl_siocdevprivate+0x613/0xb60
[   97.695876][ T5054]  ? ip6_tnl_start_xmit+0x1220/0x1220
[   97.701253][ T5054]  ? trace_raw_output_contention_end+0xd0/0xd0
[   97.707427][ T5054]  ? full_name_hash+0x8e/0xe0
[   97.712106][ T5054]  dev_ifsioc+0xa4a/0xd50
[   97.716446][ T5054]  ? dev_ioctl+0xe80/0xe80
[   97.720867][ T5054]  ? __lock_acquire+0x7ea0/0x7ea0
[   97.725902][ T5054]  ? full_name_hash+0x8e/0xe0
[   97.730589][ T5054]  ? dev_load+0x1d/0x1e0
[   97.734857][ T5054]  ? dev_load+0x1d/0x1e0
[   97.739125][ T5054]  dev_ioctl+0x5f8/0xe80
[   97.743756][ T5054]  ? get_user_ifreq+0xc7/0x170
[   97.748535][ T5054]  sock_ioctl+0x679/0x700
[   97.752867][ T5054]  ? sock_poll+0x430/0x430
[   97.757316][ T5054]  ? bpf_lsm_file_ioctl+0x5/0x10
[   97.762256][ T5054]  ? security_file_ioctl+0x7c/0xa0
[   97.767379][ T5054]  ? sock_poll+0x430/0x430
[   97.771799][ T5054]  __se_sys_ioctl+0xfa/0x170
[   97.776400][ T5054]  do_syscall_64+0x4c/0xa0
[   97.780926][ T5054]  ? clear_bhb_loop+0x60/0xb0
[   97.785625][ T5054]  ? clear_bhb_loop+0x60/0xb0
[   97.790311][ T5054]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   97.796384][ T5054] RIP: 0033:0x7f19599a94d9
[   97.801082][ T5054] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   97.820701][ T5054] RSP: 002b:00007f195a8da028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   97.829144][ T5054] RAX: ffffffffffffffda RBX: 00007f1959c25fa0 RCX: 00007f19599a94d9
[   97.837119][ T5054] RDX: 0000200000000200 RSI: 00000000000089f1 RDI: 0000000000000008
[   97.845094][ T5054] RBP: 00007f1959a3804e R08: 0000000000000000 R09: 0000000000000000
[   97.853064][ T5054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   97.861660][ T5054] R13: 00007f1959c26038 R14: 00007f1959c25fa0 R15: 00007fffccb04618
[   97.869659][ T5054]  </TASK>
[   98.041952][ T5030] XFS (loop4): Mounting V5 Filesystem
[   98.301595][ T5074] FAULT_INJECTION: forcing a failure.
[   98.301595][ T5074] name failslab, interval 1, probability 0, space 0, times 0
[   98.324852][ T5030] XFS (loop4): Ending clean mount
[   98.340176][ T5074] CPU: 1 PID: 5074 Comm: syz.1.193 Not tainted syzkaller #0
[   98.347525][ T5074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   98.357613][ T5074] Call Trace:
[   98.360917][ T5074]  <TASK>
[   98.363869][ T5074]  dump_stack_lvl+0x188/0x24e
[   98.368584][ T5074]  ? show_regs_print_info+0x12/0x12
[   98.373825][ T5074]  ? load_image+0x410/0x410
[   98.378360][ T5074]  ? __lock_acquire+0x7ea0/0x7ea0
[   98.383425][ T5074]  should_fail_ex+0x390/0x4c0
[   98.388148][ T5074]  should_failslab+0x5/0x20
[   98.392679][ T5074]  slab_pre_alloc_hook+0x59/0x300
[   98.397737][ T5074]  kmem_cache_alloc_lru+0x49/0x2e0
[   98.402871][ T5074]  ? new_inode_pseudo+0x7e/0x1c0
[   98.407931][ T5074]  new_inode_pseudo+0x7e/0x1c0
[   98.412743][ T5074]  ? __ns_get_path+0x2c/0x650
[   98.417455][ T5074]  __ns_get_path+0x252/0x650
[   98.422084][ T5074]  ? __put_net+0x60/0x60
[   98.426374][ T5074]  open_related_ns+0xca/0x200
[   98.431101][ T5074]  ? ns_get_path+0x90/0x90
[   98.435565][ T5074]  sock_ioctl+0x337/0x700
[   98.439931][ T5074]  ? sock_poll+0x430/0x430
[   98.444386][ T5074]  ? bpf_lsm_file_ioctl+0x5/0x10
[   98.449360][ T5074]  ? security_file_ioctl+0x7c/0xa0
[   98.454506][ T5074]  ? sock_poll+0x430/0x430
[   98.458988][ T5074]  __se_sys_ioctl+0xfa/0x170
[   98.463624][ T5074]  do_syscall_64+0x4c/0xa0
[   98.468075][ T5074]  ? clear_bhb_loop+0x60/0xb0
[   98.472782][ T5074]  ? clear_bhb_loop+0x60/0xb0
[   98.477476][ T5074]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   98.483373][ T5074] RIP: 0033:0x7fdf795a94d9
[   98.487811][ T5074] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   98.507442][ T5074] RSP: 002b:00007fdf7a4aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   98.515860][ T5074] RAX: ffffffffffffffda RBX: 00007fdf79825fa0 RCX: 00007fdf795a94d9
[   98.523848][ T5074] RDX: 0000000000000000 RSI: 000000000000894c RDI: 0000000000000003
[   98.531829][ T5074] RBP: 00007fdf7963804e R08: 0000000000000000 R09: 0000000000000000
[   98.539903][ T5074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   98.547879][ T5074] R13: 00007fdf79826038 R14: 00007fdf79825fa0 R15: 00007ffccf4b12d8
[   98.555865][ T5074]  </TASK>
[   98.586785][ T4281] XFS (loop4): Unmounting Filesystem
[   98.707820][ T4329] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   98.897784][ T4329] usb 3-1: Using ep0 maxpacket: 16
[   98.900480][ T5089] syz.1.199 uses obsolete (PF_INET,SOCK_PACKET)
[   98.906149][ T4329] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   98.938353][ T4329] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[   98.963301][ T4329] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[   99.012128][ T4329] usb 3-1: config 0 interface 0 has no altsetting 0
[   99.022282][ T4329] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[   99.041875][ T4329] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   99.062990][ T4329] usb 3-1: config 0 descriptor??
[   99.108001][ T4395] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   99.140750][ T5095] input: syz0 as /devices/virtual/input/input9
[   99.150017][ T5095] FAULT_INJECTION: forcing a failure.
[   99.150017][ T5095] name failslab, interval 1, probability 0, space 0, times 0
[   99.177790][ T5095] CPU: 1 PID: 5095 Comm: syz.4.196 Not tainted syzkaller #0
[   99.185155][ T5095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   99.195221][ T5095] Call Trace:
[   99.198519][ T5095]  <TASK>
[   99.201478][ T5095]  dump_stack_lvl+0x188/0x24e
[   99.206207][ T5095]  ? show_regs_print_info+0x12/0x12
[   99.211426][ T5095]  ? load_image+0x410/0x410
[   99.215958][ T5095]  ? __might_sleep+0xd0/0xd0
[   99.220556][ T5095]  ? __lock_acquire+0x7ea0/0x7ea0
[   99.225591][ T5095]  should_fail_ex+0x390/0x4c0
[   99.230281][ T5095]  should_failslab+0x5/0x20
[   99.234814][ T5095]  slab_pre_alloc_hook+0x59/0x300
[   99.239852][ T5095]  kmem_cache_alloc+0x56/0x2f0
[   99.244622][ T5095]  ? __kernfs_new_node+0xe1/0x7f0
[   99.249657][ T5095]  __kernfs_new_node+0xe1/0x7f0
[   99.254516][ T5095]  ? __lock_acquire+0x7ea0/0x7ea0
[   99.259560][ T5095]  ? kernfs_new_node+0x250/0x250
[   99.264542][ T5095]  kernfs_new_node+0x148/0x250
[   99.269515][ T5095]  __kernfs_create_file+0x47/0x2e0
[   99.274687][ T5095]  sysfs_add_file_mode_ns+0x233/0x2f0
[   99.280076][ T5095]  sysfs_merge_group+0x180/0x320
[   99.285026][ T5095]  ? sysfs_remove_groups+0xa0/0xa0
[   99.290146][ T5095]  ? device_add_attrs+0x721/0x830
[   99.295177][ T5095]  ? get_device_parent+0x3e0/0x3e0
[   99.300299][ T5095]  dpm_sysfs_add+0xce/0x270
[   99.304812][ T5095]  device_add+0x745/0x1050
[   99.309237][ T5095]  cdev_device_add+0x19d/0x340
[   99.314010][ T5095]  evdev_connect+0x350/0x3f0
[   99.318609][ T5095]  input_register_device+0xd91/0x12d0
[   99.323984][ T5095]  ? input_ff_create+0x24e/0x2e0
[   99.328925][ T5095]  uinput_create_device+0x53e/0x680
[   99.334133][ T5095]  uinput_ioctl_handler+0x7a0/0x13d0
[   99.339417][ T5095]  ? uinput_release+0x50/0x50
[   99.344111][ T5095]  ? bpf_lsm_file_ioctl+0x5/0x10
[   99.349054][ T5095]  ? security_file_ioctl+0x7c/0xa0
[   99.354175][ T5095]  ? uinput_poll+0x120/0x120
[   99.358762][ T5095]  __se_sys_ioctl+0xfa/0x170
[   99.363387][ T5095]  do_syscall_64+0x4c/0xa0
[   99.367815][ T5095]  ? clear_bhb_loop+0x60/0xb0
[   99.372494][ T5095]  ? clear_bhb_loop+0x60/0xb0
[   99.377183][ T5095]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   99.383080][ T5095] RIP: 0033:0x7fa8c49a94d9
[   99.387507][ T5095] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   99.407126][ T5095] RSP: 002b:00007fa8c58c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   99.415569][ T5095] RAX: ffffffffffffffda RBX: 00007fa8c4c25fa0 RCX: 00007fa8c49a94d9
[   99.423545][ T5095] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000007
[   99.431530][ T5095] RBP: 00007fa8c4a3804e R08: 0000000000000000 R09: 0000000000000000
[   99.439512][ T5095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   99.447491][ T5095] R13: 00007fa8c4c26038 R14: 00007fa8c4c25fa0 R15: 00007ffe220c9b38
[   99.455581][ T5095]  </TASK>
[   99.462267][   T14] usb 4-1: new full-speed USB device number 6 using dummy_hcd
[   99.503665][ T5095] input: failed to attach handler evdev to device input9, error: -12
[   99.570022][ T4395] usb 1-1: unable to get BOS descriptor or descriptor too short
[   99.580933][ T4395] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   99.602506][ T4395] usb 1-1: string descriptor 0 read error: -22
[   99.621234][ T4395] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40
[   99.633472][ T4395] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   99.649004][   T14] usb 4-1: not running at top speed; connect to a high speed hub
[   99.669222][   T14] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   99.681901][   T14] usb 4-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad
[   99.684602][ T4329] hid (null): unknown global tag 0xf9
[   99.693212][   T14] usb 4-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0
[   99.705737][   T14] usb 4-1: Product: syz
[   99.713371][ T4329] hid (null): invalid report_size -2078020073
[   99.720286][   T14] usb 4-1: Manufacturer: syz
[   99.721358][ T4329] hid (null): unknown global tag 0xd
[   99.755028][   T14] usb 4-1: Found UVC 1.00 device syz (225a:e1d4)
[   99.767834][   T14] usb 4-1: No streaming interface found for terminal 2.
[   99.904015][ T4329] usb 3-1: USB disconnect, device number 6
[   99.954204][ T4355] usb 4-1: USB disconnect, device number 6
[  100.275254][ T4395] usb 1-1: 1:1: cannot get freq at ep 0x1
[  100.332044][ T4395] usb 1-1: USB disconnect, device number 7
[  100.638023][ T4265] udevd[4265]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  101.374842][ T5114] loop3: detected capacity change from 0 to 32768
[  101.578917][ T5114] XFS (loop3): Mounting V5 Filesystem
[  101.717094][ T5114] XFS (loop3): Ending clean mount
[  101.867655][ T4279] XFS (loop3): Unmounting Filesystem
[  102.057820][ T4395] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  102.251128][ T4395] usb 1-1: Using ep0 maxpacket: 32
[  102.258681][ T4395] usb 1-1: config 0 has an invalid interface number: 67 but max is 0
[  102.290221][ T4395] usb 1-1: config 0 has no interface number 0
[  102.319495][ T4395] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  102.343215][ T4395] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.360679][ T4395] usb 1-1: Product: syz
[  102.370586][ T4395] usb 1-1: Manufacturer: syz
[  102.386933][ T4395] usb 1-1: SerialNumber: syz
[  102.410673][ T4395] usb 1-1: config 0 descriptor??
[  102.424251][ T5168] WARNING! power/level is deprecated; use power/control instead
[  102.431693][ T4395] smsc95xx v2.0.0
[  102.841377][ T4395] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  102.857416][ T4395] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  104.206495][ T5190] loop2: detected capacity change from 0 to 32768
[  104.298520][ T4395] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000038: -71
[  104.309596][ T4395] smsc95xx: probe of 1-1:0.67 failed with error -71
[  104.328145][ T4395] usb 1-1: USB disconnect, device number 8
[  104.363149][ T5190] XFS (loop2): Mounting V5 Filesystem
[  104.376141][ T5207] FAULT_INJECTION: forcing a failure.
[  104.376141][ T5207] name failslab, interval 1, probability 0, space 0, times 0
[  104.391141][ T5207] CPU: 0 PID: 5207 Comm: syz.3.230 Not tainted syzkaller #0
[  104.398921][ T5207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  104.409000][ T5207] Call Trace:
[  104.412284][ T5207]  <TASK>
[  104.415215][ T5207]  dump_stack_lvl+0x188/0x24e
[  104.420167][ T5207]  ? show_regs_print_info+0x12/0x12
[  104.425401][ T5207]  ? load_image+0x410/0x410
[  104.429917][ T5207]  ? __might_sleep+0xd0/0xd0
[  104.434533][ T5207]  ? __lock_acquire+0x7ea0/0x7ea0
[  104.439574][ T5207]  should_fail_ex+0x390/0x4c0
[  104.444261][ T5207]  should_failslab+0x5/0x20
[  104.448765][ T5207]  slab_pre_alloc_hook+0x59/0x300
[  104.453796][ T5207]  kmem_cache_alloc_lru+0x49/0x2e0
[  104.458907][ T5207]  ? dax_alloc_inode+0x26/0x80
[  104.464212][ T5207]  ? _raw_spin_unlock+0x24/0x40
[  104.469082][ T5207]  ? dax_fs_exit+0x30/0x30
[  104.473508][ T5207]  dax_alloc_inode+0x26/0x80
[  104.478200][ T5207]  ? dax_init_fs_context+0x60/0x60
[  104.483310][ T5207]  iget5_locked+0x9e/0x260
[  104.487727][ T5207]  ? dax_test+0x90/0x90
[  104.491900][ T5207]  alloc_dax+0x119/0x330
[  104.496147][ T5207]  ? vsprintf+0x30/0x30
[  104.500302][ T5207]  ? run_dax+0x30/0x30
[  104.504473][ T5207]  ? __raw_spin_lock_init+0x41/0x100
[  104.509772][ T5207]  dm_create+0xa69/0xf90
[  104.514043][ T5207]  dev_create+0x12e/0x2c0
[  104.518375][ T5207]  ? __lock_acquire+0x7ea0/0x7ea0
[  104.523402][ T5207]  ? list_devices+0x8a0/0x8a0
[  104.528079][ T5207]  ? __might_fault+0xc2/0x120
[  104.532754][ T5207]  ? __might_fault+0xa6/0x120
[  104.537432][ T5207]  dm_ctl_ioctl+0xa9c/0xec0
[  104.541971][ T5207]  ? list_devices+0x8a0/0x8a0
[  104.546656][ T5207]  ? dm_poll+0x120/0x120
[  104.550919][ T5207]  ? bpf_lsm_file_ioctl+0x5/0x10
[  104.555853][ T5207]  ? security_file_ioctl+0x7c/0xa0
[  104.560983][ T5207]  ? dm_poll+0x120/0x120
[  104.565229][ T5207]  __se_sys_ioctl+0xfa/0x170
[  104.569823][ T5207]  do_syscall_64+0x4c/0xa0
[  104.574269][ T5207]  ? clear_bhb_loop+0x60/0xb0
[  104.578957][ T5207]  ? clear_bhb_loop+0x60/0xb0
[  104.583657][ T5207]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  104.589728][ T5207] RIP: 0033:0x7f9fca5a94d9
[  104.594142][ T5207] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  104.613748][ T5207] RSP: 002b:00007f9fcb460028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  104.622161][ T5207] RAX: ffffffffffffffda RBX: 00007f9fca825fa0 RCX: 00007f9fca5a94d9
[  104.630180][ T5207] RDX: 0000200000000180 RSI: 00000000c138fd03 RDI: 0000000000000003
[  104.638162][ T5207] RBP: 00007f9fca63804e R08: 0000000000000000 R09: 0000000000000000
[  104.646148][ T5207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  104.654117][ T5207] R13: 00007f9fca826038 R14: 00007f9fca825fa0 R15: 00007ffc63d03678
[  104.662277][ T5207]  </TASK>
[  104.696970][ T5190] XFS (loop2): Ending clean mount
[  104.766385][ T4280] XFS (loop2): Unmounting Filesystem
[  107.057157][ T5276] fscrypt (sda1, inode 1262): Can't use IV_INO_LBLK_64 policy with contents mode other than AES-256-XTS
[  108.213902][ T5309] FAULT_INJECTION: forcing a failure.
[  108.213902][ T5309] name failslab, interval 1, probability 0, space 0, times 0
[  108.241136][ T5309] CPU: 1 PID: 5309 Comm: syz.2.263 Not tainted syzkaller #0
[  108.248496][ T5309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  108.258578][ T5309] Call Trace:
[  108.261894][ T5309]  <TASK>
[  108.264854][ T5309]  dump_stack_lvl+0x188/0x24e
[  108.269575][ T5309]  ? show_regs_print_info+0x12/0x12
[  108.274863][ T5309]  ? load_image+0x410/0x410
[  108.279406][ T5309]  ? __might_sleep+0xd0/0xd0
[  108.284029][ T5309]  ? __lock_acquire+0x7ea0/0x7ea0
[  108.289103][ T5309]  should_fail_ex+0x390/0x4c0
[  108.293817][ T5309]  should_failslab+0x5/0x20
[  108.298339][ T5309]  slab_pre_alloc_hook+0x59/0x300
[  108.303515][ T5309]  ? memcg_list_lru_alloc+0x22d/0xb00
[  108.308930][ T5309]  __kmem_cache_alloc_node+0x4f/0x270
[  108.314351][ T5309]  ? memcg_list_lru_alloc+0x22d/0xb00
[  108.319898][ T5309]  __kmalloc+0xa3/0x240
[  108.324093][ T5309]  memcg_list_lru_alloc+0x22d/0xb00
[  108.329357][ T5309]  ? slab_pre_alloc_hook+0xb1/0x300
[  108.335569][ T5309]  ? memcg_reparent_list_lrus+0x850/0x850
[  108.341350][ T5309]  ? get_obj_cgroup_from_current+0xd0/0x280
[  108.347286][ T5309]  ? get_obj_cgroup_from_current+0xd0/0x280
[  108.353235][ T5309]  slab_pre_alloc_hook+0x2ad/0x300
[  108.358388][ T5309]  ? slab_pre_alloc_hook+0xb1/0x300
[  108.363635][ T5309]  kmem_cache_alloc_lru+0x49/0x2e0
[  108.370378][ T5309]  ? new_inode_pseudo+0x7e/0x1c0
[  108.375460][ T5309]  new_inode_pseudo+0x7e/0x1c0
[  108.380382][ T5309]  ? __ns_get_path+0x2c/0x650
[  108.385483][ T5309]  __ns_get_path+0x252/0x650
[  108.390215][ T5309]  ? __put_net+0x60/0x60
[  108.394490][ T5309]  open_related_ns+0xca/0x200
[  108.399222][ T5309]  ? ns_get_path+0x90/0x90
[  108.403691][ T5309]  sock_ioctl+0x337/0x700
[  108.408074][ T5309]  ? sock_poll+0x430/0x430
[  108.412549][ T5309]  ? bpf_lsm_file_ioctl+0x5/0x10
[  108.417534][ T5309]  ? security_file_ioctl+0x7c/0xa0
[  108.422694][ T5309]  ? sock_poll+0x430/0x430
[  108.427164][ T5309]  __se_sys_ioctl+0xfa/0x170
[  108.431806][ T5309]  do_syscall_64+0x4c/0xa0
[  108.436263][ T5309]  ? clear_bhb_loop+0x60/0xb0
[  108.440985][ T5309]  ? clear_bhb_loop+0x60/0xb0
[  108.445698][ T5309]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  108.451635][ T5309] RIP: 0033:0x7fa1a5fa94d9
[  108.456086][ T5309] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  108.475985][ T5309] RSP: 002b:00007fa1a6ead028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  108.484487][ T5309] RAX: ffffffffffffffda RBX: 00007fa1a6225fa0 RCX: 00007fa1a5fa94d9
[  108.492517][ T5309] RDX: 0000000000000000 RSI: 000000000000894c RDI: 0000000000000003
[  108.500531][ T5309] RBP: 00007fa1a603804e R08: 0000000000000000 R09: 0000000000000000
[  108.508536][ T5309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  108.516534][ T5309] R13: 00007fa1a6226038 R14: 00007fa1a6225fa0 R15: 00007ffd3ce4f288
[  108.524577][ T5309]  </TASK>
[  108.537741][ T4355] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  108.739516][ T4355] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  108.757729][ T4355] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[  108.776941][ T4355] usb 4-1: config 1 has no interface number 0
[  108.787983][ T4355] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  108.820610][ T4355] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  108.837726][ T4355] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.845772][ T4355] usb 4-1: Product: syz
[  108.867764][ T4355] usb 4-1: Manufacturer: syz
[  108.872471][ T4355] usb 4-1: SerialNumber: syz
[  108.880697][ T4355] usb 4-1: selecting invalid altsetting 1
[  109.178075][ T5321] FAULT_INJECTION: forcing a failure.
[  109.178075][ T5321] name failslab, interval 1, probability 0, space 0, times 0
[  109.206831][ T5321] CPU: 1 PID: 5321 Comm: syz.1.268 Not tainted syzkaller #0
[  109.214188][ T5321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  109.224306][ T5321] Call Trace:
[  109.227612][ T5321]  <TASK>
[  109.230562][ T5321]  dump_stack_lvl+0x188/0x24e
[  109.235273][ T5321]  ? show_regs_print_info+0x12/0x12
[  109.240502][ T5321]  ? load_image+0x410/0x410
[  109.245078][ T5321]  ? __might_sleep+0xd0/0xd0
[  109.249701][ T5321]  ? __lock_acquire+0x7ea0/0x7ea0
[  109.254759][ T5321]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  109.260776][ T5321]  ? __lock_acquire+0x7ea0/0x7ea0
[  109.265842][ T5321]  should_fail_ex+0x390/0x4c0
[  109.270564][ T5321]  should_failslab+0x5/0x20
[  109.275095][ T5321]  slab_pre_alloc_hook+0x59/0x300
[  109.280157][ T5321]  ? asymmetric_key_generate_id+0x52/0xd0
[  109.285911][ T5321]  __kmem_cache_alloc_node+0x4f/0x270
[  109.291322][ T5321]  ? x509_note_OID+0x131/0x1e0
[  109.296130][ T5321]  ? asymmetric_key_generate_id+0x52/0xd0
[  109.301978][ T5321]  __kmalloc+0xa3/0x240
[  109.306167][ T5321]  asymmetric_key_generate_id+0x52/0xd0
[  109.311761][ T5321]  x509_note_issuer+0xfd/0x1a0
[  109.316617][ T5321]  asn1_ber_decoder+0x1816/0x21b0
[  109.321679][ T5321]  ? __se_sys_add_key+0x34b/0x410
[  109.326778][ T5321]  ? ref_tracker_free+0x830/0x830
[  109.331928][ T5321]  x509_cert_parse+0x1ae/0x7a0
[  109.336745][ T5321]  x509_key_preparse+0x60/0x660
[  109.341703][ T5321]  ? down_read+0x1a8/0x2d0
[  109.346155][ T5321]  asymmetric_key_preparse+0xa5/0x140
[  109.351565][ T5321]  key_create_or_update+0x405/0xa50
[  109.356818][ T5321]  ? key_type_put+0x20/0x20
[  109.361725][ T5321]  ? __might_fault+0xc2/0x120
[  109.366432][ T5321]  ? __might_fault+0xa6/0x120
[  109.371149][ T5321]  __se_sys_add_key+0x34b/0x410
[  109.376056][ T5321]  ? __x64_sys_add_key+0xc0/0xc0
[  109.381039][ T5321]  ? lockdep_hardirqs_on+0x94/0x140
[  109.386277][ T5321]  ? __x64_sys_add_key+0x1c/0xc0
[  109.391267][ T5321]  do_syscall_64+0x4c/0xa0
[  109.395732][ T5321]  ? clear_bhb_loop+0x60/0xb0
[  109.400452][ T5321]  ? clear_bhb_loop+0x60/0xb0
[  109.405226][ T5321]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  109.411162][ T5321] RIP: 0033:0x7fdf795a94d9
[  109.415609][ T5321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  109.435250][ T5321] RSP: 002b:00007fdf7a4aa028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[  109.443810][ T5321] RAX: ffffffffffffffda RBX: 00007fdf79825fa0 RCX: 00007fdf795a94d9
[  109.451842][ T5321] RDX: 0000200000000040 RSI: 0000000000000000 RDI: 0000200000000000
[  109.459833][ T5321] RBP: 00007fdf7963804e R08: ffffffffffffffff R09: 0000000000000000
[  109.467811][ T5321] R10: 00000000000001d9 R11: 0000000000000246 R12: 0000000000000000
[  109.476047][ T5321] R13: 00007fdf79826038 R14: 00007fdf79825fa0 R15: 00007ffccf4b12d8
[  109.484060][ T5321]  </TASK>
[  109.707840][ T4355] usb 4-1: selecting invalid altsetting 1
[  109.714163][ T4355] cdc_ncm 4-1:1.1: bind() failure
[  109.931450][   T14] usb 4-1: USB disconnect, device number 7
[  110.393784][ T5355] loop2: detected capacity change from 0 to 32768
[  110.484151][ T5355] XFS (loop2): Mounting V5 Filesystem
[  110.542667][ T5372] FAULT_INJECTION: forcing a failure.
[  110.542667][ T5372] name fail_futex, interval 1, probability 0, space 0, times 1
[  110.604762][ T5372] CPU: 1 PID: 5372 Comm: syz.3.282 Not tainted syzkaller #0
[  110.608133][ T5355] XFS (loop2): Ending clean mount
[  110.612096][ T5372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  110.627214][ T5372] Call Trace:
[  110.630515][ T5372]  <TASK>
[  110.633485][ T5372]  dump_stack_lvl+0x188/0x24e
[  110.638206][ T5372]  ? show_regs_print_info+0x12/0x12
[  110.643444][ T5372]  ? load_image+0x410/0x410
[  110.647990][ T5372]  ? __lock_acquire+0x7ea0/0x7ea0
[  110.653057][ T5372]  should_fail_ex+0x390/0x4c0
[  110.657769][ T5372]  get_futex_key+0x1a6/0xe70
[  110.662498][ T5372]  ? futex_setup_timer+0xc0/0xc0
[  110.667466][ T5372]  futex_wake+0x123/0x4f0
[  110.671806][ T5372]  ? futex_wake_mark+0x150/0x150
[  110.676744][ T5372]  ? __lock_acquire+0x7ea0/0x7ea0
[  110.681773][ T5372]  ? file_end_write+0x156/0x250
[  110.687085][ T5372]  ? vfs_write+0x777/0x9a0
[  110.692286][ T5372]  do_futex+0x2e2/0x320
[  110.696452][ T5372]  ? __ia32_sys_get_robust_list+0x100/0x100
[  110.702369][ T5372]  __se_sys_futex+0x381/0x410
[  110.707074][ T5372]  ? __x64_sys_futex+0xf0/0xf0
[  110.711841][ T5372]  ? __x64_sys_futex+0x1d/0xf0
[  110.716623][ T5372]  do_syscall_64+0x4c/0xa0
[  110.721050][ T5372]  ? clear_bhb_loop+0x60/0xb0
[  110.725730][ T5372]  ? clear_bhb_loop+0x60/0xb0
[  110.730431][ T5372]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  110.736506][ T5372] RIP: 0033:0x7f9fca5a94d9
[  110.740946][ T5372] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  110.760559][ T5372] RSP: 002b:00007f9fcb4600e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  110.768977][ T5372] RAX: ffffffffffffffda RBX: 00007f9fca825fa8 RCX: 00007f9fca5a94d9
[  110.776970][ T5372] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f9fca825fac
[  110.784966][ T5372] RBP: 00007f9fca825fa0 R08: 001d901ee3cbb920 R09: 0000000000000000
[  110.793314][ T5372] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  110.801285][ T5372] R13: 00007f9fca826038 R14: 00007ffc63d03590 R15: 00007ffc63d03678
[  110.809287][ T5372]  </TASK>
[  110.831003][ T4280] XFS (loop2): Unmounting Filesystem
[  111.761526][   T11] Bluetooth: hci5: Frame reassembly failed (-84)
[  111.787027][ T5412] Bluetooth: received HCILL_WAKE_UP_ACK in state 2
[  111.819913][   T11] Bluetooth: hci5: Frame reassembly failed (-84)
[  111.903601][ T5418] Zero length message leads to an empty skb
[  111.942276][ T5418] loop2: detected capacity change from 0 to 128
[  112.043199][ T5421] loop1: detected capacity change from 0 to 33280
[  112.139366][ T5412] syz.2.293: attempt to access beyond end of device
[  112.139366][ T5412] loop2: rw=2049, sector=145, nr_sectors = 64 limit=128
[  112.203963][ T5421] EXT4-fs (loop1): 1 truncate cleaned up
[  112.255770][ T5421] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  112.309531][ T5414] loop0: detected capacity change from 0 to 32768
[  112.350207][ T5414] XFS (loop0): Mounting V5 Filesystem
[  112.401910][ T5414] XFS (loop0): Ending clean mount
[  112.448666][   T26] audit: type=1800 audit(1794604492.013:7): pid=5421 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.295" name="file1" dev="loop1" ino=13 res=0 errno=0
[  112.516007][   T26] audit: type=1800 audit(1794604492.033:8): pid=5421 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.295" name="file1" dev="loop1" ino=13 res=0 errno=0
[  112.544859][ T4284] XFS (loop0): Unmounting Filesystem
[  112.810272][ T5441] FAULT_INJECTION: forcing a failure.
[  112.810272][ T5441] name fail_futex, interval 1, probability 0, space 0, times 0
[  112.817077][ T5442] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3267840208 (6535680416 ns) > initial count (1099271824 ns). Using initial count to start timer.
[  112.837737][ T5441] CPU: 0 PID: 5441 Comm: syz.0.297 Not tainted syzkaller #0
[  112.848860][ T5441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  112.858948][ T5441] Call Trace:
[  112.862251][ T5441]  <TASK>
[  112.865203][ T5441]  dump_stack_lvl+0x188/0x24e
[  112.869921][ T5441]  ? show_regs_print_info+0x12/0x12
[  112.875156][ T5441]  ? load_image+0x410/0x410
[  112.879698][ T5441]  ? __lock_acquire+0x7ea0/0x7ea0
[  112.884745][ T5441]  should_fail_ex+0x390/0x4c0
[  112.889434][ T5441]  get_futex_key+0x1a6/0xe70
[  112.894035][ T5441]  ? futex_setup_timer+0xc0/0xc0
[  112.898980][ T5441]  futex_wake+0x123/0x4f0
[  112.903322][ T5441]  ? futex_wake_mark+0x150/0x150
[  112.908263][ T5441]  ? __lock_acquire+0x7ea0/0x7ea0
[  112.913294][ T5441]  ? file_end_write+0x156/0x250
[  112.918147][ T5441]  ? vfs_write+0x777/0x9a0
[  112.922582][ T5441]  do_futex+0x2e2/0x320
[  112.926749][ T5441]  ? __ia32_sys_get_robust_list+0x100/0x100
[  112.932663][ T5441]  __se_sys_futex+0x381/0x410
[  112.937379][ T5441]  ? __x64_sys_futex+0xf0/0xf0
[  112.942183][ T5441]  ? __x64_sys_futex+0x1d/0xf0
[  112.946969][ T5441]  do_syscall_64+0x4c/0xa0
[  112.951392][ T5441]  ? clear_bhb_loop+0x60/0xb0
[  112.956073][ T5441]  ? clear_bhb_loop+0x60/0xb0
[  112.960761][ T5441]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  112.966670][ T5441] RIP: 0033:0x7f19599a94d9
[  112.971089][ T5441] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  112.990900][ T5441] RSP: 002b:00007f195a8da0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  112.999329][ T5441] RAX: ffffffffffffffda RBX: 00007f1959c25fa8 RCX: 00007f19599a94d9
[  113.007335][ T5441] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f1959c25fac
[  113.015317][ T5441] RBP: 00007f1959c25fa0 R08: 002da7fe3defdc08 R09: 0000000000000000
[  113.023292][ T5441] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  113.031277][ T5441] R13: 00007f1959c26038 R14: 00007fffccb04530 R15: 00007fffccb04618
[  113.039272][ T5441]  </TASK>
[  113.081266][ T4275] EXT4-fs (loop1): unmounting filesystem.
[  113.696114][ T5468] FAULT_INJECTION: forcing a failure.
[  113.696114][ T5468] name fail_futex, interval 1, probability 0, space 0, times 0
[  113.709191][ T5468] CPU: 0 PID: 5468 Comm: syz.3.308 Not tainted syzkaller #0
[  113.716509][ T5468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  113.726594][ T5468] Call Trace:
[  113.729889][ T5468]  <TASK>
[  113.732836][ T5468]  dump_stack_lvl+0x188/0x24e
[  113.737548][ T5468]  ? show_regs_print_info+0x12/0x12
[  113.742790][ T5468]  ? load_image+0x410/0x410
[  113.747335][ T5468]  ? __lock_acquire+0x7ea0/0x7ea0
[  113.752408][ T5468]  should_fail_ex+0x390/0x4c0
[  113.757110][ T5468]  get_futex_key+0x1a6/0xe70
[  113.761710][ T5468]  ? futex_setup_timer+0xc0/0xc0
[  113.766661][ T5468]  futex_wake+0x123/0x4f0
[  113.771000][ T5468]  ? futex_wake_mark+0x150/0x150
[  113.775944][ T5468]  ? __lock_acquire+0x7ea0/0x7ea0
[  113.780975][ T5468]  ? file_end_write+0x156/0x250
[  113.785831][ T5468]  ? vfs_write+0x777/0x9a0
[  113.790270][ T5468]  do_futex+0x2e2/0x320
[  113.794463][ T5468]  ? __ia32_sys_get_robust_list+0x100/0x100
[  113.800384][ T5468]  __se_sys_futex+0x381/0x410
[  113.805110][ T5468]  ? __x64_sys_futex+0xf0/0xf0
[  113.809929][ T5468]  ? __x64_sys_futex+0x1d/0xf0
[  113.814729][ T5468]  do_syscall_64+0x4c/0xa0
[  113.819160][ T5468]  ? clear_bhb_loop+0x60/0xb0
[  113.823843][ T5468]  ? clear_bhb_loop+0x60/0xb0
[  113.828528][ T5468]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  113.834429][ T5468] RIP: 0033:0x7f9fca5a94d9
[  113.838847][ T5468] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  113.858467][ T5468] RSP: 002b:00007f9fcb4600e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  113.866906][ T5468] RAX: ffffffffffffffda RBX: 00007f9fca825fa8 RCX: 00007f9fca5a94d9
[  113.874886][ T5468] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f9fca825fac
[  113.882862][ T5468] RBP: 00007f9fca825fa0 R08: 002680f02f42a948 R09: 0000000000000000
[  113.890842][ T5468] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  113.898842][ T5468] R13: 00007f9fca826038 R14: 00007ffc63d03590 R15: 00007ffc63d03678
[  113.906837][ T5468]  </TASK>
[  113.909969][ T4290] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  113.911770][ T4292] Bluetooth: hci5: command 0x1003 tx timeout
[  113.971581][   T11] kworker/u4:1: attempt to access beyond end of device
[  113.971581][   T11] loop2: rw=1, sector=150, nr_sectors = 1 limit=128
[  114.011018][   T11] Buffer I/O error on dev loop2, logical block 150, lost async page write
[  114.146752][ T5477] FAULT_INJECTION: forcing a failure.
[  114.146752][ T5477] name failslab, interval 1, probability 0, space 0, times 0
[  114.181592][ T5477] CPU: 1 PID: 5477 Comm: syz.2.309 Not tainted syzkaller #0
[  114.188943][ T5477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  114.197519][ T5482] FAULT_INJECTION: forcing a failure.
[  114.197519][ T5482] name fail_futex, interval 1, probability 0, space 0, times 0
[  114.199032][ T5477] Call Trace:
[  114.199059][ T5477]  <TASK>
[  114.199070][ T5477]  dump_stack_lvl+0x188/0x24e
[  114.199104][ T5477]  ? show_regs_print_info+0x12/0x12
[  114.227993][ T5477]  ? load_image+0x410/0x410
[  114.232528][ T5477]  ? __lock_acquire+0x7ea0/0x7ea0
[  114.237585][ T5477]  should_fail_ex+0x390/0x4c0
[  114.242293][ T5477]  should_failslab+0x5/0x20
[  114.246812][ T5477]  slab_pre_alloc_hook+0x59/0x300
[  114.251860][ T5477]  ? x509_fabricate_name+0x555/0x950
[  114.257179][ T5477]  __kmem_cache_alloc_node+0x4f/0x270
[  114.262599][ T5477]  ? x509_fabricate_name+0x555/0x950
[  114.267922][ T5477]  __kmalloc+0xa3/0x240
[  114.272101][ T5477]  ? memcpy+0x3c/0x60
[  114.276099][ T5477]  x509_fabricate_name+0x555/0x950
[  114.281242][ T5477]  asn1_ber_decoder+0x1816/0x21b0
[  114.286278][ T5477]  ? __se_sys_add_key+0x34b/0x410
[  114.291343][ T5477]  ? ref_tracker_free+0x830/0x830
[  114.296408][ T5477]  x509_cert_parse+0x1ae/0x7a0
[  114.301210][ T5477]  x509_key_preparse+0x60/0x660
[  114.306093][ T5477]  ? down_read+0x1a8/0x2d0
[  114.310527][ T5477]  asymmetric_key_preparse+0xa5/0x140
[  114.315953][ T5477]  key_create_or_update+0x405/0xa50
[  114.321387][ T5477]  ? key_type_put+0x20/0x20
[  114.326048][ T5477]  ? __might_fault+0xc2/0x120
[  114.330832][ T5477]  ? __might_fault+0xa6/0x120
[  114.335560][ T5477]  __se_sys_add_key+0x34b/0x410
[  114.340445][ T5477]  ? __x64_sys_add_key+0xc0/0xc0
[  114.345409][ T5477]  ? lockdep_hardirqs_on+0x94/0x140
[  114.350618][ T5477]  ? __x64_sys_add_key+0x1c/0xc0
[  114.355571][ T5477]  do_syscall_64+0x4c/0xa0
[  114.360023][ T5477]  ? clear_bhb_loop+0x60/0xb0
[  114.364715][ T5477]  ? clear_bhb_loop+0x60/0xb0
[  114.369406][ T5477]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  114.375309][ T5477] RIP: 0033:0x7fa1a5fa94d9
[  114.379729][ T5477] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  114.399349][ T5477] RSP: 002b:00007fa1a6ead028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[  114.407792][ T5477] RAX: ffffffffffffffda RBX: 00007fa1a6225fa0 RCX: 00007fa1a5fa94d9
[  114.415779][ T5477] RDX: 0000200000000040 RSI: 0000000000000000 RDI: 0000200000000000
[  114.423758][ T5477] RBP: 00007fa1a603804e R08: ffffffffffffffff R09: 0000000000000000
[  114.431828][ T5477] R10: 00000000000001d9 R11: 0000000000000246 R12: 0000000000000000
[  114.439817][ T5477] R13: 00007fa1a6226038 R14: 00007fa1a6225fa0 R15: 00007ffd3ce4f288
[  114.447812][ T5477]  </TASK>
[  114.450841][ T5482] CPU: 0 PID: 5482 Comm: syz.1.312 Not tainted syzkaller #0
[  114.458701][ T5482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  114.468784][ T5482] Call Trace:
[  114.472088][ T5482]  <TASK>
[  114.475058][ T5482]  dump_stack_lvl+0x188/0x24e
[  114.479774][ T5482]  ? show_regs_print_info+0x12/0x12
[  114.485002][ T5482]  ? load_image+0x410/0x410
[  114.489515][ T5482]  ? __lock_acquire+0x7ea0/0x7ea0
[  114.494571][ T5482]  should_fail_ex+0x390/0x4c0
[  114.499253][ T5482]  get_futex_key+0x1a6/0xe70
[  114.503861][ T5482]  ? futex_setup_timer+0xc0/0xc0
[  114.508833][ T5482]  futex_wake+0x123/0x4f0
[  114.513186][ T5482]  ? futex_wake_mark+0x150/0x150
[  114.518126][ T5482]  ? __lock_acquire+0x7ea0/0x7ea0
[  114.523156][ T5482]  ? file_end_write+0x156/0x250
[  114.528033][ T5482]  ? vfs_write+0x777/0x9a0
[  114.532446][ T5482]  do_futex+0x2e2/0x320
[  114.536596][ T5482]  ? __ia32_sys_get_robust_list+0x100/0x100
[  114.542497][ T5482]  __se_sys_futex+0x381/0x410
[  114.547179][ T5482]  ? __x64_sys_futex+0xf0/0xf0
[  114.552081][ T5482]  ? __x64_sys_futex+0x1d/0xf0
[  114.556843][ T5482]  do_syscall_64+0x4c/0xa0
[  114.561261][ T5482]  ? clear_bhb_loop+0x60/0xb0
[  114.565938][ T5482]  ? clear_bhb_loop+0x60/0xb0
[  114.570628][ T5482]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  114.576558][ T5482] RIP: 0033:0x7fdf795a94d9
[  114.580971][ T5482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  114.600587][ T5482] RSP: 002b:00007fdf7a4aa0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  114.609002][ T5482] RAX: ffffffffffffffda RBX: 00007fdf79825fa8 RCX: 00007fdf795a94d9
[  114.616988][ T5482] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fdf79825fac
[  114.624984][ T5482] RBP: 00007fdf79825fa0 R08: 00081af4a71695c0 R09: 0000000000000000
[  114.632957][ T5482] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  114.640920][ T5482] R13: 00007fdf79826038 R14: 00007ffccf4b11f0 R15: 00007ffccf4b12d8
[  114.648899][ T5482]  </TASK>
[  116.175852][ T5506] FAULT_INJECTION: forcing a failure.
[  116.175852][ T5506] name fail_futex, interval 1, probability 0, space 0, times 0
[  116.213199][ T5506] CPU: 1 PID: 5506 Comm: syz.2.321 Not tainted syzkaller #0
[  116.220541][ T5506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  116.230609][ T5506] Call Trace:
[  116.233895][ T5506]  <TASK>
[  116.236834][ T5506]  dump_stack_lvl+0x188/0x24e
[  116.241534][ T5506]  ? show_regs_print_info+0x12/0x12
[  116.246752][ T5506]  ? load_image+0x410/0x410
[  116.251276][ T5506]  ? __lock_acquire+0x7ea0/0x7ea0
[  116.256325][ T5506]  should_fail_ex+0x390/0x4c0
[  116.261025][ T5506]  get_futex_key+0x1a6/0xe70
[  116.265634][ T5506]  ? futex_setup_timer+0xc0/0xc0
[  116.270590][ T5506]  futex_wake+0x123/0x4f0
[  116.274935][ T5506]  ? futex_wake_mark+0x150/0x150
[  116.279883][ T5506]  ? __lock_acquire+0x7ea0/0x7ea0
[  116.284924][ T5506]  ? file_end_write+0x156/0x250
[  116.289788][ T5506]  ? vfs_write+0x777/0x9a0
[  116.294215][ T5506]  do_futex+0x2e2/0x320
[  116.298392][ T5506]  ? __ia32_sys_get_robust_list+0x100/0x100
[  116.304303][ T5506]  __se_sys_futex+0x381/0x410
[  116.308999][ T5506]  ? __x64_sys_futex+0xf0/0xf0
[  116.313780][ T5506]  ? __x64_sys_futex+0x1d/0xf0
[  116.318559][ T5506]  do_syscall_64+0x4c/0xa0
[  116.322995][ T5506]  ? clear_bhb_loop+0x60/0xb0
[  116.327683][ T5506]  ? clear_bhb_loop+0x60/0xb0
[  116.332374][ T5506]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  116.338277][ T5506] RIP: 0033:0x7fa1a5fa94d9
[  116.342702][ T5506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  116.362325][ T5506] RSP: 002b:00007fa1a6ead0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  116.370761][ T5506] RAX: ffffffffffffffda RBX: 00007fa1a6225fa8 RCX: 00007fa1a5fa94d9
[  116.378742][ T5506] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa1a6225fac
[  116.386809][ T5506] RBP: 00007fa1a6225fa0 R08: 0007825e05e63188 R09: 0000000000000000
[  116.394895][ T5506] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  116.402893][ T5506] R13: 00007fa1a6226038 R14: 00007ffd3ce4f1a0 R15: 00007ffd3ce4f288
[  116.410932][ T5506]  </TASK>
[  116.827676][    C0] sched: RT throttling activated
[  117.906213][ T5519] FAULT_INJECTION: forcing a failure.
[  117.906213][ T5519] name fail_futex, interval 1, probability 0, space 0, times 0
[  117.919379][ T5519] CPU: 1 PID: 5519 Comm: syz.1.326 Not tainted syzkaller #0
[  117.926789][ T5519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  117.936868][ T5519] Call Trace:
[  117.940145][ T5519]  <TASK>
[  117.943070][ T5519]  dump_stack_lvl+0x188/0x24e
[  117.947773][ T5519]  ? show_regs_print_info+0x12/0x12
[  117.952976][ T5519]  ? load_image+0x410/0x410
[  117.957481][ T5519]  ? __lock_acquire+0x7ea0/0x7ea0
[  117.962509][ T5519]  should_fail_ex+0x390/0x4c0
[  117.967188][ T5519]  get_futex_key+0x1a6/0xe70
[  117.971777][ T5519]  ? futex_setup_timer+0xc0/0xc0
[  117.976714][ T5519]  futex_wake+0x123/0x4f0
[  117.981038][ T5519]  ? futex_wake_mark+0x150/0x150
[  117.985969][ T5519]  ? __lock_acquire+0x7ea0/0x7ea0
[  117.990991][ T5519]  ? file_end_write+0x156/0x250
[  117.995835][ T5519]  ? vfs_write+0x777/0x9a0
[  118.000246][ T5519]  do_futex+0x2e2/0x320
[  118.004397][ T5519]  ? __ia32_sys_get_robust_list+0x100/0x100
[  118.010286][ T5519]  __se_sys_futex+0x381/0x410
[  118.014987][ T5519]  ? __x64_sys_futex+0xf0/0xf0
[  118.019747][ T5519]  ? __x64_sys_futex+0x1d/0xf0
[  118.024501][ T5519]  do_syscall_64+0x4c/0xa0
[  118.028919][ T5519]  ? clear_bhb_loop+0x60/0xb0
[  118.033625][ T5519]  ? clear_bhb_loop+0x60/0xb0
[  118.038303][ T5519]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  118.044196][ T5519] RIP: 0033:0x7fdf795a94d9
[  118.048612][ T5519] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  118.068218][ T5519] RSP: 002b:00007fdf7a4aa0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  118.076625][ T5519] RAX: ffffffffffffffda RBX: 00007fdf79825fa8 RCX: 00007fdf795a94d9
[  118.084587][ T5519] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fdf79825fac
[  118.092551][ T5519] RBP: 00007fdf79825fa0 R08: 00330548690be220 R09: 0000000000000000
[  118.100541][ T5519] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  118.108511][ T5519] R13: 00007fdf79826038 R14: 00007ffccf4b11f0 R15: 00007ffccf4b12d8
[  118.116528][ T5519]  </TASK>
[  118.517866][ T5540] netlink: 4 bytes leftover after parsing attributes in process `syz.0.333'.
[  118.526805][ T5540] device bridge_slave_1 left promiscuous mode
[  118.534946][ T5540] bridge0: port 2(bridge_slave_1) entered disabled state
[  118.550370][ T5540] device bridge_slave_0 left promiscuous mode
[  118.557248][ T5540] bridge0: port 1(bridge_slave_0) entered disabled state
[  118.689635][ T5544] capability: warning: `syz.1.332' uses deprecated v2 capabilities in a way that may be insecure
[  119.653596][ T5556] FAULT_INJECTION: forcing a failure.
[  119.653596][ T5556] name fail_futex, interval 1, probability 0, space 0, times 0
[  119.681194][ T5556] CPU: 0 PID: 5556 Comm: syz.2.337 Not tainted syzkaller #0
[  119.688543][ T5556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  119.698619][ T5556] Call Trace:
[  119.701911][ T5556]  <TASK>
[  119.704854][ T5556]  dump_stack_lvl+0x188/0x24e
[  119.709562][ T5556]  ? show_regs_print_info+0x12/0x12
[  119.714786][ T5556]  ? load_image+0x410/0x410
[  119.719327][ T5556]  ? __lock_acquire+0x7ea0/0x7ea0
[  119.724383][ T5556]  should_fail_ex+0x390/0x4c0
[  119.729085][ T5556]  get_futex_key+0x1a6/0xe70
[  119.733701][ T5556]  ? futex_setup_timer+0xc0/0xc0
[  119.738667][ T5556]  futex_wake+0x123/0x4f0
[  119.743025][ T5556]  ? futex_wake_mark+0x150/0x150
[  119.747984][ T5556]  ? __lock_acquire+0x7ea0/0x7ea0
[  119.753037][ T5556]  ? file_end_write+0x156/0x250
[  119.757897][ T5556]  ? vfs_write+0x777/0x9a0
[  119.762329][ T5556]  do_futex+0x2e2/0x320
[  119.766490][ T5556]  ? __ia32_sys_get_robust_list+0x100/0x100
[  119.772392][ T5556]  __se_sys_futex+0x381/0x410
[  119.777066][ T5556]  ? __x64_sys_futex+0xf0/0xf0
[  119.781875][ T5556]  ? __x64_sys_futex+0x1d/0xf0
[  119.786647][ T5556]  do_syscall_64+0x4c/0xa0
[  119.791068][ T5556]  ? clear_bhb_loop+0x60/0xb0
[  119.795745][ T5556]  ? clear_bhb_loop+0x60/0xb0
[  119.800435][ T5556]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  119.806326][ T5556] RIP: 0033:0x7fa1a5fa94d9
[  119.810743][ T5556] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  119.830370][ T5556] RSP: 002b:00007fa1a6ead0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  119.838792][ T5556] RAX: ffffffffffffffda RBX: 00007fa1a6225fa8 RCX: 00007fa1a5fa94d9
[  119.846761][ T5556] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa1a6225fac
[  119.854747][ T5556] RBP: 00007fa1a6225fa0 R08: 00241f971651ae89 R09: 0000000000000000
[  119.862732][ T5556] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  119.870699][ T5556] R13: 00007fa1a6226038 R14: 00007ffd3ce4f1a0 R15: 00007ffd3ce4f288
[  119.878735][ T5556]  </TASK>
[  119.924930][ T5535] loop4: detected capacity change from 0 to 40427
[  119.953819][ T5535] F2FS-fs (loop4): Unrecognized mount option "whint_mode=fs-based" or missing value
[  120.141871][ T5558] loop0: detected capacity change from 0 to 49152
[  120.165492][ T5558] EXT4-fs (loop0): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0
[  120.205763][ T5558] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  120.286012][ T4284] EXT4-fs (loop0): unmounting filesystem.
[  120.592757][ T5578] loop4: detected capacity change from 0 to 33792
[  120.607823][ T5578] EXT4-fs: Ignoring removed oldalloc option
[  120.613831][ T5578] EXT4-fs: Ignoring removed oldalloc option
[  120.653976][ T5578] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  120.958792][ T5578] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  121.881425][ T5590] xt_l2tp: v2 sid > 0xffff: 4294967295
[  122.574124][ T4281] EXT4-fs (loop4): unmounting filesystem.
[  122.672420][ T5608] loop0: detected capacity change from 0 to 256
[  122.679703][ T5608] =======================================================
[  122.679703][ T5608] WARNING: The mand mount option has been deprecated and
[  122.679703][ T5608]          and is ignored by this kernel. Remove the mand
[  122.679703][ T5608]          option from the mount to silence this warning.
[  122.679703][ T5608] =======================================================
[  122.716100][ T5608] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  122.970434][ T5619] tap0: tun_chr_ioctl cmd 1074025677
[  122.982281][ T5619] tap0: linktype set to 19
[  123.041581][ T5621] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001
[  123.928666][   T26] audit: type=1800 audit(1794604503.463:9): pid=5621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.354" name="c_chmask" dev="configfs" ino=44394 res=0 errno=0
[  123.997542][   T26] audit: type=1800 audit(1794604503.533:10): pid=5621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.354" name="UDC" dev="configfs" ino=44395 res=0 errno=0
[  125.023820][ T5633] loop1: detected capacity change from 0 to 32768
[  125.154227][ T5633] XFS (loop1): Mounting V5 Filesystem
[  125.264512][ T5633] XFS (loop1): Ending clean mount
[  125.339792][ T5635] loop4: detected capacity change from 0 to 40427
[  125.399782][ T5635] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  125.433385][ T4275] XFS (loop1): Unmounting Filesystem
[  125.434659][ T5635] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  125.485705][ T5635] F2FS-fs (loop4): invalid crc value
[  125.573631][ T5635] F2FS-fs (loop4): Found nat_bits in checkpoint
[  125.754897][ T5635] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  125.770580][ T5635] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  126.002093][ T5635] syz.4.358: attempt to access beyond end of device
[  126.002093][ T5635] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  126.120444][ T5635] syz.4.358: attempt to access beyond end of device
[  126.120444][ T5635] loop4: rw=0, sector=45096, nr_sectors = 8 limit=40427
[  126.379699][ T4281] syz-executor: attempt to access beyond end of device
[  126.379699][ T4281] loop4: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  126.932639][ T5674] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001
[  127.170973][   T26] audit: type=1800 audit(1794604506.733:11): pid=5677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.368" name="c_chmask" dev="configfs" ino=45912 res=0 errno=0
[  127.516961][ T5681] netlink: 'syz.4.369': attribute type 1 has an invalid length.
[  127.535227][ T5668] loop2: detected capacity change from 0 to 40427
[  127.558397][ T5668] F2FS-fs (loop2): Invalid SB checksum offset: 0
[  127.571806][ T5668] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[  127.588901][ T5668] F2FS-fs (loop2): invalid crc value
[  127.597845][ T5681] 8021q: adding VLAN 0 to HW filter on device bond1
[  127.605776][ T5683] netlink: 28 bytes leftover after parsing attributes in process `syz.4.369'.
[  127.631232][ T5668] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  127.684821][ T5681] device bond1 entered promiscuous mode
[  127.703882][ T5683] device macvlan2 entered promiscuous mode
[  127.718947][ T5683] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  127.854606][ T5668] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0
[  127.877362][ T5668] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  127.926970][ T5691] loop0: detected capacity change from 0 to 33280
[  127.998472][ T5691] EXT4-fs error (device loop0): ext4_orphan_get:1409: inode #15: comm syz.0.371: inode has both inline data and extents flags
[  128.069164][ T5691] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm syz.0.371: couldn't read orphan inode 15 (err -117)
[  128.090382][ T4280] syz-executor: attempt to access beyond end of device
[  128.090382][ T4280] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  128.093069][ T5691] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  128.390275][ T4284] EXT4-fs (loop0): unmounting filesystem.
[  129.290251][ T5726] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3267840208 (6535680416 ns) > initial count (1099271824 ns). Using initial count to start timer.
[  130.984593][ T5737] loop1: detected capacity change from 0 to 49152
[  131.061686][ T5737] EXT4-fs (loop1): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0
[  131.284143][ T5737] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  131.696102][ T4275] EXT4-fs (loop1): unmounting filesystem.
[  132.602116][ T5772] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3780442281 (7560884562 ns) > initial count (4669583980 ns). Using initial count to start timer.
[  132.648862][ T1282] ieee802154 phy0 wpan0: encryption failed: -22
[  132.655272][ T1282] ieee802154 phy1 wpan1: encryption failed: -22
[  134.312463][ T5789] loop1: detected capacity change from 0 to 36864
[  134.366243][ T5789] EXT4-fs: Ignoring removed nobh option
[  134.393232][ T5789] EXT4-fs: Ignoring removed bh option
[  134.443878][ T5782] loop0: detected capacity change from 0 to 32768
[  134.445199][ T5789] EXT4-fs (loop1): Test dummy encryption mode enabled
[  134.628020][ T5789] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  134.642983][ T5782] XFS (loop0): Mounting V5 Filesystem
[  134.811432][ T5782] XFS (loop0): Ending clean mount
[  134.901235][ T4275] EXT4-fs (loop1): unmounting filesystem.
[  135.115631][ T4284] XFS (loop0): Unmounting Filesystem
[  135.396101][   T26] audit: type=1800 audit(1794604514.954:12): pid=5817 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.411" name="bus" dev="sda1" ino=2047 res=0 errno=0
[  135.728819][ T5829] loop0: detected capacity change from 0 to 2048
[  135.981101][ T5815] loop4: detected capacity change from 0 to 32768
[  136.077684][ T5815] XFS (loop4): Mounting V5 Filesystem
[  136.180220][ T5815] XFS (loop4): Ending clean mount
[  136.363020][ T4281] XFS (loop4): Unmounting Filesystem
[  137.663643][ T5864] rxe_eth0 speed is unknown, defaulting to 1000
[  138.973520][ T5854] loop4: detected capacity change from 0 to 32768
[  139.150295][ T5854] XFS (loop4): Mounting V5 Filesystem
[  139.350391][ T5854] XFS (loop4): Ending clean mount
[  139.563391][ T4281] XFS (loop4): Unmounting Filesystem
[  140.142735][   T26] audit: type=1800 audit(1794604519.704:13): pid=5881 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.426" name="bus" dev="sda1" ino=2047 res=0 errno=0
[  140.458466][ T5883] loop4: detected capacity change from 0 to 8192
[  141.650924][ T5891] loop2: detected capacity change from 0 to 32768
[  141.749975][ T5891] XFS (loop2): Mounting V5 Filesystem
[  141.860846][ T5891] XFS (loop2): Ending clean mount
[  142.042485][ T4280] XFS (loop2): Unmounting Filesystem
[  142.397327][ T5911] loop0: detected capacity change from 0 to 49152
[  142.449941][ T5911] EXT4-fs (loop0): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0
[  142.635765][ T5911] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  142.877328][ T4284] EXT4-fs (loop0): unmounting filesystem.
[  142.915751][ T5913] loop2: detected capacity change from 0 to 32768
[  143.076071][ T5913] XFS (loop2): Mounting V5 Filesystem
[  143.164150][ T5913] XFS (loop2): Ending clean mount
[  144.081910][ T4280] XFS (loop2): Unmounting Filesystem
[  146.385473][ T5958] loop4: detected capacity change from 0 to 34816
[  146.434613][ T5958] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  146.450563][ T5958] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  146.755143][ T5962] netlink: 'syz.4.446': attribute type 16 has an invalid length.
[  146.763212][ T5962] netlink: 'syz.4.446': attribute type 17 has an invalid length.
[  146.808081][ T5962] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  146.817867][ T5962] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  146.831225][ T5962] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  146.965681][ T5962] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  147.517875][ T4281] EXT4-fs (loop4): unmounting filesystem.
[  147.784225][ T5972] loop4: detected capacity change from 0 to 34816
[  147.791599][ T5971] loop0: detected capacity change from 0 to 512
[  147.883761][ T5972] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  147.910514][ T5971] capability: warning: `syz.0.449' uses 32-bit capabilities (legacy support in use)
[  148.040775][ T4281] EXT4-fs (loop4): unmounting filesystem.
[  148.411047][ T5981] loop0: detected capacity change from 0 to 256
[  148.433329][ T5981] exfat: Deprecated parameter 'utf8'
[  148.461290][ T5981] exfat: Deprecated parameter 'utf8'
[  148.546816][ T5981] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  148.559943][ T5969] loop2: detected capacity change from 0 to 40427
[  148.599743][ T5969] F2FS-fs (loop2): invalid crc value
[  148.638219][ T5969] F2FS-fs (loop2): Found nat_bits in checkpoint
[  148.850849][ T5969] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  149.857300][ T4280] syz-executor: attempt to access beyond end of device
[  149.857300][ T4280] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  149.982388][ T5999] loop4: detected capacity change from 0 to 33280
[  152.780293][ T6040] loop2: detected capacity change from 0 to 32896
[  152.825191][ T6040] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  154.168659][ T6040] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  154.529899][ T6040] ext2 filesystem being mounted at /93/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  155.194939][ T6062] ip_tables: iptables: counters copy to user failed while replacing table
[  155.551873][ T6069] loop0: detected capacity change from 0 to 34816
[  155.596643][ T6069] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  155.625478][ T6069] ext4 filesystem being mounted at /100/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  156.494353][ T4284] EXT4-fs (loop0): unmounting filesystem.
[  156.641016][ T6082] netlink: 'syz.0.477': attribute type 1 has an invalid length.
[  157.402560][ T6082] 8021q: adding VLAN 0 to HW filter on device bond1
[  157.445231][ T6091] netlink: 28 bytes leftover after parsing attributes in process `syz.0.477'.
[  157.474352][ T6096] device bond1 entered promiscuous mode
[  157.520826][ T6097] device macvlan2 entered promiscuous mode
[  157.584381][ T6097] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  157.625535][ T6100] netlink: 20 bytes leftover after parsing attributes in process `syz.4.480'.
[  157.654521][ T6100] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  158.291245][ T6109] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001
[  158.544628][   T26] audit: type=1800 audit(1794604538.105:14): pid=6112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.483" name="c_chmask" dev="configfs" ino=47914 res=0 errno=0
[  158.710903][   T26] audit: type=1800 audit(1794604538.135:15): pid=6112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.483" name="UDC" dev="configfs" ino=47915 res=0 errno=0
[  159.809345][ T6126] fuse: Bad value for 'fd'
[  160.141188][ T6141] netlink: 'syz.4.493': attribute type 1 has an invalid length.
[  160.210013][ T6141] 8021q: adding VLAN 0 to HW filter on device bond2
[  160.240045][ T6145] netlink: 28 bytes leftover after parsing attributes in process `syz.4.493'.
[  160.253918][ T6141] device bond2 entered promiscuous mode
[  160.290030][ T6141] device macvlan2 entered promiscuous mode
[  160.302114][ T6141] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  160.610302][ T6152] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001
[  160.859662][   T26] audit: type=1800 audit(1794604540.426:16): pid=6159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.497" name="c_chmask" dev="configfs" ino=49136 res=0 errno=0
[  160.905067][   T26] audit: type=1800 audit(1794604540.446:17): pid=6159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.497" name="UDC" dev="configfs" ino=49137 res=0 errno=0
[  160.952016][ T6161] loop0: detected capacity change from 0 to 33280
[  160.984342][ T6161] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  160.995588][ T6161] System zones: 1-12
[  161.024625][ T6161] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #12: comm syz.0.500: missing EA_INODE flag
[  161.047603][ T6161] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.500: error while reading EA inode 12 err=-117
[  161.068534][ T6161] EXT4-fs (loop0): 1 orphan inode deleted
[  161.075752][ T6161] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  163.622742][ T4284] EXT4-fs (loop0): unmounting filesystem.
[  163.900585][ T6177] loop3: detected capacity change from 0 to 36864
[  163.990819][ T6177] ext4: Unknown parameter 'noacl'
[  164.236083][ T6185] netlink: 'syz.1.507': attribute type 1 has an invalid length.
[  164.353788][ T6185] 8021q: adding VLAN 0 to HW filter on device bond1
[  164.425783][ T6185] device macvlan2 entered promiscuous mode
[  164.434237][ T6185] device bond1 entered promiscuous mode
[  164.440463][ T6185] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  164.477458][ T6185] device bond1 left promiscuous mode
[  164.590989][ T6187] bond1: (slave veth0_to_bond): making interface the new active one
[  164.613328][ T6187] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  164.636954][ T4280] EXT4-fs (loop2): unmounting filesystem.
[  164.657439][ T2973] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  164.679247][ T6197] loop0: detected capacity change from 0 to 256
[  164.990571][ T6210] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001
[  166.396090][   T26] audit: type=1800 audit(1794604544.796:18): pid=6214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.513" name="c_chmask" dev="configfs" ino=49259 res=0 errno=0
[  166.587161][   T26] audit: type=1800 audit(1794604544.796:19): pid=6214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.513" name="UDC" dev="configfs" ino=49260 res=0 errno=0
[  166.776799][ T6231] netlink: 'syz.4.522': attribute type 1 has an invalid length.
[  166.792773][ T6227] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  166.820477][ T6231] 8021q: adding VLAN 0 to HW filter on device bond3
[  166.893241][ T6231] bond3: (slave veth0_to_bond): making interface the new active one
[  166.993531][ T6231] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  167.032636][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready
[  167.072047][ T6242] device macvlan2 entered promiscuous mode
[  167.105714][ T6242] device bond3 entered promiscuous mode
[  167.119412][ T6242] device veth0_to_bond entered promiscuous mode
[  167.134396][ T6242] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  167.160147][ T6242] bond3: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  167.231135][ T6251] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001
[  167.244881][ T6242] device bond3 left promiscuous mode
[  167.270866][ T6242] device veth0_to_bond left promiscuous mode
[  167.454620][   T26] audit: type=1800 audit(1794604547.016:20): pid=6253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.527" name="c_chmask" dev="configfs" ino=49327 res=0 errno=0
[  167.533395][   T26] audit: type=1800 audit(1794604547.026:21): pid=6253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.527" name="UDC" dev="configfs" ino=49328 res=0 errno=0
[  169.137179][ T6281] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  169.922305][ T6293] netlink: 'syz.3.539': attribute type 1 has an invalid length.
[  169.988868][ T6293] 8021q: adding VLAN 0 to HW filter on device bond1
[  170.010046][ T6295] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  170.046878][ T6295] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  170.055907][ T6299] loop0: detected capacity change from 0 to 34816
[  170.071392][ T6301] fuse: Bad value for 'fd'
[  170.072245][ T6299] ext4: Unknown parameter 'fsname'
[  170.093474][ T6295] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  170.172066][ T6297] bond1: (slave veth0_to_bond): making interface the new active one
[  170.183443][ T6299] overlayfs: upper fs does not support tmpfile.
[  170.228285][ T6297] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  170.272910][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  170.311960][ T6293] device macvlan2 entered promiscuous mode
[  170.344126][ T6307] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001
[  170.370090][ T6293] device bond1 entered promiscuous mode
[  170.390551][ T6293] device veth0_to_bond entered promiscuous mode
[  170.409231][ T6293] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  170.425428][ T6293] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  170.462709][ T6293] device bond1 left promiscuous mode
[  170.509962][ T6293] device veth0_to_bond left promiscuous mode
[  170.625242][   T26] audit: type=1800 audit(1794604550.196:22): pid=6313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.544" name="c_chmask" dev="configfs" ino=50798 res=0 errno=0
[  170.673200][   T26] audit: type=1800 audit(1794604550.216:23): pid=6313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.544" name="UDC" dev="configfs" ino=50799 res=0 errno=0
[  171.760722][ T6338] loop1: detected capacity change from 0 to 33280
[  171.830045][ T6338] EXT4-fs: Ignoring removed nobh option
[  172.000563][ T6338] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  172.035949][ T6338] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  172.128580][ T6338] EXT4-fs error (device loop1): ext4_find_dest_de:2117: inode #2: block 3: comm syz.1.557: bad entry in directory: directory entry overrun - offset=76, inode=16, rec_len=65296, size=2048 fake=0
[  172.443248][ T4275] EXT4-fs (loop1): unmounting filesystem.
[  173.033173][ T6366] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001
[  173.295340][   T26] audit: type=1800 audit(1794604552.866:24): pid=6367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.567" name="c_chmask" dev="configfs" ino=49700 res=0 errno=0
[  173.338477][   T26] audit: type=1800 audit(1794604552.886:25): pid=6367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.567" name="UDC" dev="configfs" ino=49701 res=0 errno=0
[  174.323595][ T6376] loop4: detected capacity change from 0 to 34816
[  174.350508][ T6376] EXT4-fs: Ignoring removed nomblk_io_submit option
[  174.390494][ T6376] EXT4-fs: Ignoring removed i_version option
[  174.505034][ T6376] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  174.737593][ T4281] EXT4-fs (loop4): unmounting filesystem.
[  174.887067][ T6399] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001
[  175.147628][   T26] audit: type=1800 audit(1794604554.716:26): pid=6407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.579" name="c_chmask" dev="configfs" ino=51004 res=0 errno=0
[  175.181925][   T26] audit: type=1800 audit(1794604554.736:27): pid=6407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.579" name="UDC" dev="configfs" ino=51005 res=0 errno=0
[  175.354403][ T4354] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  175.584286][ T4354] usb 3-1: Using ep0 maxpacket: 32
[  175.612549][ T4354] usb 3-1: config 0 has an invalid interface number: 67 but max is 0
[  175.830081][ T4354] usb 3-1: config 0 has no interface number 0
[  175.939490][ T4354] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  176.065942][ T4354] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  176.088422][ T4354] usb 3-1: Product: syz
[  176.092656][ T4354] usb 3-1: Manufacturer: syz
[  176.097956][ T4354] usb 3-1: SerialNumber: syz
[  176.105347][ T4354] usb 3-1: config 0 descriptor??
[  176.172010][ T4354] smsc95xx v2.0.0
[  176.526857][ T4354] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  176.549880][ T4354] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  178.288740][ T6447] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001
[  178.484051][ T4292] Bluetooth: hci5: command 0x1003 tx timeout
[  178.486568][ T4290] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  178.917683][ T4354] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[  179.386604][ T4354] smsc95xx: probe of 3-1:0.67 failed with error -32
[  179.423411][ T4354] usb 3-1: USB disconnect, device number 7
[  179.508616][ T6465] fuse: Bad value for 'fd'
[  179.768103][ T6475] fuse: Bad value for 'fd'
[  180.795266][ T6488] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001
[  180.992131][ T6484] loop2: detected capacity change from 0 to 49152
[  181.044622][ T6484] EXT4-fs: Ignoring removed i_version option
[  181.061322][   T26] audit: type=1800 audit(1794604560.627:28): pid=6492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.609" name="c_chmask" dev="configfs" ino=51256 res=0 errno=0
[  181.100020][ T6484] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  181.118694][   T26] audit: type=1800 audit(1794604560.657:29): pid=6492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.609" name="UDC" dev="configfs" ino=51257 res=0 errno=0
[  181.153766][ T6484] EXT4-fs (loop2): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0
[  181.163212][ T6484] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  181.233686][ T6484] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  181.553509][ T6484] EXT4-fs (loop2): mounted filesystem with journalled data mode. Quota mode: journalled.
[  182.534979][ T4280] EXT4-fs (loop2): unmounting filesystem.
[  182.650914][ T6510] loop1: detected capacity change from 0 to 256
[  183.647190][ T6517] fuse: Bad value for 'fd'
[  183.684886][ T6518] device macsec0 entered promiscuous mode
[  183.734313][ T6518] netlink: 4 bytes leftover after parsing attributes in process `syz.3.618'.
[  183.791967][ T6521] fuse: Bad value for 'fd'
[  183.839534][ T6518] device veth1_macvtap left promiscuous mode
[  184.080902][ T6518] device macsec0 left promiscuous mode
[  185.206061][ T6533] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001
[  186.282545][ T4278] Bluetooth: hci4: command 0x0406 tx timeout
[  186.290082][ T4290] Bluetooth: hci0: command 0x0406 tx timeout
[  186.297223][ T4278] Bluetooth: hci3: command 0x0406 tx timeout
[  186.305513][ T4278] Bluetooth: hci1: command 0x0406 tx timeout
[  186.312584][ T4290] Bluetooth: hci2: command 0x0406 tx timeout
[  186.822825][ T6556] fuse: Bad value for 'fd'
[  187.693544][ T6562] fuse: Bad value for 'fd'
[  188.883554][ T6571] process 'syz.2.634' launched './file0' with NULL argv: empty string added
[  189.321423][ T6575] loop1: detected capacity change from 0 to 34816
[  189.332858][ T6579] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001
[  189.778472][ T6575] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  190.922311][ T6574] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  190.939691][ T6574] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 17 with error 28
[  190.952732][ T6574] EXT4-fs (loop1): This should not happen!! Data will be lost
[  190.952732][ T6574] 
[  190.962610][ T6574] EXT4-fs (loop1): Total free blocks count 0
[  190.968712][ T6574] EXT4-fs (loop1): Free/Dirty block details
[  190.974772][ T6574] EXT4-fs (loop1): free_blocks=2415919504
[  190.980660][ T6574] EXT4-fs (loop1): dirty_blocks=32
[  190.985900][ T6574] EXT4-fs (loop1): Block reservation details
[  190.991952][ T6574] EXT4-fs (loop1): i_reserved_data_blocks=2
[  192.315353][ T4275] EXT4-fs (loop1): unmounting filesystem.
[  192.465191][ T6613] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001
[  194.124953][ T1282] ieee802154 phy0 wpan0: encryption failed: -22
[  194.138061][ T1282] ieee802154 phy1 wpan1: encryption failed: -22
[  194.963749][ T6641] fuse: Bad value for 'fd'
[  195.027445][ T6640] loop2: detected capacity change from 0 to 32896
[  195.172396][ T6640] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  195.202124][ T6644] loop1: detected capacity change from 0 to 34816
[  195.263150][ T6640] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  195.283903][ T6644] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  195.319086][ T6640] ext2 filesystem being mounted at /118/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  195.361988][ T6644] ext4 filesystem being mounted at /136/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  195.534040][ T4275] EXT4-fs (loop1): unmounting filesystem.
[  197.869169][ T6672] overlayfs: failed to clone lowerpath
[  197.902268][ T6672] overlayfs: failed to clone lowerpath
[  198.241550][ T4280] EXT4-fs (loop2): unmounting filesystem.
[  198.900829][ T6683] loop2: detected capacity change from 0 to 34816
[  199.082740][ T6683] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  199.108398][ T6683] ext4 filesystem being mounted at /119/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  201.277511][ T4280] EXT4-fs (loop2): unmounting filesystem.
[  202.568322][ T6714] loop4: detected capacity change from 0 to 33280
[  202.646784][ T6713] loop0: detected capacity change from 0 to 33280
[  202.712027][ T6714] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  202.757427][ T6718] loop1: detected capacity change from 0 to 34816
[  202.779692][ T6714] System zones: 1-12
[  202.791640][ T6718] ext4: Unknown parameter 'nouser_xattr'
[  202.865869][ T6714] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.679: missing EA_INODE flag
[  203.205307][ T6714] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.679: error while reading EA inode 12 err=-117
[  203.582729][ T6714] EXT4-fs (loop4): 1 orphan inode deleted
[  203.589452][ T6714] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  206.075994][ T4281] EXT4-fs (loop4): unmounting filesystem.
[  206.333494][ T6750] loop1: detected capacity change from 0 to 33280
[  207.896714][ T6774] loop0: detected capacity change from 0 to 36864
[  207.953496][ T5107] I/O error, dev loop0, sector 36736 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  208.796317][ T6774] loop0: detected capacity change from 0 to 49152
[  208.803853][ T6774] EXT4-fs: Ignoring removed i_version option
[  208.809907][ T6774] ext4: Unknown parameter 'subj_user'
[  208.950697][ T6783] loop2: detected capacity change from 0 to 16
[  210.123435][ T6793] loop0: detected capacity change from 0 to 256
[  211.130677][ T6783] loop2: detected capacity change from 0 to 40427
[  211.204944][ T6783] F2FS-fs (loop2): invalid crc value
[  211.232369][ T6783] F2FS-fs (loop2): Found nat_bits in checkpoint
[  211.346777][ T6783] F2FS-fs (loop2): Start checkpoint disabled!
[  211.434175][ T6783] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  212.448454][   T26] audit: type=1800 audit(1700000024.831:30): pid=6827 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.717" name="report_desc" dev="configfs" ino=51792 res=0 errno=0
[  212.490567][ T5582] kworker/u4:14: attempt to access beyond end of device
[  212.490567][ T5582] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  212.668133][ T6829] netlink: 'syz.4.719': attribute type 1 has an invalid length.
[  212.714155][ T6829] 8021q: adding VLAN 0 to HW filter on device bond4
[  213.342308][ T6829] bond3: (slave veth0_to_bond): Releasing active interface
[  213.406303][ T6829] bond4: (slave veth0_to_bond): making interface the new active one
[  213.426976][ T6829] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  213.466138][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready
[  213.528925][ T6834] netlink: 12 bytes leftover after parsing attributes in process `syz.4.719'.
[  213.607470][ T6836] device macvlan2 entered promiscuous mode
[  213.632866][ T6836] device bond4 entered promiscuous mode
[  213.638501][ T6836] device veth0_to_bond entered promiscuous mode
[  213.682058][ T6836] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  213.689982][ T6836] bond4: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  213.915959][ T6825] loop0: detected capacity change from 0 to 40427
[  214.118707][ T6825] F2FS-fs (loop0): invalid crc value
[  214.429498][ T6836] device bond4 left promiscuous mode
[  214.451691][ T6836] device veth0_to_bond left promiscuous mode
[  214.455285][ T6825] F2FS-fs (loop0): Found nat_bits in checkpoint
[  214.638302][ T6825] F2FS-fs (loop0): Start checkpoint disabled!
[  214.686408][ T6825] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  215.905160][ T2124] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  216.564228][ T2124] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  216.584862][ T2124] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  216.626783][ T2124] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  216.651471][ T2124] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  216.687569][ T2124] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  216.701766][ T2124] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  216.727499][ T2124] usb 2-1: config 0 descriptor??
[  216.785736][ T6883] netlink: 'syz.4.733': attribute type 1 has an invalid length.
[  216.812605][ T6883] 8021q: adding VLAN 0 to HW filter on device bond5
[  216.840669][ T6883] bond4: (slave veth0_to_bond): Releasing active interface
[  216.855922][ T6883] bond5: (slave veth0_to_bond): making interface the new active one
[  216.867220][ T6883] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  216.878837][ T6888] netlink: 12 bytes leftover after parsing attributes in process `syz.4.733'.
[  216.927694][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready
[  216.982847][ T6883] device macvlan2 entered promiscuous mode
[  216.989836][ T6883] device bond5 entered promiscuous mode
[  216.996146][ T6883] device veth0_to_bond entered promiscuous mode
[  217.003922][ T6883] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  217.014267][ T6883] bond5: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  217.031294][ T6883] device bond5 left promiscuous mode
[  217.044079][ T6883] device veth0_to_bond left promiscuous mode
[  217.101761][ T6877] loop2: detected capacity change from 0 to 40427
[  217.124243][ T6877] F2FS-fs (loop2): invalid crc value
[  217.146476][ T2124] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  217.153182][ T6877] F2FS-fs (loop2): Found nat_bits in checkpoint
[  217.158434][ T2124] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  217.174624][ T2124] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  217.210112][ T2124] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  217.231439][ T2124] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  217.238982][ T2124] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  217.272074][ T2124] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  217.316880][ T2124] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  217.326106][ T6877] F2FS-fs (loop2): Start checkpoint disabled!
[  217.347335][ T2124] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  217.365607][ T6877] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  217.372205][ T2124] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  217.428527][ T2124] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving
[  217.847398][ T2124] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  218.085057][ T2124] usb 2-1: USB disconnect, device number 4
[  218.364185][ T6906] syz.2.730: attempt to access beyond end of device
[  218.364185][ T6906] loop2: rw=2049, sector=53248, nr_sectors = 1056 limit=40427
[  219.729689][ T6902] fido_id[6902]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  222.729980][ T6937] loop0: detected capacity change from 0 to 49152
[  222.742597][ T6961] netlink: 'syz.4.753': attribute type 1 has an invalid length.
[  222.777090][ T6965] loop1: detected capacity change from 0 to 33280
[  222.787098][ T6937] EXT4-fs (loop0): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0
[  222.864056][ T6961] 8021q: adding VLAN 0 to HW filter on device bond6
[  222.891616][ T6961] bond5: (slave veth0_to_bond): Releasing active interface
[  222.902254][ T6965] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  222.907360][ T6961] bond6: (slave veth0_to_bond): making interface the new active one
[  222.920541][ T6961] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  222.930628][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond6: link becomes ready
[  222.971378][ T6965] EXT4-fs (loop1): orphan cleanup on readonly fs
[  222.984617][ T6965] EXT4-fs warning (device loop1): ext4_enable_quotas:7100: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  223.009901][ T6965] EXT4-fs (loop1): Cannot turn on quotas: error -22
[  223.022416][ T6965] EXT4-fs error (device loop1): __ext4_iget:5135: inode #16: block 127754: comm syz.1.755: invalid block
[  223.047513][ T6937] EXT4-fs error (device loop0): ext4_init_orphan_info:623: comm syz.0.748: orphan file block 14: bad magic
[  223.070427][ T6965] EXT4-fs error (device loop1): ext4_orphan_get:1414: comm syz.1.755: couldn't read orphan inode 16 (err -117)
[  223.078945][ T6961] netlink: 12 bytes leftover after parsing attributes in process `syz.4.753'.
[  223.115498][ T6965] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  223.132633][ T6967] device macvlan2 entered promiscuous mode
[  223.139683][ T6937] EXT4-fs (loop0): mount failed
[  223.139983][ T6967] device bond6 entered promiscuous mode
[  223.201150][ T6967] device veth0_to_bond entered promiscuous mode
[  223.212655][ T6967] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  223.248348][ T6967] bond6: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  223.317332][ T4275] EXT4-fs (loop1): unmounting filesystem.
[  223.329617][ T6967] device bond6 left promiscuous mode
[  223.351865][ T6967] device veth0_to_bond left promiscuous mode
[  225.033286][   T26] audit: type=1326 audit(1700000005.320:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6993 comm="syz.4.761" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8c49a94d9 code=0x7ffc0000
[  225.123490][   T26] audit: type=1326 audit(1700000005.360:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6993 comm="syz.4.761" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8c49a94d9 code=0x7ffc0000
[  225.151338][   T26] audit: type=1326 audit(1700000005.360:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6993 comm="syz.4.761" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8c49a94d9 code=0x7ffc0000
[  225.292985][ T7001] xt_CT: You must specify a L4 protocol and not use inversions on it
[  225.346680][ T6998] ./dev/sda1: Can't open blockdev
[  225.502561][   T26] audit: type=1326 audit(1700000005.360:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6993 comm="syz.4.761" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8c49a94d9 code=0x7ffc0000
[  225.849273][   T26] audit: type=1326 audit(1700000005.360:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6993 comm="syz.4.761" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa8c49a94d9 code=0x7ffc0000
[  225.892994][   T26] audit: type=1326 audit(1700000005.410:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6993 comm="syz.4.761" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8c49a94d9 code=0x7ffc0000
[  226.055574][   T26] audit: type=1326 audit(1700000005.410:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6993 comm="syz.4.761" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa8c49a9242 code=0x7ffc0000
[  226.321877][   T26] audit: type=1326 audit(1700000006.560:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6993 comm="syz.4.761" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8c49a94d9 code=0x7ffc0000
[  226.768173][   T26] audit: type=1326 audit(1700000006.560:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6993 comm="syz.4.761" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8c49a94d9 code=0x7ffc0000
[  227.110446][   T26] audit: type=1326 audit(1700000006.700:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6993 comm="syz.4.761" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fa8c49a92d7 code=0x7ffc0000
[  227.185649][ T7010] loop2: detected capacity change from 0 to 49152
[  227.227003][ T7010] EXT4-fs: Ignoring removed i_version option
[  227.267442][ T7010] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  227.325881][ T7010] EXT4-fs (loop2): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0
[  227.368135][ T7010] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  227.533721][ T7010] EXT4-fs (loop2): mounted filesystem with journalled data mode. Quota mode: journalled.
[  227.850033][ T4280] EXT4-fs (loop2): unmounting filesystem.
[  227.879310][ T7028] loop4: detected capacity change from 0 to 128
[  228.076573][ T7022] syz.4.769: attempt to access beyond end of device
[  228.076573][ T7022] loop4: rw=2049, sector=145, nr_sectors = 752 limit=128
[  228.265417][ T7028] syz.4.769: attempt to access beyond end of device
[  228.265417][ T7028] loop4: rw=524288, sector=145, nr_sectors = 224 limit=128
[  228.303320][ T7035] syz.4.769: attempt to access beyond end of device
[  228.303320][ T7035] loop4: rw=0, sector=150, nr_sectors = 1 limit=128
[  228.346844][ T7038] fuse: Bad value for 'fd'
[  228.399906][ T7040] loop1: detected capacity change from 0 to 34816
[  228.455790][ T7040] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  228.480333][ T7040] ext4 filesystem being mounted at /158/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  228.584889][ T7047] netlink: 'syz.1.773': attribute type 16 has an invalid length.
[  228.593266][ T7047] netlink: 'syz.1.773': attribute type 17 has an invalid length.
[  228.640797][ T7047] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  228.650186][ T7047] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  228.658569][ T7047] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  228.712875][ T7047] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  229.292053][ T4275] EXT4-fs (loop1): unmounting filesystem.
[  231.694365][ T7064] loop2: detected capacity change from 0 to 40427
[  231.777487][ T7064] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  231.777518][ T7064] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  231.797786][ T7064] F2FS-fs (loop2): invalid crc value
[  231.825157][ T7064] F2FS-fs (loop2): Found nat_bits in checkpoint
[  231.843637][ T7092] fuse: Bad value for 'fd'
[  231.946267][ T7064] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  231.946298][ T7064] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  231.964297][ T7067] loop0: detected capacity change from 0 to 40427
[  231.980249][ T7067] F2FS-fs (loop0): Invalid SB checksum offset: 0
[  231.980273][ T7067] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[  231.984305][ T7067] F2FS-fs (loop0): invalid crc value
[  232.019939][ T7067] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  232.218251][ T7067] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0
[  232.218282][ T7067] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  232.264845][   T26] kauditd_printk_skb: 28 callbacks suppressed
[  232.264863][   T26] audit: type=1804 audit(1700000012.540:69): pid=7067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.782" name="/newroot/169/file1/bus" dev="loop0" ino=14 res=1 errno=0
[  232.383867][ T7102] loop4: detected capacity change from 0 to 33280
[  232.458478][ T7102] EXT4-fs (loop4): orphan cleanup on readonly fs
[  232.469659][ T7102] ------------[ cut here ]------------
[  232.469767][ T7102] EA inode 11 i_nlink=2
[  232.470004][ T7102] WARNING: CPU: 0 PID: 7102 at fs/ext4/xattr.c:1006 ext4_xattr_inode_update_ref+0x4fe/0x560
[  232.470086][ T7102] Modules linked in:
[  232.470102][ T7102] CPU: 0 PID: 7102 Comm: syz.4.785 Not tainted syzkaller #0
[  232.470122][ T7102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  232.470135][ T7102] RIP: 0010:ext4_xattr_inode_update_ref+0x4fe/0x560
[  232.470167][ T7102] Code: 40 4c 89 e0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 e7 e8 b5 85 9b ff 49 8b 34 24 48 c7 c7 c0 b0 c0 8a 44 89 fa e8 92 83 15 ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 4c 8b 74 24 08 4c 8b 64 24 10
[  232.470185][ T7102] RSP: 0018:ffffc9000d5ef380 EFLAGS: 00010246
[  232.470206][ T7102] RAX: 2e9df3061362ed00 RBX: ffff888050ce4ae0 RCX: 0000000000080000
[  232.470224][ T7102] RDX: ffffc900115a2000 RSI: 0000000000006279 RDI: 000000000000627a
[  232.470239][ T7102] RBP: ffffc9000d5ef470 R08: ffff8880b8c279db R09: 1ffff11017184f3b
[  232.470255][ T7102] R10: dffffc0000000000 R11: ffffed1017184f3c R12: ffff888050ce4928
[  232.470271][ T7102] R13: dffffc0000000000 R14: ffff888050ce48e8 R15: 0000000000000002
[  232.470286][ T7102] FS:  00007fa8c58836c0(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000
[  232.470305][ T7102] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  232.470758][ T7102] CR2: 00007f1fcb784000 CR3: 0000000057f6e000 CR4: 00000000003526f0
[  232.470792][ T7102] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000001800
[  232.470806][ T7102] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  232.470822][ T7102] Call Trace:
[  232.470829][ T7102]  <TASK>
[  232.470845][ T7102]  ? ext4_xattr_block_csum+0x560/0x560
[  232.470886][ T7102]  ? __ext4_journal_ensure_credits+0x2c/0x450
[  232.470925][ T7102]  ext4_xattr_inode_dec_ref_all+0xadc/0x1050
[  232.470965][ T7102]  ? errseq_check+0x3c/0x70
[  232.471001][ T7102]  ? ext4_xattr_delete_inode+0xca0/0xca0
[  232.471032][ T7102]  ? __ext4_journal_ensure_credits+0x450/0x450
[  232.471064][ T7102]  ext4_xattr_delete_inode+0xada/0xca0
[  232.471099][ T7102]  ? ext4_expand_extra_isize_ea+0x1d50/0x1d50
[  232.471125][ T7102]  ? __ext4_mark_inode_dirty+0x52e/0x7b0
[  232.471152][ T7102]  ext4_evict_inode+0xc1e/0x10e0
[  232.471177][ T7102]  ? ext4_inode_is_fast_symlink+0x390/0x390
[  232.471197][ T7102]  ? do_raw_spin_unlock+0x11d/0x230
[  232.471220][ T7102]  ? ext4_inode_is_fast_symlink+0x390/0x390
[  232.471240][ T7102]  evict+0x4b2/0x9d0
[  232.471269][ T7102]  ? proc_nr_inodes+0x2f0/0x2f0
[  232.471292][ T7102]  ? do_raw_spin_unlock+0x11d/0x230
[  232.471313][ T7102]  ? _raw_spin_unlock+0x24/0x40
[  232.471335][ T7102]  ? iput+0x79f/0x9c0
[  232.471363][ T7102]  ext4_orphan_cleanup+0xdfe/0x1650
[  232.471389][ T7102]  ? ext4_orphan_file_block_trigger+0x430/0x430
[  232.471410][ T7102]  ? ext4_mb_init+0x182f/0x20f0
[  232.471426][ T4284] syz-executor: attempt to access beyond end of device
[  232.471426][ T4284] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  232.471434][ T7102]  ? ext4_orphan_del+0xc90/0xc90
[  232.471455][ T7102]  ? ext4_register_li_request+0x17e/0x920
[  232.471472][ T7102]  ? errseq_check_and_advance+0x62/0x120
[  232.471497][ T7102]  ext4_fill_super+0x6cd4/0x77b0
[  232.471549][ T7102]  ? ext4_parse_test_dummy_encryption+0xb0/0xb0
[  232.471593][ T7102]  ? set_blocksize+0x1d0/0x470
[  232.471616][ T7102]  ? sb_set_blocksize+0xa5/0xe0
[  232.471641][ T7102]  get_tree_bdev+0x3e6/0x610
[  232.471669][ T7102]  ? ext4_parse_test_dummy_encryption+0xb0/0xb0
[  232.471697][ T7102]  vfs_get_tree+0x88/0x270
[  232.471722][ T7102]  do_new_mount+0x247/0xa50
[  232.471752][ T7102]  __se_sys_mount+0x2e3/0x3d0
[  232.471774][ T7102]  ? __x64_sys_mount+0xc0/0xc0
[  232.471795][ T7102]  ? lockdep_hardirqs_on+0x94/0x140
[  232.471811][ T7102]  ? __x64_sys_mount+0x1c/0xc0
[  232.471832][ T7102]  do_syscall_64+0x4c/0xa0
[  232.471854][ T7102]  ? clear_bhb_loop+0x60/0xb0
[  232.471875][ T7102]  ? clear_bhb_loop+0x60/0xb0
[  232.471909][ T7102]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  232.471934][ T7102] RIP: 0033:0x7fa8c49aa77a
[  232.471953][ T7102] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  232.471969][ T7102] RSP: 002b:00007fa8c5882e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  232.471992][ T7102] RAX: ffffffffffffffda RBX: 00007fa8c5882ee0 RCX: 00007fa8c49aa77a
[  232.472006][ T7102] RDX: 0000200000000140 RSI: 0000200000000180 RDI: 00007fa8c5882ea0
[  232.472021][ T7102] RBP: 0000200000000140 R08: 00007fa8c5882ee0 R09: 000000000080078b
[  232.921324][ T7102] R10: 000000000080078b R11: 0000000000000246 R12: 0000200000000180
[  232.921351][ T7102] R13: 00007fa8c5882ea0 R14: 0000000000000491 R15: 00002000000001c0
[  232.921384][ T7102]  </TASK>
[  232.921410][ T7102] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  232.921420][ T7102] CPU: 0 PID: 7102 Comm: syz.4.785 Not tainted syzkaller #0
[  232.921435][ T7102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  232.921444][ T7102] Call Trace:
[  232.921449][ T7102]  <TASK>
[  232.921455][ T7102]  dump_stack_lvl+0x188/0x24e
[  232.921481][ T7102]  ? memcpy+0x3c/0x60
[  232.921497][ T7102]  ? show_regs_print_info+0x12/0x12
[  232.921518][ T7102]  ? load_image+0x410/0x410
[  232.921549][ T7102]  panic+0x2d3/0x710
[  232.921573][ T7102]  ? bpf_jit_dump+0xd0/0xd0
[  232.921608][ T7102]  __warn+0x2f8/0x4f0
[  232.921624][ T7102]  ? ext4_xattr_inode_update_ref+0x4fe/0x560
[  232.921651][ T7102]  ? ext4_xattr_inode_update_ref+0x4fe/0x560
[  232.921675][ T7102]  report_bug+0x2ba/0x4f0
[  232.921699][ T7102]  ? ext4_xattr_inode_update_ref+0x4fe/0x560
[  232.921729][ T7102]  handle_bug+0x3a/0x70
[  232.921745][ T7102]  exc_invalid_op+0x16/0x40
[  232.921760][ T7102]  asm_exc_invalid_op+0x16/0x20
[  232.921783][ T7102] RIP: 0010:ext4_xattr_inode_update_ref+0x4fe/0x560
[  232.921810][ T7102] Code: 40 4c 89 e0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 e7 e8 b5 85 9b ff 49 8b 34 24 48 c7 c7 c0 b0 c0 8a 44 89 fa e8 92 83 15 ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 4c 8b 74 24 08 4c 8b 64 24 10
[  232.921825][ T7102] RSP: 0018:ffffc9000d5ef380 EFLAGS: 00010246
[  232.921842][ T7102] RAX: 2e9df3061362ed00 RBX: ffff888050ce4ae0 RCX: 0000000000080000
[  232.921855][ T7102] RDX: ffffc900115a2000 RSI: 0000000000006279 RDI: 000000000000627a
[  232.921867][ T7102] RBP: ffffc9000d5ef470 R08: ffff8880b8c279db R09: 1ffff11017184f3b
[  232.921880][ T7102] R10: dffffc0000000000 R11: ffffed1017184f3c R12: ffff888050ce4928
[  232.921894][ T7102] R13: dffffc0000000000 R14: ffff888050ce48e8 R15: 0000000000000002
[  232.921931][ T7102]  ? ext4_xattr_block_csum+0x560/0x560
[  232.921974][ T7102]  ? __ext4_journal_ensure_credits+0x2c/0x450
[  232.922000][ T7102]  ext4_xattr_inode_dec_ref_all+0xadc/0x1050
[  232.922035][ T7102]  ? errseq_check+0x3c/0x70
[  232.922063][ T7102]  ? ext4_xattr_delete_inode+0xca0/0xca0
[  232.922089][ T7102]  ? __ext4_journal_ensure_credits+0x450/0x450
[  232.922118][ T7102]  ext4_xattr_delete_inode+0xada/0xca0
[  232.922149][ T7102]  ? ext4_expand_extra_isize_ea+0x1d50/0x1d50
[  232.922169][ T7102]  ? __ext4_mark_inode_dirty+0x52e/0x7b0
[  232.922191][ T7102]  ext4_evict_inode+0xc1e/0x10e0
[  232.922215][ T7102]  ? ext4_inode_is_fast_symlink+0x390/0x390
[  232.922233][ T7102]  ? do_raw_spin_unlock+0x11d/0x230
[  232.922248][ T7102]  ? ext4_inode_is_fast_symlink+0x390/0x390
[  232.922262][ T7102]  evict+0x4b2/0x9d0
[  232.922286][ T7102]  ? proc_nr_inodes+0x2f0/0x2f0
[  232.922307][ T7102]  ? do_raw_spin_unlock+0x11d/0x230
[  232.922327][ T7102]  ? _raw_spin_unlock+0x24/0x40
[  232.922345][ T7102]  ? iput+0x79f/0x9c0
[  232.922372][ T7102]  ext4_orphan_cleanup+0xdfe/0x1650
[  232.922394][ T7102]  ? ext4_orphan_file_block_trigger+0x430/0x430
[  232.922412][ T7102]  ? ext4_mb_init+0x182f/0x20f0
[  232.922435][ T7102]  ? ext4_orphan_del+0xc90/0xc90
[  232.922455][ T7102]  ? ext4_register_li_request+0x17e/0x920
[  232.922472][ T7102]  ? errseq_check_and_advance+0x62/0x120
[  232.922500][ T7102]  ext4_fill_super+0x6cd4/0x77b0
[  232.922549][ T7102]  ? ext4_parse_test_dummy_encryption+0xb0/0xb0
[  232.922591][ T7102]  ? set_blocksize+0x1d0/0x470
[  232.922612][ T7102]  ? sb_set_blocksize+0xa5/0xe0
[  232.922631][ T7102]  get_tree_bdev+0x3e6/0x610
[  232.922652][ T7102]  ? ext4_parse_test_dummy_encryption+0xb0/0xb0
[  232.922677][ T7102]  vfs_get_tree+0x88/0x270
[  232.922699][ T7102]  do_new_mount+0x247/0xa50
[  232.922727][ T7102]  __se_sys_mount+0x2e3/0x3d0
[  232.922751][ T7102]  ? __x64_sys_mount+0xc0/0xc0
[  232.922775][ T7102]  ? lockdep_hardirqs_on+0x94/0x140
[  232.922793][ T7102]  ? __x64_sys_mount+0x1c/0xc0
[  232.922815][ T7102]  do_syscall_64+0x4c/0xa0
[  232.922837][ T7102]  ? clear_bhb_loop+0x60/0xb0
[  232.922858][ T7102]  ? clear_bhb_loop+0x60/0xb0
[  232.922882][ T7102]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  232.922903][ T7102] RIP: 0033:0x7fa8c49aa77a
[  232.922919][ T7102] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  232.922933][ T7102] RSP: 002b:00007fa8c5882e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  232.922958][ T7102] RAX: ffffffffffffffda RBX: 00007fa8c5882ee0 RCX: 00007fa8c49aa77a
[  232.922971][ T7102] RDX: 0000200000000140 RSI: 0000200000000180 RDI: 00007fa8c5882ea0
[  232.922983][ T7102] RBP: 0000200000000140 R08: 00007fa8c5882ee0 R09: 000000000080078b
[  232.922995][ T7102] R10: 000000000080078b R11: 0000000000000246 R12: 0000200000000180
[  232.923007][ T7102] R13: 00007fa8c5882ea0 R14: 0000000000000491 R15: 00002000000001c0
[  232.923034][ T7102]  </TASK>
[  232.930382][ T7102] Kernel Offset: disabled
[  233.397382][ T7102] Rebooting in 86400 seconds..