last executing test programs:

9m41.868103649s ago: executing program 32 (id=1119):
syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_pin_code_reply={{0x4}, {0x89}}}}, 0xd)

9m23.413987594s ago: executing program 33 (id=1147):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x5c, 0x1, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x13, 0x3, @private2}, {0x14, 0x4, @mcast2}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x849}]}]}, 0x5c}}, 0x0)

8m57.900503675s ago: executing program 1 (id=1262):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f00000023c0)={0x79})
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x3, 0x1, 0x0, @irqchip={0x3, 0x7fff}}]})

8m57.349140839s ago: executing program 1 (id=1265):
prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffa000/0x3000)=nil)

8m56.945836476s ago: executing program 1 (id=1266):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x2383, @loopback}, 0x10)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x2383, @loopback}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0x6, &(0x7f0000000500)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r2}, @generic={0xb7, 0x3}, @generic={0xb7, 0x4}, @call={0x85, 0x0, 0x0, 0x34}, @exit], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@map=r2, r3, 0x5, 0x0, 0x0, @void, @value=0x0}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r2, &(0x7f0000000340), &(0x7f0000000380)=@tcp=r1}, 0x20)
close_range(r0, 0xffffffffffffffff, 0x0)

8m56.516990829s ago: executing program 1 (id=1267):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000480)={0x2, 0x3, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x6c, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e20}, @sadb_x_nat_t_type={0x1, 0x14, 0x3}]}, 0x60}}, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x0, @void}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002380), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000023c0)={'veth1_to_batadv\x00', <r3=>0x0})
sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000002400)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYRES32=r3, @ANYBLOB="200003800400010010000400004017b402000000000000000800020049"], 0x40}}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r4, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
pselect6(0x40, &(0x7f00000000c0)={0x6, 0x8b, 0x3, 0x8, 0x1, 0x712df127, 0x0, 0x6}, &(0x7f0000000140)={0x7f, 0x4, 0x5, 0x14, 0x7, 0x4, 0x3, 0x4}, &(0x7f00000001c0)={0x10001, 0x7fffffffffffffff, 0x6, 0x7, 0xc7, 0x4, 0x0, 0x5facb55b}, &(0x7f0000000240), &(0x7f00000002c0)={&(0x7f0000000280)={[0x750c]}, 0x8})
socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @empty, 0x7}, 0x1c)
listen(r6, 0x5)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x28}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="20000000240007012ebd7000fbdbdf25027c00000c00018008000200010000008760f8120e0600000025bc7771eedcd07f1d8fdd7b7bb410b9fea6116fa91180096241c341a3254c299c6c4fadbbe06699a70a3f8a0a0d3a55ab26bb8abf5019f66dc80ef37ca2e7f88518bb8c0fddb28bf1a714bebecb9ea550bda4601f8d586d10c2b65c924141b63a012248b6fe8089ea3325e62616f751c41fa74f7f0ba9906ee7b1f24a2d8061f25503a58e4c1b8d18fff40ac14c1113f88d7340c18d3e912d6e83465b5f0f7298069d4c5dacc601cf3dd2"], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010)
sendmsg$nl_netfilter(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d0005800900010070707470"], 0xbc}}, 0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_buf(r9, 0x1, 0x1a, 0xfffffffffffffffd, &(0x7f00000003c0)=0x4d)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)

8m54.522770619s ago: executing program 1 (id=1272):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
r0 = syz_io_uring_setup(0x75a5, &(0x7f0000000500)={0x0, 0xfffffffd, 0x0, 0xfffffffe}, &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000000))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000002c0)=[r1], 0x1)
r2 = dup2(r0, r1)
io_uring_register$IORING_UNREGISTER_FILES(r2, 0x3, 0x0, 0x0)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
syz_clone(0x40000, 0x0, 0x8d, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
io_setup(0x3ff, &(0x7f0000000500)=<r6=>0x0)
io_submit(r6, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000001c0)='m', 0xfffffdfc}])
write(r3, &(0x7f0000000000)='3', 0x4e)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)

8m53.008593163s ago: executing program 1 (id=1276):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r1 = socket(0x10, 0x3, 0x0)
connect$bt_l2cap(r1, 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0x3, &(0x7f0000000280))
sync()
epoll_create1(0x0)
syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22c4a93f5248f816481bcbc547361ad9f72743d7fdcdbbd8cb8a0e797421cabfc93ec38bb4bc628ba5bc2fe202196458becaa682057fd9a43a25ec7f3ad0e4bbc108a5737c522d105ac80f"], 0x1, 0x5dd, &(0x7f0000001800)="$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")
open(0x0, 0x0, 0x0)
ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f00000000c0)='/%+\x00', 0x402000, &(0x7f00000001c0)={@_ha_fsid={[0x4, 0x2]}, {0xfff, 0x7, 0xfffffffa, 0x200}}, 0x3, &(0x7f0000000200), &(0x7f0000000280)=0xd})

8m37.729585032s ago: executing program 34 (id=1276):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r1 = socket(0x10, 0x3, 0x0)
connect$bt_l2cap(r1, 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0x3, &(0x7f0000000280))
sync()
epoll_create1(0x0)
syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22c4a93f5248f816481bcbc547361ad9f72743d7fdcdbbd8cb8a0e797421cabfc93ec38bb4bc628ba5bc2fe202196458becaa682057fd9a43a25ec7f3ad0e4bbc108a5737c522d105ac80f"], 0x1, 0x5dd, &(0x7f0000001800)="$eJzs3U1rXNcdB+DfHY9ljwqOktiJWwIVMaSlorbkQWnVTd1SihahhHTRtbDH8eCxEqRJUUIp7vu2i3yAdKFdV4XuDem63WWrZaDQTVbaudw7d0YTW1GkWNaMnOcxZ845c+4995z/fZs7wkyAr63VhTQfpMjqwhtbZX1nu93b2W7fG5aTnEvSSJqDLMV6Unyc3Mgg5Zvlm3V3xRdt58PuyluffLbz6aDWrFO1fOOg9Q7nfp0yn+RMnR9XfzefuL9iNMMyYFeGgYNJe/iY+0dZ/QnPW2AaFIP75mPmktkk5+vPAamvDo2THd3xO9JVDgAAAE6p53azm61cmPQ4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4DSpf/+/qFNjWJ5PMfz9/5n6vdTlU+3BpAcAAAAAAAAAAMfg27vZzVYuDOsPi+pv/q9WlYvV6zfyXjbTyUauZitr6aefjSwlmRvraGZrrd/fWDrEmtf3XfP6ycwXAAAAAAAAAJ5Rv8/q3t//AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgGhTJmUFWpYvD8lwazSTnk8yUy91P/jMsn2YPJj0AAAAAOAHP7WY3W7kwrD8sqmf+l6rn/vN5L+vpp5t+eunkVvVdwOCpv7Gz3e7tbLfvlenxfn/yvyMNo+oxg+8e9t/y5WqJVm6nW71zNTfzTnq5lUa1ZunycDz7j+t35ZiKH9cOObJbdV7O/K91Ph3mqoicHUVksR5bGY3nD47EEffOo1taSmP0zc/FpxDz2Tov5/PnqY759bGj76UDIjGcwa/u9Nbv3rm9uTA9U/qKHo1EeywSLx98TCTf+effn51ILFaRuDSqr+bn+WUWMp83s5Fufp219NPJfH5Wldbqo6F8nTs4Ujc+V3vzy0YyU++XwVX0aGN6tVr3Qrr5Rd7JrXTyevXvepbygyxnOStje/jSIc76xtHO+ivfrQutJH+p8+lQxvX5sbiOX3Pnqrbxd/ai9MLxXxub36oL5Tb+UOfT4dFILI1F4sWDI/G3h+XrZm/97sadtXcPub3X6rw8j/40VXeJ8nh5odxZVe3zR0fZ9uK+bUtV28VRW+Oxtkujti87U2fqz3DjPZXnU3nHKtte3ncr7art8ljbfp+3AJh6s9+bnWn9t/Xv1ketP7butN44/9NzPzz3ykzO/uvsj5qLZ15rvFL8Ix/lt3vP/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFe3+f4Hd9d6vc6GgoKCwqgw6SsT8LRd699799rm+x98v3tv7e3O2531leXllcWV5dfb1253e53ZJL3O4qRHCTwNezf9SY8EAAAAAAAAAAAAOKyT+O8Ek54jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcLqtLqT5IEWWFq8ulvWd7XavTMPy3pLNJI0kxW+S4uPkRgYpc2PdFV+0nQ+7K2998tnOp3t9NYfLNw5a73Du1ynzSc7U+XH1d/OJ+ytGMywDdmUYOJi0/wcAAP//ZzcMNQ==")
open(0x0, 0x0, 0x0)
ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f00000000c0)='/%+\x00', 0x402000, &(0x7f00000001c0)={@_ha_fsid={[0x4, 0x2]}, {0xfff, 0x7, 0xfffffffa, 0x200}}, 0x3, &(0x7f0000000200), &(0x7f0000000280)=0xd})

5m40.812942159s ago: executing program 3 (id=2141):
r0 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={'ip6gre0\x00', {0x2, 0x0, @rand_addr=0xac140001}})

5m36.792553102s ago: executing program 3 (id=2145):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', <r1=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xfff1, 0xffff}}}, 0x24}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, 0x0)
close_range(r2, r3, 0x0)
syz_open_procfs(0x0, &(0x7f0000000280)='net/route\x00')
r4 = syz_usb_connect(0x5, 0x1cb, 0x0, 0x0)
syz_usb_control_io$printer(r4, 0x0, 0x0)
syz_usb_control_io$printer(r4, 0x0, 0x0)
syz_usb_control_io$printer(r4, 0x0, 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)

5m33.512377965s ago: executing program 3 (id=2164):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x8001, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0)
write(r0, &(0x7f0000000000)='7', 0x1)
ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af14, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)

5m32.476286713s ago: executing program 3 (id=2165):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x5000)
write$binfmt_aout(r1, 0x0, 0xffffffdb)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x65)
madvise(&(0x7f0000bb5000/0x3000)=nil, 0x3000, 0x12)
migrate_pages(0x0, 0x9, 0x0, 0x0)
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x2)
mkdir(0x0, 0x76)
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
readv(r2, &(0x7f0000000080)=[{&(0x7f0000002c40)=""/4096, 0xf7a}], 0x1)
socket$packet(0x11, 0x2, 0x300)
bind$unix(0xffffffffffffffff, 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r4, 0xc048aec8, &(0x7f0000000080)={0x1, 0x0, @pic={0x0, 0x0, 0x6, 0x1, 0x3, 0xd, 0xe8, 0x5, 0x0, 0x6d, 0x3, 0x9, 0x6, 0x8, 0x1, 0x51}})
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r7, 0x4048aecb, &(0x7f0000000080))

5m31.503539535s ago: executing program 3 (id=2166):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x40800)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000000)='3', 0x4e)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x4, 0xea, 0x440, 0x0, 0x10, 0x0, 0x4}, 0x9c)
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, 0x0, 0x0)
r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11012, r2, 0x0)
bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0xfffffffd, @loopback, 0x3}, 0x1c)
sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
recvmmsg(r1, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0xa)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0)
r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
wait4(r4, 0x0, 0x40000000, 0x0)
writev(r3, &(0x7f0000000040)=[{&(0x7f0000000180)="290000002000190f00003fffffffda0602000000ffe80001dd0000040d001800ea11c21d0005000000", 0x29}], 0x1)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000000, 0x10031, 0xffffffffffffffff, 0x35f0c000)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000780)=0x3, 0xfffffffffffffe8a)
socket(0x27, 0x800, 0x6)
r5 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00b", 0x2ad, r5)

5m30.997093442s ago: executing program 3 (id=2167):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0)
write(0xffffffffffffffff, &(0x7f0000000000)='3', 0x4e)
lsetxattr(0x0, 0x0, 0x0, 0x0, 0x3)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x0)

5m15.129113893s ago: executing program 35 (id=2167):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0)
write(0xffffffffffffffff, &(0x7f0000000000)='3', 0x4e)
lsetxattr(0x0, 0x0, 0x0, 0x0, 0x3)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x0)

3m28.893855497s ago: executing program 4 (id=2558):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000fcffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a0850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x13, 0x8, &(0x7f0000000140)="000000000000007a959a75eadc9c7498902e00", &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

3m28.260117866s ago: executing program 4 (id=2561):
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000000)='3', 0x4e)
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)

3m27.775995073s ago: executing program 4 (id=2563):
syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000004c0)={[{}]}, 0x1, 0x453, &(0x7f0000001040)="$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")
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6000)
io_setup(0x202, &(0x7f0000000200)=<r1=>0x0)
open(&(0x7f0000000080)='./bus\x00', 0x181102, 0x0)
io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0x0, 0xa00}])

3m27.169793567s ago: executing program 4 (id=2564):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000440)={[{@fat=@check_normal}, {@rodir}, {@uni_xlate}, {@utf8}, {@numtail}, {@utf8}, {@utf8}, {@fat=@discard}, {@uni_xlate}, {@shortname_winnt}, {@fat=@nfs}, {@shortname_winnt}, {@fat=@uid={'uid', 0x3d, 0xee01}}]}, 0x0, 0x2be, &(0x7f0000002880)="$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")
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0)
mount$bind(&(0x7f0000000340)='./file0\x00', &(0x7f00000002c0)='./file0/file0\x00', 0x0, 0x13481, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000840)={0x2020}, 0x2020)

3m26.290541955s ago: executing program 4 (id=2569):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000380)="4547cb5f23")

3m24.103078196s ago: executing program 4 (id=2573):
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)

3m22.533110881s ago: executing program 36 (id=2573):
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)

3m19.587352509s ago: executing program 5 (id=2587):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0xffffc000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x39cb, 0x4)
shutdown(0xffffffffffffffff, 0x1)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x800})
socket$inet6_mptcp(0xa, 0x1, 0x106)
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0)
r4 = socket$kcm(0x1e, 0x5, 0x0)
recvmsg$kcm(r4, &(0x7f0000001740)={0x0, 0x0, &(0x7f00000016c0)=[{0x0}], 0x1}, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/1/root/var\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/1/root/var/run\x00', 0x1ff)
r5 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r5, &(0x7f00000001c0)=@file={0x1, './proc/1/root/var/run/gssproxy.sock\x00'}, 0x30)
listen(r5, 0x5)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/net/rpc/use-gss-proxy\x00', 0x1, 0x20)
write(r6, &(0x7f0000000280)='1', 0x1)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r7, 0xffffffffffffffff, 0x0)

3m17.508672769s ago: executing program 5 (id=2589):
lsm_set_self_attr(0x68, 0x0, 0x0, 0x0)
syz_mount_image$xfs(&(0x7f0000000040), &(0x7f0000009640)='./bus\x00', 0xa00000, &(0x7f0000000000), 0x4, 0x96c5, &(0x7f0000009680)="$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")
r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
ioctl$XFS_IOC_SCRUBV_METADATA(r0, 0xc0285840, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, &(0x7f00000001c0)})
open(&(0x7f0000000440)='./file1\x00', 0x4242, 0x1df2a23c5997faa6)

3m12.088023836s ago: executing program 5 (id=2600):
syz_mount_image$xfs(&(0x7f0000000280), &(0x7f0000009740)='./file1\x00', 0x8, &(0x7f0000009780), 0x1, 0x9798, &(0x7f0000016540)="$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")
rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f000001fc00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1814011, 0x0, 0x40, 0x0, &(0x7f0000000140))
rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x7fe81e5246626bb5)
getdents64(r0, 0xfffffffffffffffe, 0x4a)

3m10.40418705s ago: executing program 5 (id=2603):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000440)={[{@fat=@check_normal}, {@rodir}, {@uni_xlate}, {@utf8}, {@numtail}, {@utf8}, {@utf8}, {@fat=@discard}, {@uni_xlate}, {@shortname_winnt}, {@fat=@nfs}, {@shortname_winnt}, {@fat=@uid={'uid', 0x3d, 0xee01}}]}, 0x0, 0x2be, &(0x7f0000002880)="$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")
r0 = syz_open_procfs(0x0, 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0)
mount$bind(&(0x7f0000000340)='./file0\x00', &(0x7f00000002c0)='./file0/file0\x00', 0x0, 0x13481, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
read$FUSE(r0, &(0x7f0000000840)={0x2020}, 0x2020)

3m9.384132585s ago: executing program 5 (id=2607):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ppoll(&(0x7f00000003c0)=[{r0}], 0x1, &(0x7f0000000440), 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x2})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000001040)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0xb}}, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

3m8.880438472s ago: executing program 8 (id=2610):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000000)='3', 0x4e)
mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x8, 0x0)

3m8.668157176s ago: executing program 5 (id=2611):
r0 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x39c4, 0x2, 0x4, 0xfffffffe}, &(0x7f0000000580), &(0x7f0000000280), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000000500)='n', 0x1)
syz_usb_connect(0x2, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090582eb10000000010200090502", @ANYRES32], 0x0)

3m7.796965894s ago: executing program 37 (id=2611):
r0 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x39c4, 0x2, 0x4, 0xfffffffe}, &(0x7f0000000580), &(0x7f0000000280), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000000500)='n', 0x1)
syz_usb_connect(0x2, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090582eb10000000010200090502", @ANYRES32], 0x0)

3m7.781933041s ago: executing program 8 (id=2614):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000340)=@gcm_128={{0x7}, "b961f83dcf343bc2", "dc2f65963275f02f3af64bfd04e29ec3", "2138d0bd", "db45c50af93f440d"}, 0x28)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a31000000000800054000000004"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffe800000000000000000000000000010ff02000000000000000000000000000189"], 0x340a)

3m7.253183898s ago: executing program 8 (id=2615):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xd0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0)
syz_emit_ethernet(0x3a, &(0x7f0000000200)={@local, @remote, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4}}}}}}, 0x0)

3m7.08072773s ago: executing program 8 (id=2616):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000440)={[{@fat=@check_normal}, {@rodir}, {@uni_xlate}, {@utf8}, {@numtail}, {@utf8}, {@utf8}, {@fat=@discard}, {@uni_xlate}, {@shortname_winnt}, {@fat=@nfs}, {@shortname_winnt}, {@fat=@uid={'uid', 0x3d, 0xee01}}]}, 0x0, 0x2be, &(0x7f0000002880)="$eJzs3cFr024YwPFn7dZ2HVt7GD/4CeKDXvQStvoXFNlALChzFfUgZC7V0tiUplYq4nbz6t8xPHpSUP+BXbx5Fy9DELxMECNrkq3tquvGaqb9fmDk3fvm6ftmbzKehOXd1s3nDyol1yiZDYmlVGIi67Itkt0pBcaCbaxdTkindbkw9fXD6eu3bl/JFwoLS6qL+eWLOVWdOfPm0ZMXZ981pm68nHmdlM3sna0vuY+b/23+v/VjOfx0R8TUFcdpmCu2patlt2KoXrMt07W0XHWtekM72ku2U6u11KyuTqdrdct11ay2tGK1tOFoo95S855ZrqphGDqdllETP3REcWNpycwPZTCIwmS/yno9b8b7NhY3/sSgAADAyRJV/n+/7GrZ1arTld/vz/9jcoj8X2Sk8/+jqkU9AAzVTv6fDq7fbuT/AAAAAAAAAAAAAAAAAAAAAAD8DbY9L+N5Xibchl9JEUmJSPh91OPEcDD/o63jxb2UiP2sWWwW/a3fni9JWWyxZG5C5Hv7fAj45cXLhYU5bcvKW3steFdwvVmMSzKMD2X7x8/78boTH/S/tiYTku7sPycZme0fn+sT3ywm5Pw5Lxn0bIkhGXl/VxyxZbV9Xu/FP51XvXS10BM/2d7vl8aGNycAAAAAABw3Q3dlu+9//dUkDUPDZUN62v3KvecDkjng+UDP/fW4nBqP7rgBAAAAABglbkIqpm1bdbf1+F8vhP//4Fg+UCTqw0kNuvO4iAQ1r07KXAxSiIlIb9PEvpr+hfhvZ/mbd0D4Z5Hu62L2yNOdiPqH6cV3z9VPD/0rYJDwKH8rAQAAABiGMOnnz9kBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIjOoKuIhfsfZRGyju7i0RwlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcDL8DAAA//9xXRHz")
r0 = syz_open_procfs(0x0, 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0)
mount$bind(&(0x7f0000000340)='./file0\x00', &(0x7f00000002c0)='./file0/file0\x00', 0x0, 0x13481, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
read$FUSE(r0, &(0x7f0000000840)={0x2020}, 0x2020)

3m6.584210457s ago: executing program 8 (id=2618):
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, 0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
r0 = getpgid(0x0)
r1 = syz_pidfd_open(r0, 0x0)
pidfd_send_signal(r1, 0x21, 0x0, 0x4)

3m6.013480192s ago: executing program 8 (id=2620):
r0 = inotify_init()
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, 0x0, 0x0)
listen(r1, 0x74)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

3m4.858126176s ago: executing program 38 (id=2620):
r0 = inotify_init()
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, 0x0, 0x0)
listen(r1, 0x74)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

9.426040857s ago: executing program 2 (id=3177):
socket$inet6(0xa, 0x2, 0x0)
r0 = syz_io_uring_setup(0xeff, &(0x7f00000001c0)={0x0, 0xf134, 0x800, 0x83, 0x3ae}, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000440)=<r2=>0x0, &(0x7f0000000180))
syz_io_uring_modify_offsets$generic(r1, r2, 0x2c, 0x10000)
io_uring_enter(r0, 0x2883, 0xf1bd, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x7fffffe, 0xb10a, 0x5, 0x0, 0x0)
io_uring_enter(r0, 0x788, 0x6a29, 0x1, 0x0, 0xfffffffffffffd04)
bind$unix(0xffffffffffffffff, 0x0, 0x0)

9.327911397s ago: executing program 7 (id=3178):
unshare(0x42000000)
syz_usb_connect$cdc_ecm(0x3, 0x4d, &(0x7f0000000380)=ANY=[@ANYBLOB="12010102020000202505a1a440000102030109023b000101060038090400800302060008052406000005240001000d240f010d00000001000004"], 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept4(r0, &(0x7f0000000440)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f00000004c0)=0x80, 0x800)
sendmsg$WG_CMD_SET_DEVICE(r1, 0x0, 0x24000815)
socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, 0x0, &(0x7f0000000300)=0x90)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vxcan0\x00'})
syz_emit_ethernet(0x92, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd604dd318005c0600fc010000000000000000000000000002fe8000000000000000000000000000aa08004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="7002000c"], 0x0)
ioctl$SG_SET_DEBUG(0xffffffffffffffff, 0x227e, &(0x7f0000000240))
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r2, 0xc048aec8, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffd}]})
listen(r0, 0xa)
r4 = dup2(r0, r3)
syz_open_dev$dri(&(0x7f0000000140), 0xfffffffffffffffd, 0x20000)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x1c, &(0x7f0000000840)=ANY=[@ANYBLOB="180010000000000000000000000000001811", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYBLOB="ce04c272f93ad4db40e26cd3f550bb122758f43eb1dfd597934718d999f03463b2323faf40b7ff8778d11cb2953ae1a8893158ae0a3f78b9153efca7bf058e401ceddf418d043196a5d83561e3eb8b44debfc69e3eb2194ad656c35861ce98a47556a19931b6bf513198ede1760994f372143ea0173605c23a9ff487495245b25454c13e0b9a156935ac3e1c4e934262ea85e48bbaa37de3e40bd3ca9d182a6cf126b94078a010f27b0bc7d9bd48b10eef194241cd59f920ef6121c08283655b88d5b440fa218bfae970a2", @ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000085000000b70000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_open_dev$sg(&(0x7f0000000080), 0xf9ba, 0x14b082)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc})
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000200)={0xc})
io_uring_enter(r4, 0x6e63, 0xdeb5, 0x10, 0x0, 0x0)
r6 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x2)
ioctl$SCSI_IOCTL_SYNC(r6, 0x4)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(0xffffffffffffffff, 0x3ba0, &(0x7f0000000640)={0x48})
close_range(r4, 0xffffffffffffffff, 0x0)

7.58499669s ago: executing program 2 (id=3181):
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000002c0)=r2, 0x4)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)={0x14, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0xfffe}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

7.077881492s ago: executing program 2 (id=3184):
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYBLOB="5490f41e89db5c6987bb89944e3ce8a9d74aa557beeb12bf7bf4a19bec956b719f048f1e043475577b7adb3114dbb00a614a03808dfe14f5f5c2dd1b71c4d5a6a09435057b932b0b", @ANYRESHEX], 0x3, 0x240, &(0x7f0000000500)="$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")
chdir(&(0x7f0000000000)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000f80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])

6.711006393s ago: executing program 2 (id=3185):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000000340)=""/102400, 0x19000)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)

5.151496332s ago: executing program 7 (id=3189):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl(r0, 0x890b, 0x0)
bind$x25(r0, &(0x7f0000000080), 0x12)
connect$x25(r0, 0x0, 0x0)

4.756091194s ago: executing program 7 (id=3191):
syz_mount_image$vfat(&(0x7f0000001040), &(0x7f0000000240)='./file0\x00', 0x804, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], 0x1, 0x28e, &(0x7f0000001500)="$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")
statx(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x800, 0x2dd8806920477201, 0x0)

4.608765435s ago: executing program 2 (id=3192):
gettid()
timer_settime(0x0, 0x1, 0x0, 0x0)
r0 = openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000700)=ANY=[@ANYBLOB="0b00000073797a3000000000000000000000000000000000000000000000000000fdffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d0005007c0500000603000003000000faffffff05010905a10105091901290a150025017501950a8102950175068103c0"], 0x135)
syz_usb_connect$midi(0x5, 0x2b, 0x0, 0x0)
write$UHID_INPUT2(r0, &(0x7f00000000c0)=ANY=[], 0x38)
ioctl$NILFS_IOCTL_SYNC(0xffffffffffffffff, 0x80086e8a, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'xfrm0\x00'})
sendto$packet(r2, 0x0, 0x0, 0x81, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @aes256, 0x0, '\x00', @a})
getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, 0x0, &(0x7f0000000580))
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0), 0x4)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x8000)
openat$urandom(0xffffffffffffff9c, 0x0, 0x103902, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r1, &(0x7f00000002c0)="8c2dc55af05ae8ddff860905c5b3277752cd417590d78c587f8a742e48477e13f15d77fc032d7348", &(0x7f0000000300)=""/225}, 0x20)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0)
creat(&(0x7f0000000040)='./bus\x00', 0x0)

4.251879834s ago: executing program 7 (id=3195):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05000000020000000400000009"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

3.88789549s ago: executing program 6 (id=3196):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, 0x2458a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000044}, 0x4000040)
getsockname$packet(r3, 0x0, &(0x7f00000002c0))
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000001000010400000000fedbdf2500000000", @ANYRES32, @ANYBLOB="00030000800000000a0001"], 0x2c}}, 0x884)

3.685752689s ago: executing program 7 (id=3199):
unshare(0x42000000)
syz_usb_connect$cdc_ecm(0x3, 0x4d, &(0x7f0000000380)=ANY=[@ANYBLOB="12010102020000202505a1a440000102030109023b000101060038090400800302060008052406000005240001000d240f010d00000001000004"], 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept4(r0, &(0x7f0000000440)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f00000004c0)=0x80, 0x800)
sendmsg$WG_CMD_SET_DEVICE(r1, 0x0, 0x24000815)
socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, 0x0, &(0x7f0000000300)=0x90)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vxcan0\x00'})
syz_emit_ethernet(0x92, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd604dd318005c0600fc010000000000000000000000000002fe8000000000000000000000000000aa08004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="7002000c"], 0x0)
ioctl$SG_SET_DEBUG(0xffffffffffffffff, 0x227e, &(0x7f0000000240))
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r2, 0xc048aec8, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffd}]})
listen(r0, 0xa)
r4 = dup2(r0, r3)
syz_open_dev$dri(&(0x7f0000000140), 0xfffffffffffffffd, 0x20000)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x1c, &(0x7f0000000840)=ANY=[@ANYBLOB="180010000000000000000000000000001811", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYBLOB="ce04c272f93ad4db40e26cd3f550bb122758f43eb1dfd597934718d999f03463b2323faf40b7ff8778d11cb2953ae1a8893158ae0a3f78b9153efca7bf058e401ceddf418d043196a5d83561e3eb8b44debfc69e3eb2194ad656c35861ce98a47556a19931b6bf513198ede1760994f372143ea0173605c23a9ff487495245b25454c13e0b9a156935ac3e1c4e934262ea85e48bbaa37de3e40bd3ca9d182a6cf126b94078a010f27b0bc7d9bd48b10eef194241cd59f920ef6121c08283655b88d5b440fa218bfae970a2", @ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000085000000b70000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_open_dev$sg(&(0x7f0000000080), 0xf9ba, 0x14b082)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc})
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000200)={0xc})
io_uring_enter(r4, 0x6e63, 0xdeb5, 0x10, 0x0, 0x0)
r6 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x2)
ioctl$SCSI_IOCTL_SYNC(r6, 0x4)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(0xffffffffffffffff, 0x3ba0, &(0x7f0000000640)={0x48})
close_range(r4, 0xffffffffffffffff, 0x0)

3.491435484s ago: executing program 9 (id=3200):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0x23, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e22, @local}}, 0x6, 0xfffffffe, 0x169, 0x9b, 0x2}, &(0x7f0000000100)=0x98)

3.329671263s ago: executing program 6 (id=3202):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000400000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400000000000000000080000000000000000000101000000000044000500ac1414aa000000000000000000000000000080003c"], 0xfc}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000b80)=@migrate={0xec, 0x21, 0x1, 0x0, 0x4, {{@in6=@mcast1, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x9c, 0x11, [{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, @in=@local, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}, {@in=@loopback, @in6=@remote, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x33, 0x4, 0x0, 0x3503, 0xa, 0x2}]}]}, 0xec}}, 0x0)

3.087928323s ago: executing program 9 (id=3203):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6)

3.087489427s ago: executing program 0 (id=3204):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket$packet(0x11, 0x2, 0x300)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054)
write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc)
write$nci(r0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="400104"], 0x14)
r4 = socket(0x1e, 0x4, 0x0)
write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16=r4], 0x14)

2.960730472s ago: executing program 6 (id=3205):
r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x5bc, 0x2)
ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000280)=@multiplanar_overlay={0x7, 0x0, 0x4, 0x800, 0x10000, {}, {0x5, 0x2, 0xd, 0x80, 0x2, 0xb, "24ecea72"}, 0x8, 0x3, {0x0}, 0xfa})

2.789379901s ago: executing program 9 (id=3206):
socket$nl_netfilter(0x10, 0x3, 0xc)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000380)={0xc, 0x8, 0x144, {&(0x7f0000001140)}}, 0x10)

2.620101433s ago: executing program 6 (id=3207):
r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0)
ioctl$TCFLSH(r0, 0x540b, 0x2)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={0x0}}, 0x40)
sendmmsg$inet6(r1, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8)

2.496328958s ago: executing program 0 (id=3208):
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x200}], 0x1, 0x0, &(0x7f0000000180)={[0x403]}, 0x8)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
syz_clone3(&(0x7f000000dd80)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58)
syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58)

1.759035816s ago: executing program 0 (id=3209):
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0)
r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000400)={0x0, 0x30b4, 0x0, 0xffffdffe, 0x158}, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r4=>0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
syz_ublk_setup_queues(r6, r4, &(0x7f00000002c0)={0x0, 0xfb87, 0x800, 0x3, 0x32c, 0x0, r6}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x50, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x700, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff9, 0xd3, 0x0, 0x0}}, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}})

1.688100345s ago: executing program 9 (id=3210):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
migrate_pages(r0, 0x4, 0x0, 0x0)

1.517965938s ago: executing program 0 (id=3211):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc)

1.414500814s ago: executing program 9 (id=3212):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, 0x2458a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000044}, 0x4000040)
getsockname$packet(r3, 0x0, &(0x7f00000002c0))
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000001000010400000000fedbdf2500000000", @ANYRES32, @ANYBLOB="00030000800000000a0001"], 0x2c}}, 0x884)

1.276170093s ago: executing program 0 (id=3213):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
capset(0x0, &(0x7f0000000040)={0x0, 0x200000})
ioctl$VT_RESIZEX(r0, 0x560d, 0x0)

1.251620444s ago: executing program 2 (id=3214):
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r1, &(0x7f0000000000)='3', 0x4e)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000440)={'\x00', 0x9, 0x6, 0x5, 0x0, 0x0, 0xffffffffffffffff})

974.225431ms ago: executing program 0 (id=3215):
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r2)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c)
listen(r3, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r5 = accept(r3, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0x0, 0x1, 0x0, 0x3, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x1c}, 0x1, 0x900}, 0x4000840)
r6 = syz_open_dev$media(&(0x7f00000000c0), 0xc, 0x80c2)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r6, 0x80047c05, &(0x7f0000000080))

841.455517ms ago: executing program 6 (id=3216):
mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./sys\x00', 0x1)
mount(0x0, &(0x7f0000000800)='./sys\x00', &(0x7f0000000840)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/dax/drivers/device_dax/new_id\x00', 0x1, 0x127)
write(r0, &(0x7f00000001c0)="64617865d49f48d5e2446f29a80e6b9c289e7a3bfe6460eaf27a91f0f2d2ff85843f6dd0172a7f025fcc632aa1edfc0e5eba6bf6d1816c94169cee0209bcfd93773b97808f624ee1dc495331923e09cf134e6dbddc94dd1d725c05c459fd7c81479c08941422074375f258a335a9", 0x6e)

584.893086ms ago: executing program 9 (id=3217):
syz_emit_ethernet(0x7a, &(0x7f0000000640)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x1, 0xb, 0x6c, 0x66, 0x0, 0x2, 0x1, 0x0, @private=0xa010102, @remote}, @time_exceeded={0xb, 0x3, 0x0, 0x0, 0x9, 0x0, {0x14, 0x4, 0x0, 0x17, 0x3b, 0x65, 0x7b98, 0x40, 0x2f, 0x4, @multicast1, @loopback, {[@timestamp={0x44, 0x10, 0xca, 0x0, 0xf, [0x800088be, 0x401, 0x101]}, @rr={0x7, 0x13, 0x45, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @loopback]}, @cipso={0x86, 0x10, 0xffffffffffffffff, [{0x0, 0x2}, {0x1, 0x8, "ecaf15aac48c"}]}, @timestamp={0x44, 0x8, 0x48, 0x0, 0x8, [0x0]}]}}}}}}}, 0x0)

47.611949ms ago: executing program 6 (id=3218):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket$packet(0x11, 0x2, 0x300)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054)
write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc)
write$nci(r0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="400104"], 0x14)
r4 = socket(0x1e, 0x4, 0x0)
write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16=r4], 0x14)

0s ago: executing program 7 (id=3219):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0)
write$cgroup_devices(r1, &(0x7f0000000200)={'c', ' *:* ', 'rm\x00'}, 0x9)
sendfile(r0, r1, 0x0, 0x106f)

kernel console output (not intermixed with test programs):

mode
[  692.883019][T14155] veth1_vlan: entered promiscuous mode
[  693.132875][T14332] 8021q: adding VLAN 0 to HW filter on device bond0
[  693.143442][T14155] veth0_macvtap: entered promiscuous mode
[  693.173677][T14155] veth1_macvtap: entered promiscuous mode
[  693.294026][T14332] 8021q: adding VLAN 0 to HW filter on device team0
[  693.317106][T14155] batman_adv: batadv0: Interface activated: batadv_slave_0
[  693.327326][T14644] loop6: detected capacity change from 0 to 128
[  693.351654][T14644] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[  693.412798][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[  693.412885][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[  693.460542][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[  693.460628][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[  693.491812][T14155] batman_adv: batadv0: Interface activated: batadv_slave_1
[  695.019625][T12797] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  695.028677][T12797] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  695.037769][T12797] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  695.809256][   T59] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  696.062960][T14391] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  696.084334][T14391] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  696.104287][T12796] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  696.104342][T12796] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  696.125651][T14391] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  696.153742][T14391] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  696.217585][T14391] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  696.241409][T14391] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  696.295365][T14391] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  696.324050][T14391] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  696.394495][T12796] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  696.394527][T12796] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  696.902546][ T5279] 8021q: adding VLAN 0 to HW filter on device eth24
[  696.941909][T14391] 8021q: adding VLAN 0 to HW filter on device bond0
[  697.046887][T14391] 8021q: adding VLAN 0 to HW filter on device team0
[  697.084551][ T1389] bridge0: port 1(bridge_slave_0) entered blocking state
[  697.084638][ T1389] bridge0: port 1(bridge_slave_0) entered forwarding state
[  697.162124][T12797] bridge0: port 2(bridge_slave_1) entered blocking state
[  697.162216][T12797] bridge0: port 2(bridge_slave_1) entered forwarding state
[  697.238004][T14684] loop9: detected capacity change from 0 to 512
[  697.405213][T14684] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  697.657618][T14155] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  697.764144][T14688] nvme_tcp: malformed address passed: .27.0.0.1:4420
[  698.295252][T14332] 8021q: adding VLAN 0 to HW filter on device batadv0
[  698.558741][T14332] veth0_vlan: entered promiscuous mode
[  698.602101][T14332] veth1_vlan: entered promiscuous mode
[  698.734707][T14332] veth0_macvtap: entered promiscuous mode
[  698.769406][T14332] veth1_macvtap: entered promiscuous mode
[  698.854098][T14332] batman_adv: batadv0: Interface activated: batadv_slave_0
[  698.892437][T14332] batman_adv: batadv0: Interface activated: batadv_slave_1
[  698.930108][ T5821] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  698.930155][ T5821] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  698.930193][ T5821] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  698.930222][ T5821] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  699.408047][T12801] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  699.408078][T12801] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  699.612577][ T5821] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  699.612608][ T5821] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  699.680777][T14391] 8021q: adding VLAN 0 to HW filter on device batadv0
[  699.901674][T14391] veth0_vlan: entered promiscuous mode
[  699.975508][T14391] veth1_vlan: entered promiscuous mode
[  700.145636][T14391] veth0_macvtap: entered promiscuous mode
[  700.172592][T14391] veth1_macvtap: entered promiscuous mode
[  700.227042][T14748] loop6: detected capacity change from 0 to 512
[  700.261244][T14391] batman_adv: batadv0: Interface activated: batadv_slave_0
[  700.307203][T14391] batman_adv: batadv0: Interface activated: batadv_slave_1
[  700.334977][T14748] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  700.434424][ T5821] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  700.444779][   T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  700.549747][ T1389] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  700.551000][ T1389] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  700.757192][ T9054] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  700.894404][T12797] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  700.894436][T12797] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  701.196231][ T1389] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  701.196265][ T1389] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  701.533471][ T5624] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11
[  701.686364][T14770] loop0: detected capacity change from 0 to 128
[  701.865789][T14770] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  701.884045][T14770] ext4 filesystem being mounted at /0/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  702.035492][T14770] syz.0.2621 (pid 14770) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  702.537995][T14770] fscrypt (loop0, inode 12): Error allocating 'adiantum(xchacha12,aes)' transform: -4
[  702.763023][T14391] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  703.762576][T14774] loop7: detected capacity change from 0 to 32768
[  703.816558][T14774] XFS (loop7): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  703.917252][T14774] XFS (loop7): Ending clean mount
[  704.228618][    T9] usb 1-1: new full-speed USB device number 31 using dummy_hcd
[  704.370135][ T9610] XFS (loop7): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  704.390321][    T9] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  704.415767][    T9] usb 1-1: config 0 has an invalid interface number: 255 but max is 0
[  704.415800][    T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  704.415825][    T9] usb 1-1: config 0 has no interface number 0
[  704.456714][T14791] loop2: detected capacity change from 0 to 32768
[  704.469808][    T9] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  704.469840][    T9] usb 1-1: Product: syz
[  704.469861][    T9] usb 1-1: Manufacturer: syz
[  704.469875][    T9] usb 1-1: SerialNumber: syz
[  704.515638][    T9] usb 1-1: config 0 descriptor??
[  704.577351][T14791] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2685 (14791)
[  704.617513][T14791] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  704.617613][T14791] BTRFS info (device loop2): using crc32c checksum algorithm
[  704.876854][    T9] usb 1-1: USB disconnect, device number 31
[  705.121313][T14791] BTRFS info (device loop2): enabling ssd optimizations
[  705.121349][T14791] BTRFS info (device loop2): turning on flush-on-commit
[  705.121394][T14791] BTRFS info (device loop2): enabling free space tree
[  705.121410][T14791] BTRFS info (device loop2): enabling auto defrag
[  705.121426][T14791] BTRFS info (device loop2): use lzo compression, level 1
[  705.121444][T14791] BTRFS info (device loop2): max_inline set to 0
[  705.267009][T14845] loop9: detected capacity change from 0 to 2048
[  705.331017][T14850] loop6: detected capacity change from 0 to 164
[  705.436354][T14845] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  705.436441][T14845] ext4 filesystem being mounted at /9/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  705.632236][T12882] udevd[12882]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.255/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  705.839303][T14859] loop0: detected capacity change from 0 to 128
[  705.942997][T14859] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  705.959147][T14859] ext4 filesystem being mounted at /4/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  706.387529][T14155] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  706.846209][T14332] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  707.158697][T14391] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  708.460241][T13763] usb 7-1: new full-speed USB device number 22 using dummy_hcd
[  708.621212][T13763] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  708.633104][T13763] usb 7-1: config 0 has an invalid interface number: 255 but max is 0
[  708.633135][T13763] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  708.633159][T13763] usb 7-1: config 0 has no interface number 0
[  708.664201][T13763] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  708.664234][T13763] usb 7-1: Product: syz
[  708.664256][T13763] usb 7-1: Manufacturer: syz
[  708.664270][T13763] usb 7-1: SerialNumber: syz
[  708.692120][T13763] usb 7-1: config 0 descriptor??
[  708.750139][T14872] loop9: detected capacity change from 0 to 32768
[  708.786505][T14872] XFS (loop9): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  709.031604][ T5807] usb 7-1: USB disconnect, device number 22
[  709.128886][T14872] XFS (loop9): Ending clean mount
[  709.136638][T12587] udevd[12587]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.255/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  709.314158][T14872] XFS (loop9): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[  709.339273][T14872] XFS (loop9): Unmount and run xfs_repair
[  709.339311][T14872] XFS (loop9): First 128 bytes of corrupted metadata buffer:
[  709.339328][T14872] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff  AB3B............
[  709.339350][T14872] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 80  ................
[  709.339365][T14872] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91  ..G...N..b..1...
[  709.339379][T14872] 00000030: 00 00 00 00 ac 5e af fe 00 00 00 0d 00 00 00 13  .....^..........
[  709.339393][T14872] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00  ...H............
[  709.339407][T14872] 00000050: 00 00 00 00 00 00 00 00 07 00 00 00 00 00 00 00  ................
[  709.339422][T14872] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  709.339436][T14872] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  709.339452][T14872] XFS (loop9): metadata I/O error in "xfs_btree_read_buf_block+0x2ae/0x4a0" at daddr 0x4 len 4 error 74
[  709.475751][T14872] XFS (loop9): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x47f/0x820 (fs/xfs/xfs_trans_buf.c:280).  Shutting down filesystem.
[  709.475805][T14872] XFS (loop9): Please unmount the filesystem and rectify the problem(s)
[  709.676556][T14155] XFS (loop9): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  709.789841][T14887] loop7: detected capacity change from 0 to 32768
[  709.845137][T14887] XFS (loop7): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  710.365617][T14887] XFS (loop7): Ending clean mount
[  711.724689][ T9610] XFS (loop7): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  711.885768][T14929] use of bytesused == 0 is deprecated and will be removed in the future,
[  711.885794][T14929] use the actual size instead.
[  711.939599][T14929] loop6: detected capacity change from 0 to 4096
[  712.948414][T14947] FAULT_INJECTION: forcing a failure.
[  712.948414][T14947] name failslab, interval 1, probability 0, space 0, times 0
[  712.948443][T14947] CPU: 0 UID: 0 PID: 14947 Comm: syz.2.2717 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  712.948466][T14947] Tainted: [L]=SOFTLOCKUP
[  712.948472][T14947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  712.948483][T14947] Call Trace:
[  712.948490][T14947]  <TASK>
[  712.948505][T14947]  dump_stack_lvl+0xe8/0x150
[  712.948535][T14947]  should_fail_ex+0x3eb/0x540
[  712.948559][T14947]  should_failslab+0xa8/0x100
[  712.948580][T14947]  ? __send_signal_locked+0x220/0xee0
[  712.948599][T14947]  kmem_cache_alloc_noprof+0xa1/0x600
[  712.948624][T14947]  ? sig_get_ucounts+0x26/0x450
[  712.948645][T14947]  ? __send_signal_locked+0x220/0xee0
[  712.948663][T14947]  ? sig_get_ucounts+0x3e4/0x450
[  712.948685][T14947]  __send_signal_locked+0x220/0xee0
[  712.948708][T14947]  send_signal_locked+0x135/0x9e0
[  712.948730][T14947]  ? __pfx_send_signal_locked+0x10/0x10
[  712.948751][T14947]  ? rcu_is_watching+0x16/0xb0
[  712.948778][T14947]  force_sig_info_to_task+0x316/0x4b0
[  712.948803][T14947]  force_sig_fault+0xf0/0x150
[  712.948824][T14947]  ? __pfx_force_sig_fault+0x10/0x10
[  712.948848][T14947]  ? __bad_area_nosemaphore+0x31e/0x6a0
[  712.948870][T14947]  exc_page_fault+0x6a/0xc0
[  712.948892][T14947]  asm_exc_page_fault+0x26/0x30
[  712.948908][T14947] RIP: 0033:0x7f2aefd872df
[  712.948923][T14947] Code: 66 2e 0f 1f 84 00 00 00 00 00 90 48 ff ca 0f 8c 22 04 00 00 c5 c1 ef ff 89 f0 25 ff 0f 00 00 3d e0 0f 00 00 0f 87 21 04 00 00 <c5> fe 6f 06 c5 c5 74 f0 c5 fd d7 ce 48 89 f8 48 83 fa 1f 0f 86 79
[  712.948940][T14947] RSP: 002b:00007f2af0cd2bd8 EFLAGS: 00010283
[  712.948955][T14947] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[  712.948965][T14947] RDX: 00000000000003fe RSI: 0000000000000000 RDI: 00007f2af0cd2c00
[  712.948976][T14947] RBP: 00007f2af0cd2c00 R08: 0000000000000000 R09: 0000000000000000
[  712.948986][T14947] R10: 0000000000000000 R11: 0000000000000000 R12: cccccccccccccccd
[  712.948996][T14947] R13: 00007f2af0026038 R14: 00007f2af0025fa0 R15: 00007ffe313595d8
[  712.949021][T14947]  </TASK>
[  713.397093][T14949] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  713.397264][T14949] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  713.857664][T14961] loop0: detected capacity change from 0 to 1024
[  713.943548][T14961] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  714.128029][T14969] loop6: detected capacity change from 0 to 32768
[  714.175594][T14969] JBD2: Ignoring recovery information on journal
[  714.224446][T14969] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  714.409606][T14961] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters
[  714.486891][T14961] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  714.486930][T14961] EXT4-fs (loop0): This should not happen!! Data will be lost
[  714.486930][T14961] 
[  714.486954][T14961] EXT4-fs (loop0): Total free blocks count 0
[  714.486967][T14961] EXT4-fs (loop0): Free/Dirty block details
[  714.486981][T14961] EXT4-fs (loop0): free_blocks=20480
[  714.486995][T14961] EXT4-fs (loop0): dirty_blocks=80
[  714.487007][T14961] EXT4-fs (loop0): Block reservation details
[  714.487019][T14961] EXT4-fs (loop0): i_reserved_data_blocks=5
[  714.500342][T14975] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 48 with error 28
[  714.757953][ T9054] ocfs2: Unmounting device (7,6) on (node local)
[  714.838029][T14956] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2719'.
[  714.838063][T14956] netlink: 'syz.2.2719': attribute type 1 has an invalid length.
[  714.903825][T14391] EXT4-fs warning (device loop0): ext4_evict_inode:196: inode #15: comm syz-executor: data will be lost
[  715.559073][    T9] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  715.722457][    T9] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  715.740158][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  715.740215][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  715.768110][    T9] usb 3-1: config 0 descriptor??
[  715.965313][T14999] overlay: Unknown parameter '/'
[  716.001382][    T9] usbhid 3-1:0.0: can't add hid device: -71
[  716.001474][    T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  716.030494][    T9] usb 3-1: USB disconnect, device number 29
[  716.628912][    T9] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  717.405039][    T9] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40
[  717.480306][T14986] loop6: detected capacity change from 0 to 32768
[  717.976711][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  717.976764][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  718.253031][    T9] usb 3-1: config 0 descriptor??
[  718.324669][T14986] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/loop6": -EINTR
[  718.920747][    T9] aiptek 3-1:0.0: Aiptek using 400 ms programming speed
[  718.964864][    T9] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input45
[  719.109924][    T9] usb 3-1: USB disconnect, device number 30
[  719.110026][    C0] aiptek 3-1:0.0: aiptek_irq - usb_submit_urb failed with result -19
[  719.414684][T15024] loop2: detected capacity change from 0 to 1024
[  719.503893][T15024] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  719.704181][T15030] loop0: detected capacity change from 0 to 32768
[  719.774982][T15030] JBD2: Ignoring recovery information on journal
[  719.879212][T15024] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters
[  719.903490][T15024] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  719.903528][T15024] EXT4-fs (loop2): This should not happen!! Data will be lost
[  719.903528][T15024] 
[  719.903552][T15024] EXT4-fs (loop2): Total free blocks count 0
[  719.903565][T15024] EXT4-fs (loop2): Free/Dirty block details
[  719.903578][T15024] EXT4-fs (loop2): free_blocks=20480
[  719.903593][T15024] EXT4-fs (loop2): dirty_blocks=80
[  719.903605][T15024] EXT4-fs (loop2): Block reservation details
[  719.903617][T15024] EXT4-fs (loop2): i_reserved_data_blocks=5
[  719.951715][T15030] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  719.985348][T15037] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 48 with error 28
[  720.441390][T14332] EXT4-fs warning (device loop2): ext4_evict_inode:196: inode #15: comm syz-executor: data will be lost
[  720.487047][T14391] ocfs2: Unmounting device (7,0) on (node local)
[  720.704353][T15041] netlink: 'syz.7.2739': attribute type 2 has an invalid length.
[  720.704385][T15041] netlink: 'syz.7.2739': attribute type 2 has an invalid length.
[  721.517521][T15057] loop7: detected capacity change from 0 to 256
[  722.277602][T15067] loop2: detected capacity change from 0 to 32768
[  722.308342][T15067] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2747 (15067)
[  722.344987][T15067] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  722.345026][T15067] BTRFS info (device loop2): using sha256 checksum algorithm
[  722.367158][T15035] loop9: detected capacity change from 0 to 32768
[  722.586913][T15035] ocfs2: Slot 0 on device (7,9) was already allocated to this node!
[  722.617749][T15035] JBD2: Ignoring recovery information on journal
[  722.687207][T15067] BTRFS info (device loop2): enabling ssd optimizations
[  722.687240][T15067] BTRFS info (device loop2): turning on sync discard
[  722.687264][T15067] BTRFS info (device loop2): enabling free space tree
[  722.687283][T15067] BTRFS info (device loop2): use zlib compression, level 3
[  723.925665][   T32] audit: type=1800 audit(1788438996.465:79): pid=15088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2747" name="file1" dev="loop2" ino=260 res=0 errno=0
[  724.657325][T15035] JBD2: journal reset failed
[  724.657348][T15035] (syz.9.2738,15035,0):ocfs2_journal_load:1165 ERROR: Failed to load journal!
[  724.657379][T15035] (syz.9.2738,15035,0):ocfs2_check_volume:2394 ERROR: ocfs2 journal load failed! -4
[  724.938693][T15096] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2750'.
[  724.999662][T14332] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  725.508929][    T9] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  725.569454][T15102] netlink: 'syz.7.2753': attribute type 2 has an invalid length.
[  725.569494][T15102] netlink: 'syz.7.2753': attribute type 2 has an invalid length.
[  725.669377][    T9] usb 10-1: Using ep0 maxpacket: 32
[  726.017949][T15110] loop2: detected capacity change from 0 to 32768
[  726.091582][T15110] JBD2: Ignoring recovery information on journal
[  726.176164][T15110] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  726.714861][T14332] ocfs2: Unmounting device (7,2) on (node local)
[  727.865308][T12797] IPVS: starting estimator thread 0...
[  727.962338][T15140] IPVS: using max 39 ests per chain, 93600 per kthread
[  728.235944][T15146] netlink: 'syz.0.2766': attribute type 2 has an invalid length.
[  728.235980][T15146] netlink: 'syz.0.2766': attribute type 2 has an invalid length.
[  728.380220][    T9] usb 10-1: unable to get BOS descriptor or descriptor too short
[  728.380281][    T9] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  728.399506][    T9] usb 10-1: unable to read config index 0 descriptor/start: -71
[  728.399540][    T9] usb 10-1: can't read configurations, error -71
[  728.611992][T15153] loop0: detected capacity change from 0 to 512
[  728.652717][T15153] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  728.922142][T14391] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  729.902919][T15145] loop2: detected capacity change from 0 to 32768
[  730.084921][T15145] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  730.139333][    T9] usb 10-1: new full-speed USB device number 4 using dummy_hcd
[  730.236791][T15145] XFS (loop2): Ending clean mount
[  730.302859][    T9] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  730.320230][    T9] usb 10-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  730.320269][    T9] usb 10-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  730.320299][    T9] usb 10-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid maxpacket 169, setting to 64
[  730.320322][    T9] usb 10-1: config 0 interface 0 has no altsetting 0
[  730.372437][    T9] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  730.372471][    T9] usb 10-1: Product: syz
[  730.372494][    T9] usb 10-1: Manufacturer: syz
[  730.372508][    T9] usb 10-1: SerialNumber: syz
[  730.566581][    T9] usb 10-1: config 0 descriptor??
[  730.582593][T15172] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  731.099089][T15187] jffs2: notice: (15187) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  731.608364][    T9] usb 10-1: selecting invalid altsetting 0
[  731.875233][T15172] loop9: detected capacity change from 0 to 512
[  731.915573][T15172] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002]
[  731.915742][T15172] System zones: 1-12
[  731.949605][T14332] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  732.042015][T15172] EXT4-fs error (device loop9): ext4_xattr_inode_iget:437: inode #12: comm syz.9.2771: missing EA_INODE flag
[  732.042058][T15172] loop9: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  732.055451][    C0] EXT4-fs (loop9): error count since last fsck: 1
[  732.055471][    C0] EXT4-fs (loop9): initial error at time 1788439004: ext4_xattr_inode_iget:437: inode 12
[  732.055495][    C0] EXT4-fs (loop9): last error at time 1788439004: ext4_xattr_inode_iget:437: inode 12
[  732.311288][T15172] EXT4-fs error (device loop9): ext4_xattr_inode_iget:442: comm syz.9.2771: error while reading EA inode 12 err=-117
[  732.311331][T15172] loop9: lost filesystem error report for type 5 error -117
[  732.334371][T15172] EXT4-fs (loop9): 1 orphan inode deleted
[  732.335653][T15172] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  734.067616][T15198] usb 10-1: cannot submit urb 0, error -2: endpoint not enabled
[  734.101632][ T5722] usb 10-1: USB disconnect, device number 4
[  734.174865][T13342] udevd[13342]: setting mode of /dev/mixer3 to 020660 failed: No such file or directory
[  734.174971][T13342] udevd[13342]: setting owner of /dev/mixer3 to uid=0, gid=29 failed: No such file or directory
[  734.778180][T15208] FAULT_INJECTION: forcing a failure.
[  734.778180][T15208] name failslab, interval 1, probability 0, space 0, times 0
[  734.779642][T15208] CPU: 0 UID: 0 PID: 15208 Comm: syz.0.2776 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  734.779668][T15208] Tainted: [L]=SOFTLOCKUP
[  734.779684][T15208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  734.779700][T15208] Call Trace:
[  734.779708][T15208]  <TASK>
[  734.779715][T15208]  dump_stack_lvl+0xe8/0x150
[  734.779745][T15208]  should_fail_ex+0x3eb/0x540
[  734.779767][T15208]  should_failslab+0xa8/0x100
[  734.779791][T15208]  __kmalloc_cache_noprof+0xa3/0x600
[  734.779809][T15208]  ? do_kimage_alloc_init+0x4e/0x280
[  734.779834][T15208]  ? do_kimage_alloc_init+0x4e/0x280
[  734.779860][T15208]  ? lock_acquire+0x115/0x350
[  734.779879][T15208]  do_kimage_alloc_init+0x4e/0x280
[  734.779905][T15208]  do_kexec_load+0x12f/0x7c0
[  734.779928][T15208]  ? __pfx_do_kexec_load+0x10/0x10
[  734.779949][T15208]  ? _copy_from_user+0x94/0xb0
[  734.780039][T15208]  __se_sys_kexec_load+0x134/0x160
[  734.780061][T15208]  do_syscall_64+0x166/0x520
[  734.780083][T15208]  ? trace_irq_disable+0x3b/0x140
[  734.780099][T15208]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  734.780116][T15208]  ? clear_bhb_loop+0x70/0xc0
[  734.780136][T15208]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  734.780152][T15208] RIP: 0033:0x7f04f8d9e159
[  734.780168][T15208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  734.780182][T15208] RSP: 002b:00007f04f9b8d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6
[  734.780199][T15208] RAX: ffffffffffffffda RBX: 00007f04f9025fa0 RCX: 00007f04f8d9e159
[  734.780212][T15208] RDX: 0000200000000140 RSI: 0000000000000001 RDI: 0000000000000002
[  734.780223][T15208] RBP: 00007f04f8e35024 R08: 0000000000000000 R09: 0000000000000000
[  734.780233][T15208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  734.780243][T15208] R13: 00007f04f9026038 R14: 00007f04f9025fa0 R15: 00007fff05926c98
[  734.780268][T15208]  </TASK>
[  735.151322][T15210] netlink: 'syz.6.2778': attribute type 2 has an invalid length.
[  735.151361][T15210] netlink: 'syz.6.2778': attribute type 2 has an invalid length.
[  735.461400][T15216] loop2: detected capacity change from 0 to 32768
[  735.481171][T15216] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2774 (15216)
[  735.512672][T15216] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  735.512711][T15216] BTRFS info (device loop2): using sha256 checksum algorithm
[  735.600349][T15221] loop0: detected capacity change from 0 to 512
[  735.670275][T15221] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  735.773588][T15216] BTRFS info (device loop2): enabling ssd optimizations
[  735.773624][T15216] BTRFS info (device loop2): turning on sync discard
[  735.773647][T15216] BTRFS info (device loop2): enabling free space tree
[  735.773664][T15216] BTRFS info (device loop2): use zlib compression, level 3
[  736.978383][   T32] audit: type=1800 audit(1788439009.545:80): pid=15241 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2774" name="file1" dev="loop2" ino=260 res=0 errno=0
[  737.007110][T14155] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  737.842691][T14391] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  738.041940][T15244] loop9: detected capacity change from 0 to 32768
[  738.123279][T15244] JBD2: Ignoring recovery information on journal
[  738.170093][T15244] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode.
[  738.236648][T15246] loop6: detected capacity change from 0 to 512
[  738.265961][T14332] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  738.280707][T15246] EXT4-fs: Ignoring removed oldalloc option
[  738.339610][T15246] EXT4-fs error (device loop6): ext4_iget_extra_inode:5210: inode #15: comm syz.6.2783: corrupted in-inode xattr: invalid ea_ino
[  738.339649][T15246] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  738.353948][    C0] EXT4-fs (loop6): error count since last fsck: 1
[  738.353969][    C0] EXT4-fs (loop6): initial error at time 1788439011: ext4_iget_extra_inode:5210: inode 15
[  738.353992][    C0] EXT4-fs (loop6): last error at time 1788439011: ext4_iget_extra_inode:5210: inode 15
[  738.402727][T15246] EXT4-fs error (device loop6): ext4_orphan_get:1408: comm syz.6.2783: couldn't read orphan inode 15 (err -117)
[  738.418380][T15246] loop6: lost filesystem error report for type 5 error -117
[  738.451086][T15246] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  739.373625][   T32] audit: type=1800 audit(1788439012.265:81): pid=15265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2782" name="file1" dev="tmpfs" ino=108 res=0 errno=0
[  739.511425][T14155] ocfs2: Unmounting device (7,9) on (node local)
[  740.314207][ T9054] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  740.546853][T15279] netlink: 'syz.9.2791': attribute type 2 has an invalid length.
[  740.546887][T15279] netlink: 'syz.9.2791': attribute type 2 has an invalid length.
[  740.912109][T15259] loop0: detected capacity change from 0 to 32768
[  740.958079][T15259] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  741.080587][T15259] XFS (loop0): Ending clean mount
[  741.635003][T14391] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  741.941069][ T5722] usb 7-1: new high-speed USB device number 23 using dummy_hcd
[  742.105230][ T5722] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  742.123437][ T5722] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  742.123474][ T5722] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  742.123502][ T5722] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  742.123536][ T5722] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  742.186834][ T5722] usb 7-1: config 0 descriptor??
[  742.626456][ T5722] plantronics 0003:047F:FFFF.0011: reserved main item tag 0xd
[  742.774900][ T5722] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0
[  742.837028][T13763] usb 7-1: USB disconnect, device number 23
[  743.138660][T15337] fido_id[15337]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory
[  743.327330][T15343] netlink: 'syz.7.2803': attribute type 2 has an invalid length.
[  743.327367][T15343] netlink: 'syz.7.2803': attribute type 2 has an invalid length.
[  743.694194][T15356] loop7: detected capacity change from 0 to 64
[  743.833519][T15356] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended.	Mounting read-only.
[  744.854882][T15382] fuse: Bad value for 'fd'
[  745.040191][ T5722] input: syz0 as /devices/virtual/misc/uhid/0005:057C:0306.0012/input/input47
[  745.095077][ T5722] hid-generic 0005:057C:0306.0012: input,hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0
[  745.432561][T15386] fido_id[15386]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  745.641528][T15362] loop2: detected capacity change from 0 to 32768
[  745.703962][T15362] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  745.790225][ T5722] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  745.818905][T15362] XFS (loop2): Ending clean mount
[  745.952033][ T5722] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  745.972070][ T5722] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  745.972107][ T5722] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  745.972135][ T5722] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  745.972169][ T5722] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  746.024391][ T5722] usb 1-1: config 0 descriptor??
[  746.219161][T14332] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  746.299793][ T5631] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  746.568846][T15412] loop7: detected capacity change from 0 to 32768
[  746.595344][T15412] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.2821 (15412)
[  746.644945][T15412] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  746.644982][T15412] BTRFS info (device loop7): using sha256 checksum algorithm
[  746.673313][ T5722] plantronics 0003:047F:FFFF.0013: reserved main item tag 0xd
[  746.691038][ T5631] usb 10-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00
[  746.702363][ T5631] usb 10-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  746.702401][ T5631] usb 10-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  746.702430][ T5631] usb 10-1: config 0 interface 0 has no altsetting 0
[  746.702458][ T5631] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  746.762179][ T5631] usb 10-1: config 0 descriptor??
[  746.827565][ T5722] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  746.877765][ T5722] usb 1-1: USB disconnect, device number 32
[  747.058538][T15412] BTRFS info (device loop7): enabling ssd optimizations
[  747.058570][T15412] BTRFS info (device loop7): turning on sync discard
[  747.058593][T15412] BTRFS info (device loop7): enabling free space tree
[  747.058611][T15412] BTRFS info (device loop7): use zlib compression, level 3
[  747.323070][T15410] loop9: detected capacity change from 0 to 512
[  748.282224][   T32] audit: type=1800 audit(1788439020.855:82): pid=15431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2821" name="file1" dev="loop7" ino=260 res=0 errno=0
[  748.308140][ T1310] ieee802154 phy1 wpan1: encryption failed: -22
[  749.406993][T15434] FAULT_INJECTION: forcing a failure.
[  749.406993][T15434] name failslab, interval 1, probability 0, space 0, times 0
[  749.407036][T15434] CPU: 0 UID: 0 PID: 15434 Comm: syz.6.2823 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  749.407059][T15434] Tainted: [L]=SOFTLOCKUP
[  749.407065][T15434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  749.407075][T15434] Call Trace:
[  749.407083][T15434]  <TASK>
[  749.407090][T15434]  dump_stack_lvl+0xe8/0x150
[  749.407122][T15434]  should_fail_ex+0x3eb/0x540
[  749.407144][T15434]  should_failslab+0xa8/0x100
[  749.407168][T15434]  kmem_cache_alloc_lru_noprof+0xa7/0x5f0
[  749.407195][T15434]  ? __d_alloc+0x37/0x6f0
[  749.407209][T15434]  ? __d_alloc+0x37/0x6f0
[  749.407227][T15434]  __d_alloc+0x37/0x6f0
[  749.407254][T15434]  d_alloc_pseudo+0x21/0xc0
[  749.407271][T15434]  alloc_path_pseudo+0x107/0x220
[  749.407295][T15434]  ? __pfx_alloc_path_pseudo+0x10/0x10
[  749.407318][T15434]  ? do_raw_spin_lock+0x12b/0x2f0
[  749.407346][T15434]  alloc_file_pseudo+0xa8/0x1e0
[  749.407369][T15434]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  749.407391][T15434]  ? _raw_spin_unlock+0x28/0x50
[  749.407409][T15434]  ? alloc_fd+0x651/0x6c0
[  749.407434][T15434]  sock_alloc_file+0xb8/0x2e0
[  749.407452][T15434]  ? __sys_socket+0x12b/0x1b0
[  749.407472][T15434]  __sys_socket+0x13f/0x1b0
[  749.407494][T15434]  __x64_sys_socket+0x7a/0x90
[  749.407514][T15434]  do_syscall_64+0x166/0x520
[  749.407535][T15434]  ? trace_irq_disable+0x3b/0x140
[  749.407551][T15434]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  749.407568][T15434]  ? clear_bhb_loop+0x70/0xc0
[  749.407587][T15434]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  749.407604][T15434] RIP: 0033:0x7fbbb839e159
[  749.407618][T15434] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  749.407633][T15434] RSP: 002b:00007fbbb929cfc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  749.407650][T15434] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007fbbb839e159
[  749.407662][T15434] RDX: 0000000000000001 RSI: 0000000000000003 RDI: 000000000000001f
[  749.407672][T15434] RBP: 00007fbbb8435024 R08: 0000000000000000 R09: 0000000000000000
[  749.407682][T15434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  749.407692][T15434] R13: 00007fbbb8626038 R14: 00007fbbb8625fa0 R15: 00007ffee823c8d8
[  749.407723][T15434]  </TASK>
[  749.723584][ T5631] usbhid 10-1:0.0: can't add hid device: -71
[  749.723683][ T5631] usbhid 10-1:0.0: probe with driver usbhid failed with error -71
[  749.796903][ T5631] usb 10-1: USB disconnect, device number 5
[  749.939276][T15432] fido_id[15432]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  749.971758][ T9610] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  750.281749][T15441] FAULT_INJECTION: forcing a failure.
[  750.281749][T15441] name failslab, interval 1, probability 0, space 0, times 0
[  750.281793][T15441] CPU: 0 UID: 0 PID: 15441 Comm: syz.9.2826 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  750.281816][T15441] Tainted: [L]=SOFTLOCKUP
[  750.281822][T15441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  750.281833][T15441] Call Trace:
[  750.281840][T15441]  <TASK>
[  750.281847][T15441]  dump_stack_lvl+0xe8/0x150
[  750.281877][T15441]  should_fail_ex+0x3eb/0x540
[  750.281900][T15441]  ? __pfx_sock_alloc_inode+0x10/0x10
[  750.281919][T15441]  should_failslab+0xa8/0x100
[  750.281942][T15441]  ? __pfx_sock_alloc_inode+0x10/0x10
[  750.281959][T15441]  kmem_cache_alloc_lru_noprof+0xa7/0x5f0
[  750.281988][T15441]  ? sock_alloc_inode+0x2c/0x1a0
[  750.282005][T15441]  ? sock_alloc_inode+0x2c/0x1a0
[  750.282023][T15441]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  750.282049][T15441]  ? __pfx_sock_alloc_inode+0x10/0x10
[  750.282066][T15441]  sock_alloc_inode+0x2c/0x1a0
[  750.282084][T15441]  ? __pfx_sock_alloc_inode+0x10/0x10
[  750.282112][T15441]  alloc_inode+0x6a/0x1b0
[  750.282139][T15441]  __sock_create+0x127/0xac0
[  750.282170][T15441]  __sys_socket+0xd6/0x1b0
[  750.282192][T15441]  __x64_sys_socket+0x7a/0x90
[  750.282212][T15441]  do_syscall_64+0x166/0x520
[  750.282239][T15441]  ? trace_irq_disable+0x3b/0x140
[  750.282256][T15441]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  750.282274][T15441]  ? clear_bhb_loop+0x70/0xc0
[  750.282295][T15441]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  750.282327][T15441] RIP: 0033:0x7fbaed39e159
[  750.282342][T15441] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  750.282357][T15441] RSP: 002b:00007fbaee1dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  750.282375][T15441] RAX: ffffffffffffffda RBX: 00007fbaed625fa0 RCX: 00007fbaed39e159
[  750.282387][T15441] RDX: 0000000000000001 RSI: 0000000000000003 RDI: 0000000000000002
[  750.282397][T15441] RBP: 00007fbaed435024 R08: 0000000000000000 R09: 0000000000000000
[  750.282408][T15441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  750.282418][T15441] R13: 00007fbaed626038 R14: 00007fbaed625fa0 R15: 00007ffeab477338
[  750.282443][T15441]  </TASK>
[  750.282464][T15441] net_ratelimit: 354 callbacks suppressed
[  750.282476][T15441] socket: no more sockets
[  750.469298][T15441] overlayfs: missing 'lowerdir'
[  751.465739][ T5722] input: syz0 as /devices/virtual/misc/uhid/0005:057C:0306.0014/input/input49
[  751.523980][ T5722] hid-generic 0005:057C:0306.0014: input,hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0
[  751.939045][T15469] fido_id[15469]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  752.160685][T15450] loop2: detected capacity change from 0 to 32768
[  752.198983][T15450] JBD2: Ignoring recovery information on journal
[  752.220249][ T5722] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[  752.345045][T15450] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  752.380770][ T5722] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  752.400463][ T5722] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  752.400507][ T5722] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  752.400535][ T5722] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  752.400570][ T5722] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  752.451220][ T5722] usb 10-1: config 0 descriptor??
[  752.867551][   T32] audit: type=1800 audit(1788439025.765:83): pid=15482 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2822" name="file1" dev="loop2" ino=17058 res=0 errno=0
[  752.894489][ T5722] usbhid 10-1:0.0: can't add hid device: -71
[  752.894600][ T5722] usbhid 10-1:0.0: probe with driver usbhid failed with error -71
[  752.935982][ T5722] usb 10-1: USB disconnect, device number 6
[  753.184182][T14332] ocfs2: Unmounting device (7,2) on (node local)
[  753.246906][T15445] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  753.401565][T15499] FAULT_INJECTION: forcing a failure.
[  753.401565][T15499] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  753.401607][T15499] CPU: 0 UID: 0 PID: 15499 Comm: syz.7.2839 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  753.401631][T15499] Tainted: [L]=SOFTLOCKUP
[  753.401637][T15499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  753.401648][T15499] Call Trace:
[  753.401655][T15499]  <TASK>
[  753.401662][T15499]  dump_stack_lvl+0xe8/0x150
[  753.401692][T15499]  should_fail_ex+0x3eb/0x540
[  753.401716][T15499]  _copy_from_user+0x2d/0xb0
[  753.401740][T15499]  __sys_bpf+0x2e7/0xd90
[  753.401765][T15499]  ? __pfx___sys_bpf+0x10/0x10
[  753.401786][T15499]  ? do_futex+0x3e7/0x4e0
[  753.401828][T15499]  ? rcu_is_watching+0x16/0xb0
[  753.401853][T15499]  __x64_sys_bpf+0xba/0xd0
[  753.401871][T15499]  do_syscall_64+0x166/0x520
[  753.401893][T15499]  ? trace_irq_disable+0x3b/0x140
[  753.401920][T15499]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  753.401937][T15499]  ? clear_bhb_loop+0x70/0xc0
[  753.401973][T15499]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  753.401992][T15499] RIP: 0033:0x7f58e159e159
[  753.402008][T15499] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  753.402022][T15499] RSP: 002b:00007f58e2403028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  753.402039][T15499] RAX: ffffffffffffffda RBX: 00007f58e1825fa0 RCX: 00007f58e159e159
[  753.402052][T15499] RDX: 0000000000000028 RSI: 0000200000000240 RDI: 0000000000000012
[  753.402062][T15499] RBP: 00007f58e1635024 R08: 0000000000000000 R09: 0000000000000000
[  753.402073][T15499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  753.402083][T15499] R13: 00007f58e1826038 R14: 00007f58e1825fa0 R15: 00007ffe48b85588
[  753.402107][T15499]  </TASK>
[  753.959734][T15502] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2840'.
[  753.960182][T15502] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2840'.
[  754.042010][T15502] bridge0: port 2(bridge_slave_1) entered disabled state
[  754.044819][T15502] bridge0: port 1(bridge_slave_0) entered disabled state
[  754.767429][T15518] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  755.576286][T15522] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  755.926367][T15551] loop7: detected capacity change from 0 to 512
[  755.934644][ T5807] usb 7-1: new high-speed USB device number 24 using dummy_hcd
[  756.088664][T15553] FAULT_INJECTION: forcing a failure.
[  756.088664][T15553] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  756.088705][T15553] CPU: 0 UID: 0 PID: 15553 Comm: syz.2.2853 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  756.088727][T15553] Tainted: [L]=SOFTLOCKUP
[  756.088734][T15553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  756.088744][T15553] Call Trace:
[  756.088751][T15553]  <TASK>
[  756.088758][T15553]  dump_stack_lvl+0xe8/0x150
[  756.088788][T15553]  should_fail_ex+0x3eb/0x540
[  756.088810][T15553]  _copy_from_user+0x2d/0xb0
[  756.088833][T15553]  __sys_bpf+0x2e7/0xd90
[  756.088858][T15553]  ? __pfx___sys_bpf+0x10/0x10
[  756.088879][T15553]  ? do_futex+0x3e7/0x4e0
[  756.088920][T15553]  ? rcu_is_watching+0x16/0xb0
[  756.088944][T15553]  __x64_sys_bpf+0xba/0xd0
[  756.088963][T15553]  do_syscall_64+0x166/0x520
[  756.088985][T15553]  ? trace_irq_disable+0x3b/0x140
[  756.089001][T15553]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  756.089017][T15553]  ? clear_bhb_loop+0x70/0xc0
[  756.089037][T15553]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  756.089057][T15553] RIP: 0033:0x7f2aefd9e159
[  756.089080][T15553] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  756.089094][T15553] RSP: 002b:00007f2af0cd3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  756.089111][T15553] RAX: ffffffffffffffda RBX: 00007f2af0025fa0 RCX: 00007f2aefd9e159
[  756.089124][T15553] RDX: 0000000000000028 RSI: 0000200000000240 RDI: 0000000000000012
[  756.089135][T15553] RBP: 00007f2aefe35024 R08: 0000000000000000 R09: 0000000000000000
[  756.089145][T15553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  756.089155][T15553] R13: 00007f2af0026038 R14: 00007f2af0025fa0 R15: 00007ffe313595d8
[  756.089179][T15553]  </TASK>
[  756.136359][ T5807] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  756.259906][ T5807] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  756.259938][ T5807] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  756.259955][ T5807] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  756.259986][ T5807] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  756.352379][ T5807] usb 7-1: config 0 descriptor??
[  756.662333][T15540] loop0: detected capacity change from 0 to 32768
[  756.830145][T15562] FAULT_INJECTION: forcing a failure.
[  756.830145][T15562] name failslab, interval 1, probability 0, space 0, times 0
[  756.830202][T15562] CPU: 0 UID: 0 PID: 15562 Comm: syz.9.2856 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  756.830226][T15562] Tainted: [L]=SOFTLOCKUP
[  756.830233][T15562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  756.830243][T15562] Call Trace:
[  756.830250][T15562]  <TASK>
[  756.830257][T15562]  dump_stack_lvl+0xe8/0x150
[  756.830287][T15562]  should_fail_ex+0x3eb/0x540
[  756.830308][T15562]  ? __pfx_sock_alloc_inode+0x10/0x10
[  756.830331][T15562]  should_failslab+0xa8/0x100
[  756.830353][T15562]  ? __pfx_sock_alloc_inode+0x10/0x10
[  756.830370][T15562]  kmem_cache_alloc_lru_noprof+0xa7/0x5f0
[  756.830398][T15562]  ? sock_alloc_inode+0x2c/0x1a0
[  756.830415][T15562]  ? sock_alloc_inode+0x2c/0x1a0
[  756.830433][T15562]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  756.830458][T15562]  ? __pfx_sock_alloc_inode+0x10/0x10
[  756.830476][T15562]  sock_alloc_inode+0x2c/0x1a0
[  756.830494][T15562]  ? __pfx_sock_alloc_inode+0x10/0x10
[  756.830510][T15562]  alloc_inode+0x6a/0x1b0
[  756.830534][T15562]  __sock_create+0x127/0xac0
[  756.830559][T15562]  __sys_socket+0xd6/0x1b0
[  756.830581][T15562]  __x64_sys_socket+0x7a/0x90
[  756.830601][T15562]  do_syscall_64+0x166/0x520
[  756.830622][T15562]  ? trace_irq_disable+0x3b/0x140
[  756.830638][T15562]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  756.830655][T15562]  ? clear_bhb_loop+0x70/0xc0
[  756.830675][T15562]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  756.830691][T15562] RIP: 0033:0x7fbaed39e159
[  756.830706][T15562] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  756.830720][T15562] RSP: 002b:00007fbaee1dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  756.830737][T15562] RAX: ffffffffffffffda RBX: 00007fbaed625fa0 RCX: 00007fbaed39e159
[  756.830750][T15562] RDX: 0000000000000001 RSI: 0000000000000003 RDI: 0000000000000002
[  756.830760][T15562] RBP: 00007fbaed435024 R08: 0000000000000000 R09: 0000000000000000
[  756.830770][T15562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  756.830780][T15562] R13: 00007fbaed626038 R14: 00007fbaed625fa0 R15: 00007ffeab477338
[  756.830805][T15562]  </TASK>
[  756.830841][T15562] socket: no more sockets
[  757.060212][ T5807] usbhid 7-1:0.0: can't add hid device: -71
[  757.060293][ T5807] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  757.148525][T15540] JBD2: Ignoring recovery information on journal
[  757.157180][ T5807] usb 7-1: USB disconnect, device number 24
[  757.172602][T15562] overlay: Unknown parameter '/'
[  757.337060][T15540] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  757.663755][T15575] FAULT_INJECTION: forcing a failure.
[  757.663755][T15575] name failslab, interval 1, probability 0, space 0, times 0
[  757.663796][T15575] CPU: 0 UID: 0 PID: 15575 Comm: syz.9.2858 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  757.663819][T15575] Tainted: [L]=SOFTLOCKUP
[  757.663825][T15575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  757.663836][T15575] Call Trace:
[  757.663842][T15575]  <TASK>
[  757.663850][T15575]  dump_stack_lvl+0xe8/0x150
[  757.663880][T15575]  should_fail_ex+0x3eb/0x540
[  757.663902][T15575]  ? __pfx_sock_alloc_inode+0x10/0x10
[  757.663922][T15575]  should_failslab+0xa8/0x100
[  757.663944][T15575]  ? __pfx_sock_alloc_inode+0x10/0x10
[  757.663961][T15575]  kmem_cache_alloc_lru_noprof+0xa7/0x5f0
[  757.663989][T15575]  ? sock_alloc_inode+0x2c/0x1a0
[  757.664006][T15575]  ? sock_alloc_inode+0x2c/0x1a0
[  757.664024][T15575]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  757.664048][T15575]  ? __pfx_sock_alloc_inode+0x10/0x10
[  757.664065][T15575]  sock_alloc_inode+0x2c/0x1a0
[  757.664083][T15575]  ? __pfx_sock_alloc_inode+0x10/0x10
[  757.664100][T15575]  alloc_inode+0x6a/0x1b0
[  757.664123][T15575]  __sock_create+0x127/0xac0
[  757.664148][T15575]  __sys_socket+0xd6/0x1b0
[  757.664170][T15575]  __x64_sys_socket+0x7a/0x90
[  757.664190][T15575]  do_syscall_64+0x166/0x520
[  757.664210][T15575]  ? trace_irq_disable+0x3b/0x140
[  757.664227][T15575]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  757.664243][T15575]  ? clear_bhb_loop+0x70/0xc0
[  757.664263][T15575]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  757.664279][T15575] RIP: 0033:0x7fbaed39e159
[  757.664294][T15575] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  757.664308][T15575] RSP: 002b:00007fbaee1dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  757.664325][T15575] RAX: ffffffffffffffda RBX: 00007fbaed625fa0 RCX: 00007fbaed39e159
[  757.664337][T15575] RDX: 0000000000000001 RSI: 0000000000000003 RDI: 0000000000000002
[  757.664347][T15575] RBP: 00007fbaed435024 R08: 0000000000000000 R09: 0000000000000000
[  757.664357][T15575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  757.664367][T15575] R13: 00007fbaed626038 R14: 00007fbaed625fa0 R15: 00007ffeab477338
[  757.664400][T15575]  </TASK>
[  757.664421][T15575] socket: no more sockets
[  757.919743][T15575] overlayfs: missing 'lowerdir'
[  757.986194][T15572] loop7: detected capacity change from 0 to 4096
[  758.117794][T15583] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  758.454595][   T32] audit: type=1800 audit(1788439031.355:84): pid=15572 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2857" name="file2" dev="loop7" ino=16 res=0 errno=0
[  758.696797][T15590] FAULT_INJECTION: forcing a failure.
[  758.696797][T15590] name failslab, interval 1, probability 0, space 0, times 0
[  758.696847][T15590] CPU: 0 UID: 0 PID: 15590 Comm: syz.2.2862 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  758.696871][T15590] Tainted: [L]=SOFTLOCKUP
[  758.696878][T15590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  758.696889][T15590] Call Trace:
[  758.696896][T15590]  <TASK>
[  758.696904][T15590]  dump_stack_lvl+0xe8/0x150
[  758.696934][T15590]  should_fail_ex+0x3eb/0x540
[  758.696957][T15590]  should_failslab+0xa8/0x100
[  758.696981][T15590]  __kvmalloc_node_noprof+0x176/0x820
[  758.697003][T15590]  ? bpf_jit_binary_pack_alloc+0x10a/0x300
[  758.697026][T15590]  ? bpf_jit_binary_pack_alloc+0x10a/0x300
[  758.697053][T15590]  bpf_jit_binary_pack_alloc+0x10a/0x300
[  758.697075][T15590]  ? __pfx_jit_fill_hole+0x10/0x10
[  758.697104][T15590]  bpf_int_jit_compile+0xa16/0x17e0
[  758.697142][T15590]  ? __pfx_bpf_int_jit_compile+0x10/0x10
[  758.697175][T15590]  ? __kmalloc_node_track_caller_noprof+0x2eb/0x720
[  758.697192][T15590]  ? bpf_prepare_filter+0xd5d/0x12d0
[  758.697311][T15590]  __bpf_prog_select_runtime+0x53e/0xbf0
[  758.697335][T15590]  ? bpf_prog_realloc+0x172/0x210
[  758.697359][T15590]  bpf_prepare_filter+0x10df/0x12d0
[  758.697384][T15590]  ? __pfx_bpf_prepare_filter+0x10/0x10
[  758.697403][T15590]  ? kmemdup_noprof+0x55/0x70
[  758.697422][T15590]  ? __get_filter+0x2d5/0x420
[  758.697444][T15590]  sk_attach_filter+0x24/0x140
[  758.697464][T15590]  sk_setsockopt+0x2635/0x2f10
[  758.697491][T15590]  ? __pfx_sk_setsockopt+0x10/0x10
[  758.697515][T15590]  ? aa_sk_perm+0x6ff/0x8f0
[  758.697546][T15590]  ? aa_sock_opt_perm+0x142/0x1e0
[  758.697570][T15590]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  758.697595][T15590]  do_sock_setsockopt+0x11b/0x1b0
[  758.697621][T15590]  __x64_sys_setsockopt+0x13d/0x1b0
[  758.697648][T15590]  do_syscall_64+0x166/0x520
[  758.697670][T15590]  ? trace_irq_disable+0x3b/0x140
[  758.697686][T15590]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  758.697703][T15590]  ? clear_bhb_loop+0x70/0xc0
[  758.697722][T15590]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  758.697739][T15590] RIP: 0033:0x7f2aefd9e159
[  758.697754][T15590] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  758.697773][T15590] RSP: 002b:00007f2af0cd3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  758.697791][T15590] RAX: ffffffffffffffda RBX: 00007f2af0025fa0 RCX: 00007f2aefd9e159
[  758.697804][T15590] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000004
[  758.697814][T15590] RBP: 00007f2aefe35024 R08: 0000000000000010 R09: 0000000000000000
[  758.697824][T15590] R10: 0000200000ab9ff0 R11: 0000000000000246 R12: 0000000000000000
[  758.697835][T15590] R13: 00007f2af0026038 R14: 00007f2af0025fa0 R15: 00007ffe313595d8
[  758.697860][T15590]  </TASK>
[  759.131884][T14391] ocfs2: Unmounting device (7,0) on (node local)
[  759.346023][T15598] FAULT_INJECTION: forcing a failure.
[  759.346023][T15598] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  759.363887][T15598] CPU: 0 UID: 0 PID: 15598 Comm: syz.6.2866 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  759.363914][T15598] Tainted: [L]=SOFTLOCKUP
[  759.363920][T15598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  759.363930][T15598] Call Trace:
[  759.363937][T15598]  <TASK>
[  759.363944][T15598]  dump_stack_lvl+0xe8/0x150
[  759.363975][T15598]  should_fail_ex+0x3eb/0x540
[  759.363999][T15598]  _copy_from_user+0x2d/0xb0
[  759.364021][T15598]  __sys_bpf+0x2e7/0xd90
[  759.364047][T15598]  ? __pfx___sys_bpf+0x10/0x10
[  759.364067][T15598]  ? do_futex+0x3e7/0x4e0
[  759.364109][T15598]  ? rcu_is_watching+0x16/0xb0
[  759.364133][T15598]  __x64_sys_bpf+0xba/0xd0
[  759.364152][T15598]  do_syscall_64+0x166/0x520
[  759.364173][T15598]  ? trace_irq_disable+0x3b/0x140
[  759.364190][T15598]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  759.364207][T15598]  ? clear_bhb_loop+0x70/0xc0
[  759.364227][T15598]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  759.364243][T15598] RIP: 0033:0x7fbbb839e159
[  759.364258][T15598] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  759.364272][T15598] RSP: 002b:00007fbbb929d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  759.364290][T15598] RAX: ffffffffffffffda RBX: 00007fbbb8625fa0 RCX: 00007fbbb839e159
[  759.364303][T15598] RDX: 0000000000000028 RSI: 0000200000000240 RDI: 0000000000000012
[  759.364313][T15598] RBP: 00007fbbb8435024 R08: 0000000000000000 R09: 0000000000000000
[  759.364324][T15598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  759.364333][T15598] R13: 00007fbbb8626038 R14: 00007fbbb8625fa0 R15: 00007ffee823c8d8
[  759.364358][T15598]  </TASK>
[  759.778181][T15603] loop2: detected capacity change from 0 to 24
[  760.765638][T15611] nvme_tcp: malformed address passed: .27.0.0.1:4420
[  761.261307][T15634] overlayfs: missing 'lowerdir'
[  763.599062][T15644] syz_tun: entered allmulticast mode
[  763.745265][T15651] FAULT_INJECTION: forcing a failure.
[  763.745265][T15651] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  763.745306][T15651] CPU: 0 UID: 0 PID: 15651 Comm: syz.0.2878 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  763.745329][T15651] Tainted: [L]=SOFTLOCKUP
[  763.745336][T15651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  763.745347][T15651] Call Trace:
[  763.745353][T15651]  <TASK>
[  763.745361][T15651]  dump_stack_lvl+0xe8/0x150
[  763.745391][T15651]  should_fail_ex+0x3eb/0x540
[  763.745415][T15651]  _copy_from_user+0x2d/0xb0
[  763.745439][T15651]  __sys_bpf+0x2e7/0xd90
[  763.745464][T15651]  ? __pfx___sys_bpf+0x10/0x10
[  763.745484][T15651]  ? do_futex+0x3e7/0x4e0
[  763.745527][T15651]  ? rcu_is_watching+0x16/0xb0
[  763.745551][T15651]  __x64_sys_bpf+0xba/0xd0
[  763.745569][T15651]  do_syscall_64+0x166/0x520
[  763.745591][T15651]  ? trace_irq_disable+0x3b/0x140
[  763.745607][T15651]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  763.745624][T15651]  ? clear_bhb_loop+0x70/0xc0
[  763.745644][T15651]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  763.745660][T15651] RIP: 0033:0x7f04f8d9e159
[  763.745676][T15651] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  763.745690][T15651] RSP: 002b:00007f04f9b8d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  763.745708][T15651] RAX: ffffffffffffffda RBX: 00007f04f9025fa0 RCX: 00007f04f8d9e159
[  763.745720][T15651] RDX: 0000000000000028 RSI: 0000200000000240 RDI: 0000000000000012
[  763.745731][T15651] RBP: 00007f04f8e35024 R08: 0000000000000000 R09: 0000000000000000
[  763.745741][T15651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  763.745751][T15651] R13: 00007f04f9026038 R14: 00007f04f9025fa0 R15: 00007fff05926c98
[  763.745776][T15651]  </TASK>
[  764.169402][    T9] usb 7-1: new full-speed USB device number 25 using dummy_hcd
[  764.329642][    T9] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  764.340858][    T9] usb 7-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  764.340894][    T9] usb 7-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  764.340924][    T9] usb 7-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid maxpacket 169, setting to 64
[  764.340947][    T9] usb 7-1: config 0 interface 0 has no altsetting 0
[  764.395642][    T9] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  764.395676][    T9] usb 7-1: Product: syz
[  764.395699][    T9] usb 7-1: Manufacturer: syz
[  764.395713][    T9] usb 7-1: SerialNumber: syz
[  764.433434][    T9] usb 7-1: config 0 descriptor??
[  764.446809][T15653] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  764.501788][    T9] usb 7-1: selecting invalid altsetting 0
[  764.722158][T15653] loop6: detected capacity change from 0 to 512
[  764.767416][T15653] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002]
[  764.767538][T15653] System zones: 1-12
[  764.787978][T15653] EXT4-fs error (device loop6): ext4_xattr_inode_iget:437: inode #12: comm syz.6.2879: missing EA_INODE flag
[  764.788019][T15653] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  764.788239][    C0] EXT4-fs (loop6): error count since last fsck: 1
[  764.788260][    C0] EXT4-fs (loop6): initial error at time 1788439037: ext4_xattr_inode_iget:437: inode 12
[  764.788294][    C0] EXT4-fs (loop6): last error at time 1788439037: ext4_xattr_inode_iget:437: inode 12
[  764.819898][T15653] EXT4-fs error (device loop6): ext4_xattr_inode_iget:442: comm syz.6.2879: error while reading EA inode 12 err=-117
[  764.819924][T15653] loop6: lost filesystem error report for type 5 error -117
[  764.861830][T15653] EXT4-fs (loop6): 1 orphan inode deleted
[  764.863138][T15653] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  766.133696][T15662] nvme_tcp: malformed address passed: .27.0.0.1:4420
[  766.918142][T15677] overlayfs: missing 'lowerdir'
[  767.313786][ T5722] input: syz0 as /devices/virtual/misc/uhid/0005:057C:0306.0015/input/input50
[  767.397713][ T5722] hid-generic 0005:057C:0306.0015: input,hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0
[  767.575968][T15670] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled
[  767.744977][ T5722] usb 7-1: USB disconnect, device number 25
[  767.771375][T15686] fido_id[15686]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  767.880541][ T9054] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  768.400782][T15697] loop6: detected capacity change from 0 to 32768
[  768.432412][T15697] JBD2: Ignoring recovery information on journal
[  768.500191][T15697] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  768.677204][T15704] syzkaller0: entered promiscuous mode
[  768.683388][T15704] syzkaller0: entered allmulticast mode
[  768.741206][T15704] tipc: Started in network mode
[  768.741247][T15704] tipc: Node identity 8a4e1eedf76a, cluster identity 4711
[  768.741468][T15704] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  768.800387][T15704] tipc: Resetting bearer <eth:syzkaller0>
[  768.824531][T15702] tipc: Resetting bearer <eth:syzkaller0>
[  769.028149][T15702] tipc: Disabling bearer <eth:syzkaller0>
[  769.122376][ T9054] ocfs2: Unmounting device (7,6) on (node local)
[  769.915778][T15722] bond1: entered promiscuous mode
[  770.436519][T15709] loop9: detected capacity change from 0 to 32768
[  770.535045][T15709] JBD2: Ignoring recovery information on journal
[  770.663117][T15709] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode.
[  770.709078][ T5722] usb 7-1: new high-speed USB device number 26 using dummy_hcd
[  770.893205][ T5722] usb 7-1: New USB device found, idVendor=056a, idProduct=0335, bcdDevice= 0.00
[  770.909080][ T5722] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  770.909118][ T5722] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  770.909138][ T5722] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  770.909171][ T5722] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  770.963167][ T5722] usb 7-1: config 0 descriptor??
[  771.305877][T15755] FAULT_INJECTION: forcing a failure.
[  771.305877][T15755] name fail_futex, interval 1, probability 0, space 0, times 0
[  771.305920][T15755] CPU: 0 UID: 0 PID: 15755 Comm: syz.7.2905 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  771.305947][T15755] Tainted: [L]=SOFTLOCKUP
[  771.305953][T15755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  771.305964][T15755] Call Trace:
[  771.305970][T15755]  <TASK>
[  771.305978][T15755]  dump_stack_lvl+0xe8/0x150
[  771.306009][T15755]  should_fail_ex+0x3eb/0x540
[  771.306032][T15755]  get_futex_key+0x1b4/0x1580
[  771.306054][T15755]  ? kasan_save_stack+0x4d/0x60
[  771.306074][T15755]  ? call_rcu+0xee/0x8b0
[  771.306093][T15755]  ? fput_close_sync+0x11f/0x240
[  771.306113][T15755]  ? __x64_sys_close+0x7e/0x110
[  771.306138][T15755]  ? __pfx_get_futex_key+0x10/0x10
[  771.306165][T15755]  futex_wake+0x119/0x5f0
[  771.306195][T15755]  ? __pfx_futex_wake+0x10/0x10
[  771.306230][T15755]  do_futex+0x458/0x4e0
[  771.306249][T15755]  ? call_rcu+0x64d/0x8b0
[  771.306272][T15755]  ? __pfx_do_futex+0x10/0x10
[  771.306299][T15755]  __se_sys_futex+0x3a8/0x450
[  771.306323][T15755]  ? fput_close_sync+0x11f/0x240
[  771.306344][T15755]  ? __pfx___se_sys_futex+0x10/0x10
[  771.306371][T15755]  ? __x64_sys_futex+0x21/0xf0
[  771.306394][T15755]  do_syscall_64+0x166/0x520
[  771.306415][T15755]  ? trace_irq_disable+0x3b/0x140
[  771.306431][T15755]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  771.306447][T15755]  ? clear_bhb_loop+0x70/0xc0
[  771.306467][T15755]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  771.306483][T15755] RIP: 0033:0x7f58e159e159
[  771.306498][T15755] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  771.306512][T15755] RSP: 002b:00007f58e24030e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  771.306530][T15755] RAX: ffffffffffffffda RBX: 00007f58e1825fa8 RCX: 00007f58e159e159
[  771.306542][T15755] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f58e1825fac
[  771.306553][T15755] RBP: 00007f58e1825fa0 R08: 3fffffffffffffff R09: 0000000000000000
[  771.306564][T15755] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000
[  771.306574][T15755] R13: 00007f58e1826038 R14: 00007ffe48b854a0 R15: 00007ffe48b85588
[  771.306599][T15755]  </TASK>
[  771.727124][T14155] ocfs2: Unmounting device (7,9) on (node local)
[  771.856130][ T5722] wacom 0003:056A:0335.0016: hidraw0: USB HID v0.00 Joystick [HID 056a:0335] on usb-dummy_hcd.6-1/input0
[  771.964126][ T5722] usb 7-1: USB disconnect, device number 26
[  772.741097][T15765] fido_id[15765]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory
[  773.395355][T15781] loop2: detected capacity change from 0 to 32768
[  773.413991][T15781] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2911 (15781)
[  773.432271][T15781] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  773.432309][T15781] BTRFS info (device loop2): using sha256 checksum algorithm
[  773.725677][T15783] syz.0.2912 (15783): drop_caches: 2
[  773.896527][T15781] BTRFS info (device loop2): enabling ssd optimizations
[  773.896569][T15781] BTRFS info (device loop2): turning on sync discard
[  773.896592][T15781] BTRFS info (device loop2): enabling free space tree
[  773.896609][T15781] BTRFS info (device loop2): use zlib compression, level 3
[  775.084669][   T32] audit: type=1800 audit(1788439047.435:85): pid=15804 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2911" name="file1" dev="loop2" ino=260 res=0 errno=0
[  775.762144][T14332] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  776.454961][T15829] loop0: detected capacity change from 0 to 32768
[  776.519790][T15829] JBD2: Ignoring recovery information on journal
[  776.569036][T15829] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  777.182584][T15842] netlink: 76 bytes leftover after parsing attributes in process `syz.7.2925'.
[  777.183050][T15842] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2925'.
[  777.219282][T15842] bridge0: port 2(bridge_slave_1) entered disabled state
[  777.219532][T15842] bridge0: port 1(bridge_slave_0) entered disabled state
[  777.457404][T14391] ocfs2: Unmounting device (7,0) on (node local)
[  777.643847][T15849] loop9: detected capacity change from 0 to 512
[  777.819455][T15851] loop0: detected capacity change from 0 to 512
[  777.879056][T15851] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  778.289210][T14391] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  778.911258][    T9] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  779.049845][    T9] usb 1-1: device descriptor read/64, error -71
[  779.290688][    T9] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[  779.429800][    T9] usb 1-1: device descriptor read/64, error -71
[  779.541436][    T9] usb usb1-port1: attempt power cycle
[  779.878640][    T9] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[  779.901294][    T9] usb 1-1: device descriptor read/8, error -71
[  780.193262][T15862] Bluetooth: hci2: command 0x0406 tx timeout
[  780.229277][    T9] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[  780.260184][    T9] usb 1-1: device descriptor read/8, error -71
[  780.368721][    T9] usb usb1-port1: unable to enumerate USB device
[  781.125759][T15917] loop7: detected capacity change from 0 to 32768
[  781.177380][T15917] JBD2: Ignoring recovery information on journal
[  781.221629][T15917] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  781.281937][   T32] audit: type=1800 audit(1788439054.185:86): pid=15917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2946" name="file1" dev="loop7" ino=17058 res=0 errno=0
[  781.305617][   T32] audit: type=1800 audit(1788439054.205:87): pid=15917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2946" name="file1" dev="loop7" ino=17058 res=0 errno=0
[  781.565441][T15926] syz.2.2948 (15926): drop_caches: 2
[  781.760509][ T9610] ocfs2: Unmounting device (7,7) on (node local)
[  782.626164][T15940] bond1: entered promiscuous mode
[  782.928880][    T9] usb 7-1: new high-speed USB device number 27 using dummy_hcd
[  783.198818][    T9] usb 7-1: Using ep0 maxpacket: 32
[  783.254246][T15964] fuse: Bad value for 'group_id'
[  783.254289][T15964] fuse: Bad value for 'group_id'
[  783.501324][    T9] usb 7-1: unable to get BOS descriptor or descriptor too short
[  783.501380][    T9] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  783.511405][    T9] usb 7-1: unable to read config index 0 descriptor/start: -71
[  783.511435][    T9] usb 7-1: can't read configurations, error -71
[  784.212033][ T5624] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11
[  784.461034][   T59] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  784.807197][T16013] overlayfs: missing 'lowerdir'
[  785.326224][T16017] tipc: Started in network mode
[  785.326263][T16017] tipc: Node identity 1ae16fc81d48, cluster identity 4711
[  785.326398][T16017] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  785.354668][T16014] syzkaller0: entered promiscuous mode
[  785.354701][T16014] syzkaller0: entered allmulticast mode
[  785.683655][   T59] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  785.850625][T15993] tipc: Resetting bearer <eth:syzkaller0>
[  785.908808][T16041] fuse: Bad value for 'group_id'
[  785.908840][T16041] fuse: Bad value for 'group_id'
[  786.036790][T15993] tipc: Disabling bearer <eth:syzkaller0>
[  786.269780][   T59] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  786.478782][T16049] loop9: detected capacity change from 0 to 32768
[  786.526596][T16049] JBD2: Ignoring recovery information on journal
[  786.565934][T16049] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode.
[  787.238927][T16060] loop2: detected capacity change from 0 to 32768
[  787.275880][T16060] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2980 (16060)
[  787.317506][   T59] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  787.394251][T16060] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  787.394288][T16060] BTRFS info (device loop2): using sha256 checksum algorithm
[  787.425931][T14155] ocfs2: Unmounting device (7,9) on (node local)
[  787.655882][T16060] BTRFS info (device loop2): enabling ssd optimizations
[  787.655914][T16060] BTRFS info (device loop2): turning on sync discard
[  787.655938][T16060] BTRFS info (device loop2): enabling free space tree
[  787.655954][T16060] BTRFS info (device loop2): use zlib compression, level 3
[  788.010980][   T32] audit: type=1800 audit(2000000005.930:88): pid=16060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2980" name="file1" dev="loop2" ino=260 res=0 errno=0
[  789.004115][T14332] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  789.397571][T16058] loop0: detected capacity change from 0 to 32768
[  789.500734][T16058] JBD2: Ignoring recovery information on journal
[  789.641551][T16106] fuse: Bad value for 'group_id'
[  789.641580][T16106] fuse: Bad value for 'group_id'
[  789.654248][T16058] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  789.689000][ T5722] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  789.850417][ T5722] usb 3-1: Using ep0 maxpacket: 32
[  790.094755][T16084] loop9: detected capacity change from 0 to 32768
[  790.157240][T16084] debugfs: 'B1DE653C5FFC4D88B33B244AAB9EB3E9' already exists in 'ocfs2'
[  790.211153][ T5722] usb 3-1: unable to get BOS descriptor or descriptor too short
[  790.211219][ T5722] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  790.236165][ T5722] usb 3-1: unable to read config index 0 descriptor/start: -71
[  790.236205][ T5722] usb 3-1: can't read configurations, error -71
[  790.255014][T16084] JBD2: Ignoring recovery information on journal
[  790.426573][T16084] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode.
[  790.439615][T15862] Bluetooth: hci3: command 0x0406 tx timeout
[  790.679055][T14391] ocfs2: Unmounting device (7,0) on (node local)
[  791.087863][T14155] ocfs2: Unmounting device (7,9) on (node local)
[  791.846384][T16132] loop0: detected capacity change from 0 to 40427
[  791.879139][T16132] F2FS-fs (loop0): invalid crc value
[  791.936546][T16132] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  791.949827][T16132] F2FS-fs (loop0): f2fs_disable_checkpoint starts, unusable: 0
[  791.950026][T16132] F2FS-fs (loop0): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[  791.950130][T16132] F2FS-fs (loop0): Start checkpoint disabled!
[  791.990559][T16132] F2FS-fs (loop0): f2fs_disable_checkpoint finishes, err:0
[  792.000644][T16132] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  792.793751][T16142] binder_alloc: 16140: binder_alloc_buf, no vma
[  793.671377][    T9] usb 7-1: new high-speed USB device number 29 using dummy_hcd
[  793.831438][    T9] usb 7-1: Using ep0 maxpacket: 32
[  793.839168][    T9] usb 7-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  793.849042][    T9] usb 7-1: config 0 has no interfaces?
[  793.854890][    T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  793.867717][    T9] usb 7-1: config 0 descriptor??
[  794.098955][T16156] FAULT_INJECTION: forcing a failure.
[  794.098955][T16156] name failslab, interval 1, probability 0, space 0, times 0
[  794.117411][T16156] CPU: 0 UID: 0 PID: 16156 Comm: syz.6.2995 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  794.117438][T16156] Tainted: [L]=SOFTLOCKUP
[  794.117445][T16156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  794.117455][T16156] Call Trace:
[  794.117461][T16156]  <TASK>
[  794.117469][T16156]  dump_stack_lvl+0xe8/0x150
[  794.117499][T16156]  should_fail_ex+0x3eb/0x540
[  794.117522][T16156]  should_failslab+0xa8/0x100
[  794.117546][T16156]  __kmalloc_node_track_caller_noprof+0xfb/0x720
[  794.117564][T16156]  ? __lock_acquire+0x6df/0x2e50
[  794.117580][T16156]  ? __kernfs_new_node+0xa9/0x980
[  794.117634][T16156]  ? __kernfs_new_node+0xa9/0x980
[  794.117657][T16156]  kstrdup+0x42/0x100
[  794.117676][T16156]  __kernfs_new_node+0xa9/0x980
[  794.117696][T16156]  ? rcu_is_watching+0x16/0xb0
[  794.117719][T16156]  ? __pfx___kernfs_new_node+0x10/0x10
[  794.117737][T16156]  ? kernfs_root+0x1c/0x230
[  794.117758][T16156]  ? kernfs_root+0x1c/0x230
[  794.117773][T16156]  ? kernfs_root+0x1c/0x230
[  794.117788][T16156]  ? kernfs_root+0x1c/0x230
[  794.117807][T16156]  kernfs_new_node+0xea/0x140
[  794.117828][T16156]  kernfs_create_link+0xa7/0x200
[  794.117853][T16156]  sysfs_do_create_link_sd+0x83/0x110
[  794.117871][T16156]  module_add_driver+0x26e/0x320
[  794.117963][T16156]  bus_add_driver+0x391/0x670
[  794.118007][T16156]  driver_register+0x23a/0x320
[  794.118033][T16156]  usb_gadget_register_driver_owner+0xf9/0x270
[  794.118087][T16156]  raw_ioctl+0x1541/0x41c0
[  794.118155][T16156]  ? tomoyo_path_number_perm+0x219/0x5f0
[  794.118178][T16156]  ? do_vfs_ioctl+0x116f/0x1530
[  794.118203][T16156]  ? __pfx_raw_ioctl+0x10/0x10
[  794.118234][T16156]  ? hook_file_ioctl+0x1f2/0x600
[  794.118269][T16156]  ? __fget_files+0x2a/0x420
[  794.118295][T16156]  ? __fget_files+0x2a/0x420
[  794.118317][T16156]  ? __fget_files+0x3a2/0x420
[  794.118339][T16156]  ? __fget_files+0x2a/0x420
[  794.118365][T16156]  ? bpf_lsm_file_ioctl+0x9/0x20
[  794.118389][T16156]  ? __pfx_raw_ioctl+0x10/0x10
[  794.118410][T16156]  __se_sys_ioctl+0xfc/0x170
[  794.118430][T16156]  do_syscall_64+0x166/0x520
[  794.118451][T16156]  ? trace_irq_disable+0x3b/0x140
[  794.118468][T16156]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  794.118485][T16156]  ? clear_bhb_loop+0x70/0xc0
[  794.118504][T16156]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  794.118521][T16156] RIP: 0033:0x7fbbb839ddeb
[  794.118537][T16156] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[  794.118551][T16156] RSP: 002b:00007fbbb929af00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  794.118569][T16156] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fbbb839ddeb
[  794.118581][T16156] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000005
[  794.118598][T16156] RBP: 00007fbbb929bfd0 R08: 0000000000000001 R09: 00000000ffffffff
[  794.118609][T16156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  794.118619][T16156] R13: 00002000000001c0 R14: 0000000000000002 R15: 0000000000000868
[  794.118643][T16156]  </TASK>
[  794.469027][T16156] bus_add_driver: failed to create module links for raw-gadget.1
[  794.469107][T16156] UDC core: USB Raw Gadget: driver registration failed: -12
[  794.469134][T16156] misc raw-gadget: fail, usb_gadget_register_driver returned -12
[  794.501129][ T5631] usb 7-1: USB disconnect, device number 29
[  795.603041][T16166] loop6: detected capacity change from 0 to 32768
[  795.645423][T16166] XFS (loop6): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  795.744527][T16166] XFS (loop6): Ending clean mount
[  795.839715][ T9054] XFS (loop6): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  796.539172][T16176] loop6: detected capacity change from 0 to 32768
[  796.590044][T16176] JBD2: Ignoring recovery information on journal
[  796.699457][T16176] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  797.036691][ T9054] ocfs2: Unmounting device (7,6) on (node local)
[  797.374549][T16182] loop6: detected capacity change from 0 to 2048
[  798.555206][T16145] tipc: Started in network mode
[  798.562144][T16145] tipc: Node identity c2259eca05cc, cluster identity 4711
[  798.579649][T16145] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  798.587333][T16141] syzkaller0: entered promiscuous mode
[  798.587363][T16141] syzkaller0: entered allmulticast mode
[  798.641340][T16151] tipc: Resetting bearer <eth:syzkaller0>
[  798.863083][T16133] tipc: Resetting bearer <eth:syzkaller0>
[  798.950576][T16133] tipc: Disabling bearer <eth:syzkaller0>
[  799.028127][T16201] loop6: detected capacity change from 0 to 512
[  799.070627][T16201] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2
[  799.108600][  T203] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 20002 - 0
[  799.255410][T16201] EXT4-fs error (device loop6): ext4_get_branch:178: inode #13: block 1024: comm syz.6.3004: invalid block
[  799.255453][T16201] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  799.268985][    C0] EXT4-fs (loop6): error count since last fsck: 1
[  799.269005][    C0] EXT4-fs (loop6): initial error at time 2000000017: ext4_get_branch:178: inode 13: block 1024
[  799.269033][    C0] EXT4-fs (loop6): last error at time 2000000017: ext4_get_branch:178: inode 13: block 1024
[  799.356998][T16201] EXT4-fs (loop6): Remounting filesystem read-only
[  799.387870][T16201] EXT4-fs (loop6): 1 truncate cleaned up
[  799.410294][T16201] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  799.668506][ T9054] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  800.951650][T16209] loop0: detected capacity change from 0 to 32768
[  800.993234][   T59] bond1 (unregistering): (slave geneve2): Releasing backup interface
[  801.013343][T16209] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  801.093445][T16209] XFS (loop0): Ending clean mount
[  801.140229][T16221] loop6: detected capacity change from 0 to 32768
[  801.162826][   T59] bond0 (unregistering): Released all slaves
[  801.221255][   T59] bond1 (unregistering): Released all slaves
[  801.257147][T16221] JBD2: Ignoring recovery information on journal
[  801.321891][   T59] bond2 (unregistering): Released all slaves
[  801.459035][ T8132] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 20002 - 0
[  801.469443][ T8132] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 20002 - 0
[  801.469493][ T8132] netdevsim netdevsim5 eth4: set [1, 0] type 2 family 0 port 20002 - 0
[  801.503661][T16221] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  801.541479][T14391] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  802.161078][   T59] tipc: Disabling bearer <eth:team0>
[  802.192502][   T59] tipc: Left network mode
[  802.504150][T16271] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3014'.
[  802.716120][ T9054] ocfs2: Unmounting device (7,6) on (node local)
[  802.803009][T16278] loop7: detected capacity change from 0 to 1024
[  802.803759][T16278] EXT4-fs: Ignoring removed bh option
[  802.886951][T16278] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  803.135749][T16290] EXT4-fs (loop7): shut down requested (1)
[  803.322842][   T59] hsr_slave_0: left promiscuous mode
[  803.347360][   T59] hsr_slave_1: left promiscuous mode
[  803.448303][ T5631] usb 3-1: new full-speed USB device number 33 using dummy_hcd
[  803.473731][   T59] veth1_macvtap: left promiscuous mode
[  803.482935][   T59] veth0_macvtap: left promiscuous mode
[  803.492159][   T59] veth1_vlan: left promiscuous mode
[  803.582846][ T9610] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  803.620398][ T5631] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  803.640118][ T5631] usb 3-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  803.640163][ T5631] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  803.640186][ T5631] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid maxpacket 169, setting to 64
[  803.640212][ T5631] usb 3-1: config 0 interface 0 has no altsetting 0
[  803.705203][ T5631] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  803.705240][ T5631] usb 3-1: Product: syz
[  803.705264][ T5631] usb 3-1: Manufacturer: syz
[  803.705279][ T5631] usb 3-1: SerialNumber: syz
[  803.735598][ T5631] usb 3-1: config 0 descriptor??
[  803.741277][T16294] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  803.807099][ T5631] usb 3-1: selecting invalid altsetting 0
[  804.009445][T16294] loop2: detected capacity change from 0 to 512
[  804.050989][T16294] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002]
[  804.051481][T16294] System zones: 1-12
[  804.075587][T16294] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: inode #12: comm syz.2.3019: missing EA_INODE flag
[  804.075620][T16294] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  804.088601][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  804.088621][    C0] EXT4-fs (loop2): initial error at time 2000000022: ext4_xattr_inode_iget:437: inode 12
[  804.088644][    C0] EXT4-fs (loop2): last error at time 2000000022: ext4_xattr_inode_iget:437: inode 12
[  804.101540][T16294] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.3019: error while reading EA inode 12 err=-117
[  804.101565][T16294] loop2: lost filesystem error report for type 5 error -117
[  804.101848][T16294] EXT4-fs (loop2): 1 orphan inode deleted
[  804.244268][T16294] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  806.027256][ T5631] usb 3-1: USB disconnect, device number 33
[  806.293087][T16320] FAULT_INJECTION: forcing a failure.
[  806.293087][T16320] name failslab, interval 1, probability 0, space 0, times 0
[  806.306764][T16320] CPU: 0 UID: 0 PID: 16320 Comm: syz.7.3022 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  806.306797][T16320] Tainted: [L]=SOFTLOCKUP
[  806.306806][T16320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  806.306820][T16320] Call Trace:
[  806.306827][T16320]  <TASK>
[  806.306835][T16320]  dump_stack_lvl+0xe8/0x150
[  806.306877][T16320]  should_fail_ex+0x3eb/0x540
[  806.306900][T16320]  should_failslab+0xa8/0x100
[  806.306925][T16320]  __kmalloc_noprof+0xfe/0x720
[  806.306950][T16320]  ? group_cpus_evenly+0xcf/0x5e0
[  806.306975][T16320]  ? group_cpus_evenly+0xcf/0x5e0
[  806.307006][T16320]  group_cpus_evenly+0xcf/0x5e0
[  806.307033][T16320]  ? __pfx_group_cpus_evenly+0x10/0x10
[  806.307069][T16320]  blk_mq_map_queues+0xb1/0x490
[  806.307090][T16320]  ? trace_kmalloc+0x2a/0xf0
[  806.307108][T16320]  ? __pfx_blk_mq_map_queues+0x10/0x10
[  806.307127][T16320]  ? __kmalloc_node_noprof+0x2f0/0x720
[  806.307142][T16320]  ? blk_mq_alloc_tag_set+0x5f8/0x1000
[  806.307163][T16320]  ? blk_mq_update_queue_map+0x383/0x450
[  806.307190][T16320]  blk_mq_alloc_tag_set+0x8dd/0x1000
[  806.307221][T16320]  loop_add+0x436/0xb40
[  806.307247][T16320]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  806.307268][T16320]  ? __pfx_loop_add+0x10/0x10
[  806.307317][T16320]  loop_control_ioctl+0x12b/0x5a0
[  806.307342][T16320]  ? __fget_files+0x2a/0x420
[  806.307372][T16320]  ? __pfx_loop_control_ioctl+0x10/0x10
[  806.307395][T16320]  ? __fget_files+0x2a/0x420
[  806.307421][T16320]  ? bpf_lsm_file_ioctl+0x9/0x20
[  806.307448][T16320]  ? __pfx_loop_control_ioctl+0x10/0x10
[  806.307472][T16320]  __se_sys_ioctl+0xfc/0x170
[  806.307492][T16320]  do_syscall_64+0x166/0x520
[  806.307516][T16320]  ? trace_irq_disable+0x3b/0x140
[  806.307532][T16320]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  806.307550][T16320]  ? clear_bhb_loop+0x70/0xc0
[  806.307570][T16320]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  806.307586][T16320] RIP: 0033:0x7f58e159e159
[  806.307602][T16320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  806.307616][T16320] RSP: 002b:00007f58e2403028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  806.307634][T16320] RAX: ffffffffffffffda RBX: 00007f58e1825fa0 RCX: 00007f58e159e159
[  806.307647][T16320] RDX: 0000000007000000 RSI: 0000000000004c80 RDI: 0000000000000004
[  806.307657][T16320] RBP: 00007f58e1635024 R08: 0000000000000000 R09: 0000000000000000
[  806.307668][T16320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  806.307677][T16320] R13: 00007f58e1826038 R14: 00007f58e1825fa0 R15: 00007ffe48b85588
[  806.307703][T16320]  </TASK>
[  807.010418][T14332] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  807.316933][T16330] loop9: detected capacity change from 0 to 40427
[  807.338999][T16330] F2FS-fs (loop9): invalid crc value
[  807.394753][T16330] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  807.408155][T16330] F2FS-fs (loop9): f2fs_disable_checkpoint starts, unusable: 0
[  807.409373][T16330] F2FS-fs (loop9): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[  807.409410][T16330] F2FS-fs (loop9): Start checkpoint disabled!
[  807.426595][T16330] F2FS-fs (loop9): f2fs_disable_checkpoint finishes, err:0
[  807.441449][T16330] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6
[  807.747247][   T59] vlan0 (unregistering): left allmulticast mode
[  807.756225][   T59] veth0_vlan (unregistering): left allmulticast mode
[  807.796686][   T59] team0 (unregistering): Port device vlan0 removed
[  808.786006][T16335] loop2: detected capacity change from 0 to 32768
[  808.833801][ T1310] ieee802154 phy1 wpan1: encryption failed: -22
[  809.018053][T16335] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  809.103273][T16313] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  809.201143][T16335] XFS (loop2): Ending clean mount
[  809.337637][T16370] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3027'.
[  809.337669][T16370] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3027'.
[  809.678137][T14332] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  810.122551][   T59] IPVS: stop unused estimator thread 0...
[  810.366913][T16384] loop6: detected capacity change from 0 to 32768
[  810.416884][T16384] JBD2: Ignoring recovery information on journal
[  810.465765][T16384] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  810.507403][   T32] audit: type=1800 audit(2000000028.450:89): pid=16384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3031" name="file1" dev="loop6" ino=17058 res=0 errno=0
[  810.530696][   T32] audit: type=1800 audit(2000000028.480:90): pid=16384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3031" name="file1" dev="loop6" ino=17058 res=0 errno=0
[  811.073195][ T9054] ocfs2: Unmounting device (7,6) on (node local)
[  811.779372][T16408] loop9: detected capacity change from 0 to 32768
[  811.805398][T16408] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.3038 (16408)
[  811.898347][T16408] BTRFS info (device loop9): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  811.898384][T16408] BTRFS info (device loop9): using sha256 checksum algorithm
[  812.163331][T16408] BTRFS info (device loop9): enabling ssd optimizations
[  812.163365][T16408] BTRFS info (device loop9): turning on sync discard
[  812.163389][T16408] BTRFS info (device loop9): enabling free space tree
[  812.163406][T16408] BTRFS info (device loop9): use zlib compression, level 3
[  812.281205][   T32] audit: type=1800 audit(2000000030.190:91): pid=16408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3038" name="file1" dev="loop9" ino=260 res=0 errno=0
[  812.895751][T14155] BTRFS info (device loop9): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  813.331766][T16443] loop0: detected capacity change from 0 to 32768
[  813.375796][T16443] JBD2: Ignoring recovery information on journal
[  813.409110][T16443] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  813.456817][   T32] audit: type=1800 audit(2000000031.400:92): pid=16443 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3045" name="file1" dev="loop0" ino=17058 res=0 errno=0
[  813.483328][   T32] audit: type=1800 audit(2000000031.430:93): pid=16443 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3045" name="file1" dev="loop0" ino=17058 res=0 errno=0
[  813.941329][T14391] ocfs2: Unmounting device (7,0) on (node local)
[  814.418925][T16416] loop7: detected capacity change from 0 to 32768
[  814.502217][ T5631] input: syz0 as /devices/virtual/misc/uhid/0005:057C:0306.0017/input/input54
[  814.529879][T16416] XFS (loop7): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  814.689628][T16416] XFS (loop7): Ending clean mount
[  814.804007][ T5631] hid-generic 0005:057C:0306.0017: input,hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0
[  815.006873][ T9610] XFS (loop7): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  815.216650][T16472] fido_id[16472]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  816.129570][ T5624] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11
[  816.479015][T16497] netlink: 'syz.2.3057': attribute type 4 has an invalid length.
[  817.587163][T16516] loop2: detected capacity change from 0 to 40427
[  817.605369][T16516] F2FS-fs (loop2): invalid crc value
[  817.662941][T16516] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  817.676123][T16516] F2FS-fs (loop2): f2fs_disable_checkpoint starts, unusable: 0
[  817.676159][T16516] F2FS-fs (loop2): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[  817.676189][T16516] F2FS-fs (loop2): Start checkpoint disabled!
[  817.695467][T16516] F2FS-fs (loop2): f2fs_disable_checkpoint finishes, err:0
[  817.695724][T16516] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  817.920331][T16525] loop9: detected capacity change from 0 to 512
[  818.010825][   T32] audit: type=1800 audit(2000000035.960:94): pid=16525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3066" name="file1" dev="loop9" ino=1048783 res=0 errno=0
[  818.210781][T16525] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 50)
[  818.761375][T16534] FAULT_INJECTION: forcing a failure.
[  818.761375][T16534] name failslab, interval 1, probability 0, space 0, times 0
[  818.761414][T16534] CPU: 0 UID: 0 PID: 16534 Comm: syz.0.3069 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  818.761438][T16534] Tainted: [L]=SOFTLOCKUP
[  818.761444][T16534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  818.761454][T16534] Call Trace:
[  818.761461][T16534]  <TASK>
[  818.761469][T16534]  dump_stack_lvl+0xe8/0x150
[  818.761500][T16534]  should_fail_ex+0x3eb/0x540
[  818.761523][T16534]  should_failslab+0xa8/0x100
[  818.761550][T16534]  ? radix_tree_node_alloc+0x82/0x3a0
[  818.761571][T16534]  kmem_cache_alloc_noprof+0xa1/0x600
[  818.761599][T16534]  ? look_up_lock_class+0x57/0x110
[  818.761620][T16534]  ? radix_tree_node_alloc+0x82/0x3a0
[  818.761645][T16534]  radix_tree_node_alloc+0x82/0x3a0
[  818.761669][T16534]  idr_get_free+0x28f/0xa10
[  818.761698][T16534]  idr_alloc_u32+0x18a/0x330
[  818.761799][T16534]  ? __pfx_idr_alloc_u32+0x10/0x10
[  818.761824][T16534]  ? net_generic+0x1e/0x240
[  818.761846][T16534]  ? l2tp_session_register+0xd7/0x11a0
[  818.761868][T16534]  l2tp_session_register+0x187/0x11a0
[  818.761887][T16534]  ? __pfx___mutex_lock+0x10/0x10
[  818.761922][T16534]  ? __pfx_l2tp_session_register+0x10/0x10
[  818.761950][T16534]  pppol2tp_connect+0xda1/0x18b0
[  818.761982][T16534]  ? __pfx_pppol2tp_connect+0x10/0x10
[  818.762003][T16534]  ? lock_acquire+0x115/0x350
[  818.762026][T16534]  ? __pfx_aa_sk_perm+0x10/0x10
[  818.762051][T16534]  ? apparmor_socket_connect+0x13e/0x210
[  818.762072][T16534]  ? bpf_lsm_socket_connect+0x9/0x20
[  818.762097][T16534]  __sys_connect+0x316/0x450
[  818.762124][T16534]  ? __pfx___sys_connect+0x10/0x10
[  818.762154][T16534]  ? rcu_is_watching+0x16/0xb0
[  818.762181][T16534]  __x64_sys_connect+0x7a/0x90
[  818.762203][T16534]  do_syscall_64+0x166/0x520
[  818.762225][T16534]  ? trace_irq_disable+0x3b/0x140
[  818.762241][T16534]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  818.762258][T16534]  ? clear_bhb_loop+0x70/0xc0
[  818.762278][T16534]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  818.762294][T16534] RIP: 0033:0x7f04f8d9e159
[  818.762310][T16534] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  818.762324][T16534] RSP: 002b:00007f04f9b8d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  818.762342][T16534] RAX: ffffffffffffffda RBX: 00007f04f9025fa0 RCX: 00007f04f8d9e159
[  818.762354][T16534] RDX: 000000000000002e RSI: 0000200000000000 RDI: 0000000000000005
[  818.762365][T16534] RBP: 00007f04f8e35024 R08: 0000000000000000 R09: 0000000000000000
[  818.762375][T16534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  818.762385][T16534] R13: 00007f04f9026038 R14: 00007f04f9025fa0 R15: 00007fff05926c98
[  818.762410][T16534]  </TASK>
[  819.219556][T16514] syzkaller1: entered promiscuous mode
[  819.219588][T16514] syzkaller1: entered allmulticast mode
[  819.542145][ T5279] 8021q: adding VLAN 0 to HW filter on device eth1
[  819.750142][ T5722] usb 10-1: new full-speed USB device number 7 using dummy_hcd
[  819.912902][ T5722] usb 10-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00
[  819.928422][ T5722] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  819.928477][ T5722] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  819.928506][ T5722] usb 10-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  819.928540][ T5722] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  820.276077][ T5722] dvb_ttusb_budget: ttusb_init_controller: error
[  820.286461][ T5722] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  822.239741][ T5722] DVB: Unable to find symbol stv0299_attach()
[  822.320254][T16556] rnbd_client L610: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0)
[  822.331356][T16556] rtrs_client L2095: <s+>: Failed to resolve address, err: -ENODEV
[  822.331879][T16556] rtrs_client L2638: <s+>: init_conns() failed: err=-ENODEV path=<invalid address family>@ip:127.0.0.1 [:0]
[  822.491159][ T5722] DVB: Unable to find symbol tda8083_attach()
[  822.491185][ T5722] dvb_ttusb_budget: no frontend driver found for device [0b48:1003]
[  822.518532][ T5722] usb 10-1: USB disconnect, device number 7
[  822.757877][T16574] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3077'.
[  824.010123][ T5279] 8021q: adding VLAN 0 to HW filter on device eth2
[  824.896293][T16591] loop6: detected capacity change from 0 to 32768
[  824.936692][T16591] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  824.973894][T16598] syzkaller1: entered promiscuous mode
[  824.973927][T16598] syzkaller1: entered allmulticast mode
[  825.040985][T16591] XFS (loop6): Ending clean mount
[  825.182587][T16633] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3090'.
[  826.049444][ T9054] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  826.123011][T16651] overlay: Unknown parameter '/'
[  826.394465][T16646] nvme_tcp: malformed address passed: .27.0.0.1:4420
[  826.587080][T16660] overlayfs: missing 'lowerdir'
[  826.758810][ T5722] usb 3-1: new full-speed USB device number 34 using dummy_hcd
[  826.922934][ T5722] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  826.934530][ T5722] usb 3-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  826.934566][ T5722] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  826.934597][ T5722] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid maxpacket 169, setting to 64
[  826.934619][ T5722] usb 3-1: config 0 interface 0 has no altsetting 0
[  826.988129][ T5722] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  826.988164][ T5722] usb 3-1: Product: syz
[  826.988681][ T5722] usb 3-1: Manufacturer: syz
[  826.988697][ T5722] usb 3-1: SerialNumber: syz
[  827.023419][ T5722] usb 3-1: config 0 descriptor??
[  827.029638][T16661] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  827.065948][ T5722] usb 3-1: selecting invalid altsetting 0
[  827.125159][ T5279] 8021q: adding VLAN 0 to HW filter on device eth3
[  827.284030][T16661] loop2: detected capacity change from 0 to 512
[  827.365293][T16661] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002]
[  827.365400][T16661] System zones: 1-12
[  827.396938][T16661] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: inode #12: comm syz.2.3099: missing EA_INODE flag
[  827.396972][T16661] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  827.408763][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  827.408781][    C0] EXT4-fs (loop2): initial error at time 2000000045: ext4_xattr_inode_iget:437: inode 12
[  827.408803][    C0] EXT4-fs (loop2): last error at time 2000000045: ext4_xattr_inode_iget:437: inode 12
[  827.453346][T16661] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.3099: error while reading EA inode 12 err=-117
[  827.453375][T16661] loop2: lost filesystem error report for type 5 error -117
[  827.470290][T16661] EXT4-fs (loop2): 1 orphan inode deleted
[  827.471568][T16661] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  829.987909][T16693] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  830.137970][T16682] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled
[  830.138453][T16682] snd-usb-audio 3-1:0.0: Runtime PM usage count underflow!
[  830.212493][ T5722] usb 3-1: USB disconnect, device number 34
[  830.264548][T14332] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  830.462333][ T5279] 8021q: adding VLAN 0 to HW filter on device eth4
[  830.505486][T16685] syzkaller1: entered promiscuous mode
[  830.511363][T16685] syzkaller1: entered allmulticast mode
[  830.910097][T16712] FAULT_INJECTION: forcing a failure.
[  830.910097][T16712] name failslab, interval 1, probability 0, space 0, times 0
[  830.910136][T16712] CPU: 0 UID: 0 PID: 16712 Comm: syz.6.3113 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  830.910159][T16712] Tainted: [L]=SOFTLOCKUP
[  830.910165][T16712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  830.910176][T16712] Call Trace:
[  830.910183][T16712]  <TASK>
[  830.910190][T16712]  dump_stack_lvl+0xe8/0x150
[  830.910219][T16712]  should_fail_ex+0x3eb/0x540
[  830.910242][T16712]  should_failslab+0xa8/0x100
[  830.910264][T16712]  ? do_getname+0x2e/0x250
[  830.910285][T16712]  kmem_cache_alloc_noprof+0xa1/0x600
[  830.910310][T16712]  ? __pfx_do_futex+0x10/0x10
[  830.910331][T16712]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  830.910353][T16712]  ? do_getname+0x2e/0x250
[  830.910378][T16712]  do_getname+0x2e/0x250
[  830.910397][T16712]  ? getname_flags+0x11/0x20
[  830.910419][T16712]  ksys_truncate+0xa0/0x1c0
[  830.910435][T16712]  ? __pfx_ksys_truncate+0x10/0x10
[  830.910459][T16712]  __x64_sys_truncate+0x5b/0x70
[  830.910475][T16712]  do_syscall_64+0x166/0x520
[  830.910495][T16712]  ? trace_irq_disable+0x3b/0x140
[  830.910511][T16712]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  830.910528][T16712]  ? clear_bhb_loop+0x70/0xc0
[  830.910547][T16712]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  830.910563][T16712] RIP: 0033:0x7fbbb839e159
[  830.910581][T16712] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  830.910596][T16712] RSP: 002b:00007fbbb929d028 EFLAGS: 00000246 ORIG_RAX: 000000000000004c
[  830.910613][T16712] RAX: ffffffffffffffda RBX: 00007fbbb8625fa0 RCX: 00007fbbb839e159
[  830.910625][T16712] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000000
[  830.910635][T16712] RBP: 00007fbbb8435024 R08: 0000000000000000 R09: 0000000000000000
[  830.910645][T16712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  830.910655][T16712] R13: 00007fbbb8626038 R14: 00007fbbb8625fa0 R15: 00007ffee823c8d8
[  830.910679][T16712]  </TASK>
[  831.256245][T16705] nvme_tcp: malformed address passed: .27.0.0.1:4420
[  831.815153][T16723] loop6: detected capacity change from 0 to 4096
[  831.883141][T16733] Bluetooth: MGMT ver 1.23
[  832.114093][T16723] ntfs3(loop6): ino=5, "/" The size of extended attributes must not exceed 64KiB
[  832.384786][T16742] FAULT_INJECTION: forcing a failure.
[  832.384786][T16742] name failslab, interval 1, probability 0, space 0, times 0
[  832.384825][T16742] CPU: 0 UID: 0 PID: 16742 Comm: syz.0.3121 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  832.384848][T16742] Tainted: [L]=SOFTLOCKUP
[  832.384855][T16742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  832.384865][T16742] Call Trace:
[  832.384872][T16742]  <TASK>
[  832.384879][T16742]  dump_stack_lvl+0xe8/0x150
[  832.384909][T16742]  should_fail_ex+0x3eb/0x540
[  832.384931][T16742]  should_failslab+0xa8/0x100
[  832.384955][T16742]  __kmalloc_cache_node_noprof+0xaa/0x620
[  832.384974][T16742]  ? __raw_spin_lock_init+0x45/0x100
[  832.384996][T16742]  ? sbitmap_queue_init_node+0x1dc/0x4d0
[  832.385020][T16742]  ? sbitmap_queue_init_node+0x1dc/0x4d0
[  832.385048][T16742]  ? __init_waitqueue_head+0xa8/0x150
[  832.385072][T16742]  sbitmap_queue_init_node+0x1dc/0x4d0
[  832.385099][T16742]  blk_mq_init_tags+0x1a3/0x2d0
[  832.385118][T16742]  blk_mq_alloc_map_and_rqs+0xbc/0x980
[  832.385139][T16742]  ? kfree+0x1c5/0x650
[  832.385162][T16742]  ? blk_mq_map_queues+0x3ea/0x490
[  832.385185][T16742]  ? blk_mq_map_queues+0x3ea/0x490
[  832.385207][T16742]  blk_mq_alloc_set_map_and_rqs+0x1a0/0x810
[  832.385238][T16742]  blk_mq_alloc_tag_set+0x8e5/0x1000
[  832.385269][T16742]  loop_add+0x436/0xb40
[  832.385293][T16742]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  832.385314][T16742]  ? __pfx_loop_add+0x10/0x10
[  832.385365][T16742]  loop_control_ioctl+0x12b/0x5a0
[  832.385390][T16742]  ? __fget_files+0x2a/0x420
[  832.385414][T16742]  ? __pfx_loop_control_ioctl+0x10/0x10
[  832.385437][T16742]  ? __fget_files+0x2a/0x420
[  832.385463][T16742]  ? bpf_lsm_file_ioctl+0x9/0x20
[  832.385487][T16742]  ? __pfx_loop_control_ioctl+0x10/0x10
[  832.385511][T16742]  __se_sys_ioctl+0xfc/0x170
[  832.385531][T16742]  do_syscall_64+0x166/0x520
[  832.385552][T16742]  ? trace_irq_disable+0x3b/0x140
[  832.385568][T16742]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  832.385585][T16742]  ? clear_bhb_loop+0x70/0xc0
[  832.385605][T16742]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  832.385621][T16742] RIP: 0033:0x7f04f8d9e159
[  832.385636][T16742] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  832.385650][T16742] RSP: 002b:00007f04f9b8d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  832.385667][T16742] RAX: ffffffffffffffda RBX: 00007f04f9025fa0 RCX: 00007f04f8d9e159
[  832.385680][T16742] RDX: 0000000007000000 RSI: 0000000000004c80 RDI: 0000000000000004
[  832.385690][T16742] RBP: 00007f04f8e35024 R08: 0000000000000000 R09: 0000000000000000
[  832.385701][T16742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  832.385711][T16742] R13: 00007f04f9026038 R14: 00007f04f9025fa0 R15: 00007fff05926c98
[  832.385735][T16742]  </TASK>
[  832.713958][T16742] blk-mq: reduced tag depth (128 -> 64)
[  832.831596][T16744] loop7: detected capacity change from 0 to 2048
[  832.918151][T16744] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  832.933674][T16744] ext4 filesystem being mounted at /383/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  833.188515][T16755] FAULT_INJECTION: forcing a failure.
[  833.188515][T16755] name failslab, interval 1, probability 0, space 0, times 0
[  833.188555][T16755] CPU: 0 UID: 0 PID: 16755 Comm: syz.2.3125 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  833.188578][T16755] Tainted: [L]=SOFTLOCKUP
[  833.188585][T16755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  833.188595][T16755] Call Trace:
[  833.188602][T16755]  <TASK>
[  833.188610][T16755]  dump_stack_lvl+0xe8/0x150
[  833.188640][T16755]  should_fail_ex+0x3eb/0x540
[  833.188664][T16755]  should_failslab+0xa8/0x100
[  833.188685][T16755]  ? do_getname+0x2e/0x250
[  833.188707][T16755]  kmem_cache_alloc_noprof+0xa1/0x600
[  833.188732][T16755]  ? __pfx_do_futex+0x10/0x10
[  833.188763][T16755]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  833.188785][T16755]  ? do_getname+0x2e/0x250
[  833.188811][T16755]  do_getname+0x2e/0x250
[  833.188830][T16755]  ? getname_flags+0x11/0x20
[  833.188852][T16755]  ksys_truncate+0xa0/0x1c0
[  833.188869][T16755]  ? __pfx_ksys_truncate+0x10/0x10
[  833.188892][T16755]  __x64_sys_truncate+0x5b/0x70
[  833.188909][T16755]  do_syscall_64+0x166/0x520
[  833.188930][T16755]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  833.188947][T16755]  ? clear_bhb_loop+0x70/0xc0
[  833.188966][T16755]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  833.188982][T16755] RIP: 0033:0x7f2aefd9e159
[  833.188997][T16755] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  833.189011][T16755] RSP: 002b:00007f2af0cd3028 EFLAGS: 00000246 ORIG_RAX: 000000000000004c
[  833.189029][T16755] RAX: ffffffffffffffda RBX: 00007f2af0025fa0 RCX: 00007f2aefd9e159
[  833.189041][T16755] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000000
[  833.189051][T16755] RBP: 00007f2aefe35024 R08: 0000000000000000 R09: 0000000000000000
[  833.189061][T16755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  833.189071][T16755] R13: 00007f2af0026038 R14: 00007f2af0025fa0 R15: 00007ffe313595d8
[  833.189095][T16755]  </TASK>
[  833.566375][ T9610] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  834.243706][T16772] nvme_tcp: malformed address passed: .27.0.0.1:4420
[  837.652318][T16815] loop7: detected capacity change from 0 to 4096
[  837.664637][T16815] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512).
[  838.072044][T16815] ntfs3(loop7): ino=3, ntfs_set_state failed, -22.
[  838.072125][T16815] ntfs3(loop7): Failed to load $Extend (-22).
[  838.072151][T16815] ntfs3(loop7): Failed to initialize $Extend.
[  838.236628][T16815] ntfs3(loop7): ino=5, "/" indx_read_ra
[  838.446486][ T5821] ntfs3(loop7): ino=3, ntfs3_write_inode failed, -22.
[  838.461416][ T9610] ntfs3(loop7): ino=3, ntfs_set_state failed, -22.
[  838.508096][ T9610] ntfs3(loop7): Mark volume as dirty due to NTFS errors
[  838.594831][ T9610] ntfs3(loop7): ino=3, ntfs_set_state failed, -22.
[  838.594958][ T5821] ntfs3(loop7): ino=3, ntfs3_write_inode failed, -22.
[  841.166097][T16853] nvme_tcp: malformed address passed: .27.0.0.1:4420
[  841.718900][ T5807] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[  841.888336][ T5807] usb 10-1: Using ep0 maxpacket: 32
[  842.154550][ T5807] usb 10-1: unable to get BOS descriptor or descriptor too short
[  842.154603][ T5807] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  842.174281][ T5807] usb 10-1: unable to read config index 0 descriptor/start: -71
[  842.174310][ T5807] usb 10-1: can't read configurations, error -71
[  845.307829][T16916] FAULT_INJECTION: forcing a failure.
[  845.307829][T16916] name failslab, interval 1, probability 0, space 0, times 0
[  845.307878][T16916] CPU: 0 UID: 0 PID: 16916 Comm: syz.6.3172 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  845.307902][T16916] Tainted: [L]=SOFTLOCKUP
[  845.307908][T16916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  845.307918][T16916] Call Trace:
[  845.307925][T16916]  <TASK>
[  845.307932][T16916]  dump_stack_lvl+0xe8/0x150
[  845.307962][T16916]  should_fail_ex+0x3eb/0x540
[  845.307985][T16916]  should_failslab+0xa8/0x100
[  845.308008][T16916]  ? radix_tree_node_alloc+0x82/0x3a0
[  845.308030][T16916]  kmem_cache_alloc_noprof+0xa1/0x600
[  845.308056][T16916]  ? look_up_lock_class+0x57/0x110
[  845.308081][T16916]  ? radix_tree_node_alloc+0x82/0x3a0
[  845.308106][T16916]  radix_tree_node_alloc+0x82/0x3a0
[  845.308131][T16916]  idr_get_free+0x28f/0xa10
[  845.308160][T16916]  idr_alloc_u32+0x18a/0x330
[  845.308189][T16916]  ? __pfx_idr_alloc_u32+0x10/0x10
[  845.308213][T16916]  ? net_generic+0x1e/0x240
[  845.308235][T16916]  ? l2tp_session_register+0xd7/0x11a0
[  845.308256][T16916]  l2tp_session_register+0x187/0x11a0
[  845.308275][T16916]  ? __pfx___mutex_lock+0x10/0x10
[  845.308302][T16916]  ? __pfx_l2tp_session_register+0x10/0x10
[  845.308329][T16916]  pppol2tp_connect+0xda1/0x18b0
[  845.308361][T16916]  ? __pfx_pppol2tp_connect+0x10/0x10
[  845.308381][T16916]  ? lock_acquire+0x115/0x350
[  845.308403][T16916]  ? __pfx_aa_sk_perm+0x10/0x10
[  845.308427][T16916]  ? apparmor_socket_connect+0x13e/0x210
[  845.308448][T16916]  ? bpf_lsm_socket_connect+0x9/0x20
[  845.308472][T16916]  __sys_connect+0x316/0x450
[  845.308497][T16916]  ? __pfx___sys_connect+0x10/0x10
[  845.308527][T16916]  ? rcu_is_watching+0x16/0xb0
[  845.308554][T16916]  __x64_sys_connect+0x7a/0x90
[  845.308576][T16916]  do_syscall_64+0x166/0x520
[  845.308597][T16916]  ? trace_irq_disable+0x3b/0x140
[  845.308613][T16916]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  845.308630][T16916]  ? clear_bhb_loop+0x70/0xc0
[  845.308650][T16916]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  845.308666][T16916] RIP: 0033:0x7fbbb839e159
[  845.308681][T16916] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  845.308696][T16916] RSP: 002b:00007fbbb929d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  845.308714][T16916] RAX: ffffffffffffffda RBX: 00007fbbb8625fa0 RCX: 00007fbbb839e159
[  845.308726][T16916] RDX: 000000000000002e RSI: 0000200000000000 RDI: 0000000000000005
[  845.308737][T16916] RBP: 00007fbbb8435024 R08: 0000000000000000 R09: 0000000000000000
[  845.308747][T16916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  845.308757][T16916] R13: 00007fbbb8626038 R14: 00007fbbb8625fa0 R15: 00007ffee823c8d8
[  845.308783][T16916]  </TASK>
[  846.493535][T16906] loop0: detected capacity change from 0 to 32768
[  847.484356][T16906] JBD2: Ignoring recovery information on journal
[  847.671221][T16937] loop6: detected capacity change from 0 to 32768
[  847.714311][T16937] debugfs: 'B1DE653C5FFC4D88B33B244AAB9EB3E9' already exists in 'ocfs2'
[  847.729058][T16937] JBD2: Ignoring recovery information on journal
[  847.770253][T16937] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  848.004533][T16906] JBD2: journal reset failed
[  848.004558][T16906] (syz.0.3169,16906,0):ocfs2_journal_load:1165 ERROR: Failed to load journal!
[  848.004587][T16906] (syz.0.3169,16906,0):ocfs2_check_volume:2394 ERROR: ocfs2 journal load failed! -4
[  848.439725][ T9054] ocfs2: Unmounting device (7,6) on (node local)
[  848.644216][T16960] loop2: detected capacity change from 0 to 128
[  848.825963][T16961] bond3: entered promiscuous mode
[  850.889417][T16944] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  851.005069][T16986] loop7: detected capacity change from 0 to 256
[  851.365067][T16990] FAULT_INJECTION: forcing a failure.
[  851.365067][T16990] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  851.365108][T16990] CPU: 0 UID: 0 PID: 16990 Comm: syz.0.3193 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  851.365132][T16990] Tainted: [L]=SOFTLOCKUP
[  851.365138][T16990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  851.365149][T16990] Call Trace:
[  851.365155][T16990]  <TASK>
[  851.365163][T16990]  dump_stack_lvl+0xe8/0x150
[  851.365203][T16990]  should_fail_ex+0x3eb/0x540
[  851.365226][T16990]  _copy_from_user+0x2d/0xb0
[  851.365250][T16990]  __sys_bpf+0x2e7/0xd90
[  851.365275][T16990]  ? __pfx___sys_bpf+0x10/0x10
[  851.365295][T16990]  ? do_futex+0x3e7/0x4e0
[  851.365339][T16990]  ? rcu_is_watching+0x16/0xb0
[  851.365364][T16990]  __x64_sys_bpf+0xba/0xd0
[  851.365383][T16990]  do_syscall_64+0x166/0x520
[  851.365404][T16990]  ? trace_irq_disable+0x3b/0x140
[  851.365420][T16990]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  851.365438][T16990]  ? clear_bhb_loop+0x70/0xc0
[  851.365458][T16990]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  851.365474][T16990] RIP: 0033:0x7f04f8d9e159
[  851.365490][T16990] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  851.365504][T16990] RSP: 002b:00007f04f9b8d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  851.365522][T16990] RAX: ffffffffffffffda RBX: 00007f04f9025fa0 RCX: 00007f04f8d9e159
[  851.365534][T16990] RDX: 0000000000000028 RSI: 0000200000000240 RDI: 0000000000000012
[  851.365545][T16990] RBP: 00007f04f8e35024 R08: 0000000000000000 R09: 0000000000000000
[  851.365556][T16990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  851.365566][T16990] R13: 00007f04f9026038 R14: 00007f04f9025fa0 R15: 00007fff05926c98
[  851.365590][T16990]  </TASK>
[  851.585988][T16992] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3194'.
[  851.957456][T17001] fuse: Bad value for 'fd'
[  852.081772][T16999] bond4: entered promiscuous mode
[  853.725812][T17033] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  853.766546][T17033] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  854.570889][T17033] bond3: left promiscuous mode
[  854.576079][T17033] bond4: left promiscuous mode
[  854.589595][T12796] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  854.702779][T17067] bond1: entered promiscuous mode
[  854.709057][ T5821] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  854.710214][ T5821] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  854.710249][ T5821] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  855.008678][T17073] FAULT_INJECTION: forcing a failure.
[  855.008678][T17073] name failslab, interval 1, probability 0, space 0, times 0
[  855.106940][T17073] CPU: 0 UID: 0 PID: 17073 Comm: syz.2.3214 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  855.106970][T17073] Tainted: [L]=SOFTLOCKUP
[  855.106976][T17073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  855.106987][T17073] Call Trace:
[  855.106994][T17073]  <TASK>
[  855.107002][T17073]  dump_stack_lvl+0xe8/0x150
[  855.107033][T17073]  should_fail_ex+0x3eb/0x540
[  855.107056][T17073]  should_failslab+0xa8/0x100
[  855.107080][T17073]  __kmalloc_noprof+0xfe/0x720
[  855.107097][T17073]  ? __pfx___mutex_lock+0x10/0x10
[  855.107118][T17073]  ? tracepoint_add_func+0x351/0xa90
[  855.107158][T17073]  ? tracepoint_add_func+0x351/0xa90
[  855.107180][T17073]  tracepoint_add_func+0x351/0xa90
[  855.107203][T17073]  ? __pfx_blk_add_trace_rq_merge+0x10/0x10
[  855.107225][T17073]  tracepoint_probe_register+0x5d/0x90
[  855.107242][T17073]  ? __pfx_blk_add_trace_rq_merge+0x10/0x10
[  855.107265][T17073]  get_probe_ref+0xa9/0x470
[  855.107292][T17073]  blk_trace_setup+0x379/0x520
[  855.107317][T17073]  ? __pfx_blk_trace_setup+0x10/0x10
[  855.107350][T17073]  ? snprintf+0xe8/0x140
[  855.107384][T17073]  blk_trace_ioctl+0x37f/0x910
[  855.107408][T17073]  ? __pfx_blk_trace_ioctl+0x10/0x10
[  855.107430][T17073]  ? kasan_quarantine_put+0xbb/0x1f0
[  855.107455][T17073]  ? tomoyo_path_number_perm+0x219/0x5f0
[  855.107476][T17073]  ? tomoyo_path_number_perm+0x219/0x5f0
[  855.107497][T17073]  ? do_vfs_ioctl+0x116f/0x1530
[  855.107518][T17073]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  855.107546][T17073]  ? hook_file_ioctl+0x1f2/0x600
[  855.107583][T17073]  blkdev_ioctl+0x4c1/0x740
[  855.107607][T17073]  ? __pfx_blkdev_ioctl+0x10/0x10
[  855.107631][T17073]  ? __fget_files+0x2a/0x420
[  855.107657][T17073]  ? bpf_lsm_file_ioctl+0x9/0x20
[  855.107682][T17073]  ? __pfx_blkdev_ioctl+0x10/0x10
[  855.107703][T17073]  __se_sys_ioctl+0xfc/0x170
[  855.107723][T17073]  do_syscall_64+0x166/0x520
[  855.107744][T17073]  ? trace_irq_disable+0x3b/0x140
[  855.107759][T17073]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  855.107776][T17073]  ? clear_bhb_loop+0x70/0xc0
[  855.107796][T17073]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  855.107812][T17073] RIP: 0033:0x7f2aefd9e159
[  855.107827][T17073] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  855.107841][T17073] RSP: 002b:00007f2af0cd3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  855.107860][T17073] RAX: ffffffffffffffda RBX: 00007f2af0025fa0 RCX: 00007f2aefd9e159
[  855.107872][T17073] RDX: 0000200000000440 RSI: 00000000c0481273 RDI: 0000000000000003
[  855.107883][T17073] RBP: 00007f2aefe35024 R08: 0000000000000000 R09: 0000000000000000
[  855.107893][T17073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  855.107903][T17073] R13: 00007f2af0026038 R14: 00007f2af0025fa0 R15: 00007ffe313595d8
[  855.107928][T17073]  </TASK>
[  855.566306][T17073] ------------[ cut here ]------------
[  855.566332][T17073] ret
[  855.566354][T17073] WARNING: kernel/trace/blktrace.c:1336 at get_probe_ref+0x393/0x470, CPU#0: syz.2.3214/17073
[  855.585874][T17073] Modules linked in:
[  855.590008][T17073] CPU: 0 UID: 0 PID: 17073 Comm: syz.2.3214 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  855.601429][T17073] Tainted: [L]=SOFTLOCKUP
[  855.606088][T17073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  855.617249][T17073] RIP: 0010:get_probe_ref+0x393/0x470
[  855.623253][T17073] Code: dc 8e 5b e9 7f 52 17 0a e8 3a 2f f7 ff 90 0f 0b 90 e9 e8 fc ff ff e8 2c 2f f7 ff 90 0f 0b 90 e9 07 fd ff ff e8 1e 2f f7 ff 90 <0f> 0b 90 e9 26 fd ff ff e8 10 2f f7 ff 90 0f 0b 90 e9 45 fd ff ff
[  855.643661][T17073] RSP: 0018:ffffc90004957850 EFLAGS: 00010283
[  855.649846][T17073] RAX: ffffffff81d0a592 RBX: 00000000fffffff4 RCX: 0000000000080000
[  855.657827][T17073] RDX: ffffc900131f8000 RSI: 000000000000cef0 RDI: 000000000000cef1
[  855.665973][T17073] RBP: ffffc90004957a90 R08: ffffc90004957787 R09: 1ffff9200092aef0
[  855.674010][T17073] R10: dffffc0000000000 R11: fffff5200092aef1 R12: 1ffff9200092af14
[  855.682041][T17073] R13: ffff88803547ddec R14: dffffc0000000000 R15: 0000000000400140
[  855.690246][T17073] FS:  00007f2af0cd36c0(0000) GS:ffff888124ccb000(0000) knlGS:0000000000000000
[  855.699445][T17073] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  855.706043][T17073] CR2: 00007fba98798420 CR3: 000000001219a000 CR4: 00000000003526f0
[  855.714935][T17073] Call Trace:
[  855.718789][T17073]  <TASK>
[  855.723868][T17073]  blk_trace_setup+0x379/0x520
[  855.728705][T17073]  ? __pfx_blk_trace_setup+0x10/0x10
[  855.734013][T17073]  ? snprintf+0xe8/0x140
[  855.738361][T17073]  blk_trace_ioctl+0x37f/0x910
[  855.743144][T17073]  ? __pfx_blk_trace_ioctl+0x10/0x10
[  855.748525][T17073]  ? kasan_quarantine_put+0xbb/0x1f0
[  855.753835][T17073]  ? tomoyo_path_number_perm+0x219/0x5f0
[  855.759631][T17073]  ? tomoyo_path_number_perm+0x219/0x5f0
[  855.765282][T17073]  ? do_vfs_ioctl+0x116f/0x1530
[  855.770198][T17073]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  855.775345][T17073]  ? hook_file_ioctl+0x1f2/0x600
[  855.780454][T17073]  blkdev_ioctl+0x4c1/0x740
[  855.784985][T17073]  ? __pfx_blkdev_ioctl+0x10/0x10
[  855.790091][T17073]  ? __fget_files+0x2a/0x420
[  855.794711][T17073]  ? bpf_lsm_file_ioctl+0x9/0x20
[  855.799738][T17073]  ? __pfx_blkdev_ioctl+0x10/0x10
[  855.804787][T17073]  __se_sys_ioctl+0xfc/0x170
[  855.809451][T17073]  do_syscall_64+0x166/0x520
[  855.814215][T17073]  ? trace_irq_disable+0x3b/0x140
[  855.820430][T17073]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  855.826532][T17073]  ? clear_bhb_loop+0x70/0xc0
[  855.831813][T17073]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  855.837726][T17073] RIP: 0033:0x7f2aefd9e159
[  855.842234][T17073] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  855.861967][T17073] RSP: 002b:00007f2af0cd3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  855.870677][T17073] RAX: ffffffffffffffda RBX: 00007f2af0025fa0 RCX: 00007f2aefd9e159
[  855.879013][T17073] RDX: 0000200000000440 RSI: 00000000c0481273 RDI: 0000000000000003
[  855.887024][T17073] RBP: 00007f2aefe35024 R08: 0000000000000000 R09: 0000000000000000
[  855.895083][T17073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  855.903208][T17073] R13: 00007f2af0026038 R14: 00007f2af0025fa0 R15: 00007ffe313595d8
[  855.911285][T17073]  </TASK>
[  855.914353][T17073] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  855.921940][T17073] CPU: 0 UID: 0 PID: 17073 Comm: syz.2.3214 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  855.932936][T17073] Tainted: [L]=SOFTLOCKUP
[  855.937268][T17073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  855.947457][T17073] Call Trace:
[  855.950756][T17073]  <TASK>
[  855.953787][T17073]  vpanic+0x56d/0xa70
[  855.957854][T17073]  ? __pfx__printk+0x10/0x10
[  855.962632][T17073]  ? __pfx_vpanic+0x10/0x10
[  855.967163][T17073]  ? is_bpf_text_address+0x292/0x2b0
[  855.972479][T17073]  ? is_bpf_text_address+0x26/0x2b0
[  855.977717][T17073]  panic+0xc5/0xd0
[  855.981451][T17073]  ? __pfx_panic+0x10/0x10
[  855.985890][T17073]  __warn+0x315/0x4c0
[  855.989890][T17073]  ? get_probe_ref+0x393/0x470
[  855.994674][T17073]  ? get_probe_ref+0x393/0x470
[  855.999490][T17073]  __report_bug+0x276/0x570
[  856.004082][T17073]  ? get_probe_ref+0x393/0x470
[  856.008864][T17073]  ? __pfx___report_bug+0x10/0x10
[  856.013896][T17073]  ? irqentry_exit+0x218/0x910
[  856.018672][T17073]  ? trace_irq_disable+0x3b/0x140
[  856.023882][T17073]  ? get_probe_ref+0x395/0x470
[  856.028655][T17073]  ? get_probe_ref+0x393/0x470
[  856.033487][T17073]  ? get_probe_ref+0x393/0x470
[  856.038286][T17073]  report_bug+0x16b/0x220
[  856.042625][T17073]  ? get_probe_ref+0x393/0x470
[  856.047398][T17073]  ? get_probe_ref+0x395/0x470
[  856.052462][T17073]  handle_bug+0x9c/0x200
[  856.056922][T17073]  exc_invalid_op+0x1a/0x50
[  856.061477][T17073]  asm_exc_invalid_op+0x1a/0x20
[  856.066441][T17073] RIP: 0010:get_probe_ref+0x393/0x470
[  856.071941][T17073] Code: dc 8e 5b e9 7f 52 17 0a e8 3a 2f f7 ff 90 0f 0b 90 e9 e8 fc ff ff e8 2c 2f f7 ff 90 0f 0b 90 e9 07 fd ff ff e8 1e 2f f7 ff 90 <0f> 0b 90 e9 26 fd ff ff e8 10 2f f7 ff 90 0f 0b 90 e9 45 fd ff ff
[  856.091566][T17073] RSP: 0018:ffffc90004957850 EFLAGS: 00010283
[  856.097743][T17073] RAX: ffffffff81d0a592 RBX: 00000000fffffff4 RCX: 0000000000080000
[  856.105808][T17073] RDX: ffffc900131f8000 RSI: 000000000000cef0 RDI: 000000000000cef1
[  856.113808][T17073] RBP: ffffc90004957a90 R08: ffffc90004957787 R09: 1ffff9200092aef0
[  856.121791][T17073] R10: dffffc0000000000 R11: fffff5200092aef1 R12: 1ffff9200092af14
[  856.129866][T17073] R13: ffff88803547ddec R14: dffffc0000000000 R15: 0000000000400140
[  856.137860][T17073]  ? get_probe_ref+0x392/0x470
[  856.142684][T17073]  blk_trace_setup+0x379/0x520
[  856.147463][T17073]  ? __pfx_blk_trace_setup+0x10/0x10
[  856.152767][T17073]  ? snprintf+0xe8/0x140
[  856.157115][T17073]  blk_trace_ioctl+0x37f/0x910
[  856.161891][T17073]  ? __pfx_blk_trace_ioctl+0x10/0x10
[  856.167295][T17073]  ? kasan_quarantine_put+0xbb/0x1f0
[  856.172594][T17073]  ? tomoyo_path_number_perm+0x219/0x5f0
[  856.178276][T17073]  ? tomoyo_path_number_perm+0x219/0x5f0
[  856.184023][T17073]  ? do_vfs_ioctl+0x116f/0x1530
[  856.188977][T17073]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  856.194035][T17073]  ? hook_file_ioctl+0x1f2/0x600
[  856.199020][T17073]  blkdev_ioctl+0x4c1/0x740
[  856.203548][T17073]  ? __pfx_blkdev_ioctl+0x10/0x10
[  856.208587][T17073]  ? __fget_files+0x2a/0x420
[  856.213202][T17073]  ? bpf_lsm_file_ioctl+0x9/0x20
[  856.218164][T17073]  ? __pfx_blkdev_ioctl+0x10/0x10
[  856.223213][T17073]  __se_sys_ioctl+0xfc/0x170
[  856.227819][T17073]  do_syscall_64+0x166/0x520
[  856.232688][T17073]  ? trace_irq_disable+0x3b/0x140
[  856.237723][T17073]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  856.243813][T17073]  ? clear_bhb_loop+0x70/0xc0
[  856.248515][T17073]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  856.254415][T17073] RIP: 0033:0x7f2aefd9e159
[  856.258846][T17073] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  856.278547][T17073] RSP: 002b:00007f2af0cd3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  856.286971][T17073] RAX: ffffffffffffffda RBX: 00007f2af0025fa0 RCX: 00007f2aefd9e159
[  856.294953][T17073] RDX: 0000200000000440 RSI: 00000000c0481273 RDI: 0000000000000003
[  856.302944][T17073] RBP: 00007f2aefe35024 R08: 0000000000000000 R09: 0000000000000000
[  856.310915][T17073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  856.319065][T17073] R13: 00007f2af0026038 R14: 00007f2af0025fa0 R15: 00007ffe313595d8
[  856.327596][T17073]  </TASK>
[  856.330691][T17073] Kernel Offset: disabled
[  856.335037][T17073] Rebooting in 86400 seconds..