last executing test programs:

7m28.969443252s ago: executing program 2 (id=243):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r3, 0xc2604111, &(0x7f0000000680)={0x1, [[0xffffffff, 0xffffffff, 0xffffffff, 0x4000001, 0xffffffff, 0xfffffffc, 0xffffffff, 0xffffffff], [0xfffffffb, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x2a5a, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]})

7m26.46318909s ago: executing program 2 (id=246):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r2, 0xc2604111, &(0x7f0000000680)={0x1, [[0xffffffff, 0xffffffff, 0xffffffff, 0x4000001, 0xffffffff, 0xfffffffc, 0xffffffff, 0xffffffff], [0xfffffffb, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x2a5a, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]})
ioctl$SNDRV_PCM_IOCTL_PREPARE(r2, 0x4140, 0x0)

7m23.712701339s ago: executing program 2 (id=252):
execveat(0xffffffffffffffff, 0x0, &(0x7f0000000100)={[&(0x7f0000000280)='\xbb`\xbc\xa8\x92\xbb']}, 0x0, 0x800)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x46, &(0x7f0000000080)={0x0, 0x0}, 0x10)
io_uring_setup(0x136a, &(0x7f0000000080)={0x0, 0x94d6, 0x1, 0x8000000, 0x28c})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0)
fcntl$setlease(r2, 0x400, 0x2)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000017c0)=@newtaction={0x14, 0x30, 0xfbed, 0x70bd29, 0x25dddbff}, 0x14}}, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r3}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r3, &(0x7f0000000000), &(0x7f0000000340)=""/89}, 0x20)
syz_genetlink_get_family_id$nl80211(0x0, r2)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r4 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r5 = syz_ublk_setup_io_uring(0x20, 0x0, &(0x7f00000000c0)=<r6=>0x0, &(0x7f0000000100)=<r7=>0x0, &(0x7f0000000140)=<r8=>0x0)
r9 = syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0xc, 0x0, r4, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x3, 0x104}}}, &(0x7f0000000300)=<r11=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0)
r12 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r12, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r13 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r9, 0x2)
syz_ublk_setup_queues(r13, r11, &(0x7f0000000340)={0x0, 0x5a7a, 0x400, 0x2, 0x2ce}, &(0x7f0000000880)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x72bc, 0x40, 0x2, 0x1f5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1887, 0x400, 0x3, 0x31e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x468b, 0x4, 0x1, 0x39f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9af2, 0x400, 0x0, 0x20a, 0x0, r5}}], 0x4, &(0x7f0000001dc0)={0x2e, 0x0, 0x0, r13, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xff}, 0x0, r10, '\x00', {0x4, 0xe52, 0x0, 0x0}}, &(0x7f0000000180))
socket$nl_generic(0x10, 0x3, 0x10)
getuid()
mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f00000001c0)='./cgroup\x00', &(0x7f0000000180)='ufs\x00', 0x1a0c099, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

7m10.009945173s ago: executing program 2 (id=276):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x280440e, &(0x7f0000000440)={[{@debug}, {@test_dummy_encryption_v1}, {@inlinecrypt}, {@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@errors_remount}, {@inlinecrypt}, {@nodioread_nolock}, {@prjquota}, {@jqfmt_vfsv0}, {@usrquota}, {@noauto_da_alloc}, {@norecovery}]}, 0x1, 0xbdb, &(0x7f0000001000)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={<r3=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
getresuid(&(0x7f00000006c0), 0x0, &(0x7f0000000740))
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10)
setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r5, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00)
sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f0000000100)={0xa, 0x4e20, 0x80000, @loopback, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=[@flowinfo={{0x14}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x73, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0xdd83}]}}}], 0x38}, 0x40001)
r6 = getpid()
sched_setscheduler(r6, 0x1, &(0x7f0000000240)=0x7)

7m6.300052667s ago: executing program 2 (id=282):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
getpid()
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r2, 0xc2604111, &(0x7f0000000680)={0x1, [[0xffffffff, 0xffffffff, 0xffffffff, 0x4000001, 0xffffffff, 0xfffffffc, 0xffffffff, 0xffffffff], [0xfffffffb, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x2a5a, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]})
ioctl$SNDRV_PCM_IOCTL_PREPARE(r2, 0x4140, 0x0)

7m2.515839574s ago: executing program 2 (id=291):
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000300)='./bus\x00', 0x2010414, &(0x7f0000000c00)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESOCT, @ANYBLOB="b58208b37a58446284048f26b79953e521b27c3a5dbc8e7fcd644e2caaa1acc91237f4447b548c7caab7ede0f978d175cd8108db49a660493d3511a7f6d67dba109d4f769a1cddfc97c554c8d7c38ecae48c95955fb02bcd2da02935ab9658f576b9d2526dd40f73035883f2f7d388f9cb004bcef6c90d011afc4849d7d7ee3abdf4dfa36378701a61a8f83187960881d90cf42cae6384fa916f5df9e11d2546c01011f28c9be1a2a5aa2139ef29be6d87c8d93fce5239580e58fe24d4304f196fa0d43d7aeb4dc3da644ba32b1e61734c4211811d81d78f283d637a78b107898d59c7048fa04ea6e0ebe491f42f2f32bd531eeb8e2659d2", @ANYRESHEX, @ANYRES64], 0x1, 0x2d3, &(0x7f00000010c0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
getpid()
sched_setaffinity(0x0, 0xffffffffffffffe2, &(0x7f00000002c0)=0x20000002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x30)
close(0x3)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, 0x0)
syz_fuse_handle_req(r2, 0x0, 0x0, 0x0)
mount$fuseblk(&(0x7f0000000180), &(0x7f0000000380)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0)={{}, 0x2c, {'rootmode', 0x3d, 0xc000}})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/fs/file-max\x00', 0x1, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
readv(r3, &(0x7f0000002740)=[{&(0x7f00000001c0)=""/144, 0x90}], 0x1)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f00000001c0)='./file1\x00', 0x8000, &(0x7f0000000040)=ANY=[], 0x1, 0x14fe, &(0x7f0000002a80)="$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")

6m46.970364454s ago: executing program 32 (id=291):
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000300)='./bus\x00', 0x2010414, &(0x7f0000000c00)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESOCT, @ANYBLOB="b58208b37a58446284048f26b79953e521b27c3a5dbc8e7fcd644e2caaa1acc91237f4447b548c7caab7ede0f978d175cd8108db49a660493d3511a7f6d67dba109d4f769a1cddfc97c554c8d7c38ecae48c95955fb02bcd2da02935ab9658f576b9d2526dd40f73035883f2f7d388f9cb004bcef6c90d011afc4849d7d7ee3abdf4dfa36378701a61a8f83187960881d90cf42cae6384fa916f5df9e11d2546c01011f28c9be1a2a5aa2139ef29be6d87c8d93fce5239580e58fe24d4304f196fa0d43d7aeb4dc3da644ba32b1e61734c4211811d81d78f283d637a78b107898d59c7048fa04ea6e0ebe491f42f2f32bd531eeb8e2659d2", @ANYRESHEX, @ANYRES64], 0x1, 0x2d3, &(0x7f00000010c0)="$eJzs3U9rE0EYx/GnSWzSlDYRRFBQB73oZWnjC9AgLYgBpTaiHoSt3WjImpTdUImIzUW8+jqKR2+C+gZ6ES/evRVB8NKDdKS7m3TTpG1q06R/vh8oO7szP2bSTcqzC92sPnz/olRwjYJZlUhCSUSkLmsi6Y1WYCjYRrz2sITV5dronx8X7j96fCeby03NKDWdnb2eUUqNX/r88vWHy1+row8+jn+Ky0r6yervzM+V4ZVzq+uzz4uuKrqqXKkqU81VKlVzzrbUfNEtGUrdsy3TtVSx7FpOS3/Briws1JRZnh9LLjiW6yqzXFMlq6aqFVV1asp8ZhbLyjAMNZaUky3WxZj88syMmd22Ww+Fzj6OgJFOBx0nW+/cmV/uw5oAAMAhs3P979f629X/0WZrL/X/2d3rf5Fw/Z8IJqH+74F6y94u9T+OBcfJmsng89uK+h8AAAAAAAAAAAAAAAAAAAAAgKNgTeuU1jq1sQ0OeftxEUmIiI76+wNeJg5I+Pzr0E/z/Af7W2I3BrRc9FjoH/cSIva7xfxi3t/6/dmCFMUWSyYkJX+990PAb0/fzk1NKE9avthLQX5pMR+VeCPfkO6Uv3h60s+r1vwpSYbnz0hKznSeP9MxPyxXr4TyhqTk21OpiC3z3vt6M/9mUqlbd3Nb8iPeOAAAAAAAjgNDNbVdv3v93oCEtPf7+dD9Aa31UkSal+ht9we2XF/H5Hw3j6gEAAAAAAD75tZelUzbtpz/aMRFZB/x3je0Fhn8MqJyOH4brY2bItK3SWMDf8kJEfGPqJYu/86UyC7xX814V5PqLsbEgm/g8I8M9eWzs76P+KD/MgEAAADotc2ifw+h728PcEUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJw83T4PrDG+ravRsUM8NF207y8QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOET+BQAA//9mAxFo")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
getpid()
sched_setaffinity(0x0, 0xffffffffffffffe2, &(0x7f00000002c0)=0x20000002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x30)
close(0x3)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, 0x0)
syz_fuse_handle_req(r2, 0x0, 0x0, 0x0)
mount$fuseblk(&(0x7f0000000180), &(0x7f0000000380)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0)={{}, 0x2c, {'rootmode', 0x3d, 0xc000}})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/fs/file-max\x00', 0x1, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
readv(r3, &(0x7f0000002740)=[{&(0x7f00000001c0)=""/144, 0x90}], 0x1)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f00000001c0)='./file1\x00', 0x8000, &(0x7f0000000040)=ANY=[], 0x1, 0x14fe, &(0x7f0000002a80)="$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")

16.588901841s ago: executing program 3 (id=2006):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000340)="64f3a49a2aa20eeb7d00b8000000000f23d80f21f835400000400f23f8f466baf80cb876d28082ef66bafc0cb0b2c4c1f9fa933f490000c4e2b928bc765862e16af20fe6d4f3d973fc0f07670f35", 0x4e}], 0x1, 0x11, 0x0, 0x0)
ioctl$BTRFS_IOC_RM_DEV(r3, 0x5000940b, &(0x7f0000000880)={{r4}, "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"})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
kexec_load(0x7fffffff, 0x1, &(0x7f0000002140)=[{&(0x7f0000001f80)="dbad949c3887c16879be03c838ed32823421ae256da83a747e8c8d33b193fa898bc5714d33800047b9232a65cbf580674d26306fcd99a6da321eb36b7aefb1d10ef614282263f51fbff4d35cd5273feb2f20679f5d7b4ce62ee475f0ce6f4d9c48afa0a4de3ace19ead49d59bcd228a8bc89b3c6fafa75b53b3897f58c7a602e", 0x80, 0x80, 0xfffffffffffffffd}], 0x30000)

15.919802833s ago: executing program 3 (id=2013):
r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040da0b29010001000000010902200001010080320904000002ffffff000705010200020007058202000200"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100))
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000140))
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000180))
syz_usb_ep_write(r0, 0x82, 0x4, &(0x7f00000001c0))
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000200))
syz_usb_ep_write(r0, 0x82, 0x4, &(0x7f0000000240))
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000280))
syz_usb_ep_write(r0, 0x82, 0x4, &(0x7f00000002c0))
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000300))
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000340))
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000380))
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f00000003c0))
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000400))
syz_usb_ep_write(r0, 0x82, 0x4, &(0x7f0000000440))

12.327683821s ago: executing program 3 (id=2043):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'dummy0\x00'})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000780)={'bond_slave_0\x00'})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/class/net/bond0/bonding/slaves\x00', 0x2, 0x0)
write(r1, &(0x7f0000000480)='-bond_slave_0\n\x00', 0xe)
write(r1, &(0x7f00000004c0)='-bond_slave_1\n\x00', 0xe)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000500)={'bond0\x00'})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/class/net/bond0/bonding/mode\x00', 0x2, 0x0)
write(r2, &(0x7f0000000580)='balance-alb\n\x00', 0xc)
r3 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./sys/class/net/bond0/bonding/slaves\x00', 0x2, 0x0)
write(r3, &(0x7f0000000600)='+dummy0\n\x00', 0x8)
close(r3)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000640)={'bond0\x00', 0x1})
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f00000006c0)={'bond0\x00', @local})

11.518701279s ago: executing program 3 (id=2050):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='sysfs\x00', &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0)
write(r0, &(0x7f0000000500)='md0\n', 0x4)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/block/md0/md/metadata_version\x00', 0x1, 0x0)
write(r1, &(0x7f0000000700)='none\n', 0x5)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/block/md0/md/level\x00', 0x1, 0x0)
write(r2, &(0x7f0000000900)='raid1\n', 0x6)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0)
write(r3, &(0x7f0000000b00)='2\n', 0x2)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0)
write(r4, &(0x7f0000000d00)='1:0\n', 0x4)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./sys/block/md0/md/dev-ram0/slot\x00', 0x1, 0x0)
write(r5, &(0x7f0000000f00)='0\n', 0x2)
close(r5)
write(0xffffffffffffffff, &(0x7f0000001100)='active\n', 0x7)
close(0xffffffffffffffff)
r6 = openat(0xffffffffffffff9c, &(0x7f0000001200)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0)
write(r6, &(0x7f0000001300)='1:1\n', 0x4)
close(r6)
nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./sys/block/md0/md/dev-ram1/slot\x00', 0x1, 0x0)
write(r7, &(0x7f0000001500)='1\n', 0x2)
close(r7)

10.371418183s ago: executing program 3 (id=2057):
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x5c8c, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x6c010101}, @mcast1, 0x80, 0x0, 0x0, 0x20000000}})
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000100)={0x0, 0x0})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10.132168125s ago: executing program 3 (id=2060):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000040), &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff)
mount(&(0x7f0000000140), &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x2, 0x0)
write(r0, &(0x7f0000000240)='udp 20000\n', 0xa)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/threads\x00', 0x2, 0x0)
write(r1, &(0x7f00000002c0)='1\n', 0x2)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0)
write(r2, &(0x7f0000000340)='nfsd 127.0.0.1 2147483647 localhost\n', 0x24)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0)
write(r3, &(0x7f00000003c0)='localhost /tmp 2147483647 9218 65534 65534 1\n', 0x2f)
close(r3)
write(0xffffffffffffffff, &(0x7f0000000440)='localhost 1 \\x01000000 2147483647 /tmp\n', 0x27)

7.226809461s ago: executing program 1 (id=2083):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='sysfs\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff)
mount(&(0x7f0000000140)=@filename='devtmpfs\x00', &(0x7f0000000180)='./dev\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240), 0x0)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/md0\x00', 0x4002, 0x0)
ioctl(r1, 0x40480923, &(0x7f0000000300)="000000000000000000000000000000000100000000040000020000000200000000000000010000000000000000000000020000000200"/72)
ioctl(r1, 0x40140921, &(0x7f0000000400)="0000000001000000000000000000000006000000")
ioctl(r1, 0x40140921, &(0x7f0000000440)="0100000001000000010000000100000006000000")
ioctl(r1, 0x400c0930, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/sync_action\x00', 0x2, 0x0)
read(r2, &(0x7f0000000580)=""/32, 0x20)

6.874379657s ago: executing program 1 (id=2084):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='md0\x00', 0x4)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./img\x00', 0x42, 0x1b6)
ftruncate(r1, 0x2000000)
pwrite64(r1, &(0x7f0000000280)="6269746d04000000001000000500000000000000", 0x14, 0x1000)
r2 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x2)
ioctl$LOOP_SET_FD(r2, 0x4c00, r1)
r3 = openat(0xffffffffffffff9c, 0x0, 0x4002, 0x0)
ioctl(r3, 0x40480923, &(0x7f0000000400)="000000000000000000000000000000000100000000040000010000000100000000000000010000000000000000000000010000000100"/72)
ioctl(r3, 0x40140921, &(0x7f0000000500)="0000000007000000000000000000000006000000")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/block/md0/md/dev-loop0/offset\x00', 0x2, 0x0)
write(r4, &(0x7f0000000700)='16\x00', 0x3)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/block/md0/md/dev-loop0/size\x00', 0x2, 0x0)
write(r5, &(0x7f0000000840)='65500\x00', 0x6)
close(r5)
ioctl(r3, 0x400c0930, &(0x7f0000000700)='\x00'/12)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/block/md0/md/bitmap/location\x00', 0x2, 0x0)
write(r6, &(0x7f0000000940)='8\x00', 0x2)

6.733970284s ago: executing program 1 (id=2086):
r0 = socket$netlink(0x10, 0x3, 0x10)
connect$netlink(r0, &(0x7f0000000000), 0xc)
write(r0, &(0x7f0000000100)="3c0000001000050001000000000000000a010000250001004142434445464748494a4b4c4d4e4f505152535455565758595a30313233343500000000", 0x3c)
write(r0, &(0x7f0000000100)="3c0000001100050001000000000000000a010000250001004142434445464748494a4b4c4d4e4f505152535455565758595a30313233343500000000", 0x3c)
write(r0, &(0x7f0000000100)="3c0000001200050001000000000000000a010000250001004142434445464748494a4b4c4d4e4f505152535455565758595a30313233343500000000", 0x3c)
write(r0, &(0x7f0000000100)="3c0000001300050001000000000000000a010000250001004142434445464748494a4b4c4d4e4f505152535455565758595a30313233343500000000", 0x3c)
write(r0, &(0x7f0000000100)="3c0000001400050001000000000000000a010000250001004142434445464748494a4b4c4d4e4f505152535455565758595a30313233343500000000", 0x3c)
write(r0, &(0x7f0000000100)="3c0000001500050001000000000000000a010000250001004142434445464748494a4b4c4d4e4f505152535455565758595a30313233343500000000", 0x3c)
write(r0, &(0x7f0000000100)="3c0000001600050001000000000000000a010000250001004142434445464748494a4b4c4d4e4f505152535455565758595a30313233343500000000", 0x3c)
write(r0, &(0x7f0000000100)="3c0000001700050001000000000000000a010000250001004142434445464748494a4b4c4d4e4f505152535455565758595a30313233343500000000", 0x3c)
write(r0, &(0x7f0000000100)="3c0000001800050001000000000000000a010000250001004142434445464748494a4b4c4d4e4f505152535455565758595a30313233343500000000", 0x3c)
write(r0, &(0x7f0000000100)="3c0000001900050001000000000000000a010000250001004142434445464748494a4b4c4d4e4f505152535455565758595a30313233343500000000", 0x3c)
write(r0, &(0x7f0000000100)="3c0000001a00050001000000000000000a010000250001004142434445464748494a4b4c4d4e4f505152535455565758595a30313233343500000000", 0x3c)
write(r0, &(0x7f0000000100)="3c0000001b00050001000000000000000a010000250001004142434445464748494a4b4c4d4e4f505152535455565758595a30313233343500000000", 0x3c)
write(r0, &(0x7f0000000100)="3c0000001c00050001000000000000000a010000250001004142434445464748494a4b4c4d4e4f505152535455565758595a30313233343500000000", 0x3c)
write(r0, &(0x7f0000000100)="3c0000001d00050001000000000000000a010000250001004142434445464748494a4b4c4d4e4f505152535455565758595a30313233343500000000", 0x3c)
write(r0, &(0x7f0000000100)="3c0000001e00050001000000000000000a010000250001004142434445464748494a4b4c4d4e4f505152535455565758595a30313233343500000000", 0x3c)
write(r0, &(0x7f0000000100)="3c0000001f00050001000000000000000a010000250001004142434445464748494a4b4c4d4e4f505152535455565758595a30313233343500000000", 0x3c)
write(r0, &(0x7f0000000100)="3c0000002000050001000000000000000a010000250001004142434445464748494a4b4c4d4e4f505152535455565758595a30313233343500000000", 0x3c)
write(r0, &(0x7f0000000100)="3c0000002200050001000000000000000a010000250001004142434445464748494a4b4c4d4e4f505152535455565758595a30313233343500000000", 0x3c)
write(r0, &(0x7f0000000100)="3c0000002300050001000000000000000a010000250001004142434445464748494a4b4c4d4e4f505152535455565758595a30313233343500000000", 0x3c)
write(r0, &(0x7f0000000100)="3c0000002400050001000000000000000a010000250001004142434445464748494a4b4c4d4e4f505152535455565758595a30313233343500000000", 0x3c)
write(r0, &(0x7f0000000100)="3c0000002500050001000000000000000a010000250001004142434445464748494a4b4c4d4e4f505152535455565758595a30313233343500000000", 0x3c)
write(r0, &(0x7f0000000100)="3c0000002600050001000000000000000a010000250001004142434445464748494a4b4c4d4e4f505152535455565758595a30313233343500000000", 0x3c)
write(r0, &(0x7f0000000100)="3c0000002700050001000000000000000a010000250001004142434445464748494a4b4c4d4e4f505152535455565758595a30313233343500000000", 0x3c)
write(r0, &(0x7f0000000100)="3c0000002800050001000000000000000a010000250001004142434445464748494a4b4c4d4e4f505152535455565758595a30313233343500000000", 0x3c)
write(r0, &(0x7f0000000100)="3c0000002a00050001000000000000000a010000250001004142434445464748494a4b4c4d4e4f505152535455565758595a30313233343500000000", 0x3c)
write(r0, &(0x7f0000000100)="3c0000002b00050001000000000000000a010000250001004142434445464748494a4b4c4d4e4f505152535455565758595a30313233343500000000", 0x3c)
write(r0, &(0x7f0000000100)="3c0000002c00050001000000000000000a010000250001004142434445464748494a4b4c4d4e4f505152535455565758595a30313233343500000000", 0x3c)
write(r0, &(0x7f0000000100)="3c0000002d00050001000000000000000a010000250001004142434445464748494a4b4c4d4e4f505152535455565758595a30313233343500000000", 0x3c)
write(r0, &(0x7f0000000100)="3c0000002e00050001000000000000000a010000250001004142434445464748494a4b4c4d4e4f505152535455565758595a30313233343500000000", 0x3c)
write(r0, &(0x7f0000000100)="3c0000002f00050001000000000000000a010000250001004142434445464748494a4b4c4d4e4f505152535455565758595a30313233343500000000", 0x3c)
write(r0, &(0x7f0000000100)="3c0000003000050001000000000000000a010000250001004142434445464748494a4b4c4d4e4f505152535455565758595a30313233343500000000", 0x3c)
write(r0, &(0x7f0000000100)="3c0000003100050001000000000000000a010000250001004142434445464748494a4b4c4d4e4f505152535455565758595a30313233343500000000", 0x3c)
write(r0, &(0x7f0000000100)="3c0000003200050001000000000000000a010000250001004142434445464748494a4b4c4d4e4f505152535455565758595a30313233343500000000", 0x3c)
write(r0, &(0x7f0000000100)="3c0000003400050001000000000000000a010000250001004142434445464748494a4b4c4d4e4f505152535455565758595a30313233343500000000", 0x3c)

6.455311477s ago: executing program 1 (id=2088):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='sysfs\x00', &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0)
write(r0, &(0x7f0000000500)='md0\n', 0x4)
close(r0)
write(0xffffffffffffffff, &(0x7f0000000700)='none\n', 0x5)
close(0xffffffffffffffff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/block/md0/md/level\x00', 0x1, 0x0)
write(r1, &(0x7f0000000900)='raid1\n', 0x6)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0)
write(r2, &(0x7f0000000b00)='2\n', 0x2)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0)
write(r3, &(0x7f0000000d00)='1:0\n', 0x4)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./sys/block/md0/md/dev-ram0/slot\x00', 0x1, 0x0)
write(r4, &(0x7f0000000f00)='0\n', 0x2)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./sys/block/md0/md/array_state\x00', 0x1, 0x0)
write(r5, &(0x7f0000001100)='active\n', 0x7)
close(r5)
r6 = openat(0xffffffffffffff9c, &(0x7f0000001200)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0)
write(r6, &(0x7f0000001300)='1:1\n', 0x4)
close(r6)
nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./sys/block/md0/md/dev-ram1/slot\x00', 0x1, 0x0)
write(r7, &(0x7f0000001500)='1\n', 0x2)
close(r7)

5.882141044s ago: executing program 1 (id=2091):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/subsys0\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/subsys0/attr_allow_any_host\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='1\n', 0x2)
close(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r1, &(0x7f0000000280)='ipv4\n', 0x5)
close(r1)
write(0xffffffffffffffff, &(0x7f0000000300)='tcp\n', 0x4)
close(0xffffffffffffffff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0)
write(r2, &(0x7f0000000380)='127.0.0.1\n', 0xa)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0)
write(r3, &(0x7f0000000400)='4420\n', 0x5)
close(r3)
symlinkat(&(0x7f0000000100)='./config/nvmet/subsystems/subsys0\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/ports/1/subsystems/subsys0\x00')
nanosleep(&(0x7f0000000480)={0x0, 0x1000000}, 0x0)
r4 = socket$inet(0x2, 0x1, 0x0)
connect$inet(r4, &(0x7f0000000500)={0x2, 0x1144, @loopback}, 0x10)
sendto$inet(r4, &(0x7f0000000600)="000080008000"/128, 0x80, 0x0, 0x0, 0x0)
sendto$inet(r4, &(0x7f0000000700)="040048004800"/72, 0x48, 0x0, 0x0, 0x0)

4.920062779s ago: executing program 1 (id=2101):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000040), &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff)
mount(&(0x7f0000000140), &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x2, 0x0)
write(r0, &(0x7f0000000240)='udp 20000\n', 0xa)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/threads\x00', 0x2, 0x0)
write(r1, &(0x7f00000002c0)='1\n', 0x2)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0)
write(r2, &(0x7f0000000340)='nfsd 127.0.0.1 2147483647 localhost\n', 0x24)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0)
write(r3, &(0x7f00000003c0)='localhost /tmp 2147483647 9218 65534 65534 1\n', 0x2f)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/net/rpc/nfsd.fh/channel\x00', 0x2, 0x0)
write(r4, &(0x7f0000000440)='localhost 1 \\x01000000 2147483647 /tmp\n', 0x27)

3.148173232s ago: executing program 4 (id=2116):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/subsys0\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/subsys0/attr_allow_any_host\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='1\n', 0x2)
close(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r1, &(0x7f0000000280)='ipv4\n', 0x5)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
write(r2, &(0x7f0000000300)='tcp\n', 0x4)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0)
write(r3, &(0x7f0000000380)='127.0.0.1\n', 0xa)
r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0)
write(r4, &(0x7f0000000400)='4420\n', 0x5)
close(r4)
symlinkat(&(0x7f0000000100)='./config/nvmet/subsystems/subsys0\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/ports/1/subsystems/subsys0\x00')
nanosleep(&(0x7f0000000480)={0x0, 0x1000000}, 0x0)
r5 = socket$inet(0x2, 0x1, 0x0)
connect$inet(r5, &(0x7f0000000500)={0x2, 0x1144, @loopback}, 0x10)
sendto$inet(r5, &(0x7f0000000600)="000080008000"/128, 0x80, 0x0, 0x0, 0x0)
sendto$inet(r5, &(0x7f0000000700)="040048004800"/72, 0x48, 0x0, 0x0, 0x0)

2.606407578s ago: executing program 5 (id=2119):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/subsys0\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/subsys0/attr_allow_any_host\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='1\n', 0x2)
close(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r1, &(0x7f0000000280)='ipv4\n', 0x5)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
write(r2, &(0x7f0000000300)='tcp\n', 0x4)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0)
write(r3, &(0x7f0000000380)='127.0.0.1\n', 0xa)
r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0)
write(r4, &(0x7f0000000400)='4420\n', 0x5)
close(r4)
symlinkat(&(0x7f0000000100)='./config/nvmet/subsystems/subsys0\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/ports/1/subsystems/subsys0\x00')
nanosleep(&(0x7f0000000480)={0x0, 0x1000000}, 0x0)
r5 = socket$inet(0x2, 0x1, 0x0)
connect$inet(r5, &(0x7f0000000500)={0x2, 0x1144, @loopback}, 0x10)
sendto$inet(r5, &(0x7f0000000600)="000080008000"/128, 0x80, 0x0, 0x0, 0x0)
sendto$inet(r5, &(0x7f0000000700)="040048004800"/72, 0x48, 0x0, 0x0, 0x0)

2.239740715s ago: executing program 4 (id=2121):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='sysfs\x00', &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0)
write(r0, &(0x7f0000000500)='md0\n', 0x4)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/block/md0/md/metadata_version\x00', 0x1, 0x0)
write(r1, &(0x7f0000000700)='none\n', 0x5)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/block/md0/md/level\x00', 0x1, 0x0)
write(r2, &(0x7f0000000900)='raid1\n', 0x6)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0)
write(r3, &(0x7f0000000b00)='2\n', 0x2)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0)
write(r4, &(0x7f0000000d00)='1:0\n', 0x4)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./sys/block/md0/md/dev-ram0/slot\x00', 0x1, 0x0)
write(r5, &(0x7f0000000f00)='0\n', 0x2)
close(r5)
r6 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./sys/block/md0/md/array_state\x00', 0x1, 0x0)
write(r6, &(0x7f0000001100)='active\n', 0x7)
close(r6)
r7 = openat(0xffffffffffffff9c, &(0x7f0000001200)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0)
write(r7, &(0x7f0000001300)='1:1\n', 0x4)
close(r7)
nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./sys/block/md0/md/dev-ram1/slot\x00', 0x1, 0x0)
write(r8, &(0x7f0000001500)='1\n', 0x2)
close(r8)

2.026157605s ago: executing program 4 (id=2124):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000000)=0x1, 0x4)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
listen(r0, 0x5)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000080)=0x1, 0x4)
bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @loopback}, 0x10)
connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
close(r1)
nanosleep(&(0x7f0000000140)={0x0, 0x5f5e100}, 0x0)
close(0xffffffffffffffff)
nanosleep(&(0x7f0000000180)={0x0, 0x1dcd6500}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f00000001c0)=0x1, 0x4)
bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e21, @loopback}, 0x10)
connect$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10)

1.752404288s ago: executing program 0 (id=2125):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='sysfs\x00', &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0)
write(r0, &(0x7f0000000500)='md0\n', 0x4)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/block/md0/md/metadata_version\x00', 0x1, 0x0)
write(r1, &(0x7f0000000700)='none\n', 0x5)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/block/md0/md/level\x00', 0x1, 0x0)
write(r2, &(0x7f0000000900)='raid1\n', 0x6)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0)
write(r4, &(0x7f0000000d00)='1:0\n', 0x4)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./sys/block/md0/md/dev-ram0/slot\x00', 0x1, 0x0)
write(r5, &(0x7f0000000f00)='0\n', 0x2)
close(r5)
r6 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./sys/block/md0/md/array_state\x00', 0x1, 0x0)
write(r6, &(0x7f0000001100)='active\n', 0x7)
close(r6)
r7 = openat(0xffffffffffffff9c, &(0x7f0000001200)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0)
write(r7, &(0x7f0000001300)='1:1\n', 0x4)
close(r7)
nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./sys/block/md0/md/dev-ram1/slot\x00', 0x1, 0x0)
write(r8, &(0x7f0000001500)='1\n', 0x2)
close(r8)

1.675935072s ago: executing program 5 (id=2126):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pnp/drivers/serial\x00', 0x0, 0x0)
r1 = openat(r0, &(0x7f0000000140)='unbind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000180)='00:02\n\x00', 0x6)
write(r1, &(0x7f00000001c0)='00:03\n\x00', 0x6)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pnp/devices/00:02/resources\x00', 0x2, 0x0)
write(r2, &(0x7f0000000240)='disable\n\x00', 0x8)
write(r2, &(0x7f0000000280)='auto\n\x00', 0x5)
write(r2, &(0x7f00000002c0)='fill\n\x00', 0x5)
write(r2, &(0x7f0000000300)='activate\n\x00', 0x9)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/bus/pnp/devices/00:03/resources\x00', 0x2, 0x0)
write(r3, &(0x7f0000000380)='disable\n\x00', 0x8)
write(r3, &(0x7f00000003c0)='auto\n\x00', 0x5)
write(r3, &(0x7f0000000400)='fill\n\x00', 0x5)
write(r3, &(0x7f0000000440)='activate\n\x00', 0x9)
r4 = openat(r0, &(0x7f0000000480)='bind\x00', 0x1, 0x0)
write(r4, &(0x7f00000004c0)='00:02\n\x00', 0x6)
write(r4, &(0x7f0000000500)='00:03\n\x00', 0x6)

1.477472461s ago: executing program 5 (id=2127):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='sysfs\x00', &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0)
write(r0, &(0x7f0000000500)='md0\n', 0x4)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/block/md0/md/metadata_version\x00', 0x1, 0x0)
write(r1, &(0x7f0000000700)='none\n', 0x5)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/block/md0/md/level\x00', 0x1, 0x0)
write(r2, &(0x7f0000000900)='raid1\n', 0x6)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0)
write(r3, &(0x7f0000000b00)='2\n', 0x2)
close(r3)
write(0xffffffffffffffff, &(0x7f0000000d00)='1:0\n', 0x4)
close(0xffffffffffffffff)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./sys/block/md0/md/dev-ram0/slot\x00', 0x1, 0x0)
write(r4, &(0x7f0000000f00)='0\n', 0x2)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./sys/block/md0/md/array_state\x00', 0x1, 0x0)
write(r5, &(0x7f0000001100)='active\n', 0x7)
close(r5)
r6 = openat(0xffffffffffffff9c, &(0x7f0000001200)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0)
write(r6, &(0x7f0000001300)='1:1\n', 0x4)
close(r6)
nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./sys/block/md0/md/dev-ram1/slot\x00', 0x1, 0x0)
write(r7, &(0x7f0000001500)='1\n', 0x2)
close(r7)

1.266395861s ago: executing program 0 (id=2128):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='sysfs\x00', &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0)
write(r0, &(0x7f0000000500)='md0\n', 0x4)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/block/md0/md/metadata_version\x00', 0x1, 0x0)
write(r1, &(0x7f0000000700)='none\n', 0x5)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/block/md0/md/level\x00', 0x1, 0x0)
write(r2, &(0x7f0000000900)='raid1\n', 0x6)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0)
write(r3, &(0x7f0000000b00)='2\n', 0x2)
close(r3)
write(0xffffffffffffffff, &(0x7f0000000d00)='1:0\n', 0x4)
close(0xffffffffffffffff)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./sys/block/md0/md/dev-ram0/slot\x00', 0x1, 0x0)
write(r4, &(0x7f0000000f00)='0\n', 0x2)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./sys/block/md0/md/array_state\x00', 0x1, 0x0)
write(r5, &(0x7f0000001100)='active\n', 0x7)
close(r5)
r6 = openat(0xffffffffffffff9c, &(0x7f0000001200)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0)
write(r6, &(0x7f0000001300)='1:1\n', 0x4)
close(r6)
nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./sys/block/md0/md/dev-ram1/slot\x00', 0x1, 0x0)
write(r7, &(0x7f0000001500)='1\n', 0x2)
close(r7)

1.095535399s ago: executing program 4 (id=2129):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'dummy0\x00'})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000007c0)={'bond_slave_1\x00'})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/class/net/bond0/bonding/slaves\x00', 0x2, 0x0)
write(r1, &(0x7f0000000480)='-bond_slave_', 0xc)
write(r1, &(0x7f00000004c0)='-bond_slave_1\n\x00', 0xe)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000500)={'bond0\x00'})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/class/net/bond0/bonding/mode\x00', 0x2, 0x0)
write(r2, &(0x7f0000000580)='balance-alb\n\x00', 0xc)
r3 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./sys/class/net/bond0/bonding/slaves\x00', 0x2, 0x0)
write(r3, &(0x7f0000000600)='+dummy0\n\x00', 0x8)
close(r3)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000640)={'bond0\x00', 0x1})
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f00000006c0)={'bond0\x00', @local})

991.842323ms ago: executing program 5 (id=2130):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='sysfs\x00', &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0)
write(r0, &(0x7f0000000500)='md0\n', 0x4)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/block/md0/md/metadata_version\x00', 0x1, 0x0)
write(r1, &(0x7f0000000700)='none\n', 0x5)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/block/md0/md/level\x00', 0x1, 0x0)
write(r2, &(0x7f0000000900)='raid1\n', 0x6)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0)
write(r3, &(0x7f0000000b00)='2\n', 0x2)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0)
write(r4, &(0x7f0000000d00)='1:0\n', 0x4)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./sys/block/md0/md/dev-ram0/slot\x00', 0x1, 0x0)
write(r5, &(0x7f0000000f00)='0\n', 0x2)
close(r5)
r6 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./sys/block/md0/md/array_state\x00', 0x1, 0x0)
write(r6, &(0x7f0000001100)='active\n', 0x7)
close(r6)
r7 = openat(0xffffffffffffff9c, &(0x7f0000001200)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0)
write(r7, &(0x7f0000001300)='1:1\n', 0x4)
close(r7)
nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./sys/block/md0/md/dev-ram1/slot\x00', 0x1, 0x0)
write(r8, &(0x7f0000001500)='1\n', 0x2)
close(r8)

932.200696ms ago: executing program 4 (id=2131):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000000)=0x1, 0x4)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
listen(r0, 0x5)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000080)=0x1, 0x4)
bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @loopback}, 0x10)
connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
r2 = accept4$inet(r0, 0x0, 0x0, 0x0)
close(r1)
close(r2)
nanosleep(&(0x7f0000000180)={0x0, 0x1dcd6500}, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f00000001c0)=0x1, 0x4)
bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e21, @loopback}, 0x10)
connect$inet(r3, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10)

771.023084ms ago: executing program 0 (id=2132):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'dummy0\x00'})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000007c0)={'bond_slave_1\x00'})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/class/net/bond0/bonding/slaves\x00', 0x2, 0x0)
write(r1, &(0x7f0000000480)='-bond_sl', 0x8)
write(r1, &(0x7f00000004c0)='-bond_slave_1\n\x00', 0xe)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000500)={'bond0\x00'})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/class/net/bond0/bonding/mode\x00', 0x2, 0x0)
write(r2, &(0x7f0000000580)='balance-alb\n\x00', 0xc)
r3 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./sys/class/net/bond0/bonding/slaves\x00', 0x2, 0x0)
write(r3, &(0x7f0000000600)='+dummy0\n\x00', 0x8)
close(r3)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000640)={'bond0\x00', 0x1})
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f00000006c0)={'bond0\x00', @local})

560.571434ms ago: executing program 0 (id=2133):
r0 = socket$netlink(0x10, 0x3, 0x10)
connect$netlink(r0, &(0x7f0000000000), 0xc)
write(r0, &(0x7f0000000100)="3c0000001000050001000000000000000a010000250001004142434445464748494a4b4c4d4e4f505152535455565758595a30313233343500000000", 0x3c)
write(r0, &(0x7f0000000100)="3c0000001100050001000000000000000a010000250001004142434445464748494a4b4c4d4e4f505152535455565758595a30313233343500000000", 0x3c)
write(r0, &(0x7f0000000100)="3c0000001200050001000000000000000a010000250001004142434445464748494a4b4c4d4e4f505152535455565758595a30313233343500000000", 0x3c)
write(r0, &(0x7f0000000100)="3c0000001300050001000000000000000a010000250001004142434445464748494a4b4c4d4e4f505152535455565758595a30313233343500000000", 0x3c)
write(r0, &(0x7f0000000100)="3c0000001400050001000000000000000a010000250001004142434445464748494a4b4c4d4e4f505152535455565758595a30313233343500000000", 0x3c)
write(r0, &(0x7f0000000100)="3c0000001500050001000000000000000a010000250001004142434445464748494a4b4c4d4e4f505152535455565758595a30313233343500000000", 0x3c)
write(r0, &(0x7f0000000100)="3c0000001600050001000000000000000a010000250001004142434445464748494a4b4c4d4e4f505152535455565758595a30313233343500000000", 0x3c)
write(r0, &(0x7f0000000100)="3c0000001700050001000000000000000a010000250001004142434445464748494a4b4c4d4e4f505152535455565758595a30313233343500000000", 0x3c)
write(r0, &(0x7f0000000100)="3c0000001800050001000000000000000a010000250001004142434445464748494a4b4c4d4e4f505152535455565758595a30313233343500000000", 0x3c)
write(r0, &(0x7f0000000100)="3c0000001900050001000000000000000a010000250001004142434445464748494a4b4c4d4e4f505152535455565758595a30313233343500000000", 0x3c)
write(r0, &(0x7f0000000100)="3c0000001a00050001000000000000000a010000250001004142434445464748494a4b4c4d4e4f505152535455565758595a30313233343500000000", 0x3c)
write(r0, &(0x7f0000000100)="3c0000001b00050001000000000000000a010000250001004142434445464748494a4b4c4d4e4f505152535455565758595a30313233343500000000", 0x3c)
write(r0, &(0x7f0000000100)="3c0000001c00050001000000000000000a010000250001004142434445464748494a4b4c4d4e4f505152535455565758595a30313233343500000000", 0x3c)
write(r0, &(0x7f0000000100)="3c0000001d00050001000000000000000a010000250001004142434445464748494a4b4c4d4e4f505152535455565758595a30313233343500000000", 0x3c)
write(r0, &(0x7f0000000100)="3c0000001e00050001000000000000000a010000250001004142434445464748494a4b4c4d4e4f505152535455565758595a30313233343500000000", 0x3c)
write(r0, &(0x7f0000000100)="3c0000001f00050001000000000000000a010000250001004142434445464748494a4b4c4d4e4f505152535455565758595a30313233343500000000", 0x3c)
write(r0, &(0x7f0000000100)="3c0000002000050001000000000000000a010000250001004142434445464748494a4b4c4d4e4f505152535455565758595a30313233343500000000", 0x3c)
write(r0, &(0x7f0000000100)="3c0000002100050001000000000000000a010000250001004142434445464748494a4b4c4d4e4f505152535455565758595a30313233343500000000", 0x3c)
write(r0, &(0x7f0000000100)="3c0000002200050001000000000000000a010000250001004142434445464748494a4b4c4d4e4f505152535455565758595a30313233343500000000", 0x3c)
write(r0, &(0x7f0000000100)="3c0000002300050001000000000000000a010000250001004142434445464748494a4b4c4d4e4f505152535455565758595a30313233343500000000", 0x3c)
write(r0, &(0x7f0000000100)="3c0000002400050001000000000000000a010000250001004142434445464748494a4b4c4d4e4f505152535455565758595a30313233343500000000", 0x3c)
write(r0, &(0x7f0000000100)="3c0000002500050001000000000000000a010000250001004142434445464748494a4b4c4d4e4f505152535455565758595a30313233343500000000", 0x3c)
write(r0, &(0x7f0000000100)="3c0000002600050001000000000000000a010000250001004142434445464748494a4b4c4d4e4f505152535455565758595a30313233343500000000", 0x3c)
write(r0, &(0x7f0000000100)="3c0000002800050001000000000000000a010000250001004142434445464748494a4b4c4d4e4f505152535455565758595a30313233343500000000", 0x3c)
write(r0, &(0x7f0000000100)="3c0000002a00050001000000000000000a010000250001004142434445464748494a4b4c4d4e4f505152535455565758595a30313233343500000000", 0x3c)
write(r0, &(0x7f0000000100)="3c0000002b00050001000000000000000a010000250001004142434445464748494a4b4c4d4e4f505152535455565758595a30313233343500000000", 0x3c)
write(r0, &(0x7f0000000100)="3c0000002c00050001000000000000000a010000250001004142434445464748494a4b4c4d4e4f505152535455565758595a30313233343500000000", 0x3c)
write(r0, &(0x7f0000000100)="3c0000002d00050001000000000000000a010000250001004142434445464748494a4b4c4d4e4f505152535455565758595a30313233343500000000", 0x3c)
write(r0, &(0x7f0000000100)="3c0000002e00050001000000000000000a010000250001004142434445464748494a4b4c4d4e4f505152535455565758595a30313233343500000000", 0x3c)
write(r0, &(0x7f0000000100)="3c0000002f00050001000000000000000a010000250001004142434445464748494a4b4c4d4e4f505152535455565758595a30313233343500000000", 0x3c)
write(r0, &(0x7f0000000100)="3c0000003000050001000000000000000a010000250001004142434445464748494a4b4c4d4e4f505152535455565758595a30313233343500000000", 0x3c)
write(r0, &(0x7f0000000100)="3c0000003100050001000000000000000a010000250001004142434445464748494a4b4c4d4e4f505152535455565758595a30313233343500000000", 0x3c)
write(r0, &(0x7f0000000100)="3c0000003200050001000000000000000a010000250001004142434445464748494a4b4c4d4e4f505152535455565758595a30313233343500000000", 0x3c)
write(r0, &(0x7f0000000100)="3c0000003400050001000000000000000a010000250001004142434445464748494a4b4c4d4e4f505152535455565758595a30313233343500000000", 0x3c)

556.946454ms ago: executing program 5 (id=2134):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'dummy0\x00'})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000007c0)={'bond_slave_1\x00'})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/class/net/bond0/bonding/slaves\x00', 0x2, 0x0)
write(r1, &(0x7f0000000480), 0x0)
write(r1, &(0x7f00000004c0)='-bond_slave_1\n\x00', 0xe)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000500)={'bond0\x00'})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/class/net/bond0/bonding/mode\x00', 0x2, 0x0)
write(r2, &(0x7f0000000580)='balance-alb\n\x00', 0xc)
r3 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./sys/class/net/bond0/bonding/slaves\x00', 0x2, 0x0)
write(r3, &(0x7f0000000600)='+dummy0\n\x00', 0x8)
close(r3)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000640)={'bond0\x00', 0x1})
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f00000006c0)={'bond0\x00', @local})

355.274203ms ago: executing program 5 (id=2135):
unshare(0x22020600)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prctl$PR_SET_SECUREBITS(0x1c, 0x15)
setuid(0xee00)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
socket$inet_udp(0x2, 0x2, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000100)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = syz_open_dev$ublk_chdev(&(0x7f0000000000), 0x0, 0x40100)
read(r1, &(0x7f0000000040)=""/21, 0x15)
futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}, {0x3, &(0x7f0000000040)=0x3, 0x2}], 0x2, 0x0, 0x0, 0x0)
futex(&(0x7f0000000140)=0x2, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10)
setresuid(0xee01, 0xffffffffffffffff, 0xffffffffffffffff)
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_pidfd_open(r3, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r2, &(0x7f0000000900)="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", 0x19a, 0x12, 0x0, 0x0)

348.017254ms ago: executing program 0 (id=2136):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='sysfs\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff)
mount(&(0x7f0000000140)=@filename='devtmpfs\x00', &(0x7f0000000180)='./dev\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000240)='md0\n\x00', 0x4)
close(0xffffffffffffffff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/md0\x00', 0x4002, 0x0)
ioctl(r0, 0x40480923, &(0x7f0000000300)="000000000000000000000000000000000100000000040000020000000200000000000000010000000000000000000000020000000200"/72)
ioctl(r0, 0x40140921, &(0x7f0000000400)="0000000001000000000000000000000006000000")
ioctl(r0, 0x40140921, &(0x7f0000000440)="0100000001000000010000000100000006000000")
ioctl(r0, 0x400c0930, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/sync_action\x00', 0x2, 0x0)
read(r1, &(0x7f0000000580)=""/32, 0x20)

161.030053ms ago: executing program 0 (id=2137):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/subsys0\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/subsys0/attr_allow_any_host\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='1\n', 0x2)
close(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff)
write(0xffffffffffffffff, &(0x7f0000000280)='ipv4\n', 0x5)
close(0xffffffffffffffff)
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='tcp\n', 0x4)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0)
write(r2, &(0x7f0000000380)='127.0.0.1\n', 0xa)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0)
write(r3, &(0x7f0000000400)='4420\n', 0x5)
close(r3)
symlinkat(&(0x7f0000000100)='./config/nvmet/subsystems/subsys0\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/ports/1/subsystems/subsys0\x00')
nanosleep(&(0x7f0000000480)={0x0, 0x1000000}, 0x0)
r4 = socket$inet(0x2, 0x1, 0x0)
connect$inet(r4, &(0x7f0000000500)={0x2, 0x1144, @loopback}, 0x10)
sendto$inet(r4, &(0x7f0000000600)="000080008000"/128, 0x80, 0x0, 0x0, 0x0)
sendto$inet(r4, &(0x7f0000000700)="040048004800"/72, 0x48, 0x0, 0x0, 0x0)

0s ago: executing program 4 (id=2138):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, 0x0, &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='md0\x00', 0x4)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./img\x00', 0x42, 0x1b6)
ftruncate(r1, 0x2000000)
pwrite64(r1, &(0x7f0000000280)="6269746d04000000001000000500000000000000", 0x14, 0x1000)
r2 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x2)
ioctl$LOOP_SET_FD(r2, 0x4c00, r1)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0)
ioctl(r3, 0x40480923, &(0x7f0000000400)="000000000000000000000000000000000100000000040000010000000100000000000000010000000000000000000000010000000100"/72)
ioctl(r3, 0x40140921, &(0x7f0000000500)="0000000007000000000000000000000006000000")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/block/md0/md/dev-loop0/offset\x00', 0x2, 0x0)
write(r4, &(0x7f0000000700)='16\x00', 0x3)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/block/md0/md/dev-loop0/size\x00', 0x2, 0x0)
write(r5, &(0x7f0000000840)='65500\x00', 0x6)
close(r5)
ioctl(r3, 0x400c0930, &(0x7f0000000700)='\x00'/12)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/block/md0/md/bitmap/location\x00', 0x2, 0x0)
write(r6, &(0x7f0000000940)='8\x00', 0x2)

kernel console output (not intermixed with test programs):

28): pid=7096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.728" name="file2" dev="loop3" ino=89 res=0 errno=0
[  359.157189][ T7126] zram: Cannot change disksize for initialized device
[  360.165063][ T7132] netlink: 44 bytes leftover after parsing attributes in process `syz.1.743'.
[  362.028899][ T7152] overlayfs: unrecognized mount option "mask=MAY_WRITE" or missing value
[  362.066703][ T7153] FAULT_INJECTION: forcing a failure.
[  362.066703][ T7153] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  362.122562][ T7157] overlayfs: missing 'lowerdir'
[  362.124272][ T7153] CPU: 0 PID: 7153 Comm: syz.5.750 Not tainted syzkaller #0
[  362.137330][ T7153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  362.148327][ T7153] Call Trace:
[  362.153072][ T7153]  <TASK>
[  362.156081][ T7153]  dump_stack_lvl+0x188/0x24e
[  362.162861][ T7153]  ? show_regs_print_info+0x12/0x12
[  362.168625][ T7153]  ? load_image+0x410/0x410
[  362.173985][ T7153]  ? __lock_acquire+0x7c40/0x7c40
[  362.180048][ T7153]  should_fail_ex+0x390/0x4c0
[  362.185648][ T7153]  strncpy_from_user+0x32/0x340
[  362.191355][ T7153]  getname_flags+0xf2/0x500
[  362.197332][ T7153]  __x64_sys_execve+0x74/0xa0
[  362.202206][ T7153]  do_syscall_64+0x4c/0xa0
[  362.207636][ T7153]  ? clear_bhb_loop+0x60/0xb0
[  362.213179][ T7153]  ? clear_bhb_loop+0x60/0xb0
[  362.218450][ T7153]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  362.224849][ T7153] RIP: 0033:0x7f9b5f59e159
[  362.230657][ T7153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  362.260161][ T7153] RSP: 002b:00007f9b6048b028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b
[  362.270131][ T7153] RAX: ffffffffffffffda RBX: 00007f9b5f825fa0 RCX: 00007f9b5f59e159
[  362.278879][ T7153] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000000
[  362.290041][ T7153] RBP: 00007f9b5f63506b R08: 0000000000000000 R09: 0000000000000000
[  362.299373][ T7153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  362.309914][ T7153] R13: 00007f9b5f826038 R14: 00007f9b5f825fa0 R15: 00007ffe96d50a58
[  362.321829][ T7153]  </TASK>
[  363.135395][ T7179] netlink: 44 bytes leftover after parsing attributes in process `syz.0.756'.
[  363.406218][ T7181] loop5: detected capacity change from 0 to 8192
[  363.624058][   T26] audit: type=1326 audit(1790091154.216:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7185 comm="syz.4.759" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f48ed39e159 code=0x0
[  365.752773][ T7198] Zero length message leads to an empty skb
[  367.515636][   T26] audit: type=1326 audit(1790091158.116:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7219 comm="syz.5.772" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9b5f59e159 code=0x0
[  370.044749][ T7249] loop5: detected capacity change from 0 to 164
[  370.112985][ T7251] FAULT_INJECTION: forcing a failure.
[  370.112985][ T7251] name failslab, interval 1, probability 0, space 0, times 0
[  370.157815][ T7251] CPU: 1 PID: 7251 Comm: syz.3.782 Not tainted syzkaller #0
[  370.165300][ T7251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  370.176192][ T7251] Call Trace:
[  370.176205][ T7251]  <TASK>
[  370.176214][ T7251]  dump_stack_lvl+0x188/0x24e
[  370.176249][ T7251]  ? show_regs_print_info+0x12/0x12
[  370.193728][ T7251]  ? load_image+0x410/0x410
[  370.198841][ T7251]  ? __might_sleep+0xd0/0xd0
[  370.203828][ T7251]  ? __lock_acquire+0x7c40/0x7c40
[  370.209391][ T7251]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  370.215720][ T7251]  ? read_lock_is_recursive+0x10/0x10
[  370.222144][ T7251]  should_fail_ex+0x390/0x4c0
[  370.227070][ T7251]  should_failslab+0x5/0x20
[  370.231606][ T7251]  slab_pre_alloc_hook+0x59/0x300
[  370.237029][ T7251]  ? finish_task_switch+0x262/0x8e0
[  370.242301][ T7251]  kmem_cache_alloc+0x56/0x2f0
[  370.247331][ T7251]  ? mas_alloc_nodes+0x2ec/0x880
[  370.253144][ T7251]  mas_alloc_nodes+0x2ec/0x880
[  370.257977][ T7251]  mas_preallocate+0x162/0x3b0
[  370.263028][ T7251]  do_mas_align_munmap+0x239/0x12d0
[  370.268388][ T7251]  ? do_mas_munmap+0x2b0/0x2b0
[  370.274175][ T7251]  ? mtree_range_walk+0x664/0x780
[  370.280069][ T7251]  ? mas_walk+0x15f/0x180
[  370.285192][ T7251]  ? mas_find+0x1ba/0x220
[  370.289660][ T7251]  do_mas_munmap+0x240/0x2b0
[  370.294842][ T7251]  mmap_region+0x7ab/0x1c50
[  370.300819][ T7251]  ? file_mmap_ok+0x170/0x170
[  370.305552][ T7251]  ? validate_mm+0x23f/0x2e0
[  370.310217][ T7251]  ? arch_get_unmapped_area+0x640/0x640
[  370.316109][ T7251]  ? cap_mmap_addr+0x153/0x2c0
[  370.321222][ T7251]  do_mmap+0x9ce/0x10d0
[  370.326558][ T7251]  ? mlock_future_check+0x100/0x100
[  370.332521][ T7251]  ? ima_file_mmap+0xf7/0x140
[  370.337367][ T7251]  ? ima_file_free+0x3e0/0x3e0
[  370.342293][ T7251]  vm_mmap_pgoff+0x1c1/0x2d0
[  370.347263][ T7251]  ? account_locked_vm+0xe0/0xe0
[  370.352732][ T7251]  ? ksys_mmap_pgoff+0xef/0x720
[  370.357978][ T7251]  ? lockdep_hardirqs_on+0x94/0x140
[  370.363419][ T7251]  do_syscall_64+0x4c/0xa0
[  370.368487][ T7251]  ? clear_bhb_loop+0x60/0xb0
[  370.373199][ T7251]  ? clear_bhb_loop+0x60/0xb0
[  370.379121][ T7251]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  370.385843][ T7251] RIP: 0033:0x7f37bd99e159
[  370.390990][ T7251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  370.416212][ T7251] RSP: 002b:00007f37bbbf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  370.427219][ T7251] RAX: ffffffffffffffda RBX: 00007f37bdc25fa0 RCX: 00007f37bd99e159
[  370.437066][ T7251] RDX: 0000000002000007 RSI: 0000000008000002 RDI: 000000110c230000
[  370.445872][ T7251] RBP: 00007f37bda3506b R08: ffffffffffffffff R09: 0000000000000000
[  370.454505][ T7251] R10: 000000000401d031 R11: 0000000000000246 R12: 0000000000000000
[  370.464438][ T7251] R13: 00007f37bdc26038 R14: 00007f37bdc25fa0 R15: 00007ffd9d389698
[  370.473352][ T7251]  </TASK>
[  370.697687][ T7251] overlayfs: unrecognized mount option "mask=MAY_WRITE" or missing value
[  370.808597][   T26] audit: type=1326 audit(1790091161.416:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7260 comm="syz.1.784" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5fb859e159 code=0x0
[  371.818887][ T7274] loop1: detected capacity change from 0 to 164
[  373.000818][ T7290] loop0: detected capacity change from 0 to 164
[  374.582268][   T26] audit: type=1326 audit(1790091165.186:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7306 comm="syz.0.799" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2623d9e159 code=0x0
[  379.715684][ T1282] ieee802154 phy0 wpan0: encryption failed: -22
[  379.723116][   T26] audit: type=1326 audit(1790091170.186:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7344 comm="syz.1.811" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5fb859e159 code=0x0
[  379.795683][ T1282] ieee802154 phy1 wpan1: encryption failed: -22
[  380.561309][ T7356] FAULT_INJECTION: forcing a failure.
[  380.561309][ T7356] name fail_futex, interval 1, probability 0, space 0, times 0
[  380.622226][ T7356] CPU: 0 PID: 7356 Comm: syz.0.801 Not tainted syzkaller #0
[  380.632432][ T7356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  380.643775][ T7356] Call Trace:
[  380.648251][ T7356]  <TASK>
[  380.651511][ T7356]  dump_stack_lvl+0x188/0x24e
[  380.658263][ T7356]  ? show_regs_print_info+0x12/0x12
[  380.664843][ T7356]  ? load_image+0x410/0x410
[  380.670421][ T7356]  ? mark_lock+0x94/0x320
[  380.675006][ T7356]  should_fail_ex+0x390/0x4c0
[  380.680385][ T7356]  get_futex_key+0x1b1/0x1000
[  380.685320][ T7356]  ? futex_setup_timer+0xc0/0xc0
[  380.690773][ T7356]  ? verify_lock_unused+0x140/0x140
[  380.696600][ T7356]  futex_wake+0x123/0x4f0
[  380.701542][ T7356]  ? futex_wake_mark+0x150/0x150
[  380.706778][ T7356]  do_futex+0x2e2/0x320
[  380.711100][ T7356]  ? __ia32_sys_get_robust_list+0x100/0x100
[  380.717251][ T7356]  __se_sys_futex+0x381/0x410
[  380.722102][ T7356]  ? __x64_sys_futex+0xf0/0xf0
[  380.727597][ T7356]  ? __x64_sys_futex+0x1d/0xf0
[  380.732590][ T7356]  do_syscall_64+0x4c/0xa0
[  380.738061][ T7356]  ? clear_bhb_loop+0x60/0xb0
[  380.743292][ T7356]  ? clear_bhb_loop+0x60/0xb0
[  380.748332][ T7356]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  380.754448][ T7356] RIP: 0033:0x7f2623d9e159
[  380.760157][ T7356] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  380.788434][ T7356] RSP: 002b:00007f2624bb70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  380.798893][ T7356] RAX: ffffffffffffffda RBX: 00007f2624025fa8 RCX: 00007f2623d9e159
[  380.810292][ T7356] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2624025fac
[  380.820649][ T7356] RBP: 00007f2624025fa0 R08: 001de0564b118a9a R09: 0000000000000000
[  380.830788][ T7356] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  380.841283][ T7356] R13: 00007f2624026038 R14: 00007ffd1d95a0e0 R15: 00007ffd1d95a1c8
[  380.850664][ T7356]  </TASK>
[  381.761233][ T7368] bridge0: port 3(syz_tun) entered blocking state
[  381.799087][ T7368] bridge0: port 3(syz_tun) entered disabled state
[  381.913516][ T7372] 8250_pericom: probe of 0000:00:00.0 failed with error -12
[  382.824240][ T7384] serio: Serial port ttyS3
[  383.471953][ T7387] zram: Can't change algorithm for initialized device
[  383.528232][   T26] audit: type=1800 audit(1790091174.136:34): pid=7362 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.815" name="syzkaller0" dev="sda1" ino=2050 res=0 errno=0
[  383.770453][   T26] audit: type=1800 audit(1790091174.166:35): pid=7365 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.815" name="syzkaller0" dev="sda1" ino=2050 res=0 errno=0
[  384.594160][   T26] audit: type=1326 audit(1790091174.276:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7388 comm="syz.1.822" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5fb859e159 code=0x0
[  384.811379][ T7399] FAULT_INJECTION: forcing a failure.
[  384.811379][ T7399] name fail_futex, interval 1, probability 0, space 0, times 0
[  384.914786][ T7399] CPU: 1 PID: 7399 Comm: syz.1.826 Not tainted syzkaller #0
[  384.922821][ T7399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  384.934760][ T7399] Call Trace:
[  384.938097][ T7399]  <TASK>
[  384.941364][ T7399]  dump_stack_lvl+0x188/0x24e
[  384.946907][ T7399]  ? show_regs_print_info+0x12/0x12
[  384.952860][ T7399]  ? load_image+0x410/0x410
[  384.957528][ T7399]  ? mark_lock+0x94/0x320
[  384.962233][ T7399]  should_fail_ex+0x390/0x4c0
[  384.968421][ T7399]  get_futex_key+0x1b1/0x1000
[  384.974817][ T7399]  ? futex_setup_timer+0xc0/0xc0
[  384.980483][ T7399]  ? verify_lock_unused+0x140/0x140
[  384.987689][ T7399]  futex_wake+0x123/0x4f0
[  384.992615][ T7399]  ? futex_wake_mark+0x150/0x150
[  384.998435][ T7399]  do_futex+0x2e2/0x320
[  385.002953][ T7399]  ? __ia32_sys_get_robust_list+0x100/0x100
[  385.010070][ T7399]  __se_sys_futex+0x381/0x410
[  385.016483][ T7399]  ? __x64_sys_futex+0xf0/0xf0
[  385.021954][ T7399]  ? __x64_sys_futex+0x1d/0xf0
[  385.027915][ T7399]  do_syscall_64+0x4c/0xa0
[  385.032588][ T7399]  ? clear_bhb_loop+0x60/0xb0
[  385.037826][ T7399]  ? clear_bhb_loop+0x60/0xb0
[  385.042878][ T7399]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  385.049560][ T7399] RIP: 0033:0x7f5fb859e159
[  385.054469][ T7399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  385.075320][ T7399] RSP: 002b:00007f5fb94c40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  385.085040][ T7399] RAX: ffffffffffffffda RBX: 00007f5fb8825fa8 RCX: 00007f5fb859e159
[  385.094287][ T7399] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f5fb8825fac
[  385.105604][ T7399] RBP: 00007f5fb8825fa0 R08: 002cc70919be2e50 R09: 0000000000000000
[  385.115174][ T7399] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  385.125365][ T7399] R13: 00007f5fb8826038 R14: 00007ffeffe18f10 R15: 00007ffeffe18ff8
[  385.134441][ T7399]  </TASK>
[  385.178219][ T7403] loop5: detected capacity change from 0 to 164
[  385.787379][ T7414] 8250_pericom: probe of 0000:00:00.0 failed with error -12
[  387.417330][ T7441] loop0: detected capacity change from 0 to 164
[  387.526251][ T7443] loop3: detected capacity change from 0 to 164
[  389.661677][ T7467] zram: Can't change algorithm for initialized device
[  389.723652][   T26] audit: type=1800 audit(1790091180.326:37): pid=7449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.841" name="syzkaller0" dev="sda1" ino=2050 res=0 errno=0
[  389.841988][   T26] audit: type=1800 audit(1790091180.326:38): pid=7451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.841" name="syzkaller0" dev="sda1" ino=2050 res=0 errno=0
[  390.473724][ T7481] bridge0: port 3(syz_tun) entered blocking state
[  390.482908][ T7481] bridge0: port 3(syz_tun) entered disabled state
[  390.597786][ T7481] FAULT_INJECTION: forcing a failure.
[  390.597786][ T7481] name failslab, interval 1, probability 0, space 0, times 0
[  390.629721][ T7481] CPU: 1 PID: 7481 Comm: syz.3.852 Not tainted syzkaller #0
[  390.638670][ T7481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  390.650873][ T7481] Call Trace:
[  390.654216][ T7481]  <TASK>
[  390.657445][ T7481]  dump_stack_lvl+0x188/0x24e
[  390.662458][ T7481]  ? show_regs_print_info+0x12/0x12
[  390.668073][ T7481]  ? load_image+0x410/0x410
[  390.672879][ T7481]  ? __might_sleep+0xd0/0xd0
[  390.677869][ T7481]  ? __lock_acquire+0x7c40/0x7c40
[  390.683042][ T7481]  ? aa_file_perm+0x3ea/0xf00
[  390.688101][ T7481]  should_fail_ex+0x390/0x4c0
[  390.692823][ T7481]  should_failslab+0x5/0x20
[  390.697700][ T7481]  slab_pre_alloc_hook+0x59/0x300
[  390.702951][ T7481]  ? kernfs_fop_write_iter+0x154/0x520
[  390.708472][ T7481]  __kmem_cache_alloc_node+0x4f/0x270
[  390.714583][ T7481]  ? kernfs_fop_write_iter+0x154/0x520
[  390.720499][ T7481]  __kmalloc+0xa3/0x240
[  390.724953][ T7481]  kernfs_fop_write_iter+0x154/0x520
[  390.731755][ T7481]  vfs_write+0x482/0x9a0
[  390.736212][ T7481]  ? file_end_write+0x250/0x250
[  390.741401][ T7481]  ? __fget_files+0x3fc/0x460
[  390.746329][ T7481]  ? __fdget_pos+0x2ae/0x360
[  390.751998][ T7481]  ? ksys_write+0x70/0x260
[  390.756621][ T7481]  ksys_write+0x14d/0x260
[  390.761081][ T7481]  ? __ia32_sys_read+0x80/0x80
[  390.765978][ T7481]  ? lockdep_hardirqs_on+0x94/0x140
[  390.771293][ T7481]  do_syscall_64+0x4c/0xa0
[  390.776178][ T7481]  ? clear_bhb_loop+0x60/0xb0
[  390.780978][ T7481]  ? clear_bhb_loop+0x60/0xb0
[  390.785772][ T7481]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  390.791890][ T7481] RIP: 0033:0x7f37bd99e159
[  390.797549][ T7481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  390.819767][ T7481] RSP: 002b:00007f37bbbf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  390.829090][ T7481] RAX: ffffffffffffffda RBX: 00007f37bdc25fa0 RCX: 00007f37bd99e159
[  390.838487][ T7481] RDX: 0000000000000001 RSI: 0000200000000500 RDI: 000000000000000b
[  390.849534][ T7481] RBP: 00007f37bda3506b R08: 0000000000000000 R09: 0000000000000000
[  390.858808][ T7481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  390.868411][ T7481] R13: 00007f37bdc26038 R14: 00007f37bdc25fa0 R15: 00007ffd9d389698
[  390.877643][ T7481]  </TASK>
[  390.966622][ T7471] ip_tables: iptables: counters copy to user failed while replacing table
[  391.061074][ T7488] loop5: detected capacity change from 0 to 256
[  392.127711][ T7488] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  393.145853][ T7504] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  393.844840][ T7500] netlink: 44 bytes leftover after parsing attributes in process `syz.3.858'.
[  394.440731][ T7517] FAULT_INJECTION: forcing a failure.
[  394.440731][ T7517] name failslab, interval 1, probability 0, space 0, times 0
[  394.549826][ T7517] CPU: 0 PID: 7517 Comm: syz.3.862 Not tainted syzkaller #0
[  394.557560][ T7517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  394.568519][ T7517] Call Trace:
[  394.573526][ T7517]  <TASK>
[  394.576511][ T7517]  dump_stack_lvl+0x188/0x24e
[  394.581258][ T7517]  ? show_regs_print_info+0x12/0x12
[  394.587663][ T7517]  ? load_image+0x410/0x410
[  394.592239][ T7517]  ? __lock_acquire+0x7c40/0x7c40
[  394.597702][ T7517]  ? trace_raw_output_contention_end+0xd0/0xd0
[  394.605077][ T7517]  should_fail_ex+0x390/0x4c0
[  394.610172][ T7517]  should_failslab+0x5/0x20
[  394.614872][ T7517]  slab_pre_alloc_hook+0x59/0x300
[  394.620056][ T7517]  ? pty_common_install+0xae/0x780
[  394.625407][ T7517]  __kmem_cache_alloc_node+0x4f/0x270
[  394.631190][ T7517]  ? tty_init_dev+0x70/0x4c0
[  394.636031][ T7517]  ? pty_common_install+0xae/0x780
[  394.642612][ T7517]  kmalloc_trace+0x26/0xe0
[  394.647257][ T7517]  pty_common_install+0xae/0x780
[  394.652439][ T7517]  ? devpts_mntget+0x310/0x310
[  394.657364][ T7517]  tty_init_dev+0xcf/0x4c0
[  394.661863][ T7517]  ptmx_open+0xdb/0x2c0
[  394.666467][ T7517]  ? pty_start+0x140/0x140
[  394.671040][ T7517]  chrdev_open+0x585/0x5f0
[  394.676306][ T7517]  ? cd_forget+0x160/0x160
[  394.680903][ T7517]  ? fsnotify_perm+0x39b/0x550
[  394.685734][ T7517]  ? cd_forget+0x160/0x160
[  394.690209][ T7517]  do_dentry_open+0x7dd/0x10b0
[  394.695802][ T7517]  path_openat+0x2674/0x2f10
[  394.700675][ T7517]  ? verify_lock_unused+0x140/0x140
[  394.705951][ T7517]  ? do_sys_openat2+0xdd/0x4f0
[  394.710828][ T7517]  ? do_filp_open+0x420/0x420
[  394.715585][ T7517]  do_filp_open+0x1ee/0x420
[  394.720150][ T7517]  ? vfs_tmpfile+0x470/0x470
[  394.725693][ T7517]  ? _raw_spin_unlock+0x24/0x40
[  394.731481][ T7517]  ? alloc_fd+0x590/0x640
[  394.736506][ T7517]  do_sys_openat2+0x14b/0x4f0
[  394.741445][ T7517]  ? do_sys_open+0xe0/0xe0
[  394.745935][ T7517]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  394.752265][ T7517]  ? lock_chain_count+0x20/0x20
[  394.757276][ T7517]  __x64_sys_openat+0x135/0x160
[  394.762296][ T7517]  do_syscall_64+0x4c/0xa0
[  394.766976][ T7517]  ? clear_bhb_loop+0x60/0xb0
[  394.771730][ T7517]  ? clear_bhb_loop+0x60/0xb0
[  394.776472][ T7517]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  394.782791][ T7517] RIP: 0033:0x7f37bd99e159
[  394.787357][ T7517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  394.807552][ T7517] RSP: 002b:00007f37bbbf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  394.816385][ T7517] RAX: ffffffffffffffda RBX: 00007f37bdc25fa0 RCX: 00007f37bd99e159
[  394.824509][ T7517] RDX: 0000000000008000 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  394.832718][ T7517] RBP: 00007f37bda3506b R08: 0000000000000000 R09: 0000000000000000
[  394.841552][ T7517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  394.850369][ T7517] R13: 00007f37bdc26038 R14: 00007f37bdc25fa0 R15: 00007ffd9d389698
[  394.858770][ T7517]  </TASK>
[  395.649376][ T7525] overlayfs: unrecognized mount option "mask=MAY_WRITE" or missing value
[  395.729734][ T7531] 8250_pericom: probe of 0000:00:00.0 failed with error -12
[  396.242787][ T7539] overlayfs: missing 'lowerdir'
[  396.528044][ T7547] overlayfs: failed to clone upperpath
[  396.805758][ T7550] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  397.464735][ T7557] netlink: 44 bytes leftover after parsing attributes in process `syz.0.872'.
[  398.679770][ T7578] netlink: 'syz.5.878': attribute type 5 has an invalid length.
[  398.687717][ T7578] netlink: 4 bytes leftover after parsing attributes in process `syz.5.878'.
[  399.168706][ T7583] loop0: detected capacity change from 0 to 512
[  399.311971][ T7583] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002]
[  399.332615][ T7583] System zones: 0-2, 18-18, 34-35
[  400.386837][ T7583] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  400.465135][ T7583] ext4 filesystem being mounted at /165/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  400.679694][ T4276] EXT4-fs (loop0): unmounting filesystem.
[  400.858287][ T7604] FAULT_INJECTION: forcing a failure.
[  400.858287][ T7604] name failslab, interval 1, probability 0, space 0, times 0
[  400.896163][ T7604] CPU: 0 PID: 7604 Comm: syz.0.886 Not tainted syzkaller #0
[  400.904710][ T7604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  400.915614][ T7604] Call Trace:
[  400.919068][ T7604]  <TASK>
[  400.923464][ T7604]  dump_stack_lvl+0x188/0x24e
[  400.929352][ T7604]  ? show_regs_print_info+0x12/0x12
[  400.935353][ T7604]  ? load_image+0x410/0x410
[  400.941406][ T7604]  ? __might_sleep+0xd0/0xd0
[  400.946330][ T7604]  ? __lock_acquire+0x7c40/0x7c40
[  400.952253][ T7604]  should_fail_ex+0x390/0x4c0
[  400.958130][ T7604]  should_failslab+0x5/0x20
[  400.964001][ T7604]  slab_pre_alloc_hook+0x59/0x300
[  400.970312][ T7604]  ? __key_instantiate_and_link+0x40d/0x4c0
[  400.976524][ T7604]  ? assoc_array_insert+0x8f/0x3080
[  400.983878][ T7604]  __kmem_cache_alloc_node+0x4f/0x270
[  400.989871][ T7604]  ? assoc_array_insert+0x8f/0x3080
[  400.996034][ T7604]  kmalloc_trace+0x26/0xe0
[  401.000650][ T7604]  assoc_array_insert+0x8f/0x3080
[  401.006210][ T7604]  ? key_payload_reserve+0x3b0/0x3b0
[  401.012002][ T7604]  ? do_raw_spin_unlock+0x11d/0x230
[  401.017901][ T7604]  ? rwsem_write_trylock+0x135/0x1c0
[  401.023965][ T7604]  ? clear_nonspinnable+0x60/0x60
[  401.029257][ T7604]  __key_link_begin+0xd2/0x1e0
[  401.034573][ T7604]  key_link+0xd6/0x350
[  401.038799][ T7604]  call_sbin_request_key+0x42a/0xc40
[  401.045208][ T7604]  ? request_key_rcu+0x2f0/0x2f0
[  401.050531][ T7604]  ? request_key_auth_rcu_disposal+0x20/0x20
[  401.057293][ T7604]  ? up_write+0x1b6/0x410
[  401.062036][ T7604]  request_key_and_link+0xde6/0x1400
[  401.068623][ T7604]  ? request_key_and_link+0x2ae/0x1400
[  401.076498][ T7604]  ? complete_request_key+0xa0/0xa0
[  401.083467][ T7604]  ? __might_sleep+0xd0/0xd0
[  401.089460][ T7604]  ? asymmetric_key_cmp+0x240/0x240
[  401.095094][ T7604]  ? keyring_search_rcu+0x280/0x280
[  401.101105][ T7604]  ? down_read+0x1a8/0x2d0
[  401.106269][ T7604]  __se_sys_request_key+0x293/0x350
[  401.112361][ T7604]  ? __x64_sys_request_key+0xa0/0xa0
[  401.118082][ T7604]  ? lockdep_hardirqs_on+0x94/0x140
[  401.124837][ T7604]  do_syscall_64+0x4c/0xa0
[  401.129758][ T7604]  ? clear_bhb_loop+0x60/0xb0
[  401.135166][ T7604]  ? clear_bhb_loop+0x60/0xb0
[  401.140531][ T7604]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  401.146823][ T7604] RIP: 0033:0x7f2623d9e159
[  401.151565][ T7604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  401.172562][ T7604] RSP: 002b:00007f2624bb7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9
[  401.183375][ T7604] RAX: ffffffffffffffda RBX: 00007f2624025fa0 RCX: 00007f2623d9e159
[  401.191855][ T7604] RDX: 0000200000001fee RSI: 0000200000001ffb RDI: 0000200000000040
[  401.200930][ T7604] RBP: 00007f2623e3506b R08: 0000000000000000 R09: 0000000000000000
[  401.209695][ T7604] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000000
[  401.220898][ T7604] R13: 00007f2624026038 R14: 00007f2624025fa0 R15: 00007ffd1d95a1c8
[  401.229236][ T7604]  </TASK>
[  401.254045][ T7605] netlink: 'syz.5.887': attribute type 1 has an invalid length.
[  401.699799][ T7614] netlink: 44 bytes leftover after parsing attributes in process `syz.5.889'.
[  402.647152][ T7623] netlink: 'syz.0.891': attribute type 5 has an invalid length.
[  402.655259][ T7623] netlink: 4 bytes leftover after parsing attributes in process `syz.0.891'.
[  403.193395][ T7631] loop0: detected capacity change from 0 to 164
[  403.908855][ T7648] fuse: Bad value for 'fd'
[  404.205547][ T7657] netlink: 44 bytes leftover after parsing attributes in process `syz.0.902'.
[  405.442495][ T7684] fuse: Bad value for 'fd'
[  405.477536][ T7681] loop0: detected capacity change from 0 to 164
[  405.676070][ T7687] overlayfs: missing 'workdir'
[  406.206383][ T7703] serio: Serial port ttyS3
[  406.577469][ T7715] netlink: 44 bytes leftover after parsing attributes in process `syz.3.923'.
[  407.282227][ T7722] overlayfs: failed to get inode (-116)
[  407.322888][ T7722] overlayfs: failed to look up (file0) for ino (-116)
[  407.598449][ T7726] fuse: Bad value for 'fd'
[  407.680394][ T7730] loop0: detected capacity change from 0 to 164
[  408.572198][ T7752] loop0: detected capacity change from 0 to 512
[  408.649749][ T7752] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002]
[  408.739068][ T7752] System zones: 0-2, 18-18, 34-35
[  408.782363][   T26] audit: type=1800 audit(1790091199.386:39): pid=7732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.930" name="syzkaller0" dev="sda1" ino=2050 res=0 errno=0
[  408.805839][ T7752] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  408.824159][ T7752] ext4 filesystem being mounted at /178/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  408.987976][ T4276] EXT4-fs (loop0): unmounting filesystem.
[  409.019273][ T7762] zram: Can't change algorithm for initialized device
[  410.353720][ T7790] overlayfs: unrecognized mount option "mask=MAY_WRITE" or missing value
[  411.120363][ T7803] FAULT_INJECTION: forcing a failure.
[  411.120363][ T7803] name failslab, interval 1, probability 0, space 0, times 0
[  411.175151][ T7803] CPU: 0 PID: 7803 Comm: syz.1.952 Not tainted syzkaller #0
[  411.183167][ T7803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  411.194234][ T7803] Call Trace:
[  411.199429][ T7803]  <TASK>
[  411.203351][ T7803]  dump_stack_lvl+0x188/0x24e
[  411.208353][ T7803]  ? show_regs_print_info+0x12/0x12
[  411.214010][ T7803]  ? load_image+0x410/0x410
[  411.219827][ T7803]  ? __might_sleep+0xd0/0xd0
[  411.224774][ T7803]  ? __lock_acquire+0x7c40/0x7c40
[  411.230048][ T7803]  should_fail_ex+0x390/0x4c0
[  411.235092][ T7803]  should_failslab+0x5/0x20
[  411.239743][ T7803]  slab_pre_alloc_hook+0x59/0x300
[  411.244866][ T7803]  ? save_fpregs_to_fpstate+0x9a/0x1f0
[  411.250444][ T7803]  kmem_cache_alloc+0x56/0x2f0
[  411.256672][ T7803]  ? mas_alloc_nodes+0x2ec/0x880
[  411.261716][ T7803]  mas_alloc_nodes+0x2ec/0x880
[  411.266715][ T7803]  mas_preallocate+0x162/0x3b0
[  411.271822][ T7803]  do_mas_align_munmap+0x239/0x12d0
[  411.277111][ T7803]  ? do_mas_munmap+0x2b0/0x2b0
[  411.281972][ T7803]  ? mtree_range_walk+0x664/0x780
[  411.287090][ T7803]  ? mas_walk+0x15f/0x180
[  411.291669][ T7803]  ? mas_find+0x1ba/0x220
[  411.296113][ T7803]  do_mas_munmap+0x240/0x2b0
[  411.300915][ T7803]  mmap_region+0x7ab/0x1c50
[  411.305501][ T7803]  ? file_mmap_ok+0x170/0x170
[  411.310713][ T7803]  ? validate_mm+0x23f/0x2e0
[  411.315436][ T7803]  ? arch_get_unmapped_area+0x640/0x640
[  411.321054][ T7803]  ? cap_mmap_addr+0x153/0x2c0
[  411.325995][ T7803]  do_mmap+0x9ce/0x10d0
[  411.330358][ T7803]  ? mlock_future_check+0x100/0x100
[  411.335980][ T7803]  ? ima_file_mmap+0xf7/0x140
[  411.342088][ T7803]  ? ima_file_free+0x3e0/0x3e0
[  411.348453][ T7803]  vm_mmap_pgoff+0x1c1/0x2d0
[  411.354006][ T7803]  ? account_locked_vm+0xe0/0xe0
[  411.359111][ T7803]  ? ksys_mmap_pgoff+0xef/0x720
[  411.365172][ T7803]  ? lockdep_hardirqs_on+0x94/0x140
[  411.370450][ T7803]  do_syscall_64+0x4c/0xa0
[  411.374937][ T7803]  ? clear_bhb_loop+0x60/0xb0
[  411.379771][ T7803]  ? clear_bhb_loop+0x60/0xb0
[  411.384971][ T7803]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  411.391388][ T7803] RIP: 0033:0x7f5fb859e159
[  411.396744][ T7803] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  411.424545][ T7803] RSP: 002b:00007f5fb94c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  411.435889][ T7803] RAX: ffffffffffffffda RBX: 00007f5fb8825fa0 RCX: 00007f5fb859e159
[  411.444621][ T7803] RDX: 0000000002000007 RSI: 0000000008000002 RDI: 000000110c230000
[  411.453012][ T7803] RBP: 00007f5fb863506b R08: ffffffffffffffff R09: 0000000000000000
[  411.461658][ T7803] R10: 000000000401d031 R11: 0000000000000246 R12: 0000000000000000
[  411.470147][ T7803] R13: 00007f5fb8826038 R14: 00007f5fb8825fa0 R15: 00007ffeffe18ff8
[  411.478200][ T7803]  </TASK>
[  411.990626][ T7803] overlayfs: unrecognized mount option "mask=MAY_WRITE" or missing value
[  413.078966][ T7827] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  414.134587][   T26] audit: type=1326 audit(1790091204.526:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7830 comm="syz.5.960" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9b5f59e159 code=0x0
[  414.574415][ T7841] 8250_pericom: probe of 0000:00:00.0 failed with error -12
[  414.936048][ T7847] 8250_pericom: probe of 0000:00:00.0 failed with error -12
[  418.855380][ T7900] loop5: detected capacity change from 0 to 512
[  418.924112][ T7900] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002]
[  418.978385][ T7900] System zones: 0-2, 18-18, 34-35
[  419.036625][ T7900] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  419.072535][ T7900] ext4 filesystem being mounted at /113/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  419.315717][ T5474] EXT4-fs (loop5): unmounting filesystem.
[  419.593374][ T7920] netlink: 44 bytes leftover after parsing attributes in process `syz.4.983'.
[  419.725773][ T7923] loop1: detected capacity change from 0 to 164
[  420.484447][ T7938] zram: Can't change algorithm for initialized device
[  420.508871][ T7938] zram: Cannot change disksize for initialized device
[  421.153441][ T7949] loop1: detected capacity change from 0 to 512
[  421.974108][ T7949] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002]
[  422.034979][ T7949] System zones: 0-2, 18-18, 34-35
[  422.135706][ T7949] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  422.221976][ T7949] ext4 filesystem being mounted at /196/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  423.268809][ T4284] EXT4-fs (loop1): unmounting filesystem.
[  424.552209][ T7971] netlink: 44 bytes leftover after parsing attributes in process `syz.3.996'.
[  424.820926][ T7978] autofs4:pid:7978:autofs_fill_super: called with bogus options
[  425.025128][ T7984] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1002'.
[  425.596114][ T7986] zram: Can't change algorithm for initialized device
[  425.627827][ T7986] zram: Cannot change disksize for initialized device
[  425.925294][ T7997] fuse: Bad value for 'fd'
[  426.080105][ T8002] loop0: detected capacity change from 0 to 164
[  426.207955][ T8004] bridge0: port 3(syz_tun) entered blocking state
[  426.254043][ T8004] bridge0: port 3(syz_tun) entered disabled state
[  426.440984][ T8010] bridge0: port 3(syz_tun) entered blocking state
[  426.470137][ T8010] bridge0: port 3(syz_tun) entered disabled state
[  426.503307][ T8010] device syz_tun entered promiscuous mode
[  426.618991][ T8010] bridge0: port 3(syz_tun) entered blocking state
[  426.625728][ T8010] bridge0: port 3(syz_tun) entered forwarding state
[  426.825735][ T8026] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  428.272379][ T8037] 8250_pericom: probe of 0000:00:00.0 failed with error -12
[  430.008880][ T8070] 8250_pericom: probe of 0000:00:00.0 failed with error -12
[  431.746485][ T8083] autofs4:pid:8083:autofs_fill_super: called with bogus options
[  432.849637][ T8099] loop3: detected capacity change from 0 to 164
[  432.915991][ T8100] serio: Serial port ttyS3
[  434.440995][ T8115] FAULT_INJECTION: forcing a failure.
[  434.440995][ T8115] name failslab, interval 1, probability 0, space 0, times 0
[  434.543634][ T8115] CPU: 1 PID: 8115 Comm: syz.1.1042 Not tainted syzkaller #0
[  434.551553][ T8115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  434.561854][ T8115] Call Trace:
[  434.565677][ T8115]  <TASK>
[  434.569361][ T8115]  dump_stack_lvl+0x188/0x24e
[  434.574467][ T8115]  ? show_regs_print_info+0x12/0x12
[  434.580637][ T8115]  ? load_image+0x410/0x410
[  434.587236][ T8115]  ? __might_sleep+0xd0/0xd0
[  434.592521][ T8115]  ? __lock_acquire+0x7c40/0x7c40
[  434.600586][ T8115]  ? verify_lock_unused+0x140/0x140
[  434.606921][ T8115]  should_fail_ex+0x390/0x4c0
[  434.614027][ T8115]  should_failslab+0x5/0x20
[  434.619906][ T8115]  slab_pre_alloc_hook+0x59/0x300
[  434.625093][ T8115]  ? __get_vm_area_node+0x122/0x330
[  434.630367][ T8115]  __kmem_cache_alloc_node+0x4f/0x270
[  434.636256][ T8115]  ? __get_vm_area_node+0x122/0x330
[  434.641624][ T8115]  kmalloc_node_trace+0x22/0xe0
[  434.646564][ T8115]  __get_vm_area_node+0x122/0x330
[  434.651707][ T8115]  __vmalloc_node_range+0x357/0x1380
[  434.657407][ T8115]  ? n_tty_open+0x19/0x150
[  434.662694][ T8115]  ? lockdep_hardirqs_on+0x94/0x140
[  434.670239][ T8115]  ? free_vm_area+0x50/0x50
[  434.674896][ T8115]  ? __might_sleep+0xd0/0xd0
[  434.681475][ T8115]  ? n_tty_open+0x19/0x150
[  434.686374][ T8115]  vzalloc+0x75/0x80
[  434.690742][ T8115]  ? n_tty_open+0x19/0x150
[  434.695393][ T8115]  n_tty_open+0x19/0x150
[  434.701238][ T8115]  tty_ldisc_setup+0xbf/0x250
[  434.707978][ T8115]  tty_init_dev+0x274/0x4c0
[  434.712722][ T8115]  ptmx_open+0xdb/0x2c0
[  434.717243][ T8115]  ? pty_start+0x140/0x140
[  434.724167][ T8115]  chrdev_open+0x585/0x5f0
[  434.730990][ T8115]  ? cd_forget+0x160/0x160
[  434.735920][ T8115]  ? fsnotify_perm+0x39b/0x550
[  434.740747][ T8115]  ? cd_forget+0x160/0x160
[  434.746128][ T8115]  do_dentry_open+0x7dd/0x10b0
[  434.750967][ T8115]  path_openat+0x2674/0x2f10
[  434.755629][ T8115]  ? verify_lock_unused+0x140/0x140
[  434.760901][ T8115]  ? do_sys_openat2+0xdd/0x4f0
[  434.765724][ T8115]  ? do_filp_open+0x420/0x420
[  434.770449][ T8115]  do_filp_open+0x1ee/0x420
[  434.774991][ T8115]  ? vfs_tmpfile+0x470/0x470
[  434.779627][ T8115]  ? _raw_spin_unlock+0x24/0x40
[  434.784709][ T8115]  ? alloc_fd+0x590/0x640
[  434.789388][ T8115]  do_sys_openat2+0x14b/0x4f0
[  434.794199][ T8115]  ? do_sys_open+0xe0/0xe0
[  434.799014][ T8115]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  434.805043][ T8115]  ? lock_chain_count+0x20/0x20
[  434.809981][ T8115]  __x64_sys_openat+0x135/0x160
[  434.814897][ T8115]  do_syscall_64+0x4c/0xa0
[  434.819537][ T8115]  ? clear_bhb_loop+0x60/0xb0
[  434.824366][ T8115]  ? clear_bhb_loop+0x60/0xb0
[  434.831638][ T8115]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  434.838733][ T8115] RIP: 0033:0x7f5fb859e159
[  434.843374][ T8115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  434.865368][ T8115] RSP: 002b:00007f5fb94c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  434.874629][ T8115] RAX: ffffffffffffffda RBX: 00007f5fb8825fa0 RCX: 00007f5fb859e159
[  434.883817][ T8115] RDX: 0000000000008000 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  434.893094][ T8115] RBP: 00007f5fb863506b R08: 0000000000000000 R09: 0000000000000000
[  434.901385][ T8115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  434.909423][ T8115] R13: 00007f5fb8826038 R14: 00007f5fb8825fa0 R15: 00007ffeffe18ff8
[  434.917984][ T8115]  </TASK>
[  434.975350][ T8115] syz.1.1042: vmalloc error: size 9128, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1
[  435.084568][ T8123] 8250_pericom: probe of 0000:00:00.0 failed with error -12
[  435.089468][ T8115] CPU: 1 PID: 8115 Comm: syz.1.1042 Not tainted syzkaller #0
[  435.099519][ T8115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  435.109655][ T8115] Call Trace:
[  435.112979][ T8115]  <TASK>
[  435.115953][ T8115]  dump_stack_lvl+0x188/0x24e
[  435.120816][ T8115]  ? cpuset_print_current_mems_allowed+0x1b/0x360
[  435.127816][ T8115]  ? show_regs_print_info+0x12/0x12
[  435.133094][ T8115]  ? load_image+0x410/0x410
[  435.137839][ T8115]  ? cpuset_print_current_mems_allowed+0x1b/0x360
[  435.144326][ T8115]  ? cpuset_print_current_mems_allowed+0x2e3/0x360
[  435.150987][ T8115]  warn_alloc+0x242/0x330
[  435.155396][ T8115]  ? __get_vm_area_node+0x122/0x330
[  435.160669][ T8115]  ? zone_watermark_ok_safe+0x270/0x270
[  435.166420][ T8115]  ? rcu_is_watching+0x11/0xa0
[  435.171276][ T8115]  ? __get_vm_area_node+0x318/0x330
[  435.176548][ T8115]  __vmalloc_node_range+0x37c/0x1380
[  435.181905][ T8115]  ? lockdep_hardirqs_on+0x94/0x140
[  435.187279][ T8115]  ? free_vm_area+0x50/0x50
[  435.191928][ T8115]  ? __might_sleep+0xd0/0xd0
[  435.196760][ T8115]  ? n_tty_open+0x19/0x150
[  435.201277][ T8115]  vzalloc+0x75/0x80
[  435.205245][ T8115]  ? n_tty_open+0x19/0x150
[  435.209745][ T8115]  n_tty_open+0x19/0x150
[  435.214064][ T8115]  tty_ldisc_setup+0xbf/0x250
[  435.218815][ T8115]  tty_init_dev+0x274/0x4c0
[  435.223387][ T8115]  ptmx_open+0xdb/0x2c0
[  435.227775][ T8115]  ? pty_start+0x140/0x140
[  435.232264][ T8115]  chrdev_open+0x585/0x5f0
[  435.236751][ T8115]  ? cd_forget+0x160/0x160
[  435.241232][ T8115]  ? fsnotify_perm+0x39b/0x550
[  435.246061][ T8115]  ? cd_forget+0x160/0x160
[  435.250538][ T8115]  do_dentry_open+0x7dd/0x10b0
[  435.255819][ T8115]  path_openat+0x2674/0x2f10
[  435.260537][ T8115]  ? verify_lock_unused+0x140/0x140
[  435.266173][ T8115]  ? do_sys_openat2+0xdd/0x4f0
[  435.271124][ T8115]  ? do_filp_open+0x420/0x420
[  435.275880][ T8115]  do_filp_open+0x1ee/0x420
[  435.280445][ T8115]  ? vfs_tmpfile+0x470/0x470
[  435.285117][ T8115]  ? _raw_spin_unlock+0x24/0x40
[  435.290042][ T8115]  ? alloc_fd+0x590/0x640
[  435.294458][ T8115]  do_sys_openat2+0x14b/0x4f0
[  435.299227][ T8115]  ? do_sys_open+0xe0/0xe0
[  435.303720][ T8115]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  435.309794][ T8115]  ? lock_chain_count+0x20/0x20
[  435.314814][ T8115]  __x64_sys_openat+0x135/0x160
[  435.319745][ T8115]  do_syscall_64+0x4c/0xa0
[  435.324362][ T8115]  ? clear_bhb_loop+0x60/0xb0
[  435.329095][ T8115]  ? clear_bhb_loop+0x60/0xb0
[  435.333885][ T8115]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  435.340287][ T8115] RIP: 0033:0x7f5fb859e159
[  435.344882][ T8115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  435.365248][ T8115] RSP: 002b:00007f5fb94c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  435.373728][ T8115] RAX: ffffffffffffffda RBX: 00007f5fb8825fa0 RCX: 00007f5fb859e159
[  435.381934][ T8115] RDX: 0000000000008000 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  435.390346][ T8115] RBP: 00007f5fb863506b R08: 0000000000000000 R09: 0000000000000000
[  435.398734][ T8115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  435.407154][ T8115] R13: 00007f5fb8826038 R14: 00007f5fb8825fa0 R15: 00007ffeffe18ff8
[  435.415291][ T8115]  </TASK>
[  435.596927][ T8115] Mem-Info:
[  435.603056][ T8115] active_anon:7528 inactive_anon:0 isolated_anon:0
[  435.603056][ T8115]  active_file:21099 inactive_file:40147 isolated_file:0
[  435.603056][ T8115]  unevictable:768 dirty:307 writeback:0
[  435.603056][ T8115]  slab_reclaimable:21569 slab_unreclaimable:94698
[  435.603056][ T8115]  mapped:29856 shmem:1375 pagetables:1122
[  435.603056][ T8115]  sec_pagetables:0 bounce:0
[  435.603056][ T8115]  kernel_misc_reclaimable:0
[  435.603056][ T8115]  free:1315549 free_pcp:11951 free_cma:0
[  435.681433][ T8115] Node 0 active_anon:30112kB inactive_anon:0kB active_file:84396kB inactive_file:160384kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119424kB dirty:1228kB writeback:0kB shmem:3964kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:12260kB pagetables:4488kB sec_pagetables:0kB all_unreclaimable? no
[  435.822666][ T8115] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  435.952529][ T8115] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  436.002340][ T8115] lowmem_reserve[]: 0 2527 2528 2528 2528
[  436.029136][ T8115] Node 0 DMA32 free:1342952kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:29680kB inactive_anon:0kB active_file:84396kB inactive_file:160392kB unevictable:1536kB writepending:1256kB present:3129332kB managed:2592896kB mlocked:0kB bounce:0kB free_pcp:35644kB local_pcp:14820kB free_cma:0kB
[  436.125777][ T8115] lowmem_reserve[]: 0 0 1 1 1
[  436.158890][ T8115] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  436.258678][ T8115] lowmem_reserve[]: 0 0 0 0 0
[  436.295269][ T8115] Node 1 Normal free:3903660kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:13528kB local_pcp:5504kB free_cma:0kB
[  436.419890][ T8115] lowmem_reserve[]: 0 0 0 0 0
[  436.430009][ T8115] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  436.491670][ T8115] Node 0 DMA32: 966*4kB (UME) 366*8kB (UME) 282*16kB (UME) 504*32kB (UME) 449*64kB (UME) 231*128kB (UME) 91*256kB (UME) 76*512kB (UME) 47*1024kB (UME) 18*2048kB (M) 271*4096kB (UM) = 1342952kB
[  436.917081][ T8115] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  437.423952][ T8115] Node 1 Normal: 161*4kB (UE) 49*8kB (UME) 24*16kB (UME) 81*32kB (UE) 32*64kB (UME) 18*128kB (UME) 10*256kB (UM) 3*512kB (UME) 2*1024kB (UE) 1*2048kB (E) 949*4096kB (M) = 3903660kB
[  437.517786][ T8115] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  437.598007][ T8115] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  437.680066][ T8115] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  437.764253][ T8115] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  437.782625][ T8115] 62625 total pagecache pages
[  437.798038][ T8115] 0 pages in swap cache
[  437.812595][ T8115] Free swap  = 124472kB
[  437.828523][ T8115] Total swap = 124996kB
[  437.846718][ T8115] 2097051 pages RAM
[  437.850786][ T8115] 0 pages HighMem/MovableOnly
[  437.861259][ T8115] 415226 pages reserved
[  437.866713][ T8115] 0 pages cma reserved
[  437.878252][ T8115] ptm ptm0: ldisc open failed (-12), clearing slot 0
[  438.332739][ T8163] fuse: Unknown parameter 'group_id00000000000000000000'
[  438.619225][ T8172] 8250_pericom: probe of 0000:00:00.0 failed with error -12
[  438.714137][ T4321] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  438.903900][ T4321] usb 1-1: Using ep0 maxpacket: 8
[  438.914784][ T4321] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  438.961380][ T4321] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  438.989029][ T4321] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  439.048000][ T8181] FAULT_INJECTION: forcing a failure.
[  439.048000][ T8181] name failslab, interval 1, probability 0, space 0, times 0
[  439.056280][ T4321] usb 1-1: config 0 descriptor??
[  439.061786][ T8181] CPU: 1 PID: 8181 Comm: syz.1.1059 Not tainted syzkaller #0
[  439.073336][ T8181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  439.083440][ T8181] Call Trace:
[  439.086764][ T8181]  <TASK>
[  439.089751][ T8181]  dump_stack_lvl+0x188/0x24e
[  439.094666][ T8181]  ? show_regs_print_info+0x12/0x12
[  439.100291][ T8181]  ? load_image+0x410/0x410
[  439.105734][ T8181]  ? __might_sleep+0xd0/0xd0
[  439.110662][ T8181]  ? __lock_acquire+0x7c40/0x7c40
[  439.113384][ T4321] iowarrior 1-1:0.0: no interrupt-in endpoint found
[  439.115818][ T8181]  ? mark_lock+0x94/0x320
[  439.115862][ T8181]  should_fail_ex+0x390/0x4c0
[  439.115900][ T8181]  should_failslab+0x5/0x20
[  439.115921][ T8181]  slab_pre_alloc_hook+0x59/0x300
[  439.116035][ T8181]  ? __get_vm_area_node+0x122/0x330
[  439.116069][ T8181]  __kmem_cache_alloc_node+0x4f/0x270
[  439.116099][ T8181]  ? __get_vm_area_node+0x122/0x330
[  439.116132][ T8181]  kmalloc_node_trace+0x22/0xe0
[  439.116157][ T8181]  __get_vm_area_node+0x122/0x330
[  439.116184][ T8181]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  439.116220][ T8181]  __vmalloc_node_range+0x357/0x1380
[  439.116247][ T8181]  ? n_tty_open+0x19/0x150
[  439.189098][ T8181]  ? n_tty_open+0x11b/0x150
[  439.195859][ T8181]  ? rwsem_write_trylock+0x135/0x1c0
[  439.201944][ T8181]  ? free_vm_area+0x50/0x50
[  439.208038][ T8181]  ? n_tty_open+0x19/0x150
[  439.214649][ T8181]  vzalloc+0x75/0x80
[  439.221070][ T8181]  ? n_tty_open+0x19/0x150
[  439.227981][ T8181]  n_tty_open+0x19/0x150
[  439.232936][ T8181]  tty_ldisc_setup+0x1a3/0x250
[  439.241506][ T8181]  tty_init_dev+0x274/0x4c0
[  439.246366][ T8181]  ptmx_open+0xdb/0x2c0
[  439.251203][ T8181]  ? pty_start+0x140/0x140
[  439.255956][ T8181]  chrdev_open+0x585/0x5f0
[  439.260446][ T8181]  ? cd_forget+0x160/0x160
[  439.264938][ T8181]  ? fsnotify_perm+0x39b/0x550
[  439.269779][ T8181]  ? cd_forget+0x160/0x160
[  439.274272][ T8181]  do_dentry_open+0x7dd/0x10b0
[  439.279210][ T8181]  path_openat+0x2674/0x2f10
[  439.283986][ T8181]  ? verify_lock_unused+0x140/0x140
[  439.289440][ T8181]  ? do_sys_openat2+0xdd/0x4f0
[  439.294457][ T8181]  ? do_filp_open+0x420/0x420
[  439.299221][ T8181]  do_filp_open+0x1ee/0x420
[  439.303971][ T8181]  ? vfs_tmpfile+0x470/0x470
[  439.310494][ T8181]  ? _raw_spin_unlock+0x24/0x40
[  439.315510][ T8181]  ? alloc_fd+0x590/0x640
[  439.320485][ T8181]  do_sys_openat2+0x14b/0x4f0
[  439.326586][ T8181]  ? do_sys_open+0xe0/0xe0
[  439.331126][ T8181]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  439.338040][ T8181]  ? lock_chain_count+0x20/0x20
[  439.344567][ T8181]  __x64_sys_openat+0x135/0x160
[  439.352983][ T8181]  do_syscall_64+0x4c/0xa0
[  439.357557][ T8181]  ? clear_bhb_loop+0x60/0xb0
[  439.362399][ T8181]  ? clear_bhb_loop+0x60/0xb0
[  439.367236][ T8181]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  439.373385][ T8181] RIP: 0033:0x7f5fb859e159
[  439.379010][ T8181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  439.401330][ T8181] RSP: 002b:00007f5fb94c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  439.410758][ T8181] RAX: ffffffffffffffda RBX: 00007f5fb8825fa0 RCX: 00007f5fb859e159
[  439.419136][ T8181] RDX: 0000000000008000 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  439.427275][ T8181] RBP: 00007f5fb863506b R08: 0000000000000000 R09: 0000000000000000
[  439.435523][ T8181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  439.447508][ T8181] R13: 00007f5fb8826038 R14: 00007f5fb8825fa0 R15: 00007ffeffe18ff8
[  439.456477][ T8181]  </TASK>
[  439.524811][ T8181] ptm ptm0: ldisc open failed (-12), clearing slot 0
[  440.007015][ T1282] ieee802154 phy0 wpan0: encryption failed: -22
[  440.013479][ T1282] ieee802154 phy1 wpan1: encryption failed: -22
[  440.053976][ T5387] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  440.244045][ T5387] usb 4-1: Using ep0 maxpacket: 32
[  440.253731][ T5387] usb 4-1: config index 0 descriptor too short (expected 29220, got 36)
[  440.281141][ T5387] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  440.306702][ T5387] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  440.329793][ T5387] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81
[  440.352962][ T5387] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  440.378606][ T5387] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  440.408724][ T5387] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18
[  440.441059][ T5387] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  440.461541][ T5387] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  440.490358][ T5387] usb 4-1: config 0 descriptor??
[  440.760526][   T14] usb 4-1: USB disconnect, device number 2
[  442.131859][   T14] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  442.204538][ T6101] usb 1-1: USB disconnect, device number 5
[  442.443895][   T14] usb 4-1: Using ep0 maxpacket: 32
[  442.451752][   T14] usb 4-1: config index 0 descriptor too short (expected 29220, got 36)
[  442.509590][   T14] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  442.522377][   T14] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  442.540324][   T14] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81
[  442.552627][   T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  442.572134][   T14] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  442.584583][   T14] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18
[  442.606744][   T14] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  442.620745][   T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  442.665098][   T14] usb 4-1: config 0 descriptor??
[  442.856515][ T6101] usb 4-1: USB disconnect, device number 3
[  443.081989][ T8238] device syztnl2 entered promiscuous mode
[  443.834089][ T8258] autofs4:pid:8258:autofs_fill_super: called with bogus options
[  444.069368][ T4321] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  444.139388][ T8264] FAULT_INJECTION: forcing a failure.
[  444.139388][ T8264] name fail_futex, interval 1, probability 0, space 0, times 0
[  444.184027][ T8264] CPU: 0 PID: 8264 Comm: syz.0.1086 Not tainted syzkaller #0
[  444.191480][ T8264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  444.201582][ T8264] Call Trace:
[  444.204918][ T8264]  <TASK>
[  444.207891][ T8264]  dump_stack_lvl+0x188/0x24e
[  444.212624][ T8264]  ? show_regs_print_info+0x12/0x12
[  444.217875][ T8264]  ? load_image+0x410/0x410
[  444.222448][ T8264]  ? finish_task_switch+0x25d/0x8e0
[  444.227711][ T8264]  should_fail_ex+0x390/0x4c0
[  444.232454][ T8264]  get_futex_key+0x1b1/0x1000
[  444.237182][ T8264]  ? lockdep_hardirqs_on+0x94/0x140
[  444.242429][ T8264]  ? futex_setup_timer+0xc0/0xc0
[  444.247405][ T8264]  ? finish_task_switch+0x262/0x8e0
[  444.252698][ T8264]  futex_wake+0x123/0x4f0
[  444.257085][ T8264]  ? futex_wake_mark+0x150/0x150
[  444.262088][ T8264]  ? release_firmware_map_entry+0x187/0x187
[  444.268032][ T8264]  do_futex+0x2e2/0x320
[  444.272271][ T8264]  ? __ia32_sys_get_robust_list+0x100/0x100
[  444.278228][ T8264]  __se_sys_futex+0x381/0x410
[  444.282957][ T8264]  ? __x64_sys_futex+0xf0/0xf0
[  444.287769][ T8264]  ? __x64_sys_futex+0x1d/0xf0
[  444.292578][ T8264]  do_syscall_64+0x4c/0xa0
[  444.297037][ T8264]  ? clear_bhb_loop+0x60/0xb0
[  444.301757][ T8264]  ? clear_bhb_loop+0x60/0xb0
[  444.306480][ T8264]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  444.312427][ T8264] RIP: 0033:0x7f2623d9e159
[  444.316887][ T8264] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  444.336649][ T8264] RSP: 002b:00007f2624bb70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  444.345658][ T8264] RAX: ffffffffffffffda RBX: 00007f2624025fa8 RCX: 00007f2623d9e159
[  444.354052][ T8264] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2624025fac
[  444.362283][ T8264] RBP: 00007f2624025fa0 R08: 0004d7a9e409821e R09: 0000000000000000
[  444.373541][ T8264] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  444.383567][ T8264] R13: 00007f2624026038 R14: 00007ffd1d95a0e0 R15: 00007ffd1d95a1c8
[  444.392692][ T8264]  </TASK>
[  444.423985][ T4321] usb 6-1: Using ep0 maxpacket: 8
[  444.431904][ T4321] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  444.464269][ T4321] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  444.490628][ T4321] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  444.543001][ T4321] usb 6-1: config 0 descriptor??
[  444.567558][ T4321] iowarrior 6-1:0.0: no interrupt-in endpoint found
[  445.524128][ T6101] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  445.713973][ T6101] usb 2-1: Using ep0 maxpacket: 32
[  445.723651][ T6101] usb 2-1: config index 0 descriptor too short (expected 29220, got 36)
[  445.746577][ T6101] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  445.769786][ T6101] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  445.802866][ T6101] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81
[  445.845832][ T6101] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  445.868473][ T6101] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18
[  445.912541][ T6101] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  445.960508][ T6101] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  446.020548][ T6101] usb 2-1: config 0 descriptor??
[  446.963256][   T14] usb 2-1: USB disconnect, device number 5
[  447.037028][ T4321] usb 6-1: USB disconnect, device number 2
[  448.360112][   T14] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  448.474023][ T8313] 8250_pericom: probe of 0000:00:00.0 failed with error -12
[  448.661512][ T8318] 8250_pericom: probe of 0000:00:00.0 failed with error -12
[  449.335302][ T8333] 8250_pericom: probe of 0000:00:00.0 failed with error -12
[  449.508801][ T8339] autofs4:pid:8339:autofs_fill_super: called with bogus options
[  450.364759][ T8356] 8250_pericom: probe of 0000:00:00.0 failed with error -12
[  452.355064][ T8375] autofs4:pid:8375:autofs_fill_super: called with bogus options
[  453.844564][ T8402] loop3: detected capacity change from 0 to 256
[  453.874519][ T8402] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  454.899140][ T8418] loop0: detected capacity change from 0 to 164
[  455.340514][ T8422] 8250_pericom: probe of 0000:00:00.0 failed with error -12
[  455.434699][ T8427] autofs4:pid:8427:autofs_fill_super: called with bogus options
[  456.153410][ T8439] loop5: detected capacity change from 0 to 128
[  456.319971][ T8442] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  456.347019][ T8439] syz.5.1137: attempt to access beyond end of device
[  456.347019][ T8439] loop5: rw=2049, sector=145, nr_sectors = 79 limit=128
[  456.523571][ T8437] syz.5.1137: attempt to access beyond end of device
[  456.523571][ T8437] loop5: rw=524288, sector=145, nr_sectors = 79 limit=128
[  456.621625][ T8439] syz.5.1137: attempt to access beyond end of device
[  456.621625][ T8439] loop5: rw=0, sector=145, nr_sectors = 8 limit=128
[  456.690393][ T8439] syz.5.1137: attempt to access beyond end of device
[  456.690393][ T8439] loop5: rw=0, sector=145, nr_sectors = 8 limit=128
[  456.715321][ T8451] 8250_pericom: probe of 0000:00:00.0 failed with error -12
[  456.762478][ T8439] syz.5.1137: attempt to access beyond end of device
[  456.762478][ T8439] loop5: rw=0, sector=151, nr_sectors = 1 limit=128
[  456.943303][ T8454] 8250_pericom: probe of 0000:00:00.0 failed with error -12
[  457.301288][ T8463] 8250_pericom: probe of 0000:00:00.0 failed with error -12
[  457.545630][ T8470] 8250_pericom: probe of 0000:00:00.0 failed with error -12
[  457.660491][ T8472] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  457.966701][ T8482] autofs4:pid:8482:autofs_fill_super: called with bogus options
[  459.068143][ T8494] loop0: detected capacity change from 0 to 164
[  459.427119][ T8504] fuse: Bad value for 'fd'
[  459.884139][ T8508] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  460.692873][ T8513] 8250_pericom: probe of 0000:00:00.0 failed with error -12
[  462.348067][ T8538] loop0: detected capacity change from 0 to 128
[  462.372715][ T8536] FAULT_INJECTION: forcing a failure.
[  462.372715][ T8536] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  462.419900][ T8536] CPU: 1 PID: 8536 Comm: syz.3.1167 Not tainted syzkaller #0
[  462.427736][ T8536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  462.439354][ T8536] Call Trace:
[  462.442976][ T8536]  <TASK>
[  462.446241][ T8536]  dump_stack_lvl+0x188/0x24e
[  462.451253][ T8536]  ? show_regs_print_info+0x12/0x12
[  462.457644][ T8536]  ? load_image+0x410/0x410
[  462.463194][ T8536]  ? __lock_acquire+0x7c40/0x7c40
[  462.468302][ T8536]  ? __kasan_slab_alloc+0x6b/0x80
[  462.473491][ T8536]  should_fail_ex+0x390/0x4c0
[  462.478925][ T8536]  strncpy_from_user+0x32/0x340
[  462.485740][ T8536]  getname_flags+0xf2/0x500
[  462.491013][ T8536]  do_sys_openat2+0xdd/0x4f0
[  462.496582][ T8536]  ? do_sys_open+0xe0/0xe0
[  462.502380][ T8536]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  462.510184][ T8536]  ? lock_chain_count+0x20/0x20
[  462.515897][ T8536]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  462.523273][ T8536]  __x64_sys_openat+0x135/0x160
[  462.530824][ T8536]  do_syscall_64+0x4c/0xa0
[  462.535513][ T8536]  ? clear_bhb_loop+0x60/0xb0
[  462.540979][ T8536]  ? clear_bhb_loop+0x60/0xb0
[  462.545829][ T8536]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  462.551809][ T8536] RIP: 0033:0x7f37bd99e159
[  462.556381][ T8536] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  462.576130][ T8536] RSP: 002b:00007f37bbbf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  462.584606][ T8536] RAX: ffffffffffffffda RBX: 00007f37bdc25fa0 RCX: 00007f37bd99e159
[  462.592765][ T8536] RDX: 0000000000000002 RSI: 0000000000000000 RDI: ffffffffffffff9c
[  462.600884][ T8536] RBP: 00007f37bda3506b R08: 0000000000000000 R09: 0000000000000000
[  462.609096][ T8536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  462.617132][ T8536] R13: 00007f37bdc26038 R14: 00007f37bdc25fa0 R15: 00007ffd9d389698
[  462.625401][ T8536]  </TASK>
[  462.698924][ T8538] syz.0.1166: attempt to access beyond end of device
[  462.698924][ T8538] loop0: rw=2049, sector=145, nr_sectors = 79 limit=128
[  462.750849][ T8537] syz.0.1166: attempt to access beyond end of device
[  462.750849][ T8537] loop0: rw=524288, sector=145, nr_sectors = 79 limit=128
[  462.769787][ T8538] syz.0.1166: attempt to access beyond end of device
[  462.769787][ T8538] loop0: rw=0, sector=145, nr_sectors = 8 limit=128
[  462.804210][ T8538] syz.0.1166: attempt to access beyond end of device
[  462.804210][ T8538] loop0: rw=0, sector=145, nr_sectors = 8 limit=128
[  462.828449][ T8538] syz.0.1166: attempt to access beyond end of device
[  462.828449][ T8538] loop0: rw=0, sector=151, nr_sectors = 1 limit=128
[  463.142591][ T8548] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  463.317564][ T8553] pit: kvm: requested 2514 ns i8254 timer period limited to 200000 ns
[  463.525469][ T8553] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns
[  463.535284][ T8563] FAULT_INJECTION: forcing a failure.
[  463.535284][ T8563] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  463.553022][ T8553] pit: kvm: requested 12571 ns i8254 timer period limited to 200000 ns
[  463.589183][ T8564] 8250_pericom: probe of 0000:00:00.0 failed with error -12
[  463.594320][ T8563] CPU: 0 PID: 8563 Comm: syz.0.1173 Not tainted syzkaller #0
[  463.604113][ T8563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  463.614486][ T8563] Call Trace:
[  463.617817][ T8563]  <TASK>
[  463.621388][ T8563]  dump_stack_lvl+0x188/0x24e
[  463.626312][ T8563]  ? show_regs_print_info+0x12/0x12
[  463.631579][ T8563]  ? load_image+0x410/0x410
[  463.636256][ T8563]  ? __lock_acquire+0x7c40/0x7c40
[  463.641665][ T8563]  should_fail_ex+0x390/0x4c0
[  463.646507][ T8563]  _copy_from_user+0x2c/0x170
[  463.649090][ T8553] pit: kvm: requested 12571 ns i8254 timer period limited to 200000 ns
[  463.652194][ T8563]  __sys_bpf+0x2ea/0x780
[  463.652239][ T8563]  ? bpf_link_show_fdinfo+0x380/0x380
[  463.671212][ T8563]  ? lock_chain_count+0x20/0x20
[  463.676281][ T8563]  __x64_sys_bpf+0x78/0x90
[  463.681216][ T8563]  do_syscall_64+0x4c/0xa0
[  463.685955][ T8563]  ? clear_bhb_loop+0x60/0xb0
[  463.690698][ T8563]  ? clear_bhb_loop+0x60/0xb0
[  463.695852][ T8553] pit: kvm: requested 85485 ns i8254 timer period limited to 200000 ns
[  463.696041][ T8563]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  463.711229][ T8563] RIP: 0033:0x7f2623d9e159
[  463.715730][ T8563] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  463.736001][ T8563] RSP: 002b:00007f2624bb7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  463.744676][ T8563] RAX: ffffffffffffffda RBX: 00007f2624025fa0 RCX: 00007f2623d9e159
[  463.747412][ T8553] pit: kvm: requested 93028 ns i8254 timer period limited to 200000 ns
[  463.752694][ T8563] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005
[  463.752714][ T8563] RBP: 00007f2623e3506b R08: 0000000000000000 R09: 0000000000000000
[  463.752728][ T8563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  463.752741][ T8563] R13: 00007f2624026038 R14: 00007f2624025fa0 R15: 00007ffd1d95a1c8
[  463.752787][ T8563]  </TASK>
[  463.801720][ T8553] pit: kvm: requested 7542 ns i8254 timer period limited to 200000 ns
[  463.834091][ T8553] pit: kvm: requested 10057 ns i8254 timer period limited to 200000 ns
[  463.864116][ T8553] pit: kvm: requested 155047 ns i8254 timer period limited to 200000 ns
[  463.882253][ T8553] pit: kvm: requested 160914 ns i8254 timer period limited to 200000 ns
[  464.281109][ T8573] 8250_pericom: probe of 0000:00:00.0 failed with error -12
[  465.274852][ T8604] FAULT_INJECTION: forcing a failure.
[  465.274852][ T8604] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  465.391500][ T8604] CPU: 1 PID: 8604 Comm: syz.3.1187 Not tainted syzkaller #0
[  465.401252][ T8604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  465.414802][ T8604] Call Trace:
[  465.418317][ T8604]  <TASK>
[  465.421990][ T8604]  dump_stack_lvl+0x188/0x24e
[  465.426769][ T8604]  ? show_regs_print_info+0x12/0x12
[  465.433075][ T8604]  ? load_image+0x410/0x410
[  465.437838][ T8604]  ? __lock_acquire+0x7c40/0x7c40
[  465.443436][ T8604]  should_fail_ex+0x390/0x4c0
[  465.448372][ T8604]  _copy_from_user+0x2c/0x170
[  465.453484][ T8604]  __sys_bpf+0x2ea/0x780
[  465.457802][ T8604]  ? bpf_link_show_fdinfo+0x380/0x380
[  465.463626][ T8604]  ? lock_chain_count+0x20/0x20
[  465.468563][ T8604]  __x64_sys_bpf+0x78/0x90
[  465.473571][ T8604]  do_syscall_64+0x4c/0xa0
[  465.478682][ T8604]  ? clear_bhb_loop+0x60/0xb0
[  465.484469][ T8604]  ? clear_bhb_loop+0x60/0xb0
[  465.489829][ T8604]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  465.496898][ T8604] RIP: 0033:0x7f37bd99e159
[  465.501611][ T8604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  465.527205][ T8604] RSP: 002b:00007f37bbbf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  465.536149][ T8604] RAX: ffffffffffffffda RBX: 00007f37bdc25fa0 RCX: 00007f37bd99e159
[  465.544750][ T8604] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005
[  465.546329][ T8608] 8250_pericom: probe of 0000:00:00.0 failed with error -12
[  465.554709][ T8604] RBP: 00007f37bda3506b R08: 0000000000000000 R09: 0000000000000000
[  465.554735][ T8604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  465.554748][ T8604] R13: 00007f37bdc26038 R14: 00007f37bdc25fa0 R15: 00007ffd9d389698
[  465.554781][ T8604]  </TASK>
[  465.797885][ T8610] FAULT_INJECTION: forcing a failure.
[  465.797885][ T8610] name failslab, interval 1, probability 0, space 0, times 0
[  465.828240][ T8615] 8250_pericom: probe of 0000:00:00.0 failed with error -12
[  465.834292][ T8610] CPU: 1 PID: 8610 Comm: syz.1.1189 Not tainted syzkaller #0
[  465.848225][ T8610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  465.860204][ T8610] Call Trace:
[  465.863803][ T8610]  <TASK>
[  465.867247][ T8610]  dump_stack_lvl+0x188/0x24e
[  465.872260][ T8610]  ? show_regs_print_info+0x12/0x12
[  465.878310][ T8610]  ? load_image+0x410/0x410
[  465.883509][ T8610]  ? __might_sleep+0xd0/0xd0
[  465.889055][ T8610]  ? __lock_acquire+0x7c40/0x7c40
[  465.894758][ T8610]  ? aa_file_perm+0x3ea/0xf00
[  465.899980][ T8610]  should_fail_ex+0x390/0x4c0
[  465.907269][ T8610]  should_failslab+0x5/0x20
[  465.914053][ T8610]  slab_pre_alloc_hook+0x59/0x300
[  465.920202][ T8610]  ? kernfs_fop_write_iter+0x154/0x520
[  465.927402][ T8610]  __kmem_cache_alloc_node+0x4f/0x270
[  465.935648][ T8610]  ? kernfs_fop_write_iter+0x154/0x520
[  465.944131][ T8610]  __kmalloc+0xa3/0x240
[  465.949002][ T8610]  kernfs_fop_write_iter+0x154/0x520
[  465.956197][ T8610]  vfs_write+0x482/0x9a0
[  465.963212][ T8610]  ? file_end_write+0x250/0x250
[  465.970339][ T8610]  ? __fget_files+0x3fc/0x460
[  465.976032][ T8610]  ? __fdget_pos+0x2ae/0x360
[  465.982424][ T8610]  ? ksys_write+0x70/0x260
[  465.988569][ T8610]  ksys_write+0x14d/0x260
[  465.993505][ T8610]  ? __ia32_sys_read+0x80/0x80
[  465.999126][ T8610]  ? lockdep_hardirqs_on+0x94/0x140
[  466.006488][ T8610]  do_syscall_64+0x4c/0xa0
[  466.011919][ T8610]  ? clear_bhb_loop+0x60/0xb0
[  466.018005][ T8610]  ? clear_bhb_loop+0x60/0xb0
[  466.023719][ T8610]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  466.030654][ T8610] RIP: 0033:0x7f5fb859e159
[  466.036014][ T8610] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  466.060560][ T8610] RSP: 002b:00007f5fb94c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  466.070682][ T8610] RAX: ffffffffffffffda RBX: 00007f5fb8825fa0 RCX: 00007f5fb859e159
[  466.080972][ T8610] RDX: 0000000000000001 RSI: 0000200000000500 RDI: 000000000000000b
[  466.091779][ T8610] RBP: 00007f5fb863506b R08: 0000000000000000 R09: 0000000000000000
[  466.101465][ T8610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  466.109675][ T8610] R13: 00007f5fb8826038 R14: 00007f5fb8825fa0 R15: 00007ffeffe18ff8
[  466.118496][ T8610]  </TASK>
[  466.365191][ T8619] zram: Can't change algorithm for initialized device
[  466.395868][ T8619] zram: Cannot change disksize for initialized device
[  466.557954][ T8623] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1192'.
[  467.053169][ T8625] fuse: Bad value for 'fd'
[  467.482438][ T8636] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1196'.
[  468.030024][ T8648] 8250_pericom: probe of 0000:00:00.0 failed with error -12
[  468.533224][ T8657] loop4: detected capacity change from 0 to 7
[  468.554854][ T8657] Dev loop4: unable to read RDB block 7
[  468.568198][ T8657]  loop4: unable to read partition table
[  468.582142][ T8657] loop4: partition table beyond EOD, truncated
[  468.614019][ T8657] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5)
[  469.589183][ T8675] loop4: detected capacity change from 0 to 7
[  469.608107][ T4420] Dev loop4: unable to read RDB block 7
[  469.622305][ T4420]  loop4: unable to read partition table
[  469.647637][ T4420] loop4: partition table beyond EOD, truncated
[  469.750169][ T8675] Dev loop4: unable to read RDB block 7
[  469.769453][ T8676] 8250_pericom: probe of 0000:00:00.0 failed with error -12
[  469.784042][ T8675]  loop4: unable to read partition table
[  469.827839][ T8675] loop4: partition table beyond EOD, truncated
[  469.896592][ T8675] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5)
[  470.040475][ T3640] Dev loop4: unable to read RDB block 7
[  470.057616][ T3640]  loop4: unable to read partition table
[  470.089538][ T3640] loop4: partition table beyond EOD, truncated
[  470.260780][ T8685] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1212'.
[  471.087475][ T8701] fuse: Unknown parameter '0x0000000000000004'
[  471.415914][ T8708] loop3: detected capacity change from 0 to 256
[  472.073034][ T8721] 8250_pericom: probe of 0000:00:00.0 failed with error -12
[  473.850522][ T8736] fuse: Bad value for 'fd'
[  474.865813][ T8749] FAULT_INJECTION: forcing a failure.
[  474.865813][ T8749] name failslab, interval 1, probability 0, space 0, times 0
[  474.902915][ T8749] CPU: 1 PID: 8749 Comm: syz.3.1232 Not tainted syzkaller #0
[  474.914387][ T8749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  474.927211][ T8749] Call Trace:
[  474.933293][ T8749]  <TASK>
[  474.937398][ T8749]  dump_stack_lvl+0x188/0x24e
[  474.942270][ T8749]  ? show_regs_print_info+0x12/0x12
[  474.949678][ T8749]  ? load_image+0x410/0x410
[  474.956606][ T8749]  ? __might_sleep+0xd0/0xd0
[  474.963985][ T8749]  ? __lock_acquire+0x7c40/0x7c40
[  474.970042][ T8749]  should_fail_ex+0x390/0x4c0
[  474.975229][ T8749]  should_failslab+0x5/0x20
[  474.979843][ T8749]  slab_pre_alloc_hook+0x59/0x300
[  474.986663][ T8749]  ? vfs_write+0x777/0x9a0
[  474.993905][ T8749]  kmem_cache_alloc+0x56/0x2f0
[  474.999648][ T8749]  ? getname_flags+0xb7/0x500
[  475.004987][ T8749]  getname_flags+0xb7/0x500
[  475.010240][ T8749]  do_sys_openat2+0xdd/0x4f0
[  475.016432][ T8749]  ? do_sys_open+0xe0/0xe0
[  475.021769][ T8749]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  475.028155][ T8749]  ? lock_chain_count+0x20/0x20
[  475.033409][ T8749]  __x64_sys_openat+0x135/0x160
[  475.038428][ T8749]  do_syscall_64+0x4c/0xa0
[  475.043893][ T8749]  ? clear_bhb_loop+0x60/0xb0
[  475.048894][ T8749]  ? clear_bhb_loop+0x60/0xb0
[  475.054075][ T8749]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  475.060745][ T8749] RIP: 0033:0x7f37bd99e159
[  475.066052][ T8749] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  475.087424][ T8749] RSP: 002b:00007f37bbbf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  475.098722][ T8749] RAX: ffffffffffffffda RBX: 00007f37bdc25fa0 RCX: 00007f37bd99e159
[  475.108898][ T8749] RDX: 0000000000000002 RSI: 0000200000000340 RDI: ffffffffffffff9c
[  475.118730][ T8749] RBP: 00007f37bda3506b R08: 0000000000000000 R09: 0000000000000000
[  475.127153][ T8749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  475.137815][ T8749] R13: 00007f37bdc26038 R14: 00007f37bdc25fa0 R15: 00007ffd9d389698
[  475.151885][ T8749]  </TASK>
[  475.234015][ T4321] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  475.443995][ T4321] usb 6-1: Using ep0 maxpacket: 32
[  475.452271][ T4321] usb 6-1: config index 0 descriptor too short (expected 29220, got 36)
[  475.505857][ T4321] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  475.549569][ T4321] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81
[  475.574258][ T4321] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  475.610360][ T4321] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  475.645964][ T4321] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  475.692637][ T4321] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  475.740692][ T4321] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  475.774031][ T4321] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  475.792939][ T4321] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  475.837961][ T4321] usb 6-1: config 0 descriptor??
[  476.068896][ T4321] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  476.129715][ T4321] usb 6-1: USB disconnect, device number 3
[  476.181362][ T4321] usblp0: removed
[  476.383452][ T8776] fuse: Bad value for 'fd'
[  476.673901][ T4321] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  476.863992][ T4321] usb 6-1: Using ep0 maxpacket: 32
[  476.871702][ T4321] usb 6-1: config index 0 descriptor too short (expected 29220, got 36)
[  476.914292][ T4321] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  476.933344][ T4321] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81
[  476.953413][ T4321] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  476.973424][ T4321] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  477.015938][ T4321] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  477.044009][ T4321] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  477.083928][ T4321] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  477.114826][ T4321] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  477.173370][ T4321] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  477.213136][ T4321] usb 6-1: config 0 descriptor??
[  477.452536][ T4321] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  477.517371][ T4321] usb 6-1: USB disconnect, device number 4
[  477.569655][ T4321] usblp0: removed
[  478.835457][ T8811] serio: Serial port ttyS3
[  481.072383][ T8834] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1259'.
[  481.154189][ T4321] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  481.282241][ T8841] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  481.298123][ T8841] FAULT_INJECTION: forcing a failure.
[  481.298123][ T8841] name failslab, interval 1, probability 0, space 0, times 0
[  481.312874][ T8841] CPU: 1 PID: 8841 Comm: syz.0.1262 Not tainted syzkaller #0
[  481.321209][ T8841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  481.331854][ T8841] Call Trace:
[  481.335365][ T8841]  <TASK>
[  481.338340][ T8841]  dump_stack_lvl+0x188/0x24e
[  481.343704][ T8841]  ? show_regs_print_info+0x12/0x12
[  481.349140][ T8841]  ? load_image+0x410/0x410
[  481.353718][ T8841]  ? __might_sleep+0xd0/0xd0
[  481.358366][ T8841]  ? __lock_acquire+0x7c40/0x7c40
[  481.363641][ T8841]  should_fail_ex+0x390/0x4c0
[  481.368388][ T8841]  should_failslab+0x5/0x20
[  481.373654][ T8841]  slab_pre_alloc_hook+0x59/0x300
[  481.379097][ T8841]  ? vfs_write+0x777/0x9a0
[  481.383592][ T8841]  kmem_cache_alloc+0x56/0x2f0
[  481.388423][ T8841]  ? getname_flags+0xb7/0x500
[  481.393161][ T8841]  getname_flags+0xb7/0x500
[  481.397732][ T8841]  do_sys_openat2+0xdd/0x4f0
[  481.402394][ T8841]  ? do_sys_open+0xe0/0xe0
[  481.406872][ T8841]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  481.412929][ T8841]  ? lock_chain_count+0x20/0x20
[  481.417879][ T8841]  __x64_sys_openat+0x135/0x160
[  481.422800][ T8841]  do_syscall_64+0x4c/0xa0
[  481.423124][ T4321] usb 2-1: Using ep0 maxpacket: 32
[  481.427265][ T8841]  ? clear_bhb_loop+0x60/0xb0
[  481.427291][ T8841]  ? clear_bhb_loop+0x60/0xb0
[  481.427316][ T8841]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  481.448746][ T8841] RIP: 0033:0x7f2623d9e159
[  481.454551][ T8841] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  481.474710][ T8841] RSP: 002b:00007f2624bb7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  481.485690][ T8841] RAX: ffffffffffffffda RBX: 00007f2624025fa0 RCX: 00007f2623d9e159
[  481.496277][ T8841] RDX: 0000000000000002 RSI: 0000000000000000 RDI: ffffffffffffff9c
[  481.505527][ T8841] RBP: 00007f2623e3506b R08: 0000000000000000 R09: 0000000000000000
[  481.513651][ T8841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  481.522806][ T8841] R13: 00007f2624026038 R14: 00007f2624025fa0 R15: 00007ffd1d95a1c8
[  481.531315][ T8841]  </TASK>
[  481.539022][ T4321] usb 2-1: config index 0 descriptor too short (expected 29220, got 36)
[  481.558227][ T4321] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  481.569017][ T4321] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81
[  481.580595][ T4321] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  481.590892][ T4321] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  481.603454][ T4321] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  481.633622][ T4321] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  481.658222][ T4321] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  481.693077][ T4321] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  481.712509][ T4321] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  481.750583][ T4321] usb 2-1: config 0 descriptor??
[  481.982632][ T4321] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  482.003110][ T4321] usb 2-1: USB disconnect, device number 7
[  482.023203][ T4321] usblp0: removed
[  482.315230][ T8861] 8250_pericom: probe of 0000:00:00.0 failed with error -12
[  482.570328][ T4321] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  482.740257][ T8869] 8250_pericom: probe of 0000:00:00.0 failed with error -12
[  482.773995][ T4321] usb 2-1: Using ep0 maxpacket: 32
[  482.783190][ T4321] usb 2-1: config index 0 descriptor too short (expected 29220, got 36)
[  482.797436][ T4321] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  482.807827][ T4321] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81
[  482.818023][ T4321] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  482.840251][ T4321] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  482.851885][ T4321] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  482.866103][ T4321] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  482.879665][ T4321] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  482.916510][ T4321] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  482.945271][ T4321] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  482.967957][ T4321] usb 2-1: config 0 descriptor??
[  483.194404][ T4321] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  483.257299][ T4321] usb 2-1: USB disconnect, device number 8
[  483.271622][ T4321] usblp0: removed
[  483.567816][ T8877] 8250_pericom: probe of 0000:00:00.0 failed with error -12
[  483.716857][ T8883] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1274'.
[  485.944258][ T8892] 8250_pericom: probe of 0000:00:00.0 failed with error -12
[  486.292082][ T8916] 8250_pericom: probe of 0000:00:00.0 failed with error -12
[  487.112725][ T8941] loop0: detected capacity change from 0 to 128
[  487.179503][ T8941] FAT-fs (loop0): bogus sectors per cluster 0
[  487.221065][ T8941] FAT-fs (loop0): Can't find a valid FAT filesystem
[  489.298636][ T8967] bridge0: port 3(syz_tun) entered blocking state
[  489.348759][ T8967] bridge0: port 3(syz_tun) entered disabled state
[  489.388329][ T8967] FAULT_INJECTION: forcing a failure.
[  489.388329][ T8967] name failslab, interval 1, probability 0, space 0, times 0
[  489.403964][ T8967] CPU: 0 PID: 8967 Comm: syz.5.1298 Not tainted syzkaller #0
[  489.411410][ T8967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  489.421502][ T8967] Call Trace:
[  489.424806][ T8967]  <TASK>
[  489.427761][ T8967]  dump_stack_lvl+0x188/0x24e
[  489.432479][ T8967]  ? show_regs_print_info+0x12/0x12
[  489.437721][ T8967]  ? load_image+0x410/0x410
[  489.442256][ T8967]  ? __might_sleep+0xd0/0xd0
[  489.446874][ T8967]  ? __lock_acquire+0x7c40/0x7c40
[  489.452193][ T8967]  should_fail_ex+0x390/0x4c0
[  489.456915][ T8967]  should_failslab+0x5/0x20
[  489.461443][ T8967]  slab_pre_alloc_hook+0x59/0x300
[  489.466524][ T8967]  kmem_cache_alloc+0x56/0x2f0
[  489.471316][ T8967]  ? __kernfs_new_node+0xe1/0x7f0
[  489.476455][ T8967]  __kernfs_new_node+0xe1/0x7f0
[  489.481345][ T8967]  ? __lock_acquire+0x7c40/0x7c40
[  489.486411][ T8967]  ? kernfs_new_node+0x250/0x250
[  489.491403][ T8967]  kernfs_new_node+0x148/0x250
[  489.496201][ T8967]  __kernfs_create_file+0x47/0x2e0
[  489.501362][ T8967]  sysfs_add_file_mode_ns+0x233/0x2f0
[  489.506781][ T8967]  sysfs_create_file_ns+0x128/0x1b0
[  489.512015][ T8967]  ? sysfs_add_bin_file_mode_ns+0x200/0x200
[  489.517934][ T8967]  ? kernfs_create_link+0x186/0x200
[  489.523162][ T8967]  br_sysfs_addif+0xc4/0x220
[  489.527862][ T8967]  br_add_if+0x397/0xee0
[  489.532150][ T8967]  do_setlink+0xd66/0x29c0
[  489.536649][ T8967]  ? nlmsg_parse_deprecated_strict+0x110/0x110
[  489.542836][ T8967]  ? mark_lock+0x94/0x320
[  489.547207][ T8967]  ? __nla_validate_parse+0x1f67/0x2970
[  489.552801][ T8967]  ? __lock_acquire+0x1465/0x7c40
[  489.557858][ T8967]  ? __nla_validate+0x50/0x50
[  489.562577][ T8967]  ? __lock_acquire+0x138a/0x7c40
[  489.567663][ T8967]  ? full_name_hash+0x8e/0xe0
[  489.572406][ T8967]  rtnl_setlink+0x37e/0x510
[  489.576950][ T8967]  ? rtnl_dump_ifinfo+0x1480/0x1480
[  489.582185][ T8967]  ? __lock_acquire+0x138a/0x7c40
[  489.587296][ T8967]  ? rtnl_dump_ifinfo+0x1480/0x1480
[  489.592526][ T8967]  rtnetlink_rcv_msg+0x863/0xfb0
[  489.597502][ T8967]  ? rtnetlink_rcv_msg+0x220/0xfb0
[  489.602646][ T8967]  ? rtnetlink_bind+0x80/0x80
[  489.607380][ T8967]  ? mark_lock+0x94/0x320
[  489.611746][ T8967]  ? __lock_acquire+0x138a/0x7c40
[  489.616825][ T8967]  ? __lock_acquire+0x138a/0x7c40
[  489.621879][ T8967]  ? verify_lock_unused+0x140/0x140
[  489.627117][ T8967]  ? verify_lock_unused+0x140/0x140
[  489.632345][ T8967]  ? __alloc_skb+0xf9/0x7d0
[  489.636946][ T8967]  ? verify_lock_unused+0x140/0x140
[  489.642197][ T8967]  netlink_rcv_skb+0x1ef/0x440
[  489.647035][ T8967]  ? rtnetlink_bind+0x80/0x80
[  489.651745][ T8967]  ? netlink_ack+0x1160/0x1160
[  489.656545][ T8967]  ? netlink_deliver_tap+0x2e/0x1b0
[  489.661803][ T8967]  netlink_unicast+0x7ad/0x920
[  489.666622][ T8967]  netlink_sendmsg+0x8ad/0xbd0
[  489.671421][ T8967]  ? netlink_getsockopt+0x550/0x550
[  489.676648][ T8967]  ? apparmor_socket_sendmsg+0x8a/0x330
[  489.682334][ T8967]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  489.687678][ T8967]  ? security_socket_sendmsg+0x7c/0xa0
[  489.693226][ T8967]  ? netlink_getsockopt+0x550/0x550
[  489.698454][ T8967]  ____sys_sendmsg+0x5ed/0x9a0
[  489.703284][ T8967]  ? __sys_sendmsg_sock+0x30/0x30
[  489.708334][ T8967]  ? __import_iovec+0x306/0x510
[  489.713285][ T8967]  ? import_iovec+0x6f/0xa0
[  489.717831][ T8967]  ___sys_sendmsg+0x2a2/0x360
[  489.722538][ T8967]  ? __sys_sendmsg+0x2a0/0x2a0
[  489.727401][ T8967]  __se_sys_sendmsg+0x1c3/0x2b0
[  489.732287][ T8967]  ? __x64_sys_sendmsg+0x80/0x80
[  489.737266][ T8967]  ? lockdep_hardirqs_on+0x94/0x140
[  489.742518][ T8967]  do_syscall_64+0x4c/0xa0
[  489.746983][ T8967]  ? clear_bhb_loop+0x60/0xb0
[  489.751701][ T8967]  ? clear_bhb_loop+0x60/0xb0
[  489.756423][ T8967]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  489.762384][ T8967] RIP: 0033:0x7f9b5f59e159
[  489.766826][ T8967] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  489.786548][ T8967] RSP: 002b:00007f9b6048b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  489.794991][ T8967] RAX: ffffffffffffffda RBX: 00007f9b5f825fa0 RCX: 00007f9b5f59e159
[  489.802989][ T8967] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000009
[  489.810988][ T8967] RBP: 00007f9b5f63506b R08: 0000000000000000 R09: 0000000000000000
[  489.818991][ T8967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  489.826990][ T8967] R13: 00007f9b5f826038 R14: 00007f9b5f825fa0 R15: 00007ffe96d50a58
[  489.835002][ T8967]  </TASK>
[  490.027845][ T8981] 8250_pericom: probe of 0000:00:00.0 failed with error -12
[  490.135818][ T8984] 8250_pericom: probe of 0000:00:00.0 failed with error -12
[  490.541587][ T8990] loop0: detected capacity change from 0 to 128
[  490.683772][ T8990] syz.0.1304: attempt to access beyond end of device
[  490.683772][ T8990] loop0: rw=2049, sector=153, nr_sectors = 8 limit=128
[  490.698314][ T8990] syz.0.1304: attempt to access beyond end of device
[  490.698314][ T8990] loop0: rw=2049, sector=169, nr_sectors = 8 limit=128
[  490.713682][ T8990] syz.0.1304: attempt to access beyond end of device
[  490.713682][ T8990] loop0: rw=2049, sector=185, nr_sectors = 8 limit=128
[  490.740125][ T8990] syz.0.1304: attempt to access beyond end of device
[  490.740125][ T8990] loop0: rw=2049, sector=201, nr_sectors = 8 limit=128
[  490.754539][ T8990] syz.0.1304: attempt to access beyond end of device
[  490.754539][ T8990] loop0: rw=2049, sector=217, nr_sectors = 8 limit=128
[  490.768788][ T8990] syz.0.1304: attempt to access beyond end of device
[  490.768788][ T8990] loop0: rw=2049, sector=233, nr_sectors = 8 limit=128
[  490.804273][ T8990] syz.0.1304: attempt to access beyond end of device
[  490.804273][ T8990] loop0: rw=2049, sector=249, nr_sectors = 8 limit=128
[  490.838986][ T8997] 8250_pericom: probe of 0000:00:00.0 failed with error -12
[  490.863371][ T8990] syz.0.1304: attempt to access beyond end of device
[  490.863371][ T8990] loop0: rw=2049, sector=265, nr_sectors = 8 limit=128
[  490.909829][ T8990] syz.0.1304: attempt to access beyond end of device
[  490.909829][ T8990] loop0: rw=2049, sector=281, nr_sectors = 8 limit=128
[  490.959832][ T8990] syz.0.1304: attempt to access beyond end of device
[  490.959832][ T8990] loop0: rw=2049, sector=297, nr_sectors = 8 limit=128
[  491.026489][ T8996] 8250_pericom: probe of 0000:00:00.0 failed with error -12
[  492.058207][ T9029] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1317'.
[  492.271364][ T9034] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1317'.
[  492.383089][ T9045] 8250_pericom: probe of 0000:00:00.0 failed with error -12
[  493.196627][ T9064] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1326'.
[  493.331637][ T9065] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1326'.
[  493.609300][ T9068] bridge0: port 3(syz_tun) entered blocking state
[  493.629605][ T9068] bridge0: port 3(syz_tun) entered disabled state
[  493.986102][ T9079] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1331'.
[  494.229262][ T9081] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1331'.
[  496.871445][ T9109] loop5: detected capacity change from 0 to 128
[  496.906625][ T9109] FAT-fs (loop5): bogus sectors per cluster 0
[  496.923231][ T9109] FAT-fs (loop5): Can't find a valid FAT filesystem
[  497.941895][ T9141] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1347'.
[  498.127113][ T9144] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1347'.
[  498.427551][ T4288] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  498.618360][ T4288] usb 2-1: Using ep0 maxpacket: 8
[  498.628845][ T4288] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  498.661730][ T4288] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  498.684297][ T4288] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  498.703854][ T4288] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  498.742942][ T4288] usb 2-1: config 0 descriptor??
[  498.973468][ T4288] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  499.172660][ T9146] iowarrior 2-1:0.0: Error -90 while submitting URB
[  499.214918][ T6099] usb 2-1: USB disconnect, device number 9
[  499.504918][ T4288] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  499.695604][ T4288] usb 4-1: Using ep0 maxpacket: 32
[  499.709859][ T4288] usb 4-1: config index 0 descriptor too short (expected 29220, got 36)
[  499.721813][ T4288] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  499.736217][ T4288] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81
[  499.769203][ T4288] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  499.789337][ T4288] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  499.841479][ T4288] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  499.880135][ T4288] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  499.900321][ T4288] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  499.930490][ T4288] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  499.966036][ T4288] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  499.983093][ T4288] usb 4-1: config 0 descriptor??
[  500.003509][ T9181] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1358'.
[  500.198895][ T4288] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  500.249503][ T4288] usb 4-1: USB disconnect, device number 4
[  500.299768][ T9189] 8250_pericom: probe of 0000:00:00.0 failed with error -12
[  500.308483][ T4288] usblp0: removed
[  500.439758][ T9193] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1363'.
[  500.803929][ T4288] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  500.982702][ T9211] loop0: detected capacity change from 0 to 128
[  501.014050][ T4288] usb 4-1: Using ep0 maxpacket: 32
[  501.025888][ T4288] usb 4-1: config index 0 descriptor too short (expected 29220, got 36)
[  501.041338][ T9211] FAT-fs (loop0): bogus sectors per cluster 0
[  501.043963][ T4288] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  501.063941][ T9211] FAT-fs (loop0): Can't find a valid FAT filesystem
[  501.072391][ T9212] 8250_pericom: probe of 0000:00:00.0 failed with error -12
[  501.081083][ T4288] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81
[  501.114986][ T4288] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  501.162487][ T4288] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  501.206789][ T4288] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  501.259051][ T4288] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  501.291895][ T4288] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  501.349281][ T4288] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  501.368950][ T4288] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  501.401041][ T4288] usb 4-1: config 0 descriptor??
[  501.447405][ T1282] ieee802154 phy0 wpan0: encryption failed: -22
[  501.453838][ T1282] ieee802154 phy1 wpan1: encryption failed: -22
[  501.565547][ T9223] 8250_pericom: probe of 0000:00:00.0 failed with error -12
[  501.762598][ T9233] loop0: detected capacity change from 0 to 128
[  501.825032][ T4288] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  501.876468][ T4288] usb 4-1: USB disconnect, device number 5
[  501.898115][ T4288] usblp0: removed
[  501.958121][ T9233] bio_check_eod: 1 callbacks suppressed
[  501.958207][ T9233] syz.0.1373: attempt to access beyond end of device
[  501.958207][ T9233] loop0: rw=2049, sector=153, nr_sectors = 8 limit=128
[  501.984667][ T9233] syz.0.1373: attempt to access beyond end of device
[  501.984667][ T9233] loop0: rw=2049, sector=169, nr_sectors = 8 limit=128
[  502.054895][ T9233] syz.0.1373: attempt to access beyond end of device
[  502.054895][ T9233] loop0: rw=2049, sector=185, nr_sectors = 8 limit=128
[  502.081855][ T9233] syz.0.1373: attempt to access beyond end of device
[  502.081855][ T9233] loop0: rw=2049, sector=201, nr_sectors = 8 limit=128
[  502.101555][ T9233] syz.0.1373: attempt to access beyond end of device
[  502.101555][ T9233] loop0: rw=2049, sector=217, nr_sectors = 8 limit=128
[  502.126257][ T9233] syz.0.1373: attempt to access beyond end of device
[  502.126257][ T9233] loop0: rw=2049, sector=233, nr_sectors = 8 limit=128
[  502.152436][ T9233] syz.0.1373: attempt to access beyond end of device
[  502.152436][ T9233] loop0: rw=2049, sector=249, nr_sectors = 8 limit=128
[  502.175450][ T9233] syz.0.1373: attempt to access beyond end of device
[  502.175450][ T9233] loop0: rw=2049, sector=265, nr_sectors = 8 limit=128
[  502.194086][ T9233] syz.0.1373: attempt to access beyond end of device
[  502.194086][ T9233] loop0: rw=2049, sector=281, nr_sectors = 8 limit=128
[  502.224584][ T9233] syz.0.1373: attempt to access beyond end of device
[  502.224584][ T9233] loop0: rw=2049, sector=297, nr_sectors = 8 limit=128
[  502.561755][ T9251] fuse: Bad value for 'fd'
[  502.742155][ T9260] 8250_pericom: probe of 0000:00:00.0 failed with error -12
[  504.632495][ T9298] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1390'.
[  504.789330][ T9301] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1390'.
[  507.051610][ T9331] 8250_pericom: probe of 0000:00:00.0 failed with error -12
[  508.530489][ T9353] loop0: detected capacity change from 0 to 164
[  509.037661][ T9365] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  509.819631][ T9368] 8250_pericom: probe of 0000:00:00.0 failed with error -12
[  509.972527][ T9382] 8250_pericom: probe of 0000:00:00.0 failed with error -12
[  511.357889][ T9406] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1419'.
[  511.474670][ T9411] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1419'.
[  513.475775][ T9481] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1443'.
[  514.675223][ T9507] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1452'.
[  514.838514][   T26] audit: type=1326 audit(1790091305.450:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9515 comm="syz.4.1455" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f48ed39e159 code=0x0
[  514.965225][ T9519] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1452'.
[  515.815674][ T9527] serio: Serial port ttyS3
[  516.492250][ T9530] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1459'.
[  516.670125][ T9538] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1459'.
[  516.725071][ T9539] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1459'.
[  516.742812][ T9541] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1463'.
[  517.463137][ T9553] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  518.183066][ T9576] serio: Serial port ttyS3
[  518.833868][   T26] audit: type=1326 audit(1790091309.440:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9582 comm="syz.4.1476" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48ed39e159 code=0x7ffc0000
[  519.013932][   T26] audit: type=1326 audit(1790091309.440:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9582 comm="syz.4.1476" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48ed39e159 code=0x7ffc0000
[  519.173709][   T26] audit: type=1326 audit(1790091309.470:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9582 comm="syz.4.1476" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48ed39e159 code=0x7ffc0000
[  519.252062][   T26] audit: type=1326 audit(1790091309.470:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9582 comm="syz.4.1476" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48ed39e159 code=0x7ffc0000
[  519.336430][   T26] audit: type=1326 audit(1790091309.470:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9582 comm="syz.4.1476" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48ed39e159 code=0x7ffc0000
[  519.423223][   T26] audit: type=1326 audit(1790091309.480:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9582 comm="syz.4.1476" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f48ed39e159 code=0x7ffc0000
[  519.493662][   T26] audit: type=1326 audit(1790091309.480:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9582 comm="syz.4.1476" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48ed39e159 code=0x7ffc0000
[  519.561254][   T26] audit: type=1326 audit(1790091309.480:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9582 comm="syz.4.1476" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48ed39e159 code=0x7ffc0000
[  519.650849][   T26] audit: type=1326 audit(1790091309.480:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9582 comm="syz.4.1476" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48ed39e159 code=0x7ffc0000
[  519.837168][ T9602] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1481'.
[  520.628658][ T9624] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  522.483581][ T9665] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1498'.
[  522.617862][ T9666] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1498'.
[  522.656350][ T9667] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1498'.
[  522.787622][ T9670] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1500'.
[  523.206386][ T9677] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  525.975034][ T9734] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1518'.
[  526.074557][ T9737] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1518'.
[  529.452533][ T9784] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1533'.
[  529.675009][ T9791] 8250_pericom: probe of 0000:00:00.0 failed with error -12
[  532.396352][ T9842] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1551'.
[  532.522419][ T9845] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1551'.
[  532.594253][ T9850] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1553'.
[  532.680472][ T9842] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1551'.
[  533.357088][ T9864] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  533.980061][ T6145] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  534.166213][ T9872] loop5: detected capacity change from 0 to 164
[  534.194132][ T6145] usb 1-1: Using ep0 maxpacket: 32
[  534.203321][ T6145] usb 1-1: config index 0 descriptor too short (expected 29220, got 36)
[  534.226245][ T9872] rock: corrupted directory entry. extent=458780 out of volume (nzones=41)
[  534.253868][ T6145] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  534.269413][ T9872] rock: corrupted directory entry. extent=458780 out of volume (nzones=41)
[  534.288520][ T6145] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81
[  534.309252][ T9872] iso9660: Corrupted directory entry in block 4 of inode 1792
[  534.329124][ T6145] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  534.378399][ T6145] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  534.413839][ T6145] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  534.466192][ T6145] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  534.492724][ T6145] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  534.572335][ T6145] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  534.609342][ T6145] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  534.652826][ T6145] usb 1-1: config 0 descriptor??
[  534.901578][ T9859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  534.957883][ T9859] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  535.207167][ T6145] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  535.273952][ T6145] usb 1-1: USB disconnect, device number 6
[  535.307050][ T6145] usblp0: removed
[  536.296681][ T9924] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  538.308161][ T9953] device dummy0 left promiscuous mode
[  538.353335][ T9953] bonding: bond1 is being created...
[  538.689949][ T9963] FAULT_INJECTION: forcing a failure.
[  538.689949][ T9963] name failslab, interval 1, probability 0, space 0, times 0
[  538.719409][ T9963] CPU: 1 PID: 9963 Comm: syz.0.1581 Not tainted syzkaller #0
[  538.732205][ T9963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  538.747543][ T9963] Call Trace:
[  538.752172][ T9963]  <TASK>
[  538.755160][ T9963]  dump_stack_lvl+0x188/0x24e
[  538.763788][ T9963]  ? show_regs_print_info+0x12/0x12
[  538.772203][ T9963]  ? load_image+0x410/0x410
[  538.777676][ T9963]  ? __might_sleep+0xd0/0xd0
[  538.782958][ T9963]  ? __lock_acquire+0x7c40/0x7c40
[  538.792941][ T9963]  should_fail_ex+0x390/0x4c0
[  538.798596][ T9963]  should_failslab+0x5/0x20
[  538.805881][ T9963]  slab_pre_alloc_hook+0x59/0x300
[  538.815463][ T9963]  ? vfs_write+0x777/0x9a0
[  538.820147][ T9963]  kmem_cache_alloc+0x56/0x2f0
[  538.825086][ T9963]  ? getname_flags+0xb7/0x500
[  538.830559][ T9963]  getname_flags+0xb7/0x500
[  538.835552][ T9963]  do_sys_openat2+0xdd/0x4f0
[  538.841127][ T9963]  ? do_sys_open+0xe0/0xe0
[  538.845705][ T9963]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  538.852904][ T9963]  ? lock_chain_count+0x20/0x20
[  538.860207][ T9963]  __x64_sys_openat+0x135/0x160
[  538.865849][ T9963]  do_syscall_64+0x4c/0xa0
[  538.870790][ T9963]  ? clear_bhb_loop+0x60/0xb0
[  538.876307][ T9963]  ? clear_bhb_loop+0x60/0xb0
[  538.881688][ T9963]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  538.889239][ T9963] RIP: 0033:0x7f2623d9e159
[  538.893806][ T9963] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  538.918278][ T9963] RSP: 002b:00007f2624bb7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  538.930736][ T9963] RAX: ffffffffffffffda RBX: 00007f2624025fa0 RCX: 00007f2623d9e159
[  538.939466][ T9963] RDX: 0000000000000002 RSI: 0000200000000340 RDI: ffffffffffffff9c
[  538.947587][ T9963] RBP: 00007f2623e3506b R08: 0000000000000000 R09: 0000000000000000
[  538.955715][ T9963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  538.966735][ T9963] R13: 00007f2624026038 R14: 00007f2624025fa0 R15: 00007ffd1d95a1c8
[  538.976785][ T9963]  </TASK>
[  539.014421][ T9953] bond1: (slave dummy0): Enslaving as an active interface with an up link
[  539.054656][ T9961] 8021q: adding VLAN 0 to HW filter on device bond1
[  539.726636][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  540.035926][ T9992] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  541.207694][ T9999] device dummy0 left promiscuous mode
[  541.775885][T10004] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1591'.
[  543.605068][T10038] device dummy0 left promiscuous mode
[  543.641299][T10038] bonding: bond1 is being created...
[  544.290997][T10038] bond1: (slave dummy0): Enslaving as an active interface with an up link
[  544.613404][T10050] 8021q: adding VLAN 0 to HW filter on device bond1
[  544.774023][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  546.469133][T10086] device dummy0 left promiscuous mode
[  546.540089][T10096] bond1: no command found in slaves file - use +ifname or -ifname
[  546.629570][T10099] bond1: (slave dummy0): Error: Device is in use and cannot be enslaved
[  546.727265][T10099] bond1: option slaves: unable to set because the bond device is up
[  547.535655][T10086] bond0: (slave bond_slave_0): Releasing backup interface
[  547.644569][T10085] bond0: (slave bond_slave_0): Releasing backup interface
[  547.702751][T10085] device bond_slave_0 left promiscuous mode
[  548.151190][T10124] bonding: bond1 is being created...
[  548.183088][T10127] loop3: detected capacity change from 0 to 164
[  548.289511][T10132] 8021q: adding VLAN 0 to HW filter on device bond1
[  549.769818][T10189] loop3: detected capacity change from 0 to 164
[  551.388210][T10238] bonding: bond1 is being created...
[  551.635443][T10238] bond0: option slaves: invalid value (-bond_slave_0)
[  553.143866][ T4325] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  553.335853][ T4325] usb 4-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice= 1.00
[  553.368601][ T4325] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  553.833895][ T6143] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  554.026036][ T6143] usb 2-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice= 1.00
[  554.053931][ T6143] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  554.543566][T10336] loop5: detected capacity change from 0 to 164
[  556.816769][ T4325] usb 4-1: USB disconnect, device number 6
[  556.850299][   T11] rtsx_usb_ms rtsx_usb_ms.2.auto: Runtime PM usage count underflow!
[  558.446069][ T6143] usb 2-1: USB disconnect, device number 10
[  558.711680][T10404] bonding: bond1 is being created...
[  558.728261][T10404] bonding: bond1 already exists
[  558.859579][T10404] bond1: (slave dummy0): Error: Device is in use and cannot be enslaved
[  558.900888][T10404] bond1: option slaves: unable to set because the bond device is up
[  558.913702][T10411] loop5: detected capacity change from 0 to 164
[  558.987283][T10404] bond0: option slaves: invalid value (-bond_slave_0)
[  560.621493][T10442] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  561.313972][ T4277] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  561.510386][ T4277] usb 4-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice= 1.00
[  561.590310][ T4277] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  562.887077][ T1282] ieee802154 phy0 wpan0: encryption failed: -22
[  562.893496][ T1282] ieee802154 phy1 wpan1: encryption failed: -22
[  563.807842][T10499] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  564.928083][T10514] nvmet_tcp: enabling port 1 (127.0.0.1:4420)
[  565.318014][   T95] nvmet: creating nvm controller 1 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:a4851d7c-0b2e-4c6e-be4e-95135066be9d.
[  565.429948][ T4277] usb 4-1: USB disconnect, device number 7
[  565.450397][T10519] nvme nvme0: creating 2 I/O queues.
[  565.484357][T10519] nvme nvme0: mapped 2/0/0 default/read/poll queues.
[  565.580323][T10519] nvme nvme0: new ctrl: NQN "testnqn", addr 127.0.0.1:4420
[  566.381183][T10551] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  567.269801][T10559] loop0: detected capacity change from 0 to 32768
[  567.838871][T10581] bonding: bond1 is being created...
[  567.845752][T10581] bonding: bond1 already exists
[  567.939714][T10593] bond0: (slave bond_slave_0): Releasing backup interface
[  567.964479][T10593] device bond_slave_0 left promiscuous mode
[  568.649344][T10616] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  569.700425][T10628] loop0: detected capacity change from 0 to 164
[  569.785887][T10606] Can't find ip_set type ha
[  570.627853][T10661] fuse: Unknown parameter 'group_i00000000000000000000'
[  571.435141][T10682] printk: console [ttyS0] disabled

syzkaller
syzkaller login: [  595.458426][T11152] printk: console [ttyS0] enabled
[  595.782368][T11164] netlink: 'syz.1.1940': attribute type 1 has an invalid length.
[  595.851603][T11164] netlink: 'syz.1.1940': attribute type 1 has an invalid length.
[  595.886885][T11164] ksmbd: Unknown IPC event: 10, ignore.
[  595.903644][T11164] netlink: 'syz.1.1940': attribute type 1 has an invalid length.
[  596.116383][T11167] md: could not open device unknown-block(1,0).
[  596.174542][   T22] usb 1-1: USB disconnect, device number 7
[  596.187536][T11171] md: could not open device unknown-block(1,1).
[  596.680549][T11187] md: could not open device unknown-block(1,0).
[  596.785771][T11194] md: could not open device unknown-block(1,0).
[  596.793652][T11177] md: could not open device unknown-block(1,1).
[  596.816629][T11199] md: could not open device unknown-block(1,1).
[  598.056668][T11226] 8021q: adding VLAN 0 to HW filter on device bond0
[  598.481728][T11237] printk: console [ttyS0] disabled
[  598.549013][T11237] printk: console [ttyS0] enabled
[  598.723678][T11242] printk: console [ttyS0] disabled
[  602.005219][T11345] printk: console [ttyS0] enabled
[  602.158673][ T5387] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  602.235370][T11347] md: couldn't update array info. -22
[  602.241997][T11347] md: could not open device unknown-block(7,0).
[  602.263967][T11347] md: md_import_device returned -16
[  602.355897][ T5387] usb 4-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice= 1.00
[  602.394670][ T5387] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  602.468801][ T5387] usbtest 4-1:1.0: Interface 0 is not authorized for usage
[  602.494940][ T5387] ALi m5602 4-1:1.0: Interface 0 is not authorized for usage
[  602.533375][T11355] bond0: option slaves: invalid value (-bond_slave_0)
[  602.783340][ T6143] usb 6-1: USB disconnect, device number 5
[  602.789748][T11364] md: couldn't update array info. -22
[  602.801377][ T4371] rtsx_usb_ms rtsx_usb_ms.2.auto: Runtime PM usage count underflow!
[  602.802467][T11364] md: could not open device unknown-block(7,0).
[  602.851550][T11364] md: md_import_device returned -16
[  602.990942][T11371] printk: console [ttyS0] disabled
[  603.067566][T11371] printk: console [ttyS0] enabled
[  603.222294][   T22] usb 4-1: USB disconnect, device number 9
[  603.341129][T11380] printk: console [ttyS0] disabled
[  603.414132][T11380] printk: console [ttyS0] enabled
[  603.656920][T11393] md: couldn't update array info. -22
[  603.673428][T11393] md: could not open device unknown-block(7,0).
[  603.693073][T11393] md: md_import_device returned -16
[  603.741947][T11396] md: couldn't update array info. -22
[  603.768552][T11396] md: could not open device unknown-block(7,0).
[  603.801273][T11396] md: md_import_device returned -16
[  603.985927][T11399] printk: console [ttyS0] disabled
[  604.083012][T11399] printk: console [ttyS0] enabled
[  604.127436][T11406] md: couldn't update array info. -22
[  604.150701][T11406] md: could not open device unknown-block(7,0).
[  604.205605][T11406] md: md_import_device returned -16
[  604.392781][T11414] printk: console [ttyS0] disabled
[  604.513963][T11414] printk: console [ttyS0] enabled
[  604.521110][T11418] bond0: option slaves: invalid value (-bond_slave_0)
[  604.551340][T11418] bond0: option slaves: invalid value (-bond_slave_1)
[  604.585740][T11418] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved
[  604.613867][T11418] bond0: option slaves: unable to set because the bond device is up
[  604.663966][T11418] 8021q: adding VLAN 0 to HW filter on device bond0
[  604.923907][   T22] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  605.125910][   T22] usb 4-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice= 1.00
[  605.143945][   T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  605.193275][   T22] rtsx_usb 4-1:1.0: Interface 0 is not authorized for usage
[  605.225045][   T22] usbtest 4-1:1.0: Interface 0 is not authorized for usage
[  605.248663][T11442] printk: console [ttyS0] disabled
[  605.333527][T11442] printk: console [ttyS0] enabled
[  605.550262][T11443] md: could not open device unknown-block(1,0).
[  605.598993][T11448] md: could not open device unknown-block(1,1).
[  605.613250][T11458] netlink: 'syz.4.2025': attribute type 21 has an invalid length.
[  605.879510][T11460] md: could not open device unknown-block(1,0).
[  605.888954][T11466] md: could not open device unknown-block(1,1).
[  606.108837][T11474] printk: console [ttyS0] disabled
[  606.182586][T11474] printk: console [ttyS0] enabled
[  606.749252][T11488] md: could not open device unknown-block(1,0).
[  606.787613][T11500] printk: console [ttyS0] disabled
[  606.851672][T11500] printk: console [ttyS0] enabled
[  607.931062][T11514] nvme_fabrics: missing parameter 'transport=%s'
[  607.941316][T11514] nvme_fabrics: missing parameter 'nqn=%s'
[  608.112112][ T6143] usb 4-1: USB disconnect, device number 10
[  608.333306][T11526] bond0: option slaves: invalid value (-bond_slave_0)
[  608.390757][T11526] bond0: (slave bond_slave_1): Releasing backup interface
[  608.503098][T11527] device bond0 left promiscuous mode
[  608.554067][T11538] 8021q: adding VLAN 0 to HW filter on device bond0
[  608.623925][T11526] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved
[  608.667054][T11526] bond0: option slaves: unable to set because the bond device is up
[  608.696113][T11527] 8021q: adding VLAN 0 to HW filter on device bond0
[  608.807145][ T4465] bond1: (slave dummy0): link status definitely down, disabling slave
[  608.851329][ T4465] bond1: now running without any active interface!
[  609.024572][T11552] bond0: option slaves: invalid value (-bond_slave_0)
[  609.048668][T11552] bond0: option slaves: invalid value (-bond_slave_1)
[  609.113353][T11552] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved
[  609.147670][T11552] bond0: option slaves: unable to set because the bond device is up
[  609.191987][T11560] 8021q: adding VLAN 0 to HW filter on device bond0
[  609.335189][T11546] md: could not open device unknown-block(1,0).
[  609.345527][T11550] md: could not open device unknown-block(1,1).
[  609.674779][T11564] md: could not open device unknown-block(1,0).
[  609.714099][T11567] md: could not open device unknown-block(1,1).
[  609.777781][T11584] 8250_pericom: probe of 0000:00:00.0 failed with error -12
[  610.038274][T11577] md: could not open device unknown-block(1,0).
[  610.097080][T11583] md: could not open device unknown-block(1,1).
[  610.291347][T11599] 8021q: adding VLAN 0 to HW filter on device bond0
[  610.353378][T11592] nvme_fabrics: missing parameter 'transport=%s'
[  610.363976][T11592] nvme_fabrics: missing parameter 'nqn=%s'
[  610.806579][T11616] netlink: 'syz.4.2064': attribute type 1 has an invalid length.
[  610.821440][T11616] netlink: 'syz.4.2064': attribute type 1 has an invalid length.
[  610.836924][T11616] ksmbd: Unknown IPC event: 10, ignore.
[  610.858617][T11616] netlink: 'syz.4.2064': attribute type 1 has an invalid length.
[  611.077610][T11620] bond0: option slaves: invalid value (-bond_slave_0)
[  611.099966][T11620] bond0: option slaves: invalid value (-bond_slave_1)
[  611.133555][T11620] bond0: option mode: unable to set because the bond device has slaves
[  611.180381][T11620] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved
[  611.225691][T11620] bond0: option slaves: unable to set because the bond device is up
[  611.281446][T11625] 8250_pericom: probe of 0000:00:00.0 failed with error -12
[  611.290963][T11620] 8021q: adding VLAN 0 to HW filter on device bond0
[  611.884105][ T4325] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  611.943947][ T5387] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  612.095563][ T4325] usb 6-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice= 1.00
[  612.111479][ T4325] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  612.145625][ T5387] usb 2-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice= 1.00
[  612.165861][ T5387] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  612.236922][ T5387] usbtest 2-1:1.0: Interface 0 is not authorized for usage
[  612.272687][ T5387] ALi m5602 2-1:1.0: Interface 0 is not authorized for usage
[  612.660394][   T14] usb 2-1: USB disconnect, device number 11
[  612.975780][T11661] md: could not open device unknown-block(1,0).
[  613.006288][T11664] 8021q: adding VLAN 0 to HW filter on device bond0
[  613.025588][T11657] md: could not open device unknown-block(1,1).
[  613.486072][T11674] md: couldn't update array info. -22
[  613.491770][T11676] md: could not open device unknown-block(1,0).
[  613.501583][T11677] md: could not open device unknown-block(1,0).
[  613.510181][T11677] md: md_import_device returned -16
[  613.518588][T11679] md: could not open device unknown-block(1,1).
[  613.529195][T11679] md: md_import_device returned -16
[  613.538802][T11670] md: could not open device unknown-block(1,1).
[  613.811360][T11685] bond0: option slaves: invalid value (-bond_slave_0)
[  613.821020][T11685] bond0: option slaves: invalid value (-bond_slave_1)
[  613.828298][T11687] netlink: 'syz.1.2086': attribute type 1 has an invalid length.
[  613.836985][T11685] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved
[  613.845819][T11685] bond0: option slaves: unable to set because the bond device is up
[  613.861446][T11685] 8021q: adding VLAN 0 to HW filter on device bond0
[  613.879826][T11687] netlink: 'syz.1.2086': attribute type 1 has an invalid length.
[  613.891130][T11687] ksmbd: Unknown IPC event: 10, ignore.
[  613.904164][T11687] netlink: 'syz.1.2086': attribute type 1 has an invalid length.
[  614.444106][T11699] md: could not open device unknown-block(1,0).
[  614.450706][T11700] md: could not open device unknown-block(1,0).
[  614.463429][T11703] md: could not open device unknown-block(1,1).
[  614.470686][T11705] md: could not open device unknown-block(1,1).
[  614.630605][T11710] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  614.660416][T11710] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  614.678617][T11712] printk: console [ttyS0] disabled
[  614.741127][T11712] printk: console [ttyS0] enabled
[  614.932462][T11719] printk: console [ttyS0] disabled
[  614.946206][ T4325] usb 6-1: USB disconnect, device number 6
[  615.042457][T11719] printk: console [ttyS0] enabled
[  615.262806][T11727] bond0: option slaves: invalid value (-bond_slave_0)
[  615.284453][T11727] bond0: option slaves: invalid value (-bond_slave_1)
[  615.302016][T11727] bond0: option mode: unable to set because the bond device has slaves
[  615.322641][T11727] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved
[  615.331517][T11727] bond0: option slaves: unable to set because the bond device is up
[  615.343301][T11727] 8021q: adding VLAN 0 to HW filter on device bond0
[  615.371331][T11729] 8021q: adding VLAN 0 to HW filter on device bond0
[  615.630416][T11736] printk: console [ttyS0] disabled
[  615.674218][T11736] printk: console [ttyS0] enabled
[  615.880278][T11740] md: could not open device unknown-block(1,0).
[  615.886873][T11744] md: could not open device unknown-block(1,1).
[  615.894149][T11748] md: couldn't update array info. -22
[  615.900009][T11750] md: could not open device unknown-block(7,0).
[  615.907483][T11750] md: md_import_device returned -16
[  616.005345][T11752] printk: console [ttyS0] disabled
[  616.063116][T11752] printk: console [ttyS0] enabled
[  616.294534][T11760] printk: console [ttyS0] disabled
[  616.358529][T11760] printk: console [ttyS0] enabled
[  616.391351][T11754] md: could not open device unknown-block(1,1).
[  616.666798][T11773] bond0: option slaves: invalid value (-bond_slave_0)
[  616.675235][T11773] bond0: option slaves: invalid value (-bond_slave_1)
[  616.697182][T11773] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved
[  616.711856][T11773] bond0: option slaves: unable to set because the bond device is up
[  616.753145][T11773] 8021q: adding VLAN 0 to HW filter on device bond0
[  617.567180][T11799] bond0: option slaves: invalid value (-bond_slave_0)
[  617.578349][T11799] bond0: option mode: unable to set because the bond device has slaves
[  617.592783][T11799] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved
[  617.603089][T11799] bond0: option slaves: unable to set because the bond device is up
[  617.620648][T11799] 8021q: adding VLAN 0 to HW filter on device bond0
[  617.912491][T11803] md: could not open device unknown-block(1,0).
[  617.923484][T11801] md: could not open device unknown-block(1,1).
[  617.931397][T11807] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  617.942862][T11807] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  617.957023][T11807] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  617.967782][T11807] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  618.116213][T11811] bond0: option slaves: invalid value (-bond_slave_0)
[  618.126514][T11811] bond0: option mode: unable to set because the bond device has slaves
[  618.136335][T11811] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved
[  618.145284][T11811] bond0: option slaves: unable to set because the bond device is up
[  618.165328][T11811] 8021q: adding VLAN 0 to HW filter on device bond0
[  618.553073][T11822] md: could not open device unknown-block(1,0).
[  618.564894][T11818] md: could not open device unknown-block(1,1).
[  618.851225][T11832] printk: console [ttyS0] disabled
[  618.898504][T11832] printk: console [ttyS0] enabled
[  619.001550][T11830] md: could not open device unknown-block(1,0).
[  619.008898][T11835] md: could not open device unknown-block(1,1).
[  619.224040][T11838] md: could not open device unknown-block(1,1).
[  619.436334][T11849] 8021q: adding VLAN 0 to HW filter on device bond0
[  619.461136][T11843] md: could not open device unknown-block(1,1).
[  619.694928][T11859] md: could not open device unknown-block(1,0).
[  619.711462][T11852] md: could not open device unknown-block(1,1).
[  619.739249][T11862] bond0: option slaves: interface -bond_sl does not exist!
[  619.750460][T11862] bond0: option slaves: invalid value (-bond_slave_1)
[  619.762757][T11862] bond0: option mode: unable to set because the bond device has slaves
[  619.774107][T11862] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved
[  619.782543][T11862] bond0: option slaves: unable to set because the bond device is up
[  619.795823][T11862] 8021q: adding VLAN 0 to HW filter on device bond0
[  619.990985][T11868] bond0: option slaves: invalid value (-bond_slave_1)
[  619.996219][T11866] netlink: 'syz.0.2133': attribute type 1 has an invalid length.
[  620.009701][T11868] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved
[  620.018205][T11868] bond0: option slaves: unable to set because the bond device is up
[  620.029239][T11868] 8021q: adding VLAN 0 to HW filter on device bond0
[  620.038997][T11866] netlink: 'syz.0.2133': attribute type 1 has an invalid length.
[  620.053249][T11866] ksmbd: Unknown IPC event: 10, ignore.
[  620.159279][T11870] md: couldn't update array info. -22
[  620.174716][T11870] md: could not open device unknown-block(1,0).
[  620.184165][T11870] md: md_import_device returned -16
[  620.195127][T11870] md: could not open device unknown-block(1,1).
[  620.208901][T11870] md: md_import_device returned -16
[  620.351407][T11875] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  620.371650][T11875] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  620.402514][T11875] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  620.452856][   T95] nvmet_tcp: failed cmd ffff88805708ffc0 id 0 opcode 0, data_len: 0
[  620.470991][   T14] 
[  620.473383][   T14] ======================================================
[  620.480427][   T14] WARNING: possible circular locking dependency detected
[  620.487486][   T14] syzkaller #0 Not tainted
[  620.491935][   T14] ------------------------------------------------------
[  620.498980][   T14] kworker/0:1/14 is trying to acquire lock:
[  620.504908][   T14] ffff88807af5d030 ((work_completion)(&queue->io_work)){+.+.}-{0:0}, at: __flush_work+0x109/0xac0
[  620.515657][   T14] 
[  620.515657][   T14] but task is already holding lock:
[  620.523055][   T14] ffffc90000137d00 ((work_completion)(&queue->release_work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160
[  620.534596][   T14] 
[  620.534596][   T14] which lock already depends on the new lock.
[  620.534596][   T14] 
[  620.545028][   T14] 
[  620.545028][   T14] the existing dependency chain (in reverse order) is:
[  620.554073][   T14] 
[  620.554073][   T14] -> #2 ((work_completion)(&queue->release_work)){+.+.}-{0:0}:
[  620.563941][   T14]        process_one_work+0x7ec/0x1160
[  620.569458][   T14]        worker_thread+0xaf5/0x12a0
[  620.574742][   T14]        kthread+0x29d/0x330
[  620.579440][   T14]        ret_from_fork+0x1f/0x30
[  620.584481][   T14] 
[  620.584481][   T14] -> #1 ((wq_completion)nvmet-wq){+.+.}-{0:0}:
[  620.592871][   T14]        __flush_workqueue+0x165/0x1380
[  620.598466][   T14]        nvmet_tcp_install_queue+0x7e/0x380
[  620.604492][   T14]        nvmet_install_queue+0x335/0x760
[  620.610239][   T14]        nvmet_execute_admin_connect+0x332/0x7e0
[  620.616610][   T14]        nvmet_tcp_io_work+0x1b43/0x88a0
[  620.622283][   T14]        process_one_work+0x8ab/0x1160
[  620.627780][   T14]        worker_thread+0xaf5/0x12a0
[  620.633018][   T14]        kthread+0x29d/0x330
[  620.637665][   T14]        ret_from_fork+0x1f/0x30
[  620.642653][   T14] 
[  620.642653][   T14] -> #0 ((work_completion)(&queue->io_work)){+.+.}-{0:0}:
[  620.651971][   T14]        __lock_acquire+0x2d18/0x7c40
[  620.657369][   T14]        lock_acquire+0x1bb/0x4a0
[  620.662423][   T14]        __flush_work+0x122/0xac0
[  620.667469][   T14]        __cancel_work_timer+0x3f4/0x560
[  620.673120][   T14]        nvmet_tcp_release_queue_work+0x2ef/0xf30
[  620.679563][   T14]        process_one_work+0x8ab/0x1160
[  620.685039][   T14]        worker_thread+0xaf5/0x12a0
[  620.690259][   T14]        kthread+0x29d/0x330
[  620.694877][   T14]        ret_from_fork+0x1f/0x30
[  620.699851][   T14] 
[  620.699851][   T14] other info that might help us debug this:
[  620.699851][   T14] 
[  620.710090][   T14] Chain exists of:
[  620.710090][   T14]   (work_completion)(&queue->io_work) --> (wq_completion)nvmet-wq --> (work_completion)(&queue->release_work)
[  620.710090][   T14] 
[  620.727669][   T14]  Possible unsafe locking scenario:
[  620.727669][   T14] 
[  620.735136][   T14]        CPU0                    CPU1
[  620.740608][   T14]        ----                    ----
[  620.745992][   T14]   lock((work_completion)(&queue->release_work));
[  620.752518][   T14]                                lock((wq_completion)nvmet-wq);
[  620.760173][   T14]                                lock((work_completion)(&queue->release_work));
[  620.769215][   T14]   lock((work_completion)(&queue->io_work));
[  620.775304][   T14] 
[  620.775304][   T14]  *** DEADLOCK ***
[  620.775304][   T14] 
[  620.783463][   T14] 2 locks held by kworker/0:1/14:
[  620.788498][   T14]  #0: ffff888025d71d38 ((wq_completion)nvmet-wq){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160
[  620.799063][   T14]  #1: ffffc90000137d00 ((work_completion)(&queue->release_work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160
[  620.811010][   T14] 
[  620.811010][   T14] stack backtrace:
[  620.816914][   T14] CPU: 0 PID: 14 Comm: kworker/0:1 Not tainted syzkaller #0
[  620.824212][   T14] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  620.834290][   T14] Workqueue: nvmet-wq nvmet_tcp_release_queue_work
[  620.840836][   T14] Call Trace:
[  620.844134][   T14]  <TASK>
[  620.847084][   T14]  dump_stack_lvl+0x188/0x24e
[  620.851791][   T14]  ? load_image+0x410/0x410
[  620.856338][   T14]  ? show_regs_print_info+0x12/0x12
[  620.861563][   T14]  ? print_circular_bug+0x12b/0x1a0
[  620.866877][   T14]  check_noncircular+0x296/0x330
[  620.871963][   T14]  ? look_up_lock_class+0x75/0x140
[  620.877105][   T14]  ? add_chain_block+0x9b0/0x9b0
[  620.882076][   T14]  ? lockdep_lock+0xf1/0x1f0
[  620.886710][   T14]  ? stack_trace_save+0xf0/0xf0
[  620.891665][   T14]  ? _find_first_zero_bit+0xd2/0x100
[  620.896986][   T14]  __lock_acquire+0x2d18/0x7c40
[  620.901871][   T14]  ? arch_stack_walk+0x10c/0x140
[  620.906850][   T14]  ? verify_lock_unused+0x140/0x140
[  620.912074][   T14]  ? ret_from_fork+0x1f/0x30
[  620.916698][   T14]  ? stack_trace_save+0xa6/0xf0
[  620.921617][   T14]  ? stack_trace_snprint+0xe0/0xe0
[  620.926757][   T14]  ? check_noncircular+0x189/0x330
[  620.931906][   T14]  ? add_chain_block+0x9b0/0x9b0
[  620.936873][   T14]  lock_acquire+0x1bb/0x4a0
[  620.941401][   T14]  ? __flush_work+0x109/0xac0
[  620.946104][   T14]  ? __lock_acquire+0x28d6/0x7c40
[  620.951154][   T14]  ? read_lock_is_recursive+0x10/0x10
[  620.956557][   T14]  ? __flush_work+0x109/0xac0
[  620.961255][   T14]  __flush_work+0x122/0xac0
[  620.965782][   T14]  ? __flush_work+0x109/0xac0
[  620.970483][   T14]  ? flush_work+0x20/0x20
[  620.974836][   T14]  ? try_to_grab_pending+0xfa/0x890
[  620.980053][   T14]  ? lockdep_hardirqs_off+0x70/0x100
[  620.985391][   T14]  ? mark_lock+0x94/0x320
[  620.989748][   T14]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  620.995759][   T14]  ? mod_delayed_work_on+0x1b0/0x1b0
[  621.001067][   T14]  ? lock_chain_count+0x20/0x20
[  621.005947][   T14]  ? mark_lock+0x94/0x320
[  621.010303][   T14]  ? __cancel_work_timer+0x36a/0x560
[  621.015610][   T14]  __cancel_work_timer+0x3f4/0x560
[  621.020747][   T14]  ? cancel_work_sync+0x20/0x20
[  621.025616][   T14]  ? __local_bh_enable_ip+0x136/0x1c0
[  621.031045][   T14]  ? lockdep_hardirqs_on+0x94/0x140
[  621.036283][   T14]  ? __local_bh_enable_ip+0x136/0x1c0
[  621.041694][   T14]  ? _local_bh_enable+0xa0/0xa0
[  621.046575][   T14]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  621.052614][   T14]  ? __lock_acquire+0x7c40/0x7c40
[  621.057681][   T14]  nvmet_tcp_release_queue_work+0x2ef/0xf30
[  621.063603][   T14]  ? _raw_spin_unlock_irq+0x1f/0x40
[  621.068836][   T14]  ? process_one_work+0x7b4/0x1160
[  621.073983][   T14]  process_one_work+0x8ab/0x1160
[  621.078954][   T14]  ? worker_detach_from_pool+0x240/0x240
[  621.084608][   T14]  ? _raw_spin_lock_irq+0xb7/0xf0
[  621.089667][   T14]  ? _raw_spin_lock_irqsave+0x100/0x100
[  621.095237][   T14]  ? wq_worker_running+0x97/0x190
[  621.100308][   T14]  worker_thread+0xaf5/0x12a0
[  621.105021][   T14]  kthread+0x29d/0x330
[  621.109113][   T14]  ? worker_clr_flags+0x1a0/0x1a0
[  621.114163][   T14]  ? kthread_blkcg+0xd0/0xd0
[  621.118776][   T14]  ret_from_fork+0x1f/0x30
[  621.123224][   T14]  </TASK>
[  621.178538][T11880] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved
[  621.188227][T11880] bond0: option slaves: unable to set because the bond device is up
[  621.200302][T11880] 8021q: adding VLAN 0 to HW filter on device bond0
[  624.325800][ T1282] ieee802154 phy0 wpan0: encryption failed: -22
[  624.332195][ T1282] ieee802154 phy1 wpan1: encryption failed: -22