last executing test programs:

2m44.505986709s ago: executing program 4 (id=120):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x321081a, &(0x7f00000005c0)={[{@acl}, {@errors_remount}]}, 0x1, 0x445, &(0x7f0000000b00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0x8000c61)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x2000)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x5453, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x80000001)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40)
copy_file_range(r3, 0x0, r3, &(0x7f0000000500)=0xffff, 0x9, 0x0)

2m43.288522611s ago: executing program 4 (id=130):
syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file1\x00', 0x4010, &(0x7f0000000300), 0x1, 0x9768, &(0x7f0000012f40)="$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")
openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
openat(0xffffffffffffffff, 0x0, 0x1e7842, 0x209213aa4b1765f4)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000001080)=ANY=[@ANYBLOB='iocharset=macinuit,shortname=winnt,iocharset=cp937,iocharset=iso8859-13,utf8=0,rodir,rodir,shortname=lower,uni_xlate=0,nonumtail=0,codepage=850,shortname=win95,errors=continue,nonumtail=0,uni_xlate=1,utf8=0,iocharset=ascii,\x00'], 0xfd, 0x2a8, &(0x7f0000000240)="$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")
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x1, 0x0, &(0x7f0000000140))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x40)
fallocate(r1, 0x0, 0xfff, 0x9)

2m33.810941871s ago: executing program 4 (id=143):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000010005fba0000000000eeffffff000000", @ANYRES32=0x0, @ANYBLOB="800002010800000008001b000000000008000d"], 0x38}}, 0x0)
preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000000)=""/30, 0x1e}], 0x1, 0x8, 0x2)

2m30.891281422s ago: executing program 4 (id=157):
syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={[{@test_dummy_encryption}, {@nogrpid}]}, 0xfd, 0x4b2, &(0x7f0000000e40)="$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")
mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901)
mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007740), 0x0, 0x8800)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x152)
syz_emit_ethernet(0x15e, 0x0, 0x0)

2m30.087173524s ago: executing program 4 (id=159):
sched_setscheduler(0x0, 0x2, 0x0)
memfd_create(0x0, 0x4)
r0 = syz_clone(0x0, 0x0, 0xffffff36, 0x0, 0x0, 0x0)
wait4(r0, 0x0, 0x80000000, 0x0)
ptrace(0x10, r0)
r1 = syz_pidfd_open(r0, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
waitid$P_PIDFD(0x3, r1, 0x0, 0xa000000c, 0x0)

2m28.926897225s ago: executing program 4 (id=165):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x64, 0x2c, 0x601, 0x0, 0x200, {0x0, 0x0, 0x0, r3, {0xfff3}, {0xc, 0xffff}, {0x300, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x38, 0x2, [@TCA_U32_SEL={0x34, 0x5, {0x0, 0xf, 0x2, 0x1, 0x200, 0x400, 0x1, 0x8, [{0x8, 0x8, 0x9108, 0xf}, {0x6, 0x2, 0x8, 0xfff}]}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4001}, 0x0)
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000003c0)=ANY=[], 0x82)

2m27.981836303s ago: executing program 32 (id=165):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x64, 0x2c, 0x601, 0x0, 0x200, {0x0, 0x0, 0x0, r3, {0xfff3}, {0xc, 0xffff}, {0x300, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x38, 0x2, [@TCA_U32_SEL={0x34, 0x5, {0x0, 0xf, 0x2, 0x1, 0x200, 0x400, 0x1, 0x8, [{0x8, 0x8, 0x9108, 0xf}, {0x6, 0x2, 0x8, 0xfff}]}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4001}, 0x0)
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000003c0)=ANY=[], 0x82)

2m21.030592s ago: executing program 1 (id=190):
fsopen(0x0, 0x1)
unshare(0x22020400)
syz_usb_connect(0x6, 0x36, 0x0, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x4000, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10)
sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c)

2m15.295148992s ago: executing program 0 (id=196):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00')
ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000008940)={0x0, {}, 0x0, {}, 0x40000fff, 0x5, 0x6, 0x1, "9e959f16deab7b08aa26e66c4056a516950773ff0000000000eef4fb0efcc1d8a6078ed9d5f8643902dd8f6fac274de9d940ffa5e592bbd48685450d004b0b00", "f625c10e6e0080ffffffffffffffff7e904dc8df6aa3a893ec00347f41be6908", [0xa, 0x80000476]})
umount2(&(0x7f00000002c0)='./file0\x00', 0x0)
fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
write$tun(0xffffffffffffffff, 0x0, 0xfdef)
userfaultfd(0x80001)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
open(&(0x7f00000000c0)='./file0\x00', 0x109281, 0x0)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x15)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0x1ff)

2m15.073875526s ago: executing program 1 (id=199):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x90, 0x0, &(0x7f0000000680)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000001800)={0x44, 0x0, &(0x7f0000001ac0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

2m14.859477383s ago: executing program 1 (id=201):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0)
setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x3a, 0x1, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000012, 0x3000005, 0x401d031, 0xffffffffffffffff, 0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89c, 0xc000, 0x2, 0x6})
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2, 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0)

2m11.731315566s ago: executing program 1 (id=210):
semget$private(0x0, 0x4, 0xc3)
syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x3a)
getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000040)={'IDLETIMER\x00'}, &(0x7f0000000080)=0x1e)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2804000, &(0x7f0000000140)={[{@jqfmt_vfsv0}, {@auto_da_alloc}, {@noblock_validity}, {@nomblk_io_submit}, {@inlinecrypt}, {@quota}, {@nomblk_io_submit}, {@errors_remount}, {@dioread_nolock}]}, 0x1, 0x5b7, &(0x7f0000000200)="$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")
socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffff9c, 0x0, 0x101042, 0x1d8)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x101042, 0x65)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612)
pwrite64(r1, 0x0, 0x0, 0x4fed0)
r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x129042, 0x15)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)

2m9.53880981s ago: executing program 0 (id=212):
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040ff701101c04"], 0x7)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
write(r0, 0x0, 0x0)
pipe2(0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
write(r0, 0x0, 0x0)
nanosleep(0x0, 0x0)

2m9.417617407s ago: executing program 1 (id=214):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000140)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xe60d3000)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
clock_nanosleep(0x2, 0xfffffdfc, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r1, 0x0, r4, 0x0, 0x39000, 0x0)
r5 = memfd_create(&(0x7f0000000180)='<Z2>J=\t\xeb\xf8\xa7\x04\x9f\xe1hO\x8e\xd7\xb5\x93}\x8d\xed\x01L`\x93\xcd^2P\x00$x\"\xda\xf1Az\xfe_\xc5\xb3\x9b`;\x1c\xfc\xaf9\x98\x91\xe7', 0x1)
splice(r3, 0x0, r5, 0x0, 0x2, 0x5)
write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffe3e)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)

2m7.874122293s ago: executing program 0 (id=215):
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$xdp(0x2c, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0xb, 0xfffff034}, {0x20, 0x81, 0x0, 0xfffff024}, {0x6, 0x0, 0x0, 0x2000000}]}, 0x10)
sendmmsg(r1, &(0x7f0000001c00), 0x400000000000159, 0x40840)

2m6.479852122s ago: executing program 0 (id=219):
syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={[{@test_dummy_encryption}, {@nogrpid}]}, 0xfd, 0x4b2, &(0x7f0000000e40)="$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")
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setscheduler(0x0, 0x2, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0)
mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0)
mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)

2m6.123589263s ago: executing program 0 (id=220):
socket$nl_route(0x10, 0x3, 0x0)
syz_emit_vhci(0x0, 0x7)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x777)
mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0)
write$cgroup_int(r3, &(0x7f0000000000)=0x7ff, 0x12)

2m5.685986489s ago: executing program 1 (id=222):
socket$nl_route(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0)
openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0)

2m5.373800789s ago: executing program 33 (id=222):
socket$nl_route(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0)
openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0)

2m4.326147654s ago: executing program 0 (id=226):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e657665000020000280140007000000000000000000000000007fff0001050004000100000008000a00", @ANYRES32=r2], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
r3 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000)
getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x3}, {0x4, 0x9}}}, 0x24}}, 0x0)

2m1.829790981s ago: executing program 34 (id=226):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e657665000020000280140007000000000000000000000000007fff0001050004000100000008000a00", @ANYRES32=r2], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
r3 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000)
getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x3}, {0x4, 0x9}}}, 0x24}}, 0x0)

14.600435369s ago: executing program 2 (id=375):
syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000540)=ANY=[], 0x81, 0x14f3, &(0x7f0000001580)="$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")
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$inet6(0xa, 0x3, 0xff)
shutdown(r0, 0x1)
connect$inet6(r0, 0x0, 0x0)
r1 = dup2(r0, r0)
write$tun(r1, 0x0, 0x3c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0)
capset(0x0, 0x0)
chdir(0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xa1300)
syz_mount_image$udf(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="008e9bc204b28005dae6989e79619992bf476643009fca7b68ce29e081463413d590f652342589243ded0ff6e0c8f829dfdcf1ef2c88dce34609d53311528cc402db8ae313994f2b7be33998ee7110587bb4e9533afa0cc4e011a8965934f7498916f95762f3b56a206f56"], 0x1, 0x4e3, &(0x7f00000005c0)="$eJzs3M9vHFcdAPDvm3i36y1q3TaEUIowQighbazEaVPTcMA0CUWqwEpsLhzAie1g1b9kO1VTUeh/wI1/AFVCiFZBXFAPnBEnDkgg4MCpHBDIByROqGjGM7tre6kN67Xj+PORkp2d/c7Me6P5zntvPDMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAER85dr4hYvpsEsBABykr9+8cWFU+w8Ax8qk8T8AABwXKbJYiRQ3so10pvi+qfHq/NLdN6auXu++2GAqljxRxOf/GhdHLz3/wuUXx6rPj15+v30yvnFzcnz45eXFldXZtbXZmeGppfnbyzOze15Dr8tvd67YAcOLr92dmZtbGx4dubTl5zeGPnjk0VNDV8bGJ5+vYqeuXr9+syNmoPZ/b30HIzy6qUcWn44Ui799L52NiCx6z4Vdzh39NhgDef4VlZi6er2oyML89NJ6/uNElQgDW3OiXuXIAeRiT85GnM/LWpfR9K4WWYxHis/ERvpCRJyo8uDZ4g+Du69g4AAK2UVezhcj4pU4AjkLD6hHIotf5u3/4404d3jpDByCgcjiRqT455WN9GzRH8jb07zb/Oo3h7+2NLfcETuRyhb1qI8PDpK+CQ+wRmRxtujxb6TnDrswwIEajCyuRYoP7r9eXFeK4rr041e+WD/37c4rTJ/YZT157EhEXNrjmLxWXmucSBMpZftfLwAAAAAAAAAAAHiYNVIWP4sUb32qUXx/pXWD/F8+LBxy+YA+Sll8J1L86HcbKW17L8WJjvd7tBz1Z3/6W/7BxsvLK/dW5+98d73r783G+K219dXp291/jsFolO9gqOz2HgPoQS1l8Vik+NaHP2nfhj+U8mOwfBT4RCv2nS+1j83G9uOvOG88tvk+m+oZgtromc7profs//B8XL7NlLL4daT46q3TRVlSNGNHzsRm3LU87k/PlHFZPa9R9Xzz0OYa5+YXZi/ksb+PFH/+QxUbRWz1oOBT7diLeWwWKT77q62xzTL2ZDt2tCrD3Xe7x368HXspj/1xpDg9M1zFNvPYk2XsqXbsyO3lhZluuxIA9ipv/38YKX7x3nCq2saBzfZnZ/v/vfZY4O3tK/ovbX6v7f9Qx7y3y3Z9PFLMvX+6LGezKGm39v+5SHHrnWeq+hRtb9WteKL4v93+n48UT/9ja2yjjH2yHXtxzzsWjoA8/38eKV5/634rN8ocKL+2s7Yz/58uzw7tMUN/8v+JjnlD5Xbr+1N1OPbW7r352vTCwuyqCRMmTLQmDvvMBPRb3v+vR4q/j/yxNd4t+/8f2/zWHv//6/vt/v9L21fUp/7/kx3zXipHI7V8bL6+uFI7FdFYu/fm+fnF6Tuzd2aXRi9ffmF0bOzCWK1eje3bUz3vKnjo5Pk/GSne/dtPW3/v2jr+7379r7l9RX3K/6c65jW3jFd6rjoce3n+/yZSNP99v5XTH3X9r7red/Zzm5+tl+n2Kf9PdswbKrf76P5UHQAAAAAAAAAAAI6sWspiJFJ8/q8DqbrXbi/3/+54AU2f7v871TFv5oCeV+x5pwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALBDFlksR4r3v7yRfpDPOB1xpvMTeGj9JwAA//8acSL1")
r3 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x20004804}, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0)

14.313746577s ago: executing program 3 (id=376):
syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001173a6140f41515006ed10102030109022400013600a0000904"], 0x0)

12.996527046s ago: executing program 2 (id=378):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001740)=@newqdisc={0x2c, 0x24, 0xd0f, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0x1, 0xe}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x55}, 0xc010)
munmap(&(0x7f0000001000/0x4000)=nil, 0x4000)
r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
syz_mount_image$squashfs(&(0x7f0000000940), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[], 0x1, 0x180, &(0x7f0000000100)="$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")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x8)
r5 = fsopen(&(0x7f0000000000)='nfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='127.0.0.1:/export_path_with_very_long_name_to_increase_xdr_payload_length\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000001c0)='mountaddr\x00', &(0x7f0000000200)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000240)='mountproto\x00', &(0x7f0000000280)='udp\x00', 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$netlink(0x10, 0x3, 0x4)
r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0)
fcntl$setlease(r6, 0x400, 0x1)
open(&(0x7f0000000140)='./file1\x00', 0x20002, 0x100)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x69, 0x7, 0x7fc00002}]})
gettid()
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000000)={<r8=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000000100)={r8, 0x1, r7, 0x6, 0x80000})
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x13, r4, 0x1000)
r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r9, 0x6, 0x3, &(0x7f0000001200)=0x1a, 0x4)

12.209942732s ago: executing program 3 (id=379):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x23a001, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x4)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/1/smp_affinity\x00', 0x1, 0x0)
write$P9_RLERRORu(r3, &(0x7f0000000040)=ANY=[], 0xd)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f0000000200)={<r4=>0xffffffffffffffff, 0x0, 0x2040, &(0x7f0000000140)={@align=0x10, {0x6486, 0x7, 0x0, 0x9}}, 0x18000, &(0x7f0000000180), &(0x7f00000001c0)=0x1})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000080))
setitimer(0x2, 0x0, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000001, 0x28012, r1, 0x23719000)
select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000440))
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x78)

12.173477043s ago: executing program 2 (id=380):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x1, 0x0)
write(r0, &(0x7f00000002c0)='2', 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000240)='.\x00', 0x60000526)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
symlinkat(&(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00')
r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r4, &(0x7f00000003c0)='dummy_udc.0', 0xb)

10.095712915s ago: executing program 2 (id=382):
syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, 0x0, 0x4008894)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x20, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, 0x94)
prlimit64(0x0, 0x1, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000)
sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@deltaction={0x54, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x40, 0x1, [{0x10, 0x8d, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844)
r4 = dup2(r2, r2)
ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000240)={'\x00', 0x4040, 0xa, 0x3, 0x40000000, 0x10})

9.686455104s ago: executing program 5 (id=383):
r0 = creat(0x0, 0xc7)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8410)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_mount_image$btrfs(&(0x7f0000000140), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000240)={[{@noenospc_debug}, {@compress}, {@discard}]}, 0xfc, 0x559e, &(0x7f000000ac40)="$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")
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getpeername$unix(r3, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442a, &(0x7f0000004480)="$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")
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14b442, 0x82)
pwritev2(r5, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10)
fallocate(r6, 0x0, 0x0, 0x1000f4)

9.002345278s ago: executing program 3 (id=384):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f0000000640)={[{@max_batch_time={'max_batch_time', 0x3d, 0x8001}}, {@noblock_validity}, {@nolazytime}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@nodiscard}, {@nouid32}, {@noauto_da_alloc}]}, 0x4, 0x61f, &(0x7f0000000b00)="$eJzs3c9rXNUeAPDvncmkSZv30j4ej9fyHi/wFi1I00wtVt3Y1oVdFCzYhYiLhiapodMfNCmYWGgKLhQURNyKdOM/4F66dyeCunMtVJGKikpH7syddDKZSdIkM9Pmfj5wM/ece2fO+c6dM/fce3PmBpBbY+mfQsT+iAfnk4jRpmUjUV84lq13/6ebF9IpiWr1lR+TSLK8xvpJ9rgnSwxFxJenIv5RXF3u3MLipclKte5WxJH5y9eOzC0sHp69PHlx+uL0lfLRZ48dn3iufKy8LXHuyR5Pn3n5P++//cYzM19VDidxIs6V3pqKlji2y1iMxYMsxOb8gYg4ns60eV+eNDsghFwrZp/HUkT8K0ajWEvVjcbse32tHNBV1WJEFcipRPuHnGr0AxrH9hs7Dj7X5V5J79w7WT8AWh3/QP3cSAzVjo1230+ajowGauc29m5D+WkZf9488HE6xYrzEL8ub52BbSink6XbEfHvdvEntbrtrUWaxl9YUY8kIiYiYjCr34tbqEPSNN+N8zBr2Wz8hYg4kT2m+ac2Wf5YS7rX8QOQT3dPZjvypTT1cP+X9j0a/Z9Y1f+pXxtq3XdtRr/3f537f439/VDtHHmhpR+W9lnOtn/JUmvGd++e/rBT+c39v3RKy2/0BXvh3u2IAy3xv5MGm/V/0viTNts/XeX8iY2V8dLXP5zutKzf8VfvRBxse/zzsFeazrVenxzOlpWPlY/MzFamJ+p/25bx+Revf9qp/H7Hn27/3R3ib9r+hdbnpe/JtQ2W8dnZO5c7LRtZN/7C94NJ/XhzMMt5c3J+/no5YjA5k61Sv5BVyz+6dl0a6zReI43/0P/bt/8Vn//bK19nuPGVuQHXXr10v9OyzWz/povJD6obrEMnafxT62//Ve0/zftgOXVrzTJ+ee3GfzstWyv+4S3GBgAAAAAAAHlTqF2DTQrjy/OFwvh4fbzsP2N3oXJ1bv6pmas3rkxFHKr9P2Sp0LjSPVpPJ2m6nP0/bCN9tCX9dETsi4iPisO19PiFq5WpfgcPAAAAAAAAAAAAAAAAAAAAj4k92fj/xn2qfy7Wx/8DOdHNG8wBjzftH/Kr1v5X3eIJyAP7f8gv7R/yS/uH/NL+Ib+0f8gv7R/yS/uH/NL+AQAAAGBH2ve/u98mEbH0/HBtSg1my4wIgp2t1O8KAH1T7HcFgL5ZvvSvsw+5s6H+/+/ZjwN2vzpAHyTtMmudg+rajf9u22cCAAAAAAAAAAAAAF1wcH/78f+JscGw4xn2B/m1hfH/fjoAnnB++h/yyzE+sN4o/qFOC4z/BwAAAAAAAAAAAICeGalNSWE8Gws8EoXC+HjE3yJib5SSmdnK9ERE/D0ivimWdqXpcr8rDQAAAAAAAAAAAAAAAAAAADvM3MLipclKZfp688wfq3J29kzjLqg9KOuFeMRnRdL7t2U4IpZzShGPWufuzezKPrZbeZ2BuYXF5LdqTRKxFI9PgFuKa5tn1v3qGOzqFxMAAAAAAAAAAAAAAAAAAORQ09jj9g580uMaAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvPbz/f/dm+h0jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBk+isAAP//GjM9YA==")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x13}, @hci_ev_le_conn_complete={{}, {0x0, 0x2a, 0x3, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}}, 0x16)
setns(0xc9, 0x0)
read(0xffffffffffffffff, &(0x7f0000000140)=""/14, 0xe)
socket(0x2, 0xa, 0x9)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB], 0xf)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c094}, 0x4040080)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0)
symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, 0x0)
r3 = io_uring_setup(0xaad, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x24, 0x0, 0x0)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, 0x0)

7.762186486s ago: executing program 5 (id=385):
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc})
ioctl(0xffffffffffffffff, 0x3b8f, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r0 = socket$rxrpc(0x21, 0x2, 0x2)
r1 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x80)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000280)={r1, &(0x7f0000000180)='\x00', 0x2, &(0x7f00000001c0)={@align=0x4, {0x10, 0x9, 0x4, 0x8000000000000000}}, 0x8, &(0x7f0000000200)={@_ha_fsid}, &(0x7f0000000240)=0xcd0})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
r3 = syz_open_procfs(0x0, 0x0)
mkdirat(r3, &(0x7f0000000140)='./file0\x00', 0x8)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$UBLK_U_CMD_END_USER_RECOVERY(r1, 0xc0207511, &(0x7f0000000300)={0x0, 0xffff, 0x0, 0x0, <r4=>0x0})
prctl$PR_SCHED_CORE(0x3e, 0x4, r4, 0x2, &(0x7f00000003c0))
mlockall(0x2)
shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil)
r5 = syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x8047)
ioctl$EVIOCREVOKE(r5, 0x40044591, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)

6.238927138s ago: executing program 5 (id=386):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4020000ffffff1f71114c0000000000850000001c0000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x5, 0xff92, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26}, 0x48)

6.057993726s ago: executing program 3 (id=387):
ioctl$OCFS2_IOC_REFLINK(0xffffffffffffffff, 0x40186f04, &(0x7f0000000280)={&(0x7f0000000040)='+\xd1@\x00', &(0x7f0000000240)='overlay\x00', 0x7})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x0, @void}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0xffff, 0x181, 0x100}})
mkdir(&(0x7f0000000480)='./bus\x00', 0x58)
mkdir(&(0x7f0000000100)='./file1\x00', 0x13b)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$unix(r4, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc040}, 0x26048040)
close(r4)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x100a, 0x4})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000740)={0x14, 0x0, &(0x7f0000000300)=[@increfs_done={0x40106308, 0x2}], 0x0, 0x0, 0x0})
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
r6 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f)
write$FUSE_CREATE_OPEN(r6, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x5, 0x3, 0x5, 0x6, 0x3, 0xffffff81, {0x4, 0x9, 0x20fb, 0x1, 0xe395, 0xd615, 0x9, 0x82, 0x9, 0x6000, 0xffffffff, 0x0, 0x0, 0x8, 0x1}}, {0x0, 0x13}}}, 0xa0)
syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x0, &(0x7f0000000480), 0x1, 0x3d7, &(0x7f00000008c0)="$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")

5.662666974s ago: executing program 5 (id=388):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0)
write$P9_RREAD(r1, 0x0, 0x6bf)
mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0xc0040d07, &(0x7f0000000040)=0x121)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = getpgid(0x0)
r6 = syz_pidfd_open(r5, 0x0)
bind$can_j1939(r1, &(0x7f00000002c0)={0x1d, 0x0, 0x2, {0x0, 0xff, 0x1}, 0x1}, 0x18)
r7 = pidfd_getfd(r6, r6, 0x0)
setns(r7, 0x66020000)
umount2(&(0x7f0000000040)='.\x00', 0x2)
r8 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29"], 0x6c}}, 0x0)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x6c}}, 0x0)
syz_usb_connect$uac2(0x3, 0x136, &(0x7f0000000fc0)=ANY=[@ANYBLOB], &(0x7f0000000900)={0xa, &(0x7f00000006c0)={0xa, 0x6, 0x310, 0x6, 0x99, 0x3, 0x8, 0x2e}, 0x5, &(0x7f0000000700)={0x5, 0xf, 0x5}, 0x4, [{0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x240a}}, {0xc1, &(0x7f0000000440)=ANY=[@ANYBLOB="c103ddb43e16799aac67119b5bf3dc3732b49bdbfbfa5a04000000f1905649c9c514696539d288cff214292ceaf3261f665d305e19e675c143be635ada96627c4c40cae540a41c9fa6e0db35bbecabb43d7eeee5619cd3e33e719cb1c8ff8709fa9b5ea7b46e9b09c45500d46477f50d76bfabd38f5204bd377dea5b68790d7b78f3c9c68d492f07a0adafbd36bc3b429cc53a99724206c7a6cbfaa53d0a42d2e11e2b8a5d9cce5272b0783b24a79ee305d4596a7ae3dc26200cdf07f183564b451bf77a585bf6e73cfb21c71573f869e8a5d5b4b63eed9a5a102605102fc7c9aacf39dfc52542b335e9fe616bc7cc3b4c8a7b84a3b1b7a138827d43c1006d08eabc6365fd878448ff58b064e38b3b169b47639160bdb60b3d77057306c3d0320b3a032e80d452b5b5804516dd45dbb1572790d7d856773c8ab3e7dc1aee4ad8d7468ccb0856eaa8ca76903ef280243f5f4a679d081be4ec4962514759803365fffc3c565c00ddecb9300f2e2e6387fbd6dfc2a5aab027ef5b9653e918927a2cb7b9682edb1b800d3e20c2b113263467371d1e7e433e6aac65a4fc58d4aaa60185b987d1b522db24"]}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x41e}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x2001}}]})

4.773376353s ago: executing program 3 (id=389):
syz_mount_image$squashfs(&(0x7f0000000140), &(0x7f0000002580)='./file0\x00', 0x801, &(0x7f00000003c0)=ANY=[], 0x2, 0x182, &(0x7f00000001c0)="$eJzskruuElEUhr89M1y8EW1poDBeCmUY1FhaYu8DSGBE4qDCkCiExDHGUFgYS5/A1zDxBbQwPgA1BbE+mZN9mTkbziOc/RXz77Vmrb3mX/AynaU14GS/HvIEhU+DP0IQAC2hcztP6zejf41+1cJvU/fU5D8ZbabLVdXUtLmhE68GSRLP28B/lStTae+jx05d9W+/HsrDcyDP81zmRiDLuWrV+MDMqmkGcEmZyMsaaUQGt4HOYvq2ky5X9ybTwTgex68jv/cofBCGD6POi0kSh/oprBHGClLvArU6JfJ9Bfhs4sscoKwXn2beV+3eqt7hBxqCYzyrt1DBzwNb+vfKeMYt5Ge9ywTGLXBT3RKgLPUR+FdMT9ErqJlZdVV1f/gmGW0QiKLtBwG+CuRaqZQXRlsr6D3OuKav3HA2XNI/srU12jr6ywSZfH4x0R2/2NO8K0/vB4vFvCuKU1TmouuZvTA59btnbR/45Z3brcPhcDgcDofD4XBcNE4DAAD//0i6cAw=")

2.695523454s ago: executing program 2 (id=390):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe)
socket(0x18, 0x5, 0x1046)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
syz_open_dev$sndmidi(0x0, 0x2, 0x141101)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10)
sendmmsg$inet(r2, &(0x7f0000000980), 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x20000, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, 0x0, 0x0)
sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c)
chdir(&(0x7f0000000080)='./file0/file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0)
pipe2$9p(&(0x7f00000001c0)={<r5=>0xffffffffffffffff}, 0x4000)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004400, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [], 0x6b}})
shutdown(r0, 0x1)

2.311014431s ago: executing program 3 (id=391):
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x105042, 0x1ff)
linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0)
syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x1000000, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x2, 0x58a, &(0x7f0000000740)="$eJzs3c1rXWkZAPDnPc1NbzrtzJ22ttaOckHBMmJJ006qpjjWyQSE4oRp04UrY5N2wtwkJclIOgzahejG/8HVbBRkQN0ILnTrQnciA67ErVEGBhRHOSfnfiUZk5mbm4/m94PknnvOcz7eAwk872cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABFff/nm8JW0308BAAAA9NM3b786PCL/BwAAgCfaHe3/AAAAAAAAAHDYpcjih5Fi9dRaOll8X1e9NbfwxurU+MTWpw2l4sxjRXz+U70ycvXaC6PXv9T8/P/n77YL8crtOzfrLy3OP1yaXV6enalPLczdW5yZ3fEVej1/o+eLF1Cff/2Nmfv3l+sjl692HV6t/e34U+dqY19++eytZuzU+MTE7Y6YgcrHvvsmengAAAAcbYORxbVIcefiz9OpiMii91x4m7qDfhuKWp5/F4WYGp8oCtKYm15YyQ9ONhPhWndOPNjMkfcgF+9JLeJ0/qyDMnoAAAB2rhJZfCZSXPhgLT0dEceaefAXiokBt79AbQ8ecgsDEXEmIi7FIcjZAQAAYJ8djyxejRS/adTimTKvLvL/r0WM7ffDAQAAALtiILK4HineG1tLtaI/QEQ8PzU+Ub91t/6NhfuLHbGTqWxRP+zjA/aSvgkAAAAcANXI4lTR4r+Wnv2QmIE9fiYAAABgdw1FFv+KFJ9/8bvFvHJRzEv/zNhXTt6Y6Jxh7vw218ljL0fExR2Oya+Ucw1OpsmUsk1Xe7wrhQMAAAAK1ZTFXyPF+3+uFt8vlbl50ugPAAAAT46UxQ8ixVcn11LasC79sY71/VsO+9j//j7/UPWlxYePluYevLay5fET1ZvfWV5Zmr639eH1tQu7ukNst44hAAAA7EAlZfHPSPH7xjutvLNcA6DsAdBONN++0c5Nq2nD0aLe4Omi3qA1huCpkZHO7S1T1o8wP16tvO+x3osNAAAAR0pKWQxGis/97pPl2v8nYlMbdBn3h0hxY/G5Mi4bzOOawwRqxe/q/bnG7HAeOx4pftloxkYRe7yMPdOOvZLH/ja/7nR3bLWMPduOHcljP4gUry1tHfuJduzVPHYpUvzsJ/Vm7Ik89mQZe64de/neYmOmby8YAAAADoBKyuJXkeLH/663hvx3t/+3W9vffqvd3r9pgr4PafPvtf2/1rHvcVkPcbysrxjYpr7ilUhx4dnnmuUp6gqa3QrW1zpo11f8I1Isfas7drCMPd2OvbLjFwsAAAAHSLP//x/v/rrV5b7MgcuvW+f/n9o4P2Cf8v/ONQnzey4/evP16UZjdmk/Nyof8azvR0TXnnQQSmHjv6WD8jx7ulH+UT0+KM/T60Zv/wcBAOAoyPP/u5Fi9b13W+3dZf5fdpVv5//vf6+d/49tvFCf8v/THfvGyvkGKgMR1ZX5h5XzEdXlR29+cW5++sHsg9mFq6MvjA6Pjl6/NlIZbDbut7d6flcAAABwWOX5/3Ck+PuPftoan7+T9v8TGy/Up/z/TMe+/J7tRr98z196LT4AAAAcCXn+/4tI8aeL77Tm0evO/zvm/3+rPc7+0mfXewu0agf6lP+f7dhXK+4bMbRLZQcAAAAAAAAAAAAAAAAAAICDopKy+E+keLc6kMoJ/3c0/9/Mxgv1afz/uY59M7E36//1/FIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgkMoii7lI8enza+nFfMe3I052fgIAAACH3v8CAAD//16XHzs=")
write$binfmt_script(r0, &(0x7f00000008c0), 0xfecc)
open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x178)
open(&(0x7f00000003c0)='./file3\x00', 0x14507e, 0x148)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0)
openat$incfs(0xffffffffffffff9c, &(0x7f0000000640)='.log\x00', 0xa5d, 0x1)
syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)

1.869605665s ago: executing program 5 (id=392):
socket(0x10, 0x803, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0)
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x80580, 0x0)
r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi1\x00', 0x2, 0x0)
ioctl(r2, 0x40946400, &(0x7f0000000100)='pc212e')
r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", <r4=>0xffffffffffffffff})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", <r5=>0xffffffffffffffff})
write$cgroup_int(r3, &(0x7f0000000040)=0x5, 0x12)
ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e66ccdb9e581a38ebb0ddd5f307e56", r5, <r6=>0xffffffffffffffff})
ioctl$SYNC_IOC_FILE_INFO(r6, 0xc0383e04, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r7 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
ioctl$int_in(r7, 0x5452, &(0x7f00000001c0)=0x1)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r7, 0xc0045516, &(0x7f0000000000)=0xffb)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc1105517, &(0x7f0000000080)={{0x0, 0x0, 0xe044, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0})
chdir(&(0x7f00000001c0)='./bus\x00')

10.506732ms ago: executing program 2 (id=393):
syz_open_dev$loop(&(0x7f0000000040), 0x400000c, 0x1e1000)
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000100)=@rnullb, 0x0, &(0x7f0000002a00)='./cgroup\x00')
bpf$MAP_CREATE(0x0, &(0x7f0000003e40)=ANY=[@ANYBLOB], 0x50)
mknod$loop(0x0, 0x8, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7)
mkdir(&(0x7f0000000100)='./sys_mount\x00', 0x0)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000340)={0x0, &(0x7f0000000280)})
io_cancel(0x0, 0x0, 0x0)
r4 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x22000)
ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000040)={'\x00', 0x8, 0x4, 0x9, 0x8000, 0x9, 0xffffffffffffffff})
openat(0xffffffffffffffff, &(0x7f0000000140)='./sys_mount/block/loop0/queue/scheduler\x00', 0x2, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
r5 = semget(0x2, 0x3, 0x39c)
semop(r5, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1)
semtimedop(r5, &(0x7f0000000180)=[{0x3, 0x100}, {0x4, 0x3, 0x1800}, {0x1, 0x80, 0x1800}, {0x0, 0x8}, {0x0, 0x3, 0x1000}, {0x2, 0x4, 0x800}, {0x0, 0xff7f}], 0x7, 0x0)
setrlimit(0x40000000000008, 0x0)

0s ago: executing program 5 (id=394):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r0 = getpid()
syz_pidfd_open(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be20000d072f5b89c3043c47c896ce0bc8731fa595b6b4d45ef26dcca5582054d54d53cd2b685b431c70ea948259c4c869b4fc8db714e4b94bdae214fa68a051d4dca7d2647bec1fc89398d2b9000f224891060017c4700de60beac671e8e8f00cb03588aa6007e71f871ab5c2ff88afc6002"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc6, &(0x7f0000000500)=""/198, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48)
add_key$keyring(0x0, &(0x7f00000022c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mlockall(0x2)
r3 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil)
shmctl$SHM_LOCK(r3, 0xb)
openat$drirender128(0xffffffffffffff9c, 0x0, 0x4000, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0})
r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0xffe, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1})
ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f00000000c0)=@mmap={0x1, 0x0, 0x4, 0x0, 0xffffffff, {0x77359400}, {0x0, 0x1, 0xf1, 0x5, 0x0, 0x1, "bf231e4b"}})
ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000400)=0x1)

kernel console output (not intermixed with test programs):

159
[  154.993934][ T5943] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  154.993953][ T5943] RSP: 002b:00007f97a20c2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019
[  154.993979][ T5943] RAX: ffffffffffffffda RBX: 00007f97a1425fa0 RCX: 00007f97a119e159
[  154.993998][ T5943] RDX: 0000000000003021 RSI: 0000000000003000 RDI: 0000200000001000
[  154.994019][ T5943] RBP: 00007f97a123506b R08: 0000200000ffd000 R09: 0000000000000000
[  154.994036][ T5943] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000
[  154.994052][ T5943] R13: 00007f97a1426038 R14: 00007f97a1425fa0 R15: 00007ffe17825358
[  154.994091][ T5943]  </TASK>
[  155.140096][ T5781] hid-alps 0003:044E:120B.0001: failed read register (-71)
[  155.140195][ T5781] hid-alps 0003:044E:120B.0001: failed U1_NUM_SENS_X (-71)
[  155.390914][ T5781] hid-alps 0003:044E:120B.0001: hidraw0: USB HID v80.00 Joystick [HID 044e:120b] on usb-dummy_hcd.4-1/input0
[  155.484686][ T5781] usb 5-1: USB disconnect, device number 2
[  155.489476][ T5945] FAULT_INJECTION: forcing a failure.
[  155.489476][ T5945] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  155.489530][ T5945] CPU: 0 UID: 0 PID: 5945 Comm: syz.2.27 Not tainted syzkaller #0 PREEMPT(full) 
[  155.489557][ T5945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  155.489572][ T5945] Call Trace:
[  155.489581][ T5945]  <TASK>
[  155.489592][ T5945]  dump_stack_lvl+0xe8/0x150
[  155.489633][ T5945]  should_fail_ex+0x410/0x560
[  155.489669][ T5945]  _copy_to_user+0x31/0xb0
[  155.489705][ T5945]  bpf_verifier_vlog+0x606/0x900
[  155.489745][ T5945]  __btf_verifier_log+0xe2/0x140
[  155.489788][ T5945]  ? __pfx___btf_verifier_log+0x10/0x10
[  155.489833][ T5945]  ? btf_parse_hdr+0x1da/0x810
[  155.489871][ T5945]  btf_parse_hdr+0x3c1/0x810
[  155.489905][ T5945]  btf_new_fd+0x32f/0xbb0
[  155.489942][ T5945]  __sys_bpf+0xd2e/0xd90
[  155.489981][ T5945]  ? __pfx___sys_bpf+0x10/0x10
[  155.490014][ T5945]  ? srso_alias_return_thunk+0x5/0xfbef5
[  155.490044][ T5945]  ? do_futex+0x3e7/0x4e0
[  155.490111][ T5945]  ? rcu_is_watching+0x16/0xb0
[  155.490142][ T5945]  ? srso_alias_return_thunk+0x5/0xfbef5
[  155.490178][ T5945]  __x64_sys_bpf+0xba/0xd0
[  155.490208][ T5945]  do_syscall_64+0x166/0x520
[  155.490241][ T5945]  ? trace_irq_disable+0x3b/0x140
[  155.490267][ T5945]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  155.490300][ T5945]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  155.490327][ T5945] RIP: 0033:0x7fba2979e159
[  155.490350][ T5945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  155.490370][ T5945] RSP: 002b:00007fba2a6d2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  155.490396][ T5945] RAX: ffffffffffffffda RBX: 00007fba29a25fa0 RCX: 00007fba2979e159
[  155.490415][ T5945] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012
[  155.490432][ T5945] RBP: 00007fba2983506b R08: 0000000000000000 R09: 0000000000000000
[  155.490448][ T5945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  155.490463][ T5945] R13: 00007fba29a26038 R14: 00007fba29a25fa0 R15: 00007fff96485f98
[  155.490502][ T5945]  </TASK>
[  155.602056][ T5640] tipc: Node number set to 43690
[  155.907686][ T5947] syz.3.28 uses obsolete (PF_INET,SOCK_PACKET)
[  155.993607][ T5939] loop5: detected capacity change from 0 to 32768
[  155.995011][ T5939] =======================================================
[  155.995011][ T5939] WARNING: The mand mount option has been deprecated and
[  155.995011][ T5939]          and is ignored by this kernel. Remove the mand
[  155.995011][ T5939]          option from the mount to silence this warning.
[  155.995011][ T5939] =======================================================
[  155.999567][ T5939] BTRFS warning: v1 space cache is deprecated, falling back to no space cache
[  156.074608][ T5939] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.24 (5939)
[  156.307377][ T5939] BTRFS info (device loop5): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  156.307418][ T5939] BTRFS info (device loop5): using crc32c checksum algorithm
[  156.360460][ T5948] fido_id[5948]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  156.416878][ T5953] evm: overlay not supported
[  156.704414][ T5939] BTRFS info (device loop5): rebuilding free space tree
[  156.705761][ T5781] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[  156.708020][ T5981] FAULT_INJECTION: forcing a failure.
[  156.708020][ T5981] name failslab, interval 1, probability 0, space 0, times 0
[  156.708054][ T5981] CPU: 0 UID: 0 PID: 5981 Comm: syz.1.34 Not tainted syzkaller #0 PREEMPT(full) 
[  156.708081][ T5981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  156.708096][ T5981] Call Trace:
[  156.708106][ T5981]  <TASK>
[  156.708116][ T5981]  dump_stack_lvl+0xe8/0x150
[  156.708158][ T5981]  should_fail_ex+0x410/0x560
[  156.708194][ T5981]  should_failslab+0xa8/0x100
[  156.708226][ T5981]  ? skb_clone+0x212/0x3a0
[  156.708264][ T5981]  kmem_cache_alloc_noprof+0xa1/0x600
[  156.708303][ T5981]  ? srso_alias_return_thunk+0x5/0xfbef5
[  156.708335][ T5981]  ? skb_clone+0x212/0x3a0
[  156.708380][ T5981]  skb_clone+0x212/0x3a0
[  156.708421][ T5981]  __netlink_deliver_tap+0x413/0x860
[  156.708477][ T5981]  ? netlink_deliver_tap+0x2e/0x1b0
[  156.708519][ T5981]  netlink_deliver_tap+0x19c/0x1b0
[  156.708562][ T5981]  netlink_unicast+0x781/0x940
[  156.708613][ T5981]  netlink_sendmsg+0x813/0xb40
[  156.708650][ T5981]  ? __pfx_netlink_sendmsg+0x10/0x10
[  156.708683][ T5981]  ? srso_alias_return_thunk+0x5/0xfbef5
[  156.708712][ T5981]  ? apparmor_socket_sendmsg+0x98/0x360
[  156.708739][ T5981]  ? srso_alias_return_thunk+0x5/0xfbef5
[  156.708771][ T5981]  ? __pfx_netlink_sendmsg+0x10/0x10
[  156.708796][ T5981]  sock_sendmsg_nosec+0x13a/0x180
[  156.708827][ T5981]  ____sys_sendmsg+0x54e/0x850
[  156.708877][ T5981]  ? __pfx_____sys_sendmsg+0x10/0x10
[  156.708917][ T5981]  ? srso_alias_return_thunk+0x5/0xfbef5
[  156.708953][ T5981]  ? srso_alias_return_thunk+0x5/0xfbef5
[  156.708981][ T5981]  ? import_iovec+0x73/0xa0
[  156.709018][ T5981]  ___sys_sendmsg+0x2a5/0x360
[  156.709051][ T5981]  ? srso_alias_return_thunk+0x5/0xfbef5
[  156.709080][ T5981]  ? __lock_acquire+0x747/0x2de0
[  156.709111][ T5981]  ? __pfx____sys_sendmsg+0x10/0x10
[  156.709151][ T5981]  ? futex_wait+0x2a2/0x390
[  156.709224][ T5981]  ? __fget_files+0x2a/0x420
[  156.709257][ T5981]  ? srso_alias_return_thunk+0x5/0xfbef5
[  156.709286][ T5981]  ? __fget_files+0x3a2/0x420
[  156.709338][ T5981]  __x64_sys_sendmsg+0x1b1/0x290
[  156.709374][ T5981]  ? srso_alias_return_thunk+0x5/0xfbef5
[  156.709407][ T5981]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  156.709453][ T5981]  ? srso_alias_return_thunk+0x5/0xfbef5
[  156.709494][ T5981]  do_syscall_64+0x166/0x520
[  156.709526][ T5981]  ? trace_irq_disable+0x3b/0x140
[  156.709552][ T5981]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  156.709584][ T5981]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  156.709610][ T5981] RIP: 0033:0x7f756119e159
[  156.709633][ T5981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  156.709653][ T5981] RSP: 002b:00007f7561feb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  156.709680][ T5981] RAX: ffffffffffffffda RBX: 00007f7561425fa0 RCX: 00007f756119e159
[  156.709698][ T5981] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005
[  156.709714][ T5981] RBP: 00007f756123506b R08: 0000000000000000 R09: 0000000000000000
[  156.709729][ T5981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  156.709744][ T5981] R13: 00007f7561426038 R14: 00007f7561425fa0 R15: 00007ffcfdce3808
[  156.709783][ T5981]  </TASK>
[  156.714822][ T5981] netlink: 16 bytes leftover after parsing attributes in process `syz.1.34'.
[  157.016140][ T5781] usb 1-1: New USB device found, idVendor=2b73, idProduct=0023, bcdDevice= 0.40
[  157.025728][ T5781] usb 1-1: config 0 has no interfaces?
[  157.048234][ T5939] BTRFS info (device loop5): disabling free space tree
[  157.066361][ T5939] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  157.066390][ T5939] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  157.096678][ T5781] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  157.096707][ T5781] usb 1-1: Product: syz
[  157.096725][ T5781] usb 1-1: Manufacturer: syz
[  157.096741][ T5781] usb 1-1: SerialNumber: syz
[  157.130175][ T5939] BTRFS info (device loop5): enabling ssd optimizations
[  157.130203][ T5939] BTRFS info (device loop5): turning on async discard
[  157.130222][ T5939] BTRFS info (device loop5): force clearing of disk cache
[  157.130243][ T5939] BTRFS info (device loop5): use zstd compression, level 3
[  157.186939][ T5781] usb 1-1: config 0 descriptor??
[  157.257734][ T5987] netlink: 52 bytes leftover after parsing attributes in process `syz.3.37'.
[  157.381009][ T5989] xt_hashlimit: size too large, truncated to 1048576
[  157.449541][ T5974] Bluetooth: hci0: invalid length 0, exp 2 for type 15
[  157.486137][    T9] usb 1-1: USB disconnect, device number 2
[  157.490592][ T5983] mount: server 127.0.0.1 not responding, timed out
[  157.715758][ T5632] BTRFS info (device loop5): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  158.175298][ T6007] loop0: detected capacity change from 0 to 128
[  158.221476][ T6007] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  158.241231][ T6007] ext4 filesystem being mounted at /6/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  158.697964][ T6016] loop2: detected capacity change from 0 to 4096
[  158.699202][ T6016] EXT4-fs: Ignoring removed nobh option
[  158.701594][ T6016] EXT4-fs: Ignoring removed bh option
[  158.707833][ T6016] EXT4-fs (loop2): Test dummy encryption mode enabled
[  158.787247][ T6016] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  158.838560][ T6016] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni"
[  158.952002][ T5896] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  159.081928][ T5941] usb 2-1: new full-speed USB device number 4 using dummy_hcd
[  159.109585][ T5896] usb 4-1: Using ep0 maxpacket: 32
[  159.114208][ T5896] usb 4-1: unable to get BOS descriptor or descriptor too short
[  159.114264][ T5896] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  159.116119][ T5896] usb 4-1: config 14 has an invalid interface number: 57 but max is 1
[  159.116145][ T5896] usb 4-1: config 14 has an invalid interface number: 228 but max is 1
[  159.116168][ T5896] usb 4-1: config 14 has no interface number 0
[  159.116187][ T5896] usb 4-1: config 14 has no interface number 1
[  159.116252][ T5896] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  159.116278][ T5896] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  159.116306][ T5896] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[  159.116480][ T5896] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[  159.116512][ T5896] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10
[  159.116542][ T5896] usb 4-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  159.116575][ T5896] usb 4-1: config 14 interface 57 has no altsetting 0
[  159.116596][ T5896] usb 4-1: config 14 interface 228 has no altsetting 0
[  159.119136][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  159.119162][ T5896] usb 4-1: Product: syz
[  159.119179][ T5896] usb 4-1: Manufacturer: syz
[  159.119196][ T5896] usb 4-1: SerialNumber: syz
[  159.267435][ T6016] fscrypt: AES-256-XTS using blk-crypto-fallback
[  159.344930][   T31] audit: type=1800 audit(1790218518.826:2): pid=6016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.45" name="file1" dev="loop2" ino=19 res=0 errno=0
[  159.585817][ T5631] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  159.616102][ T5896] legousbtower 4-1:14.57: interrupt endpoints not found
[  159.703557][ T5635] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  160.014356][ T5896] legousbtower 4-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507
[  160.026632][ T5896] legousbtower 4-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0
[  160.228269][ T6031] loop0: detected capacity change from 0 to 512
[  160.244896][ T6031] ext4: Unknown parameter 'smackfsdef'
[  160.408296][ T6037] loop5: detected capacity change from 0 to 4096
[  160.624286][ T6037] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  160.667987][ T6037] ntfs3(loop5): Failed to load root (-22).
[  160.852427][    C1] usb 4-1: tower_interrupt_in_callback: usb_submit_urb failed (-1)
[  160.876680][ T5896] usb 4-1: USB disconnect, device number 2
[  161.038858][ T5896] legousbtower 4-1:14.228: LEGO USB Tower #-160 now disconnected
[  161.207336][ T6049] loop1: detected capacity change from 0 to 8192
[  161.309465][ T6049] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  161.399361][   T31] audit: type=1800 audit(1790218520.866:3): pid=6049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.54" name="file1" dev="loop1" ino=1048610 res=0 errno=0
[  161.696870][ T6049] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1044)
[  161.696903][ T6049] FAT-fs (loop1): Filesystem has been set read-only
[  161.701718][ T6049] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1044)
[  161.733825][ T6049] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1044)
[  162.387115][   T25] usb 3-1: new full-speed USB device number 3 using dummy_hcd
[  162.706300][   T25] usb 3-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00
[  162.723984][   T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  162.724022][   T25] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  162.724067][   T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  163.744531][   T25] usb 3-1: config 0 descriptor??
[  163.746516][ T6066] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  164.065173][   T25] usbhid 3-1:0.0: can't add hid device: -71
[  164.065285][   T25] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  164.128916][   T25] usb 3-1: USB disconnect, device number 3
[  165.134052][ T5768] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  166.010693][ T5768] usb 2-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice= 1.00
[  166.050586][ T5768] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  166.050643][ T5768] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  166.050668][ T5768] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  166.050711][ T5768] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  166.306316][ T6098] warning: `syz.3.67' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  166.308057][ T5768] rtsx_usb 2-1:1.0: probe with driver rtsx_usb failed with error -8
[  166.586688][ T6106] loop3: detected capacity change from 0 to 2048
[  166.658815][ T6106] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  167.254958][ T6122] loop3: detected capacity change from 0 to 512
[  167.273453][ T6122] EXT4-fs (loop3): Test dummy encryption mode enabled
[  167.298816][ T6122] EXT4-fs error (device loop3): ext4_orphan_get:1403: inode #15: comm syz.3.74: inode has both inline data and extents flags
[  167.298980][ T6122] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  167.299670][ T6122] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.74: couldn't read orphan inode 15 (err -117)
[  167.299808][ T6122] loop3: lost filesystem error report for type 5 error -117
[  167.302614][    C0] EXT4-fs (loop3): error count since last fsck: 2
[  167.302634][    C0] EXT4-fs (loop3): initial error at time 1790218526: ext4_orphan_get:1403: inode 15
[  167.302667][    C0] EXT4-fs (loop3): last error at time 1790218526: ext4_orphan_get:1408
[  167.319501][ T6122] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  167.370337][   T31] audit: type=1800 audit(1790218526.836:4): pid=6122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.74" name="file1" dev="loop3" ino=18 res=0 errno=0
[  167.538117][ T5630] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.926476][    T9] usb 2-1: USB disconnect, device number 5
[  168.761298][ T6139] ªªªªªª: renamed from vlan0 (while UP)
[  169.671940][ T5768] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  169.703832][ T6157] input: syz0 as /devices/virtual/input/input8
[  169.781670][ T6161] loop5: detected capacity change from 0 to 4096
[  169.835319][ T5768] usb 4-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac
[  169.836354][ T5768] usb 4-1: config 0 has too many interfaces: 253, using maximum allowed: 32
[  169.836382][ T5768] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 253
[  169.840125][ T5768] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  169.840155][ T5768] usb 4-1: Product: syz
[  169.840172][ T5768] usb 4-1: Manufacturer: syz
[  169.840189][ T5768] usb 4-1: SerialNumber: syz
[  169.866944][ T6162] Bluetooth: hci6: Frame reassembly failed (-90)
[  169.935991][ T5768] usb 4-1: config 0 descriptor??
[  169.949305][ T5768] gspca_main: sunplus-2.14.0 probing 055f:c630
[  170.048507][ T6167] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  170.082858][ T6161] NILFS error (device loop5): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[  170.118089][ T6161] NILFS (loop5): mounting fs with errors
[  170.137999][ T6161] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  170.138888][ T6161] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  170.139017][ T6161] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  170.139490][   T31] audit: type=1800 audit(1790218529.616:5): pid=6161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.88" name="file1" dev="loop5" ino=15 res=0 errno=0
[  170.343379][    T9] usb 2-1: new full-speed USB device number 6 using dummy_hcd
[  170.379715][ T6169] NILFS (loop5): DAT doesn't have a block to manage vblocknr = 159744
[  170.379747][ T6169] NILFS error (device loop5): nilfs_bmap_truncate: broken bmap (inode number=15)
[  170.379798][ T6169] NILFS (loop5): error -5 truncating bmap (ino=15)
[  170.409837][ T6166] syzkaller0: entered promiscuous mode
[  170.409865][ T6166] syzkaller0: entered allmulticast mode
[  170.496072][    T9] usb 2-1: New USB device found, idVendor=2b73, idProduct=0023, bcdDevice= 0.40
[  170.496831][    T9] usb 2-1: config 0 has no interfaces?
[  170.500729][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  170.500757][    T9] usb 2-1: Product: syz
[  170.500800][    T9] usb 2-1: Manufacturer: syz
[  170.500816][    T9] usb 2-1: SerialNumber: syz
[  170.545069][    T9] usb 2-1: config 0 descriptor??
[  170.784733][ T6165] Bluetooth: hci0: invalid length 0, exp 2 for type 15
[  171.044551][ T6175] binder: 6174:6175 ioctl c0306201 200000000080 returned -14
[  171.165062][ T5896] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  171.167304][ T6177] capability: warning: `syz.0.94' uses deprecated v2 capabilities in a way that may be insecure
[  171.368737][ T5896] usb 6-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice= 0.40
[  171.382454][ T5896] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  171.382482][ T5896] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  171.402405][ T5896] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  171.402437][ T5896] usb 6-1: Product: syz
[  171.402454][ T5896] usb 6-1: Manufacturer: syz
[  171.402498][ T5896] usb 6-1: SerialNumber: syz
[  171.647372][ T5768] gspca_sunplus: reg_r err -71
[  171.647459][ T5768] sunplus 4-1:0.0: probe with driver sunplus failed with error -71
[  171.663230][ T5768] usb 4-1: USB disconnect, device number 3
[  171.689560][ T6173] netlink: 32 bytes leftover after parsing attributes in process `syz.5.91'.
[  171.741254][ T5896] usb 6-1: 0:1 : does not exist
[  172.026027][ T4925] Bluetooth: hci6: command 0x1003 tx timeout
[  172.026579][ T5636] Bluetooth: hci6: Opcode 0x1003 failed: -110
[  172.125158][ T5896] usb 6-1: USB disconnect, device number 2
[  172.446390][ T5921] udevd[5921]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  173.021070][ T5767] usb 2-1: USB disconnect, device number 6
[  173.039499][ T6181] sch_tbf: burst 1520 is lower than device lo mtu (65550) !
[  173.317600][ T6197] loop1: detected capacity change from 0 to 256
[  173.353317][ T6197] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  173.353336][ T6197] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[  173.383422][ T6197] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  173.406166][ T6197] exFAT-fs (loop1): failed to load alloc-bitmap
[  173.406182][ T6197] exFAT-fs (loop1): failed to recognize exfat type
[  173.645298][ T6205] loop5: detected capacity change from 0 to 512
[  173.683320][ T6205] EXT4-fs error (device loop5): ext4_orphan_get:1403: inode #15: comm syz.5.103: iget: bad i_size value: 38620345925642
[  173.683384][ T6205] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  173.683869][ T6205] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.103: couldn't read orphan inode 15 (err -117)
[  173.683922][ T6205] loop5: lost filesystem error report for type 5 error -117
[  173.749828][ T6205] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  173.889843][ T6211] EXT4-fs error (device loop5): ext4_validate_block_bitmap:436: comm syz.5.103: bg 0: block 5: invalid block bitmap
[  173.908591][ T6211] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 140 with error 28
[  173.908627][ T6211] EXT4-fs (loop5): This should not happen!! Data will be lost
[  173.908627][ T6211] 
[  173.908644][ T6211] EXT4-fs (loop5): Total free blocks count 0
[  173.908660][ T6211] EXT4-fs (loop5): Free/Dirty block details
[  173.908675][ T6211] EXT4-fs (loop5): free_blocks=0
[  173.908691][ T6211] EXT4-fs (loop5): dirty_blocks=144
[  173.908706][ T6211] EXT4-fs (loop5): Block reservation details
[  173.908720][ T6211] EXT4-fs (loop5): i_reserved_data_blocks=144
[  173.998622][ T6213] loop2: detected capacity change from 0 to 164
[  174.043751][ T6205] EXT4-fs (loop5): shut down requested (0)
[  174.518350][ T6222] FAULT_INJECTION: forcing a failure.
[  174.518350][ T6222] name failslab, interval 1, probability 0, space 0, times 0
[  174.518390][ T6222] CPU: 0 UID: 0 PID: 6222 Comm: syz.2.109 Not tainted syzkaller #0 PREEMPT(full) 
[  174.518418][ T6222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  174.518434][ T6222] Call Trace:
[  174.518443][ T6222]  <TASK>
[  174.518454][ T6222]  dump_stack_lvl+0xe8/0x150
[  174.518497][ T6222]  should_fail_ex+0x410/0x560
[  174.518533][ T6222]  should_failslab+0xa8/0x100
[  174.518569][ T6222]  __kmalloc_cache_noprof+0xa3/0x600
[  174.518595][ T6222]  ? sget_fc+0x1944/0x1a40
[  174.518630][ T6222]  ? shmem_fill_super+0xc5/0x1090
[  174.518666][ T6222]  ? shmem_fill_super+0xc5/0x1090
[  174.518712][ T6222]  shmem_fill_super+0xc5/0x1090
[  174.518755][ T6222]  ? __pfx_sget_fc+0x10/0x10
[  174.518788][ T6222]  ? __kmalloc_cache_noprof+0x321/0x600
[  174.518815][ T6222]  ? srso_alias_return_thunk+0x5/0xfbef5
[  174.518845][ T6222]  ? vfs_parse_monolithic_sep+0xd0/0x360
[  174.518881][ T6222]  ? __pfx_shmem_fill_super+0x10/0x10
[  174.518927][ T6222]  ? srso_alias_return_thunk+0x5/0xfbef5
[  174.518958][ T6222]  ? __pfx_shmem_fill_super+0x10/0x10
[  174.518998][ T6222]  get_tree_nodev+0xbb/0x150
[  174.519041][ T6222]  vfs_get_tree+0x92/0x2a0
[  174.519069][ T6222]  do_new_mount+0x319/0xdc0
[  174.519103][ T6222]  ? srso_alias_return_thunk+0x5/0xfbef5
[  174.519138][ T6222]  ? __pfx_do_new_mount+0x10/0x10
[  174.519175][ T6222]  ? srso_alias_return_thunk+0x5/0xfbef5
[  174.519203][ T6222]  ? ns_capable+0x89/0xe0
[  174.519239][ T6222]  ? srso_alias_return_thunk+0x5/0xfbef5
[  174.519272][ T6222]  ? path_mount+0x647/0x1050
[  174.519310][ T6222]  ? srso_alias_return_thunk+0x5/0xfbef5
[  174.519339][ T6222]  ? user_path_at+0xd4/0x160
[  174.519381][ T6222]  __se_sys_mount+0x31d/0x420
[  174.519424][ T6222]  ? __pfx___se_sys_mount+0x10/0x10
[  174.519464][ T6222]  ? srso_alias_return_thunk+0x5/0xfbef5
[  174.519493][ T6222]  ? __x64_sys_mount+0x20/0xc0
[  174.519532][ T6222]  do_syscall_64+0x166/0x520
[  174.519564][ T6222]  ? trace_irq_disable+0x3b/0x140
[  174.519590][ T6222]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  174.519623][ T6222]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  174.519648][ T6222] RIP: 0033:0x7fba2979e159
[  174.519671][ T6222] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  174.519692][ T6222] RSP: 002b:00007fba2a6d2028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  174.519718][ T6222] RAX: ffffffffffffffda RBX: 00007fba29a25fa0 RCX: 00007fba2979e159
[  174.519737][ T6222] RDX: 00002000000001c0 RSI: 0000200000000040 RDI: 0000000000000000
[  174.519754][ T6222] RBP: 00007fba2983506b R08: 0000000000000000 R09: 0000000000000000
[  174.519770][ T6222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  174.519785][ T6222] R13: 00007fba29a26038 R14: 00007fba29a25fa0 R15: 00007fff96485f98
[  174.519825][ T6222]  </TASK>
[  174.698787][ T6221] syzkaller0: entered promiscuous mode
[  174.698811][ T6221] syzkaller0: entered allmulticast mode
[  174.740409][ T6223] loop4: detected capacity change from 0 to 4096
[  175.021764][ T6223] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  175.113989][ T6223] FAULT_INJECTION: forcing a failure.
[  175.113989][ T6223] name failslab, interval 1, probability 0, space 0, times 0
[  175.114027][ T6223] CPU: 1 UID: 0 PID: 6223 Comm: syz.4.110 Not tainted syzkaller #0 PREEMPT(full) 
[  175.114055][ T6223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  175.114069][ T6223] Call Trace:
[  175.114079][ T6223]  <TASK>
[  175.114090][ T6223]  dump_stack_lvl+0xe8/0x150
[  175.114132][ T6223]  should_fail_ex+0x410/0x560
[  175.114168][ T6223]  should_failslab+0xa8/0x100
[  175.114203][ T6223]  __kmalloc_noprof+0xfe/0x720
[  175.114228][ T6223]  ? srso_alias_return_thunk+0x5/0xfbef5
[  175.114259][ T6223]  ? ext4_htree_store_dirent+0x86/0x670
[  175.114295][ T6223]  ? ext4_htree_store_dirent+0x86/0x670
[  175.114339][ T6223]  ext4_htree_store_dirent+0x86/0x670
[  175.114399][ T6223]  ext4_inlinedir_to_tree+0x9dd/0xe10
[  175.114437][ T6223]  ? srso_alias_return_thunk+0x5/0xfbef5
[  175.114474][ T6223]  ? __pfx_ext4_inlinedir_to_tree+0x10/0x10
[  175.114506][ T6223]  ? srso_alias_return_thunk+0x5/0xfbef5
[  175.114566][ T6223]  ? srso_alias_return_thunk+0x5/0xfbef5
[  175.114595][ T6223]  ? trace_sched_exit_tp+0x3a/0x130
[  175.114648][ T6223]  ext4_htree_fill_tree+0x528/0x1180
[  175.114697][ T6223]  ? __pfx_ext4_htree_fill_tree+0x10/0x10
[  175.114741][ T6223]  ? srso_alias_return_thunk+0x5/0xfbef5
[  175.114770][ T6223]  ? inode_query_iversion+0x120/0x180
[  175.114826][ T6223]  ext4_readdir+0x34d7/0x4250
[  175.114893][ T6223]  ? srso_alias_return_thunk+0x5/0xfbef5
[  175.114922][ T6223]  ? trace_contention_end+0x3d/0x140
[  175.114958][ T6223]  ? srso_alias_return_thunk+0x5/0xfbef5
[  175.114987][ T6223]  ? __mutex_lock+0x30b/0x1550
[  175.115022][ T6223]  ? __pfx_ext4_readdir+0x10/0x10
[  175.115063][ T6223]  ? srso_alias_return_thunk+0x5/0xfbef5
[  175.115092][ T6223]  ? lock_acquire+0x115/0x350
[  175.115128][ T6223]  ? srso_alias_return_thunk+0x5/0xfbef5
[  175.115166][ T6223]  ? iterate_dir+0x209/0x4d0
[  175.115198][ T6223]  ? down_read_killable+0x1bb/0x3b0
[  175.115237][ T6223]  ? srso_alias_return_thunk+0x5/0xfbef5
[  175.115271][ T6223]  iterate_dir+0x2e2/0x4d0
[  175.115305][ T6223]  __se_sys_getdents+0xf1/0x270
[  175.115337][ T6223]  ? __pfx___se_sys_getdents+0x10/0x10
[  175.115371][ T6223]  ? __pfx_filldir+0x10/0x10
[  175.115400][ T6223]  ? rcu_is_watching+0x16/0xb0
[  175.115431][ T6223]  ? srso_alias_return_thunk+0x5/0xfbef5
[  175.115475][ T6223]  do_syscall_64+0x166/0x520
[  175.115507][ T6223]  ? trace_irq_disable+0x3b/0x140
[  175.115533][ T6223]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  175.115565][ T6223]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  175.115591][ T6223] RIP: 0033:0x7f6cfcf9e159
[  175.115613][ T6223] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  175.115633][ T6223] RSP: 002b:00007f6cfdf53028 EFLAGS: 00000246 ORIG_RAX: 000000000000004e
[  175.115659][ T6223] RAX: ffffffffffffffda RBX: 00007f6cfd225fa0 RCX: 00007f6cfcf9e159
[  175.115678][ T6223] RDX: 000000000001517f RSI: 0000000000000000 RDI: 0000000000000004
[  175.115694][ T6223] RBP: 00007f6cfd03506b R08: 0000000000000000 R09: 0000000000000000
[  175.115709][ T6223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  175.115724][ T6223] R13: 00007f6cfd226038 R14: 00007f6cfd225fa0 R15: 00007ffcfcdbd3e8
[  175.115764][ T6223]  </TASK>
[  175.155614][ T5791] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  175.272746][ T5767] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[  175.442000][ T5767] usb 3-1: New USB device found, idVendor=2b73, idProduct=0023, bcdDevice= 0.40
[  175.445831][ T5767] usb 3-1: config 0 has no interfaces?
[  175.454628][ T5767] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  175.454658][ T5767] usb 3-1: Product: syz
[  175.454674][ T5767] usb 3-1: Manufacturer: syz
[  175.454691][ T5767] usb 3-1: SerialNumber: syz
[  175.477500][ T5767] usb 3-1: config 0 descriptor??
[  175.542609][ T5791] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00
[  175.543924][ T5791] usb 6-1: config 1 interface 1 altsetting 0 has an endpoint descriptor with address 0x25, changing to 0x5
[  175.543956][ T5791] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x5 has an invalid bInterval 153, changing to 7
[  175.543986][ T5791] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x5 has invalid maxpacket 42383, setting to 1024
[  175.544030][ T5791] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  175.671277][ T5633] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  175.812791][ T5791] cdc_acm 6-1:1.0: ttyACM0: USB ACM device
[  175.818407][ T6232] Bluetooth: hci0: invalid length 0, exp 2 for type 15
[  175.849185][ T5896] usb 3-1: USB disconnect, device number 4
[  175.997568][ T6241] syzkaller0: entered promiscuous mode
[  175.997593][ T6241] syzkaller0: entered allmulticast mode
[  176.128989][ T6248] syz_tun: entered allmulticast mode
[  176.293449][ T6228] cdc_acm 6-1:1.1: acm_start_wb - usb_submit_urb(write bulk) failed: -22
[  176.385518][ T6255] loop4: detected capacity change from 0 to 512
[  176.396035][ T6255] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  176.396057][ T6255] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  176.421392][ T6255] EXT4-fs (loop4): 1 truncate cleaned up
[  176.428022][ T6255] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  176.452431][   T31] audit: type=1800 audit(1790218535.936:6): pid=6253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.119" name="file0" dev="fuse" ino=0 res=0 errno=0
[  176.921347][ T6272] loop1: detected capacity change from 0 to 256
[  176.951352][   T37] IPVS: starting estimator thread 0...
[  177.003135][ T6272] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  177.042477][ T6273] IPVS: using max 24 ests per chain, 57600 per kthread
[  177.060851][ T6272] exFAT-fs (loop1): valid_size(150994954) is greater than size(10)
[  177.408658][ T6282] FAULT_INJECTION: forcing a failure.
[  177.408658][ T6282] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  177.408698][ T6282] CPU: 1 UID: 0 PID: 6282 Comm: syz.0.128 Not tainted syzkaller #0 PREEMPT(full) 
[  177.408726][ T6282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  177.408740][ T6282] Call Trace:
[  177.408750][ T6282]  <TASK>
[  177.408761][ T6282]  dump_stack_lvl+0xe8/0x150
[  177.408803][ T6282]  should_fail_ex+0x410/0x560
[  177.408840][ T6282]  _copy_from_user+0x2d/0xb0
[  177.408875][ T6282]  csum_and_copy_from_iter_full+0x210/0x1fb0
[  177.408936][ T6282]  ? __pfx_csum_and_copy_from_iter_full+0x10/0x10
[  177.408980][ T6282]  ? srso_alias_return_thunk+0x5/0xfbef5
[  177.409010][ T6282]  ? rcu_is_watching+0x16/0xb0
[  177.409041][ T6282]  ? trace_kmalloc+0x2a/0xf0
[  177.409070][ T6282]  ip_generic_getfrag+0x149/0x2d0
[  177.409098][ T6282]  ? __kmalloc_node_track_caller_noprof+0x2eb/0x720
[  177.409130][ T6282]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  177.409161][ T6282]  ? srso_alias_return_thunk+0x5/0xfbef5
[  177.409191][ T6282]  ? srso_alias_return_thunk+0x5/0xfbef5
[  177.409220][ T6282]  ? skb_put+0x112/0x210
[  177.409257][ T6282]  __ip_append_data+0x2f45/0x3cf0
[  177.409307][ T6282]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  177.409364][ T6282]  ? __pfx___ip_append_data+0x10/0x10
[  177.409397][ T6282]  ? ipv4_mtu+0x561/0x670
[  177.409439][ T6282]  ? srso_alias_return_thunk+0x5/0xfbef5
[  177.409469][ T6282]  ? ip_setup_cork+0x512/0x920
[  177.409499][ T6282]  ip_make_skb+0x22e/0x440
[  177.409529][ T6282]  ? srso_alias_return_thunk+0x5/0xfbef5
[  177.409560][ T6282]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  177.409589][ T6282]  ? __pfx_ip_make_skb+0x10/0x10
[  177.409628][ T6282]  ? srso_alias_return_thunk+0x5/0xfbef5
[  177.409666][ T6282]  udp_sendmsg+0x1937/0x2140
[  177.409697][ T6282]  ? update_se+0x90/0xff0
[  177.409754][ T6282]  ? __pfx_udp_sendmsg+0x10/0x10
[  177.409790][ T6282]  ? srso_alias_return_thunk+0x5/0xfbef5
[  177.409819][ T6282]  ? __lock_acquire+0x747/0x2de0
[  177.409858][ T6282]  ? srso_alias_return_thunk+0x5/0xfbef5
[  177.409887][ T6282]  ? update_cfs_rq_load_avg+0x426/0x4e0
[  177.409929][ T6282]  ? srso_alias_return_thunk+0x5/0xfbef5
[  177.409969][ T6282]  ? srso_alias_return_thunk+0x5/0xfbef5
[  177.409998][ T6282]  ? begin_current_label_crit_section+0x2a3/0x830
[  177.410036][ T6282]  ? srso_alias_return_thunk+0x5/0xfbef5
[  177.410075][ T6282]  udpv6_sendmsg+0x915/0x2610
[  177.410124][ T6282]  ? __pfx_udpv6_sendmsg+0x10/0x10
[  177.410190][ T6282]  ? srso_alias_return_thunk+0x5/0xfbef5
[  177.410219][ T6282]  ? __asan_memset+0x22/0x50
[  177.410270][ T6282]  ? inet_send_prepare+0x5b/0x260
[  177.410333][ T6282]  ? srso_alias_return_thunk+0x5/0xfbef5
[  177.410364][ T6282]  ? inet6_sendmsg+0xe4/0x120
[  177.410397][ T6282]  ? __pfx_inet6_sendmsg+0x10/0x10
[  177.410420][ T6282]  sock_sendmsg_nosec+0x90/0x180
[  177.410451][ T6282]  sock_write_iter+0x2de/0x3e0
[  177.410479][ T6282]  ? __pfx_sock_write_iter+0x10/0x10
[  177.410513][ T6282]  ? srso_alias_return_thunk+0x5/0xfbef5
[  177.410542][ T6282]  ? security_file_permission+0x75/0x260
[  177.410579][ T6282]  vfs_write+0x612/0xba0
[  177.410630][ T6282]  ? __pfx_vfs_write+0x10/0x10
[  177.410680][ T6282]  ? __fget_files+0x2a/0x420
[  177.410720][ T6282]  ? srso_alias_return_thunk+0x5/0xfbef5
[  177.410755][ T6282]  ksys_write+0x150/0x270
[  177.410797][ T6282]  ? __pfx_ksys_write+0x10/0x10
[  177.410849][ T6282]  do_syscall_64+0x166/0x520
[  177.410881][ T6282]  ? trace_irq_disable+0x3b/0x140
[  177.410907][ T6282]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  177.410939][ T6282]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  177.410965][ T6282] RIP: 0033:0x7ff607f9e159
[  177.410988][ T6282] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  177.411008][ T6282] RSP: 002b:00007ff608e2a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  177.411035][ T6282] RAX: ffffffffffffffda RBX: 00007ff608226090 RCX: 00007ff607f9e159
[  177.411054][ T6282] RDX: 0000000000003f80 RSI: 0000200000000300 RDI: 0000000000000003
[  177.411070][ T6282] RBP: 00007ff60803506b R08: 0000000000000000 R09: 0000000000000000
[  177.411086][ T6282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  177.411101][ T6282] R13: 00007ff608226128 R14: 00007ff608226090 R15: 00007ffce10fab38
[  177.411140][ T6282]  </TASK>
[  177.708514][ T5633] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  178.102227][   T31] audit: type=1326 audit(1790218537.576:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6291 comm="syz.1.131" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f756119e159 code=0x0
[  178.136301][ T6293] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x7
[  178.500625][ T6289] loop4: detected capacity change from 0 to 32768
[  178.730045][ T6289] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  178.880435][ T6289] XFS (loop4): Ending clean mount
[  181.441816][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[  182.192138][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  182.501860][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[  184.752169][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  185.571839][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[  186.500195][ T5791] usb 6-1: USB disconnect, device number 3
[  186.984318][ T5633] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  187.707038][ T6341] netlink: 8 bytes leftover after parsing attributes in process `syz.4.143'.
[  188.004348][ T6351] veth1_macvtap: left promiscuous mode
[  188.099692][ T6356] loop2: detected capacity change from 0 to 1024
[  188.100722][ T6356] EXT4-fs: Ignoring removed nobh option
[  188.100771][ T6356] EXT4-fs: Ignoring removed orlov option
[  188.124030][ T6356] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  188.226379][ T6356] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  188.249996][ T6361] netlink: 8 bytes leftover after parsing attributes in process `syz.0.148'.
[  188.267838][ T6361] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  188.403328][ T6356] overlayfs: failed to set xattr on upper
[  188.403345][ T6356] overlayfs: ...falling back to redirect_dir=nofollow.
[  188.403355][ T6356] overlayfs: ...falling back to index=off.
[  188.403364][ T6356] overlayfs: ...falling back to uuid=null.
[  188.981480][ T6385] futex_wake_op: syz.3.152 tries to shift op by 144; fix this program
[  189.869245][ T5631] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  189.971268][ T6394] fuse: Bad value for 'fd'
[  190.078335][ T6395] FAULT_INJECTION: forcing a failure.
[  190.078335][ T6395] name failslab, interval 1, probability 0, space 0, times 0
[  190.078376][ T6395] CPU: 0 UID: 0 PID: 6395 Comm: syz.3.154 Not tainted syzkaller #0 PREEMPT(full) 
[  190.078403][ T6395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  190.078418][ T6395] Call Trace:
[  190.078427][ T6395]  <TASK>
[  190.078437][ T6395]  dump_stack_lvl+0xe8/0x150
[  190.078480][ T6395]  should_fail_ex+0x410/0x560
[  190.078516][ T6395]  should_failslab+0xa8/0x100
[  190.078551][ T6395]  __kmalloc_cache_noprof+0xa3/0x600
[  190.078579][ T6395]  ? bdi_split_work_to_wbs+0x537/0x940
[  190.078608][ T6395]  ? bdi_split_work_to_wbs+0x537/0x940
[  190.078647][ T6395]  bdi_split_work_to_wbs+0x537/0x940
[  190.078676][ T6395]  ? bdi_split_work_to_wbs+0x104/0x940
[  190.078715][ T6395]  ? __pfx_bdi_split_work_to_wbs+0x10/0x10
[  190.078744][ T6395]  ? srso_alias_return_thunk+0x5/0xfbef5
[  190.078803][ T6395]  sync_inodes_sb+0x21a/0xbf0
[  190.078831][ T6395]  ? srso_alias_return_thunk+0x5/0xfbef5
[  190.078861][ T6395]  ? srso_alias_return_thunk+0x5/0xfbef5
[  190.078901][ T6395]  ? super_lock+0xe0/0x3d0
[  190.078946][ T6395]  ? __pfx_sync_inodes_sb+0x10/0x10
[  190.078972][ T6395]  ? do_raw_spin_lock+0x12b/0x2f0
[  190.079009][ T6395]  ? srso_alias_return_thunk+0x5/0xfbef5
[  190.079047][ T6395]  ? srso_alias_return_thunk+0x5/0xfbef5
[  190.079076][ T6395]  ? do_raw_spin_unlock+0xf5/0x200
[  190.079116][ T6395]  __iterate_supers+0x282/0x420
[  190.079161][ T6395]  ? __pfx_sync_inodes_one_sb+0x10/0x10
[  190.079189][ T6395]  ? __pfx___iterate_supers+0x10/0x10
[  190.079231][ T6395]  ? srso_alias_return_thunk+0x5/0xfbef5
[  190.079266][ T6395]  __ia32_sys_sync+0xa0/0x120
[  190.079293][ T6395]  ? __pfx___ia32_sys_sync+0x10/0x10
[  190.079323][ T6395]  ? do_syscall_64+0xc8/0x520
[  190.079360][ T6395]  do_syscall_64+0x166/0x520
[  190.079392][ T6395]  ? trace_irq_disable+0x3b/0x140
[  190.079417][ T6395]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  190.079449][ T6395]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  190.079473][ T6395] RIP: 0033:0x7f97a119e159
[  190.079496][ T6395] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  190.079516][ T6395] RSP: 002b:00007f97a20c2028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2
[  190.079542][ T6395] RAX: ffffffffffffffda RBX: 00007f97a1425fa0 RCX: 00007f97a119e159
[  190.079561][ T6395] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  190.079575][ T6395] RBP: 00007f97a1425fa0 R08: 0000000000000000 R09: 0000000000000000
[  190.079591][ T6395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  190.079606][ T6395] R13: 00007f97a1426038 R14: 00007f97a1425fa0 R15: 00007ffe17825358
[  190.079646][ T6395]  </TASK>
[  190.140275][ T6401] loop4: detected capacity change from 0 to 512
[  190.160582][ T6401] EXT4-fs (loop4): Test dummy encryption mode enabled
[  190.214911][ T6401] EXT4-fs error (device loop4): ext4_orphan_get:1403: inode #11: comm syz.4.157: casefold flag without casefold feature
[  190.214946][ T6401] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  190.225253][ T6401] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.157: couldn't read orphan inode 11 (err -117)
[  190.225289][ T6401] loop4: lost filesystem error report for type 5 error -117
[  190.264459][ T6401] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  190.270246][ T6402] loop3: detected capacity change from 0 to 512
[  190.309363][ T6402] EXT4-fs (loop3): Test dummy encryption mode enabled
[  190.309388][ T6402] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  190.350641][ T6402] EXT4-fs (loop3): 1 truncate cleaned up
[  190.374409][ T6402] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  190.489901][ T6399] bridge0: port 3(macvlan2) entered blocking state
[  190.490123][ T6399] bridge0: port 3(macvlan2) entered disabled state
[  190.490272][ T6399] macvlan2: entered allmulticast mode
[  190.490290][ T6399] ip6gretap0: entered allmulticast mode
[  190.539272][ T6408] loop2: detected capacity change from 0 to 2048
[  190.563842][ T6399] macvlan2: entered promiscuous mode
[  190.599536][ T6399] bridge0: port 3(macvlan2) entered blocking state
[  190.599697][ T6399] bridge0: port 3(macvlan2) entered forwarding state
[  190.614782][ T6408] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  190.634402][ T5633] EXT4-fs error (device loop4): ext4_readdir:280: inode #2: block 13: comm syz-executor: path /19/file0: bad entry in directory: directory entry overrun - offset=92, inode=16, rec_len=196732, size=1024 fake=0
[  190.649204][ T5633] EXT4-fs error (device loop4): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 11
[  190.656388][ T5633] EXT4-fs error (device loop4): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 11
[  191.071130][ T6424] netlink: 4 bytes leftover after parsing attributes in process `syz.5.161'.
[  191.085090][ T5781] usb 3-1: new full-speed USB device number 5 using dummy_hcd
[  191.088118][ T6424] netlink: 4 bytes leftover after parsing attributes in process `syz.5.161'.
[  191.090607][ T6424] netlink: 4 bytes leftover after parsing attributes in process `syz.5.161'.
[  191.154987][ T5630] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  191.186664][ T6427] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  191.232586][ T5781] usb 3-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.00
[  191.233769][ T5781] usb 3-1: config 0 interface 0 has no altsetting 0
[  191.233807][ T5781] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  191.241309][ T5781] usb 3-1: config 0 descriptor??
[  191.374175][ T6431] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  191.483578][ T6422] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  191.484495][ T5781] usbhid 3-1:0.0: can't add hid device: -71
[  191.484605][ T5781] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  191.528812][ T5781] usb 3-1: USB disconnect, device number 5
[  191.556330][ T5271] veth1_macvtap: entered promiscuous mode
[  191.641254][ T5633] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  192.222181][ T5631] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  192.251506][ T6390] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  192.455501][ T6390] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  192.688296][ T6390] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  192.828013][ T6390] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  192.940343][ T6457] netlink: 'syz.0.167': attribute type 1 has an invalid length.
[  193.153696][ T6467] overlayfs: failed to clone upperpath
[  193.180523][ T6468] netlink: 28 bytes leftover after parsing attributes in process `syz.0.167'.
[  193.183369][ T6469] overlayfs: failed to clone upperpath
[  193.460745][ T4925] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  193.474025][ T4925] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  193.476202][ T4925] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  193.478858][ T4925] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  193.498095][ T4925] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  193.552513][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  193.552594][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  193.723072][ T6466] bond1: (slave gretap1): making interface the new active one
[  193.723902][ T6466] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  193.776092][ T6468] 8021q: adding VLAN 0 to HW filter on device bond1
[  195.096910][ T6390] bridge_slave_1: left allmulticast mode
[  195.096952][ T6390] bridge_slave_1: left promiscuous mode
[  195.098618][ T6390] bridge0: port 2(bridge_slave_1) entered disabled state
[  195.205450][ T6390] bridge_slave_0: left allmulticast mode
[  195.205479][ T6390] bridge_slave_0: left promiscuous mode
[  195.205652][ T6462] loop3: detected capacity change from 0 to 32768
[  195.206210][ T6390] bridge0: port 1(bridge_slave_0) entered disabled state
[  195.428181][ T6461] loop2: detected capacity change from 0 to 32768
[  195.491407][ T6461] 
[  195.491407][ T6461]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  195.491407][ T6461] 
[  195.632335][ T5636] Bluetooth: hci3: command tx timeout
[  195.862186][ T5896] usb 2-1: new full-speed USB device number 7 using dummy_hcd
[  195.990401][ T6461] 
[  195.990401][ T6461]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  195.990401][ T6461] 
[  195.990464][ T6461] 
[  195.990464][ T6461]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  195.990464][ T6461] 
[  195.990509][ T6461] 
[  195.990509][ T6461]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  195.990509][ T6461] 
[  195.990553][ T6461] 
[  195.990553][ T6461]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  195.990553][ T6461] 
[  195.990690][ T6461] 
[  195.990690][ T6461]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  195.990690][ T6461] 
[  195.993053][  T118] 
[  195.993053][  T118]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  195.993053][  T118] 
[  196.017706][ T5896] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  196.045086][ T6390] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  196.083506][ T5896] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  196.083538][ T5896] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  196.083585][ T5896] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  196.123308][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  196.123340][ T5896] usb 2-1: Product: syz
[  196.123357][ T5896] usb 2-1: Manufacturer: syz
[  196.123373][ T5896] usb 2-1: SerialNumber: syz
[  196.139466][   T31] audit: type=1800 audit(1790218555.616:8): pid=6461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.169" name="file1" dev="loop2" ino=4 res=0 errno=0
[  196.180426][ T6390] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  196.191514][ T5896] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found
[  196.191564][ T5896] cdc_ncm 2-1:1.0: bind() failure
[  196.211953][ T6390] bond0 (unregistering): Released all slaves
[  196.402152][ T6516] 
[  196.402152][ T6516]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  196.402152][ T6516] 
[  196.402289][ T6516] 
[  196.402289][ T6516]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  196.402289][ T6516] 
[  196.402305][ T6516] 
[  196.402305][ T6516]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  196.402305][ T6516] 
[  196.402321][ T6516] 
[  196.402321][ T6516]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  196.402321][ T6516] 
[  196.402335][ T6516] 
[  196.402335][ T6516]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  196.402335][ T6516] 
[  196.479570][ T6514] 
[  196.479570][ T6514]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  196.479570][ T6514] 
[  196.480078][ T6514] 
[  196.480078][ T6514]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  196.480078][ T6514] 
[  196.480095][ T6514] 
[  196.480095][ T6514]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  196.480095][ T6514] 
[  196.480111][ T6514] 
[  196.480111][ T6514]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  196.480111][ T6514] 
[  196.480131][ T6514] 
[  196.480131][ T6514]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  196.480131][ T6514] 
[  196.585129][  T118] 
[  196.585129][  T118]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  196.585129][  T118] 
[  196.598359][ T6517] 
[  196.598359][ T6517]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  196.598359][ T6517] 
[  196.598381][ T6517] 
[  196.598381][ T6517]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  196.598381][ T6517] 
[  196.598396][ T6517] 
[  196.598396][ T6517]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  196.598396][ T6517] 
[  196.598411][ T6517] 
[  196.598411][ T6517]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  196.598411][ T6517] 
[  196.598425][ T6517] 
[  196.598425][ T6517]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  196.598425][ T6517] 
[  196.599531][  T117] 
[  196.599531][  T117]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  196.599531][  T117] 
[  196.603287][ T6520] FAULT_INJECTION: forcing a failure.
[  196.603287][ T6520] name failslab, interval 1, probability 0, space 0, times 0
[  196.603319][ T6520] CPU: 1 UID: 0 PID: 6520 Comm: syz.1.177 Not tainted syzkaller #0 PREEMPT(full) 
[  196.603345][ T6520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  196.603359][ T6520] Call Trace:
[  196.603369][ T6520]  <TASK>
[  196.603379][ T6520]  dump_stack_lvl+0xe8/0x150
[  196.603421][ T6520]  should_fail_ex+0x410/0x560
[  196.603456][ T6520]  should_failslab+0xa8/0x100
[  196.603490][ T6520]  __kmalloc_cache_noprof+0xa3/0x600
[  196.603517][ T6520]  ? mutex_init_lockdep+0xdf/0x110
[  196.603547][ T6520]  ? do_inotify_init+0xa7/0x460
[  196.603580][ T6520]  ? do_inotify_init+0xa7/0x460
[  196.603614][ T6520]  ? srso_alias_return_thunk+0x5/0xfbef5
[  196.603650][ T6520]  do_inotify_init+0xa7/0x460
[  196.603682][ T6520]  ? __ia32_sys_inotify_init+0x9/0x20
[  196.603719][ T6520]  __ia32_sys_inotify_init+0x10/0x20
[  196.603751][ T6520]  do_syscall_64+0x166/0x520
[  196.603783][ T6520]  ? trace_irq_disable+0x3b/0x140
[  196.603809][ T6520]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  196.603840][ T6520]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  196.603865][ T6520] RIP: 0033:0x7f756119e159
[  196.603893][ T6520] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  196.603913][ T6520] RSP: 002b:00007f7561fca028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fd
[  196.603938][ T6520] RAX: ffffffffffffffda RBX: 00007f7561426090 RCX: 00007f756119e159
[  196.603957][ T6520] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  196.603971][ T6520] RBP: 00007f7561426090 R08: 0000000000000000 R09: 0000000000000000
[  196.603987][ T6520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  196.604004][ T6520] R13: 00007f7561426128 R14: 00007f7561426090 R15: 00007ffcfdce3808
[  196.604045][ T6520]  </TASK>
[  196.750070][ T5941] usb 2-1: USB disconnect, device number 7
[  196.962484][ T6525] binder_alloc: 6523: binder_alloc_buf size 12224 failed, no address space
[  196.962607][ T6525] binder_alloc: allocated: 4096 (num: 1 largest: 4096), free: 8192 (num: 1 largest: 8192)
[  197.137644][  T136] 
[  197.137644][  T136]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  197.137644][  T136] 
[  197.137673][  T136] 
[  197.137673][  T136]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  197.137673][  T136] 
[  197.137688][  T136] 
[  197.137688][  T136]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  197.137688][  T136] 
[  197.138374][  T118] 
[  197.138374][  T118]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  197.138374][  T118] 
[  197.138653][ T5631] 
[  197.138653][ T5631]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  197.138653][ T5631] 
[  197.140196][ T5631] 
[  197.140196][ T5631]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  197.140196][ T5631] 
[  197.288495][ T5791] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  197.456751][ T5791] usb 4-1: Using ep0 maxpacket: 32
[  197.467843][ T5791] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  197.470274][ T5791] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  197.485229][ T5791] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  197.485256][ T5791] usb 4-1: Product: syz
[  197.485273][ T5791] usb 4-1: Manufacturer: syz
[  197.485290][ T5791] usb 4-1: SerialNumber: syz
[  197.546429][ T5791] usb 4-1: config 0 descriptor??
[  197.574499][ T6527] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  197.696624][ T5791] hub 4-1:0.0: bad descriptor, ignoring hub
[  197.696655][ T5791] hub 4-1:0.0: probe with driver hub failed with error -5
[  197.719006][ T5636] Bluetooth: hci3: command tx timeout
[  197.852088][ T6524] syz.0.179 (6524): drop_caches: 2
[  198.203522][ T6390] hsr_slave_0: left promiscuous mode
[  198.209257][ T6390] hsr_slave_1: left promiscuous mode
[  198.210298][ T6390] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  198.210334][ T6390] batman_adv: batadv0: Removing interface: batadv_slave_0
[  198.245416][ T6390] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  198.245441][ T6390] batman_adv: batadv0: Removing interface: batadv_slave_1
[  198.256576][ T6527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  198.265747][ T6527] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  198.438199][ T6390] veth1_macvtap: left promiscuous mode
[  198.438256][ T6390] veth0_macvtap: left promiscuous mode
[  198.438413][ T6390] veth1_vlan: left promiscuous mode
[  198.438504][ T6390] veth0_vlan: left promiscuous mode
[  198.445843][ T5941] usb 4-1: USB disconnect, device number 4
[  198.481864][ T5896] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  198.509987][ T6560] netlink: 24 bytes leftover after parsing attributes in process `syz.0.186'.
[  198.642736][ T5896] usb 2-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00
[  198.643905][ T5896] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  198.643933][ T5896] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  198.646663][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  198.646686][ T5896] usb 2-1: Product: syz
[  198.646701][ T5896] usb 2-1: Manufacturer: syz
[  198.646716][ T5896] usb 2-1: SerialNumber: syz
[  199.073373][ T5896] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900
[  199.110722][ T5896] usb 2-1: USB disconnect, device number 8
[  199.138157][ T5896] usblp0: removed
[  199.381154][ T6566] loop3: detected capacity change from 0 to 256
[  199.491058][ T6566] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  199.680533][ T6566] exFAT-fs (loop3): valid_size(150994954) is greater than size(10)
[  199.782020][ T5636] Bluetooth: hci3: command tx timeout
[  199.936465][ T6390] team0 (unregistering): Port device team_slave_1 removed
[  200.029322][ T6390] team0 (unregistering): Port device team_slave_0 removed
[  200.607143][ T5271] 8021q: adding VLAN 0 to HW filter on device eth1
[  205.404325][ T5636] Bluetooth: hci3: command tx timeout
[  205.856459][ T6594] binder_alloc: 6591: binder_alloc_buf, no vma
[  206.027132][ T6598] loop2: detected capacity change from 0 to 1024
[  206.028226][ T6598] hfsplus: Unknown parameter 'ÊíµÕÙ¥µÕÙCuõR’²ÜHš�UŠ[Iñ0™+ë‹t*Šº}1ê8Ÿ'
[  206.269698][ T6608] sit0: entered promiscuous mode
[  206.285695][ T6608] netlink: 'syz.3.200': attribute type 1 has an invalid length.
[  206.285717][ T6608] netlink: 1 bytes leftover after parsing attributes in process `syz.3.200'.
[  207.952041][ T4925] Bluetooth: hci0: command 0x1407 tx timeout
[  207.952846][ T5636] Bluetooth: hci0: Opcode 0x1407 failed: -110
[  208.068171][ T6630] FAULT_INJECTION: forcing a failure.
[  208.068171][ T6630] name failslab, interval 1, probability 0, space 0, times 0
[  208.068212][ T6630] CPU: 0 UID: 0 PID: 6630 Comm: syz.3.205 Not tainted syzkaller #0 PREEMPT(full) 
[  208.068239][ T6630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  208.068253][ T6630] Call Trace:
[  208.068264][ T6630]  <TASK>
[  208.068274][ T6630]  dump_stack_lvl+0xe8/0x150
[  208.068319][ T6630]  should_fail_ex+0x410/0x560
[  208.068356][ T6630]  should_failslab+0xa8/0x100
[  208.068389][ T6630]  ? vm_area_alloc+0x24/0x140
[  208.068437][ T6630]  kmem_cache_alloc_noprof+0xa1/0x600
[  208.068479][ T6630]  ? vm_area_alloc+0x24/0x140
[  208.068524][ T6630]  vm_area_alloc+0x24/0x140
[  208.068562][ T6630]  mmap_region+0x1298/0x2270
[  208.068591][ T6630]  ? do_syscall_64+0x166/0x520
[  208.068621][ T6630]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  208.068657][ T6630]  ? srso_alias_return_thunk+0x5/0xfbef5
[  208.068686][ T6630]  ? __lock_acquire+0x747/0x2de0
[  208.068716][ T6630]  ? __pfx_mmap_region+0x10/0x10
[  208.068749][ T6630]  ? srso_alias_return_thunk+0x5/0xfbef5
[  208.068779][ T6630]  ? __lock_acquire+0x747/0x2de0
[  208.068812][ T6630]  ? __lock_acquire+0x747/0x2de0
[  208.068843][ T6630]  ? srso_alias_return_thunk+0x5/0xfbef5
[  208.068871][ T6630]  ? lock_acquire+0x115/0x350
[  208.068903][ T6630]  ? srso_alias_return_thunk+0x5/0xfbef5
[  208.068932][ T6630]  ? lock_acquire+0x115/0x350
[  208.069018][ T6630]  ? srso_alias_return_thunk+0x5/0xfbef5
[  208.069062][ T6630]  ? srso_alias_return_thunk+0x5/0xfbef5
[  208.069115][ T6630]  ? srso_alias_return_thunk+0x5/0xfbef5
[  208.069145][ T6630]  ? srso_alias_return_thunk+0x5/0xfbef5
[  208.069174][ T6630]  ? cap_mmap_addr+0xaf/0x100
[  208.069202][ T6630]  ? srso_alias_return_thunk+0x5/0xfbef5
[  208.069231][ T6630]  ? security_mmap_addr+0x71/0x240
[  208.069258][ T6630]  ? srso_alias_return_thunk+0x5/0xfbef5
[  208.069287][ T6630]  ? srso_alias_return_thunk+0x5/0xfbef5
[  208.069316][ T6630]  ? shmem_mapping+0xd/0x50
[  208.069341][ T6630]  ? srso_alias_return_thunk+0x5/0xfbef5
[  208.069369][ T6630]  ? memfd_check_seals_mmap+0x16f/0x220
[  208.069407][ T6630]  do_mmap+0xe0a/0x1300
[  208.069459][ T6630]  ? __pfx_do_mmap+0x10/0x10
[  208.069490][ T6630]  ? srso_alias_return_thunk+0x5/0xfbef5
[  208.069523][ T6630]  ? srso_alias_return_thunk+0x5/0xfbef5
[  208.069559][ T6630]  ? vm_mmap_pgoff+0x1dd/0x4e0
[  208.069586][ T6630]  ? srso_alias_return_thunk+0x5/0xfbef5
[  208.069615][ T6630]  ? down_write_killable+0x17e/0x240
[  208.069656][ T6630]  ? __pfx_down_write_killable+0x10/0x10
[  208.069690][ T6630]  ? srso_alias_return_thunk+0x5/0xfbef5
[  208.069729][ T6630]  vm_mmap_pgoff+0x272/0x4e0
[  208.069768][ T6630]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  208.069803][ T6630]  ? srso_alias_return_thunk+0x5/0xfbef5
[  208.069836][ T6630]  ? srso_alias_return_thunk+0x5/0xfbef5
[  208.069865][ T6630]  ? hugetlb_file_setup+0x42c/0x630
[  208.069905][ T6630]  ksys_mmap_pgoff+0x57d/0x760
[  208.069947][ T6630]  do_syscall_64+0x166/0x520
[  208.069978][ T6630]  ? trace_irq_disable+0x3b/0x140
[  208.070005][ T6630]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  208.070037][ T6630]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  208.070062][ T6630] RIP: 0033:0x7f97a119e159
[  208.070085][ T6630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  208.070105][ T6630] RSP: 002b:00007f97a20c2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  208.070132][ T6630] RAX: ffffffffffffffda RBX: 00007f97a1425fa0 RCX: 00007f97a119e159
[  208.070151][ T6630] RDX: 0000000001000001 RSI: 0000000000c00000 RDI: 0000080000000000
[  208.070168][ T6630] RBP: 00007f97a123506b R08: ffffffffffffffff R09: 0000000000000000
[  208.070186][ T6630] R10: 000000000004c032 R11: 0000000000000246 R12: 0000000000000000
[  208.070202][ T6630] R13: 00007f97a1426038 R14: 00007f97a1425fa0 R15: 00007ffe17825358
[  208.070241][ T6630]  </TASK>
[  208.584189][ T6640] Driver unsupported XDP return value 0 on prog  (id 16) dev N/A, expect packet loss!
[  208.740871][ T6471] bridge0: port 1(bridge_slave_0) entered blocking state
[  208.751379][ T6471] bridge0: port 1(bridge_slave_0) entered disabled state
[  208.751521][ T6471] bridge_slave_0: entered allmulticast mode
[  208.780729][ T6471] bridge_slave_0: entered promiscuous mode
[  208.809330][ T6471] bridge0: port 2(bridge_slave_1) entered blocking state
[  208.809450][ T6471] bridge0: port 2(bridge_slave_1) entered disabled state
[  208.809621][ T6471] bridge_slave_1: entered allmulticast mode
[  208.838962][ T6471] bridge_slave_1: entered promiscuous mode
[  209.089141][ T6471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  209.097012][ T6471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  209.116216][ T5768] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  209.350724][ T6471] team0: Port device team_slave_0 added
[  209.386270][ T6471] team0: Port device team_slave_1 added
[  209.552152][ T6471] batman_adv: batadv0: Adding interface: batadv_slave_0
[  209.552174][ T6471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  209.552204][ T6471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  209.561308][ T6471] batman_adv: batadv0: Adding interface: batadv_slave_1
[  209.561327][ T6471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  209.561364][ T6471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  209.607063][ T5636] Bluetooth: hci4: unexpected subevent 0x0c length: 30 > 5
[  209.758919][ T6657] loop1: detected capacity change from 0 to 1024
[  209.760014][ T6657] EXT4-fs: Ignoring removed nomblk_io_submit option
[  209.760050][ T6657] EXT4-fs: Ignoring removed nomblk_io_submit option
[  209.901494][ T6657] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback.
[  209.901598][ T6657] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  210.095103][ T6471] hsr_slave_0: entered promiscuous mode
[  210.111741][ T6471] hsr_slave_1: entered promiscuous mode
[  210.123510][ T6471] debugfs: 'hsr0' already exists in 'hsr'
[  210.123530][ T6471] Cannot create hsr debugfs directory
[  210.414534][ T6661] EXT4-fs error (device loop1): ext4_validate_block_bitmap:445: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set
[  210.801947][ T5768] usb 4-1: Using ep0 maxpacket: 16
[  210.835025][ T5768] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40
[  210.927182][ T5768] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  210.927225][ T5768] usb 4-1: Product: syz
[  210.927280][ T5768] usb 4-1: Manufacturer: syz
[  210.927379][ T5768] usb 4-1: SerialNumber: syz
[  210.977044][ T6661] EXT4-fs (loop1): Remounting filesystem read-only
[  212.122794][ T6642] loop3: detected capacity change from 0 to 256
[  213.035093][ T5768] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71
[  213.061566][ T5768] usb 4-1: USB disconnect, device number 5
[  213.084817][ T5271] 8021q: adding VLAN 0 to HW filter on device eth2
[  213.520322][ T6683] netlink: 12 bytes leftover after parsing attributes in process `syz.2.216'.
[  214.401485][ T6689] loop0: detected capacity change from 0 to 512
[  214.421166][ T6689] EXT4-fs (loop0): Test dummy encryption mode enabled
[  214.440143][ T6689] EXT4-fs error (device loop0): ext4_orphan_get:1403: inode #11: comm syz.0.219: casefold flag without casefold feature
[  214.440180][ T6689] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  214.440615][ T6689] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.219: couldn't read orphan inode 11 (err -117)
[  214.440647][ T6689] loop0: lost filesystem error report for type 5 error -117
[  214.441827][    C1] EXT4-fs (loop0): error count since last fsck: 2
[  214.441849][    C1] EXT4-fs (loop0): initial error at time 1790218573: ext4_orphan_get:1403: inode 11
[  214.441883][    C1] EXT4-fs (loop0): last error at time 1790218573: ext4_orphan_get:1408
[  214.455814][ T6689] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  214.480323][ T6688] loop3: detected capacity change from 0 to 1024
[  214.488713][ T6688] EXT4-fs (loop3): inodes count not valid: 1 vs 32
[  214.621534][ T5635] EXT4-fs error (device loop0): ext4_readdir:280: inode #2: block 13: comm syz-executor: path /44/file0: bad entry in directory: directory entry overrun - offset=92, inode=16, rec_len=196732, size=1024 fake=0
[  214.645569][ T5635] EXT4-fs error (device loop0): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 11
[  214.647709][ T5635] EXT4-fs error (device loop0): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 11
[  214.955057][ T6655] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  215.183688][ T6072] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.494812][ T5635] syz_tun (unregistering): left allmulticast mode
[  215.527803][ T6700] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  215.628133][ T6697] loop3: detected capacity change from 0 to 4096
[  216.335823][ T5635] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  216.509672][ T6697] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  216.538260][ T6697] ntfs3(loop3): Failed to load root (-22).
[  218.236400][ T4925] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  218.240984][ T4925] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  218.243791][ T4925] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  218.264276][ T4925] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  218.264935][ T4925] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  218.474762][ T6072] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  218.951528][ T6072] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  219.080697][ T6729] sctp: [Deprecated]: syz.5.230 (pid 6729) Use of int in max_burst socket option deprecated.
[  219.080697][ T6729] Use struct sctp_assoc_value instead
[  219.274062][ T5636] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  219.277951][ T5636] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  219.278774][ T5636] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  219.281752][ T5636] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  219.338140][ T5636] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  219.380663][ T6734] process 'syz.3.229' launched './file2' with NULL argv: empty string added
[  219.417261][   T31] audit: type=1400 audit(1790218578.886:9): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=6728 comm="syz.3.229"
[  219.464910][ T6072] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  219.506031][ T6471] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  219.510267][ T6471] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  219.520247][ T6471] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  219.572505][ T6471] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  219.579563][ T6471] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  219.606495][ T6471] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  219.617104][ T6471] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  219.651142][ T6471] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  220.174297][ T5271] 8021q: adding VLAN 0 to HW filter on device eth3
[  220.326505][ T6072] bridge_slave_1: left allmulticast mode
[  220.326530][ T6072] bridge_slave_1: left promiscuous mode
[  220.326758][ T6072] bridge0: port 2(bridge_slave_1) entered disabled state
[  220.352458][ T5636] Bluetooth: hci2: command tx timeout
[  220.380099][ T6072] bridge_slave_0: left allmulticast mode
[  220.380130][ T6072] bridge_slave_0: left promiscuous mode
[  220.383379][ T6072] bridge0: port 1(bridge_slave_0) entered disabled state
[  221.404331][ T5636] Bluetooth: hci5: command tx timeout
[  222.997712][ T5636] Bluetooth: hci2: command tx timeout
[  223.462724][ T5636] Bluetooth: hci5: command tx timeout
[  224.189158][ T6072] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  224.200812][ T6072] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  224.208177][ T6072] bond0 (unregistering): Released all slaves
[  224.574688][ T6471] 8021q: adding VLAN 0 to HW filter on device bond0
[  225.965064][ T5636] Bluetooth: hci2: command tx timeout
[  225.965064][ T4925] Bluetooth: hci5: command tx timeout
[  226.249865][ T6471] 8021q: adding VLAN 0 to HW filter on device team0
[  226.732604][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[  226.732717][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[  226.756982][ T6796] FAULT_INJECTION: forcing a failure.
[  226.756982][ T6796] name failslab, interval 1, probability 0, space 0, times 0
[  226.757021][ T6796] CPU: 0 UID: 0 PID: 6796 Comm: syz.3.237 Not tainted syzkaller #0 PREEMPT(full) 
[  226.757048][ T6796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  226.757063][ T6796] Call Trace:
[  226.757073][ T6796]  <TASK>
[  226.757083][ T6796]  dump_stack_lvl+0xe8/0x150
[  226.757125][ T6796]  should_fail_ex+0x410/0x560
[  226.757160][ T6796]  should_failslab+0xa8/0x100
[  226.757195][ T6796]  __kmalloc_cache_noprof+0xa3/0x600
[  226.757220][ T6796]  ? srso_alias_return_thunk+0x5/0xfbef5
[  226.757252][ T6796]  ? super_dev_alloc+0x4e/0x100
[  226.757276][ T6796]  ? super_dev_alloc+0x4e/0x100
[  226.757302][ T6796]  ? __list_lru_init+0x4fe/0x5d0
[  226.757338][ T6796]  super_dev_alloc+0x4e/0x100
[  226.757366][ T6796]  sget_fc+0xf65/0x1a40
[  226.757398][ T6796]  ? preempt_schedule_common+0x7f/0xd0
[  226.757445][ T6796]  ? __pfx_set_anon_super_fc+0x10/0x10
[  226.757486][ T6796]  ? __pfx_sget_fc+0x10/0x10
[  226.757518][ T6796]  ? srso_alias_return_thunk+0x5/0xfbef5
[  226.757547][ T6796]  ? lock_acquire+0x115/0x350
[  226.757576][ T6796]  ? srso_alias_return_thunk+0x5/0xfbef5
[  226.757610][ T6796]  ? srso_alias_return_thunk+0x5/0xfbef5
[  226.757639][ T6796]  ? __pfx_bpf_fill_super+0x10/0x10
[  226.757667][ T6796]  get_tree_nodev+0x2a/0x150
[  226.757711][ T6796]  vfs_get_tree+0x92/0x2a0
[  226.757739][ T6796]  vfs_cmd_create+0xa2/0x200
[  226.757773][ T6796]  __se_sys_fsconfig+0x6b9/0x810
[  226.757810][ T6796]  ? __pfx___se_sys_fsconfig+0x10/0x10
[  226.757843][ T6796]  ? rcu_is_watching+0x16/0xb0
[  226.757873][ T6796]  ? srso_alias_return_thunk+0x5/0xfbef5
[  226.757910][ T6796]  ? srso_alias_return_thunk+0x5/0xfbef5
[  226.757938][ T6796]  ? __x64_sys_fsconfig+0x20/0xc0
[  226.757970][ T6796]  do_syscall_64+0x166/0x520
[  226.758002][ T6796]  ? trace_irq_disable+0x3b/0x140
[  226.758028][ T6796]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  226.758059][ T6796]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  226.758085][ T6796] RIP: 0033:0x7f97a119e159
[  226.758107][ T6796] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  226.758127][ T6796] RSP: 002b:00007f97a20c2028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af
[  226.758153][ T6796] RAX: ffffffffffffffda RBX: 00007f97a1425fa0 RCX: 00007f97a119e159
[  226.758171][ T6796] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005
[  226.758186][ T6796] RBP: 00007f97a123506b R08: 0000000000000000 R09: 0000000000000000
[  226.758202][ T6796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  226.758217][ T6796] R13: 00007f97a1426038 R14: 00007f97a1425fa0 R15: 00007ffe17825358
[  226.758257][ T6796]  </TASK>
[  226.964089][ T6072] hsr_slave_0: left promiscuous mode
[  226.977045][ T6072] hsr_slave_1: left promiscuous mode
[  226.979736][ T6072] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  226.979760][ T6072] batman_adv: batadv0: Removing interface: batadv_slave_0
[  227.004329][ T6072] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  227.004355][ T6072] batman_adv: batadv0: Removing interface: batadv_slave_1
[  227.099948][ T6072] veth0_macvtap: left promiscuous mode
[  227.101648][ T6072] veth1_vlan: left promiscuous mode
[  227.101726][ T6072] veth0_vlan: left promiscuous mode
[  227.674555][ T6072] team0 (unregistering): Port device team_slave_1 removed
[  227.697511][ T6072] team0 (unregistering): Port device team_slave_0 removed
[  227.888424][   T37] bridge0: port 2(bridge_slave_1) entered blocking state
[  227.888534][   T37] bridge0: port 2(bridge_slave_1) entered forwarding state
[  227.971516][ T6804] hsr0: entered promiscuous mode
[  227.975630][ T6804] hsr0: left promiscuous mode
[  227.988293][ T5271] 8021q: adding VLAN 0 to HW filter on device eth4
[  228.023035][ T5636] Bluetooth: hci5: command tx timeout
[  228.023073][ T5636] Bluetooth: hci2: command tx timeout
[  228.367186][ T6471] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  228.367216][ T6471] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  231.983496][ T6709] bridge0: port 1(bridge_slave_0) entered blocking state
[  231.983606][ T6709] bridge0: port 1(bridge_slave_0) entered disabled state
[  231.983748][ T6709] bridge_slave_0: entered allmulticast mode
[  231.985374][ T6709] bridge_slave_0: entered promiscuous mode
[  231.998417][ T6709] bridge0: port 2(bridge_slave_1) entered blocking state
[  231.998538][ T6709] bridge0: port 2(bridge_slave_1) entered disabled state
[  231.998685][ T6709] bridge_slave_1: entered allmulticast mode
[  232.004762][ T6709] bridge_slave_1: entered promiscuous mode
[  232.202629][ T6709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  232.229100][ T6709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  232.391721][ T6072] IPVS: stop unused estimator thread 0...
[  232.463687][ T6709] team0: Port device team_slave_0 added
[  232.511521][ T6880] loop2: detected capacity change from 0 to 256
[  232.555299][ T6732] bridge0: port 1(bridge_slave_0) entered blocking state
[  232.555424][ T6732] bridge0: port 1(bridge_slave_0) entered disabled state
[  232.555558][ T6732] bridge_slave_0: entered allmulticast mode
[  232.558029][ T6732] bridge_slave_0: entered promiscuous mode
[  232.592414][ T6732] bridge0: port 2(bridge_slave_1) entered blocking state
[  232.592526][ T6732] bridge0: port 2(bridge_slave_1) entered disabled state
[  232.592664][ T6732] bridge_slave_1: entered allmulticast mode
[  232.596247][ T6732] bridge_slave_1: entered promiscuous mode
[  232.628136][ T6709] team0: Port device team_slave_1 added
[  232.709159][ T6880] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  232.709733][ T6732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  232.866878][ T6732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  232.966025][ T6709] batman_adv: batadv0: Adding interface: batadv_slave_0
[  232.966047][ T6709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  232.966078][ T6709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  233.045813][ T6732] team0: Port device team_slave_0 added
[  233.051343][ T6709] batman_adv: batadv0: Adding interface: batadv_slave_1
[  233.051358][ T6709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  233.051446][ T6709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  233.169614][   T31] audit: type=1800 audit(1790218592.646:10): pid=6880 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.254" name="file1" dev="loop2" ino=1048621 res=0 errno=0
[  233.282211][ T6072] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  233.363383][ T6732] team0: Port device team_slave_1 added
[  233.364969][ T5271] 8021q: adding VLAN 0 to HW filter on device eth5
[  234.189449][ T6732] batman_adv: batadv0: Adding interface: batadv_slave_0
[  234.189488][ T6732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  234.189535][ T6732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  235.492166][ T6732] batman_adv: batadv0: Adding interface: batadv_slave_1
[  235.492260][ T6732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  235.492301][ T6732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  236.592140][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  236.788843][ T6072] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  236.935537][ T6471] 8021q: adding VLAN 0 to HW filter on device batadv0
[  236.989719][ T6709] hsr_slave_0: entered promiscuous mode
[  236.990735][ T6709] hsr_slave_1: entered promiscuous mode
[  238.331748][ T6912] loop2: detected capacity change from 0 to 128
[  238.354672][ T6912] EXT4-fs (loop2): Test dummy encryption mode enabled
[  238.393499][ T6912] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  238.393941][ T6912] ext4 filesystem being mounted at /46/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  238.491532][ T6732] hsr_slave_0: entered promiscuous mode
[  238.504507][ T6732] hsr_slave_1: entered promiscuous mode
[  238.506862][ T6732] debugfs: 'hsr0' already exists in 'hsr'
[  238.506885][ T6732] Cannot create hsr debugfs directory
[  238.827413][ T5631] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  238.886577][ T6072] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  239.274197][ T6926] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  239.815977][ T6072] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  240.328038][   T25] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  240.643942][   T25] usb 4-1: New USB device found, idVendor=0e8d, idProduct=0608, bcdDevice= 1.00
[  240.683789][   T25] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  240.684401][   T25] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  240.687010][   T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  241.376654][   T25] usb 4-1: can't set config #1, error -71
[  241.395236][   T25] usb 4-1: USB disconnect, device number 6
[  243.473982][ T5271] 8021q: adding VLAN 0 to HW filter on device eth6
[  244.763533][ T6072] macvlan2: left allmulticast mode
[  244.763578][ T6072] ip6gretap0: left allmulticast mode
[  244.777829][ T6072] macvlan2: left promiscuous mode
[  244.778172][ T6072] bridge0: port 3(macvlan2) entered disabled state
[  244.817981][ T6072] bridge_slave_1: left allmulticast mode
[  244.818012][ T6072] bridge_slave_1: left promiscuous mode
[  244.818272][ T6072] bridge0: port 2(bridge_slave_1) entered disabled state
[  244.889060][ T6072] bridge_slave_0: left allmulticast mode
[  244.889089][ T6072] bridge_slave_0: left promiscuous mode
[  244.900061][ T6072] bridge0: port 1(bridge_slave_0) entered disabled state
[  248.149168][ T6072] bond1 (unregistering): (slave gretap1): Releasing backup interface
[  248.582509][ T6976] loop3: detected capacity change from 0 to 4096
[  249.227256][ T6072] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  249.264976][ T6072] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  249.282322][ T6072] bond0 (unregistering): Released all slaves
[  249.310377][ T6072] bond1 (unregistering): Released all slaves
[  249.327702][ T6976] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  249.339184][ T6976] ntfs3(loop3): Failed to load root (-22).
[  249.490921][ T6471] veth0_vlan: entered promiscuous mode
[  249.536606][ T6471] veth1_vlan: entered promiscuous mode
[  249.622602][ T6471] veth0_macvtap: entered promiscuous mode
[  249.643910][ T6471] veth1_macvtap: entered promiscuous mode
[  249.673997][ T6471] batman_adv: batadv0: Interface activated: batadv_slave_0
[  249.695435][ T6471] batman_adv: batadv0: Interface activated: batadv_slave_1
[  249.918470][ T6709] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  249.975348][ T6709] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  249.977584][ T6709] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  250.078129][ T6709] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  250.301874][ T6316] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  250.319694][ T6709] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  250.579647][ T6709] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  250.611726][ T7000] loop2: detected capacity change from 0 to 512
[  250.682501][ T6316] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  250.684916][   T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  250.696463][ T7000] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  250.696576][ T7000] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  250.745883][ T7000] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  250.758609][ T6073] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  250.774567][ T5271] 8021q: adding VLAN 0 to HW filter on device eth7
[  250.775190][ T6709] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  250.804162][ T6709] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  250.948076][ T5631] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  251.030026][ T6072] hsr_slave_0: left promiscuous mode
[  251.031332][ T6072] hsr_slave_1: left promiscuous mode
[  251.045098][ T6072] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  251.045121][ T6072] batman_adv: batadv0: Removing interface: batadv_slave_0
[  251.068424][ T6072] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  251.068450][ T6072] batman_adv: batadv0: Removing interface: batadv_slave_1
[  251.216715][ T6072] veth1_macvtap: left promiscuous mode
[  251.216760][ T6072] veth0_macvtap: left promiscuous mode
[  251.216867][ T6072] veth1_vlan: left promiscuous mode
[  251.216939][ T6072] veth0_vlan: left promiscuous mode
[  252.810676][ T7053] binfmt_misc: register: failed to install interpreter ./file2
[  254.990408][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  254.990473][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  255.064194][ T6072] team0 (unregistering): Port device team_slave_1 removed
[  255.161072][ T5636] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  255.162136][ T5636] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  255.176959][ T5636] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  255.180534][ T5636] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  255.181248][ T5636] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  255.185356][ T6072] team0 (unregistering): Port device team_slave_0 removed
[  255.690176][ T7036] syzkaller0: entered promiscuous mode
[  255.690203][ T7036] syzkaller0: entered allmulticast mode
[  255.905661][ T6709] 8021q: adding VLAN 0 to HW filter on device bond0
[  255.941354][ T6732] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  255.979405][ T6732] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  256.007434][ T6709] 8021q: adding VLAN 0 to HW filter on device team0
[  256.051551][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  256.051671][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  256.068677][ T6732] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  256.083912][ T6732] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  256.084850][ T6732] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  256.112604][ T6732] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  256.114135][ T6732] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  256.120793][ T6732] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  256.150697][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  256.150805][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  256.833664][ T7094] loop2: detected capacity change from 0 to 4096
[  256.944897][ T7094] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  256.950756][ T7094] ntfs3(loop2): Failed to load root (-22).
[  258.843292][ T4925] Bluetooth: hci6: command tx timeout
[  259.212486][ T6732] 8021q: adding VLAN 0 to HW filter on device bond0
[  259.479336][   T73] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  260.881322][ T6732] 8021q: adding VLAN 0 to HW filter on device team0
[  260.902197][ T5641] Bluetooth: hci6: command tx timeout
[  261.070929][   T73] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  261.147420][ T5271] 8021q: adding VLAN 0 to HW filter on device eth8
[  261.149445][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  261.149550][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  261.230036][  T136] bridge0: port 2(bridge_slave_1) entered blocking state
[  261.230145][  T136] bridge0: port 2(bridge_slave_1) entered forwarding state
[  261.443641][   T73] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  261.825722][   T73] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  264.175800][ T5641] Bluetooth: hci1: command 0x0406 tx timeout
[  264.175847][ T5641] Bluetooth: hci4: command 0x0406 tx timeout
[  264.175877][ T5641] Bluetooth: hci0: command 0x1407 tx timeout
[  264.175906][ T5641] Bluetooth: hci6: command tx timeout
[  264.253215][ T6709] 8021q: adding VLAN 0 to HW filter on device batadv0
[  264.603754][   T73] bridge_slave_1: left allmulticast mode
[  264.603785][   T73] bridge_slave_1: left promiscuous mode
[  264.604023][   T73] bridge0: port 2(bridge_slave_1) entered disabled state
[  264.642707][   T73] bridge_slave_0: left allmulticast mode
[  264.642737][   T73] bridge_slave_0: left promiscuous mode
[  264.644874][   T73] bridge0: port 1(bridge_slave_0) entered disabled state
[  264.894774][ T7170] loop3: detected capacity change from 0 to 512
[  264.912910][ T7170] EXT4-fs (loop3): Test dummy encryption mode enabled
[  264.954595][ T7170] EXT4-fs error (device loop3): ext4_validate_block_bitmap:436: comm syz.3.295: bg 0: block 7: invalid block bitmap
[  264.954633][ T7170] loop3: lost filesystem error report for type 5 error -117
[  264.961819][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  264.961841][    C0] EXT4-fs (loop3): initial error at time 1790218624: ext4_validate_block_bitmap:436
[  264.961869][    C0] EXT4-fs (loop3): last error at time 1790218624: ext4_validate_block_bitmap:436
[  265.046371][ T7170] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6680: Corrupt filesystem
[  265.046400][ T7170] loop3: lost filesystem error report for type 5 error -117
[  265.071097][ T7170] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2933: inode #11: comm syz.3.295: corrupted xattr block 95: invalid header
[  265.071139][ T7170] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  265.105500][ T7170] EXT4-fs warning (device loop3): ext4_evict_inode:288: xattr delete (err -117)
[  265.105658][ T7170] EXT4-fs (loop3): 1 orphan inode deleted
[  265.111523][ T7170] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  265.459785][ T7179] use of bytesused == 0 is deprecated and will be removed in the future,
[  265.459820][ T7179] use the actual size instead.
[  266.182086][ T4925] Bluetooth: hci6: command tx timeout
[  266.236988][ T5630] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  266.677356][   T73] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  266.702488][   T73] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  266.728759][   T73] bond0 (unregistering): Released all slaves
[  267.112055][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[  267.155121][ T7065] bridge0: port 1(bridge_slave_0) entered blocking state
[  267.155234][ T7065] bridge0: port 1(bridge_slave_0) entered disabled state
[  267.155394][ T7065] bridge_slave_0: entered allmulticast mode
[  267.161540][ T7065] bridge_slave_0: entered promiscuous mode
[  267.876693][   T73] hsr_slave_0: left promiscuous mode
[  267.899619][   T73] hsr_slave_1: left promiscuous mode
[  267.900849][   T73] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  267.900875][   T73] batman_adv: batadv0: Removing interface: batadv_slave_0
[  267.946193][   T73] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  267.946218][   T73] batman_adv: batadv0: Removing interface: batadv_slave_1
[  268.014260][   T73] veth1_macvtap: left promiscuous mode
[  268.014304][   T73] veth0_macvtap: left promiscuous mode
[  268.014414][   T73] veth1_vlan: left promiscuous mode
[  268.014492][   T73] veth0_vlan: left promiscuous mode
[  268.727711][   T73] team0 (unregistering): Port device team_slave_1 removed
[  268.766294][   T73] team0 (unregistering): Port device team_slave_0 removed
[  268.984971][ T7065] bridge0: port 2(bridge_slave_1) entered blocking state
[  268.985150][ T7065] bridge0: port 2(bridge_slave_1) entered disabled state
[  268.985289][ T7065] bridge_slave_1: entered allmulticast mode
[  268.987476][ T7065] bridge_slave_1: entered promiscuous mode
[  269.292727][ T7065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  269.315130][ T7065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  269.381502][ T7065] team0: Port device team_slave_0 added
[  269.399253][ T7065] team0: Port device team_slave_1 added
[  269.460301][ T7065] batman_adv: batadv0: Adding interface: batadv_slave_0
[  269.460321][ T7065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  269.460352][ T7065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  269.506947][ T7065] batman_adv: batadv0: Adding interface: batadv_slave_1
[  269.506970][ T7065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  269.507002][ T7065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  269.918968][ T7065] hsr_slave_0: entered promiscuous mode
[  269.930477][ T7065] hsr_slave_1: entered promiscuous mode
[  269.940507][ T7065] debugfs: 'hsr0' already exists in 'hsr'
[  269.940533][ T7065] Cannot create hsr debugfs directory
[  270.204342][ T6709] veth0_vlan: entered promiscuous mode
[  270.323674][ T6709] veth1_vlan: entered promiscuous mode
[  271.216717][ T6709] veth0_macvtap: entered promiscuous mode
[  271.254783][ T6732] 8021q: adding VLAN 0 to HW filter on device batadv0
[  271.301542][ T6709] veth1_macvtap: entered promiscuous mode
[  271.671847][   T31] audit: type=1800 audit(1790218631.136:11): pid=7253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.306" name="file1" dev="sda1" ino=2054 res=0 errno=0
[  271.811217][ T7255] loop2: detected capacity change from 0 to 32768
[  271.823065][ T7255] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.307 (7255)
[  271.847673][ T7255] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  271.847713][ T7255] BTRFS info (device loop2): using crc32c checksum algorithm
[  271.947552][ T6709] batman_adv: batadv0: Interface activated: batadv_slave_0
[  271.982596][ T7255] BTRFS info (device loop2): enabling ssd optimizations
[  271.982628][ T7255] BTRFS info (device loop2): turning on flush-on-commit
[  271.983175][ T7255] BTRFS info (device loop2): enabling free space tree
[  271.983197][ T7255] BTRFS info (device loop2): enabling auto defrag
[  271.983217][ T7255] BTRFS info (device loop2): use lzo compression, level 1
[  271.983239][ T7255] BTRFS info (device loop2): max_inline set to 4096
[  272.032630][ T6709] batman_adv: batadv0: Interface activated: batadv_slave_1
[  273.061950][ T6071] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  273.284337][   T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  273.288359][   T50] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  273.289266][   T50] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  274.365214][ T5631] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  274.680566][   T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  274.680591][   T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  274.862783][   T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  274.862809][   T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  275.270745][ T5271] 8021q: adding VLAN 0 to HW filter on device eth9
[  275.409593][ T6732] veth0_vlan: entered promiscuous mode
[  276.470202][ T6732] veth1_vlan: entered promiscuous mode
[  276.563510][ T7065] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  276.649146][ T7065] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  276.676949][ T7065] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  276.749477][ T7065] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  276.763476][ T7065] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  276.795957][ T7065] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  276.821501][ T7065] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  276.850814][ T7065] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  277.732354][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  278.295810][ T5646] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  278.303964][ T5646] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  278.316815][ T5646] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  278.326624][ T5646] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  278.328422][ T5646] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  278.342152][ T6732] veth0_macvtap: entered promiscuous mode
[  278.407869][ T6732] veth1_macvtap: entered promiscuous mode
[  278.492314][ T6732] batman_adv: batadv0: Interface activated: batadv_slave_0
[  278.516626][ T6732] batman_adv: batadv0: Interface activated: batadv_slave_1
[  278.815345][ T6071] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  278.815399][ T6071] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  278.815439][ T6071] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  278.815478][ T6071] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  279.330189][   T50] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  279.658617][ T5271] 8021q: adding VLAN 0 to HW filter on device eth10
[  280.421893][ T5646] Bluetooth: hci3: command tx timeout
[  280.448408][ T7065] 8021q: adding VLAN 0 to HW filter on device bond0
[  280.495742][ T4925] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  280.505090][ T4925] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  280.507459][ T4925] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  280.514910][ T4925] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  280.517156][ T4925] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  281.432561][   T50] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  281.496442][ T7065] 8021q: adding VLAN 0 to HW filter on device team0
[  281.750173][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[  281.750281][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[  282.032454][    T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!!
[  283.510820][ T4925] Bluetooth: hci3: command tx timeout
[  283.510876][ T5646] Bluetooth: hci2: command tx timeout
[  283.729738][   T50] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  284.071355][ T5781] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  284.108423][ T6903] bridge0: port 2(bridge_slave_1) entered blocking state
[  284.108536][ T6903] bridge0: port 2(bridge_slave_1) entered forwarding state
[  284.221881][ T5781] usb 3-1: Using ep0 maxpacket: 8
[  284.223352][ T5781] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[  284.229593][ T5781] usb 3-1: config 0 interface 0 altsetting 88 endpoint 0x2 has an invalid bInterval 135, changing to 11
[  284.229632][ T5781] usb 3-1: config 0 interface 0 altsetting 88 has 2 endpoint descriptors, different from the interface descriptor's value: 9
[  284.229662][ T5781] usb 3-1: config 0 interface 0 has no altsetting 0
[  284.229698][ T5781] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  284.289900][ T5781] usb 3-1: config 0 descriptor??
[  284.519942][   T50] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  284.808481][ T5781] isku 0003:1E7D:319C.0002: unknown main item tag 0x4
[  284.808520][ T5781] isku 0003:1E7D:319C.0002: unknown main item tag 0x5
[  284.808545][ T5781] isku 0003:1E7D:319C.0002: unknown main item tag 0x2
[  284.808567][ T5781] isku 0003:1E7D:319C.0002: item fetching failed at offset 27/44
[  284.809330][ T5781] isku 0003:1E7D:319C.0002: parse failed
[  284.809405][ T5781] isku 0003:1E7D:319C.0002: probe with driver isku failed with error -22
[  284.992785][ T5781] usb 3-1: USB disconnect, device number 6
[  285.543028][ T5646] Bluetooth: hci2: command tx timeout
[  285.552464][ T5646] Bluetooth: hci3: command tx timeout
[  285.574357][ T5271] 8021q: adding VLAN 0 to HW filter on device eth11
[  286.790357][   T50] bridge_slave_1: left allmulticast mode
[  286.790389][   T50] bridge_slave_1: left promiscuous mode
[  286.790617][   T50] bridge0: port 2(bridge_slave_1) entered disabled state
[  286.989072][   T50] bridge_slave_0: left allmulticast mode
[  286.989102][   T50] bridge_slave_0: left promiscuous mode
[  286.989312][   T50] bridge0: port 1(bridge_slave_0) entered disabled state
[  289.085833][ T4925] Bluetooth: hci2: command tx timeout
[  289.085927][ T5646] Bluetooth: hci3: command tx timeout
[  289.834486][   T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  289.852857][   T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  289.859623][   T50] bond0 (unregistering): Released all slaves
[  291.060249][   T50] hsr_slave_0: left promiscuous mode
[  291.080915][   T50] hsr_slave_1: left promiscuous mode
[  291.087590][   T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  291.087617][   T50] batman_adv: batadv0: Removing interface: batadv_slave_0
[  291.109147][   T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  291.109173][   T50] batman_adv: batadv0: Removing interface: batadv_slave_1
[  291.149495][ T5646] Bluetooth: hci2: command tx timeout
[  291.175580][   T50] veth1_macvtap: left promiscuous mode
[  291.175629][   T50] veth0_macvtap: left promiscuous mode
[  291.175743][   T50] veth1_vlan: left promiscuous mode
[  291.175864][   T50] veth0_vlan: left promiscuous mode
[  293.509716][ T7469] loop3: detected capacity change from 0 to 1024
[  293.514177][ T7469] EXT4-fs: Ignoring removed bh option
[  293.570773][ T7469] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  293.570885][ T7469] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  293.712966][   T50] team0 (unregistering): Port device team_slave_1 removed
[  293.766564][   T50] team0 (unregistering): Port device team_slave_0 removed
[  294.060606][ T7474] EXT4-fs error (device loop3): ext4_map_blocks:832: inode #15: block 3: comm syz.3.334: lblock 3 mapped to illegal pblock 3 (length 3)
[  294.297356][ T7474] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  294.297444][ T7474] EXT4-fs (loop3): This should not happen!! Data will be lost
[  294.297444][ T7474] 
[  294.507671][ T7472] EXT4-fs error (device loop3): ext4_validate_block_bitmap:445: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set
[  294.650584][ T6390] EXT4-fs error (device loop3): ext4_map_blocks:832: inode #15: block 8: comm kworker/u8:16: lblock 8 mapped to illegal pblock 8 (length 8)
[  294.660017][ T6390] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  294.660054][ T6390] EXT4-fs (loop3): This should not happen!! Data will be lost
[  294.660054][ T6390] 
[  294.695007][ T5630] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  295.242628][ T7480] SET target dimension over the limit!
[  295.932299][ T5271] 8021q: adding VLAN 0 to HW filter on device eth12
[  297.392093][    T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!!
[  299.738532][ T7330] bridge0: port 1(bridge_slave_0) entered blocking state
[  299.739910][ T7330] bridge0: port 1(bridge_slave_0) entered disabled state
[  299.740110][ T7330] bridge_slave_0: entered allmulticast mode
[  299.767952][ T7330] bridge_slave_0: entered promiscuous mode
[  299.832068][ T7330] bridge0: port 2(bridge_slave_1) entered blocking state
[  299.832186][ T7330] bridge0: port 2(bridge_slave_1) entered disabled state
[  299.832367][ T7330] bridge_slave_1: entered allmulticast mode
[  299.836339][ T7330] bridge_slave_1: entered promiscuous mode
[  300.493750][ T7330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  300.586171][ T7330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  300.882621][ T7065] 8021q: adding VLAN 0 to HW filter on device batadv0
[  301.029251][ T7359] bridge0: port 1(bridge_slave_0) entered blocking state
[  301.029371][ T7359] bridge0: port 1(bridge_slave_0) entered disabled state
[  301.029553][ T7359] bridge_slave_0: entered allmulticast mode
[  301.038323][ T7359] bridge_slave_0: entered promiscuous mode
[  301.053603][ T7330] team0: Port device team_slave_0 added
[  301.055514][ T7359] bridge0: port 2(bridge_slave_1) entered blocking state
[  301.055633][ T7359] bridge0: port 2(bridge_slave_1) entered disabled state
[  301.055777][ T7359] bridge_slave_1: entered allmulticast mode
[  301.068780][ T7359] bridge_slave_1: entered promiscuous mode
[  301.083982][ T7330] team0: Port device team_slave_1 added
[  301.469150][ T7330] batman_adv: batadv0: Adding interface: batadv_slave_0
[  301.469171][ T7330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  301.469202][ T7330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  301.494761][ T7359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  301.510123][ T7359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  301.625919][   T31] audit: type=1326 audit(1790218661.106:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7537 comm="syz.5.345" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f901d99e159 code=0x0
[  301.819438][   T50] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  303.283381][ T7330] batman_adv: batadv0: Adding interface: batadv_slave_1
[  303.283403][ T7330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  303.283434][ T7330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  304.011580][ T7359] team0: Port device team_slave_0 added
[  304.028272][ T7359] team0: Port device team_slave_1 added
[  304.233956][   T50] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  304.295530][ T7555] loop3: detected capacity change from 0 to 2048
[  304.309647][ T7555] ext4: Unknown parameter 'smackfshat'
[  304.941235][ T5271] 8021q: adding VLAN 0 to HW filter on device eth13
[  306.292987][   T50] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  306.384882][ T7330] hsr_slave_0: entered promiscuous mode
[  306.392082][ T7330] hsr_slave_1: entered promiscuous mode
[  306.844680][ T7359] batman_adv: batadv0: Adding interface: batadv_slave_0
[  306.844919][ T7359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  306.846447][ T7359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  309.335484][ T7359] batman_adv: batadv0: Adding interface: batadv_slave_1
[  309.335501][ T7359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  309.335525][ T7359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  309.580237][   T50] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  311.203723][ T7599] fuse: fd is not a fuse device
[  311.437125][ T7359] hsr_slave_0: entered promiscuous mode
[  311.447082][ T7359] hsr_slave_1: entered promiscuous mode
[  311.447874][ T7359] debugfs: 'hsr0' already exists in 'hsr'
[  311.447896][ T7359] Cannot create hsr debugfs directory
[  311.628463][ T7605] tipc: Enabled bearer <eth:macvtap0>, priority 7
[  312.202011][ T7065] veth0_vlan: entered promiscuous mode
[  314.613153][ T4925] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  314.617254][ T4925] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  314.620192][ T4925] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  314.622370][   T50] bridge_slave_1: left allmulticast mode
[  314.622398][   T50] bridge_slave_1: left promiscuous mode
[  314.622627][   T50] bridge0: port 2(bridge_slave_1) entered disabled state
[  314.630137][ T4925] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  314.644619][ T4925] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  314.733132][   T50] bridge_slave_0: left allmulticast mode
[  314.733165][   T50] bridge_slave_0: left promiscuous mode
[  314.733391][   T50] bridge0: port 1(bridge_slave_0) entered disabled state
[  315.532197][   T31] audit: type=1400 audit(1790218674.986:13): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=7631 comm="syz.3.362"
[  316.642354][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  316.642418][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  316.649587][   T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  316.695418][   T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  316.730269][   T50] bond0 (unregistering): Released all slaves
[  316.742282][ T5646] Bluetooth: hci5: command tx timeout
[  317.546682][ T7659] loop2: detected capacity change from 0 to 1024
[  317.556237][ T7659] EXT4-fs: Ignoring removed bh option
[  317.852732][ T7659] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  318.134156][ T5631] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  318.255152][ T5271] 8021q: adding VLAN 0 to HW filter on device eth14
[  319.445753][ T5646] Bluetooth: hci5: command tx timeout
[  319.924363][ T7677] ip_tables: iptables: counters copy to user failed while replacing table
[  321.799617][ T5646] Bluetooth: hci5: command tx timeout
[  321.946702][   T50] hsr_slave_0: left promiscuous mode
[  321.993305][   T50] hsr_slave_1: left promiscuous mode
[  321.996534][   T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  321.996555][   T50] batman_adv: batadv0: Removing interface: batadv_slave_0
[  322.030498][   T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  322.030527][   T50] batman_adv: batadv0: Removing interface: batadv_slave_1
[  322.102750][   T50] veth1_macvtap: left promiscuous mode
[  322.102800][   T50] veth0_macvtap: left promiscuous mode
[  322.102883][   T50] veth1_vlan: left promiscuous mode
[  322.102937][   T50] veth0_vlan: left promiscuous mode
[  323.327809][ T7703] loop2: detected capacity change from 0 to 512
[  323.495415][ T7703] EXT4-fs error (device loop2): ext4_validate_block_bitmap:436: comm syz.2.372: bg 0: block 5: invalid block bitmap
[  323.495457][ T7703] loop2: lost filesystem error report for type 5 error -117
[  323.501808][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  323.501834][    C0] EXT4-fs (loop2): initial error at time 1790218682: ext4_validate_block_bitmap:436
[  323.501863][    C0] EXT4-fs (loop2): last error at time 1790218682: ext4_validate_block_bitmap:436
[  323.552553][ T7703] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6680: Corrupt filesystem
[  323.552584][ T7703] loop2: lost filesystem error report for type 5 error -117
[  323.566597][ T7703] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.372: invalid indirect mapped block 3 (level 2)
[  323.566640][ T7703] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  323.595636][ T7703] EXT4-fs (loop2): 1 orphan inode deleted
[  323.595666][ T7703] EXT4-fs (loop2): 1 truncate cleaned up
[  323.677920][ T7703] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  323.873505][ T5646] Bluetooth: hci5: command tx timeout
[  323.917432][ T5631] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  323.938676][   T50] team0 (unregistering): Port device team_slave_1 removed
[  324.014649][   T50] team0 (unregistering): Port device team_slave_0 removed
[  325.261588][ T5782] logitech-hidpp-device 0003:046D:C082.0003: hidraw0: USB HID v0.00 Device [syz0] on syz0
[  325.261689][ T7723] loop2: detected capacity change from 0 to 4096
[  326.009404][ T7723] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  326.020394][ T7723] ntfs3(loop2): Failed to load root (-22).
[  326.251345][ T7727] fido_id[7727]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  326.514389][ T7733] loop2: detected capacity change from 0 to 256
[  326.568641][ T7733] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d)
[  327.343813][ T1210] usb 4-1: new full-speed USB device number 7 using dummy_hcd
[  327.494495][ T1210] usb 4-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e
[  327.500968][ T1210] usb 4-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config
[  327.558853][ T1210] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  327.558878][ T1210] usb 4-1: Product: syz
[  327.558891][ T1210] usb 4-1: Manufacturer: syz
[  327.558904][ T1210] usb 4-1: SerialNumber: syz
[  327.650210][ T1210] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state.
[  327.650547][ T1210] dvb-usb: bulk message failed: -22 (3/0)
[  327.778336][ T1210] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  327.847075][ T7742] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  327.936354][ T1210] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 error while loading driver (-19)
[  327.936421][ T1210] dvb_usb_umt_010 4-1:54.0: probe with driver dvb_usb_umt_010 failed with error -22
[  327.953612][ T7330] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  327.954158][ T1210] usb 4-1: USB disconnect, device number 7
[  327.997459][ T7330] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  327.998411][ T7330] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  328.030404][ T7742] loop2: detected capacity change from 0 to 8
[  328.037258][ T7330] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  328.180409][ T7330] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  328.208925][ T7330] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  328.213344][ T7330] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  328.234106][ T7742] SQUASHFS error: Failed to read block 0x71: -5
[  328.242427][ T7330] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  328.293430][   T31] audit: type=1800 audit(1790218687.776:14): pid=7742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.378" name="file1" dev="loop2" ino=1 res=0 errno=0
[  330.479679][ T7764] netlink: 28 bytes leftover after parsing attributes in process `syz.3.379'.
[  330.496346][ T7764] syz.3.379 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  330.942003][ T5768] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  331.094228][ T5768] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.03
[  331.102579][ T5768] usb 1-1: Dual-Role OTG device on HNP port
[  331.104241][ T5768] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  331.145187][ T5768] gspca_main: spca501-2.14.0 probing 0000:0000
[  331.147306][ T5768] gspca_spca501: reg write: error -32
[  331.147323][ T5768] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05
[  331.152500][ T5768] spca501 1-1:1.0: probe with driver spca501 failed with error -22
[  331.159023][ T5768] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  331.790823][ T7787] loop3: detected capacity change from 0 to 1024
[  331.807806][ T7787] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  332.862870][ T7787] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #3: block 2: comm syz.3.384: lblock 2 mapped to illegal pblock 2 (length 1)
[  332.862919][ T7787] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  332.885729][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  332.885753][    C1] EXT4-fs (loop3): initial error at time 1790218692: ext4_map_blocks:790: inode 3: block 2
[  332.885789][    C1] EXT4-fs (loop3): last error at time 1790218692: ext4_map_blocks:790: inode 3: block 2
[  333.023489][ T7787] Quota error (device loop3): qtree_write_dquot: dquota write failed
[  333.023563][ T7787] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #3: block 48: comm syz.3.384: lblock 0 mapped to illegal pblock 48 (length 1)
[  333.023604][ T7787] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  333.063550][ T7787] Quota error (device loop3): v2_write_file_info: Can't write info structure
[  333.063579][ T7787] EXT4-fs error (device loop3): ext4_acquire_dquot:7069: comm syz.3.384: Failed to acquire dquot type 0
[  333.063606][ T7787] loop3: lost filesystem error report for type 5 error -117
[  333.091540][ T7787] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6522: Corrupt filesystem
[  333.091572][ T7787] loop3: lost filesystem error report for type 5 error -117
[  333.093235][ T7787] EXT4-fs error (device loop3): ext4_evict_inode:269: inode #11: comm syz.3.384: mark_inode_dirty error
[  333.093286][ T7787] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  333.109742][ T7787] EXT4-fs warning (device loop3): ext4_evict_inode:272: couldn't mark inode dirty (err -117)
[  333.109857][ T7787] EXT4-fs (loop3): 1 orphan inode deleted
[  333.112944][ T7787] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  333.459167][  T157] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1)
[  334.126468][  T157] Quota error (device loop3): remove_tree: Can't read quota data block 1
[  334.163271][  T157] EXT4-fs error (device loop3): ext4_release_dquot:7105: comm kworker/u8:6: Failed to release dquot type 0
[  334.717719][ T5630] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  334.722963][ T6072] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1)
[  334.723005][ T6072] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  334.736784][ T6072] Quota error (device loop3): remove_tree: Can't read quota data block 1
[  334.736836][ T6072] EXT4-fs error (device loop3): ext4_release_dquot:7105: comm kworker/u8:10: Failed to release dquot type 0
[  334.736862][ T6072] loop3: lost filesystem error report for type 5 error -117
[  334.748799][ T5630] EXT4-fs error (device loop3): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0
[  334.748837][ T5630] loop3: lost filesystem error report for type 5 error -117
[  334.834137][ T5630] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6522: Corrupt filesystem
[  334.834163][ T5630] loop3: lost filesystem error report for type 5 error -117
[  334.853187][ T5630] EXT4-fs error (device loop3): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error
[  334.853224][ T5630] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  334.858019][ T5630] EXT4-fs error (device loop3): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0
[  334.858132][ T5630] loop3: lost filesystem error report for type 5 error -117
[  335.167936][ T7811] loop3: detected capacity change from 0 to 512
[  335.304042][ T7811] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  335.353428][ T7811] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  337.173706][ T7825] loop3: detected capacity change from 0 to 8
[  337.247965][ T7625] bridge0: port 1(bridge_slave_0) entered blocking state
[  337.248139][ T7625] bridge0: port 1(bridge_slave_0) entered disabled state
[  337.248256][ T7625] bridge_slave_0: entered allmulticast mode
[  337.250512][ T7625] bridge_slave_0: entered promiscuous mode
[  337.285194][ T7825] SQUASHFS error: lzo decompression failed, data probably corrupt
[  337.285231][ T7825] SQUASHFS error: Failed to read block 0x1c6: -5
[  337.285246][ T7825] SQUASHFS error: Unable to read metadata cache entry [1c4]
[  337.285261][ T7825] SQUASHFS error: Unable to read inode 0x11f
[  337.287622][ T7625] bridge0: port 2(bridge_slave_1) entered blocking state
[  337.290480][ T7625] bridge0: port 2(bridge_slave_1) entered disabled state
[  337.291182][ T7625] bridge_slave_1: entered allmulticast mode
[  337.347544][ T7625] bridge_slave_1: entered promiscuous mode
[  337.526774][ T7831] netlink: 'syz.2.382': attribute type 20 has an invalid length.
[  337.526906][ T7831] IPv6: NLM_F_CREATE should be specified when creating new route
[  338.687502][ T7839] loop3: detected capacity change from 0 to 64
[  338.892256][ T5646] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  338.898301][ T5646] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  338.922625][ T5646] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  338.930850][ T5646] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  338.946192][ T5646] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  339.144786][ T7625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  340.370344][ T7625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  340.800310][ T7625] team0: Port device team_slave_0 added
[  340.890968][   T50] bridge_slave_1: left allmulticast mode
[  340.891000][   T50] bridge_slave_1: left promiscuous mode
[  340.891245][   T50] bridge0: port 2(bridge_slave_1) entered disabled state
[  340.946354][   T50] bridge_slave_0: left allmulticast mode
[  340.946387][   T50] bridge_slave_0: left promiscuous mode
[  340.946621][   T50] bridge0: port 1(bridge_slave_0) entered disabled state
[  340.971622][ T7839] ------------[ cut here ]------------
[  340.971639][ T7839] !buffer_uptodate(bh)
[  340.971649][ T7839] WARNING: fs/buffer.c:991 at mark_buffer_dirty+0x299/0x410, CPU#0: syz.3.391/7839
[  340.992708][ T7839] Modules linked in:
[  340.996622][ T7839] CPU: 0 UID: 0 PID: 7839 Comm: syz.3.391 Not tainted syzkaller #0 PREEMPT(full) 
[  341.006123][ T7839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  341.017162][ T7839] RIP: 0010:mark_buffer_dirty+0x299/0x410
[  341.023721][ T7839] Code: 4c 89 f7 e8 29 01 d8 ff 49 8b 3e be 40 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 74 52 fb ff e8 cf f7 67 ff eb 8c e8 c8 f7 67 ff 90 <0f> 0b 90 e9 a5 fd ff ff e8 ba f7 67 ff 90 0f 0b 90 e9 cf fd ff ff
[  341.043594][ T7839] RSP: 0018:ffffc90004c4f828 EFLAGS: 00010283
[  341.049690][ T7839] RAX: ffffffff825fe438 RBX: ffff888051d289a0 RCX: 0000000000080000
[  341.057804][ T7839] RDX: ffffc90005cf9000 RSI: 00000000000011af RDI: 00000000000011b0
[  341.065912][ T7839] RBP: 0000000000000201 R08: ffff888051d289a7 R09: 1ffff1100a3a5134
[  341.073970][ T7839] R10: dffffc0000000000 R11: ffffed100a3a5135 R12: 0000000000000010
[  341.082019][ T7839] R13: ffff888051d289a0 R14: ffff888051d240e0 R15: dffffc0000000000
[  341.086969][ T4925] Bluetooth: hci6: command tx timeout
[  341.096098][ T7839] FS:  00007f97a20c26c0(0000) GS:ffff888124ccb000(0000) knlGS:0000000000000000
[  341.105166][ T7839] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  341.111824][ T7839] CR2: 00007f22454a7b70 CR3: 00000000566a8000 CR4: 0000000000350ef0
[  341.120643][ T7839] Call Trace:
[  341.124535][ T7839]  <TASK>
[  341.127476][ T7839]  bfs_get_block+0x5c6/0xb50
[  341.132285][ T7839]  __block_write_begin_int+0x6c2/0x1900
[  341.137873][ T7839]  ? filemap_add_folio+0x336/0x4e0
[  341.143387][ T7839]  ? __pfx_bfs_get_block+0x10/0x10
[  341.148528][ T7839]  ? __pfx___block_write_begin_int+0x10/0x10
[  341.154599][ T7839]  ? __pfx_bfs_get_block+0x10/0x10
[  341.159773][ T7839]  block_write_begin+0x8d/0x120
[  341.164804][ T7839]  ? bfs_write_begin+0x1e/0xd0
[  341.169645][ T7839]  bfs_write_begin+0x35/0xd0
[  341.174343][ T7839]  generic_perform_write+0x2d5/0x8f0
[  341.179673][ T7839]  ? __pfx_generic_perform_write+0x10/0x10
[  341.185619][ T7839]  ? srso_alias_return_thunk+0x5/0xfbef5
[  341.191291][ T7839]  ? file_update_time_flags+0x3ab/0x440
[  341.196993][ T7839]  ? srso_alias_return_thunk+0x5/0xfbef5
[  341.202746][ T7839]  ? __generic_file_write_iter+0xf9/0x230
[  341.208503][ T7839]  ? generic_file_write_iter+0x9a/0x330
[  341.214158][ T7839]  generic_file_write_iter+0xae/0x330
[  341.220161][ T7839]  vfs_write+0x612/0xba0
[  341.225120][ T7839]  ? __pfx_vfs_write+0x10/0x10
[  341.229937][ T7839]  ? __fget_files+0x2a/0x420
[  341.234648][ T7839]  ? srso_alias_return_thunk+0x5/0xfbef5
[  341.240313][ T7839]  ksys_write+0x150/0x270
[  341.244742][ T7839]  ? __pfx_ksys_write+0x10/0x10
[  341.249610][ T7839]  do_syscall_64+0x166/0x520
[  341.254317][ T7839]  ? trace_irq_disable+0x3b/0x140
[  341.259350][ T7839]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  341.265472][ T7839]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  341.271376][ T7839] RIP: 0033:0x7f97a119e159
[  341.275880][ T7839] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  341.295583][ T7839] RSP: 002b:00007f97a20c2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  341.304144][ T7839] RAX: ffffffffffffffda RBX: 00007f97a1425fa0 RCX: 00007f97a119e159
[  341.312174][ T7839] RDX: 000000000000fecc RSI: 00002000000008c0 RDI: 0000000000000007
[  341.321365][ T7839] RBP: 00007f97a123506b R08: 0000000000000000 R09: 0000000000000000
[  341.330002][ T7839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  341.338468][ T7839] R13: 00007f97a1426038 R14: 00007f97a1425fa0 R15: 00007ffe17825358
[  341.346504][ T7839]  </TASK>
[  341.349514][ T7839] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  341.356783][ T7839] CPU: 0 UID: 0 PID: 7839 Comm: syz.3.391 Not tainted syzkaller #0 PREEMPT(full) 
[  341.365968][ T7839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  341.376016][ T7839] Call Trace:
[  341.379286][ T7839]  <TASK>
[  341.382201][ T7839]  vpanic+0x56d/0xa60
[  341.386182][ T7839]  ? __pfx__printk+0x10/0x10
[  341.390763][ T7839]  ? __pfx_vpanic+0x10/0x10
[  341.395259][ T7839]  ? is_bpf_text_address+0x292/0x2b0
[  341.400538][ T7839]  ? is_bpf_text_address+0x26/0x2b0
[  341.405744][ T7839]  panic+0xc5/0xd0
[  341.409472][ T7839]  ? __pfx_panic+0x10/0x10
[  341.413902][ T7839]  __warn+0x315/0x4c0
[  341.417881][ T7839]  ? mark_buffer_dirty+0x299/0x410
[  341.422990][ T7839]  ? mark_buffer_dirty+0x299/0x410
[  341.428095][ T7839]  __report_bug+0x276/0x570
[  341.432593][ T7839]  ? filemap_get_entry+0xcd/0x3f0
[  341.437607][ T7839]  ? filemap_get_entry+0xcd/0x3f0
[  341.442620][ T7839]  ? mark_buffer_dirty+0x299/0x410
[  341.447721][ T7839]  ? __pfx___report_bug+0x10/0x10
[  341.452736][ T7839]  ? __pfx_folio_mark_accessed+0x10/0x10
[  341.458368][ T7839]  ? srso_alias_return_thunk+0x5/0xfbef5
[  341.464023][ T7839]  ? trace_kmem_cache_alloc+0x29/0xe0
[  341.469405][ T7839]  ? srso_alias_return_thunk+0x5/0xfbef5
[  341.475027][ T7839]  ? mark_buffer_dirty+0x299/0x410
[  341.480128][ T7839]  report_bug+0x16b/0x220
[  341.484454][ T7839]  ? mark_buffer_dirty+0x299/0x410
[  341.489554][ T7839]  ? mark_buffer_dirty+0x29b/0x410
[  341.494652][ T7839]  handle_bug+0x9c/0x200
[  341.498888][ T7839]  exc_invalid_op+0x1a/0x50
[  341.503389][ T7839]  asm_exc_invalid_op+0x1a/0x20
[  341.508240][ T7839] RIP: 0010:mark_buffer_dirty+0x299/0x410
[  341.513948][ T7839] Code: 4c 89 f7 e8 29 01 d8 ff 49 8b 3e be 40 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 74 52 fb ff e8 cf f7 67 ff eb 8c e8 c8 f7 67 ff 90 <0f> 0b 90 e9 a5 fd ff ff e8 ba f7 67 ff 90 0f 0b 90 e9 cf fd ff ff
[  341.533542][ T7839] RSP: 0018:ffffc90004c4f828 EFLAGS: 00010283
[  341.539616][ T7839] RAX: ffffffff825fe438 RBX: ffff888051d289a0 RCX: 0000000000080000
[  341.547575][ T7839] RDX: ffffc90005cf9000 RSI: 00000000000011af RDI: 00000000000011b0
[  341.555537][ T7839] RBP: 0000000000000201 R08: ffff888051d289a7 R09: 1ffff1100a3a5134
[  341.563521][ T7839] R10: dffffc0000000000 R11: ffffed100a3a5135 R12: 0000000000000010
[  341.571478][ T7839] R13: ffff888051d289a0 R14: ffff888051d240e0 R15: dffffc0000000000
[  341.579468][ T7839]  ? mark_buffer_dirty+0x298/0x410
[  341.584582][ T7839]  ? mark_buffer_dirty+0x298/0x410
[  341.589685][ T7839]  bfs_get_block+0x5c6/0xb50
[  341.594285][ T7839]  __block_write_begin_int+0x6c2/0x1900
[  341.599835][ T7839]  ? filemap_add_folio+0x336/0x4e0
[  341.604933][ T7839]  ? __pfx_bfs_get_block+0x10/0x10
[  341.610045][ T7839]  ? __pfx___block_write_begin_int+0x10/0x10
[  341.616029][ T7839]  ? __pfx_bfs_get_block+0x10/0x10
[  341.621141][ T7839]  block_write_begin+0x8d/0x120
[  341.625986][ T7839]  ? bfs_write_begin+0x1e/0xd0
[  341.630750][ T7839]  bfs_write_begin+0x35/0xd0
[  341.635339][ T7839]  generic_perform_write+0x2d5/0x8f0
[  341.640633][ T7839]  ? __pfx_generic_perform_write+0x10/0x10
[  341.646434][ T7839]  ? srso_alias_return_thunk+0x5/0xfbef5
[  341.652144][ T7839]  ? file_update_time_flags+0x3ab/0x440
[  341.657700][ T7839]  ? srso_alias_return_thunk+0x5/0xfbef5
[  341.663340][ T7839]  ? __generic_file_write_iter+0xf9/0x230
[  341.669052][ T7839]  ? generic_file_write_iter+0x9a/0x330
[  341.674596][ T7839]  generic_file_write_iter+0xae/0x330
[  341.679965][ T7839]  vfs_write+0x612/0xba0
[  341.684211][ T7839]  ? __pfx_vfs_write+0x10/0x10
[  341.688980][ T7839]  ? __fget_files+0x2a/0x420
[  341.693563][ T7839]  ? srso_alias_return_thunk+0x5/0xfbef5
[  341.699205][ T7839]  ksys_write+0x150/0x270
[  341.703538][ T7839]  ? __pfx_ksys_write+0x10/0x10
[  341.708394][ T7839]  do_syscall_64+0x166/0x520
[  341.712977][ T7839]  ? trace_irq_disable+0x3b/0x140
[  341.717984][ T7839]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  341.724039][ T7839]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  341.729925][ T7839] RIP: 0033:0x7f97a119e159
[  341.734347][ T7839] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  341.753947][ T7839] RSP: 002b:00007f97a20c2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  341.762358][ T7839] RAX: ffffffffffffffda RBX: 00007f97a1425fa0 RCX: 00007f97a119e159
[  341.770368][ T7839] RDX: 000000000000fecc RSI: 00002000000008c0 RDI: 0000000000000007
[  341.778323][ T7839] RBP: 00007f97a123506b R08: 0000000000000000 R09: 0000000000000000
[  341.786275][ T7839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  341.794229][ T7839] R13: 00007f97a1426038 R14: 00007f97a1425fa0 R15: 00007ffe17825358
[  341.802204][ T7839]  </TASK>
[  341.805436][ T7839] Kernel Offset: disabled
[  341.809748][ T7839] Rebooting in 86400 seconds..