last executing test programs:

6.26738513s ago: executing program 2 (id=673):
syz_mount_image$bcachefs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2800000, &(0x7f0000000100)=ANY=[@ANYRES16, @ANYRESHEX, @ANYRES16, @ANYRES32, @ANYRESOCT, @ANYRES16], 0xec, 0x5aa6, &(0x7f00000028c0)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0xa0, 0x0, 0x1, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x80011, 0x0, 0x1, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x4002, 0x0, 0x1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}]})
mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000040), 0x8, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0/file0'}}, {@workdir={'workdir', 0x3d, './file1'}}]})
syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file1\x00', 0x10004a0, 0x0, 0x1, 0x0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0)

5.262286582s ago: executing program 2 (id=686):
r0 = syz_io_uring_setup(0x49, &(0x7f0000000300)={0x0, 0x22cd, 0x40}, &(0x7f0000000100), &(0x7f0000000080))
io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x22, &(0x7f0000000000)={&(0x7f0000001000), 0x0, 0x3}, 0x1)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRESOCT=r1, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0)

5.193927861s ago: executing program 3 (id=689):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x0, 0x0})
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000180)='ext4_es_shrink_scan_exit\x00', r0}, 0x18)
prlimit64(0x0, 0xb, &(0x7f0000000140)={0x8, 0x7}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = getpid()
r6 = syz_open_dev$sndctrl(&(0x7f0000000240), 0x2, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000800)={{0x4, 0x0, 0x9, 0x8001, 'syz0\x00', 0xc22}, 0x2, 0x200, 0x9, r5, 0x0, 0x7fff, 'syz1\x00', 0x0})
openat$sndseq(0xffffffffffffff9c, 0x0, 0x102)
prlimit64(r5, 0x5, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r6, 0xc0405519, &(0x7f0000000bc0)={0x5, 0x4, 0x5, 0x7, 'syz1\x00', 0x1})
r7 = getpid()
sched_setscheduler(r7, 0x2, &(0x7f0000000040)=0x40007)
r8 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r9 = dup(r8)
write$UHID_INPUT(r9, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

4.291243629s ago: executing program 3 (id=692):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000e80)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0x4, 0x7, 0x6, 0x10001, 0x3, 0x3e, 0xce, 0x86, 0x40, 0x1cb, 0x4, 0xe, 0x38, 0x2, 0x0, 0x7, 0x4}, [{0x4, 0x76, 0x100, 0x9, 0x1, 0x4, 0x2, 0x8}, {0x7, 0x9e57, 0x401, 0x2, 0x101, 0x1, 0xa, 0xffffffffffffa07f}], "35a8d1f82e8bd26871a3f659010baeb4e29345803d8d4a78dd09bed57b5a08e0296bd2053743e59ea032e92c4a0b6e0f4d9823f8f5aabbc74f7f9d2325a140a3bab7ccd6814fc64e8ac1be44e3050eebcb18a2af4f7b0ce8f8ee1271df2abcdc9d674f628173dc0353324c7f5bce2cd17cd10ad7467b18d9494799d92907dfc6c65a80e5", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x934)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

4.178932053s ago: executing program 1 (id=696):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x32, 0x0, &(0x7f0000000400)=[@increfs], 0xfffffcb0, 0x0, 0x0})
r1 = dup3(0xffffffffffffffff, r0, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000640)={@fda={0x66646185, 0x2, 0x1, 0x14}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x29}, @fd}, &(0x7f0000000600)={0x0, 0x20, 0x48}}, 0x40}], 0x0, 0x0, 0x0})

4.122903163s ago: executing program 1 (id=697):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x40000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000600)={0x17}) (fail_nth: 6)

3.923502083s ago: executing program 4 (id=700):
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)

3.922557324s ago: executing program 4 (id=701):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x0, 0x0})
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
getpid()
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(0xffffffffffffffff, 0xc0405519, &(0x7f0000000bc0)={0x5, 0x4, 0x5, 0xe2, 'syz1\x00', 0x1})
r4 = getpid()
sched_setscheduler(r4, 0x2, 0x0)
r5 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r6 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_ext={0x1c, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xcf57, 0x0, 0x0, 0x0, 0x80000001}, [@call={0x85, 0x0, 0x0, 0x1f}]}, 0x0, 0x87, 0x0, 0x0, 0x40f00, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2549e, r0, 0x4, &(0x7f0000000540)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r5, r6], &(0x7f0000000580)=[{0x0, 0x5, 0xd, 0x7}, {0x2, 0x3, 0x2, 0xc}, {0x1, 0x3, 0x10, 0x4}, {0x2, 0x1, 0x5, 0x8}], 0x10, 0x1}, 0x94)

3.473665718s ago: executing program 0 (id=702):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x3, 0x490, &(0x7f0000000580)="$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")
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$inet6(0xa, 0x3, 0x9)
r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f00000000c0)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000140)=0x15)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000002c0)=0x7e)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000080)=0x1)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000440)=0x91)
sched_setscheduler(r2, 0x1, &(0x7f0000000180)=0x3)
mlockall(0x2)
shmget$private(0x0, 0x1000, 0x0, &(0x7f00008f0000/0x1000)=nil)
shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000)
shmctl$SHM_LOCK(0x0, 0xb)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r6 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil)
shmat(r6, &(0x7f0000ff1000/0x3000)=nil, 0x400c)
mremap(&(0x7f0000ff1000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil)

3.442224742s ago: executing program 3 (id=703):
r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_012={0x2, 0x2, 0x0, "c1a1"}, @main=@item_4={0x3, 0x0, 0x0, "5aa8257f"}, @main=@item_012={0x0, 0x0, 0x9}, @main=@item_4={0x3, 0x0, 0xb, "9e3ce079"}]}}, 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000140), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000000080)={0x2, 0x100, 0x20a6})
openat$hwrng(0xffffffffffffff9c, 0x0, 0x2, 0x0)

2.960580426s ago: executing program 4 (id=704):
r0 = socket$igmp6(0xa, 0x3, 0x3a)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="dd3c00000010000104fcffffffffdbdf250000200035d923de69bb", @ANYRES32=0x0, @ANYBLOB="03150000000000001c0012800b00010062726964676500000c0002800600090000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x41}, 0x0)
setsockopt$MRT6_ADD_MFC(r0, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x4e24, 0x101, @empty}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x899, 0x1]}}, 0x5c)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
socket$alg(0x26, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x80)
openat$smackfs_cipso(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/fs/smackfs/cipso2\x00', 0x2, 0x0)
mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000)

2.913079989s ago: executing program 1 (id=705):
syz_init_net_socket$rose(0xb, 0x5, 0x0)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = syz_io_uring_setup(0x3380, &(0x7f0000000180)={0x0, 0x0, 0x10100}, &(0x7f0000000380)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f0000000140)=ANY=[@ANYRES64=r3], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x12103, 0x1})
io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

2.912031499s ago: executing program 1 (id=706):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x3, 0x490, &(0x7f0000000580)="$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")
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$inet6(0xa, 0x3, 0x9)
r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f00000000c0)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000140)=0x15)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000002c0)=0x7e)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000080)=0x1)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000440)=0x91)
sched_setscheduler(r2, 0x1, &(0x7f0000000180)=0x3)
mlockall(0x2)
shmget$private(0x0, 0x1000, 0x0, &(0x7f00008f0000/0x1000)=nil)
shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000)
shmctl$SHM_LOCK(0x0, 0xb)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r6 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil)
shmat(r6, &(0x7f0000ff1000/0x3000)=nil, 0x400c)
mremap(&(0x7f0000ff1000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil)

2.13080759s ago: executing program 0 (id=707):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x12}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "fc0300", 0x8, 0x2c, 0x0, @local, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0xc3, 0x62}}}}}, 0x3e)

2.082961204s ago: executing program 3 (id=708):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601080000000000000000050000000900020073797a310000000005000100070000002c000780060004404e21000005000600e30000000c00018008000140850101010c000280"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80)

2.074324681s ago: executing program 3 (id=709):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xffffffffffffffff}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
madvise(&(0x7f0000519000/0x1000)=nil, 0x1000, 0x66)
r5 = syz_open_procfs(0x0, 0x0)
pread64(r5, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000)
r6 = add_key$keyring(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
getgroups(0x2, &(0x7f0000001080)=[0xee01, <r7=>0xffffffffffffffff])
keyctl$chown(0x4, r6, 0xee01, r7)
keyctl$KEYCTL_MOVE(0x3, r6, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r0, &(0x7f0000001480)="3b5250dd8df768c581177cc96346a125c5baecd7e46618851e723e8ef1628f8e5c9fff1954ad6617c17fd0658b4c494ab4b9c82de21662a0d7c3cafc01b397ad6c398c755561984e8ba92704585396a2101125bb2a4d000000611bc84796c8015747ffc90dcf9341cd76ab4a14b4973cd160e90aafad5742f47771132af6fdeea669adfd5eda144f72d4f76ac6", 0x8d, 0x20000080, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) (fail_nth: 6)

2.028287369s ago: executing program 4 (id=710):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x77, 0x4)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='cdg\x00', 0x3)
sendmmsg$inet(r0, &(0x7f0000003980)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="26510f6feb5ddb8bf2d5183f9d06ed816bf1b214faf1cb1f57b966fde39602089f3b16421d490b717e391c1b5473114af100fc8a886dc1bfd10e85f08d06d2959a3b83a2f23cfb393d50858a21528f755636f3c92891641ef29a689f23e531ca", 0x60}, {&(0x7f00000001c0)="a91548c190a8758392a88b06", 0xc}], 0x2}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000980)="97ef", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000b40)="9af9e7c3a62bee995791e76fd927d23f32fc74a2e9c3956acece512d8dfe2c6eb51928d50cf8c02a89aaa2d1bbd1378201eab8defcf299776d47142f5556c98bb6effd7f17b420e2206d2f", 0x4b}], 0x1}}], 0x3, 0x44000)

1.944193369s ago: executing program 1 (id=711):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xffffffffffffffff}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
madvise(&(0x7f0000519000/0x1000)=nil, 0x1000, 0x66)
r5 = syz_open_procfs(0x0, 0x0)
pread64(r5, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000)
r6 = add_key$keyring(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
getgroups(0x2, &(0x7f0000001080)=[0xee01, <r7=>0xffffffffffffffff])
keyctl$chown(0x4, r6, 0xee01, r7)
keyctl$KEYCTL_MOVE(0x3, r6, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r0, &(0x7f0000001480)="3b5250dd8df768c581177cc96346a125c5baecd7e46618851e723e8ef1628f8e5c9fff1954ad6617c17fd0658b4c494ab4b9c82de21662a0d7c3cafc01b397ad6c398c755561984e8ba92704585396a2101125bb2a4d000000611bc84796c8015747ffc90dcf9341cd76ab4a14b4973cd160e90aafad5742f47771132af6fdeea669adfd5eda144f72d4f76ac6", 0x8d, 0x20000080, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x20)

1.94368577s ago: executing program 2 (id=712):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000b5b30a40450ca86055b501220301090212ed000000000009"], 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})

1.916832941s ago: executing program 0 (id=713):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000e80)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0x4, 0x7, 0x6, 0x10001, 0x3, 0x3e, 0xce, 0x86, 0x40, 0x1cb, 0x4, 0xe, 0x38, 0x2, 0x0, 0x7, 0x4}, [{0x4, 0x76, 0x100, 0x9, 0x1, 0x4, 0x2, 0x8}, {0x7, 0x9e57, 0x401, 0x2, 0x101, 0x1, 0xa, 0xffffffffffffa07f}], "35a8d1f82e8bd26871a3f659010baeb4e29345803d8d4a78dd09bed57b5a08e0296bd2053743e59ea032e92c4a0b6e0f4d9823f8f5aabbc74f7f9d2325a140a3bab7ccd6814fc64e8ac1be44e3050eebcb18a2af4f7b0ce8f8ee1271df2abcdc9d674f628173dc0353324c7f5bce2cd17cd10ad7467b18d9494799d92907dfc6c65a80e5", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x934)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

1.901017215s ago: executing program 4 (id=714):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x3, 0x490, &(0x7f0000000580)="$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")
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$inet6(0xa, 0x3, 0x9)
r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f00000000c0)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000140)=0x15)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000002c0)=0x7e)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000080)=0x1)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000440)=0x91)
sched_setscheduler(r2, 0x1, &(0x7f0000000180)=0x3)
mlockall(0x2)
shmget$private(0x0, 0x1000, 0x0, &(0x7f00008f0000/0x1000)=nil)
shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000)
shmctl$SHM_LOCK(0x0, 0xb)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
r6 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil)
shmat(r6, &(0x7f0000ff1000/0x3000)=nil, 0x400c)
mremap(&(0x7f0000ff1000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil)

1.605405154s ago: executing program 0 (id=715):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x0, 0x0})
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
getpid()
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(0xffffffffffffffff, 0xc0405519, &(0x7f0000000bc0)={0x5, 0x4, 0x5, 0xe2, 'syz1\x00', 0x1})
r4 = getpid()
sched_setscheduler(r4, 0x2, 0x0)
openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_ext={0x1c, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xcf57, 0x0, 0x0, 0x0, 0x80000001}, [@call={0x85, 0x0, 0x0, 0x1f}]}, 0x0, 0x87, 0x0, 0x0, 0x40f00, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2549e, r0, 0x4, 0x0, &(0x7f0000000580)=[{0x0, 0x5, 0xd, 0x7}, {0x2, 0x3, 0x2, 0xc}, {0x1, 0x3, 0x10, 0x4}, {0x2, 0x1, 0x5, 0x8}], 0x10, 0x1}, 0x94)

1.110728239s ago: executing program 3 (id=716):
r0 = syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000240)='./file0\x00', 0x8c0, &(0x7f0000000100)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c696e74722c6e6f61636c2c001967b9b8a6cdd636d75428f2c5e8054d01858eef552755576e749526b36860cf2511040d1ce5a743ffd83d29d1ba3a54a59d8c7aa249f08d3c8c6d04ac105d67934db6190d59f2323b55a5a4"], 0x1, 0x4447, &(0x7f000000cd00)="$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")
symlinkat(&(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x91)
syz_emit_ethernet(0x7e, &(0x7f0000000280)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x8, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x89, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x34, 0x0, 0x1, 0x0, [{@empty, 0xfffffffe}, {@broadcast}, {@broadcast}, {@private}, {@multicast1}, {@multicast1}]}, @lsrr={0x83, 0xb, 0x0, [@dev={0xac, 0x14, 0x14, 0x43}, @loopback]}]}}}}}}}, 0x0)
faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x20, 0x100)

843.826503ms ago: executing program 1 (id=717):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x3, 0x490, &(0x7f0000000580)="$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")
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$inet6(0xa, 0x3, 0x9)
r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f00000000c0)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000140)=0x15)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000002c0)=0x7e)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000080)=0x1)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000440)=0x91)
sched_setscheduler(r2, 0x1, &(0x7f0000000180)=0x3)
mlockall(0x2)
shmget$private(0x0, 0x1000, 0x0, &(0x7f00008f0000/0x1000)=nil)
shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
r6 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil)
shmat(r6, &(0x7f0000ff1000/0x3000)=nil, 0x400c)
mremap(&(0x7f0000ff1000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil)

733.684383ms ago: executing program 0 (id=718):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x2e, 0x0, "8ddbb51a3cfd954e41e8ccb21f650fa6a867fb9bbcf0feeee4dc036d0675af58b39fa8d54ee8323507a61a95cf134ce8f605671338c7f8838a00bdfba71bc4b828c7de258b6b9ca1fc52bcc83e2a016a"}, 0xd8)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x1a103e43)
syz_emit_ethernet(0x4c, &(0x7f0000000140)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x16, 0x6, 0x0, @remote, @local, {[], {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x4, 0x0, 0xfffe}, {"2b14"}}}}}}}, 0x0)

715.792672ms ago: executing program 4 (id=719):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x3, 0x490, &(0x7f0000000580)="$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")
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$inet6(0xa, 0x3, 0x9)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0x15)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000002c0)=0x7e)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)=0x1)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000440)=0x91)
sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x3)
mlockall(0x2)
shmget$private(0x0, 0x1000, 0x0, &(0x7f00008f0000/0x1000)=nil)
shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000)
shmctl$SHM_LOCK(0x0, 0xb)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
r5 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil)
shmat(r5, &(0x7f0000ff1000/0x3000)=nil, 0x400c)
mremap(&(0x7f0000ff1000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil)

678.963316ms ago: executing program 0 (id=720):
r0 = socket$igmp6(0xa, 0x3, 0x3a)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="dd3c00000010000104fcffffffffdbdf250000200035d923de69bb", @ANYRES32=0x0, @ANYBLOB="03150000000000001c0012800b00010062726964676500000c0002800600090000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x41}, 0x0)
setsockopt$MRT6_ADD_MFC(r0, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x4e24, 0x101, @empty}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x899, 0x1]}}, 0x5c)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
socket$kcm(0x2, 0xa, 0x2)
write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef)
socket$alg(0x26, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x80)
openat$smackfs_cipso(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/fs/smackfs/cipso2\x00', 0x2, 0x0)
mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000)

635.009114ms ago: executing program 2 (id=721):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000000040a03f0ffffffffffffff000200000809000100"], 0x2c}, 0x1, 0x0, 0x0, 0x48840}, 0x0)

221.678891ms ago: executing program 2 (id=722):
r0 = io_uring_setup(0xf08, &(0x7f0000000780)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf0})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000000c000/0x1000)=nil, &(0x7f000001f000/0x1000)=nil, &(0x7f0000015000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000000c000/0x4000)=nil, &(0x7f000001d000/0x3000)=nil, &(0x7f0000012000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000a280)="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", 0x2000, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0xfff1}, {0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000080)
io_uring_register$IORING_REGISTER_FILES(r0, 0x20, &(0x7f0000000000)=[r0], 0x1)
syz_emit_ethernet(0x9a, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x64, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x19, 0x2, 0x0, 0x0, 0x0, {[@generic={0x13, 0xc, "dc790adb79b648fa01e8"}, @sack={0x5, 0xe, [0x7, 0x7, 0x1]}, @mptcp=@remove_addr={0x1e, 0x22, 0x5, 0x0, "62c2f463ba57ef1d4b08ed97f7769056dc08777d9b19e8a2a44a86a5a4377d"}, @md5sig={0x13, 0x12, "c17f606abad57de40134d3d735eb1d8d"}]}}}}}}}}, 0x0)

0s ago: executing program 2 (id=723):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_REG_RULES={0x4}]}, 0x20}, 0x1, 0x0, 0x3000000000000, 0x2000c000}, 0x0)

kernel console output (not intermixed with test programs):

handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   28.648283][ T6558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   28.648905][ T6558] batman_adv: batadv0: Adding interface: batadv_slave_1
[   28.648913][ T6558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   28.648922][ T6558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   28.733193][ T6558] hsr_slave_0: entered promiscuous mode
[   28.733538][ T6558] hsr_slave_1: entered promiscuous mode
[   28.733720][ T6558] debugfs: 'hsr0' already exists in 'hsr'
[   28.733730][ T6558] Cannot create hsr debugfs directory
[   28.778185][ T6549] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   28.781201][ T6549] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   28.783646][ T6549] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   28.791590][ T6549] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   28.814555][ T6549] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.814604][ T6549] bridge0: port 2(bridge_slave_1) entered forwarding state
[   28.814792][ T6549] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.814822][ T6549] bridge0: port 1(bridge_slave_0) entered forwarding state
[   28.820742][ T6556] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   28.822831][ T6556] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   28.827109][ T6556] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   28.838017][ T6556] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   28.856389][ T6549] 8021q: adding VLAN 0 to HW filter on device bond0
[   28.861254][ T6550] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   28.864640][ T6550] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   28.870182][ T6556] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.870230][ T6556] bridge0: port 2(bridge_slave_1) entered forwarding state
[   28.870303][ T6556] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.870335][ T6556] bridge0: port 1(bridge_slave_0) entered forwarding state
[   28.870862][ T6550] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   28.872325][ T6550] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   28.884863][ T6549] 8021q: adding VLAN 0 to HW filter on device team0
[   28.894759][   T41] bridge0: port 1(bridge_slave_0) entered disabled state
[   28.896580][   T41] bridge0: port 1(bridge_slave_0) entered disabled state
[   28.898484][   T41] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.900024][   T41] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.932071][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.932116][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   28.936497][   T42] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.936539][   T42] bridge0: port 2(bridge_slave_1) entered forwarding state
[   28.944659][ T6556] 8021q: adding VLAN 0 to HW filter on device bond0
[   28.946883][ T6550] 8021q: adding VLAN 0 to HW filter on device bond0
[   28.950922][ T6565] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   28.953088][ T6565] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   28.956351][ T6565] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   28.967154][ T6565] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   28.976590][ T6556] 8021q: adding VLAN 0 to HW filter on device team0
[   28.980632][ T3926] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.980672][ T3926] bridge0: port 1(bridge_slave_0) entered forwarding state
[   28.992031][ T6550] 8021q: adding VLAN 0 to HW filter on device team0
[   28.994243][   T42] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.994281][   T42] bridge0: port 1(bridge_slave_0) entered forwarding state
[   29.003106][ T6549] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   29.005946][   T42] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.005998][   T42] bridge0: port 2(bridge_slave_1) entered forwarding state
[   29.039289][ T3821] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.039334][ T3821] bridge0: port 2(bridge_slave_1) entered forwarding state
[   29.048841][ T6565] 8021q: adding VLAN 0 to HW filter on device bond0
[   29.052496][ T6558] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   29.064541][ T6550] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   29.064580][ T6550] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   29.067214][ T6565] 8021q: adding VLAN 0 to HW filter on device team0
[   29.074039][ T6558] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   29.082766][   T42] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.082806][   T42] bridge0: port 1(bridge_slave_0) entered forwarding state
[   29.088258][ T6558] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   29.095960][ T6558] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   29.105799][ T6549] 8021q: adding VLAN 0 to HW filter on device batadv0
[   29.112423][ T3926] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.112464][ T3926] bridge0: port 2(bridge_slave_1) entered forwarding state
[   29.159841][ T6556] 8021q: adding VLAN 0 to HW filter on device batadv0
[   29.165152][ T6549] veth0_vlan: entered promiscuous mode
[   29.182344][ T6558] 8021q: adding VLAN 0 to HW filter on device bond0
[   29.186720][ T6549] veth1_vlan: entered promiscuous mode
[   29.195163][ T6558] 8021q: adding VLAN 0 to HW filter on device team0
[   29.203105][ T6565] 8021q: adding VLAN 0 to HW filter on device batadv0
[   29.206062][ T3821] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.206103][ T3821] bridge0: port 1(bridge_slave_0) entered forwarding state
[   29.206927][ T3821] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.206950][ T3821] bridge0: port 2(bridge_slave_1) entered forwarding state
[   29.216845][ T6550] 8021q: adding VLAN 0 to HW filter on device batadv0
[   29.226672][ T6556] veth0_vlan: entered promiscuous mode
[   29.232868][ T6549] veth0_macvtap: entered promiscuous mode
[   29.242885][ T6549] veth1_macvtap: entered promiscuous mode
[   29.250757][ T6556] veth1_vlan: entered promiscuous mode
[   29.265369][ T6550] veth0_vlan: entered promiscuous mode
[   29.266691][ T6556] veth0_macvtap: entered promiscuous mode
[   29.272934][ T6550] veth1_vlan: entered promiscuous mode
[   29.278787][ T6556] veth1_macvtap: entered promiscuous mode
[   29.281865][ T6565] veth0_vlan: entered promiscuous mode
[   29.283320][ T6565] veth1_vlan: entered promiscuous mode
[   29.290707][ T6549] batman_adv: batadv0: Interface activated: batadv_slave_0
[   29.297165][ T6549] batman_adv: batadv0: Interface activated: batadv_slave_1
[   29.301039][ T6556] batman_adv: batadv0: Interface activated: batadv_slave_0
[   29.306347][ T6550] veth0_macvtap: entered promiscuous mode
[   29.312991][ T3778] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   29.313137][ T3778] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   29.313196][ T3778] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   29.313267][ T3778] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   29.321758][ T6556] batman_adv: batadv0: Interface activated: batadv_slave_1
[   29.324371][ T6550] veth1_macvtap: entered promiscuous mode
[   29.331942][ T6558] 8021q: adding VLAN 0 to HW filter on device batadv0
[   29.338196][ T6550] batman_adv: batadv0: Interface activated: batadv_slave_0
[   29.340894][ T6550] batman_adv: batadv0: Interface activated: batadv_slave_1
[   29.352954][ T3821] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   29.353158][ T3821] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   29.353175][ T3821] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   29.353195][ T3821] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   29.353211][ T3821] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   29.353225][ T3821] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   29.353237][ T3821] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   29.353249][ T3821] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   29.381517][ T6565] veth0_macvtap: entered promiscuous mode
[   29.383332][ T6565] veth1_macvtap: entered promiscuous mode
[   29.397107][ T6565] batman_adv: batadv0: Interface activated: batadv_slave_0
[   29.413111][   T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   29.413144][   T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   29.420933][ T6565] batman_adv: batadv0: Interface activated: batadv_slave_1
[   29.429550][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   29.429582][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   29.429683][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   29.430646][ T3821] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   29.430756][ T3821] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   29.430866][ T3821] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   29.464534][ T3821] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   29.464569][ T3821] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   29.473499][ T3821] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   29.473529][ T3821] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   29.484403][ T3821] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   29.484431][ T3821] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   29.499437][ T6558] veth0_vlan: entered promiscuous mode
[   29.509382][ T6558] veth1_vlan: entered promiscuous mode
[   29.511998][   T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   29.512028][   T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   29.523480][ T6558] veth0_macvtap: entered promiscuous mode
[   29.531134][ T3821] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   29.531159][ T3821] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   29.535987][ T6558] veth1_macvtap: entered promiscuous mode
[   29.542127][ T6558] batman_adv: batadv0: Interface activated: batadv_slave_0
[   29.544549][ T6556] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   29.552610][ T6558] batman_adv: batadv0: Interface activated: batadv_slave_1
[   29.567263][ T3821] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   29.567309][ T3821] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   29.567327][ T3821] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   29.567340][ T3821] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   29.596780][ T3926] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   29.596809][ T3926] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   29.679726][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   29.679756][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   29.721772][ T3926] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   29.721805][ T3926] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   29.723851][ T6683] loop3: detected capacity change from 0 to 512
[   29.735324][ T6682] loop0: detected capacity change from 0 to 1024
[   29.764961][ T6682] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   29.780239][ T6683] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   29.805996][ T6549] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   29.834117][ T6556] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   29.997085][ T6713] loop3: detected capacity change from 0 to 32768
[   29.997698][ T6713] =======================================================
[   29.997698][ T6713] WARNING: The mand mount option has been deprecated and
[   29.997698][ T6713]          and is ignored by this kernel. Remove the mand
[   29.997698][ T6713]          option from the mount to silence this warning.
[   29.997698][ T6713] =======================================================
[   30.021459][ T6713] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[   30.083585][ T6723] loop1: detected capacity change from 0 to 1024
[   30.098265][ T6566] Bluetooth: hci0: command tx timeout
[   30.098987][ T6554] Bluetooth: hci1: command tx timeout
[   30.099111][ T6554] Bluetooth: hci3: command tx timeout
[   30.099158][ T6554] Bluetooth: hci2: command tx timeout
[   30.102018][   T52] Bluetooth: hci4: command tx timeout
[   30.108102][ T6723] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   30.114097][ T6727] warning: `syz.4.27' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   30.136117][ T6556] ocfs2: Unmounting device (7,3) on (node local)
[   30.187231][ T6565] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   30.211918][ T6737] loop3: detected capacity change from 0 to 512
[   30.229333][ T6741] loop1: detected capacity change from 0 to 512
[   30.254066][ T6741] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.32: corrupted in-inode xattr: invalid ea_ino
[   30.255292][ T6737] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   30.259481][ T6741] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.32: couldn't read orphan inode 15 (err -117)
[   30.267143][ T6741] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   30.282022][ T6556] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   30.331777][ T6753] loop2: detected capacity change from 0 to 256
[   30.357872][ T6753] FAT-fs (loop2): Directory bread(block 64) failed
[   30.357915][ T6753] FAT-fs (loop2): Directory bread(block 65) failed
[   30.357942][ T6753] FAT-fs (loop2): Directory bread(block 66) failed
[   30.357955][ T6753] FAT-fs (loop2): Directory bread(block 67) failed
[   30.357979][ T6753] FAT-fs (loop2): Directory bread(block 68) failed
[   30.357990][ T6753] FAT-fs (loop2): Directory bread(block 69) failed
[   30.358011][ T6753] FAT-fs (loop2): Directory bread(block 70) failed
[   30.358021][ T6753] FAT-fs (loop2): Directory bread(block 71) failed
[   30.358041][ T6753] FAT-fs (loop2): Directory bread(block 72) failed
[   30.358051][ T6753] FAT-fs (loop2): Directory bread(block 73) failed
[   30.434672][ T6760] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   30.435092][ T6760] netlink: 4 bytes leftover after parsing attributes in process `syz.3.40'.
[   30.435185][ T6760] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   30.453754][ T6565] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   30.479429][ T6765] loop4: detected capacity change from 0 to 1024
[   30.487069][ T6760] batman_adv: batadv0: Removing interface: batadv_slave_1
[   30.500884][ T6765] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   30.534908][ T6558] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   30.559289][ T6774] loop2: detected capacity change from 0 to 512
[   30.603333][ T6774] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   30.628031][ T6550] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   30.658988][ T3778] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.673968][ T6786] loop4: detected capacity change from 0 to 2048
[   30.680802][ T6786] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[   30.682380][ T6790] netlink: 'syz.2.51': attribute type 1 has an invalid length.
[   30.682398][ T6790] netlink: 244 bytes leftover after parsing attributes in process `syz.2.51'.
[   30.685605][ T6786] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[   30.689396][ T6786] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   30.736715][ T6794] loop2: detected capacity change from 0 to 256
[   30.755531][ T6796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   30.755720][ T6796] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   30.779458][ T6794] FAT-fs (loop2): Directory bread(block 64) failed
[   30.779491][ T6794] FAT-fs (loop2): Directory bread(block 65) failed
[   30.779516][ T6794] FAT-fs (loop2): Directory bread(block 66) failed
[   30.779528][ T6794] FAT-fs (loop2): Directory bread(block 67) failed
[   30.779549][ T6794] FAT-fs (loop2): Directory bread(block 68) failed
[   30.779560][ T6794] FAT-fs (loop2): Directory bread(block 69) failed
[   30.779579][ T6794] FAT-fs (loop2): Directory bread(block 70) failed
[   30.779589][ T6794] FAT-fs (loop2): Directory bread(block 71) failed
[   30.779610][ T6794] FAT-fs (loop2): Directory bread(block 72) failed
[   30.779619][ T6794] FAT-fs (loop2): Directory bread(block 73) failed
[   30.806887][ T6800] loop4: detected capacity change from 0 to 1024
[   30.821472][ T6800] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   30.883698][ T6558] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   31.035563][ T6818] loop4: detected capacity change from 0 to 32768
[   31.040271][ T6818] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.66 (6818)
[   31.048803][ T6818] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   31.048876][ T6818] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm
[   31.048902][ T6818] BTRFS info (device loop4): using free-space-tree
[   31.137699][ T6558] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   31.292692][ T6846] loop1: detected capacity change from 0 to 256
[   31.306587][ T6846] FAT-fs (loop1): Directory bread(block 64) failed
[   31.311039][ T6846] FAT-fs (loop1): Directory bread(block 65) failed
[   31.311125][ T6846] FAT-fs (loop1): Directory bread(block 66) failed
[   31.311145][ T6846] FAT-fs (loop1): Directory bread(block 67) failed
[   31.311181][ T6846] FAT-fs (loop1): Directory bread(block 68) failed
[   31.311199][ T6846] FAT-fs (loop1): Directory bread(block 69) failed
[   31.311230][ T6846] FAT-fs (loop1): Directory bread(block 70) failed
[   31.311246][ T6846] FAT-fs (loop1): Directory bread(block 71) failed
[   31.311274][ T6846] FAT-fs (loop1): Directory bread(block 72) failed
[   31.311288][ T6846] FAT-fs (loop1): Directory bread(block 73) failed
[   31.326422][ T6844] loop4: detected capacity change from 0 to 32768
[   31.351639][ T6844] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   31.386678][ T6856] loop1: detected capacity change from 0 to 1024
[   31.392073][ T6844] XFS (loop4): Ending clean mount
[   31.394618][ T6844] XFS (loop4): Quotacheck needed: Please wait.
[   31.404541][ T6844] XFS (loop4): Quotacheck: Done.
[   31.412826][ T6856] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   31.424954][ T6558] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   31.438938][ T6565] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   31.464245][ T6860] Zero length message leads to an empty skb
[   31.534720][ T6870] syz.4.77 uses obsolete (PF_INET,SOCK_PACKET)
[   31.586750][ T6878] loop1: detected capacity change from 0 to 256
[   31.599749][ T6878] FAT-fs (loop1): Directory bread(block 64) failed
[   31.599781][ T6878] FAT-fs (loop1): Directory bread(block 65) failed
[   31.599807][ T6878] FAT-fs (loop1): Directory bread(block 66) failed
[   31.599818][ T6878] FAT-fs (loop1): Directory bread(block 67) failed
[   31.599839][ T6878] FAT-fs (loop1): Directory bread(block 68) failed
[   31.599849][ T6878] FAT-fs (loop1): Directory bread(block 69) failed
[   31.599870][ T6878] FAT-fs (loop1): Directory bread(block 70) failed
[   31.599880][ T6878] FAT-fs (loop1): Directory bread(block 71) failed
[   31.599907][ T6878] FAT-fs (loop1): Directory bread(block 72) failed
[   31.599917][ T6878] FAT-fs (loop1): Directory bread(block 73) failed
[   31.722963][ T6894] vcan0: entered allmulticast mode
[   31.774238][ T6900] loop1: detected capacity change from 0 to 512
[   31.818622][ T6898] loop3: detected capacity change from 0 to 32768
[   31.822900][ T6898] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[   31.824631][ T6900] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   31.859785][ T6556] ocfs2: Unmounting device (7,3) on (node local)
[   31.876283][ T6565] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   32.070312][ T6920] loop3: detected capacity change from 0 to 65536
[   32.073936][ T6927] loop1: detected capacity change from 0 to 32768
[   32.106582][ T6935] loop2: detected capacity change from 0 to 512
[   32.124952][ T6920] XFS (loop3): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[   32.148315][ T6935] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   32.149956][ T6920] XFS (loop3): Ending clean mount
[   32.151378][ T6920] XFS (loop3): Quotacheck needed: Please wait.
[   32.197551][   T52] Bluetooth: hci2: command tx timeout
[   32.197584][   T52] Bluetooth: hci3: command tx timeout
[   32.197611][   T52] Bluetooth: hci1: command tx timeout
[   32.197628][   T52] Bluetooth: hci4: command tx timeout
[   32.197644][   T52] Bluetooth: hci0: command tx timeout
[   32.205215][ T6920] XFS (loop3): Quotacheck: Done.
[   32.211554][ T6943] loop0: detected capacity change from 0 to 32768
[   32.234376][ T6927] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[   32.234403][ T6927]   allowing incompatible features above 0.0: (unknown version)
[   32.234423][ T6927]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[   32.234440][ T6927] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[   32.234471][ T6927] bcachefs (loop1): initializing new filesystem
[   32.236155][ T6927] bcachefs (loop1): going read-write
[   32.244472][ T6943] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   32.264629][ T6550] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   32.267898][ T6927] bcachefs (loop1): marking superblocks
[   32.270727][ T6927] bcachefs (loop1): initializing freespace
[   32.272260][ T6927] bcachefs (loop1): done initializing freespace
[   32.272857][ T6927] bcachefs (loop1): reading snapshots table
[   32.272886][ T6927] bcachefs (loop1): reading snapshots done
[   32.284954][ T6927] bcachefs (loop1): done starting filesystem
[   32.300051][ T6549] ocfs2: Unmounting device (7,0) on (node local)
[   32.316702][ T6556] XFS (loop3): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[   32.326093][ T6958] loop4: detected capacity change from 0 to 256
[   32.327616][ T6958] exfat: Deprecated parameter 'utf8'
[   32.328568][ T6958] exfat: Deprecated parameter 'utf8'
[   32.329467][ T6958] exfat: Deprecated parameter 'utf8'
[   32.348755][ T6958] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x743489c8, utbl_chksum : 0xe619d30d)
[   32.354115][ T6565] bcachefs (loop1): shutting down
[   32.354163][ T6565] bcachefs (loop1): going read-only
[   32.354244][ T6565] bcachefs (loop1): finished waiting for writes to stop
[   32.393530][ T6565] bcachefs (loop1): flushing journal and stopping allocators, journal seq 3
[   32.443603][ T6565] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 3
[   32.447651][ T6565] bcachefs (loop1): clean shutdown complete, journal seq 4
[   32.448099][ T6565] bcachefs (loop1): marking filesystem clean
[   32.467286][ T6975] loop2: detected capacity change from 0 to 256
[   32.475984][ T6565] bcachefs (loop1): shutdown complete
[   32.523863][ T6981] loop0: detected capacity change from 0 to 512
[   32.526321][ T6975] FAT-fs (loop2): Directory bread(block 64) failed
[   32.526357][ T6975] FAT-fs (loop2): Directory bread(block 65) failed
[   32.526386][ T6975] FAT-fs (loop2): Directory bread(block 66) failed
[   32.526401][ T6975] FAT-fs (loop2): Directory bread(block 67) failed
[   32.526426][ T6975] FAT-fs (loop2): Directory bread(block 68) failed
[   32.526439][ T6975] FAT-fs (loop2): Directory bread(block 69) failed
[   32.526462][ T6975] FAT-fs (loop2): Directory bread(block 70) failed
[   32.526475][ T6975] FAT-fs (loop2): Directory bread(block 71) failed
[   32.526497][ T6975] FAT-fs (loop2): Directory bread(block 72) failed
[   32.526509][ T6975] FAT-fs (loop2): Directory bread(block 73) failed
[   32.552165][ T6983] netlink: 'syz.3.111': attribute type 1 has an invalid length.
[   32.575429][ T6981] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   32.610431][ T6549] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   32.772416][ T7006] loop2: detected capacity change from 0 to 1024
[   32.790508][ T7002] loop3: detected capacity change from 0 to 32768
[   32.817271][ T7002] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[   32.826107][ T7006] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   32.842871][ T6556] ocfs2: Unmounting device (7,3) on (node local)
[   32.862214][ T6550] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   32.893050][ T7018] loop3: detected capacity change from 0 to 64
[   32.916513][ T7020] loop2: detected capacity change from 0 to 512
[   32.944731][ T7020] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   32.959507][ T6550] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   33.022266][ T7033] loop2: detected capacity change from 0 to 4096
[   33.024553][ T7033] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[   33.036391][ T7033] ntfs3(loop2): ino=19, mi_enum_attr
[   33.036476][ T7033] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[   33.080509][   T11] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   33.155214][ T7039] loop3: detected capacity change from 0 to 32768
[   33.181495][ T7039] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[   33.191023][ T7049] loop4: detected capacity change from 0 to 512
[   33.212950][ T7049] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   33.231888][   T11] usb 1-1: config index 0 descriptor too short (expected 60690, got 18)
[   33.233443][   T11] usb 1-1: config 0 has an invalid interface number: 0 but max is -1
[   33.234747][   T11] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0
[   33.238971][   T11] usb 1-1: New USB device found, idVendor=0c45, idProduct=60a8, bcdDevice=b5.55
[   33.240522][   T11] usb 1-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3
[   33.241803][   T11] usb 1-1: Product: syz
[   33.241842][ T6558] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   33.244285][   T11] usb 1-1: Manufacturer: syz
[   33.245169][   T11] usb 1-1: SerialNumber: syz
[   33.246693][ T6556] ocfs2: Unmounting device (7,3) on (node local)
[   33.257295][   T11] usb 1-1: config 0 descriptor??
[   33.270419][   T11] gspca_main: sonixb-2.14.0 probing 0c45:60a8
[   33.306699][ T7063] loop2: detected capacity change from 0 to 128
[   33.442337][ T7077] loop2: detected capacity change from 0 to 1024
[   33.506312][   T11] sonixb 1-1:0.0: Error reading register 00: -71
[   33.515777][   T11] usb 1-1: USB disconnect, device number 2
[   33.566924][ T7079] loop2: detected capacity change from 0 to 512
[   33.576703][ T7075] loop4: detected capacity change from 0 to 65536
[   33.605710][ T7079] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   33.637724][ T7075] XFS (loop4): DAX unsupported by block device. Turning off DAX.
[   33.638065][ T7075] XFS (loop4): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[   33.660269][ T6550] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   33.671564][ T7075] XFS (loop4): Ending clean mount
[   33.672123][ T7075] XFS (loop4): Quotacheck needed: Please wait.
[   33.680942][ T7075] XFS (loop4): Quotacheck: Done.
[   33.729899][ T6558] XFS (loop4): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[   33.778876][ T7097] loop2: detected capacity change from 0 to 8
[   33.784087][ T6543] Dev loop2: unable to read RDB block 8
[   33.784131][ T6543]  loop2: unable to read partition table
[   33.784197][ T6543] loop2: partition table beyond EOD, truncated
[   33.795603][ T7097] Dev loop2: unable to read RDB block 8
[   33.795634][ T7097]  loop2: unable to read partition table
[   33.795706][ T7097] loop2: partition table beyond EOD, truncated
[   33.795723][ T7097] loop_reread_partitions: partition scan of loop2 (þ被xü^>Ñà– ) failed (rc=-5)
[   33.805648][ T7099] pim6reg: entered allmulticast mode
[   33.931041][ T7107] loop1: detected capacity change from 0 to 32768
[   33.942691][ T7110] loop3: detected capacity change from 0 to 2048
[   33.993005][ T7110] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   33.998481][ T7128] loop2: detected capacity change from 0 to 128
[   34.002246][ T7110] EXT4-fs error (device loop3): __ext4_new_inode:1073: comm syz.3.171: reserved inode found cleared - inode=1
[   34.008850][ T7110] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem
[   34.029636][ T7107] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,str_hash=crc32c,noacl,usrquota,grpquota,nojournal_transaction_names,allocator_stuck_timeout=256
[   34.030480][ T7107]   allowing incompatible features above 0.0: (unknown version)
[   34.030485][ T7107]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[   34.030495][ T7107] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[   34.030512][ T7107] bcachefs (loop1): initializing new filesystem
[   34.032004][ T7107] bcachefs (loop1): going read-write
[   34.042420][ T7128] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002]
[   34.042497][ T7128] System zones: 1-3, 19-19, 35-36
[   34.043086][ T7128] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[   34.063338][ T7128] EXT4-fs error (device loop2): ext4_validate_block_bitmap:423: comm syz.2.175: bg 0: bad block bitmap checksum
[   34.069266][ T7107] bcachefs (loop1): marking superblocks
[   34.071725][ T7107] bcachefs (loop1): initializing freespace
[   34.071887][ T6556] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   34.072469][ T7107] bcachefs (loop1): done initializing freespace
[   34.072929][ T7107] bcachefs (loop1): reading snapshots table
[   34.072947][ T7107] bcachefs (loop1): reading snapshots done
[   34.097275][ T7107] bcachefs (loop1): done starting filesystem
[   34.114678][ T6550] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   34.138798][ T6565] bcachefs (loop1): shutting down
[   34.138828][ T6565] bcachefs (loop1): going read-only
[   34.138855][ T6565] bcachefs (loop1): finished waiting for writes to stop
[   34.167727][ T7136] loop0: detected capacity change from 0 to 32768
[   34.177072][ T7136] ERROR: (device loop0): dbAlloc: the hint is outside the map
[   34.177072][ T7136] 
[   34.179901][ T6565] bcachefs (loop1): flushing journal and stopping allocators, journal seq 3
[   34.184810][ T7136] ERROR: (device loop0): remounting filesystem as read-only
[   34.186022][ T7127] loop4: detected capacity change from 0 to 32768
[   34.203871][ T7139] loop2: detected capacity change from 0 to 1024
[   34.205976][ T7127] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[   34.234947][ T6565] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 3
[   34.239964][ T6565] bcachefs (loop1): clean shutdown complete, journal seq 4
[   34.240401][ T6565] bcachefs (loop1): marking filesystem clean
[   34.267495][ T6566] Bluetooth: hci0: command tx timeout
[   34.267533][ T6566] Bluetooth: hci4: command tx timeout
[   34.267557][ T6566] Bluetooth: hci1: command tx timeout
[   34.267574][ T6566] Bluetooth: hci3: command tx timeout
[   34.267590][ T6566] Bluetooth: hci2: command tx timeout
[   34.278800][ T6558] ocfs2: Unmounting device (7,4) on (node local)
[   34.348272][ T6565] bcachefs (loop1): shutdown complete
[   34.441430][ T7160] netlink: 4 bytes leftover after parsing attributes in process `syz.4.187'.
[   34.894906][ T7172] loop4: detected capacity change from 0 to 32768
[   34.910952][ T7172] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[   34.926096][ T6558] ocfs2: Unmounting device (7,4) on (node local)
[   35.116318][ T7188] loop4: detected capacity change from 0 to 256
[   35.118652][ T7188] vfat: Bad value for 'utf8'
[   35.125217][ T7188] netlink: 4 bytes leftover after parsing attributes in process `syz.4.201'.
[   35.261764][ T7201] geneve2: entered promiscuous mode
[   35.261794][ T7201] geneve2: entered allmulticast mode
[   35.308845][ T7208] loop3: detected capacity change from 0 to 512
[   35.330919][ T7208] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   35.374603][ T7198] loop4: detected capacity change from 0 to 32768
[   35.422263][ T7198] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[   35.451042][ T6558] ocfs2: Unmounting device (7,4) on (node local)
[   35.796997][ T7230] loop4: detected capacity change from 0 to 256
[   35.797368][ T7230] vfat: Bad value for 'utf8'
[   35.806046][ T7230] netlink: 4 bytes leftover after parsing attributes in process `syz.4.218'.
[   36.170474][ T6556] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.337547][   T52] Bluetooth: hci2: command tx timeout
[   36.337562][ T6566] Bluetooth: hci3: command tx timeout
[   36.337591][   T52] Bluetooth: hci1: command tx timeout
[   36.337593][ T6566] Bluetooth: hci4: command tx timeout
[   36.337608][ T6566] Bluetooth: hci0: command tx timeout
[   36.352485][ T7246] loop2: detected capacity change from 0 to 32768
[   36.381459][ T7246] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   36.413199][ T6550] ocfs2: Unmounting device (7,2) on (node local)
[   36.443124][ T7256] random: crng reseeded on system resumption
[   36.977098][ T7267] loop0: detected capacity change from 0 to 32768
[   37.013594][ T7267] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   37.044948][ T6549] ocfs2: Unmounting device (7,0) on (node local)
[   37.306442][ T7284] binder: 7283:7284 ioctl c0306201 0 returned -14
[   37.312721][ T7284] binder: 7283:7284 got transaction to invalid handle, 1
[   37.314255][ T7284] binder: 7283:7284 cannot find target node
[   37.315957][ T7284] binder: 7283:7284 transaction async to 0:0 failed 4/29201/-22, code 0 size 72-24 line 3151
[   37.321443][ T7284] binder: 7283:7284 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[   37.323774][ T6611] binder: undelivered TRANSACTION_ERROR: 29201
[   37.393649][ T7282] loop4: detected capacity change from 0 to 65536
[   37.426807][ T7282] XFS (loop4): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[   37.444849][ T7282] XFS (loop4): Ending clean mount
[   37.446430][ T7282] XFS (loop4): Quotacheck needed: Please wait.
[   37.453903][ T7282] XFS (loop4): Quotacheck: Done.
[   37.454777][ T7282] XFS (loop4): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[   37.612341][ T7303] loop3: detected capacity change from 0 to 32768
[   37.636316][ T7303] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[   37.665050][ T6556] ocfs2: Unmounting device (7,3) on (node local)
[   37.989481][ T7316] netlink: 24 bytes leftover after parsing attributes in process `syz.3.247'.
[   38.016503][ T7318] binder: 7317:7318 got transaction to invalid handle, 1
[   38.019691][ T7318] binder: 7317:7318 cannot find target node
[   38.020743][ T7318] binder: 7317:7318 transaction async to 0:0 failed 8/29201/-22, code 0 size 72-24 line 3151
[   38.023122][ T7318] binder: 7317:7318 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[   38.026615][ T6611] binder: undelivered TRANSACTION_ERROR: 29201
[   38.391130][ T7327] loop1: detected capacity change from 0 to 32768
[   38.412138][ T7334] random: crng reseeded on system resumption
[   38.472639][ T7327] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[   38.517590][   T11] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   38.527373][ T6565] ocfs2: Unmounting device (7,1) on (node local)
[   38.684068][   T11] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   38.684275][   T11] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   38.684323][   T11] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   38.684410][   T11] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   38.684442][   T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   38.918003][   T11] usb 1-1: config 0 descriptor??
[   38.964712][ T7347] binder: 7346:7347 got transaction to invalid handle, 1
[   38.964749][ T7347] binder: 7346:7347 cannot find target node
[   38.964786][ T7347] binder: 7346:7347 transaction async to 0:0 failed 12/29201/-22, code 0 size 72-24 line 3151
[   38.964931][ T7347] binder: 7346:7347 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[   38.965988][ T1816] binder: undelivered TRANSACTION_ERROR: 29201
[   39.085247][ T7340] loop2: detected capacity change from 0 to 32768
[   39.109395][ T7340] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   39.175566][ T6550] ocfs2: Unmounting device (7,2) on (node local)
[   39.352000][ T7370] loop2: detected capacity change from 0 to 32768
[   39.403847][ T7370] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   39.411368][   T11] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[   39.423458][   T11] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[   39.433476][ T6550] ocfs2: Unmounting device (7,2) on (node local)
[   39.494608][ T7379] binder: 7378:7379 got transaction to invalid handle, 1
[   39.494645][ T7379] binder: 7378:7379 cannot find target node
[   39.494777][ T7379] binder: 7378:7379 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[   39.832652][ T7394] netlink: 88 bytes leftover after parsing attributes in process `syz.4.275'.
[   39.966577][ T7401] random: crng reseeded on system resumption
[   40.092040][ T7406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   40.092230][ T7406] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   40.946559][ T7419] binder: BINDER_SET_CONTEXT_MGR already set
[   40.946611][ T7419] binder: 7418:7419 ioctl 4018620d 20004a80 returned -16
[   40.946824][ T7419] binder: 7418:7419 got transaction to invalid handle, 1
[   40.947017][ T7419] binder: 7418:7419 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[   41.212916][ T7436] random: crng reseeded on system resumption
[   41.314731][ T7446] binder: BINDER_SET_CONTEXT_MGR already set
[   41.314758][ T7446] binder: 7441:7446 ioctl 4018620d 20004a80 returned -16
[   41.577317][ T6560] usb 1-1: USB disconnect, device number 3
[   41.592738][ T7451] loop4: detected capacity change from 0 to 256
[   41.594750][ T7451] vfat: Bad value for 'utf8'
[   41.601926][ T7451] netlink: 4 bytes leftover after parsing attributes in process `syz.4.297'.
[   41.956296][ T7470] mmap: syz.3.305 (7470) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   41.974467][ T7472] binder: BINDER_SET_CONTEXT_MGR already set
[   41.974498][ T7472] binder: 7471:7472 ioctl 4018620d 20004a80 returned -16
[   42.014669][ T7448] loop2: detected capacity change from 0 to 65536
[   42.030335][ T7448] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[   42.038838][ T7448] XFS (loop2): Ending clean mount
[   42.042617][ T7448] XFS (loop2): syz.2.296 should use fallocate; XFS_IOC_{ALLOC,FREE}SP ioctl unsupported
[   42.052327][ T7489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   42.055819][ T7489] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   42.063254][ T7448] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x50/0xf0, xfs_cntbt block 0x6 
[   42.063309][ T7448] XFS (loop2): Unmount and run xfs_repair
[   42.063328][ T7448] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[   42.063335][ T7448] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[   42.063342][ T7448] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10  ................
[   42.063347][ T7448] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[   42.063352][ T7448] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03  .....J..........
[   42.063357][ T7448] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00  ...9..?.........
[   42.063362][ T7448] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00  ...........?....
[   42.063367][ T7448] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   42.063372][ T7448] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   42.063421][ T7448] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x1f8/0x380" at daddr 0x6 len 2 error 74
[   42.063534][ T7448] XFS (loop2): page discard on page 000000003c77d1a5, inode 0x26, pos 1024.
[   42.063998][ T6619] loop2: writeback error on inode 38, offset 0, sector 22
[   42.143444][ T6550] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[   42.144268][ T6550] XFS (loop2): Uncorrected metadata errors detected; please run xfs_repair.
[   42.161448][ T7494] geneve2: entered promiscuous mode
[   42.162768][ T7494] geneve2: entered allmulticast mode
[   42.571856][ T7512] vxfs: WRONG superblock magic 00000000 at 1
[   42.572447][ T7512] vxfs: WRONG superblock magic 00000000 at 8
[   42.572492][ T7512] vxfs: can't find superblock.
[   42.610150][ T6619] libceph: connect (1)[c::]:6789 error -101
[   42.610337][ T6619] libceph: mon0 (1)[c::]:6789 connect error
[   42.876697][ T6619] libceph: connect (1)[c::]:6789 error -101
[   42.883616][ T6619] libceph: mon0 (1)[c::]:6789 connect error
[   43.078507][ T7510] ceph: No mds server is up or the cluster is laggy
[   43.167454][ T7529] random: crng reseeded on system resumption
[   43.573872][ T7539] binder_user_error: 7 callbacks suppressed
[   43.573909][ T7539] binder: tried to use weak ref as strong ref
[   43.573918][ T7539] binder: 7538:7539 Acquire 1 refcount change on invalid ref 0 ret -22
[   43.578721][ T7539] binder: 7538:7539 got transaction to invalid handle, 1
[   43.578750][ T7539] binder_debug: 14 callbacks suppressed
[   43.578767][ T7539] binder: 7538:7539 cannot find target node
[   43.578775][ T7539] binder: 7538:7539 transaction async to 0:0 failed 31/29201/-22, code 0 size 72-24 line 3151
[   43.579692][   T11] binder: undelivered TRANSACTION_ERROR: 29201
[   43.706280][ T7531] loop2: detected capacity change from 0 to 65536
[   43.724261][ T7542] loop3: detected capacity change from 0 to 32768
[   43.726232][ T7531] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[   43.735754][ T7542] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   43.752888][ T7531] XFS (loop2): Ending clean mount
[   43.794708][ T7531] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x50/0xf0, xfs_cntbt block 0x6 
[   43.794760][ T7531] XFS (loop2): Unmount and run xfs_repair
[   43.794782][ T7531] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[   43.794791][ T7531] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[   43.794798][ T7531] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10  ................
[   43.794804][ T7531] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[   43.794810][ T7531] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03  .....J..........
[   43.794815][ T7531] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00  ...9..?.........
[   43.794820][ T7531] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00  ...........?....
[   43.794825][ T7531] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   43.794831][ T7531] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   43.794838][ T7531] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x1f8/0x380" at daddr 0x6 len 2 error 74
[   43.794902][ T7531] XFS (loop2): page discard on page 0000000044f5e3f0, inode 0x26, pos 1024.
[   43.795845][   T11] loop2: writeback error on inode 38, offset 0, sector 22
[   43.822482][ T7542] XFS (loop3): Ending clean mount
[   43.826469][ T7544] loop4: detected capacity change from 0 to 32768
[   43.855285][ T7542] XFS (loop3): Quotacheck needed: Please wait.
[   43.861085][ T6550] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[   43.862775][ T6550] XFS (loop2): Uncorrected metadata errors detected; please run xfs_repair.
[   43.882294][ T7542] XFS (loop3): Quotacheck: Done.
[   43.978131][ T7544] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io
[   43.978165][ T7544]   allowing incompatible features above 0.0: (unknown version)
[   43.978196][ T7544]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[   43.978213][ T7544] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0
[   43.978272][ T7544] bcachefs (loop4): recovering from clean shutdown, journal seq 10
[   43.978340][ T7544] bcachefs (loop4): Version upgrade required:
[   43.978340][ T7544] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[   43.978340][ T7544] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[   43.978340][ T7544]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[   44.008476][ T7544] bcachefs (loop4): dropping and reconstructing all alloc info
[   44.038208][ T7544] bcachefs (loop4): accounting_read...
[   44.039166][ T6556] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   44.065310][ T7544]  done
[   44.065873][ T7544] bcachefs (loop4): alloc_read... done
[   44.067654][ T7544] bcachefs (loop4): snapshots_read...
[   44.086581][ T7578] loop2: detected capacity change from 0 to 512
[   44.087122][ T7544]  done
[   44.087138][ T7544] bcachefs (loop4): check_allocations...
[   44.130491][ T7578] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   44.134335][ T7544]  done
[   44.140673][ T7544] bcachefs (loop4): going read-write
[   44.206311][ T7544] bcachefs (loop4): done starting filesystem
[   44.225272][ T6553] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201'
[   44.225307][ T6553] CPU: 1 UID: 0 PID: 6553 Comm: kworker/u9:2 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT 
[   44.225322][ T6553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025
[   44.225329][ T6553] Workqueue: hci3 hci_rx_work
[   44.225347][ T6553] Call trace:
[   44.225350][ T6553]  show_stack+0x2c/0x3c (C)
[   44.225362][ T6553]  __dump_stack+0x30/0x40
[   44.225369][ T6553]  dump_stack_lvl+0xd8/0x12c
[   44.225375][ T6553]  dump_stack+0x1c/0x28
[   44.225380][ T6553]  sysfs_create_dir_ns+0x22c/0x24c
[   44.225391][ T6553]  kobject_add_internal+0x5a8/0xb20
[   44.225402][ T6553]  kobject_add+0x134/0x200
[   44.225410][ T6553]  device_add+0x394/0xa60
[   44.225418][ T6553]  hci_conn_add_sysfs+0xc0/0x1d0
[   44.225425][ T6553]  le_conn_complete_evt+0x98c/0xe84
[   44.225431][ T6553]  hci_le_enh_conn_complete_evt+0x114/0x3f8
[   44.225443][ T6553]  hci_le_meta_evt+0x2cc/0x4b0
[   44.225450][ T6553]  hci_event_packet+0x6bc/0xf04
[   44.225457][ T6553]  hci_rx_work+0x320/0xb18
[   44.225466][ T6553]  process_one_work+0x7e8/0x155c
[   44.225472][ T6553]  worker_thread+0x958/0xed8
[   44.225478][ T6553]  kthread+0x5fc/0x75c
[   44.225488][ T6553]  ret_from_fork+0x10/0x20
[   44.225515][ T6553] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory.
[   44.225533][ T6553] Bluetooth: hci3: failed to register connection device
[   44.568783][ T6558] bcachefs (loop4): shutting down
[   44.568812][ T6558] bcachefs (loop4): going read-only
[   44.568840][ T6558] bcachefs (loop4): finished waiting for writes to stop
[   44.590870][ T6558] bcachefs (loop4): flushing journal and stopping allocators, journal seq 11
[   44.591993][ T7588] loop3: detected capacity change from 0 to 32768
[   44.643934][ T6558] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 11
[   44.648414][ T7595] loop1: detected capacity change from 0 to 32768
[   44.653758][ T6558] bcachefs (loop4): unclean shutdown complete, journal seq 12
[   44.668202][ T6558] bcachefs (loop4): done going read-only, filesystem not clean
[   44.699426][ T7588] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[   44.705010][ T7588]   allowing incompatible features above 0.0: (unknown version)
[   44.706486][ T7588]   features: 
[   44.707106][ T7588] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0
[   44.709161][ T7588] bcachefs (loop3): initializing new filesystem
[   44.711669][ T6558] bcachefs (loop4): shutdown complete
[   44.714857][ T7595] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[   44.714886][ T7595]   allowing incompatible features above 0.0: (unknown version)
[   44.715973][ T7595]   features: 
[   44.715994][ T7595] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[   44.716022][ T7595] bcachefs (loop1): initializing new filesystem
[   44.718469][ T7588] bcachefs (loop3): going read-write
[   44.727562][ T7595] bcachefs (loop1): going read-write
[   44.740793][ T7588] bcachefs (loop3): marking superblocks
[   44.743855][ T7588] bcachefs (loop3): initializing freespace
[   44.752129][ T7588] bcachefs (loop3): done initializing freespace
[   44.754062][ T7588] bcachefs (loop3): reading snapshots table
[   44.755222][ T7588] bcachefs (loop3): reading snapshots done
[   44.759335][ T7595] bcachefs (loop1): marking superblocks
[   44.771900][ T7595] bcachefs (loop1): initializing freespace
[   44.775384][ T7595] bcachefs (loop1): done initializing freespace
[   44.779815][ T7595] bcachefs (loop1): reading snapshots table
[   44.780159][ T7595] bcachefs (loop1): reading snapshots done
[   44.791465][ T7588] bcachefs (loop3): done starting filesystem
[   44.799247][ T7595] bcachefs (loop1): done starting filesystem
[   44.864794][ T7588] overlayfs: failed to resolve './file0/file0': -2
[   44.925603][ T6550] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.930877][ T7626] loop4: detected capacity change from 0 to 32768
[   44.947822][   T26] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   44.962444][ T6556] bcachefs (loop3): shutting down
[   44.962467][ T6556] bcachefs (loop3): going read-only
[   44.962488][ T6556] bcachefs (loop3): finished waiting for writes to stop
[   44.990785][ T7626] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io
[   44.990818][ T7626]   allowing incompatible features above 0.0: (unknown version)
[   44.993599][ T6556] bcachefs (loop3): flushing journal and stopping allocators, journal seq 4
[   45.001774][ T7626]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[   45.002035][ T7626] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0
[   45.002158][ T7626] bcachefs (loop4): recovering from clean shutdown, journal seq 10
[   45.002236][ T7626] bcachefs (loop4): Version upgrade required:
[   45.002236][ T7626] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[   45.002236][ T7626] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[   45.002236][ T7626]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[   45.004001][ T7626] bcachefs (loop4): dropping and reconstructing all alloc info
[   45.011445][ T7626] bcachefs (loop4): accounting_read...
[   45.047385][ T6565] bcachefs (loop1): shutting down
[   45.050215][ T6565] bcachefs (loop1): going read-only
[   45.051420][ T6565] bcachefs (loop1): finished waiting for writes to stop
[   45.054833][ T7636] random: crng reseeded on system resumption
[   45.075076][ T7626]  done
[   45.075629][ T7626] bcachefs (loop4): alloc_read... done
[   45.077338][ T7626] bcachefs (loop4): snapshots_read... done
[   45.079195][ T7626] bcachefs (loop4): check_allocations... done
[   45.087297][ T6565] bcachefs (loop1): flushing journal and stopping allocators, journal seq 5
[   45.094399][ T7626] bcachefs (loop4): going read-write
[   45.095895][ T6556] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 5
[   45.098966][ T6556] bcachefs (loop3): clean shutdown complete, journal seq 6
[   45.099354][ T6556] bcachefs (loop3): marking filesystem clean
[   45.106450][ T7626] bcachefs (loop4): done starting filesystem
[   45.118652][ T6556] bcachefs (loop3): shutdown complete
[   45.128963][   T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   45.128989][   T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   45.129011][   T26] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   45.129032][   T26] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   45.129044][   T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   45.137902][   T26] usb 1-1: config 0 descriptor??
[   45.154057][ T6565] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 5
[   45.156287][ T6565] bcachefs (loop1): clean shutdown complete, journal seq 6
[   45.156647][ T6565] bcachefs (loop1): marking filesystem clean
[   45.176541][ T6553] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection
[   45.203000][ T6565] bcachefs (loop1): shutdown complete
[   45.223526][ T7645] loop2: detected capacity change from 0 to 32768
[   45.257662][ T7645] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   45.262545][ T6558] bcachefs (loop4): shutting down
[   45.262564][ T6558] bcachefs (loop4): going read-only
[   45.262586][ T6558] bcachefs (loop4): finished waiting for writes to stop
[   45.286106][ T6558] bcachefs (loop4): flushing journal and stopping allocators, journal seq 11
[   45.305992][ T6558] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 11
[   45.312845][ T6558] bcachefs (loop4): unclean shutdown complete, journal seq 12
[   45.318569][ T6558] bcachefs (loop4): done going read-only, filesystem not clean
[   45.338800][ T7658] binder: 7657:7658 ioctl 4018620d 0 returned -22
[   45.339045][ T7658] binder: tried to use weak ref as strong ref
[   45.339053][ T7658] binder: 7657:7658 Acquire 1 refcount change on invalid ref 0 ret -22
[   45.339155][ T7658] binder: 7657:7658 got transaction to invalid handle, 1
[   45.339163][ T7658] binder: 7657:7658 cannot find target node
[   45.339169][ T7658] binder: 7657:7658 transaction async to 0:0 failed 34/29201/-22, code 0 size 72-24 line 3151
[   45.339281][ T7658] binder: 7657:7658 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[   45.340334][   T11] binder: undelivered TRANSACTION_ERROR: 29201
[   45.355855][ T6558] bcachefs (loop4): shutdown complete
[   45.358451][ T7645] XFS (loop2): Ending clean mount
[   45.361311][ T7645] XFS (loop2): Quotacheck needed: Please wait.
[   45.389045][ T7645] XFS (loop2): Quotacheck: Done.
[   45.483808][ T6550] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   45.549884][   T26] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   45.555569][   T26] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[   45.762179][ T7680] vxfs: WRONG superblock magic 00000000 at 1
[   45.762622][ T7680] vxfs: WRONG superblock magic 00000000 at 8
[   45.762661][ T7680] vxfs: can't find superblock.
[   45.844473][   T26] libceph: connect (1)[c::]:6789 error -101
[   45.844561][   T26] libceph: mon0 (1)[c::]:6789 connect error
[   45.868233][ T7685] netlink: 'syz.1.364': attribute type 10 has an invalid length.
[   46.003429][ T7683] loop2: detected capacity change from 0 to 32768
[   46.066928][ T7685] loop1: detected capacity change from 0 to 65536
[   46.072418][ T7685] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[   46.084339][ T7685] XFS (loop1): Ending clean mount
[   46.099756][ T6675] libceph: connect (1)[c::]:6789 error -101
[   46.099853][ T6675] libceph: mon0 (1)[c::]:6789 connect error
[   46.124572][ T6565] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[   46.274460][ T7699] binder: 7698:7699 ioctl 4018620d 0 returned -22
[   46.275869][ T7699] binder: tried to use weak ref as strong ref
[   46.276852][ T7699] binder: 7698:7699 Acquire 1 refcount change on invalid ref 0 ret -22
[   46.277928][ T7699] binder: 7698:7699 got transaction to invalid handle, 1
[   46.277941][ T7699] binder: 7698:7699 cannot find target node
[   46.277950][ T7699] binder: 7698:7699 transaction async to 0:0 failed 37/29201/-22, code 0 size 72-24 line 3151
[   46.278325][ T6560] binder: undelivered TRANSACTION_ERROR: 29201
[   46.288294][ T7678] ceph: No mds server is up or the cluster is laggy
[   46.352764][ T7705] binder: 7704:7705 unknown command 0
[   46.352796][ T7705] binder: 7704:7705 ioctl c0306201 20000080 returned -22
[   46.368251][ T7705] binder: 7704:7705 transaction async to 7704:0 failed 42/29201/-14, code 0 size 0-24 line 3438
[   46.502091][ T7683] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[   46.502136][ T7683]   allowing incompatible features above 0.0: (unknown version)
[   46.502154][ T7683]   features: 
[   46.502162][ T7683] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[   46.502185][ T7683] bcachefs (loop2): initializing new filesystem
[   46.505166][ T7683] bcachefs (loop2): going read-write
[   46.533330][ T7683] bcachefs (loop2): marking superblocks
[   46.544605][ T7683] bcachefs (loop2): initializing freespace
[   46.549408][ T7683] bcachefs (loop2): done initializing freespace
[   46.554786][ T7683] bcachefs (loop2): reading snapshots table
[   46.554849][ T7683] bcachefs (loop2): reading snapshots done
[   46.570548][ T7683] bcachefs (loop2): done starting filesystem
[   46.638419][ T7713] loop1: detected capacity change from 0 to 65536
[   46.647152][ T7713] XFS (loop1): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[   46.676858][ T7683] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[   46.680816][ T7683] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[   46.683635][ T7713] XFS (loop1): Ending clean mount
[   46.687724][ T7713] XFS (loop1): Quotacheck needed: Please wait.
[   46.716986][ T7713] XFS (loop1): Quotacheck: Done.
[   46.722034][ T7713] XFS (loop1): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[   46.735111][ T7738] loop4: detected capacity change from 0 to 512
[   46.761194][ T7738] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   46.785972][ T6550] bcachefs (loop2): shutting down
[   46.786033][ T6550] bcachefs (loop2): going read-only
[   46.786056][ T6550] bcachefs (loop2): finished waiting for writes to stop
[   46.810238][ T6558] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.819718][ T6550] bcachefs (loop2): flushing journal and stopping allocators, journal seq 5
[   46.862633][ T7747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   46.862814][ T7747] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   46.874797][ T6550] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 6
[   46.878984][ T6550] bcachefs (loop2): clean shutdown complete, journal seq 7
[   46.879447][ T6550] bcachefs (loop2): marking filesystem clean
[   46.899501][ T6550] bcachefs (loop2): shutdown complete
[   46.956034][ T7757] netlink: 'syz.1.385': attribute type 10 has an invalid length.
[   47.102709][ T7757] loop1: detected capacity change from 0 to 65536
[   47.111163][ T7757] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[   47.123065][ T7757] XFS (loop1): Ending clean mount
[   47.162471][ T7757] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x50/0xf0, xfs_cntbt block 0x6 
[   47.162523][ T7757] XFS (loop1): Unmount and run xfs_repair
[   47.162544][ T7757] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[   47.162552][ T7757] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[   47.162559][ T7757] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10  ................
[   47.162564][ T7757] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[   47.162569][ T7757] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03  .....J..........
[   47.162574][ T7757] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00  ...9..?.........
[   47.162579][ T7757] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00  ...........?....
[   47.162584][ T7757] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   47.162589][ T7757] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   47.162596][ T7757] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x1f8/0x380" at daddr 0x6 len 2 error 74
[   47.162650][ T7757] XFS (loop1): page discard on page 00000000941b80e1, inode 0x26, pos 1024.
[   47.162808][ T6560] loop1: writeback error on inode 38, offset 0, sector 22
[   47.185783][ T6565] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[   47.186633][ T6565] XFS (loop1): Uncorrected metadata errors detected; please run xfs_repair.
[   47.238302][ T7767] FAULT_INJECTION: forcing a failure.
[   47.238302][ T7767] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   47.238339][ T7767] CPU: 0 UID: 0 PID: 7767 Comm: syz.3.387 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT 
[   47.238347][ T7767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025
[   47.238352][ T7767] Call trace:
[   47.238355][ T7767]  show_stack+0x2c/0x3c (C)
[   47.238368][ T7767]  __dump_stack+0x30/0x40
[   47.238375][ T7767]  dump_stack_lvl+0xd8/0x12c
[   47.238380][ T7767]  dump_stack+0x1c/0x28
[   47.238385][ T7767]  should_fail_ex+0x41c/0x594
[   47.238392][ T7767]  should_fail+0x14/0x24
[   47.238398][ T7767]  should_fail_usercopy+0x20/0x30
[   47.238404][ T7767]  simple_read_from_buffer+0xc4/0x254
[   47.238412][ T7767]  proc_fail_nth_read+0x1a0/0x23c
[   47.238420][ T7767]  vfs_read+0x228/0x93c
[   47.238427][ T7767]  ksys_read+0x120/0x210
[   47.238433][ T7767]  __arm64_sys_read+0x7c/0x90
[   47.238439][ T7767]  invoke_syscall+0x98/0x2b8
[   47.238444][ T7767]  el0_svc_common+0x130/0x23c
[   47.238449][ T7767]  do_el0_svc+0x48/0x58
[   47.238454][ T7767]  el0_svc+0x58/0x180
[   47.238461][ T7767]  el0t_64_sync_handler+0x84/0x12c
[   47.238466][ T7767]  el0t_64_sync+0x198/0x19c
[   47.282983][ T7769] netlink: 12 bytes leftover after parsing attributes in process `syz.3.388'.
[   47.311480][ T7771] loop1: detected capacity change from 0 to 256
[   47.312955][ T7771] vfat: Bad value for 'utf8'
[   47.316343][ T7771] netlink: 4 bytes leftover after parsing attributes in process `syz.1.386'.
[   47.803566][ T7773] loop1: detected capacity change from 0 to 65536
[   47.834838][ T7773] XFS (loop1): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[   47.843747][ T7781] loop0: detected capacity change from 0 to 32768
[   47.856917][ T7781] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   47.870260][   T11] usb 1-1: USB disconnect, device number 4
[   47.881146][ T7773] XFS (loop1): Ending clean mount
[   47.893458][ T7773] XFS (loop1): Quotacheck needed: Please wait.
[   47.912019][ T6549] ocfs2: Unmounting device (7,0) on (node local)
[   47.917186][ T7773] XFS (loop1): Quotacheck: Done.
[   47.918111][ T7773] XFS (loop1): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[   48.044204][ T7806] loop1: detected capacity change from 0 to 512
[   48.070065][ T7806] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   48.500261][ T7812] loop3: detected capacity change from 0 to 32768
[   48.510722][ T7812] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   48.535475][ T7812] XFS (loop3): Ending clean mount
[   48.536591][ T7812] XFS (loop3): Quotacheck needed: Please wait.
[   48.557347][ T7812] XFS (loop3): Quotacheck: Done.
[   48.566127][ T7823] binder: 7822:7823 ioctl 4018620d 0 returned -22
[   48.584668][ T7825] loop2: detected capacity change from 0 to 256
[   48.587127][ T7825] vfat: Bad value for 'utf8'
[   48.594388][ T7825] netlink: 4 bytes leftover after parsing attributes in process `syz.2.400'.
[   48.612122][ T7827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   48.613947][ T7827] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   48.638478][ T6556] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   48.803746][ T7841] FAULT_INJECTION: forcing a failure.
[   48.803746][ T7841] name failslab, interval 1, probability 0, space 0, times 1
[   48.807065][ T7841] CPU: 1 UID: 0 PID: 7841 Comm: syz.4.408 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT 
[   48.807089][ T7841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025
[   48.807095][ T7841] Call trace:
[   48.807099][ T7841]  show_stack+0x2c/0x3c (C)
[   48.807115][ T7841]  __dump_stack+0x30/0x40
[   48.807125][ T7841]  dump_stack_lvl+0xd8/0x12c
[   48.807131][ T7841]  dump_stack+0x1c/0x28
[   48.807137][ T7841]  should_fail_ex+0x41c/0x594
[   48.807145][ T7841]  should_failslab+0xc0/0x128
[   48.807152][ T7841]  __kmalloc_noprof+0xf4/0x4c8
[   48.807158][ T7841]  sctp_auth_make_key_vector+0xd0/0x2b8
[   48.807165][ T7841]  sctp_auth_asoc_create_secret+0xb4/0x73c
[   48.807172][ T7841]  sctp_auth_asoc_init_active_key+0x128/0x640
[   48.807179][ T7841]  sctp_auth_set_key+0x520/0x820
[   48.807183][ T7841]  sctp_setsockopt_auth_key+0x1a4/0x54c
[   48.807192][ T7841]  sctp_setsockopt+0x2d8/0xee8
[   48.807198][ T7841]  sock_common_setsockopt+0xb0/0xcc
[   48.807205][ T7841]  do_sock_setsockopt+0x1ec/0x328
[   48.807212][ T7841]  __arm64_sys_setsockopt+0x170/0x1e0
[   48.807220][ T7841]  invoke_syscall+0x98/0x2b8
[   48.807226][ T7841]  el0_svc_common+0x130/0x23c
[   48.807231][ T7841]  do_el0_svc+0x48/0x58
[   48.807235][ T7841]  el0_svc+0x58/0x180
[   48.807241][ T7841]  el0t_64_sync_handler+0x84/0x12c
[   48.807247][ T7841]  el0t_64_sync+0x198/0x19c
[   48.896453][ T7836] loop3: detected capacity change from 0 to 32768
[   48.913066][ T7836] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[   48.914221][ T6565] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.930592][ T6556] ocfs2: Unmounting device (7,3) on (node local)
[   48.948015][ T7850] binder: 7849:7850 ioctl c0306201 0 returned -14
[   48.948170][ T7850] binder_user_error: 7 callbacks suppressed
[   48.948183][ T7850] binder: 7849:7850 got transaction to invalid handle, 1
[   48.948193][ T7850] binder_debug: 4 callbacks suppressed
[   48.948199][ T7850] binder: 7849:7850 cannot find target node
[   48.948205][ T7850] binder: 7849:7850 transaction async to 0:0 failed 49/29201/-22, code 0 size 72-24 line 3151
[   48.949835][ T7850] binder: 7849:7850 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[   48.950521][   T11] binder: undelivered TRANSACTION_ERROR: 29201
[   48.954979][ T7852] netlink: 4 bytes leftover after parsing attributes in process `syz.3.412'.
[   48.971891][ T7855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   48.973614][ T7855] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   49.185167][ T7875] loop0: detected capacity change from 0 to 32768
[   49.212427][ T7875] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   49.234993][ T6549] ocfs2: Unmounting device (7,0) on (node local)
[   49.251840][ T7883] netlink: 4 bytes leftover after parsing attributes in process `syz.0.424'.
[   49.531258][ T7886] binder: 7885:7886 ioctl c0306201 0 returned -14
[   49.532845][ T7886] binder: 7885:7886 got transaction to invalid handle, 1
[   49.534877][ T7886] binder: 7885:7886 cannot find target node
[   49.536209][ T7886] binder: 7885:7886 transaction async to 0:0 failed 53/29201/-22, code 0 size 72-24 line 3151
[   49.550666][ T7886] binder: 7885:7886 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[   49.554815][ T1816] binder: undelivered TRANSACTION_ERROR: 29201
[   50.083737][ T7905] loop4: detected capacity change from 0 to 512
[   50.142526][ T7905] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   50.719925][ T7917] vxfs: WRONG superblock magic 00000000 at 1
[   50.720486][ T7917] vxfs: WRONG superblock magic 00000000 at 8
[   50.720528][ T7917] vxfs: can't find superblock.
[   50.903581][   T26] libceph: connect (1)[c::]:6789 error -101
[   50.904805][   T26] libceph: mon0 (1)[c::]:6789 connect error
[   50.918708][ T7914] ceph: No mds server is up or the cluster is laggy
[   50.956428][ T7925] binder: 7924:7925 ioctl c0306201 0 returned -14
[   50.961126][ T7925] binder: 7924:7925 got transaction to invalid handle, 1
[   50.962467][ T7925] binder: 7924:7925 cannot find target node
[   50.963654][ T7925] binder: 7924:7925 transaction async to 0:0 failed 57/29201/-22, code 0 size 72-24 line 3151
[   50.965645][ T7925] binder: 7924:7925 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[   50.967314][   T26] binder: undelivered TRANSACTION_ERROR: 29201
[   50.967997][ T6558] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.998790][ T7931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.440'.
[   51.000335][ T7931] netlink: 32 bytes leftover after parsing attributes in process `syz.1.440'.
[   51.048444][ T7920] loop3: detected capacity change from 0 to 32768
[   51.065137][ T7920] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[   51.088206][ T7943] netlink: 'syz.4.438': attribute type 10 has an invalid length.
[   51.166842][ T6556] ocfs2: Unmounting device (7,3) on (node local)
[   51.558753][ T7943] loop4: detected capacity change from 0 to 65536
[   51.563872][ T7943] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[   51.573229][ T7943] XFS (loop4): Ending clean mount
[   51.876758][ T6558] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[   52.113153][ T7972] loop1: detected capacity change from 0 to 32768
[   52.200583][ T7974] binder: 7973:7974 got transaction to invalid handle, 1
[   52.200614][ T7974] binder: 7973:7974 cannot find target node
[   52.201226][ T7974] binder: 7973:7974 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[   52.243180][ T7983] netlink: 8 bytes leftover after parsing attributes in process `syz.0.451'.
[   52.247496][ T7983] netlink: 32 bytes leftover after parsing attributes in process `syz.0.451'.
[   52.258877][ T7983] geneve2: entered promiscuous mode
[   52.261089][ T7983] geneve2: entered allmulticast mode
[   52.269246][ T7972] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4:15,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[   52.269272][ T7972]   allowing incompatible features above 0.0: (unknown version)
[   52.269281][ T7972]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[   52.269294][ T7972] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[   52.269315][ T7972] bcachefs (loop1): initializing new filesystem
[   52.270809][ T7972] bcachefs (loop1): going read-write
[   52.307579][ T7972] bcachefs (loop1): marking superblocks
[   52.309571][ T7972] bcachefs (loop1): initializing freespace
[   52.310212][ T7972] bcachefs (loop1): done initializing freespace
[   52.310654][ T7972] bcachefs (loop1): reading snapshots table
[   52.310677][ T7972] bcachefs (loop1): reading snapshots done
[   52.346849][ T7972] bcachefs (loop1): done starting filesystem
[   52.366584][ T7962] overlayfs: overlay with incompat feature 'volatile' cannot be mounted
[   52.366839][ T7996] loop3: detected capacity change from 0 to 512
[   52.391986][ T7996] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   52.602371][ T7994] loop0: detected capacity change from 0 to 32768
[   52.817279][ T6565] bcachefs (loop1): shutting down
[   52.817308][ T6565] bcachefs (loop1): going read-only
[   52.819829][ T6565] bcachefs (loop1): finished waiting for writes to stop
[   52.820588][ T7994] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   52.839097][ T6549] ocfs2: Unmounting device (7,0) on (node local)
[   52.847796][ T6565] bcachefs (loop1): flushing journal and stopping allocators, journal seq 2
[   52.909210][ T6565] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 3
[   52.910131][ T6565] bcachefs (loop1): clean shutdown complete, journal seq 4
[   52.910584][ T6565] bcachefs (loop1): marking filesystem clean
[   52.940596][ T6565] bcachefs (loop1): shutdown complete
[   53.284998][ T6556] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   53.334194][ T8018] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   53.371762][ T8027] loop3: detected capacity change from 0 to 512
[   53.423325][ T8027] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   53.602230][ T8036] random: crng reseeded on system resumption
[   54.241933][ T6556] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   54.272334][ T8049] FAULT_INJECTION: forcing a failure.
[   54.272334][ T8049] name failslab, interval 1, probability 0, space 0, times 0
[   54.272363][ T8049] CPU: 0 UID: 0 PID: 8049 Comm: syz.4.471 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT 
[   54.272375][ T8049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025
[   54.272380][ T8049] Call trace:
[   54.272384][ T8049]  show_stack+0x2c/0x3c (C)
[   54.272398][ T8049]  __dump_stack+0x30/0x40
[   54.272406][ T8049]  dump_stack_lvl+0xd8/0x12c
[   54.272411][ T8049]  dump_stack+0x1c/0x28
[   54.272416][ T8049]  should_fail_ex+0x41c/0x594
[   54.272425][ T8049]  should_failslab+0xc0/0x128
[   54.272433][ T8049]  __kmalloc_cache_noprof+0x80/0x3fc
[   54.272441][ T8049]  rtnl_newlink+0xf8/0x15dc
[   54.272450][ T8049]  rtnetlink_rcv_msg+0x664/0x97c
[   54.272456][ T8049]  netlink_rcv_skb+0x220/0x3fc
[   54.272464][ T8049]  rtnetlink_rcv+0x28/0x38
[   54.272470][ T8049]  netlink_unicast+0x694/0x8c4
[   54.272477][ T8049]  netlink_sendmsg+0x648/0x930
[   54.272483][ T8049]  ____sys_sendmsg+0x490/0x7b8
[   54.272490][ T8049]  ___sys_sendmsg+0x204/0x278
[   54.272495][ T8049]  __arm64_sys_sendmsg+0x184/0x238
[   54.272501][ T8049]  invoke_syscall+0x98/0x2b8
[   54.272507][ T8049]  el0_svc_common+0x130/0x23c
[   54.272512][ T8049]  do_el0_svc+0x48/0x58
[   54.272516][ T8049]  el0_svc+0x58/0x180
[   54.272523][ T8049]  el0t_64_sync_handler+0x84/0x12c
[   54.272529][ T8049]  el0t_64_sync+0x198/0x19c
[   54.327309][ T8055] netlink: 'syz.4.473': attribute type 5 has an invalid length.
[   54.486861][ T8057] loop3: detected capacity change from 0 to 32768
[   55.203957][ T8082] vxfs: WRONG superblock magic 00000000 at 1
[   55.204394][ T8082] vxfs: WRONG superblock magic 00000000 at 8
[   55.204435][ T8082] vxfs: can't find superblock.
[   55.305313][ T6619] libceph: connect (1)[c::]:6789 error -101
[   55.305400][ T6619] libceph: mon0 (1)[c::]:6789 connect error
[   55.410779][ T8089] loop2: detected capacity change from 0 to 512
[   55.436479][ T8089] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   55.861779][ T6619] libceph: connect (1)[c::]:6789 error -101
[   55.861879][ T6619] libceph: mon0 (1)[c::]:6789 connect error
[   55.878564][ T8080] ceph: No mds server is up or the cluster is laggy
[   56.268168][ T6550] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   56.368368][ T8108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   56.368536][ T8108] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   56.519242][ T8124] loop1: detected capacity change from 0 to 256
[   56.519578][ T8124] vfat: Bad value for 'utf8'
[   56.528443][ T8124] netlink: 4 bytes leftover after parsing attributes in process `syz.1.456'.
[   56.609417][ T8055] loop4: detected capacity change from 0 to 262144
[   56.648710][ T8111] loop3: detected capacity change from 0 to 32768
[   56.665736][ T8055] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   56.674956][ T8111] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[   56.678275][ T8055] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   56.868128][ T6675] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   56.936834][ T6556] ocfs2: Unmounting device (7,3) on (node local)
[   57.053533][ T8143] loop2: detected capacity change from 0 to 8192
[   57.059915][ T6675] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   57.059946][ T6675] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   57.059968][ T6675] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   57.059985][ T6675] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   57.059993][ T6675] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   57.074153][ T6675] usb 1-1: config 0 descriptor??
[   57.286376][ T8160] loop3: detected capacity change from 0 to 256
[   57.287934][ T8160] vfat: Bad value for 'utf8'
[   57.716435][ T8168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   57.716617][ T8168] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   57.723846][ T6675] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[   57.729080][ T6675] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[   57.765127][ T8165] loop3: detected capacity change from 0 to 32768
[   57.787373][ T8165] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[   57.833079][ T6556] ocfs2: Unmounting device (7,3) on (node local)
[   57.931258][ T6675] usb 1-1: USB disconnect, device number 5
[   58.200305][ T8185] sp0: Synchronizing with TNC
[   58.206310][ T8185] capability: warning: `syz.4.509' uses 32-bit capabilities (legacy support in use)
[   58.290454][ T8197] loop1: detected capacity change from 0 to 256
[   58.292640][ T8197] vfat: Bad value for 'utf8'
[   58.414591][ T8203] loop1: detected capacity change from 0 to 512
[   58.492252][ T8203] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   59.425908][ T8223] netlink: 8 bytes leftover after parsing attributes in process `syz.2.521'.
[   59.452678][ T6565] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   59.556972][ T8236] loop4: detected capacity change from 0 to 256
[   59.557343][ T8236] vfat: Bad value for 'utf8'
[   59.563311][ T8238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   59.563481][ T8238] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   59.691264][ T8225] loop0: detected capacity change from 0 to 40427
[   59.691619][ T8225] F2FS-fs: heap/no_heap options were deprecated
[   59.698285][ T8225] F2FS-fs (loop0): build fault injection rate: 19
[   59.698306][ T8225] F2FS-fs (loop0): build fault injection type: 0x3bfe8c
[   59.699170][ T8225] F2FS-fs (loop0): invalid crc value
[   59.713043][ T8225] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x4e8/0x7ac
[   59.745246][ T8225] F2FS-fs (loop0): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x1b0/0x3b0
[   59.762446][ T8225] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   59.895823][ T8234] loop2: detected capacity change from 0 to 65536
[   59.898410][ T8225] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   59.903694][ T8252] loop4: detected capacity change from 0 to 512
[   59.926923][ T8225] F2FS-fs (loop0): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x19c/0x868
[   59.931268][ T8234] XFS (loop2): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[   59.944785][ T8234] XFS (loop2): Ending clean mount
[   59.946656][ T8234] XFS (loop2): Quotacheck needed: Please wait.
[   59.961828][ T8252] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   59.965639][ T8234] XFS (loop2): Quotacheck: Done.
[   59.996372][ T6550] XFS (loop2): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[   60.024378][ T8262] netlink: 8 bytes leftover after parsing attributes in process `syz.3.535'.
[   60.051199][ T6549] syz-executor: attempt to access beyond end of device
[   60.051199][ T6549] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   60.051681][ T6549] CPU: 1 UID: 0 PID: 6549 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT 
[   60.051695][ T6549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025
[   60.051700][ T6549] Call trace:
[   60.051703][ T6549]  show_stack+0x2c/0x3c (C)
[   60.051716][ T6549]  __dump_stack+0x30/0x40
[   60.051723][ T6549]  dump_stack_lvl+0xd8/0x12c
[   60.051728][ T6549]  dump_stack+0x1c/0x28
[   60.051733][ T6549]  f2fs_handle_critical_error+0x34c/0x4b8
[   60.051741][ T6549]  f2fs_stop_checkpoint+0x5c/0x70
[   60.051748][ T6549]  f2fs_write_end_io+0x768/0xa70
[   60.051754][ T6549]  bio_endio+0x804/0x840
[   60.051761][ T6549]  submit_bio_noacct+0x158/0x176c
[   60.051766][ T6549]  submit_bio+0x3b4/0x550
[   60.051771][ T6549]  f2fs_submit_write_bio+0x13c/0x324
[   60.051777][ T6549]  __submit_merged_bio+0x254/0x704
[   60.051782][ T6549]  __submit_merged_write_cond+0x23c/0x4ac
[   60.051788][ T6549]  f2fs_write_data_pages+0x1d28/0x2634
[   60.051794][ T6549]  do_writepages+0x270/0x468
[   60.051801][ T6549]  filemap_fdatawrite+0x14c/0x1f4
[   60.051808][ T6549]  f2fs_sync_dirty_inodes+0x2b8/0x788
[   60.051813][ T6549]  f2fs_write_checkpoint+0x690/0x16a0
[   60.051818][ T6549]  kill_f2fs_super+0x21c/0x584
[   60.051824][ T6549]  deactivate_locked_super+0xc4/0x12c
[   60.051832][ T6549]  deactivate_super+0xe0/0x100
[   60.051838][ T6549]  cleanup_mnt+0x31c/0x3ac
[   60.051843][ T6549]  __cleanup_mnt+0x20/0x30
[   60.051848][ T6549]  task_work_run+0x1dc/0x260
[   60.051855][ T6549]  do_notify_resume+0x174/0x1f4
[   60.051861][ T6549]  el0_svc+0xb8/0x180
[   60.051868][ T6549]  el0t_64_sync_handler+0x84/0x12c
[   60.051873][ T6549]  el0t_64_sync+0x198/0x19c
[   60.051893][ T6549] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[   60.456036][ T8272] binder: 8271:8272 unknown command 0
[   60.456065][ T8272] binder: 8271:8272 ioctl c0306201 20000080 returned -22
[   60.459083][ T8272] binder: 8271:8272 tried to acquire reference to desc 0, got 1 instead
[   60.459251][ T8272] binder_alloc: 8271: binder_alloc_buf, no vma
[   60.459259][ T8272] binder_debug: 2 callbacks suppressed
[   60.459265][ T8272] binder: cannot allocate buffer: vma cleared, target dead or dying
[   60.459281][ T8272] binder: 8271:8272 transaction async to 8271:0 failed 66/29189/-3, code 0 size 96-24 line 3335
[   60.460141][ T1816] binder: undelivered TRANSACTION_ERROR: 29189
[   60.488749][ T8274] FAULT_INJECTION: forcing a failure.
[   60.488749][ T8274] name failslab, interval 1, probability 0, space 0, times 0
[   60.488780][ T8274] CPU: 0 UID: 0 PID: 8274 Comm: syz.0.534 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT 
[   60.488790][ T8274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025
[   60.488795][ T8274] Call trace:
[   60.488799][ T8274]  show_stack+0x2c/0x3c (C)
[   60.488815][ T8274]  __dump_stack+0x30/0x40
[   60.488822][ T8274]  dump_stack_lvl+0xd8/0x12c
[   60.488828][ T8274]  dump_stack+0x1c/0x28
[   60.488833][ T8274]  should_fail_ex+0x41c/0x594
[   60.488841][ T8274]  should_failslab+0xc0/0x128
[   60.488848][ T8274]  kmem_cache_alloc_lru_noprof+0x84/0x3ec
[   60.488855][ T8274]  debugfs_alloc_inode+0x2c/0x3c
[   60.488863][ T8274]  alloc_inode+0x68/0x19c
[   60.488870][ T8274]  new_inode+0x2c/0x130
[   60.488874][ T8274]  __debugfs_create_file+0x138/0x430
[   60.488880][ T8274]  debugfs_create_file_full+0x58/0x70
[   60.488886][ T8274]  ref_tracker_dir_debugfs+0x140/0x248
[   60.488892][ T8274]  alloc_netdev_mqs+0x1ec/0xdf4
[   60.488900][ T8274]  tun_set_iff+0x424/0xb88
[   60.488906][ T8274]  __tun_chr_ioctl+0x704/0x19ac
[   60.488911][ T8274]  tun_chr_ioctl+0x38/0x4c
[   60.488915][ T8274]  __arm64_sys_ioctl+0x14c/0x1c4
[   60.488921][ T8274]  invoke_syscall+0x98/0x2b8
[   60.488927][ T8274]  el0_svc_common+0x130/0x23c
[   60.488932][ T8274]  do_el0_svc+0x48/0x58
[   60.488937][ T8274]  el0_svc+0x58/0x180
[   60.488943][ T8274]  el0t_64_sync_handler+0x84/0x12c
[   60.488949][ T8274]  el0t_64_sync+0x198/0x19c
[   60.488956][ T8274] debugfs: out of free dentries, can not create file 'netdev@ffff0000c6bdc610'
[   60.506227][ T8278] loop3: detected capacity change from 0 to 256
[   60.515462][ T8278] vfat: Bad value for 'utf8'
[   60.696716][ T8296] netlink: 8 bytes leftover after parsing attributes in process `syz.3.546'.
[   60.733240][ T8298] netlink: 8 bytes leftover after parsing attributes in process `syz.3.547'.
[   60.733354][ T8298] netlink: 16 bytes leftover after parsing attributes in process `syz.3.547'.
[   61.071041][ T6558] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   61.165902][ T8309] netlink: 'syz.3.549': attribute type 10 has an invalid length.
[   61.392308][ T8309] loop3: detected capacity change from 0 to 65536
[   61.519673][ T8309] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[   61.571658][ T8326] loop1: detected capacity change from 0 to 256
[   61.572008][ T8326] vfat: Bad value for 'utf8'
[   61.583340][ T8309] XFS (loop3): Ending clean mount
[   61.603156][ T8309] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x50/0xf0, xfs_cntbt block 0x6 
[   61.603213][ T8309] XFS (loop3): Unmount and run xfs_repair
[   61.603236][ T8309] XFS (loop3): First 128 bytes of corrupted metadata buffer:
[   61.603251][ T8309] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[   61.603262][ T8309] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10  ................
[   61.603272][ T8309] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[   61.603281][ T8309] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03  .....J..........
[   61.603289][ T8309] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00  ...9..?.........
[   61.603297][ T8309] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00  ...........?....
[   61.603305][ T8309] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   61.603313][ T8309] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   61.603324][ T8309] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x1f8/0x380" at daddr 0x6 len 2 error 74
[   61.603391][ T8309] XFS (loop3): page discard on page 00000000b7dc15fa, inode 0x26, pos 1024.
[   61.603610][ T6675] loop3: writeback error on inode 38, offset 0, sector 22
[   61.695401][ T8323] loop0: detected capacity change from 0 to 32768
[   61.715484][ T8334] loop2: detected capacity change from 0 to 4096
[   61.723782][ T8334] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[   61.724834][ T8334] ntfs3(loop2): It is recommened to use chkdsk.
[   61.728905][ T8334] ntfs3(loop2): ino=0, mi_enum_attr
[   61.732567][ T8334] ntfs3(loop2): Failed to load $MFT (-22).
[   61.763146][ T8323] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[   61.763178][ T8323]   allowing incompatible features above 0.0: (unknown version)
[   61.763204][ T8323]   features: 
[   61.763218][ T8323] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[   61.763241][ T8323] bcachefs (loop0): initializing new filesystem
[   61.774471][ T8323] bcachefs (loop0): going read-write
[   61.808136][ T8323] bcachefs (loop0): marking superblocks
[   61.809781][ T8323] bcachefs (loop0): initializing freespace
[   61.818129][ T8323] bcachefs (loop0): done initializing freespace
[   61.826701][ T8323] bcachefs (loop0): reading snapshots table
[   61.826752][ T8323] bcachefs (loop0): reading snapshots done
[   61.840554][ T8323] bcachefs (loop0): done starting filesystem
[   61.903369][ T8334] loop2: detected capacity change from 0 to 32768
[   61.919873][ T8334] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.556 (8334)
[   61.928598][ T8323] overlayfs: missing 'lowerdir'
[   61.939131][ T8334] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   61.940894][ T8334] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[   61.975008][ T6556] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[   61.981917][ T6556] XFS (loop3): Uncorrected metadata errors detected; please run xfs_repair.
[   62.292768][ T6549] bcachefs (loop0): shutting down
[   62.292795][ T6549] bcachefs (loop0): going read-only
[   62.292817][ T6549] bcachefs (loop0): finished waiting for writes to stop
[   62.318249][ T6549] bcachefs (loop0): flushing journal and stopping allocators, journal seq 4
[   62.324393][ T8334] BTRFS info (device loop2): rebuilding free space tree
[   62.566585][ T8334] BTRFS info (device loop2): disabling free space tree
[   62.571064][ T6549] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 5
[   62.571223][ T8334] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   62.571247][ T8334] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   62.584266][ T6549] bcachefs (loop0): clean shutdown complete, journal seq 6
[   62.586022][ T6549] bcachefs (loop0): marking filesystem clean
[   62.618239][ T6549] bcachefs (loop0): shutdown complete
[   62.624832][ T8377] loop3: detected capacity change from 0 to 64
[   62.655515][ T6550] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   62.778702][ T8379] loop1: detected capacity change from 0 to 128
[   62.794598][ T8379] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   62.813015][ T8379] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce"
[   62.846383][ T6565] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   62.911767][ T8390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   62.911943][ T8390] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   63.397977][ T8412] loop4: detected capacity change from 0 to 32768
[   63.821183][ T8416] binder: 8415:8416 unknown command 0
[   63.821214][ T8416] binder: 8415:8416 ioctl c0306201 20000080 returned -22
[   63.822945][ T8416] binder: tried to use weak ref as strong ref
[   63.822953][ T8416] binder: 8415:8416 Acquire 1 refcount change on invalid ref 0 ret -22
[   63.823039][ T8416] binder: 8415:8416 got transaction to invalid handle, 1
[   63.823047][ T8416] binder: 8415:8416 cannot find target node
[   63.823053][ T8416] binder: 8415:8416 transaction async to 0:0 failed 69/29201/-22, code 0 size 96-24 line 3151
[   63.823230][   T26] binder: undelivered TRANSACTION_ERROR: 29201
[   63.918076][ T8412] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[   63.918103][ T8412]   allowing incompatible features above 0.0: (unknown version)
[   63.918123][ T8412]   features: 
[   63.918138][ T8412] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0
[   63.918163][ T8412] bcachefs (loop4): initializing new filesystem
[   63.919992][ T8412] bcachefs (loop4): going read-write
[   63.938220][ T8412] bcachefs (loop4): marking superblocks
[   63.939905][ T8412] bcachefs (loop4): initializing freespace
[   63.951090][ T8412] bcachefs (loop4): done initializing freespace
[   63.951587][ T8412] bcachefs (loop4): reading snapshots table
[   63.951605][ T8412] bcachefs (loop4): reading snapshots done
[   63.964469][ T8412] bcachefs (loop4): done starting filesystem
[   63.986400][ T8412] overlayfs: missing 'lowerdir'
[   64.062737][ T6558] bcachefs (loop4): shutting down
[   64.063732][ T6558] bcachefs (loop4): going read-only
[   64.064578][ T6558] bcachefs (loop4): finished waiting for writes to stop
[   64.094984][ T6558] bcachefs (loop4): flushing journal and stopping allocators, journal seq 4
[   64.134086][ T6558] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 5
[   64.134551][ T6558] bcachefs (loop4): clean shutdown complete, journal seq 6
[   64.134893][ T6558] bcachefs (loop4): marking filesystem clean
[   64.144866][ T6558] bcachefs (loop4): shutdown complete
[   64.160943][ T8446] loop0: detected capacity change from 0 to 32768
[   64.167715][ T8446] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   64.177151][ T8446] XFS (loop0): Ending clean mount
[   64.509496][ T2413] ieee802154 phy0 wpan0: encryption failed: -22
[   64.509553][ T2413] ieee802154 phy1 wpan1: encryption failed: -22
[   64.512688][    T9] cfg80211: failed to load regulatory.db
[   64.804265][ T6549] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   65.786284][ T8485] loop0: detected capacity change from 0 to 1024
[   65.805071][ T8485] hfsplus: bad catalog entry type
[   66.125106][ T8487] loop3: detected capacity change from 0 to 32768
[   66.189148][ T8487] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[   66.189179][ T8487]   allowing incompatible features above 0.0: (unknown version)
[   66.189594][ T8487]   features: 
[   66.189617][ T8487] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0
[   66.189652][ T8487] bcachefs (loop3): initializing new filesystem
[   66.191390][ T8487] bcachefs (loop3): going read-write
[   66.197292][ T8487] bcachefs (loop3): marking superblocks
[   66.202298][ T8487] bcachefs (loop3): initializing freespace
[   66.203279][ T8487] bcachefs (loop3): done initializing freespace
[   66.204627][ T8487] bcachefs (loop3): reading snapshots table
[   66.205350][ T8487] bcachefs (loop3): reading snapshots done
[   66.219706][ T8487] bcachefs (loop3): done starting filesystem
[   66.228752][ T8487] overlayfs: missing 'lowerdir'
[   66.275109][ T6556] bcachefs (loop3): shutting down
[   66.275949][ T6556] bcachefs (loop3): going read-only
[   66.276886][ T6556] bcachefs (loop3): finished waiting for writes to stop
[   66.281276][ T8503] cgroup: Name too long
[   66.285073][ T8503] netlink: 4 bytes leftover after parsing attributes in process `syz.2.594'.
[   66.300662][ T6556] bcachefs (loop3): flushing journal and stopping allocators, journal seq 5
[   66.323580][ T6556] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 5
[   66.325803][ T6556] bcachefs (loop3): clean shutdown complete, journal seq 6
[   66.326169][ T6556] bcachefs (loop3): marking filesystem clean
[   66.335382][ T6556] bcachefs (loop3): shutdown complete
[   66.582535][ T8511] FAULT_INJECTION: forcing a failure.
[   66.582535][ T8511] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   66.582566][ T8511] CPU: 0 UID: 0 PID: 8511 Comm: syz.4.598 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT 
[   66.582575][ T8511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025
[   66.582581][ T8511] Call trace:
[   66.582584][ T8511]  show_stack+0x2c/0x3c (C)
[   66.582600][ T8511]  __dump_stack+0x30/0x40
[   66.582610][ T8511]  dump_stack_lvl+0xd8/0x12c
[   66.582616][ T8511]  dump_stack+0x1c/0x28
[   66.582621][ T8511]  should_fail_ex+0x41c/0x594
[   66.582629][ T8511]  should_fail+0x14/0x24
[   66.582635][ T8511]  should_fail_usercopy+0x20/0x30
[   66.582641][ T8511]  _copy_from_iter+0x194/0x1284
[   66.582647][ T8511]  tun_get_user+0x1e0/0x3538
[   66.582653][ T8511]  tun_chr_write_iter+0xfc/0x204
[   66.582658][ T8511]  vfs_write+0x540/0xa3c
[   66.582665][ T8511]  ksys_write+0x120/0x210
[   66.582671][ T8511]  __arm64_sys_write+0x7c/0x90
[   66.582677][ T8511]  invoke_syscall+0x98/0x2b8
[   66.582683][ T8511]  el0_svc_common+0x130/0x23c
[   66.582688][ T8511]  do_el0_svc+0x48/0x58
[   66.582693][ T8511]  el0_svc+0x58/0x180
[   66.582699][ T8511]  el0t_64_sync_handler+0x84/0x12c
[   66.582705][ T8511]  el0t_64_sync+0x198/0x19c
[   66.623641][   T42] hfsplus: b-tree write err: -5, ino 4
[   66.677719][ T8518] binder: 8517:8518 unknown command 0
[   66.677752][ T8518] binder: 8517:8518 ioctl c0306201 20000080 returned -22
[   66.680813][ T8518] binder: BINDER_SET_CONTEXT_MGR already set
[   66.682646][ T8518] binder: 8517:8518 ioctl 4018620d 20000040 returned -16
[   66.711193][ T8520] loop4: detected capacity change from 0 to 4096
[   66.714125][ T8520] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[   66.742096][ T8524] loop0: detected capacity change from 0 to 512
[   66.745829][ T8520] ntfs3(loop4): ino=1a, mi_enum_attr
[   66.745874][ T8520] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[   66.749160][ T8520] ntfs3(loop4): ino=1a, mi_enum_attr
[   66.749201][ T8520] ntfs3(loop4): Failed to initialize $Extend/$Reparse.
[   66.774353][ T8524] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   66.779952][ T8520] ntfs3(loop4): ino=1b, mi_enum_attr
[   66.787532][ T8520] ntfs3(loop4): ino=1b, mi_enum_attr
[   67.242493][ T8537] ref_tracker: memory allocation failure, unreliable refcount tracker.
[   67.422625][ T8541] loop2: detected capacity change from 0 to 32768
[   67.426360][ T8541] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.607 (8541)
[   67.437027][ T8541] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   67.437077][ T8541] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[   67.437156][ T8541] BTRFS error (device loop2): cannot disable free-space-tree
[   67.437164][ T8541] BTRFS info (device loop2): disk space caching is enabled
[   67.437206][ T8541] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[   67.437293][ T8541] BTRFS error (device loop2): open_ctree failed: -22
[   67.455042][ T8541] tipc: Started in network mode
[   67.457082][ T8541] tipc: Node identity d619ce3c16a6, cluster identity 4711
[   67.458859][ T8541] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   67.740257][ T8541] syzkaller0: entered promiscuous mode
[   67.741378][ T8541] syzkaller0: entered allmulticast mode
[   67.752758][ T8540] tipc: Resetting bearer <eth:syzkaller0>
[   67.761540][ T6549] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   67.779183][ T8540] tipc: Disabling bearer <eth:syzkaller0>
[   67.976825][ T8555] netlink: 8 bytes leftover after parsing attributes in process `syz.1.611'.
[   68.042458][ T8558] binder: 8557:8558 unknown command 0
[   68.043131][ T8558] binder: 8557:8558 ioctl c0306201 20000080 returned -22
[   68.043795][ T8558] binder: BINDER_SET_CONTEXT_MGR already set
[   68.043802][ T8558] binder: 8557:8558 ioctl 4018620d 20000040 returned -16
[   68.057504][    T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   68.082016][ T8562] loop2: detected capacity change from 0 to 512
[   68.111656][ T8562] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   68.224099][    T9] usb 1-1: config index 0 descriptor too short (expected 60690, got 18)
[   68.225635][    T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   68.227476][    T9] usb 1-1: config 0 has no interfaces?
[   68.485706][    T9] usb 1-1: New USB device found, idVendor=0c45, idProduct=60a8, bcdDevice=b5.55
[   68.485746][    T9] usb 1-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3
[   68.485760][    T9] usb 1-1: Product: syz
[   68.485767][    T9] usb 1-1: Manufacturer: syz
[   68.485772][    T9] usb 1-1: SerialNumber: syz
[   68.489365][    T9] usb 1-1: config 0 descriptor??
[   68.606232][ T8573] netlink: 'syz.4.616': attribute type 10 has an invalid length.
[   68.704281][ T8575] netlink: 52 bytes leftover after parsing attributes in process `syz.3.617'.
[   68.710469][ T8575] netlink: 4 bytes leftover after parsing attributes in process `syz.3.617'.
[   68.780852][ T8573] loop4: detected capacity change from 0 to 65536
[   68.790151][ T8573] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[   68.807590][ T8573] XFS (loop4): Ending clean mount
[   68.816313][ T8573] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x50/0xf0, xfs_cntbt block 0x6 
[   68.820058][ T8573] XFS (loop4): Unmount and run xfs_repair
[   68.821241][ T8573] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[   68.823576][ T8573] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[   68.823602][ T8573] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10  ................
[   68.823618][ T8573] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[   68.823633][ T8573] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03  .....J..........
[   68.823646][ T8573] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00  ...9..?.........
[   68.823659][ T8573] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00  ...........?....
[   68.823671][ T8573] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   68.823684][ T8573] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   68.823697][ T8573] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x1f8/0x380" at daddr 0x6 len 2 error 74
[   68.823779][ T8573] XFS (loop4): page discard on page 00000000322982b1, inode 0x26, pos 1024.
[   68.841452][    T9] loop4: writeback error on inode 38, offset 0, sector 22
[   68.927841][ T8589] netlink: 32 bytes leftover after parsing attributes in process `syz.3.620'.
[   68.944581][ T6550] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   68.978040][ T8587] loop1: detected capacity change from 0 to 32768
[   68.997959][ T8593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   69.000003][ T8593] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   69.100646][ T8596] binder: 8595:8596 unknown command 0
[   69.255377][ T6675] libceph: connect (1)[c::]:6789 error -101
[   69.358427][ T8596] binder: 8595:8596 ioctl c0306201 20000080 returned -22
[   69.365581][ T6675] libceph: mon0 (1)[c::]:6789 connect error
[   69.365850][ T8594] vxfs: WRONG superblock magic 00000000 at 1
[   69.365930][ T8594] vxfs: WRONG superblock magic 00000000 at 8
[   69.365949][ T8594] vxfs: can't find superblock.
[   69.372691][ T8596] binder: BINDER_SET_CONTEXT_MGR already set
[   69.374655][ T8596] binder: 8595:8596 ioctl 4018620d 20000040 returned -16
[   69.400236][ T6558] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[   69.403726][ T6558] XFS (loop4): Uncorrected metadata errors detected; please run xfs_repair.
[   69.968513][ T8617] random: crng reseeded on system resumption
[   70.174553][ T6675] libceph: connect (1)[c::]:6789 error -101
[   70.174686][ T6675] libceph: mon0 (1)[c::]:6789 connect error
[   70.207553][ T8619] loop2: detected capacity change from 0 to 4096
[   70.208336][ T8597] ceph: No mds server is up or the cluster is laggy
[   70.210632][ T8619] ntfs3: Unknown parameter 'À'
[   70.366112][ T8631] netlink: 32 bytes leftover after parsing attributes in process `syz.4.632'.
[   70.496283][ T8639] binder: 8638:8639 got transaction to invalid handle, 1
[   70.496316][ T8639] binder: 8638:8639 cannot find target node
[   70.496334][ T8639] binder: 8638:8639 transaction async to 0:0 failed 79/29201/-22, code 0 size 96-24 line 3151
[   70.497507][   T26] binder: undelivered TRANSACTION_ERROR: 29201
[   70.537309][ T8643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   70.537571][ T8643] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   70.807960][ T6560] usb 1-1: USB disconnect, device number 6
[   70.850226][ T8657] netlink: 8 bytes leftover after parsing attributes in process `syz.0.641'.
[   70.970854][ T8657] loop0: detected capacity change from 0 to 32768
[   70.992253][ T8657] ocfs2: Slot 0 on device (7,0) was already allocated to this node!
[   70.994807][ T8657] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   71.030934][ T6549] ocfs2: Unmounting device (7,0) on (node local)
[   71.395409][ T8663] netlink: 32 bytes leftover after parsing attributes in process `syz.3.643'.
[   71.506299][ T8672] netlink: 'syz.3.645': attribute type 10 has an invalid length.
[   71.547475][    T9] atkbd serio0: keyboard reset failed on 
[   71.591007][ T8676] binder: 8675:8676 got transaction to invalid handle, 1
[   71.592308][ T8676] binder: 8675:8676 cannot find target node
[   71.593431][ T8676] binder: 8675:8676 transaction async to 0:0 failed 83/29201/-22, code 0 size 96-24 line 3151
[   71.595718][ T6675] binder: undelivered TRANSACTION_ERROR: 29201
[   71.718096][ T8672] loop3: detected capacity change from 0 to 65536
[   71.728013][ T8672] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[   71.756263][ T8672] XFS (loop3): Ending clean mount
[   71.795350][ T8672] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x50/0xf0, xfs_cntbt block 0x6 
[   71.795391][ T8672] XFS (loop3): Unmount and run xfs_repair
[   71.795408][ T8672] XFS (loop3): First 128 bytes of corrupted metadata buffer:
[   71.795415][ T8672] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[   71.795421][ T8672] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10  ................
[   71.795426][ T8672] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[   71.795432][ T8672] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03  .....J..........
[   71.795436][ T8672] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00  ...9..?.........
[   71.795441][ T8672] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00  ...........?....
[   71.795446][ T8672] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   71.795451][ T8672] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   71.795458][ T8672] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x1f8/0x380" at daddr 0x6 len 2 error 74
[   71.795510][ T8672] XFS (loop3): page discard on page 000000000218469b, inode 0x26, pos 1024.
[   71.795695][ T1816] loop3: writeback error on inode 38, offset 0, sector 22
[   71.868111][ T8693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   71.873182][ T8693] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   71.922543][ T8695] loop0: detected capacity change from 0 to 512
[   71.948142][ T8695] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   72.074778][ T8636] loop4: detected capacity change from 0 to 262144
[   72.079759][ T8636] f2fs: Unknown parameter 'nocheckpoipt_merge'
[   72.391923][ T6556] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[   72.394138][ T6556] XFS (loop3): Uncorrected metadata errors detected; please run xfs_repair.
[   72.490601][ T8705] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   72.694684][ T8707] loop4: detected capacity change from 0 to 32768
[   72.784117][ T6549] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.796585][ T8707] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[   72.802258][ T8707]   allowing incompatible features above 0.0: (unknown version)
[   72.807551][ T8707]   features: 
[   72.808460][ T8707] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0
[   72.808797][ T8707] bcachefs (loop4): initializing new filesystem
[   72.810402][ T8707] bcachefs (loop4): going read-write
[   72.859393][ T8707] bcachefs (loop4): marking superblocks
[   72.866239][ T8707] bcachefs (loop4): initializing freespace
[   72.869564][ T8707] bcachefs (loop4): done initializing freespace
[   72.872279][ T8707] bcachefs (loop4): reading snapshots table
[   72.873931][ T8707] bcachefs (loop4): reading snapshots done
[   72.886366][ T8707] bcachefs (loop4): done starting filesystem
[   73.206291][ T8726] binder: 8725:8726 got transaction to invalid handle, 1
[   73.209155][ T8726] binder: 8725:8726 cannot find target node
[   73.211053][ T8726] binder: 8725:8726 transaction async to 0:0 failed 87/29201/-22, code 0 size 96-24 line 3151
[   73.217467][ T1816] binder: undelivered TRANSACTION_ERROR: 29201
[   73.227755][ T8707] overlayfs: failed to resolve './file1': -2
[   73.545826][ T8729] loop2: detected capacity change from 0 to 256
[   73.656848][ T8731] loop3: detected capacity change from 0 to 512
[   73.913011][ T6675] IPVS: starting estimator thread 0...
[   73.951344][ T8724] loop0: detected capacity change from 0 to 262144
[   73.951734][ T8724] f2fs: Unknown parameter 'nocheckpo_merge'
[   73.973206][ T8731] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   73.998620][ T6558] bcachefs (loop4): shutting down
[   73.998650][ T6558] bcachefs (loop4): going read-only
[   73.998678][ T6558] bcachefs (loop4): finished waiting for writes to stop
[   74.082968][ T6558] bcachefs (loop4): flushing journal and stopping allocators, journal seq 3
[   74.089443][ T8737] IPVS: using max 69 ests per chain, 165600 per kthread
[   74.461090][ T6558] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 3
[   74.464319][ T6558] bcachefs (loop4): clean shutdown complete, journal seq 4
[   74.464739][ T6558] bcachefs (loop4): marking filesystem clean
[   74.497858][ T6558] bcachefs (loop4): shutdown complete
[   74.514627][ T8743] loop2: detected capacity change from 0 to 512
[   74.518022][ T6556] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.558341][ T8743] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   74.597767][ T8747] loop3: detected capacity change from 0 to 64
[   75.319817][ T8756] netlink: 'syz.3.664': attribute type 3 has an invalid length.
[   75.319852][ T8756] netlink: 64 bytes leftover after parsing attributes in process `syz.3.664'.
[   75.379300][ T6550] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.431449][ T8747] hfs: request for non-existent node 8 in B*Tree
[   75.432605][ T8747] hfs: request for non-existent node 8 in B*Tree
[   75.438001][ T8755] syz.3.664: attempt to access beyond end of device
[   75.438001][ T8755] loop3: rw=0, sector=39, nr_sectors = 122 limit=64
[   75.442445][ T8754] syz.3.664: attempt to access beyond end of device
[   75.442445][ T8754] loop3: rw=1, sector=169, nr_sectors = 2048 limit=64
[   75.457339][ T8754] syz.3.664: attempt to access beyond end of device
[   75.457339][ T8754] loop3: rw=1, sector=2217, nr_sectors = 1952 limit=64
[   75.462539][ T8754] syz.3.664: attempt to access beyond end of device
[   75.462539][ T8754] loop3: rw=1, sector=4169, nr_sectors = 1 limit=64
[   75.462630][ T8754] Buffer I/O error on dev loop3, logical block 4169, lost async page write
[   75.462664][ T8754] syz.3.664: attempt to access beyond end of device
[   75.462664][ T8754] loop3: rw=1, sector=4170, nr_sectors = 1 limit=64
[   75.462673][ T8754] Buffer I/O error on dev loop3, logical block 4170, lost async page write
[   75.462691][ T8754] syz.3.664: attempt to access beyond end of device
[   75.462691][ T8754] loop3: rw=1, sector=4172, nr_sectors = 1 limit=64
[   75.462698][ T8754] Buffer I/O error on dev loop3, logical block 4172, lost async page write
[   75.462714][ T8754] syz.3.664: attempt to access beyond end of device
[   75.462714][ T8754] loop3: rw=1, sector=4173, nr_sectors = 1 limit=64
[   75.462721][ T8754] Buffer I/O error on dev loop3, logical block 4173, lost async page write
[   75.462736][ T8754] syz.3.664: attempt to access beyond end of device
[   75.462736][ T8754] loop3: rw=1, sector=4174, nr_sectors = 1 limit=64
[   75.462743][ T8754] Buffer I/O error on dev loop3, logical block 4174, lost async page write
[   75.462757][ T8754] syz.3.664: attempt to access beyond end of device
[   75.462757][ T8754] loop3: rw=1, sector=4175, nr_sectors = 1 limit=64
[   75.462764][ T8754] Buffer I/O error on dev loop3, logical block 4175, lost async page write
[   75.462778][ T8754] syz.3.664: attempt to access beyond end of device
[   75.462778][ T8754] loop3: rw=1, sector=4176, nr_sectors = 1 limit=64
[   75.462785][ T8754] Buffer I/O error on dev loop3, logical block 4176, lost async page write
[   75.462800][ T8754] Buffer I/O error on dev loop3, logical block 4177, lost async page write
[   75.462859][ T8754] Buffer I/O error on dev loop3, logical block 4196, lost async page write
[   75.462875][ T8754] Buffer I/O error on dev loop3, logical block 4197, lost async page write
[   75.499390][ T8764] binder: BINDER_SET_CONTEXT_MGR already set
[   75.500494][ T8764] binder: 8763:8764 ioctl 4018620d 20000040 returned -16
[   75.663405][    T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   75.760493][ T8774] loop2: detected capacity change from 0 to 32768
[   75.809987][ T8788] loop3: detected capacity change from 0 to 512
[   75.819515][    T9] usb 1-1: config index 0 descriptor too short (expected 60690, got 18)
[   75.819547][    T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   75.819580][    T9] usb 1-1: config 0 has no interfaces?
[   75.821413][    T9] usb 1-1: New USB device found, idVendor=0c45, idProduct=60a8, bcdDevice=b5.55
[   75.821424][    T9] usb 1-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3
[   75.821431][    T9] usb 1-1: Product: syz
[   75.821436][    T9] usb 1-1: Manufacturer: syz
[   75.821441][    T9] usb 1-1: SerialNumber: syz
[   75.822750][    T9] usb 1-1: config 0 descriptor??
[   76.080855][ T8788] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   76.180213][ T8774] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[   76.180242][ T8774]   allowing incompatible features above 0.0: (unknown version)
[   76.180260][ T8774]   features: 
[   76.180276][ T8774] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[   76.180299][ T8774] bcachefs (loop2): initializing new filesystem
[   76.181891][ T8774] bcachefs (loop2): going read-write
[   76.413857][ T8774] bcachefs (loop2): marking superblocks
[   76.533953][ T8774] bcachefs (loop2): initializing freespace
[   76.535643][ T8774] bcachefs (loop2): done initializing freespace
[   76.536901][ T8774] bcachefs (loop2): reading snapshots table
[   76.536924][ T8774] bcachefs (loop2): reading snapshots done
[   76.546278][ T8774] bcachefs (loop2): done starting filesystem
[   76.554326][ T8774] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[   76.568468][ T8774] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[   76.675684][ T8810] binder: BINDER_SET_CONTEXT_MGR already set
[   76.675712][ T8810] binder: 8809:8810 ioctl 4018620d 20000040 returned -16
[   76.677245][ T6556] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.683006][ T8814] netlink: 36 bytes leftover after parsing attributes in process `syz.4.683'.
[   76.724837][ T6550] bcachefs (loop2): shutting down
[   76.724866][ T6550] bcachefs (loop2): going read-only
[   76.724892][ T6550] bcachefs (loop2): finished waiting for writes to stop
[   76.745207][ T6550] bcachefs (loop2): flushing journal and stopping allocators, journal seq 4
[   76.805813][ T6550] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 5
[   76.840808][ T6550] bcachefs (loop2): clean shutdown complete, journal seq 6
[   76.841213][ T6550] bcachefs (loop2): marking filesystem clean
[   76.853624][ T6550] bcachefs (loop2): shutdown complete
[   77.213748][ T8832] snd_virmidi snd_virmidi.0: control 0:9:32769:syz0:3106 is already present
[   77.735908][ T8844] tipc: Started in network mode
[   77.735938][ T8844] tipc: Node identity 0e9689d34cc9, cluster identity 4711
[   77.735984][ T8844] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   77.737925][ T8844] syzkaller0: entered promiscuous mode
[   77.737938][ T8844] syzkaller0: entered allmulticast mode
[   77.743509][ T8844] tipc: Resetting bearer <eth:syzkaller0>
[   77.745147][ T8843] tipc: Resetting bearer <eth:syzkaller0>
[   77.750956][ T8843] tipc: Disabling bearer <eth:syzkaller0>
[   77.783901][ T8846] binder: BINDER_SET_CONTEXT_MGR already set
[   77.783930][ T8846] binder: 8845:8846 ioctl 4018620d 20000040 returned -16
[   77.949211][ T8850] FAT-fs (nullb0): bogus number of reserved sectors
[   77.949613][ T8850] FAT-fs (nullb0): Can't find a valid FAT filesystem
[   77.953140][ T8852] FAULT_INJECTION: forcing a failure.
[   77.953140][ T8852] name failslab, interval 1, probability 0, space 0, times 0
[   77.953167][ T8852] CPU: 1 UID: 0 PID: 8852 Comm: syz.1.697 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT 
[   77.953180][ T8852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025
[   77.953185][ T8852] Call trace:
[   77.953193][ T8852]  show_stack+0x2c/0x3c (C)
[   77.953209][ T8852]  __dump_stack+0x30/0x40
[   77.953219][ T8852]  dump_stack_lvl+0xd8/0x12c
[   77.953227][ T8852]  dump_stack+0x1c/0x28
[   77.953233][ T8852]  should_fail_ex+0x41c/0x594
[   77.953241][ T8852]  should_failslab+0xc0/0x128
[   77.953248][ T8852]  __kmalloc_cache_noprof+0x80/0x3fc
[   77.953255][ T8852]  vhost_iotlb_alloc+0x60/0x160
[   77.953263][ T8852]  vhost_dev_ioctl+0xab0/0xe50
[   77.953268][ T8852]  vhost_vsock_dev_ioctl+0x22c/0xcf4
[   77.953275][ T8852]  __arm64_sys_ioctl+0x14c/0x1c4
[   77.953281][ T8852]  invoke_syscall+0x98/0x2b8
[   77.953287][ T8852]  el0_svc_common+0x130/0x23c
[   77.953292][ T8852]  do_el0_svc+0x48/0x58
[   77.953296][ T8852]  el0_svc+0x58/0x180
[   77.953302][ T8852]  el0t_64_sync_handler+0x84/0x12c
[   77.953308][ T8852]  el0t_64_sync+0x198/0x19c
[   78.446396][ T6619] usb 1-1: USB disconnect, device number 7
[   78.504170][ T8863] loop0: detected capacity change from 0 to 512
[   78.533440][ T8863] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   79.050869][ T8876] loop1: detected capacity change from 0 to 512
[   79.083207][ T8876] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   79.822805][ T6549] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.979316][ T8890] netlink: 24 bytes leftover after parsing attributes in process `syz.2.686'.
[   79.980674][ T6565] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.980819][ T8890] netlink: 24 bytes leftover after parsing attributes in process `syz.2.686'.
[   80.016400][ T8893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   80.016584][ T8893] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   80.126169][ T8899] FAULT_INJECTION: forcing a failure.
[   80.126169][ T8899] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   80.126413][ T8899] CPU: 0 UID: 0 PID: 8899 Comm: syz.3.709 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT 
[   80.126427][ T8899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025
[   80.126432][ T8899] Call trace:
[   80.126435][ T8899]  show_stack+0x2c/0x3c (C)
[   80.126448][ T8899]  __dump_stack+0x30/0x40
[   80.126455][ T8899]  dump_stack_lvl+0xd8/0x12c
[   80.126460][ T8899]  dump_stack+0x1c/0x28
[   80.126464][ T8899]  should_fail_ex+0x41c/0x594
[   80.126472][ T8899]  should_fail+0x14/0x24
[   80.126478][ T8899]  should_fail_usercopy+0x20/0x30
[   80.126484][ T8899]  _copy_from_iter+0x194/0x1284
[   80.126491][ T8899]  tcp_sendmsg_locked+0x1c8c/0x4774
[   80.126497][ T8899]  tcp_sendmsg+0x40/0x64
[   80.126502][ T8899]  inet_sendmsg+0x154/0x284
[   80.126507][ T8899]  __sys_sendto+0x36c/0x4f4
[   80.126514][ T8899]  __arm64_sys_sendto+0xd8/0xf8
[   80.126520][ T8899]  invoke_syscall+0x98/0x2b8
[   80.126525][ T8899]  el0_svc_common+0x130/0x23c
[   80.126530][ T8899]  do_el0_svc+0x48/0x58
[   80.126535][ T8899]  el0_svc+0x58/0x180
[   80.126542][ T8899]  el0t_64_sync_handler+0x84/0x12c
[   80.126547][ T8899]  el0t_64_sync+0x198/0x19c
[   80.369975][ T8906] loop4: detected capacity change from 0 to 512
[   80.405268][ T8906] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   81.176809][ T8918] loop1: detected capacity change from 0 to 512
[   81.193306][ T8918] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   81.274483][ T6558] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.316996][ T8914] loop3: detected capacity change from 0 to 32768
[   81.318072][ T8927] netlink: 12 bytes leftover after parsing attributes in process `syz.2.721'.
[   81.334917][ T8929] loop4: detected capacity change from 0 to 512
[   81.834868][ T8914] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[   81.933710][ T8914] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[   81.944613][ T8929] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   81.957040][ T8914] 
[   81.957500][ T8914] ======================================================
[   81.958685][ T8914] WARNING: possible circular locking dependency detected
[   81.959751][ T8914] 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 Not tainted
[   81.960749][ T8914] ------------------------------------------------------
[   81.961771][ T8914] syz.3.716/8914 is trying to acquire lock:
[   81.962704][ T8914] ffff0000f708ce38 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_xattr_get+0xe8/0x220
[   81.964235][ T8914] 
[   81.964235][ T8914] but task is already holding lock:
[   81.965374][ T8914] ffff0000c2f3c950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xe4c/0x10dc
[   81.966690][ T8914] 
[   81.966690][ T8914] which lock already depends on the new lock.
[   81.966690][ T8914] 
[   81.968112][ T8914] 
[   81.968112][ T8914] the existing dependency chain (in reverse order) is:
[   81.969508][ T8914] 
[   81.969508][ T8914] -> #3 (jbd2_handle){++++}-{0:0}:
[   81.970675][ T8914]        start_this_handle+0xe74/0x10dc
[   81.971482][ T8914]        jbd2__journal_start+0x288/0x51c
[   81.972301][ T8914]        jbd2_journal_start+0x3c/0x4c
[   81.973064][ T8914]        ocfs2_start_trans+0x368/0x6b0
[   81.973816][ T8914]        ocfs2_reserve_suballoc_bits+0x630/0x3b9c
[   81.974704][ T8914]        ocfs2_reserve_new_metadata_blocks+0x368/0x810
[   81.975636][ T8914]        ocfs2_init_xattr_set_ctxt+0x318/0x774
[   81.976563][ T8914]        ocfs2_xattr_set+0x920/0xe9c
[   81.977371][ T8914]        ocfs2_set_acl+0x574/0x628
[   81.978185][ T8914]        ocfs2_iop_set_acl+0x190/0x25c
[   81.979069][ T8914]        vfs_set_acl+0x70c/0x974
[   81.979870][ T8914]        do_set_acl+0xe0/0x1a8
[   81.980626][ T8914]        filename_setxattr+0x268/0x4f8
[   81.981474][ T8914]        path_setxattrat+0x2e8/0x320
[   81.982277][ T8914]        __arm64_sys_setxattr+0xc0/0xdc
[   81.983114][ T8914]        invoke_syscall+0x98/0x2b8
[   81.983899][ T8914]        el0_svc_common+0x130/0x23c
[   81.984703][ T8914]        do_el0_svc+0x48/0x58
[   81.985404][ T8914]        el0_svc+0x58/0x180
[   81.986066][ T8914]        el0t_64_sync_handler+0x84/0x12c
[   81.986869][ T8914]        el0t_64_sync+0x198/0x19c
[   81.987638][ T8914] 
[   81.987638][ T8914] -> #2 (&journal->j_trans_barrier){.+.+}-{4:4}:
[   81.988999][ T8914]        down_read+0x58/0x2f8
[   81.989715][ T8914]        ocfs2_start_trans+0x35c/0x6b0
[   81.990579][ T8914]        ocfs2_reserve_suballoc_bits+0x630/0x3b9c
[   81.991562][ T8914]        ocfs2_reserve_new_metadata_blocks+0x368/0x810
[   81.992578][ T8914]        ocfs2_init_xattr_set_ctxt+0x318/0x774
[   81.993484][ T8914]        ocfs2_xattr_set+0x920/0xe9c
[   81.994291][ T8914]        ocfs2_set_acl+0x574/0x628
[   81.995084][ T8914]        ocfs2_iop_set_acl+0x190/0x25c
[   81.995914][ T8914]        vfs_set_acl+0x70c/0x974
[   81.996588][ T8914]        do_set_acl+0xe0/0x1a8
[   81.997199][ T8914]        filename_setxattr+0x268/0x4f8
[   81.997963][ T8914]        path_setxattrat+0x2e8/0x320
[   81.998729][ T8914]        __arm64_sys_setxattr+0xc0/0xdc
[   81.999564][ T8914]        invoke_syscall+0x98/0x2b8
[   82.000294][ T8914]        el0_svc_common+0x130/0x23c
[   82.000999][ T8914]        do_el0_svc+0x48/0x58
[   82.001674][ T8914]        el0_svc+0x58/0x180
[   82.002341][ T8914]        el0t_64_sync_handler+0x84/0x12c
[   82.003127][ T8914]        el0t_64_sync+0x198/0x19c
[   82.003860][ T8914] 
[   82.003860][ T8914] -> #1 (sb_internal#2){.+.+}-{0:0}:
[   82.004882][ T8914]        ocfs2_start_trans+0x1f4/0x6b0
[   82.005618][ T8914]        ocfs2_xattr_set+0xac4/0xe9c
[   82.006329][ T8914]        ocfs2_set_acl+0x574/0x628
[   82.007035][ T8914]        ocfs2_iop_set_acl+0x190/0x25c
[   82.007811][ T8914]        vfs_set_acl+0x70c/0x974
[   82.008489][ T8914]        do_set_acl+0xc8/0x1a8
[   82.009111][ T8914]        filename_setxattr+0x268/0x4f8
[   82.009819][ T8914]        path_setxattrat+0x2e8/0x320
[   82.010519][ T8914]        __arm64_sys_setxattr+0xc0/0xdc
[   82.011256][ T8914]        invoke_syscall+0x98/0x2b8
[   82.011925][ T8914]        el0_svc_common+0x130/0x23c
[   82.012616][ T8914]        do_el0_svc+0x48/0x58
[   82.013233][ T8914]        el0_svc+0x58/0x180
[   82.013932][ T8914]        el0t_64_sync_handler+0x84/0x12c
[   82.014854][ T8914]        el0t_64_sync+0x198/0x19c
[   82.015623][ T8914] 
[   82.015623][ T8914] -> #0 (&oi->ip_xattr_sem){++++}-{4:4}:
[   82.016728][ T8914]        __lock_acquire+0x1774/0x30a4
[   82.017474][ T8914]        lock_acquire+0x14c/0x2e0
[   82.018179][ T8914]        down_read+0x58/0x2f8
[   82.018870][ T8914]        ocfs2_xattr_get+0xe8/0x220
[   82.019625][ T8914]        ocfs2_xattr_security_get+0x40/0x54
[   82.020506][ T8914]        __vfs_getxattr+0x394/0x3c0
[   82.021268][ T8914]        smk_fetch+0xc4/0x150
[   82.022001][ T8914]        smack_d_instantiate+0x53c/0x7a4
[   82.022879][ T8914]        security_d_instantiate+0x100/0x204
[   82.023825][ T8914]        d_instantiate+0x5c/0x9c
[   82.024641][ T8914]        ocfs2_symlink+0x19c4/0x1ff8
[   82.025446][ T8914]        vfs_symlink+0x138/0x288
[   82.026312][ T8914]        do_symlinkat+0x17c/0x360
[   82.027073][ T8914]        __arm64_sys_symlinkat+0x9c/0xb4
[   82.027798][ T8914]        invoke_syscall+0x98/0x2b8
[   82.028511][ T8914]        el0_svc_common+0x130/0x23c
[   82.029270][ T8914]        do_el0_svc+0x48/0x58
[   82.029941][ T8914]        el0_svc+0x58/0x180
[   82.030626][ T8914]        el0t_64_sync_handler+0x84/0x12c
[   82.031448][ T8914]        el0t_64_sync+0x198/0x19c
[   82.032181][ T8914] 
[   82.032181][ T8914] other info that might help us debug this:
[   82.032181][ T8914] 
[   82.033614][ T8914] Chain exists of:
[   82.033614][ T8914]   &oi->ip_xattr_sem --> &journal->j_trans_barrier --> jbd2_handle
[   82.033614][ T8914] 
[   82.035660][ T8914]  Possible unsafe locking scenario:
[   82.035660][ T8914] 
[   82.036719][ T8914]        CPU0                    CPU1
[   82.037471][ T8914]        ----                    ----
[   82.038216][ T8914]   rlock(jbd2_handle);
[   82.038773][ T8914]                                lock(&journal->j_trans_barrier);
[   82.039863][ T8914]                                lock(jbd2_handle);
[   82.040771][ T8914]   rlock(&oi->ip_xattr_sem);
[   82.041420][ T8914] 
[   82.041420][ T8914]  *** DEADLOCK ***
[   82.041420][ T8914] 
[   82.042590][ T8914] 7 locks held by syz.3.716/8914:
[   82.043392][ T8914]  #0: ffff0000d923a428 (sb_writers#11){.+.+}-{0:0}, at: mnt_want_write+0x44/0x9c
[   82.044865][ T8914]  #1: ffff0000f71442c0 (&type->i_mutex_dir_key#8/1){+.+.}-{4:4}, at: filename_create+0x1ac/0x32c
[   82.046587][ T8914]  #2: ffff0000f708ed80 (&ocfs2_sysfile_lock_key[INODE_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x12c/0x3b9c
[   82.048603][ T8914]  #3: ffff0000f70889c0 (&ocfs2_sysfile_lock_key[LOCAL_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_local_alloc_bits+0x104/0x26a0
[   82.050736][ T8914]  #4: ffff0000d923a618 (sb_internal#2){.+.+}-{0:0}, at: ocfs2_symlink+0xa68/0x1ff8
[   82.052054][ T8914]  #5: ffff0000f7a0f4e8 (&journal->j_trans_barrier){.+.+}-{4:4}, at: ocfs2_start_trans+0x35c/0x6b0
[   82.053813][ T8914]  #6: ffff0000c2f3c950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xe4c/0x10dc
[   82.055360][ T8914] 
[   82.055360][ T8914] stack backtrace:
[   82.056272][ T8914] CPU: 0 UID: 0 PID: 8914 Comm: syz.3.716 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT 
[   82.057984][ T8914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025
[   82.059458][ T8914] Call trace:
[   82.059929][ T8914]  show_stack+0x2c/0x3c (C)
[   82.060633][ T8914]  __dump_stack+0x30/0x40
[   82.061267][ T8914]  dump_stack_lvl+0xd8/0x12c
[   82.061896][ T8914]  dump_stack+0x1c/0x28
[   82.062488][ T8914]  print_circular_bug+0x324/0x32c
[   82.063242][ T8914]  check_noncircular+0x154/0x174
[   82.063946][ T8914]  __lock_acquire+0x1774/0x30a4
[   82.064674][ T8914]  lock_acquire+0x14c/0x2e0
[   82.065330][ T8914]  down_read+0x58/0x2f8
[   82.065974][ T8914]  ocfs2_xattr_get+0xe8/0x220
[   82.066743][ T8914]  ocfs2_xattr_security_get+0x40/0x54
[   82.067614][ T8914]  __vfs_getxattr+0x394/0x3c0
[   82.068370][ T8914]  smk_fetch+0xc4/0x150
[   82.068938][ T8914]  smack_d_instantiate+0x53c/0x7a4
[   82.069737][ T8914]  security_d_instantiate+0x100/0x204
[   82.070539][ T8914]  d_instantiate+0x5c/0x9c
[   82.071183][ T8914]  ocfs2_symlink+0x19c4/0x1ff8
[   82.071953][ T8914]  vfs_symlink+0x138/0x288
[   82.072625][ T8914]  do_symlinkat+0x17c/0x360
[   82.073361][ T8914]  __arm64_sys_symlinkat+0x9c/0xb4
[   82.074120][ T8914]  invoke_syscall+0x98/0x2b8
[   82.074808][ T8914]  el0_svc_common+0x130/0x23c
[   82.075490][ T8914]  do_el0_svc+0x48/0x58
[   82.076089][ T8914]  el0_svc+0x58/0x180
[   82.076659][ T8914]  el0t_64_sync_handler+0x84/0x12c
[   82.077482][ T8914]  el0t_64_sync+0x198/0x19c
[   82.099935][ T6565] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.122141][ T6556] ocfs2: Unmounting device (7,3) on (node local)
[   82.490891][ T6558] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.