last executing test programs:

35.547811719s ago: executing program 2 (id=191):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc80, &(0x7f0000000600)=ANY=[@ANYRES16=0x0], 0x1, 0x266, &(0x7f0000000800)="$eJzs281OE1EYxvGHDwVBmCqKgjG+0Y1uJlCvoCGQGJtokBo/EpNBptp0aEmnwdQYYefW6yAu3ZkYb4CNV+DCHRuXLIxjmKnQlhrDQiba/29zXnJ4mnP6njZn0dl58Ha1XAzdoldXf59pUNrUrpRRvwaU6GuO/XF9Uq02dWMi/+XyvYePbufy+flFs4Xc0s2smY1f+fji1burn+qj99+PfxjSdubJzrfs1+3J7amdH0vPS6GVQqtU6+bZcrVa95YD31ZKYdk1uxv4XuhbqRL6tbb5YlBdW2uYV1kZG1mr+WFoXqVhZb9h9arVaw3znnmlirmua2Mjwp8UthYXvVzaq8DfVavlvDlJ04dmClupLAgAAKSK+38v4/7fC/bu/4+bn9923P8BAAAAAAAAAAAAAAAAAAAAAPgX7EaRE0WR82s8IcVP+ETNv09JGpE0Kum0pDFJ45IcSRlJZySdlTQh6Zyk85ImJV2QdFHSVMtrpb1XHEb/exv97230v7e1PLg7LK2+WS+sF5Ixmc8VVVIgXzNy9D3uZVNSL9zKz89YLKNLqxvN/MZ6YaA9Pytn78B0y88meWvPD8Xnbj+flbN3wLrls13zw7p+rSXvytHnp6oq0Ep8Jg/yr2fN5u7kO/LT8f/971zb17V/rvu7+SR/hPPR8f4Oanow3b1DChsvy14Q+DUKCgqK/SLtbyYch4Omp70SAAAAAAAAAAAAAAAAAMBRHMfPCdPeIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnX4GAAD//5KSYE0=")
syz_mount_image$fuse(0x0, &(0x7f0000000a80)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x846048, 0x0, 0x0, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
ftruncate(r0, 0x8008976)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

35.290523771s ago: executing program 2 (id=196):
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
wait4(r0, 0x0, 0x40000000, 0x0)
ptrace$getsig(0x4202, r0, 0x1, 0xffffffffffffffff)

35.070341661s ago: executing program 2 (id=203):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0})
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0xc0000)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r2, @ANYBLOB="010028bd7000fedbdf253b00000008000300", @ANYRES32=r1, @ANYBLOB="7e0033008000e100ffffffffffff080211"], 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000080)

35.008737654s ago: executing program 2 (id=204):
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004200120060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe)

34.816837693s ago: executing program 2 (id=207):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000340)='./proc/fs/nfsd\x00', &(0x7f0000000380)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc/fs/nfsd/threads\x00', 0x1, 0x0)
write(r0, &(0x7f0000000900)="2a20000000df", 0x6)

34.707996888s ago: executing program 2 (id=209):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000018bbdecde39739fcd1df176dde746ec834120600000000003b814e50a959736d6572462abc30ef5b65c70f73ecea54b5e5bea9836c319f653557e79a002208ce996dda659bd5ba0f4ce5c2080002223dc60000000000000044cd0a1e3686873600000000005493b4b874cd601d5b9fa9b40fe4d76afc3a989c6d60044e89eb96e44d01a1034e3797ffa86870b82939f41ffa0f3d726f085663c29cbdc4c766a7eb77cc36160191acf5ae7469c82ab4145b595b987d75912a0fcd1c061835294cc0c618aba204f8adaa20c80108d356cd88cc86177056b06e7068c40f807d9e539f8f5b64a8ee0725aa8d00000000007cb6020d90ea79b8027cf75964dd86c2ed2b5e75779677aa8c76b848dd03dab190b5f02ec52830a17b01eaae1c3df076000000000000000000000000000083a48a6b926c668b9b90195018ea3619f9d80a0b894e212178e1a19909d764666264fa29e2c055fd7f8e67c2acfb75f0a8d41692f4542a575ee42ed94a0014fba44985cca9df12fe93bfaccf0122a6e7e593613ac0111701b125cc6799224883d08ce470220a6decad26f0378072a571da000000b1a6bdf03fd56697e348b5b494f6fddb9f56142a47a40ef81690a7eca421bd0ad198afa58ce69d61c29deaa93c0efea0df04f20020ee84075b4e1a2ad43d1be1138de4668e7b6137545708790c501f1ed7f6a571d5000000000000007d2bee8ed5acba62b8ce6eee44e813220ebc37ad7d422bb972c33e626d4d13827d303ee15e254c75ee569a56fa9e"], 0x1, 0x55a8, &(0x7f00000014c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r1, &(0x7f00000000c0)="0e", 0xfec3, 0x8000c61)
ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0)

19.36777188s ago: executing program 32 (id=209):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x55a8, &(0x7f00000014c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r1, &(0x7f00000000c0)="0e", 0xfec3, 0x8000c61)
ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0)

15.974862009s ago: executing program 3 (id=364):
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps_rollup\x00')
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
exit(0xfffffffffffffffb)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')

14.751868096s ago: executing program 3 (id=372):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@userxattr}]})
chdir(&(0x7f00000003c0)='./bus\x00')
linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000)
renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0)

14.424099842s ago: executing program 3 (id=374):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='temp_file\x00', 0x42, 0x1ff)
write(r0, &(0x7f0000000080)='/dev/mapper/control', 0x13)
lseek(r0, 0x0, 0x0)
read(r0, &(0x7f0000000100), 0x14)
openat(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
pselect6(0x40, &(0x7f00000002c0)={0x0, 0xfffffffffffffff9, 0x1, 0x400, 0x800, 0x6, 0x8000001000000000}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x381, 0x9, 0x4, 0x9e22, 0x0, 0x100}, &(0x7f0000000280)={0x0, 0x989680}, 0x0)

14.271875289s ago: executing program 3 (id=376):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./control\x00', 0x210000, &(0x7f0000000940)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@bh}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x200000, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f0000000300)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x19)
truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5)

13.336491393s ago: executing program 3 (id=380):
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', 0x1000801, &(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRES8, @ANYRESDEC], 0x0, 0x1e5, &(0x7f0000000800)="$eJzsmLtu1EAUhv+Z9ToXARINEjQgEYkgJV7bSxANRXgCpIRbx4qYKOBkkeMiiUSxoqHhMXgFiq0o6OhooQAkJAq2AiqKQTM+aw97MXhXKyE4n+TxP7czPsfWXxgMw/y3fPzw/f2za1c2VwAcwxLmaPxzrVgjrfXv5km8ff5q78Tj7i/BatXPdwC8XK8hpb5SStnzS3TfhMz1DUhcJH0LAh7pu5C4STqCwB3SDyzdXiARR969drx1fyeOfN0Eugl10xx8vl5HYAuATl0N5Lhf74vDo4etOI4SEnXVPycZnKoqflM/p7cucdWqn35ft58+6ei+hzUz7lv1CyARkG5CYKNfE8zB87yiJFb+Z5wivl2CaXObqTi5WrZmpXz7j4lPP/2VXv0k210q7N9Sw39QCGtkQQsBIB851eu+Ht71qdIRcCo92LnZpgzy7KGpN4vTRS79Vgv/1PZywfInB07uH41091Fj//BodWe3tR1tR3th2LzsX/L9tbBhjChrS/xv3vjTohW/PmatK1wctNI0CQ6ANAnyfpi1luNuvGh/MXuk8T+J5fNZDP2puJlVjkTQJc1dq2Wyy+Njc2AYhmEYhmEYhmEYhmEYhvkzzkKYv6BKKUE/REfwLbxuVv8MAAD//x1FVkQ=")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x100100c, 0x0, 0x1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200)

11.652313752s ago: executing program 3 (id=386):
pipe2(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
r2 = fanotify_init(0x0, 0x0)
fanotify_mark(r2, 0x1, 0x1009, r1, 0x0)
read$FUSE(r0, &(0x7f00000042c0)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000000200)={0x50, 0x0, r3, {0x7, 0x29, 0x87f, 0x0, 0x0, 0x1}}, 0x50)

11.473950301s ago: executing program 33 (id=386):
pipe2(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
r2 = fanotify_init(0x0, 0x0)
fanotify_mark(r2, 0x1, 0x1009, r1, 0x0)
read$FUSE(r0, &(0x7f00000042c0)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000000200)={0x50, 0x0, r3, {0x7, 0x29, 0x87f, 0x0, 0x0, 0x1}}, 0x50)

11.447780782s ago: executing program 4 (id=394):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @info_reply={0x10, 0x0, 0x0, 0x401, 0x7}}}}}, 0x0)
setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x1f, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c)

10.859212419s ago: executing program 4 (id=399):
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000201c1b091c00000000000109022d0001000060000904008002030000000921080400012205000905810320000908070905020340"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_ep_read(r0, 0x2, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2)
read$hidraw(r1, 0x0, 0x0)

7.272533068s ago: executing program 4 (id=392):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10f)
write(r0, &(0x7f0000000000)='7', 0x1)
close(0xffffffffffffffff)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bfd000/0x400000)=nil)

6.120705602s ago: executing program 4 (id=396):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='never', 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='1', 0x1)

6.118190552s ago: executing program 1 (id=398):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000340)={[{@i_version}, {@mblk_io_submit}, {@dioread_nolock}, {@test_dummy_encryption}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@nodelalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x4, 0xbaf, &(0x7f00000017c0)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x30040a9, 0x0, 0xf, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]})
chdir(&(0x7f0000000300)='./file0\x00')
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0xde0f9e45a02cc902)

5.159859647s ago: executing program 4 (id=401):
r0 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
r1 = syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x189e42)
syz_usb_disconnect(r0)
r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0)
r3 = dup2(r2, r1)
write(r3, 0x0, 0x0)

4.789185315s ago: executing program 0 (id=404):
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5mm6cwcE38/eHPe97wn8zxPTmfOe2BOA/jHms5+pBGHIuJsEjFZ359GxFC1NxKxWTvu/t3L81lLolJ5+7ckkoi4d/fyfOO1kvp2vD4YiYibryXx749a466ubyzPlcullfr46Nr5S0dX1zdeWTo/d650rnThxOyrJ2ZPzs52sdbbl9774pkf3nj+6vWPZ978/MB3SZyOifpccx3dMh3TW3+TZoWImOt2sJwM1OtprjMp5JgQAAAdpU1ruP/GZAzEw8XbZHz7Y67JAQAAAF1RGYioAAAAAPtc4v4fAAAA9rnG9wDu3b0832j5fiOhv+6ciYipWv2N55trM4XYrG5HYjAixn5Povmx1qT2a09tOov09felrEWPnkPuZPNKRPx/u/OfVOufqj7F3Vp/GhEzXYg//ch4L9V/ugvxn6z+4S5EBICIG2dqF7LW61+6tf6Jba5/hW2uXbuR9/W/sf6737L+e1j/QJv131s7jHH4wUs32801r//e/eTnhSx+tn2qop7AnSsRhwvb1Z9s1Z+0qf/sDmOMz9++1m4uqz+rt9H6XX/lesSR6mqutf6GpNP/T3R0calcmqn93Ob11092jt98/rOWxW/cC/RDdv7HYnfn/9IOY0z979dD7eYeX3/6y1DyTrU3VN/z4dza2sqxiKHk9db9xzvn0jim8RpZ/S8+1/n9v1392WfCZv3vkP3ruVLfZuOrj8QcP3L8q93X31tZ/Qu7PP+f7jDGl99ce7/dXN71AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALA3pBExEUla3OqnabEYMR4R/4mxtHxxde3lxYsfXFjI5iKmYjBdXCqXZiJisjZOsvGxav/h+Pgj49mIOBgRn02OVsfF+YvlhbyLBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYMt4RExEkhYjIo2IPybTtFjMOysAAACg66byTgAAAADoOff/AAAAsP+13P8X/jIa6WcuAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7EsHn71xK4mIzVOj1ZYZqs8N5poZ0Gvpzg4b63UeQP8N5J0AkJtCU79SqVRyTAXoM/f4QPKY+ZG2M8NdzwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAv68XDt24lUTE5qnRassM1ecGc80M6LU07wSA3Ax0mkweuwPYwwp5JwDkxj0+UFvZP6jUtM6PtP3N4aeOCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDeMVFtSVqMiLTaT9NiMeJfETEVg8niUrk0ExEHIuKnycHhbHws76QBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoutX1jeW5crm0oqOj08XOaPQt1mj9zdzmmOH2Ux06OX8wAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQi9X1jeW5crm0spp3JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDeVtc3lufK5dJKDzt51wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQH7+DAAA///6CAm5")
pipe2$9p(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x800)
write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x7, 0x0, 0x0, {0xffffffffffffffff}}, 0x18)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x10012, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})

4.788975635s ago: executing program 1 (id=405):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x200000, 0x5000, 0x1})
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000380)={0xfec00000, 0x125000, 0x1})
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x2, 0x12000, 0x1})

4.024581541s ago: executing program 0 (id=406):
timer_create(0x2, 0x0, &(0x7f0000000040)=<r0=>0x0)
timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=<r1=>0x0)
timer_settime(r1, 0x1, &(0x7f000006b000)={{}, {0x0, 0x3938700}}, 0x0)
timer_settime(r0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x9}}, 0x0)
unshare(0x64000600)

4.023819141s ago: executing program 1 (id=407):
setresuid(0xee00, 0x0, 0x0)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r1)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
syz_open_procfs(r0, &(0x7f0000000040)='pagemap\x00')

4.014619931s ago: executing program 6 (id=387):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032})
r1 = socket$inet(0x2, 0xa, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'syzkaller0\x00', 0x1})
writev(r0, &(0x7f0000000100)=[{&(0x7f0000000200)="010000000000220010000000000000010000000000020800450000740001400040063c817f0000017f000001", 0x2c}, {&(0x7f0000000500)="0000d9269d790000c8aeec0ed69cad9900000000", 0x14}], 0x2)

3.540247833s ago: executing program 0 (id=408):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000040)=@v1={0x0, @adiantum, 0x4, @desc3})
chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00')
symlink(&(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

3.538802884s ago: executing program 1 (id=409):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000100)=ANY=[@ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00syzkaller0\x00\x00\x00\x00\x00\x00\x00\x00'])
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', 0x1})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'syzkaller0\x00'})

3.538624884s ago: executing program 5 (id=334):
r0 = socket$inet6(0xa, 0x3, 0x83)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x4, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, {}, 0x9, 0x0, 0x1, 0x0, 0x2}, {{@in=@empty, 0x1fffffc, 0x33}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x22}, 0x0, 0x0, 0x0, 0x3}}, 0xe8)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc)
connect$inet6(r0, &(0x7f00000020c0)={0xa, 0x4e20, 0xc, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x7}, 0x1c)

3.119620443s ago: executing program 0 (id=410):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f0000000140)=[<r1=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r1, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0x8000, 0x1c, 0xd, 0x8, 0x401, 0xa929, 0xa, 0x0, 0x52, 0x8000, 0x7e9, 0x401, 0x9aa1, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}})
r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100), 0x2, r1, 0xcccccccc})

3.119458023s ago: executing program 6 (id=387):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032})
r1 = socket$inet(0x2, 0xa, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'syzkaller0\x00', 0x1})
writev(r0, &(0x7f0000000100)=[{&(0x7f0000000200)="010000000000220010000000000000010000000000020800450000740001400040063c817f0000017f000001", 0x2c}, {&(0x7f0000000500)="0000d9269d790000c8aeec0ed69cad9900000000", 0x14}], 0x2)

2.789321349s ago: executing program 5 (id=334):
r0 = socket$inet6(0xa, 0x3, 0x83)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x4, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, {}, 0x9, 0x0, 0x1, 0x0, 0x2}, {{@in=@empty, 0x1fffffc, 0x33}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x22}, 0x0, 0x0, 0x0, 0x3}}, 0xe8)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc)
connect$inet6(r0, &(0x7f00000020c0)={0xa, 0x4e20, 0xc, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x7}, 0x1c)

2.477558143s ago: executing program 0 (id=411):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='lp', 0x2)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)

2.477126123s ago: executing program 6 (id=387):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032})
r1 = socket$inet(0x2, 0xa, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'syzkaller0\x00', 0x1})
writev(r0, &(0x7f0000000100)=[{&(0x7f0000000200)="010000000000220010000000000000010000000000020800450000740001400040063c817f0000017f000001", 0x2c}, {&(0x7f0000000500)="0000d9269d790000c8aeec0ed69cad9900000000", 0x14}], 0x2)

2.053079954s ago: executing program 5 (id=334):
r0 = socket$inet6(0xa, 0x3, 0x83)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x4, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, {}, 0x9, 0x0, 0x1, 0x0, 0x2}, {{@in=@empty, 0x1fffffc, 0x33}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x22}, 0x0, 0x0, 0x0, 0x3}}, 0xe8)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc)
connect$inet6(r0, &(0x7f00000020c0)={0xa, 0x4e20, 0xc, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x7}, 0x1c)

1.745310038s ago: executing program 1 (id=412):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0xffffffff, 0xc, 0x0, 0x97, "ff00e100e302000000000000000000000400"})
r1 = syz_open_pts(r0, 0x141601)
write(r1, &(0x7f0000000000)="d5", 0xfffffedf)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000040)={0xfffffffb, 0x9, 0x2, 0xae, 0x81, "aae5bc5a4150caf251a42dcbffe468fb06bc47", 0x4000007f, 0x2})

1.744902818s ago: executing program 6 (id=387):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032})
r1 = socket$inet(0x2, 0xa, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'syzkaller0\x00', 0x1})
writev(r0, &(0x7f0000000100)=[{&(0x7f0000000200)="010000000000220010000000000000010000000000020800450000740001400040063c817f0000017f000001", 0x2c}, {&(0x7f0000000500)="0000d9269d790000c8aeec0ed69cad9900000000", 0x14}], 0x2)

1.301438859s ago: executing program 4 (id=413):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000200)='md0', 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/block/md0/md/dev-ram0/ppl_size\x00', 0x1, 0x0)
write(r0, &(0x7f0000000740)='12', 0x2)

1.296028819s ago: executing program 5 (id=334):
r0 = socket$inet6(0xa, 0x3, 0x83)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x4, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, {}, 0x9, 0x0, 0x1, 0x0, 0x2}, {{@in=@empty, 0x1fffffc, 0x33}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x22}, 0x0, 0x0, 0x0, 0x3}}, 0xe8)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc)
connect$inet6(r0, &(0x7f00000020c0)={0xa, 0x4e20, 0xc, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x7}, 0x1c)

844.49713ms ago: executing program 6 (id=387):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032})
r1 = socket$inet(0x2, 0xa, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'syzkaller0\x00', 0x1})
writev(r0, &(0x7f0000000100)=[{&(0x7f0000000200)="010000000000220010000000000000010000000000020800450000740001400040063c817f0000017f000001", 0x2c}, {&(0x7f0000000500)="0000d9269d790000c8aeec0ed69cad9900000000", 0x14}], 0x2)

603.308992ms ago: executing program 0 (id=414):
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x412, &(0x7f0000000640)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}})
socket$pppoe(0x18, 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mount$fuseblk(&(0x7f0000000000), &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000006c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}})

602.051582ms ago: executing program 5 (id=334):
r0 = socket$inet6(0xa, 0x3, 0x83)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x4, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, {}, 0x9, 0x0, 0x1, 0x0, 0x2}, {{@in=@empty, 0x1fffffc, 0x33}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x22}, 0x0, 0x0, 0x0, 0x3}}, 0xe8)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc)
connect$inet6(r0, &(0x7f00000020c0)={0xa, 0x4e20, 0xc, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x7}, 0x1c)

368.038393ms ago: executing program 1 (id=415):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x58, &(0x7f0000000980)={[{@errors_remount}, {@grpquota}, {@nomblk_io_submit}, {@stripe={'stripe', 0x3d, 0x4ffff}}, {@norecovery}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x186b}}]}, 0xfe, 0x799, &(0x7f00000001c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f00000000c0)={@id={0x2, 0x0, @b}})
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
chdir(&(0x7f00000001c0)='./file0\x00')
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0)

366.264173ms ago: executing program 6 (id=387):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032})
r1 = socket$inet(0x2, 0xa, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'syzkaller0\x00', 0x1})
writev(r0, &(0x7f0000000100)=[{&(0x7f0000000200)="010000000000220010000000000000010000000000020800450000740001400040063c817f0000017f000001", 0x2c}, {&(0x7f0000000500)="0000d9269d790000c8aeec0ed69cad9900000000", 0x14}], 0x2)

0s ago: executing program 5 (id=334):
r0 = socket$inet6(0xa, 0x3, 0x83)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x4, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, {}, 0x9, 0x0, 0x1, 0x0, 0x2}, {{@in=@empty, 0x1fffffc, 0x33}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x22}, 0x0, 0x0, 0x0, 0x3}}, 0xe8)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc)
connect$inet6(r0, &(0x7f00000020c0)={0xa, 0x4e20, 0xc, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x7}, 0x1c)

kernel console output (not intermixed with test programs):

 already exists on: batadv_slave_0
[   74.455687][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.467237][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   74.484103][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.500728][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.511969][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   74.522071][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   74.539185][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   74.549574][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   74.568031][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.591470][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.612432][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.623273][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.634007][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.644892][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.656689][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.675913][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.689111][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.700525][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.718903][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.729985][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.746247][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.757436][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.778530][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.796982][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.813045][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   74.821858][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   74.844493][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   74.853443][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   74.878774][ T4186] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.889367][ T4186] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.904689][ T4186] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.915944][ T4186] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.967669][ T4187] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.979160][ T4187] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.989887][ T4187] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.998818][ T4187] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.044354][ T4250] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.068110][ T4250] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.130552][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   75.171412][ T3078] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.190025][ T3078] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.209171][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   75.229675][ T3078] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.247924][ T3078] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.276737][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   75.339121][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.349108][ T4250] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.368187][ T4250] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.375768][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.402310][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   75.433398][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   75.477148][ T1234] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.486896][ T4250] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.495113][ T1107] Bluetooth: hci2: command 0x0419 tx timeout
[   75.507886][ T1234] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.516774][ T4250] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.530658][ T1107] Bluetooth: hci1: command 0x0419 tx timeout
[   75.534038][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   75.554518][ T1107] Bluetooth: hci0: command 0x0419 tx timeout
[   75.560675][ T1107] Bluetooth: hci4: command 0x0419 tx timeout
[   75.569763][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   75.584276][ T4231] Bluetooth: hci3: command 0x0419 tx timeout
[   75.624703][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.644392][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.654978][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   75.888982][ T4288] FAULT_INJECTION: forcing a failure.
[   75.888982][ T4288] name failslab, interval 1, probability 0, space 0, times 1
[   75.913468][ T4234] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   75.942585][ T4288] CPU: 1 PID: 4288 Comm: syz.3.8 Not tainted syzkaller #0
[   75.949794][ T4288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   75.959898][ T4288] Call Trace:
[   75.963224][ T4288]  <TASK>
[   75.966334][ T4288]  dump_stack_lvl+0x188/0x250
[   75.971075][ T4288]  ? show_regs_print_info+0x20/0x20
[   75.976322][ T4288]  ? load_image+0x410/0x410
[   75.980878][ T4288]  ? __might_sleep+0xf0/0xf0
[   75.985504][ T4288]  ? __lock_acquire+0x7b50/0x7b50
[   75.990580][ T4288]  should_fail+0x383/0x4b0
[   75.995049][ T4288]  should_failslab+0x5/0x20
[   75.999591][ T4288]  slab_pre_alloc_hook+0x51/0xc0
[   76.004564][ T4288]  ? getname_flags+0xb7/0x4f0
[   76.009293][ T4288]  kmem_cache_alloc+0x3d/0x280
[   76.014097][ T4288]  getname_flags+0xb7/0x4f0
[   76.018649][ T4288]  user_path_at_empty+0x2a/0x190
[   76.023644][ T4288]  __se_sys_mount+0x2a4/0x3d0
[   76.028374][ T4288]  ? __x64_sys_mount+0xc0/0xc0
[   76.033192][ T4288]  ? lockdep_hardirqs_on+0x94/0x140
[   76.038424][ T4288]  ? __x64_sys_mount+0x1c/0xc0
[   76.043224][ T4288]  do_syscall_64+0x4c/0xa0
[   76.047674][ T4288]  ? clear_bhb_loop+0x30/0x80
[   76.052395][ T4288]  ? clear_bhb_loop+0x30/0x80
[   76.057118][ T4288]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   76.063051][ T4288] RIP: 0033:0x7fb2440ac159
[   76.067498][ T4288] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   76.087178][ T4288] RSP: 002b:00007fb242304028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   76.095636][ T4288] RAX: ffffffffffffffda RBX: 00007fb244333fa0 RCX: 00007fb2440ac159
[   76.103685][ T4288] RDX: 0000200000000240 RSI: 0000000000000000 RDI: 00002000000001c0
[   76.111706][ T4288] RBP: 00007fb24414306b R08: 0000000000000000 R09: 0000000000000000
[   76.119717][ T4288] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000
[   76.127729][ T4288] R13: 00007fb244334038 R14: 00007fb244333fa0 R15: 00007ffd48f80658
[   76.135754][ T4288]  </TASK>
[   76.400021][ T4296] loop1: detected capacity change from 0 to 4096
[   76.461979][ T4296] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback.
[   76.473760][ T4234] usb 1-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice= 1.00
[   76.473848][ T4234] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   76.512518][ T4230] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   76.589472][ T4300] Zero length message leads to an empty skb
[   76.734718][ T4304] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   76.808407][ T4234] net1080 1-1:1.0 usb0: register 'net1080' at usb-dummy_hcd.0-1, NetChip TurboCONNECT, 4e:97:e5:c8:65:b2
[   76.900737][ T4230] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   76.918848][ T4230] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[   76.938056][ T4230] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   76.990353][ T4230] usb 5-1: config 0 descriptor??
[   77.126152][ T1107] usb 1-1: USB disconnect, device number 2
[   77.137701][ T4314] loop2: detected capacity change from 0 to 1024
[   77.156886][ T1107] net1080 1-1:1.0 usb0: unregister 'net1080' usb-dummy_hcd.0-1, NetChip TurboCONNECT
[   77.195973][ T4317] loop1: detected capacity change from 0 to 512
[   77.273114][ T4317] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   77.356516][ T4230] usbhid 5-1:0.0: can't add hid device: -71
[   77.365809][ T4230] usbhid: probe of 5-1:0.0 failed with error -71
[   77.373593][ T4314] attempt to access beyond end of device
[   77.373593][ T4314] loop2: rw=2049, want=5780, limit=1024
[   77.391112][ T4230] usb 5-1: USB disconnect, device number 2
[   77.397471][ T4314] Buffer I/O error on dev loop2, logical block 2889, lost async page write
[   77.422760][ T4314] attempt to access beyond end of device
[   77.422760][ T4314] loop2: rw=2049, want=5780, limit=1024
[   77.431332][ T4317] EXT4-fs (loop1): 1 truncate cleaned up
[   77.434481][ T4314] Buffer I/O error on dev loop2, logical block 2889, lost async page write
[   77.451040][ T4179] udevd[4179]: setting owner of /dev/bus/usb/005/002 to uid=0, gid=0 failed: No such file or directory
[   77.481508][ T4317] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,dioread_nolock,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,nojournal_checksum,grpjquota=,,errors=continue. Quota mode: none.
[   77.749925][ T4337] loop0: detected capacity change from 0 to 64
[   77.860849][ T4230] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   77.933811][ T4234] kernel read not supported for file /sequencer (pid: 4234 comm: kworker/1:5)
[   78.077574][ T4347] syz.1.26 uses obsolete (PF_INET,SOCK_PACKET)
[   78.112506][ T4230] usb 5-1: Using ep0 maxpacket: 8
[   78.232730][ T4230] usb 5-1: config 0 has an invalid interface number: 52 but max is 0
[   78.240869][ T4230] usb 5-1: config 0 has no interface number 0
[   78.262016][ T4354] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   78.301824][ T4230] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   78.341877][ T4230] usb 5-1: config 0 interface 52 has no altsetting 0
[   78.353251][ T4350] loop0: detected capacity change from 0 to 4096
[   78.368983][ T4230] usb 5-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00
[   78.408192][ T4230] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   78.443915][ T4230] usb 5-1: config 0 descriptor??
[   78.482054][ T4360] device-mapper: table: 248:0: too large device
[   78.502984][ T4360] device-mapper: ioctl: error adding target to table
[   78.633603][ T4367] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   78.724959][ T4230] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.52/input/input5
[   79.028388][ T4193] usb 5-1: USB disconnect, device number 3
[   79.153187][ T4343] loop2: detected capacity change from 0 to 32768
[   79.242230][ T4363] loop1: detected capacity change from 0 to 32768
[   79.250881][ T4343] =======================================================
[   79.250881][ T4343] WARNING: The mand mount option has been deprecated and
[   79.250881][ T4343]          and is ignored by this kernel. Remove the mand
[   79.250881][ T4343]          option from the mount to silence this warning.
[   79.250881][ T4343] =======================================================
[   79.387998][ T4363] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[   79.401724][ T4343] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present!
[   79.451813][ T4363] JBD2: Ignoring recovery information on journal
[   79.511854][ T4363] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[   79.584531][ T4343] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   79.709217][ T4391] process 'syz.2.24' launched './file0' with NULL argv: empty string added
[   79.806488][ T4363] OCFS2: ERROR (device loop1): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #65 has bad signature INODE01
[   79.870330][ T4363] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[   79.916358][ T4397] capability: warning: `syz.4.38' uses deprecated v2 capabilities in a way that may be insecure
[   79.935500][ T4363] OCFS2: File system is now read-only.
[   79.941058][ T4363] (syz.1.30,4363,1):ocfs2_search_one_group:1706 ERROR: status = -30
[   79.976133][ T4398] FAULT_INJECTION: forcing a failure.
[   79.976133][ T4398] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[   79.989786][ T4398] CPU: 0 PID: 4398 Comm: syz.3.39 Not tainted syzkaller #0
[   79.991797][ T4363] (syz.1.30,4363,1):ocfs2_claim_suballoc_bits:1942 ERROR: status = -30
[   79.997053][ T4398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   79.997068][ T4398] Call Trace:
[   79.997075][ T4398]  <TASK>
[   79.997084][ T4398]  dump_stack_lvl+0x188/0x250
[   79.997113][ T4398]  ? show_regs_print_info+0x20/0x20
[   79.997135][ T4398]  ? load_image+0x410/0x410
[   79.997157][ T4398]  ? __lock_acquire+0x7b50/0x7b50
[   79.997190][ T4398]  should_fail+0x383/0x4b0
[   79.997225][ T4398]  prepare_alloc_pages+0x1e3/0x5b0
[   79.997258][ T4398]  __alloc_pages+0x11b/0x480
[   79.997285][ T4398]  ? zone_statistics+0x170/0x170
[   79.997312][ T4398]  ? __rwlock_init+0x140/0x140
[   79.997336][ T4398]  ? alloc_pages+0x452/0x560
[   79.997364][ T4398]  __get_free_pages+0x8/0x30
[   79.997386][ T4398]  kasan_populate_vmalloc_pte+0x21/0xc0
[   79.997409][ T4398]  __apply_to_page_range+0x987/0xd10
[   79.997440][ T4398]  ? kasan_populate_vmalloc+0x70/0x70
[   79.997466][ T4398]  alloc_vmap_area+0x19e8/0x1b30
[   80.062806][ T4363] (syz.1.30,4363,1):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30
[   80.065333][ T4398]  ? vm_map_ram+0xba0/0xba0
[   80.070138][ T4363] (syz.1.30,4363,1):ocfs2_claim_new_inode:2248 ERROR: status = -30
[   80.074588][ T4398]  __get_vm_area_node+0x14f/0x2d0
[   80.074621][ T4398]  __vmalloc_node_range+0xef/0x8b0
[   80.074645][ T4398]  ? sock_hash_alloc+0x2b9/0x530
[   80.074680][ T4398]  bpf_map_area_alloc+0xd4/0xe0
[   80.074703][ T4398]  ? sock_hash_alloc+0x2b9/0x530
[   80.074726][ T4398]  sock_hash_alloc+0x2b9/0x530
[   80.074752][ T4398]  map_create+0x481/0x2330
[   80.074777][ T4398]  ? bpf_lsm_bpf+0x5/0x10
[   80.102915][ T4363] (syz.1.30,4363,1):ocfs2_claim_new_inode:2263 ERROR: status = -30
[   80.104218][ T4398]  __sys_bpf+0x30a/0x6f0
[   80.104252][ T4398]  ? bpf_link_show_fdinfo+0x380/0x380
[   80.104296][ T4398]  __x64_sys_bpf+0x78/0x90
[   80.104320][ T4398]  do_syscall_64+0x4c/0xa0
[   80.104352][ T4398]  ? clear_bhb_loop+0x30/0x80
[   80.104380][ T4398]  ? clear_bhb_loop+0x30/0x80
[   80.104410][ T4398]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   80.104433][ T4398] RIP: 0033:0x7fb2440ac159
[   80.104454][ T4398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   80.104472][ T4398] RSP: 002b:00007fb242304028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   80.104497][ T4398] RAX: ffffffffffffffda RBX: 00007fb244333fa0 RCX: 00007fb2440ac159
[   80.104513][ T4398] RDX: 0000000000000050 RSI: 0000200000000040 RDI: 0000000000000000
[   80.104528][ T4398] RBP: 00007fb24414306b R08: 0000000000000000 R09: 0000000000000000
[   80.104541][ T4398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   80.104555][ T4398] R13: 00007fb244334038 R14: 00007fb244333fa0 R15: 00007ffd48f80658
[   80.104586][ T4398]  </TASK>
[   80.140776][ T4399] loop4: detected capacity change from 0 to 512
[   80.170713][ T4189] ocfs2: Unmounting device (7,2) on (node local)
[   80.321209][ T4363] (syz.1.30,4363,0):ocfs2_mknod_locked:646 ERROR: status = -30
[   80.341421][ T4399] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback.
[   80.373117][ T4363] (syz.1.30,4363,1):ocfs2_mknod:390 ERROR: status = -30
[   80.380946][ T4363] (syz.1.30,4363,1):ocfs2_mknod:509 ERROR: status = -30
[   80.389679][ T4363] (syz.1.30,4363,1):ocfs2_mkdir:666 ERROR: status = -30
[   80.422191][ T4363] (syz.1.30,4363,1):ocfs2_remount:624 ERROR: Cannot change heartbeat mode on remount
[   80.436159][ T4399] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   80.473756][ T4363] (syz.1.30,4363,1):ocfs2_get_suballoc_slot_bit:2748 ERROR: invalid inode 2 requested
[   80.493495][ T4363] (syz.1.30,4363,1):ocfs2_get_suballoc_slot_bit:2773 ERROR: status = -22
[   80.512248][ T4363] (syz.1.30,4363,1):ocfs2_test_inode_bit:2855 ERROR: get alloc slot and bit failed -22
[   80.562868][ T4363] (syz.1.30,4363,1):ocfs2_test_inode_bit:2896 ERROR: status = -22
[   80.680327][ T4406] input: syz0 as /devices/virtual/input/input6
[   80.720539][ T4187] ocfs2: Unmounting device (7,1) on (node local)
[   80.875704][ T4414] loop2: detected capacity change from 0 to 256
[   80.947073][ T4416] loop0: detected capacity change from 0 to 256
[   80.973974][ T4414] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001207b, chksum : 0x1e861e4d, utbl_chksum : 0xe619d30d)
[   81.038877][ T4416] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x5955b8de, utbl_chksum : 0xe619d30d)
[   81.159875][ T4416] exFAT-fs (loop0): hint_cluster is invalid (1)
[   81.185828][ T4416] exFAT-fs (loop0): error, invalid access to exfat cache (entry 0x00000000)
[   81.206319][ T4416] exFAT-fs (loop0): Filesystem has been set read-only
[   81.225006][ T4416] exFAT-fs (loop0): error, failed to bmap (inode : ffff888070318e60 iblock : 9, err : -5)
[   81.259560][ T4416] exFAT-fs (loop0): error, tried to truncate zeroed cluster.
[   81.278673][ T4416] exFAT-fs (loop0): error, tried to truncate zeroed cluster.
[   81.476064][ T4431] FAULT_INJECTION: forcing a failure.
[   81.476064][ T4431] name failslab, interval 1, probability 0, space 0, times 0
[   81.483259][ T4428] loop2: detected capacity change from 0 to 512
[   81.531183][ T4431] CPU: 1 PID: 4431 Comm: syz.0.49 Not tainted syzkaller #0
[   81.538474][ T4431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   81.548582][ T4431] Call Trace:
[   81.551934][ T4431]  <TASK>
[   81.555040][ T4431]  dump_stack_lvl+0x188/0x250
[   81.559782][ T4431]  ? show_regs_print_info+0x20/0x20
[   81.565045][ T4431]  ? load_image+0x410/0x410
[   81.569613][ T4431]  ? __might_sleep+0xf0/0xf0
[   81.574263][ T4431]  ? __lock_acquire+0x7b50/0x7b50
[   81.579346][ T4431]  should_fail+0x383/0x4b0
[   81.583849][ T4431]  should_failslab+0x5/0x20
[   81.588398][ T4431]  slab_pre_alloc_hook+0x51/0xc0
[   81.591860][ T4429] loop1: detected capacity change from 0 to 2048
[   81.593391][ T4431]  kmem_cache_alloc_trace+0x47/0x290
[   81.593418][ T4431]  ? __se_sys_fsopen+0x19c/0x320
[   81.593448][ T4431]  __se_sys_fsopen+0x19c/0x320
[   81.614835][ T4431]  do_syscall_64+0x4c/0xa0
[   81.619300][ T4431]  ? clear_bhb_loop+0x30/0x80
[   81.624020][ T4431]  ? clear_bhb_loop+0x30/0x80
[   81.628746][ T4431]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   81.634691][ T4431] RIP: 0033:0x7f7339c13159
[   81.639156][ T4431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   81.658800][ T4431] RSP: 002b:00007f7337e6b028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae
[   81.667268][ T4431] RAX: ffffffffffffffda RBX: 00007f7339e9afa0 RCX: 00007f7339c13159
[   81.675318][ T4431] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000014c0
[   81.683332][ T4431] RBP: 00007f7339caa06b R08: 0000000000000000 R09: 0000000000000000
[   81.691349][ T4431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   81.699364][ T4431] R13: 00007f7339e9b038 R14: 00007f7339e9afa0 R15: 00007ffd4e311c28
[   81.707398][ T4431]  </TASK>
[   81.747183][ T4408] loop3: detected capacity change from 0 to 32768
[   81.781457][ T4429] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   81.792587][ T4428] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   81.856209][ T4428] ext4 filesystem being mounted at /8/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   81.922184][ T4439] FAULT_INJECTION: forcing a failure.
[   81.922184][ T4439] name failslab, interval 1, probability 0, space 0, times 0
[   81.978851][ T4429] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[   82.035749][ T4439] CPU: 1 PID: 4439 Comm: syz.0.50 Not tainted syzkaller #0
[   82.043061][ T4439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   82.047845][ T4429] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28
[   82.053154][ T4439] Call Trace:
[   82.053166][ T4439]  <TASK>
[   82.053175][ T4439]  dump_stack_lvl+0x188/0x250
[   82.053204][ T4439]  ? show_regs_print_info+0x20/0x20
[   82.053225][ T4439]  ? load_image+0x410/0x410
[   82.053249][ T4439]  ? __might_sleep+0xf0/0xf0
[   82.053270][ T4439]  ? __lock_acquire+0x7b50/0x7b50
[   82.053295][ T4439]  ? memset+0x1e/0x40
[   82.053317][ T4439]  should_fail+0x383/0x4b0
[   82.053347][ T4439]  should_failslab+0x5/0x20
[   82.053368][ T4439]  slab_pre_alloc_hook+0x51/0xc0
[   82.053393][ T4439]  kmem_cache_alloc_trace+0x47/0x290
[   82.053413][ T4439]  ? cgroup_init_fs_context+0x50/0x3c0
[   82.053439][ T4439]  cgroup_init_fs_context+0x50/0x3c0
[   82.053459][ T4439]  ? cgroup_do_get_tree+0x4c0/0x4c0
[   82.053483][ T4439]  alloc_fs_context+0x628/0x7d0
[   82.053515][ T4439]  __se_sys_fsopen+0x111/0x320
[   82.053544][ T4439]  do_syscall_64+0x4c/0xa0
[   82.053564][ T4439]  ? clear_bhb_loop+0x30/0x80
[   82.053586][ T4439]  ? clear_bhb_loop+0x30/0x80
[   82.053611][ T4439]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   82.053640][ T4439] RIP: 0033:0x7f7339c13159
[   82.053660][ T4439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   82.053679][ T4439] RSP: 002b:00007f7337e6b028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae
[   82.053703][ T4439] RAX: ffffffffffffffda RBX: 00007f7339e9afa0 RCX: 00007f7339c13159
[   82.053720][ T4439] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000040
[   82.053734][ T4439] RBP: 00007f7339caa06b R08: 0000000000000000 R09: 0000000000000000
[   82.053748][ T4439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   82.053762][ T4439] R13: 00007f7339e9b038 R14: 00007f7339e9afa0 R15: 00007ffd4e311c28
[   82.053793][ T4439]  </TASK>
[   82.296612][ T4429] EXT4-fs (loop1): This should not happen!! Data will be lost
[   82.296612][ T4429] 
[   82.401245][ T4429] EXT4-fs (loop1): Total free blocks count 0
[   82.479434][ T4429] EXT4-fs (loop1): Free/Dirty block details
[   82.500441][ T4429] EXT4-fs (loop1): free_blocks=4096
[   82.506665][ T4445] loop4: detected capacity change from 0 to 4096
[   82.520828][ T4429] EXT4-fs (loop1): dirty_blocks=80
[   82.537944][ T4429] EXT4-fs (loop1): Block reservation details
[   82.575406][ T4429] EXT4-fs (loop1): i_reserved_data_blocks=5
[   82.587516][ T4445] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback.
[   82.717297][ T4456] loop0: detected capacity change from 0 to 128
[   82.817468][ T4456] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002]
[   82.839206][ T4456] System zones: 1-3, 19-19, 35-36
[   82.846680][ T4456] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,debug,,errors=continue. Quota mode: writeback.
[   82.861491][ T4456] ext4 filesystem being mounted at /10/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   82.976653][ T4456] EXT4-fs warning (device loop0): verify_group_input:147: Cannot add at group 9 (only 1 groups)
[   83.046343][ T4468] loop4: detected capacity change from 0 to 164
[   83.383733][ T4478] netlink: 104 bytes leftover after parsing attributes in process `syz.4.66'.
[   83.515100][ T4480] loop4: detected capacity change from 0 to 1024
[   83.633243][ T4480] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   83.651353][ T4464] loop1: detected capacity change from 0 to 32768
[   83.751164][ T4480] EXT4-fs (loop4): mounted filesystem without journal. Opts: discard,bsddf,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,dioread_nolock,,errors=continue. Quota mode: writeback.
[   83.785431][ T4477] loop3: detected capacity change from 0 to 32768
[   83.811928][ T4464] XFS (loop1): Mounting V5 Filesystem
[   83.905329][ T4477] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.65 (4477)
[   83.974939][ T4464] XFS (loop1): Ending clean mount
[   84.000714][ T4477] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[   84.011262][ T4464] XFS (loop1): Quotacheck needed: Please wait.
[   84.026542][ T4477] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[   84.038368][ T4477] BTRFS info (device loop3): use zstd compression, level 3
[   84.051319][ T4477] BTRFS info (device loop3): using free space tree
[   84.057960][ T4477] BTRFS info (device loop3): has skinny extents
[   84.074060][ T1234] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x3a/0xd0, xfs_cntbt block 0x8 
[   84.086845][ T1234] XFS (loop1): Unmount and run xfs_repair
[   84.093073][ T1234] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[   84.136286][ T1234] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[   84.145587][ T1234] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 40  ...............@
[   84.154642][ T1234] 00000020: 9f 91 83 2a 3b 79 45 c3 9d 6d ed 0b c7 35 7f e4  ...*;yE..m...5..
[   84.171176][ T1234] 00000030: 00 00 00 00 39 a9 79 c7 00 00 00 0d 00 00 00 03  ....9.y.........
[   84.181622][ T1234] 00000040: 00 00 0e a8 00 00 11 58 00 00 00 00 00 00 00 00  .......X........
[   84.190591][ T1234] 00000050: 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00  ................
[   84.200148][ T1234] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   84.221655][ T1234] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   84.233798][ T1234] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x8 len 4 error 74
[   84.302860][ T4464] XFS (loop1): Quotacheck: Unsuccessful (Error -117): Disabling quotas.
[   84.305908][ T4508] netlink: 52 bytes leftover after parsing attributes in process `syz.4.68'.
[   84.439955][ T4477] BTRFS info (device loop3): enabling ssd optimizations
[   84.502881][ T4507] loop0: detected capacity change from 0 to 4096
[   84.541883][ T4507] EXT4-fs (loop0): Test dummy encryption mode enabled
[   84.553499][ T4507] EXT4-fs (loop0): Test dummy encryption mode enabled
[   84.602710][ T4464] loop_set_status: loop0 () has still dirty pages (nrpages=1)
[   84.615383][ T4520] XFS (loop1): EXPERIMENTAL online scrub feature in use. Use at your own risk!
[   84.676355][   T13] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x3a/0xd0, xfs_cntbt block 0x8 
[   84.701757][ T4507] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,test_dummy_encryption=v1,noload,test_dummy_encryption=v1,nodiscard,data_err=ignore,usrquota,journal_ioprio=0x0000000000000000,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback.
[   84.824801][   T13] XFS (loop1): Unmount and run xfs_repair
[   84.830770][   T13] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[   84.850400][ T4526] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512)
[   84.937877][   T13] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[   84.959091][ T4528] EXT4-fs (loop2): Ignoring removed mblk_io_submit option
[   84.982760][   T13] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 40  ...............@
[   84.991699][   T13] 00000020: 9f 91 83 2a 3b 79 45 c3 9d 6d ed 0b c7 35 7f e4  ...*;yE..m...5..
[   85.062973][   T13] 00000030: 00 00 00 00 39 a9 79 c7 00 00 00 0d 00 00 00 03  ....9.y.........
[   85.071888][   T13] 00000040: 00 00 0e a8 00 00 11 58 00 00 00 00 00 00 00 00  .......X........
[   85.152438][   T13] 00000050: 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00  ................
[   85.161402][   T13] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   85.186662][   T13] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   85.233104][ T4520] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x8 len 4 error 74
[   85.245940][ T4528] EXT4-fs (loop2): Test dummy encryption mode enabled
[   85.253892][ T4520] XFS (loop1): page discard on page ffffea00016d31c0, inode 0x1d0b, offset 134217728.
[   85.308909][ T4528] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,mblk_io_submit,dioread_nolock,test_dummy_encryption,init_itable=0x0000000000000001,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback.
[   85.353210][ T4520] syz.1.61 (4520) used greatest stack depth: 20544 bytes left
[   85.462032][ T4187] XFS (loop1): Unmounting Filesystem
[   85.506938][ T4507] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[   86.061351][ T4544] fscrypt (loop2): Error allocating 'xts(aes)' transform: -4
[   86.102914][ T4544] overlayfs: upper fs does not support tmpfile.
[   86.122871][ T4186] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fff0000)
[   86.131214][ T4186] FAT-fs (loop4): Filesystem has been set read-only
[   86.146738][ T4544] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[   86.216415][ T4544] overlayfs: conflicting lowerdir path
[   86.302292][ T4567] program syz.0.79 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   86.317123][ T4568] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   86.459117][ T4563] syz.3.74 (4563) used greatest stack depth: 19472 bytes left
[   86.617575][    T7] cfg80211: failed to load regulatory.db
[   86.793420][ T4580] WARNING! power/level is deprecated; use power/control instead
[   87.012558][    T7] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   87.238635][ T4598] netlink: 260 bytes leftover after parsing attributes in process `syz.2.90'.
[   87.282831][    T7] usb 5-1: Using ep0 maxpacket: 8
[   87.423204][    T7] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[   87.442767][    T7] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[   87.462455][    T7] usb 5-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00
[   87.479720][ T4599] set_capacity_and_notify: 4 callbacks suppressed
[   87.479736][ T4599] loop0: detected capacity change from 0 to 8192
[   87.493310][    T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   87.551646][ T4599] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512)
[   87.574192][    T7] kobil_sct 5-1:1.0: KOBIL USB smart card terminal converter detected
[   87.584034][ T4603] device wlan0 entered promiscuous mode
[   87.651584][    T7] usb 5-1: KOBIL USB smart card terminal converter now attached to ttyUSB0
[   87.750298][ T4599] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[   87.832604][ T4599] ntfs3: loop0: Failed to load $Extend.
[   87.985114][ T4615] netlink: 4 bytes leftover after parsing attributes in process `syz.3.96'.
[   88.053540][ T4615] 8021q: adding VLAN 0 to HW filter on device bond1
[   88.073141][ T4617] netlink: 'syz.2.97': attribute type 2 has an invalid length.
[   88.258318][ T4626] netlink: 24 bytes leftover after parsing attributes in process `syz.0.98'.
[   88.283257][ T4626] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   88.684142][ T4234] usb 5-1: USB disconnect, device number 4
[   88.718600][ T4234] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0
[   88.738434][ T4234] kobil_sct 5-1:1.0: device disconnected
[   91.568135][ T4193] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[   91.744447][ T4661] loop3: detected capacity change from 0 to 512
[   91.856441][ T4661] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #2: block 3: comm syz.3.114: lblock 0 mapped to illegal pblock 3 (length 1)
[   91.941342][ T4661] EXT4-fs warning (device loop3): dx_probe:823: inode #2: lblock 0: comm syz.3.114: error -117 reading directory block
[   92.004137][ T4193] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30
[   92.027033][ T4193] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   92.038584][ T4661] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[   92.053909][ T4661] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_lock,usrjquota=,auto_da_alloc=0x0000000000000004,jqfmt=vfsv1,nolazytime,grpjquota=.dax,resuid=0x0000000000000000,lazytime,grpid,,,errors=continue. Quota mode: writeback.
[   92.107424][ T4193] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   92.158213][ T4193] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[   92.195798][ T4661] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #2: block 8: comm syz.3.114: lblock 11 mapped to illegal pblock 8 (length 1)
[   92.332794][ T4193] usb 1-1: New USB device found, idVendor=056a, idProduct=4400, bcdDevice=e9.87
[   92.337711][ T4679] loop1: detected capacity change from 0 to 128
[   92.341887][ T4193] usb 1-1: New USB device strings: Mfr=193, Product=0, SerialNumber=0
[   92.341912][ T4193] usb 1-1: Manufacturer: syz
[   92.365305][ T4679] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   92.385750][ T4679] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   92.405372][ T4193] usb 1-1: config 0 descriptor??
[   92.481232][ T4684] FAULT_INJECTION: forcing a failure.
[   92.481232][ T4684] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[   92.502552][ T4684] CPU: 1 PID: 4684 Comm: syz.3.123 Not tainted syzkaller #0
[   92.509916][ T4684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   92.520011][ T4684] Call Trace:
[   92.523332][ T4684]  <TASK>
[   92.526294][ T4684]  dump_stack_lvl+0x188/0x250
[   92.531005][ T4684]  ? show_regs_print_info+0x20/0x20
[   92.536237][ T4684]  ? load_image+0x410/0x410
[   92.540791][ T4684]  ? __lock_acquire+0x7b50/0x7b50
[   92.545876][ T4684]  ? unshare_nsproxy_namespaces+0x116/0x160
[   92.551809][ T4684]  ? __x64_sys_unshare+0x34/0x40
[   92.556805][ T4684]  ? do_syscall_64+0x4c/0xa0
[   92.561430][ T4684]  ? entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   92.567555][ T4684]  should_fail+0x383/0x4b0
[   92.572015][ T4684]  prepare_alloc_pages+0x1e3/0x5b0
[   92.577211][ T4684]  __alloc_pages+0x11b/0x480
[   92.581848][ T4684]  ? zone_statistics+0x170/0x170
[   92.586836][ T4684]  copy_time_ns+0x174/0x440
[   92.591404][ T4684]  create_new_namespaces+0x467/0x700
[   92.596740][ T4684]  unshare_nsproxy_namespaces+0x116/0x160
[   92.602498][ T4684]  ksys_unshare+0x4f6/0x8e0
[   92.607046][ T4684]  ? __lock_acquire+0x7b50/0x7b50
[   92.612110][ T4684]  ? sighand_ctor+0x40/0x40
[   92.616670][ T4684]  ? lock_chain_count+0x20/0x20
[   92.621567][ T4684]  ? syscall_enter_from_user_mode+0x21/0x70
[   92.627542][ T4684]  __x64_sys_unshare+0x34/0x40
[   92.632344][ T4684]  do_syscall_64+0x4c/0xa0
[   92.636795][ T4684]  ? clear_bhb_loop+0x30/0x80
[   92.641514][ T4684]  ? clear_bhb_loop+0x30/0x80
[   92.646237][ T4684]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   92.652166][ T4684] RIP: 0033:0x7fb2440ac159
[   92.656615][ T4684] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   92.676262][ T4684] RSP: 002b:00007fb242304028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[   92.684731][ T4684] RAX: ffffffffffffffda RBX: 00007fb244333fa0 RCX: 00007fb2440ac159
[   92.692746][ T4684] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000006000080
[   92.700757][ T4684] RBP: 00007fb24414306b R08: 0000000000000000 R09: 0000000000000000
[   92.708776][ T4684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   92.717147][ T4684] R13: 00007fb244334038 R14: 00007fb244333fa0 R15: 00007ffd48f80658
[   92.725190][ T4684]  </TASK>
[   92.731801][ T4231] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   92.848913][ T4690] loop2: detected capacity change from 0 to 256
[   92.900762][ T4692] Illegal XDP return value 4294967282, expect packet loss!
[   92.938572][ T4193] wacom 0003:056A:4400.0001: unknown main item tag 0x0
[   92.968481][ T4690] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[   92.981285][ T4193] wacom 0003:056A:4400.0001: unknown main item tag 0x0
[   93.032465][ T4193] wacom 0003:056A:4400.0001: unknown main item tag 0x0
[   93.039427][ T4193] wacom 0003:056A:4400.0001: unknown main item tag 0x0
[   93.091583][ T4193] wacom 0003:056A:4400.0001: unknown main item tag 0x0
[   93.102857][ T4231] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   93.142450][ T4193] wacom 0003:056A:4400.0001: unknown main item tag 0x0
[   93.142915][ T4231] usb 5-1: config 0 interface 0 has no altsetting 0
[   93.149395][ T4193] wacom 0003:056A:4400.0001: unknown main item tag 0x0
[   93.149448][ T4193] wacom 0003:056A:4400.0001: unknown main item tag 0x0
[   93.181722][ T4231] usb 5-1: New USB device found, idVendor=1ae7, idProduct=9001, bcdDevice= 0.00
[   93.207578][ T4231] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   93.234258][ T4231] usb 5-1: config 0 descriptor??
[   93.247822][ T4193] wacom 0003:056A:4400.0001: unknown main item tag 0x0
[   93.281157][ T4193] wacom 0003:056A:4400.0001: unknown main item tag 0x0
[   93.293285][ T4193] wacom 0003:056A:4400.0001: unknown main item tag 0x0
[   93.300223][ T4193] wacom 0003:056A:4400.0001: unknown main item tag 0x0
[   93.364154][ T4193] wacom 0003:056A:4400.0001: Unknown device_type for 'syz'. Ignoring.
[   93.412594][ T4193] usb 1-1: USB disconnect, device number 3
[   93.746414][ T4231] speedlink 0003:1AE7:9001.0002: No inputs registered, leaving
[   93.787658][ T4714] loop2: detected capacity change from 0 to 4096
[   93.843972][ T4231] speedlink 0003:1AE7:9001.0002: hidraw0: USB HID v0.00 Joystick [HID 1ae7:9001] on usb-dummy_hcd.4-1/input0
[   93.930485][ T4714] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback.
[   93.970456][ T4231] usb 5-1: USB disconnect, device number 5
[   94.110281][ T4727] fido_id[4727]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[   94.202841][ T4275] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   94.544100][ T4744] FAULT_INJECTION: forcing a failure.
[   94.544100][ T4744] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   94.562685][ T4275] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[   94.581723][ T4275] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[   94.591658][ T4744] CPU: 0 PID: 4744 Comm: syz.2.148 Not tainted syzkaller #0
[   94.599166][ T4744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   94.609265][ T4744] Call Trace:
[   94.612583][ T4744]  <TASK>
[   94.615546][ T4744]  dump_stack_lvl+0x188/0x250
[   94.620374][ T4744]  ? show_regs_print_info+0x20/0x20
[   94.625624][ T4744]  ? load_image+0x410/0x410
[   94.630175][ T4744]  ? __lock_acquire+0x7b50/0x7b50
[   94.635284][ T4744]  should_fail+0x383/0x4b0
[   94.639865][ T4744]  strncpy_from_user+0x32/0x350
[   94.644773][ T4744]  getname_flags+0xf2/0x4f0
[   94.647019][ T4275] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[   94.649319][ T4744]  __se_sys_quotactl+0x1dd/0x6f0
[   94.649351][ T4744]  ? __x64_sys_quotactl+0xa0/0xa0
[   94.668281][ T4744]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[   94.677062][ T4744]  ? lock_chain_count+0x20/0x20
[   94.682005][ T4744]  ? lockdep_hardirqs_on+0x94/0x140
[   94.687310][ T4744]  do_syscall_64+0x4c/0xa0
[   94.691787][ T4744]  ? clear_bhb_loop+0x30/0x80
[   94.696516][ T4744]  ? clear_bhb_loop+0x30/0x80
[   94.701280][ T4744]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   94.707222][ T4744] RIP: 0033:0x7f71bb8b9159
[   94.711685][ T4744] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   94.715792][ T4275] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   94.731329][ T4744] RSP: 002b:00007f71b9b11028 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3
[   94.731361][ T4744] RAX: ffffffffffffffda RBX: 00007f71bbb40fa0 RCX: 00007f71bb8b9159
[   94.731377][ T4744] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000000
[   94.731390][ T4744] RBP: 00007f71bb95006b R08: 0000000000000000 R09: 0000000000000000
[   94.731403][ T4744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   94.731415][ T4744] R13: 00007f71bbb41038 R14: 00007f71bbb40fa0 R15: 00007ffdabf255b8
[   94.731447][ T4744]  </TASK>
[   95.022659][ T4275] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[   95.036805][ T4275] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[   95.062658][ T4275] usb 2-1: Product: syz
[   95.066892][ T4275] usb 2-1: Manufacturer: syz
[   95.143836][ T4275] cdc_wdm 2-1:1.0: skipping garbage
[   95.159347][ T4275] cdc_wdm 2-1:1.0: skipping garbage
[   95.205543][ T4275] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[   95.233394][ T4275] cdc_wdm 2-1:1.0: Unknown control protocol
[   95.404312][    T7] usb 2-1: USB disconnect, device number 2
[   95.465163][   T13] wiimote 0005:057E:0330.0003: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz0
[   95.510234][   T13] wiimote 0005:057E:0330.0003: New device registered
[   95.548004][ T4193] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[   95.568206][ T4771] wiimote 0005:057E:0330.0003: Event data for report 34 was too short (31 vs 21)
[   95.624332][ T4770] wiimote 0005:057E:0330.0003: Device removed
[   95.679600][ T4775] fido_id[4775]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   95.847250][ T4769] loop3: detected capacity change from 0 to 32768
[   95.870553][ T4769] XFS: noikeep mount option is deprecated.
[   95.892680][ T4175] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   95.921594][ T4769] XFS (loop3): Mounting V5 Filesystem
[   95.973089][ T4193] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   96.014712][ T4193] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   96.048200][ T4193] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[   96.061959][ T4193] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   96.075748][ T4193] usb 5-1: config 0 descriptor??
[   96.086649][ T4769] XFS (loop3): Ending clean mount
[   96.098065][ T4769] XFS (loop3): Quotacheck needed: Please wait.
[   96.178209][ T4769] XFS (loop3): Quotacheck: Done.
[   96.261362][ T4194] XFS (loop3): Unmounting Filesystem
[   96.300128][ T4175] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[   96.328163][ T4175] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[   96.345157][ T4175] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[   96.421356][ T4787] FAULT_INJECTION: forcing a failure.
[   96.421356][ T4787] name failslab, interval 1, probability 0, space 0, times 0
[   96.440034][ T4787] CPU: 1 PID: 4787 Comm: syz.1.162 Not tainted syzkaller #0
[   96.447354][ T4787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   96.457418][ T4787] Call Trace:
[   96.460706][ T4787]  <TASK>
[   96.463661][ T4787]  dump_stack_lvl+0x188/0x250
[   96.468348][ T4787]  ? show_regs_print_info+0x20/0x20
[   96.473554][ T4787]  ? load_image+0x410/0x410
[   96.478065][ T4787]  ? __might_sleep+0xf0/0xf0
[   96.482657][ T4787]  ? __lock_acquire+0x7b50/0x7b50
[   96.487694][ T4787]  should_fail+0x383/0x4b0
[   96.492140][ T4787]  should_failslab+0x5/0x20
[   96.496661][ T4787]  slab_pre_alloc_hook+0x51/0xc0
[   96.501642][ T4787]  ? __d_alloc+0x27/0x6d0
[   96.506007][ T4787]  kmem_cache_alloc+0x3d/0x280
[   96.510815][ T4787]  ? __lock_acquire+0x7b50/0x7b50
[   96.515872][ T4787]  __d_alloc+0x27/0x6d0
[   96.520034][ T4787]  d_alloc_parallel+0x7b/0x1320
[   96.524905][ T4787]  ? __d_lookup+0x6a4/0x760
[   96.529620][ T4787]  path_openat+0x985/0x2fb0
[   96.534216][ T4787]  ? do_filp_open+0x400/0x400
[   96.538929][ T4787]  do_filp_open+0x1df/0x400
[   96.543463][ T4787]  ? vfs_tmpfile+0x300/0x300
[   96.548129][ T4787]  ? _raw_spin_unlock+0x24/0x40
[   96.553024][ T4787]  ? alloc_fd+0x59e/0x650
[   96.557417][ T4787]  do_sys_openat2+0x14b/0x500
[   96.562139][ T4787]  ? __lock_acquire+0x7b50/0x7b50
[   96.567246][ T4787]  ? do_sys_open+0xe0/0xe0
[   96.571725][ T4787]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[   96.577747][ T4787]  ? lock_chain_count+0x20/0x20
[   96.582660][ T4787]  __x64_sys_openat+0x135/0x160
[   96.587549][ T4787]  do_syscall_64+0x4c/0xa0
[   96.591980][ T4787]  ? clear_bhb_loop+0x30/0x80
[   96.596710][ T4787]  ? clear_bhb_loop+0x30/0x80
[   96.601431][ T4787]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   96.607377][ T4787] RIP: 0033:0x7fcd4dd74159
[   96.611821][ T4787] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   96.631439][ T4787] RSP: 002b:00007fcd4bfcc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[   96.639868][ T4787] RAX: ffffffffffffffda RBX: 00007fcd4dffbfa0 RCX: 00007fcd4dd74159
[   96.643986][   T13] wiimote 0005:057E:0330.0003: detected device: Nintendo Wii Remote Plus (Gen 2)
[   96.647849][ T4787] RDX: 0000000000002040 RSI: 0000200000000000 RDI: ffffffffffffff9c
[   96.665328][ T4787] RBP: 00007fcd4de0b06b R08: 0000000000000000 R09: 0000000000000000
[   96.673440][ T4787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   96.681445][ T4787] R13: 00007fcd4dffc038 R14: 00007fcd4dffbfa0 R15: 00007fffbaac1658
[   96.689481][ T4787]  </TASK>
[   96.724189][ T4175] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[   96.762722][ T4193] usb 5-1: language id specifier not provided by device, defaulting to English
[   96.782522][   T13] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0330.0003/input/input12
[   96.794229][ T4175] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.813126][ T4175] usb 3-1: Product: syz
[   96.817507][ T4175] usb 3-1: Manufacturer: syz
[   96.822147][ T4175] usb 3-1: SerialNumber: syz
[   96.860994][   T13] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0330.0003/input/input13
[   96.880034][ T4175] usb 3-1: config 0 descriptor??
[   96.921365][   T13] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0330.0003/input/input11
[   97.137467][ T4795] loop1: detected capacity change from 0 to 2048
[   97.179296][ T4175] adutux 3-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0
[   97.205020][ T4795] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   97.208135][ T4193] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0004/input/input14
[   97.216763][ T4795] ext4 filesystem being mounted at /32/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   97.311002][ T4795] fs-verity: sha512 using implementation "sha512-avx2"
[   97.384216][ T4193] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0004/input/input15
[   97.426432][   T21] usb 3-1: USB disconnect, device number 2
[   97.457520][ T4193] uclogic 0003:256C:006D.0004: input,hidraw1: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.4-1/input0
[   97.488947][ T4193] usb 5-1: USB disconnect, device number 6
[   97.661661][ T4801] fido_id[4801]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[   98.176936][ T4818] FAULT_INJECTION: forcing a failure.
[   98.176936][ T4818] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[   98.194631][ T4818] CPU: 0 PID: 4818 Comm: syz.2.171 Not tainted syzkaller #0
[   98.201980][ T4818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   98.212103][ T4818] Call Trace:
[   98.215415][ T4818]  <TASK>
[   98.218374][ T4818]  dump_stack_lvl+0x188/0x250
[   98.223092][ T4818]  ? show_regs_print_info+0x20/0x20
[   98.228329][ T4818]  ? load_image+0x410/0x410
[   98.232878][ T4818]  ? __lock_acquire+0x7b50/0x7b50
[   98.237956][ T4818]  should_fail+0x383/0x4b0
[   98.242416][ T4818]  prepare_alloc_pages+0x1e3/0x5b0
[   98.247612][ T4818]  __alloc_pages+0x11b/0x480
[   98.252251][ T4818]  ? zone_statistics+0x170/0x170
[   98.257235][ T4818]  ? alloc_pages+0x452/0x560
[   98.261871][ T4818]  __vmalloc_node_range+0x4b1/0x8b0
[   98.267119][ T4818]  bpf_map_area_mmapable_alloc+0xad/0xd0
[   98.272799][ T4818]  ? array_map_alloc+0x428/0x6f0
[   98.277782][ T4818]  array_map_alloc+0x428/0x6f0
[   98.282586][ T4818]  map_create+0x481/0x2330
[   98.287040][ T4818]  ? bpf_lsm_bpf+0x5/0x10
[   98.291414][ T4818]  __sys_bpf+0x30a/0x6f0
[   98.295701][ T4818]  ? bpf_link_show_fdinfo+0x380/0x380
[   98.301134][ T4818]  __x64_sys_bpf+0x78/0x90
[   98.305589][ T4818]  do_syscall_64+0x4c/0xa0
[   98.310048][ T4818]  ? clear_bhb_loop+0x30/0x80
[   98.314765][ T4818]  ? clear_bhb_loop+0x30/0x80
[   98.319482][ T4818]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   98.325419][ T4818] RIP: 0033:0x7f71bb8b9159
[   98.329870][ T4818] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   98.349514][ T4818] RSP: 002b:00007f71b9b11028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   98.357972][ T4818] RAX: ffffffffffffffda RBX: 00007f71bbb40fa0 RCX: 00007f71bb8b9159
[   98.365983][ T4818] RDX: 0000000000000048 RSI: 0000200000000000 RDI: 0000000000000000
[   98.373989][ T4818] RBP: 00007f71bb95006b R08: 0000000000000000 R09: 0000000000000000
[   98.381998][ T4818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   98.390046][ T4818] R13: 00007f71bbb41038 R14: 00007f71bbb40fa0 R15: 00007ffdabf255b8
[   98.398069][ T4818]  </TASK>
[   98.490144][ T4820] netlink: 4 bytes leftover after parsing attributes in process `syz.4.172'.
[   98.541430][ T4812] loop1: detected capacity change from 0 to 32768
[   98.574143][ T4825] loop2: detected capacity change from 0 to 512
[   98.683706][ T4825] EXT4-fs error (device loop2): ext4_orphan_get:1410: inode #15: comm syz.2.174: inode has both inline data and extents flags
[   98.726516][ T4825] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.174: couldn't read orphan inode 15 (err -117)
[   98.770437][ T4825] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   98.832208][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory
[   98.849287][ T4385] udevd[4385]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory
[   98.860712][ T4812] UFO tlock:0xffffc90002632288
[   98.877088][ T4812] non-latin1 character 0x637c found in JFS file name
[   98.890606][ T4812] mount with iocharset=utf8 to access
[   98.911312][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory
[   98.945054][ T4837] netlink: 'syz.4.178': attribute type 1 has an invalid length.
[   99.021724][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory
[   99.041521][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory
[   99.052650][ T4233] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   99.144763][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory
[   99.159125][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory
[   99.231981][ T4842] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   99.338073][ T4852] FAULT_INJECTION: forcing a failure.
[   99.338073][ T4852] name failslab, interval 1, probability 0, space 0, times 0
[   99.350976][ T4852] CPU: 0 PID: 4852 Comm: syz.4.185 Not tainted syzkaller #0
[   99.358311][ T4852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   99.368409][ T4852] Call Trace:
[   99.371755][ T4852]  <TASK>
[   99.374718][ T4852]  dump_stack_lvl+0x188/0x250
[   99.379523][ T4852]  ? show_regs_print_info+0x20/0x20
[   99.384757][ T4852]  ? load_image+0x410/0x410
[   99.389303][ T4852]  ? __might_sleep+0xf0/0xf0
[   99.393922][ T4852]  ? __lock_acquire+0x7b50/0x7b50
[   99.398985][ T4852]  ? tomoyo_get_local_path+0x62a/0x780
[   99.404489][ T4852]  should_fail+0x383/0x4b0
[   99.408958][ T4852]  should_failslab+0x5/0x20
[   99.413500][ T4852]  slab_pre_alloc_hook+0x51/0xc0
[   99.418482][ T4852]  __kmalloc+0x6b/0x340
[   99.422676][ T4852]  ? tomoyo_encode+0x28a/0x550
[   99.427490][ T4852]  tomoyo_encode+0x28a/0x550
[   99.432130][ T4852]  tomoyo_realpath_from_path+0x5a2/0x5e0
[   99.437820][ T4852]  tomoyo_path2_perm+0x27e/0x840
[   99.442818][ T4852]  ? tomoyo_check_mkdev_acl+0x490/0x490
[   99.448415][ T4852]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[   99.454495][ T4852]  ? rcu_is_watching+0x11/0xa0
[   99.459296][ T4852]  ? kmem_cache_free+0x14c/0x210
[   99.464303][ T4852]  security_sb_pivotroot+0x67/0x90
[   99.469458][ T4852]  __se_sys_pivot_root+0x206/0xc00
[   99.474620][ T4852]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[   99.480639][ T4852]  ? __x64_sys_pivot_root+0x60/0x60
[   99.485903][ T4852]  ? lock_chain_count+0x20/0x20
[   99.490807][ T4852]  ? lockdep_hardirqs_on+0x94/0x140
[   99.496080][ T4852]  do_syscall_64+0x4c/0xa0
[   99.500532][ T4852]  ? clear_bhb_loop+0x30/0x80
[   99.505282][ T4852]  ? clear_bhb_loop+0x30/0x80
[   99.510030][ T4852]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   99.515992][ T4852] RIP: 0033:0x7f6b66b59159
[   99.520453][ T4852] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   99.540096][ T4852] RSP: 002b:00007f6b64db1028 EFLAGS: 00000246 ORIG_RAX: 000000000000009b
[   99.548556][ T4852] RAX: ffffffffffffffda RBX: 00007f6b66de0fa0 RCX: 00007f6b66b59159
[   99.556571][ T4852] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000200000000040
[   99.564584][ T4852] RBP: 00007f6b66bf006b R08: 0000000000000000 R09: 0000000000000000
[   99.572618][ T4852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   99.580627][ T4852] R13: 00007f6b66de1038 R14: 00007f6b66de0fa0 R15: 00007fff6bdd0e68
[   99.588658][ T4852]  </TASK>
[   99.601302][ T4852] ERROR: Out of memory at tomoyo_realpath_from_path.
[   99.673515][ T4233] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[   99.692824][ T4233] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[   99.878838][ T4233] usb 4-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00
[   99.894398][ T4233] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   99.919020][ T4233] usb 4-1: Product: syz
[   99.929075][ T4233] usb 4-1: Manufacturer: syz
[   99.934124][ T4233] usb 4-1: SerialNumber: syz
[   99.949279][ T4875] loop2: detected capacity change from 0 to 128
[   99.960520][ T4385] udevd[4385]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory
[   99.998701][   T26] audit: type=1800 audit(1790072947.114:2): pid=4877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.192" name="block_bytes" dev="configfs" ino=34813 res=0 errno=0
[  100.180755][ T4385] udevd[4385]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory
[  100.208151][ T4233] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900
[  100.223042][ T4385] udevd[4385]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory
[  100.365140][ T4898] loop4: detected capacity change from 0 to 1024
[  100.441227][ T4898] hfsplus: request for non-existent node 3 in B*Tree
[  100.449539][ T4898] hfsplus: request for non-existent node 3 in B*Tree
[  100.498956][ T4906] loop1: detected capacity change from 0 to 64
[  100.628005][   T21] usb 4-1: USB disconnect, device number 2
[  100.647846][   T21] usblp0: removed
[  100.698612][ T4908] loop4: detected capacity change from 0 to 4096
[  100.776537][ T4912] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  100.805452][ T4908] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  101.517187][ T4930] FAULT_INJECTION: forcing a failure.
[  101.517187][ T4930] name failslab, interval 1, probability 0, space 0, times 0
[  101.551907][ T4930] CPU: 1 PID: 4930 Comm: syz.3.217 Not tainted syzkaller #0
[  101.559261][ T4930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  101.569360][ T4930] Call Trace:
[  101.572672][ T4930]  <TASK>
[  101.575648][ T4930]  dump_stack_lvl+0x188/0x250
[  101.580376][ T4930]  ? show_regs_print_info+0x20/0x20
[  101.585605][ T4930]  ? load_image+0x410/0x410
[  101.590154][ T4930]  should_fail+0x383/0x4b0
[  101.594610][ T4930]  should_failslab+0x5/0x20
[  101.599148][ T4930]  slab_pre_alloc_hook+0x51/0xc0
[  101.604159][ T4930]  kmem_cache_alloc_trace+0x47/0x290
[  101.609484][ T4930]  ? tipc_sub_subscribe+0x110/0x750
[  101.614721][ T4930]  tipc_sub_subscribe+0x110/0x750
[  101.619790][ T4930]  tipc_conn_rcv_sub+0x14f/0x370
[  101.624769][ T4930]  tipc_topsrv_kern_subscr+0x185/0x250
[  101.630270][ T4930]  ? conn_put+0x320/0x320
[  101.634647][ T4930]  tipc_group_create+0x357/0x4e0
[  101.639638][ T4930]  tipc_sk_join+0x256/0x6a0
[  101.644184][ T4930]  ? __tipc_sendstream+0x1280/0x1280
[  101.649521][ T4930]  tipc_setsockopt+0x6b8/0x960
[  101.654336][ T4930]  ? tipc_shutdown+0x4d0/0x4d0
[  101.659143][ T4930]  ? aa_sock_opt_perm+0x74/0x100
[  101.664120][ T4930]  ? bpf_lsm_socket_setsockopt+0x5/0x10
[  101.669711][ T4930]  ? security_socket_setsockopt+0x7a/0xa0
[  101.675473][ T4930]  ? tipc_shutdown+0x4d0/0x4d0
[  101.680278][ T4930]  __sys_setsockopt+0x2bf/0x3d0
[  101.685173][ T4930]  __x64_sys_setsockopt+0xb1/0xc0
[  101.690260][ T4930]  do_syscall_64+0x4c/0xa0
[  101.694710][ T4930]  ? clear_bhb_loop+0x30/0x80
[  101.699436][ T4930]  ? clear_bhb_loop+0x30/0x80
[  101.704150][ T4930]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  101.710092][ T4930] RIP: 0033:0x7fb2440ac159
[  101.714547][ T4930] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  101.734221][ T4930] RSP: 002b:00007fb242304028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  101.739949][ T4920] loop4: detected capacity change from 0 to 32768
[  101.742687][ T4930] RAX: ffffffffffffffda RBX: 00007fb244333fa0 RCX: 00007fb2440ac159
[  101.757151][ T4930] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000003
[  101.765167][ T4930] RBP: 00007fb24414306b R08: 0000000000000010 R09: 0000000000000000
[  101.773179][ T4930] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000
[  101.781193][ T4930] R13: 00007fb244334038 R14: 00007fb244333fa0 R15: 00007ffd48f80658
[  101.789221][ T4930]  </TASK>
[  101.869624][ T4937] loop1: detected capacity change from 0 to 128
[  101.881904][ T4920] XFS (loop4): Mounting V5 Filesystem
[  101.888133][ T4930] tipc: Subscription rejected, no memory
[  101.969811][ T4920] XFS (loop4): Ending clean mount
[  102.021623][ T4937] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback.
[  102.061288][ T4937] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  102.083437][ T4944] FAULT_INJECTION: forcing a failure.
[  102.083437][ T4944] name failslab, interval 1, probability 0, space 0, times 0
[  102.148863][ T4944] CPU: 1 PID: 4944 Comm: syz.3.219 Not tainted syzkaller #0
[  102.156215][ T4944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  102.166308][ T4944] Call Trace:
[  102.169649][ T4944]  <TASK>
[  102.172616][ T4944]  dump_stack_lvl+0x188/0x250
[  102.177370][ T4944]  ? show_regs_print_info+0x20/0x20
[  102.182608][ T4944]  ? load_image+0x410/0x410
[  102.187156][ T4944]  ? __might_sleep+0xf0/0xf0
[  102.191787][ T4944]  ? __lock_acquire+0x7b50/0x7b50
[  102.196860][ T4944]  should_fail+0x383/0x4b0
[  102.201347][ T4944]  should_failslab+0x5/0x20
[  102.205889][ T4944]  slab_pre_alloc_hook+0x51/0xc0
[  102.210867][ T4944]  __kmalloc+0x6b/0x340
[  102.215053][ T4944]  ? load_msg+0xc0/0x380
[  102.219362][ T4944]  load_msg+0xc0/0x380
[  102.223485][ T4944]  do_msgsnd+0x1a1/0x10e0
[  102.227882][ T4944]  ? __might_sleep+0xf0/0xf0
[  102.232511][ T4944]  ? __might_fault+0xb7/0x110
[  102.237243][ T4944]  ? __lock_acquire+0x7b50/0x7b50
[  102.242308][ T4944]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  102.248328][ T4944]  ? ksys_msgsnd+0xa0/0xa0
[  102.252835][ T4944]  ? __might_fault+0xb3/0x110
[  102.257558][ T4944]  ? __x64_sys_msgsnd+0xe5/0x110
[  102.262575][ T4944]  do_syscall_64+0x4c/0xa0
[  102.267066][ T4944]  ? clear_bhb_loop+0x30/0x80
[  102.271786][ T4944]  ? clear_bhb_loop+0x30/0x80
[  102.276500][ T4944]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  102.282444][ T4944] RIP: 0033:0x7fb2440ac159
[  102.286909][ T4944] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  102.306558][ T4944] RSP: 002b:00007fb242304028 EFLAGS: 00000246 ORIG_RAX: 0000000000000045
[  102.315016][ T4944] RAX: ffffffffffffffda RBX: 00007fb244333fa0 RCX: 00007fb2440ac159
[  102.323052][ T4944] RDX: 0000000000002000 RSI: 0000200000000180 RDI: 0000000000000000
[  102.331062][ T4944] RBP: 00007fb24414306b R08: 0000000000000000 R09: 0000000000000000
[  102.339080][ T4944] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000000
[  102.347091][ T4944] R13: 00007fb244334038 R14: 00007fb244333fa0 R15: 00007ffd48f80658
[  102.355117][ T4944]  </TASK>
[  102.396336][ T4937] EXT4-fs (loop1): shut down requested (2)
[  102.461822][ T4186] XFS (loop4): Unmounting Filesystem
[  102.575737][ T4947] loop3: detected capacity change from 0 to 1024
[  102.869891][ T4951] loop4: detected capacity change from 0 to 2048
[  102.892724][ T4233] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  102.941341][ T4951] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,,errors=continue. Quota mode: none.
[  103.163144][ T4963] bond0: (slave macvlan2): Error -98 calling set_mac_address
[  103.214530][ T4233] usb 2-1: Using ep0 maxpacket: 8
[  103.368143][ T4233] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11
[  103.389843][ T4965] FAULT_INJECTION: forcing a failure.
[  103.389843][ T4965] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  103.402570][ T4233] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  103.414909][ T4965] CPU: 1 PID: 4965 Comm: syz.0.228 Not tainted syzkaller #0
[  103.423008][ T4965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  103.433112][ T4965] Call Trace:
[  103.436424][ T4965]  <TASK>
[  103.439383][ T4965]  dump_stack_lvl+0x188/0x250
[  103.442557][ T4233] usb 2-1: config 0 interface 0 has no altsetting 0
[  103.444095][ T4965]  ? show_regs_print_info+0x20/0x20
[  103.456127][ T4965]  ? load_image+0x410/0x410
[  103.460680][ T4965]  ? __lock_acquire+0x7b50/0x7b50
[  103.465794][ T4965]  ? verify_lock_unused+0x140/0x140
[  103.471054][ T4965]  should_fail+0x383/0x4b0
[  103.475519][ T4965]  strncpy_from_user+0x32/0x350
[  103.480418][ T4965]  getxattr+0xf5/0x410
[  103.482588][ T4233] usb 2-1: New USB device found, idVendor=0518, idProduct=0002, bcdDevice= 0.00
[  103.484525][ T4965]  ? path_getxattr+0x200/0x200
[  103.498371][ T4965]  ? __fdget+0x18b/0x210
[  103.502670][ T4965]  __x64_sys_fgetxattr+0x194/0x200
[  103.507840][ T4965]  do_syscall_64+0x4c/0xa0
[  103.512293][ T4965]  ? clear_bhb_loop+0x30/0x80
[  103.513915][ T4233] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  103.517006][ T4965]  ? clear_bhb_loop+0x30/0x80
[  103.529695][ T4965]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  103.535641][ T4965] RIP: 0033:0x7f7339c13159
[  103.540088][ T4965] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  103.559734][ T4965] RSP: 002b:00007f7337e6b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c1
[  103.568199][ T4965] RAX: ffffffffffffffda RBX: 00007f7339e9afa0 RCX: 00007f7339c13159
[  103.576216][ T4965] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[  103.584237][ T4965] RBP: 00007f7339caa06b R08: 0000000000000000 R09: 0000000000000000
[  103.592246][ T4965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  103.600247][ T4965] R13: 00007f7339e9b038 R14: 00007f7339e9afa0 R15: 00007ffd4e311c28
[  103.608269][ T4965]  </TASK>
[  103.613419][ T4233] usb 2-1: config 0 descriptor??
[  103.633183][ T4967] exfat: Deprecated parameter 'utf8'
[  103.639072][ T4967] exfat: Deprecated parameter 'namecase'
[  103.658999][ T4967] exfat: Deprecated parameter 'namecase'
[  103.690912][ T4967] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0x9420891b, utbl_chksum : 0xe619d30d)
[  103.799244][ T4961] set_capacity_and_notify: 1 callbacks suppressed
[  103.799260][ T4961] loop3: detected capacity change from 0 to 32768
[  103.903684][ T4385] udevd[4385]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory
[  103.939576][ T4385] udevd[4385]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory
[  103.955707][ T4961] XFS (loop3): Mounting V5 Filesystem
[  104.012757][ T4972] aoe: unknown AoE command type 0x27
[  104.066155][ T4961] XFS (loop3): Ending clean mount
[  104.101990][ T4233] input: HID 0518:0002 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0518:0002.0005/input/input16
[  104.254021][ T4233] ezkey 0003:0518:0002.0005: input,hiddev0,hidraw0: USB HID v0.01 Device [HID 0518:0002] on usb-dummy_hcd.1-1/input0
[  104.320919][ T4961] XFS (loop3): User initiated shutdown received.
[  104.340955][ T4961] XFS (loop3): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x101/0x150 (fs/xfs/xfs_fsops.c:485).  Shutting down filesystem.
[  104.406148][ T4961] XFS (loop3): Please unmount the filesystem and rectify the problem(s)
[  104.510058][ T4996] loop4: detected capacity change from 0 to 4096
[  104.519062][ T4194] XFS (loop3): Unmounting Filesystem
[  104.551591][ T4791] udevd[4791]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory
[  104.612090][ T4992] loop0: detected capacity change from 0 to 4096
[  104.666942][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory
[  104.698227][ T5001] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  104.829507][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory
[  104.869558][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory
[  104.949000][ T4233] usb 2-1: USB disconnect, device number 3
[  104.985515][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory
[  105.032159][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory
[  105.515571][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory
[  105.557720][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory
[  105.580563][ T5027] FAULT_INJECTION: forcing a failure.
[  105.580563][ T5027] name failslab, interval 1, probability 0, space 0, times 0
[  105.630780][ T5029] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
[  105.640667][ T5027] CPU: 1 PID: 5027 Comm: syz.4.239 Not tainted syzkaller #0
[  105.651619][ T5027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  105.661710][ T5027] Call Trace:
[  105.665065][ T5027]  <TASK>
[  105.668050][ T5027]  dump_stack_lvl+0x188/0x250
[  105.672773][ T5027]  ? show_regs_print_info+0x20/0x20
[  105.678014][ T5027]  ? load_image+0x410/0x410
[  105.682723][ T5027]  ? __lock_acquire+0x7b50/0x7b50
[  105.687841][ T5027]  should_fail+0x383/0x4b0
[  105.692306][ T5027]  should_failslab+0x5/0x20
[  105.696851][ T5027]  slab_pre_alloc_hook+0x51/0xc0
[  105.701834][ T5027]  __kmalloc+0x6b/0x340
[  105.706022][ T5027]  ? security_prepare_creds+0x47/0x130
[  105.711522][ T5027]  ? prepare_creds+0x3c/0x610
[  105.716246][ T5027]  security_prepare_creds+0x47/0x130
[  105.721575][ T5027]  prepare_creds+0x450/0x610
[  105.726207][ T5027]  __se_sys_setgroups+0x347/0x4f0
[  105.731302][ T5027]  do_syscall_64+0x4c/0xa0
[  105.736790][ T5027]  ? clear_bhb_loop+0x30/0x80
[  105.741512][ T5027]  ? clear_bhb_loop+0x30/0x80
[  105.746231][ T5027]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  105.752161][ T5027] RIP: 0033:0x7f6b66b59159
[  105.756612][ T5027] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  105.776257][ T5027] RSP: 002b:00007f6b64db1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000074
[  105.784713][ T5027] RAX: ffffffffffffffda RBX: 00007f6b66de0fa0 RCX: 00007f6b66b59159
[  105.792734][ T5027] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  105.800752][ T5027] RBP: 00007f6b66bf006b R08: 0000000000000000 R09: 0000000000000000
[  105.808762][ T5027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  105.816777][ T5027] R13: 00007f6b66de1038 R14: 00007f6b66de0fa0 R15: 00007fff6bdd0e68
[  105.824992][ T5027]  </TASK>
[  106.316168][ T5058] loop0: detected capacity change from 0 to 2048
[  106.404803][ T5058] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  106.474155][   T13] hid-generic 0000:0000:0001.0006: unknown main item tag 0x0
[  106.481653][   T13] hid-generic 0000:0000:0001.0006: unknown main item tag 0x0
[  106.490129][   T13] hid-generic 0000:0000:0001.0006: unknown main item tag 0x0
[  106.498617][   T13] hid-generic 0000:0000:0001.0006: unknown main item tag 0x0
[  106.506992][   T13] hid-generic 0000:0000:0001.0006: unknown main item tag 0x0
[  106.514719][   T13] hid-generic 0000:0000:0001.0006: unknown main item tag 0x0
[  106.522322][   T13] hid-generic 0000:0000:0001.0006: unknown main item tag 0x0
[  106.535238][   T13] hid-generic 0000:0000:0001.0006: unknown main item tag 0x0
[  106.562889][   T13] hid-generic 0000:0000:0001.0006: hidraw0: <UNKNOWN> HID v0.10 Device [syz0] on syz1
[  106.615917][   T21] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  106.642601][ T4231] usb 5-1: new full-speed USB device number 7 using dummy_hcd
[  106.872502][   T21] usb 2-1: Using ep0 maxpacket: 32
[  106.999017][   T21] usb 2-1: config 0 interface 0 altsetting 12 endpoint 0x81 has an invalid bInterval 95, changing to 10
[  107.012754][ T4231] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  107.035575][   T21] usb 2-1: config 0 interface 0 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  107.067043][   T21] usb 2-1: config 0 interface 0 has no altsetting 0
[  107.075623][   T21] usb 2-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00
[  107.092694][   T13] Bluetooth: hci4: command 0x0405 tx timeout
[  107.098896][   T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  107.117191][   T21] usb 2-1: config 0 descriptor??
[  107.212827][ T4231] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60
[  107.232510][ T4231] usb 5-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3
[  107.251340][ T4231] usb 5-1: Product: syz
[  107.255697][ T4231] usb 5-1: Manufacturer: syz
[  107.260331][ T4231] usb 5-1: SerialNumber: syz
[  107.267763][ T5078] FAULT_INJECTION: forcing a failure.
[  107.267763][ T5078] name failslab, interval 1, probability 0, space 0, times 0
[  107.282114][ T5078] CPU: 0 PID: 5078 Comm: syz.0.253 Not tainted syzkaller #0
[  107.289459][ T5078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  107.299579][ T5078] Call Trace:
[  107.302901][ T5078]  <TASK>
[  107.305861][ T5078]  dump_stack_lvl+0x188/0x250
[  107.309734][ T4231] usb 5-1: config 0 descriptor??
[  107.310574][ T5078]  ? show_regs_print_info+0x20/0x20
[  107.320791][ T5078]  ? load_image+0x410/0x410
[  107.325333][ T5078]  ? __might_sleep+0xf0/0xf0
[  107.329999][ T5078]  ? __lock_acquire+0x7b50/0x7b50
[  107.335074][ T5078]  should_fail+0x383/0x4b0
[  107.339534][ T5078]  should_failslab+0x5/0x20
[  107.344086][ T5078]  slab_pre_alloc_hook+0x51/0xc0
[  107.349098][ T5078]  ? alloc_vfsmnt+0x24/0x450
[  107.353727][ T5078]  kmem_cache_alloc+0x3d/0x280
[  107.358542][ T5078]  alloc_vfsmnt+0x24/0x450
[  107.363010][ T5078]  clone_mnt+0x6b/0xcd0
[  107.366622][ T4231] keyspan 5-1:0.0: Keyspan 4 port adapter converter detected
[  107.367200][ T5078]  ? clear_nonspinnable+0x60/0x60
[  107.379637][ T5078]  __do_loopback+0x29d/0x330
[  107.384273][ T5078]  __se_sys_open_tree+0x361/0x870
[  107.389364][ T5078]  ? lock_chain_count+0x20/0x20
[  107.394259][ T5078]  ? __x64_sys_open_tree+0x80/0x80
[  107.399416][ T5078]  ? lockdep_hardirqs_on+0x94/0x140
[  107.401042][ T4231] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81
[  107.404656][ T5078]  do_syscall_64+0x4c/0xa0
[  107.404683][ T5078]  ? clear_bhb_loop+0x30/0x80
[  107.404706][ T5078]  ? clear_bhb_loop+0x30/0x80
[  107.404730][ T5078]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  107.404754][ T5078] RIP: 0033:0x7f7339c13159
[  107.404773][ T5078] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  107.434130][ T4231] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 88
[  107.436549][ T5078] RSP: 002b:00007f7337e6b028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac
[  107.472260][ T5078] RAX: ffffffffffffffda RBX: 00007f7339e9afa0 RCX: 00007f7339c13159
[  107.480279][ T5078] RDX: 0000000000000001 RSI: 0000200000000040 RDI: ffffffffffffff9c
[  107.488289][ T5078] RBP: 00007f7339caa06b R08: 0000000000000000 R09: 0000000000000000
[  107.496300][ T5078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  107.502942][ T4231] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1
[  107.504310][ T5078] R13: 00007f7339e9b038 R14: 00007f7339e9afa0 R15: 00007ffd4e311c28
[  107.512996][   T21] usbhid 2-1:0.0: can't add hid device: -71
[  107.519957][ T5078]  </TASK>
[  107.533793][ T4231] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0
[  107.552286][   T21] usbhid: probe of 2-1:0.0 failed with error -71
[  107.573449][ T4231] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2
[  107.615866][   T21] usb 2-1: USB disconnect, device number 4
[  107.653021][ T4231] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1
[  107.682146][ T4231] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 4
[  107.701945][ T4231] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2
[  107.724732][ T4231] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 6
[  107.739791][ T4231] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3
[  107.964703][ T4234] usb 5-1: USB disconnect, device number 7
[  107.983170][ T4234] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0
[  108.017903][ T4234] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1
[  108.055848][ T4234] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2
[  108.091433][ T4234] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3
[  108.116521][ T4234] keyspan 5-1:0.0: device disconnected
[  108.312288][ T5080] loop3: detected capacity change from 0 to 32768
[  108.548421][ T5096] loop0: detected capacity change from 0 to 164
[  108.882738][ T5105] FAULT_INJECTION: forcing a failure.
[  108.882738][ T5105] name failslab, interval 1, probability 0, space 0, times 0
[  108.896478][ T5108] FAULT_INJECTION: forcing a failure.
[  108.896478][ T5108] name failslab, interval 1, probability 0, space 0, times 0
[  108.910354][ T5109] device syzkaller1 entered promiscuous mode
[  108.922623][ T5105] CPU: 0 PID: 5105 Comm: syz.0.265 Not tainted syzkaller #0
[  108.929965][ T5105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  108.940054][ T5105] Call Trace:
[  108.943367][ T5105]  <TASK>
[  108.946328][ T5105]  dump_stack_lvl+0x188/0x250
[  108.951048][ T5105]  ? show_regs_print_info+0x20/0x20
[  108.956390][ T5105]  ? load_image+0x410/0x410
[  108.960948][ T5105]  ? __lock_acquire+0x7b50/0x7b50
[  108.966017][ T5105]  should_fail+0x383/0x4b0
[  108.970478][ T5105]  should_failslab+0x5/0x20
[  108.975018][ T5105]  slab_pre_alloc_hook+0x51/0xc0
[  108.979986][ T5105]  ? __d_alloc+0x27/0x6d0
[  108.984347][ T5105]  kmem_cache_alloc+0x3d/0x280
[  108.989149][ T5105]  __d_alloc+0x27/0x6d0
[  108.993346][ T5105]  d_alloc+0x46/0x250
[  108.997357][ T5105]  lookup_one_qstr_excl+0xc6/0x240
[  109.002504][ T5105]  do_rmdir+0x1c1/0x710
[  109.006692][ T5105]  ? d_delete_notify+0x150/0x150
[  109.011669][ T5105]  ? getname_flags+0x1f9/0x4f0
[  109.016481][ T5105]  __x64_sys_unlinkat+0xc0/0xe0
[  109.021803][ T5105]  do_syscall_64+0x4c/0xa0
[  109.026261][ T5105]  ? clear_bhb_loop+0x30/0x80
[  109.030968][ T5105]  ? clear_bhb_loop+0x30/0x80
[  109.035678][ T5105]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  109.041617][ T5105] RIP: 0033:0x7f7339c13159
[  109.046067][ T5105] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  109.065708][ T5105] RSP: 002b:00007f7337e6b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000107
[  109.074169][ T5105] RAX: ffffffffffffffda RBX: 00007f7339e9afa0 RCX: 00007f7339c13159
[  109.082181][ T5105] RDX: 0000000000000200 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  109.090184][ T5105] RBP: 00007f7339caa06b R08: 0000000000000000 R09: 0000000000000000
[  109.098201][ T5105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  109.106215][ T5105] R13: 00007f7339e9b038 R14: 00007f7339e9afa0 R15: 00007ffd4e311c28
[  109.114246][ T5105]  </TASK>
[  109.117299][ T5108] CPU: 1 PID: 5108 Comm: syz.1.266 Not tainted syzkaller #0
[  109.124631][ T5108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  109.134727][ T5108] Call Trace:
[  109.138046][ T5108]  <TASK>
[  109.141027][ T5108]  dump_stack_lvl+0x188/0x250
[  109.145759][ T5108]  ? show_regs_print_info+0x20/0x20
[  109.151003][ T5108]  ? load_image+0x410/0x410
[  109.155552][ T5108]  ? __might_sleep+0xf0/0xf0
[  109.160188][ T5108]  ? __lock_acquire+0x7b50/0x7b50
[  109.165267][ T5108]  should_fail+0x383/0x4b0
[  109.169776][ T5108]  should_failslab+0x5/0x20
[  109.174324][ T5108]  slab_pre_alloc_hook+0x51/0xc0
[  109.179310][ T5108]  __kmalloc_node+0x6d/0x3a0
[  109.183950][ T5108]  ? kvmalloc_node+0x84/0x130
[  109.188674][ T5108]  kvmalloc_node+0x84/0x130
[  109.193234][ T5108]  seq_read_iter+0x1de/0xc50
[  109.197866][ T5108]  ? rcu_lock_release+0x20/0x20
[  109.202798][ T5108]  ? end_current_label_crit_section+0x14b/0x170
[  109.209139][ T5108]  proc_reg_read_iter+0x1a9/0x270
[  109.214226][ T5108]  vfs_read+0x75e/0xd50
[  109.218443][ T5108]  ? kernel_read+0x1e0/0x1e0
[  109.223095][ T5108]  ? mutex_lock_nested+0x17/0x20
[  109.228082][ T5108]  ? __fdget_pos+0x2bf/0x370
[  109.232722][ T5108]  ? ksys_read+0x70/0x260
[  109.237112][ T5108]  ksys_read+0x153/0x260
[  109.241412][ T5108]  ? vfs_write+0xd70/0xd70
[  109.245915][ T5108]  ? lockdep_hardirqs_on+0x94/0x140
[  109.251173][ T5108]  do_syscall_64+0x4c/0xa0
[  109.255641][ T5108]  ? clear_bhb_loop+0x30/0x80
[  109.260369][ T5108]  ? clear_bhb_loop+0x30/0x80
[  109.265116][ T5108]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  109.271055][ T5108] RIP: 0033:0x7fcd4dd74159
[  109.275512][ T5108] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  109.295254][ T5108] RSP: 002b:00007fcd4bfcc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  109.303820][ T5108] RAX: ffffffffffffffda RBX: 00007fcd4dffbfa0 RCX: 00007fcd4dd74159
[  109.311854][ T5108] RDX: 0000000000002020 RSI: 0000200000000200 RDI: 0000000000000003
[  109.319870][ T5108] RBP: 00007fcd4de0b06b R08: 0000000000000000 R09: 0000000000000000
[  109.327891][ T5108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  109.335936][ T5108] R13: 00007fcd4dffc038 R14: 00007fcd4dffbfa0 R15: 00007fffbaac1658
[  109.343979][ T5108]  </TASK>
[  110.061153][ T5148] loop3: detected capacity change from 0 to 128
[  110.121387][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory
[  110.144723][ T5152] netlink: 'syz.1.285': attribute type 1 has an invalid length.
[  110.169864][ T5148] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  110.258007][ T5148] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  110.279335][ T5148] ext2 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  110.288729][ T5155] loop0: detected capacity change from 0 to 1024
[  110.362024][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory
[  110.376018][ T5160] loop4: detected capacity change from 0 to 128
[  110.396726][ T5155] EXT4-fs (loop0): Ignoring removed bh option
[  110.414482][ T5155] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  110.443575][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory
[  110.475330][ T5155] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,dioread_lock,dioread_nolock,resgid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,lazytime,journal_ioprio=0x0000000000000005,stripe=0x0000000000000011,bh,init_itable,,errors=continue. Quota mode: none.
[  110.513285][ T5160] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  110.531348][ T5166] FAULT_INJECTION: forcing a failure.
[  110.531348][ T5166] name failslab, interval 1, probability 0, space 0, times 0
[  110.548300][ T5160] ext4 filesystem being mounted at /56/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  110.584102][ T5166] CPU: 0 PID: 5166 Comm: syz.1.289 Not tainted syzkaller #0
[  110.591452][ T5166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  110.601543][ T5166] Call Trace:
[  110.604856][ T5166]  <TASK>
[  110.607819][ T5166]  dump_stack_lvl+0x188/0x250
[  110.612540][ T5166]  ? show_regs_print_info+0x20/0x20
[  110.617786][ T5166]  ? load_image+0x410/0x410
[  110.622329][ T5166]  ? __might_sleep+0xf0/0xf0
[  110.626971][ T5166]  ? __lock_acquire+0x7b50/0x7b50
[  110.632034][ T5166]  ? mpol_shared_policy_init+0x19c/0x4b0
[  110.637707][ T5166]  ? ktime_get_coarse_real_ts64+0x2b/0x120
[  110.643558][ T5166]  should_fail+0x383/0x4b0
[  110.648023][ T5166]  should_failslab+0x5/0x20
[  110.652559][ T5166]  slab_pre_alloc_hook+0x51/0xc0
[  110.657538][ T5166]  ? __d_alloc+0x27/0x6d0
[  110.661917][ T5166]  kmem_cache_alloc+0x3d/0x280
[  110.666728][ T5166]  __d_alloc+0x27/0x6d0
[  110.670956][ T5166]  ? d_alloc_pseudo+0xe/0x70
[  110.675599][ T5166]  d_alloc_pseudo+0x19/0x70
[  110.680152][ T5166]  alloc_file_pseudo+0xe0/0x200
[  110.685076][ T5166]  ? alloc_empty_file_noaccount+0x80/0x80
[  110.690843][ T5166]  ? shmem_get_inode+0x87b/0xa40
[  110.695861][ T5166]  __shmem_file_setup+0x1cf/0x290
[  110.701459][ T5166]  shmem_zero_setup+0x8e/0x1c0
[  110.706273][ T5166]  mmap_region+0x135d/0x1730
[  110.710934][ T5166]  do_mmap+0x801/0xe30
[  110.715045][ T5166]  ? vm_mmap_pgoff+0x16c/0x2d0
[  110.719846][ T5166]  vm_mmap_pgoff+0x1c1/0x2d0
[  110.724480][ T5166]  ? account_locked_vm+0xe0/0xe0
[  110.729453][ T5166]  ? __context_tracking_exit+0x4c/0x80
[  110.734958][ T5166]  ? __lock_acquire+0x7b50/0x7b50
[  110.740021][ T5166]  ksys_mmap_pgoff+0x140/0x790
[  110.744845][ T5166]  ? mmap_region+0x1730/0x1730
[  110.749639][ T5166]  ? lockdep_hardirqs_on+0x94/0x140
[  110.754875][ T5166]  do_syscall_64+0x4c/0xa0
[  110.759328][ T5166]  ? clear_bhb_loop+0x30/0x80
[  110.764030][ T5166]  ? clear_bhb_loop+0x30/0x80
[  110.768743][ T5166]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  110.774661][ T5166] RIP: 0033:0x7fcd4dd74159
[  110.779294][ T5166] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  110.798933][ T5166] RSP: 002b:00007fcd4bfcc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  110.807391][ T5166] RAX: ffffffffffffffda RBX: 00007fcd4dffbfa0 RCX: 00007fcd4dd74159
[  110.815388][ T5166] RDX: 000000000200000b RSI: 0000000000200000 RDI: 0000200000000000
[  110.823379][ T5166] RBP: 00007fcd4de0b06b R08: ffffffffffffffff R09: 0000000042795000
[  110.831372][ T5166] R10: 0000000000204031 R11: 0000000000000246 R12: 0000000000000000
[  110.839359][ T5166] R13: 00007fcd4dffc038 R14: 00007fcd4dffbfa0 R15: 00007fffbaac1658
[  110.847366][ T5166]  </TASK>
[  110.856173][ T5155] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2812: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  110.931467][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory
[  110.973154][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory
[  110.986268][ T4385] udevd[4385]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory
[  111.058749][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory
[  111.071196][ T4385] udevd[4385]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory
[  111.110514][ T4385] udevd[4385]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory
[  111.220609][ T5175] loop4: detected capacity change from 0 to 1024
[  111.263720][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory
[  111.754336][   T26] audit: type=1800 audit(1790072958.874:3): pid=5191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.300" name="addr_adrfam" dev="configfs" ino=36869 res=0 errno=0
[  111.845622][ T5193] FAULT_INJECTION: forcing a failure.
[  111.845622][ T5193] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  111.911289][ T5193] CPU: 0 PID: 5193 Comm: syz.1.301 Not tainted syzkaller #0
[  111.918682][ T5193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  111.928779][ T5193] Call Trace:
[  111.932092][ T5193]  <TASK>
[  111.935061][ T5193]  dump_stack_lvl+0x188/0x250
[  111.939786][ T5193]  ? show_regs_print_info+0x20/0x20
[  111.945043][ T5193]  ? load_image+0x410/0x410
[  111.949603][ T5193]  ? __lock_acquire+0x7b50/0x7b50
[  111.954697][ T5193]  should_fail+0x383/0x4b0
[  111.959183][ T5193]  prepare_alloc_pages+0x1e3/0x5b0
[  111.964357][ T5193]  __alloc_pages+0x11b/0x480
[  111.969011][ T5193]  ? zone_statistics+0x170/0x170
[  111.974015][ T5193]  ? __alloc_pages+0x282/0x480
[  111.978849][ T5193]  ? zone_statistics+0x170/0x170
[  111.983851][ T5193]  ? alloc_pages+0x452/0x560
[  111.988528][ T5193]  get_zeroed_page+0x13/0x30
[  111.993391][ T5193]  get_image_page+0x41/0x310
[  111.998080][ T5193]  alloc_rtree_node+0xde/0x150
[  112.002907][ T5193]  memory_bm_create+0x4ee/0x950
[  112.007830][ T5193]  create_basic_memory_bitmaps+0x95/0x370
[  112.013629][ T5193]  snapshot_open+0x19b/0x260
[  112.018322][ T5193]  ? snapshot_compat_ioctl+0x90/0x90
[  112.023682][ T5193]  misc_open+0x31f/0x390
[  112.027987][ T5193]  chrdev_open+0x585/0x5f0
[  112.032468][ T5193]  ? cd_forget+0x160/0x160
[  112.036942][ T5193]  ? fsnotify_perm+0x3a7/0x560
[  112.041753][ T5193]  ? cd_forget+0x160/0x160
[  112.046222][ T5193]  do_dentry_open+0x7f7/0xf90
[  112.050951][ T5193]  ? vfs_open+0x2b/0x80
[  112.055203][ T5193]  path_openat+0x2718/0x2fb0
[  112.059871][ T5193]  ? __kasan_slab_alloc+0xa9/0xc0
[  112.064967][ T5193]  ? do_filp_open+0x400/0x400
[  112.069725][ T5193]  do_filp_open+0x1df/0x400
[  112.074294][ T5193]  ? vfs_tmpfile+0x300/0x300
[  112.078975][ T5193]  ? _raw_spin_unlock+0x24/0x40
[  112.083878][ T5193]  ? alloc_fd+0x59e/0x650
[  112.088260][ T5193]  do_sys_openat2+0x14b/0x500
[  112.092978][ T5193]  ? __lock_acquire+0x7b50/0x7b50
[  112.098058][ T5193]  ? do_sys_open+0xe0/0xe0
[  112.102527][ T5193]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  112.108571][ T5193]  ? lock_chain_count+0x20/0x20
[  112.113485][ T5193]  __x64_sys_openat+0x135/0x160
[  112.118391][ T5193]  do_syscall_64+0x4c/0xa0
[  112.122852][ T5193]  ? clear_bhb_loop+0x30/0x80
[  112.127571][ T5193]  ? clear_bhb_loop+0x30/0x80
[  112.132293][ T5193]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  112.138237][ T5193] RIP: 0033:0x7fcd4dd74159
[  112.142698][ T5193] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  112.162343][ T5193] RSP: 002b:00007fcd4bfcc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  112.170817][ T5193] RAX: ffffffffffffffda RBX: 00007fcd4dffbfa0 RCX: 00007fcd4dd74159
[  112.178836][ T5193] RDX: 0000000000042801 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  112.186856][ T5193] RBP: 00007fcd4de0b06b R08: 0000000000000000 R09: 0000000000000000
[  112.191980][ T5179] loop3: detected capacity change from 0 to 32768
[  112.194862][ T5193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  112.209334][ T5193] R13: 00007fcd4dffc038 R14: 00007fcd4dffbfa0 R15: 00007fffbaac1658
[  112.217386][ T5193]  </TASK>
[  112.297932][ T5179] XFS (loop3): Mounting V5 Filesystem
[  112.391690][ T5179] XFS (loop3): Ending clean mount
[  112.439875][   T26] audit: type=1800 audit(1790072959.554:4): pid=5179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.293" name="file1" dev="loop3" ino=7430 res=0 errno=0
[  112.539332][ T4194] XFS (loop3): Unmounting Filesystem
[  112.568284][   T26] audit: type=1800 audit(1790072959.584:5): pid=5179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.293" name="file1" dev="loop3" ino=7430 res=0 errno=0
[  112.752350][ T5197] loop0: detected capacity change from 0 to 40427
[  112.779821][ T5212] loop1: detected capacity change from 0 to 512
[  112.864546][ T5197] F2FS-fs (loop0): Invalid SB checksum offset: 0
[  112.881119][ T5212] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  112.895574][ T5197] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[  112.910224][ T5212] ext4 filesystem being mounted at /67/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  112.963510][ T5197] F2FS-fs (loop0): invalid crc value
[  113.029865][ T5197] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  113.081785][ T5222] loop3: detected capacity change from 0 to 128
[  113.172795][ T5197] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0
[  113.196488][ T5222] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  113.203573][ T5197] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  113.347179][   T26] audit: type=1800 audit(1790072960.464:6): pid=5222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.304" name="file7" dev="loop3" ino=117 res=0 errno=0
[  113.410721][   T26] audit: type=1800 audit(1790072960.494:7): pid=5197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.303" name="file1" dev="loop0" ino=10 res=0 errno=0
[  113.712485][ T4233] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  113.846362][ T4188] attempt to access beyond end of device
[  113.846362][ T4188] loop0: rw=2049, want=45104, limit=40427
[  114.151015][ T4233] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  114.170664][ T4233] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  114.189247][ T4233] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  114.201438][ T4233] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  114.215786][ T4233] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[  114.225170][ T4233] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  114.592262][ T5275] loop4: detected capacity change from 0 to 128
[  114.695562][ T5277] FAULT_INJECTION: forcing a failure.
[  114.695562][ T5277] name failslab, interval 1, probability 0, space 0, times 0
[  114.729199][ T5277] CPU: 0 PID: 5277 Comm: syz.0.329 Not tainted syzkaller #0
[  114.736568][ T5277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  114.746671][ T5277] Call Trace:
[  114.750003][ T5277]  <TASK>
[  114.752973][ T5277]  dump_stack_lvl+0x188/0x250
[  114.757727][ T5277]  ? show_regs_print_info+0x20/0x20
[  114.762972][ T5277]  ? load_image+0x410/0x410
[  114.767632][ T5277]  ? __lock_acquire+0x7b50/0x7b50
[  114.772712][ T5277]  ? aa_get_newest_label+0xf5/0x5a0
[  114.777977][ T5277]  should_fail+0x383/0x4b0
[  114.782444][ T5277]  should_failslab+0x5/0x20
[  114.786988][ T5277]  slab_pre_alloc_hook+0x51/0xc0
[  114.791969][ T5277]  ? prepare_creds+0x3c/0x610
[  114.796720][ T5277]  kmem_cache_alloc+0x3d/0x280
[  114.801537][ T5277]  prepare_creds+0x3c/0x610
[  114.806093][ T5277]  cap_task_prctl+0x26d/0xc00
[  114.810816][ T5277]  security_task_prctl+0x75/0x100
[  114.815897][ T5277]  __se_sys_prctl+0xba/0x1050
[  114.820634][ T5277]  ? __x64_sys_prctl+0xc0/0xc0
[  114.825470][ T5277]  ? lockdep_hardirqs_on+0x94/0x140
[  114.830720][ T5277]  ? __x64_sys_prctl+0x1c/0xc0
[  114.835543][ T5277]  do_syscall_64+0x4c/0xa0
[  114.840101][ T5277]  ? clear_bhb_loop+0x30/0x80
[  114.844821][ T5277]  ? clear_bhb_loop+0x30/0x80
[  114.849542][ T5277]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  114.855486][ T5277] RIP: 0033:0x7f7339c13159
[  114.859955][ T5277] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  114.879611][ T5277] RSP: 002b:00007f7337e6b028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d
[  114.888115][ T5277] RAX: ffffffffffffffda RBX: 00007f7339e9afa0 RCX: 00007f7339c13159
[  114.896292][ T5277] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000018
[  114.904307][ T5277] RBP: 00007f7339caa06b R08: 0000000000000000 R09: 0000000000000000
[  114.912345][ T5277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  114.920358][ T5277] R13: 00007f7339e9b038 R14: 00007f7339e9afa0 R15: 00007ffd4e311c28
[  114.928391][ T5277]  </TASK>
[  115.596509][ T5283] loop3: detected capacity change from 0 to 32768
[  115.607519][ T4385] udevd[4385]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory
[  115.632564][ T4233] gud 2-1:1.0: USB-1: Failed to add properties (ret=-71)
[  115.640252][ T4233] gud 2-1:1.0: Failed to get connectors (error=-71)
[  115.658213][ T5283] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.332 (5283)
[  115.673593][ T4233] gud: probe of 2-1:1.0 failed with error -71
[  115.710786][ T4233] usb 2-1: USB disconnect, device number 5
[  115.754262][ T5283] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  115.763089][ T5283] BTRFS info (device loop3): setting nodatasum
[  115.769286][ T5283] BTRFS info (device loop3): force zlib compression, level 3
[  115.776769][ T5283] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8)
[  115.787539][ T5283] BTRFS info (device loop3): use lzo compression, level 0
[  115.794753][ T5283] BTRFS info (device loop3): turning on flush-on-commit
[  115.801734][ T5283] BTRFS info (device loop3): enabling auto defrag
[  115.808444][ T5283] BTRFS info (device loop3): max_inline at 4096
[  115.814811][ T5283] BTRFS info (device loop3): using free space tree
[  115.821351][ T5283] BTRFS info (device loop3): has skinny extents
[  115.887285][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory
[  115.945479][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory
[  116.008110][ T5281] loop0: detected capacity change from 0 to 32768
[  116.021517][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory
[  116.088658][ T5283] BTRFS info (device loop3): enabling ssd optimizations
[  116.150548][   T26] audit: type=1800 audit(1790072963.254:8): pid=5283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.332" name="file1" dev="loop3" ino=260 res=0 errno=0
[  116.266662][ T5281] XFS (loop0): Mounting V5 Filesystem
[  116.282115][ T5315] netlink: 12 bytes leftover after parsing attributes in process `syz.4.336'.
[  116.434087][ T5281] XFS (loop0): Ending clean mount
[  116.507086][ T5281] XFS (loop0): User initiated shutdown received.
[  116.664387][ T5281] XFS (loop0): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:491).  Shutting down filesystem.
[  116.711978][ T5281] XFS (loop0): Please unmount the filesystem and rectify the problem(s)
[  116.818904][   T26] audit: type=1804 audit(1790072963.934:9): pid=5339 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.343" name="/newroot/73/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=25823 res=1 errno=0
[  116.849220][ T4188] XFS (loop0): Unmounting Filesystem
[  116.895528][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory
[  116.944164][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory
[  117.104089][ T4250] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.122952][ T5344] loop3: detected capacity change from 0 to 1024
[  117.133961][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory
[  117.156273][ T4385] udevd[4385]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory
[  117.209647][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory
[  117.255255][ T4250] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.337031][ T4250] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.397800][ T4531] hfsplus: bad catalog file entry
[  117.411952][ T4531] hfsplus: b-tree write err: -5, ino 3
[  117.467430][ T4250] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.482308][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory
[  117.703892][ T5358] loop3: detected capacity change from 0 to 4096
[  117.841998][ T5367] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  118.350795][ T5387] loop4: detected capacity change from 0 to 1024
[  118.368472][ T5391] loop3: detected capacity change from 0 to 512
[  118.463163][ T5391] EXT4-fs (loop3): Ignoring removed oldalloc option
[  118.520680][ T5391] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,noauto_da_alloc,oldalloc,,errors=continue. Quota mode: none.
[  118.924011][ T5413] netlink: 144 bytes leftover after parsing attributes in process `syz.4.361'.
[  119.501480][ T4250] device hsr_slave_0 left promiscuous mode
[  119.557431][ T4250] device hsr_slave_1 left promiscuous mode
[  119.570609][ T4250] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  119.597065][ T4250] batman_adv: batadv0: Removing interface: batadv_slave_0
[  119.651449][ T4250] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  119.690545][ T4250] batman_adv: batadv0: Removing interface: batadv_slave_1
[  119.714822][ T4250] device bridge_slave_1 left promiscuous mode
[  119.741703][ T4250] bridge0: port 2(bridge_slave_1) entered disabled state
[  119.811221][ T4250] device bridge_slave_0 left promiscuous mode
[  119.825556][ T4250] bridge0: port 1(bridge_slave_0) entered disabled state
[  119.896811][ T4250] device veth1_macvtap left promiscuous mode
[  119.903930][ T4250] device veth0_macvtap left promiscuous mode
[  119.910318][ T4250] device veth1_vlan left promiscuous mode
[  119.917095][ T4250] device veth0_vlan left promiscuous mode
[  120.290302][ T5444] loop0: detected capacity change from 0 to 32768
[  120.307186][ T5446] loop4: detected capacity change from 0 to 32768
[  120.419451][ T5446] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  120.449448][   T26] audit: type=1800 audit(1790072967.564:10): pid=5454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.367" name="file2" dev="loop0" ino=5 res=0 errno=0
[  120.483780][   T26] audit: type=1800 audit(1790072967.594:11): pid=5444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.367" name="file2" dev="loop0" ino=5 res=0 errno=0
[  120.508792][ T4250] team0 (unregistering): Port device team_slave_1 removed
[  120.539370][ T4250] team0 (unregistering): Port device team_slave_0 removed
[  120.582761][ T4250] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  120.614577][ T4250] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  120.637860][ T4186] ocfs2: Unmounting device (7,4) on (node local)
[  120.699858][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory
[  120.725535][ T4385] udevd[4385]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory
[  120.748944][ T5460] overlayfs: failed to set xattr on upper
[  120.776487][ T5460] overlayfs: ...falling back to index=off,metacopy=off.
[  120.794911][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory
[  120.805424][ T4385] udevd[4385]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory
[  121.037672][ T4250] bond0 (unregistering): Released all slaves
[  121.246635][ T5479] loop3: detected capacity change from 0 to 1024
[  121.295984][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory
[  121.370319][ T5479] EXT4-fs (loop3): Ignoring removed bh option
[  121.378738][ T5479] EXT4-fs (loop3): Ignoring removed bh option
[  121.445175][ T5479] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,nolazytime,bh,min_batch_time=0x0000000000000008,errors=remount-ro,stripe=0x0000000000000005,bh,init_itable,. Quota mode: none.
[  121.549412][ T5489] EXT4-fs error (device loop3): ext4_find_dest_de:2117: inode #12: block 7: comm syz.3.376: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0
[  121.584293][ T5489] EXT4-fs (loop3): Remounting filesystem read-only
[  121.686946][ T4194] EXT4-fs error (device loop3): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /87/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0
[  121.720100][ T4194] EXT4-fs (loop3): Remounting filesystem read-only
[  121.731897][ T4194] EXT4-fs error (device loop3): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /87/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0
[  121.761112][ T4194] EXT4-fs (loop3): Remounting filesystem read-only
[  121.768405][ T4194] EXT4-fs error (device loop3): empty_inline_dir:1890: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[  121.801423][ T4194] EXT4-fs (loop3): Remounting filesystem read-only
[  121.811178][ T4194] EXT4-fs warning (device loop3): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  121.832876][ T4194] EXT4-fs error (device loop3): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /87/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0
[  121.862078][ T4194] EXT4-fs (loop3): Remounting filesystem read-only
[  121.870063][ T4194] EXT4-fs error (device loop3): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /87/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0
[  121.898276][ T4194] EXT4-fs (loop3): Remounting filesystem read-only
[  121.905392][ T4194] EXT4-fs error (device loop3): empty_inline_dir:1890: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[  121.947313][ T4194] EXT4-fs (loop3): Remounting filesystem read-only
[  121.962627][ T4194] EXT4-fs warning (device loop3): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  121.992743][ T4194] EXT4-fs error (device loop3): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /87/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0
[  122.044996][ T4194] EXT4-fs (loop3): Remounting filesystem read-only
[  122.051633][ T4194] EXT4-fs error (device loop3): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /87/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0
[  122.172582][ T4194] EXT4-fs (loop3): Remounting filesystem read-only
[  122.179468][ T4194] EXT4-fs error (device loop3): empty_inline_dir:1890: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[  122.295930][ T4194] EXT4-fs (loop3): Remounting filesystem read-only
[  122.303026][ T4194] EXT4-fs warning (device loop3): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  122.377431][ T4194] EXT4-fs warning (device loop3): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  122.458279][ T4194] EXT4-fs warning (device loop3): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  122.512718][ T4194] EXT4-fs warning (device loop3): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  122.582668][ T4194] EXT4-fs warning (device loop3): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  122.633382][ T4194] EXT4-fs warning (device loop3): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  122.663665][ T4194] EXT4-fs warning (device loop3): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  122.719960][ T4194] EXT4-fs warning (device loop3): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  123.067400][ T5509] loop4: detected capacity change from 0 to 32768
[  123.104436][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory
[  123.165119][ T5509] JBD2: Ignoring recovery information on journal
[  123.332324][ T5509] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  123.569391][ T5509] syz.4.381 (5509) used greatest stack depth: 18208 bytes left
[  123.605575][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory
[  123.640904][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory
[  123.665246][ T4186] ocfs2: Unmounting device (7,4) on (node local)
[  123.766896][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory
[  123.799942][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory
[  124.026836][ T4229] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  124.309128][ T4229] usb 1-1: Using ep0 maxpacket: 32
[  124.448149][ T4229] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 53, changing to 7
[  124.487264][ T4229] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1568, setting to 1024
[  124.657102][ T4229] usb 1-1: New USB device found, idVendor=0582, idProduct=003b, bcdDevice= 0.40
[  124.682425][ T4229] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.690624][ T4229] usb 1-1: Product: syz
[  124.724268][ T4229] usb 1-1: Manufacturer: syz
[  124.728970][ T4229] usb 1-1: SerialNumber: syz
[  124.917513][    T7] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  125.180683][ T4229] usb 1-1: Can't get UAC3 power state for id 10
[  125.213245][    T7] usb 5-1: Using ep0 maxpacket: 32
[  125.246253][ T4250] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.269063][ T5583] loop1: detected capacity change from 0 to 128
[  125.293183][ T4229] usb 1-1: cannot get ctl value: req = 0x83, wValue = 0x201, wIndex = 0x200, type = 4
[  125.324262][ T4229] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2)
[  125.357839][ T5583] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  125.369125][    T7] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  125.396666][ T4250] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.418621][    T7] usb 5-1: config 0 interface 0 has no altsetting 0
[  125.435851][ T5583] ext4 filesystem being mounted at /87/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  125.467369][    T7] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00
[  125.484108][ T4250] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.520524][    T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.590564][    T7] usb 5-1: config 0 descriptor??
[  125.595716][ T4250] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.649025][ T4229] usb 1-1: USB disconnect, device number 4
[  125.855639][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory
[  125.925494][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  125.939251][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory
[  126.332838][ T4229] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  126.456024][    T7] corsair-psu 0003:1B1C:1C09.0007: unknown main item tag 0x0
[  126.472506][    T7] corsair-psu 0003:1B1C:1C09.0007: unknown main item tag 0x0
[  126.490245][    T7] corsair-psu 0003:1B1C:1C09.0007: unknown main item tag 0x0
[  126.510519][    T7] corsair-psu 0003:1B1C:1C09.0007: unknown main item tag 0x0
[  126.518477][    T7] corsair-psu 0003:1B1C:1C09.0007: unknown main item tag 0x0
[  126.547010][    T7] corsair-psu 0003:1B1C:1C09.0007: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.4-1/input0
[  126.549309][ T5597] loop1: detected capacity change from 0 to 32768
[  126.583847][ T4229] usb 1-1: Using ep0 maxpacket: 8
[  126.594200][ T5599] udevd[5599]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory
[  126.681182][ T5597] XFS (loop1): Mounting V5 Filesystem
[  126.714626][ T4229] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  126.725980][ T4229] usb 1-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 12
[  126.742116][ T4229] usb 1-1: config 0 interface 0 has no altsetting 0
[  126.749288][ T4229] usb 1-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00
[  126.759615][ T4229] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  126.790087][ T4229] usb 1-1: config 0 descriptor??
[  126.842722][ T5597] XFS (loop1): Ending clean mount
[  126.940868][ T5597] XFS (loop1): User initiated shutdown received.
[  126.959708][ T5597] XFS (loop1): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:491).  Shutting down filesystem.
[  126.974723][    T7] corsair-psu 0003:1B1C:1C09.0007: unable to initialize device (-110)
[  127.018983][ T5597] XFS (loop1): Please unmount the filesystem and rectify the problem(s)
[  127.029396][    T7] corsair-psu: probe of 0003:1B1C:1C09.0007 failed with error -110
[  127.070298][    T7] usb 5-1: USB disconnect, device number 8
[  127.108828][ T4250] device hsr_slave_0 left promiscuous mode
[  127.118242][ T4250] device hsr_slave_1 left promiscuous mode
[  127.135276][ T4250] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  127.159814][ T4250] batman_adv: batadv0: Removing interface: batadv_slave_0
[  127.167572][ T4187] XFS (loop1): Unmounting Filesystem
[  127.186862][ T4250] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  127.213228][ T4250] batman_adv: batadv0: Removing interface: batadv_slave_1
[  127.244864][ T4250] device bridge_slave_1 left promiscuous mode
[  127.251135][ T4250] bridge0: port 2(bridge_slave_1) entered disabled state
[  127.261184][ T4250] device bridge_slave_0 left promiscuous mode
[  127.269923][ T4250] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.295712][ T4229] petalynx 0003:18B1:0037.0008: unknown main item tag 0x0
[  127.321318][ T4229] petalynx 0003:18B1:0037.0008: unknown main item tag 0x0
[  127.346855][ T4229] petalynx 0003:18B1:0037.0008: unknown main item tag 0x0
[  127.366790][ T4229] petalynx 0003:18B1:0037.0008: unknown main item tag 0x0
[  127.378795][ T4229] petalynx 0003:18B1:0037.0008: unknown main item tag 0x0
[  127.389029][ T4229] petalynx 0003:18B1:0037.0008: unknown main item tag 0x0
[  127.401109][ T4229] petalynx 0003:18B1:0037.0008: unbalanced collection at end of report description
[  127.411279][ T4229] petalynx 0003:18B1:0037.0008: parse failed
[  127.418585][ T4229] petalynx: probe of 0003:18B1:0037.0008 failed with error -22
[  127.450717][ T4250] device veth1_macvtap left promiscuous mode
[  127.462743][ T4250] device veth0_macvtap left promiscuous mode
[  127.468921][ T4250] device veth1_vlan left promiscuous mode
[  127.500148][ T4250] device veth0_vlan left promiscuous mode
[  127.579204][ T4229] usb 1-1: USB disconnect, device number 5
[  127.630754][ T5599] udevd[5599]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory
[  127.669182][ T5599] udevd[5599]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory
[  127.802811][ T4250] bond1 (unregistering): Released all slaves
[  127.985867][ T4250] team0 (unregistering): Port device team_slave_1 removed
[  128.002253][ T4250] team0 (unregistering): Port device team_slave_0 removed
[  128.024617][ T4250] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  128.043545][ T4250] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  128.177751][ T5641] FAULT_INJECTION: forcing a failure.
[  128.177751][ T5641] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  128.195773][ T4250] bond0 (unregistering): Released all slaves
[  128.198608][ T5641] CPU: 1 PID: 5641 Comm: syz.4.392 Not tainted syzkaller #0
[  128.209130][ T5641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  128.219215][ T5641] Call Trace:
[  128.222527][ T5641]  <TASK>
[  128.225478][ T5641]  dump_stack_lvl+0x188/0x250
[  128.230202][ T5641]  ? show_regs_print_info+0x20/0x20
[  128.235440][ T5641]  ? load_image+0x410/0x410
[  128.240119][ T5641]  ? __lock_acquire+0x7b50/0x7b50
[  128.245202][ T5641]  should_fail+0x383/0x4b0
[  128.249659][ T5641]  prepare_alloc_pages+0x1e3/0x5b0
[  128.254807][ T5641]  __alloc_pages+0x11b/0x480
[  128.259432][ T5641]  ? zone_statistics+0x170/0x170
[  128.264418][ T5641]  ? __rwlock_init+0x140/0x140
[  128.269210][ T5641]  ? count_memcg_event_mm+0x324/0x370
[  128.274609][ T5641]  ? do_raw_spin_unlock+0x11d/0x230
[  128.279836][ T5641]  alloc_pages_vma+0x2bc/0x790
[  128.284637][ T5641]  handle_mm_fault+0x23be/0x4440
[  128.289631][ T5641]  ? get_page+0xe0/0xe0
[  128.293820][ T5641]  ? vmacache_find+0x4f0/0x590
[  128.298610][ T5641]  ? vmacache_update+0xa0/0x100
[  128.303522][ T5641]  ? find_vma+0x1df/0x230
[  128.307880][ T5641]  do_user_addr_fault+0x494/0xc90
[  128.312944][ T5641]  exc_page_fault+0x60/0x100
[  128.317560][ T5641]  ? clear_bhb_loop+0x30/0x80
[  128.322266][ T5641]  asm_exc_page_fault+0x22/0x30
[  128.327137][ T5641] RIP: 0033:0x7f6b66a121b6
[  128.331583][ T5641] Code: 24 50 4c 8b 4c 24 58 4c 8b 6c 24 50 48 89 4c 24 30 48 8d 0d dc da 1a 00 48 29 ca 44 89 4c 24 24 49 8d bd 00 10 00 00 4c 89 e9 <49> c7 45 10 ff 03 00 00 49 89 7d 08 45 89 fd 4d 89 e7 49 89 cc 48
[  128.351227][ T5641] RSP: 002b:00007f6b64db0f60 EFLAGS: 00010206
[  128.357316][ T5641] RAX: 0000000000000020 RBX: 0000000000000000 RCX: 0000200000bfd000
[  128.365309][ T5641] RDX: 00000000000025f5 RSI: 0000200000bfd000 RDI: 0000200000bfe000
[  128.373299][ T5641] RBP: 00007f6b66c0f740 R08: 0000000000000000 R09: ffffffffffffffff
[  128.381291][ T5641] R10: ffffffffffffffff R11: 0000000000000000 R12: 00000000003ff000
[  128.389287][ T5641] R13: 0000200000bfd000 R14: 00007f6b66de0fa0 R15: 0000000000000000
[  128.397466][ T5641]  </TASK>
[  128.423275][ T5641] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[  129.409560][ T5667] loop1: detected capacity change from 0 to 4096
[  129.439859][ T5599] udevd[5599]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory
[  129.501185][ T5667] EXT4-fs (loop1): Ignoring removed mblk_io_submit option
[  129.535975][ T5667] EXT4-fs (loop1): Test dummy encryption mode enabled
[  129.565106][ T5667] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,mblk_io_submit,dioread_nolock,test_dummy_encryption,init_itable=0x0000000000000001,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback.
[  130.067768][ T5599] udevd[5599]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory
[  130.109916][ T5599] udevd[5599]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory
[  130.545944][ T5340] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  130.702802][ T5710] loop0: detected capacity change from 0 to 4096
[  130.724695][ T5599] udevd[5599]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory
[  130.799219][ T5710] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback.
[  130.912715][ T5340] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  130.929690][ T5340] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  130.950910][ T5340] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  130.970154][ T5340] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  131.022942][ T5699] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  131.196202][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory
[  131.230261][ T5599] udevd[5599]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory
[  131.319679][ T4262] usb 5-1: USB disconnect, device number 9
[  131.905095][ T5749] loop0: detected capacity change from 0 to 128
[  131.919355][ T5599] udevd[5599]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory
[  132.009930][ T5749] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  132.021453][ T5749] ext4 filesystem being mounted at /77/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  132.058422][ T5749] syz.0.408 (pid 5749) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  132.177353][ T4203] Bluetooth: hci1: link tx timeout
[  132.183052][ T4203] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  132.230097][ T4203] Bluetooth: hci1: link tx timeout
[  132.246383][ T4203] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  132.256550][ T5599] udevd[5599]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory
[  132.303136][ T5599] udevd[5599]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory
[  132.313118][ T4203] Bluetooth: hci1: link tx timeout
[  132.318261][ T4203] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  132.339204][ T4203] Bluetooth: hci1: link tx timeout
[  132.344622][ T4203] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  132.463041][ T4203] Bluetooth: hci1: link tx timeout
[  132.468247][ T4203] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  132.688070][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  132.694487][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  133.405144][ T4203] Bluetooth: hci1: link tx timeout
[  133.410377][ T4203] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  133.422484][ T4203] Bluetooth: hci1: link tx timeout
[  133.427657][ T4203] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  134.045085][ T4203] Bluetooth: hci1: link tx timeout
[  134.050337][ T4203] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  134.203867][ T4262] Bluetooth: hci1: command 0x0406 tx timeout
[  135.111967][ T5846] loop1: detected capacity change from 0 to 2048
[  135.123297][ T5599] udevd[5599]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory
[  135.187987][ T5846] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option
[  135.243918][ T4203] Bluetooth: hci1: link tx timeout
[  135.249092][ T4203] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  135.269079][ T5846] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,nomblk_io_submit,stripe=0x000000000004ffff,norecovery,errors=remount-ro,max_batch_time=0x000000000000186b,. Quota mode: writeback.
[  135.325380][ T4203] Bluetooth: hci1: link tx timeout
[  135.330647][ T4203] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  135.344374][ T5846] EXT4-fs (loop1): shut down requested (2)
[  135.354607][ T4203] Bluetooth: hci1: link tx timeout
[  135.359878][ T4203] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
SYZFAIL: open /dev/vhci failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open /dev/vhci failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open /dev/vhci failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open /dev/vhci failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open /dev/vhci failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open /dev/vhci failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open /dev/vhci failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open /dev/vhci failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open /dev/vhci failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open /dev/vhci failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open /dev/vhci failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open /dev/vhci failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open /dev/vhci failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open /dev/vhci failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open /dev/vhci failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open /dev/vhci failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open /dev/vhci failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open /dev/vhci failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open /dev/vhci failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open /dev/vhci failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open /dev/vhci failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: repeatedly failed to execute the program
proc=5 req=334 state=3 status=67 (errno 32: Broken pipe)
[  135.386412][ T5846] overlayfs: failed to get redirect (-5)
[  135.630573][ T4203] Bluetooth: hci1: link tx timeout
[  136.121922][ T5599] udevd[5599]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory
[  136.152138][ T5599] udevd[5599]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory
[  136.152707][    T9] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.273868][    T9] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.354721][    T9] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.415046][    T9] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.289545][    T9] device hsr_slave_0 left promiscuous mode
[  137.300008][    T9] device hsr_slave_1 left promiscuous mode
[  137.309200][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  137.320384][    T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[  137.328696][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  137.340818][    T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[  137.349614][    T9] device bridge_slave_1 left promiscuous mode
[  137.359779][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[  137.369304][    T9] device bridge_slave_0 left promiscuous mode
[  137.379567][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  137.397668][    T9] device veth1_macvtap left promiscuous mode
[  137.403888][    T9] device veth0_macvtap left promiscuous mode
[  137.410045][    T9] device veth1_vlan left promiscuous mode
[  137.419812][    T9] device veth0_vlan left promiscuous mode
[  137.728186][    T9] team0 (unregistering): Port device team_slave_1 removed
[  137.751308][    T9] team0 (unregistering): Port device team_slave_0 removed
[  137.778405][    T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  137.799742][    T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  137.917783][    T9] bond0 (unregistering): Released all slaves
[  139.596619][    T9] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.662074][    T9] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.730933][    T9] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.792664][    T9] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.623300][    T9] device hsr_slave_0 left promiscuous mode
[  140.629898][    T9] device hsr_slave_1 left promiscuous mode
[  140.639266][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  140.647165][    T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[  140.658166][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  140.667267][    T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[  140.677640][    T9] device bridge_slave_1 left promiscuous mode
[  140.684439][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[  140.697263][    T9] device bridge_slave_0 left promiscuous mode
[  140.703738][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  140.722616][    T9] device veth1_macvtap left promiscuous mode
[  140.728733][    T9] device veth0_macvtap left promiscuous mode
[  140.737521][    T9] device veth1_vlan left promiscuous mode
[  140.743960][    T9] device veth0_vlan left promiscuous mode
[  140.887316][    T9] bond1 (unregistering): Released all slaves
[  141.014349][    T9] team0 (unregistering): Port device team_slave_1 removed
[  141.029612][    T9] team0 (unregistering): Port device team_slave_0 removed
[  141.048186][    T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  141.063093][    T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  141.128688][    T9] bond0 (unregistering): Released all slaves