last executing test programs:

16.331747161s ago: executing program 0 (id=704):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_xfrm(0x10, 0x3, 0x6)
getrandom(&(0x7f0000001400)=""/4096, 0x1000, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000040000000400000008"], 0x50)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff})
r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0)
pwritev(r2, &(0x7f00000012c0)=[{&(0x7f0000001340)="b2497b08df3f9a339fe6034f7bcbf0b7165dcf6ba3857d0811885a2de0e45f342ef87e769e35d3", 0x27}], 0x1, 0xfffffffc, 0x0)
pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80000)
write$P9_RXATTRWALK(r3, &(0x7f0000000180)={0xf, 0x1f, 0x2, 0x7ff}, 0xf)
clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0xb0, 0x9, 0x8000000000000000, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x3a})
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
r5 = memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4)
ftruncate(r5, 0x7000000)
r6 = dup(r5)
preadv2(r6, &(0x7f0000000540)=[{0x0}, {&(0x7f00000005c0)=""/53, 0x35}], 0x2, 0x0, 0x2766, 0x2)
pidfd_getfd(r6, 0xffffffffffffffff, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r4}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)

15.48345487s ago: executing program 0 (id=706):
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/net\x00')
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x40, &(0x7f0000000140)=ANY=[])
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x41, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x100, 0x70bd28, 0x0, {0x60, 0x0, 0x0, 0x0, {0xb, 0xfff2}, {0xc, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0x8f}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0xb}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000)

11.456579216s ago: executing program 0 (id=715):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x1c, 0x1e, 0x301, 0x20000022, 0x0, {0x1, 0x0, 0xffff}, [@nested={0x8, 0x3ffd, 0x0, 0x1, [@nested={0x4, 0x13d}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x4004000)
r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0)
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000180)={0x1})

9.300150545s ago: executing program 0 (id=718):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f00000003c0)=[{0x35, 0xfc, 0x1}, {0x1a}]})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
syz_mount_image$xfs(&(0x7f0000000800), &(0x7f0000000080)='./file1\x00', 0x2000048, &(0x7f0000000000)={[{@grpquota}, {@attr2}, {@lazytime}, {@qnoenforce}]}, 0x1, 0xb989, &(0x7f0000001280)="$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")
symlink(&(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00')
rename(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a40)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x10)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x215109a, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
umount2(&(0x7f0000000040)='./file0/../file0\x00', 0x0)
listxattr(&(0x7f0000000140)='./file0\x00', 0x0, 0x31)

7.132556344s ago: executing program 1 (id=724):
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = socket$alg(0x26, 0x5, 0x0)
syz_open_dev$vim2m(&(0x7f00000001c0), 0x4, 0x2)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = accept(r0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000002100)=[{{&(0x7f0000000100)=@caif=@dgm, 0x80, &(0x7f0000000040)=[{&(0x7f0000000240)=""/65, 0x41}, {0x0}, {&(0x7f0000000900)=""/142, 0x8e}, {&(0x7f00000009c0)=""/4096, 0x1000}], 0x4}, 0x1}, {{0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f00000019c0)=""/220, 0xdc}, {&(0x7f0000000180)=""/32, 0x20}, {&(0x7f0000000480)}, {&(0x7f0000001ac0)=""/30, 0x1e}, {&(0x7f0000001b00)=""/220, 0xdc}, {&(0x7f0000001c00)=""/88, 0x58}, {&(0x7f0000001c80)=""/209, 0xd1}, {&(0x7f0000001d80)=""/195, 0xc3}, {&(0x7f0000001e80)=""/102, 0x66}, {&(0x7f0000001f00)=""/28, 0x1c}], 0xa, &(0x7f0000002180)=""/218, 0xda}, 0x1}], 0x2, 0x0, 0x0)
ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0xde3ebb5)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0xc040)

6.670926805s ago: executing program 4 (id=726):
openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x40)
pselect6(0x40, &(0x7f0000000080)={0x0, 0x0, 0x5, 0x1000, 0x7, 0x3, 0x9, 0x7}, 0x0, &(0x7f0000000100)={0x9, 0x5, 0x56, 0x0, 0x14000000000, 0x5, 0x5, 0x8}, &(0x7f0000000140)={0x0, 0x3938700}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x7e36, 0xc0, 0x0, 0x7fff0000}]})
syz_usb_connect(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x43, 0x92, 0xd5, 0x20, 0x54c, 0x6c3, 0xeb7a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x8, 0x87, 0x70, 0x7, [{{0x9, 0x4, 0xcb, 0x1, 0x2, 0x4f, 0x3e, 0xaf, 0xb5, [], [{{0x9, 0x5, 0xe81eb71784d4b393, 0x2, 0x400, 0x9, 0x5, 0x2e}}, {{0x9, 0x5, 0xd, 0x10, 0x3ff, 0x5, 0x9, 0x7f}}]}}]}}]}}, 0x0)
syz_usb_connect$printer(0x6, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xd8, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xb, 0x2, 0x7, 0x1, 0x2, 0x3, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x7, 0x6, 0x9}}, [{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x7, 0x1, 0x2}}]}}}]}}]}}, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e22, @empty}}, 0xfffffff6, 0x40, 0xc, 0xffffffc3, 0x40, 0x801, 0x1}, 0x0)

5.765625484s ago: executing program 1 (id=727):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'rose0\x00', 0x112})
ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000940)={0x0, 0x4, [@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @remote, @empty, @broadcast]})

5.679888197s ago: executing program 0 (id=728):
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r0=>0x0, <r1=>0x0})
close(r0)
socketpair(0x1e, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\v'], 0x48)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r2=>0x0, <r3=>0x0})
sendmsg$unix(0xffffffffffffffff, &(0x7f0000001e80)={&(0x7f0000000180)=@abs={0x1, 0x5c, 0x1}, 0x6e, 0x0}, 0x20000)
close(r2)
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$tipc(r4, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0xffffffffffffffff, 0x3, 0xffffff00}}, 0x10, 0x0}, 0x4040005)

4.515411093s ago: executing program 1 (id=730):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000780)=r2, 0x4)
sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000200)="fa82", 0x3802}], 0x1}, 0x0)

4.229723877s ago: executing program 3 (id=731):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000008000000004"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

3.826424412s ago: executing program 2 (id=732):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001e000000000000000000000071181e000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

3.418213902s ago: executing program 1 (id=733):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)="5dfb72268ef188f5fc23fe7220d271e856af1487f85d73bd77fb130ed2788b50292a62390411cc18e0f6c36174a0b8c70d412f1113b96735d1202320cc40782635fadd6634da71407eed3c29c35dee729baf4598820a869a5732e9a2", 0x0, 0x3}, 0x38)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

3.342945502s ago: executing program 3 (id=734):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x5, 0x4, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4)
sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x1, 0x0}, 0x200400c0)

3.307675737s ago: executing program 4 (id=735):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000080000000000000000000080850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000725e850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r1}, 0xc)

3.018972389s ago: executing program 2 (id=736):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000200)={r1, 0x0, 0x0}, 0x10)

2.546929439s ago: executing program 4 (id=737):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0x800, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x50)

2.510369564s ago: executing program 3 (id=738):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="79129800000000006113730000000000bf2000000000000015000000080063033d030100000000009500003a000000006916000000000000bf6700000000000066060500fcff03006706000002000000760300000ee60060bf050000000000002c650000000000006507f9ff01000000070700004cdfffff1e75040000000000bf54000000000000070400000400f9ffad43010000000000d5000000000000000500000000000000950000000000000032410000000000000054bb12dc8c27df8ecfc7bdd2d17f2f1754558f22dd399703d6c4f6f3be0b369289aa6812b8e007e733a9a4f16d0a3e1282ee45a010fb94fe9de56c9d8a814261bdb94a05000000c6c60bf7a13ba1fcf1111ce4fc0d742a81762bab8395fa64810b5b40d893ea8fe0ffffff7f1b546cad3f1d5af65706fd4f68795cce6cf16ab689b555202da2e0ec2871a51445dc8da39e5b0ab71ca9b901627b562ed84b026002d4519af619e3cca4d69e0dee080006774a8f3e691700ec88158f02001b0000c81c8b297dff0445a13d0045fb3cda32a673a6bb55d8c80800dce431e56723888fb126a1403d2b63f16fb2ad9bc117aba7cbebe174aba210d739a018f9bbec63222d20cedbc4d03723f1c932b3a6aa57f1ad2e99e0e67a993716d20000009f0f53acbb40b401e3738270b3156268784f2af9e4bcf8b07a10d6735154be1602f9dd1d7d4301e00000000000460bcc5989ec85e3cbcb6bcfaf0000000000000000bc00f674629709e7e78f4ddc211bc3ebf0bd9d42ca019dd5d0861cd64722cf74686ebfbe2562671cd47840f81d2a8f8f9be3bcd19dc6840aa7afaab43176e65ec1118d50d1e80100008000000000887a5ad103649afa17690884f800031e03a651bb96589a7eab049b1bd47287cd31cc43ea0ffb567b40407d000000000000000000000000005f37d83f84e98a523d80bd0d0d703f37ca363f601ae899a56715a0a62a26a0f6a5480a55c22fe394ae0000000000000000000000000000437d57defb79ea000500000000000000000000f014a4a318ba48d35ae9f438000000000000db894b62a614cb1fdd46619c5d2200000000000700000000000000000000006dcd2f421400f69947e4f26e099c9e8369080663c909b7e7c87e3b5e8e5a6df77c8f7338cd5a85f211a41b5d529d4243e47d7ab0d5991756b59d363ba30b18fc2ff189a4e8db38ab97c6a125e2785619e84c6a2b50f0e3ff83ef5149aff43dc899fdebdc2c496e6bdd4dd4d21f06fe133f4444272c5f0839ad663100452a6c6b6421f7e89a33b339401eee2cd466ab2a93a1ee7fb8a9e455ba1c6e17b02a1cd7bf35d36cf5b2a0f063469ae0d0b9fc042b48e98626eb0f9754d8cbbefa3079fe63063047baff09e9aaf7600000fba9a88db9ebef86f7cb522a784bb6d37e5f802757a15c6735138b493db9df53440a63fc565a0b190a710ae1e6807cbeb415ac841e94b706974160a60a14e571274f333d23186143b95514c79b50994cb39cda343bda8f01cf8ec7cdfdace0289e83ce50a57d69bfecfaf69fe7ff5b0375a47d3eb57b41d8a0589b82a1cf1149ba3f21ea2b65433321eb1a6f04ecc713c2b26d27baa49e54c2babec86335b9f418b5a5eb997bc9dd65197124b9aa80fc4aa8defb986bf05c41b919886bb81ecd3d24cf9ecc7004000000000000002c70d32f5d55ef2a2cf7560cb2884f46a92b3c25550f73e407fc5d514b2b7a6b690e290e676266addb7d96e723dec9c418eec8c48dffb6f432b4d5fef16e4f0051ba7efc690022c3f62b37cb5682d8bfdfc637ad3bf089ef0117bcd395322fcfb8e8e0a6e2babceb5f289b1d991770681192bcd0b584c3497e455f30ab918a690514a87a7d8e1d5f169a4e680e9c390071d26f2e0e26fc062f2785f14c0404fe01fb4000000000000000577dcb1698a9021a36d73ed03651c1937b2c84046023a1a0a87b208e33ad2d7c2892b176877264e1d699b7401eb917b289f6f67060fda0fa44b54bd87517a2bf09dba7209e41db4288b61bda5960952c45e5c55f2cd68bf9c6ff33e46109584bf42e8696ef1876564fef6f24cbbed0db8ab7fda1ffcc8c9fd4ab2cbe8f8df8e5535b12a942a948eacdaf308d48932064cfc3329da74f6f3e4409d6764a29680e312bf1a0143180e6493c9201ea916e6c9b2566c558ad88d9f7c0aebf82f5807eecefa97ada9bbd9e478e5d7748ee188bc719ca7a73dce5b6758a767c4c6b7572ab25eb2d73986379d5685cb438fe7091d097cc8f33fc0f83dee76603d6580f1c8fc4c37efd305ccc5a25678180425718bb9344e60dda8dae2677bb602d29aa0810616a2fdbca7020d72291b592b84223e2522ee01f5bdaa0fc4eb8d71d948a2baccf3ea2aa79d4d9069d8c0000000000000000000000321cd67859b4567badee56f158406f08683bdc5ffe2dedc916000c71f922fa2dfead7535999436a4aeb908781893479319b8b55e00d90ae6f09f06be2a0fc0bc17bef53331208112a0132350c0c5dd4607547079acc9471300dea6ae01742dccdae69f932cef80bca1bfcb57b9c852cf8358a580044772a80f20de36f707385380155be8907029d039a1d1447fc06b7020221e0d439f3f47edcf12f913dc8b6389a540340ae37804728ea65352e630c2e90424d58d72fdc1b28403e1dc7aad238b81df3b2d4166d656c6a9c73554bdf4f7312a4c0271e0eb45b4a596b7fa928ac3683f09fdaca46226c1df2c6c866cb4412d17d3d52c38cf0f7bd3b0eea2d4e06d061bb1b7c8c52f37f4036932d00028abd4527f5649bd60df638596fd639d7b16860033754ab13419429e5e39f290751ab6bd9392aef5519cd8c16e1f1cb1f225cc84a1a62497c1e436142fe28048a2b4d133905814a1808bc5b3e45eaa9eaebd946bee806968aeeb5a9eed87eba3d25d0b412a1b4cf2d419a58b09fc275c4395a0bd332eb538321465043e5967dd22459d0f52190a37f93ab823431a81fa6f54de61637fd473e19a6f567fead100e7d8cac149b66ebe9973af846146c62065a64854ed21e8b6f6fbe78474b753915a42efcb7da8ad18bacff8d69e0af1ca1f8174530a21820738412b100b54ee9b4a0dc22d5fe1cadecaea73fbfad087b19ce53177488d230539c5174f572a539d9d7c42698aa82bccf030ad393f25c10baa17e919f647d0e31877b7a6c1d8d86583f884a0c1da07b9b6dced06cdeb0094aa635a82f233b5993926b8970a0840ba116a7d20a40efb3bd03c4bdf380a2510a0a1ea69811ded68943c71218b42783b38959753978f222e1396b9b36dee2ce205122a000577cab29f48bff4f88c417e6bf5fb430d925596f29aca8677ca5a113aeaa5e0252ca17244d6c76e78ff1bbd81a71c4dfc72431d7f1126f8bdbf4056ee0f58a1bf83d53b1de07489541182dc4ee0f573c25b6c15dad930bc7a770b5a4f407d7a879db7185f15f80100000000000000739cc97db66ec6b925955d9a591808947fdd8d484ad27353230a449fdf87fc46c73b852fec931cfb6718acf3315bf5e577d00beb77c5514bc05d576a81345a03ad7aae74c5d2b77d45718348aed4fcbcd1441ff31b8f038824a989a9446a4a69367b228b3d174230b7320fc4d3c03368db573816dd0c04e65d6f8ce48283e76abdddbb965e0b2568e93c9cc5494a55421793f562c50c53f876cbde93c5cc7a3099c99d9775af010ba093f8a13b771782a3cfb24fbde6ef763e20c613164ab014d1906c4e098f1431b6b2886a155c4bac2911d7ee6a646f5913205ebd175e68975b93c330e4f9131788026b3b7cd5b6452c9e17452ac70000000000000000000000c71185f72436640fd4294fc3da230f9065095be47d7a848df12316c3c8b184fe110b061987fd79cf7d83443e69d08e2e839ae4fbe26ef7764f4870ef3bd0ec12eb45f60ca10dbfe329271f0bc93b28798e982e0dd32fc14bd4313c63b2dbb568f33fb45acad2dc7f438ea162c0709c0bbe1ea13e1e47399286e8143f400d7adf5f69e455706626814ee49274667f47769293451fd49885a152b8d2cf18febc7993f4a93893c6c7b7e46a230359ef2443e6bb9f50bb0faa5eaafd3ed6d551600c46b58a29fd7ccbbb0616f0be27302b683eccd742791d97f4a1daa0447f004426fd09b67d926f51525da63987bc73af35b28277879089b89fff6edab2fa1caf660a46a1a9f09e2d095b1c4be95c7c33dc81857f580e36c0a78d94dd879ee18de4a6475858d2ded2e3427ae007cc6f8e5e99aa146667f71ad83f3ddcf5db2dc396d7da499b65cd98125f20c284fc84d6a70be1de44b49c82022225292199c75cc26beab98dce4c331ed722f01d0d6314a72416814a565f4d90a5f8a255810f23541082f4b06f451e4724cd882f4d589600000000005854ca490d7df9cc293547c9a51aecc7a92f417f6a4d327737f1b198252358832dbe43507844a0cc112af4ce457c173fa64174ffd5ab9501eeb85508ebb60e169c0736c5960f2fe08735d6a7aa7c1f4a6433e77d3e547bbe6cf5b5d93a491ab4bba1ea7a1e6f37618b1d74cff3630d85a210092211be1ec12a30891eef590b19cdde055d626818c64e1c56b8918f33441a64b54946571b7bc70fb065d3bb1647f6f989ab8159e6d1cfa6c0ec7329d7d2263ca22144bf17d8692f03b592bd0f610096094da096233984e95b9a8216a6e60a104ae0bb5f77ac70b4390ea2cb6f6c40c928fae489f447240a25fd0a5bd9d5b6cd2a98f8804862922c11229c4e45c765e4d3348af3d3aadd5cc24b39437f1ea2df0000000000000000000000000022b90d93a267f3af4e02606f0ce6c2ffc4cab575a09d6e625f3248689005eb4a9c8df3c67e6b2b759cab3a7bedf1b927cd8ba6d13b3e7d7279515e3d6d20"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)

2.233992881s ago: executing program 2 (id=739):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r1, 0x2000002, 0x88, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000100000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.870712961s ago: executing program 1 (id=740):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00'}, 0x90)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r1, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0}}, 0x10)
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000200)=r2)

1.858917378s ago: executing program 4 (id=741):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.717962367s ago: executing program 3 (id=742):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'geneve1\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x4}, {0x2006, 0x0, 0x40, 0x5}]})

1.545860582s ago: executing program 2 (id=743):
r0 = eventfd2(0x8, 0x800)
r1 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000016c0)={0xa000201a})

1.167443194s ago: executing program 1 (id=744):
syz_clone(0xe8344400, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000780)={0x2, &(0x7f0000000000)=[{0x9c, 0x38, 0x4}, {0x6, 0x0, 0x2, 0xffffffff}]})

1.006381181s ago: executing program 4 (id=745):
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/157)

1.000013741s ago: executing program 3 (id=746):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='comm\x00')
write$cgroup_int(r0, 0x0, 0x0)

781.290995ms ago: executing program 2 (id=747):
r0 = socket$inet6(0xa, 0x3, 0x1)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000002b80)=ANY=[], 0x130)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000006c0)=ANY=[], 0xf0)

459.142915ms ago: executing program 0 (id=748):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r2})
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f00000007c0)={0x28, 0x2, r2, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1004000})
close_range(r0, 0xffffffffffffffff, 0x0)

310.349418ms ago: executing program 3 (id=749):
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000274c0340ab0560000611000000010902120001000d00000904"], 0x0)
syz_usb_connect$uac1(0x5, 0x71, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201"], 0x0)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8)

213.72177ms ago: executing program 4 (id=750):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_emit_vhci(&(0x7f00000002c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x1, 0x411}}}, 0x7)

0s ago: executing program 2 (id=751):
r0 = memfd_create(&(0x7f0000000540)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?&^\xe1Ob\xe1[\xd6\xeb\x91\x83;\xeb\xf1\xd0\xe3\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05V%$6\x9fU\x86\xbe\xcbx\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\x00\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8\x83\x87+nM\x11\x1c\xb0\xber\xa6\xec\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x10M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xdc\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5W\xfb\x82\xac\x19,\\D\x91T\xfd\x9c\xb8\x8b\x88\xa5\xcc\x8fI\x00\xf0\xc9%\n\xa7\xd6\x0f:\xb0\xf5?\xc3\x88\x1e\xbb-\xa6\xecA\x92\xaf\xa4Xl\v\xa5\xca\v|\xe2L\xac\x80\xc7\x15\x96fh\x83\x15\xc7\xea\xd5\xe8\x89W\x11\xd7oC\xe4\x06\xa8[O\xe6\x1d=\x87\x93\x0f\x87I\xdf\xb1\xeb\x89\x11.\x01\x00\r`\x1e8\x94\v)\x06B\xf0\xed\x91 )y\xb4\xba\xba\xb7\xbc\xc3\xad\xf1\x92/(A=A\x8b\xa5\xb0\x89\x9e5\x12\xa4\x9a\va\xdf\xf4\xea\xc6\xc7\x10g\x1d\xd5\xb0\xbb\xd2\x13]fC\x8d\x0f\xa6q\x0f\xef\x90\xfe\x94k\xf1\xb8\xfa\xbbb\xb1\x03\xb5pe,\xdfN\x0f8\t\xe7X_H\xd4\xe3\xb2,oj\xac\xd7\xbd\xd0\xadW\x1f<\xd0\b\x00\x00\x00\x00/ \xe4]@\xf7mA\xe8\xd1\xf4:\xb3\xeb\x81\xb9\x018\x1c\x95%o\x05x\x1a\x90\xf4\x03\xe7\xe9\xa9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\r\xcd\xf0\xad\x97uh\xb2\xb8\x17S~R\x19\xa9\xc3x\xb8l\xed\xbdz#6\x9f\x94\xba[xC\xed\x12}f\x0f\xc5', 0x3)
fallocate(r0, 0x0, 0x0, 0x400001)
close(0x3)

kernel console output (not intermixed with test programs):

vo 0003:1E7D:30D4.0009: probe with driver arvo failed with error -22
[  359.309813][ T6994] netlink: 12 bytes leftover after parsing attributes in process `syz.4.299'.
[  359.486299][ T6991] netlink: 8 bytes leftover after parsing attributes in process `syz.1.302'.
[  360.062955][ T6988] loop0: detected capacity change from 0 to 40427
[  360.085226][ T6988] F2FS-fs (loop0): build fault injection rate: 14
[  360.092901][ T6988] F2FS-fs (loop0): build fault injection type: 0x3bfe8c
[  360.110232][ T6988] F2FS-fs (loop0): invalid crc value
[  360.181765][    C0] F2FS-fs (loop0): inject read IO error in f2fs_read_end_io of bio_endio+0xf92/0x10e0
[  360.225066][    C1] F2FS-fs (loop0): inject read IO error in f2fs_read_end_io of bio_endio+0xf92/0x10e0
[  360.575284][ T6988] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  360.584827][ T6988] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_folio of f2fs_get_tmp_folio+0x38/0x50
[  360.602697][ T6988] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  361.405547][ T5844] usb 5-1: USB disconnect, device number 13
[  361.618450][ T7003] netlink: 8 bytes leftover after parsing attributes in process `syz.3.304'.
[  361.983340][ T7012] loop0: detected capacity change from 0 to 64
[  362.191713][ T7012] Trying to free block not in datazone
[  362.209202][ T7012] fuse: Bad value for 'fd'
[  362.228062][   T30] audit: type=1800 audit(1769135630.489:318): pid=7012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.307" name="file1" dev="loop0" ino=5 res=0 errno=0
[  362.228506][   T30] audit: type=1800 audit(1769135630.489:319): pid=7012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.307" name="file1" dev="loop0" ino=5 res=0 errno=0
[  363.163468][ T7020] loop4: detected capacity change from 0 to 512
[  363.327272][ T7020] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  363.340110][ T7016] netlink: 8 bytes leftover after parsing attributes in process `syz.2.308'.
[  363.679926][ T7020] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  363.729434][ T7020] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  364.125295][ T7020] overlayfs: missing 'lowerdir'
[  364.396665][   T30] audit: type=1326 audit(1769135632.719:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7034 comm="syz.0.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f123499acb9 code=0x7ffc0000
[  364.579190][   T30] audit: type=1326 audit(1769135632.719:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7034 comm="syz.0.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f123499acb9 code=0x7ffc0000
[  364.602967][   T30] audit: type=1326 audit(1769135632.769:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7034 comm="syz.0.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7f123499acb9 code=0x7ffc0000
[  364.625824][   T30] audit: type=1326 audit(1769135632.769:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7034 comm="syz.0.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f123499acb9 code=0x7ffc0000
[  364.648952][   T30] audit: type=1326 audit(1769135632.779:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7034 comm="syz.0.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f123499c547 code=0x7ffc0000
[  364.676196][   T30] audit: type=1326 audit(1769135632.779:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7034 comm="syz.0.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f123495b58e code=0x7ffc0000
[  364.700713][   T30] audit: type=1326 audit(1769135632.799:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7034 comm="syz.0.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f123495b58e code=0x7ffc0000
[  364.723458][   T30] audit: type=1326 audit(1769135632.799:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7034 comm="syz.0.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f123495b58e code=0x7ffc0000
[  364.746298][   T30] audit: type=1326 audit(1769135632.799:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7034 comm="syz.0.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f123495b58e code=0x7ffc0000
[  364.748868][ T7037] loop0: detected capacity change from 0 to 128
[  365.086650][   T30] audit: type=1326 audit(1769135632.909:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7034 comm="syz.0.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f123499acb9 code=0x7ffc0000
[  365.241465][ T7040] netlink: 8 bytes leftover after parsing attributes in process `syz.2.315'.
[  365.272049][ T5842] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  365.364864][ T5791] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  365.487293][ T5842] usb 2-1: device descriptor read/64, error -71
[  365.500305][ T7035] syz.0.313: attempt to access beyond end of device
[  365.500305][ T7035] loop0: rw=2049, sector=138, nr_sectors = 112 limit=128
[  365.758592][ T5842] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  365.968242][ T5842] usb 2-1: device descriptor read/64, error -71
[  366.097967][ T5842] usb usb2-port1: attempt power cycle
[  367.238155][ T7047] loop4: detected capacity change from 0 to 40427
[  367.414907][ T7047] F2FS-fs (loop4): build fault injection rate: 14
[  367.422269][ T7047] F2FS-fs (loop4): build fault injection type: 0x3bfe8c
[  367.444434][ T7047] F2FS-fs (loop4): invalid crc value
[  367.458963][ T5842] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  367.465708][    C1] F2FS-fs (loop4): inject read IO error in f2fs_read_end_io of bio_endio+0xf92/0x10e0
[  367.534997][    C1] F2FS-fs (loop4): inject read IO error in f2fs_read_end_io of bio_endio+0xf92/0x10e0
[  367.700240][ T7051] loop3: detected capacity change from 0 to 40427
[  367.722822][ T7051] F2FS-fs (loop3): build fault injection rate: 14
[  367.738406][ T7051] F2FS-fs (loop3): build fault injection type: 0x3bfe8c
[  367.804215][ T7051] F2FS-fs (loop3): invalid crc value
[  367.891348][    C0] F2FS-fs (loop3): inject read IO error in f2fs_read_end_io of bio_endio+0xf92/0x10e0
[  367.950943][    C0] F2FS-fs (loop3): inject read IO error in f2fs_read_end_io of bio_endio+0xf92/0x10e0
[  367.955849][ T7047] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  367.970282][ T7047] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_folio of f2fs_get_tmp_folio+0x38/0x50
[  368.536065][ T7051] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  368.538413][ T7047] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  368.545531][ T7051] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_folio of f2fs_get_tmp_folio+0x38/0x50
[  368.609869][ T7051] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  369.205741][ T5842] usb 2-1: device descriptor read/8, error -71
[  372.604820][ T7079] loop0: detected capacity change from 0 to 32768
[  372.706202][ T7075] loop1: detected capacity change from 0 to 4096
[  373.053967][ T7083] netlink: 8 bytes leftover after parsing attributes in process `syz.2.330'.
[  373.094354][ T7081] loop3: detected capacity change from 0 to 32768
[  373.120429][ T7079] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.328 (7079)
[  373.152397][ T7075] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512).
[  373.216957][ T7081] BTRFS info: device /dev/loop3 (7:3) using temp-fsid 47d72b53-5295-479f-bfe8-aca56a9e601a
[  373.229485][ T7081] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.329 (7081)
[  373.250625][ T7079] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  373.268686][ T7079] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm
[  373.392982][ T7081] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  373.404887][ T7081] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm
[  373.967434][ T7079] BTRFS info (device loop0): enabling ssd optimizations
[  373.975130][ T7079] BTRFS info (device loop0): turning on async discard
[  373.989537][ T7079] BTRFS info (device loop0): enabling free space tree
[  374.068209][   T30] kauditd_printk_skb: 16 callbacks suppressed
[  374.068295][   T30] audit: type=1800 audit(1769135642.389:346): pid=7075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.326" name="file1" dev="loop1" ino=30 res=0 errno=0
[  374.070869][ T7081] BTRFS info (device loop3): enabling ssd optimizations
[  374.110153][ T7081] BTRFS info (device loop3): turning on async discard
[  374.117163][ T7081] BTRFS info (device loop3): enabling free space tree
[  374.250907][ T7079] BTRFS info (device loop0): balance: start -s
[  374.258363][ T7079] BTRFS info (device loop0): left=0, need=98304, flags=2
[  374.265741][ T7079] BTRFS info (device loop0): space_info SYSTEM (sub-group id 0) has 0 free, is not full
[  374.279751][ T7079] BTRFS info (device loop0): space_info total=4194304, used=4096, pinned=0, reserved=0, may_use=0, readonly=4190208 zone_unusable=0
[  374.300080][ T7079] BTRFS info (device loop0): global_block_rsv: size 1441792 reserved 1441792
[  374.311130][ T7079] BTRFS info (device loop0): trans_block_rsv: size 0 reserved 0
[  374.319242][ T7079] BTRFS info (device loop0): chunk_block_rsv: size 0 reserved 0
[  374.327149][ T7079] BTRFS info (device loop0): delayed_block_rsv: size 0 reserved 0
[  374.331458][ T7081] BTRFS info (device loop3): balance: start -s
[  374.335489][ T7079] BTRFS info (device loop0): delayed_refs_rsv: size 0 reserved 0
[  374.342252][ T7081] BTRFS info (device loop3): left=0, need=98304, flags=2
[  374.356853][ T7081] BTRFS info (device loop3): space_info SYSTEM (sub-group id 0) has 0 free, is not full
[  374.358769][ T7079] BTRFS info (device loop0): relocating block group 1048576 flags system
[  374.367030][ T7081] BTRFS info (device loop3): space_info total=4194304, used=4096, pinned=0, reserved=0, may_use=0, readonly=4190208 zone_unusable=0
[  374.397605][ T7081] BTRFS info (device loop3): global_block_rsv: size 1441792 reserved 1441792
[  374.406767][ T7081] BTRFS info (device loop3): trans_block_rsv: size 0 reserved 0
[  374.414887][ T7081] BTRFS info (device loop3): chunk_block_rsv: size 0 reserved 0
[  374.423074][ T7081] BTRFS info (device loop3): delayed_block_rsv: size 0 reserved 0
[  374.431339][ T7081] BTRFS info (device loop3): delayed_refs_rsv: size 0 reserved 0
[  374.448613][ T7081] BTRFS info (device loop3): relocating block group 1048576 flags system
[  374.608103][ T7079] BTRFS info (device loop0): balance: ended with status: 0
[  374.737615][ T7081] BTRFS info (device loop3): balance: ended with status: 0
[  375.510812][ T5783] BTRFS info (device loop3): last unmount of filesystem 47d72b53-5295-479f-bfe8-aca56a9e601a
[  375.590629][ T5782] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  379.735871][ T7152] netlink: 8 bytes leftover after parsing attributes in process `syz.3.343'.
[  380.200399][ T7154] loop1: detected capacity change from 0 to 64
[  380.378397][   T30] audit: type=1800 audit(1769135648.699:347): pid=7154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.344" name="file1" dev="loop1" ino=5 res=0 errno=0
[  380.520985][   T30] audit: type=1800 audit(1769135648.739:348): pid=7154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.344" name="file1" dev="loop1" ino=5 res=0 errno=0
[  380.550567][ T7154] Trying to free block not in datazone
[  380.563490][ T7156] tipc: Started in network mode
[  380.569043][ T7156] tipc: Node identity 7f000001, cluster identity 4711
[  380.646180][ T7160] fuse: Unknown parameter 'user_i00000000000000000000'
[  380.690377][ T7156] tipc: Enabled bearer <udp:syz2>, priority 10
[  380.800239][ T7156] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  380.812755][ T7156] tipc: Enabled bearer <udp:syz0>, priority 10
[  381.019920][ T7159] fuse: root generation should be zero
[  381.846827][ T5839] tipc: Node number set to 2130706433
[  382.948132][ T5839] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  383.141304][ T5839] usb 2-1: Using ep0 maxpacket: 8
[  383.185127][ T5839] usb 2-1: no configurations
[  383.190148][ T5839] usb 2-1: can't read configurations, error -22
[  383.469081][ T5839] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  383.961114][ T5839] usb 2-1: Using ep0 maxpacket: 8
[  383.982343][ T5839] usb 2-1: no configurations
[  383.987195][ T5839] usb 2-1: can't read configurations, error -22
[  384.048984][ T5839] usb usb2-port1: attempt power cycle
[  384.454472][ T5839] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  384.550150][ T5839] usb 2-1: Using ep0 maxpacket: 8
[  384.572736][ T5839] usb 2-1: no configurations
[  384.577601][ T5839] usb 2-1: can't read configurations, error -22
[  384.818645][ T5839] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  384.854556][ T5839] usb 2-1: Using ep0 maxpacket: 8
[  384.885747][ T5839] usb 2-1: no configurations
[  384.891101][ T5839] usb 2-1: can't read configurations, error -22
[  384.930329][ T5839] usb usb2-port1: unable to enumerate USB device
[  385.027650][ T7199] loop0: detected capacity change from 0 to 1024
[  385.089286][ T7199] EXT4-fs: Ignoring removed nobh option
[  385.095155][ T7199] EXT4-fs: Ignoring removed bh option
[  385.174347][ T7199] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  385.364855][ T7205] loop4: detected capacity change from 0 to 512
[  385.484111][ T7205] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  385.497862][ T7205] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  385.668149][ T7205] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  385.782206][ T5782] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  385.810403][ T7205] EXT4-fs (loop4): 1 truncate cleaned up
[  385.835840][ T7205] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  386.435096][ T5791] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  387.437458][   T30] audit: type=1326 audit(1769135655.749:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7227 comm="syz.3.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb521b9acb9 code=0x7ffc0000
[  387.553236][   T30] audit: type=1326 audit(1769135655.799:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7227 comm="syz.3.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7fb521b9acb9 code=0x7ffc0000
[  387.576459][   T30] audit: type=1326 audit(1769135655.799:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7227 comm="syz.3.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb521b9acb9 code=0x7ffc0000
[  387.604253][   T30] audit: type=1326 audit(1769135655.819:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7227 comm="syz.3.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb521b9acb9 code=0x7ffc0000
[  387.629013][   T30] audit: type=1326 audit(1769135655.819:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7227 comm="syz.3.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7fb521b9acb9 code=0x7ffc0000
[  387.652079][   T30] audit: type=1326 audit(1769135655.819:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7227 comm="syz.3.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb521b9acb9 code=0x7ffc0000
[  387.674939][   T30] audit: type=1326 audit(1769135655.849:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7227 comm="syz.3.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb521b5b58e code=0x7ffc0000
[  387.697689][   T30] audit: type=1326 audit(1769135655.849:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7227 comm="syz.3.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fb521b9bfd7 code=0x7ffc0000
[  387.725519][   T30] audit: type=1326 audit(1769135655.849:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7227 comm="syz.3.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb521b9acb9 code=0x7ffc0000
[  387.750112][   T30] audit: type=1326 audit(1769135655.849:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7227 comm="syz.3.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fb521b9bfd7 code=0x7ffc0000
[  387.785438][ T7229] loop3: detected capacity change from 0 to 128
[  388.232128][ T7227] syz.3.369: attempt to access beyond end of device
[  388.232128][ T7227] loop3: rw=2049, sector=138, nr_sectors = 112 limit=128
[  389.460480][ T7251] loop0: detected capacity change from 0 to 64
[  389.829488][ T5839] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  390.048204][ T5839] usb 3-1: Using ep0 maxpacket: 8
[  390.074443][ T5839] usb 3-1: no configurations
[  390.079536][ T5839] usb 3-1: can't read configurations, error -22
[  390.249995][ T5839] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  390.471408][ T5839] usb 3-1: Using ep0 maxpacket: 8
[  390.581911][ T5839] usb 3-1: no configurations
[  390.586865][ T5839] usb 3-1: can't read configurations, error -22
[  390.724436][ T5839] usb usb3-port1: attempt power cycle
[  391.018966][ T5782] hfs: walked past end of dir
[  391.179684][ T5839] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  391.332075][ T5839] usb 3-1: Using ep0 maxpacket: 8
[  391.394356][ T5839] usb 3-1: no configurations
[  391.399458][ T5839] usb 3-1: can't read configurations, error -22
[  391.669025][ T5839] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  391.723231][ T5839] usb 3-1: Using ep0 maxpacket: 8
[  391.748941][ T5839] usb 3-1: no configurations
[  391.754096][ T5839] usb 3-1: can't read configurations, error -22
[  391.880337][ T5839] usb usb3-port1: unable to enumerate USB device
[  392.378727][ T7260] loop3: detected capacity change from 0 to 65536
[  392.505372][ T7260] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  392.661974][ T7260] XFS (loop3): Ending clean mount
[  392.686807][ T7260] syz.3.381 uses obsolete (PF_INET,SOCK_PACKET)
[  393.809748][ T7272] loop4: detected capacity change from 0 to 40427
[  393.824717][ T7272] F2FS-fs (loop4): build fault injection rate: 14
[  393.831851][ T7272] F2FS-fs (loop4): build fault injection type: 0x3bfe8c
[  393.854524][ T7272] F2FS-fs (loop4): invalid crc value
[  393.912460][    C1] F2FS-fs (loop4): inject read IO error in f2fs_read_end_io of bio_endio+0xf92/0x10e0
[  393.970077][    C0] F2FS-fs (loop4): inject read IO error in f2fs_read_end_io of bio_endio+0xf92/0x10e0
[  394.347440][ T7272] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  394.362465][ T7272] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_folio of f2fs_get_tmp_folio+0x38/0x50
[  394.388399][ T7272] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  394.454362][ T5783] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  395.106295][ T7298] loop3: detected capacity change from 0 to 64
[  395.435190][   T30] kauditd_printk_skb: 29 callbacks suppressed
[  395.435282][   T30] audit: type=1800 audit(1769135663.759:388): pid=7298 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.389" name="file1" dev="loop3" ino=5 res=0 errno=0
[  395.599132][   T30] audit: type=1800 audit(1769135663.839:389): pid=7298 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.389" name="file1" dev="loop3" ino=5 res=0 errno=0
[  395.618712][ T7298] Trying to free block not in datazone
[  395.642475][ T7302] fuse: Unknown parameter 'user_id00000000000000000000'
[  396.225704][ T7305] loop1: detected capacity change from 0 to 64
[  396.856020][ T7308] loop0: detected capacity change from 0 to 512
[  396.986471][ T7308] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  397.199541][ T7308] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  397.258680][ T7308] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  397.438374][ T5844] usb 4-1: new full-speed USB device number 10 using dummy_hcd
[  397.522861][ T5790] hfs: walked past end of dir
[  397.691049][ T5844] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  397.769539][ T5844] usb 4-1: config 1 interface 1 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[  397.847025][ T5844] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4
[  397.861181][ T5844] usb 4-1: config 1 interface 1 has no altsetting 0
[  397.991755][ T5844] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  398.001519][ T5844] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  398.009969][ T5844] usb 4-1: Product: syz
[  398.014500][ T5844] usb 4-1: Manufacturer: syz
[  398.019956][ T5844] usb 4-1: SerialNumber: syz
[  398.368681][  T797] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  398.648740][  T797] usb 5-1: Using ep0 maxpacket: 8
[  398.689345][  T797] usb 5-1: no configurations
[  398.694323][  T797] usb 5-1: can't read configurations, error -22
[  398.732780][ T5844] usb 4-1: 2:1 : invalid UAC_AS_GENERAL desc
[  398.958159][  T797] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  399.145461][ T5844] usb 4-1: USB disconnect, device number 10
[  399.149313][  T797] usb 5-1: Using ep0 maxpacket: 8
[  399.278749][  T797] usb 5-1: no configurations
[  399.278857][  T797] usb 5-1: can't read configurations, error -22
[  399.280043][  T797] usb usb5-port1: attempt power cycle
[  399.607689][ T5998] udevd[5998]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  399.646793][  T797] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  399.693183][  T797] usb 5-1: Using ep0 maxpacket: 8
[  399.695330][  T797] usb 5-1: no configurations
[  399.695436][  T797] usb 5-1: can't read configurations, error -22
[  399.701990][ T5782] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  399.858485][  T797] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  399.883098][  T797] usb 5-1: Using ep0 maxpacket: 8
[  399.892837][  T797] usb 5-1: no configurations
[  399.892944][  T797] usb 5-1: can't read configurations, error -22
[  399.894216][  T797] usb usb5-port1: unable to enumerate USB device
[  401.537585][ T7336] loop0: detected capacity change from 0 to 32768
[  401.583913][ T7336] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.402 (7336)
[  401.606566][ T7336] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  401.617512][ T7336] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm
[  401.860563][ T7334] loop3: detected capacity change from 0 to 40427
[  401.878894][ T7334] F2FS-fs (loop3): build fault injection rate: 14
[  401.885597][ T7334] F2FS-fs (loop3): build fault injection type: 0x3bfe8c
[  401.915415][ T7334] F2FS-fs (loop3): invalid crc value
[  401.939597][    C0] F2FS-fs (loop3): inject read IO error in f2fs_read_end_io of bio_endio+0xf92/0x10e0
[  401.965045][    C0] F2FS-fs (loop3): inject read IO error in f2fs_read_end_io of bio_endio+0xf92/0x10e0
[  402.340520][ T7334] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  402.357325][ T7334] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_folio of f2fs_get_tmp_folio+0x38/0x50
[  402.378326][ T7334] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  402.419118][ T7336] BTRFS info (device loop0): enabling ssd optimizations
[  402.426463][ T7336] BTRFS info (device loop0): turning on async discard
[  402.437056][ T7336] BTRFS info (device loop0): enabling free space tree
[  402.587406][ T7336] BTRFS info (device loop0): balance: start -s
[  402.594585][ T7336] BTRFS info (device loop0): left=0, need=98304, flags=2
[  402.603253][ T7336] BTRFS info (device loop0): space_info SYSTEM (sub-group id 0) has 0 free, is not full
[  402.613441][ T7336] BTRFS info (device loop0): space_info total=4194304, used=4096, pinned=0, reserved=0, may_use=0, readonly=4190208 zone_unusable=0
[  402.627565][ T7336] BTRFS info (device loop0): global_block_rsv: size 1441792 reserved 1441792
[  402.636786][ T7336] BTRFS info (device loop0): trans_block_rsv: size 0 reserved 0
[  402.644959][ T7336] BTRFS info (device loop0): chunk_block_rsv: size 0 reserved 0
[  402.658784][ T7336] BTRFS info (device loop0): delayed_block_rsv: size 0 reserved 0
[  402.666862][ T7336] BTRFS info (device loop0): delayed_refs_rsv: size 0 reserved 0
[  402.686944][ T7336] BTRFS info (device loop0): relocating block group 1048576 flags system
[  402.881507][ T7336] BTRFS info (device loop0): balance: ended with status: 0
[  403.049292][ T5782] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  403.262353][ T7357] loop4: detected capacity change from 0 to 64
[  403.503512][   T30] audit: type=1800 audit(1769135671.829:390): pid=7357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.406" name="file1" dev="loop4" ino=5 res=0 errno=0
[  403.583528][ T7357] Trying to free block not in datazone
[  403.689946][ T7359] fuse: Unknown parameter 'user_id00000000000000000000'
[  404.837041][ T7371] loop2: detected capacity change from 0 to 512
[  404.930495][ T7371] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  405.147390][ T7371] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  405.258317][ T7371] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  406.672684][ T5842] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  406.727004][ T7391] loop0: detected capacity change from 0 to 128
[  406.859642][ T7391] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  406.878353][ T5842] usb 4-1: Using ep0 maxpacket: 8
[  406.909383][ T5842] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  406.920287][ T5842] usb 4-1: config 0 has no interfaces?
[  406.970137][ T7391] hpfs: filesystem error: improperly stopped
[  406.976543][ T7391] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  406.985894][ T7391] hpfs: You really don't want any checks? You are crazy...
[  407.014680][ T5842] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77
[  407.024178][ T5842] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  407.032610][ T5842] usb 4-1: Product: syz
[  407.037007][ T5842] usb 4-1: Manufacturer: syz
[  407.042205][ T5842] usb 4-1: SerialNumber: syz
[  407.119178][ T7391] hpfs: hpfs_map_sector(): read error
[  407.124892][ T7391] hpfs: code page support is disabled
[  407.230567][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  407.242951][ T5842] usb 4-1: config 0 descriptor??
[  407.253837][ T7391] hpfs: hpfs_map_4sectors(): unaligned read
[  407.254121][ T7391] hpfs: hpfs_map_4sectors(): unaligned read
[  407.274155][ T7391] hpfs: filesystem error: unable to find root dir
[  407.435022][ T7391] FAULT_INJECTION: forcing a failure.
[  407.435022][ T7391] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  407.449478][ T7391] CPU: 1 UID: 0 PID: 7391 Comm: syz.0.417 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  407.449647][ T7391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  407.449745][ T7391] Call Trace:
[  407.449806][ T7391]  <TASK>
[  407.449863][ T7391]  __dump_stack+0x26/0x30
[  407.450051][ T7391]  dump_stack_lvl+0x14c/0x1c0
[  407.450250][ T7391]  dump_stack+0x1e/0x25
[  407.450424][ T7391]  should_fail_ex+0x7da/0x8a0
[  407.450680][ T7391]  should_fail+0x2a/0x40
[  407.450871][ T7391]  should_fail_usercopy+0x2e/0x40
[  407.451094][ T7391]  strncpy_from_user+0x38/0x4b0
[  407.451273][ T7391]  ? kmsan_get_metadata+0xf1/0x160
[  407.451509][ T7391]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  407.451769][ T7391]  getname_flags+0x178/0xac0
[  407.451944][ T7391]  __x64_sys_mkdirat+0x8a/0x140
[  407.452170][ T7391]  x64_sys_call+0x394/0x3e70
[  407.452375][ T7391]  do_syscall_64+0xc9/0xf80
[  407.452575][ T7391]  ? clear_bhb_loop+0x40/0x90
[  407.452761][ T7391]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  407.452932][ T7391] RIP: 0033:0x7f1234999b97
[  407.453055][ T7391] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  407.453199][ T7391] RSP: 002b:00007f1232bf5e58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  407.453353][ T7391] RAX: ffffffffffffffda RBX: 00007f1232bf5ee0 RCX: 00007f1234999b97
[  407.453471][ T7391] RDX: 00000000000001ff RSI: 0000200000000080 RDI: 00000000ffffff9c
[  407.453579][ T7391] RBP: 0000200000000040 R08: 00002000000000c0 R09: 0000000000000000
[  407.453696][ T7391] R10: 0000200000000040 R11: 0000000000000246 R12: 0000200000000080
[  407.453809][ T7391] R13: 00007f1232bf5ea0 R14: 0000000000000000 R15: 0000000000000000
[  407.453955][ T7391]  </TASK>
[  408.469948][ T7401] loop0: detected capacity change from 0 to 64
[  408.673910][   T30] audit: type=1800 audit(1769135676.999:391): pid=7401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.421" name="file1" dev="loop0" ino=5 res=0 errno=0
[  408.773084][   T30] audit: type=1800 audit(1769135677.029:392): pid=7401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.421" name="file1" dev="loop0" ino=5 res=0 errno=0
[  408.876766][ T7401] Trying to free block not in datazone
[  408.914590][ T7403] fuse: Unknown parameter 'user_id00000000000000000000'
[  409.013543][ T7404] process 'syz.4.423' launched './file1' with NULL argv: empty string added
[  409.289620][ T7407] netlink: 12 bytes leftover after parsing attributes in process `syz.2.424'.
[  409.780619][ T5844] usb 4-1: USB disconnect, device number 11
[  409.868062][  T797] usb 3-1: new full-speed USB device number 12 using dummy_hcd
[  410.112022][  T797] usb 3-1: unable to get BOS descriptor or descriptor too short
[  410.158814][ T7414] loop4: detected capacity change from 0 to 64
[  410.176403][  T797] usb 3-1: not running at top speed; connect to a high speed hub
[  410.222290][  T797] usb 3-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config
[  410.358444][  T797] usb 3-1: New USB device found, idVendor=04cb, idProduct=0123, bcdDevice=a1.17
[  410.368022][  T797] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  410.376288][  T797] usb 3-1: Product: syz
[  410.381000][  T797] usb 3-1: Manufacturer: syz
[  410.385896][  T797] usb 3-1: SerialNumber: syz
[  410.807409][  T797] gspca_main: finepix-2.14.0 probing 04cb:0123
[  410.919926][  T797] usb 3-1: USB disconnect, device number 12
[  411.021258][ T7418] netlink: 12 bytes leftover after parsing attributes in process `syz.3.427'.
[  411.031832][ T7418] netlink: 28 bytes leftover after parsing attributes in process `syz.3.427'.
[  411.041269][ T7418] netlink: 12 bytes leftover after parsing attributes in process `syz.3.427'.
[  411.242597][ T5791] hfs: walked past end of dir
[  411.319030][ T7418] netlink: 28 bytes leftover after parsing attributes in process `syz.3.427'.
[  411.328596][ T7418] netlink: 'syz.3.427': attribute type 6 has an invalid length.
[  411.885515][ T7427] loop4: detected capacity change from 0 to 512
[  411.985416][ T7427] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  412.212783][ T7427] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  412.236462][ T7427] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  413.218784][ T5842] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  413.288178][ T5785] Bluetooth: hci1: command 0x0406 tx timeout
[  413.420511][ T5842] usb 4-1: device descriptor read/64, error -71
[  413.657854][ T5791] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  413.678082][ T5842] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  413.841732][ T5842] usb 4-1: device descriptor read/64, error -71
[  413.856502][ T7446] loop0: detected capacity change from 0 to 512
[  413.939263][ T7446] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  413.971866][ T5842] usb usb4-port1: attempt power cycle
[  414.066512][ T7452] loop4: detected capacity change from 0 to 64
[  414.075287][ T7446] EXT4-fs (loop0): 1 truncate cleaned up
[  414.110957][ T7446] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  414.149382][ T5839] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  414.266256][   T30] audit: type=1800 audit(1769135682.589:393): pid=7452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.435" name="file1" dev="loop4" ino=5 res=0 errno=0
[  414.337015][ T7452] Trying to free block not in datazone
[  414.343338][ T5842] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  414.368040][ T5839] usb 3-1: Using ep0 maxpacket: 8
[  414.416606][ T7453] fuse: Bad value for 'fd'
[  414.434675][ T5842] usb 4-1: device descriptor read/8, error -71
[  414.456873][ T5839] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  414.467593][ T5839] usb 3-1: config 0 has no interfaces?
[  414.525369][ T5839] usb 3-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77
[  414.540003][ T5839] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  414.550440][ T5839] usb 3-1: Product: syz
[  414.554868][ T5839] usb 3-1: Manufacturer: syz
[  414.559896][ T5839] usb 3-1: SerialNumber: syz
[  414.674809][ T5839] usb 3-1: config 0 descriptor??
[  414.718190][ T5842] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  414.791440][ T5842] usb 4-1: device descriptor read/8, error -71
[  414.916651][ T5842] usb usb4-port1: unable to enumerate USB device
[  415.026087][ T5782] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  415.337504][ T7459] loop4: detected capacity change from 0 to 64
[  416.001526][    C1] hrtimer: interrupt took 262114 ns
[  416.434467][ T7465] loop0: detected capacity change from 0 to 32768
[  416.446716][ T7465] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.440 (7465)
[  416.467680][ T7465] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  416.484660][ T7465] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm
[  416.722724][ T7465] BTRFS info (device loop0): enabling ssd optimizations
[  416.730482][ T7465] BTRFS info (device loop0): turning on async discard
[  416.737503][ T7465] BTRFS info (device loop0): enabling free space tree
[  416.873074][ T7465] BTRFS info (device loop0): balance: start -s
[  416.889929][ T7465] BTRFS info (device loop0): left=0, need=98304, flags=2
[  416.896414][ T5791] hfs: walked past end of dir
[  416.897229][ T7465] BTRFS info (device loop0): space_info SYSTEM (sub-group id 0) has 0 free, is not full
[  416.912286][ T7465] BTRFS info (device loop0): space_info total=4194304, used=4096, pinned=0, reserved=0, may_use=0, readonly=4190208 zone_unusable=0
[  416.926427][ T7465] BTRFS info (device loop0): global_block_rsv: size 1441792 reserved 1441792
[  416.935722][ T7465] BTRFS info (device loop0): trans_block_rsv: size 0 reserved 0
[  416.943729][ T7465] BTRFS info (device loop0): chunk_block_rsv: size 0 reserved 0
[  416.953506][ T7465] BTRFS info (device loop0): delayed_block_rsv: size 0 reserved 0
[  416.962025][ T7465] BTRFS info (device loop0): delayed_refs_rsv: size 0 reserved 0
[  416.979494][ T7465] BTRFS info (device loop0): relocating block group 1048576 flags system
[  417.148485][ T7465] BTRFS info (device loop0): balance: ended with status: 0
[  417.313806][ T5782] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  417.523600][  T797] usb 3-1: USB disconnect, device number 13
[  419.245265][  T797] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  419.246518][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  419.260425][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  419.409540][ T7500] loop2: detected capacity change from 0 to 64
[  419.490679][  T797] usb 1-1: Using ep0 maxpacket: 32
[  419.525373][   T30] audit: type=1800 audit(1769135687.849:394): pid=7500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.449" name="file1" dev="loop2" ino=5 res=0 errno=0
[  419.582587][  T797] usb 1-1: config 8 has an invalid interface number: 203 but max is 0
[  419.591428][  T797] usb 1-1: config 8 has no interface number 0
[  419.633530][ T7500] Trying to free block not in datazone
[  419.645902][  T797] usb 1-1: config 8 interface 203 altsetting 1 has an endpoint descriptor with address 0x93, changing to 0x83
[  419.666878][  T797] usb 1-1: config 8 interface 203 altsetting 1 bulk endpoint 0x83 has invalid maxpacket 1024
[  419.679641][  T797] usb 1-1: config 8 interface 203 has no altsetting 0
[  419.705162][   T30] audit: type=1800 audit(1769135687.889:395): pid=7500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.449" name="file1" dev="loop2" ino=5 res=0 errno=0
[  419.720518][ T7500] fuse: Bad value for 'fd'
[  419.777557][  T797] usb 1-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=eb.7a
[  419.787689][  T797] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  419.796272][  T797] usb 1-1: Product: syz
[  419.801030][  T797] usb 1-1: Manufacturer: syz
[  419.805854][  T797] usb 1-1: SerialNumber: syz
[  419.924897][ T7498] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  420.232608][  T797] port100 1-1:8.203: NFC: Could not find bulk-in or bulk-out endpoint
[  420.363602][  T797] usb 1-1: USB disconnect, device number 11
[  421.240332][ T7506] loop3: detected capacity change from 0 to 512
[  421.338185][ T7506] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  421.591160][ T7506] EXT4-fs (loop3): 1 truncate cleaned up
[  421.670053][ T7506] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  422.573117][ T7518] netlink: 8 bytes leftover after parsing attributes in process `syz.1.454'.
[  422.640063][ T7510] loop0: detected capacity change from 0 to 32768
[  422.651660][ T7510] btrfs: Deprecated parameter 'usebackuproot'
[  422.658104][ T7510] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  422.675908][ T7510] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.453 (7510)
[  422.709751][ T7510] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  422.728237][ T7510] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm
[  422.979468][   T12] BTRFS warning (device loop0): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  422.993617][ T7510] BTRFS error (device loop0): failed to load root extent
[  423.001224][ T7510] BTRFS warning (device loop0): try to load backup roots slot 1
[  423.022574][   T58] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  423.041962][ T7510] BTRFS warning (device loop0): couldn't read tree root
[  423.049559][ T7510] BTRFS warning (device loop0): try to load backup roots slot 2
[  423.059123][   T12] BTRFS error (device loop0): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  423.070100][ T7510] BTRFS warning (device loop0): couldn't read tree root
[  423.077649][ T7510] BTRFS warning (device loop0): try to load backup roots slot 3
[  423.360137][ T7510] BTRFS info (device loop0): rebuilding free space tree
[  423.467275][ T7510] BTRFS info (device loop0): checking UUID tree
[  423.507051][ T7510] BTRFS info (device loop0): enabling ssd optimizations
[  423.514887][ T7510] BTRFS info (device loop0): turning off barriers
[  423.522022][ T7510] BTRFS info (device loop0): turning on sync discard
[  423.529274][ T7510] BTRFS info (device loop0): enabling free space tree
[  423.536273][ T7510] BTRFS info (device loop0): force clearing of disk cache
[  423.549080][ T7510] BTRFS info (device loop0): enabling auto defrag
[  423.555746][ T7510] BTRFS info (device loop0): trying to use backup root at mount time
[  423.566026][ T7510] BTRFS info (device loop0): use zstd compression, level 3
[  424.012789][ T5783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  424.059460][  T797] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  424.238265][  T797] usb 5-1: Using ep0 maxpacket: 8
[  424.324709][  T797] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  424.336727][  T797] usb 5-1: config 0 has no interfaces?
[  424.440588][  T797] usb 5-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77
[  424.450501][  T797] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  424.459134][  T797] usb 5-1: Product: syz
[  424.469191][  T797] usb 5-1: Manufacturer: syz
[  424.474019][  T797] usb 5-1: SerialNumber: syz
[  424.621155][ T5782] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  424.758737][  T797] usb 5-1: config 0 descriptor??
[  426.732667][  T797] usb 5-1: USB disconnect, device number 18
[  427.391789][ T7556] loop0: detected capacity change from 0 to 32768
[  427.404257][ T7556] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.462 (7556)
[  427.425890][ T7556] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  427.441897][ T7556] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm
[  427.565526][ T7563] netlink: 8 bytes leftover after parsing attributes in process `syz.2.466'.
[  427.711866][ T7556] BTRFS info (device loop0): enabling ssd optimizations
[  427.719512][ T7556] BTRFS info (device loop0): turning on async discard
[  427.726599][ T7556] BTRFS info (device loop0): enabling free space tree
[  427.893708][ T5782] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  428.503204][ T7585] bridge0: port 2(bridge_slave_1) entered disabled state
[  428.513117][ T7585] bridge0: port 1(bridge_slave_0) entered disabled state
[  428.925206][ T7589] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303
[  429.552828][ T7592] loop3: detected capacity change from 0 to 512
[  429.734288][ T7592] EXT4-fs (loop3): 1 truncate cleaned up
[  429.801074][ T7592] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  429.944302][   T30] audit: type=1800 audit(1769135698.269:396): pid=7592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.471" name="file0" dev="loop3" ino=13 res=0 errno=0
[  430.419832][ T7600] FAULT_INJECTION: forcing a failure.
[  430.419832][ T7600] name failslab, interval 1, probability 0, space 0, times 0
[  430.432916][ T7600] CPU: 0 UID: 0 PID: 7600 Comm: syz.4.472 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  430.433086][ T7600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  430.433186][ T7600] Call Trace:
[  430.433246][ T7600]  <TASK>
[  430.433307][ T7600]  __dump_stack+0x26/0x30
[  430.433502][ T7600]  dump_stack_lvl+0x14c/0x1c0
[  430.433705][ T7600]  dump_stack+0x1e/0x25
[  430.433879][ T7600]  should_fail_ex+0x7da/0x8a0
[  430.434115][ T7600]  should_failslab+0x158/0x200
[  430.434283][ T7600]  kmem_cache_alloc_node_noprof+0x152/0x1780
[  430.434457][ T7600]  ? stack_depot_save_flags+0x35/0x790
[  430.434658][ T7600]  ? __alloc_skb+0x799/0x1030
[  430.434836][ T7600]  ? kmsan_internal_set_shadow_origin+0x7a/0x110
[  430.435068][ T7600]  ? kmsan_internal_unpoison_memory+0x14/0x20
[  430.435288][ T7600]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  430.435540][ T7600]  __alloc_skb+0x799/0x1030
[  430.435709][ T7600]  ? aa_label_sk_perm+0x764/0x820
[  430.435891][ T7600]  ? __alloc_skb+0x3b2/0x1030
[  430.436059][ T7600]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  430.436317][ T7600]  pfkey_sendmsg+0x200/0x1d10
[  430.436523][ T7600]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  430.436782][ T7600]  ? aa_sk_perm+0x86e/0xda0
[  430.436971][ T7600]  ? aa_sock_msg_perm+0x284/0x2e0
[  430.437170][ T7600]  ? kmsan_get_metadata+0xf1/0x160
[  430.437398][ T7600]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  430.437639][ T7600]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  430.437828][ T7600]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  430.438014][ T7600]  __sock_sendmsg+0x333/0x3d0
[  430.438247][ T7600]  ____sys_sendmsg+0x7f5/0xcf0
[  430.438489][ T7600]  ___sys_sendmsg+0x271/0x3b0
[  430.438684][ T7600]  ? kmsan_get_metadata+0xf1/0x160
[  430.438942][ T7600]  ? __rcu_read_unlock+0x6c/0xd0
[  430.439153][ T7600]  ? __fget_files+0x3b4/0x4a0
[  430.439382][ T7600]  ? __fget_files+0x3b9/0x4a0
[  430.439613][ T7600]  ? kmsan_get_metadata+0xf1/0x160
[  430.439850][ T7600]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  430.440100][ T7600]  __x64_sys_sendmsg+0x211/0x3e0
[  430.440319][ T7600]  ? kmsan_get_metadata+0xf1/0x160
[  430.440569][ T7600]  x64_sys_call+0x1c60/0x3e70
[  430.440786][ T7600]  do_syscall_64+0xc9/0xf80
[  430.440985][ T7600]  ? clear_bhb_loop+0x40/0x90
[  430.441161][ T7600]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  430.441338][ T7600] RIP: 0033:0x7f2661f9acb9
[  430.441461][ T7600] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  430.441608][ T7600] RSP: 002b:00007f2662efa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  430.441771][ T7600] RAX: ffffffffffffffda RBX: 00007f2662215fa0 RCX: 00007f2661f9acb9
[  430.441888][ T7600] RDX: 0000000000000000 RSI: 00002000005f5000 RDI: 0000000000000003
[  430.441992][ T7600] RBP: 00007f2662efa090 R08: 0000000000000000 R09: 0000000000000000
[  430.442095][ T7600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  430.442195][ T7600] R13: 00007f2662216038 R14: 00007f2662215fa0 R15: 00007fff3a1c8e78
[  430.442357][ T7600]  </TASK>
[  431.267283][ T7597] loop2: detected capacity change from 0 to 32768
[  431.315760][ T7597] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.473 (7597)
[  431.375091][ T7597] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  431.386079][ T7597] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[  431.597205][ T7597] BTRFS info (device loop2): enabling ssd optimizations
[  431.604628][ T7597] BTRFS info (device loop2): turning on async discard
[  431.616113][ T7597] BTRFS info (device loop2): enabling free space tree
[  431.621367][ T7594] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set
[  431.775951][ T7597] BTRFS info (device loop2): balance: start -s
[  431.783275][ T7597] BTRFS info (device loop2): left=0, need=98304, flags=2
[  431.791353][ T7597] BTRFS info (device loop2): space_info SYSTEM (sub-group id 0) has 0 free, is not full
[  431.803230][ T7597] BTRFS info (device loop2): space_info total=4194304, used=4096, pinned=0, reserved=0, may_use=0, readonly=4190208 zone_unusable=0
[  431.817672][ T7597] BTRFS info (device loop2): global_block_rsv: size 1441792 reserved 1441792
[  431.826784][ T7597] BTRFS info (device loop2): trans_block_rsv: size 0 reserved 0
[  431.840492][ T7597] BTRFS info (device loop2): chunk_block_rsv: size 0 reserved 0
[  431.850266][ T7597] BTRFS info (device loop2): delayed_block_rsv: size 0 reserved 0
[  431.858650][ T7597] BTRFS info (device loop2): delayed_refs_rsv: size 0 reserved 0
[  431.876534][ T7597] BTRFS info (device loop2): relocating block group 1048576 flags system
[  432.024268][ T7597] BTRFS info (device loop2): balance: ended with status: 0
[  432.071036][ T5783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  432.264086][ T5786] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  432.311231][ T7603] netlink: 8 bytes leftover after parsing attributes in process `syz.0.469'.
[  432.689685][ T5842] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  432.930933][ T5842] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  432.943142][ T5842] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  432.953443][ T5842] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[  432.968239][ T5842] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  433.192542][ T5842] usb 5-1: config 0 descriptor??
[  433.919586][ T5842] arvo 0003:1E7D:30D4.000A: unknown main item tag 0x0
[  433.926918][ T5842] arvo 0003:1E7D:30D4.000A: item fetching failed at offset 6/7
[  434.080801][ T7629] loop1: detected capacity change from 0 to 32768
[  434.084386][ T5842] arvo 0003:1E7D:30D4.000A: parse failed
[  434.112229][ T5842] arvo 0003:1E7D:30D4.000A: probe with driver arvo failed with error -22
[  434.133576][ T7629] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.479 (7629)
[  434.202733][ T7629] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  434.213496][ T7629] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[  434.453463][ T5842] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  434.489463][ T7651] netlink: 12 bytes leftover after parsing attributes in process `syz.4.476'.
[  434.547020][ T7629] BTRFS info (device loop1): enabling ssd optimizations
[  434.559115][ T7629] BTRFS info (device loop1): turning on async discard
[  434.566153][ T7629] BTRFS info (device loop1): enabling free space tree
[  434.729312][ T5790] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  434.778729][ T5842] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  434.790057][ T5842] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  434.800523][ T5842] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[  434.814931][ T5842] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  434.991483][ T5842] usb 4-1: config 0 descriptor??
[  435.504319][ T5842] arvo 0003:1E7D:30D4.000B: unknown main item tag 0x0
[  435.511781][ T5842] arvo 0003:1E7D:30D4.000B: item fetching failed at offset 6/7
[  435.712971][ T5842] arvo 0003:1E7D:30D4.000B: parse failed
[  435.720125][ T5842] arvo 0003:1E7D:30D4.000B: probe with driver arvo failed with error -22
[  436.366846][ T5842] usb 5-1: USB disconnect, device number 19
[  438.253232][ T5839] usb 4-1: USB disconnect, device number 16
[  439.237401][ T7685] loop2: detected capacity change from 0 to 128
[  439.281150][ T7685] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  439.459072][ T7685] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  439.779414][ T7683] loop3: detected capacity change from 0 to 32768
[  439.791247][ T7683] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.492 (7683)
[  439.878031][ T7683] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  439.888898][ T7683] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm
[  440.161977][ T7683] BTRFS info (device loop3): enabling ssd optimizations
[  440.169413][ T7683] BTRFS info (device loop3): turning on async discard
[  440.176416][ T7683] BTRFS info (device loop3): enabling free space tree
[  440.203260][ T7709] netlink: 4 bytes leftover after parsing attributes in process `syz.4.496'.
[  440.555644][  T797] usb 5-1: new low-speed USB device number 20 using dummy_hcd
[  440.739984][ T5783] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  440.772514][  T797] usb 5-1: Invalid ep0 maxpacket: 64
[  440.925682][  T797] usb 5-1: new low-speed USB device number 21 using dummy_hcd
[  441.150400][  T797] usb 5-1: Invalid ep0 maxpacket: 64
[  441.206575][  T797] usb usb5-port1: attempt power cycle
[  441.268648][ T5839] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  441.526798][ T5839] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  441.538585][ T5839] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  441.548935][ T5839] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[  441.558470][ T5839] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  441.648438][  T797] usb 5-1: new low-speed USB device number 22 using dummy_hcd
[  441.688238][ T7714] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  441.701961][ T5839] usb 3-1: config 0 descriptor??
[  441.760459][  T797] usb 5-1: Invalid ep0 maxpacket: 64
[  441.968310][  T797] usb 5-1: new low-speed USB device number 23 using dummy_hcd
[  442.071473][  T797] usb 5-1: Invalid ep0 maxpacket: 64
[  442.120755][  T797] usb usb5-port1: unable to enumerate USB device
[  442.316394][ T5839] arvo 0003:1E7D:30D4.000C: unknown main item tag 0x0
[  442.323825][ T5839] arvo 0003:1E7D:30D4.000C: item fetching failed at offset 6/7
[  442.372026][ T5839] arvo 0003:1E7D:30D4.000C: parse failed
[  442.378708][ T5839] arvo 0003:1E7D:30D4.000C: probe with driver arvo failed with error -22
[  442.838856][ T5839] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  442.888911][ T7728] netlink: 12 bytes leftover after parsing attributes in process `syz.2.497'.
[  443.053746][ T5839] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  443.065562][ T5839] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  443.076312][ T5839] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[  443.085752][ T5839] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  443.224659][ T5839] usb 2-1: config 0 descriptor??
[  443.435509][ T7734] netlink: 108 bytes leftover after parsing attributes in process `syz.0.504'.
[  443.491529][ T7734] netlink: 108 bytes leftover after parsing attributes in process `syz.0.504'.
[  443.646763][ T7735] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  443.824940][ T7735] tipc: Bearer <udp:s`>: already 2 bearers with priority 10
[  443.832929][ T7735] tipc: Bearer <udp:s`>: trying with adjusted priority
[  443.895422][ T7735] tipc: Enabled bearer <udp:s`>, priority 9
[  443.948108][ T5839] arvo 0003:1E7D:30D4.000D: unknown main item tag 0x0
[  443.955282][ T5839] arvo 0003:1E7D:30D4.000D: item fetching failed at offset 6/7
[  444.042901][ T5839] arvo 0003:1E7D:30D4.000D: parse failed
[  444.050523][ T5839] arvo 0003:1E7D:30D4.000D: probe with driver arvo failed with error -22
[  444.293722][ T7738] netlink: 12 bytes leftover after parsing attributes in process `syz.4.505'.
[  444.303508][ T7738] netlink: 28 bytes leftover after parsing attributes in process `syz.4.505'.
[  444.312977][ T7738] netlink: 12 bytes leftover after parsing attributes in process `syz.4.505'.
[  444.371417][ T7738] netlink: 28 bytes leftover after parsing attributes in process `syz.4.505'.
[  444.380821][ T7738] netlink: 'syz.4.505': attribute type 6 has an invalid length.
[  444.444154][ T5839] usb 3-1: USB disconnect, device number 14
[  445.399722][ T7752] loop3: detected capacity change from 0 to 128
[  445.413667][ T7752] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  445.498081][ T7752] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  446.269230][ T7759] binder: 7755:7759 ioctl c0306201 0 returned -14
[  446.326402][ T5839] usb 2-1: USB disconnect, device number 18
[  446.488773][ T5785] Bluetooth: hci4: command 0x0406 tx timeout
[  447.578806][ T7763] loop3: detected capacity change from 0 to 32768
[  447.663532][ T7763] JBD2: Ignoring recovery information on journal
[  447.790696][ T7763] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  447.932326][   T30] audit: type=1800 audit(1769135716.259:397): pid=7763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.512" name="file1" dev="loop3" ino=17058 res=0 errno=0
[  448.426509][ T7779] loop4: detected capacity change from 0 to 64
[  448.511955][ T5783] ocfs2: Unmounting device (7,3) on (node local)
[  448.840121][ T7781] netlink: 'syz.2.517': attribute type 1 has an invalid length.
[  449.274157][ T5839] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  449.521247][ T5839] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  449.533478][ T5839] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  449.543761][ T5839] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[  449.555995][ T7781] 8021q: adding VLAN 0 to HW filter on device bond1
[  449.564626][ T5839] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  449.727135][ T7786] macvlan2: entered promiscuous mode
[  449.733657][ T7786] macvlan2: entered allmulticast mode
[  449.779490][ T5839] usb 4-1: config 0 descriptor??
[  449.840744][ T7786] bond1: entered promiscuous mode
[  449.915037][ T7786] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  449.986163][ T7786] bond1: left promiscuous mode
[  450.308457][ T7790] netlink: 12 bytes leftover after parsing attributes in process `syz.0.520'.
[  450.317669][ T7790] netlink: 28 bytes leftover after parsing attributes in process `syz.0.520'.
[  450.327324][ T7790] netlink: 12 bytes leftover after parsing attributes in process `syz.0.520'.
[  450.338904][ T5839] arvo 0003:1E7D:30D4.000E: unknown main item tag 0x0
[  450.339371][ T5839] arvo 0003:1E7D:30D4.000E: item fetching failed at offset 6/7
[  450.344844][ T5839] arvo 0003:1E7D:30D4.000E: parse failed
[  450.363470][ T5839] arvo 0003:1E7D:30D4.000E: probe with driver arvo failed with error -22
[  450.440213][ T7790] netlink: 28 bytes leftover after parsing attributes in process `syz.0.520'.
[  450.450810][ T7790] netlink: 'syz.0.520': attribute type 6 has an invalid length.
[  450.895913][ T7800] netlink: 12 bytes leftover after parsing attributes in process `syz.3.518'.
[  451.319270][ T5839] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  451.431783][ T7807] netlink: 24 bytes leftover after parsing attributes in process `syz.1.526'.
[  451.458027][ T7806] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.525'.
[  451.517933][ T5839] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  451.530159][ T5839] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  451.540562][ T5839] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[  451.550162][ T5839] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  451.672732][ T5839] usb 3-1: config 0 descriptor??
[  452.219445][ T5839] arvo 0003:1E7D:30D4.000F: unknown main item tag 0x0
[  452.226609][ T5839] arvo 0003:1E7D:30D4.000F: item fetching failed at offset 6/7
[  452.284157][ T5839] arvo 0003:1E7D:30D4.000F: parse failed
[  452.290567][ T5839] arvo 0003:1E7D:30D4.000F: probe with driver arvo failed with error -22
[  452.464459][  T797] usb 4-1: USB disconnect, device number 17
[  452.541232][ T7814] loop0: detected capacity change from 0 to 128
[  452.744001][ T7814] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  452.900644][ T7814] ext4 filesystem being mounted at /105/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  453.208626][ T7825] loop1: detected capacity change from 0 to 64
[  454.146804][ T5782] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  454.239909][ T6397] kworker/u8:16: attempt to access beyond end of device
[  454.239909][ T6397] loop1: rw=8388609, sector=65, nr_sectors = 1 limit=64
[  454.255332][ T6397] buffer_io_error: 54 callbacks suppressed
[  454.255418][ T6397] Buffer I/O error on dev loop1, logical block 65, lost async page write
[  454.371544][ T6397] kworker/u8:16: attempt to access beyond end of device
[  454.371544][ T6397] loop1: rw=8388609, sector=66, nr_sectors = 1 limit=64
[  454.385941][ T6397] Buffer I/O error on dev loop1, logical block 66, lost async page write
[  454.457963][ T6397] kworker/u8:16: attempt to access beyond end of device
[  454.457963][ T6397] loop1: rw=8388609, sector=67, nr_sectors = 1 limit=64
[  454.476426][ T6397] Buffer I/O error on dev loop1, logical block 67, lost async page write
[  454.533303][ T6397] kworker/u8:16: attempt to access beyond end of device
[  454.533303][ T6397] loop1: rw=8388609, sector=68, nr_sectors = 1 limit=64
[  454.548242][ T6397] Buffer I/O error on dev loop1, logical block 68, lost async page write
[  454.609900][ T6397] kworker/u8:16: attempt to access beyond end of device
[  454.609900][ T6397] loop1: rw=8388609, sector=72, nr_sectors = 1 limit=64
[  454.624350][ T6397] Buffer I/O error on dev loop1, logical block 72, lost async page write
[  454.646346][ T5839] usb 3-1: USB disconnect, device number 15
[  454.758216][ T6397] kworker/u8:16: attempt to access beyond end of device
[  454.758216][ T6397] loop1: rw=8388609, sector=73, nr_sectors = 1 limit=64
[  454.778356][ T6397] Buffer I/O error on dev loop1, logical block 73, lost async page write
[  454.831403][ T6397] kworker/u8:16: attempt to access beyond end of device
[  454.831403][ T6397] loop1: rw=8388609, sector=76, nr_sectors = 1 limit=64
[  454.845535][ T6397] Buffer I/O error on dev loop1, logical block 76, lost async page write
[  454.948180][ T6397] kworker/u8:16: attempt to access beyond end of device
[  454.948180][ T6397] loop1: rw=8388609, sector=77, nr_sectors = 1 limit=64
[  454.962464][ T6397] Buffer I/O error on dev loop1, logical block 77, lost async page write
[  455.090355][ T6397] kworker/u8:16: attempt to access beyond end of device
[  455.090355][ T6397] loop1: rw=1, sector=78, nr_sectors = 1016 limit=64
[  455.190968][ T6397] kworker/u8:16: attempt to access beyond end of device
[  455.190968][ T6397] loop1: rw=8388609, sector=1094, nr_sectors = 1 limit=64
[  455.206292][ T6397] Buffer I/O error on dev loop1, logical block 1094, lost async page write
[  455.299513][ T6397] Buffer I/O error on dev loop1, logical block 1095, lost async page write
[  455.332545][ T5790] INFO: The task syz-executor:5790 has been waiting for writeback completion for more than 1 seconds.
[  455.332691][ T5790] INFO: The task syz-executor:5790 has been waiting for writeback completion for more than 1 seconds.
[  455.378124][ T5790] INFO: The task syz-executor:5790 has been waiting for writeback completion for more than 1 seconds.
[  455.974854][ T7844] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.539'.
[  456.547224][ T7848] loop0: detected capacity change from 0 to 1024
[  456.890096][ T7850] netlink: 12 bytes leftover after parsing attributes in process `syz.1.535'.
[  456.899459][ T7850] netlink: 28 bytes leftover after parsing attributes in process `syz.1.535'.
[  456.916624][ T7850] netlink: 12 bytes leftover after parsing attributes in process `syz.1.535'.
[  457.159655][ T7850] netlink: 28 bytes leftover after parsing attributes in process `syz.1.535'.
[  457.169031][ T7850] netlink: 'syz.1.535': attribute type 6 has an invalid length.
[  457.219103][ T1153] hfsplus: b-tree write err: -5, ino 4
[  457.829091][ T7856] loop4: detected capacity change from 0 to 2048
[  458.000792][ T7866] netlink: 8 bytes leftover after parsing attributes in process `syz.0.545'.
[  458.036221][ T7869] loop1: detected capacity change from 0 to 64
[  458.711000][ T7856] hpfs: filesystem error: improperly stopped; already mounted read-only
[  458.720238][ T7856] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  458.735677][ T7856] hpfs: filesystem error: sector(s) 'dir_band_bitmap' badly placed at 7b318cc4
[  461.003208][ T7888] team0: Port device team_slave_1 removed
[  461.281488][ T7890] loop4: detected capacity change from 0 to 1024
[  461.990821][   T35] hfsplus: b-tree write err: -5, ino 4
[  462.029517][ T7900] FAULT_INJECTION: forcing a failure.
[  462.029517][ T7900] name failslab, interval 1, probability 0, space 0, times 0
[  462.048268][ T7900] CPU: 0 UID: 0 PID: 7900 Comm: syz.3.558 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  462.048426][ T7900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  462.048532][ T7900] Call Trace:
[  462.048590][ T7900]  <TASK>
[  462.048645][ T7900]  __dump_stack+0x26/0x30
[  462.048839][ T7900]  dump_stack_lvl+0x14c/0x1c0
[  462.049040][ T7900]  dump_stack+0x1e/0x25
[  462.049212][ T7900]  should_fail_ex+0x7da/0x8a0
[  462.049445][ T7900]  should_failslab+0x158/0x200
[  462.049617][ T7900]  __kmalloc_cache_noprof+0x12a/0x1710
[  462.049787][ T7900]  ? kmsan_get_metadata+0xf1/0x160
[  462.050043][ T7900]  ? __se_sys_mount+0x21f/0x7e0
[  462.050267][ T7900]  ? kmsan_get_metadata+0xf1/0x160
[  462.050496][ T7900]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  462.050746][ T7900]  __se_sys_mount+0x21f/0x7e0
[  462.050973][ T7900]  ? fput+0x113/0x160
[  462.051150][ T7900]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  462.051396][ T7900]  __x64_sys_mount+0xe4/0x150
[  462.051636][ T7900]  x64_sys_call+0x38cb/0x3e70
[  462.051843][ T7900]  do_syscall_64+0xc9/0xf80
[  462.052053][ T7900]  ? clear_bhb_loop+0x40/0x90
[  462.052228][ T7900]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  462.052405][ T7900] RIP: 0033:0x7fb521b9acb9
[  462.052529][ T7900] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  462.052674][ T7900] RSP: 002b:00007fb522a1c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  462.052828][ T7900] RAX: ffffffffffffffda RBX: 00007fb521e16090 RCX: 00007fb521b9acb9
[  462.052955][ T7900] RDX: 00002000000020c0 RSI: 0000200000002080 RDI: 0000000000000000
[  462.053064][ T7900] RBP: 00007fb522a1c090 R08: 00002000000003c0 R09: 0000000000000000
[  462.053173][ T7900] R10: 0000000000000413 R11: 0000000000000246 R12: 0000000000000001
[  462.053274][ T7900] R13: 00007fb521e16128 R14: 00007fb521e16090 R15: 00007ffe20a35b08
[  462.053437][ T7900]  </TASK>
[  462.732494][ T7897] netlink: 12 bytes leftover after parsing attributes in process `syz.0.557'.
[  462.743173][ T7897] netlink: 28 bytes leftover after parsing attributes in process `syz.0.557'.
[  462.752797][ T7897] netlink: 12 bytes leftover after parsing attributes in process `syz.0.557'.
[  462.826794][ T7897] netlink: 28 bytes leftover after parsing attributes in process `syz.0.557'.
[  462.836662][ T7897] netlink: 'syz.0.557': attribute type 6 has an invalid length.
[  462.940483][ T5842] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  463.153457][ T5842] usb 5-1: Using ep0 maxpacket: 8
[  463.191064][ T5842] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  463.239660][ T5842] usb 5-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77
[  463.249393][ T5842] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  463.257958][ T5842] usb 5-1: Product: syz
[  463.262341][ T5842] usb 5-1: Manufacturer: syz
[  463.267157][ T5842] usb 5-1: SerialNumber: syz
[  463.389712][ T5842] usb 5-1: config 0 descriptor??
[  463.821064][ T7913] loop2: detected capacity change from 0 to 128
[  463.842678][ T7913] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  463.956372][ T7913] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  464.313481][ T7920] netlink: 8 bytes leftover after parsing attributes in process `syz.3.566'.
[  464.323418][ T7920] netlink: 12 bytes leftover after parsing attributes in process `syz.3.566'.
[  464.490470][ T7921] loop3: detected capacity change from 0 to 64
[  464.643100][ T7924] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  465.599591][  T797] usb 5-1: USB disconnect, device number 24
[  465.669976][ T6097] bio_check_eod: 18 callbacks suppressed
[  465.670067][ T6097] kworker/u8:15: attempt to access beyond end of device
[  465.670067][ T6097] loop3: rw=8388609, sector=65, nr_sectors = 1 limit=64
[  465.691348][ T6097] buffer_io_error: 14 callbacks suppressed
[  465.691433][ T6097] Buffer I/O error on dev loop3, logical block 65, lost async page write
[  466.092578][ T6097] kworker/u8:15: attempt to access beyond end of device
[  466.092578][ T6097] loop3: rw=8388609, sector=66, nr_sectors = 1 limit=64
[  466.107063][ T6097] Buffer I/O error on dev loop3, logical block 66, lost async page write
[  466.295062][ T6097] kworker/u8:15: attempt to access beyond end of device
[  466.295062][ T6097] loop3: rw=8388609, sector=67, nr_sectors = 1 limit=64
[  466.309478][ T6097] Buffer I/O error on dev loop3, logical block 67, lost async page write
[  466.544521][ T6097] kworker/u8:15: attempt to access beyond end of device
[  466.544521][ T6097] loop3: rw=8388609, sector=68, nr_sectors = 1 limit=64
[  466.563829][ T6097] Buffer I/O error on dev loop3, logical block 68, lost async page write
[  466.708163][ T6097] kworker/u8:15: attempt to access beyond end of device
[  466.708163][ T6097] loop3: rw=8388609, sector=72, nr_sectors = 1 limit=64
[  466.722692][ T6097] Buffer I/O error on dev loop3, logical block 72, lost async page write
[  467.364947][ T7930] loop2: detected capacity change from 0 to 65536
[  467.383793][ T7930] xfs: Deprecated parameter 'attr2'
[  467.389596][ T7930] XFS: attr2 mount option is deprecated.
[  467.397970][ T6097] kworker/u8:15: attempt to access beyond end of device
[  467.397970][ T6097] loop3: rw=8388609, sector=73, nr_sectors = 1 limit=64
[  467.414681][ T6097] Buffer I/O error on dev loop3, logical block 73, lost async page write
[  467.424714][ T6097] kworker/u8:15: attempt to access beyond end of device
[  467.424714][ T6097] loop3: rw=8388609, sector=76, nr_sectors = 1 limit=64
[  467.438998][ T6097] Buffer I/O error on dev loop3, logical block 76, lost async page write
[  467.449221][ T6097] kworker/u8:15: attempt to access beyond end of device
[  467.449221][ T6097] loop3: rw=8388609, sector=77, nr_sectors = 1 limit=64
[  467.463405][ T6097] Buffer I/O error on dev loop3, logical block 77, lost async page write
[  467.481494][ T6097] kworker/u8:15: attempt to access beyond end of device
[  467.481494][ T6097] loop3: rw=1, sector=78, nr_sectors = 128 limit=64
[  467.496901][ T6097] kworker/u8:15: attempt to access beyond end of device
[  467.496901][ T6097] loop3: rw=8388609, sector=206, nr_sectors = 1 limit=64
[  467.511911][ T6097] Buffer I/O error on dev loop3, logical block 206, lost async page write
[  467.535699][ T7934] netlink: 12 bytes leftover after parsing attributes in process `syz.4.573'.
[  467.546632][ T7934] netlink: 28 bytes leftover after parsing attributes in process `syz.4.573'.
[  467.555860][ T7934] netlink: 12 bytes leftover after parsing attributes in process `syz.4.573'.
[  467.595296][ T7930] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  467.621299][ T6097] Buffer I/O error on dev loop3, logical block 207, lost async page write
[  467.641709][ T5783] INFO: The task syz-executor:5783 has been waiting for writeback completion for more than 1 seconds.
[  467.641877][ T5783] INFO: The task syz-executor:5783 has been waiting for writeback completion for more than 1 seconds.
[  467.688785][ T7934] netlink: 28 bytes leftover after parsing attributes in process `syz.4.573'.
[  467.709403][ T7934] netlink: 'syz.4.573': attribute type 6 has an invalid length.
[  467.713526][ T5783] INFO: The task syz-executor:5783 has been waiting for writeback completion for more than 2 seconds.
[  467.732701][ T7932] loop1: detected capacity change from 0 to 4096
[  467.780841][ T7932] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512).
[  467.832729][ T7932] ntfs3(loop1): ino=3, mi_enum_attr
[  467.948617][ T7932] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  467.955964][ T7932] ntfs3(loop1): Failed to load $AttrDef (-2)
[  468.021693][ T7930] XFS (loop2): Ending clean mount
[  468.062293][ T7930] XFS (loop2): Quotacheck needed: Please wait.
[  468.193839][ T7930] XFS (loop2): Quotacheck: Done.
[  468.655506][ T5786] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  469.079021][ T7949] netlink: 40 bytes leftover after parsing attributes in process `syz.1.576'.
[  469.528253][ T7954] loop0: detected capacity change from 0 to 128
[  469.541748][ T7954] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  469.642833][ T7954] UDF-fs: error (device loop0): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  472.218164][ T7973] netlink: 12 bytes leftover after parsing attributes in process `syz.3.584'.
[  472.235876][ T7973] netlink: 28 bytes leftover after parsing attributes in process `syz.3.584'.
[  472.246017][ T7973] netlink: 12 bytes leftover after parsing attributes in process `syz.3.584'.
[  472.292791][  T797] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  472.411611][ T7973] netlink: 28 bytes leftover after parsing attributes in process `syz.3.584'.
[  472.421395][ T7973] netlink: 'syz.3.584': attribute type 6 has an invalid length.
[  472.498286][  T797] usb 1-1: Using ep0 maxpacket: 8
[  472.606383][  T797] usb 1-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77
[  472.616325][  T797] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  472.625057][  T797] usb 1-1: Product: syz
[  472.629627][  T797] usb 1-1: Manufacturer: syz
[  472.634755][  T797] usb 1-1: SerialNumber: syz
[  472.774942][  T797] usb 1-1: config 0 descriptor??
[  472.905098][  T797] gspca_main: sq905-2.14.0 probing 2770:9120
[  473.584889][  T797] gspca_sq905: sq905_command: usb_control_msg failed 2 (-110)
[  473.593681][  T797] sq905 1-1:0.0: probe with driver sq905 failed with error -110
[  473.843157][ T5842] usb 1-1: USB disconnect, device number 12
[  474.540854][ T7998] netlink: 40 bytes leftover after parsing attributes in process `syz.3.591'.
[  475.215613][ T8001] loop0: detected capacity change from 0 to 4096
[  475.385648][ T8008] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  475.513701][ T8001] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=12)
[  475.615673][ T8001] Remounting filesystem read-only
[  475.679131][ T8001] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  476.113314][ T5782] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer
[  477.661185][ T8023] bond1: Removing last arp target with arp_interval on
[  478.150390][ T8029] netlink: 8 bytes leftover after parsing attributes in process `syz.2.602'.
[  478.629085][ T8033] netlink: 40 bytes leftover after parsing attributes in process `syz.1.604'.
[  478.669613][ T8031] binder: BINDER_SET_CONTEXT_MGR already set
[  478.676124][ T8031] binder: 8030:8031 ioctl 4018620d 2000000001c0 returned -16
[  478.946757][ T8036] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303
[  479.743244][ T8038] loop2: detected capacity change from 0 to 8192
[  480.001805][ T8047] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  480.712601][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  480.719693][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  481.885179][ T8064] netlink: 8 bytes leftover after parsing attributes in process `syz.3.616'.
[  482.206517][ T8066] netlink: 12 bytes leftover after parsing attributes in process `syz.0.617'.
[  482.220837][ T8066] netlink: 28 bytes leftover after parsing attributes in process `syz.0.617'.
[  482.232227][ T8066] netlink: 12 bytes leftover after parsing attributes in process `syz.0.617'.
[  482.289967][ T8066] netlink: 28 bytes leftover after parsing attributes in process `syz.0.617'.
[  482.299379][ T8066] netlink: 'syz.0.617': attribute type 6 has an invalid length.
[  482.693256][ T8071] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303
[  482.798864][ T8073] loop3: detected capacity change from 0 to 256
[  482.826528][ T8073] udf: Bad value for 'anchor'
[  483.379744][ T8079] netlink: 12 bytes leftover after parsing attributes in process `syz.0.622'.
[  484.670709][ T8093] netlink: 24 bytes leftover after parsing attributes in process `syz.3.629'.
[  485.263637][ T8087] loop0: detected capacity change from 0 to 32768
[  485.275125][ T8087] btrfs: Deprecated parameter 'usebackuproot'
[  485.281819][ T8087] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  485.309553][ T8087] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.626 (8087)
[  485.360361][ T8087] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  485.371581][ T8087] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm
[  485.544837][ T6397] BTRFS warning (device loop0): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  485.562120][ T8087] BTRFS error (device loop0): failed to load root extent
[  485.569842][ T8087] BTRFS warning (device loop0): try to load backup roots slot 1
[  485.589420][ T6900] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  485.608527][ T8087] BTRFS warning (device loop0): couldn't read tree root
[  485.615741][ T8087] BTRFS warning (device loop0): try to load backup roots slot 2
[  485.658259][ T6900] BTRFS error (device loop0): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  485.669447][ T8087] BTRFS warning (device loop0): couldn't read tree root
[  485.676743][ T8087] BTRFS warning (device loop0): try to load backup roots slot 3
[  485.720732][ T8087] BTRFS info (device loop0): rebuilding free space tree
[  485.815006][ T8087] BTRFS info (device loop0): checking UUID tree
[  485.834947][ T8087] BTRFS info (device loop0): enabling ssd optimizations
[  485.842513][ T8087] BTRFS info (device loop0): turning off barriers
[  485.849798][ T8087] BTRFS info (device loop0): turning on sync discard
[  485.856711][ T8087] BTRFS info (device loop0): enabling free space tree
[  485.863970][ T8087] BTRFS info (device loop0): force clearing of disk cache
[  485.871575][ T8087] BTRFS info (device loop0): enabling auto defrag
[  485.878421][ T8087] BTRFS info (device loop0): trying to use backup root at mount time
[  485.886831][ T8087] BTRFS info (device loop0): use zstd compression, level 3
[  485.887212][ T8111] loop4: detected capacity change from 0 to 64
[  486.828066][ T8120] bio_check_eod: 54 callbacks suppressed
[  486.828159][ T8120] syz.4.630: attempt to access beyond end of device
[  486.828159][ T8120] loop4: rw=8388608, sector=892, nr_sectors = 1 limit=64
[  486.848352][ T8120] buffer_io_error: 46 callbacks suppressed
[  486.848446][ T8120] Buffer I/O error on dev loop4, logical block 892, async page read
[  487.079499][ T8120] syz.4.630: attempt to access beyond end of device
[  487.079499][ T8120] loop4: rw=8388608, sector=893, nr_sectors = 1 limit=64
[  487.095116][ T8120] Buffer I/O error on dev loop4, logical block 893, async page read
[  487.202770][ T5782] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  487.228025][ T8120] syz.4.630: attempt to access beyond end of device
[  487.228025][ T8120] loop4: rw=8388608, sector=894, nr_sectors = 1 limit=64
[  487.248326][ T8120] Buffer I/O error on dev loop4, logical block 894, async page read
[  487.362025][ T8120] syz.4.630: attempt to access beyond end of device
[  487.362025][ T8120] loop4: rw=8388608, sector=895, nr_sectors = 1 limit=64
[  487.376683][ T8120] Buffer I/O error on dev loop4, logical block 895, async page read
[  487.459838][ T8120] syz.4.630: attempt to access beyond end of device
[  487.459838][ T8120] loop4: rw=8388608, sector=896, nr_sectors = 1 limit=64
[  487.473882][ T8120] Buffer I/O error on dev loop4, logical block 896, async page read
[  487.570331][ T8120] syz.4.630: attempt to access beyond end of device
[  487.570331][ T8120] loop4: rw=8388608, sector=897, nr_sectors = 1 limit=64
[  487.584569][ T8120] Buffer I/O error on dev loop4, logical block 897, async page read
[  487.675682][ T8120] syz.4.630: attempt to access beyond end of device
[  487.675682][ T8120] loop4: rw=8388608, sector=898, nr_sectors = 1 limit=64
[  487.689901][ T8120] Buffer I/O error on dev loop4, logical block 898, async page read
[  487.956410][ T8124] netlink: 12 bytes leftover after parsing attributes in process `syz.3.634'.
[  487.966491][ T8124] netlink: 28 bytes leftover after parsing attributes in process `syz.3.634'.
[  487.978835][ T8124] netlink: 12 bytes leftover after parsing attributes in process `syz.3.634'.
[  488.018634][ T8131] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303
[  488.079115][ T8124] netlink: 28 bytes leftover after parsing attributes in process `syz.3.634'.
[  488.088892][ T8124] netlink: 'syz.3.634': attribute type 6 has an invalid length.
[  488.283862][ T1005] kworker/u8:7: attempt to access beyond end of device
[  488.283862][ T1005] loop4: rw=8388609, sector=65, nr_sectors = 1 limit=64
[  488.299673][ T1005] Buffer I/O error on dev loop4, logical block 65, lost async page write
[  488.459079][ T1005] kworker/u8:7: attempt to access beyond end of device
[  488.459079][ T1005] loop4: rw=8388609, sector=66, nr_sectors = 1 limit=64
[  488.477583][ T1005] Buffer I/O error on dev loop4, logical block 66, lost async page write
[  488.573214][ T1005] kworker/u8:7: attempt to access beyond end of device
[  488.573214][ T1005] loop4: rw=8388609, sector=67, nr_sectors = 1 limit=64
[  488.587653][ T1005] Buffer I/O error on dev loop4, logical block 67, lost async page write
[  489.202182][ T8137] loop3: detected capacity change from 0 to 128
[  489.220717][ T8137] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  489.315826][ T8137] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  489.446964][ T8141] netlink: 24 bytes leftover after parsing attributes in process `syz.1.641'.
[  489.606146][ T8143] loop2: detected capacity change from 0 to 8
[  490.582393][ T5844] kernel read not supported for file /344/net/ptype (pid: 5844 comm: kworker/1:4)
[  490.669738][ T8147] sctp: [Deprecated]: syz.3.643 (pid 8147) Use of struct sctp_assoc_value in delayed_ack socket option.
[  490.669738][ T8147] Use struct sctp_sack_info instead
[  490.704367][  T797] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  490.928515][  T797] usb 1-1: Using ep0 maxpacket: 16
[  491.001323][  T797] usb 1-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76
[  491.011046][  T797] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  491.019544][  T797] usb 1-1: Product: syz
[  491.027979][  T797] usb 1-1: Manufacturer: syz
[  491.032804][  T797] usb 1-1: SerialNumber: syz
[  491.167574][  T797] usb 1-1: config 0 descriptor??
[  491.513041][  T797] usb 1-1: ignoring: not an USB2CAN converter
[  491.772590][ T8149] Cannot find add_set index 2 as target
[  491.891912][ T8149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  491.912868][ T8149] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  491.963063][ T8161] loop1: detected capacity change from 0 to 64
[  492.032602][ T8149] netlink: 8 bytes leftover after parsing attributes in process `syz.0.644'.
[  492.126708][  T797] usb 1-1: USB disconnect, device number 13
[  492.221189][ T8160] netlink: 12 bytes leftover after parsing attributes in process `syz.3.649'.
[  492.230672][ T8160] netlink: 28 bytes leftover after parsing attributes in process `syz.3.649'.
[  492.241864][ T8160] netlink: 12 bytes leftover after parsing attributes in process `syz.3.649'.
[  492.367085][ T8160] netlink: 28 bytes leftover after parsing attributes in process `syz.3.649'.
[  492.376592][ T8160] netlink: 'syz.3.649': attribute type 6 has an invalid length.
[  492.448849][ T5842] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  492.620268][ T8165] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303
[  492.678176][ T5842] usb 2-1: Using ep0 maxpacket: 8
[  492.734570][ T5842] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3
[  492.744320][ T5842] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  492.752909][ T5842] usb 2-1: Product: syz
[  492.757363][ T5842] usb 2-1: Manufacturer: syz
[  492.766992][ T5842] usb 2-1: SerialNumber: syz
[  492.897590][ T5842] usb 2-1: config 0 descriptor??
[  493.566838][ T5842] msi2500 2-1:0.0: Registered as swradio24
[  493.573239][ T5842] msi2500 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  493.679959][ T5842] usb 2-1: USB disconnect, device number 19
[  496.472090][ T8193] loop1: detected capacity change from 0 to 32768
[  496.512676][ T8193] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.660 (8193)
[  497.181950][ T8199] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303
[  497.255010][ T8203] schedule_timeout: wrong timeout value ffffffffffffffff
[  497.262867][ T8203] CPU: 0 UID: 0 PID: 8203 Comm: vivid-000-vid-c Not tainted syzkaller #0 PREEMPT(voluntary) 
[  497.263035][ T8203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  497.263131][ T8203] Call Trace:
[  497.263189][ T8203]  <TASK>
[  497.263246][ T8203]  __dump_stack+0x26/0x30
[  497.263450][ T8203]  dump_stack_lvl+0x14c/0x1c0
[  497.263646][ T8203]  dump_stack+0x1e/0x25
[  497.263824][ T8203]  schedule_timeout+0x1d2/0x240
[  497.263992][ T8203]  ? kthread_should_stop+0xd7/0x140
[  497.264168][ T8203]  vivid_thread_vid_cap+0x1255/0x1710
[  497.264383][ T8203]  ? __pfx_autoremove_wake_function+0x10/0x10
[  497.264654][ T8203]  kthread+0xd5a/0xf00
[  497.264829][ T8203]  ? __pfx_vivid_thread_vid_cap+0x10/0x10
[  497.265071][ T8203]  ? __pfx_kthread+0x10/0x10
[  497.265243][ T8203]  ret_from_fork+0x207/0x6f0
[  497.265387][ T8203]  ? __switch_to+0x521/0x750
[  497.265587][ T8203]  ? __pfx_kthread+0x10/0x10
[  497.265767][ T8203]  ret_from_fork_asm+0x1a/0x30
[  497.266009][ T8203]  </TASK>
[  497.271046][ T8195] loop3: detected capacity change from 0 to 32768
[  497.402294][ T8193] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  497.413234][ T8193] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[  497.450509][ T8195] btrfs: Unknown parameter 'inode_cache'
[  497.582115][ T5842] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  497.801712][ T8193] BTRFS info (device loop1): enabling ssd optimizations
[  497.809471][ T8193] BTRFS info (device loop1): turning on async discard
[  497.816589][ T8193] BTRFS info (device loop1): enabling free space tree
[  497.826538][ T5842] usb 1-1: Using ep0 maxpacket: 16
[  497.918754][ T8193] FAULT_INJECTION: forcing a failure.
[  497.918754][ T8193] name failslab, interval 1, probability 0, space 0, times 0
[  497.932154][ T8193] CPU: 0 UID: 0 PID: 8193 Comm: syz.1.660 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  497.932329][ T8193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  497.932427][ T8193] Call Trace:
[  497.932484][ T8193]  <TASK>
[  497.932541][ T8193]  __dump_stack+0x26/0x30
[  497.932743][ T8193]  dump_stack_lvl+0x14c/0x1c0
[  497.932944][ T8193]  dump_stack+0x1e/0x25
[  497.933120][ T8193]  should_fail_ex+0x7da/0x8a0
[  497.933352][ T8193]  should_failslab+0x158/0x200
[  497.933523][ T8193]  __kmalloc_noprof+0x1e4/0x1c00
[  497.933691][ T8193]  ? kmsan_get_metadata+0xf1/0x160
[  497.933926][ T8193]  ? tomoyo_realpath_from_path+0xeb/0x9f0
[  497.934147][ T8193]  ? tomoyo_path_number_perm+0x41/0x7d0
[  497.934325][ T8193]  ? kmsan_get_metadata+0xf1/0x160
[  497.934576][ T8193]  tomoyo_realpath_from_path+0xeb/0x9f0
[  497.934805][ T8193]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  497.935056][ T8193]  ? __srcu_read_lock+0x5e/0xd0
[  497.935222][ T8193]  tomoyo_path_number_perm+0x1d0/0x7d0
[  497.935437][ T8193]  ? kmsan_get_metadata+0xf1/0x160
[  497.935670][ T8193]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  497.935971][ T8193]  tomoyo_file_ioctl+0x3d/0x50
[  497.936187][ T8193]  security_file_ioctl+0x139/0x570
[  497.936362][ T8193]  __se_sys_ioctl+0xbb/0x400
[  497.936571][ T8193]  __x64_sys_ioctl+0x97/0xe0
[  497.936780][ T8193]  x64_sys_call+0x18a7/0x3e70
[  497.936991][ T8193]  do_syscall_64+0xc9/0xf80
[  497.937189][ T8193]  ? clear_bhb_loop+0x40/0x90
[  497.937369][ T8193]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  497.937545][ T8193] RIP: 0033:0x7f566299acb9
[  497.937668][ T8193] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  497.937816][ T8193] RSP: 002b:00007f56638c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  497.937971][ T8193] RAX: ffffffffffffffda RBX: 00007f5662c15fa0 RCX: 00007f566299acb9
[  497.938091][ T8193] RDX: 0000200000002640 RSI: 00000000c400941b RDI: 0000000000000003
[  497.938201][ T8193] RBP: 00007f56638c6090 R08: 0000000000000000 R09: 0000000000000000
[  497.938305][ T8193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  497.938403][ T8193] R13: 00007f5662c16038 R14: 00007f5662c15fa0 R15: 00007ffe3aea9ef8
[  497.938559][ T8193]  </TASK>
[  498.170036][ T8193] ERROR: Out of memory at tomoyo_realpath_from_path.
[  498.454083][ T8195] loop3: detected capacity change from 0 to 16
[  498.482283][ T8195] erofs (device loop3): mounted with root inode @ nid 36.
[  498.705585][ T5790] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  498.746978][ T5842] usb 1-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  498.761041][ T5842] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  498.769626][ T5842] usb 1-1: Product: syz
[  498.774001][ T5842] usb 1-1: Manufacturer: syz
[  498.778918][ T5842] usb 1-1: SerialNumber: syz
[  498.863362][ T5842] usb 1-1: config 0 descriptor??
[  498.934717][ T5842] visor 1-1:0.0: Sony Clie 3.5 converter detected
[  499.449607][ T5842] usb 1-1: Sony Clie 3.5 converter now attached to ttyUSB0
[  499.643642][ T5842] usb 1-1: USB disconnect, device number 14
[  499.697191][ T5842] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0
[  499.770093][ T5842] visor 1-1:0.0: device disconnected
[  500.056539][ T8229] FAULT_INJECTION: forcing a failure.
[  500.056539][ T8229] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  500.071444][ T8229] CPU: 1 UID: 0 PID: 8229 Comm: syz.1.665 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  500.071614][ T8229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  500.071709][ T8229] Call Trace:
[  500.071779][ T8229]  <TASK>
[  500.071836][ T8229]  __dump_stack+0x26/0x30
[  500.072035][ T8229]  dump_stack_lvl+0x14c/0x1c0
[  500.072228][ T8229]  dump_stack+0x1e/0x25
[  500.072403][ T8229]  should_fail_ex+0x7da/0x8a0
[  500.072640][ T8229]  should_fail+0x2a/0x40
[  500.072837][ T8229]  should_fail_usercopy+0x2e/0x40
[  500.073062][ T8229]  strncpy_from_user+0x38/0x4b0
[  500.073241][ T8229]  ? kmsan_get_metadata+0xf1/0x160
[  500.073475][ T8229]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  500.073724][ T8229]  getname_flags+0x178/0xac0
[  500.073918][ T8229]  __x64_sys_execve+0x92/0x130
[  500.074133][ T8229]  x64_sys_call+0x2e9c/0x3e70
[  500.074355][ T8229]  do_syscall_64+0xc9/0xf80
[  500.074549][ T8229]  ? clear_bhb_loop+0x40/0x90
[  500.074728][ T8229]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  500.074911][ T8229] RIP: 0033:0x7f566299acb9
[  500.075035][ T8229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  500.075178][ T8229] RSP: 002b:00007f56638c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b
[  500.075328][ T8229] RAX: ffffffffffffffda RBX: 00007f5662c15fa0 RCX: 00007f566299acb9
[  500.075449][ T8229] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000740
[  500.075551][ T8229] RBP: 00007f56638c6090 R08: 0000000000000000 R09: 0000000000000000
[  500.075654][ T8229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  500.075759][ T8229] R13: 00007f5662c16038 R14: 00007f5662c15fa0 R15: 00007ffe3aea9ef8
[  500.075920][ T8229]  </TASK>
[  500.700061][ T8233] FAULT_INJECTION: forcing a failure.
[  500.700061][ T8233] name failslab, interval 1, probability 0, space 0, times 0
[  500.713533][ T8233] CPU: 1 UID: 0 PID: 8233 Comm: syz.2.670 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  500.713712][ T8233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  500.713807][ T8233] Call Trace:
[  500.713864][ T8233]  <TASK>
[  500.713924][ T8233]  __dump_stack+0x26/0x30
[  500.714114][ T8233]  dump_stack_lvl+0x14c/0x1c0
[  500.714307][ T8233]  dump_stack+0x1e/0x25
[  500.714482][ T8233]  should_fail_ex+0x7da/0x8a0
[  500.714716][ T8233]  should_failslab+0x158/0x200
[  500.714885][ T8233]  __kmalloc_noprof+0x1e4/0x1c00
[  500.715041][ T8233]  ? kmsan_get_metadata+0xf1/0x160
[  500.715277][ T8233]  ? tomoyo_realpath_from_path+0xeb/0x9f0
[  500.715495][ T8233]  ? tomoyo_path_number_perm+0x41/0x7d0
[  500.715674][ T8233]  ? kmsan_get_metadata+0xf1/0x160
[  500.715920][ T8233]  tomoyo_realpath_from_path+0xeb/0x9f0
[  500.716128][ T8233]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  500.716370][ T8233]  ? __srcu_read_lock+0x5e/0xd0
[  500.716535][ T8233]  tomoyo_path_number_perm+0x1d0/0x7d0
[  500.716743][ T8233]  ? kmsan_get_metadata+0xf1/0x160
[  500.716958][ T8233]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  500.717249][ T8233]  tomoyo_file_ioctl+0x3d/0x50
[  500.717465][ T8233]  security_file_ioctl+0x139/0x570
[  500.717632][ T8233]  __se_sys_ioctl+0xbb/0x400
[  500.717844][ T8233]  __x64_sys_ioctl+0x97/0xe0
[  500.718037][ T8233]  x64_sys_call+0x18a7/0x3e70
[  500.718230][ T8233]  do_syscall_64+0xc9/0xf80
[  500.718420][ T8233]  ? clear_bhb_loop+0x40/0x90
[  500.718592][ T8233]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  500.718765][ T8233] RIP: 0033:0x7f522d79acb9
[  500.718886][ T8233] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  500.719030][ T8233] RSP: 002b:00007f522e71f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  500.719179][ T8233] RAX: ffffffffffffffda RBX: 00007f522da15fa0 RCX: 00007f522d79acb9
[  500.719293][ T8233] RDX: 0000200000000080 RSI: 000000004008ae61 RDI: 0000000000000004
[  500.719401][ T8233] RBP: 00007f522e71f090 R08: 0000000000000000 R09: 0000000000000000
[  500.719502][ T8233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  500.719600][ T8233] R13: 00007f522da16038 R14: 00007f522da15fa0 R15: 00007fffae524558
[  500.719767][ T8233]  </TASK>
[  500.734851][ T8237] netlink: 12 bytes leftover after parsing attributes in process `syz.3.669'.
[  500.740343][ T8233] ERROR: Out of memory at tomoyo_realpath_from_path.
[  503.041981][ T8244] loop1: detected capacity change from 0 to 4096
[  503.143125][ T8245] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  503.160927][ T8242] loop0: detected capacity change from 0 to 32768
[  503.189576][ T8242] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.672 (8242)
[  503.303700][ T8242] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  503.327204][ T8242] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm
[  503.663379][ T8242] BTRFS info (device loop0): enabling ssd optimizations
[  503.671051][ T8242] BTRFS info (device loop0): turning on async discard
[  503.678734][ T8242] BTRFS info (device loop0): enabling free space tree
[  503.898295][ T8242] BTRFS info (device loop0): balance: start -s
[  503.910013][ T8242] BTRFS info (device loop0): left=0, need=98304, flags=2
[  503.917461][ T8242] BTRFS info (device loop0): space_info SYSTEM (sub-group id 0) has 0 free, is not full
[  503.933194][ T8242] BTRFS info (device loop0): space_info total=4194304, used=4096, pinned=0, reserved=0, may_use=0, readonly=4190208 zone_unusable=0
[  503.949256][ T8242] BTRFS info (device loop0): global_block_rsv: size 1441792 reserved 1441792
[  503.958711][ T8242] BTRFS info (device loop0): trans_block_rsv: size 0 reserved 0
[  503.966708][ T8242] BTRFS info (device loop0): chunk_block_rsv: size 0 reserved 0
[  503.978719][ T8242] BTRFS info (device loop0): delayed_block_rsv: size 0 reserved 0
[  503.986806][ T8242] BTRFS info (device loop0): delayed_refs_rsv: size 0 reserved 0
[  504.046892][ T8242] BTRFS info (device loop0): relocating block group 1048576 flags system
[  504.180124][ T8242] BTRFS info (device loop0): balance: ended with status: 0
[  504.365513][ T5782] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  534.388021][ T8268] FAULT_INJECTION: forcing a failure.
[  534.388021][ T8268] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  534.401822][ T8268] CPU: 0 UID: 0 PID: 8268 Comm: syz.2.676 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  534.401988][ T8268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  534.402076][ T8268] Call Trace:
[  534.402130][ T8268]  <TASK>
[  534.402191][ T8268]  __dump_stack+0x26/0x30
[  534.402381][ T8268]  dump_stack_lvl+0x14c/0x1c0
[  534.402558][ T8268]  dump_stack+0x1e/0x25
[  534.402724][ T8268]  should_fail_ex+0x7da/0x8a0
[  534.402949][ T8268]  should_fail+0x2a/0x40
[  534.403125][ T8268]  should_fail_usercopy+0x2e/0x40
[  534.403326][ T8268]  _copy_from_user+0x33/0x100
[  534.403518][ T8268]  ___sys_sendmsg+0x11b/0x3b0
[  534.403698][ T8268]  ? kmsan_get_metadata+0xf1/0x160
[  534.403930][ T8268]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  534.404161][ T8268]  ? __rcu_read_unlock+0x6c/0xd0
[  534.404357][ T8268]  ? __fget_files+0x3b4/0x4a0
[  534.404568][ T8268]  ? __fget_files+0x3b9/0x4a0
[  534.404784][ T8268]  ? kmsan_get_metadata+0xf1/0x160
[  534.405007][ T8268]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  534.405237][ T8268]  __x64_sys_sendmsg+0x211/0x3e0
[  534.405417][ T8268]  ? ksys_write+0x3ac/0x470
[  534.405596][ T8268]  ? kmsan_get_metadata+0xf1/0x160
[  534.405811][ T8268]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  534.406040][ T8268]  ? kmsan_get_metadata+0xf1/0x160
[  534.406244][ T8268]  ? kmsan_get_metadata+0xf1/0x160
[  534.406486][ T8268]  x64_sys_call+0x1c60/0x3e70
[  534.406680][ T8268]  do_syscall_64+0xc9/0xf80
[  534.406872][ T8268]  ? clear_bhb_loop+0x40/0x90
[  534.407055][ T8268]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  534.407221][ T8268] RIP: 0033:0x7f522d79acb9
[  534.407342][ T8268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  534.407483][ T8268] RSP: 002b:00007f522e71f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  534.407632][ T8268] RAX: ffffffffffffffda RBX: 00007f522da15fa0 RCX: 00007f522d79acb9
[  534.407752][ T8268] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 000000000000000a
[  534.407848][ T8268] RBP: 00007f522e71f090 R08: 0000000000000000 R09: 0000000000000000
[  534.407956][ T8268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  534.408052][ T8268] R13: 00007f522da16038 R14: 00007f522da15fa0 R15: 00007fffae524558
[  534.408209][ T8268]  </TASK>
[  534.667122][ T8267] loop0: detected capacity change from 0 to 512
[  535.593510][  T797] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  535.764332][ T8267] loop0: detected capacity change from 0 to 32768
[  535.881819][ T8267] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.674 (8267)
[  536.636060][ T8267] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  536.647587][ T8267] BTRFS info (device loop0): using blake2b (blake2b-256-lib) checksum algorithm
[  536.724879][ T8270] loop4: detected capacity change from 0 to 65536
[  536.740894][ T8270] xfs: Deprecated parameter 'attr2'
[  536.746368][ T8270] XFS: attr2 mount option is deprecated.
[  536.778192][  T797] usb 2-1: Using ep0 maxpacket: 16
[  536.827202][ T8270] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  536.914155][  T797] usb 2-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76
[  536.923688][  T797] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  536.933121][  T797] usb 2-1: Product: syz
[  536.937558][  T797] usb 2-1: Manufacturer: syz
[  536.942522][  T797] usb 2-1: SerialNumber: syz
[  537.077019][ T8293] loop2: detected capacity change from 0 to 2048
[  537.093600][  T797] usb 2-1: config 0 descriptor??
[  537.151476][ T8267] BTRFS info (device loop0): enabling ssd optimizations
[  537.159078][ T8267] BTRFS info (device loop0): turning on async discard
[  537.166213][ T8267] BTRFS info (device loop0): enabling free space tree
[  537.253690][ T8270] XFS (loop4): Ending clean mount
[  537.270605][ T8293] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  537.322598][ T8270] XFS (loop4): Quotacheck needed: Please wait.
[  537.326986][ T8267] netlink: 36 bytes leftover after parsing attributes in process `syz.0.674'.
[  537.360140][ T8267] tc_dump_action: action bad kind
[  537.484266][ T8293] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  537.539269][ T8270] XFS (loop4): Quotacheck: Done.
[  537.794478][ T5791] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  538.314492][  T797] usb_8dev 2-1:0.0 can0: sending command message failed
[  538.322434][  T797] usb_8dev 2-1:0.0 can0: can't get firmware version
[  538.520144][  T797] usb_8dev 2-1:0.0: probe with driver usb_8dev failed with error -22
[  538.562171][ T5782] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  538.758382][  T797] usb 2-1: USB disconnect, device number 20
[  538.859881][ T8293] Bluetooth: MGMT ver 1.23
[  539.240115][ T8313] netlink: 20 bytes leftover after parsing attributes in process `syz.1.684'.
[  540.674229][ T8325] FAULT_INJECTION: forcing a failure.
[  540.674229][ T8325] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  540.692243][ T8325] CPU: 1 UID: 0 PID: 8325 Comm: syz.1.688 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  540.692407][ T8325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  540.692503][ T8325] Call Trace:
[  540.692561][ T8325]  <TASK>
[  540.692619][ T8325]  __dump_stack+0x26/0x30
[  540.692813][ T8325]  dump_stack_lvl+0x14c/0x1c0
[  540.693025][ T8325]  dump_stack+0x1e/0x25
[  540.693201][ T8325]  should_fail_ex+0x7da/0x8a0
[  540.693439][ T8325]  should_fail+0x2a/0x40
[  540.693629][ T8325]  should_fail_usercopy+0x2e/0x40
[  540.693859][ T8325]  _copy_from_user+0x33/0x100
[  540.694070][ T8325]  ___sys_sendmsg+0x11b/0x3b0
[  540.694264][ T8325]  ? kmsan_get_metadata+0xf1/0x160
[  540.694514][ T8325]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  540.694768][ T8325]  ? __rcu_read_unlock+0x6c/0xd0
[  540.694988][ T8325]  ? __fget_files+0x3b4/0x4a0
[  540.695220][ T8325]  ? __fget_files+0x3b9/0x4a0
[  540.695469][ T8325]  ? kmsan_get_metadata+0xf1/0x160
[  540.695705][ T8325]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  540.696024][ T8325]  __x64_sys_sendmsg+0x211/0x3e0
[  540.696221][ T8325]  ? ksys_write+0x3ac/0x470
[  540.696422][ T8325]  ? kmsan_get_metadata+0xf1/0x160
[  540.696657][ T8325]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  540.696903][ T8325]  ? kmsan_get_metadata+0xf1/0x160
[  540.697132][ T8325]  ? kmsan_get_metadata+0xf1/0x160
[  540.697387][ T8325]  x64_sys_call+0x1c60/0x3e70
[  540.697611][ T8325]  do_syscall_64+0xc9/0xf80
[  540.697805][ T8325]  ? clear_bhb_loop+0x40/0x90
[  540.697997][ T8325]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  540.698175][ T8325] RIP: 0033:0x7f566299acb9
[  540.698295][ T8325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  540.698439][ T8325] RSP: 002b:00007f56638c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  540.698597][ T8325] RAX: ffffffffffffffda RBX: 00007f5662c15fa0 RCX: 00007f566299acb9
[  540.698719][ T8325] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000004
[  540.698827][ T8325] RBP: 00007f56638c6090 R08: 0000000000000000 R09: 0000000000000000
[  540.698939][ T8325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  540.699039][ T8325] R13: 00007f5662c16038 R14: 00007f5662c15fa0 R15: 00007ffe3aea9ef8
[  540.699202][ T8325]  </TASK>
[  542.144496][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  542.151519][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  542.231503][ T8323] loop2: detected capacity change from 0 to 65536
[  542.241759][ T8323] xfs: Deprecated parameter 'attr2'
[  542.247193][ T8323] XFS: attr2 mount option is deprecated.
[  542.438846][ T8323] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  542.724873][ T8323] XFS (loop2): Ending clean mount
[  542.750945][ T8323] XFS (loop2): Quotacheck needed: Please wait.
[  542.958330][ T8323] XFS (loop2): Quotacheck: Done.
[  543.465465][ T8341] loop3: detected capacity change from 0 to 32768
[  543.535173][ T8341] btrfs: Deprecated parameter 'usebackuproot'
[  543.541686][ T8341] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  543.562316][ T8341] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.690 (8341)
[  543.584139][ T8341] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  543.595016][ T8341] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm
[  543.841542][ T6900] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  543.864045][ T8341] BTRFS error (device loop3): failed to load root extent
[  543.873253][ T8341] BTRFS warning (device loop3): try to load backup roots slot 1
[  543.896504][ T6097] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  543.912932][ T8341] BTRFS warning (device loop3): couldn't read tree root
[  543.921108][ T8341] BTRFS warning (device loop3): try to load backup roots slot 2
[  543.960476][   T13] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  543.977217][ T8341] BTRFS warning (device loop3): couldn't read tree root
[  543.984586][ T8341] BTRFS warning (device loop3): try to load backup roots slot 3
[  544.103142][ T8341] BTRFS info (device loop3): rebuilding free space tree
[  544.147885][ T8341] BTRFS info (device loop3): checking UUID tree
[  544.193588][ T8341] BTRFS info (device loop3): enabling ssd optimizations
[  544.200959][ T8341] BTRFS info (device loop3): turning off barriers
[  544.208073][ T8341] BTRFS info (device loop3): turning on sync discard
[  544.215008][ T8341] BTRFS info (device loop3): enabling free space tree
[  544.222336][ T8341] BTRFS info (device loop3): force clearing of disk cache
[  544.229890][ T8341] BTRFS info (device loop3): enabling auto defrag
[  544.236543][ T8341] BTRFS info (device loop3): trying to use backup root at mount time
[  544.245607][ T8341] BTRFS info (device loop3): use zstd compression, level 3
[  544.538560][ T5786] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  544.721701][ T8362] loop0: detected capacity change from 0 to 512
[  545.469306][ T8368] netlink: 'syz.0.692': attribute type 13 has an invalid length.
[  546.119364][ T5783] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  546.681096][ T8374] netlink: 8 bytes leftover after parsing attributes in process `syz.0.697'.
[  546.788678][ T8372] loop4: detected capacity change from 0 to 512
[  546.957345][ T8372] EXT4-fs (loop4): Test dummy encryption mode enabled
[  546.964732][ T8372] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  547.114894][ T8372] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #17: comm syz.4.696: corrupted in-inode xattr: invalid ea_ino
[  547.347142][ T8372] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.696: couldn't read orphan inode 17 (err -117)
[  547.498994][ T8372] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  547.898663][   T30] audit: type=1800 audit(1769135816.199:398): pid=8372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.696" name="file2" dev="loop4" ino=16 res=0 errno=0
[  548.009640][ T8372] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  548.355041][ T8372] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.696: invalid indirect mapped block 4294967040 (level 1)
[  548.431425][ T8383] netlink: 20 bytes leftover after parsing attributes in process `syz.0.698'.
[  548.850136][ T5844] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  549.078585][ T5844] usb 5-1: Using ep0 maxpacket: 16
[  549.166705][ T5844] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  549.179592][ T5844] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  549.423711][ T5844] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  549.433481][ T5844] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  549.442048][ T5844] usb 5-1: Product: syz
[  549.446424][ T5844] usb 5-1: Manufacturer: syz
[  549.451362][ T5844] usb 5-1: SerialNumber: syz
[  549.583580][ T5844] usb 5-1: config 0 descriptor??
[  549.702839][ T5844] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  549.714611][ T5844] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class)
[  550.449564][ T5844] em28xx 5-1:0.0: unknown em28xx chip ID (0)
[  550.458150][ T5844] em28xx 5-1:0.0: Config register raw data: 0xfffffffb
[  550.474927][ T5844] em28xx 5-1:0.0: AC97 chip type couldn't be determined
[  550.482385][ T5844] em28xx 5-1:0.0: No AC97 audio processor
[  550.651160][ T5844] usb 5-1: USB disconnect, device number 25
[  550.672754][ T5791] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  550.691229][ T5844] em28xx 5-1:0.0: Disconnecting em28xx
[  550.736628][ T5844] em28xx 5-1:0.0: Freeing device
[  550.804074][ T8305] udevd[8305]: setting mode of /dev/bus/usb/005/025 to 020664 failed: No such file or directory
[  550.881541][ T8305] udevd[8305]: setting owner of /dev/bus/usb/005/025 to uid=0, gid=0 failed: No such file or directory
[  551.392586][ T8397] loop4: detected capacity change from 0 to 128
[  551.517132][ T8397] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  551.663319][ T8397] ext4 filesystem being mounted at /131/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  552.018271][ T5842] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  552.238230][ T5842] usb 3-1: Using ep0 maxpacket: 16
[  552.303244][ T8409] loop1: detected capacity change from 0 to 512
[  552.317269][ T5842] usb 3-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76
[  552.327195][ T5842] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  552.336192][ T5842] usb 3-1: Product: syz
[  552.340758][ T5842] usb 3-1: Manufacturer: syz
[  552.345595][ T5842] usb 3-1: SerialNumber: syz
[  552.530410][ T8401] loop3: detected capacity change from 0 to 4096
[  552.533052][ T5842] usb 3-1: config 0 descriptor??
[  552.615559][ T8401] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512).
[  552.678235][ T5844] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  552.883718][ T5842] usb 3-1: ignoring: not an USB2CAN converter
[  552.927985][ T5844] usb 1-1: Using ep0 maxpacket: 32
[  553.013320][ T5844] usb 1-1: config 0 has an invalid interface number: 85 but max is 0
[  553.022082][ T5844] usb 1-1: config 0 has no interface number 0
[  553.040563][ T5791] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  553.102941][ T5844] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  553.114576][ T5844] usb 1-1: config 0 interface 85 has no altsetting 0
[  553.198105][ T8402] Cannot find add_set index 2 as target
[  553.229372][ T5844] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  553.240215][ T5844] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  553.249134][ T5844] usb 1-1: Product: syz
[  553.253685][ T5844] usb 1-1: Manufacturer: syz
[  553.258710][ T5844] usb 1-1: SerialNumber: syz
[  553.361040][ T8402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  553.399908][ T5844] usb 1-1: config 0 descriptor??
[  553.415467][   T30] audit: type=1800 audit(1769135821.739:399): pid=8401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.705" name="file1" dev="loop3" ino=30 res=0 errno=0
[  553.460425][ T8402] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  553.532853][ T8402] netlink: 8 bytes leftover after parsing attributes in process `syz.2.694'.
[  553.602477][  T797] usb 3-1: USB disconnect, device number 16
[  553.683907][ T8415] netlink: 20 bytes leftover after parsing attributes in process `syz.1.709'.
[  554.176767][ T5844] appletouch 1-1:0.85: Geyser mode initialized.
[  554.215334][ T5844] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input10
[  554.443246][ T8410] netlink: 8 bytes leftover after parsing attributes in process `syz.0.706'.
[  554.453273][ T8410] netlink: 4 bytes leftover after parsing attributes in process `syz.0.706'.
[  554.462674][ T8410] netlink: 'syz.0.706': attribute type 14 has an invalid length.
[  554.686185][ T5839] usb 1-1: USB disconnect, device number 15
[  554.698746][ T5842] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  554.759495][ T8421] loop1: detected capacity change from 0 to 8
[  554.802595][ T5839] appletouch 1-1:0.85: input: appletouch disconnected
[  554.866609][ T8423] loop4: detected capacity change from 0 to 128
[  554.909186][ T8421] FAULT_INJECTION: forcing a failure.
[  554.909186][ T8421] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  554.927006][ T8421] CPU: 1 UID: 0 PID: 8421 Comm: syz.1.711 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  554.927178][ T8421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  554.927275][ T8421] Call Trace:
[  554.927337][ T8421]  <TASK>
[  554.927395][ T8421]  __dump_stack+0x26/0x30
[  554.927583][ T8421]  dump_stack_lvl+0x14c/0x1c0
[  554.927781][ T8421]  dump_stack+0x1e/0x25
[  554.927957][ T8421]  should_fail_ex+0x7da/0x8a0
[  554.928180][ T8421]  should_fail+0x2a/0x40
[  554.928282][ T5842] usb 4-1: Using ep0 maxpacket: 32
[  554.928368][ T8421]  should_fail_usercopy+0x2e/0x40
[  554.928571][ T8421]  strncpy_from_user+0x38/0x4b0
[  554.928777][ T8421]  ? kmsan_get_metadata+0xf1/0x160
[  554.929001][ T8421]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  554.929233][ T8421]  getname_flags+0x178/0xac0
[  554.929397][ T8421]  __x64_sys_rename+0x70/0x140
[  554.929552][ T8421]  x64_sys_call+0x2c5/0x3e70
[  554.929742][ T8421]  do_syscall_64+0xc9/0xf80
[  554.929935][ T8421]  ? clear_bhb_loop+0x40/0x90
[  554.930098][ T8421]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  554.930264][ T8421] RIP: 0033:0x7f566299acb9
[  554.930381][ T8421] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  554.930515][ T8421] RSP: 002b:00007f56638c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000052
[  554.930661][ T8421] RAX: ffffffffffffffda RBX: 00007f5662c15fa0 RCX: 00007f566299acb9
[  554.930771][ T8421] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000200000000580
[  554.930874][ T8421] RBP: 00007f56638c6090 R08: 0000000000000000 R09: 0000000000000000
[  554.930977][ T8421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  554.931068][ T8421] R13: 00007f5662c16038 R14: 00007f5662c15fa0 R15: 00007ffe3aea9ef8
[  554.931217][ T8421]  </TASK>
[  555.042832][ T8423] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985
[  555.060684][ T8425] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  555.069037][ T8423] ; already mounted read-only
[  555.190942][ T8423] hpfs: filesystem error: improperly stopped
[  555.197357][ T8423] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  555.206499][ T8423] hpfs: You really don't want any checks? You are crazy...
[  555.254839][ T8423] hpfs: hpfs_map_sector(): read error
[  555.261248][ T8423] hpfs: code page support is disabled
[  555.304715][ T8423] hpfs: hpfs_map_4sectors(): unaligned read
[  555.344772][ T5842] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  555.356729][ T5842] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  555.367118][ T5842] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  555.377180][ T5842] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  555.436042][ T8423] hpfs: hpfs_map_4sectors(): unaligned read
[  555.442536][ T8423] hpfs: filesystem error: unable to find root dir
[  555.556403][ T8425] bridge_slave_0: left allmulticast mode
[  555.562832][ T8425] bridge_slave_0: left promiscuous mode
[  555.570146][ T8425] bridge0: port 1(bridge_slave_0) entered disabled state
[  555.591631][ T5842] usb 4-1: config 0 descriptor??
[  555.882749][ T8425] bridge_slave_1: left allmulticast mode
[  555.894122][ T8425] bridge_slave_1: left promiscuous mode
[  555.901888][ T8425] bridge0: port 2(bridge_slave_1) entered disabled state
[  556.261383][ T8425] bond0: (slave bond_slave_0): Releasing backup interface
[  556.296288][ T5842] ft260 0003:0403:6030.0010: unknown main item tag 0x0
[  556.304622][ T5842] ft260 0003:0403:6030.0010: unknown main item tag 0x0
[  556.472330][ T8425] bond0: (slave bond_slave_1): Releasing backup interface
[  556.603990][ T5842] ft260 0003:0403:6030.0010: failed to retrieve chip version
[  556.682628][ T5842] ft260 0003:0403:6030.0010: probe with driver ft260 failed with error -71
[  556.712885][ T5842] usb 4-1: USB disconnect, device number 18
[  556.794024][ T8425] team0: Port device team_slave_0 removed
[  556.921194][ T8425] team0: Port device team_slave_1 removed
[  556.973406][ T8425] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  556.981359][ T8425] batman_adv: batadv0: Removing interface: batadv_slave_0
[  557.055238][ T8425] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  557.063351][ T8425] batman_adv: batadv0: Removing interface: batadv_slave_1
[  557.124509][ T8425] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  557.364676][ T8426] team0: Mode changed to "loadbalance"
[  557.600615][ T8438] FAULT_INJECTION: forcing a failure.
[  557.600615][ T8438] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  557.615092][ T8438] CPU: 0 UID: 0 PID: 8438 Comm: syz.3.717 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  557.615264][ T8438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  557.615363][ T8438] Call Trace:
[  557.615421][ T8438]  <TASK>
[  557.615479][ T8438]  __dump_stack+0x26/0x30
[  557.615675][ T8438]  dump_stack_lvl+0x14c/0x1c0
[  557.615871][ T8438]  dump_stack+0x1e/0x25
[  557.616054][ T8438]  should_fail_ex+0x7da/0x8a0
[  557.616289][ T8438]  should_fail+0x2a/0x40
[  557.616480][ T8438]  should_fail_usercopy+0x2e/0x40
[  557.616701][ T8438]  _copy_from_user+0x33/0x100
[  557.616902][ T8438]  ___sys_sendmsg+0x11b/0x3b0
[  557.617093][ T8438]  ? kmsan_get_metadata+0xf1/0x160
[  557.617340][ T8438]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  557.617591][ T8438]  ? __rcu_read_unlock+0x6c/0xd0
[  557.617808][ T8438]  ? __fget_files+0x3b4/0x4a0
[  557.618044][ T8438]  ? __fget_files+0x3b9/0x4a0
[  557.618278][ T8438]  ? kmsan_get_metadata+0xf1/0x160
[  557.618498][ T8438]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  557.618745][ T8438]  __x64_sys_sendmsg+0x211/0x3e0
[  557.618947][ T8438]  ? ksys_write+0x3ac/0x470
[  557.619142][ T8438]  ? kmsan_get_metadata+0xf1/0x160
[  557.619368][ T8438]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  557.619605][ T8438]  ? kmsan_get_metadata+0xf1/0x160
[  557.619831][ T8438]  ? kmsan_get_metadata+0xf1/0x160
[  557.620093][ T8438]  x64_sys_call+0x1c60/0x3e70
[  557.620306][ T8438]  do_syscall_64+0xc9/0xf80
[  557.620509][ T8438]  ? clear_bhb_loop+0x40/0x90
[  557.620686][ T8438]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  557.620863][ T8438] RIP: 0033:0x7fb521b9acb9
[  557.620995][ T8438] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  557.621140][ T8438] RSP: 002b:00007fb522a3d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  557.621300][ T8438] RAX: ffffffffffffffda RBX: 00007fb521e15fa0 RCX: 00007fb521b9acb9
[  557.621416][ T8438] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004
[  557.621522][ T8438] RBP: 00007fb522a3d090 R08: 0000000000000000 R09: 0000000000000000
[  557.621625][ T8438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  557.621725][ T8438] R13: 00007fb521e16038 R14: 00007fb521e15fa0 R15: 00007ffe20a35b08
[  557.621887][ T8438]  </TASK>
[  558.741933][ T8441] loop3: detected capacity change from 0 to 512
[  559.059818][ T8447] netlink: 20 bytes leftover after parsing attributes in process `syz.4.721'.
[  559.246182][ T8448] netlink: 112 bytes leftover after parsing attributes in process `syz.1.720'.
[  560.556560][ T8442] loop0: detected capacity change from 0 to 65536
[  560.566808][ T8442] xfs: Deprecated parameter 'attr2'
[  560.575100][ T8442] XFS: attr2 mount option is deprecated.
[  560.770272][ T8454] loop3: detected capacity change from 0 to 128
[  560.831371][ T8442] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  561.125624][ T8442] XFS (loop0): Ending clean mount
[  561.148736][ T8442] XFS (loop0): Quotacheck needed: Please wait.
[  561.255764][ T8442] XFS (loop0): Quotacheck: Done.
[  561.388106][ T5842] usb 4-1: new low-speed USB device number 19 using dummy_hcd
[  561.605737][ T5782] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  561.682181][ T5839] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  561.942940][ T5839] usb 5-1: Using ep0 maxpacket: 32
[  562.019831][ T5839] usb 5-1: config 8 has an invalid interface number: 203 but max is 0
[  562.028875][ T5839] usb 5-1: config 8 has no interface number 0
[  562.150639][ T5839] usb 5-1: config 8 interface 203 altsetting 1 has an endpoint descriptor with address 0x93, changing to 0x83
[  562.164061][ T5839] usb 5-1: config 8 interface 203 altsetting 1 bulk endpoint 0x83 has invalid maxpacket 1024
[  562.175652][ T5839] usb 5-1: config 8 interface 203 altsetting 1 endpoint 0xD has invalid maxpacket 1023, setting to 64
[  562.187304][ T5839] usb 5-1: config 8 interface 203 has no altsetting 0
[  562.454637][ T5839] usb 5-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=eb.7a
[  562.464907][ T5839] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  562.473559][ T5839] usb 5-1: Product: syz
[  562.478196][ T5839] usb 5-1: Manufacturer: syz
[  562.483146][ T5839] usb 5-1: SerialNumber: syz
[  562.763688][ T8467] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  563.122023][ T5839] port100 5-1:8.203: NFC: Could not find bulk-in or bulk-out endpoint
[  563.279807][ T5839] usb 5-1: USB disconnect, device number 26
[  567.344376][ T8516] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  567.400497][ T8519] =====================================================
[  567.408497][ T8519] BUG: KMSAN: uninit-value in pfn_reader_next+0x1d5a/0x3e50
[  567.420962][ T8519]  pfn_reader_next+0x1d5a/0x3e50
[  567.426177][ T8519]  pfn_reader_first+0xbcf/0xee0
[  567.433174][ T8519]  iopt_area_fill_domains+0x202/0x1590
[  567.439634][ T8519]  iopt_map_pages+0x1ba5/0x2130
[  567.444678][ T8519]  iopt_map_common+0x224/0x610
[  567.450332][ T8519]  iopt_map_user_pages+0x148/0x1c0
[  567.456412][ T8519]  iommufd_ioas_map+0x6a2/0x9b0
[  567.461792][ T8519]  iommufd_fops_ioctl+0x82a/0x9e0
[  567.470355][ T8519]  __se_sys_ioctl+0x23c/0x400
[  567.477320][ T8519]  __x64_sys_ioctl+0x97/0xe0
[  567.482387][ T8519]  x64_sys_call+0x18a7/0x3e70
[  567.487309][ T8519]  do_syscall_64+0xc9/0xf80
[  567.492189][ T8519]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  567.498531][ T8519] 
[  567.500954][ T8519] Local variable pfns created at:
[  567.506082][ T8519]  iopt_area_fill_domains+0x5c/0x1590
[  567.511920][ T8519]  iopt_map_pages+0x1ba5/0x2130
[  567.521722][ T8519] 
[  567.524202][ T8519] CPU: 1 UID: 0 PID: 8519 Comm: syz.0.748 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  567.536269][ T8519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  567.546628][ T8519] =====================================================
[  567.553846][ T8519] Disabling lock debugging due to kernel taint
[  567.560316][ T8519] Kernel panic - not syncing: kmsan.panic set ...
[  567.566992][ T8519] CPU: 1 UID: 0 PID: 8519 Comm: syz.0.748 Tainted: G    B               syzkaller #0 PREEMPT(voluntary) 
[  567.578458][ T8519] Tainted: [B]=BAD_PAGE
[  567.582749][ T8519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  567.592975][ T8519] Call Trace:
[  567.596386][ T8519]  <TASK>
[  567.599447][ T8519]  __dump_stack+0x26/0x30
[  567.604017][ T8519]  dump_stack_lvl+0x50/0x1c0
[  567.609035][ T8519]  ? dump_stack+0x12/0x25
[  567.613594][ T8519]  dump_stack+0x1e/0x25
[  567.617999][ T8519]  vpanic+0x435/0xd40
[  567.622233][ T8519]  panic+0x15d/0x160
[  567.626423][ T8519]  kmsan_report+0x31a/0x320
[  567.631294][ T8519]  ? __msan_warning+0x1b/0x30
[  567.636220][ T8519]  ? pfn_reader_next+0x1d5a/0x3e50
[  567.641619][ T8519]  ? pfn_reader_first+0xbcf/0xee0
[  567.646886][ T8519]  ? iopt_area_fill_domains+0x202/0x1590
[  567.652761][ T8519]  ? iopt_map_pages+0x1ba5/0x2130
[  567.657966][ T8519]  ? iopt_map_common+0x224/0x610
[  567.663183][ T8519]  ? iopt_map_user_pages+0x148/0x1c0
[  567.668774][ T8519]  ? iommufd_ioas_map+0x6a2/0x9b0
[  567.674003][ T8519]  ? iommufd_fops_ioctl+0x82a/0x9e0
[  567.679513][ T8519]  ? __se_sys_ioctl+0x23c/0x400
[  567.685045][ T8519]  ? __x64_sys_ioctl+0x97/0xe0
[  567.690205][ T8519]  ? x64_sys_call+0x18a7/0x3e70
[  567.695277][ T8519]  ? do_syscall_64+0xc9/0xf80
[  567.700170][ T8519]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  567.706621][ T8519]  ? kmsan_get_metadata+0xf1/0x160
[  567.712216][ T8519]  ? kmsan_get_metadata+0xf1/0x160
[  567.717585][ T8519]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  567.723702][ T8519]  ? pfn_reader_user_pin+0x1dac/0x20b0
[  567.729419][ T8519]  ? iopt_area_fill_domains+0x202/0x1590
[  567.735298][ T8519]  ? iopt_map_pages+0x1ba5/0x2130
[  567.740503][ T8519]  ? iopt_map_common+0x224/0x610
[  567.745617][ T8519]  ? iopt_map_user_pages+0x148/0x1c0
[  567.751084][ T8519]  ? iommufd_ioas_map+0x6a2/0x9b0
[  567.756414][ T8519]  ? iommufd_fops_ioctl+0x82a/0x9e0
[  567.761847][ T8519]  ? kmsan_get_metadata+0xf1/0x160
[  567.767227][ T8519]  __msan_warning+0x1b/0x30
[  567.771955][ T8519]  pfn_reader_next+0x1d5a/0x3e50
[  567.777162][ T8519]  ? kmsan_get_metadata+0xf1/0x160
[  567.782527][ T8519]  ? kmsan_get_metadata+0xf1/0x160
[  567.787951][ T8519]  ? kmsan_get_metadata+0xf1/0x160
[  567.793358][ T8519]  pfn_reader_first+0xbcf/0xee0
[  567.798461][ T8519]  iopt_area_fill_domains+0x202/0x1590
[  567.804245][ T8519]  ? kmsan_get_metadata+0xf1/0x160
[  567.809611][ T8519]  ? kmsan_internal_set_shadow_origin+0x7a/0x110
[  567.816194][ T8519]  ? kmsan_internal_unpoison_memory+0x14/0x20
[  567.822592][ T8519]  ? kmsan_get_metadata+0xf1/0x160
[  567.828008][ T8519]  iopt_map_pages+0x1ba5/0x2130
[  567.833163][ T8519]  iopt_map_common+0x224/0x610
[  567.838125][ T8519]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  567.844197][ T8519]  iopt_map_user_pages+0x148/0x1c0
[  567.849515][ T8519]  iommufd_ioas_map+0x6a2/0x9b0
[  567.854611][ T8519]  ? __pfx_iommufd_ioas_map+0x10/0x10
[  567.860201][ T8519]  iommufd_fops_ioctl+0x82a/0x9e0
[  567.865502][ T8519]  ? __pfx_iommufd_fops_ioctl+0x10/0x10
[  567.871273][ T8519]  __se_sys_ioctl+0x23c/0x400
[  567.876180][ T8519]  __x64_sys_ioctl+0x97/0xe0
[  567.880994][ T8519]  x64_sys_call+0x18a7/0x3e70
[  567.885898][ T8519]  do_syscall_64+0xc9/0xf80
[  567.890616][ T8519]  ? clear_bhb_loop+0x40/0x90
[  567.895502][ T8519]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  567.901681][ T8519] RIP: 0033:0x7f123499acb9
[  567.906246][ T8519] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  567.926572][ T8519] RSP: 002b:00007f1232bd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  567.935205][ T8519] RAX: ffffffffffffffda RBX: 00007f1234c16090 RCX: 00007f123499acb9
[  567.943378][ T8519] RDX: 00002000000007c0 RSI: 0000000000003b85 RDI: 0000000000000003
[  567.951499][ T8519] RBP: 00007f1234a08bf7 R08: 0000000000000000 R09: 0000000000000000
[  567.959614][ T8519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  567.967742][ T8519] R13: 00007f1234c16128 R14: 00007f1234c16090 R15: 00007ffc78a2a928
[  567.975922][ T8519]  </TASK>
[  567.979449][ T8519] Kernel Offset: disabled
[  567.983842][ T8519] Rebooting in 86400 seconds..