last executing test programs:

2m48.535399795s ago: executing program 2 (id=46):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x820000, &(0x7f0000000040)={[{@usrjquota}, {@quota}, {@acl}, {@noload}]}, 0x1, 0x7af, &(0x7f0000001300)="$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")
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = dup(r3)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000640)={0x0, 0x107000})
r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r6, 0x10c000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x2, 0x5, 0x7fff0003}]})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x68, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x4, @media='eth\x00'}}}}, 0x68}}, 0x10)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r8, 0x0)
setsockopt$inet6_group_source_req(r8, 0x29, 0x2b, &(0x7f00000011c0)={0x7, {{0xa, 0x4e24, 0x4, @private2, 0xf8d8}}, {{0xa, 0x4e21, 0x2, @dev={0xfe, 0x80, '\x00', 0x15}, 0xfff}}}, 0x108)
setsockopt$inet_mreq(r7, 0x0, 0x20, &(0x7f0000000080)={@private=0xa010101, @dev={0xac, 0x14, 0x14, 0x31}}, 0x8)

2m47.617633248s ago: executing program 2 (id=47):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000340)=ANY=[], 0x0, 0x58, 0x0, 0x0, 0x0, 0x10000}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="12000000060000"], 0x50)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e1f}, 0x6e)
accept$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000100)=0x6e)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x89b0, &(0x7f0000000140)={'vlan1\x00', &(0x7f0000000080)=@ethtool_cmd={0x0, 0x0, 0x0, 0xfff6, 0x0, 0x0, 0x0, 0xf, 0x6, 0x1, 0xfffffffe, 0x0, 0x2, 0x0, 0x44, 0x0, [0x0, 0xfffffff7]}})

2m46.474024439s ago: executing program 2 (id=50):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$kcm(0x11, 0x3, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r6)
socket$unix(0x1, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8914, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x5)

2m41.8612087s ago: executing program 2 (id=57):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6)
connect$netlink(r0, &(0x7f0000000000)=@unspec, 0xc)
bind$packet(0xffffffffffffffff, 0x0, 0x0)
epoll_create1(0x0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000002c0)='./file0\x00', 0x8000, &(0x7f0000000300)=ANY=[], 0x0, 0x2d5, &(0x7f0000000900)="$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")
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', <r3=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r1, r3, 0x25, 0x0, @void}, 0x10)
r4 = socket(0x10, 0x803, 0x0)
socket(0x2, 0xa, 0x300)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}})
ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800})

2m41.144090891s ago: executing program 2 (id=60):
unshare(0x64000600)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000021c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r0, 0x0, 0xe, 0x0, &(0x7f0000000300)="14fd54ab72df97e6256c00000000", 0x0, 0xfeff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)

2m40.343960743s ago: executing program 2 (id=66):
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0)
add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="4c12", 0x2, 0xffffffffffffffff)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, 0x0}], 0x1, 0x8, &(0x7f0000000380)=[@flags={0x3, 0x128bc4}], 0x1)
socket$igmp6(0xa, 0x3, 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x183341, 0x0)
socket(0x10, 0x3, 0x0)
ioctl$KVM_CAP_HYPERV_VP_INDEX(r1, 0x4068aea3, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003})
fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0xee01, 0x1000)
pwritev2(r2, &(0x7f00000006c0)=[{&(0x7f0000000780)="9dfb9472", 0x4}], 0x1, 0x5e, 0x2, 0x3)

2m24.852600089s ago: executing program 32 (id=66):
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0)
add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="4c12", 0x2, 0xffffffffffffffff)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, 0x0}], 0x1, 0x8, &(0x7f0000000380)=[@flags={0x3, 0x128bc4}], 0x1)
socket$igmp6(0xa, 0x3, 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x183341, 0x0)
socket(0x10, 0x3, 0x0)
ioctl$KVM_CAP_HYPERV_VP_INDEX(r1, 0x4068aea3, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003})
fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0xee01, 0x1000)
pwritev2(r2, &(0x7f00000006c0)=[{&(0x7f0000000780)="9dfb9472", 0x4}], 0x1, 0x5e, 0x2, 0x3)

2m7.291641896s ago: executing program 3 (id=184):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@flushpolicy={0x40, 0x12, 0x105, 0x4, 0x25dfdbff, "", [@address_filter={0x28, 0x1a, {@in=@local, @in=@dev={0xac, 0x14, 0x14, 0x43}, 0x2, 0x6, 0x10}}, @proto={0x5, 0x19, 0xff}]}, 0x40}, 0x13, 0x0, 0x0, 0x4000880}, 0xc4844)

2m6.895932125s ago: executing program 3 (id=187):
syz_io_uring_setup(0x4f0e, &(0x7f0000000480)={0x0, 0x0, 0x1}, 0x0, 0x0)
syz_mount_image$exfat(&(0x7f00000009c0), &(0x7f0000000000)='./file1\x00', 0x8, &(0x7f0000000400)={[{@utf8}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@dmask={'dmask', 0x3d, 0xc}}, {@iocharset={'iocharset', 0x3d, 'euc-jp'}}, {@errors_remount}, {@namecase}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@fmask={'fmask', 0x3d, 0x4fd8}}, {@time_offset={'time_offset', 0x3d, 0x6}}, {@errors_remount}]}, 0x1, 0x152b, &(0x7f0000000a00)="$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")
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
unshare(0x64000600)
socket$inet_udp(0x2, 0x2, 0x0)
inotify_init1(0x800)
pselect6(0x40, &(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x7fff}, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x0, 0x0, 0x0)

2m5.196385568s ago: executing program 3 (id=190):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffffffffffffffe)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@loopback, 0x0, 0x0, 0x4e23, 0x2, 0x2, 0x20}, {0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0xb7, 0xfffffffb, 0xfffffffe}}, 0xe8)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c)

2m4.131893989s ago: executing program 3 (id=194):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$eJzs3c9vVFsdAPDvnXZoKQMFZaFGBRFFQ5j+ABqCC2GjMYTESFy5gNoOTdMZpum0SCuLsnRvIokr/RPcuTBh5cKdO925wYUJKnkv9CVvMS/3zqUd2g7te7Qd6Hw+ye2955xhvufMcM6Ze2B6AuhZZyNiNSKORMS9iBjO85P8iButI33cq5ePp9ZePp5Kotm8878kK0/zou3PpI7lzzkYET/7ccQvk61xG8src5PVamUhT48s1uZHGssrl2YLec74xNjE6LXLV8f3rK1nan968aPZWz//y5+/8fzvq9//dVqt0m+OZ2Xt7dhLraYXo9SW1x8Rt/YjWJf0539/+PCkve1LEXEu6//D0Ze9mwDAYdZsDkdzuD0NABx26f1/KZJCOV8LKEWhUC631vBOx1ChWm8sXhyuLz2YjmwN62QUC/dnq5XRfK3wZBSTND2WXW+kxzelL0fEqYj47cDRLF2eqlenu/nBBwB62LFN8//HA635HwA45Aa7XQEA4MCZ/wGg95j/AaD3fI7537cDAeCQcP8PAL3H/A8AvWfH+f/JwdQDADgQP719Oz2aa/nvv55+uLz0g9LDS9OVxly5tjRVnqovzJdn6vWZaqU81Wzu9HzVen1+7Mp6srG8crdWX3qweHe2NjlTuVsp7nN7AICdnTrz7J9JRKxeP5od0baXg7kaDrdCtysAdE1ftysAdI3v80Dv2sU9vmUAOOS22aL3DR3/i9BTm7/Ch+rCV63/Q6+y/g+964ut//9wz+sBHDzr/9C7ms3Env8A0GOs8QPv9O//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KNK2ZEUytle4Kvpz0K5HHE8Ik5GMbk/W62MRsSJiPjHQHEgTY91u9IAwDsq/CfJ9/+6MHy+tLn0SPLJQHaOiF/9/s7vHk0uLi6Mpfn/X89ffJrnjx/pRgMAgHY3tma15un83HYj/+rl46nXx0FW8cXN1uaiady1/GiV9Ed/dh6MYkQMfZTk6Zb080rfHsRffRIRX9lo/6O2CKVsDaS18+nm+Gns4/sQf+P13xy/8Eb8QlaWnovZa/HlPagL9JpnN1vjZN730i6W979CnM3O2/f/wWyEenevx7+1LeNfYX3869sSP8n6/Nn19Ntr8uLKX3+yJbM53Cp7EvG1/u3iJ+vxkw7j7/ldtvFfX//muU5lzT9EXIjt47fUsmF2ZLE2P9JYXrk0W5ucqcxUHoyPT4xNjF67fHV8JFujbv3823Yx/nv94olO8dP2D3WIP7hD+7+zy/b/8dN7v/jWW+J/79vbv/+n3xI/nRO/u8v4k0M3Om7fncaf7tD+nd7/i7uM//zfK9O7fCgAcAAayytzk9VqZWGHi/Sz5k6PcfFhXsRqxHtQDRfv1UW3RyZgv210+m7XBAAAAAAAAAAAAAAA6KSxvDI3EPv7daJutxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDD67MAAAD//w/PzvM=")
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
open(&(0x7f0000000000)='.\x00', 0x0, 0x0)

2m3.187510063s ago: executing program 3 (id=199):
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0x4, &(0x7f0000000340)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x20048841)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
mknodat$null(0xffffffffffffff9c, 0x0, 0x1d4e, 0x103)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket(0x2, 0x3, 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240))
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080)
shutdown(r2, 0x1)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000680))
ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000340)=0x1)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x370, 0x170, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'wg0\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x3d0)
r4 = socket$inet6(0xa, 0x3, 0x101)
connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e25, 0x3, @empty, 0x7}, 0x1c)
sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0)
fallocate(r1, 0x0, 0x48, 0x1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c000900080000", @ANYRES32=r0], 0x4c}}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1m58.392113719s ago: executing program 3 (id=210):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
socket$inet6(0xa, 0x3, 0x6)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00')
preadv(r1, &(0x7f00000005c0)=[{&(0x7f0000000200)=""/241, 0xf1}], 0x1, 0xd9, 0x0)

1m57.605959381s ago: executing program 33 (id=210):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
socket$inet6(0xa, 0x3, 0x6)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00')
preadv(r1, &(0x7f00000005c0)=[{&(0x7f0000000200)=""/241, 0xf1}], 0x1, 0xd9, 0x0)

9.170483405s ago: executing program 1 (id=564):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x8001, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e)
socket$pppl2tp(0x18, 0x1, 0x1)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xf7, 0x485, &(0x7f0000001040)="$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")
r4 = socket$inet6(0xa, 0x2, 0x0)
r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r6 = dup2(r5, r5)
ioctl$sock_TIOCINQ(r6, 0x541b, 0x0)
connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e04, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0xfff9}, 0x1c)
setsockopt$inet6_buf(r4, 0x29, 0x6, 0x0, 0x0)

7.99071255s ago: executing program 1 (id=566):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x101880a, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0x550b, &(0x7f00000079c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1833c1, 0x0)
ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x2042, 0x1)
r2 = creat(&(0x7f0000000100)='./file1\x00', 0xe)
open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88)
fallocate(r2, 0x0, 0x1, 0x2000402)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x1000000000000)

7.439357146s ago: executing program 6 (id=570):
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000380)={[{@grpquota}, {@delalloc}, {@resuid}, {@test_dummy_encryption_v1}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5e1, &(0x7f0000000bc0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x184)
fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x400073, 0xffffffffffffffff})
linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000)

6.243554664s ago: executing program 0 (id=573):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e20, @multicast1}, 0x4, 0x0, 0x3}}, 0x26)

6.015370355s ago: executing program 6 (id=574):
r0 = io_uring_setup(0x4822, &(0x7f0000000180)={0x0, 0x0, 0x40})
r1 = fsopen(&(0x7f0000000140)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x9)
fchdir(r2)
open(&(0x7f0000000140)='.\x00', 0x8000, 0x112)
close_range(r0, 0xffffffffffffffff, 0x0)

5.811223939s ago: executing program 4 (id=576):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x8001, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e)
socket$pppl2tp(0x18, 0x1, 0x1)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xf7, 0x485, &(0x7f0000001040)="$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")
r4 = socket$inet6(0xa, 0x2, 0x0)
r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r6 = dup2(r5, r5)
ioctl$sock_TIOCINQ(r6, 0x541b, 0x0)
connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e04, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0xfff9}, 0x1c)
setsockopt$inet6_buf(r4, 0x29, 0x6, 0x0, 0x0)

5.744063665s ago: executing program 0 (id=577):
r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x8c0002)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000000)=0x1)

4.609514362s ago: executing program 0 (id=578):
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1)
faccessat2(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x2, 0x1000)

4.608988589s ago: executing program 6 (id=579):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_LAPIC(r2, 0x8400ae8e, &(0x7f0000000540))

4.608301816s ago: executing program 4 (id=580):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r0)
sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000001b80)={0x14, r1, 0xa05, 0x70bd2b, 0x25dfdbfb}, 0x14}}, 0x5c004)

4.607760395s ago: executing program 5 (id=581):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x756, &(0x7f00000002c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x100, 0x62)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40086610, &(0x7f00000004c0)={@desc={0x1, 0x0, @desc3}})

4.501619338s ago: executing program 4 (id=582):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200001004000b"], 0x24}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a00000000000000040004"], 0x1c}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)

4.450317139s ago: executing program 0 (id=583):
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0)
syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000180)='./file2\x00', 0x8084, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xfe, 0x16b, &(0x7f0000000600)="$eJzs20GrElEUB/Azab73avPW0WKgTSupVi2LeEE0UBQualVgbTSE3Eyt/BSt+4JBuGrVDZ3QEkWknJHn77fxwB+958rMXO7AfXPzw6A/Gr8fPZ/GaZZF+0Hk8TOL87gSrahMAgC4TH6kFN9TSulkEmdfI6XUdEcAwL5Z/wHg+Gxd/+831BgAsDf2/wBwfF6+ev30YVFcvMjz04hvk7JX9qrPKn/8pLi4k8+dL781Lctea5HfrfL87/xqXPud31ubd+L2rSqfZY+eFSv59ejvf/oAAABwFLr5wtr9fbe7Ka+qP94PrOzf23GjXds0AIAdjD99HrwdDt99rKE4m4+Y1TvobsWXBv6Wgy1acRBtKLYWs0v2f/9yk08loA7Lm77pTgAAAAAAAAAAAAAAgE3+8ahQJyLWRBGdbScLTmqfKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACz8CgAA//9vQEW+")
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, r0, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
recvfrom(r4, 0x0, 0x0, 0x2100, 0x0, 0x0)

4.427551935s ago: executing program 6 (id=584):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f0000001140)=ANY=[@ANYBLOB="7379735f696d6d757461626c652c757466383d312c696f636861727365743d61736369692c73686f72746e616d653d77696e39352c73686f77657865632c6e66732c636865636b3d7374726963742c756e695f786c6174653d302c757466383d312c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c726f6469722c726f6469722c64656275672c757466383d302c726f6469722c71756965742c6572726f72733d72656d6f756e742d726f2c009c8a8fc4f74784ad79ec08fb556262ebc972ef94821f3565ef5f75f11e30ef1f72a065c510b17cae352940538b7b2c5d72f4627c25306b2479725add28f511a68f5f6f47f9facdd0cc574286d00ab52d6b9374b6a58eac694336ebe971f41860d01084c1a0fa6b51d80fa9f9d2c5a2e7a5284f93296217ef8f28e0a36e573296a0bfb38b94191f4b82873563f3759b5e193ecfab6ed7892542364757e47d656ad6a0fbb6e8bf138bddae620a3602991821d4844f628e6bdd8b62cca73744332f0185a54b", @ANYRES8, @ANYRESOCT, @ANYRESOCT, @ANYRESDEC], 0x6, 0x2c1, &(0x7f0000001880)="$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")
openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1)
r0 = inotify_init()
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r1}, 0x48)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x7, 0x3, &(0x7f00000000c0)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa8}}, &(0x7f0000000000)='GPL\x00'}, 0x94)
inotify_add_watch(r0, &(0x7f0000000180)='./file0\x00', 0x449)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)="3f2319b9a3dd4c03d3a180bb9669fab5111219daa50702cfc56f5fdda1485a62d3d13e95cd488a96ec6ca2df747840ba7def24b67f66ff56297706d26bf70f71034f93458346f45048b45948d1f6eb8b223b916574e58d759462174ef22482881fe1ac1d8ee22e344d2444167aac2ee6", &(0x7f0000001b80), 0x5, r2, 0x4}, 0x38)
r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x198)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x40047211, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x40000, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x2)
readv(r4, &(0x7f0000000000), 0x0)
socket(0x10, 0x3, 0x0)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xf, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000003f00000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000000f000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

4.037996896s ago: executing program 1 (id=585):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000f000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000300)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b8000000000f23c00f21f835010003000f23f8ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x4b}], 0x1, 0x3b, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000140)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x36, 0x40000000788, 0x80000000002, 0x183, 0x400000004, 0x0, 0xee, 0x80000001, 0x100000000, 0x1000045, 0x10000, 0x9, 0xf, 0xfffffffffffffffd, 0x0, 0xab], 0x8000000, 0x3c4210})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3.927977909s ago: executing program 5 (id=586):
r0 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_pauseparam={0x8, 0x10, 0x80000000, 0x5}})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x37}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x70)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x284082, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sysvipc/shm\x00', 0x1800, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_open_procfs$pagemap(0x0, &(0x7f0000000140))
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0)
link(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00')
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x1, 0xfffffffc, @rand_addr=' \x01\x00', 0xe79}, 0x1c)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x4}, @const={0x0, 0x0, 0x0, 0x4}, @func_proto={0x2, 0x0, 0x0, 0x12, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x54}, 0x20)

3.79886585s ago: executing program 6 (id=587):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@can_newroute={0x14c, 0x18, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@CGW_CS_CRC8={0x11e, 0x6, {0xfb, 0x60, 0x3, 0x9, 0xff, "71ec6d721744cd5200080000f8cfcad402006511ec028c7028564a9ce83afe1cc93e15e556c2baed7f897fe841c155a2b2a4b9f3052995cdf66a9c7922ff0300005b6c67281f1519cd7c32c2bf7563b9452575505da99ea128d37616896be8764a2c78edbad5bde7a5e405bdc893770338925f824bd24689c0d11a5560fc3aaa9ad0d7766d8ea8d3bf1006e3df494e2f373148ecb4adafdd39874e9808b118301f1e76054a64c6d243523f5de7b347f3b740e105d090b3bcd4cbed5f1cfe93cff41a9630802f96defe9e8ea850529827c5e301953a8abaafa1f121e590f74e28233f4129d458ec5d42c3ef0619022c00", 0x3, "5c8d6e6b2a88d818b56de5b2ea00"}}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x0, 0x1}, 0x0, 0x5, 0x0, 0x0, '\t\x00'}, 0x5}}]}, 0x14c}}, 0x40000)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="320a050023080000240012800b000100627269646765000014000280060009000600000006000600ea3700000500110001"], 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x40000)
r3 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r3, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)
socket$netlink(0x10, 0x3, 0x8000000004)
r4 = getpgid(0xffffffffffffffff)
sched_setscheduler(r4, 0x6, &(0x7f0000000100)=0x8)
mount$tmpfs(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000080), 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB='inode32='])
syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000102505a1a44000000001010902440001fd00000009040000ff0202ffff052406000005240000000d240f010000000000000000000905810320000000000905820220000000000905030208"], 0x0)

3.041131159s ago: executing program 4 (id=588):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0x4000, 0x4, 0x5, 0x0, 0x8, 0x3, 0xa, 0x7e, 0x4, 0x11, 0x5, 0x80204}, {0x804, 0x1, 0x1, 0x45, 0x7, 0x15, 0x4, 0x3, 0x10, 0xfe, 0x6, 0x7f, 0x210}, {0x1, 0x3, 0x24, 0x4, 0x6, 0x7, 0x3, 0x50, 0xfd, 0x70, 0x4, 0x5, 0x4}], 0x81})
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r3 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000090000003000038014000200736974"], 0x44}}, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2.691119428s ago: executing program 5 (id=589):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r0, 0x400448de, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x20044000)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
ptrace$pokeuser(0x6, r4, 0x388, 0x41d9fda7)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000440)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug}, {@block_validity}, {@errors_remount}, {@debug}]}, 0x1, 0x44f, &(0x7f0000000640)="$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")
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00'})
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r5, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x8c1)
syz_genetlink_get_family_id$nfc(&(0x7f0000000400), 0xffffffffffffffff)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x35, &(0x7f0000000100)=0x1, 0x4)

2.407547999s ago: executing program 6 (id=590):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c000}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0xfffffffffffffed6, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000000)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r0, &(0x7f0000004d00), 0x7fffffffffffd33, 0x20000890)

1.177026262s ago: executing program 34 (id=590):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c000}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0xfffffffffffffed6, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000000)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r0, &(0x7f0000004d00), 0x7fffffffffffd33, 0x20000890)

1.172501807s ago: executing program 0 (id=592):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x5c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1a29c}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1003d1, 0x3, 0x20000000, 0x6, 0x86}, 0x69}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc804}, 0x2)
close(r1)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)="27030200dc0f14000e00003c0ff000000000ff840000000200000003125ce882cbf490d908f1523f0000", 0x2a}, {&(0x7f0000002680)="76e69c0141b4", 0x6}], 0x2}, 0x4005)

1.171926621s ago: executing program 1 (id=593):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x8000000, 0x9, 0x10001, 0xfffffffd, 0x0, [{0x2, 0x4, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x2, '\x00', 0xb}, {0xff, 0x7f, 0xd3, '\x00', 0x67}, {0x0, 0x2, 0xf5, '\x00', 0xf}, {0x1, 0x9, 0xc, '\x00', 0xfb}, {0x0, 0x52, 0x54, '\x00', 0xff}, {0x71, 0xd5, 0xf1, '\x00', 0x7f}, {0x3, 0x4, 0xc}, {0x7f, 0x5, 0xb, '\x00', 0x8}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x7, '\x00', 0x10}, {0x40, 0x1, 0x5, '\x00', 0x1}, {0xfe, 0x3, 0x26}, {0xcf, 0x3, 0x1, '\x00', 0x6}, {0xf, 0xee, 0xa, '\x00', 0x3}, {0x39, 0x8, 0x6, '\x00', 0x8}, {0x3f, 0x6, 0x1, '\x00', 0x8}, {0x9, 0xc, 0x5, '\x00', 0xc}, {0x7, 0x1, 0x7}, {0x0, 0x80, 0x1, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x6, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4, '\x00', 0x8}]}})

1.169333815s ago: executing program 5 (id=594):
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000400)={r0, &(0x7f0000000340), 0x0}, 0x20)

1.168881006s ago: executing program 4 (id=595):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x100, 0x62)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40086610, &(0x7f00000004c0)={@desc={0x1, 0x0, @desc3}})
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000f, 0x204031, 0xffffffffffffffff, 0x5475b000)
syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x406, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000140))
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b8, 0x118, 0x2b8, 0x0, 0x0, 0x6000000, 0x220, 0x3a8, 0x3a8, 0x220, 0x3a8, 0x3, 0x0, {[{{@ipv6={@mcast1, @dev={0xfe, 0x80, '\x00', 0xb}, [0xffffff00], [0x0, 0xffffffff], 'virt_wifi0\x00', 'syzkaller1\x00', {}, {}, 0x60, 0x0, 0x0, 0x8}, 0x0, 0xd0, 0x118, 0x0, {0xd2030000}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x80000002, 0x0, 'snmp\x00', {0xbe1}}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @loopback, [0xffffffff, 0xffffffff, 0xffffff00, 0xff000000], [0xff, 0xff000000, 0xffffffff, 0xff000000], 'veth1_to_hsr\x00', 'netdevsim0\x00', {}, {0xff}, 0x32, 0x2, 0x3, 0x20}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x18, 0x8, 0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x318)

981.030318ms ago: executing program 5 (id=596):
prlimit64(0x0, 0xe, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8)
r1 = gettid()
timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

852.205819ms ago: executing program 1 (id=597):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000140)={[{@debug}, {@delalloc}, {@inlinecrypt}, {@test_dummy_encryption}, {@errors_continue}, {@errors_continue}, {@delalloc}, {@nouser_xattr}]}, 0x1, 0xbc8, &(0x7f0000002380)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f0000000280)='./file0\x00')
truncate(&(0x7f0000000040)='./file1\x00', 0x10000000007)
syz_open_procfs(0x0, 0x0)

327.297605ms ago: executing program 0 (id=598):
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002bc0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
r1 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4ea4, 0x20000, @local, 0x9}, 0x1c)
sendmsg(r1, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x578}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)

106.011653ms ago: executing program 1 (id=599):
r0 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_pauseparam={0x8, 0x10, 0x80000000, 0x5}})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x37}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x70)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x284082, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sysvipc/shm\x00', 0x1800, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_open_procfs$pagemap(0x0, &(0x7f0000000140))
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0)
link(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00')
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x1, 0xfffffffc, @rand_addr=' \x01\x00', 0xe79}, 0x1c)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x4}, @const={0x0, 0x0, 0x0, 0x4}, @func_proto={0x2, 0x0, 0x0, 0x12, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x54}, 0x20)

92.259003ms ago: executing program 5 (id=600):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@can_newroute={0x14c, 0x18, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@CGW_CS_CRC8={0x11e, 0x6, {0xfb, 0x60, 0x3, 0x9, 0xff, "71ec6d721744cd5200080000f8cfcad402006511ec028c7028564a9ce83afe1cc93e15e556c2baed7f897fe841c155a2b2a4b9f3052995cdf66a9c7922ff0300005b6c67281f1519cd7c32c2bf7563b9452575505da99ea128d37616896be8764a2c78edbad5bde7a5e405bdc893770338925f824bd24689c0d11a5560fc3aaa9ad0d7766d8ea8d3bf1006e3df494e2f373148ecb4adafdd39874e9808b118301f1e76054a64c6d243523f5de7b347f3b740e105d090b3bcd4cbed5f1cfe93cff41a9630802f96defe9e8ea850529827c5e301953a8abaafa1f121e590f74e28233f4129d458ec5d42c3ef0619022c00", 0x3, "5c8d6e6b2a88d818b56de5b2ea00"}}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x0, 0x1}, 0x0, 0x5, 0x0, 0x0, '\t\x00'}, 0x5}}]}, 0x14c}}, 0x40000)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="320a050023080000240012800b000100627269646765000014000280060009000600000006000600ea3700000500110001"], 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x40000)
r3 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r3, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)
r4 = socket$netlink(0x10, 0x3, 0x8000000004)
getpgid(0xffffffffffffffff)
writev(r4, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)
mount$tmpfs(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000080), 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB='inode32='])
syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000102505a1a44000000001010902440001fd00000009040000ff0202ffff052406000005240000000d240f010000000000000000000905810320000000000905820220000000000905030208"], 0x0)

0s ago: executing program 4 (id=601):
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0)
syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000180)='./file2\x00', 0x8084, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xfe, 0x16b, &(0x7f0000000600)="$eJzs20GrElEUB/Azab73avPW0WKgTSupVi2LeEE0UBQualVgbTSE3Eyt/BSt+4JBuGrVDZ3QEkWknJHn77fxwB+958rMXO7AfXPzw6A/Gr8fPZ/GaZZF+0Hk8TOL87gSrahMAgC4TH6kFN9TSulkEmdfI6XUdEcAwL5Z/wHg+Gxd/+831BgAsDf2/wBwfF6+ev30YVFcvMjz04hvk7JX9qrPKn/8pLi4k8+dL781Lctea5HfrfL87/xqXPud31ubd+L2rSqfZY+eFSv59ejvf/oAAABwFLr5wtr9fbe7Ka+qP94PrOzf23GjXds0AIAdjD99HrwdDt99rKE4m4+Y1TvobsWXBv6Wgy1acRBtKLYWs0v2f/9yk08loA7Lm77pTgAAAAAAAAAAAAAAgE3+8ahQJyLWRBGdbScLTmqfKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACz8CgAA//9vQEW+")
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, r0, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
recvfrom(r4, 0x0, 0x0, 0x2100, 0x0, 0x0)

kernel console output (not intermixed with test programs):

 number 2
[  105.912120][ T5856] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.215484][ T6145] loop3: detected capacity change from 0 to 512
[  107.233275][ T6145] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  108.129657][   T30] audit: type=1326 audit(1773716946.647:3): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=6133 comm="syz.3.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78e539c799 code=0x7ffc0000
[  108.191514][   T30] audit: type=1326 audit(1773716946.647:4): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=6133 comm="syz.3.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78e539c799 code=0x7ffc0000
[  108.638181][   T30] audit: type=1326 audit(1773716946.657:5): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=6133 comm="syz.3.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78e539c799 code=0x7ffc0000
[  108.939226][   T30] audit: type=1326 audit(1773716946.657:6): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=6133 comm="syz.3.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78e539c799 code=0x7ffc0000
[  109.929806][   T30] audit: type=1326 audit(1773716946.657:7): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=6133 comm="syz.3.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78e539c799 code=0x7ffc0000
[  109.952216][   T30] audit: type=1326 audit(1773716946.657:8): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=6133 comm="syz.3.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f78e539c799 code=0x7ffc0000
[  110.184534][   T30] audit: type=1326 audit(1773716946.677:9): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=6133 comm="syz.3.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78e539c799 code=0x7ffc0000
[  110.368607][   T30] audit: type=1326 audit(1773716946.677:10): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=6133 comm="syz.3.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78e539c799 code=0x7ffc0000
[  110.579521][ T6158] loop3: detected capacity change from 0 to 256
[  110.592902][   T30] audit: type=1326 audit(1773716946.697:11): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=6133 comm="syz.3.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f78e539c799 code=0x7ffc0000
[  110.653283][ T6158] exfat: Deprecated parameter 'utf8'
[  110.681154][ T6160] loop4: detected capacity change from 0 to 512
[  110.699013][ T6158] exfat: Deprecated parameter 'utf8'
[  110.729075][ T6158] exfat: Deprecated parameter 'utf8'
[  110.742927][ T6160] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  110.761520][   T30] audit: type=1326 audit(1773716946.697:12): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=6133 comm="syz.3.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78e539c799 code=0x7ffc0000
[  110.786438][ T6162] loop2: detected capacity change from 0 to 256
[  110.814828][ T6160] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  110.836528][ T6160] EXT4-fs (loop4): SIPHASH is not a valid default hash value
[  110.964343][ T6162] syz.2.57 uses obsolete (PF_INET,SOCK_PACKET)
[  111.301215][ T6046] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  111.491234][ T6046] usb 5-1: Using ep0 maxpacket: 32
[  111.504260][ T6046] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  111.521564][ T6046] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  111.546701][ T6046] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  111.559120][ T6046] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  111.594333][ T6046] usb 5-1: config 0 descriptor??
[  111.611341][ T6046] hub 5-1:0.0: USB hub found
[  111.809336][ T6046] hub 5-1:0.0: 1 port detected
[  112.137857][ T6186] mmap: syz.3.61 (6186) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  112.419581][ T6046] hub 5-1:0.0: hub_ext_port_status failed (err = -71)
[  112.448201][ T6046] usb 5-1: USB disconnect, device number 3
[  112.467713][   T63] usb 5-1: Failed to suspend device, error -19
[  112.713559][ T6177] loop0: detected capacity change from 0 to 40427
[  112.742016][ T6177] F2FS-fs (loop0): Small segment_count (9 < 1 * 24)
[  112.757193][ T6177] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  113.025955][ T6177] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  113.088866][ T6177] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  113.106696][ T6177] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  113.404732][ T6192] loop1: detected capacity change from 0 to 40427
[  114.061449][ T6192] F2FS-fs (loop1): invalid crc value
[  114.351809][ T5846] syz-executor: attempt to access beyond end of device
[  114.351809][ T5846] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  114.437687][ T5846] CPU: 0 UID: 0 PID: 5846 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  114.437718][ T5846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  114.437740][ T5846] Call Trace:
[  114.437752][ T5846]  <TASK>
[  114.437762][ T5846]  dump_stack_lvl+0xe8/0x150
[  114.437802][ T5846]  f2fs_handle_critical_error+0x37c/0x540
[  114.437841][ T5846]  f2fs_write_end_io+0x1274/0x1740
[  114.437902][ T5846]  __submit_merged_bio+0x256/0x700
[  114.437941][ T5846]  __submit_merged_write_cond+0x3c9/0x4e0
[  114.437982][ T5846]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  114.438045][ T5846]  f2fs_write_data_pages+0x287e/0x34f0
[  114.438125][ T5846]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  114.438174][ T5846]  ? unwind_get_return_address+0x4d/0x90
[  114.438197][ T5846]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  114.438267][ T5846]  ? check_noncircular+0xda/0x150
[  114.438303][ T5846]  ? lockdep_unlock+0x5d/0xd0
[  114.438331][ T5846]  ? __lock_acquire+0x146e/0x2cf0
[  114.438394][ T5846]  ? do_raw_spin_lock+0x12b/0x2f0
[  114.438437][ T5846]  ? do_raw_spin_unlock+0xf5/0x210
[  114.438466][ T5846]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  114.438501][ T5846]  do_writepages+0x32e/0x550
[  114.438541][ T5846]  ? do_raw_spin_unlock+0xf5/0x210
[  114.438575][ T5846]  filemap_fdatawrite+0x1e9/0x2f0
[  114.438608][ T5846]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  114.438693][ T5846]  ? do_raw_spin_unlock+0xf5/0x210
[  114.438727][ T5846]  f2fs_sync_dirty_inodes+0x30e/0x860
[  114.438781][ T5846]  f2fs_write_checkpoint+0x9df/0x26a0
[  114.438845][ T5846]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  114.438934][ T5846]  kill_f2fs_super+0x314/0x720
[  114.438977][ T5846]  ? __pfx_kill_f2fs_super+0x10/0x10
[  114.439027][ T5846]  ? lockdep_hardirqs_on+0x7a/0x110
[  114.439071][ T5846]  deactivate_locked_super+0xbc/0x130
[  114.439107][ T5846]  cleanup_mnt+0x437/0x4d0
[  114.439129][ T5846]  ? _raw_spin_unlock_irq+0x23/0x50
[  114.439157][ T5846]  task_work_run+0x1d9/0x270
[  114.439190][ T5846]  ? __pfx_task_work_run+0x10/0x10
[  114.439233][ T5846]  exit_to_user_mode_loop+0xed/0x480
[  114.439270][ T5846]  ? rcu_is_watching+0x15/0xb0
[  114.439298][ T5846]  do_syscall_64+0x32d/0xf80
[  114.439323][ T5846]  ? trace_irq_disable+0x3b/0x150
[  114.439350][ T5846]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.439372][ T5846]  ? clear_bhb_loop+0x40/0x90
[  114.439400][ T5846]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.439422][ T5846] RIP: 0033:0x7fe06439d9d7
[  114.439448][ T5846] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  114.439465][ T5846] RSP: 002b:00007fff98e9ed08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  114.439488][ T5846] RAX: 0000000000000000 RBX: 00007fe064432050 RCX: 00007fe06439d9d7
[  114.439502][ T5846] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff98e9edc0
[  114.439516][ T5846] RBP: 00007fff98e9edc0 R08: 00007fff98e9fdc0 R09: 00000000ffffffff
[  114.439530][ T5846] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff98e9fe50
[  114.439544][ T5846] R13: 00007fe064432050 R14: 000000000001bdac R15: 00007fff98e9fe90
[  114.439582][ T5846]  </TASK>
[  114.675690][ T6192] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  114.775818][ T5846] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  114.800669][ T6192] F2FS-fs (loop1): Start checkpoint disabled!
[  114.825943][ T6192] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0
[  114.863743][ T6192] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  116.386882][ T6217] 0: reclassify loop, rule prio 0, protocol 700
[  117.255911][ T6229] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  117.384406][ T6229] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type
[  117.395768][ T6229] overlayfs: failed to look up (tracing) for ino (-66)
[  118.785468][ T6238] loop3: detected capacity change from 0 to 512
[  118.799228][ T6238] EXT4-fs: Ignoring removed mblk_io_submit option
[  118.806641][ T6238] ext3: Unknown parameter 'context'
[  118.874465][ T6238] tipc: Failed to remove unknown binding: 66,1,1/0:3186158374/3186158376
[  118.884334][ T6238] tipc: Failed to remove unknown binding: 66,1,1/0:3186158374/3186158376
[  119.682084][ T6240] syzkaller0: entered promiscuous mode
[  119.700036][ T6240] syzkaller0: entered allmulticast mode
[  121.224666][ T6256] 0: reclassify loop, rule prio 0, protocol 700
[  121.300794][   T29] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  121.355647][ T6248] loop0: detected capacity change from 0 to 40427
[  121.378919][ T6248] F2FS-fs (loop0): invalid crc value
[  121.489637][   T29] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  121.509051][ T6248] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  121.522703][ T6248] F2FS-fs (loop0): Start checkpoint disabled!
[  121.527928][   T29] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  121.541664][ T6248] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0
[  121.555113][ T6248] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  121.562338][   T29] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  121.589439][ T6244] loop1: detected capacity change from 0 to 40427
[  121.597058][   T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  121.615974][   T29] usb 4-1: SerialNumber: syz
[  121.623293][ T6244] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  121.634838][ T6244] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  121.871399][   T29] usb 4-1: 0:2 : does not exist
[  121.879179][ T6244] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  121.901090][   T29] usb 4-1: unit 1 not found!
[  121.907459][   T29] usb 4-1: unit 124 not found!
[  121.918739][ T6244] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  121.929514][   T29] usb 4-1: unit 8 not found!
[  121.943085][ T6244] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  122.019563][   T29] usb 4-1: USB disconnect, device number 3
[  122.077301][ T5902] udevd[5902]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  122.433318][ T6268] syz.0.85: attempt to access beyond end of device
[  122.433318][ T6268] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  122.823537][ T6275] syz.4.92 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  122.839899][ T6275] loop4: detected capacity change from 0 to 256
[  122.851600][ T6275] vfat: Bad value for 'shortname'
[  122.926402][ T1024] kworker/u8:8: attempt to access beyond end of device
[  122.926402][ T1024] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  122.945247][ T1024] CPU: 0 UID: 0 PID: 1024 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) 
[  122.945272][ T1024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  122.945282][ T1024] Workqueue: writeback wb_workfn (flush-7:0)
[  122.945317][ T1024] Call Trace:
[  122.945324][ T1024]  <TASK>
[  122.945333][ T1024]  dump_stack_lvl+0xe8/0x150
[  122.945366][ T1024]  f2fs_handle_critical_error+0x37c/0x540
[  122.945397][ T1024]  f2fs_write_end_io+0x1274/0x1740
[  122.945443][ T1024]  __submit_merged_bio+0x256/0x700
[  122.945475][ T1024]  __submit_merged_write_cond+0x3c9/0x4e0
[  122.945506][ T1024]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  122.945550][ T1024]  f2fs_write_data_pages+0x287e/0x34f0
[  122.945607][ T1024]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  122.945648][ T1024]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  122.945696][ T1024]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  122.945752][ T1024]  ? __lock_acquire+0x6b5/0x2cf0
[  122.945793][ T1024]  ? __pfx_f2fs_inode_chksum_set+0x10/0x10
[  122.945819][ T1024]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  122.945852][ T1024]  do_writepages+0x32e/0x550
[  122.945884][ T1024]  ? reacquire_held_locks+0x104/0x190
[  122.945905][ T1024]  ? writeback_sb_inodes+0x477/0x1a20
[  122.945935][ T1024]  __writeback_single_inode+0x133/0x11a0
[  122.945962][ T1024]  ? do_raw_spin_unlock+0xf5/0x210
[  122.945990][ T1024]  writeback_sb_inodes+0x992/0x1a20
[  122.946032][ T1024]  ? do_raw_spin_unlock+0xf5/0x210
[  122.946073][ T1024]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  122.946097][ T1024]  ? do_raw_spin_lock+0x12b/0x2f0
[  122.946162][ T1024]  ? rcu_is_watching+0x15/0xb0
[  122.946190][ T1024]  wb_writeback+0x456/0xb70
[  122.946222][ T1024]  ? queue_io+0x251/0x4a0
[  122.946258][ T1024]  ? __pfx_wb_writeback+0x10/0x10
[  122.946280][ T1024]  ? do_raw_spin_lock+0x12b/0x2f0
[  122.946316][ T1024]  wb_workfn+0x414/0xf50
[  122.946339][ T1024]  ? look_up_lock_class+0x57/0x110
[  122.946373][ T1024]  ? __pfx_wb_workfn+0x10/0x10
[  122.946396][ T1024]  ? do_raw_spin_lock+0x12b/0x2f0
[  122.946422][ T1024]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  122.946464][ T1024]  ? process_one_work+0x8bb/0x1780
[  122.946493][ T1024]  process_one_work+0x9ab/0x1780
[  122.946544][ T1024]  ? __pfx_process_one_work+0x10/0x10
[  122.946572][ T1024]  ? do_raw_spin_lock+0x12b/0x2f0
[  122.946612][ T1024]  worker_thread+0xba8/0x11e0
[  122.946639][ T1024]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  122.946661][ T1024]  ? __kthread_parkme+0x7a/0x1f0
[  122.946681][ T1024]  ? __kthread_parkme+0x19c/0x1f0
[  122.946706][ T1024]  kthread+0x388/0x470
[  122.946741][ T1024]  ? __pfx_worker_thread+0x10/0x10
[  122.946758][ T1024]  ? __pfx_kthread+0x10/0x10
[  122.946784][ T1024]  ret_from_fork+0x51e/0xb90
[  122.946818][ T1024]  ? __pfx_ret_from_fork+0x10/0x10
[  122.946849][ T1024]  ? __switch_to+0xc7d/0x1450
[  122.946881][ T1024]  ? __pfx_kthread+0x10/0x10
[  122.946908][ T1024]  ret_from_fork_asm+0x1a/0x30
[  122.946948][ T1024]  </TASK>
[  123.041914][ T6277] netlink: 'syz.4.92': attribute type 5 has an invalid length.
[  123.059334][ T1024] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  123.299473][ T6279] overlay: Unknown parameter 'eyring'
[  123.654496][ T6283] netlink: 'syz.4.95': attribute type 1 has an invalid length.
[  123.680501][ T6273] loop3: detected capacity change from 0 to 40427
[  123.707320][ T6273] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  123.734331][ T6273] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  123.970130][ T6273] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  124.014652][ T6273] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  124.048101][ T6273] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  124.154755][   T30] kauditd_printk_skb: 1 callbacks suppressed
[  124.154774][   T30] audit: type=1800 audit(1773716962.717:14): pid=6273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.91" name="bus" dev="loop3" ino=10 res=0 errno=0
[  124.880348][   T30] audit: type=1804 audit(1773716963.447:15): pid=6295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.91" name="/newroot/25/file0/bus" dev="loop3" ino=10 res=1 errno=0
[  125.104772][ T5843] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix.
[  125.136207][ T5843] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix.
[  125.164650][ T5843] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix.
[  125.194843][ T5843] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix.
[  125.218434][ T6300] 0: reclassify loop, rule prio 0, protocol 700
[  125.225927][ T5843] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix.
[  125.247871][ T5843] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix.
[  125.266247][ T5843] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix.
[  126.522818][ T6320] netlink: 'syz.0.107': attribute type 1 has an invalid length.
[  126.573381][ T6320] vlan1: entered promiscuous mode
[  126.584629][ T6320] vlan1: entered allmulticast mode
[  126.604408][ T6320] veth0_vlan: entered allmulticast mode
[  126.771949][ T6034] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  126.960086][ T6034] usb 4-1: Using ep0 maxpacket: 32
[  126.973310][ T6034] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  126.994806][ T6034] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  127.019504][ T6034] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  127.046932][ T6034] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  127.086990][ T6034] usb 4-1: config 0 descriptor??
[  127.116153][ T6034] hub 4-1:0.0: USB hub found
[  127.315434][ T6034] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19)
[  127.728672][ T6034] usbhid 4-1:0.0: can't add hid device: -71
[  127.751919][ T6034] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  127.776727][ T5860] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  127.791536][ T5860] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  127.800582][ T5860] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  127.810694][ T5860] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  127.818456][ T5860] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  127.885331][ T6034] usb 4-1: USB disconnect, device number 4
[  128.603917][ T6331] chnl_net:caif_netlink_parms(): no params data found
[  128.653866][ T6361] netlink: 'syz.4.118': attribute type 3 has an invalid length.
[  129.011423][ T6360] syzkaller0: entered promiscuous mode
[  129.017241][ T6360] syzkaller0: entered allmulticast mode
[  129.920037][ T5860] Bluetooth: hci5: command tx timeout
[  129.986450][ T6331] bridge0: port 1(bridge_slave_0) entered blocking state
[  130.013477][ T6331] bridge0: port 1(bridge_slave_0) entered disabled state
[  130.025063][ T6331] bridge_slave_0: entered allmulticast mode
[  130.041357][ T6331] bridge_slave_0: entered promiscuous mode
[  130.089237][ T6331] bridge0: port 2(bridge_slave_1) entered blocking state
[  130.113225][ T6331] bridge0: port 2(bridge_slave_1) entered disabled state
[  130.134895][ T6331] bridge_slave_1: entered allmulticast mode
[  130.154351][ T6331] bridge_slave_1: entered promiscuous mode
[  130.268037][ T6331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  130.976406][   T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  130.992963][ T6331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  131.066217][ T6331] team0: Port device team_slave_0 added
[  131.084803][ T6331] team0: Port device team_slave_1 added
[  131.131211][   T10] usb 5-1: Using ep0 maxpacket: 32
[  131.157200][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  131.196634][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  131.224468][   T10] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  131.245853][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  131.262631][ T6331] batman_adv: batadv0: Adding interface: batadv_slave_0
[  131.276357][   T10] usb 5-1: config 0 descriptor??
[  131.283002][ T6331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  131.314426][ T6331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  131.333979][   T10] hub 5-1:0.0: USB hub found
[  131.376285][ T6331] batman_adv: batadv0: Adding interface: batadv_slave_1
[  131.393688][ T6331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  131.454233][ T6331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  131.595031][   T10] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19)
[  131.671371][ T6331] hsr_slave_0: entered promiscuous mode
[  131.679438][ T6331] hsr_slave_1: entered promiscuous mode
[  131.687851][ T6331] debugfs: 'hsr0' already exists in 'hsr'
[  131.693769][ T6331] Cannot create hsr debugfs directory
[  131.991428][ T5860] Bluetooth: hci5: command tx timeout
[  132.515763][   T10] usbhid 5-1:0.0: can't add hid device: -71
[  132.521911][   T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  132.553010][   T10] usb 5-1: USB disconnect, device number 4
[  132.804873][ T1315] ieee802154 phy0 wpan0: encryption failed: -22
[  132.812412][ T1315] ieee802154 phy1 wpan1: encryption failed: -22
[  133.004275][ T6331] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  133.054036][ T6331] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  133.107047][ T6331] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  133.155956][ T6331] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  133.593181][ T6331] 8021q: adding VLAN 0 to HW filter on device bond0
[  134.070576][ T5860] Bluetooth: hci5: command tx timeout
[  134.378071][ T6331] 8021q: adding VLAN 0 to HW filter on device team0
[  134.429784][ T6147] bridge0: port 1(bridge_slave_0) entered blocking state
[  134.437070][ T6147] bridge0: port 1(bridge_slave_0) entered forwarding state
[  134.542540][ T1024] bridge0: port 2(bridge_slave_1) entered blocking state
[  134.549798][ T1024] bridge0: port 2(bridge_slave_1) entered forwarding state
[  134.722023][ T6442] netlink: 182 bytes leftover after parsing attributes in process `syz.4.145'.
[  135.258152][ T6460] loop3: detected capacity change from 0 to 512
[  135.273444][ T6460] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  135.551622][   T30] audit: type=1326 audit(1773716974.097:16): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=6452 comm="syz.3.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78e539c799 code=0x7ffc0000
[  136.118256][   T30] audit: type=1326 audit(1773716974.097:17): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=6452 comm="syz.3.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78e539c799 code=0x7ffc0000
[  136.159328][ T5860] Bluetooth: hci5: command tx timeout
[  136.260018][   T30] audit: type=1326 audit(1773716974.097:18): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=6452 comm="syz.3.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78e539c799 code=0x7ffc0000
[  136.373321][ T6331] 8021q: adding VLAN 0 to HW filter on device batadv0
[  136.945658][ T6471] loop1: detected capacity change from 0 to 512
[  137.079844][ T6471] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.151: invalid indirect mapped block 4294967295 (level 1)
[  137.182786][ T6471] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  137.190619][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  137.207349][    C1] EXT4-fs (loop1): initial error at time 1773716975: ext4_free_branches:1023: inode 11
[  137.217080][    C1] EXT4-fs (loop1): last error at time 1773716975: ext4_free_branches:1023: inode 11
[  137.234974][   T30] audit: type=1326 audit(1773716974.097:19): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=6452 comm="syz.3.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78e539c799 code=0x7ffc0000
[  137.238499][ T6471] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.151: invalid indirect mapped block 4294967295 (level 1)
[  137.260268][   T30] audit: type=1326 audit(1773716974.097:20): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=6452 comm="syz.3.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78e539c799 code=0x7ffc0000
[  137.351898][ T6471] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  137.353105][   T30] audit: type=1326 audit(1773716974.097:21): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=6452 comm="syz.3.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f78e539c799 code=0x7ffc0000
[  137.391387][ T6471] EXT4-fs (loop1): 2 truncates cleaned up
[  137.419339][ T6471] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  137.457222][   T30] audit: type=1326 audit(1773716974.107:22): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=6452 comm="syz.3.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78e539c799 code=0x7ffc0000
[  137.518128][   T30] audit: type=1326 audit(1773716974.107:23): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=6452 comm="syz.3.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78e539c799 code=0x7ffc0000
[  137.578099][ T5844] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  137.762870][ T6331] veth0_vlan: entered promiscuous mode
[  137.823628][ T6331] veth1_vlan: entered promiscuous mode
[  137.904522][ T6331] veth0_macvtap: entered promiscuous mode
[  137.954046][ T6331] veth1_macvtap: entered promiscuous mode
[  138.031727][ T6331] batman_adv: batadv0: Interface activated: batadv_slave_0
[  138.061260][ T5922] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  138.074887][ T6331] batman_adv: batadv0: Interface activated: batadv_slave_1
[  138.083255][   T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  138.128327][   T63] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  138.145080][   T63] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  138.171846][   T63] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  138.190077][   T63] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  138.230083][ T5922] usb 2-1: Using ep0 maxpacket: 32
[  138.243898][ T5922] usb 2-1: config index 0 descriptor too short (expected 29220, got 36)
[  138.261572][   T10] usb 4-1: Using ep0 maxpacket: 16
[  138.278137][ T5922] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  138.288982][   T10] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  138.315807][ T5922] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81
[  138.332768][   T10] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  138.347901][ T5922] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  138.357919][   T10] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[  138.383039][ T5922] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  138.410268][   T10] usb 4-1: config 0 interface 0 has no altsetting 0
[  138.421684][ T5922] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  138.440902][   T10] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  138.452689][ T5922] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  138.473712][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  138.492987][ T5922] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  138.520922][   T10] usb 4-1: config 0 descriptor??
[  138.554768][ T5922] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  138.584732][ T5922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  138.649767][ T5922] usb 2-1: config 0 descriptor??
[  138.697981][ T1024] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  138.736403][ T1024] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  138.868458][ T1024] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  138.895999][ T1024] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  138.914575][ T5922] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  138.976905][ T6487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  139.005991][ T5922] usb 2-1: USB disconnect, device number 2
[  139.017479][ T6487] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  139.050602][ T5922] usblp0: removed
[  139.058715][   T10] hid (null): report_id 0 is invalid
[  139.074005][   T10] hid (null): report_id 0 is invalid
[  139.091315][   T10] hid (null): unknown global tag 0x8f
[  139.116544][   T10] hid (null): invalid report_size -1589218279
[  139.136991][   T10] hid (null): invalid report_count 841673493
[  139.268732][   T10] usb 4-1: USB disconnect, device number 5
[  139.392556][ T6517] loop4: detected capacity change from 0 to 512
[  139.407939][ T6517] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  139.669509][   T30] audit: type=1326 audit(1773716978.227:24): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=6513 comm="syz.4.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f480639c799 code=0x7ffc0000
[  140.205236][   T30] audit: type=1326 audit(1773716978.227:25): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=6513 comm="syz.4.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f480639c799 code=0x7ffc0000
[  140.310202][ T5922] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  141.660293][ T5922] usb 2-1: device not accepting address 3, error -71
[  141.881955][ T6535] kvm: emulating exchange as write
[  142.404289][ T6553] loop1: detected capacity change from 0 to 1024
[  142.425021][ T6553] EXT4-fs: Ignoring removed i_version option
[  142.459632][ T6553] EXT4-fs (loop1): Test dummy encryption mode enabled
[  142.546728][ T6553] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  142.735136][ T6553] fscrypt: AES-256-XTS using implementation "xts-aes-aesni-avx"
[  142.924545][ T5844] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  145.236049][   T30] kauditd_printk_skb: 3 callbacks suppressed
[  145.236069][   T30] audit: type=1326 audit(1773716983.797:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6592 comm="syz.0.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe06439c799 code=0x7ffc0000
[  145.472536][   T30] audit: type=1326 audit(1773716983.797:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6592 comm="syz.0.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe06439c799 code=0x7ffc0000
[  145.511227][   T30] audit: type=1326 audit(1773716983.807:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6592 comm="syz.0.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fe06439c799 code=0x7ffc0000
[  145.574539][   T30] audit: type=1326 audit(1773716983.807:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6592 comm="syz.0.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe06439c799 code=0x7ffc0000
[  145.875104][   T30] audit: type=1326 audit(1773716983.807:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6592 comm="syz.0.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe06439c799 code=0x7ffc0000
[  146.277792][   T10] usb 2-1: new full-speed USB device number 5 using dummy_hcd
[  146.285680][   T30] audit: type=1326 audit(1773716983.807:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6592 comm="syz.0.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe06439c799 code=0x7ffc0000
[  146.316781][ T6598] loop3: detected capacity change from 0 to 256
[  146.343694][   T30] audit: type=1326 audit(1773716983.807:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6592 comm="syz.0.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe06439c799 code=0x7ffc0000
[  146.366971][   T30] audit: type=1326 audit(1773716983.807:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6592 comm="syz.0.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fe06439c799 code=0x7ffc0000
[  146.389150][   T30] audit: type=1326 audit(1773716983.807:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6592 comm="syz.0.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe06439c799 code=0x7ffc0000
[  146.411541][   T30] audit: type=1326 audit(1773716983.807:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6592 comm="syz.0.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe06439c799 code=0x7ffc0000
[  146.436570][ T6598] exfat: Deprecated parameter 'utf8'
[  146.465712][ T6598] exfat: Deprecated parameter 'namecase'
[  146.590943][ T6598] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  146.593267][   T10] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  146.637371][   T10] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  146.669641][   T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  146.714583][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.782798][   T10] hub 2-1:4.0: USB hub found
[  146.960102][   T10] hub 2-1:4.0: config failed, can't read hub descriptor (err -90)
[  147.095475][ T6586] loop4: detected capacity change from 0 to 40427
[  147.106971][ T6586] F2FS-fs (loop4): Invalid SB checksum offset: 0
[  147.115203][ T6586] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  147.127226][ T6586] F2FS-fs (loop4): invalid crc value
[  147.274064][ T5959] usb 2-1: USB disconnect, device number 5
[  147.464672][ T6586] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  148.295638][ T6632] loop3: detected capacity change from 0 to 512
[  148.403209][ T6632] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  148.455715][   T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  148.501777][ T6632] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  148.680611][   T10] usb 2-1: Using ep0 maxpacket: 32
[  148.707669][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  148.726613][ T6637] loop4: detected capacity change from 0 to 4096
[  148.744091][ T6637] EXT4-fs: inline encryption not supported
[  148.756242][   T10] usb 2-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5
[  148.775520][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  148.823936][   T10] usb 2-1: Product: syz
[  148.839465][   T10] usb 2-1: Manufacturer: syz
[  148.853865][   T10] usb 2-1: SerialNumber: syz
[  148.868530][   T10] usb 2-1: config 0 descriptor??
[  148.873878][ T6637] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  148.897857][   T10] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  149.055312][   T10] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -2
[  149.192447][ T5843] EXT4-fs error (device loop3): ext4_empty_dir:3078: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  149.229520][   T29] usb 2-1: USB disconnect, device number 6
[  149.239980][ T6022] udevd[6022]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  149.286770][ T5856] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  149.292862][ T5843] EXT4-fs error (device loop3): ext4_empty_dir:3078: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  149.366878][ T5843] EXT4-fs error (device loop3): ext4_empty_dir:3078: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  149.444512][ T5843] EXT4-fs error (device loop3): ext4_empty_dir:3078: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  149.499166][ T5843] EXT4-fs error (device loop3): ext4_empty_dir:3078: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  149.548450][ T5843] EXT4-fs error (device loop3): ext4_empty_dir:3078: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  149.585280][ T5843] EXT4-fs error (device loop3): ext4_empty_dir:3078: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  149.612054][ T5843] EXT4-fs error (device loop3): ext4_empty_dir:3078: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  149.679891][ T6647] loop4: detected capacity change from 0 to 8192
[  149.707540][ T5843] EXT4-fs error (device loop3): ext4_empty_dir:3078: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  149.774495][ T5843] EXT4-fs error (device loop3): ext4_empty_dir:3078: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  151.333924][ T6659] loop5: detected capacity change from 0 to 512
[  151.341878][ T6659] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  151.733334][   T30] kauditd_printk_skb: 20 callbacks suppressed
[  151.733373][   T30] audit: type=1326 audit(1773716990.287:59): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=6651 comm="syz.5.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5b39c799 code=0x7ffc0000
[  151.914007][ T6660] loop1: detected capacity change from 0 to 128
[  152.056432][   T30] audit: type=1326 audit(1773716990.287:60): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=6651 comm="syz.5.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5b39c799 code=0x7ffc0000
[  152.151193][   T30] audit: type=1326 audit(1773716990.287:61): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=6651 comm="syz.5.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f8d5b39c799 code=0x7ffc0000
[  152.319362][ T6662] syz.1.203: attempt to access beyond end of device
[  152.319362][ T6662] loop1: rw=2049, sector=145, nr_sectors = 80 limit=128
[  152.333105][   T30] audit: type=1326 audit(1773716990.297:62): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=6651 comm="syz.5.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5b39c799 code=0x7ffc0000
[  152.394440][ T6663] netlink: 8 bytes leftover after parsing attributes in process `syz.0.204'.
[  152.438193][   T30] audit: type=1326 audit(1773716990.297:63): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=6651 comm="syz.5.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5b39c799 code=0x7ffc0000
[  152.874441][ T5959] usb 2-1: new full-speed USB device number 7 using dummy_hcd
[  153.099409][ T5959] usb 2-1: config 0 has an invalid interface number: 64 but max is 0
[  153.139824][ T6046] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  153.164288][ T5959] usb 2-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config
[  153.239252][ T5959] usb 2-1: config 0 has no interface number 0
[  153.260705][ T5959] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48
[  153.288568][ T5959] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.309994][ T5959] usb 2-1: Product: syz
[  153.338144][ T5959] usb 2-1: Manufacturer: syz
[  153.348894][ T5959] usb 2-1: SerialNumber: syz
[  153.385308][ T5959] usb 2-1: config 0 descriptor??
[  153.405816][ T6046] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  153.463242][ T6046] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.526960][ T6046] usb 5-1: Product: syz
[  153.548796][ T6046] usb 5-1: Manufacturer: syz
[  153.587547][ T6046] usb 5-1: SerialNumber: syz
[  153.600796][ T5843] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  153.659357][ T6046] usb 5-1: config 0 descriptor??
[  153.915371][ T6682] netlink: 8 bytes leftover after parsing attributes in process `syz.5.209'.
[  154.035314][ T5972] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  154.405931][ T6046] usb 5-1: Firmware: major: 226, minor: 19, hardware type: UNKNOWN (46)
[  154.478867][ T5959] uvcvideo 2-1:0.64: Found UVC 0.00 device syz (046d:0823)
[  154.510715][ T5959] uvcvideo 2-1:0.64: No valid video chain found.
[  154.528265][ T5959] usb 2-1: USB disconnect, device number 7
[  154.618515][ T6046] usb 5-1: Firmware: build 
[  154.735295][ T5972] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  154.840549][ T6046] usb 5-1: no permanent extended address found, random address set
[  154.857391][ T5972] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  154.873779][ T6046] usb 5-1: atusb_probe: initialization failed, error = -524
[  154.893461][ T6046] atusb 5-1:0.0: probe with driver atusb failed with error -524
[  155.026335][ T5972] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.545275][ T6046] usb 5-1: USB disconnect, device number 5
[  155.791967][   T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  155.804631][   T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  155.813051][   T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  155.821760][   T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  155.832592][   T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  155.882859][   T63] kworker/u8:4: attempt to access beyond end of device
[  155.882859][   T63] loop1: rw=8388609, sector=150, nr_sectors = 1 limit=128
[  155.940435][   T63] buffer_io_error: 10 callbacks suppressed
[  155.940457][   T63] Buffer I/O error on dev loop1, logical block 150, lost async page write
[  156.103125][ T6700] loop5: detected capacity change from 0 to 512
[  156.199543][ T6700] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  156.235558][ T6700] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  156.335863][ T6331] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  156.411178][ T6046] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  156.498866][ T6710] syzkaller0: entered promiscuous mode
[  156.504517][ T6710] syzkaller0: entered allmulticast mode
[  156.582187][ T6046] usb 2-1: Using ep0 maxpacket: 32
[  156.589985][ T6046] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  156.603629][ T6046] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  156.615251][ T6046] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  156.624448][ T6046] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.639035][ T6046] usb 2-1: config 0 descriptor??
[  156.644945][ T6713] syzkaller0: entered promiscuous mode
[  156.662476][ T6046] hub 2-1:0.0: USB hub found
[  156.669635][ T6713] syzkaller0: entered allmulticast mode
[  156.700042][ T5972] bridge_slave_1: left allmulticast mode
[  156.707836][ T5972] bridge_slave_1: left promiscuous mode
[  156.719370][ T5972] bridge0: port 2(bridge_slave_1) entered disabled state
[  156.736957][ T5972] bridge_slave_0: left allmulticast mode
[  156.752764][ T5972] bridge_slave_0: left promiscuous mode
[  156.759707][ T5972] bridge0: port 1(bridge_slave_0) entered disabled state
[  156.896885][ T6046] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19)
[  157.276649][ T5972] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  157.363284][ T5972] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  157.724966][ T5972] bond0 (unregistering): Released all slaves
[  157.911495][ T6046] hid-generic 0003:046D:C31C.0002: item fetching failed at offset 0/1
[  157.922247][ T6046] hid-generic 0003:046D:C31C.0002: probe with driver hid-generic failed with error -22
[  157.983723][ T6046] usb 2-1: USB disconnect, device number 8
[  158.027212][ T5860] Bluetooth: hci0: command tx timeout
[  158.599448][ T6046] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  159.982392][ T5972] hsr_slave_0: left promiscuous mode
[  160.010056][ T5972] hsr_slave_1: left promiscuous mode
[  160.039350][ T5972] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  160.062225][ T5972] batman_adv: batadv0: Removing interface: batadv_slave_0
[  160.076559][ T5972] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  160.087395][ T6046] usb 6-1: Using ep0 maxpacket: 16
[  160.105659][ T5972] batman_adv: batadv0: Removing interface: batadv_slave_1
[  160.118530][ T6046] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  160.147745][ T6046] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  160.185624][ T5972] veth1_macvtap: left promiscuous mode
[  160.197665][ T5972] veth0_macvtap: left promiscuous mode
[  160.203565][ T5972] veth1_vlan: left promiscuous mode
[  160.208281][ T6046] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  160.214512][ T5972] veth0_vlan: left promiscuous mode
[  160.240782][ T6046] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  160.249468][ T5860] Bluetooth: hci0: command tx timeout
[  160.265446][ T6046] usb 6-1: config 0 descriptor??
[  160.764842][ T6046] HID 045e:07da: Invalid code 65791 type 1
[  160.796901][ T6046] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0003/input/input6
[  160.906909][ T6046] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0
[  161.022818][ T5972] team0 (unregistering): Port device team_slave_1 removed
[  161.111281][ T5972] team0 (unregistering): Port device team_slave_0 removed
[  161.272800][ T6793] process 'syz.0.235' launched '/dev/fd/3' with NULL argv: empty string added
[  161.438125][ T6692] chnl_net:caif_netlink_parms(): no params data found
[  161.467393][ T6760] syzkaller0: entered promiscuous mode
[  161.475897][ T6760] syzkaller0: entered allmulticast mode
[  161.684130][ T6046] usb 6-1: USB disconnect, device number 2
[  161.825367][ T6807] netlink: 'syz.4.238': attribute type 1 has an invalid length.
[  162.028210][ T6807] 8021q: adding VLAN 0 to HW filter on device bond1
[  162.058591][ T6803] bond1: entered promiscuous mode
[  162.070532][ T6803] bond1: entered allmulticast mode
[  162.261026][ T6692] bridge0: port 1(bridge_slave_0) entered blocking state
[  162.278261][ T6692] bridge0: port 1(bridge_slave_0) entered disabled state
[  162.286257][ T6692] bridge_slave_0: entered allmulticast mode
[  162.299998][ T6692] bridge_slave_0: entered promiscuous mode
[  162.338559][ T6692] bridge0: port 2(bridge_slave_1) entered blocking state
[  162.356827][ T6034] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  162.390032][ T6692] bridge0: port 2(bridge_slave_1) entered disabled state
[  162.398108][ T6692] bridge_slave_1: entered allmulticast mode
[  162.407001][ T6692] bridge_slave_1: entered promiscuous mode
[  162.548615][ T5860] Bluetooth: hci0: command tx timeout
[  163.153963][ T6692] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  163.185679][ T6692] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  163.218365][ T6034] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  163.277576][ T6034] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  163.308142][ T6034] usb 2-1: Product: syz
[  163.330027][ T6034] usb 2-1: Manufacturer: syz
[  163.349117][ T6034] usb 2-1: SerialNumber: syz
[  163.432983][ T6692] team0: Port device team_slave_0 added
[  163.465282][ T6692] team0: Port device team_slave_1 added
[  163.582462][   T30] audit: type=1326 audit(1773717001.434:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6837 comm="syz.0.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe06439c799 code=0x7ffc0000
[  163.657201][   T30] audit: type=1326 audit(1773717001.434:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6837 comm="syz.0.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe06439c799 code=0x7ffc0000
[  163.712792][   T30] audit: type=1326 audit(1773717001.434:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6837 comm="syz.0.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe06439c799 code=0x7ffc0000
[  163.782815][   T30] audit: type=1326 audit(1773717001.434:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6837 comm="syz.0.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe06439c799 code=0x7ffc0000
[  163.866989][   T30] audit: type=1326 audit(1773717001.434:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6837 comm="syz.0.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe06439c799 code=0x7ffc0000
[  163.941722][   T30] audit: type=1326 audit(1773717001.434:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6837 comm="syz.0.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fe06439c799 code=0x7ffc0000
[  163.982446][ T6692] batman_adv: batadv0: Adding interface: batadv_slave_0
[  164.026378][ T6692] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  164.039611][   T30] audit: type=1326 audit(1773717001.443:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6837 comm="syz.0.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe06439c799 code=0x7ffc0000
[  164.108372][ T6034] (unnamed net_device) (uninitialized): Assigned a random MAC address: 0a:46:cc:89:f2:d3
[  164.158131][ T6692] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  164.173969][   T30] audit: type=1326 audit(1773717001.443:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6837 comm="syz.0.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fe06439c799 code=0x7ffc0000
[  164.204080][ T6692] batman_adv: batadv0: Adding interface: batadv_slave_1
[  164.231158][ T6692] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  164.280534][   T30] audit: type=1326 audit(1773717001.490:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6837 comm="syz.0.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe06439c799 code=0x7ffc0000
[  164.317494][ T6692] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  164.330718][   T30] audit: type=1326 audit(1773717001.490:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6837 comm="syz.0.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe06439c799 code=0x7ffc0000
[  164.468914][ T6034] rtl8150 2-1:1.0: eth5: rtl8150 is detected
[  164.512168][ T6034] usb 2-1: USB disconnect, device number 9
[  164.698058][ T5860] Bluetooth: hci0: command tx timeout
[  164.828754][ T6692] hsr_slave_0: entered promiscuous mode
[  164.863681][ T6692] hsr_slave_1: entered promiscuous mode
[  165.174371][ T6840] loop4: detected capacity change from 0 to 40427
[  165.211369][ T6840] F2FS-fs (loop4): invalid crc value
[  165.569818][ T6840] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  165.883017][ T6840] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  166.393224][   T63] kworker/u8:4: attempt to access beyond end of device
[  166.393224][   T63] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  166.457558][   T63] CPU: 0 UID: 0 PID: 63 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) 
[  166.457588][   T63] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  166.457601][   T63] Workqueue: writeback wb_workfn (flush-7:4)
[  166.457636][   T63] Call Trace:
[  166.457645][   T63]  <TASK>
[  166.457654][   T63]  dump_stack_lvl+0xe8/0x150
[  166.457691][   T63]  f2fs_handle_critical_error+0x37c/0x540
[  166.457740][   T63]  f2fs_write_end_io+0x1274/0x1740
[  166.457807][   T63]  __submit_merged_bio+0x256/0x700
[  166.457843][   T63]  __submit_merged_write_cond+0x3c9/0x4e0
[  166.457882][   T63]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  166.457938][   T63]  f2fs_write_data_pages+0x287e/0x34f0
[  166.458013][   T63]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  166.458042][   T63]  ? cfg80211_inform_single_bss_data+0x13c6/0x1b70
[  166.458143][   T63]  ? __lock_acquire+0x6b5/0x2cf0
[  166.458199][   T63]  ? unwind_next_frame+0xa5/0x23c0
[  166.458256][   T63]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  166.458291][   T63]  do_writepages+0x32e/0x550
[  166.458327][   T63]  ? reacquire_held_locks+0x104/0x190
[  166.458350][   T63]  ? writeback_sb_inodes+0x477/0x1a20
[  166.458387][   T63]  __writeback_single_inode+0x133/0x11a0
[  166.458419][   T63]  ? do_raw_spin_unlock+0xf5/0x210
[  166.458452][   T63]  writeback_sb_inodes+0x992/0x1a20
[  166.458507][   T63]  ? unwind_next_frame+0xa5/0x23c0
[  166.458544][   T63]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  166.458572][   T63]  ? do_raw_spin_lock+0x12b/0x2f0
[  166.458649][   T63]  ? rcu_is_watching+0x15/0xb0
[  166.458684][   T63]  wb_writeback+0x456/0xb70
[  166.458716][   T63]  ? queue_io+0x251/0x4a0
[  166.458755][   T63]  ? __pfx_wb_writeback+0x10/0x10
[  166.458780][   T63]  ? do_raw_spin_lock+0x12b/0x2f0
[  166.458828][   T63]  wb_workfn+0x414/0xf50
[  166.458856][   T63]  ? look_up_lock_class+0x57/0x110
[  166.458898][   T63]  ? __pfx_wb_workfn+0x10/0x10
[  166.458926][   T63]  ? do_raw_spin_lock+0x12b/0x2f0
[  166.458957][   T63]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  166.459013][   T63]  ? process_one_work+0x8bb/0x1780
[  166.459046][   T63]  process_one_work+0x9ab/0x1780
[  166.459107][   T63]  ? __pfx_process_one_work+0x10/0x10
[  166.459137][   T63]  ? do_raw_spin_lock+0x12b/0x2f0
[  166.459187][   T63]  worker_thread+0xba8/0x11e0
[  166.459243][   T63]  kthread+0x388/0x470
[  166.459271][   T63]  ? __pfx_worker_thread+0x10/0x10
[  166.459289][   T63]  ? __pfx_kthread+0x10/0x10
[  166.459317][   T63]  ret_from_fork+0x51e/0xb90
[  166.459354][   T63]  ? __pfx_ret_from_fork+0x10/0x10
[  166.459384][   T63]  ? __switch_to+0xc7d/0x1450
[  166.459418][   T63]  ? __pfx_kthread+0x10/0x10
[  166.459446][   T63]  ret_from_fork_asm+0x1a/0x30
[  166.459491][   T63]  </TASK>
[  166.770237][   T63] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  166.853315][ T6840] VFS:Filesystem freeze failed
[  167.474067][ T6692] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  167.507173][ T6692] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  167.539781][ T6692] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  167.596933][ T6692] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  167.685695][ T6913] netlink: 280 bytes leftover after parsing attributes in process `syz.0.255'.
[  169.141771][ T6692] 8021q: adding VLAN 0 to HW filter on device bond0
[  169.320886][ T6692] 8021q: adding VLAN 0 to HW filter on device team0
[  169.452858][ T1024] bridge0: port 1(bridge_slave_0) entered blocking state
[  169.460143][ T1024] bridge0: port 1(bridge_slave_0) entered forwarding state
[  169.552219][ T1024] bridge0: port 2(bridge_slave_1) entered blocking state
[  169.559485][ T1024] bridge0: port 2(bridge_slave_1) entered forwarding state
[  170.239727][ T6968] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  170.273174][ T6972] netlink: 24 bytes leftover after parsing attributes in process `syz.5.267'.
[  170.774280][ T6984] capability: warning: `syz.0.268' uses 32-bit capabilities (legacy support in use)
[  172.404885][ T6997] syzkaller0: entered promiscuous mode
[  172.413406][ T6997] syzkaller0: entered allmulticast mode
[  172.446756][ T6692] 8021q: adding VLAN 0 to HW filter on device batadv0
[  172.785266][ T7009] xt_hashlimit: size too large, truncated to 1048576
[  173.437976][ T6692] veth0_vlan: entered promiscuous mode
[  173.695294][ T7019] syzkaller0: entered promiscuous mode
[  173.710062][ T7019] syzkaller0: entered allmulticast mode
[  173.726372][ T6692] veth1_vlan: entered promiscuous mode
[  173.942401][ T7002] loop4: detected capacity change from 0 to 40427
[  173.955101][ T7002] F2FS-fs (loop4): Invalid SB checksum offset: 0
[  173.973646][ T7002] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  173.994142][ T7002] F2FS-fs (loop4): invalid crc value
[  174.138806][ T7032] loop1: detected capacity change from 0 to 256
[  174.158691][ T7032] exfat: Deprecated parameter 'utf8'
[  174.184426][ T7032] exfat: Deprecated parameter 'utf8'
[  174.210213][ T7032] exfat: Deprecated parameter 'utf8'
[  174.258977][ T7002] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  174.288138][ T7002] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[  174.310558][ T7002] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  174.326952][ T7032] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d)
[  174.713568][   T30] kauditd_printk_skb: 7 callbacks suppressed
[  174.730401][   T30] audit: type=1326 audit(1773717011.779:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7036 comm="syz.1.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7b9f9c799 code=0x7ffc0000
[  174.754366][ T7039] syz.4.276: attempt to access beyond end of device
[  174.754366][ T7039] loop4: rw=2049, sector=53248, nr_sectors = 8 limit=40427
[  174.805840][   T30] audit: type=1326 audit(1773717011.779:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7036 comm="syz.1.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7b9f9c799 code=0x7ffc0000
[  174.867913][   T30] audit: type=1326 audit(1773717011.779:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7036 comm="syz.1.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7b9f9c799 code=0x7ffc0000
[  174.898927][   T30] audit: type=1326 audit(1773717011.779:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7036 comm="syz.1.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7b9f9c799 code=0x7ffc0000
[  174.921610][   T30] audit: type=1326 audit(1773717011.779:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7036 comm="syz.1.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7fa7b9f9c799 code=0x7ffc0000
[  174.946880][   T30] audit: type=1326 audit(1773717011.779:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7036 comm="syz.1.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7b9f9c799 code=0x7ffc0000
[  174.972631][   T30] audit: type=1326 audit(1773717011.779:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7036 comm="syz.1.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7b9f9c799 code=0x7ffc0000
[  175.010396][   T30] audit: type=1326 audit(1773717011.779:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7036 comm="syz.1.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7b9f9c799 code=0x7ffc0000
[  175.033681][   T30] audit: type=1326 audit(1773717011.779:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7036 comm="syz.1.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7b9f9c799 code=0x7ffc0000
[  175.235412][   T30] audit: type=1326 audit(1773717011.779:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7036 comm="syz.1.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7fa7b9f9c799 code=0x7ffc0000
[  175.585920][ T7041] random: crng reseeded on system resumption
[  175.706522][ T7039] syz.4.276: attempt to access beyond end of device
[  175.706522][ T7039] loop4: rw=0, sector=53248, nr_sectors = 8 limit=40427
[  177.407856][ T6692] veth0_macvtap: entered promiscuous mode
[  177.434615][ T6692] veth1_macvtap: entered promiscuous mode
[  177.489255][ T6692] batman_adv: batadv0: Interface activated: batadv_slave_0
[  177.517557][ T6692] batman_adv: batadv0: Interface activated: batadv_slave_1
[  177.542731][ T5856] syz-executor: attempt to access beyond end of device
[  177.542731][ T5856] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  177.578159][ T5856] CPU: 0 UID: 0 PID: 5856 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  177.578188][ T5856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  177.578202][ T5856] Call Trace:
[  177.578211][ T5856]  <TASK>
[  177.578220][ T5856]  dump_stack_lvl+0xe8/0x150
[  177.578257][ T5856]  f2fs_handle_critical_error+0x37c/0x540
[  177.578296][ T5856]  f2fs_write_end_io+0x1274/0x1740
[  177.578358][ T5856]  __submit_merged_bio+0x256/0x700
[  177.578397][ T5856]  __submit_merged_write_cond+0x3c9/0x4e0
[  177.578438][ T5856]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  177.578497][ T5856]  f2fs_write_data_pages+0x287e/0x34f0
[  177.578576][ T5856]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  177.578606][ T5856]  ? lockdep_unlock+0x5d/0xd0
[  177.578688][ T5856]  ? ktime_get+0x45/0x220
[  177.578716][ T5856]  ? seqcount_lockdep_reader_access+0xd4/0x100
[  177.578754][ T5856]  ? __lock_acquire+0x6b5/0x2cf0
[  177.578805][ T5856]  ? __lock_acquire+0x6b5/0x2cf0
[  177.578844][ T5856]  ? do_raw_spin_lock+0x12b/0x2f0
[  177.578884][ T5856]  ? do_raw_spin_unlock+0xf5/0x210
[  177.578912][ T5856]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  177.578945][ T5856]  do_writepages+0x32e/0x550
[  177.578984][ T5856]  ? do_raw_spin_unlock+0xf5/0x210
[  177.579017][ T5856]  filemap_fdatawrite+0x1e9/0x2f0
[  177.579050][ T5856]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  177.579133][ T5856]  ? do_raw_spin_unlock+0xf5/0x210
[  177.579175][ T5856]  f2fs_sync_dirty_inodes+0x30e/0x860
[  177.579229][ T5856]  f2fs_write_checkpoint+0x9df/0x26a0
[  177.579293][ T5856]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  177.579383][ T5856]  kill_f2fs_super+0x314/0x720
[  177.579425][ T5856]  ? __pfx_kill_f2fs_super+0x10/0x10
[  177.579475][ T5856]  ? lockdep_hardirqs_on+0x7a/0x110
[  177.579518][ T5856]  deactivate_locked_super+0xbc/0x130
[  177.579554][ T5856]  cleanup_mnt+0x437/0x4d0
[  177.579574][ T5856]  ? _raw_spin_unlock_irq+0x23/0x50
[  177.579603][ T5856]  task_work_run+0x1d9/0x270
[  177.579636][ T5856]  ? __pfx_task_work_run+0x10/0x10
[  177.579678][ T5856]  exit_to_user_mode_loop+0xed/0x480
[  177.579708][ T5856]  ? rcu_is_watching+0x15/0xb0
[  177.579736][ T5856]  do_syscall_64+0x32d/0xf80
[  177.579761][ T5856]  ? trace_irq_disable+0x3b/0x150
[  177.579787][ T5856]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  177.579809][ T5856]  ? clear_bhb_loop+0x40/0x90
[  177.579837][ T5856]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  177.579859][ T5856] RIP: 0033:0x7f480639d9d7
[  177.579892][ T5856] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  177.579910][ T5856] RSP: 002b:00007ffee7a71898 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  177.579932][ T5856] RAX: 0000000000000000 RBX: 00007f4806432050 RCX: 00007f480639d9d7
[  177.579947][ T5856] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffee7a71950
[  177.579960][ T5856] RBP: 00007ffee7a71950 R08: 00007ffee7a72950 R09: 00000000ffffffff
[  177.579974][ T5856] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffee7a729e0
[  177.579988][ T5856] R13: 00007f4806432050 R14: 000000000002a8c1 R15: 00007ffee7a72a20
[  177.580026][ T5856]  </TASK>
[  177.890947][ T1024] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  177.905685][  T149] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  177.917523][  T149] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  177.928018][  T149] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  177.936924][ T5856] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  178.038162][ T5959] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  178.200632][ T5959] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  178.213115][ T5959] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  178.235565][ T7050] syzkaller0: entered promiscuous mode
[  178.243513][ T5959] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  178.252977][ T7050] syzkaller0: entered allmulticast mode
[  178.259829][ T5959] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  178.363616][ T5959] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  178.373767][ T5959] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  178.403559][ T5959] usb 2-1: Product: syz
[  178.411098][ T5959] usb 2-1: Manufacturer: syz
[  178.424255][ T5959] usb 2-1: SerialNumber: syz
[  178.693137][ T5959] cdc_ncm 2-1:1.0: invalid descriptor buffer length
[  178.712855][ T5959] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found
[  178.895890][ T5959] cdc_ncm 2-1:1.0: bind() failure
[  178.919519][ T5959] usb 2-1: USB disconnect, device number 10
[  180.956701][ T6034] usb 2-1: new full-speed USB device number 11 using dummy_hcd
[  181.152026][ T6034] usb 2-1: not running at top speed; connect to a high speed hub
[  181.161250][ T6034] usb 2-1: config 1 interface 0 altsetting 9 endpoint 0x1 has invalid maxpacket 1527, setting to 64
[  181.172700][ T6034] usb 2-1: config 1 interface 0 has no altsetting 0
[  181.185226][ T6034] usb 2-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40
[  181.194585][ T6034] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  181.203144][ T6034] usb 2-1: Product: syz
[  181.207477][ T6034] usb 2-1: Manufacturer: syz
[  181.212137][ T6034] usb 2-1: SerialNumber: syz
[  181.244918][ T7071] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  181.527972][ T6034] usb 2-1: USB disconnect, device number 11
[  182.155887][ T7081] loop1: detected capacity change from 0 to 1024
[  182.193821][ T7081] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  182.399576][  T137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  182.421917][  T137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  182.466575][ T5844] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  182.482462][ T7088] loop4: detected capacity change from 0 to 512
[  182.531150][ T7088] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  182.585408][ T7088] EXT4-fs (loop4): SIPHASH is not a valid default hash value
[  182.595975][ T1238] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  182.618779][  T149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  182.649244][  T149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  182.795697][ T1238] usb 6-1: Using ep0 maxpacket: 16
[  182.810823][ T1238] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  182.844618][ T1238] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  182.855511][ T1238] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  182.869175][ T1238] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  182.878958][ T1238] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  182.890956][ T7097] loop1: detected capacity change from 0 to 128
[  182.900708][ T1238] usb 6-1: config 0 descriptor??
[  182.942510][ T7098] loop6: detected capacity change from 0 to 2048
[  183.389340][ T1238] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0
[  183.405586][ T1238] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0
[  183.615738][ T1238] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0
[  183.623465][ T1238] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0
[  183.631983][ T1238] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0
[  185.007840][ T1238] microsoft 0003:045E:07DA.0004: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0
[  185.132565][ T1238] microsoft 0003:045E:07DA.0004: no inputs found
[  185.181181][ T1238] microsoft 0003:045E:07DA.0004: could not initialize ff, continuing anyway
[  185.227124][ T1238] usb 6-1: USB disconnect, device number 3
[  185.270040][ T7121] netlink: 8 bytes leftover after parsing attributes in process `syz.0.303'.
[  185.307114][ T7113] fido_id[7113]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory
[  185.646417][ T7127] syzkaller0: entered promiscuous mode
[  185.672593][ T7127] syzkaller0: entered allmulticast mode
[  185.814561][ T5915] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  185.922053][ T7138] loop5: detected capacity change from 0 to 8192
[  186.181403][ T5915] usb 5-1: Using ep0 maxpacket: 16
[  186.231649][ T7141] syzkaller0: entered promiscuous mode
[  186.819728][ T7141] syzkaller0: entered allmulticast mode
[  186.840873][ T5915] usb 5-1: config index 0 descriptor too short (expected 51443, got 18)
[  187.366111][ T5915] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  187.429177][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  187.475365][ T5915] usb 5-1: Product: syz
[  187.503176][ T5915] usb 5-1: Manufacturer: syz
[  187.530831][ T5915] usb 5-1: SerialNumber: syz
[  187.648823][ T5915] r8152-cfgselector 5-1: Unknown version 0x0000
[  187.686669][ T5915] r8152-cfgselector 5-1: config 0 descriptor??
[  187.967302][ T7168] loop5: detected capacity change from 0 to 512
[  187.981909][ T7168] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  188.160788][   T30] kauditd_printk_skb: 141 callbacks suppressed
[  188.160831][   T30] audit: type=1326 audit(1773717024.407:232): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=7163 comm="syz.5.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5b39c799 code=0x7ffc0000
[  188.810835][   T30] audit: type=1326 audit(1773717024.407:233): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=7163 comm="syz.5.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5b39c799 code=0x7ffc0000
[  188.939957][ T7170] netlink: 24 bytes leftover after parsing attributes in process `syz.1.314'.
[  188.955918][   T30] audit: type=1326 audit(1773717024.407:234): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=7163 comm="syz.5.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5b39c799 code=0x7ffc0000
[  189.065107][   T30] audit: type=1326 audit(1773717024.407:235): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=7163 comm="syz.5.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5b39c799 code=0x7ffc0000
[  189.175861][   T30] audit: type=1326 audit(1773717024.407:236): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=7163 comm="syz.5.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5b39c799 code=0x7ffc0000
[  189.288588][   T30] audit: type=1326 audit(1773717024.416:237): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=7163 comm="syz.5.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f8d5b39c799 code=0x7ffc0000
[  189.398111][   T30] audit: type=1326 audit(1773717024.426:238): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=7163 comm="syz.5.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5b39c799 code=0x7ffc0000
[  189.512268][   T30] audit: type=1326 audit(1773717024.426:239): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=7163 comm="syz.5.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5b39c799 code=0x7ffc0000
[  189.755373][ T5850] r8152-cfgselector 5-1: USB disconnect, device number 6
[  193.380651][ T7180] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[  193.394940][ T7180] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[  193.406474][ T7180] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  193.688903][ T7215] loop6: detected capacity change from 0 to 512
[  193.732035][ T7215] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  193.781246][ T7215] EXT4-fs (loop6): SIPHASH is not a valid default hash value
[  195.225500][ T7231] loop5: detected capacity change from 0 to 40427
[  195.253806][ T7231] F2FS-fs (loop5): invalid crc value
[  195.668267][ T7231] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  195.690800][ T7231] F2FS-fs (loop5): Start checkpoint disabled!
[  195.729437][ T7231] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0
[  195.756511][ T7231] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  195.835364][ T7267] loop4: detected capacity change from 0 to 512
[  195.853403][ T7267] EXT4-fs: inline encryption not supported
[  196.013457][ T7267] EXT4-fs: Ignoring removed mblk_io_submit option
[  196.054868][ T7267] EXT4-fs (loop4): Test dummy encryption mode enabled
[  196.099882][ T7267] EXT4-fs (loop4): orphan cleanup on readonly fs
[  196.147013][ T7267] EXT4-fs error (device loop4): ext4_orphan_get:1391: comm syz.4.338: inode #13: comm syz.4.338: iget: illegal inode #
[  196.240608][ T7267] loop4: lost filesystem error report for type 5 error -117
[  196.245668][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  196.259586][    C1] EXT4-fs (loop4): initial error at time 1773717031: ext4_orphan_get:1391
[  196.268175][    C1] EXT4-fs (loop4): last error at time 1773717031: ext4_orphan_get:1391
[  196.294933][ T7267] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.338: couldn't read orphan inode 13 (err -117)
[  196.310378][ T7275] syz.5.330: attempt to access beyond end of device
[  196.310378][ T7275] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  196.368146][ T7267] loop4: lost filesystem error report for type 5 error -117
[  196.401660][ T7267] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  196.676401][ T5856] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  196.991839][ T7297] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  197.122465][ T1315] ieee802154 phy0 wpan0: encryption failed: -22
[  197.148034][ T1315] ieee802154 phy1 wpan1: encryption failed: -22
[  197.307258][ T7296] bridge0: port 2(bridge_slave_1) entered disabled state
[  197.678704][ T7303] loop4: detected capacity change from 0 to 512
[  197.761458][ T7303] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  197.841651][ T7303] EXT4-fs (loop4): SIPHASH is not a valid default hash value
[  198.170482][   T29] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  198.350305][   T29] usb 5-1: Using ep0 maxpacket: 32
[  198.363296][ T5850] usb 2-1: new full-speed USB device number 12 using dummy_hcd
[  198.379154][   T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  198.399623][   T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  198.410656][   T29] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  198.421046][   T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  198.434950][   T29] usb 5-1: config 0 descriptor??
[  198.443426][ T7323] tmpfs: Unexpected value for 'inode32'
[  198.453339][   T29] hub 5-1:0.0: USB hub found
[  198.558287][ T5850] usb 2-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40
[  198.580932][ T5850] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  198.606993][ T5850] usb 2-1: Product: syz
[  198.611329][ T5850] usb 2-1: Manufacturer: syz
[  198.615988][ T5850] usb 2-1: SerialNumber: syz
[  198.664327][  T137] kworker/u8:5: attempt to access beyond end of device
[  198.664327][  T137] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  198.672946][   T29] hub 5-1:0.0: 1 port detected
[  198.681473][  T137] CPU: 0 UID: 0 PID: 137 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) 
[  198.681555][  T137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  198.681589][  T137] Workqueue: writeback wb_workfn (flush-7:5)
[  198.681682][  T137] Call Trace:
[  198.681704][  T137]  <TASK>
[  198.681726][  T137]  dump_stack_lvl+0xe8/0x150
[  198.681819][  T137]  f2fs_handle_critical_error+0x37c/0x540
[  198.681915][  T137]  f2fs_write_end_io+0x1274/0x1740
[  198.682068][  T137]  __submit_merged_bio+0x256/0x700
[  198.682172][  T137]  __submit_merged_write_cond+0x3c9/0x4e0
[  198.682269][  T137]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  198.682414][  T137]  f2fs_write_data_pages+0x287e/0x34f0
[  198.682615][  T137]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  198.682755][  T137]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  198.682935][  T137]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  198.683093][  T137]  ? __lock_acquire+0x6b5/0x2cf0
[  198.683239][  T137]  ? __pfx_f2fs_inode_chksum_set+0x10/0x10
[  198.683266][  T137]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  198.683300][  T137]  do_writepages+0x32e/0x550
[  198.683335][  T137]  ? reacquire_held_locks+0x104/0x190
[  198.683357][  T137]  ? writeback_sb_inodes+0x477/0x1a20
[  198.683391][  T137]  __writeback_single_inode+0x133/0x11a0
[  198.683422][  T137]  ? do_raw_spin_unlock+0xf5/0x210
[  198.683455][  T137]  writeback_sb_inodes+0x992/0x1a20
[  198.683510][  T137]  ? do_raw_spin_unlock+0xf5/0x210
[  198.683545][  T137]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  198.683571][  T137]  ? do_raw_spin_lock+0x12b/0x2f0
[  198.683648][  T137]  ? rcu_is_watching+0x15/0xb0
[  198.683682][  T137]  wb_writeback+0x456/0xb70
[  198.683714][  T137]  ? queue_io+0x251/0x4a0
[  198.683753][  T137]  ? __pfx_wb_writeback+0x10/0x10
[  198.683778][  T137]  ? do_raw_spin_lock+0x12b/0x2f0
[  198.683826][  T137]  wb_workfn+0x414/0xf50
[  198.683852][  T137]  ? look_up_lock_class+0x57/0x110
[  198.683896][  T137]  ? __pfx_wb_workfn+0x10/0x10
[  198.683924][  T137]  ? do_raw_spin_lock+0x12b/0x2f0
[  198.683955][  T137]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  198.684011][  T137]  ? process_one_work+0x8bb/0x1780
[  198.684043][  T137]  process_one_work+0x9ab/0x1780
[  198.684104][  T137]  ? __pfx_process_one_work+0x10/0x10
[  198.684134][  T137]  ? do_raw_spin_lock+0x12b/0x2f0
[  198.684191][  T137]  worker_thread+0xba8/0x11e0
[  198.684224][  T137]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  198.684250][  T137]  ? __kthread_parkme+0x7a/0x1f0
[  198.684273][  T137]  ? __kthread_parkme+0x19c/0x1f0
[  198.684305][  T137]  kthread+0x388/0x470
[  198.684331][  T137]  ? __pfx_worker_thread+0x10/0x10
[  198.684350][  T137]  ? __pfx_kthread+0x10/0x10
[  198.684378][  T137]  ret_from_fork+0x51e/0xb90
[  198.684416][  T137]  ? __pfx_ret_from_fork+0x10/0x10
[  198.684446][  T137]  ? __switch_to+0xc7d/0x1450
[  198.684480][  T137]  ? __pfx_kthread+0x10/0x10
[  198.684508][  T137]  ret_from_fork_asm+0x1a/0x30
[  198.684552][  T137]  </TASK>
[  198.739727][  T137] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  198.984904][    T9] usb 7-1: new full-speed USB device number 2 using dummy_hcd
[  199.007780][ T5850] usb 2-1: unit 8 not found!
[  199.023463][ T5850] usb 2-1: unit 6 not found!
[  199.034074][ T5850] usb 2-1: unit 0 not found!
[  199.159752][    T9] usb 7-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30
[  199.172116][    T9] usb 7-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  199.201904][    T9] usb 7-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255
[  199.256730][    T9] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  199.305127][    T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  199.361212][    T9] usb 7-1: SerialNumber: syz
[  199.455088][ T5850] usb 2-1: USB disconnect, device number 12
[  199.576837][   T29] hub 5-1:0.0: activate --> -90
[  199.744184][    T9] rndis_host 7-1:253.0: RNDIS init failed, -71
[  199.765250][    T9] rndis_host 7-1:253.0: probe with driver rndis_host failed with error -71
[  199.799337][   T29] hub 5-1:0.0: hub_ext_port_status failed (err = -71)
[  199.852943][ T6147] usb 5-1: Failed to suspend device, error -71
[  199.866751][    T9] usb 7-1: USB disconnect, device number 2
[  199.883665][ T6034] usb 5-1: USB disconnect, device number 7
[  200.835915][ T7355] syzkaller0: entered promiscuous mode
[  200.842789][ T7355] syzkaller0: entered allmulticast mode
[  201.088209][ T5850] usb 7-1: new full-speed USB device number 3 using dummy_hcd
[  201.226059][   T29] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  201.454754][ T5850] usb 7-1: unable to get BOS descriptor or descriptor too short
[  201.463740][ T5850] usb 7-1: not running at top speed; connect to a high speed hub
[  201.476759][ T5850] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  201.487723][ T5850] usb 7-1: config 1 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  201.500971][ T5850] usb 7-1: config 1 interface 0 has no altsetting 0
[  201.510221][ T5850] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  201.525393][ T5850] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  201.536625][   T29] usb 2-1: Using ep0 maxpacket: 32
[  201.543724][ T5850] usb 7-1: Product: syz
[  201.551676][   T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  201.564483][ T5850] usb 7-1: Manufacturer: syz
[  201.575159][ T5850] usb 7-1: SerialNumber: syz
[  201.580071][   T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  201.596434][   T29] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  201.617080][   T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  201.664315][   T29] usb 2-1: config 0 descriptor??
[  201.692657][   T29] hub 2-1:0.0: USB hub found
[  201.839115][ T5850] cdc_ether 7-1:1.0: invalid descriptor buffer length
[  201.847213][ T5850] usb 7-1: No union descriptors
[  201.887022][ T5850] usb 7-1: USB disconnect, device number 3
[  201.920518][   T29] hub 2-1:0.0: 1 port detected
[  202.163362][   T29] hub 2-1:0.0: hub_hub_status failed (err = -71)
[  202.173976][   T29] hub 2-1:0.0: config failed, can't get hub status (err -71)
[  202.195917][   T29] usbhid 2-1:0.0: can't add hid device: -71
[  202.222151][   T29] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  202.267716][   T29] usb 2-1: USB disconnect, device number 13
[  202.811664][ T7397] netlink: 104 bytes leftover after parsing attributes in process `syz.1.369'.
[  203.010748][ T7403] loop6: detected capacity change from 0 to 512
[  203.583542][ T7403] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.370: inode has both inline data and extents flags
[  203.596762][ T7403] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  203.597619][ T7403] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.370: couldn't read orphan inode 15 (err -117)
[  203.606884][    C1] EXT4-fs (loop6): error count since last fsck: 1
[  203.606923][    C1] EXT4-fs (loop6): initial error at time 1773717038: ext4_orphan_get:1391: inode 15
[  203.606957][    C1] EXT4-fs (loop6): last error at time 1773717038: ext4_orphan_get:1391: inode 15
[  203.647622][ T7403] loop6: lost filesystem error report for type 5 error -117
[  203.649525][ T7403] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  203.849470][ T6692] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  206.033302][ T7409] loop5: detected capacity change from 0 to 131072
[  206.133066][    T9] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  206.191593][ T7422] loop4: detected capacity change from 0 to 2048
[  206.233789][ T7409] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  206.270815][ T7409] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  206.334286][    T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  206.384544][    T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  206.431719][    T9] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  206.462397][ T7407] loop1: detected capacity change from 0 to 131072
[  206.475782][    T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  206.516748][    T9] usb 7-1: config 0 descriptor??
[  206.538528][ T7407] F2FS-fs (loop1): invalid crc value
[  206.900274][ T7407] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  207.033724][    T9] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0
[  207.067030][    T9] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0
[  207.084774][    T9] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0
[  207.096110][    T9] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0
[  207.103368][    T9] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0
[  207.113823][    T9] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0
[  207.121274][    T9] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0
[  207.138369][    T9] cp2112 0003:10C4:EA90.0005: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.6-1/input0
[  207.261596][ T7444] loop4: detected capacity change from 0 to 512
[  207.397683][ T7444] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.384: inode has both inline data and extents flags
[  207.411025][ T7444] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  207.414601][ T7444] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.384: couldn't read orphan inode 15 (err -117)
[  207.423892][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  207.423916][    C1] EXT4-fs (loop4): initial error at time 1773717042: ext4_orphan_get:1391: inode 15
[  207.423954][    C1] EXT4-fs (loop4): last error at time 1773717042: ext4_orphan_get:1391: inode 15
[  207.463107][ T7444] loop4: lost filesystem error report for type 5 error -117
[  207.508508][ T7444] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  207.991173][ T7449] overlayfs: failed to clone upperpath
[  208.021082][    T9] cp2112 0003:10C4:EA90.0005: error requesting version
[  208.107467][ T5856] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  208.148343][    T9] cp2112 0003:10C4:EA90.0005: probe with driver cp2112 failed with error -71
[  208.212993][    T9] usb 7-1: USB disconnect, device number 4
[  208.350506][ T7453] syzkaller0: entered promiscuous mode
[  208.356138][ T7453] syzkaller0: entered allmulticast mode
[  209.292681][ T7469] loop6: detected capacity change from 0 to 256
[  209.321749][ T7469] exfat: Deprecated parameter 'utf8'
[  209.395777][ T7469] exfat: Deprecated parameter 'utf8'
[  210.068703][ T7469] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  211.239738][ T7486] syzkaller0: entered promiscuous mode
[  211.249957][ T7486] syzkaller0: entered allmulticast mode
[  211.962839][ T7508] loop5: detected capacity change from 0 to 1024
[  211.981928][ T7508] EXT4-fs: Ignoring removed oldalloc option
[  212.002504][ T7508] EXT4-fs: Ignoring removed bh option
[  212.086299][ T7508] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  212.182942][   T30] audit: type=1804 audit(1773717046.894:240): pid=7508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.400" name="/newroot/37/file1/bus" dev="loop5" ino=18 res=1 errno=0
[  212.320294][ T6331] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  212.528569][ T7514] loop3: detected capacity change from 512 to 511
[  212.689006][ T7501] loop4: detected capacity change from 0 to 40427
[  212.750637][ T7501] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  212.782829][ T7501] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  213.199281][ T7501] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  213.248613][ T7501] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  213.286358][ T7501] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  213.493573][ T7524] syzkaller0: entered promiscuous mode
[  213.510619][ T7524] syzkaller0: entered allmulticast mode
[  214.635328][ T7539] netlink: 'syz.6.406': attribute type 2 has an invalid length.
[  215.512043][ T7542] tmpfs: Unexpected value for 'inode32'
[  215.754926][ T5859] Bluetooth: hci4: command 0x0406 tx timeout
[  215.761797][ T5853] Bluetooth: hci2: command 0x0406 tx timeout
[  215.769547][ T5165] Bluetooth: hci3: command 0x0406 tx timeout
[  215.770584][ T5865] Bluetooth: hci1: command 0x0406 tx timeout
[  217.952661][ T7569] xt_hashlimit: size too large, truncated to 1048576
[  218.667718][ T7579] tipc: Failed to remove unknown binding: 66,1,1/0:3999357906/3999357908
[  218.676340][ T7579] tipc: Failed to remove unknown binding: 66,1,1/0:3999357906/3999357908
[  219.214374][ T7586] netlink: 28 bytes leftover after parsing attributes in process `syz.1.416'.
[  220.056261][ T7599] bridge0: port 2(bridge_slave_1) entered disabled state
[  220.064215][ T7599] bridge0: port 1(bridge_slave_0) entered disabled state
[  220.308056][ T7599] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  220.327842][ T7599] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  221.239011][   T12] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  221.297072][ T6147] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  221.306131][ T6147] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  221.325316][   T49] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  221.941573][ T7635] tipc: Failed to remove unknown binding: 66,1,1/0:2001775525/2001775527
[  221.950163][ T7635] tipc: Failed to remove unknown binding: 66,1,1/0:2001775525/2001775527
[  222.043697][ T7632] loop6: detected capacity change from 0 to 512
[  222.596227][ T7632] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  222.644412][ T7632] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002]
[  222.655796][ T7632] System zones: 1-12
[  222.706220][ T7632] EXT4-fs (loop6): 1 truncate cleaned up
[  222.721118][ T7632] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  222.842662][ T5915] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  223.018182][ T6692] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  223.163328][ T5915] usb 6-1: Using ep0 maxpacket: 16
[  223.179828][ T5915] usb 6-1: config 1 has an invalid interface number: 105 but max is 0
[  223.188615][ T7644] loop6: detected capacity change from 0 to 128
[  223.205359][ T5915] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  223.228632][ T5915] usb 6-1: config 1 has no interface number 0
[  223.243903][ T7644] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  223.256244][ T5915] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  223.267072][ T5915] usb 6-1: config 1 interface 105 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  223.280607][ T7644] ext4 filesystem being mounted at /30/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  223.319777][ T5915] usb 6-1: config 1 interface 105 has no altsetting 0
[  223.353775][ T5915] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  223.378785][ T5915] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  223.404047][ T5915] usb 6-1: Product: syz
[  223.449549][ T5915] usb 6-1: Manufacturer: syz
[  223.607407][ T7652] loop4: detected capacity change from 0 to 512
[  223.656847][ T7652] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  223.719541][ T7652] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002]
[  223.728194][ T7652] System zones: 1-12
[  223.736694][ T7652] EXT4-fs (loop4): 1 truncate cleaned up
[  223.751530][ T7652] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  223.919211][ T5915] usb 6-1: SerialNumber: syz
[  223.979698][ T7629] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  224.206399][ T6692] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  224.270333][ T7656] netlink: 'syz.0.433': attribute type 1 has an invalid length.
[  224.320856][ T5856] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  224.346828][ T7658] netlink: 28 bytes leftover after parsing attributes in process `syz.0.433'.
[  224.524619][ T7656] 8021q: adding VLAN 0 to HW filter on device bond1
[  224.560831][ T7661] bond1: entered promiscuous mode
[  224.582826][ T7661] bond1: entered allmulticast mode
[  224.664788][ T5915] aqc111 6-1:1.105: probe with driver aqc111 failed with error -22
[  225.617384][ T5915] usb 6-1: USB disconnect, device number 4
[  225.997909][ T7683] loop5: detected capacity change from 0 to 512
[  226.036936][ T7683] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  226.082656][ T5915] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  226.155147][ T7683] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002]
[  226.166401][ T7683] System zones: 1-12
[  226.210897][ T7683] EXT4-fs (loop5): 1 truncate cleaned up
[  226.225835][ T7683] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  226.755987][ T5915] usb 5-1: Using ep0 maxpacket: 8
[  226.781830][ T5915] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[  226.795258][ T6331] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  226.805876][ T5915] usb 5-1: config 179 has no interface number 0
[  226.819851][ T5915] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 63, changing to 9
[  226.859564][ T5915] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  226.903379][ T5915] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  226.951336][ T5915] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  227.000825][ T5915] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  227.022901][ T5915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  227.125041][ T5915] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input8
[  227.245421][ T5199] input input8: unable to receive magic message: -110
[  227.372126][ T5199] input input8: unable to receive magic message: -121
[  227.482033][ T5199] input input8: unable to receive magic message: -110
[  227.583626][ T5199] input input8: unable to receive magic message: -32
[  227.677320][ T7708] tmpfs: Unexpected value for 'inode32'
[  228.398075][ T7669] loop1: detected capacity change from 0 to 40427
[  228.421828][ T5915] usb 5-1: USB disconnect, device number 8
[  228.427799][    C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  228.457461][ T7669] F2FS-fs (loop1): build fault injection rate: 174
[  228.477374][ T7669] F2FS-fs (loop1): build fault injection type: 0x3bfe8c
[  228.545179][ T7669] F2FS-fs (loop1): invalid crc value
[  228.587415][ T7669] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-4)
[  228.939786][ T7714] loop1: detected capacity change from 0 to 512
[  228.971951][ T7714] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  229.023816][ T7714] EXT4-fs (loop1): SIPHASH is not a valid default hash value
[  229.802228][ T5850] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  230.415198][    C1] raw-gadget.0 gadget.1: ignoring, device is not running
[  230.638509][ T5850] usb 2-1: device descriptor read/64, error -32
[  230.775860][ T7732] loop6: detected capacity change from 0 to 512
[  230.848625][ T7732] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  230.924611][ T5850] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  230.978090][ T7732] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002]
[  230.986971][ T7732] System zones: 1-12
[  231.037394][ T7732] EXT4-fs (loop6): 1 truncate cleaned up
[  231.052347][ T7732] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  231.410848][ T5850] usb 2-1: Using ep0 maxpacket: 32
[  231.867807][ T5850] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  232.028701][ T6692] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  232.100838][ T5850] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  232.310585][ T5850] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  232.503240][ T5850] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  233.124861][ T5850] usb 2-1: config 0 descriptor??
[  233.568200][ T5850] usb 2-1: can't set config #0, error -71
[  233.609812][ T5850] usb 2-1: USB disconnect, device number 15
[  234.052010][   T24] usb 6-1: new low-speed USB device number 5 using dummy_hcd
[  234.534562][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  234.579481][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 8
[  234.631778][   T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  234.692656][   T24] usb 6-1: New USB device found, idVendor=05ac, idProduct=1440, bcdDevice= 0.00
[  234.718408][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  234.745390][   T24] usb 6-1: config 0 descriptor??
[  234.751284][ T7741] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  234.950163][ T7753] loop6: detected capacity change from 0 to 512
[  235.008237][ T7753] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  235.082972][ T7753] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002]
[  235.092270][ T7753] System zones: 1-12
[  235.122837][ T7753] EXT4-fs (loop6): 1 truncate cleaned up
[  235.146374][ T7753] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  235.712396][ T6692] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  235.727477][   T24] appleir 0003:05AC:1440.0006: unknown main item tag 0x0
[  235.767627][   T24] appleir 0003:05AC:1440.0006: unknown main item tag 0x0
[  235.818599][   T24] appleir 0003:05AC:1440.0006: unknown main item tag 0x0
[  235.869483][ T7771] loop1: detected capacity change from 0 to 512
[  235.902215][   T24] appleir 0003:05AC:1440.0006: unknown main item tag 0x0
[  236.052146][   T24] appleir 0003:05AC:1440.0006: unknown main item tag 0x0
[  236.175193][   T24] appleir 0003:05AC:1440.0006: unknown main item tag 0x0
[  236.313570][   T24] appleir 0003:05AC:1440.0006: unknown main item tag 0x0
[  236.445010][   T24] appleir 0003:05AC:1440.0006: unknown main item tag 0x0
[  236.584440][   T24] appleir 0003:05AC:1440.0006: unknown main item tag 0x0
[  236.712684][   T24] appleir 0003:05AC:1440.0006: unknown main item tag 0x0
[  236.857705][ T7771] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  236.876194][   T24] appleir 0003:05AC:1440.0006: collection stack underflow
[  236.960395][   T24] appleir 0003:05AC:1440.0006: item 0 0 0 12 parsing failed
[  237.344864][   T24] appleir 0003:05AC:1440.0006: parse failed
[  237.478946][   T30] audit: type=1326 audit(1773717070.522:241): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=7765 comm="syz.1.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7b9f9c799 code=0x7ffc0000
[  237.702993][   T24] appleir 0003:05AC:1440.0006: probe with driver appleir failed with error -22
[  237.863945][   T24] usb 6-1: USB disconnect, device number 5
[  237.913011][   T30] audit: type=1326 audit(1773717070.532:242): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=7765 comm="syz.1.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7b9f9c799 code=0x7ffc0000
[  238.116544][   T30] audit: type=1326 audit(1773717070.532:243): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=7765 comm="syz.1.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7b9f9c799 code=0x7ffc0000
[  238.343988][   T30] audit: type=1326 audit(1773717070.532:244): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=7765 comm="syz.1.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7b9f9c799 code=0x7ffc0000
[  238.409053][   T30] audit: type=1326 audit(1773717070.532:245): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=7765 comm="syz.1.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7b9f9c799 code=0x7ffc0000
[  238.910334][   T30] audit: type=1326 audit(1773717070.532:246): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=7765 comm="syz.1.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fa7b9f9c799 code=0x7ffc0000
[  238.933510][   T30] audit: type=1326 audit(1773717070.550:247): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=7765 comm="syz.1.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7b9f9c799 code=0x7ffc0000
[  238.956315][   T30] audit: type=1326 audit(1773717070.550:248): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=7765 comm="syz.1.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7b9f9c799 code=0x7ffc0000
[  239.024555][ T7789] loop1: detected capacity change from 0 to 512
[  239.230955][ T7789] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  239.259378][ T7789] ext4 filesystem being mounted at /85/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  239.343772][ T7789] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  239.410185][ T7800] loop5: detected capacity change from 0 to 512
[  239.454134][ T7800] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  239.498506][ T7800] EXT4-fs (loop5): SIPHASH is not a valid default hash value
[  239.544429][ T5844] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  239.789180][    T9] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  239.850676][ T7808] syzkaller0: entered promiscuous mode
[  239.857618][ T7808] syzkaller0: entered allmulticast mode
[  240.356127][ T5915] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  240.490137][   T10] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  240.578192][    T9] usb 7-1: Using ep0 maxpacket: 8
[  240.591203][    T9] usb 7-1: config 0 has no interfaces?
[  240.607979][    T9] usb 7-1: New USB device found, idVendor=0b57, idProduct=852a, bcdDevice=6d.39
[  240.642412][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  240.656261][   T10] usb 6-1: Using ep0 maxpacket: 32
[  240.679491][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  240.701661][    T9] usb 7-1: Product: syz
[  240.719224][    T9] usb 7-1: Manufacturer: syz
[  240.736275][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  240.746733][    T9] usb 7-1: SerialNumber: syz
[  240.766510][    T9] usb 7-1: config 0 descriptor??
[  240.777672][   T10] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  240.787025][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  240.814897][   T10] usb 6-1: config 0 descriptor??
[  240.829378][   T10] hub 6-1:0.0: USB hub found
[  241.038135][ T5915] usb 2-1: Using ep0 maxpacket: 32
[  241.046679][ T5915] usb 2-1: config 0 has an invalid interface number: 4 but max is 0
[  241.060058][ T5915] usb 2-1: config 0 has no interface number 0
[  241.069962][ T5915] usb 2-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  241.589932][ T5915] usb 2-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  241.863002][ T5915] usb 2-1: config 0 interface 4 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  241.889905][ T5936] usb 7-1: USB disconnect, device number 5
[  241.912682][   T10] hub 6-1:0.0: 1 port detected
[  241.927883][ T5915] usb 2-1: New USB device found, idVendor=046d, idProduct=c537, bcdDevice= 0.00
[  241.977747][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  242.010232][ T5915] usb 2-1: config 0 descriptor??
[  242.787402][ T5915] usbhid 2-1:0.4: can't add hid device: -71
[  242.801583][ T5915] usbhid 2-1:0.4: probe with driver usbhid failed with error -71
[  242.845985][ T5915] usb 2-1: USB disconnect, device number 16
[  242.857439][   T10] hub 6-1:0.0: activate --> -90
[  243.072058][   T10] hub 6-1:0.0: hub_ext_port_status failed (err = -71)
[  243.079066][ T5922] usb 6-1: USB disconnect, device number 6
[  243.932524][ T7850] netlink: 48 bytes leftover after parsing attributes in process `syz.5.486'.
[  243.971747][ T7850] netlink: 48 bytes leftover after parsing attributes in process `syz.5.486'.
[  245.952135][ T7866] loop5: detected capacity change from 0 to 8192
[  246.222798][ T7864] syzkaller0: entered promiscuous mode
[  246.243007][ T7864] syzkaller0: entered allmulticast mode
[  246.663630][ T7879] loop6: detected capacity change from 0 to 512
[  246.701143][ T7879] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  246.778866][ T7879] EXT4-fs (loop6): SIPHASH is not a valid default hash value
[  247.112540][ T7887] loop1: detected capacity change from 0 to 256
[  247.125137][ T7887] exfat: Bad value for 'umask'
[  247.206765][    T9] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  247.388255][    T9] usb 7-1: Using ep0 maxpacket: 32
[  247.396745][    T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  247.426894][    T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  247.451520][    T9] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  247.514461][    T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  247.543926][ T7889] loop1: detected capacity change from 0 to 128
[  247.752856][ T7889] EXT4-fs (loop1): Test dummy encryption mode enabled
[  247.858582][ T7889] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  247.879609][ T7889] ext4 filesystem being mounted at /89/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  248.484334][    T9] usb 7-1: config 0 descriptor??
[  249.968497][    T9] hub 7-1:0.0: USB hub found
[  250.067644][ T7893] tipc: Failed to remove unknown binding: 66,1,1/0:3971518296/3971518298
[  250.076235][ T7893] tipc: Failed to remove unknown binding: 66,1,1/0:3971518296/3971518298
[  250.164413][    T9] hub 7-1:0.0: config failed, can't read hub descriptor (err -22)
[  250.246449][    T9] usbhid 7-1:0.0: can't add hid device: -71
[  250.263047][    T9] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  250.339752][    T9] usb 7-1: USB disconnect, device number 6
[  253.370262][ T5844] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  253.386721][ T7899] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  253.423977][ T7899] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  253.442835][   T30] audit: type=1326 audit(1773717085.489:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7920 comm="syz.6.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4c79c799 code=0x7ffc0000
[  253.510513][   T30] audit: type=1326 audit(1773717085.489:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7920 comm="syz.6.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4c79c799 code=0x7ffc0000
[  253.533309][   T30] audit: type=1326 audit(1773717085.498:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7920 comm="syz.6.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f2a4c79c799 code=0x7ffc0000
[  253.561351][   T30] audit: type=1326 audit(1773717085.498:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7920 comm="syz.6.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4c79c799 code=0x7ffc0000
[  253.656830][   T30] audit: type=1326 audit(1773717085.498:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7920 comm="syz.6.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2a4c79c799 code=0x7ffc0000
[  253.700069][ T7899] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  253.719558][   T30] audit: type=1326 audit(1773717085.498:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7920 comm="syz.6.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4c79c799 code=0x7ffc0000
[  253.749802][ T7899] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  253.758684][   T30] audit: type=1326 audit(1773717085.498:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7920 comm="syz.6.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f2a4c79c799 code=0x7ffc0000
[  253.783500][   T30] audit: type=1326 audit(1773717085.498:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7920 comm="syz.6.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4c79c799 code=0x7ffc0000
[  253.807989][   T30] audit: type=1326 audit(1773717085.498:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7920 comm="syz.6.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f2a4c79c799 code=0x7ffc0000
[  254.507552][   T30] audit: type=1326 audit(1773717085.498:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7920 comm="syz.6.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4c79c799 code=0x7ffc0000
[  254.543198][ T7899] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  254.575797][ T7899] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  254.660657][ T7899] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  254.690578][ T7899] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  254.704443][ T7932] loop6: detected capacity change from 0 to 512
[  254.717190][ T7932] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  254.730073][ T7899] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  254.737884][ T7932] EXT4-fs (loop6): SIPHASH is not a valid default hash value
[  254.751864][ T7899] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  254.776971][ T7899] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  254.799393][ T7899] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  254.814593][ T7899] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  254.837858][ T7899] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  254.944456][ T7937] syzkaller0: entered promiscuous mode
[  254.951210][ T7937] syzkaller0: entered allmulticast mode
[  255.032229][ T7941] loop5: detected capacity change from 0 to 128
[  255.046578][ T7941] EXT4-fs: inline encryption not supported
[  255.060247][ T7941] EXT4-fs (loop5): Test dummy encryption mode enabled
[  255.138836][   T24] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  255.157061][ T5936] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  255.238878][ T7941] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  255.252840][ T7941] ext4 filesystem being mounted at /57/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  255.380143][ T6331] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  255.492336][ T5936] usb 5-1: Using ep0 maxpacket: 32
[  255.498108][   T24] usb 7-1: Using ep0 maxpacket: 32
[  255.507708][ T5936] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  255.520077][   T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  255.531183][ T5862] Bluetooth: hci1: command 0x0406 tx timeout
[  255.531616][   T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  255.547707][ T5936] usb 5-1: config 0 has no interfaces?
[  255.583591][ T5936] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  255.617298][ T5936] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  255.673550][   T24] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  255.829050][ T5936] usb 5-1: Product: syz
[  255.866109][ T5862] Bluetooth: hci2: command 0x0406 tx timeout
[  255.895392][   T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  255.959745][ T5936] usb 5-1: Manufacturer: syz
[  256.049702][ T5936] usb 5-1: SerialNumber: syz
[  256.198688][   T24] usb 7-1: config 0 descriptor??
[  256.327527][ T5936] usb 5-1: config 0 descriptor??
[  256.341991][   T24] hub 7-1:0.0: USB hub found
[  256.539646][ T7961] loop1: detected capacity change from 0 to 2048
[  256.681897][   T24] hub 7-1:0.0: 1 port detected
[  256.806853][ T5862] Bluetooth: hci4: command 0x0406 tx timeout
[  256.813091][   T51] Bluetooth: hci3: command 0x0406 tx timeout
[  256.899259][   T51] Bluetooth: hci5: command 0x0c1a tx timeout
[  256.979542][   T51] Bluetooth: hci0: command 0x0c1a tx timeout
[  257.506581][   T24] hub 7-1:0.0: activate --> -90
[  257.704016][ T7975] syzkaller0: entered promiscuous mode
[  257.709674][ T7975] syzkaller0: entered allmulticast mode
[  257.723112][   T24] hub 7-1:0.0: hub_ext_port_status failed (err = -71)
[  257.731560][ T5850] usb 7-1: USB disconnect, device number 7
[  257.749188][   T51] Bluetooth: hci1: command 0x0406 tx timeout
[  258.110810][   T51] Bluetooth: hci2: command 0x0406 tx timeout
[  258.280552][    T9] usb 5-1: USB disconnect, device number 9
[  258.521125][ T7994] loop4: detected capacity change from 0 to 4096
[  259.175223][ T5862] Bluetooth: hci4: command 0x0406 tx timeout
[  259.181505][ T5862] Bluetooth: hci5: command 0x0c1a tx timeout
[  259.187585][   T51] Bluetooth: hci3: command 0x0406 tx timeout
[  259.201219][   T51] Bluetooth: hci0: command 0x0c1a tx timeout
[  259.213700][ T7994] EXT4-fs (loop4): Test dummy encryption mode enabled
[  259.314325][ T7994] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  259.442291][ T8004] loop6: detected capacity change from 0 to 512
[  259.496939][ T5856] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  259.768832][ T8011] syzkaller0: entered promiscuous mode
[  259.794312][ T8011] syzkaller0: entered allmulticast mode
[  260.225022][ T8032] loop5: detected capacity change from 0 to 512
[  260.464680][ T8032] EXT4-fs (loop5): 1 truncate cleaned up
[  260.472631][ T8032] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  260.525799][ T8032] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.551: invalid indirect mapped block 4294901760 (level 0)
[  260.549620][ T8032] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.551: invalid indirect mapped block 4294967295 (level 1)
[  260.564427][ T8032] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.551: invalid indirect mapped block 65535 (level 2)
[  260.620282][ T6331] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  261.339506][   T51] Bluetooth: hci5: command 0x0c1a tx timeout
[  261.379151][ T8044] loop4: detected capacity change from 0 to 256
[  261.399198][ T8044] exfat: Bad value for 'time_offset'
[  261.425444][   T51] Bluetooth: hci0: command 0x0c1a tx timeout
[  261.704018][ T8052] loop4: detected capacity change from 0 to 128
[  262.817945][ T1315] ieee802154 phy0 wpan0: encryption failed: -22
[  262.824420][ T1315] ieee802154 phy1 wpan1: encryption failed: -22
[  262.989272][ T8066] syzkaller0: entered promiscuous mode
[  263.012750][ T8066] syzkaller0: entered allmulticast mode
[  263.338243][ T8073] loop1: detected capacity change from 0 to 512
[  263.971860][ T8073] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.564: inode has both inline data and extents flags
[  263.985209][ T8073] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  263.988503][ T8073] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.564: couldn't read orphan inode 15 (err -117)
[  263.998005][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  263.998032][    C1] EXT4-fs (loop1): initial error at time 1773717095: ext4_orphan_get:1391: inode 15
[  263.998069][    C1] EXT4-fs (loop1): last error at time 1773717095: ext4_orphan_get:1391: inode 15
[  264.035253][ T8073] loop1: lost filesystem error report for type 5 error -117
[  264.040865][ T8073] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  264.080962][ T8076] loop6: detected capacity change from 0 to 512
[  264.106412][ T8076] EXT4-fs: inline encryption not supported
[  264.141022][ T8076] EXT4-fs: Ignoring removed mblk_io_submit option
[  264.215154][ T8076] EXT4-fs (loop6): Test dummy encryption mode enabled
[  264.259425][ T8076] EXT4-fs (loop6): #blocks per group too big: 65535
[  264.369807][ T5844] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  264.916692][ T8089] loop6: detected capacity change from 0 to 1024
[  264.936763][ T8089] EXT4-fs: Ignoring removed nomblk_io_submit option
[  265.030871][ T8089] EXT4-fs (loop6): Test dummy encryption mode enabled
[  265.049591][ T8089] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  265.112743][ T8089] EXT4-fs error (device loop6): ext4_iget_extra_inode:5028: inode #15: comm syz.6.570: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled
[  265.245155][ T8095] EXT4-fs error (device loop6): ext4_iget_extra_inode:5028: inode #15: comm syz.6.570: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled
[  266.325237][ T6692] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  266.445310][ T8105] syzkaller0: entered promiscuous mode
[  266.457602][ T8105] syzkaller0: entered allmulticast mode
[  266.633505][ T8081] loop1: detected capacity change from 0 to 40427
[  266.653003][ T8081] F2FS-fs (loop1): build fault injection rate: 771
[  266.673628][ T8081] F2FS-fs (loop1): invalid crc value
[  266.789735][ T8115] loop4: detected capacity change from 0 to 512
[  266.978853][ T8115] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.576: inode has both inline data and extents flags
[  266.992208][ T8115] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  266.994460][ T8115] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.576: couldn't read orphan inode 15 (err -117)
[  267.003731][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  267.003752][    C1] EXT4-fs (loop4): initial error at time 1773717098: ext4_orphan_get:1391: inode 15
[  267.003792][    C1] EXT4-fs (loop4): last error at time 1773717098: ext4_orphan_get:1391: inode 15
[  267.042300][ T8115] loop4: lost filesystem error report for type 5 error -117
[  267.060302][ T8115] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  267.608487][ T5856] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  267.846081][ T8081] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  267.977582][ T8126] loop5: detected capacity change from 0 to 2048
[  268.100319][ T8126] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  268.126717][ T8126] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  268.177328][ T8126] EXT4-fs (loop5): resizing filesystem from 256 to 0 blocks
[  268.218433][ T8126] EXT4-fs warning (device loop5): ext4_resize_fs:2041: can't shrink FS - resize aborted
[  268.250527][ T8137] loop6: detected capacity change from 0 to 256
[  268.369414][ T6331] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  268.548897][ T6692] FAT-fs (loop6): error, corrupted directory (invalid entries)
[  268.576316][ T6692] FAT-fs (loop6): Filesystem has been set read-only
[  268.590558][ T6692] FAT-fs (loop6): error, corrupted directory (invalid entries)
[  269.792447][ T8150] kvm: pic: single mode not supported
[  269.792652][ T8150] kvm: pic: non byte read
[  269.804366][ T8150] kvm: pic: level sensitive irq not supported
[  269.804449][ T8150] kvm: pic: non byte read
[  269.884093][ T8150] kvm: pic: non byte read
[  269.888951][ T8150] kvm: pic: non byte read
[  269.895867][ T8150] kvm: pic: single mode not supported
[  269.895886][ T8150] kvm: pic: level sensitive irq not supported
[  269.954428][ T8154] loop5: detected capacity change from 0 to 512
[  269.984234][ T8154] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  270.027449][ T8150] kvm: pic: non byte read
[  270.067385][ T8154] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002]
[  270.077698][ T8154] System zones: 1-12
[  270.094376][ T8154] EXT4-fs (loop5): 1 truncate cleaned up
[  270.109853][ T8154] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  270.445047][ T8150] kvm: pic: non byte read
[  270.590125][ T8150] kvm: pic: non byte read
[  270.610656][ T8150] kvm: pic: level sensitive irq not supported
[  270.610736][ T8150] kvm: pic: non byte read
[  270.628661][ T8150] kvm: pic: non byte read
[  270.724273][ T6331] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  270.871695][   T63] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  271.064122][   T63] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  271.283920][   T63] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  271.611823][   T63] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  271.738118][ T5862] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  271.752281][ T5862] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  271.763282][ T5862] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  271.778714][ T5862] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  271.787840][ T5862] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  271.909005][ T8194] loop1: detected capacity change from 0 to 4096
[  271.961367][ T8194] EXT4-fs: inline encryption not supported
[  272.018597][ T8194] ext4: Unknown parameter 'nouser_xattr'
[  272.122507][ T8198] xt_hashlimit: size too large, truncated to 1048576
[  272.372447][   T31] INFO: task syz.2.66:6187 blocked for more than 143 seconds.
[  272.380530][ T8204] loop4: detected capacity change from 0 to 128
[  272.405725][   T31]       Not tainted syzkaller #0
[  272.421907][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  272.476904][   T31] task:syz.2.66        state:D stack:28800 pid:6187  tgid:6183  ppid:5845   task_flags:0x400040 flags:0x00080002
[  272.550043][   T31] Call Trace:
[  272.578072][ T8210] tmpfs: Unexpected value for 'inode32'
[  272.593540][   T31]  <TASK>
[  272.625493][   T31]  __schedule+0x1665/0x5590
[  272.651409][   T31]  ? is_bpf_text_address+0x26/0x2b0
[  272.656703][   T31]  ? __pfx___schedule+0x10/0x10
[  272.661804][   T31]  ? schedule+0x90/0x360
[  272.666096][   T31]  schedule+0x164/0x360
[  272.670333][   T31]  schedule_preempt_disabled+0x13/0x30
[  272.676029][   T31]  rwsem_down_write_slowpath+0x883/0x1080
[  272.681827][   T31]  ? rwsem_down_write_slowpath+0x4a3/0x1080
[  272.688218][   T31]  ? __pfx_rwsem_down_write_slowpath+0x10/0x10
[  272.694506][   T31]  ? aa_file_perm+0x192/0x15e0
[  272.700598][   T31]  down_write+0x1bc/0x200
[  272.705140][   T31]  ? __pfx_down_write+0x10/0x10
[  272.710129][   T31]  ? __pfx_file_ioctl+0x10/0x10
[  272.715496][   T31]  shmem_file_write_iter+0x7f/0x120
[  272.720852][   T31]  do_iter_readv_writev+0x619/0x8c0
[  272.726192][   T31]  ? __pfx_do_iter_readv_writev+0x10/0x10
[  272.732131][   T31]  vfs_writev+0x33c/0x990
[  272.736690][   T31]  ? __pfx_vfs_writev+0x10/0x10
[  272.741727][   T31]  ? __fget_files+0x2a/0x420
[  272.746918][   T31]  ? __fget_files+0x3a0/0x420
[  272.751703][   T31]  ? __fget_files+0x2a/0x420
[  272.756442][   T31]  __se_sys_pwritev2+0x184/0x2a0
[  272.761646][   T31]  ? __pfx___se_sys_pwritev2+0x10/0x10
[  272.767242][   T31]  ? __pfx_kcov_ioctl+0x10/0x10
[  272.772323][   T31]  ? __x64_sys_pwritev2+0x20/0xc0
[  272.777502][   T31]  do_syscall_64+0x14d/0xf80
[  272.782272][   T31]  ? trace_irq_disable+0x3b/0x150
[  272.787417][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  272.793667][   T31]  ? clear_bhb_loop+0x40/0x90
[  273.197127][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  273.222151][   T31] RIP: 0033:0x7fa85b39c799
[  273.231587][   T31] RSP: 002b:00007fa8595b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148
[  273.291681][   T31] RAX: ffffffffffffffda RBX: 00007fa85b616180 RCX: 00007fa85b39c799
[  273.317126][   T31] RDX: 0000000000000001 RSI: 00002000000006c0 RDI: 0000000000000004
[  273.338655][   T31] RBP: 00007fa85b432c99 R08: 0000000000000002 R09: 0000000000000003
[  273.357536][   T31] R10: 000000000000005e R11: 0000000000000246 R12: 0000000000000000
[  273.382137][   T31] R13: 00007fa85b616218 R14: 00007fa85b616180 R15: 00007ffc5d018f78
[  273.400435][   T31]  </TASK>
[  273.407165][   T31] 
[  273.407165][   T31] Showing all locks held in the system:
[  273.427474][   T31] 2 locks held by kworker/u8:1/13:
[  273.432778][   T24] usb 6-1: new full-speed USB device number 7 using dummy_hcd
[  273.446192][   T31]  #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x894/0x1780
[  273.474341][   T31]  #1: ffffc90000127c40 (connector_reaper_work){+.+.}-{0:0}, at: process_one_work+0x8bb/0x1780
[  273.500184][   T31] 6 locks held by kworker/1:0/24:
[  273.511103][   T31]  #0: ffff888020aeb540 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x894/0x1780
[  273.534916][   T31]  #1: ffffc900001e7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x8bb/0x1780
[  273.553547][   T31]  #2: ffff88802b706190 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30
[  273.562995][   T31]  #3: ffff88802b76b518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x217a/0x4f30
[  273.575671][   T31]  #4: ffff8880296a6d60 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21a2/0x4f30
[  273.586372][   T31]  #5: ffffffff8f47a7a8 (ehci_cf_port_reset_rwsem){.+.+}-{4:4}, at: hub_port_reset+0x14e/0x1840
[  273.597547][   T31] 1 lock held by khungtaskd/31:
[  273.603755][   T31]  #0: ffffffff8e75d6a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  273.616984][   T31] 3 locks held by kworker/u8:2/36:
[  273.622223][   T31] 6 locks held by kworker/u8:4/63:
[  273.627986][   T31]  #0: ffff88801c2b6140 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x894/0x1780
[  273.641416][   T31]  #1: ffffc9000202fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x8bb/0x1780
[  273.653970][   T24] usb 6-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30
[  273.665408][   T31]  #2: ffffffff8fbc6a48 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800
[  273.676041][   T31]  #3: ffff88807b7db0e0 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x126/0x420
[  273.690282][   T31]  #4: ffff88807b7da258 (&devlink->lock_key#7){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x13f/0x420
[  273.701431][   T31]  #5: ffffffff8fbd5a40 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_dev_lock+0x257/0x2f0
[  273.716989][   T31] 2 locks held by dhcpcd/5509:
[  273.723235][   T31]  #0: ffff88807ed646e8 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: netlink_dump+0xe4/0xe80
[  273.726763][   T24] usb 6-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  273.733999][   T31]  #1: 
[  273.748216][   T24] usb 6-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255
[  273.761897][   T31] ffffffff8fbd5a40 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x92/0x200
[  273.780939][   T31] 2 locks held by getty/5601:
[  273.785892][   T31]  #0: ffff888037e1f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  273.797518][   T31]  #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0
[  273.797776][   T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  273.817383][   T31] 1 lock held by syz-executor/5856:
[  273.822655][   T31]  #0: ffffffff8e7638e8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770
[  273.833832][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  273.840780][   T31] 3 locks held by kworker/0:6/6034:
[  273.842241][   T24] usb 6-1: SerialNumber: syz
[  273.847173][   T31]  #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x894/0x1780
[  273.863929][   T31]  #1: ffffc90004d27c40 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x8bb/0x1780
[  273.879269][   T31]  #2: ffff888033fc6230 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x202/0x3d0
[  273.889579][   T31] 2 locks held by syz.2.66/6187:
[  273.894736][   T31]  #0: ffff88802d582410 (sb_writers#5){.+.+}-{0:0}, at: vfs_writev+0x2aa/0x990
[  273.904636][   T31]  #1: ffff88807c1dcc00 (&sb->s_type->i_mutex_key#15){+.+.}-{4:4}, at: shmem_file_write_iter+0x7f/0x120
[  273.916279][   T31] 3 locks held by kworker/u8:12/6461:
[  273.921708][   T31]  #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x894/0x1780
[  273.933408][   T31]  #1: ffffc90007337c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x8bb/0x1780
[  273.944296][   T31]  #2: ffffffff8fbd5a40 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[  273.953379][   T31] 1 lock held by syz-executor/8195:
[  273.958900][   T31]  #0: ffffffff8fbd5a40 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3bc/0x1e30
[  273.968445][   T31] 1 lock held by syz.1.599/8203:
[  273.973507][   T31]  #0: ffffffff8fbd5a40 (rtnl_mutex){+.+.}-{4:4}, at: dev_ethtool+0x1e1/0x1ae0
[  273.982768][   T31] 3 locks held by syz.5.600/8207:
[  273.988991][   T31]  #0: ffffffff90142990 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250
[  273.999330][   T31]  #1: ffffffff8fbd5a40 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0
[  274.008588][   T31]  #2: ffffffff8e7637b8 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[  274.015547][   T51] Bluetooth: hci0: command tx timeout
[  274.022370][   T31] 
[  274.036454][   T31] =============================================
[  274.036454][   T31] 
[  274.046338][   T31] NMI backtrace for cpu 1
[  274.046355][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  274.046382][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  274.046395][   T31] Call Trace:
[  274.046403][   T31]  <TASK>
[  274.046411][   T31]  dump_stack_lvl+0xe8/0x150
[  274.046450][   T31]  nmi_cpu_backtrace+0x274/0x2d0
[  274.046482][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  274.046516][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  274.046552][   T31]  sys_info+0x135/0x170
[  274.046580][   T31]  watchdog+0x1002/0x1060
[  274.046613][   T31]  ? watchdog+0x1da/0x1060
[  274.046644][   T31]  kthread+0x388/0x470
[  274.046670][   T31]  ? __pfx_watchdog+0x10/0x10
[  274.046693][   T31]  ? __pfx_kthread+0x10/0x10
[  274.046719][   T31]  ret_from_fork+0x51e/0xb90
[  274.046753][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  274.046781][   T31]  ? __switch_to+0xc7d/0x1450
[  274.046807][   T31]  ? __pfx_kthread+0x10/0x10
[  274.046828][   T31]  ret_from_fork_asm+0x1a/0x30
[  274.046861][   T31]  </TASK>
[  274.046900][   T31] Sending NMI from CPU 1 to CPUs 0:
[  274.159706][    C0] NMI backtrace for cpu 0
[  274.159723][    C0] CPU: 0 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) 
[  274.159743][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  274.159754][    C0] Workqueue: events_unbound nsim_dev_trap_report_work
[  274.159786][    C0] RIP: 0010:kasan_check_range+0x1ca/0x2c0
[  274.159811][    C0] Code: dc 4d 01 f3 49 8d 5c 24 07 4d 85 e4 49 0f 49 dc 48 83 e3 f8 49 29 dc 74 0e 41 80 3b 00 75 7c 49 ff c3 49 ff cc 75 f2 5b 41 5c <41> 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 45 84 ff 0f 85 a1 00 00 00
[  274.159835][    C0] RSP: 0018:ffffc90000ac74d0 EFLAGS: 00000256
[  274.159850][    C0] RAX: ffffc90000ac7f01 RBX: 0000000000000010 RCX: ffffffff817749be
[  274.159863][    C0] RDX: 0000000000000001 RSI: 0000000000000010 RDI: ffffc90000ac7638
[  274.159875][    C0] RBP: 0000000000000000 R08: ffffc90000ac7647 R09: 1ffff92000158ec8
[  274.159887][    C0] R10: dffffc0000000000 R11: fffff52000158ec9 R12: ffffc90000ac7638
[  274.159900][    C0] R13: 1ffff92000158ebf R14: fffff52000158ec9 R15: 1ffff92000158ec7
[  274.159913][    C0] FS:  0000000000000000(0000) GS:ffff888125437000(0000) knlGS:0000000000000000
[  274.159927][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  274.159938][    C0] CR2: 00005555875d3a68 CR3: 0000000032640000 CR4: 00000000003526f0
[  274.159955][    C0] Call Trace:
[  274.159962][    C0]  <TASK>
[  274.159972][    C0]  __asan_memset+0x22/0x50
[  274.160002][    C0]  unwind_next_frame+0xeae/0x23c0
[  274.160023][    C0]  ? unwind_next_frame+0xa5/0x23c0
[  274.160040][    C0]  ? ret_from_fork+0x51e/0xb90
[  274.160067][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  274.160091][    C0]  arch_stack_walk+0x11b/0x150
[  274.160113][    C0]  ? ret_from_fork_asm+0x1a/0x30
[  274.160136][    C0]  stack_trace_save+0xa9/0x100
[  274.160157][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  274.160179][    C0]  ? stack_depot_save_flags+0x33/0x810
[  274.160200][    C0]  kasan_save_track+0x3e/0x80
[  274.160226][    C0]  ? kasan_save_track+0x3e/0x80
[  274.160251][    C0]  ? __kasan_kmalloc+0x93/0xb0
[  274.160277][    C0]  ? __kmalloc_node_track_caller_noprof+0x4db/0x7b0
[  274.160294][    C0]  ? __alloc_skb+0x2c1/0x7d0
[  274.160312][    C0]  ? nsim_dev_trap_report_work+0x29a/0xb80
[  274.160337][    C0]  ? process_one_work+0x9ab/0x1780
[  274.160361][    C0]  ? worker_thread+0xba8/0x11e0
[  274.160376][    C0]  ? kthread+0x388/0x470
[  274.160394][    C0]  ? ret_from_fork+0x51e/0xb90
[  274.160447][    C0]  __kasan_kmalloc+0x93/0xb0
[  274.160463][    C0]  __kmalloc_node_track_caller_noprof+0x4db/0x7b0
[  274.160481][    C0]  ? nsim_dev_trap_report_work+0x29a/0xb80
[  274.160506][    C0]  ? __kmalloc_node_track_caller_noprof+0x34a/0x7b0
[  274.160526][    C0]  __alloc_skb+0x2c1/0x7d0
[  274.160548][    C0]  nsim_dev_trap_report_work+0x29a/0xb80
[  274.160587][    C0]  ? process_one_work+0x8bb/0x1780
[  274.160612][    C0]  process_one_work+0x9ab/0x1780
[  274.160648][    C0]  ? __pfx_process_one_work+0x10/0x10
[  274.160672][    C0]  ? do_raw_spin_lock+0x12b/0x2f0
[  274.160705][    C0]  worker_thread+0xba8/0x11e0
[  274.160736][    C0]  kthread+0x388/0x470
[  274.160756][    C0]  ? __pfx_worker_thread+0x10/0x10
[  274.160771][    C0]  ? __pfx_kthread+0x10/0x10
[  274.160791][    C0]  ret_from_fork+0x51e/0xb90
[  274.160816][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  274.160847][    C0]  ? __switch_to+0xc7d/0x1450
[  274.160873][    C0]  ? __pfx_kthread+0x10/0x10
[  274.160893][    C0]  ret_from_fork_asm+0x1a/0x30
[  274.160918][    C0]  </TASK>
[  274.508636][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  274.515558][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  274.524698][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  274.534784][   T31] Call Trace:
[  274.538167][   T31]  <TASK>
[  274.541105][   T31]  vpanic+0x56c/0xa60
[  274.545119][   T31]  ? __pfx___schedule+0x10/0x10
[  274.549983][   T31]  ? __pfx_vpanic+0x10/0x10
[  274.554515][   T31]  ? nmi_trigger_cpumask_backtrace+0x1f4/0x300
[  274.560717][   T31]  panic+0xc5/0xd0
[  274.564480][   T31]  ? __pfx_panic+0x10/0x10
[  274.568938][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  274.574335][   T31]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  274.580541][   T31]  watchdog+0x105b/0x1060
[  274.584929][   T31]  ? watchdog+0x1da/0x1060
[  274.589379][   T31]  kthread+0x388/0x470
[  274.593477][   T31]  ? __pfx_watchdog+0x10/0x10
[  274.598173][   T31]  ? __pfx_kthread+0x10/0x10
[  274.602815][   T31]  ret_from_fork+0x51e/0xb90
[  274.607440][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  274.612578][   T31]  ? __switch_to+0xc7d/0x1450
[  274.617277][   T31]  ? __pfx_kthread+0x10/0x10
[  274.621887][   T31]  ret_from_fork_asm+0x1a/0x30
[  274.626682][   T31]  </TASK>
[  274.630527][   T31] Kernel Offset: disabled
[  274.634883][   T31] Rebooting in 86400 seconds..