last executing test programs:

6m40.74537229s ago: executing program 32 (id=194):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x2c, r1, 0xa01, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x161c}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x865}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200000d0}, 0x4000)

6m21.275938708s ago: executing program 2 (id=349):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x7fffffffffffffff]}, 0x8, 0x80000)
io_setup(0x206, &(0x7f0000000200)=<r1=>0x0)
io_submit(r1, 0x47f, &(0x7f00000005c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000003c0)="951aa14bd6f68579cac67c83bf8d4500e5cea1bb1596d4ee6645fa16fa7cacb9214070a622a2c57b89075f59b85c7b5b2c41edc9d2cd5a2c95ed1c2cf72425be9c1a2df1b60a309bc3228d7e85b300f0d7a042a40166b9208e9d2e423c32ad8e47adedf5dc425c6bcb031fb2230835d41afc23476eae602bad3246417e5ac757", 0x80}])
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)

6m20.70508922s ago: executing program 2 (id=355):
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
setns(0xc9, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000008c0)=@filter={'filter\x00', 0xe, 0x4, 0x280, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'lo\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0)

6m20.423223763s ago: executing program 2 (id=356):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000000)={[{@discard}, {@barrier}]}, 0x3, 0x481, &(0x7f00000004c0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
setreuid(0x0, 0xee00)
lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)

6m19.39829044s ago: executing program 2 (id=361):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd0100000000001400000060000000030811"], 0xfdef)

6m18.367147476s ago: executing program 2 (id=366):
r0 = creat(&(0x7f0000000300)='./file0\x00', 0x6a)
close(r0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50)
r1 = socket$tipc(0x1e, 0x4, 0x0)
mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

6m17.661264361s ago: executing program 33 (id=366):
r0 = creat(&(0x7f0000000300)='./file0\x00', 0x6a)
close(r0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50)
r1 = socket$tipc(0x1e, 0x4, 0x0)
mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

4m51.574489428s ago: executing program 4 (id=981):
r0 = socket$inet6(0xa, 0x3, 0xff)
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x1a0, 0x270, 0xffffffff, 0xffffffff, 0xd0, 0x1a0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x7, 0x5a0}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0)
syz_emit_ethernet(0x76, &(0x7f00000022c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa30cebbab092486dd6000100000403a00fe80000000000000000000000000003cff02000000000000000000000000000104"], 0x0)

4m51.293552621s ago: executing program 4 (id=986):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000580), 0xaad80)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue0\x00'})
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40045304, &(0x7f0000000100)={{}, {0x0, 0x3}, 0x2})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f0000000240)={0x0, 0x9, 0x5, {0x6}, 0x3e8})

4m50.95209294s ago: executing program 4 (id=989):
io_uring_setup(0x205b, &(0x7f00000002c0))
openat$comedi(0xffffffffffffff9c, &(0x7f00000037c0)='/dev/comedi0\x00', 0x181001, 0x0)
r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000040)={0x0, 0x6399, 0x0, 0x3, 0x11}, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000180)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x4, 0x8, 0x0, 0x0, 0x4, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r0, 0x101, 0xc55f, 0x5, 0x0, 0x0)

4m50.659491354s ago: executing program 4 (id=992):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x11050ca, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89101)

4m49.982856781s ago: executing program 4 (id=996):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x101c91c, &(0x7f0000000000)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4}}, {@jqfmt_vfsv0}, {@resgid}, {@inlinecrypt}, {@jqfmt_vfsold}, {@noblock_validity}, {@usrjquota}, {@nodelalloc}, {@resgid, 0x32}, {@abort}, {@nouser_xattr}]}, 0x1d, 0x4e8, &(0x7f0000000540)="$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")
sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x4048880)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="020d0000100000002f3144a8edffffff03000600ff18000002004909000100000000000000001e0e080012000200010000d200000000000030006c540203009f7eae02000000adb20200000000f52c000000cdff00000001020014bb0000010000000023000013000300"], 0x80}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f00000000c0), 0x2c8, 0x0)

4m49.586736161s ago: executing program 4 (id=1001):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newpolicy={0xb8, 0x13, 0x401, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x1234, 0x1234, 0x0, 0x0, 0xa, 0x80, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}}, 0xb8}}, 0x140440c0)
sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001200000008000300", @ANYRES32=r2, @ANYBLOB="0a00060008021100000000000c004300"], 0x34}}, 0x0)

4m48.771879808s ago: executing program 34 (id=1001):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newpolicy={0xb8, 0x13, 0x401, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x1234, 0x1234, 0x0, 0x0, 0xa, 0x80, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}}, 0xb8}}, 0x140440c0)
sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001200000008000300", @ANYRES32=r2, @ANYBLOB="0a00060008021100000000000c004300"], 0x34}}, 0x0)

4m29.138961665s ago: executing program 5 (id=1173):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0)
mkdir(&(0x7f00000001c0)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x2, &(0x7f0000000840)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]})

4m28.659036717s ago: executing program 5 (id=1178):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000500)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000540)={0xc, r1})
ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x1)
ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r0, 0x3b71, &(0x7f0000000ac0)={0x20, 0x0, &(0x7f0000000a00), 0x10000, 0x80000000})

4m28.469847665s ago: executing program 5 (id=1179):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x804, &(0x7f0000000340)=ANY=[@ANYBLOB='iocharset=cp861,shortname=winnt,utf8=1,nocase,dos1xfloppy,shortname=mixed,utf8=1,uni_xlate=1,utf8=1,shortname=mixed,uni_xlate=1,codepage=1251,iocharset=iso8859-9,umask=00077777,utf8=0,rodir,\x00'/206], 0x1, 0x2a6, &(0x7f0000000c00)="$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")
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x800012, &(0x7f00000001c0)=ANY=[@ANYRES16=0x0, @ANYRES8], 0x1, 0x2c2, &(0x7f0000000f00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000001200)='.\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000001240)=""/82, 0x52)
ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f00000012c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])

4m28.110455887s ago: executing program 5 (id=1183):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
mount(0x0, &(0x7f0000000d40)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x40, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0)
pivot_root(&(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000340)='./file0/../file0/../file0\x00')

4m27.810378385s ago: executing program 5 (id=1189):
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000680)='./file2\x00', 0x800000, &(0x7f0000000000)=ANY=[], 0x1, 0x5504, &(0x7f000000c0c0)="$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")
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
fallocate(r0, 0x0, 0x0, 0x1000f4)
r1 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
fallocate(r1, 0x20, 0x0, 0x10000)

4m27.238174764s ago: executing program 5 (id=1194):
r0 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8)
r1 = gettid()
timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r1}, &(0x7f0000000080))
read$FUSE(r0, &(0x7f00000008c0)={0x2020}, 0xfffffef0)
timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0)

4m26.741261695s ago: executing program 35 (id=1194):
r0 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8)
r1 = gettid()
timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r1}, &(0x7f0000000080))
read$FUSE(r0, &(0x7f00000008c0)={0x2020}, 0xfffffef0)
timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0)

4m11.812308308s ago: executing program 1 (id=1332):
unshare(0x28000600)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
fsetxattr(r0, &(0x7f0000000080)=@known='trusted.overlay.upper\x00', 0x0, 0x0, 0x0)
fgetxattr(r0, &(0x7f0000000000)=@known='trusted.overlay.upper\x00', 0x0, 0xffde)

4m11.412291029s ago: executing program 1 (id=1338):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000440)=0x2, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x801, 0xf84, 0x3}, 0x1c)
r1 = socket$netlink(0x10, 0x3, 0x4)
write(r1, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0xfdef)

4m11.202370152s ago: executing program 1 (id=1342):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/set_event\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='sys:evt:mod:nonexistent_module', 0x1e)
write(r0, &(0x7f0000000140)='!sys:evt:mod:nonexistent_module', 0x1f)

4m11.015377925s ago: executing program 1 (id=1347):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2125099, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000240)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000280)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
umount2(&(0x7f0000000340)='./file0\x00', 0x8)

4m10.765367691s ago: executing program 1 (id=1354):
syz_mount_image$hfs(&(0x7f0000000180), &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000812, &(0x7f0000001800)=ANY=[], 0x1, 0x305, &(0x7f0000000340)="$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")
r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000d40)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0)
syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, 0x0, 0x1, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xfffffffffffffea8, &(0x7f00000000c0)=ANY=[])

4m10.447077657s ago: executing program 1 (id=1358):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc41a, &(0x7f0000000a00)={[{@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@stripe={'stripe', 0x3d, 0xee9}}, {@nodioread_nolock}, {@discard}, {@usrjquota, 0x2e}, {@nouid32}, {@noauto_da_alloc}, {@jqfmt_vfsv0}, {@mb_optimize_scan}, {@nogrpid}], [], 0x2c}, 0x1, 0x477, &(0x7f0000000c80)="$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")
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x1, 0x8, 0x40, 0x42, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280), &(0x7f00000002c0), 0x1000, r0}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r0, &(0x7f0000000380), &(0x7f00000003c0)=""/97}, 0x20)

4m10.020508585s ago: executing program 36 (id=1358):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc41a, &(0x7f0000000a00)={[{@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@stripe={'stripe', 0x3d, 0xee9}}, {@nodioread_nolock}, {@discard}, {@usrjquota, 0x2e}, {@nouid32}, {@noauto_da_alloc}, {@jqfmt_vfsv0}, {@mb_optimize_scan}, {@nogrpid}], [], 0x2c}, 0x1, 0x477, &(0x7f0000000c80)="$eJzs289vFFUcAPDvbFt+YyviDxC1ij8af7S0oHLwgtGEi4mJHvBYSyFIoYbWRAiR6gGPhpNH9WjiX+BJLkY9abzq3ZgQw0U0kYyZ3ZllaXeX7W63C+znk0x33uybed83M6998940gL41mv1IIrZFxG8RMRwRA8szjFY+rl09P/PP1fMzSaTpW38l2W7x99XzM0XWJP/cmifGStVNKyycPXdyem5u9kyenlg89f7EwtlzL5w4NX189vjs6amDBw/sn3z5pakX16Se27NYd380v2fX4XcuvTFz5NK7P36TBbct/762HhUjHZc5GqMNT8BTHR/99rI9/2x4wbktZW19MCKGyu1/OAbKqYrheP2TngYHdFWapunGFVurPYClFLiLJdHrCIDeKP7QZ8+/xbKO3Y+eu3Ko8gCU1ftavlS+GYxSnmeo5vl2rY1GxJGlf7/Ilqg7DgEAsLa+y/o/z9fr/5XigZp89+RzQyMRcW9E7IiI+yJiZ0TcH1HO+2BEPLTK8keXpW+Ufz0fhPplc/u1u7UrhyJ5JZ/burn/V/T+YmQgT20v138oOXZibnZffk7GYmhjlp5sUsbl1379rNF3tf2/bMnKL/qCeRx/Di4boDs6vTjdSZ1rXfm4PAZ4YWX9k+pMQBIRuyJidxvH3xQRJ579ek91w4aag+aa17+JwTYCWib9KuKZyvVfimX1j5pQm8xPTmyKudl9E8VdsdJPP198s1H5t77+3ZVd/y117/9q/UeS2vnahdWXcfH3Txs+07R7/29I3i6vF7fTh9OLi2cmIzYkSyu3T93Yt0gX+bP6j+2t3/53RFz/Mt/v4YjIbuJHIuLRiHgsj/3xiHgiIvY2qf8Prz75Xvv1766s/kdXdf1XvzJw8vtvG5Xf2vU/UF4by7e08vuv1QA7OXcAAABwpyiV34FPSuPV9VJpfLzyDv/O2FKam19YfO7Y/Aenj1belR+JoVIx0jVcMx46mY+5FOmpfKy4SO8vjxunaZpuLqfHZ+bnujWnDrRma4P2n/ljoNfRAV1Xnkc7+Hlrmf2HF9xVbppHH+pdHMD6W4P3aIA7lPYP/Uv7h/5Vr/1fiLjWg1CAdebvP/Qv7R/6l/YP/Uv7h77Uyf/1N1vZcbhbR74TVy5HRKM8A20feWNEdBrh01vb3T1KvT6rra8U77RVt5TqZP6vVxFm17HVzBdivQLr8S8mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACANfJ/AAAA///tr+cS")
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x1, 0x8, 0x40, 0x42, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280), &(0x7f00000002c0), 0x1000, r0}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r0, &(0x7f0000000380), &(0x7f00000003c0)=""/97}, 0x20)

21.831069901s ago: executing program 7 (id=3661):
r0 = io_uring_setup(0x34ac, &(0x7f0000000540)={0x0, 0x1784, 0x0, 0x3})
io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f0000000080)={0x3e8, 0x1, 0x0, '\x00', 0x1}, 0x1)
io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f0000000100)={0x0, 0x0, 0x1, '\x00', 0x64}, 0x1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x8041}, 0x0)
io_uring_enter(r0, 0x0, 0x1, 0x9, &(0x7f0000000180), 0x18)

21.647946225s ago: executing program 7 (id=3666):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x4, &(0x7f0000000800), 0x1, 0x76a, &(0x7f0000001800)="$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")
r0 = syz_io_uring_setup(0x3032, &(0x7f0000000080)={0x0, 0x7011, 0x80, 0x0, 0xfffffffb}, &(0x7f0000000100)=<r1=>0x0, &(0x7f00000002c0)=<r2=>0x0, &(0x7f0000000180)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000240)={0x222081}, &(0x7f0000000280)='./file1\x00', 0x18, 0x0, 0x12345})
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000240), 0x8)
io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0)

21.070243733s ago: executing program 7 (id=3673):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000001600)={'wpan0\x00', <r3=>0x0})
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x30, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_OUT_KEY_ID={0xc, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_ATTR_SEC_ENABLED={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4)

20.83374405s ago: executing program 7 (id=3676):
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x2800088, &(0x7f0000000240)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x95, 0x2b8, &(0x7f00000010c0)="$eJzs3T9ra2UYAPDnpGkSdEgEJxE8oIPT5d67uqRIL1zMpGRQB714W5AmCC0U/INpJ1cXR1cXQXDzS7j4DQRXwc1CC0dOzjn508aY1Kbi7e83tG/ePM/7Pu/JaUOHPP3w5eHB0zT2T7/4NVqtJGrd6MZZEp2oReUk5nS/DgDg/+wsy+KPrLBOXhIRrc2VBQBs0Pj9/3yN9/8fN14SALBh77z73ls7vd7u22naikfDr477+V/2+ffi+Z39+DgGsRf3ox0XEdlEMX6UZdmonuY68dpwdNzPM4cf/Fyuv/N7RNTLB53x1/n8x73dB2lhJn+U1/FcuX833/9htOPFBfs/7u0+XJAf/Ua8/upM/feiHb98FJ/EIJ6Oiyjyoxbx5YM0fTP75s/P38/Ly/OT0XG/OY6byrZu8WUBAAAAAAAAAAAAAAAAAAAAAOAZd6/sndOMcf+efKrsv7N1kT/YjrTSme/PU+Qn1UKX+gONsvi26s9zP03TrAyc5tfjpfqkMxAAAAAAAAAAAAAAAAAAAADcaUeffnbwZDDYO7yRQdUNoPpY/3XX6c7MvBLLg5vTvWrlcMnKsVXFJBFLy8gPsXLN52Xbg+tduhf+rubvf1h5ne/++ezlYHuFmH85qO6ugyfJ4mvYjGqmVd0kP83GNGLFvRrzM63Ja5qtdfs1Fj7VXv3IyUlx4ufHM6MlwZEsK+yN34p1ypnk8ika46s6n1XObJczM+nzW7RWv5/zn5Qrkkm3juQGfwMBAAAAAAAAAAAAAAAAAACV2U8RX3G6NLWWNTdWFgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcqun//19jMCqTVwhuxOHRf3xEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7oC/AgAA//+rJl27")
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101090, 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
getcwd(&(0x7f0000000140)=""/81, 0x51)

20.645864064s ago: executing program 7 (id=3678):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)
syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @random="cf3cccaf382f", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0xfe, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x7, 0x2, 0xffff, 0x0, 0x4, {[@mss={0x2, 0x4, 0xcbb}, @generic={0x8, 0x2}]}}}}}}}, 0x0)

20.101123819s ago: executing program 7 (id=3685):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000003c0)={<r1=>0x0, 0x1c, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x6, @private0}]}, &(0x7f0000000440)=0x10)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000480)={r1, 0x2, 0x252, 0x6}, &(0x7f00000004c0)=0x10)

19.601573435s ago: executing program 37 (id=3685):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000003c0)={<r1=>0x0, 0x1c, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x6, @private0}]}, &(0x7f0000000440)=0x10)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000480)={r1, 0x2, 0x252, 0x6}, &(0x7f00000004c0)=0x10)

9.075979851s ago: executing program 3 (id=3765):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000003c0)=[@in6={0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00', 0x7}], 0x1c)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), 0x4)
setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8)
recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)

7.675592095s ago: executing program 3 (id=3768):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x6}, 0xa)
r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r1, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x11}, 0xa)
shutdown(r0, 0x1)

6.426032498s ago: executing program 3 (id=3776):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5f7, @value=0xeb})
r0 = add_key$user(&(0x7f00000001c0), &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000480)="fef0eda8c799a4a0c3cb5b0006020000009b7a000100e83a", 0x18, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r1, r0}, &(0x7f00000000c0)=""/83, 0x53, 0x0)

4.516030111s ago: executing program 3 (id=3788):
r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000600))
r1 = userfaultfd(0x1)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000640)={0xaa, 0x88})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000680)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000006c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, &(0x7f0000000740)=[{0x800000000, 0x0, 0xffffffffffffffff}, {0x1ff, 0x7fff, 0x28e9}], 0x2, 0xbff, 0x1e, 0x0, 0x2c, 0x6e})

4.26846808s ago: executing program 3 (id=3791):
syz_mount_image$f2fs(&(0x7f0000000180), &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x21, 0x55bf, &(0x7f00000009c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f00000069c0)='./file1\x00', 0xd42, 0x15)
pwrite64(r0, &(0x7f0000006a00)='2', 0x1, 0x1)
r1 = openat(0xffffffffffffff9c, &(0x7f0000006a40)='./file1\x00', 0x0, 0x20)
ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020660b, &(0x7f0000006a80)={0x0, 0xfffffffffffffffa, 0x0, 0x3})

3.470234078s ago: executing program 9 (id=3797):
setns(0xc9, 0x0)
r0 = socket(0x1f, 0x3, 0x1)
bind(r0, &(0x7f0000000300)=@generic={0x1f, "ffff0300"}, 0x6)
write(r0, &(0x7f0000000400)="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f01", 0x17)
socket(0x1f, 0xa, 0x8)

3.011829911s ago: executing program 6 (id=3801):
mknodat$md(0xffffffffffffff9c, &(0x7f0000000200)='./md0\x00', 0x6180, 0x0)
r0 = openat$md_node(0xffffffffffffff9c, &(0x7f0000000240)='./md0\x00', 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
ioctl$SET_ARRAY_INFO(r0, 0x40480923, &(0x7f0000000280)={0x0, 0x5a, 0x0, 0x0, 0x5, 0x800800, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2})
ioctl$ADD_NEW_DISK(r0, 0x40140921, &(0x7f0000000340)={0xffffffff, {0x1, 0x1}, 0x3, 0x602})

2.821661677s ago: executing program 0 (id=3803):
r0 = fsopen(&(0x7f0000000400)='configfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x1, 0x88)
fchdir(r1)
openat(r1, &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8840, 0x182)

2.809403293s ago: executing program 8 (id=3804):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4$alg(r0, 0x0, 0x0, 0x800)
sendmsg$alg(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="f4", 0x1}, {&(0x7f0000000000)="f619f1759f", 0x5}], 0x2, 0x0, 0x0, 0x4008080}, 0x20044081)

2.802106886s ago: executing program 9 (id=3805):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000b80)={[{@grpid}, {@nobh}, {@nodioread_nolock}, {@test_dummy_encryption}, {@lazytime}, {@nojournal_checksum}, {@minixdf}, {@bh}]}, 0x7, 0xbaf, &(0x7f00000017c0)="$eJzs3M1rXFUbAPDn3ny2zftO+vIi1k0jIi2o07SSYotgKxU3LgTdCg3ppIRMP0giNWkWE/0HRF0LbgS1KF3YdTcKbt1o3VpcCEVioyCikTsfSWxmkrSd5Ibk94Mz95w5d+Z5nrlM7j0wNwHsWgPZQxpxICLOJhGF+vNpRHRXe70Rldp+C/OzI7/Pz44ksbj42i9JJBFxd352pPFeSX27rz7ojYhvX0zif++sjjs5PTM+XC6XJurjI1MXLh+ZnJ55ZuzC8PnS+dLFo8efGzo2dHzwxFDbav3jx1M3fnv85Z8qf37617Vf3/84iVPRV59bWUe7DMTA0meyUmdEDLc7WE466vWsrDPpXOdF6SYnBQBAS+mKa7hHohAdsXzxVoivvss1OQAAAKAtFjsiFgEAAIAdLrH+BwAAgB2u8TuAu/OzI42W7y8Sttad0xHRX6t/od5qM51RqW57oysi9t5NYuVtrUntZQ9tICJu/3Dii6zFJt2HvJbKXEQ82uz4J9X6+6t3ca+uP42IwTbEH7hnvN3qf7q7df2n2hA/7/oB2J1unq6dyFaf/9Kl659ocv7rbHLuehB5n/8a138Lq67/luvvaHH99+oGY1z95MMrreay+p+/8dLnjZbFz7YPVdR9uDMX8Vhns/qTpfqTFvWf3WCMwt9XSq3m8q5/8aOIQ9G8/oZk7f9PdGR0rFwarD02jTH3zdBnreLnXX92/Pe2qH+94395gzHeOHPmequ59etPf+5OXq/2uuvPvDU8NTVxNKI7eWX188fqN7S30Nin8R5Z/YefWPv736z+LESl/jlka4G5+jYbv31PzBeuXf1yrfqztV+ex//cAx7/dzcY48mv3zvcam7l+jdrWfzbSW0tDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANaUT0RZIWl/ppWixG7IuI/8fetHxpcuqp0UtvXjyXzUX0R1c6OlYuDUZEoTZOsvHRan95fOye8bMRsT8iPijsqY6LI5fK5/IuHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCX7IqIvkrQYEWlELBTStFjMOysAAACg7frzTgAAAADYdNb/AAAAsPNZ/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDJ9h+8eSuJiMrJPdWW6a7PdeWaGbDZ0rwTAHLTkXcCQG46804AyM19rvFdLsAOlKwz39typqftuQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwfR06cPNWEhGVk3uqLdNdn+tq+oqDW5gdsJnSvBMActOx1mTn1uUBbD1fcdi9mq/xgd0kWWe+d3mfyr9nejYtJwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2n75qS9JiRKTVfpoWixH/iYj+6EpGx8qlwYj4b0R8X+jqycY9eScNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA201Oz4wPl8ulCR0dnXw7yfZIo9bJ+y8TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB5mJyeGR8ul0sTk3lnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAORtcnpmfLhcLk1soHP9fnZe0cm7RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8vNPAAAA///5ZQ4Q")
syz_mount_image$exfat(0x0, &(0x7f0000000540)='./bus\x00', 0x38c180a, 0x0, 0x0, 0x0, &(0x7f0000000240))
chdir(&(0x7f00000003c0)='./bus\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f000001ff40)='.\x00', 0x0, 0x0)
getdents64(r0, 0xfffffffffffffffe, 0x29)

2.477134068s ago: executing program 8 (id=3806):
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x0, @remote}, {0x2, 0x4e23, @local}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x6})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r0, &(0x7f0000000000), 0xd)

2.462189558s ago: executing program 0 (id=3807):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
write(r0, &(0x7f0000000100)="90", 0x1)
mmap(&(0x7f0000010000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40)

2.182375314s ago: executing program 8 (id=3808):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f00000003c0), 0x10)
recvmmsg(r0, &(0x7f0000000400), 0x3fffffffffffe83, 0x2, 0x0)
sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES8=r0], 0x48}}, 0x2404c054)
readv(r0, &(0x7f0000000500)=[{&(0x7f0000000540)=""/58, 0x3a}], 0x1)

1.984450511s ago: executing program 9 (id=3809):
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}], 0x1c)
r0 = userfaultfd(0x1)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000))
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000128000/0x3000)=nil, 0x3000})

1.911978992s ago: executing program 0 (id=3810):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)
ioctl(r1, 0x3b8e, &(0x7f0000000000)="10")
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000080)={0xc})
close_range(r0, 0xffffffffffffffff, 0x0)

1.910439136s ago: executing program 3 (id=3811):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {0x0, 0x10, 0x2, 0x9}, 0x3, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4000, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x216, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1, 0x6], [0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x768, 0x0, 0x7, 0x2, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0x3, 0x5, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x10000, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffff], [0x4, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1000, 0x80, 0x0, 0x200, 0x0, 0xffffffff, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0xffffffff, 0x4, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x921, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0xbda6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x800, 0x0, 0x4, 0x0, 0x4, 0x0, 0x3, 0x0, 0xfff, 0x6, 0x0, 0x3, 0x0, 0x0, 0x8], [0x40000000, 0x0, 0x635, 0x0, 0x8000000, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40, 0x9, 0x0, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd, 0x6, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x101, 0x80000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcaa, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4]}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_CREATE(r0, 0x5501)

1.733572297s ago: executing program 0 (id=3812):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f00000000c0)={0x0, 0xea60}, 0x10)
sendmmsg$unix(r1, &(0x7f0000000100), 0x100, 0x0)
close(0x3)

1.610908472s ago: executing program 8 (id=3813):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800700, &(0x7f0000000100)={[{@auto_da_alloc}, {@stripe={'stripe', 0x3d, 0x3}}, {@norecovery}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@usrjquota}, {@test_dummy_encryption_v1}, {@noblock_validity}, {@jqfmt_vfsold}]}, 0x3, 0x47b, &(0x7f0000000b80)="$eJzs3M9vFFUcAPDvzLYgP1sRf4CoVWJs/NHSgsrBgxpNPGA00QMea1sIYaGG1kQIkWoMXkwMUc/Go4n/gN68GPVkYuJJ74aEKBfQU83MzsDuutsutN1S9vNJZnlv5k3fe/vmzbyZN0sAPWso+0gitkbE7xExUIs2Jhiq/XP18tnJfy6fnUxiYeGNv5I83ZXLZyfLpOV+W4rIcBqRfpQUmTSaPX3m+ES1On2qiI/OnXhndPb0maeOnZg4On10+uT4wYMH9o89+8z404uUfmNEPN9RPbN6Xdn9/syeXa+8deHVycMX3v7pm6y8W4vt9fVYKUNZxf9eyNWt/iz7eHSlM1tj2+rCSV+bRN8e+K3apfLQmUpEZM3Vn/f/gajE9cYbiJc/XNPCAasquzZtbL95fgG4jSXRYbLoLCGwXpQX+uz+t1y6NPS4JVx6oXYDlNX7arHUtvRFWqTpb7q/XUlDEXF4/t8vsyVW6TkEAEC9Tya/OBRPthr/pXFPXbrtxRzKYETcGRE7IuKuiNgZEXdH5GnvjYj72ua0oeXa5qmhhvFPPqGUXlxWBZeQjf+eK+a2Gsd/5eivMlgpYtvy+vcnR45Vp/cV38lw9G/M4mOL5PH9S79+2m5b/fgvW7L8y7FgUY6LfU0P6KYm5ibyQekKuPRBxO6+VvVPrs0EZM2wKyJ2d/g3i/22l/Fjj3+9p13apeu/dEbLsfBVxGO19p+PpvqXksXnJ0fviOr0vtHyqPi/n385/3q7/JdV/xWQtf/mxuO/OclgUj9fO3vjeZz/4+O29zQ3e/xvSN7M26U8q7w3MTd3aixiQ3IojzesH7++bxkv02f1H97buv/vqAU2ZR/3R0R2ED8QEQ9GxENF2R+OiEciYu8i9f/xxfbbboX2n2p5/rt2/De1/40HKsd/+K5d/p21/4E8NFysyc9/S+i0gMv57gAAAGC9SPN34JN05Fo4TUdGau/w74zNaXVmdu6JIzPvnpyqvSs/GP1p+aRroO556FgyX/zFWny8eFZcbt9fPDf+vLIpj49MzlSn1rju0Ou2tOn/mT8ra106YNW1mkcbbzlf2/BDNuA20Nz/08boude6WRigq1bgPRpgnVqi/6fdKgfQfa7/0Lta9f9zTXFzAXB7cv2H3qX/Q+/S/6F36f/Qk5bzu/5eDmSnzFugGNWBoh1vdPfy7c6bzz3Sta67wGoEWv8/TQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOvVfwEAAP//Kr3kAA==")
mount(&(0x7f0000001000)=@filename='mtd0\x00', &(0x7f0000001040)='./file0\x00', &(0x7f0000001080)='jffs2\x00', 0x1, 0x0)
chdir(&(0x7f00000010c0)='./file0\x00')
r0 = fspick(0xffffffffffffff9c, &(0x7f000000f8c0)='.\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)

1.582285767s ago: executing program 9 (id=3814):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xe6, 0x80000001, 0x0, 0x32, 0x81}, 0x9c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x6}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c)
bind$inet6(r0, &(0x7f0000005880)={0xa, 0x4e23, 0x2, @loopback, 0x8}, 0x1c)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

1.410839771s ago: executing program 6 (id=3815):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x3c, r1, 0x5, 0x0, 0x25dedbbc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x14, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0x4}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x10001}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000055}, 0x0)

1.284272761s ago: executing program 0 (id=3816):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0xb2, 0x4)
sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{&(0x7f0000000600)={0xa, 0x4e23, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0)
recvmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0xa}], 0x1, 0x40012123, 0x0)

1.111324304s ago: executing program 9 (id=3817):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008"], 0xa4}}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001a80100004800c0006"], 0x34}}, 0x0)

1.012401698s ago: executing program 6 (id=3818):
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_type(r0, &(0x7f0000000140), 0x2, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
write$cgroup_type(r1, &(0x7f0000000180), 0x9)

920.470729ms ago: executing program 9 (id=3819):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
listen(r0, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cifs\x00', 0x1ff)
mount(&(0x7f0000000500)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000100)='./cifs\x00', &(0x7f0000000200)='cifs\x00', 0x0, &(0x7f0000000300)='unc=//127.0.0.1/share,ip=127.0.0.1,port=20000,user=root,,ass=root,vers=2.1,nodfs\x00')

871.623495ms ago: executing program 8 (id=3820):
r0 = socket$inet6(0xa, 0x3, 0xff)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0)
r1 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @local, 0x9}, 0x1c)
sendmmsg$inet(r1, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000dc0)="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", 0x3cd}, {&(0x7f0000000bc0)="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", 0x1b8}], 0x2, 0x0, 0x0, 0x900}}], 0x1, 0x0)

733.862854ms ago: executing program 0 (id=3821):
r0 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="12011001000000106d043ac500000000000109022d0001000070060904000504030002000921fcff400122180009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000180), 0xa, 0x101142)
ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f00000001c0)={0x1, 0xffffffff, 0xf9, 0xafff, 0x4, 0x5})

590.156408ms ago: executing program 6 (id=3822):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f0000000140)={[{@utf8}, {@utf8}, {@uid={'uid', 0x3d, 0xee00}}, {@iocharset={'iocharset', 0x3d, 'cp1255'}}, {@gid}, {@allow_utime={'allow_utime', 0x3d, 0x2}}, {@utf8}, {@namecase}, {@errors_remount}, {@errors_continue}, {@fmask={'fmask', 0x3d, 0x7}}]}, 0x1, 0x1533, &(0x7f0000006800)="$eJzs3AucTtX6OPDnWWvtMSS9TXIZ1lrP5k0uiyTJJUkuSZIkSW4JSZIjCYkht6QhCcllSC5DSC4Tk8b9fr8kJEmTJCG5Jev/mZi/OnX+55xfnfz+Z57v5/N+Zj2z3mftZ88z73733vPyTZehNRrVrNqAiOAPwYtfEgAgFgAGAsA1ABAAQNm4snEZ89klJvyxjbA/10PJV7oCdiVx/7M27n/Wxv3P2rj/WRv3P2vj/mdt3P+sjfvPWFa2eXr+a/mRdR98/z8r4/f//yLpJcd+sbbk9V0BYv7VFO7////wD+Ry//9rBf/Kk7j/WRv3P6uKvdIFsP8F+PWfFWT7hzPc/6yN+89YVvbLe8GxcOXvR//VD4j8J/8G4ntd/Clf+f38h/vPGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4z9Bc74yxQAZI6vdF2MMcYYY4wxxhj78/hsV7oCxhhjjDHGGGOM/echCJCgIIAYyAaxkB1ygACIyZy/FuLgOsgN10MeyAv5ID/EQwEoCBoMWCAIoRAUhijcAEXgRigKxaA4lAAHJaEU3ASl4WYoA7dAWbgVysFtUB4qQEWoBLdDZbgDqsCdUBXugmpQHWpATbgbasE9UBvuhTpwH9SF+6EePAD14UFoAA9BQ3gYGsEj0BgehSbQFJpBc2jxP8p/AXrAi9ATekEC9IY+8BL0hX7QHwbAQHgZBsErMBhehUQYAkPhNRgGr8NweANGwEgYBW/CaHgLxsBYGAfjIQkmwER4GybBOzAZpsBUmAbJMB1mwLswE2bBbHgP5sD7MBfmwXxYACnwASyERZAKH8Ji+AjSYAkshWWwHFbASlgFq2ENrIV1sB42wEbYBJthC2yFbbAddsBO+Bh2wSewG/bAXvgU9sFn/2b+6b/L74qAgAIFKlQYgzEYi7GYA3NgTsyJuTAXRjCCcRiHuTE35sE8mA/zYTzGY0EsiAYNEhIWwkIYxSgWwSJYFIticSyODh2WwlJYGm/GMlgGy2JZLIflsDxWwApYCSthZayMVbAKVsWqWA2rYQ2sgXfj3dgba2NtrIN1sC7Wzbw9hQ2wATbEhtgIG2FjbIxNsAk2w2bYAltgS2yJrbAVtsE22BbbYjtsh+2xPXbADtgRO2In7ISdsTN2wS7YFbtht/QXsgG+iC9iL6wmemMf7IN9MTFbfxyAA/BlHISv4Cv4KibiEByKr+Fr+DoOx1M44sJIHIWjsLJ4C8fgWCQxHpMwCSfiRJyEk3AyTsEpOA2TcTrOwBk4E2fhLHwP5+D7+D7Ow3m4AFMwBRfiIkzFVFyMpzENl+BSXIbLcQUux1W4GlfhWlyHa3EDbsBNuAm34BbchttwB+7Aj1EB4Ce4B/dgIu7Dfbgf9+MBPIAH8SCmYzoewkN4GA/jETyCR/EoHsPjeAKP40k8iafwNJ7BM3gOz+F5fC7+q4YfF1uTCCKDEkrEiBgRK2JFDpFD5BQ5RS6RS0RERMSJOJFb5BZ5RB6RT+QT8SJeFBQFhRFGkAgzjhQiKqKiiCgiioqiorgoLpxwopQoJUqL0qKMKCPKiltFOXGbKC8qiNaukqgkKos2roq4U1QVVUU1UV3UEDVFTVFL1BK1RW1RR9QRdUVdUU88IOqL3tgfHxIZnWkkhmBjMRSbiKZCXjpCtRTDsZVoLdqIJ8RIHIHtREvXXjwtOogx2FH8TYzFZ0VnMR67iOdFV9FNdBcviB6ilespeonJ2Fv0EdOwr+gn+osBYiZWF+/hnOw1xKsiUQwRQ8VrYgG+LoaLN8QIMVKMEm+K0eItMUaMFePEeJEkJoiJ4m0xSbwjJospYqqYJpLFdDFDvCtmillitnhPzBHvi7linpgvFogU8YFYKBaJVPGhWCw+EmliiVgqlonlYoVYKVaJ1WKNWCvWifVig9goNonNYovYKraJ7WKH2Ck+FrvEJ2K32CP2ik/FPvGZ2C8+FwfEF+Kg+FKki6/EIfG1OCy+EUfEt+Ko+E4cE8fFCfG9OCl+EKfEaXFGnBXnxI/ivPhJXBBegEQppJRKBjJGZpOxMrvMIa+SOWWQefyXcfI6mVteL/PIvDKfzC/jZQFZUGpppJUkQ1lIFpZReYMsIm+URWUxWVyWkE6WlKXkTbK0vFmWkbfIsvJWWU7eJsvLCrKirCRvl5XlHRIiF7dRTVaXNWRNebdMgHtkbXmvrCPvk3Xl/bKefEDWlw/KBvIh2VA+LBvJR2Rj+ahsIpvKZrK5bCEfky3l47KVbC3byCdkW/mkbCefku3l07KD9Jd+RZ6VneVzsot8XnaV3WR3+ZO8IL3sKXtJ6A2yj3xJ9pX9ZH85QA6UL8tB8hU5WL4qE+UQOVS+JofJ1+Vw+YYcIUfKUfJNOVq+JcfIsXKcHC+T5AQ5Ub4tJ8l35GQ5RU6V02SynC77X1pptpT/NP/t38kf/PPWN8nNcovcKrfJ7XKH3Ck/lrvkLrlb7pZ75V65T+6T++V+eUAekAflQZku0+UheUgeloflEXlEHpVH5TF5XJ6V38uT8gd5Sp6Wp+VZeU6ek+cv/QxAoRJKKqUCFaOyqViVXeVQV6mc6mqVS12jIupaFaeuU7nV9SqPyqvyqfwqXhVQBZVWRllFKlSFVGEVVTfgpV8YVVyVUE6VVKXUTf9OviqiblRFVbFf5WfWl/AP6muhWqiWqqVqpVqpNqqNaqvaqnaqnWqv2qsOqoPqqDqqTqqT6qw6qy6qi+qquqruqrvqoXqonqqnSlAJqo96SfVV/VR/NUANVC+LjH0YrAarRJWohqqhapgapoar4WqEGqFGqVFqtBqtxqgxapwap5JUkpqoJqpJapKarCarqWqqSlbJaoaaoWaqmWq2mq3mqDlqrpqr5qv5KkWlqIVqoUpVqWqxWqzS1BK1RC1Ty9QKtUKtUqvUGrVGrVPr1Aa1QaWpzWqz2qq2qu1qu9qpdqpdapfarXarvWqv2qf2qf1qvzqgDqiD6qBKV+nqkDqkDqvD6og6oo6qo+qYOqZOqBPqpDqpTqlT6ow6o86pc+q8Oq8uqAsZp32BCESgAhXEBDFBbBAb5AhyBDmDnEGuIFcQCSJBXBAX5A6uD/IEeYN8Qf4gPigQFAx0YAIbiEtNjwY3BEWCG4OiQbGgeFAicEHJoFRwU1A6uDkoE9wSlA1uDcoFtwXlgwpBxaBScHtQObgjqBLcGVQN7gqqBdWDGkHN4O6gVnBPUDu4N6gT3BfUDe4P6gUPBPWDB4MGwUNBw+DhoFHwSNA4eDRoEjQNmgXNgxZ/6vren8r7uOupe+kE3Vv30S/pvrqf7q8H6IH6ZT1Iv6IH61d1oh6ih+rX9DD9uh6u39Aj9Eg9Sr+pR+u39Bg9Vo/T43WSnqAn6rf1JP2Onqyn6Kl6mk7W0/UM/a6eqWfp2fo9PUe/r+fqeXq+XqBT9Ad6oV6kU/WHerH+SKfpJXqpXqaX6xV6pV6lV+s1eq1ep9frDXqj3qQ36y16q96mt+sdeqf+WO/Sn+jdeo/eqz/V+/Rner/+XB/QX+iD+kudrr/Sh/TX+rD+Rh/R3+qj+jt9TB/XZfT3+qT+QZ/Sp/UZfVaf0z/q8/onfUH7jJP7jLd3o4wyMSbGxJpYk8PkMDlNTpPL5DIREzFxJs7kNrlNHpPH5DP5TLyJNwVNQZOBDJlCppCJmqgpYoqYoqaoKW6KG2ecKWVKmdKmtCljypiypqwpZ8qZ8qa8qWgqmtvN7eYOc4e509xp7jJ3meqmuqlpappappapbWqbOqaOqWvqmnqmnqlv6psGpoFpaBqaRqaRaWwamyamiWlmmpkWpoVpaVqaVqaVaWPamLamrWln2pn2pr3pYDqYjqaj6WQ6mc6ms+liupiupqvpbrqbHqaH6Wl6mgSTYPqYPqav6Wv6m/5moBloBplBZrAZbBJNohlqhpphZpgZboabEWakGZVxomreMmPMWDPOjDdJJslMNBPNJDPJTDaTzVQz1SSbZDPDzDAzzUwz28w2c8wcM9fMNfPNfJNiUsxCs9CkmlSz2Cw2aSbNLDVLzXKz3Kw0K81qs9qsNWvNelhvNpqNZrPZbLaarWa72W52mp1ml9lldpvdZq/Za/aZfWa/2W8OmAPmoDlo0k26OWQOmcPmsDlijpij5qg5Zo6ZE+aEOWlOmlPmlDljzphzJu+l90tvYm12m8NeZXPaq20ue439+zifzW/jbQFb0Gqbx+b9VWystUVtMVvclrDOlrSl7E2/icvbCrairWRvt5XtHbbKb+Ja9h5b295r69j7bE1796/iuvZ+W88+YusjAtimtqFtbhvZR2xj+6htYpvaZra5bWuftO3sU7a9fdp2sM/8Jl5oF9nVdo1da9fZ3XaPPWPP2sP2G3vO/mh72l52oH3ZDrKv2MH2VZtoh/wmHmXftKPtW3aMHWvH2fG/iafaaTbZTrcz7Lt2pp31mzjFfmDn2FQ7186z8+2Cn+OMmlLth3ax/cim2QCW2mV2uV1hV9pV/7fWZXaD3Wg32V32E7vVbrPb7Q67M/NE2O6xe+2ndp/9zB6yX9sD9gt70B6x6farn+OM/Ttiv7VH7Xf2mD1uT9jv7Un7g8rMztj37+1P9oL1FggJSJKigGIoG8VSdspBV1FOuppy0TUUoWspjq6j3HQ95aG8lI/yUzwVoIKkyZAlopAKUWGK0g2UWV5xKkGOSlIpuolK081Uhm6hsnQrlaPbqDxVoIpUiW6nynQHVaE7qSrdRdWoOtWgmnQ31aJ7qDbdS3XoPqpL91M9eoDq04PUgB6ihvQwNaJHqDE9Sk2oKTWj5tSCHqOW9Di1otbUhp6gtvQktaOnqD09TR3oGepIf6NO9Cx1pueoCz1PXakbdacXqAe9SD2pFyVQb+pDL1Ff6kf9aQANpJdpEL1Cg+lVSqQhNJReo2H0Og2nN2gEjaRR9CaNprdoDI2lcTSekmgCTaS3aRK9Q5NpCk2laZRM02kGvUszaRbNpvdoDr1Pc2kezacFlEIf0EJaRKn0IS2mjyiNltBSWkbLaQWtpFW0mtbQWlpH62kDbaRNtJm20FbaRttpB+2kj2kXfUK7aQ/tpU9pH31G++lzOkBf0EH6ktLpKzpEX9Nh+oaO0Le+F31Hx+g4naDv6ST9QKfoNJ2hs3SOfqTz9BNdIE8QYihCGaowCGPCbGFsmD3MEV4V5gyvDnOF14SR8NowLrwuzB1eH+YJ84b5wvxhfFggLBjq0IQ2pDAMC4WFw2h4Q1gkvDEsGhYLi4clQheWDEuFN4Wlw5vDMuEtYdnw1rBceFtYPqwQPnJfpfD2sHJ4R1glvDOsGt4VVgurhzXCmuHdYa3wnrB2eG9YJ7wvLBPeH9YLHwjrhw+GDcKHwobhw2Gj8JGwcfho2CRsGjYLm4ctwsfCluHjYauwddgmvCpsGz4ZtgufCtuHT4cdwmd+nr9/Ueb8E7+ZTwh7h33Cl8KXQu/vlfOjC6Ip0Q+iC6OLoqnRD6OLox9F06JLokujy6LLoyuiK6Oroquja6Jro+ui66Mbohujm6Le18wGDp1w0ikXuBiXzcW67C6Hu8rldFe7XO4aF3HXujh3ncvtrnd5XF6Xz+V38a6AK+i0M846cqEr5Aq7qLvBFXE3uqKumCvuSjjnSrpSrrlr4Vq4lu5x18q1dm3cE+4J96R70j3lnnJPuw7uGdfR/c11cs+6zu4595x73nV13Vx394Lr4SbkuviaTHB9XB/X1/V1/V1/N9ANdIPcIDfYDXaJLtENdUPdMDfMDXfD3Qg3wo1yo9xoN9qNcWPcODfOJbkkN9FNdJPcJDfZTXZT3VSX7JLdDDfDzXQzXeVZF7cy18118918l+JS3EKXcc6Y6ha7xS7Npbmlbqlb7pa7lW6lW+1Wu7VurVvv1ruNbqPb7Da7rW6r2+62u51up9vldrnd/pqLi7p9br/b7w64A+6g+9Klu6/cIfe1O+y+cUfct+6o+84dc8fdCfe9O+l+cKfcaXfGnXXn3I/uvPvJXXDeJUUmRCZG3o5MirwTmRyZEpkamRZJjkyPzIi8G5kZmRWZHXkvMifyfmRuZF5kfmRBJCXyQWRhZFEkNfJhZHHko0haZElkaWRZZHlkRcT7AltDX8gX9lF/gy/ib/RFfTFf3Jfwzpf0pfxNvvTFutO8v9WX87f58r6Cr+gf9U18U9/MN/ct/GO+pX/ct/KtfRv/hG/rn/Tt/FO+vX/ad/DP+I7+b76Tf9Z39s/5Lv5539V38939C76Hf9H39L18gu/t+/iXfF/fz/f3A/xA/7If5F/xg/2rPtEP8UP9a36Yf90P92/4EX6kHxXzph+deYkM432Sn+An+rf9JP+On+yn+Kl+mk/20/0M/66f6Wf52f49P8e/7+f6eX6+X+BT/Ad+oV/kU/2HfrH/yKf5JZk3jf1Kv8qv9mv8Wr/Or/cb/Ea/yW/2W/xWv81v9zv8Tv+x3+U/8bv9Hr/Xf+r3+c/8fv+5P+C/8Af9lz7df+UP+a/9Yf+NP+K/9Uf9d/6YP+5P+O/9Sf+DP+VP+zP+rD/nf/Tn/U/+Av+bNcYYY4yxf8mEy0Px65mLt/N7/06O+MWT+wDA1dvyp/9yPuOMcn2ei+N+Ij424+vTvbo8lPmoVi0hIeHSc9MkBIXnAWT+JSjDzx89uBQvgTbwJLSH1lD6d+vvJ7qdo3+yfvRWgBy/yMkoKDO+vP7nAJjwO+s/9sSoheXCM3H/j/XnARQtfDknO1yOl0Cbn++vtIYy/6D+vC3/Sf3Zv0gCaPWLnJxwOb5cfyl4HJ6B9r96JmOMMcYYY4wxdlE/UbFT5vVn5ic+f+/6PF5dzskGl+N/dn3OGGOMMcYYY4yxK+/Zbt2feqx9+9ad/v1Blf9R1r88aAz/qZV58LsD7wEyv6MA4A8uCJAxkH/lXmz5S7aVeOml8/dTy8/6AP53tPLPGFzhAxNjjDHGGGPsT3f5pP/X31dXqiDGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYYywL+iv+O7ErvY+MMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcbYlfZ/AgAA//+1tfsI")
r0 = openat(0xffffffffffffff9c, &(0x7f0000007d40)='.\x00', 0x100, 0x52)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000007d80)={@id={0x2, 0x0, @d}})
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000002500)='./file0\x00', 0x0, 0x2c)

381.733987ms ago: executing program 2 (id=3689):
r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello')

238.787738ms ago: executing program 6 (id=3823):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x24}}, 0x20040840)

201.847µs ago: executing program 6 (id=3824):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002300)={0x6, 0x4, &(0x7f00000023c0)=ANY=[@ANYBLOB="18020000f9ff01000000000000000000850000002c00000095"], &(0x7f0000002400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002440)={'syz_tun\x00', <r2=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002480)={r1, r2, 0x25, 0x0, @val=@iter={0x0}}, 0x20)
syz_emit_ethernet(0xd84, &(0x7f00000024c0)=ANY=[], 0x0)

0s ago: executing program 8 (id=3825):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000400)=0x4000000)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)={0x2, 0x0, [{0xeeee8000, 0xea, &(0x7f0000000540)=""/234}, {0xe000, 0xcd, &(0x7f0000000640)=""/205}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000500)=0x1)

kernel console output (not intermixed with test programs):

n1: encryption failed: -22
[  439.320490][   T10] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  439.354482][ T5775] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  439.359421][ T5775] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  439.374252][ T5775] usb 4-1: config 0 descriptor??
[  439.480981][   T10] usb 1-1: Using ep0 maxpacket: 8
[  439.484714][   T10] usb 1-1: unable to get BOS descriptor or descriptor too short
[  439.484752][   T10] usb 1-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40
[  439.503932][   T10] usb 1-1: string descriptor 0 read error: -22
[  439.504095][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  439.562030][T15449] fido_id[15449]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory
[  439.670894][ T5775] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  439.785949][   T10] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  439.961066][ T5775] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 1
[  439.961096][ T5775] [drm] Initialized udl on minor 1
[  440.007978][   T10] usb 1-1: 2:1 : format type 0 is detected, processed as PCM
[  440.008005][   T10] usb 1-1: 2:1 : unsupported sample bitwidth 0 in 188 bytes
[  440.081558][ T5746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  440.302739][   T10] usb 1-1: USB disconnect, device number 27
[  440.709411][T15469] loop8: detected capacity change from 0 to 2048
[  440.753903][T15469] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  440.754018][T15469] ext4 filesystem being mounted at /336/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  440.831700][ T5746] usb 10-1: new high-speed USB device number 23 using dummy_hcd
[  440.953337][ T9255] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  440.971275][T15478] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3191'.
[  440.997264][ T5746] usb 10-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  441.004533][ T5746] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  441.004563][ T5746] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  441.004601][ T5746] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  441.023000][ T5746] usb 10-1: config 0 descriptor??
[  441.121715][ T5355] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  441.195618][T15484] loop0: detected capacity change from 0 to 256
[  441.202732][T15484] exfat: Deprecated parameter 'utf8'
[  441.206318][T15484] exfat: Deprecated parameter 'namecase'
[  441.206447][T15484] exfat: Deprecated parameter 'namecase'
[  441.206474][T15484] exfat: Deprecated parameter 'utf8'
[  441.256137][T15484] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0x6a70c931, utbl_chksum : 0xe619d30d)
[  441.256531][T15484] exFAT-fs (loop0): failed to test first cluster bit of root dir(5)
[  441.303107][T15484] exFAT-fs (loop0): start_clu is invalid cluster(0x400)
[  441.491212][ T5746] hid_parser_main: 5 callbacks suppressed
[  441.491238][ T5746] cp2112 0003:10C4:EA90.001F: unknown main item tag 0x0
[  441.491265][ T5746] cp2112 0003:10C4:EA90.001F: unknown main item tag 0x0
[  441.491289][ T5746] cp2112 0003:10C4:EA90.001F: unknown main item tag 0x0
[  441.491313][ T5746] cp2112 0003:10C4:EA90.001F: unknown main item tag 0x0
[  441.491338][ T5746] cp2112 0003:10C4:EA90.001F: unknown main item tag 0x0
[  441.491363][ T5746] cp2112 0003:10C4:EA90.001F: unknown main item tag 0x0
[  441.491388][ T5746] cp2112 0003:10C4:EA90.001F: unknown main item tag 0x0
[  441.513371][ T5746] cp2112 0003:10C4:EA90.001F: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.9-1/input0
[  441.626595][T15488] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  441.686898][ T5746] cp2112 0003:10C4:EA90.001F: Part Number: 0x00 Device Version: 0x00
[  442.086185][ T5746] cp2112 0003:10C4:EA90.001F: error setting SMBus config
[  442.093627][ T5746] cp2112 0003:10C4:EA90.001F: probe with driver cp2112 failed with error -71
[  442.107457][ T5746] usb 10-1: USB disconnect, device number 23
[  445.041936][ T5775] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92
[  445.042337][ T5775] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[  445.093781][ T5776] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  445.096068][ T5775] usb 4-1: USB disconnect, device number 13
[  445.110858][ T5776] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed
[  445.111136][ T5776] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[  445.415247][T15530] loop8: detected capacity change from 0 to 2048
[  445.616736][T15530] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  445.712619][T15538] skbuff: bad partial csum: csum=65535/2 headroom=178 headlen=65543
[  445.769225][T15519] loop9: detected capacity change from 0 to 131072
[  445.780215][T15519] F2FS-fs (loop9): Wrong CP boundary, start(512) end(1536) blocks(0)
[  445.780241][T15519] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock
[  445.782428][T15519] F2FS-fs (loop9): invalid crc value
[  445.821581][ T5762] kernel read not supported for file /tomoyo/domain_policy (pid: 5762 comm: kworker/0:4)
[  445.860619][ T5775] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  445.895431][T15519] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  445.915248][T15519] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0
[  445.915275][T15519] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e4
[  445.916584][ T9255] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  446.030679][ T5775] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  446.031935][ T5775] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  446.035752][ T5775] usb 4-1: config 0 descriptor??
[  446.078569][T15550] overlayfs: failed to clone upperpath
[  446.251570][ T5775] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  446.477318][ T5775] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 1
[  446.477347][ T5775] [drm] Initialized udl on minor 1
[  446.780197][ T5746] usb 9-1: new high-speed USB device number 16 using dummy_hcd
[  446.933012][ T5746] usb 9-1: Using ep0 maxpacket: 8
[  446.933736][ T5746] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  446.934794][ T5746] usb 9-1: config index 0 descriptor too short (expected 301, got 45)
[  446.934846][ T5746] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  446.934897][ T5746] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  446.934926][ T5746] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  446.934954][ T5746] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  446.935001][ T5746] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  447.183270][ T5746] usb 9-1: usb_control_msg returned -32
[  447.183323][ T5746] usbtmc 9-1:16.0: can't read capabilities
[  447.266225][T15582] gadgetfs: bound to dummy_udc driver
[  447.428188][T15585] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  447.520848][ T5746] usb 1-1: new full-speed USB device number 28 using dummy_hcd
[  447.521634][    C1] gadgetfs: connected
[  447.523829][T15581] gadgetfs: suspended from state 3
[  447.523924][T15581] gadgetfs: disconnected
[  447.727710][T15595] dummy0: entered promiscuous mode
[  447.729739][T15595] dummy0: left promiscuous mode
[  447.736973][T15597] loop0: detected capacity change from 0 to 128
[  447.741925][T15597] vfat: Unknown parameter '01777777777777777777777'
[  447.803817][ T5355] usb 9-1: USB disconnect, device number 16
[  447.949952][ T5762] usb 10-1: new high-speed USB device number 24 using dummy_hcd
[  447.992351][T15604] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  448.068083][T15608] ip_tables: iptables: counters copy to user failed while replacing table
[  448.101089][ T5762] usb 10-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  448.102304][ T5762] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  448.107278][ T5762] usb 10-1: config 0 descriptor??
[  448.288103][T15613] loop7: detected capacity change from 0 to 512
[  448.358453][ T5762] udl 10-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  448.411011][T15617] FAULT_INJECTION: forcing a failure.
[  448.411011][T15617] name failslab, interval 1, probability 0, space 0, times 0
[  448.411047][T15617] CPU: 0 UID: 0 PID: 15617 Comm: syz.0.3248 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  448.411078][T15617] Tainted: [L]=SOFTLOCKUP
[  448.411087][T15617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  448.411107][T15617] Call Trace:
[  448.411117][T15617]  <TASK>
[  448.411128][T15617]  dump_stack_lvl+0xe8/0x150
[  448.411167][T15617]  should_fail_ex+0x410/0x560
[  448.411197][T15617]  should_failslab+0xa8/0x100
[  448.411229][T15617]  ? __kernfs_new_node+0xe6/0x980
[  448.411259][T15617]  kmem_cache_alloc_noprof+0x9c/0x600
[  448.411297][T15617]  ? srso_alias_return_thunk+0x5/0xfbef5
[  448.411326][T15617]  ? __kernfs_new_node+0xe6/0x980
[  448.411363][T15617]  __kernfs_new_node+0xe6/0x980
[  448.411393][T15617]  ? lock_acquire+0x115/0x350
[  448.411426][T15617]  ? __pfx___kernfs_new_node+0x10/0x10
[  448.411455][T15617]  ? kernfs_root+0x1c/0x230
[  448.411486][T15617]  ? srso_alias_return_thunk+0x5/0xfbef5
[  448.411518][T15617]  ? kernfs_root+0x1c/0x230
[  448.411550][T15617]  ? kernfs_root+0x1c/0x230
[  448.411586][T15617]  kernfs_new_node+0xeb/0x140
[  448.411624][T15617]  kernfs_create_link+0xe3/0x240
[  448.411669][T15617]  sysfs_do_create_link_sd+0x83/0x110
[  448.411703][T15617]  driver_sysfs_add+0xec/0x210
[  448.411738][T15617]  really_probe+0x142/0xae0
[  448.411775][T15617]  __driver_probe_device+0x1e8/0x360
[  448.411811][T15617]  driver_probe_device+0x4f/0x240
[  448.411847][T15617]  __driver_attach+0x339/0x600
[  448.411885][T15617]  bus_for_each_dev+0x23b/0x2c0
[  448.411932][T15617]  ? __pfx___driver_attach+0x10/0x10
[  448.411976][T15617]  ? __pfx_bus_for_each_dev+0x10/0x10
[  448.412028][T15617]  ? srso_alias_return_thunk+0x5/0xfbef5
[  448.412060][T15617]  ? do_raw_spin_unlock+0xf5/0x200
[  448.412108][T15617]  bus_add_driver+0x38f/0x6e0
[  448.412155][T15617]  driver_register+0x23a/0x320
[  448.412191][T15617]  usb_gadget_register_driver_owner+0xf9/0x270
[  448.412222][T15617]  raw_ioctl+0x1541/0x41c0
[  448.412253][T15617]  ? srso_alias_return_thunk+0x5/0xfbef5
[  448.412288][T15617]  ? tomoyo_path_number_perm+0x219/0x5f0
[  448.412324][T15617]  ? srso_alias_return_thunk+0x5/0xfbef5
[  448.412353][T15617]  ? srso_alias_return_thunk+0x5/0xfbef5
[  448.412380][T15617]  ? do_vfs_ioctl+0x116f/0x1530
[  448.412413][T15617]  ? __pfx_raw_ioctl+0x10/0x10
[  448.412484][T15617]  ? __fget_files+0x2a/0x420
[  448.412513][T15617]  ? __fget_files+0x2a/0x420
[  448.412537][T15617]  ? srso_alias_return_thunk+0x5/0xfbef5
[  448.412573][T15617]  ? __fget_files+0x2a/0x420
[  448.412612][T15617]  ? srso_alias_return_thunk+0x5/0xfbef5
[  448.412647][T15617]  ? srso_alias_return_thunk+0x5/0xfbef5
[  448.412682][T15617]  ? __pfx_raw_ioctl+0x10/0x10
[  448.412718][T15617]  __se_sys_ioctl+0xfc/0x170
[  448.412753][T15617]  do_syscall_64+0x166/0x520
[  448.412779][T15617]  ? trace_irq_disable+0x3b/0x140
[  448.412812][T15617]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  448.412846][T15617]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  448.412871][T15617] RIP: 0033:0x7f762079f1eb
[  448.412895][T15617] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[  448.412917][T15617] RSP: 002b:00007f762170ff00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  448.412943][T15617] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f762079f1eb
[  448.412968][T15617] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004
[  448.412984][T15617] RBP: 00007f7621710fd0 R08: 0000000000000001 R09: 00000000ffffffff
[  448.413002][T15617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  448.413018][T15617] R13: 0000200000000100 R14: 0000000000000005 R15: 0000000000000000
[  448.413056][T15617]  </TASK>
[  448.413175][T15617] raw-gadget.1 gadget.0: really_probe: driver_sysfs_add failed
[  448.414062][T15617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  448.414706][T15617] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  448.449815][T15613] FAT-fs (loop7): error, invalid access to FAT (entry 0x00020000)
[  448.449840][T15613] FAT-fs (loop7): Filesystem has been set read-only
[  448.451201][T15613] FAT-fs (loop7): error, invalid access to FAT (entry 0x00020000)
[  448.865675][ T5762] [drm] Initialized udl 0.0.1 for 10-1:0.0 on minor 2
[  448.865703][ T5762] [drm] Initialized udl on minor 2
[  448.909758][T15624] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3250'.
[  448.909780][T15624] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3250'.
[  448.909794][T15624] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Add Mapping response ret = -22)
[  449.290152][ T5745] usb 9-1: new high-speed USB device number 17 using dummy_hcd
[  449.450504][ T5745] usb 9-1: Using ep0 maxpacket: 32
[  449.456246][ T5745] usb 9-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00
[  449.457758][ T5745] usb 9-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  449.457788][ T5745] usb 9-1: config 0 interface 0 has no altsetting 0
[  449.457817][ T5745] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  449.469974][ T5745] usb 9-1: config 0 descriptor??
[  450.297659][ T5745] corsair-psu 0003:1B1C:1C09.0020: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.8-1/input0
[  450.464936][ T5745] corsair-psu 0003:1B1C:1C09.0020: unable to initialize device (-95)
[  450.485743][ T5745] corsair-psu 0003:1B1C:1C09.0020: probe with driver corsair-psu failed with error -95
[  450.669650][ T5761] usb 9-1: USB disconnect, device number 17
[  450.849639][T15659] fuse: fd is not a fuse device
[  451.330829][T15679] loop8: detected capacity change from 0 to 1024
[  451.333139][T15679] EXT4-fs: Ignoring removed nomblk_io_submit option
[  451.388817][T15679] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  451.520461][ T5775] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92
[  451.520958][ T5775] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[  451.525577][ T5762] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  451.526027][ T5762] udl 10-1:0.0: [drm] Cannot find any crtc or sizes
[  451.560062][ T5745] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  451.575347][ T5775] usb 4-1: USB disconnect, device number 14
[  451.583003][ T5761] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[  451.584778][ T5761] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  451.585798][ T5762] usb 10-1: USB disconnect, device number 24
[  451.612323][ T5761] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  451.626142][ T5761] udl 10-1:0.0: [drm] Cannot find any crtc or sizes
[  451.732638][ T5745] usb 1-1: Using ep0 maxpacket: 32
[  451.740435][ T5745] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  451.750829][ T5745] usb 1-1: config 32 has an invalid interface number: 85 but max is 0
[  451.750857][ T5745] usb 1-1: config 32 has no interface number 0
[  451.750928][ T5745] usb 1-1: config 32 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  451.750958][ T5745] usb 1-1: config 32 interface 85 has no altsetting 0
[  451.772740][ T5745] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  451.772770][ T5745] usb 1-1: Product: syz
[  451.772788][ T5745] usb 1-1: Manufacturer: syz
[  451.772806][ T5745] usb 1-1: SerialNumber: syz
[  451.817378][ T9255] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  452.101121][T15695] FAULT_INJECTION: forcing a failure.
[  452.101121][T15695] name failslab, interval 1, probability 0, space 0, times 0
[  452.101164][T15695] CPU: 0 UID: 0 PID: 15695 Comm: syz.7.3281 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  452.101197][T15695] Tainted: [L]=SOFTLOCKUP
[  452.101207][T15695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  452.101222][T15695] Call Trace:
[  452.101231][T15695]  <TASK>
[  452.101242][T15695]  dump_stack_lvl+0xe8/0x150
[  452.101288][T15695]  should_fail_ex+0x410/0x560
[  452.101321][T15695]  should_failslab+0xa8/0x100
[  452.101352][T15695]  ? mas_alloc_nodes+0x291/0x350
[  452.101378][T15695]  kmem_cache_alloc_noprof+0x9c/0x600
[  452.101419][T15695]  ? mas_alloc_nodes+0x291/0x350
[  452.101452][T15695]  mas_alloc_nodes+0x291/0x350
[  452.101482][T15695]  mas_preallocate+0x42a/0x840
[  452.101507][T15695]  ? srso_alias_return_thunk+0x5/0xfbef5
[  452.101535][T15695]  ? rcu_is_watching+0x16/0xb0
[  452.101569][T15695]  ? trace_kmem_cache_alloc+0x29/0xe0
[  452.101608][T15695]  ? __pfx_mas_preallocate+0x10/0x10
[  452.101649][T15695]  ? srso_alias_return_thunk+0x5/0xfbef5
[  452.101677][T15695]  ? __mas_set_range+0x11a/0x3a0
[  452.101715][T15695]  __split_vma+0x2fb/0xa60
[  452.101741][T15695]  ? srso_alias_return_thunk+0x5/0xfbef5
[  452.101780][T15695]  ? __pfx___split_vma+0x10/0x10
[  452.101815][T15695]  ? srso_alias_return_thunk+0x5/0xfbef5
[  452.101843][T15695]  ? __lock_acquire+0x747/0x2de0
[  452.101877][T15695]  ? srso_alias_return_thunk+0x5/0xfbef5
[  452.101912][T15695]  vma_modify+0x14d0/0x1bc0
[  452.101967][T15695]  vma_modify_flags+0x2a4/0x3c0
[  452.101999][T15695]  ? __pfx_vma_modify_flags+0x10/0x10
[  452.102027][T15695]  ? futex_unqueue+0x22/0x240
[  452.102083][T15695]  ? srso_alias_return_thunk+0x5/0xfbef5
[  452.102120][T15695]  mlock_fixup+0x40c/0x930
[  452.102160][T15695]  ? __pfx_mlock_fixup+0x10/0x10
[  452.102194][T15695]  ? mas_find+0x6d6/0xcb0
[  452.102226][T15695]  apply_vma_lock_flags+0x350/0x4a0
[  452.102264][T15695]  ? __pfx_apply_vma_lock_flags+0x10/0x10
[  452.102293][T15695]  ? srso_alias_return_thunk+0x5/0xfbef5
[  452.102337][T15695]  ? __pfx_down_write_killable+0x10/0x10
[  452.102368][T15695]  ? srso_alias_return_thunk+0x5/0xfbef5
[  452.102396][T15695]  ? do_futex+0x3e7/0x4e0
[  452.102439][T15695]  do_mlock+0x54d/0x730
[  452.102469][T15695]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  452.102504][T15695]  ? __pfx_do_mlock+0x10/0x10
[  452.102543][T15695]  ? srso_alias_return_thunk+0x5/0xfbef5
[  452.102571][T15695]  ? rcu_is_watching+0x16/0xb0
[  452.102619][T15695]  __x64_sys_mlock+0x77/0xa0
[  452.102650][T15695]  do_syscall_64+0x166/0x520
[  452.102676][T15695]  ? trace_irq_disable+0x3b/0x140
[  452.102707][T15695]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  452.102738][T15695]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  452.102762][T15695] RIP: 0033:0x7fc7ae59f559
[  452.102785][T15695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  452.102805][T15695] RSP: 002b:00007fc7af52f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095
[  452.102831][T15695] RAX: ffffffffffffffda RBX: 00007fc7ae825fa0 RCX: 00007fc7ae59f559
[  452.102848][T15695] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000200000ffc000
[  452.102864][T15695] RBP: 00007fc7ae636b20 R08: 0000000000000000 R09: 0000000000000000
[  452.102880][T15695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  452.102895][T15695] R13: 00007fc7ae826038 R14: 00007fc7ae825fa0 R15: 00007ffdb2d7be48
[  452.102934][T15695]  </TASK>
[  452.599851][ T5745] appletouch 1-1:32.85: Geyser mode initialized.
[  452.621526][ T5745] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:32.85/input/input37
[  452.636340][    C0] appletouch 1-1:32.85: appletouch: OVERFLOW with data length 64, actual length is 64
[  453.114337][ T5775] usb 1-1: USB disconnect, device number 29
[  453.179322][ T5775] appletouch 1-1:32.85: input: appletouch disconnected
[  453.469797][T15718] loop8: detected capacity change from 0 to 128
[  453.506800][T15718] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  453.527372][T15718] ext4 filesystem being mounted at /349/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  453.578071][T15718] syz.8.3290 (pid 15718) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  453.737318][ T9255] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  453.801124][T15728] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  454.125889][T15745] loop0: detected capacity change from 0 to 128
[  454.161184][T15745] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  454.161237][T15745] hpfs: filesystem error: improperly stopped
[  454.161253][T15745] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  454.161270][T15745] hpfs: You really don't want any checks? You are crazy...
[  454.161612][T15745] hpfs: hpfs_map_sector(): read error
[  454.161624][T15745] hpfs: code page support is disabled
[  454.161708][T15745] hpfs: hpfs_map_4sectors(): unaligned read
[  454.161769][T15745] hpfs: hpfs_map_4sectors(): unaligned read
[  454.161779][T15745] hpfs: filesystem error: unable to find root dir
[  454.204251][T15745] hpfs: hpfs_map_4sectors(): unaligned read
[  454.204406][T15745] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at aib
[  454.271732][T15750] netlink: 'syz.9.3305': attribute type 7 has an invalid length.
[  454.271755][T15750] netlink: 68 bytes leftover after parsing attributes in process `syz.9.3305'.
[  454.271777][T15750] netlink: 'syz.9.3305': attribute type 7 has an invalid length.
[  454.374529][T15755] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3307'.
[  454.374556][T15755] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3307'.
[  454.540067][T15763] FAULT_INJECTION: forcing a failure.
[  454.540067][T15763] name failslab, interval 1, probability 0, space 0, times 0
[  454.540100][T15763] CPU: 0 UID: 0 PID: 15763 Comm: syz.8.3310 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  454.540135][T15763] Tainted: [L]=SOFTLOCKUP
[  454.540145][T15763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  454.540161][T15763] Call Trace:
[  454.540172][T15763]  <TASK>
[  454.540187][T15763]  dump_stack_lvl+0xe8/0x150
[  454.540227][T15763]  should_fail_ex+0x410/0x560
[  454.540254][T15763]  should_failslab+0xa8/0x100
[  454.540279][T15763]  ? do_getname+0x2e/0x250
[  454.540306][T15763]  kmem_cache_alloc_noprof+0x9c/0x600
[  454.540339][T15763]  ? do_getname+0x2e/0x250
[  454.540372][T15763]  do_getname+0x2e/0x250
[  454.540397][T15763]  ? getname_uflags+0x11/0x30
[  454.540426][T15763]  __x64_sys_execveat+0xad/0xf0
[  454.540451][T15763]  do_syscall_64+0x166/0x520
[  454.540474][T15763]  ? trace_irq_disable+0x3b/0x140
[  454.540499][T15763]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  454.540524][T15763]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  454.540543][T15763] RIP: 0033:0x7fa8aa99f559
[  454.540560][T15763] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  454.540576][T15763] RSP: 002b:00007fa8ab7ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142
[  454.540596][T15763] RAX: ffffffffffffffda RBX: 00007fa8aac25fa0 RCX: 00007fa8aa99f559
[  454.540614][T15763] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff
[  454.540632][T15763] RBP: 00007fa8aaa36b20 R08: 0000000000000100 R09: 0000000000000000
[  454.540648][T15763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  454.540660][T15763] R13: 00007fa8aac26038 R14: 00007fa8aac25fa0 R15: 00007ffe83cef3d8
[  454.540690][T15763]  </TASK>
[  455.207131][T15770] loop0: detected capacity change from 0 to 32768
[  455.219529][T15770] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.3313 (15770)
[  455.236198][T15770] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  455.236227][T15770] BTRFS info (device loop0): using sha256 checksum algorithm
[  455.351128][T15770] BTRFS info (device loop0): enabling ssd optimizations
[  455.351159][T15770] BTRFS info (device loop0): turning on sync discard
[  455.351198][T15770] BTRFS info (device loop0): enabling free space tree
[  455.351216][T15770] BTRFS info (device loop0): use zlib compression, level 3
[  455.638167][ T5635] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  455.778862][T15797] loop8: detected capacity change from 0 to 512
[  456.261296][T15811] tmpfs: Using encoding : utf8-12.1.0
[  456.265414][T15810] FAULT_INJECTION: forcing a failure.
[  456.265414][T15810] name failslab, interval 1, probability 0, space 0, times 0
[  456.265451][T15810] CPU: 1 UID: 0 PID: 15810 Comm: syz.0.3325 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  456.265484][T15810] Tainted: [L]=SOFTLOCKUP
[  456.265494][T15810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  456.265510][T15810] Call Trace:
[  456.265521][T15810]  <TASK>
[  456.265533][T15810]  dump_stack_lvl+0xe8/0x150
[  456.265579][T15810]  should_fail_ex+0x410/0x560
[  456.265615][T15810]  should_failslab+0xa8/0x100
[  456.265649][T15810]  ? do_getname+0x2e/0x250
[  456.265686][T15810]  kmem_cache_alloc_noprof+0x9c/0x600
[  456.265731][T15810]  ? do_getname+0x2e/0x250
[  456.265776][T15810]  do_getname+0x2e/0x250
[  456.265817][T15810]  __se_sys_unlinkat+0x4f/0x1a0
[  456.265856][T15810]  do_syscall_64+0x166/0x520
[  456.265887][T15810]  ? trace_irq_disable+0x3b/0x140
[  456.265920][T15810]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  456.265954][T15810]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  456.265985][T15810] RIP: 0033:0x7f762079f559
[  456.266007][T15810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  456.266028][T15810] RSP: 002b:00007f7621712028 EFLAGS: 00000246 ORIG_RAX: 0000000000000107
[  456.266055][T15810] RAX: ffffffffffffffda RBX: 00007f7620a25fa0 RCX: 00007f762079f559
[  456.266075][T15810] RDX: 0000000000000200 RSI: 0000000000000000 RDI: 0000000000000003
[  456.266092][T15810] RBP: 00007f7620836b20 R08: 0000000000000000 R09: 0000000000000000
[  456.266109][T15810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  456.266124][T15810] R13: 00007f7620a26038 R14: 00007f7620a25fa0 R15: 00007ffc7d7ab298
[  456.266167][T15810]  </TASK>
[  456.471883][ T5761] usb 10-1: new high-speed USB device number 25 using dummy_hcd
[  456.628923][ T5761] usb 10-1: Using ep0 maxpacket: 32
[  456.635390][ T5761] usb 10-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  456.656630][ T5761] usb 10-1: config 0 has an invalid interface number: 51 but max is 0
[  456.656660][ T5761] usb 10-1: config 0 has no interface number 0
[  456.675807][ T5761] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  456.675832][ T5761] usb 10-1: Product: syz
[  456.675848][ T5761] usb 10-1: Manufacturer: syz
[  456.675864][ T5761] usb 10-1: SerialNumber: syz
[  456.687011][ T5761] usb 10-1: config 0 descriptor??
[  456.709156][ T5761] quatech2 10-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  456.914803][ T5761] usb 10-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  456.939353][ T5761] usb 10-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  457.033781][T15825] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3333'.
[  457.033818][T15825] bond0: ARP target 8.4.0.0 is already present
[  457.033838][T15825] bond0: option arp_ip_target: invalid value (1032)
[  457.126207][    C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 114
[  457.327258][    C0] usb 10-1: qt2_read_bulk_callback - non-zero urb status: -71
[  457.327744][ T5761] usb 10-1: USB disconnect, device number 25
[  457.355963][ T5761] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  457.374660][ T5761] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  457.375336][ T5761] quatech2 10-1:0.51: device disconnected
[  457.443563][T15831] loop7: detected capacity change from 0 to 16
[  457.528963][T15831] erofs (device loop7): mounted with root inode @ nid 36.
[  457.585064][T15817] loop3: detected capacity change from 0 to 32768
[  457.624089][ T4939] erofs (device loop7): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 9000
[  457.646207][T15817] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  457.687590][T15814] loop8: detected capacity change from 0 to 32768
[  457.707136][T15831] erofs (device loop7): failed to decompress (lz4) unexpected end of stream @ pa 4096 size 4096 => 8192
[  457.707259][T15831] erofs (device loop7): read error -117 @ 1 of nid 89
[  457.707477][   T29] audit: type=1800 audit(1792824373.791:272): pid=15831 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3336" name="file2" dev="loop7" ino=89 res=0 errno=-117
[  457.721549][ T5762] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  457.756746][T15817] XFS (loop3): Ending clean mount
[  457.765668][T15814] JBD2: Ignoring recovery information on journal
[  457.816254][   T29] audit: type=1800 audit(1792824373.901:273): pid=15817 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3329" name="file1" dev="loop3" ino=6150 res=0 errno=-22
[  457.863115][T15817] XFS (loop3): User initiated shutdown received.
[  457.863164][T15817] XFS (loop3): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:468).  Shutting down filesystem.
[  457.863216][T15817] XFS (loop3): Please unmount the filesystem and rectify the problem(s)
[  457.899516][ T5762] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  457.910064][T15814] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode.
[  457.920986][ T5762] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  457.921015][ T5762] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  457.921041][ T5762] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  457.928565][ T5762] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  457.928592][ T5762] usb 1-1: Product: syz
[  457.928608][ T5762] usb 1-1: Manufacturer: syz
[  457.928625][ T5762] usb 1-1: SerialNumber: syz
[  458.094394][T10372] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  458.211764][ T5762] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 30 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  458.296127][   T29] audit: type=1326 audit(1792824374.371:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15851 comm="syz.6.3340" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5cdeb9f559 code=0x0
[  458.503052][ T5746] usb 1-1: USB disconnect, device number 30
[  458.509194][ T5746] usblp0: removed
[  458.653962][ T9255] ocfs2: Unmounting device (7,8) on (node local)
[  458.955443][T15876] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1'
[  458.955474][T15876] CPU: 1 UID: 0 PID: 15876 Comm: syz.9.3350 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  458.955508][T15876] Tainted: [L]=SOFTLOCKUP
[  458.955518][T15876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  458.955535][T15876] Call Trace:
[  458.955544][T15876]  <TASK>
[  458.955556][T15876]  dump_stack_lvl+0xe8/0x150
[  458.955602][T15876]  sysfs_create_dir_ns+0x271/0x2a0
[  458.955637][T15876]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  458.955676][T15876]  ? srso_alias_return_thunk+0x5/0xfbef5
[  458.955708][T15876]  ? do_raw_spin_unlock+0xf5/0x200
[  458.955757][T15876]  kobject_add_internal+0x622/0xcd0
[  458.955802][T15876]  kobject_add+0x163/0x240
[  458.955835][T15876]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  458.955870][T15876]  ? __pfx_kobject_add+0x10/0x10
[  458.955900][T15876]  ? srso_alias_return_thunk+0x5/0xfbef5
[  458.955939][T15876]  ? srso_alias_return_thunk+0x5/0xfbef5
[  458.955969][T15876]  ? get_device_parent+0x366/0x3a0
[  458.956003][T15876]  ? srso_alias_return_thunk+0x5/0xfbef5
[  458.956039][T15876]  device_add+0x3fa/0xb80
[  458.956070][T15876]  tty_register_device_attr+0x428/0x9b0
[  458.956110][T15876]  ? __pfx_tty_register_device_attr+0x10/0x10
[  458.956150][T15876]  ? srso_alias_return_thunk+0x5/0xfbef5
[  458.956179][T15876]  ? tty_port_init+0x136/0x1a0
[  458.956208][T15876]  ? srso_alias_return_thunk+0x5/0xfbef5
[  458.956237][T15876]  ? gsm_dlci_alloc+0x330/0x640
[  458.956272][T15876]  gsm_activate_mux+0x110/0x2a0
[  458.956310][T15876]  gsmld_ioctl+0x12d3/0x1930
[  458.956350][T15876]  ? __pfx_gsmld_ioctl+0x10/0x10
[  458.956394][T15876]  ? __pfx___ldsem_down_read_nested+0x10/0x10
[  458.956430][T15876]  ? srso_alias_return_thunk+0x5/0xfbef5
[  458.956470][T15876]  ? ldsem_down_read+0x12/0x40
[  458.956513][T15876]  ? __pfx_gsmld_ioctl+0x10/0x10
[  458.956540][T15876]  tty_ioctl+0x9bd/0xde0
[  458.956567][T15876]  ? __pfx_tty_ioctl+0x10/0x10
[  458.956594][T15876]  __se_sys_ioctl+0xfc/0x170
[  458.956629][T15876]  do_syscall_64+0x166/0x520
[  458.956656][T15876]  ? trace_irq_disable+0x3b/0x140
[  458.956689][T15876]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  458.956721][T15876]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  458.956747][T15876] RIP: 0033:0x7f862c79f559
[  458.956771][T15876] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  458.956792][T15876] RSP: 002b:00007f862d632028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  458.956819][T15876] RAX: ffffffffffffffda RBX: 00007f862ca26090 RCX: 00007f862c79f559
[  458.956839][T15876] RDX: 00002000000000c0 RSI: 00000000404c4701 RDI: 0000000000000003
[  458.956857][T15876] RBP: 00007f862c836b20 R08: 0000000000000000 R09: 0000000000000000
[  458.956873][T15876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  458.956889][T15876] R13: 00007f862ca26128 R14: 00007f862ca26090 R15: 00007fffb1d16f28
[  458.956930][T15876]  </TASK>
[  458.978488][T15876] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory.
[  459.482518][ T5746] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  459.563262][T15890] loop8: detected capacity change from 0 to 256
[  459.608033][T15891] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3355'.
[  459.608157][T15891] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  459.646489][ T5746] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  459.646636][T15891] batman_adv: batadv0: Removing interface: batadv_slave_1
[  459.647737][ T5746] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  459.687414][ T5746] usb 4-1: config 0 descriptor??
[  459.927132][ T5746] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  460.157526][ T5746] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 1
[  460.157553][ T5746] [drm] Initialized udl on minor 1
[  460.315538][T15913] sd 0:0:1:0: [sg0] sg_open: flags=0x14fb03
[  460.315610][T15913] sd 0:0:1:0: [sg0] sg_add_sfp: sfp=0xffff888068cd4000
[  460.315656][T15913] sd 0:0:1:0: [sg0] sg_build_reserve: req_size=32768
[  460.315704][T15913] sd 0:0:1:0: [sg0] sg_build_indirect: buff_size=32768, blk_size=32768
[  460.315786][T15913] sd 0:0:1:0: [sg0] sg_add_sfp: bufflen=32768, k_use_sg=1
[  460.315855][T15913] sd 0:0:1:0: [sg0] sg_fasync: mode=0
[  460.315896][T15913] sd 0:0:1:0: [sg0] sg_release
[  460.316012][ T5762] sd 0:0:1:0: [sg0] sg_remove_scat: k_use_sg=1
[  460.680020][T15928] binder: 15926:15928 ioctl c0306201 0 returned -14
[  460.681170][T15928] binder: 15926:15928 ioctl c0306201 2000000001c0 returned -11
[  460.886993][T15937] FAULT_INJECTION: forcing a failure.
[  460.886993][T15937] name failslab, interval 1, probability 0, space 0, times 0
[  460.887023][T15937] CPU: 1 UID: 0 PID: 15937 Comm: syz.8.3378 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  460.887050][T15937] Tainted: [L]=SOFTLOCKUP
[  460.887057][T15937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  460.887068][T15937] Call Trace:
[  460.887075][T15937]  <TASK>
[  460.887083][T15937]  dump_stack_lvl+0xe8/0x150
[  460.887115][T15937]  should_fail_ex+0x410/0x560
[  460.887139][T15937]  should_failslab+0xa8/0x100
[  460.887165][T15937]  __kmalloc_cache_noprof+0x9e/0x600
[  460.887183][T15937]  ? __kasan_kmalloc+0x93/0xb0
[  460.887205][T15937]  ? isofs_init_fs_context+0x52/0x320
[  460.887225][T15937]  ? isofs_init_fs_context+0x52/0x320
[  460.887246][T15937]  ? srso_alias_return_thunk+0x5/0xfbef5
[  460.887271][T15937]  isofs_init_fs_context+0x52/0x320
[  460.887294][T15937]  alloc_fs_context+0x99e/0xd00
[  460.887324][T15937]  __se_sys_fsopen+0x118/0x370
[  460.887350][T15937]  do_syscall_64+0x166/0x520
[  460.887369][T15937]  ? trace_irq_disable+0x3b/0x140
[  460.887393][T15937]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  460.887416][T15937]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  460.887433][T15937] RIP: 0033:0x7fa8aa99f559
[  460.887450][T15937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  460.887464][T15937] RSP: 002b:00007fa8ab7ee028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae
[  460.887484][T15937] RAX: ffffffffffffffda RBX: 00007fa8aac25fa0 RCX: 00007fa8aa99f559
[  460.887498][T15937] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000400
[  460.887509][T15937] RBP: 00007fa8aaa36b20 R08: 0000000000000000 R09: 0000000000000000
[  460.887521][T15937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  460.887531][T15937] R13: 00007fa8aac26038 R14: 00007fa8aac25fa0 R15: 00007ffe83cef3d8
[  460.887560][T15937]  </TASK>
[  460.901939][ T5355] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  461.051270][ T5355] usb 1-1: Using ep0 maxpacket: 8
[  461.054799][ T5355] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  461.068892][ T5355] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  461.068918][ T5355] usb 1-1: Product: syz
[  461.068934][ T5355] usb 1-1: Manufacturer: syz
[  461.069005][ T5355] usb 1-1: SerialNumber: syz
[  461.088599][ T5355] usb 1-1: config 0 descriptor??
[  461.112892][ T5355] gspca_main: sonixj-2.14.0 probing 0c45:613a
[  461.256899][T15942] loop8: detected capacity change from 0 to 512
[  461.284339][T15942] EXT4-fs: Ignoring removed nomblk_io_submit option
[  461.335439][T15942] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -2
[  461.335530][T15942] EXT4-fs error (device loop8): ext4_iget_extra_inode:5210: inode #15: comm syz.8.3380: corrupted in-inode xattr: e_value size too large
[  461.335589][T15942] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  461.339931][    C1] EXT4-fs (loop8): error count since last fsck: 1
[  461.339952][    C1] EXT4-fs (loop8): initial error at time 1792824377: ext4_iget_extra_inode:5210: inode 15
[  461.339998][    C1] EXT4-fs (loop8): last error at time 1792824377: ext4_iget_extra_inode:5210: inode 15
[  461.365963][T15942] EXT4-fs error (device loop8): ext4_orphan_get:1408: comm syz.8.3380: couldn't read orphan inode 15 (err -117)
[  461.366037][T15942] fserror_report: 2 callbacks suppressed
[  461.366051][T15942] loop8: lost filesystem error report for type 5 error -117
[  461.389707][T15942] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  461.634526][ T9255] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  462.103371][T15962] loop9: detected capacity change from 0 to 512
[  462.116568][T15962] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[  462.116588][T15962] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  462.145061][T15962] EXT4-fs (loop9): 1 truncate cleaned up
[  462.157065][T15962] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  462.198265][ T5355] usb 1-1: USB disconnect, device number 31
[  462.666428][ T9862] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  463.281920][   T49] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  463.394924][T15970] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  463.433538][   T49] usb 1-1: Using ep0 maxpacket: 32
[  463.437720][   T49] usb 1-1: unable to get BOS descriptor or descriptor too short
[  463.437795][   T49] usb 1-1: New USB device found, idVendor=046d, idProduct=08f6, bcdDevice= 0.40
[  463.446166][   T49] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  463.446192][   T49] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  463.513009][   T49] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  463.513040][   T49] usb 1-1: Product: syz
[  463.513060][   T49] usb 1-1: Manufacturer: syz
[  463.513115][   T49] usb 1-1: SerialNumber: syz
[  463.572655][   T49] gspca_main: STV06xx-2.14.0 probing 046d:08f6
[  463.572761][   T49] gspca_stv06xx: st6422 sensor detected
[  463.834301][   T49] STV06xx 1-1:1.0: probe with driver STV06xx failed with error -71
[  463.867475][T15988] FAULT_INJECTION: forcing a failure.
[  463.867475][T15988] name failslab, interval 1, probability 0, space 0, times 0
[  463.867521][T15988] CPU: 1 UID: 0 PID: 15988 Comm: syz.9.3398 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  463.867559][T15988] Tainted: [L]=SOFTLOCKUP
[  463.867569][T15988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  463.867585][T15988] Call Trace:
[  463.867595][T15988]  <TASK>
[  463.867606][T15988]  dump_stack_lvl+0xe8/0x150
[  463.867651][T15988]  should_fail_ex+0x410/0x560
[  463.867686][T15988]  should_failslab+0xa8/0x100
[  463.867720][T15988]  ? security_file_alloc+0x34/0x310
[  463.867755][T15988]  kmem_cache_alloc_noprof+0x9c/0x600
[  463.867795][T15988]  ? srso_alias_return_thunk+0x5/0xfbef5
[  463.867825][T15988]  ? rcu_is_watching+0x16/0xb0
[  463.867862][T15988]  ? srso_alias_return_thunk+0x5/0xfbef5
[  463.867891][T15988]  ? security_file_alloc+0x34/0x310
[  463.867934][T15988]  security_file_alloc+0x34/0x310
[  463.867971][T15988]  init_file+0x90/0x2b0
[  463.868010][T15988]  alloc_empty_file+0x74/0x1d0
[  463.868049][T15988]  alloc_file_pseudo+0x110/0x1e0
[  463.868090][T15988]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  463.868132][T15988]  ? _raw_spin_unlock+0x28/0x50
[  463.868169][T15988]  ? srso_alias_return_thunk+0x5/0xfbef5
[  463.868208][T15988]  anon_inode_getfile_fmode+0xb0/0x1c0
[  463.868253][T15988]  __se_sys_fanotify_init+0x6b2/0x870
[  463.868289][T15988]  do_syscall_64+0x166/0x520
[  463.868315][T15988]  ? trace_irq_disable+0x3b/0x140
[  463.868347][T15988]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  463.868380][T15988]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  463.868405][T15988] RIP: 0033:0x7f862c79f559
[  463.868428][T15988] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  463.868449][T15988] RSP: 002b:00007f862d653028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c
[  463.868475][T15988] RAX: ffffffffffffffda RBX: 00007f862ca25fa0 RCX: 00007f862c79f559
[  463.868499][T15988] RDX: 0000000000000000 RSI: 0000000000080000 RDI: 0000000000000010
[  463.868516][T15988] RBP: 00007f862c836b20 R08: 0000000000000000 R09: 0000000000000000
[  463.868532][T15988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  463.868547][T15988] R13: 00007f862ca26038 R14: 00007f862ca25fa0 R15: 00007fffb1d16f28
[  463.868587][T15988]  </TASK>
[  464.333059][   T49] usb 1-1: USB disconnect, device number 32
[  464.368772][T15990] FAULT_INJECTION: forcing a failure.
[  464.368772][T15990] name failslab, interval 1, probability 0, space 0, times 0
[  464.368808][T15990] CPU: 1 UID: 0 PID: 15990 Comm: syz.8.3399 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  464.368841][T15990] Tainted: [L]=SOFTLOCKUP
[  464.368853][T15990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  464.368868][T15990] Call Trace:
[  464.368878][T15990]  <TASK>
[  464.368888][T15990]  dump_stack_lvl+0xe8/0x150
[  464.368929][T15990]  should_fail_ex+0x410/0x560
[  464.368962][T15990]  should_failslab+0xa8/0x100
[  464.368997][T15990]  __kmalloc_noprof+0xf9/0x710
[  464.369023][T15990]  ? tomoyo_encode+0x2ad/0x570
[  464.369048][T15990]  ? tomoyo_encode+0x2ad/0x570
[  464.369081][T15990]  tomoyo_encode+0x2ad/0x570
[  464.369114][T15990]  tomoyo_realpath_from_path+0x5fa/0x640
[  464.369155][T15990]  tomoyo_check_open_permission+0x229/0x470
[  464.369191][T15990]  ? tomoyo_check_open_permission+0x1d3/0x470
[  464.369227][T15990]  ? __pfx_tomoyo_check_open_permission+0x10/0x10
[  464.369264][T15990]  ? srso_alias_return_thunk+0x5/0xfbef5
[  464.369292][T15990]  ? __asan_memset+0x22/0x50
[  464.369349][T15990]  ? srso_alias_return_thunk+0x5/0xfbef5
[  464.369381][T15990]  ? srso_alias_return_thunk+0x5/0xfbef5
[  464.369415][T15990]  ? devcgroup_check_permission+0x31/0x8f0
[  464.369460][T15990]  security_file_open+0xa9/0x240
[  464.369512][T15990]  do_dentry_open+0x495/0x1360
[  464.369565][T15990]  vfs_open_consume+0x4a/0x350
[  464.369599][T15990]  ? path_openat+0x16e1/0x20f0
[  464.369633][T15990]  path_openat+0x16fc/0x20f0
[  464.369685][T15990]  do_file_open+0x23e/0x4a0
[  464.369723][T15990]  ? __pfx_do_file_open+0x10/0x10
[  464.369778][T15990]  ? _raw_spin_unlock+0x28/0x50
[  464.369816][T15990]  ? srso_alias_return_thunk+0x5/0xfbef5
[  464.369843][T15990]  ? alloc_fd+0x6af/0x760
[  464.369896][T15990]  do_sys_openat2+0x115/0x200
[  464.369934][T15990]  ? srso_alias_return_thunk+0x5/0xfbef5
[  464.369965][T15990]  ? __se_sys_futex+0x3a8/0x450
[  464.369991][T15990]  ? __pfx_do_sys_openat2+0x10/0x10
[  464.370035][T15990]  ? rcu_is_watching+0x16/0xb0
[  464.370071][T15990]  ? srso_alias_return_thunk+0x5/0xfbef5
[  464.370105][T15990]  __x64_sys_openat+0x138/0x170
[  464.370147][T15990]  do_syscall_64+0x166/0x520
[  464.370174][T15990]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  464.370205][T15990]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  464.370231][T15990] RIP: 0033:0x7fa8aa99f559
[  464.370254][T15990] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  464.370274][T15990] RSP: 002b:00007fa8ab7ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  464.370299][T15990] RAX: ffffffffffffffda RBX: 00007fa8aac25fa0 RCX: 00007fa8aa99f559
[  464.370317][T15990] RDX: 0000000000000000 RSI: 0000200000000940 RDI: ffffffffffffff9c
[  464.370335][T15990] RBP: 00007fa8aaa36b20 R08: 0000000000000000 R09: 0000000000000000
[  464.370352][T15990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  464.370369][T15990] R13: 00007fa8aac26038 R14: 00007fa8aac25fa0 R15: 00007ffe83cef3d8
[  464.370411][T15990]  </TASK>
[  464.445396][T15992] loop9: detected capacity change from 0 to 256
[  464.490037][T15990] ERROR: Out of memory at tomoyo_realpath_from_path.
[  464.501800][   T29] audit: type=1800 audit(1792824380.591:275): pid=15992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3401" name="file1" dev="loop9" ino=1048906 res=0 errno=-22
[  464.761461][ T5626] udevd[5626]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  465.090290][T16010] loop6: detected capacity change from 0 to 524288000
[  465.201084][ T5746] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92
[  465.201517][ T5746] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[  465.226066][ T5746] usb 4-1: USB disconnect, device number 15
[  465.242479][   T49] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[  465.320570][T16017] netlink: 'syz.3.3410': attribute type 2 has an invalid length.
[  465.335576][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2
[  465.335957][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  465.336034][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  465.347465][T16010] loop6: detected capacity change from 524288000 to 0
[  465.544440][T16021] netlink: 'syz.6.3411': attribute type 9 has an invalid length.
[  465.736624][T16019] loop3: detected capacity change from 0 to 32768
[  465.753046][T16019] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3412 (16019)
[  465.766115][T16019] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  465.766153][T16019] BTRFS info (device loop3): using crc32c checksum algorithm
[  465.913820][T16019] BTRFS info (device loop3): enabling ssd optimizations
[  465.913848][T16019] BTRFS info (device loop3): turning on flush-on-commit
[  465.913868][T16019] BTRFS info (device loop3): enabling free space tree
[  465.913889][T16019] BTRFS info (device loop3): enabling auto defrag
[  465.913910][T16019] BTRFS info (device loop3): use lzo compression, level 1
[  465.913933][T16019] BTRFS info (device loop3): max_inline set to 4096
[  466.262162][T16058] FAULT_INJECTION: forcing a failure.
[  466.262162][T16058] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  466.262212][T16058] CPU: 1 UID: 0 PID: 16058 Comm: syz.7.3422 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  466.262252][T16058] Tainted: [L]=SOFTLOCKUP
[  466.262263][T16058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  466.262281][T16058] Call Trace:
[  466.262292][T16058]  <TASK>
[  466.262304][T16058]  dump_stack_lvl+0xe8/0x150
[  466.262349][T16058]  should_fail_ex+0x410/0x560
[  466.262382][T16058]  set_fd_set+0x3a/0xa0
[  466.262416][T16058]  core_sys_select+0x9f7/0xb40
[  466.262449][T16058]  ? srso_alias_return_thunk+0x5/0xfbef5
[  466.262501][T16058]  ? __pfx_core_sys_select+0x10/0x10
[  466.262562][T16058]  ? __pfx_set_user_sigmask+0x10/0x10
[  466.262597][T16058]  ? lockdep_hardirqs_on+0x7b/0x110
[  466.262622][T16058]  ? srso_alias_return_thunk+0x5/0xfbef5
[  466.262652][T16058]  ? srso_alias_return_thunk+0x5/0xfbef5
[  466.262680][T16058]  ? ktime_get_ts64+0x295/0x300
[  466.262715][T16058]  __se_sys_pselect6+0x267/0x320
[  466.262756][T16058]  ? __pfx___se_sys_pselect6+0x10/0x10
[  466.262799][T16058]  ? srso_alias_return_thunk+0x5/0xfbef5
[  466.262827][T16058]  ? __x64_sys_pselect6+0x21/0xf0
[  466.262864][T16058]  do_syscall_64+0x166/0x520
[  466.262889][T16058]  ? trace_irq_disable+0x3b/0x140
[  466.262921][T16058]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  466.262952][T16058]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  466.262975][T16058] RIP: 0033:0x7fc7ae59f559
[  466.262997][T16058] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  466.263017][T16058] RSP: 002b:00007fc7af52f028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e
[  466.263042][T16058] RAX: ffffffffffffffda RBX: 00007fc7ae825fa0 RCX: 00007fc7ae59f559
[  466.263060][T16058] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000000000000000
[  466.263076][T16058] RBP: 00007fc7ae636b20 R08: 0000200000000280 R09: 0000000000000000
[  466.263093][T16058] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000000
[  466.263109][T16058] R13: 00007fc7ae826038 R14: 00007fc7ae825fa0 R15: 00007ffdb2d7be48
[  466.263147][T16058]  </TASK>
[  466.294260][T10372] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  466.422411][T16062] bond0: invalid NS target ff00:: specified for addition
[  466.422441][T16062] bond0: option ns_ip6_target: invalid value (18446744073709551615)
[  466.987342][T16081] loop3: detected capacity change from 0 to 64
[  467.110569][T16081] hfs: walked past end of dir
[  467.229063][T16085] loop7: detected capacity change from 0 to 128
[  467.623545][T16097] input: syz0 as /devices/virtual/input/input38
[  467.766045][T16077] loop8: detected capacity change from 0 to 32768
[  467.786218][T16077] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.3432 (16077)
[  467.815226][T16077] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  467.815257][T16077] BTRFS info (device loop8): using sha256 checksum algorithm
[  467.933735][T16077] BTRFS info (device loop8): enabling ssd optimizations
[  467.933763][T16077] BTRFS info (device loop8): turning on async discard
[  467.933781][T16077] BTRFS info (device loop8): enabling free space tree
[  468.072453][ T9255] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  468.394680][T16101] loop0: detected capacity change from 0 to 32768
[  468.406961][T16101] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.3443 (16101)
[  468.420328][T16101] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  468.420356][T16101] BTRFS info (device loop0): using sha256 checksum algorithm
[  468.597445][T16101] BTRFS info (device loop0): enabling ssd optimizations
[  468.597476][T16101] BTRFS info (device loop0): turning on async discard
[  468.597496][T16101] BTRFS info (device loop0): enabling free space tree
[  468.826804][   T29] audit: type=1800 audit(1792824384.911:276): pid=16155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3443" name="file1" dev="loop0" ino=260 res=0 errno=-22
[  469.038049][   T29] audit: type=1800 audit(1792824385.121:277): pid=16101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3443" name="file1" dev="loop0" ino=260 res=0 errno=-4
[  469.238134][T16163] xt_CT: No such helper "netbios-ns"
[  469.248813][ T5635] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  469.856679][T16167] loop9: detected capacity change from 0 to 32768
[  469.917319][T16167] XFS (loop9): DAX unsupported by block device. Turning off DAX.
[  469.937153][T16167] XFS (loop9): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  470.046347][T16167] XFS (loop9): Ending clean mount
[  470.134173][T16167] XFS (loop9): Quotacheck needed: Please wait.
[  470.167485][T16171] loop3: detected capacity change from 0 to 40427
[  470.188897][T16171] F2FS-fs (loop3): build fault injection rate: 174
[  470.188918][T16171] F2FS-fs (loop3): build fault injection type: 0x3bfe8c
[  470.189832][T16171] F2FS-fs (loop3): invalid crc value
[  470.244713][T16167] XFS (loop9): Quotacheck: Done.
[  470.339747][T16171] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  470.387980][T16171] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  470.508814][T16171] syz.3.3457: attempt to access beyond end of device
[  470.508814][T16171] loop3: rw=2049, sector=45096, nr_sectors = 136 limit=40427
[  470.636416][T10372] syz-executor: attempt to access beyond end of device
[  470.636416][T10372] loop3: rw=2049, sector=45232, nr_sectors = 16 limit=40427
[  470.636453][T10372] F2FS-fs (loop3): inject write IO error in f2fs_write_end_bio of __submit_merged_bio+0x258/0x6a0
[  470.655603][T10372] CPU: 1 UID: 0 PID: 10372 Comm: syz-executor Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  470.655639][T10372] Tainted: [L]=SOFTLOCKUP
[  470.655649][T10372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  470.655665][T10372] Call Trace:
[  470.655675][T10372]  <TASK>
[  470.655685][T10372]  dump_stack_lvl+0xe8/0x150
[  470.655727][T10372]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  470.655762][T10372]  f2fs_write_end_bio+0x114c/0x15f0
[  470.655823][T10372]  __submit_merged_bio+0x258/0x6a0
[  470.655850][T10372]  ? srso_alias_return_thunk+0x5/0xfbef5
[  470.655880][T10372]  ? rcu_is_watching+0x16/0xb0
[  470.655924][T10372]  __submit_merged_write_cond+0x3c9/0x4e0
[  470.655963][T10372]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  470.656008][T10372]  ? srso_alias_return_thunk+0x5/0xfbef5
[  470.656047][T10372]  f2fs_write_data_pages+0x2a1d/0x36f0
[  470.656123][T10372]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  470.656216][T10372]  ? srso_alias_return_thunk+0x5/0xfbef5
[  470.656246][T10372]  ? srso_alias_return_thunk+0x5/0xfbef5
[  470.656276][T10372]  ? __bfs+0x153/0x290
[  470.656306][T10372]  ? __pfx_hlock_conflict+0x10/0x10
[  470.656349][T10372]  ? srso_alias_return_thunk+0x5/0xfbef5
[  470.656392][T10372]  ? srso_alias_return_thunk+0x5/0xfbef5
[  470.656422][T10372]  ? srso_alias_return_thunk+0x5/0xfbef5
[  470.656450][T10372]  ? __lock_acquire+0x1511/0x2de0
[  470.656519][T10372]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  470.656554][T10372]  do_writepages+0x338/0x560
[  470.656596][T10372]  ? srso_alias_return_thunk+0x5/0xfbef5
[  470.656628][T10372]  ? srso_alias_return_thunk+0x5/0xfbef5
[  470.656662][T10372]  ? srso_alias_return_thunk+0x5/0xfbef5
[  470.656690][T10372]  ? do_raw_spin_unlock+0xf5/0x200
[  470.656735][T10372]  filemap_fdatawrite+0x1e9/0x2f0
[  470.656766][T10372]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  470.656835][T10372]  ? srso_alias_return_thunk+0x5/0xfbef5
[  470.656867][T10372]  ? srso_alias_return_thunk+0x5/0xfbef5
[  470.656902][T10372]  ? do_raw_spin_unlock+0xf5/0x200
[  470.656947][T10372]  f2fs_sync_dirty_inodes+0x30e/0x830
[  470.657000][T10372]  f2fs_write_checkpoint+0xa38/0x2710
[  470.657033][T10372]  ? __lock_acquire+0x747/0x2de0
[  470.657101][T10372]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  470.657134][T10372]  ? srso_alias_return_thunk+0x5/0xfbef5
[  470.657228][T10372]  kill_f2fs_super+0x2dd/0x700
[  470.657267][T10372]  ? rcu_do_enqueue+0x616/0x870
[  470.657297][T10372]  ? lockdep_hardirqs_on+0x7b/0x110
[  470.657324][T10372]  ? __pfx_kill_f2fs_super+0x10/0x10
[  470.657378][T10372]  ? __pfx_call_rcu+0x10/0x10
[  470.657421][T10372]  ? srso_alias_return_thunk+0x5/0xfbef5
[  470.657450][T10372]  ? shrinker_free+0x2a7/0x3b0
[  470.657479][T10372]  deactivate_locked_super+0xbe/0x110
[  470.657526][T10372]  cleanup_mnt+0x204/0x2a0
[  470.657562][T10372]  task_work_run+0x1d9/0x260
[  470.657597][T10372]  ? __pfx_task_work_run+0x10/0x10
[  470.657639][T10372]  exit_to_user_mode_loop+0x204/0x770
[  470.657671][T10372]  ? srso_alias_return_thunk+0x5/0xfbef5
[  470.657699][T10372]  ? rcu_is_watching+0x16/0xb0
[  470.657741][T10372]  do_syscall_64+0x328/0x520
[  470.657768][T10372]  ? trace_irq_disable+0x3b/0x140
[  470.657801][T10372]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  470.657833][T10372]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  470.657859][T10372] RIP: 0033:0x7f721a5a0797
[  470.657881][T10372] Code: a2 c7 05 5c 9f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  470.657901][T10372] RSP: 002b:00007fffe8b17b18 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  470.657927][T10372] RAX: 0000000000000000 RBX: 00007f721a635f63 RCX: 00007f721a5a0797
[  470.657945][T10372] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffe8b17bd0
[  470.657961][T10372] RBP: 00007fffe8b17bd0 R08: 00007fffe8b18bd0 R09: 00000000ffffffff
[  470.657979][T10372] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffe8b18c60
[  470.657996][T10372] R13: 00007f721a635f63 R14: 0000000000072e15 R15: 00007fffe8b18ca0
[  470.658036][T10372]  </TASK>
[  470.669813][T10372] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  470.672942][T10372] CPU: 1 UID: 0 PID: 10372 Comm: syz-executor Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  470.672977][T10372] Tainted: [L]=SOFTLOCKUP
[  470.672987][T10372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  470.673002][T10372] Call Trace:
[  470.673012][T10372]  <TASK>
[  470.673022][T10372]  dump_stack_lvl+0xe8/0x150
[  470.673064][T10372]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  470.673099][T10372]  f2fs_write_end_bio+0x114c/0x15f0
[  470.673159][T10372]  __submit_merged_bio+0x258/0x6a0
[  470.673186][T10372]  ? srso_alias_return_thunk+0x5/0xfbef5
[  470.673216][T10372]  ? rcu_is_watching+0x16/0xb0
[  470.673258][T10372]  __submit_merged_write_cond+0x3c9/0x4e0
[  470.673298][T10372]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  470.673343][T10372]  ? srso_alias_return_thunk+0x5/0xfbef5
[  470.673383][T10372]  f2fs_write_data_pages+0x2a1d/0x36f0
[  470.673459][T10372]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  470.673551][T10372]  ? srso_alias_return_thunk+0x5/0xfbef5
[  470.673581][T10372]  ? srso_alias_return_thunk+0x5/0xfbef5
[  470.673610][T10372]  ? __bfs+0x153/0x290
[  470.673638][T10372]  ? __pfx_hlock_conflict+0x10/0x10
[  470.673679][T10372]  ? srso_alias_return_thunk+0x5/0xfbef5
[  470.673722][T10372]  ? srso_alias_return_thunk+0x5/0xfbef5
[  470.673752][T10372]  ? srso_alias_return_thunk+0x5/0xfbef5
[  470.673781][T10372]  ? __lock_acquire+0x1511/0x2de0
[  470.673843][T10372]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  470.673881][T10372]  do_writepages+0x338/0x560
[  470.673922][T10372]  ? srso_alias_return_thunk+0x5/0xfbef5
[  470.673955][T10372]  ? srso_alias_return_thunk+0x5/0xfbef5
[  470.673989][T10372]  ? srso_alias_return_thunk+0x5/0xfbef5
[  470.674017][T10372]  ? do_raw_spin_unlock+0xf5/0x200
[  470.674063][T10372]  filemap_fdatawrite+0x1e9/0x2f0
[  470.674094][T10372]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  470.674163][T10372]  ? srso_alias_return_thunk+0x5/0xfbef5
[  470.674196][T10372]  ? srso_alias_return_thunk+0x5/0xfbef5
[  470.674231][T10372]  ? do_raw_spin_unlock+0xf5/0x200
[  470.674276][T10372]  f2fs_sync_dirty_inodes+0x30e/0x830
[  470.674329][T10372]  f2fs_write_checkpoint+0xa38/0x2710
[  470.674362][T10372]  ? __lock_acquire+0x747/0x2de0
[  470.674430][T10372]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  470.674464][T10372]  ? srso_alias_return_thunk+0x5/0xfbef5
[  470.674563][T10372]  kill_f2fs_super+0x2dd/0x700
[  470.674603][T10372]  ? rcu_do_enqueue+0x616/0x870
[  470.674633][T10372]  ? lockdep_hardirqs_on+0x7b/0x110
[  470.674660][T10372]  ? __pfx_kill_f2fs_super+0x10/0x10
[  470.674714][T10372]  ? __pfx_call_rcu+0x10/0x10
[  470.674757][T10372]  ? srso_alias_return_thunk+0x5/0xfbef5
[  470.674787][T10372]  ? shrinker_free+0x2a7/0x3b0
[  470.674816][T10372]  deactivate_locked_super+0xbe/0x110
[  470.674858][T10372]  cleanup_mnt+0x204/0x2a0
[  470.674894][T10372]  task_work_run+0x1d9/0x260
[  470.674929][T10372]  ? __pfx_task_work_run+0x10/0x10
[  470.674972][T10372]  exit_to_user_mode_loop+0x204/0x770
[  470.675003][T10372]  ? srso_alias_return_thunk+0x5/0xfbef5
[  470.675033][T10372]  ? rcu_is_watching+0x16/0xb0
[  470.675074][T10372]  do_syscall_64+0x328/0x520
[  470.675100][T10372]  ? trace_irq_disable+0x3b/0x140
[  470.675134][T10372]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  470.675174][T10372]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  470.675204][T10372] RIP: 0033:0x7f721a5a0797
[  470.675231][T10372] Code: a2 c7 05 5c 9f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  470.675256][T10372] RSP: 002b:00007fffe8b17b18 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  470.675287][T10372] RAX: 0000000000000000 RBX: 00007f721a635f63 RCX: 00007f721a5a0797
[  470.675307][T10372] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffe8b17bd0
[  470.675325][T10372] RBP: 00007fffe8b17bd0 R08: 00007fffe8b18bd0 R09: 00000000ffffffff
[  470.675344][T10372] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffe8b18c60
[  470.675362][T10372] R13: 00007f721a635f63 R14: 0000000000072e15 R15: 00007fffe8b18ca0
[  470.675400][T10372]  </TASK>
[  470.686775][T10372] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  470.746358][ T9862] XFS (loop9): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  471.065042][T16217] evm: overlay not supported
[  472.572754][T16235] loop7: detected capacity change from 0 to 131072
[  472.573677][T16235] xfs: Deprecated parameter 'ikeep'
[  472.573694][T16235] XFS: ikeep mount option is deprecated.
[  472.604851][T16235] XFS (loop7): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[  472.671750][T16248] device-mapper: ioctl: Invalid ioctl structure: name myp, dev f804
[  472.765313][T16235] XFS (loop7): Starting recovery (logdev: internal)
[  472.834893][T16235] XFS (loop7): Ending recovery (logdev: internal)
[  472.943602][T16256] loop9: detected capacity change from 0 to 16
[  472.965225][T16256] erofs (device loop9): mounted with root inode @ nid 36.
[  473.009842][ T7009] XFS (loop7): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[  473.129654][T16261] loop0: detected capacity change from 0 to 1024
[  473.218479][T16261] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  473.218597][T16261] ext4 filesystem being mounted at /586/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  473.332963][T16261] EXT4-fs error (device loop0): ext4_map_blocks:832: inode #15: block 3: comm syz.0.3490: lblock 3 mapped to illegal pblock 3 (length 3)
[  473.335983][T16261] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  473.336012][T16261] EXT4-fs (loop0): This should not happen!! Data will be lost
[  473.336012][T16261] 
[  473.343616][T16261] EXT4-fs error (device loop0): ext4_map_blocks:832: inode #15: block 8: comm syz.0.3490: lblock 8 mapped to illegal pblock 8 (length 5)
[  473.365834][T16261] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 5 with error 117
[  473.365865][T16261] EXT4-fs (loop0): This should not happen!! Data will be lost
[  473.365865][T16261] 
[  473.382208][T16261] EXT4-fs error (device loop0): ext4_ext_remove_space:2977: inode #15: comm syz.0.3490: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0)
[  473.385173][T16261] EXT4-fs error (device loop0) in ext4_setattr:6247: Corrupt filesystem
[  473.570260][ T5635] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  473.887999][T16273] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  473.974064][T16284] fuse: fd is not a fuse device
[  474.009434][T16286] FAULT_INJECTION: forcing a failure.
[  474.009434][T16286] name failslab, interval 1, probability 0, space 0, times 0
[  474.009471][T16286] CPU: 1 UID: 0 PID: 16286 Comm: syz.7.3492 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  474.009508][T16286] Tainted: [L]=SOFTLOCKUP
[  474.009518][T16286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  474.009532][T16286] Call Trace:
[  474.009542][T16286]  <TASK>
[  474.009551][T16286]  dump_stack_lvl+0xe8/0x150
[  474.009592][T16286]  should_fail_ex+0x410/0x560
[  474.009626][T16286]  should_failslab+0xa8/0x100
[  474.009659][T16286]  __kmalloc_cache_noprof+0x9e/0x600
[  474.009683][T16286]  ? srso_alias_return_thunk+0x5/0xfbef5
[  474.009713][T16286]  ? gfs2_meta_init_fs_context+0x54/0x2c0
[  474.009747][T16286]  ? gfs2_meta_init_fs_context+0x54/0x2c0
[  474.009790][T16286]  gfs2_meta_init_fs_context+0x54/0x2c0
[  474.009830][T16286]  alloc_fs_context+0x99e/0xd00
[  474.009873][T16286]  __se_sys_fsopen+0x118/0x370
[  474.009911][T16286]  do_syscall_64+0x166/0x520
[  474.009937][T16286]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  474.009968][T16286]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  474.009991][T16286] RIP: 0033:0x7fc7ae59f559
[  474.010012][T16286] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  474.010032][T16286] RSP: 002b:00007fc7af52f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae
[  474.010060][T16286] RAX: ffffffffffffffda RBX: 00007fc7ae825fa0 RCX: 00007fc7ae59f559
[  474.010078][T16286] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000200
[  474.010094][T16286] RBP: 00007fc7ae636b20 R08: 0000000000000000 R09: 0000000000000000
[  474.010109][T16286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  474.010124][T16286] R13: 00007fc7ae826038 R14: 00007fc7ae825fa0 R15: 00007ffdb2d7be48
[  474.010161][T16286]  </TASK>
[  474.045200][ T5746] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  474.131717][   T10] usb 9-1: new high-speed USB device number 18 using dummy_hcd
[  474.177226][T16273] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  474.200949][ T5746] usb 1-1: New USB device found, idVendor=05c6, idProduct=1000, bcdDevice= 0.00
[  474.202447][ T5746] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  474.236718][ T5746] usb-storage 1-1:1.0: USB Mass Storage device detected
[  474.253303][T16291] scsi host1: scsi_eh_1: sleeping
[  474.341414][   T10] usb 9-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00
[  474.342374][   T10] usb 9-1: config 168 has an invalid interface number: 3 but max is 0
[  474.342399][   T10] usb 9-1: config 168 has no interface number 0
[  474.344396][   T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  474.344421][   T10] usb 9-1: Product: syz
[  474.344438][   T10] usb 9-1: Manufacturer: syz
[  474.344455][   T10] usb 9-1: SerialNumber: syz
[  474.404927][   T10] usb 9-1: 3:0 : does not exist
[  474.404950][   T10] usb 9-1: 3:0 : does not exist
[  474.479039][T16273] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  474.684412][T16273] netdevsim netdevsim3 netdevsim0 (unregistering): left promiscuous mode
[  474.685111][T16273] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  474.819161][T16310] lo: entered allmulticast mode
[  474.824157][T16309] lo: left allmulticast mode
[  474.941910][ T3379] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  474.973356][T16316] netlink: 7 bytes leftover after parsing attributes in process `syz.9.3515'.
[  475.037378][  T279] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  475.050988][   T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  475.051034][   T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  475.151098][ T5761] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0
[  475.170355][ T5761] hid-generic 0000:0000:0000.0021: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  475.222618][ T5745] usb 9-1: USB disconnect, device number 18
[  475.316145][T16291] scsi host1: Error handler scsi_eh_1 exiting
[  475.321831][ T5746] usb-storage 1-1:1.0: probe with driver usb-storage failed with error -5
[  475.341559][T16327] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3518'.
[  475.450469][ T5746] usb 1-1: USB disconnect, device number 33
[  476.152793][T16344] FAULT_INJECTION: forcing a failure.
[  476.152793][T16344] name failslab, interval 1, probability 0, space 0, times 0
[  476.152848][T16344] CPU: 0 UID: 0 PID: 16344 Comm: syz.0.3526 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  476.152880][T16344] Tainted: [L]=SOFTLOCKUP
[  476.152890][T16344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  476.152904][T16344] Call Trace:
[  476.152914][T16344]  <TASK>
[  476.152924][T16344]  dump_stack_lvl+0xe8/0x150
[  476.152964][T16344]  should_fail_ex+0x410/0x560
[  476.152997][T16344]  should_failslab+0xa8/0x100
[  476.153036][T16344]  __kmalloc_cache_noprof+0x9e/0x600
[  476.153063][T16344]  ? vmci_host_open+0x4f/0xe0
[  476.153099][T16344]  ? vmci_host_open+0x4f/0xe0
[  476.153135][T16344]  ? srso_alias_return_thunk+0x5/0xfbef5
[  476.153169][T16344]  vmci_host_open+0x4f/0xe0
[  476.153205][T16344]  ? __pfx_vmci_host_open+0x10/0x10
[  476.153239][T16344]  misc_open+0x2d5/0x350
[  476.153278][T16344]  chrdev_open+0x4d9/0x600
[  476.153313][T16344]  ? __pfx_chrdev_open+0x10/0x10
[  476.153342][T16344]  ? srso_alias_return_thunk+0x5/0xfbef5
[  476.153369][T16344]  ? fsnotify_open_perm_and_set_mode+0x135/0x6b0
[  476.153398][T16344]  ? devcgroup_check_permission+0x31/0x8f0
[  476.153433][T16344]  ? __pfx_chrdev_open+0x10/0x10
[  476.153463][T16344]  do_dentry_open+0x80e/0x1360
[  476.153508][T16344]  vfs_open_consume+0x4a/0x350
[  476.153538][T16344]  ? path_openat+0x16e1/0x20f0
[  476.153568][T16344]  path_openat+0x16fc/0x20f0
[  476.153618][T16344]  do_file_open+0x23e/0x4a0
[  476.153652][T16344]  ? __pfx_do_file_open+0x10/0x10
[  476.153705][T16344]  ? _raw_spin_unlock+0x28/0x50
[  476.153739][T16344]  ? srso_alias_return_thunk+0x5/0xfbef5
[  476.153766][T16344]  ? alloc_fd+0x6af/0x760
[  476.153814][T16344]  do_sys_openat2+0x115/0x200
[  476.153846][T16344]  ? srso_alias_return_thunk+0x5/0xfbef5
[  476.153873][T16344]  ? __se_sys_futex+0x3a8/0x450
[  476.153898][T16344]  ? __pfx_do_sys_openat2+0x10/0x10
[  476.153938][T16344]  ? rcu_is_watching+0x16/0xb0
[  476.153972][T16344]  ? srso_alias_return_thunk+0x5/0xfbef5
[  476.154004][T16344]  __x64_sys_openat+0x138/0x170
[  476.154049][T16344]  do_syscall_64+0x166/0x520
[  476.154074][T16344]  ? trace_irq_disable+0x3b/0x140
[  476.154104][T16344]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  476.154137][T16344]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  476.154161][T16344] RIP: 0033:0x7f762079f559
[  476.154181][T16344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  476.154201][T16344] RSP: 002b:00007f7621712028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  476.154226][T16344] RAX: ffffffffffffffda RBX: 00007f7620a25fa0 RCX: 00007f762079f559
[  476.154243][T16344] RDX: 0000000000000002 RSI: 00002000000002c0 RDI: 00000000ffffff9c
[  476.154259][T16344] RBP: 00007f7620836b20 R08: 0000000000000000 R09: 0000000000000000
[  476.154274][T16344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  476.154289][T16344] R13: 00007f7620a26038 R14: 00007f7620a25fa0 R15: 00007ffc7d7ab298
[  476.154327][T16344]  </TASK>
[  476.160832][   T10] usb 10-1: new high-speed USB device number 26 using dummy_hcd
[  476.512794][   T10] usb 10-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  476.513977][   T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  476.529236][   T10] usb 10-1: config 0 descriptor??
[  476.759695][   T10] udl 10-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  477.002406][   T10] [drm] Initialized udl 0.0.1 for 10-1:0.0 on minor 1
[  477.002433][   T10] [drm] Initialized udl on minor 1
[  477.080434][ T5761] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[  477.145292][T16375] loop3: detected capacity change from 0 to 4096
[  477.233959][T16375] ntfs3(loop3): Failed to load $Extend (-22).
[  477.233987][T16375] ntfs3(loop3): Failed to initialize $Extend.
[  477.252958][ T5761] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  477.255913][ T5761] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  477.260899][ T5761] usb 1-1: config 0 descriptor??
[  477.513702][ T5761] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  477.747046][ T5761] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2
[  477.747100][ T5761] [drm] Initialized udl on minor 2
[  478.047389][T16395] netlink: 'syz.6.3550': attribute type 10 has an invalid length.
[  478.048089][T16395] syz_tun: entered promiscuous mode
[  478.072182][T16395] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  479.209211][T16436] loop3: detected capacity change from 0 to 512
[  479.228721][T16436] EXT4-fs error (device loop3): ext4_iget_extra_inode:5210: inode #15: comm syz.3.3569: corrupted in-inode xattr: invalid ea_ino
[  479.228754][T16436] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  479.229691][T16436] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.3569: couldn't read orphan inode 15 (err -117)
[  479.229723][T16436] loop3: lost filesystem error report for type 5 error -117
[  479.229936][    C1] EXT4-fs (loop3): error count since last fsck: 2
[  479.229956][    C1] EXT4-fs (loop3): initial error at time 1792824395: ext4_iget_extra_inode:5210: inode 15
[  479.230020][    C1] EXT4-fs (loop3): last error at time 1792824395: ext4_orphan_get:1408
[  479.236596][T16436] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  479.404575][T16442] overlayfs: failed to clone upperpath
[  479.412830][T16442] overlayfs: failed to clone upperpath
[  479.421623][T10372] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  479.798183][T16460] loop8: detected capacity change from 0 to 1024
[  479.808587][T16460] EXT4-fs: Ignoring removed nobh option
[  479.808739][T16460] EXT4-fs: Ignoring removed bh option
[  479.808789][T16460] EXT4-fs: Ignoring removed nobh option
[  479.827042][T16460] EXT4-fs (loop8): stripe (17) is not aligned with cluster size (16), stripe is disabled
[  479.870767][T16460] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  479.955304][T16466] loop3: detected capacity change from 0 to 1024
[  479.962793][T16466] EXT4-fs: Ignoring removed nobh option
[  479.962953][T16466] EXT4-fs: Ignoring removed bh option
[  479.963007][T16466] EXT4-fs: Ignoring removed nobh option
[  479.971199][T16466] EXT4-fs (loop3): stripe (17) is not aligned with cluster size (16), stripe is disabled
[  480.003225][T16466] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  480.043309][T16466] EXT4-fs error (device loop3): ext4_find_dest_de:2052: inode #12: block 7: comm syz.3.3581: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0
[  480.046028][T16466] EXT4-fs (loop3): Remounting filesystem read-only
[  480.078451][ T9255] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  480.134303][T10372] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  480.236599][T16474] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3584'.
[  480.520024][ T5775] usb 9-1: new high-speed USB device number 19 using dummy_hcd
[  480.681466][ T5775] usb 9-1: Using ep0 maxpacket: 8
[  480.682397][ T5775] usb 9-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[  480.689783][ T5775] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  480.689811][ T5775] usb 9-1: Product: syz
[  480.689829][ T5775] usb 9-1: Manufacturer: syz
[  480.721643][ T5775] usb 9-1: SerialNumber: syz
[  480.729722][ T5775] usb 9-1: config 0 descriptor??
[  480.746285][ T5775] gspca_main: sq930x-2.14.0 probing 2770:930c
[  480.819721][   T29] audit: type=1326 audit(1792824396.901:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16486 comm="syz.6.3590" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cdeb9f559 code=0x7ffc0000
[  480.824693][   T29] audit: type=1326 audit(1792824396.901:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16486 comm="syz.6.3590" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cdeb9f559 code=0x7ffc0000
[  480.826698][   T29] audit: type=1326 audit(1792824396.911:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16486 comm="syz.6.3590" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cdeb9f559 code=0x7ffc0000
[  480.827289][   T29] audit: type=1326 audit(1792824396.911:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16486 comm="syz.6.3590" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f5cdeb9f559 code=0x7ffc0000
[  480.827599][   T29] audit: type=1326 audit(1792824396.911:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16486 comm="syz.6.3590" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cdeb9f559 code=0x7ffc0000
[  480.827826][   T29] audit: type=1326 audit(1792824396.911:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16486 comm="syz.6.3590" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cdeb9f559 code=0x7ffc0000
[  480.828082][   T29] audit: type=1326 audit(1792824396.911:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16486 comm="syz.6.3590" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cdeb9f559 code=0x7ffc0000
[  480.828863][   T29] audit: type=1326 audit(1792824396.911:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16486 comm="syz.6.3590" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cdeb9f559 code=0x7ffc0000
[  480.829188][   T29] audit: type=1326 audit(1792824396.911:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16486 comm="syz.6.3590" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f5cdeb9f559 code=0x7ffc0000
[  480.829466][   T29] audit: type=1326 audit(1792824396.911:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16486 comm="syz.6.3590" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cdeb9f559 code=0x7ffc0000
[  481.364147][T16494] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3593'.
[  481.850279][ T5775] gspca_sq930x: reg_w 0105 0f00 failed -71
[  482.080110][ T5775] gspca_sq930x: Sensor ov9630 not yet treated
[  482.080194][ T5775] sq930x 9-1:0.0: probe with driver sq930x failed with error -22
[  482.083881][   T10] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92
[  482.084344][   T10] udl 10-1:0.0: [drm] Cannot find any crtc or sizes
[  482.087702][ T5762] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  482.104269][ T5761] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  482.104662][ T5761] udl 1-1:0.0: [drm] Cannot find any crtc or sizes
[  482.146164][ T5762] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  482.146385][ T5762] udl 10-1:0.0: [drm] Cannot find any crtc or sizes
[  482.149594][   T10] usb 10-1: USB disconnect, device number 26
[  482.173172][ T5775] usb 9-1: USB disconnect, device number 19
[  482.173942][ T5762] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  482.174604][ T5761] usb 1-1: USB disconnect, device number 34
[  482.178190][ T5762] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  482.213581][ T5762] udl 1-1:0.0: [drm] Cannot find any crtc or sizes
[  482.344689][T16516] jffs2: notice: (16516) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  483.318079][T16534] loop7: detected capacity change from 0 to 32768
[  483.330598][T16534] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  483.330617][T16534] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  483.407460][T16534] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[  483.409765][ T5355] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  483.409781][ T5355] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  483.780698][ T5355] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 370ms
[  483.784050][ T5355] gfs2: fsid=syz:syz.0: jid=0: Done
[  483.784097][T16534] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  483.953774][T16558] netlink: 112 bytes leftover after parsing attributes in process `syz.9.3616'.
[  484.033088][T16558] veth2: entered promiscuous mode
[  484.108758][T16567] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3624'.
[  484.427612][T16580] loop0: detected capacity change from 0 to 256
[  484.485912][T16580] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d)
[  485.010421][T16594] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  485.694406][T16614] loop8: detected capacity change from 0 to 512
[  485.746703][T16614] EXT4-fs error (device loop8): ext4_xattr_inode_iget:473: comm syz.8.3646: EA inode 11 has unexpected i_nlink=2 ref_count=7168870745731235840
[  485.746743][T16614] loop8: lost filesystem error report for type 5 error -117
[  485.761886][    C1] EXT4-fs (loop8): error count since last fsck: 1
[  485.761909][    C1] EXT4-fs (loop8): initial error at time 1792824401: ext4_xattr_inode_iget:473
[  485.761937][    C1] EXT4-fs (loop8): last error at time 1792824401: ext4_xattr_inode_iget:473
[  485.801060][T16614] EXT4-fs (loop8): 1 orphan inode deleted
[  485.808424][T16614] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  485.978615][T16628] FAULT_INJECTION: forcing a failure.
[  485.978615][T16628] name failslab, interval 1, probability 0, space 0, times 0
[  485.978657][T16628] CPU: 0 UID: 0 PID: 16628 Comm: syz.0.3650 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  485.978691][T16628] Tainted: [L]=SOFTLOCKUP
[  485.978701][T16628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  485.978717][T16628] Call Trace:
[  485.978727][T16628]  <TASK>
[  485.978738][T16628]  dump_stack_lvl+0xe8/0x150
[  485.978783][T16628]  should_fail_ex+0x410/0x560
[  485.978818][T16628]  should_failslab+0xa8/0x100
[  485.978866][T16628]  ? copy_pid_ns+0x23c/0x900
[  485.978905][T16628]  kmem_cache_alloc_noprof+0x9c/0x600
[  485.978943][T16628]  ? __pfx_inc_ucount+0x10/0x10
[  485.978970][T16628]  ? copy_pid_ns+0x23c/0x900
[  485.979013][T16628]  copy_pid_ns+0x23c/0x900
[  485.979055][T16628]  ? srso_alias_return_thunk+0x5/0xfbef5
[  485.979092][T16628]  ? __pfx_copy_pid_ns+0x10/0x10
[  485.979125][T16628]  ? rcu_is_watching+0x16/0xb0
[  485.979163][T16628]  ? srso_alias_return_thunk+0x5/0xfbef5
[  485.979197][T16628]  ? __pfx_copy_mnt_ns+0x10/0x10
[  485.979237][T16628]  ? kmem_cache_alloc_noprof+0x31a/0x600
[  485.979283][T16628]  ? srso_alias_return_thunk+0x5/0xfbef5
[  485.979312][T16628]  ? copy_ipcs+0x2ad/0x6c0
[  485.979347][T16628]  ? srso_alias_return_thunk+0x5/0xfbef5
[  485.979377][T16628]  ? copy_utsname+0x184/0x620
[  485.979409][T16628]  create_new_namespaces+0x2ad/0x6b0
[  485.979450][T16628]  ? security_capable+0x7e/0x2c0
[  485.979498][T16628]  unshare_nsproxy_namespaces+0x144/0x190
[  485.979540][T16628]  ksys_unshare+0x532/0x890
[  485.979582][T16628]  ? __pfx_ksys_unshare+0x10/0x10
[  485.979623][T16628]  ? rcu_is_watching+0x16/0xb0
[  485.979673][T16628]  __x64_sys_unshare+0x38/0x50
[  485.979710][T16628]  do_syscall_64+0x166/0x520
[  485.979738][T16628]  ? trace_irq_disable+0x3b/0x140
[  485.979771][T16628]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  485.979804][T16628]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  485.979830][T16628] RIP: 0033:0x7f762079f559
[  485.979853][T16628] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  485.979878][T16628] RSP: 002b:00007f7621712028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  485.979907][T16628] RAX: ffffffffffffffda RBX: 00007f7620a25fa0 RCX: 00007f762079f559
[  485.979927][T16628] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000400
[  485.979944][T16628] RBP: 00007f7620836b20 R08: 0000000000000000 R09: 0000000000000000
[  485.979961][T16628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  485.979977][T16628] R13: 00007f7620a26038 R14: 00007f7620a25fa0 R15: 00007ffc7d7ab298
[  485.980018][T16628]  </TASK>
[  486.066434][ T9255] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  486.530202][ T5746] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  486.680130][ T5746] usb 4-1: Using ep0 maxpacket: 8
[  486.680840][ T5746] usb 4-1: New USB device found, idVendor=0c16, idProduct=0003, bcdDevice= 0.00
[  486.683256][ T5746] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11
[  486.683292][ T5746] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  486.683323][ T5746] usb 4-1: config 0 interface 0 has no altsetting 0
[  486.683360][ T5746] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  486.687995][ T5746] usb 4-1: config 0 descriptor??
[  487.076300][T16656] FAULT_INJECTION: forcing a failure.
[  487.076300][T16656] name failslab, interval 1, probability 0, space 0, times 0
[  487.076339][T16656] CPU: 1 UID: 0 PID: 16656 Comm: syz.8.3664 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  487.076374][T16656] Tainted: [L]=SOFTLOCKUP
[  487.076384][T16656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  487.076399][T16656] Call Trace:
[  487.076408][T16656]  <TASK>
[  487.076418][T16656]  dump_stack_lvl+0xe8/0x150
[  487.076458][T16656]  should_fail_ex+0x410/0x560
[  487.076491][T16656]  should_failslab+0xa8/0x100
[  487.076525][T16656]  __kmalloc_cache_noprof+0x9e/0x600
[  487.076550][T16656]  ? srso_alias_return_thunk+0x5/0xfbef5
[  487.076580][T16656]  ? hugetlbfs_init_fs_context+0x53/0x350
[  487.076608][T16656]  ? hugetlbfs_init_fs_context+0x53/0x350
[  487.076644][T16656]  hugetlbfs_init_fs_context+0x53/0x350
[  487.076677][T16656]  alloc_fs_context+0x99e/0xd00
[  487.076716][T16656]  __se_sys_fsopen+0x118/0x370
[  487.076751][T16656]  do_syscall_64+0x166/0x520
[  487.076776][T16656]  ? trace_irq_disable+0x3b/0x140
[  487.076807][T16656]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  487.076837][T16656]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  487.076861][T16656] RIP: 0033:0x7fa8aa99f559
[  487.076882][T16656] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  487.076902][T16656] RSP: 002b:00007fa8ab7ee028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae
[  487.076927][T16656] RAX: ffffffffffffffda RBX: 00007fa8aac25fa0 RCX: 00007fa8aa99f559
[  487.076944][T16656] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000040
[  487.076959][T16656] RBP: 00007fa8aaa36b20 R08: 0000000000000000 R09: 0000000000000000
[  487.076975][T16656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  487.076990][T16656] R13: 00007fa8aac26038 R14: 00007fa8aac25fa0 R15: 00007ffe83cef3d8
[  487.077033][T16656]  </TASK>
[  487.289115][ T5746] input: HID 0c16:0003 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0C16:0003.0022/input/input39
[  487.339607][T16666] jffs2: notice: (16666) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  487.374928][ T5746] gyration 0003:0C16:0003.0022: input,hiddev0,hidraw0: USB HID v0.03 Device [HID 0c16:0003] on usb-dummy_hcd.3-1/input0
[  487.407589][T16665] loop7: detected capacity change from 0 to 2048
[  487.457143][T16665] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  487.457245][T16665] ext4 filesystem being mounted at /515/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  487.466072][ T5761] usb 4-1: USB disconnect, device number 16
[  487.644053][ T7009] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  487.677163][T16672] fido_id[16672]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  487.754475][T16680] loop9: detected capacity change from 0 to 1024
[  487.757150][T16680] EXT4-fs: Ignoring removed nomblk_io_submit option
[  487.806442][T16680] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  487.806549][T16680] ext4 filesystem being mounted at /354/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  487.895608][T16680] EXT4-fs error (device loop9): ext4_validate_block_bitmap:445: comm syz.9.3674: bg 0: block 112: padding at end of block bitmap is not set
[  487.896494][T16680] EXT4-fs (loop9): Remounting filesystem read-only
[  487.966323][T16687] loop7: detected capacity change from 0 to 256
[  487.971953][ T9862] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  488.044337][ T7009] FAT-fs (loop7): error, corrupted directory (invalid entries)
[  488.044356][ T7009] FAT-fs (loop7): Filesystem has been set read-only
[  488.071393][ T7009] FAT-fs (loop7): error, corrupted directory (invalid entries)
[  488.332044][ T8528] batman_adv: batadv0: Interface deactivated: syz_tun
[  488.389339][ T8528] batman_adv: batadv0: Removing interface: syz_tun
[  488.578862][T16702] overlayfs: statfs failed on './file0'
[  488.796135][  T279] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  488.796176][  T279] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  488.985893][  T279] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  488.985933][  T279] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  489.020221][ T5746] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[  489.113271][  T279] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  489.113313][  T279] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  489.170085][ T5746] usb 1-1: Using ep0 maxpacket: 8
[  489.170808][ T5746] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  489.171843][ T5746] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  489.171914][ T5746] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  489.171938][ T5746] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  489.171965][ T5746] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  489.171991][ T5746] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  489.172103][ T5746] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  489.349512][T16709] loop3: detected capacity change from 0 to 32768
[  489.403492][  T279] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  489.406222][T16709] JBD2: Ignoring recovery information on journal
[  489.411111][  T279] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  489.507140][T16709] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  489.507939][ T5746] usb 1-1: usb_control_msg returned -32
[  489.507983][ T5746] usbtmc 1-1:16.0: can't read capabilities
[  489.692942][   T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  489.709287][   T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  489.718968][   T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  489.738432][   T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  489.752694][   T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  489.899755][T16734] usbtmc 1-1:16.0: stb usb_control_msg returned -32
[  489.909596][ T5746] usb 1-1: USB disconnect, device number 35
[  490.178445][  T279] bridge_slave_1: left allmulticast mode
[  490.178471][  T279] bridge_slave_1: left promiscuous mode
[  490.178655][  T279] bridge0: port 2(bridge_slave_1) entered disabled state
[  490.206930][T10372] ocfs2: Unmounting device (7,3) on (node local)
[  490.225532][  T279] bridge_slave_0: left allmulticast mode
[  490.225563][  T279] bridge_slave_0: left promiscuous mode
[  490.228465][  T279] bridge0: port 1(bridge_slave_0) entered disabled state
[  490.561987][  T279] batman_adv: batadv0: Interface deactivated: ip6gretap1
[  490.693460][  T279] batman_adv: batadv0: Removing interface: ip6gretap1
[  491.017814][  T279] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  491.039109][  T279] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  491.050222][  T279] bond0 (unregistering): Released all slaves
[  491.198859][T16756] pim6reg: entered allmulticast mode
[  491.254357][T16757] team0: entered allmulticast mode
[  491.254381][T16757] team_slave_0: entered allmulticast mode
[  491.254400][T16757] team_slave_1: entered allmulticast mode
[  491.263637][T16760] team0: left allmulticast mode
[  491.263656][T16760] team_slave_0: left allmulticast mode
[  491.263673][T16760] team_slave_1: left allmulticast mode
[  491.263828][T16760] pim6reg: left allmulticast mode
[  491.671988][ T5761] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  491.686345][   T53] Bluetooth: hci2: unexpected event for opcode 0x0c03
[  491.720393][T16784] loop8: detected capacity change from 0 to 512
[  491.721399][T16784] ext4: Unknown parameter 'appraise_type'
[  491.741352][T16784] mtrr: base(0x1a7000) is not aligned on a size(0x0000) boundary
[  491.840219][ T5761] usb 4-1: Using ep0 maxpacket: 16
[  491.840219][   T53] Bluetooth: hci1: command tx timeout
[  491.842947][ T5761] usb 4-1: unable to get BOS descriptor or descriptor too short
[  491.842993][ T5761] usb 4-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32
[  491.843976][ T5761] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  491.843999][ T5761] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  491.846155][ T5761] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  491.846179][ T5761] usb 4-1: Product: syz
[  491.846195][ T5761] usb 4-1: Manufacturer: syz
[  491.846211][ T5761] usb 4-1: SerialNumber: syz
[  491.924321][ T5761] usb 4-1: config 0 descriptor??
[  492.163302][ T5761] usb 4-1: USB disconnect, device number 17
[  492.167181][T16725] rxe_eth0 speed is unknown, defaulting to 1000
[  492.518322][  T279] hsr_slave_0: left promiscuous mode
[  492.533386][  T279] hsr_slave_1: left promiscuous mode
[  492.538227][  T279] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  492.538249][  T279] batman_adv: batadv0: Removing interface: batadv_slave_0
[  492.652699][  T279] veth1_macvtap: left promiscuous mode
[  492.652738][  T279] veth0_macvtap: left promiscuous mode
[  492.652827][  T279] veth1_vlan: left promiscuous mode
[  492.652896][  T279] veth0_vlan: left promiscuous mode
[  493.018476][ T5745] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[  493.172646][ T5745] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40
[  493.173818][ T5745] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64
[  493.173875][ T5745] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32
[  493.173904][ T5745] usb 1-1: config 1 interface 0 has no altsetting 0
[  493.176023][ T5745] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  493.176048][ T5745] usb 1-1: Product: syz
[  493.176064][ T5745] usb 1-1: Manufacturer: syz
[  493.176080][ T5745] usb 1-1: SerialNumber: syz
[  493.185258][T16811] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  493.185393][T16811] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  493.920236][   T53] Bluetooth: hci1: command tx timeout
[  494.238928][ T5745] (unnamed net_device) (uninitialized): Assigned a random MAC address: 4e:2f:80:ed:97:bb
[  495.191985][T16837] loop0: detected capacity change from 0 to 32768
[  495.200405][T16837] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  495.200425][T16837] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  495.255581][T16837] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[  495.258551][ T1233] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  495.258571][ T1233] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  495.435073][ T1233] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 176ms
[  495.435268][ T1233] gfs2: fsid=syz:syz.0: jid=0: Done
[  495.435309][T16837] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  495.817337][T16845] loop8: detected capacity change from 0 to 128
[  495.866532][T16845] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  495.866569][T16845] hpfs: filesystem error: improperly stopped
[  495.866587][T16845] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  495.866605][T16845] hpfs: You really don't want any checks? You are crazy...
[  495.866623][T16845] hpfs: Code page index out of array
[  495.866633][T16845] hpfs: code page support is disabled
[  495.866731][T16845] hpfs: hpfs_map_4sectors(): unaligned read
[  495.866799][T16845] hpfs: hpfs_map_4sectors(): unaligned read
[  495.866811][T16845] hpfs: filesystem error: unable to find root dir
[  496.004946][   T53] Bluetooth: hci1: command tx timeout
[  496.450420][T16857] FAULT_INJECTION: forcing a failure.
[  496.450420][T16857] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  496.450759][T16857] CPU: 0 UID: 0 PID: 16857 Comm: syz.0.3738 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  496.450794][T16857] Tainted: [L]=SOFTLOCKUP
[  496.450803][T16857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  496.450815][T16857] Call Trace:
[  496.450824][T16857]  <TASK>
[  496.450833][T16857]  dump_stack_lvl+0xe8/0x150
[  496.450869][T16857]  should_fail_ex+0x410/0x560
[  496.450898][T16857]  _copy_to_user+0x31/0xb0
[  496.450924][T16857]  semctl_info+0x2fe/0x4e0
[  496.450953][T16857]  ? srso_alias_return_thunk+0x5/0xfbef5
[  496.450981][T16857]  ? __pfx_semctl_info+0x10/0x10
[  496.451026][T16857]  __se_sys_semctl+0x2ce/0x3e0
[  496.451063][T16857]  ? __pfx___se_sys_semctl+0x10/0x10
[  496.451098][T16857]  ? rcu_is_watching+0x16/0xb0
[  496.451128][T16857]  ? srso_alias_return_thunk+0x5/0xfbef5
[  496.451158][T16857]  ? srso_alias_return_thunk+0x5/0xfbef5
[  496.451186][T16857]  do_syscall_64+0x166/0x520
[  496.451208][T16857]  ? trace_irq_disable+0x3b/0x140
[  496.451236][T16857]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  496.451263][T16857]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  496.451284][T16857] RIP: 0033:0x7f762079f559
[  496.451302][T16857] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  496.451318][T16857] RSP: 002b:00007f7621712028 EFLAGS: 00000246 ORIG_RAX: 0000000000000042
[  496.451339][T16857] RAX: ffffffffffffffda RBX: 00007f7620a25fa0 RCX: 00007f762079f559
[  496.451355][T16857] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000000
[  496.451368][T16857] RBP: 00007f7620836b20 R08: 0000000000000000 R09: 0000000000000000
[  496.451380][T16857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  496.451393][T16857] R13: 00007f7620a26038 R14: 00007f7620a25fa0 R15: 00007ffc7d7ab298
[  496.451426][T16857]  </TASK>
[  496.674843][T16860] loop0: detected capacity change from 0 to 64
[  496.692913][ T5284] 8021q: adding VLAN 0 to HW filter on device eth17
[  496.818986][ T5745] rtl8150 1-1:1.0: eth21: rtl8150 is detected
[  496.843569][ T5745] usb 1-1: USB disconnect, device number 36
[  497.154990][T16870] jffs2: notice: (16870) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  497.395640][  T279] IPVS: stop unused estimator thread 0...
[  497.475771][T16879] vcan0: tx address claim with dlc 0
[  497.733549][T16863] loop9: detected capacity change from 0 to 32768
[  497.772985][T16863] XFS (loop9): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  497.846522][T16902] netlink: 'syz.0.3750': attribute type 4 has an invalid length.
[  497.898745][T16863] XFS (loop9): Ending clean mount
[  497.962338][T16863] XFS (loop9): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[  497.962394][T16863] XFS (loop9): Unmount and run xfs_repair
[  497.962409][T16863] XFS (loop9): First 128 bytes of corrupted metadata buffer:
[  497.962428][T16863] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[  497.962446][T16863] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[  497.962464][T16863] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[  497.962482][T16863] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[  497.962499][T16863] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[  497.962517][T16863] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  497.962535][T16863] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  497.962819][T16863] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  497.962840][T16863] XFS (loop9): metadata I/O error in "xfs_btree_read_buf_block+0x2ae/0x4a0" at daddr 0x4 len 4 error 74
[  497.989752][T16863] XFS (loop9): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x47f/0x820 (fs/xfs/xfs_trans_buf.c:280).  Shutting down filesystem.
[  497.989805][T16863] XFS (loop9): Please unmount the filesystem and rectify the problem(s)
[  498.104252][   T53] Bluetooth: hci1: command tx timeout
[  498.112197][T16912] sd 0:0:1:0: [sg0] sg_open: flags=0x28102
[  498.112264][T16912] sd 0:0:1:0: [sg0] sg_add_sfp: sfp=0xffff88803661c000
[  498.112308][T16912] sd 0:0:1:0: [sg0] sg_build_reserve: req_size=32768
[  498.112354][T16912] sd 0:0:1:0: [sg0] sg_build_indirect: buff_size=32768, blk_size=32768
[  498.112435][T16912] sd 0:0:1:0: [sg0] sg_add_sfp: bufflen=32768, k_use_sg=1
[  498.174341][T16912] sd 0:0:1:0: [sg0] sg_ioctl: cmd=0x227b
[  498.175271][T16912] sd 0:0:1:0: [sg0] sg_write: count=120
[  498.175323][T16912] sd 0:0:1:0: [sg0] sg_write:   scsi opcode=0x00, cmd_size=6
[  498.175366][T16912] sd 0:0:1:0: [sg0] sg_common_write:  scsi opcode=0x00, cmd_size=6
[  498.175407][T16912] sd 0:0:1:0: [sg0] sg_start_req: dxfer_len=78
[  498.175478][T16912] sd 0:0:1:0: [sg0] sg_link_reserve: size=78
[  498.175738][    C1] sd 0:0:1:0: [sg0] sg_cmd_done: pack_id=0, res=0x2
[  498.188170][T16912] sd 0:0:1:0: [sg0] sg_read: count=63
[  498.188226][T16912] sd 0:0:1:0: [sg0] sg_finish_rem_req: res_used=1
[  498.188279][T16912] sd 0:0:1:0: [sg0] sg_unlink_reserve: req->k_use_sg=1
[  498.202964][T16910] sd 0:0:1:0: [sg0] sg_release
[  498.203263][ T5761] sd 0:0:1:0: [sg0] sg_remove_scat: k_use_sg=1
[  498.262113][ T9862] XFS (loop9): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  498.483988][T16921] FAULT_INJECTION: forcing a failure.
[  498.483988][T16921] name failslab, interval 1, probability 0, space 0, times 0
[  498.484030][T16921] CPU: 1 UID: 0 PID: 16921 Comm: syz.8.3754 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  498.484065][T16921] Tainted: [L]=SOFTLOCKUP
[  498.484081][T16921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  498.484097][T16921] Call Trace:
[  498.484107][T16921]  <TASK>
[  498.484118][T16921]  dump_stack_lvl+0xe8/0x150
[  498.484163][T16921]  should_fail_ex+0x410/0x560
[  498.484199][T16921]  should_failslab+0xa8/0x100
[  498.484234][T16921]  ? prepare_creds+0x30/0x820
[  498.484266][T16921]  kmem_cache_alloc_noprof+0x9c/0x600
[  498.484306][T16921]  ? srso_alias_return_thunk+0x5/0xfbef5
[  498.484337][T16921]  ? make_kuid+0x1e5/0x670
[  498.484367][T16921]  ? srso_alias_return_thunk+0x5/0xfbef5
[  498.484396][T16921]  ? prepare_creds+0x30/0x820
[  498.484428][T16921]  ? __pfx_make_kuid+0x10/0x10
[  498.484462][T16921]  prepare_creds+0x30/0x820
[  498.484493][T16921]  ? srso_alias_return_thunk+0x5/0xfbef5
[  498.484528][T16921]  __sys_setreuid+0x100/0x960
[  498.484571][T16921]  do_syscall_64+0x166/0x520
[  498.484599][T16921]  ? trace_irq_disable+0x3b/0x140
[  498.484632][T16921]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  498.484666][T16921]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  498.484692][T16921] RIP: 0033:0x7fa8aa99f559
[  498.484715][T16921] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  498.484736][T16921] RSP: 002b:00007fa8ab7ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000071
[  498.484762][T16921] RAX: ffffffffffffffda RBX: 00007fa8aac25fa0 RCX: 00007fa8aa99f559
[  498.484782][T16921] RDX: 0000000000000000 RSI: 000000000000ee01 RDI: 0000000000000000
[  498.484799][T16921] RBP: 00007fa8aaa36b20 R08: 0000000000000000 R09: 0000000000000000
[  498.484816][T16921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  498.484832][T16921] R13: 00007fa8aac26038 R14: 00007fa8aac25fa0 R15: 00007ffe83cef3d8
[  498.484872][T16921]  </TASK>
[  498.536671][T16918] ublk0: read batch cmd buffer failed
[  498.536782][T16918] ublk0: read batch cmd buffer failed
[  498.760741][T16918] ublk0: read batch cmd buffer failed
[  498.760857][T16918] ublk0: read batch cmd buffer failed
[  498.797302][T16725] bridge0: port 1(bridge_slave_0) entered blocking state
[  498.797418][T16725] bridge0: port 1(bridge_slave_0) entered disabled state
[  498.797539][T16725] bridge_slave_0: entered allmulticast mode
[  498.808691][T16725] bridge_slave_0: entered promiscuous mode
[  498.821405][T16725] bridge0: port 2(bridge_slave_1) entered blocking state
[  498.821524][T16725] bridge0: port 2(bridge_slave_1) entered disabled state
[  498.821675][T16725] bridge_slave_1: entered allmulticast mode
[  498.828566][T16725] bridge_slave_1: entered promiscuous mode
[  499.041184][T16725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  499.088386][T16725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  499.273584][T16934] loop0: detected capacity change from 0 to 32768
[  499.291502][T16934] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  499.291522][T16934] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  499.353348][T16934] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[  499.355540][ T5355] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  499.355558][ T5355] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  499.399222][T16725] team0: Port device team_slave_0 added
[  499.418554][T16725] team0: Port device team_slave_1 added
[  499.627956][T16725] batman_adv: batadv0: Adding interface: batadv_slave_0
[  499.627976][T16725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  499.628005][T16725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  499.635058][T16725] batman_adv: batadv0: Adding interface: batadv_slave_1
[  499.635073][T16725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  499.635101][T16725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  499.732436][ T1233] usb 10-1: new high-speed USB device number 27 using dummy_hcd
[  499.835192][ T5355] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 479ms
[  499.835401][ T5355] gfs2: fsid=syz:syz.0: jid=0: Done
[  499.835446][T16934] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  499.888801][ T1233] usb 10-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice= 0.01
[  499.896113][ T1233] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  499.896142][ T1233] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  499.913119][ T1233] usb 10-1: string descriptor 0 read error: -22
[  499.913258][ T1233] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  499.951224][T16725] hsr_slave_0: entered promiscuous mode
[  499.952264][T16725] hsr_slave_1: entered promiscuous mode
[  499.953038][T16725] debugfs: 'hsr0' already exists in 'hsr'
[  499.953060][T16725] Cannot create hsr debugfs directory
[  499.967755][ T1233] etas_es58x 10-1:1.0: Starting (null) (null) (Serial Number (null))
[  499.967919][ T1233] etas_es58x 10-1:1.0: could not retrieve the product info string
[  500.018993][T16948] loop8: detected capacity change from 0 to 32768
[  500.066581][ T5284] 8021q: adding VLAN 0 to HW filter on device eth18
[  500.647362][T16946] etas_es58x 10-1:1.0 can0: es58x_submit_urb: USB send urb failure: -EMSGSIZE
[  500.651787][    C1] etas_es58x 10-1:1.0: es58x_read_bulk_callback: error -ENOENT
[  500.651998][    C1] etas_es58x 10-1:1.0: es58x_read_bulk_callback: error -ENOENT
[  500.652373][    C1] etas_es58x 10-1:1.0: es58x_read_bulk_callback: error -ENOENT
[  500.654249][    C1] etas_es58x 10-1:1.0: es58x_read_bulk_callback: error -ENOENT
[  500.654625][    C1] etas_es58x 10-1:1.0: es58x_read_bulk_callback: error -ENOENT
[  500.654796][T16946] etas_es58x 10-1:1.0 can0: es58x_open: Could not open the network device: -EMSGSIZE
[  500.752121][ T1310] ieee802154 phy0 wpan0: encryption failed: -22
[  500.752184][ T1310] ieee802154 phy1 wpan1: encryption failed: -22
[  500.758506][T16960] loop8: detected capacity change from 0 to 32768
[  500.759617][T16960] xfs: Deprecated parameter 'ikeep'
[  500.759634][T16960] XFS: ikeep mount option is deprecated.
[  500.791676][ T5355] usb 10-1: USB disconnect, device number 27
[  500.825266][T16960] XFS (loop8): DAX unsupported by block device. Turning off DAX.
[  500.854886][T16960] XFS (loop8): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  500.868608][ T5355] etas_es58x 10-1:1.0: Disconnecting (null) (null)
[  500.975043][T16960] XFS (loop8): Ending clean mount
[  500.976737][T16960] XFS (loop8): Quotacheck needed: Please wait.
[  501.042948][  T290] XFS (loop8): Metadata CRC error detected at xfs_agfl_read_verify+0x139/0x200, xfs_agfl block 0x3 
[  501.042998][  T290] XFS (loop8): Unmount and run xfs_repair
[  501.043012][  T290] XFS (loop8): First 128 bytes of corrupted metadata buffer:
[  501.043030][  T290] 00000000: 58 41 46 ff 07 00 00 00 bf dc 47 fc 10 d8 4e ed  XAF.......G...N.
[  501.043054][  T290] 00000010: a5 62 11 a8 31 b3 f7 91 00 00 00 00 00 00 00 00  .b..1...........
[  501.043071][  T290] 00000020: a5 3b c8 8a ff ff ff ff 00 00 00 07 00 00 00 08  .;..............
[  501.043088][  T290] 00000030: 00 00 00 09 00 00 00 0a 00 00 00 0b 00 00 00 0c  ................
[  501.043105][  T290] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  501.043122][  T290] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  501.043139][  T290] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  501.043156][  T290] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  501.043174][  T290] XFS (loop8): metadata I/O error in "xfs_alloc_read_agfl+0x22c/0x440" at daddr 0x3 len 1 error 74
[  501.043340][  T290] loop8: lost filesystem error report for type 5 error -117
[  501.184962][T16960] XFS (loop8): Quotacheck: Unsuccessful (Error -117): Disabling quotas.
[  501.185911][T16960] loop8: lost filesystem error report for type 5 error -117
[  501.454561][ T9255] XFS (loop8): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  501.519495][ T9255] XFS (loop8): Uncorrected metadata errors detected; please run xfs_repair.
[  501.878519][T16985] loop9: detected capacity change from 0 to 1024
[  501.919244][T16985] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  502.199837][ T9862] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  502.650014][   T49] usb 10-1: new high-speed USB device number 28 using dummy_hcd
[  502.656277][T17010] x_tables: ip_tables: TCPMSS target: only valid for protocol 6
[  502.800427][   T49] usb 10-1: Using ep0 maxpacket: 16
[  502.801177][   T49] usb 10-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  502.825369][   T49] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  502.825398][   T49] usb 10-1: Product: syz
[  502.825422][   T49] usb 10-1: Manufacturer: syz
[  502.825440][   T49] usb 10-1: SerialNumber: syz
[  502.858999][   T49] usb 10-1: config 0 descriptor??
[  503.316149][   T49] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  503.329723][ T5284] 8021q: adding VLAN 0 to HW filter on device eth19
[  503.360079][ T4939] Bluetooth: hci1: command 0x0405 tx timeout
[  503.363175][   T49] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  503.365520][   T49] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  503.365578][   T49] usb 10-1: media controller created
[  503.400429][T16725] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  503.425139][   T49] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  503.473213][T16725] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  503.485916][T16725] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  503.514818][T16725] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  503.527166][T16725] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  503.550027][   T49] zl10353_read_register: readreg error (reg=127, ret==0)
[  503.550085][   T49] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  503.550100][   T49] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  503.555082][   T49] usb 10-1: USB disconnect, device number 28
[  503.573765][T16725] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  503.584835][T16725] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  503.622901][T16725] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  503.661772][   T49] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[  504.051865][T16725] 8021q: adding VLAN 0 to HW filter on device bond0
[  504.120855][T16725] 8021q: adding VLAN 0 to HW filter on device team0
[  504.121729][T17039] block nbd0: shutting down sockets
[  504.152989][  T290] bridge0: port 1(bridge_slave_0) entered blocking state
[  504.153093][  T290] bridge0: port 1(bridge_slave_0) entered forwarding state
[  504.188482][  T290] bridge0: port 2(bridge_slave_1) entered blocking state
[  504.188586][  T290] bridge0: port 2(bridge_slave_1) entered forwarding state
[  504.466886][T17048] loop9: detected capacity change from 0 to 1024
[  504.559760][T17048] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  504.991010][T17067] loop8: detected capacity change from 0 to 4096
[  504.992026][T17067] EXT4-fs: Ignoring removed mblk_io_submit option
[  505.019850][T17067] EXT4-fs (loop8): Test dummy encryption mode enabled
[  505.058517][T17067] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  505.154348][T17067] __quota_error: 48 callbacks suppressed
[  505.154372][T17067] Quota error (device loop8): do_check_range: Getting block 4278190084 out of range 1-5
[  505.154449][T17067] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0
[  505.154471][T17067] EXT4-fs error (device loop8): ext4_acquire_dquot:7079: comm syz.8.3794: Failed to acquire dquot type 1
[  505.287155][ T9862] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  505.350227][ T9255] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  505.652517][T17090] Bluetooth: ISO socket layer initialized
[  505.741447][T17058] loop3: detected capacity change from 0 to 40427
[  505.758216][T17058] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  505.758240][T17058] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  505.770236][T17058] F2FS-fs (loop3): invalid crc value
[  505.954766][ T5284] 8021q: adding VLAN 0 to HW filter on device eth20
[  506.217352][T17058] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  506.257340][T17058] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  506.257367][T17058] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  506.305607][T17108] loop9: detected capacity change from 0 to 4096
[  506.319395][T17108] EXT4-fs: Ignoring removed nobh option
[  506.319469][T17108] EXT4-fs: Ignoring removed bh option
[  506.372521][T17108] EXT4-fs (loop9): Test dummy encryption mode enabled
[  506.426594][T17108] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  506.589392][T16725] 8021q: adding VLAN 0 to HW filter on device batadv0
[  506.596765][   T29] audit: type=1804 audit(1792824422.681:336): pid=17058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.3791" name="/newroot/354/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop3" ino=10 res=1 errno=0
[  506.707763][ T9862] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  506.853239][T16725] veth0_vlan: entered promiscuous mode
[  506.887701][T16725] veth1_vlan: entered promiscuous mode
[  507.030682][T16725] veth0_macvtap: entered promiscuous mode
[  507.056502][T16725] veth1_macvtap: entered promiscuous mode
[  507.158268][T16725] batman_adv: batadv0: Interface activated: batadv_slave_0
[  507.189610][T16725] batman_adv: batadv0: Interface activated: batadv_slave_1
[  507.290425][   T50] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  507.290841][   T50] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  507.290884][   T50] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  507.290925][   T50] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  507.363985][T17141] loop8: detected capacity change from 0 to 512
[  507.386480][T17141] EXT4-fs (loop8): Test dummy encryption mode enabled
[  507.407679][T17141] EXT4-fs error (device loop8): ext4_iget_extra_inode:5210: inode #15: comm syz.8.3813: corrupted in-inode xattr: invalid ea_ino
[  507.407714][T17141] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  507.408336][T17141] EXT4-fs error (device loop8): ext4_orphan_get:1408: comm syz.8.3813: couldn't read orphan inode 15 (err -117)
[  507.408366][T17141] loop8: lost filesystem error report for type 5 error -117
[  507.409914][    C1] EXT4-fs (loop8): error count since last fsck: 2
[  507.409935][    C1] EXT4-fs (loop8): initial error at time 1792824423: ext4_iget_extra_inode:5210: inode 15
[  507.409971][    C1] EXT4-fs (loop8): last error at time 1792824423: ext4_orphan_get:1408
[  507.423945][T17141] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  507.497571][T17141] jffs2: notice: (17141) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  507.784051][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  507.784083][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  507.816643][ T9255] EXT4-fs error (device loop8): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0
[  507.848916][ T9255] EXT4-fs error (device loop8): ext4_lookup:1787: inode #11: comm syz-executor: iget: bad extended attribute block 393216
[  507.860250][ T9255] EXT4-fs error (device loop8): ext4_lookup:1787: inode #11: comm syz-executor: iget: bad extended attribute block 393216
[  508.034845][  T290] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  508.034868][  T290] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  508.051702][T17158] CIFS: Attempting to mount //127.0.0.1/share
[  508.420560][T17160] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[  508.507072][ T9255] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  508.575168][T17160] usb 1-1: Using ep0 maxpacket: 16
[  508.576546][T17160] usb 1-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00
[  508.577607][T17160] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  508.577668][T17160] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  508.577695][T17160] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  508.577719][T17160] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  508.577747][T17160] usb 1-1: config 0 interface 0 has no altsetting 0
[  508.577781][T17160] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  508.581042][T17160] usb 1-1: config 0 descriptor??
[  508.604453][T17177] input: syz1 as /devices/virtual/input/input40
[  508.674074][  T987] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  508.682894][T17150] ==================================================================
[  508.682912][T17150] BUG: KASAN: slab-use-after-free in __mutex_lock+0x14e/0x15a0
[  508.682942][T17150] Read of size 8 at addr ffff888081572128 by task jffs2_gcd_mtd0/17150
[  508.682962][T17150] 
[  508.682977][T17150] CPU: 0 UID: 0 PID: 17150 Comm: jffs2_gcd_mtd0 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  508.683009][T17150] Tainted: [L]=SOFTLOCKUP
[  508.683018][T17150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  508.683031][T17150] Call Trace:
[  508.683039][T17150]  <TASK>
[  508.683048][T17150]  dump_stack_lvl+0xe8/0x150
[  508.683091][T17150]  print_address_description+0x55/0x1e0
[  508.683125][T17150]  ? __mutex_lock+0x14e/0x15a0
[  508.683150][T17150]  print_report+0x58/0x70
[  508.683180][T17150]  kasan_report+0x117/0x150
[  508.683212][T17150]  ? __mutex_lock+0x14e/0x15a0
[  508.683241][T17150]  __mutex_lock+0x14e/0x15a0
[  508.683272][T17150]  ? lock_acquire+0x115/0x350
[  508.683299][T17150]  ? jffs2_garbage_collect_pass+0xb0/0x2170
[  508.683334][T17150]  ? cgroup1_freezing+0x20/0x350
[  508.683358][T17150]  ? __pfx___mutex_lock+0x10/0x10
[  508.683386][T17150]  ? cgroup1_freezing+0x20/0x350
[  508.683408][T17150]  ? cgroup1_freezing+0x20/0x350
[  508.683433][T17150]  ? srso_alias_return_thunk+0x5/0xfbef5
[  508.683460][T17150]  ? cgroup1_freezing+0x29a/0x350
[  508.683485][T17150]  ? srso_alias_return_thunk+0x5/0xfbef5
[  508.683514][T17150]  jffs2_garbage_collect_pass+0xb0/0x2170
[  508.683547][T17150]  ? recalc_sigpending+0x1a1/0x220
[  508.683585][T17150]  ? srso_alias_return_thunk+0x5/0xfbef5
[  508.683612][T17150]  ? __set_task_blocked+0x233/0x320
[  508.683643][T17150]  ? srso_alias_return_thunk+0x5/0xfbef5
[  508.683671][T17150]  ? srso_alias_return_thunk+0x5/0xfbef5
[  508.683701][T17150]  ? srso_alias_return_thunk+0x5/0xfbef5
[  508.683729][T17150]  ? __pfx_jffs2_garbage_collect_pass+0x10/0x10
[  508.683762][T17150]  ? _raw_spin_unlock_irq+0x23/0x50
[  508.683796][T17150]  ? srso_alias_return_thunk+0x5/0xfbef5
[  508.683823][T17150]  ? srso_alias_return_thunk+0x5/0xfbef5
[  508.683850][T17150]  ? _raw_spin_unlock_irq+0x2e/0x50
[  508.683883][T17150]  ? srso_alias_return_thunk+0x5/0xfbef5
[  508.683910][T17150]  ? sigprocmask+0x24c/0x2a0
[  508.683939][T17150]  ? cgroup1_freezing+0x20/0x350
[  508.683963][T17150]  ? __pfx_sigprocmask+0x10/0x10
[  508.683993][T17150]  ? srso_alias_return_thunk+0x5/0xfbef5
[  508.684020][T17150]  ? cgroup1_freezing+0x29a/0x350
[  508.684044][T17150]  ? srso_alias_return_thunk+0x5/0xfbef5
[  508.684071][T17150]  ? freezing_slow_path+0x115/0x160
[  508.684103][T17150]  jffs2_garbage_collect_thread+0x693/0x720
[  508.684149][T17150]  ? __pfx_jffs2_garbage_collect_thread+0x10/0x10
[  508.684186][T17150]  ? srso_alias_return_thunk+0x5/0xfbef5
[  508.684214][T17150]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  508.684249][T17150]  ? srso_alias_return_thunk+0x5/0xfbef5
[  508.684276][T17150]  ? __kthread_parkme+0x71/0x1f0
[  508.684312][T17150]  ? srso_alias_return_thunk+0x5/0xfbef5
[  508.684339][T17150]  ? __kthread_parkme+0x199/0x1f0
[  508.684378][T17150]  kthread+0x38b/0x480
[  508.684399][T17150]  ? __pfx_jffs2_garbage_collect_thread+0x10/0x10
[  508.684433][T17150]  ? __pfx_kthread+0x10/0x10
[  508.684455][T17150]  ret_from_fork+0x514/0xb70
[  508.684478][T17150]  ? __pfx_ret_from_fork+0x10/0x10
[  508.684499][T17150]  ? srso_alias_return_thunk+0x5/0xfbef5
[  508.684522][T17150]  ? __switch_to+0xc78/0x1410
[  508.684554][T17150]  ? __pfx_kthread+0x10/0x10
[  508.684578][T17150]  ret_from_fork_asm+0x1a/0x30
[  508.684609][T17150]  </TASK>
[  508.684618][T17150] 
[  508.684625][T17150] Allocated by task 17141:
[  508.684636][T17150]  kasan_save_track+0x3e/0x80
[  508.684659][T17150]  __kasan_kmalloc+0x93/0xb0
[  508.684683][T17150]  __kmalloc_cache_noprof+0x31c/0x600
[  508.684705][T17150]  jffs2_init_fs_context+0x4f/0xc0
[  508.684738][T17150]  alloc_fs_context+0x99e/0xd00
[  508.684762][T17150]  do_new_mount+0x177/0xb00
[  508.684794][T17150]  __se_sys_mount+0x31d/0x420
[  508.684826][T17150]  do_syscall_64+0x166/0x520
[  508.684848][T17150]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  508.684869][T17150] 
[  508.684876][T17150] Freed by task 9255:
[  508.684887][T17150]  kasan_save_track+0x3e/0x80
[  508.684909][T17150]  kasan_save_free_info+0x40/0x50
[  508.684941][T17150]  __kasan_slab_free+0x5c/0x80
[  508.684965][T17150]  kfree+0x1c5/0x650
[  508.684996][T17150]  deactivate_locked_super+0xbe/0x110
[  508.685029][T17150]  cleanup_mnt+0x204/0x2a0
[  508.685051][T17150]  task_work_run+0x1d9/0x260
[  508.685075][T17150]  do_exit+0x705/0x2360
[  508.685098][T17150]  do_group_exit+0x22d/0x2f0
[  508.685119][T17150]  __x64_sys_exit_group+0x3f/0x40
[  508.685140][T17150]  x64_sys_call+0x18c6/0x18d0
[  508.685161][T17150]  do_syscall_64+0x166/0x520
[  508.685182][T17150]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  508.685203][T17150] 
[  508.685210][T17150] The buggy address belongs to the object at ffff888081572000
[  508.685210][T17150]  which belongs to the cache kmalloc-4k of size 4096
[  508.685229][T17150] The buggy address is located 296 bytes inside of
[  508.685229][T17150]  freed 4096-byte region [ffff888081572000, ffff888081573000)
[  508.685252][T17150] 
[  508.685259][T17150] The buggy address belongs to the physical page:
[  508.685270][T17150] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x81570
[  508.685290][T17150] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  508.685309][T17150] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  508.685329][T17150] page_type: f5(slab)
[  508.685349][T17150] raw: 00fff00000000040 ffff88813ff25140 dead000000000122 0000000000000000
[  508.685370][T17150] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[  508.685392][T17150] head: 00fff00000000040 ffff88813ff25140 dead000000000122 0000000000000000
[  508.685413][T17150] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[  508.685434][T17150] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
[  508.685454][T17150] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  508.685467][T17150] page dumped because: kasan: bad access detected
[  508.685478][T17150] page_owner tracks the page as allocated
[  508.685487][T17150] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 170, tgid 170 (kworker/u8:6), ts 507483770474
[  508.685523][T17150]  post_alloc_hook+0x1f9/0x250
[  508.685556][T17150]  get_page_from_freelist+0x220f/0x2280
[  508.685581][T17150]  __alloc_frozen_pages_noprof+0x1fc/0x400
[  508.685605][T17150]  allocate_slab+0x7d/0x5e0
[  508.685633][T17150]  refill_objects+0x2d5/0x350
[  508.685662][T17150]  __pcs_replace_empty_main+0x2c8/0x6c0
[  508.685689][T17150]  __kmalloc_node_track_caller_noprof+0x543/0x720
[  508.685713][T17150]  __alloc_skb+0x2c1/0x7a0
[  508.685745][T17150]  nsim_dev_trap_report_work+0x25f/0xb30
[  508.685780][T17150]  process_scheduled_works+0xc3d/0x1630
[  508.685810][T17150]  worker_thread+0xa47/0xfb0
[  508.685841][T17150]  kthread+0x38b/0x480
[  508.685862][T17150]  ret_from_fork+0x514/0xb70
[  508.685883][T17150]  ret_from_fork_asm+0x1a/0x30
[  508.685903][T17150] page last free pid 5635 tgid 5635 ts 507477340634 stack trace:
[  508.685918][T17150]  __free_frozen_pages+0xc97/0xd90
[  508.685938][T17150]  __slab_free+0x269/0x2c0
[  508.685959][T17150]  qlist_free_all+0x99/0x100
[  508.685979][T17150]  kasan_quarantine_reduce+0x148/0x160
[  508.686002][T17150]  __kasan_slab_alloc+0x22/0x80
[  508.686027][T17150]  kmem_cache_alloc_noprof+0x2b4/0x600
[  508.686059][T17150]  anon_vma_fork+0x88/0x540
[  508.686094][T17150]  dup_mmap+0x954/0x1dc0
[  508.686126][T17150]  copy_mm+0x115/0x470
[  508.686153][T17150]  copy_process+0x1ecc/0x44b0
[  508.686180][T17150]  kernel_clone+0x2d7/0x940
[  508.686208][T17150]  __x64_sys_clone+0x1b6/0x230
[  508.686237][T17150]  do_syscall_64+0x166/0x520
[  508.686258][T17150]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  508.686280][T17150] 
[  508.686287][T17150] Memory state around the buggy address:
[  508.686298][T17150]  ffff888081572000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  508.686314][T17150]  ffff888081572080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  508.686330][T17150] >ffff888081572100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  508.686342][T17150]                                   ^
[  508.686354][T17150]  ffff888081572180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  508.686370][T17150]  ffff888081572200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  508.686383][T17150] ==================================================================
[  508.686527][T17150] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  509.505351][T17150] CPU: 0 UID: 0 PID: 17150 Comm: jffs2_gcd_mtd0 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  509.516713][T17150] Tainted: [L]=SOFTLOCKUP
[  509.521016][T17150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  509.531053][T17150] Call Trace:
[  509.534315][T17150]  <TASK>
[  509.537231][T17150]  vpanic+0x56d/0xa60
[  509.541215][T17150]  ? __pfx_vpanic+0x10/0x10
[  509.545714][T17150]  ? srso_alias_return_thunk+0x5/0xfbef5
[  509.551342][T17150]  panic+0xc5/0xd0
[  509.555061][T17150]  ? __pfx_panic+0x10/0x10
[  509.559477][T17150]  ? preempt_schedule_thunk+0x16/0x40
[  509.564842][T17150]  ? srso_alias_return_thunk+0x5/0xfbef5
[  509.570463][T17150]  ? preempt_schedule_thunk+0x16/0x40
[  509.575829][T17150]  ? __mutex_lock+0x14e/0x15a0
[  509.580582][T17150]  check_panic_on_warn+0x89/0xb0
[  509.585508][T17150]  ? __mutex_lock+0x14e/0x15a0
[  509.590261][T17150]  end_report+0x73/0x170
[  509.594497][T17150]  ? __mutex_lock+0x14e/0x15a0
[  509.599250][T17150]  kasan_report+0x128/0x150
[  509.603747][T17150]  ? __mutex_lock+0x14e/0x15a0
[  509.608503][T17150]  __mutex_lock+0x14e/0x15a0
[  509.613083][T17150]  ? lock_acquire+0x115/0x350
[  509.617747][T17150]  ? jffs2_garbage_collect_pass+0xb0/0x2170
[  509.623637][T17150]  ? cgroup1_freezing+0x20/0x350
[  509.628571][T17150]  ? __pfx___mutex_lock+0x10/0x10
[  509.633590][T17150]  ? cgroup1_freezing+0x20/0x350
[  509.638512][T17150]  ? cgroup1_freezing+0x20/0x350
[  509.643433][T17150]  ? srso_alias_return_thunk+0x5/0xfbef5
[  509.649057][T17150]  ? cgroup1_freezing+0x29a/0x350
[  509.654093][T17150]  ? srso_alias_return_thunk+0x5/0xfbef5
[  509.659726][T17150]  jffs2_garbage_collect_pass+0xb0/0x2170
[  509.665447][T17150]  ? recalc_sigpending+0x1a1/0x220
[  509.670559][T17150]  ? srso_alias_return_thunk+0x5/0xfbef5
[  509.676187][T17150]  ? __set_task_blocked+0x233/0x320
[  509.681382][T17150]  ? srso_alias_return_thunk+0x5/0xfbef5
[  509.687005][T17150]  ? srso_alias_return_thunk+0x5/0xfbef5
[  509.692627][T17150]  ? srso_alias_return_thunk+0x5/0xfbef5
[  509.698256][T17150]  ? __pfx_jffs2_garbage_collect_pass+0x10/0x10
[  509.704490][T17150]  ? _raw_spin_unlock_irq+0x23/0x50
[  509.709685][T17150]  ? srso_alias_return_thunk+0x5/0xfbef5
[  509.715305][T17150]  ? srso_alias_return_thunk+0x5/0xfbef5
[  509.720931][T17150]  ? _raw_spin_unlock_irq+0x2e/0x50
[  509.726129][T17150]  ? srso_alias_return_thunk+0x5/0xfbef5
[  509.731752][T17150]  ? sigprocmask+0x24c/0x2a0
[  509.736337][T17150]  ? cgroup1_freezing+0x20/0x350
[  509.741261][T17150]  ? __pfx_sigprocmask+0x10/0x10
[  509.746190][T17150]  ? srso_alias_return_thunk+0x5/0xfbef5
[  509.751809][T17150]  ? cgroup1_freezing+0x29a/0x350
[  509.756822][T17150]  ? srso_alias_return_thunk+0x5/0xfbef5
[  509.762449][T17150]  ? freezing_slow_path+0x115/0x160
[  509.767644][T17150]  jffs2_garbage_collect_thread+0x693/0x720
[  509.773552][T17150]  ? __pfx_jffs2_garbage_collect_thread+0x10/0x10
[  509.779979][T17150]  ? srso_alias_return_thunk+0x5/0xfbef5
[  509.785607][T17150]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  509.791411][T17150]  ? srso_alias_return_thunk+0x5/0xfbef5
[  509.797030][T17150]  ? __kthread_parkme+0x71/0x1f0
[  509.801964][T17150]  ? srso_alias_return_thunk+0x5/0xfbef5
[  509.807585][T17150]  ? __kthread_parkme+0x199/0x1f0
[  509.812610][T17150]  kthread+0x38b/0x480
[  509.816668][T17150]  ? __pfx_jffs2_garbage_collect_thread+0x10/0x10
[  509.823080][T17150]  ? __pfx_kthread+0x10/0x10
[  509.827666][T17150]  ret_from_fork+0x514/0xb70
[  509.832245][T17150]  ? __pfx_ret_from_fork+0x10/0x10
[  509.837342][T17150]  ? srso_alias_return_thunk+0x5/0xfbef5
[  509.842970][T17150]  ? __switch_to+0xc78/0x1410
[  509.847651][T17150]  ? __pfx_kthread+0x10/0x10
[  509.852230][T17150]  ret_from_fork_asm+0x1a/0x30
[  509.856989][T17150]  </TASK>
[  509.860231][T17150] Kernel Offset: disabled
[  509.864538][T17150] Rebooting in 86400 seconds..