last executing test programs:

4m22.82336678s ago: executing program 4 (id=356):
r0 = socket(0xa, 0x1, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000000)='9', 0x1)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd700000000000010000001c0007800c00018008000100", @ANYRES32=r0, @ANYBLOB="0c00018808000100", @ANYRES32=r0, @ANYBLOB="0c0002"], 0x3c}, 0x1, 0x0, 0x0, 0x55ebfcb85e78e904}, 0xc844)

4m22.412379756s ago: executing program 4 (id=359):
socket$packet(0x11, 0x3, 0x300)
r0 = socket$igmp6(0xa, 0x3, 0x2)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590)
syz_emit_ethernet(0x5a, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "081200", 0x24, 0x2b, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @local, {[@srh={0x3a, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, [@empty]}], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x100, @void}}}}}}}}, 0x0)

4m21.71461346s ago: executing program 4 (id=365):
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x1000410, &(0x7f00000002c0)={[{@grpid}, {@jqfmt_vfsv0}]}, 0x4, 0x4eb, &(0x7f0000000b40)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000a80)='./file7\x00', 0x16c)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x410c01, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000180)={@id={0x2, 0x0, @c}})
renameat2(0xffffffffffffff9c, &(0x7f0000000ac0)='./file7\x00', 0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x4)

4m21.448973842s ago: executing program 4 (id=366):
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000300)='.\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bpf(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0x84000, 0x0)

4m21.314468075s ago: executing program 4 (id=367):
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x1)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1})
ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa08, &(0x7f00000000c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000})

4m20.988120727s ago: executing program 4 (id=369):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee9, 0x8031, 0xffffffffffffffff, 0x954f8000)
madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66)
openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2)
syz_clone3(&(0x7f0000000240)={0x2000000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58)

4m20.354843404s ago: executing program 32 (id=369):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee9, 0x8031, 0xffffffffffffffff, 0x954f8000)
madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66)
openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2)
syz_clone3(&(0x7f0000000240)={0x2000000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58)

7.149437977s ago: executing program 6 (id=2397):
r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000100)={0x1f, 0x0, @any, 0x40}, 0xe)
connect$bt_l2cap(r1, &(0x7f0000000200)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40}, 0xe)
ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000300)={r1})

6.78342432s ago: executing program 6 (id=2403):
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xffffffffffffffec, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000000d06010200000000000000000500000211000300686173683a69702c706f727400000000050001"], 0x38}, 0x1, 0x0, 0x0, 0x20008040}, 0x40048100)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x60042, 0x0)
syz_usb_connect$hid(0x6, 0x0, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f00000000000002000300fffeffffdf020000000000004000000000000000030300ef0000000000000000080038000100040004000d000300000000800000000000000000000007000000000000000800000000004000050000000000000002"], 0x78)
ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101)

5.011197849s ago: executing program 1 (id=2411):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x2000c015}, 0x2404c8c0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r0], 0x4c}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)

4.436637323s ago: executing program 1 (id=2414):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x398, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x1, 0xa, 0x10, 0x10, 0x10, 0x2710, 0xea60}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @empty, 0x7fffffd}, 0x1c)
sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0)

4.423778959s ago: executing program 2 (id=2415):
syz_read_part_table(0x5e4, &(0x7f0000000000)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/mapper/control\x00', 0x2, 0x0)
ioctl(r0, 0xc138fd01, &(0x7f0000000000)="04000000")

4.369422391s ago: executing program 0 (id=2416):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x80)
mount(0x0, &(0x7f0000000380)='./proc\x00', &(0x7f00000003c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b)
write(r0, &(0x7f00000008c0)='9', 0x1)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0)

3.689258638s ago: executing program 2 (id=2418):
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r0, &(0x7f0000000300)='p:$est/_vent1 ./file0:0', 0x17)

3.657421817s ago: executing program 0 (id=2419):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000)
sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x30004001)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c40)={0x14, 0x24, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x10)

3.471628568s ago: executing program 6 (id=2420):
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./dev\x00', &(0x7f0000000450)='devtmpfs\x00', 0x0, 0x0)
syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000401e09030001000102000109022700010100c0320904000003ffffff00070581034000010705020240"], 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/ttyUSB0\x00', 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0xfffffffd, 0xf, 0xf, 0x8, 0x80, 0x10004, 0x3, 0x8, 0x20000006, 0x1, 0x5, 0x0, 0xa, 0x5, 0xffff2d38, 0xffffff03, 0x6, 0x3, 0x0, 0xe, 0x107, 0x0, 0x7, 0x23c5b, 0x1, 0xf, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x7, 0x28, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x1000, 0x17, 0x1, 0x7, 0x6, 0xdb63, 0x4000008c, 0x2000000, 0x5, 0x0, 0x4, 0x0, 0x1008008, 0x400, 0x80, 0x0, 0x7, 0x6, 0x6, 0x80000000, 0x1, 0xf], [0x10000007, 0x3, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2c0, 0x2, 0x9, 0xfffffffe, 0x3, 0xffffffff, 0x0, 0x5, 0x2f, 0x0, 0x312, 0x0, 0xe, 0xfffffffe, 0x4, 0x7, 0x7fff, 0x8, 0x400, 0x401, 0x7, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0x1, 0x4e2, 0xc, 0x4, 0xb, 0x10000, 0x9, 0x7, 0x1009, 0x6, 0x47, 0x8000, 0xc25, 0xfe000000, 0xffff, 0x9, 0x4, 0x9, 0x7, 0x3, 0x9, 0x1, 0x3, 0x3, 0x94f, 0x48c93690, 0x42, 0x3], [0x82, 0x408, 0x7, 0x5, 0xfffffffe, 0x6, 0x2, 0x9, 0x5, 0x8002, 0x4, 0x5, 0xb, 0x2, 0x5, 0x7, 0x3, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x20061c, 0x2, 0x3, 0x2, 0x4, 0x6d01, 0x3, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x9, 0x2950bfaf, 0xc8, 0xa2, 0x7, 0xa9, 0x5, 0x8, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x1, 0x100, 0x7, 0xa, 0x3, 0x5, 0x4, 0x3c484551], [0x6, 0xbb33, 0x7, 0x0, 0x5, 0x93a, 0x2, 0x2, 0xfefffffc, 0xb9, 0xce7, 0x203, 0x2, 0x57, 0x2, 0x3, 0x0, 0x10000, 0xb8, 0x3, 0x28, 0xa620, 0x2, 0x5, 0x1, 0x7ff, 0x14c, 0x20a7, 0x6, 0x16, 0xffffffff, 0x0, 0x5, 0x8, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x10001, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0xfffffff9, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xb1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x6, 0x200, 0xffff3441, 0xfff]}, 0x45c)

3.334698195s ago: executing program 0 (id=2422):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="40000f000000012721dcfe14c639a500ba17162716"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000280)={0x20, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r1, 0x5b15, 0x0)

3.214647815s ago: executing program 5 (id=2423):
openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=<r0=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_setup(0x482, &(0x7f0000000600)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r0, 0x0}])

3.207785102s ago: executing program 2 (id=2424):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000600)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000640)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000680)={0x48, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000bc0)={0x48, 0x8, r2, 0x0, 0x4, 0x1, &(0x7f00000003c0)="06", 0x4})

2.976724568s ago: executing program 2 (id=2426):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000005680)={'vcan0\x00', <r1=>0x0})
connect$can_bcm(r0, &(0x7f00000056c0)={0x1d, r1}, 0x10)
sendmsg$can_bcm(r0, &(0x7f0000005700)={0x0, 0x0, &(0x7f0000005740)={&(0x7f0000005780)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}, 0x1, 0x0, 0x0, 0xc000}, 0x410)
sendmsg$can_bcm(r0, &(0x7f00000057c0)={0x0, 0x0, &(0x7f0000005800)={&(0x7f0000000000)=ANY=[@ANYBLOB="01000000d90400000400000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB="000000000100000000e9d2d874"], 0x48}, 0x1, 0x0, 0x0, 0x40044}, 0x0)

2.9511816s ago: executing program 1 (id=2427):
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="d800000000000000f9ffffffffffffff00000000000000000200000000000000020000000000000000010000000000000200000008000000060000000000000009000000000000000000000000000000ff0000000000008003000000000000000000000000000000ffffff7f580000000300000000800000"], 0x0, 0x0, 0x0})
sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)=ANY=[@ANYBLOB="780023e3070a0102000000000000e96db119af190d91d83cf022d771468600000a0000060900020073797a30000000005800048054000180090001006d657461000000004400028008000140000056d60800f80d0000000008000140000000010800014000000009080001400000000b080002"], 0x78}, 0x1, 0x0, 0x0, 0x48055}, 0x1000c080)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r0)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0)

2.869919487s ago: executing program 2 (id=2429):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000580)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r1)
close_range(r0, 0xffffffffffffffff, 0x0)

2.586803686s ago: executing program 5 (id=2430):
r0 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x1, 0x0, 0xd, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x10}, 0x700, 0x0, 0xfffffffc}})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000080)={&(0x7f00007ee000/0x2000)=nil, 0x2000})

2.477452855s ago: executing program 1 (id=2431):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c)
sendto$inet6(r0, &(0x7f0000000180)="b8", 0x1, 0x2404c8d5, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000002c0), &(0x7f0000000040)=0x8)

2.424681679s ago: executing program 3 (id=2432):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000f9000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

2.251323057s ago: executing program 5 (id=2433):
ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0x400c5f7, @name="ac2ad54970138065d4b1a10a14b7845642722c3da99ba40f000026e78ffc1e05"})
r0 = add_key$user(&(0x7f00000001c0), &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000480)="fe", 0x1, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
add_key$user(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r1, r0}, &(0x7f0000000000)=""/99, 0x63, 0x0)

2.202029386s ago: executing program 3 (id=2434):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r1, <r2=>0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000640)=r0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2, <r3=>0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000300)}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000280), &(0x7f0000000040), 0x1000000}, 0x20)

2.198840101s ago: executing program 1 (id=2435):
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8)
syz_mount_image$f2fs(&(0x7f00000002c0), &(0x7f0000000b00)='./file0\x00', 0x82, &(0x7f0000000bc0)=ANY=[@ANYBLOB='test_dummy_encryption=v1,checkpoint=disable,noacl,fsync_mode=strict,jqfmt=vfsold,noquota,fsync_mode=posix,usrjquota=ext4\x00,resuid=', @ANYRES64, @ANYRES16], 0x1, 0x105b3, &(0x7f0000001d40)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000012300)='memory.swap.current\x00', 0x275a, 0x0)
ioctl(r0, 0x1, &(0x7f0000012380))

1.746473713s ago: executing program 5 (id=2436):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201})
r1 = epoll_create(0xe14)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240)={0x80000011})
write$tun(r0, &(0x7f00000003c0)=ANY=[], 0x3e)

1.526469717s ago: executing program 6 (id=2437):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000200)={'comedi_parport\x00', [0x78, 0x7, 0x0, 0xc, 0x8, 0x7, 0x100002, 0x7, 0x4005, 0x100, 0x4, 0x1, 0x1, 0x20003, 0xffffffff, 0x103, 0x83, 0x80000000, 0x3, 0x1b18, 0x16, 0x4, 0xff, 0xffffffff, 0x4, 0x4, 0x3b, 0xc, 0x10000006, 0x664, 0xfffffff8]})
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$COMEDI_SETWSUBD(r0, 0x6411)

1.523501275s ago: executing program 3 (id=2449):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in=@loopback, @in=@rand_addr=0x64010100, 0x1, 0x7fff, 0x4a23, 0x25, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@mcast1, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff9}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xe73c}, 0x70bd2a, 0x40003504, 0x2, 0x1, 0xa, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x20048041}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket$key(0xf, 0x3, 0x2)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@mcast1, {0x0, 0x1000000000000192, 0x1000000000000192, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x9}, 0x8070bd2d, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x81}, 0x0)

1.227414097s ago: executing program 5 (id=2438):
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000140), 0x482, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x21c004, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

1.226363944s ago: executing program 3 (id=2439):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./sys/class/fcloop/ctl/del_remote_port\x00', 0x1, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
write(r0, &(0x7f0000000980)='w', 0x1)

1.02128751s ago: executing program 6 (id=2440):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x398, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x1, 0xa, 0x10, 0x10, 0x10, 0x2710, 0xea60}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @empty, 0x7fffffd}, 0x1c)
sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0)

855.498953ms ago: executing program 0 (id=2441):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x24, r2, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000881}, 0x0)

850.224259ms ago: executing program 2 (id=2442):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101f2c59620d016b8108ede0102030109022400010000100009040002020083ec0009050602000202000a09058202"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000cc0)=ANY=[@ANYBLOB="200a83"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000300)={0x40, 0x8, 0x28, "44214c09dc764a24aabc1c5ceafb692203bff1895a8f63beb61e37008b2f37082503d03c21a64032"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000880)={0x18, &(0x7f0000000500)=ANY=[@ANYBLOB="00152a0000004a"], 0x0, 0x0, 0x0, 0x0})

729.916822ms ago: executing program 3 (id=2443):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
getsockname(r0, 0x0, &(0x7f0000000340))
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000280), 0x106, 0x3}}, 0x20)
writev(r1, &(0x7f0000000300)=[{&(0x7f0000000340), 0x86}], 0x2)

697.860626ms ago: executing program 1 (id=2444):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x1c, 0x68, 0x1, 0xfcfd, 0x25dfdbfb, {0x2}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0)
getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000006a0005062cbd7000fcdbdf25020000000000000008000500", @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x880)

411.860327ms ago: executing program 0 (id=2445):
setns(0xc9, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x38, r1, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x700, {0x5, 0x3, 0x2, 0x8001}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200048d0}, 0x40000)

407.445253ms ago: executing program 3 (id=2446):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x3, 0x634, &(0x7f00000002c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000022a00)='./file1\x00', 0x46042, 0x179)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000022a40), 0x240, 0x0)
sendfile(r0, r1, 0x0, 0x20fffe82)
creat(&(0x7f0000022b80)='./file1\x00', 0x1)

328.977723ms ago: executing program 6 (id=2447):
syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x1210881, &(0x7f0000000380)=ANY=[@ANYBLOB="756d61736b3d30303030303030303030303030303030303030373335372c71756965742c71756965742c63726561746f723d0de07c342c636f6465706167653d63703836332c71756965742c6469725f756d61736b3d3030303030303030303030303030303530303030303130302c71756965742c71756965742c696f636861727365743d6d6163677265656b2c00"], 0x4, 0x339, &(0x7f0000000940)="$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")
mount(0x0, &(0x7f0000000880)='.\x00', 0x0, 0x25c40b4, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./dev\x00', 0x1ff)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$msdos(&(0x7f00000008c0), &(0x7f0000000900)='.\x00', 0x20, &(0x7f0000000940)=ANY=[], 0x0, 0x0, &(0x7f0000000980))

96.649742ms ago: executing program 0 (id=2448):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f000000b2c0)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f000000b300)={0xa, 0x0, 0x1, @loopback, 0x3}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f000000b340), 0x3c)
setsockopt$inet6_tcp_int(r0, 0x11a, 0x5, &(0x7f000000b380)=0x3f9, 0x2)

0s ago: executing program 5 (id=2450):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000140)=0x8, 0x65)
bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x97f, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x23e, @empty}, 0x1c)
getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000080))

kernel console output (not intermixed with test programs):

 RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffadf2c590
[  357.460938][ T5641] RBP: 00007fffadf2c590 R08: 00007fffadf2d590 R09: 00000000ffffffff
[  357.460964][ T5641] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffadf2d620
[  357.460990][ T5641] R13: 00007f0276236fb3 R14: 00000000000573ce R15: 00007fffadf2d660
[  357.461042][ T5641]  </TASK>
[  357.470162][ T5641] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  357.470270][ T5641] CPU: 1 UID: 0 PID: 5641 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  357.470324][ T5641] Tainted: [L]=SOFTLOCKUP
[  357.470339][ T5641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  357.470362][ T5641] Call Trace:
[  357.470376][ T5641]  <TASK>
[  357.470391][ T5641]  dump_stack_lvl+0x100/0x190
[  357.470456][ T5641]  f2fs_stop_checkpoint+0x5e6/0xb30
[  357.470514][ T5641]  ? srso_alias_return_thunk+0x5/0xfbef5
[  357.470561][ T5641]  ? errseq_set+0xe3/0x150
[  357.470619][ T5641]  ? srso_alias_return_thunk+0x5/0xfbef5
[  357.470676][ T5641]  f2fs_write_end_bio+0x1188/0x1500
[  357.470743][ T5641]  ? __pfx_f2fs_write_end_bio+0x10/0x10
[  357.470803][ T5641]  ? srso_alias_return_thunk+0x5/0xfbef5
[  357.470859][ T5641]  ? find_held_lock+0x2b/0x80
[  357.470897][ T5641]  ? percpu_ref_put_many.constprop.0+0xc4/0x2a0
[  357.470959][ T5641]  ? percpu_ref_put_many.constprop.0+0xc4/0x2a0
[  357.471023][ T5641]  ? srso_alias_return_thunk+0x5/0xfbef5
[  357.471087][ T5641]  f2fs_write_end_io+0xb1/0x330
[  357.471143][ T5641]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  357.471202][ T5641]  bio_endio+0x7ba/0x9c0
[  357.471269][ T5641]  submit_bio_noacct+0x225/0x2100
[  357.471334][ T5641]  f2fs_submit_write_bio+0x133/0x330
[  357.471394][ T5641]  __submit_merged_bio+0x330/0x7b0
[  357.471454][ T5641]  ? rcu_is_watching+0x13/0xc0
[  357.471502][ T5641]  __submit_merged_data_write_cond+0x1d8/0x2f0
[  357.471577][ T5641]  ? __pfx___submit_merged_data_write_cond+0x10/0x10
[  357.471655][ T5641]  ? __pfx___might_resched+0x10/0x10
[  357.471699][ T5641]  ? srso_alias_return_thunk+0x5/0xfbef5
[  357.471747][ T5641]  ? folio_clear_dirty_for_io+0x178/0x970
[  357.471817][ T5641]  f2fs_write_cache_pages+0x20cd/0x2610
[  357.471892][ T5641]  ? __pfx_f2fs_write_cache_pages+0x10/0x10
[  357.471938][ T5641]  ? __kasan_check_byte+0x13/0x50
[  357.471998][ T5641]  ? srso_alias_return_thunk+0x5/0xfbef5
[  357.472047][ T5641]  ? srso_alias_return_thunk+0x5/0xfbef5
[  357.472099][ T5641]  ? rcu_is_watching+0x13/0xc0
[  357.472142][ T5641]  ? srso_alias_return_thunk+0x5/0xfbef5
[  357.472190][ T5641]  ? __kasan_check_byte+0x13/0x50
[  357.472249][ T5641]  ? srso_alias_return_thunk+0x5/0xfbef5
[  357.472298][ T5641]  ? is_bpf_text_address+0x8a/0x1a0
[  357.472335][ T5641]  ? srso_alias_return_thunk+0x5/0xfbef5
[  357.472382][ T5641]  ? rcu_is_watching+0x13/0xc0
[  357.472438][ T5641]  ? kernel_text_address+0x8d/0x100
[  357.472479][ T5641]  ? srso_alias_return_thunk+0x5/0xfbef5
[  357.472527][ T5641]  ? __kernel_text_address+0xd/0x30
[  357.472641][ T5641]  ? srso_alias_return_thunk+0x5/0xfbef5
[  357.472688][ T5641]  ? check_prev_add+0x354/0xe60
[  357.472735][ T5641]  ? srso_alias_return_thunk+0x5/0xfbef5
[  357.472788][ T5641]  ? srso_alias_return_thunk+0x5/0xfbef5
[  357.472835][ T5641]  ? rcu_is_watching+0x13/0xc0
[  357.472883][ T5641]  f2fs_write_data_pages+0x799/0x16d0
[  357.472944][ T5641]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  357.472989][ T5641]  ? lock_acquire+0x1d1/0x380
[  357.473051][ T5641]  ? do_writepages+0x4b5/0x600
[  357.473114][ T5641]  ? srso_alias_return_thunk+0x5/0xfbef5
[  357.473169][ T5641]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  357.473218][ T5641]  do_writepages+0x278/0x600
[  357.473287][ T5641]  ? __pfx_do_writepages+0x10/0x10
[  357.473346][ T5641]  ? do_raw_spin_unlock+0x145/0x1e0
[  357.473408][ T5641]  ? srso_alias_return_thunk+0x5/0xfbef5
[  357.473455][ T5641]  ? _raw_spin_unlock+0x28/0x50
[  357.473505][ T5641]  filemap_writeback+0x22d/0x2e0
[  357.473574][ T5641]  ? __pfx_filemap_writeback+0x10/0x10
[  357.473702][ T5641]  ? srso_alias_return_thunk+0x5/0xfbef5
[  357.473750][ T5641]  ? find_held_lock+0x2b/0x80
[  357.473788][ T5641]  ? f2fs_sync_dirty_inodes+0x4cb/0xb10
[  357.473834][ T5641]  ? f2fs_sync_dirty_inodes+0x4cb/0xb10
[  357.473877][ T5641]  ? srso_alias_return_thunk+0x5/0xfbef5
[  357.473940][ T5641]  f2fs_sync_dirty_inodes+0x587/0xb10
[  357.474007][ T5641]  f2fs_write_checkpoint+0x5c4/0x6130
[  357.474051][ T5641]  ? do_raw_spin_lock+0x128/0x260
[  357.474113][ T5641]  ? find_held_lock+0x2b/0x80
[  357.474162][ T5641]  ? _raw_spin_unlock_irq+0x23/0x50
[  357.474214][ T5641]  ? srso_alias_return_thunk+0x5/0xfbef5
[  357.474260][ T5641]  ? __wait_for_common+0x1f2/0x500
[  357.474311][ T5641]  ? __pfx_schedule_timeout+0x10/0x10
[  357.474362][ T5641]  ? __pfx___wait_for_common+0x10/0x10
[  357.474417][ T5641]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  357.474463][ T5641]  ? srso_alias_return_thunk+0x5/0xfbef5
[  357.474510][ T5641]  ? mark_held_locks+0x40/0x70
[  357.474571][ T5641]  ? srso_alias_return_thunk+0x5/0xfbef5
[  357.474619][ T5641]  ? rcu_is_watching+0x13/0xc0
[  357.474657][ T5641]  ? srso_alias_return_thunk+0x5/0xfbef5
[  357.474705][ T5641]  ? kthread_stop+0x280/0x630
[  357.474771][ T5641]  kill_f2fs_super+0x3f7/0x4b0
[  357.474817][ T5641]  ? __pfx_kill_f2fs_super+0x10/0x10
[  357.474860][ T5641]  ? lockdep_hardirqs_on+0x7d/0x110
[  357.474911][ T5641]  ? srso_alias_return_thunk+0x5/0xfbef5
[  357.474982][ T5641]  ? srso_alias_return_thunk+0x5/0xfbef5
[  357.475033][ T5641]  ? srso_alias_return_thunk+0x5/0xfbef5
[  357.475103][ T5641]  deactivate_locked_super+0xbd/0x130
[  357.475158][ T5641]  deactivate_super+0xea/0x110
[  357.475214][ T5641]  cleanup_mnt+0xb7/0x160
[  357.475265][ T5641]  task_work_run+0x150/0x240
[  357.475308][ T5641]  ? __pfx_task_work_run+0x10/0x10
[  357.475354][ T5641]  ? srso_alias_return_thunk+0x5/0xfbef5
[  357.475412][ T5641]  exit_to_user_mode_loop+0x1d8/0x700
[  357.475472][ T5641]  ? srso_alias_return_thunk+0x5/0xfbef5
[  357.475520][ T5641]  ? rcu_is_watching+0x13/0xc0
[  357.475565][ T5641]  do_syscall_64+0x661/0x790
[  357.475625][ T5641]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  357.475666][ T5641] RIP: 0033:0x7f02761a0d57
[  357.475697][ T5641] Code: a2 c7 05 9c a9 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  357.475735][ T5641] RSP: 002b:00007fffadf2c4d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  357.475771][ T5641] RAX: 0000000000000000 RBX: 00007f0276236fb3 RCX: 00007f02761a0d57
[  357.475797][ T5641] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffadf2c590
[  357.475822][ T5641] RBP: 00007fffadf2c590 R08: 00007fffadf2d590 R09: 00000000ffffffff
[  357.475849][ T5641] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffadf2d620
[  357.475874][ T5641] R13: 00007f0276236fb3 R14: 00000000000573ce R15: 00007fffadf2d660
[  357.475932][ T5641]  </TASK>
[  357.504080][ T5641] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  357.526008][ T5796] loop3: lost filesystem error report for type 5 error -108
[  357.610112][ T5017] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  357.676100][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  357.684161][ T5796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  357.763394][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  358.556690][ T5017] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  358.715075][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  358.722218][ T5755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  359.035830][T11344] xt_hashlimit: size too large, truncated to 1048576
[  359.550835][T11358] ptp ptp0: new virtual clock ptp2
[  359.575966][T11358] ptp ptp0: new virtual clock ptp3
[  359.588215][T11358] ptp ptp0: new virtual clock ptp4
[  359.588246][T11358] ptp ptp0: guarantee physical clock free running
[  359.615543][T11358] ptp ptp0: delete virtual clock ptp4
[  359.629459][T11358] ptp ptp0: delete virtual clock ptp3
[  359.684632][T11358] ptp ptp0: delete virtual clock ptp2
[  359.702425][T11358] ptp ptp0: guarantee physical clock free running
[  359.942097][T11365] syzkaller1: entered promiscuous mode
[  359.942133][T11365] syzkaller1: entered allmulticast mode
[  360.331556][T11377] FAULT_INJECTION: forcing a failure.
[  360.331556][T11377] name failslab, interval 1, probability 0, space 0, times 0
[  360.331609][T11377] CPU: 0 UID: 0 PID: 11377 Comm: syz.5.1999 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  360.331667][T11377] Tainted: [L]=SOFTLOCKUP
[  360.331683][T11377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  360.331708][T11377] Call Trace:
[  360.331721][T11377]  <TASK>
[  360.331738][T11377]  dump_stack_lvl+0x100/0x190
[  360.331810][T11377]  should_fail_ex.cold+0x5/0xa
[  360.331873][T11377]  should_failslab+0xc2/0x120
[  360.331935][T11377]  kmem_cache_alloc_noprof+0x92/0x6a0
[  360.331988][T11377]  ? mntput_no_expire+0x21/0x220
[  360.332054][T11377]  ? alloc_empty_file+0x5b/0x1c0
[  360.332114][T11377]  alloc_empty_file+0x5b/0x1c0
[  360.332161][T11377]  dentry_open+0x46/0xd0
[  360.332205][T11377]  vfs_open_tree+0x8b1/0xb60
[  360.332256][T11377]  ? __pfx_vfs_open_tree+0x10/0x10
[  360.332318][T11377]  __x64_sys_open_tree+0xbe/0x150
[  360.332372][T11377]  do_syscall_64+0x123/0x790
[  360.332438][T11377]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  360.332481][T11377] RIP: 0033:0x7f66a539fb19
[  360.332514][T11377] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  360.332554][T11377] RSP: 002b:00007f66a61ae028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac
[  360.332594][T11377] RAX: ffffffffffffffda RBX: 00007f66a5625fa0 RCX: 00007f66a539fb19
[  360.332622][T11377] RDX: 0000000000089901 RSI: 0000200000000340 RDI: ffffffffffffff9c
[  360.332650][T11377] RBP: 00007f66a5437b70 R08: 0000000000000000 R09: 0000000000000000
[  360.332677][T11377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  360.332703][T11377] R13: 00007f66a5626038 R14: 00007f66a5625fa0 R15: 00007ffda15f9988
[  360.332758][T11377]  </TASK>
[  360.667845][T11379] xt_CT: No such helper "netbios-ns"
[  361.831977][    C0] net_ratelimit: 13 callbacks suppressed
[  361.832008][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  362.096353][T11409] loop6: detected capacity change from 0 to 2048
[  362.553993][ T1298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  362.578791][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  362.579016][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  362.645978][T11409] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  362.725154][ T5755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  362.757946][   T30] audit: type=1800 audit(1793839433.273:450): pid=11409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2013" name="file1" dev="loop6" ino=15 res=0 errno=-22
[  362.871961][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  363.011882][ T6929] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  363.233320][T11426] FAULT_INJECTION: forcing a failure.
[  363.233320][T11426] name failslab, interval 1, probability 0, space 0, times 0
[  363.233375][T11426] CPU: 1 UID: 0 PID: 11426 Comm: syz.5.2020 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  363.233433][T11426] Tainted: [L]=SOFTLOCKUP
[  363.233453][T11426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  363.233478][T11426] Call Trace:
[  363.233491][T11426]  <TASK>
[  363.233507][T11426]  dump_stack_lvl+0x100/0x190
[  363.233576][T11426]  should_fail_ex.cold+0x5/0xa
[  363.233637][T11426]  should_failslab+0xc2/0x120
[  363.233701][T11426]  kmem_cache_alloc_noprof+0x92/0x6a0
[  363.233753][T11426]  ? lock_acquire+0x1d1/0x380
[  363.233808][T11426]  ? locks_get_lock_context+0x94/0x610
[  363.233863][T11426]  locks_get_lock_context+0x94/0x610
[  363.233917][T11426]  flock_lock_inode+0xb2/0x12d0
[  363.233981][T11426]  ? __pfx_flock_lock_inode+0x10/0x10
[  363.234036][T11426]  ? __pfx___might_resched+0x10/0x10
[  363.234084][T11426]  ? srso_alias_return_thunk+0x5/0xfbef5
[  363.234140][T11426]  ? lock_acquire+0x1d1/0x380
[  363.234199][T11426]  locks_lock_inode_wait+0x114/0x480
[  363.234256][T11426]  ? __pfx_locks_lock_inode_wait+0x10/0x10
[  363.234321][T11426]  ? srso_alias_return_thunk+0x5/0xfbef5
[  363.234370][T11426]  ? apparmor_file_lock+0x21b/0x500
[  363.234427][T11426]  ? srso_alias_return_thunk+0x5/0xfbef5
[  363.234477][T11426]  ? lockdep_init_map_type+0x5c/0x250
[  363.234543][T11426]  __do_sys_flock+0x460/0x4d0
[  363.234600][T11426]  ? __pfx___do_sys_flock+0x10/0x10
[  363.234651][T11426]  ? do_futex+0x190/0x440
[  363.234737][T11426]  ? srso_alias_return_thunk+0x5/0xfbef5
[  363.234794][T11426]  do_syscall_64+0x123/0x790
[  363.234856][T11426]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  363.234899][T11426] RIP: 0033:0x7f66a539fb19
[  363.234931][T11426] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  363.234970][T11426] RSP: 002b:00007f66a61ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000049
[  363.235009][T11426] RAX: ffffffffffffffda RBX: 00007f66a5625fa0 RCX: 00007f66a539fb19
[  363.235037][T11426] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000003
[  363.235062][T11426] RBP: 00007f66a5437b70 R08: 0000000000000000 R09: 0000000000000000
[  363.235088][T11426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  363.235121][T11426] R13: 00007f66a5626038 R14: 00007f66a5625fa0 R15: 00007ffda15f9988
[  363.235176][T11426]  </TASK>
[  363.596950][ T5755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  363.597105][ T5755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  363.643350][T11438] jffs2: notice: (11438) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  363.911965][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  364.262489][T11451] loop5: detected capacity change from 0 to 4096
[  364.379056][T11451] ntfs3(loop5): ino=19, mi_enum_attr
[  364.379102][T11451] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  364.476110][T11463] loop6: detected capacity change from 0 to 512
[  364.493853][T11463] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[  364.493878][T11463] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  364.530366][T11463] EXT4-fs (loop6): 1 truncate cleaned up
[  364.535318][T11463] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  364.632999][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  365.031327][T11466] loop3: detected capacity change from 0 to 32768
[  365.065208][T11466] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  365.065238][T11466] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  365.140402][T11466] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 1ms
[  365.143238][   T29] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  365.143262][   T29] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  365.265978][ T6929] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  365.424140][   T29] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 280ms
[  365.424356][   T29] gfs2: fsid=syz:syz.0: jid=0: Done
[  365.424404][T11466] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  365.639738][T11480] loop6: detected capacity change from 0 to 8
[  367.031972][    C0] net_ratelimit: 10 callbacks suppressed
[  367.032037][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  367.192236][ T5017] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  367.752395][ T5796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  367.752528][ T5796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  367.835936][ T1499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  367.851485][ T5776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  368.071967][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  368.793433][ T5017] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  368.802435][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  368.802572][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  369.399204][T11511] tipc: Cannot configure node identity twice
[  369.418901][T11512] jffs2: notice: (11512) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[  369.571949][ T5017] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  369.724049][ T5017] usb 3-1: Using ep0 maxpacket: 8
[  369.726354][ T5017] usb 3-1: New USB device found: idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  369.727875][ T5017] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  369.727922][ T5017] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  369.727969][ T5017] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  369.728015][ T5017] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  369.728081][ T5017] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  369.756032][T11523] ip6erspan0: entered allmulticast mode
[  370.026656][ T5017] usb 3-1: GET_CAPABILITIES returned 0
[  370.026720][ T5017] usbtmc 3-1:16.0: can't read capabilities
[  370.236531][ T5017] usb 3-1: USB disconnect, device number 20
[  370.337412][T11528] loop5: detected capacity change from 0 to 32768
[  370.349960][T11528] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2062 (11528)
[  370.379197][T11528] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  370.379247][T11528] BTRFS info (device loop5): using blake2b checksum algorithm
[  370.499856][T11528] BTRFS info (device loop5): enabling ssd optimizations
[  370.499898][T11528] BTRFS info (device loop5): turning on async discard
[  370.499930][T11528] BTRFS info (device loop5): enabling free space tree
[  370.499962][T11528] BTRFS info (device loop5): use zstd compression, level 3
[  370.578232][   T30] audit: type=1800 audit(1793839441.093:451): pid=11528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2062" name="file1" dev="loop5" ino=260 res=0 errno=-22
[  370.613177][T11551] loop1: detected capacity change from 0 to 8192
[  371.116458][ T5642] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  371.272165][T11539] loop3: detected capacity change from 0 to 32768
[  371.365688][T11539] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  371.607045][T11539] XFS (loop3): Ending clean mount
[  372.231973][    C0] net_ratelimit: 10 callbacks suppressed
[  372.232003][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  372.232894][T11580] loop5: detected capacity change from 0 to 32768
[  372.235078][ T5849] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  372.236495][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  372.259937][T11580] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  372.259966][T11580] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  372.357970][ T5641] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  372.424694][T11580] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[  372.435295][ T5776] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  372.435321][ T5776] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  372.640887][ T5776] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 205ms
[  372.641101][ T5776] gfs2: fsid=syz:syz.0: jid=0: Done
[  372.641152][T11580] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  372.873052][ T3352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  372.953896][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  372.956061][ T5796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  373.079621][T11597] loop1: detected capacity change from 0 to 2048
[  373.155445][T11597] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  373.271973][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  373.272987][ T5796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  373.604800][T11603] loop3: detected capacity change from 0 to 4096
[  374.002809][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  374.183524][T11617] loop6: detected capacity change from 0 to 256
[  374.258832][   T30] audit: type=1800 audit(1793839444.773:452): pid=11617 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2091" name="bus" dev="loop6" ino=123 res=0 errno=-22
[  374.311963][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  374.337597][T11617] Invalid ELF header magic: != ELF
[  374.521303][T11624] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2092'.
[  374.716735][T11628] loop3: detected capacity change from 0 to 128
[  374.720890][T11628] FAT-fs (loop3): bogus number of reserved sectors
[  374.720918][T11628] FAT-fs (loop3): This looks like a DOS 1.x volume, but isn't a recognized floppy size (128 sectors)
[  374.720951][T11628] FAT-fs (loop3): Can't find a valid FAT filesystem
[  375.725455][T11654] gadgetfs: bound to dummy_udc driver
[  377.005257][T11694] hub 1-0:1.0: USB hub found
[  377.035685][T11694] hub 1-0:1.0: 1 port detected
[  377.432184][    C0] net_ratelimit: 11 callbacks suppressed
[  377.432214][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  377.433608][ T5796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  377.482281][ T5776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  377.605080][T11688] loop5: detected capacity change from 0 to 40427
[  377.620470][T11688] F2FS-fs (loop5): invalid crc value
[  377.897093][T11688] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  377.915609][ T1499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  377.948423][T11688] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  378.074887][T11725] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  378.076694][ T1313] ieee802154 phy0 wpan0: encryption failed: -22
[  378.076767][ T1313] ieee802154 phy1 wpan1: encryption failed: -22
[  378.077346][ T1313] aoe: packet could not be sent on lowpan0.  consider increasing tx_queue_len
[  378.082169][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  378.138065][T11723] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2132'.
[  378.154692][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  378.250960][ T5642] syz-executor: attempt to access beyond end of device
[  378.250960][ T5642] loop5: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  378.300222][ T5642] CPU: 0 UID: 0 PID: 5642 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  378.300286][ T5642] Tainted: [L]=SOFTLOCKUP
[  378.300301][ T5642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  378.300326][ T5642] Call Trace:
[  378.300339][ T5642]  <TASK>
[  378.300356][ T5642]  dump_stack_lvl+0x100/0x190
[  378.300426][ T5642]  f2fs_stop_checkpoint+0x5e6/0xb30
[  378.300489][ T5642]  ? srso_alias_return_thunk+0x5/0xfbef5
[  378.300539][ T5642]  ? errseq_set+0xe3/0x150
[  378.300600][ T5642]  ? srso_alias_return_thunk+0x5/0xfbef5
[  378.300658][ T5642]  f2fs_write_end_bio+0x1188/0x1500
[  378.300727][ T5642]  ? __pfx_f2fs_write_end_bio+0x10/0x10
[  378.300789][ T5642]  ? srso_alias_return_thunk+0x5/0xfbef5
[  378.300845][ T5642]  ? find_held_lock+0x2b/0x80
[  378.300885][ T5642]  ? percpu_ref_put_many.constprop.0+0xc4/0x2a0
[  378.300950][ T5642]  ? percpu_ref_put_many.constprop.0+0xc4/0x2a0
[  378.301013][ T5642]  ? srso_alias_return_thunk+0x5/0xfbef5
[  378.301072][ T5642]  f2fs_write_end_io+0xb1/0x330
[  378.301135][ T5642]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  378.301196][ T5642]  bio_endio+0x7ba/0x9c0
[  378.301263][ T5642]  submit_bio_noacct+0x225/0x2100
[  378.301328][ T5642]  f2fs_submit_write_bio+0x133/0x330
[  378.301388][ T5642]  __submit_merged_bio+0x330/0x7b0
[  378.301451][ T5642]  ? rcu_is_watching+0x13/0xc0
[  378.301499][ T5642]  __submit_merged_data_write_cond+0x1d8/0x2f0
[  378.301580][ T5642]  ? __pfx___submit_merged_data_write_cond+0x10/0x10
[  378.301663][ T5642]  ? __pfx___might_resched+0x10/0x10
[  378.301709][ T5642]  ? srso_alias_return_thunk+0x5/0xfbef5
[  378.301761][ T5642]  ? folio_clear_dirty_for_io+0x178/0x970
[  378.301832][ T5642]  f2fs_write_cache_pages+0x20cd/0x2610
[  378.301904][ T5642]  ? __pfx_f2fs_write_cache_pages+0x10/0x10
[  378.301953][ T5642]  ? __kasan_check_byte+0x13/0x50
[  378.302015][ T5642]  ? srso_alias_return_thunk+0x5/0xfbef5
[  378.302067][ T5642]  ? srso_alias_return_thunk+0x5/0xfbef5
[  378.302120][ T5642]  ? rcu_is_watching+0x13/0xc0
[  378.302162][ T5642]  ? srso_alias_return_thunk+0x5/0xfbef5
[  378.302211][ T5642]  ? __kasan_check_byte+0x13/0x50
[  378.302274][ T5642]  ? srso_alias_return_thunk+0x5/0xfbef5
[  378.302325][ T5642]  ? is_bpf_text_address+0x8a/0x1a0
[  378.302361][ T5642]  ? srso_alias_return_thunk+0x5/0xfbef5
[  378.302410][ T5642]  ? rcu_is_watching+0x13/0xc0
[  378.302464][ T5642]  ? kernel_text_address+0x8d/0x100
[  378.302507][ T5642]  ? srso_alias_return_thunk+0x5/0xfbef5
[  378.302555][ T5642]  ? __kernel_text_address+0xd/0x30
[  378.302658][ T5642]  ? srso_alias_return_thunk+0x5/0xfbef5
[  378.302706][ T5642]  ? check_prev_add+0x354/0xe60
[  378.302756][ T5642]  ? srso_alias_return_thunk+0x5/0xfbef5
[  378.302809][ T5642]  ? srso_alias_return_thunk+0x5/0xfbef5
[  378.302857][ T5642]  ? rcu_is_watching+0x13/0xc0
[  378.302903][ T5642]  f2fs_write_data_pages+0x799/0x16d0
[  378.302962][ T5642]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  378.303004][ T5642]  ? lock_acquire+0x1d1/0x380
[  378.303066][ T5642]  ? do_writepages+0x4b5/0x600
[  378.303136][ T5642]  ? srso_alias_return_thunk+0x5/0xfbef5
[  378.303191][ T5642]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  378.303242][ T5642]  do_writepages+0x278/0x600
[  378.303312][ T5642]  ? __pfx_do_writepages+0x10/0x10
[  378.303374][ T5642]  ? do_raw_spin_unlock+0x145/0x1e0
[  378.303438][ T5642]  ? srso_alias_return_thunk+0x5/0xfbef5
[  378.303486][ T5642]  ? _raw_spin_unlock+0x28/0x50
[  378.303539][ T5642]  filemap_writeback+0x22d/0x2e0
[  378.303607][ T5642]  ? __pfx_filemap_writeback+0x10/0x10
[  378.303670][ T5642]  ? __hrtimer_rearm_deferred+0x23c/0x7b0
[  378.303721][ T5642]  ? srso_alias_return_thunk+0x5/0xfbef5
[  378.303820][ T5642]  ? srso_alias_return_thunk+0x5/0xfbef5
[  378.303867][ T5642]  ? find_held_lock+0x2b/0x80
[  378.303904][ T5642]  ? f2fs_sync_dirty_inodes+0x4cb/0xb10
[  378.303951][ T5642]  ? f2fs_sync_dirty_inodes+0x4cb/0xb10
[  378.303997][ T5642]  ? srso_alias_return_thunk+0x5/0xfbef5
[  378.304061][ T5642]  f2fs_sync_dirty_inodes+0x587/0xb10
[  378.304133][ T5642]  f2fs_write_checkpoint+0x5c4/0x6130
[  378.304180][ T5642]  ? do_raw_spin_lock+0x128/0x260
[  378.304242][ T5642]  ? find_held_lock+0x2b/0x80
[  378.304290][ T5642]  ? _raw_spin_unlock_irq+0x23/0x50
[  378.304342][ T5642]  ? srso_alias_return_thunk+0x5/0xfbef5
[  378.304392][ T5642]  ? __wait_for_common+0x1f2/0x500
[  378.304445][ T5642]  ? __pfx_schedule_timeout+0x10/0x10
[  378.304495][ T5642]  ? __pfx___wait_for_common+0x10/0x10
[  378.304551][ T5642]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  378.304598][ T5642]  ? srso_alias_return_thunk+0x5/0xfbef5
[  378.304647][ T5642]  ? mark_held_locks+0x40/0x70
[  378.304707][ T5642]  ? srso_alias_return_thunk+0x5/0xfbef5
[  378.304756][ T5642]  ? rcu_is_watching+0x13/0xc0
[  378.304795][ T5642]  ? srso_alias_return_thunk+0x5/0xfbef5
[  378.304845][ T5642]  ? kthread_stop+0x280/0x630
[  378.304910][ T5642]  kill_f2fs_super+0x3f7/0x4b0
[  378.304953][ T5642]  ? __pfx_kill_f2fs_super+0x10/0x10
[  378.305000][ T5642]  ? lockdep_hardirqs_on+0x7d/0x110
[  378.305051][ T5642]  ? srso_alias_return_thunk+0x5/0xfbef5
[  378.305124][ T5642]  ? srso_alias_return_thunk+0x5/0xfbef5
[  378.305176][ T5642]  ? srso_alias_return_thunk+0x5/0xfbef5
[  378.305238][ T5642]  deactivate_locked_super+0xbd/0x130
[  378.305294][ T5642]  deactivate_super+0xea/0x110
[  378.305351][ T5642]  cleanup_mnt+0xb7/0x160
[  378.305406][ T5642]  task_work_run+0x150/0x240
[  378.305451][ T5642]  ? __pfx_task_work_run+0x10/0x10
[  378.305498][ T5642]  ? srso_alias_return_thunk+0x5/0xfbef5
[  378.305555][ T5642]  exit_to_user_mode_loop+0x1d8/0x700
[  378.305582][T11727] FAULT_INJECTION: forcing a failure.
[  378.305582][T11727] name failslab, interval 1, probability 0, space 0, times 0
[  378.305619][ T5642]  ? srso_alias_return_thunk+0x5/0xfbef5
[  378.305665][ T5642]  ? rcu_is_watching+0x13/0xc0
[  378.305706][ T5642]  do_syscall_64+0x661/0x790
[  378.305762][ T5642]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  378.305801][ T5642] RIP: 0033:0x7f66a53a0d57
[  378.305831][ T5642] Code: a2 c7 05 9c a9 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  378.305868][ T5642] RSP: 002b:00007ffda15f8bf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  378.305905][ T5642] RAX: 0000000000000000 RBX: 00007f66a5436fb3 RCX: 00007f66a53a0d57
[  378.305930][ T5642] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffda15f8cb0
[  378.305954][ T5642] RBP: 00007ffda15f8cb0 R08: 00007ffda15f9cb0 R09: 00000000ffffffff
[  378.305978][ T5642] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffda15f9d40
[  378.306003][ T5642] R13: 00007f66a5436fb3 R14: 000000000005c551 R15: 00007ffda15f9d80
[  378.306053][ T5642]  </TASK>
[  378.306075][T11727] CPU: 1 UID: 0 PID: 11727 Comm: syz.0.2136 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  378.306133][T11727] Tainted: [L]=SOFTLOCKUP
[  378.306152][T11727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  378.306177][T11727] Call Trace:
[  378.306190][T11727]  <TASK>
[  378.306205][T11727]  dump_stack_lvl+0x100/0x190
[  378.306271][T11727]  should_fail_ex.cold+0x5/0xa
[  378.306332][T11727]  should_failslab+0xc2/0x120
[  378.306395][T11727]  __kmalloc_cache_noprof+0x91/0x6d0
[  378.306441][T11727]  ? ufs_init_fs_context+0x47/0x310
[  378.306498][T11727]  ufs_init_fs_context+0x47/0x310
[  378.306547][T11727]  alloc_fs_context+0x607/0xf40
[  378.306610][T11727]  __x64_sys_fsopen+0x16b/0x2d0
[  378.306678][T11727]  do_syscall_64+0x123/0x790
[  378.306738][T11727]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  378.306781][T11727] RIP: 0033:0x7f2b32b9fb19
[  378.306812][T11727] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  378.306853][T11727] RSP: 002b:00007f2b339a1028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae
[  378.306891][T11727] RAX: ffffffffffffffda RBX: 00007f2b32e25fa0 RCX: 00007f2b32b9fb19
[  378.306920][T11727] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000200
[  378.306946][T11727] RBP: 00007f2b32c37b70 R08: 0000000000000000 R09: 0000000000000000
[  378.306973][T11727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  378.306999][T11727] R13: 00007f2b32e26038 R14: 00007f2b32e25fa0 R15: 00007ffe21b10098
[  378.307059][T11727]  </TASK>
[  378.326222][ T5776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  378.352869][ T5642] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  378.353015][ T5642] CPU: 0 UID: 0 PID: 5642 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  378.353071][ T5642] Tainted: [L]=SOFTLOCKUP
[  378.353086][ T5642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  378.353109][ T5642] Call Trace:
[  378.353129][ T5642]  <TASK>
[  378.353143][ T5642]  dump_stack_lvl+0x100/0x190
[  378.353209][ T5642]  f2fs_stop_checkpoint+0x5e6/0xb30
[  378.353268][ T5642]  ? srso_alias_return_thunk+0x5/0xfbef5
[  378.353316][ T5642]  ? errseq_set+0xe3/0x150
[  378.353374][ T5642]  ? srso_alias_return_thunk+0x5/0xfbef5
[  378.353429][ T5642]  f2fs_write_end_bio+0x1188/0x1500
[  378.353495][ T5642]  ? __pfx_f2fs_write_end_bio+0x10/0x10
[  378.353553][ T5642]  ? srso_alias_return_thunk+0x5/0xfbef5
[  378.353607][ T5642]  ? find_held_lock+0x2b/0x80
[  378.353646][ T5642]  ? percpu_ref_put_many.constprop.0+0xc4/0x2a0
[  378.353708][ T5642]  ? percpu_ref_put_many.constprop.0+0xc4/0x2a0
[  378.353768][ T5642]  ? srso_alias_return_thunk+0x5/0xfbef5
[  378.353827][ T5642]  f2fs_write_end_io+0xb1/0x330
[  378.353883][ T5642]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  378.353941][ T5642]  bio_endio+0x7ba/0x9c0
[  378.354005][ T5642]  submit_bio_noacct+0x225/0x2100
[  378.354068][ T5642]  f2fs_submit_write_bio+0x133/0x330
[  378.354131][ T5642]  __submit_merged_bio+0x330/0x7b0
[  378.354190][ T5642]  ? rcu_is_watching+0x13/0xc0
[  378.354236][ T5642]  __submit_merged_data_write_cond+0x1d8/0x2f0
[  378.354309][ T5642]  ? __pfx___submit_merged_data_write_cond+0x10/0x10
[  378.354388][ T5642]  ? __pfx___might_resched+0x10/0x10
[  378.354434][ T5642]  ? srso_alias_return_thunk+0x5/0xfbef5
[  378.354483][ T5642]  ? folio_clear_dirty_for_io+0x178/0x970
[  378.354553][ T5642]  f2fs_write_cache_pages+0x20cd/0x2610
[  378.354622][ T5642]  ? __pfx_f2fs_write_cache_pages+0x10/0x10
[  378.354670][ T5642]  ? __kasan_check_byte+0x13/0x50
[  378.354730][ T5642]  ? srso_alias_return_thunk+0x5/0xfbef5
[  378.354779][ T5642]  ? srso_alias_return_thunk+0x5/0xfbef5
[  378.354831][ T5642]  ? rcu_is_watching+0x13/0xc0
[  378.354874][ T5642]  ? srso_alias_return_thunk+0x5/0xfbef5
[  378.354920][ T5642]  ? __kasan_check_byte+0x13/0x50
[  378.354979][ T5642]  ? srso_alias_return_thunk+0x5/0xfbef5
[  378.355027][ T5642]  ? is_bpf_text_address+0x8a/0x1a0
[  378.355064][ T5642]  ? srso_alias_return_thunk+0x5/0xfbef5
[  378.355116][ T5642]  ? rcu_is_watching+0x13/0xc0
[  378.355170][ T5642]  ? kernel_text_address+0x8d/0x100
[  378.355211][ T5642]  ? srso_alias_return_thunk+0x5/0xfbef5
[  378.355257][ T5642]  ? __kernel_text_address+0xd/0x30
[  378.355360][ T5642]  ? srso_alias_return_thunk+0x5/0xfbef5
[  378.355407][ T5642]  ? check_prev_add+0x354/0xe60
[  378.355453][ T5642]  ? srso_alias_return_thunk+0x5/0xfbef5
[  378.355505][ T5642]  ? srso_alias_return_thunk+0x5/0xfbef5
[  378.355552][ T5642]  ? rcu_is_watching+0x13/0xc0
[  378.355598][ T5642]  f2fs_write_data_pages+0x799/0x16d0
[  378.355656][ T5642]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  378.355699][ T5642]  ? lock_acquire+0x1d1/0x380
[  378.355758][ T5642]  ? do_writepages+0x4b5/0x600
[  378.355816][ T5642]  ? srso_alias_return_thunk+0x5/0xfbef5
[  378.355868][ T5642]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  378.355917][ T5642]  do_writepages+0x278/0x600
[  378.355983][ T5642]  ? __pfx_do_writepages+0x10/0x10
[  378.356043][ T5642]  ? do_raw_spin_unlock+0x145/0x1e0
[  378.356104][ T5642]  ? srso_alias_return_thunk+0x5/0xfbef5
[  378.356155][ T5642]  ? _raw_spin_unlock+0x28/0x50
[  378.356205][ T5642]  filemap_writeback+0x22d/0x2e0
[  378.356273][ T5642]  ? __pfx_filemap_writeback+0x10/0x10
[  378.356333][ T5642]  ? __hrtimer_rearm_deferred+0x23c/0x7b0
[  378.356382][ T5642]  ? srso_alias_return_thunk+0x5/0xfbef5
[  378.356483][ T5642]  ? srso_alias_return_thunk+0x5/0xfbef5
[  378.356530][ T5642]  ? find_held_lock+0x2b/0x80
[  378.356568][ T5642]  ? f2fs_sync_dirty_inodes+0x4cb/0xb10
[  378.356613][ T5642]  ? f2fs_sync_dirty_inodes+0x4cb/0xb10
[  378.356657][ T5642]  ? srso_alias_return_thunk+0x5/0xfbef5
[  378.356716][ T5642]  f2fs_sync_dirty_inodes+0x587/0xb10
[  378.356779][ T5642]  f2fs_write_checkpoint+0x5c4/0x6130
[  378.356823][ T5642]  ? do_raw_spin_lock+0x128/0x260
[  378.356882][ T5642]  ? find_held_lock+0x2b/0x80
[  378.356929][ T5642]  ? _raw_spin_unlock_irq+0x23/0x50
[  378.356979][ T5642]  ? srso_alias_return_thunk+0x5/0xfbef5
[  378.357026][ T5642]  ? __wait_for_common+0x1f2/0x500
[  378.357076][ T5642]  ? __pfx_schedule_timeout+0x10/0x10
[  378.357129][ T5642]  ? __pfx___wait_for_common+0x10/0x10
[  378.357182][ T5642]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  378.357228][ T5642]  ? srso_alias_return_thunk+0x5/0xfbef5
[  378.357275][ T5642]  ? mark_held_locks+0x40/0x70
[  378.357332][ T5642]  ? srso_alias_return_thunk+0x5/0xfbef5
[  378.357379][ T5642]  ? rcu_is_watching+0x13/0xc0
[  378.357417][ T5642]  ? srso_alias_return_thunk+0x5/0xfbef5
[  378.357464][ T5642]  ? kthread_stop+0x280/0x630
[  378.357533][ T5642]  kill_f2fs_super+0x3f7/0x4b0
[  378.357578][ T5642]  ? __pfx_kill_f2fs_super+0x10/0x10
[  378.357621][ T5642]  ? lockdep_hardirqs_on+0x7d/0x110
[  378.357671][ T5642]  ? srso_alias_return_thunk+0x5/0xfbef5
[  378.357739][ T5642]  ? srso_alias_return_thunk+0x5/0xfbef5
[  378.357789][ T5642]  ? srso_alias_return_thunk+0x5/0xfbef5
[  378.357853][ T5642]  deactivate_locked_super+0xbd/0x130
[  378.357907][ T5642]  deactivate_super+0xea/0x110
[  378.357961][ T5642]  cleanup_mnt+0xb7/0x160
[  378.358013][ T5642]  task_work_run+0x150/0x240
[  378.358055][ T5642]  ? __pfx_task_work_run+0x10/0x10
[  378.358099][ T5642]  ? srso_alias_return_thunk+0x5/0xfbef5
[  378.358163][ T5642]  exit_to_user_mode_loop+0x1d8/0x700
[  378.358224][ T5642]  ? srso_alias_return_thunk+0x5/0xfbef5
[  378.358271][ T5642]  ? rcu_is_watching+0x13/0xc0
[  378.358315][ T5642]  do_syscall_64+0x661/0x790
[  378.358373][ T5642]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  378.358414][ T5642] RIP: 0033:0x7f66a53a0d57
[  378.358446][ T5642] Code: a2 c7 05 9c a9 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  378.358484][ T5642] RSP: 002b:00007ffda15f8bf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  378.358521][ T5642] RAX: 0000000000000000 RBX: 00007f66a5436fb3 RCX: 00007f66a53a0d57
[  378.358548][ T5642] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffda15f8cb0
[  378.358573][ T5642] RBP: 00007ffda15f8cb0 R08: 00007ffda15f9cb0 R09: 00000000ffffffff
[  378.358599][ T5642] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffda15f9d40
[  378.358624][ T5642] R13: 00007f66a5436fb3 R14: 000000000005c551 R15: 00007ffda15f9d80
[  378.358677][ T5642]  </TASK>
[  378.412983][ T5642] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  378.472098][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  378.931501][T11734] loop1: detected capacity change from 0 to 512
[  379.049695][T11734] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  379.180414][T11734] EXT4-fs (loop1): 1 truncate cleaned up
[  379.220047][T11734] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  379.841167][ T5638] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  380.252096][T11755] netlink: 'syz.1.2146': attribute type 11 has an invalid length.
[  380.603864][   T29] usb 1-1: new full-speed USB device number 19 using dummy_hcd
[  380.761781][T11774] loop6: detected capacity change from 0 to 512
[  380.782664][   T29] usb 1-1: New USB device found: idVendor=046d, idProduct=c09b, bcdDevice=0.00
[  380.784222][   T29] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  380.784278][   T29] usb 1-1: config 0 interface 0 has no altsetting 0
[  380.784331][   T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  380.801025][T11772] vcan0: tx address claim with broadcast sa
[  380.821213][T11774] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  380.821349][T11774] ext4 filesystem being mounted at /299/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  380.872599][   T29] usb 1-1: config 0 descriptor??
[  381.194423][ T6929] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  381.270171][T11787] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  381.336315][   T29] input: HID 046d:c09b as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:046D:C09B.001F/input/input39
[  381.421194][   T29] logitech-hidpp-device 0003:046D:C09B.001F: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 046d:c09b] on usb-dummy_hcd.0-1/input0
[  381.577186][   T29] usb 1-1: USB disconnect, device number 19
[  381.694226][T11796] fido_id[11796]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  381.892409][T11802] macvtap1: entered promiscuous mode
[  381.894231][T11802] macvtap1: entered allmulticast mode
[  381.894258][T11802] veth1_vlan: entered allmulticast mode
[  382.067413][T11815] jffs2: notice: (11815) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[  382.632174][    C0] net_ratelimit: 14 callbacks suppressed
[  382.632206][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  382.632628][ T5796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  382.760049][T11831] loop5: detected capacity change from 0 to 40427
[  382.780890][T11831] F2FS-fs (loop5): invalid crc value
[  382.992821][T11831] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  383.042254][T11831] F2FS-fs (loop5): f2fs_disable_checkpoint starts, unusable: 0
[  383.042298][T11831] F2FS-fs (loop5): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[  383.042344][T11831] F2FS-fs (loop5): Start checkpoint disabled!
[  383.101541][T11831] F2FS-fs (loop5): f2fs_disable_checkpoint finishes, err:0
[  383.112869][T11831] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  383.200701][ T1298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  383.274691][T11831] F2FS-fs (loop5): ino:10, start:0, end:8197, need to trigger GC to reclaim enough free segment when checkpoint is enabled
[  383.313024][ T5776] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[  383.352147][ T5796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  383.462452][ T5776] usb 7-1: Using ep0 maxpacket: 8
[  383.463481][ T5776] usb 7-1: New USB device found: idVendor=056a, idProduct=0325, bcdDevice=0.00
[  383.466775][ T5776] usb 7-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  383.466826][ T5776] usb 7-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  383.466876][ T5776] usb 7-1: config 0 interface 0 has no altsetting 0
[  383.466925][ T5776] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  383.477019][ T5776] usb 7-1: config 0 descriptor??
[  383.529357][ T3352] kworker/u8:16: attempt to access beyond end of device
[  383.529357][ T3352] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  383.571279][ T3352] CPU: 0 UID: 0 PID: 3352 Comm: kworker/u8:16 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  383.571341][ T3352] Tainted: [L]=SOFTLOCKUP
[  383.571357][ T3352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  383.571389][ T3352] Workqueue: writeback wb_workfn (flush-7:5)
[  383.571465][ T3352] Call Trace:
[  383.571480][ T3352]  <TASK>
[  383.571496][ T3352]  dump_stack_lvl+0x100/0x190
[  383.571564][ T3352]  f2fs_stop_checkpoint+0x5e6/0xb30
[  383.571625][ T3352]  ? srso_alias_return_thunk+0x5/0xfbef5
[  383.571675][ T3352]  ? errseq_set+0xe3/0x150
[  383.571736][ T3352]  ? srso_alias_return_thunk+0x5/0xfbef5
[  383.571793][ T3352]  f2fs_write_end_bio+0x1188/0x1500
[  383.571862][ T3352]  ? __pfx_f2fs_write_end_bio+0x10/0x10
[  383.571923][ T3352]  ? srso_alias_return_thunk+0x5/0xfbef5
[  383.571979][ T3352]  ? find_held_lock+0x2b/0x80
[  383.572019][ T3352]  ? percpu_ref_put_many.constprop.0+0xc4/0x2a0
[  383.572084][ T3352]  ? percpu_ref_put_many.constprop.0+0xc4/0x2a0
[  383.572151][ T3352]  ? srso_alias_return_thunk+0x5/0xfbef5
[  383.572209][ T3352]  f2fs_write_end_io+0xb1/0x330
[  383.572268][ T3352]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  383.572327][ T3352]  bio_endio+0x7ba/0x9c0
[  383.572394][ T3352]  submit_bio_noacct+0x225/0x2100
[  383.572458][ T3352]  f2fs_submit_write_bio+0x133/0x330
[  383.572523][ T3352]  __submit_merged_bio+0x330/0x7b0
[  383.572585][ T3352]  ? rcu_is_watching+0x13/0xc0
[  383.572633][ T3352]  __submit_merged_data_write_cond+0x1d8/0x2f0
[  383.572707][ T3352]  ? __pfx___submit_merged_data_write_cond+0x10/0x10
[  383.572786][ T3352]  ? __pfx___might_resched+0x10/0x10
[  383.572831][ T3352]  ? srso_alias_return_thunk+0x5/0xfbef5
[  383.572880][ T3352]  ? folio_clear_dirty_for_io+0x178/0x970
[  383.572952][ T3352]  f2fs_write_cache_pages+0x20cd/0x2610
[  383.573023][ T3352]  ? __pfx_f2fs_write_cache_pages+0x10/0x10
[  383.573067][ T3352]  ? srso_alias_return_thunk+0x5/0xfbef5
[  383.573131][ T3352]  ? srso_alias_return_thunk+0x5/0xfbef5
[  383.573180][ T3352]  ? unwind_next_frame+0x3c8/0x2090
[  383.573244][ T3352]  ? ret_from_fork_asm+0x1a/0x30
[  383.573297][ T3352]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  383.573369][ T3352]  ? srso_alias_return_thunk+0x5/0xfbef5
[  383.573418][ T3352]  ? __lock_acquire+0x5c0/0x1f40
[  383.573490][ T3352]  ? srso_alias_return_thunk+0x5/0xfbef5
[  383.573539][ T3352]  ? lock_acquire+0x1d1/0x380
[  383.573627][ T3352]  ? __page_table_check_zero+0x7a/0x410
[  383.573694][ T3352]  ? srso_alias_return_thunk+0x5/0xfbef5
[  383.573744][ T3352]  ? find_held_lock+0x2b/0x80
[  383.573784][ T3352]  ? __page_table_check_zero+0x27f/0x410
[  383.573850][ T3352]  ? srso_alias_return_thunk+0x5/0xfbef5
[  383.573899][ T3352]  ? rcu_is_watching+0x13/0xc0
[  383.573944][ T3352]  f2fs_write_data_pages+0x799/0x16d0
[  383.573987][ T3352]  ? srso_alias_return_thunk+0x5/0xfbef5
[  383.574051][ T3352]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  383.574114][ T3352]  ? do_writepages+0x4da/0x600
[  383.574181][ T3352]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  383.574230][ T3352]  do_writepages+0x278/0x600
[  383.574299][ T3352]  ? __pfx_do_writepages+0x10/0x10
[  383.574363][ T3352]  ? srso_alias_return_thunk+0x5/0xfbef5
[  383.574411][ T3352]  ? reacquire_held_locks+0xdd/0x1f0
[  383.574465][ T3352]  ? writeback_sb_inodes+0x3e1/0x1c40
[  383.574533][ T3352]  __writeback_single_inode+0x164/0x1560
[  383.574596][ T3352]  ? wbc_attach_and_unlock_inode+0xfd/0x130
[  383.574658][ T3352]  ? srso_alias_return_thunk+0x5/0xfbef5
[  383.574710][ T3352]  ? __pfx___writeback_single_inode+0x10/0x10
[  383.574773][ T3352]  ? srso_alias_return_thunk+0x5/0xfbef5
[  383.574822][ T3352]  ? do_raw_spin_unlock+0x145/0x1e0
[  383.574886][ T3352]  ? srso_alias_return_thunk+0x5/0xfbef5
[  383.574942][ T3352]  writeback_sb_inodes+0x766/0x1c40
[  383.575029][ T3352]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  383.575090][ T3352]  ? __lock_acquire+0x5c0/0x1f40
[  383.575211][ T3352]  ? srso_alias_return_thunk+0x5/0xfbef5
[  383.575259][ T3352]  ? rcu_is_watching+0x13/0xc0
[  383.575299][ T3352]  ? srso_alias_return_thunk+0x5/0xfbef5
[  383.575348][ T3352]  ? queue_io+0x287/0x530
[  383.575405][ T3352]  wb_writeback+0x1c0/0xb50
[  383.575480][ T3352]  ? __pfx_wb_writeback+0x10/0x10
[  383.575540][ T3352]  ? srso_alias_return_thunk+0x5/0xfbef5
[  383.575603][ T3352]  ? srso_alias_return_thunk+0x5/0xfbef5
[  383.575652][ T3352]  ? mark_held_locks+0x40/0x70
[  383.575705][ T3352]  ? _raw_spin_unlock_irq+0x23/0x50
[  383.575761][ T3352]  wb_workfn+0x143/0xc80
[  383.575834][ T3352]  ? __pfx_wb_workfn+0x10/0x10
[  383.575899][ T3352]  ? srso_alias_return_thunk+0x5/0xfbef5
[  383.575947][ T3352]  ? lock_acquire+0x1d1/0x380
[  383.575998][ T3352]  ? process_one_work+0xa2c/0x1b10
[  383.576041][ T3352]  ? srso_alias_return_thunk+0x5/0xfbef5
[  383.576092][ T3352]  ? process_one_work+0x906/0x1b10
[  383.576138][ T3352]  ? process_one_work+0x906/0x1b10
[  383.576178][ T3352]  ? srso_alias_return_thunk+0x5/0xfbef5
[  383.576237][ T3352]  process_one_work+0xac7/0x1b10
[  383.576306][ T3352]  ? __pfx_process_one_work+0x10/0x10
[  383.576351][ T3352]  ? lock_acquire+0x1d1/0x380
[  383.576416][ T3352]  ? srso_alias_return_thunk+0x5/0xfbef5
[  383.576473][ T3352]  worker_thread+0x5ef/0xe50
[  383.576534][ T3352]  ? kthread+0x13a/0x450
[  383.576595][ T3352]  ? __pfx_worker_thread+0x10/0x10
[  383.576634][ T3352]  kthread+0x373/0x450
[  383.576696][ T3352]  ? __pfx_kthread+0x10/0x10
[  383.576763][ T3352]  ret_from_fork+0x730/0xd60
[  383.576816][ T3352]  ? __pfx_ret_from_fork+0x10/0x10
[  383.576868][ T3352]  ? srso_alias_return_thunk+0x5/0xfbef5
[  383.576917][ T3352]  ? __switch_to+0x800/0x10e0
[  383.576978][ T3352]  ? __switch_to_asm+0x39/0x70
[  383.577024][ T3352]  ? __pfx_kthread+0x10/0x10
[  383.577090][ T3352]  ret_from_fork_asm+0x1a/0x30
[  383.577168][ T3352]  </TASK>
[  383.637096][ T3352] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  383.672114][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  383.673917][ T5755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  384.036875][ T5776] wacom 0003:056A:0325.0020: hidraw0: USB HID v0.00 Device [HID 056a:0325] on usb-dummy_hcd.6-1/input0
[  384.231095][ T5776] usb 7-1: USB disconnect, device number 20
[  384.300235][T11855] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2182'.
[  384.392168][ T5796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  384.408060][ T5849] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  384.586530][T11851] fido_id[11851]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory
[  384.711303][T11858] FAULT_INJECTION: forcing a failure.
[  384.711303][T11858] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  384.711360][T11858] CPU: 0 UID: 0 PID: 11858 Comm: syz.2.2196 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  384.711418][T11858] Tainted: [L]=SOFTLOCKUP
[  384.711434][T11858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  384.711459][T11858] Call Trace:
[  384.711472][T11858]  <TASK>
[  384.711488][T11858]  dump_stack_lvl+0x100/0x190
[  384.711558][T11858]  should_fail_ex.cold+0x5/0xa
[  384.711618][T11858]  should_fail_alloc_page+0xeb/0x140
[  384.711684][T11858]  prepare_alloc_pages+0x1f0/0x5b0
[  384.711746][T11858]  ? srso_alias_return_thunk+0x5/0xfbef5
[  384.711807][T11858]  __alloc_frozen_pages_noprof+0x1b1/0x3280
[  384.711858][T11858]  ? lockdep_hardirqs_on+0x7d/0x110
[  384.711913][T11858]  ? srso_alias_return_thunk+0x5/0xfbef5
[  384.711962][T11858]  ? finish_task_switch.isra.0+0x2c2/0x10d0
[  384.712020][T11858]  ? srso_alias_return_thunk+0x5/0xfbef5
[  384.712072][T11858]  ? srso_alias_return_thunk+0x5/0xfbef5
[  384.712134][T11858]  ? srso_alias_return_thunk+0x5/0xfbef5
[  384.712183][T11858]  ? __lock_acquire+0x5c0/0x1f40
[  384.712248][T11858]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  384.712298][T11858]  ? __css_rstat_updated+0x1ce/0x590
[  384.712370][T11858]  ? __pfx___css_rstat_updated+0x10/0x10
[  384.712437][T11858]  ? xas_create+0x1f4/0x14e0
[  384.712506][T11858]  ? srso_alias_return_thunk+0x5/0xfbef5
[  384.712560][T11858]  ? srso_alias_return_thunk+0x5/0xfbef5
[  384.712610][T11858]  ? rcu_is_watching+0x13/0xc0
[  384.712650][T11858]  ? srso_alias_return_thunk+0x5/0xfbef5
[  384.712714][T11858]  ? srso_alias_return_thunk+0x5/0xfbef5
[  384.712764][T11858]  ? __lock_acquire+0x5c0/0x1f40
[  384.712818][T11858]  ? srso_alias_return_thunk+0x5/0xfbef5
[  384.712867][T11858]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  384.712933][T11858]  ? srso_alias_return_thunk+0x5/0xfbef5
[  384.712982][T11858]  ? policy_nodemask+0xed/0x5e0
[  384.713051][T11858]  alloc_pages_mpol+0x201/0x560
[  384.713120][T11858]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  384.713189][T11858]  ? srso_alias_return_thunk+0x5/0xfbef5
[  384.713242][T11858]  ? filemap_get_entry+0x22d/0x450
[  384.713295][T11858]  ? filemap_get_entry+0x22d/0x450
[  384.713346][T11858]  ? srso_alias_return_thunk+0x5/0xfbef5
[  384.713405][T11858]  folio_alloc_noprof+0x22/0x250
[  384.713452][T11858]  filemap_alloc_folio_noprof.part.0+0x3db/0x440
[  384.713521][T11858]  ? srso_alias_return_thunk+0x5/0xfbef5
[  384.713577][T11858]  ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10
[  384.713662][T11858]  __filemap_get_folio_mpol+0x64e/0x1230
[  384.713730][T11858]  ioctx_alloc+0x7e1/0x21d0
[  384.713791][T11858]  ? srso_alias_return_thunk+0x5/0xfbef5
[  384.713852][T11858]  ? __pfx_ioctx_alloc+0x10/0x10
[  384.713902][T11858]  ? srso_alias_return_thunk+0x5/0xfbef5
[  384.713969][T11858]  __x64_sys_io_setup+0xc9/0x220
[  384.714027][T11858]  do_syscall_64+0x123/0x790
[  384.714088][T11858]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  384.714137][T11858] RIP: 0033:0x7f325e19fb19
[  384.714170][T11858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  384.714210][T11858] RSP: 002b:00007f325f00d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce
[  384.714250][T11858] RAX: ffffffffffffffda RBX: 00007f325e425fa0 RCX: 00007f325e19fb19
[  384.714279][T11858] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 000000000000239f
[  384.714307][T11858] RBP: 00007f325e237b70 R08: 0000000000000000 R09: 0000000000000000
[  384.714333][T11858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  384.714359][T11858] R13: 00007f325e426038 R14: 00007f325e425fa0 R15: 00007ffe728a1828
[  384.714413][T11858]  </TASK>
[  384.714769][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  384.729412][ T5755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  384.781328][T11859] loop3: detected capacity change from 0 to 1024
[  384.904192][T11859] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  385.205619][ T5641] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  385.486963][T11876] loop1: detected capacity change from 0 to 512
[  385.554576][T11876] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  385.554718][T11876] ext4 filesystem being mounted at /363/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  385.897180][ T5638] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.




	
		

	





	
		

	





	
		

	





	
		

	





	
		

	





	
		

	





	
		

	





	
		

	





	
		

	





	
		

	


	
		

		
	
		


	


	
			
	


				
		

		

	
		

	
		

		
	
	

	
		


	
			

		
			


	

			


				
			

		
		

	


	

		


		


		


		


		

				
		
	
[  387.491575][T11909] XFS (loop1): Quotacheck: Done.
[  387.570121][ T5017] usb 7-1: USB disconnect, device number 21

syzkaller
syzkaller login: [  387.601156][ T5796] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 1
[  387.601195][ T5796] [drm] Initialized udl on minor 1
[  387.675450][ T1174] net_ratelimit: 9 callbacks suppressed
[  387.675479][ T1174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  387.807376][ T5638] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  387.832082][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  387.846632][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  388.317850][ T5017] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  388.464711][ T5017] usb 3-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00
[  388.466060][ T5017] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  388.466125][ T5017] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  388.466183][ T5017] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  388.466228][ T5017] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  388.466300][ T5017] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  388.613646][ T5017] usb 3-1: config 0 descriptor??
[  388.838404][T11958] loop5: detected capacity change from 0 to 32768
[  388.840826][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  388.872164][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  388.872584][T11958] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  388.872644][T11958] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  388.879107][ T5755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  388.929846][T11958] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 1ms
[  388.933617][   T29] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  388.933679][   T29] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  388.955704][ T3383] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  389.035730][ T5017] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0
[  389.035774][ T5017] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0
[  389.035811][ T5017] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0
[  389.035848][ T5017] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0
[  389.037605][ T5017] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0
[  389.091120][ T5017] plantronics 0003:047F:FFFF.0022: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  389.209910][T11966] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  389.243211][ T5776] usb 3-1: USB disconnect, device number 21
[  389.310183][T11969] jffs2: notice: (11969) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[  389.375727][T11967] fido_id[11967]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  389.434994][   T29] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 501ms
[  389.435298][   T29] gfs2: fsid=syz:syz.0: jid=0: Done
[  389.435379][T11958] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  389.624081][T11975] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  389.763418][T11958] gfs2: fsid=syz:syz.0: found 1 quota changes
[  389.912668][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  390.106012][T11982] ALSA: mixer_oss: invalid OSS volume '7'
[  390.106041][T11982] ALSA: mixer_oss: invalid OSS volume '1'
[  390.596029][ T5017] Process accounting resumed
[  390.686722][T11986] Process accounting resumed
[  391.841410][T12012] loop5: detected capacity change from 0 to 16
[  391.855630][T12012] erofs (device loop5): invalid ishare xattr prefix id 0
[  391.969882][T12016] FAULT_INJECTION: forcing a failure.
[  391.969882][T12016] name failslab, interval 1, probability 0, space 0, times 0
[  391.969937][T12016] CPU: 0 UID: 0 PID: 12016 Comm: syz.1.2242 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  391.969995][T12016] Tainted: [L]=SOFTLOCKUP
[  391.970010][T12016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  391.970036][T12016] Call Trace:
[  391.970050][T12016]  <TASK>
[  391.970066][T12016]  dump_stack_lvl+0x100/0x190
[  391.970135][T12016]  should_fail_ex.cold+0x5/0xa
[  391.970196][T12016]  should_failslab+0xc2/0x120
[  391.970261][T12016]  kmem_cache_alloc_noprof+0x92/0x6a0
[  391.970314][T12016]  ? srso_alias_return_thunk+0x5/0xfbef5
[  391.970363][T12016]  ? radix_tree_node_alloc.constprop.0+0x81/0x360
[  391.970423][T12016]  radix_tree_node_alloc.constprop.0+0x81/0x360
[  391.970485][T12016]  idr_get_free+0x52e/0xa00
[  391.970558][T12016]  idr_alloc_u32+0x1ac/0x320
[  391.970625][T12016]  ? __pfx_idr_alloc_u32+0x10/0x10
[  391.970697][T12016]  ? srso_alias_return_thunk+0x5/0xfbef5
[  391.970747][T12016]  ? lock_acquire+0x1d1/0x380
[  391.970801][T12016]  ? __radix_tree_preload+0x7c/0x820
[  391.970860][T12016]  idr_alloc_cyclic+0x10b/0x230
[  391.970924][T12016]  ? __pfx_idr_alloc_cyclic+0x10/0x10
[  391.970977][T12016]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  391.971041][T12016]  ? srso_alias_return_thunk+0x5/0xfbef5
[  391.971102][T12016]  map_create+0x1698/0x3150
[  391.971173][T12016]  ? __pfx_map_create+0x10/0x10
[  391.971224][T12016]  ? srso_alias_return_thunk+0x5/0xfbef5
[  391.971274][T12016]  ? lock_acquire+0x1d1/0x380
[  391.971325][T12016]  ? __might_fault+0xc5/0x140
[  391.971394][T12016]  ? __might_fault+0xc5/0x140
[  391.971480][T12016]  __sys_bpf+0x14cb/0x4b60
[  391.971549][T12016]  ? __pfx___sys_bpf+0x10/0x10
[  391.971600][T12016]  ? find_held_lock+0x2b/0x80
[  391.971645][T12016]  ? futex_wake+0x4ea/0x5e0
[  391.971700][T12016]  ? srso_alias_return_thunk+0x5/0xfbef5
[  391.971753][T12016]  ? srso_alias_return_thunk+0x5/0xfbef5
[  391.971832][T12016]  ? srso_alias_return_thunk+0x5/0xfbef5
[  391.971882][T12016]  ? rcu_read_lock_any_held+0x6a/0x90
[  391.971926][T12016]  ? srso_alias_return_thunk+0x5/0xfbef5
[  391.971974][T12016]  ? find_held_lock+0x2b/0x80
[  391.972014][T12016]  ? ksys_write+0x190/0x250
[  391.972068][T12016]  ? ksys_write+0x190/0x250
[  391.972128][T12016]  ? srso_alias_return_thunk+0x5/0xfbef5
[  391.972201][T12016]  ? srso_alias_return_thunk+0x5/0xfbef5
[  391.972251][T12016]  ? srso_alias_return_thunk+0x5/0xfbef5
[  391.972300][T12016]  ? __x64_sys_futex+0x358/0x4d0
[  391.972345][T12016]  ? srso_alias_return_thunk+0x5/0xfbef5
[  391.972397][T12016]  ? srso_alias_return_thunk+0x5/0xfbef5
[  391.972445][T12016]  ? xfd_validate_state+0x129/0x190
[  391.972504][T12016]  ? __x64_sys_bpf+0xce/0x140
[  391.972558][T12016]  __x64_sys_bpf+0xce/0x140
[  391.972614][T12016]  ? do_syscall_64+0xae/0x790
[  391.972674][T12016]  do_syscall_64+0x123/0x790
[  391.972731][T12016]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  391.972771][T12016] RIP: 0033:0x7f15e4b9fb19
[  391.972804][T12016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  391.972844][T12016] RSP: 002b:00007f15e5a34028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  391.972884][T12016] RAX: ffffffffffffffda RBX: 00007f15e4e25fa0 RCX: 00007f15e4b9fb19
[  391.972912][T12016] RDX: 0000000000000050 RSI: 0000200000000c00 RDI: 0000000000000000
[  391.972938][T12016] RBP: 00007f15e4c37b70 R08: 0000000000000000 R09: 0000000000000000
[  391.972964][T12016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  391.972990][T12016] R13: 00007f15e4e26038 R14: 00007f15e4e25fa0 R15: 00007ffc09276f98
[  391.973045][T12016]  </TASK>
[  392.455013][T12022] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  392.648566][ T5796] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92
[  392.649073][ T5796] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[  392.670986][   T29] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  392.671678][   T29] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  392.672053][   T29] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[  392.672250][ T5796] usb 4-1: USB disconnect, device number 19
[  393.031982][    C0] net_ratelimit: 11 callbacks suppressed
[  393.032012][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  393.071759][T12024] loop1: detected capacity change from 0 to 32768
[  393.440853][ T1298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  393.512115][ T5776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  393.696401][T12050] loop3: detected capacity change from 0 to 512
[  393.964244][ T5796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  393.964506][ T5796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  394.069251][T12050] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  394.069393][T12050] ext4 filesystem being mounted at /399/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  394.073825][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  394.272157][T12056] FAULT_INJECTION: forcing a failure.
[  394.272157][T12056] name failslab, interval 1, probability 0, space 0, times 0
[  394.272213][T12056] CPU: 0 UID: 0 PID: 12056 Comm: syz.1.2259 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  394.272271][T12056] Tainted: [L]=SOFTLOCKUP
[  394.272286][T12056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  394.272311][T12056] Call Trace:
[  394.272325][T12056]  <TASK>
[  394.272342][T12056]  dump_stack_lvl+0x100/0x190
[  394.272413][T12056]  should_fail_ex.cold+0x5/0xa
[  394.272475][T12056]  should_failslab+0xc2/0x120
[  394.272540][T12056]  kmem_cache_alloc_lru_noprof+0x8e/0x6a0
[  394.272599][T12056]  ? __d_alloc+0x34/0xad0
[  394.272657][T12056]  __d_alloc+0x34/0xad0
[  394.272707][T12056]  d_alloc_pseudo+0x1c/0xc0
[  394.272766][T12056]  alloc_file_pseudo+0x118/0x290
[  394.272815][T12056]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  394.272863][T12056]  ? srso_alias_return_thunk+0x5/0xfbef5
[  394.272914][T12056]  ? mas_preallocate+0x528/0xee0
[  394.272988][T12056]  __shmem_file_setup+0x205/0x460
[  394.273042][T12056]  ? __pfx___shmem_file_setup+0x10/0x10
[  394.273095][T12056]  ? vm_area_alloc+0x1f/0x160
[  394.273156][T12056]  shmem_zero_setup+0x96/0x1b0
[  394.273222][T12056]  __mmap_region+0x2837/0x3940
[  394.273280][T12056]  ? tomoyo_check_open_permission+0x1a2/0x3c0
[  394.273342][T12056]  ? __pfx___mmap_region+0x10/0x10
[  394.273399][T12056]  ? find_held_lock+0x2b/0x80
[  394.273440][T12056]  ? ima_match_policy+0x8ca/0x2400
[  394.273507][T12056]  ? ima_match_policy+0x8ca/0x2400
[  394.273588][T12056]  ? srso_alias_return_thunk+0x5/0xfbef5
[  394.273637][T12056]  ? __lock_acquire+0x5c0/0x1f40
[  394.273707][T12056]  ? srso_alias_return_thunk+0x5/0xfbef5
[  394.273790][T12056]  ? srso_alias_return_thunk+0x5/0xfbef5
[  394.273839][T12056]  ? do_raw_spin_lock+0x128/0x260
[  394.273909][T12056]  ? srso_alias_return_thunk+0x5/0xfbef5
[  394.273958][T12056]  ? __lock_acquire+0x5c0/0x1f40
[  394.274037][T12056]  ? hrtimer_start_range_ns_common+0x778/0x16f0
[  394.274167][T12056]  ? srso_alias_return_thunk+0x5/0xfbef5
[  394.274219][T12056]  ? srso_alias_return_thunk+0x5/0xfbef5
[  394.274279][T12056]  mmap_region+0x3db/0x6d0
[  394.274330][T12056]  ? __pfx_mmap_region+0x10/0x10
[  394.274376][T12056]  ? srso_alias_return_thunk+0x5/0xfbef5
[  394.274427][T12056]  ? shmem_get_unmapped_area+0x141/0x960
[  394.274481][T12056]  ? srso_alias_return_thunk+0x5/0xfbef5
[  394.274531][T12056]  ? cap_mmap_addr+0x4b/0x120
[  394.274575][T12056]  ? srso_alias_return_thunk+0x5/0xfbef5
[  394.274625][T12056]  ? security_mmap_addr+0x71/0x1e0
[  394.274691][T12056]  ? srso_alias_return_thunk+0x5/0xfbef5
[  394.274741][T12056]  ? __get_unmapped_area+0x255/0x3e0
[  394.274803][T12056]  do_mmap+0x12c7/0x1c30
[  394.274864][T12056]  ? srso_alias_return_thunk+0x5/0xfbef5
[  394.274914][T12056]  ? lock_acquire+0x1d1/0x380
[  394.274967][T12056]  ? __pfx_do_mmap+0x10/0x10
[  394.275018][T12056]  ? srso_alias_return_thunk+0x5/0xfbef5
[  394.275074][T12056]  ? srso_alias_return_thunk+0x5/0xfbef5
[  394.275128][T12056]  ? srso_alias_return_thunk+0x5/0xfbef5
[  394.275182][T12056]  ? srso_alias_return_thunk+0x5/0xfbef5
[  394.275236][T12056]  ? __pfx_down_write_killable+0x10/0x10
[  394.275312][T12056]  vm_mmap_pgoff+0x283/0x490
[  394.275364][T12056]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  394.275409][T12056]  ? srso_alias_return_thunk+0x5/0xfbef5
[  394.275467][T12056]  ? __pfx_do_futex+0x10/0x10
[  394.275522][T12056]  ksys_mmap_pgoff+0xe4/0x610
[  394.275576][T12056]  ? __x64_sys_futex+0x358/0x4d0
[  394.275623][T12056]  ? __pfx_ksys_mmap_pgoff+0x10/0x10
[  394.275680][T12056]  ? srso_alias_return_thunk+0x5/0xfbef5
[  394.275730][T12056]  ? xfd_validate_state+0x129/0x190
[  394.275791][T12056]  __x64_sys_mmap+0x125/0x190
[  394.275850][T12056]  do_syscall_64+0x123/0x790
[  394.275911][T12056]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  394.275954][T12056] RIP: 0033:0x7f15e4b9fb19
[  394.275987][T12056] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  394.276028][T12056] RSP: 002b:00007f15e5a34028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  394.276068][T12056] RAX: ffffffffffffffda RBX: 00007f15e4e25fa0 RCX: 00007f15e4b9fb19
[  394.276097][T12056] RDX: 000000000300000b RSI: 0000000000200000 RDI: 0000200000000000
[  394.276125][T12056] RBP: 00007f15e4c37b70 R08: ffffffffffffffff R09: 000000004cec2000
[  394.276154][T12056] R10: 0000000000204031 R11: 0000000000000246 R12: 0000000000000000
[  394.276181][T12056] R13: 00007f15e4e26038 R14: 00007f15e4e25fa0 R15: 00007ffc09276f98
[  394.276236][T12056]  </TASK>
[  394.723381][ T1499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  394.911303][ T5641] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  395.033036][ T5796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  395.033179][ T5796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  395.051978][   T29] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  395.111969][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  395.211989][   T29] usb 6-1: Using ep0 maxpacket: 16
[  395.212757][   T29] usb 6-1: New USB device found: idVendor=057e, idProduct=2019, bcdDevice=0.00
[  395.217697][   T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  395.217751][   T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  395.217801][   T29] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  395.217900][   T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  395.231083][   T29] usb 6-1: config 0 descriptor??
[  395.573968][T12088] jffs2: notice: (12088) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[  395.673901][T12092] jffs2: warning: (12092) jffs2_sum_write_data: Summary too big (-4 data, -30 pad) in eraseblock at 00011000
[  395.736427][   T29] nintendo 0003:057E:2019.0023: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.5-1/input0
[  396.112344][   T29] nintendo 0003:057E:2019.0023: Failed to get joycon info; ret=-71
[  396.112387][   T29] nintendo 0003:057E:2019.0023: Failed to retrieve controller info; ret=-71
[  396.112422][   T29] nintendo 0003:057E:2019.0023: Failed to initialize controller; ret=-71
[  396.128778][   T29] nintendo 0003:057E:2019.0023: probe - fail = -71
[  396.129070][   T29] nintendo 0003:057E:2019.0023: probe with driver nintendo failed with error -71
[  396.134971][   T29] usb 6-1: USB disconnect, device number 26
[  396.225785][T12108] macvtap1: entered promiscuous mode
[  396.226016][T12108] macvtap1: entered allmulticast mode
[  396.226041][T12108] veth1_vlan: entered allmulticast mode
[  397.352014][ T5849] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  397.508012][ T5849] usb 1-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00
[  397.509757][ T5849] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  397.509820][ T5849] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  397.509868][ T5849] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64
[  397.509913][ T5849] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[  397.509980][ T5849] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  397.580757][T12123] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  397.580942][T12123] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  397.600701][ T5849] keyspan 1-1:1.0: Keyspan 2 port adapter converter detected
[  397.611754][ T5849] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 84
[  397.619888][ T5849] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 2
[  397.629944][ T5849] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  397.640508][ T5849] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 88
[  397.640608][ T5849] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 6
[  397.659474][ T5849] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  397.935762][ T5849] usb 1-1: USB disconnect, device number 20
[  397.971506][ T5849] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  398.013709][ T5849] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  398.018609][ T5849] keyspan 1-1:1.0: device disconnected
[  398.174481][T12138] FAULT_INJECTION: forcing a failure.
[  398.174481][T12138] name failslab, interval 1, probability 0, space 0, times 0
[  398.174536][T12138] CPU: 0 UID: 0 PID: 12138 Comm: syz.6.2291 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  398.174594][T12138] Tainted: [L]=SOFTLOCKUP
[  398.174609][T12138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  398.174634][T12138] Call Trace:
[  398.174653][T12138]  <TASK>
[  398.174669][T12138]  dump_stack_lvl+0x100/0x190
[  398.174739][T12138]  should_fail_ex.cold+0x5/0xa
[  398.174798][T12138]  should_failslab+0xc2/0x120
[  398.174862][T12138]  __kmalloc_cache_noprof+0x91/0x6d0
[  398.174908][T12138]  ? qrtr_tun_open+0x47/0x220
[  398.174955][T12138]  ? __pfx_qrtr_tun_open+0x10/0x10
[  398.175002][T12138]  qrtr_tun_open+0x47/0x220
[  398.175044][T12138]  ? __pfx_qrtr_tun_open+0x10/0x10
[  398.175088][T12138]  misc_open+0x26d/0x450
[  398.175133][T12138]  ? __pfx_misc_open+0x10/0x10
[  398.175177][T12138]  chrdev_open+0x234/0x6a0
[  398.175241][T12138]  ? __pfx_apparmor_file_open+0x10/0x10
[  398.175294][T12138]  ? __pfx_chrdev_open+0x10/0x10
[  398.175360][T12138]  ? srso_alias_return_thunk+0x5/0xfbef5
[  398.175411][T12138]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  398.175478][T12138]  do_dentry_open+0x674/0x1470
[  398.175536][T12138]  ? __pfx_chrdev_open+0x10/0x10
[  398.175601][T12138]  ? srso_alias_return_thunk+0x5/0xfbef5
[  398.175663][T12138]  vfs_open_consume+0xcc/0x460
[  398.175705][T12138]  ? srso_alias_return_thunk+0x5/0xfbef5
[  398.175761][T12138]  path_openat+0x1547/0x23f0
[  398.175810][T12138]  ? __pfx_path_openat+0x10/0x10
[  398.175863][T12138]  do_file_open+0x20e/0x430
[  398.175905][T12138]  ? __pfx_do_file_open+0x10/0x10
[  398.175979][T12138]  ? _raw_spin_unlock+0x28/0x50
[  398.176025][T12138]  ? srso_alias_return_thunk+0x5/0xfbef5
[  398.176073][T12138]  ? alloc_fd+0x471/0x7a0
[  398.176128][T12138]  do_sys_openat2+0x163/0x1d0
[  398.176172][T12138]  ? __pfx_do_sys_openat2+0x10/0x10
[  398.176217][T12138]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  398.176291][T12138]  __x64_sys_openat+0x12d/0x210
[  398.176336][T12138]  ? __pfx___x64_sys_openat+0x10/0x10
[  398.176391][T12138]  ? srso_alias_return_thunk+0x5/0xfbef5
[  398.176450][T12138]  do_syscall_64+0x123/0x790
[  398.176510][T12138]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  398.176552][T12138] RIP: 0033:0x7f8e06f9fb19
[  398.176584][T12138] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  398.176624][T12138] RSP: 002b:00007f8e07e6f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  398.176670][T12138] RAX: ffffffffffffffda RBX: 00007f8e07225fa0 RCX: 00007f8e06f9fb19
[  398.176698][T12138] RDX: 0000000000008800 RSI: 00002000000006c0 RDI: ffffffffffffff9c
[  398.176725][T12138] RBP: 00007f8e07037b70 R08: 0000000000000000 R09: 0000000000000000
[  398.176751][T12138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  398.176777][T12138] R13: 00007f8e07226038 R14: 00007f8e07225fa0 R15: 00007ffdd11eb528
[  398.176832][T12138]  </TASK>
[  398.233281][    C0] net_ratelimit: 12 callbacks suppressed
[  398.233309][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  398.278673][T12142] FAULT_INJECTION: forcing a failure.
[  398.278673][T12142] name failslab, interval 1, probability 0, space 0, times 0
[  398.278724][T12142] CPU: 1 UID: 0 PID: 12142 Comm: syz.3.2292 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  398.278779][T12142] Tainted: [L]=SOFTLOCKUP
[  398.278794][T12142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  398.278818][T12142] Call Trace:
[  398.278832][T12142]  <TASK>
[  398.278847][T12142]  dump_stack_lvl+0x100/0x190
[  398.278916][T12142]  should_fail_ex.cold+0x5/0xa
[  398.278976][T12142]  should_failslab+0xc2/0x120
[  398.279041][T12142]  __kvmalloc_node_noprof+0x113/0x9b0
[  398.279096][T12142]  ? lockdep_init_map_type+0x5c/0x250
[  398.279157][T12142]  ? v4l2_ctrl_handler_init_class+0x201/0x350
[  398.279235][T12142]  v4l2_ctrl_handler_init_class+0x201/0x350
[  398.279300][T12142]  ? mutex_init_lockdep+0xf1/0x120
[  398.279358][T12142]  vim2m_open+0x11c/0x870
[  398.279424][T12142]  v4l2_open+0x1d2/0x490
[  398.279464][T12142]  ? __pfx_v4l2_open+0x10/0x10
[  398.279503][T12142]  chrdev_open+0x234/0x6a0
[  398.279565][T12142]  ? __pfx_apparmor_file_open+0x10/0x10
[  398.279616][T12142]  ? __pfx_chrdev_open+0x10/0x10
[  398.279682][T12142]  ? srso_alias_return_thunk+0x5/0xfbef5
[  398.279731][T12142]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  398.279795][T12142]  do_dentry_open+0x674/0x1470
[  398.279852][T12142]  ? __pfx_chrdev_open+0x10/0x10
[  398.279915][T12142]  ? srso_alias_return_thunk+0x5/0xfbef5
[  398.279970][T12142]  vfs_open_consume+0xcc/0x460
[  398.280011][T12142]  ? srso_alias_return_thunk+0x5/0xfbef5
[  398.280067][T12142]  path_openat+0x1547/0x23f0
[  398.280114][T12142]  ? __pfx_path_openat+0x10/0x10
[  398.280171][T12142]  do_file_open+0x20e/0x430
[  398.280213][T12142]  ? __pfx_do_file_open+0x10/0x10
[  398.280289][T12142]  ? _raw_spin_unlock+0x28/0x50
[  398.280336][T12142]  ? srso_alias_return_thunk+0x5/0xfbef5
[  398.280384][T12142]  ? alloc_fd+0x471/0x7a0
[  398.280439][T12142]  do_sys_openat2+0x163/0x1d0
[  398.280487][T12142]  ? __pfx_do_sys_openat2+0x10/0x10
[  398.280535][T12142]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  398.280609][T12142]  __x64_sys_openat+0x12d/0x210
[  398.280654][T12142]  ? __pfx___x64_sys_openat+0x10/0x10
[  398.280708][T12142]  ? srso_alias_return_thunk+0x5/0xfbef5
[  398.280766][T12142]  do_syscall_64+0x123/0x790
[  398.280825][T12142]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  398.280866][T12142] RIP: 0033:0x7f027619fb19
[  398.280898][T12142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  398.280937][T12142] RSP: 002b:00007f0276fb5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  398.280975][T12142] RAX: ffffffffffffffda RBX: 00007f0276425fa0 RCX: 00007f027619fb19
[  398.281003][T12142] RDX: 0000000000000002 RSI: 0000200000000240 RDI: ffffffffffffff9c
[  398.281030][T12142] RBP: 00007f0276237b70 R08: 0000000000000000 R09: 0000000000000000
[  398.281056][T12142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  398.281081][T12142] R13: 00007f0276426038 R14: 00007f0276425fa0 R15: 00007fffadf2d268
[  398.281136][T12142]  </TASK>
[  398.323618][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  398.497263][T12145] netlink: 'syz.5.2297': attribute type 15 has an invalid length.
[  399.091163][T12157] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  399.271973][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  399.774464][T12170] device-mapper: ioctl: Invalid ioctl structure: uuid ÿÿÿÿ, name , dev 7000000000
[  399.795201][ T5755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  399.920743][T12150] loop6: detected capacity change from 0 to 131072
[  399.970658][T12150] F2FS-fs (loop6): invalid crc value
[  400.058969][T12150] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  400.075693][T12150] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4
[  400.153854][ T5849] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  400.249419][T12182] FAULT_INJECTION: forcing a failure.
[  400.249419][T12182] name failslab, interval 1, probability 0, space 0, times 0
[  400.249476][T12182] CPU: 1 UID: 0 PID: 12182 Comm: syz.3.2308 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  400.249537][T12182] Tainted: [L]=SOFTLOCKUP
[  400.249554][T12182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  400.249581][T12182] Call Trace:
[  400.249596][T12182]  <TASK>
[  400.249612][T12182]  dump_stack_lvl+0x100/0x190
[  400.249690][T12182]  should_fail_ex.cold+0x5/0xa
[  400.249753][T12182]  should_failslab+0xc2/0x120
[  400.249818][T12182]  kmem_cache_alloc_noprof+0x92/0x6a0
[  400.249871][T12182]  ? __pfx_map_id_range_down+0x10/0x10
[  400.249932][T12182]  ? trace_kmem_cache_alloc+0xdd/0x100
[  400.249995][T12182]  ? security_inode_alloc+0x3b/0x2c0
[  400.250058][T12182]  security_inode_alloc+0x3b/0x2c0
[  400.250112][T12182]  inode_init_always_gfp+0xc75/0xfb0
[  400.250163][T12182]  alloc_inode+0x8e/0x250
[  400.250218][T12182]  new_inode+0x22/0x1c0
[  400.250270][T12182]  ? srso_alias_return_thunk+0x5/0xfbef5
[  400.250328][T12182]  hugetlbfs_get_inode+0x339/0x740
[  400.250406][T12182]  hugetlb_file_setup+0x15b/0x5b0
[  400.250479][T12182]  ksys_mmap_pgoff+0x242/0x610
[  400.250539][T12182]  ? __pfx_ksys_mmap_pgoff+0x10/0x10
[  400.250592][T12182]  ? srso_alias_return_thunk+0x5/0xfbef5
[  400.250643][T12182]  ? xfd_validate_state+0x129/0x190
[  400.250710][T12182]  __x64_sys_mmap+0x125/0x190
[  400.250769][T12182]  do_syscall_64+0x123/0x790
[  400.250840][T12182]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  400.250884][T12182] RIP: 0033:0x7f027619fb19
[  400.250917][T12182] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  400.250959][T12182] RSP: 002b:00007f0276fb5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  400.251000][T12182] RAX: ffffffffffffffda RBX: 00007f0276425fa0 RCX: 00007f027619fb19
[  400.251031][T12182] RDX: 0000000002000009 RSI: 0000000000ff5000 RDI: 0000200000000000
[  400.251060][T12182] RBP: 00007f0276237b70 R08: ffffffffffffffff R09: 0000000000000000
[  400.251088][T12182] R10: 000200000005c832 R11: 0000000000000246 R12: 0000000000000000
[  400.251116][T12182] R13: 00007f0276426038 R14: 00007f0276425fa0 R15: 00007fffadf2d268
[  400.251172][T12182]  </TASK>
[  400.313977][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  400.376488][ T5849] kernel read not supported for file /audio1 (pid: 5849 comm: kworker/0:6)
[  400.856312][T12165] loop1: detected capacity change from 0 to 32768
[  400.879874][T12165] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2303 (12165)
[  400.880615][ T2062] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  400.885111][T12165] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  400.885159][T12165] BTRFS info (device loop1): using blake2b checksum algorithm
[  400.949230][T12192] macvtap1: entered promiscuous mode
[  400.949453][T12192] macvtap1: entered allmulticast mode
[  400.949481][T12192] veth1_vlan: entered allmulticast mode
[  401.040209][T12165] BTRFS info (device loop1): enabling ssd optimizations
[  401.040251][T12165] BTRFS info (device loop1): turning on async discard
[  401.040283][T12165] BTRFS info (device loop1): enabling free space tree
[  401.040314][T12165] BTRFS info (device loop1): use zstd compression, level 3
[  401.099694][   T30] audit: type=1800 audit(1793839471.613:453): pid=12165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2303" name="file1" dev="loop1" ino=260 res=0 errno=-22
[  401.352021][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  401.750683][ T5638] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  401.924045][ T5755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  401.942232][ T2062] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  402.122606][ T2062] usb 1-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40
[  402.123952][ T2062] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  402.123995][ T2062] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  402.124033][ T2062] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[  402.124098][ T2062] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  402.124149][ T2062] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  402.127406][ T2062] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  402.127447][ T2062] usb 1-1: Product: syz
[  402.127475][ T2062] usb 1-1: Manufacturer: syz
[  402.241699][ T2062] cdc_wdm 1-1:1.0: skipping garbage
[  402.241732][ T2062] cdc_wdm 1-1:1.0: skipping garbage
[  402.257601][ T2062] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[  402.257633][ T2062] cdc_wdm 1-1:1.0: Unknown control protocol
[  402.495279][    C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  402.495319][    C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  402.495548][    C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  402.495582][    C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  402.495812][    C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  402.495845][    C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  402.496081][    C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  402.496114][    C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  402.496350][    C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  402.496383][    C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  402.496686][    C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  402.496719][    C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  402.496973][    C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  402.497006][    C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  402.497224][    C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  402.497257][    C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  402.497479][    C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  402.497512][    C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  402.497754][    C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  402.497787][    C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  402.497907][ T5755] usb 1-1: USB disconnect, device number 21
[  402.499920][    C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  402.540051][T12241] macsec0: entered promiscuous mode
[  402.541634][T12241] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2329'.
[  402.542287][ T2062] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[  402.568837][T12241] veth1_macvtap: left promiscuous mode
[  402.599355][T12241] macsec0 (unregistering): left promiscuous mode
[  402.698365][ T2062] usb 6-1: New USB device found: idVendor=0525, idProduct=a4a8, bcdDevice=0.41
[  402.701168][ T2062] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  402.701213][ T2062] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  402.701257][ T2062] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  402.709999][ T2062] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  402.710041][ T2062] usb 6-1: Product: syz
[  402.710069][ T2062] usb 6-1: Manufacturer: syz
[  402.710097][ T2062] usb 6-1: SerialNumber: syz
[  402.879045][T12243] netlink: 'syz.3.2330': attribute type 12 has an invalid length.
[  402.879079][T12243] netlink: 'syz.3.2330': attribute type 29 has an invalid length.
[  402.879134][T12243] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2330'.
[  402.879171][T12243] netlink: 'syz.3.2330': attribute type 1 has an invalid length.
[  402.879196][T12243] netlink: 'syz.3.2330': attribute type 2 has an invalid length.
[  402.879220][T12243] netlink: 7 bytes leftover after parsing attributes in process `syz.3.2330'.
[  402.982203][ T2062] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 27 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  403.140734][T12250] device-mapper: ioctl: only supply one of name or uuid, cmd(9)
[  403.200111][ T2062] usb 6-1: USB disconnect, device number 27
[  403.220023][ T2062] usblp0: removed
[  403.431979][    C0] net_ratelimit: 5 callbacks suppressed
[  403.432009][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  403.632034][ T5796] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  403.793875][ T5796] usb 3-1: New USB device found: idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  403.796994][ T5796] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  403.805232][ T5796] usb 3-1: config 0 descriptor??
[  403.820769][ T5796] cp210x 3-1:0.0: cp210x converter detected
[  403.924249][T12256] loop6: detected capacity change from 0 to 32768
[  403.938532][T12256] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.2334 (12256)
[  403.959784][T12256] BTRFS info (device loop6): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  403.959832][T12256] BTRFS info (device loop6): using blake2b checksum algorithm
[  403.961474][ T5755] Process accounting resumed
[  403.993969][ T2062] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  404.087040][T12256] BTRFS info (device loop6): enabling ssd optimizations
[  404.087080][T12256] BTRFS info (device loop6): turning on async discard
[  404.087126][T12256] BTRFS info (device loop6): enabling free space tree
[  404.087164][T12256] BTRFS info (device loop6): use zstd compression, level 3
[  404.148524][T12266] Process accounting resumed
[  404.162753][   T30] audit: type=1800 audit(1793839474.683:454): pid=12256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2334" name="file1" dev="loop6" ino=260 res=0 errno=-22
[  404.471988][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  404.475000][ T5796] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -71
[  404.475070][ T5796] cp210x 3-1:0.0: GPIO initialisation failed: -71
[  404.497173][ T5796] usb 3-1: cp210x converter now attached to ttyUSB0
[  404.512734][ T5017] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  404.521609][ T5796] usb 3-1: USB disconnect, device number 22
[  404.541100][ T5796] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  404.546219][ T5796] cp210x 3-1:0.0: device disconnected
[  404.662904][ T5017] usb 1-1: Using ep0 maxpacket: 32
[  404.663645][ T5017] usb 1-1: New USB device found: idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  404.664967][ T5017] usb 1-1: config index 0 descriptor too short (expected 27632, got 27)
[  404.665008][ T5017] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  404.665059][ T5017] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92
[  404.665103][ T5017] usb 1-1: config 1 has no interface number 0
[  404.665165][ T5017] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  404.665215][ T5017] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  404.665282][ T5017] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  404.756954][ T5017] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found
[  404.790382][T12296] loop3: detected capacity change from 0 to 512
[  404.800987][T12296] EXT4-fs: Ignoring removed bh option
[  404.830901][T12296] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended
[  404.855568][ T6929] BTRFS info (device loop6): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  404.858310][T12296] EXT4-fs (loop3): 1 truncate cleaned up
[  404.885046][T12296] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  404.951277][ T5017] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached
[  405.042649][ T5796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  405.281356][ T5641] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  405.413121][T12312] FAULT_INJECTION: forcing a failure.
[  405.413121][T12312] name failslab, interval 1, probability 0, space 0, times 0
[  405.413175][T12312] CPU: 1 UID: 0 PID: 12312 Comm: syz.3.2351 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  405.413237][T12312] Tainted: [L]=SOFTLOCKUP
[  405.413252][T12312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  405.413277][T12312] Call Trace:
[  405.413291][T12312]  <TASK>
[  405.413306][T12312]  dump_stack_lvl+0x100/0x190
[  405.413379][T12312]  should_fail_ex.cold+0x5/0xa
[  405.413440][T12312]  should_failslab+0xc2/0x120
[  405.413503][T12312]  __kmalloc_noprof+0xfc/0x840
[  405.413556][T12312]  ? tomoyo_encode2+0xfb/0x3c0
[  405.413631][T12312]  tomoyo_encode2+0xfb/0x3c0
[  405.413707][T12312]  tomoyo_encode+0x29/0x50
[  405.413765][T12312]  tomoyo_realpath_from_path+0x18c/0x690
[  405.413844][T12312]  tomoyo_check_open_permission+0x2af/0x3c0
[  405.413905][T12312]  ? __pfx_tomoyo_check_open_permission+0x10/0x10
[  405.413980][T12312]  ? hook_file_open+0x245/0x8e0
[  405.414079][T12312]  ? srso_alias_return_thunk+0x5/0xfbef5
[  405.414139][T12312]  tomoyo_file_open+0x6b/0x90
[  405.414185][T12312]  security_file_open+0xb5/0x1e0
[  405.414247][T12312]  do_dentry_open+0x552/0x1470
[  405.414310][T12312]  ? srso_alias_return_thunk+0x5/0xfbef5
[  405.414368][T12312]  vfs_open_consume+0xcc/0x460
[  405.414408][T12312]  ? srso_alias_return_thunk+0x5/0xfbef5
[  405.414467][T12312]  path_openat+0x1547/0x23f0
[  405.414515][T12312]  ? __pfx_path_openat+0x10/0x10
[  405.414568][T12312]  do_file_open+0x20e/0x430
[  405.414611][T12312]  ? __pfx_do_file_open+0x10/0x10
[  405.414691][T12312]  ? _raw_spin_unlock+0x28/0x50
[  405.414738][T12312]  ? srso_alias_return_thunk+0x5/0xfbef5
[  405.414789][T12312]  ? alloc_fd+0x471/0x7a0
[  405.414843][T12312]  do_sys_openat2+0x163/0x1d0
[  405.414888][T12312]  ? __pfx_do_sys_openat2+0x10/0x10
[  405.414934][T12312]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  405.415006][T12312]  __x64_sys_openat+0x12d/0x210
[  405.415052][T12312]  ? __pfx___x64_sys_openat+0x10/0x10
[  405.415106][T12312]  ? srso_alias_return_thunk+0x5/0xfbef5
[  405.415166][T12312]  do_syscall_64+0x123/0x790
[  405.415225][T12312]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  405.415267][T12312] RIP: 0033:0x7f027619fb19
[  405.415300][T12312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  405.415340][T12312] RSP: 002b:00007f0276fb5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  405.415379][T12312] RAX: ffffffffffffffda RBX: 00007f0276425fa0 RCX: 00007f027619fb19
[  405.415410][T12312] RDX: 0000000000000000 RSI: 0000200000000940 RDI: ffffffffffffff9c
[  405.415438][T12312] RBP: 00007f0276237b70 R08: 0000000000000000 R09: 0000000000000000
[  405.415464][T12312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  405.415490][T12312] R13: 00007f0276426038 R14: 00007f0276425fa0 R15: 00007fffadf2d268
[  405.415544][T12312]  </TASK>
[  405.418014][ T5849] usb 1-1: USB disconnect, device number 22
[  405.490450][ T5849] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected
[  405.501986][T12312] ERROR: Out of memory at tomoyo_realpath_from_path.
[  405.512097][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  405.752160][ T5017] usb 7-1: new high-speed USB device number 22 using dummy_hcd
[  405.773428][T12316] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2352'.
[  405.795656][T12316] bond0: entered promiscuous mode
[  405.798709][T12316] gretap0: entered promiscuous mode
[  405.800675][T12316] debugfs: 'hsr0' already exists in 'hsr'
[  405.800701][T12316] Cannot create hsr debugfs directory
[  405.800803][T12316] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  405.800836][T12316] hsr0: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network
[  405.847183][T12316] hsr0: entered promiscuous mode
[  405.902004][ T5017] usb 7-1: Using ep0 maxpacket: 32
[  405.940702][ T5017] usb 7-1: unable to get BOS descriptor or descriptor too short
[  405.940762][ T5017] usb 7-1: New USB device found: idVendor=0000, idProduct=0000, bcdDevice=0.00
[  405.940815][ T5017] usb 7-1: no configurations
[  405.940838][ T5017] usb 7-1: can't read configurations, error -22
[  406.072794][ T2062] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  406.184455][ T5776] Process accounting resumed
[  406.233307][ T5776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  406.261754][T12331] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  406.313398][T12331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  406.313833][T12331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  406.331668][ T1298] wlan1: Trigger new scan to find an IBSS to join
[  406.414031][T12319] Process accounting resumed
[  406.872547][ T5849] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  407.043249][ T5849] usb 3-1: Using ep0 maxpacket: 8
[  407.047032][ T5849] usb 3-1: New USB device found: idVendor=056a, idProduct=0325, bcdDevice=0.00
[  407.050128][ T5849] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  407.050187][ T5849] usb 3-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  407.050238][ T5849] usb 3-1: config 0 interface 0 has no altsetting 0
[  407.050288][ T5849] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  407.095274][ T5849] usb 3-1: config 0 descriptor??
[  407.131610][T12348] loop6: detected capacity change from 0 to 2048
[  407.237480][T12348] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  407.237651][T12348] ext4 filesystem being mounted at /334/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  407.877971][ T5849] wacom 0003:056A:0325.0024: hidraw0: USB HID v0.00 Device [HID 056a:0325] on usb-dummy_hcd.2-1/input0
[  407.962965][ T6929] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  408.137913][ T5849] usb 3-1: USB disconnect, device number 23
[  408.172058][ T5776] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  408.257362][T12335] loop1: detected capacity change from 0 to 32768
[  408.321989][ T5776] usb 4-1: Using ep0 maxpacket: 8
[  408.322757][ T5776] usb 4-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  408.329162][ T5776] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  408.329252][ T5776] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  408.329296][ T5776] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  408.329344][ T5776] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  408.329391][ T5776] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  408.329459][ T5776] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  408.368010][T12335] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[  408.438193][T12335] JBD2: Ignoring recovery information on journal
[  408.451497][T12353] loop5: detected capacity change from 0 to 131072
[  408.456469][T12353] F2FS-fs (loop5): Wrong CP boundary, start(512) end(1536) blocks(0)
[  408.456508][T12353] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  408.459215][T12353] F2FS-fs (loop5): invalid crc value
[  408.546802][T12363] fido_id[12363]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  408.555457][T12353] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  408.576709][T12353] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  408.576753][T12353] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[  408.632156][    C0] net_ratelimit: 1029 callbacks suppressed
[  408.632193][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  408.708730][ T5776] usb 4-1: usb_control_msg returned -32
[  408.708795][ T5776] usbtmc 4-1:16.0: can't read capabilities
[  408.745115][T12335] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  408.768759][T12379] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2370'.
[  408.876811][T12381] loop6: detected capacity change from 0 to 512
[  408.897779][T12381] EXT4-fs (loop6): Test dummy encryption mode enabled
[  408.927489][T12381] EXT4-fs (loop6): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  409.024642][T12381] EXT4-fs error (device loop6): htree_dirblock_to_tree:1051: inode #2: comm syz.6.2372: Directory hole found for htree leaf block 0
[  409.039194][T12381] EXT4-fs (loop6): Remounting filesystem read-only
[  409.129085][ T6929] EXT4-fs (loop6): unmounting filesystem 00000005-0000-0000-0000-000000000000.
[  409.202684][ T5796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  409.202999][ T5796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  409.273629][ T5776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  409.359523][ T1174] wlan1: Trigger new scan to find an IBSS to join
[  409.402543][ T2062] usb 4-1: USB disconnect, device number 20
[  409.671964][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  410.067602][ T5638] ocfs2: Unmounting device (7,1) on (node local)
[  410.076873][ T5776] usb 7-1: new high-speed USB device number 24 using dummy_hcd
[  410.077327][ T1174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  410.242720][ T5776] usb 7-1: Using ep0 maxpacket: 16
[  410.245170][ T2062] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  410.245314][ T2062] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  410.267270][ T5776] usb 7-1: New USB device found: idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  410.282689][ T5776] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  410.282746][ T5776] usb 7-1: Product: syz
[  410.282774][ T5776] usb 7-1: Manufacturer: syz
[  410.282803][ T5776] usb 7-1: SerialNumber: syz
[  410.314589][ T5776] usb 7-1: config 0 descriptor??
[  410.326385][ T5776] ssu100 7-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  410.439574][T12413] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2382'.
[  410.439658][T12413] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2382'.
[  410.702329][ T5796] usb 4-1: new full-speed USB device number 21 using dummy_hcd
[  410.714875][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  410.879470][ T5796] usb 4-1: New USB device found: idVendor=056a, idProduct=0016, bcdDevice=0.00
[  410.880861][ T5796] usb 4-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  410.880917][ T5796] usb 4-1: config 0 interface 0 has no altsetting 0
[  410.880969][ T5796] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  410.924251][ T5796] usb 4-1: config 0 descriptor??
[  411.167598][T12414] loop3: detected capacity change from 0 to 256
[  411.243982][T12414] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  411.272401][ T2062] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  411.329185][ T5796] usbhid 4-1:0.0: can't add hid device: -71
[  411.329318][ T5796] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  411.349122][ T5776] ssu100 7-1:0.0: probe with driver ssu100 failed with error -71
[  411.366993][ T5776] usb 7-1: USB disconnect, device number 24
[  411.382869][ T5796] usb 4-1: USB disconnect, device number 21
[  411.409565][T12434] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2388'.
[  411.815121][T12443] hsr0: entered promiscuous mode
[  411.818549][T12443] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2390'.
[  411.838949][T12443] hsr_slave_0: left promiscuous mode
[  411.848514][T12443] hsr_slave_1: left promiscuous mode
[  411.868787][T12443] hsr0 (unregistering): left promiscuous mode
[  412.323708][ T1298] wlan1: Creating new IBSS network, BSSID d2:48:4b:04:97:48
[  412.869169][T12476] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2404'.
[  412.869219][T12476] netlink: 'syz.0.2404': attribute type 20 has an invalid length.
[  412.869245][T12476] netlink: 'syz.0.2404': attribute type 21 has an invalid length.
[  413.529636][T12472] loop5: detected capacity change from 0 to 32768
[  413.582955][ T5755] usb 1-1: new full-speed USB device number 23 using dummy_hcd
[  413.624814][T12472] JBD2: Ignoring recovery information on journal
[  413.632167][T12467] loop3: detected capacity change from 0 to 131072
[  413.656701][T12467] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0)
[  413.656742][T12467] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  413.660591][T12467] F2FS-fs (loop3): invalid crc value
[  413.763397][ T5755] usb 1-1: New USB device found: idVendor=0b48, idProduct=1003, bcdDevice=1.00
[  413.765024][ T5755] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  413.765509][ T5755] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  413.765554][ T5755] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  413.765622][ T5755] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  413.787830][T12467] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  413.797394][T12467] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  413.797430][T12467] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  413.828359][T12472] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  413.831979][    C0] net_ratelimit: 9 callbacks suppressed
[  413.832002][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  414.158685][ T5755] dvb_ttusb_budget: ttusb_init_controller: error
[  414.158709][ T5755] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  414.448059][ T5755] DVB: Unable to find symbol stv0299_attach()
[  414.554155][ T5796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  414.554305][ T5796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  414.647230][ T5642] ocfs2: Unmounting device (7,5) on (node local)
[  414.704031][ T5755] DVB: Unable to find symbol tda8083_attach()
[  414.704052][ T5755] dvb_ttusb_budget: no frontend driver found for device [0b48:1003]
[  414.710009][ T5755] usb 1-1: USB disconnect, device number 23
[  414.750432][T12506] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  414.750457][T12506] IPv6: NLM_F_CREATE should be set when creating new route
[  414.871977][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  414.961081][T12509] FAULT_INJECTION: forcing a failure.
[  414.961081][T12509] name failslab, interval 1, probability 0, space 0, times 0
[  414.961134][T12509] CPU: 0 UID: 0 PID: 12509 Comm: syz.3.2409 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  414.961193][T12509] Tainted: [L]=SOFTLOCKUP
[  414.961210][T12509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  414.961234][T12509] Call Trace:
[  414.961247][T12509]  <TASK>
[  414.961263][T12509]  dump_stack_lvl+0x100/0x190
[  414.961333][T12509]  should_fail_ex.cold+0x5/0xa
[  414.961393][T12509]  should_failslab+0xc2/0x120
[  414.961456][T12509]  __kmalloc_cache_node_noprof+0x94/0x710
[  414.961515][T12509]  ? __alloc_workqueue+0xeba/0x1900
[  414.961574][T12509]  ? init_rescuer+0x19f/0x550
[  414.961648][T12509]  init_rescuer+0x19f/0x550
[  414.961717][T12509]  ? __pfx_init_rescuer+0x10/0x10
[  414.961781][T12509]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  414.961850][T12509]  ? __alloc_workqueue+0xdea/0x1900
[  414.961906][T12509]  ? srso_alias_return_thunk+0x5/0xfbef5
[  414.961956][T12509]  ? kfree+0x22b/0x6d0
[  414.962003][T12509]  __alloc_workqueue+0xf81/0x1900
[  414.962081][T12509]  alloc_workqueue_noprof+0xc7/0x130
[  414.962147][T12509]  ? __pfx_alloc_workqueue_noprof+0x10/0x10
[  414.962225][T12509]  ? __pfx___debug_object_init+0x10/0x10
[  414.962285][T12509]  nci_register_device+0x21e/0xb80
[  414.962337][T12509]  ? __pfx_nci_register_device+0x10/0x10
[  414.962390][T12509]  ? srso_alias_return_thunk+0x5/0xfbef5
[  414.962439][T12509]  ? srso_alias_return_thunk+0x5/0xfbef5
[  414.962487][T12509]  ? lockdep_init_map_type+0x5c/0x250
[  414.962545][T12509]  ? srso_alias_return_thunk+0x5/0xfbef5
[  414.962600][T12509]  virtual_ncidev_open+0x141/0x220
[  414.962647][T12509]  ? __pfx_virtual_ncidev_open+0x10/0x10
[  414.962698][T12509]  misc_open+0x26d/0x450
[  414.962740][T12509]  ? __pfx_misc_open+0x10/0x10
[  414.962780][T12509]  chrdev_open+0x234/0x6a0
[  414.962843][T12509]  ? __pfx_apparmor_file_open+0x10/0x10
[  414.962896][T12509]  ? __pfx_chrdev_open+0x10/0x10
[  414.962962][T12509]  ? srso_alias_return_thunk+0x5/0xfbef5
[  414.963010][T12509]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  414.963076][T12509]  do_dentry_open+0x674/0x1470
[  414.963134][T12509]  ? __pfx_chrdev_open+0x10/0x10
[  414.963200][T12509]  ? srso_alias_return_thunk+0x5/0xfbef5
[  414.963257][T12509]  vfs_open_consume+0xcc/0x460
[  414.963298][T12509]  ? srso_alias_return_thunk+0x5/0xfbef5
[  414.963356][T12509]  path_openat+0x1547/0x23f0
[  414.963404][T12509]  ? __pfx_path_openat+0x10/0x10
[  414.963456][T12509]  do_file_open+0x20e/0x430
[  414.963498][T12509]  ? __pfx_do_file_open+0x10/0x10
[  414.963574][T12509]  ? _raw_spin_unlock+0x28/0x50
[  414.963620][T12509]  ? srso_alias_return_thunk+0x5/0xfbef5
[  414.963669][T12509]  ? alloc_fd+0x471/0x7a0
[  414.963730][T12509]  do_sys_openat2+0x163/0x1d0
[  414.963774][T12509]  ? __pfx_do_sys_openat2+0x10/0x10
[  414.963820][T12509]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  414.963894][T12509]  __x64_sys_openat+0x12d/0x210
[  414.963939][T12509]  ? __pfx___x64_sys_openat+0x10/0x10
[  414.963993][T12509]  ? srso_alias_return_thunk+0x5/0xfbef5
[  414.964051][T12509]  do_syscall_64+0x123/0x790
[  414.964111][T12509]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  414.964152][T12509] RIP: 0033:0x7f027619fb19
[  414.964184][T12509] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  414.964224][T12509] RSP: 002b:00007f0276fb5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  414.964263][T12509] RAX: ffffffffffffffda RBX: 00007f0276425fa0 RCX: 00007f027619fb19
[  414.964290][T12509] RDX: 0000000000000002 RSI: 000020000001a540 RDI: ffffffffffffff9c
[  414.964317][T12509] RBP: 00007f0276237b70 R08: 0000000000000000 R09: 0000000000000000
[  414.964344][T12509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  414.964370][T12509] R13: 00007f0276426038 R14: 00007f0276425fa0 R15: 00007fffadf2d268
[  414.964425][T12509]  </TASK>
[  414.990726][T12509] workqueue: Failed to allocate a rescuer for wq "nfc2_nci_cmd_wq"
[  415.198694][ T1298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  415.352250][ T5776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  415.472310][T12514] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.1432128317.4293920536), cmd(1)
[  415.479826][T12515] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  415.494657][T12513] FAULT_INJECTION: forcing a failure.
[  415.494657][T12513] name failslab, interval 1, probability 0, space 0, times 0
[  415.494712][T12513] CPU: 0 UID: 0 PID: 12513 Comm: syz.0.2416 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  415.494768][T12513] Tainted: [L]=SOFTLOCKUP
[  415.494782][T12513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  415.494807][T12513] Call Trace:
[  415.494820][T12513]  <TASK>
[  415.494836][T12513]  dump_stack_lvl+0x100/0x190
[  415.494904][T12513]  should_fail_ex.cold+0x5/0xa
[  415.494963][T12513]  should_failslab+0xc2/0x120
[  415.495025][T12513]  __kmalloc_cache_noprof+0x91/0x6d0
[  415.495070][T12513]  ? snd_card_file_add+0x52/0x320
[  415.495131][T12513]  snd_card_file_add+0x52/0x320
[  415.495189][T12513]  snd_pcm_oss_open+0x1a8/0x1400
[  415.495243][T12513]  ? kasan_quarantine_put+0x104/0x240
[  415.495296][T12513]  ? srso_alias_return_thunk+0x5/0xfbef5
[  415.495347][T12513]  ? srso_alias_return_thunk+0x5/0xfbef5
[  415.495396][T12513]  ? srso_alias_return_thunk+0x5/0xfbef5
[  415.495445][T12513]  ? find_held_lock+0x2b/0x80
[  415.495484][T12513]  ? tomoyo_check_open_permission+0x1db/0x3c0
[  415.495543][T12513]  ? srso_alias_return_thunk+0x5/0xfbef5
[  415.495593][T12513]  ? __pfx_snd_pcm_oss_open+0x10/0x10
[  415.495644][T12513]  ? srso_alias_return_thunk+0x5/0xfbef5
[  415.495697][T12513]  ? __lock_acquire+0x5c0/0x1f40
[  415.495756][T12513]  ? srso_alias_return_thunk+0x5/0xfbef5
[  415.495803][T12513]  ? __lock_acquire+0x5c0/0x1f40
[  415.495867][T12513]  ? srso_alias_return_thunk+0x5/0xfbef5
[  415.495916][T12513]  ? do_raw_spin_lock+0x128/0x260
[  415.495980][T12513]  ? soundcore_open+0x231/0x5a0
[  415.496021][T12513]  ? srso_alias_return_thunk+0x5/0xfbef5
[  415.496075][T12513]  ? __pfx_snd_pcm_oss_open+0x10/0x10
[  415.496129][T12513]  soundcore_open+0x2e3/0x5a0
[  415.496178][T12513]  ? __pfx_soundcore_open+0x10/0x10
[  415.496222][T12513]  chrdev_open+0x234/0x6a0
[  415.496284][T12513]  ? __pfx_apparmor_file_open+0x10/0x10
[  415.496335][T12513]  ? __pfx_chrdev_open+0x10/0x10
[  415.496406][T12513]  ? srso_alias_return_thunk+0x5/0xfbef5
[  415.496454][T12513]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  415.496516][T12513]  do_dentry_open+0x674/0x1470
[  415.496578][T12513]  ? __pfx_chrdev_open+0x10/0x10
[  415.496640][T12513]  ? srso_alias_return_thunk+0x5/0xfbef5
[  415.496700][T12513]  vfs_open_consume+0xcc/0x460
[  415.496740][T12513]  ? srso_alias_return_thunk+0x5/0xfbef5
[  415.496796][T12513]  path_openat+0x1547/0x23f0
[  415.496846][T12513]  ? __pfx_path_openat+0x10/0x10
[  415.496898][T12513]  do_file_open+0x20e/0x430
[  415.496940][T12513]  ? __pfx_do_file_open+0x10/0x10
[  415.497013][T12513]  ? _raw_spin_unlock+0x28/0x50
[  415.497057][T12513]  ? srso_alias_return_thunk+0x5/0xfbef5
[  415.497104][T12513]  ? alloc_fd+0x471/0x7a0
[  415.497157][T12513]  do_sys_openat2+0x163/0x1d0
[  415.497200][T12513]  ? __pfx_do_sys_openat2+0x10/0x10
[  415.497245][T12513]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  415.497316][T12513]  __x64_sys_openat+0x12d/0x210
[  415.497361][T12513]  ? __pfx___x64_sys_openat+0x10/0x10
[  415.497414][T12513]  ? srso_alias_return_thunk+0x5/0xfbef5
[  415.497471][T12513]  do_syscall_64+0x123/0x790
[  415.497530][T12513]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  415.497571][T12513] RIP: 0033:0x7f2b32b9fb19
[  415.497604][T12513] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  415.497644][T12513] RSP: 002b:00007f2b339a1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  415.497687][T12513] RAX: ffffffffffffffda RBX: 00007f2b32e25fa0 RCX: 00007f2b32b9fb19
[  415.497714][T12513] RDX: 0000000000000000 RSI: 0000200000000940 RDI: ffffffffffffff9c
[  415.497741][T12513] RBP: 00007f2b32c37b70 R08: 0000000000000000 R09: 0000000000000000
[  415.497767][T12513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  415.497793][T12513] R13: 00007f2b32e26038 R14: 00007f2b32e25fa0 R15: 00007ffe21b10098
[  415.497847][T12513]  </TASK>
[  415.605576][ T5755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  415.633674][ T2062] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  415.911975][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  416.422048][ T2062] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  416.422237][ T5755] usb 7-1: new high-speed USB device number 25 using dummy_hcd
[  416.583062][ T2062] usb 1-1: Using ep0 maxpacket: 8
[  416.583917][ T5755] usb 7-1: New USB device found: idVendor=091e, idProduct=0003, bcdDevice=0.01
[  416.585464][ T2062] usb 1-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  416.587525][ T5755] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  416.587592][ T5755] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  416.587692][ T5755] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  416.589078][ T2062] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  416.589143][ T2062] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  416.589185][ T2062] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  416.589231][ T2062] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  416.589276][ T2062] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  416.589341][ T2062] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  416.653430][ T5755] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  416.653478][ T5755] usb 7-1: Product: syz
[  416.653507][ T5755] usb 7-1: Manufacturer: syz
[  416.738138][T12532] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  416.740816][ T5755] garmin_gps 7-1:1.0: Garmin GPS usb/tty converter detected
[  416.763306][ T5755] usb 7-1: Garmin GPS usb/tty converter now attached to ttyUSB0
[  416.813898][T12546] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2428'.
[  417.082919][ T5766] usb 7-1: USB disconnect, device number 25
[  417.094375][ T5766] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0
[  417.095126][ T5766] garmin_gps 7-1:1.0: device disconnected
[  417.144004][ T5776] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  417.294813][ T5776] usb 3-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40
[  417.297387][ T5776] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  417.297429][ T5776] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  417.297465][ T5776] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  417.297529][ T5776] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  417.297579][ T5776] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  417.301803][ T5776] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  417.302715][ T5776] usb 3-1: Product: syz
[  417.302744][ T5776] usb 3-1: Manufacturer: syz
[  417.323658][ T5776] cdc_wdm 3-1:1.0: skipping garbage
[  417.323696][ T5776] cdc_wdm 3-1:1.0: skipping garbage
[  417.335840][ T5776] cdc_wdm 3-1:1.0: cdc-wdm1: USB WDM device
[  417.335871][ T5776] cdc_wdm 3-1:1.0: Unknown control protocol
[  417.527980][T12562] usbtmc 1-1:16.0: simple usb_control_msg returned 0
[  417.623311][ T5776] usb 3-1: USB disconnect, device number 24
[  417.744623][ T5766] usb 1-1: USB disconnect, device number 24
[  418.064402][T12568] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2449'.
[  418.372545][T12556] loop1: detected capacity change from 0 to 131072
[  418.398499][T12556] F2FS-fs (loop1): Wrong secs_per_zone / total_sections (512, 24)
[  418.398537][T12556] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[  418.398579][T12556] F2FS-fs (loop1): Test dummy encryption mode enabled
[  418.429100][T12556] F2FS-fs (loop1): invalid crc value
[  418.508569][T12556] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix.
[  418.508641][T12556] loop1: lost filesystem error report for type 5 error -117
[  418.525486][T12556] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  418.535016][T12556] F2FS-fs (loop1): f2fs_disable_checkpoint starts, unusable: 0
[  418.535053][T12556] F2FS-fs (loop1): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[  418.535098][T12556] F2FS-fs (loop1): Start checkpoint disabled!
[  418.557104][T12556] F2FS-fs (loop1): f2fs_disable_checkpoint finishes, err:0
[  418.583259][T12556] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0
[  418.583296][T12556] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  418.672113][T12556] fscrypt: AES-256-XTS using blk-crypto-fallback
[  419.033436][    C0] net_ratelimit: 10 callbacks suppressed
[  419.033466][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  419.055057][ T5755] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  419.180545][T12592] loop6: detected capacity change from 0 to 64
[  419.234829][ T5755] usb 3-1: Using ep0 maxpacket: 32
[  419.238728][ T5755] usb 3-1: New USB device found: idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  419.257409][ T5755] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  419.257455][ T5755] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  419.257500][ T5755] usb 3-1: config 0 interface 0 has no altsetting 0
[  419.285998][ T2062] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  419.286397][ T2062] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  419.291591][ T5755] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  419.291633][ T5755] usb 3-1: Product: syz
[  419.291662][ T5755] usb 3-1: Manufacturer: syz
[  419.291691][ T5755] usb 3-1: SerialNumber: syz
[  419.341453][ T5755] usb 3-1: config 0 descriptor??
[  419.361544][T12594] loop3: detected capacity change from 0 to 1024
[  419.513786][T12592] 
[  419.516148][T12592] ======================================================
[  419.523166][T12592] WARNING: possible circular locking dependency detected
[  419.530191][T12592] syzkaller #0 Tainted: G             L     
[  419.536178][T12592] ------------------------------------------------------
[  419.543224][T12592] syz.6.2447/12592 is trying to acquire lock:
[  419.549293][T12592] ffff888041c380a8 (&tree->tree_lock#2/1){+.+.}-{4:4}, at: hfs_find_init+0x273/0x330
[  419.558876][T12592] 
[  419.558876][T12592] but task is already holding lock:
[  419.566242][T12592] ffff888054635ca0 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}, at: hfs_extend_file+0xa6/0xd30
[  419.577086][T12592] 
[  419.577086][T12592] which lock already depends on the new lock.
[  419.577086][T12592] 
[  419.587484][T12592] 
[  419.587484][T12592] the existing dependency chain (in reverse order) is:
[  419.596497][T12592] 
[  419.596497][T12592] -> #1 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}:
[  419.605734][T12592]        lock_acquire+0x1d1/0x380
[  419.610793][T12592]        __mutex_lock+0x19f/0x1c10
[  419.615944][T12592]        hfs_extend_file+0xa6/0xd30
[  419.621163][T12592]        hfs_bmap_reserve+0x2a9/0x3a0
[  419.626578][T12592]        __hfs_ext_write_extent+0x4b2/0x610
[  419.632493][T12592]        hfs_ext_read_extent+0x80b/0x9e0
[  419.638147][T12592]        hfs_extend_file+0x4ff/0xd30
[  419.643454][T12592]        hfs_get_block+0x17f/0x840
[  419.648586][T12592]        __block_write_begin_int+0x57a/0x19c0
[  419.654673][T12592]        block_write_begin+0x9d/0x1d0
[  419.660066][T12592]        cont_write_begin+0x573/0xa10
[  419.665451][T12592]        hfs_write_begin+0x143/0x260
[  419.670752][T12592]        generic_perform_write+0x292/0xa40
[  419.676575][T12592]        __generic_file_write_iter+0x1f7/0x240
[  419.682757][T12592]        generic_file_write_iter+0xe1/0x390
[  419.688677][T12592]        vfs_write+0x6af/0x1050
[  419.693561][T12592]        ksys_write+0x12a/0x250
[  419.698437][T12592]        do_syscall_64+0x123/0x790
[  419.703577][T12592]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  419.710007][T12592] 
[  419.710007][T12592] -> #0 (&tree->tree_lock#2/1){+.+.}-{4:4}:
[  419.718140][T12592]        check_prev_add+0xeb/0xe60
[  419.723275][T12592]        __lock_acquire+0x1528/0x1f40
[  419.728672][T12592]        lock_acquire+0x1d1/0x380
[  419.733725][T12592]        __mutex_lock+0x19f/0x1c10
[  419.738864][T12592]        hfs_find_init+0x273/0x330
[  419.744003][T12592]        hfs_ext_read_extent+0x1a3/0x9e0
[  419.749647][T12592]        hfs_extend_file+0x4ff/0xd30
[  419.754951][T12592]        hfs_bmap_reserve+0x2a9/0x3a0
[  419.760357][T12592]        hfs_cat_create+0x34e/0x9a0
[  419.765567][T12592]        hfs_mkdir+0x7a/0x100
[  419.770252][T12592]        vfs_mkdir+0x36d/0x8a0
[  419.775042][T12592]        filename_mkdirat+0x4c4/0x630
[  419.780431][T12592]        __x64_sys_mkdirat+0x89/0xc0
[  419.785736][T12592]        do_syscall_64+0x123/0x790
[  419.790878][T12592]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  419.797305][T12592] 
[  419.797305][T12592] other info that might help us debug this:
[  419.797305][T12592] 
[  419.807528][T12592]  Possible unsafe locking scenario:
[  419.807528][T12592] 
[  419.814972][T12592]        CPU0                    CPU1
[  419.820330][T12592]        ----                    ----
[  419.825703][T12592]   lock(&HFS_I(tree->inode)->extents_lock);
[  419.831702][T12592]                                lock(&tree->tree_lock#2/1);
[  419.839107][T12592]                                lock(&HFS_I(tree->inode)->extents_lock);
[  419.847624][T12592]   lock(&tree->tree_lock#2/1);
[  419.852541][T12592] 
[  419.852541][T12592]  *** DEADLOCK ***
[  419.852541][T12592] 
[  419.860691][T12592] locks held by syz.6.2447/12592: 4, last CPU#0:
[  419.867024][T12592]  #0: ffff888044fac478 (sb_writers#37){.+.+}-{0:0}, at: filename_create+0x10d/0x400
[  419.876602][T12592]  #1: ffff888054635880 (&type->i_mutex_dir_key#25/1){+.+.}-{4:4}, at: filename_create+0x1c0/0x400
[  419.887402][T12592]  #2: ffff888041d480a8 (&tree->tree_lock#2){+.+.}-{4:4}, at: hfs_find_init+0x2b0/0x330
[  419.897225][T12592]  #3: ffff888054635ca0 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}, at: hfs_extend_file+0xa6/0xd30
[  419.908415][T12592] 
[  419.908415][T12592] stack backtrace:
[  419.914306][T12592] CPU: 0 UID: 0 PID: 12592 Comm: syz.6.2447 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  419.925266][T12592] Tainted: [L]=SOFTLOCKUP
[  419.929586][T12592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  419.939645][T12592] Call Trace:
[  419.942928][T12592]  <TASK>
[  419.945859][T12592]  dump_stack_lvl+0x100/0x190
[  419.950571][T12592]  print_circular_bug.cold+0x178/0x1be
[  419.956074][T12592]  check_noncircular+0x146/0x160
[  419.961038][T12592]  ? find_held_lock+0x2b/0x80
[  419.965734][T12592]  check_prev_add+0xeb/0xe60
[  419.970348][T12592]  ? stack_depot_save_flags+0x49a/0xa10
[  419.975920][T12592]  __lock_acquire+0x1528/0x1f40
[  419.980799][T12592]  ? hfs_cat_create+0x34e/0x9a0
[  419.985655][T12592]  ? hfs_mkdir+0x7a/0x100
[  419.990005][T12592]  lock_acquire+0x1d1/0x380
[  419.994534][T12592]  ? hfs_find_init+0x273/0x330
[  419.999328][T12592]  ? __pfx___might_resched+0x10/0x10
[  420.004638][T12592]  __mutex_lock+0x19f/0x1c10
[  420.009264][T12592]  ? hfs_find_init+0x273/0x330
[  420.014056][T12592]  ? hfs_find_init+0x273/0x330
[  420.018853][T12592]  ? __pfx___mutex_lock+0x10/0x10
[  420.023914][T12592]  ? rcu_is_watching+0x13/0xc0
[  420.028702][T12592]  ? srso_alias_return_thunk+0x5/0xfbef5
[  420.034359][T12592]  ? __kmalloc_noprof+0x350/0x840
[  420.039409][T12592]  ? hfs_find_init+0xb3/0x330
[  420.044118][T12592]  ? hfs_find_init+0x273/0x330
[  420.048910][T12592]  ? srso_alias_return_thunk+0x5/0xfbef5
[  420.054829][T12592]  hfs_find_init+0x273/0x330
[  420.059453][T12592]  hfs_ext_read_extent+0x1a3/0x9e0
[  420.064580][T12592]  ? rcu_is_watching+0x13/0xc0
[  420.069360][T12592]  ? __pfx_hfs_ext_read_extent+0x10/0x10
[  420.075020][T12592]  hfs_extend_file+0x4ff/0xd30
[  420.079800][T12592]  ? __pfx_hfs_extend_file+0x10/0x10
[  420.085101][T12592]  ? srso_alias_return_thunk+0x5/0xfbef5
[  420.090756][T12592]  ? __kmalloc_noprof+0x350/0x840
[  420.095809][T12592]  hfs_bmap_reserve+0x2a9/0x3a0
[  420.100704][T12592]  ? srso_alias_return_thunk+0x5/0xfbef5
[  420.106363][T12592]  hfs_cat_create+0x34e/0x9a0
[  420.111056][T12592]  ? __pfx_hfs_cat_create+0x10/0x10
[  420.116299][T12592]  ? preempt_schedule+0x57/0xd0
[  420.121265][T12592]  ? srso_alias_return_thunk+0x5/0xfbef5
[  420.126919][T12592]  ? preempt_schedule_thunk+0x16/0x40
[  420.132351][T12592]  ? srso_alias_return_thunk+0x5/0xfbef5
[  420.138012][T12592]  ? hfs_new_inode+0x438/0xe10
[  420.142799][T12592]  hfs_mkdir+0x7a/0x100
[  420.146964][T12592]  vfs_mkdir+0x36d/0x8a0
[  420.151237][T12592]  filename_mkdirat+0x4c4/0x630
[  420.156102][T12592]  ? __pfx_filename_mkdirat+0x10/0x10
[  420.161490][T12592]  ? strncpy_from_user+0x19d/0x2d0
[  420.166617][T12592]  ? srso_alias_return_thunk+0x5/0xfbef5
[  420.172280][T12592]  ? do_getname+0x191/0x390
[  420.176811][T12592]  __x64_sys_mkdirat+0x89/0xc0
[  420.181590][T12592]  do_syscall_64+0x123/0x790
[  420.186212][T12592]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  420.192119][T12592] RIP: 0033:0x7f8e06f9fb19
[  420.196541][T12592] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  420.216164][T12592] RSP: 002b:00007f8e07e6f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  420.224591][T12592] RAX: ffffffffffffffda RBX: 00007f8e07225fa0 RCX: 00007f8e06f9fb19
[  420.232571][T12592] RDX: 00000000000001ff RSI: 0000200000000500 RDI: ffffffffffffff9c
[  420.240549][T12592] RBP: 00007f8e07037b70 R08: 0000000000000000 R09: 0000000000000000
[  420.248552][T12592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  420.256528][T12592] R13: 00007f8e07226038 R14: 00007f8e07225fa0 R15: 00007ffdd11eb528
[  420.264521][T12592]  </TASK>
[  420.268700][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  420.329472][ T1174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  420.376961][T12600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  420.377114][T12600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  420.377448][T12600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  420.378316][T12599] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  420.378444][T12599] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  420.490658][   T30] audit: type=1800 audit(1793839490.983:455): pid=12594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2446" name="file1" dev="loop3" ino=20 res=0 errno=-22
[  420.666168][ T5755] gs_usb 3-1:0.0: Configuring for 1 interfaces
[  421.276019][ T5755] usb 3-1: USB disconnect, device number 25
[  424.391970][    C0] net_ratelimit: 13 callbacks suppressed
[  424.392010][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  424.474246][ T5017] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  424.632372][ T5755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  424.632555][ T5755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  425.353765][ T1499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  425.431929][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  425.672226][ T5755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  425.672418][ T5755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  426.072472][ T5766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  426.471971][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog