last executing test programs:

3m57.057101221s ago: executing program 32 (id=578):
r0 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x268})
munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
read(r0, 0x0, 0x0)
ioctl$UFFDIO_MOVE(r0, 0xc028aa05, &(0x7f0000000000)={&(0x7f00001cc000/0x2000)=nil, &(0x7f0000c34000/0x3000)=nil, 0x2000, 0x1})

3m45.827325664s ago: executing program 33 (id=791):
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f00000005c0), 0x10)
recvmmsg(r0, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x4251}, {{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0x1000}], 0x1}, 0x8000}], 0x3fffffffffffdfc, 0x10002, 0x0)
sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0)

3m14.736507503s ago: executing program 6 (id=963):
r0 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x2327, @empty}}, 0x24)
listen(r0, 0x5)
sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "02"}, {0x10, 0x110, 0xe}], 0x28}, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0xd)
sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)

3m14.475145455s ago: executing program 6 (id=964):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000280)={0x13, 0x1, 0x4})
getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000100))
ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000040)={0xa980000000000000, 0x40000, 0x8, 0x5, 0x12})

3m14.250860849s ago: executing program 6 (id=968):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000780)={0xfc78, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x1, 0x1, 0x1}, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000007c0)={0x34, &(0x7f0000000580)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$EVIOCGMASK(r1, 0x5b03, 0x0)

3m12.019181661s ago: executing program 6 (id=986):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x70)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010102}]}, &(0x7f0000000000)=0x10)
move_mount(r0, 0x0, 0xffffffffffffff9c, 0x0, 0x267)

3m11.094952112s ago: executing program 6 (id=991):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000100)='./sys\x00', 0x4000, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"/2303], 0xff, 0x5f30, &(0x7f0000009000)="$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")
write$UHID_INPUT(r0, &(0x7f0000002080)={0x8, {"7f9654d636ab18b7938a2804505c72e9994ca22404fc20776fd12d13f9602b2980f983c31a5d1e431db778099ce3af3fb20e1ee1f4fdb77cbb36154982a93c19825d6fd273ab1eb5bcd47adad50de8a6791486e482e29ecc94284921f33b941cfc1000c9828c5ec7a2c77b4e624a5aa0e9e39782bad733eda81ba47e1c6116e4170e6587dd6210a57abe91f1f80c4e31139d8b73fe35ac1f99ea82dd6aa9c9aa67de88ae3e141020e1a876bbc449d2d843aa7e6d90b948b7e28770e6ac71010c63f17e90fd20806a9f8d9f418ee3af74aac64b04a27c4f5e3626ca2da546c79d24acadd11e8d272a22fc54078fd5e64475993668980a9f95aff964dee674356af492b8377a759d8ccf1a0600a18ef7ad16f438dde69cd020d71552b0810688c882a26a22b23f4b35471b08b379193db1cd7934a4049ff1b00d9795cda6e73951641d5e2365c24facd5afd09ed1d096d758b4fef66fe1aa22395d67b7e1db623d4a60a7dc93893d6c4a91df79535a855868c5dc0033d5c428cd25b85c5deb6e81068553bc84cead4d1eba8aa57e2b354a6899e44acbd3834491219b3e231cd55d82f161774a689efe197cc193ac0124c67738a0a1d5f16a6768c2c2ba7386c8c95ca08c55117f344f5a2bca0d09e79ea3fc49491f2c7adc513c2779c1bf62b1a8643d23e9e8b2ae41d4a59f1b82b82e092b36eb851b8456da871b4057aec325a9d4cccafde61f2abc85e3cabeabb856f6ffbfe23d69219ec8fae6beb54abe7870dbae823d49806a967a1c7f252999804f106745f20490bb3347b59321dc69765567abcbd89de04d89622170005df5871ed0fb72345a11da074060d7d4ee2e437f71a45723fb6b02de56067e54f54c52d10f7874a13cbfb3bd65ce54f9d6719ea210e0cf79e4e2157736ec07ac5915682ab81bced665c1e72fab8d8cfe509de0f21fe374b957b379fd5918061e21c2e96985cc1354b2de859b0f1a463ab04683b1253eda481c2353b5c208aca652f5419ffc4949a7fa909b95653f42d97390c400b4a1c308b11e73e9a06d3b164d3361e75584d70e6bc61d570a7e0c7da330f643194c1893fcd6489fac605eead61b53dff18caf526ecccc9bbd9146bc3c3bb67677695f6fddaab081786e9084014e60f5c03ae5a9087726b05e17402cd2fbb80d773b8a41470b1f901a8c2b2d57450181f4fc5bc53c7cb3dc032b84567492607cb08832eca9f79da9210d197863e5db5a74a9823dc0cc8bd9f3a9b6ff5a7d15d4747a9b26e088f4fad96d81cd1214226b1c4585d418d593220fcbb9ad949266cc48163e3498b46ebcdf7b2b5ecfe67539a61ed9e39b02d5b35ac0d0e7fa830034ca2da8a7ddf04bcf2cee939994369feb77023e0e3de04b21db7a640a92c17748245005cd75a7deba4ff0e4c104a9db2d9a98ec8edb3562050a3bac5f322290e3d8b6fb21770ac436d4cb12b97fc8f76d7bb9eeed85663eb0626f1ad1719ee4b07f7de2c1d1a31c27c6879f4fa3dbdfb2bfc0898beabafbeca9f13050e6b2f6c432e423cd5cb6b8fa56fe32c3e50104e44462c0a5c69de6a7ac5ae3d9f07ceed64dbffa42e4663838bfcde92f0fcb895f3b93c59b0e48c09890dfc36436db56b708f6e7cbbd2a6305f573cee099dbcd263cb96d9fb69cbc3cb06d8f5e3789698a17e71d22b4665ff5447fcc17a31bb136c8bb4b984573bcaf1cb650198c1266e6ddfd42d44f9de02cb9d915c5334c550fac3fcee56790aeb09d81e7690a32d8b0cc477b23f15257820de227be1ffaec2f63f3266b8f5dd78947dcee355fe59bfb100e5244425532bb1d115acd211b8c16b0ec0aae00fca5d4511a05c3ff027a1cac56210a10d81c01b90e156cc7b33de0fac825dc516d398166096013e068db935483c93ba95da39b5ae4087d84479a4c4809f28f93790dc279637bd6f3dc441d315cf6bd7b0e3d92070a45baf4445ce063fd12690eb002f5ca068a256bc54100c99a02a346beca39072163c4b297d117f1ed9fef42e3dbc11d36a0a0db52e84461c6fbb4aad62cd6c8dc9ae6a3390a5e8773ac599e67436220c8d541a9039762bffaa7f490e31dddbc362fb4ff686cda905f3b02a1db76d4d570d970434921ca8a4765af6d5c8b881e1f4ffa7e2d9ef5f5511b94f88474674ec790bb5186c73446a227bf1ffd19b605733abd1bd41e421aeaf2ed4617088c7ceef85451225056435993e89e4bccd2c2e4b39af99feef11fea645eeb5cf9f77b1e19a72d3efb613100969b84302789714bca65bcbc96762b4012a5700c62aed706433b9f142b7302442b6a9958b0e28e8b1cfa9eeb4ac0d71f497b23babf9f0221dcb658d9f4db5d45bee30d2ad7c97d6a562e014a7701c15325ec5d42ab732b37714a77a95c03fb15bbfba6fade32bf50f985a1df362ca7216cc152907dd931acb58a63920f581e82b590c0d6a0033009f8e50c3263d3f58596b63d507cadbc809a6690561f74d0772bf92d04e06c47a350724b106f5e83f7e71c4b2a983bf5ad7d8684e7b8b5dc1273d0fa5879b8e61bde33d602bc8ff0913b6d32dcac366d568dc7cf82bbfc405cbe418a2644c26592b32ca1a632fc95123efb784cfb6953a94ebeccd24fba389a0e56b043df07d9a2dd38a1196e5e55576b25f85cb96f6560802a4a58b7a6857e8454faa2c880bf32d464562b2bdc5f0df22b663f2c01fc944f1cfd1908f617f8295a5440bb79ae178ea46a95baeea48322105146ac3ed2de7d3796ddddcc848a8ecf4a00dd055733b4f59211f5a40deea44e74b3bc57953b26ed61e6fd67889edfe8d0902385e37666aacec072735630ecc441c3cc6b09bb2f63aa4e332c6df728dc74078a83ce20454dfd616d116270666ddc09c5fea2e8442bc43455d0257fac92f3780061178f9420bf8e463f29896c12383dbb9a81bc5c87376e647c8a7986cb514fb9696d9c0a8d303c5c4b5b7c5f601c01fa19323e02f675c371bc44fbc1ac5704d41a89a2a4ccec6ac8440c532f07da25aa2d4e6a5d2ebe694eb4017d178b221213bfe2a01d9cfe689bd190776bca6c032f446eb8862587a7826a35f3f691763212eee6af2e49bbeb0a27e07c5714b74e373798c7bebce265f7ebef3a1ea64078cf1e8a9d433af32c53090c9731fedbadafb50b9a6e540abd84f8e938583ea725954be3b236c5d8aca7d486d21902a2902f25a7c02dbe83c39bd0b81513f9ef198c49d560e930ae224ff47f92e4851e1f7ab5bb406abcf6596569261e6b0c67bb3b854e9c6de60bfb60fcf29241ff237151310ecd19f8b2cfe764c1df1a2de9d840eca47aa169ba9a415901204ec31ccdfd76e908029ae34fb12dc286758c64fd6d42bc82b14e07e421f4b42b180cd6ef40cac8062928b4a420a4577f24295f54de9048ac9d34307bf93e463cea4967cf4880166f68ed1eb965db2e4fb9f5f0b1c695d621e427ccb9a3188073ee6fde729c6698346efa1c0ba643c1efd20858965511da750060d551c44c435a5f1603fae7357e0bc78e92aad3d88790ec2aa1a42d6fe7e0ffc57f3599e406db63be7dd32692df32ce33dee0a2becdb02d6e435e09de3d356497543db23f53da25643f9c585e275297800d8beed47f0e622f86fc25d2e87036fdceebfe7257cb6de0c02412d1c0758acfcd0862e99ad17a118f46f635a87477e8b825423d94ada35bf0b5444aa7d3de4bb7eec7ae5129fcc2cba651cc972f5500fc5161149d29f452962afb102a01ae76825cb4477460be0b85d75058595c27e9b7fae3492ec3925c671bee5f4ca534d5a294f783d6cc073c992139b61d21fd98297b04c0578dafd5f7ebcaf8d4d9185aea3d76e813421f4573b38c25093c015a65e44fb297f0f6ac2d02c4237b37a3bfca2406c5c95ae5812816bacad59ba7c6f72d7c644ff25b592ed1e89b276e05866c01a4ced7fc6dd9f190c20d420d7c8a1fe908833a24c5e5bd7a95a2a6fbf147fc4b29a179718166dd0fbae2fc6b8c8aac6194fa6baf0d3edc36b2316c56c441ba53e3e7aaaf0a1405566ff584f73a637b74dde9bcb4d41da2be6c9df5d533fbac54f5fb52a8a793757cfe19aa90048c6d07e3474136ae1be2455b0d0d02eb4b5961ba883209355c0dd2af4aad98e7b971e358a7d9b55fe17cd6095f257355d9b99e5ea52848f17b35a80792d9ed0fef6fe3eef9a324902409969823be20bbe0e8dba9c747cd1a14d3642d877b86271f3f0c322a142c4ff635b37d542c3265b5fe8589a732bb1a55010b930dd0196cd43ac3634c01b4a44c517197d03a3d89c67f5c09aab409e84c0af466bfbd0c96d240101a2542c66b4b4b8ef65b41b0079995c52cc9720d2c1d7c128c6f17a65cc798c1986cfbd8888460c54438edc4f91f3580391c8b57d9aee209a59a116c1c44775437e9c30e6d87e82ce84e28532b19441e32ab9aea22177bac9daad25a6c88395e9348d6780de630cddb266c411011175bdb6255a36535180818447d43ffba3758d311539fe9f6811fa470bf3767b4c2d4cdf37854c7ee28730bb1d39d5c0dfffcdbf353cca3e13079f3ae66b839c7dd36914022a0e75bca5b622f521420b73249ef47f03c1fb03ecf7557882afcaa7cf454a68ad237d4ce860bd6b1531c1cafe2cfb76bc4188271ef6bdfb304ee0e6932463a1909f03d6e8a27b5f137d6b342841d613863dfdf37d5ec3a98d667810fb6f82d67620bdefed8b3ff98420a6c7ee577c3ba68b95a20403608a7ba6526ec9e8662c6e15ab09b1a9019d4958af04cb2e4890ee6b1077fcaa5cc0817f388461b230fe631e75f18ab392a5ca5de4a024ca16dd05fcfdf92114e43a5c4a169d462ff0dba57deeaf5eaafd892f8ccbd72ac56471162e1416bca39859b4184ba0d1b3f7ec05db4ef4cf0142867fa9be328a0be8ab74c716aad9411008607980861f4f72e9bfa60195e2f939d3f6a44a6cec07dd376d1bccaa126686f313d5f7918ecd1215026982c82ed1922ef70e36e8ed59b2d5ceab3b4aad7e53049062dd5ba0e87f7005c3f4d2b788245cdc2f35ef2572bea5ea92dfad406ade6d5ad18be8eeb4c652e5277b244645c68c0c0f5a68d42e00d59b75941917b2cdf31fdf809f2078ca97fd5beba65b34e0621138ea0e94feb87166b2dac2232ebca575e5c0a4d565d9992f733bbfbe68a63d99ee93398604065d5517c33ed0e067bdb643e73102f16137afd7d4bf21e8065ea028c392a6dcefbe642dc3fb03a239d9c8b17023eacc8e19fea11c34a10644af1b786fc0f4504038c2ee59c1b353f3d7b9313df025b4b5874ca63ec164a3fe35bf390d266f53dcda6a8e190e63a56ffdf4f7c5c02aa22d376db06d4d2b96be5b331f897d1ecfd25c13a1c194c265dd95a5724a6435bc8138224d9db28b689b9cea5132cd19601dbc4a43e70c71e27e8fd0689d09484974e8a4605f8553735fffaf5654a087e323ca14e02b681b9bbe592bd6b719ae2e86bdf918b27c79d52dd334d1aa7ebc1bff76e97572faad092010a1022f7d33089049107a89c364ae7dd022d119e8f6ab795fd71d76a90e8202339401ff9e9918ea8c8e12f7b0ba10d9ebde5d1bc5988f2d07b34579d8c282628204f2978d8b0cf95dc41f3775a4053f833267c64b42336d7c850f2918ef0dd6d62e43fcc173254eb34748efd4754609ce25afd648ee5a8fc5c64346603f8258592d67b9613e8f7ac0def0958f13436581d729e0b3e062738eb06b2116abe837529690a614fc5d3f53b4d4602e5706000", 0x1000}}, 0x1006)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:05.0/remove\x00', 0x1, 0x0)

3m10.153958755s ago: executing program 34 (id=1002):
munmap(&(0x7f0000001000/0x4000)=nil, 0x4000)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000001840), 0xffffffffffffffff)
socket(0x10, 0x803, 0x0)
syz_usb_connect(0x0, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e0100002b4101", @ANYRESHEX, @ANYRES64], 0x0)
socket$inet6(0xa, 0x1, 0x0)

3m10.14556693s ago: executing program 6 (id=1004):
r0 = socket(0xa, 0x3, 0xff)
setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000040)=0xfffffff9, 0x4)
syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000140)=0x6568, 0x4)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1)
recvmmsg(r0, &(0x7f0000003a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/26, 0x1a}, 0x3}], 0x1, 0x40010042, 0x0)

3m1.032272474s ago: executing program 7 (id=1072):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0x1, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008"], 0xa4}}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001a80100005800c"], 0x34}}, 0x0)

3m0.955791675s ago: executing program 7 (id=1073):
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x268})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x3})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
read(r0, &(0x7f0000000300)=""/172, 0xdc)
close(0x3)

3m0.316184496s ago: executing program 7 (id=1077):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000000140)='./file1\x00', 0x2800080, &(0x7f0000000280)=ANY=[@ANYBLOB='active_logs=4,jqfmt=vfsv0,prjjquota=f2fs\x00,mode=ad,norecovery,fsync_mode=posix,user_xattr,disable_roll_forward,\x00\x00\x00', @ANYRESOCT=0x0, @ANYRESOCT, @ANYBLOB="57763f8b80ccb54515aa467d89bbb893a63f49cae5772efb6bb2d1d03fd1742a12e8978807c6a53aae173e5c08461b1d2594eed5030000002e74086cd91724e5631fa9733e7a1e4017c3d4264edd910e", @ANYRESHEX], 0x1, 0x105ea, &(0x7f000000d000)="$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")
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./bus\x00', 0x24b837, 0x0, 0x3, 0x0, &(0x7f0000000240))
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r0, &(0x7f0000001fc0)=""/184, 0x20002078)

2m59.281705547s ago: executing program 35 (id=966):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000300)={<r3=>r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f00000000c0)={r3, @in={{0x2, 0x0, @empty}}}, 0x90)

2m58.503374047s ago: executing program 7 (id=1086):
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x2acd0da, 0x0)
unshare(0x26020400)
pivot_root(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000240)='./file0/../file0\x00')

2m56.663091851s ago: executing program 7 (id=1093):
openat(0xffffffffffffff9c, 0x0, 0x4242, 0x88)
syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000), 0xfd, 0x4cb, &(0x7f0000000180)="$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")
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000200)='.\x00', 0x8000, 0x50)
openat$rtc(0xffffff9c, 0x0, 0xa200, 0x0)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)

2m56.339112546s ago: executing program 7 (id=1096):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1a, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @tracing=0x17}, 0x94)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000022"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000023c0)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="201104060000000101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

2m55.873475109s ago: executing program 36 (id=1096):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1a, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @tracing=0x17}, 0x94)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000022"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000023c0)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="201104060000000101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

2m54.973637339s ago: executing program 37 (id=1004):
r0 = socket(0xa, 0x3, 0xff)
setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000040)=0xfffffff9, 0x4)
syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000140)=0x6568, 0x4)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1)
recvmmsg(r0, &(0x7f0000003a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/26, 0x1a}, 0x3}], 0x1, 0x40010042, 0x0)

2m53.754902965s ago: executing program 2 (id=1102):
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000180))
ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f000004c000/0x4000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x8, 0x0, 0x0, 0x1c3, 0x0, 0x0, 0x38, 0x16})

2m53.178887049s ago: executing program 2 (id=1103):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000140)=[@in={0x2, 0x4e23, @private=0xa010102}, @in6={0xa, 0x4e23, 0x400, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1ff}]}, &(0x7f0000000100)=0x10)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/net/sctp/assocs\x00', 0x0, 0x0)
read$FUSE(r1, &(0x7f0000002b40)={0x2020}, 0x2020)

2m52.166931337s ago: executing program 2 (id=1105):
r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x40, &(0x7f00000002c0)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c37693ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1213, &(0x7f0000000600)="$eJzs3E9rXFUYB+A3Y2rS1PxRa7Vd6AtuxMWlycKVIEFSkAwotRFaQbg1Ex0yzpTcITAiVldu/Ryu3Ql+g2z8DO6y6bIL8UrvNG1SU4vQZMQ+z2Luyz3nxzkHhoEz3HP33/3xq+2tqtgqh9GamorWrYi8m5HRigOvr4+v12+sr7bba1czr6xeW34nMxfe+PXTb2Yi4twnPy/8MhN7S5/t31n5fe/C3sX9P6992a2yW2V/MMwybw4Gw/JmbyE3u9V2kflRr1NWnez2q87OofZObr0dEaMs+5vzc7d2OlWVZX+U251RDgc53Bll+UXZ7WdRFDk/FzzWmSd32fjpbl3XEXV9Jp6Puq7rszEX5+KFmI+F+C4iXoyX4uU4H6/EhXg1XouLTa/TmD4AAAAAAAAAAAAAAAAAAAA8O/7p/P9iLDn/DwAAAAAAAAAAAAAAAAAAAKfg4+s31lfb7bWrmbMRvR92N3Y3xtdx+9K9j1504nIsxh/RnP4fG9dXPmivXc7GUnzfu30/f3t347kmv3qQX25eJ3A/P920HeSXx/k8mp+JuXv5reg2+ZVYjPPHj79ybH423nrzUL6Ixfjt8xhELzabsR/mv13OfP/D9iP5S00/AAAA+D8o8oFj9+9F8bj2cf7B/vrJ/w88sr+ejkvTk107EdXo6+2y1evsNEXvoJj9252TK+IUx3q6RcSduilmjja1TmjQVkx8yYeKqf/GNBRPpzgbR+9M+peJ0/DwazDpmQAAAAAAAAAAAPBvnPBzhdNxzJNl701mqQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPzFDhwLAAAAAAjzt06jYwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCoAAP//qH3FUA==")
r1 = fsmount(r0, 0x1, 0x0)
fchdir(r1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)

2m51.510320227s ago: executing program 2 (id=1107):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0)
mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000500)='./file0/../file0/file0\x00', 0x0, 0x2127099, 0x0)
umount2(&(0x7f0000000180)='./file0/../file0/file0\x00', 0x0)

2m51.311001406s ago: executing program 2 (id=1108):
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
munlockall()
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)

2m49.058930796s ago: executing program 2 (id=1112):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000030000000400000008"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$packet(0x11, 0x3, 0x300)
unshare(0x20020600)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)
setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4)

2m48.720183943s ago: executing program 38 (id=1112):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000030000000400000008"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$packet(0x11, 0x3, 0x300)
unshare(0x20020600)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)
setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4)

2m36.618653693s ago: executing program 5 (id=1149):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002f40), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002280))
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000001c0)=0x200000000)
r1 = dup2(r0, r0)
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000040)=0x1)

2m36.358465551s ago: executing program 5 (id=1150):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0xaf0ab2db967f2751)
ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000000100)={{}, "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"})
mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x2, 0x0)
ioctl(r0, 0xc138fd03, &(0x7f0000001000)="04000000320000000000000038010000")
ioctl(r0, 0xc138fd01, &(0x7f0000002000)="0400000032000000000000006c01")

2m35.858566902s ago: executing program 5 (id=1152):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8082, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02})
readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/84, 0x54}], 0x1)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newlink={0x30, 0x10, 0x1, 0x70bd28, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_TXQLEN={0x8, 0xd, 0x1}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8040)

2m35.03001085s ago: executing program 5 (id=1154):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1404c, &(0x7f00000007c0)={[{@noload}, {@resgid}, {@inlinecrypt}, {@usrquota}, {@discard}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x7}}, {@test_dummy_encryption_v1}, {@oldalloc}]}, 0x5, 0x491, &(0x7f0000000300)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file1\x00', 0x8, 0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8})
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file4\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x4)

2m34.656226368s ago: executing program 5 (id=1156):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000535000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0xcd7, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x80008, 0xc1})
semtimedop(0x0, &(0x7f0000000000)=[{0x3, 0x4, 0x800}], 0x1, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

2m34.179157771s ago: executing program 5 (id=1157):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r1=>0x0})
connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000002301"], 0x48}}, 0x4008004)
sendmsg$can_bcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000220900"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x80}}, 0x0)
sendmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="0100000000000000feffffff00000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000003"], 0x48}}, 0x0)

2m33.419231479s ago: executing program 39 (id=1157):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r1=>0x0})
connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000002301"], 0x48}}, 0x4008004)
sendmsg$can_bcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000220900"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x80}}, 0x0)
sendmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="0100000000000000feffffff00000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000003"], 0x48}}, 0x0)

1m38.296275773s ago: executing program 8 (id=1454):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000880)=ANY=[], 0x2, 0x63e, &(0x7f0000000240)="$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")
write$UHID_INPUT(r0, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='127.0.0.1:/\x00', 0x1df)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0)

1m37.898272956s ago: executing program 8 (id=1460):
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000)
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x10004004, &(0x7f0000000140)={0xa, 0x4e1f, 0x765, @empty, 0x6}, 0x1c)
recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/130, 0x82}, 0x2}], 0x1, 0x40032060, 0x0)

1m37.703202903s ago: executing program 8 (id=1462):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000020605000400000000000000000000000500010006000000050005000200000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x48}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x4, 0x288, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1f0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@set1={{0x28}, {{0x0, 0x2, 0x1}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8)
sendmmsg$inet(r0, &(0x7f00000039c0)=[{{&(0x7f0000000300)={0x2, 0x4e20, @local}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000540)='q', 0x1}], 0x1}}], 0x1, 0xf0)

1m37.557245s ago: executing program 8 (id=1463):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x103090, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
mount$bind(&(0x7f0000001900)='.\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x2a05004, 0x0)
mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0)

1m37.389343472s ago: executing program 8 (id=1466):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0)
write(r0, &(0x7f0000000000)='6', 0x32)
fsopen(&(0x7f00000001c0)='exfat\x00', 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc014)

1m37.006832975s ago: executing program 8 (id=1468):
r0 = socket(0x2b, 0x1, 0x1)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000480)=0x1, 0x4)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66)
setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000000)=0x2000005, 0x4)

1m35.706939634s ago: executing program 40 (id=1468):
r0 = socket(0x2b, 0x1, 0x1)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000480)=0x1, 0x4)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66)
setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000000)=0x2000005, 0x4)

5.243927079s ago: executing program 3 (id=2066):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg', 0x3)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='nv', 0x2)
recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500)

4.989660765s ago: executing program 9 (id=2067):
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2842, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
close(0x3)
mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x800)
splice(r0, 0x0, r1, 0x0, 0x7c1f, 0x8)

4.838032108s ago: executing program 9 (id=2070):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
syz_fuse_handle_req(r0, &(0x7f0000006300), 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x22110039, 0x1000, 0x0, 0x7ff, 0x58, 0x0, 0x0, 0x6, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2)
syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x78, 0x0, 0x100000000, {0x20000, 0xcbfb, 0x0, {0x5, 0x0, 0x48b, 0xa, 0x400000000000007, 0xd, 0xfff7ffff, 0x6, 0x101, 0x4000, 0xffff1854, 0xffffffffffffffff, 0x0, 0x3, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file0/../file0/file0\x00', 0xffffffffffffffff, 0x0, 0x0)

4.741222681s ago: executing program 0 (id=2071):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./gadget\x00', &(0x7f0000000180)='gadgetfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x2, 0x0)
write(r0, &(0x7f0000000200)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfff8}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0xdad, 0x7d, 0x2, 0x10, 0x7f, 0xa, 0x200, 0x1ff, 0x2005c, 0x9, 0x9, 0x2, 0x0, 0x6, 0xef95, 0xfffffcb8, 0x2ad, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x1ff, 0x9, 0x1, 0x1f461e2c, 0x8, 0x0, 0xc, 0xb, 0x6, 0x7fff, 0x4c74, 0x80000000, 0xfffff951, 0xffffffff, 0xa, 0x0, 0x71, 0xa81f, 0x6, 0x3, 0x2, 0x5, 0xc, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x7, 0x1, 0x20000004, 0x82, 0x0, 0x44b, 0x7, 0x5, 0x4, 0x1, 0x40], [0x1000000b, 0x2, 0x12f, 0x6, 0x10, 0xfffffff7, 0x129432e6, 0xfffffffe, 0xf9, 0xd, 0x2bf, 0x48a, 0x1000, 0xfffffffc, 0x5, 0x0, 0x7, 0x4, 0x2f, 0xe, 0x312, 0x1, 0x0, 0x7f, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0xfff, 0x5, 0xfb, 0x5, 0x1, 0x5f31, 0x4, 0x1, 0x67, 0x1, 0x20006, 0x4, 0xd, 0x8, 0xf, 0x6, 0x0, 0xa, 0x3, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x101, 0x3, 0x9, 0xffffffff, 0x17, 0x3, 0x9, 0x48c93693, 0x42, 0x400004], [0x6, 0x26, 0x80000000, 0x4, 0x7f, 0x400000ff, 0x8cf, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1a619c23, 0x0, 0x1f0, 0x6, 0x2, 0x86, 0x5, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0xb4c, 0x4, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x2006, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff5, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x20003, 0x0, 0x1, 0xffff, 0x0, 0x9d, 0x1c, 0x120000, 0x9, 0x6, 0xaaed, 0x4, 0xff], [0x8, 0xbb31, 0x7, 0x7, 0x5, 0x1, 0x6, 0x5, 0x2, 0x3, 0x80ce7, 0x1ff, 0x3, 0x5, 0x5, 0x1003, 0x101, 0xfffe, 0x6, 0x3, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x4, 0x15c, 0x60a7, 0xfffff800, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0x800, 0x3, 0x7f, 0x100, 0x9602, 0x2000004, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x1, 0x1, 0x40007, 0x1, 0x6c1e, 0xfffffffe, 0x4, 0x8, 0xb1c, 0x1, 0x1fc, 0xffff3444, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

4.580345711s ago: executing program 0 (id=2072):
r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000180)={0x0, 0x40, 0x10, 0x80040002, 0x1e3}, &(0x7f0000000500)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f00000002c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf6c4, 0x0, <r4=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x164}}}, &(0x7f0000000280)=<r5=>0x0)
sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47)
r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x82042, 0x0)
syz_ublk_setup_queues(r6, r5, &(0x7f0000000340)={0x0, 0x5d4, 0x20, 0x3, 0x132, 0x0, r0}, &(0x7f0000000540)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb309, 0x1, 0x2, 0x125}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1bc, 0x94f19f6f135407d0, 0x1, 0x2e3, 0x0, r0}, <r7=>0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2ed6, 0x1, 0x2, 0xc7, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x462f, 0x80, 0x2, 0x31d, 0x0, r6}}], 0x4, &(0x7f00000025c0)={0x2e, 0x2, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x3}, 0x0, 0x0, '\x00', {0x4, 0x3c, 0x0, 0x0}}, 0x0)
syz_ublk_setup_queues(r6, r5, &(0x7f0000000480)={0x0, 0x18c2, 0x800, 0x10, 0x1d2}, &(0x7f0000002680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90e, 0x200, 0x1, 0xb, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd638, 0x0, 0xffffffff, 0x200019b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb6d4, 0x4000, 0x0, 0x252}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeafd, 0x800, 0x0, 0x231, 0x0, r6}}], 0x4, &(0x7f0000003900)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x9}, 0x0, r4, '\x00', {0x1, 0xd55, 0x0, 0x0}}, 0x0)

4.29230732s ago: executing program 3 (id=2073):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./bus\x00', 0x380440e, &(0x7f0000000080)={[{@delalloc}, {@discard}]}, 0x1, 0xbdb, &(0x7f0000001000)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
creat(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x189)
rename(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000240)='./file1\x00')
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
syz_clone(0x100100, 0x0, 0xfffffffffffffecd, 0x0, 0x0, 0x0)
setxattr$incfs_metadata(&(0x7f0000000000)='./file0/file1\x00', &(0x7f00000001c0), 0x0, 0x0, 0x2)

4.291118482s ago: executing program 1 (id=2074):
r0 = userfaultfd(0x80001)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1})
syz_clone3(&(0x7f0000000080)={0x801400, 0x0, 0x0, 0x0, {0xb}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000})

3.866260437s ago: executing program 1 (id=2076):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f00000001c0)={[{@acl}, {@heartbeat_none}, {@err_cont}, {@coherency_full}, {@resv_level}, {@localflocks}, {@coherency_full}, {@inode64}]}, 0x1, 0x4444, &(0x7f0000004480)="$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")
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380c07b, 0x0, 0x1, 0x0, &(0x7f0000000140))
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x29)
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x61, &(0x7f00000001c0)=ANY=[], 0x1, 0x0, &(0x7f00000000c0))
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)

3.81526223s ago: executing program 9 (id=2077):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000100)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}], 0x1, 0x0, 0x0, 0x0)
futex(&(0x7f0000000140)=0x2, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0)

3.758634674s ago: executing program 4 (id=2078):
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0x0, 0x1000000002, 0x0, 0x0, 0x6}, 0x0, 0x0)
write$P9_RLERRORu(r0, &(0x7f0000000240)=ANY=[], 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x20, 0x10012, r0, 0x0)

3.469540804s ago: executing program 9 (id=2079):
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000004c0), 0x1, 0x44b, &(0x7f00000011c0)="$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")
getdents64(0xffffffffffffffff, 0x0, 0x0)
getdents64(0xffffffffffffffff, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @d}})
getdents(0xffffffffffffffff, 0x0, 0xbb)
open(&(0x7f0000000080)='.\x00', 0x518282, 0x78e22799f4a46e8e)

3.453786218s ago: executing program 3 (id=2080):
timer_create(0x0, &(0x7f0000000200)={0x0, 0x33, 0x2}, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = semget$private(0x0, 0x7, 0x195)
semtimedop(r0, &(0x7f0000000200)=[{0x4, 0x3, 0x1800}, {0x0, 0xffbf, 0x2000}], 0x2, 0x0)
semop(r0, &(0x7f00000000c0)=[{0x0, 0x9, 0x800}, {0x1, 0x6}], 0x2)
semop(r0, &(0x7f0000000000)=[{0x3, 0x9}, {0x1, 0x4f98}], 0x2)
semctl$IPC_RMID(r0, 0x0, 0x0)

3.212668552s ago: executing program 0 (id=2081):
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
wait4(r0, &(0x7f00000000c0), 0x8, 0x0)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x8080)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x11000)
socket(0x18, 0x5, 0x100001)
openat$vcs(0xffffffffffffff9c, 0x0, 0x9001, 0x0)

3.167627634s ago: executing program 9 (id=2083):
r0 = syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000300)='./file0\x00', 0x3200842, &(0x7f0000001040)=ANY=[], 0x1, 0xadc, &(0x7f0000001900)="$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")
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a5a438, &(0x7f0000003440)=ANY=[@ANYRES32=0x0, @ANYRESHEX=r0, @ANYRES32, @ANYRESHEX, @ANYBLOB="e2e5e95e13014764cc4c751e7f50a597f5534cfc35e75f63b9c074c4419110ec4f03324e04fdd9cfde03a4e7605f3accb84c5f3691accc9c512ae3c2c9070e298f98acceea93a80de75d5d5bc11bf02962bab1183c0c742a482ba8dc6244df90551f26a23983f2fedfe931db14118ec336528002ef7177fbbaf94cb319ec35f08d9e413782cb0f85ac7c76b02a068afdeba400a28f584976d0d8fabfb7a3d4385e692dad04e7b8445c21016336cb8e550a8a75b9b5ba6cd1911ad47722ed654a8e07d7abca27f3ef5a91bfe2c221", @ANYRESHEX, @ANYBLOB="4c07f18b4a72a428cdf1fcc6a889d51c7d395bfc15396c272d41b4a79dba0739c1c7461ae19481932aa4c03054c8b2442a4c1e4311032bebb0cb70495acfcf1f08735df868c705", @ANYRES16, @ANYRES16, @ANYRES32, @ANYBLOB="ac2d5b5b8945d57e7869648ebe10b8d2719763b4bf3f6667bf8f722606d2b3593f26218e9a5fba2e7d4166787da71737b380045fb0a682e2915271f214c0112961b73c4638e7ba68deb34826d7682ace7549c83bf52bd9142b6c5adebf82155270d33204c09c07ed4ca2fc932af48646c9624e3e3544d68f61a2b073fb85332599b299a4f441a8e2f74c57aa38b5b596238280c1693bba97ff258679ab84485970b60f81093dda6501baba18a7790ca3e6fcfa12898b9fff3faf613d71f9d64dbd5c2edad8e774fb0da39e532d92164e2d34aff7cae32f3cd7aa9aace000f136323e4808d0c66c0828942def38deb2e1d847555fe0d5ba8084babb3169f9f06246ecd5327758448c9c7e4591da12ff1b084e757d05af4f0f0444ecfcc0c4d2067a98d49fe52412218380bb75e21cd2372404ea0b116b9a1c1e3350b3e6f17c5bd1f1adb4ce1d03d5b30eb0690340708f06dfca5c9d74a7c140cabddd0f37d8bcf15e578dde85d7c28ccb1c9633ceeb54bb278d5a097220ca53a2ea4781aca2b70189199938afba9a700a610225311fe8316794ca0ae139a50dbd34d572d6165eaaa94844620045e615d51f5e19c29aadad3539490961135851f15bbfd0604f3926877583d85c45a04c6f155ad6e1966d2004ab6ab51f9beb82dbcdcaaab886564cbf81b581da397eba4fc8fe430ef93ed613cd588e399669b9f4b63481163e6c2b74112538192be9551ca400bc2b947a535fccbc567a68a3ab94554385bb1f2a0e2146310113102a9ffbcbbf44d30e076d363d6201faecf8bbbbc9d7fcd38195860bbc85ee3f5f9b2c990164abc3a7674ab2a631147d708585f52694a46b681cbc623b53a272f21f2aa5597beec8094954541316cc45ec9751fef12369e7272b7bdcb527bac4a19e0bba1b68ef98e3563705e9ca40bb914cece2fd75c2375b81a06dadcdb1c54a175855e30c3d9ca58ca873e43d703b1471526fb3dfe12e140b81df3afae6104e5ffa4e8585b456a7199c75c5abc7afeca743fce310df09062f20b9a99fac5d019338d98606805f4faad9cc81ebf03b7239a340c973828b676af4e594d796689f9823730c5ead8dba256925869ab0d7196a99b75a15f9927852d7813aa5a4cb76764749e882d59c094c5ebd1911153150e8d53aa8abbf360a4045b63e0e296d03158de8aa02b5aeb459dcdc6b9d5aa8c0e455e7cb6a5d9b26ee5420e41d89590a0c04ca8701a6a386716a32e04102f281f66317a21940c0cf83e128f4f83bdf6770170d74d43f3b1f4c0bb5e8c69254e0bfd15c6d02596bf3b547e5b9b8e84390455a9c4b00b633c661616aca4a4158868be21633f343155996eaff00c2c347fea03c6f06e7adcd83cf320e3a446d07dba202e5960632560da8a3b60efe5a814a5cb2a4ff0842fff23897b583b381e5030e506caef8dc97bef9532111e3eb3621870ec39fe2351d3814a02d2f9e38aac1f0897f32ddbffdc6e0acdea95ff7f67865daae1130f68f00985682ecefc43fb6f8521514923b5cf3560be0739aeb4eb00b389d39ebb9b974e054120fcd48c0d6bc09441c2c19f41bdfceed01a3b686921500fae88795f216794d21dd3a98f2fdb5a1590e0cbdc5cd9593b164e255131c21f22ed7e7ed4ec83db91f8bf5f327d7222be1e470a7c0d0a657c73ad606f2ef0c59d3c118c601d23d67ee16ce3658c9153b8131f06c1e4f83c49dbe6dbc3478b1313b9221bc4c5eadebfd16cd07afde509f2e926fcfd5f8feabe836f4080ea5e65c1e4d859f16ac45ad8c804eb9ecce363faf19c1409d8192a644823578ccfd5b643478eb948223676d375f811fffa874f7c2a281104a28baf4da2716ae870abb3e0f05e63466176356728a700fe39ebb62bdbff139fdbf21520022984dc6d3eed1d81b94f28a07cc238ccb64d65e87534c0111bb76212368c6e8e9a536e758fa2f16a2cab9d31984055488b27bcff12bcc5a0fe21a0e44edfb87c681060e6944ff89dce4a9c7122c53acc27913a5fbf15c9ada971df88f0df3f82eb563f63c640ad6e39a1f5c1aad83c364957ec6d645f4243d1fb4ecef275d4c0ca0284064cde0c282d793f290bab5a4dec15f3e2adcc9d455d2e28bd040d6e0f651ac6f20f55d1303d2aaef2104b393afc849e9cd7743ca20a6f092cbf42a67446892493128d38bb0d0f507ffe3fd718ec48eff58df729728bc01ee180d676dfa22c81da0e4e3fda94f4f94195bc82e1f941d8a290ca0d416373d420eba196470e4f25940506061c601f12b3656d6d6b3a47e50d5235b7fd0f82bb0835aee3470b69bf7e59616ece447d9af36c396f687214ff7d7e27961f461c780b4c563aeb47fa9f335cbdade8a06711ba79b6fe8778ac1bc06bb59131c17409c1d1d0cc746aec8c3b1348f9585945192d8e32002c676753ab246a92702fc8e3a3ce89b84661b1b10dcd73fddacd311ca663d483b87a59225f60627eecf409d6188236b198633d47c5f1c0ba0bb4321aac88a6061d5e97883914cd74284ab937b9579ccee6ab5bb39f6274a04e3e7a8c3d033e340357bc15c5f6daa047b1cee448ac380bbde4bf806b0891a04b9e408609b040b7d3a02d2a76d4013756d79244792c543fe2327a3c371852bed5ab54de987bc4699b32ad1c08f7fff7a23069e722f5d78742d622d4ccbc1a7bddc9a590b2c707bac3957d46b657a4e17f1914db58fb6436bdd58b86df491016a2b9ebe0c35a859b216f17f4828c8dee30a38ed1fc36347af978999d0c404313cf99c9281c45194abd79475a80ea1486840aad72b1c0c4f17fe35a150fcb574fa9fcc09a7fc5dcd34e15d4bf1bccfa8bf423d2437e2eb0d3ca9324fbfc7e256b862c50ebc8db3fb69f69003d37807af8ddccf2d929ad9d06ebbb7e538d93bb0b7bc828e1639e0b5e89c22badca307ad28183c3083e87c917feb4c882397d397ea2e7ff0e05ebb252940302cdc0f0f7efe40685f7c3e8923e3795d70d69c70d9a071e401cee771f29dcb5316471768464c4659f2c76d11713ab44f4c944a4819deb1248b02457403e9630aaf4a180e9e55bb4d291e9a2bc85a1ed17f906d54935c7e5e8b707ead56284fda0208bd88ab5c3259bd5329c0d26653eb07b6856ad799fd6fa8d2111da3970ff8509bc2ef3a8813d04f36001526b70757646ed4bf25a256751b8ec714f2e62dea19e82aacec389195532bf7f335afae4351adb93c846e22f1f2a3e0d620d81688bd5530e389f2284b3c997d4abab7c30aac1b141425cd9aa315dc5a5e8b04fd503d79896b1494d8be48048c7392fc92c325b76bde4496c49da34c9ff95969bec8f95c356239d5336907957383b12c512fff6d797097a26a5aee9251bae940ef1a19b3f746396300d3baeb476b023f740ed7c1da92fdbf1834c3a882a6079885b933333d0e194cc1f25a06c3a2d370936886cb385d9861d6762c7416a1db5275228b6499cdef9767fb998d43251b963bc4477b2c051b70a0317de5f6ec3158914145bd036ff194df9722d2a3d2ac2397891b573a34ad16236cdc7ca77bc15f0fdbc3cae923d61633a42bab450a80cf3ee6580e792b1617d74fa189d450a64ca12d8c797698208ea61010b6072885b762af598159621f838ebacc00ea11f5924b39b2bbbc5c7d667871ce32e9aa75893a9fa13a2ffe66b360e266446259a8745addb4e186139d86d4e8d48537ac35029b0d87c03e8c1a9b9a422594496feda8bc5502777428fe737198ed896c2128a4f7d552f2eea8fef6e68feaf3cbfd549e622eea7bc988bb16fc49b7ab241426f2e40edcca07d4f947ccb1d3b8c2e9cb14a0c04495dbb75bd9c935f36bfe398455b0e5f927d5726e617c69ca81fe36c3e6ea510c5fe4735161c992f9ebf66727e5a7ded590061d4da3b86b996846a6bb102e47d33465d88a68644c8a76a770d5e0318e6c301e7c7f5575bf15a9589b32cfaa41ee15972488497195a2cb49a6b6f937a8e311e34d311dfd4fe222d3abc095b0b24a1b7193eb3353def0cc1511c8fce9b0a7867ae2fed4db93009646dc91a3745387cbe61b37f749b40d5d38970856b7ab8b6e1e0b81c078c68cb55c57854b8b5863b7a4c87f42e6d6dca2de0326b1b26970168c99f59816877448e7f72626f5354fdb5e033cd6b42e9476665efae66287e656590d1f80b3a09557a57d7de4bade6a122d40a92db1d347463b74151d44a02dbe067259c633b8c84425e77a736fca99f06d0fd66e35365511ec017537f4c212e7f2e23369958c3a7b92feffad9edb12139f1f690f9512725c0a1a164e78b4130c91fd3961df91c1a11783c24b03bcf305fd0e14e6510f4d58cf73326e94f2bc1b1ab295297bee7a98b77afe483a7d66e780d5e111b4202285f580ce571ecc0985501faa0e9f2f5b9848d770d8d8ad7b90a951f83279073e45a0c7abcf89cd6200f7fc320e46ea3de2addee3a984432501063f9928d0897d93dde20fe8ebe4dabc1ac34b0efdb3d7c7b4d49571ea64252d7209ff6d0ae5b95ef35d8160c5976f7ed9c4b69db81a73f6d00fd254c417696d6af694f3688826cc04db8019f2419fa99e47dc436fd76890b5291cd2724717a1e604e6cb5e214235664e8c7148c2bd87996c05bcfe1f29200f40a0d766df3ddc6faef82fb34d385f90b8f0e4bb7ba519e7986735c169cb3546d62fb70fbd49eec4edd70397d2fcbfdb9cd87331fce3c9786b7090501b904c8f925a1dbfa151a18e6c145ebb74da7100de60a627100d6c04ce789a7d4e88692cb090fd9ff2006e5ddb870f5b2aa502081eb7a26744de9a0d29a66ef18eb097e1d396561078e3f9258046a3a3e9b5878964d71b526755084f385d9777b2ab503f9d77c09a46004b5005f69eedee80edd87dd17f2292eba00f71dedb010b7b003a8400f6b44d63559a10bc0052c678ac8ed9658aff4f858778ebb60cbaf53d82248a260c7255f943711e8ac31a4b7a4694dcdace3be25ea43bdc9dfd52d369292d8d7581a6979d1b8ad543baeb9296907e0926025f4c3597e98e2eacd048a5dedd0e9dabc3268ed35a91c6180908af07a95bf374573c7b4f611eb30bbb5f1721a6550f483dcaed51d84fdaa5c6a52d7c4d04ca4edfd2884483c2d5aaebf6f06c6fff8bff813923ac8c6edd0eadefab938442ff09b1b3ff926c963d67a01cccbd86cb69bb5e5a4adca82110f87d3ee7800b14412b48cd94feacbaa9c1921e816d0287ad1198b94fd6de314912b79938a0d00ef5968ca4cb506afa1496ce4886c8c44955a92c9d2395f108a357e240511cc7e6548ac4174e5b52cc1f03ea8fa8268a7283e9cd25518cc71114869537891b64337222f04c111407bc2c8777f1132e1b294ec533610fd1ae3b4aa7e20c315d87aeed3a19151677e04173fbd55e88669f515dea19c8b99f8d7e829734f615a9b95e278fec62cf2d1a37d535ef71996530c62e65bb6fde625447e9122cfd947d7032c7580bfa5286bdde0bd9c4f0c63cbceddc302e1daef7f27bf289f72456802560e4477b27520b45f3a39e787824f169b3fa0ec7fba1c37f4499d43a9cdca7595f3e9ab74223c34819b260130d8a7613653101cc9a6e236ac01965356c90814c632ed421a62654a457ccc66040026451610b94898d13292cf2096fc1744b8fe67cebbcee0a3830be987694e593d732f05e3c6503a71173dc9870c3eca017318b628dd651232ea1c424a98b394188c8b8dbf30d69f1976219fd5b1975f8deebabeca970581f011f428c164bb35e0d6be187a5a2887d6bb0889c41c5c24d0b173f05db5d3a9e50318b448b3c8c53e8afceede4caf8850d585d4134559a6abbee463da46f316c3faeffa30fec0b35fff3f320b99e805fa2d3d179fe0d9a40e8b5a3df3d5fea5e743163c8a21eb10b84046c95b735e5c727336666c9922041490702d1e17c8b", @ANYBLOB="4b5b40505ce4295c79dcaf712107d5772e50bc7e91c4501e03e44ce7c98e30df04de10ee861097fdc0244296b0cdb9fb091e8872149bc55fc3de32d9bc67139102c0c51604fa", @ANYRESDEC, @ANYRESOCT], 0xd, 0x0, &(0x7f0000000000))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4842, 0x1ff)
syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40))
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0xe1, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000))
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0)
sendfile(r1, r2, 0x0, 0x20fffe82)

2.658205888s ago: executing program 4 (id=2085):
setregid(0x0, 0xee00)
r0 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00')
fchdir(r0)
r1 = syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r2 = syz_open_procfs(r1, &(0x7f00000000c0)='stack\x00')
pread64(r2, &(0x7f0000000140)=""/15, 0xf, 0x4)

2.640119878s ago: executing program 0 (id=2086):
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x339)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast})
close(0x4)

2.478242749s ago: executing program 4 (id=2087):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
r1 = eventfd2(0x0, 0x0)
read$eventfd(r1, &(0x7f0000000000), 0x8)

2.433674579s ago: executing program 9 (id=2088):
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, 0x0)
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x27a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x80, 0x15, 0x87}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000a00)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0xa, 0x62080)
ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0)

2.01844076s ago: executing program 3 (id=2089):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x5, 0x7, 0x1}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000010000e1850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4)
sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)

1.96920593s ago: executing program 0 (id=2090):
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0xf88ce2e0571bc7ea}, "0000000000000208", "5171bb74cd3660dab9e200", "d8a024e5", "000200"}, 0x38)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x1, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000001840), 0x4)

1.842791408s ago: executing program 3 (id=2091):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000100)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}], 0x1, 0x0, 0x0, 0x0)
futex(&(0x7f0000000140)=0x2, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0)

1.75447291s ago: executing program 1 (id=2092):
r0 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000480)={'fscrypt:', @desc4}, &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60c848722ba3b132e4fde178c945bd910b0477e804fc8a5909000000000000a6b0aa00265acd465fbb47a100", 0x10000000}, 0x48, 0xfffffffffffffffe)
pipe2$watch_queue(&(0x7f0000000100)={<r1=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x97)
pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r0, r2, 0x19)
pipe2$watch_queue(&(0x7f0000000240)={<r3=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r0, r3, 0xfeffffffffffff)

1.75404229s ago: executing program 0 (id=2093):
syz_open_dev$dvb_dvr(&(0x7f0000000000), 0x0, 0x0)
r0 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000500)={0x0, 0x30b5, 0x0, 0x2, 0x377}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0, &(0x7f0000000300)=<r3=>0x0)
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=<r4=>0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x65aa, 0x8000, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0xfffffffe, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x829, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94)

1.463613784s ago: executing program 4 (id=2094):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x7ff, @empty, 0x9}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000040)=0xd1, 0x4)
recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/41, 0x29}, 0x8}], 0x1, 0x2, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20004184, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

1.249681303s ago: executing program 4 (id=2095):
socket$nl_generic(0x10, 0x3, 0x10)
mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r0=>0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
syz_ublk_setup_queues(r2, r0, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x81000fff, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14"], 0x7c}}, 0x0)

922.475916ms ago: executing program 1 (id=2096):
r0 = socket$netlink(0x10, 0x3, 0x10)
pipe2$watch_queue(&(0x7f0000001180)={<r1=>0xffffffffffffffff}, 0x80)
r2 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe)
keyctl$KEYCTL_WATCH_KEY(0x20, r2, r1, 0x3d)
pipe2$watch_queue(&(0x7f0000000380)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r2, r3, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

674.605923ms ago: executing program 1 (id=2097):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x4a7, &(0x7f0000003080)="$eJzs3M9rHGUfAPDvbLLp7zfp+/bt+7a2Gq3F4o+kSav24EFFwYOCoId6jElaa7eNNBFsCRpF6lEK3sWj4F/gzYuoBxG8KniUQtEgtPUUmV9NstnNr266bfbzgc0+z8wzM893Zp7dZ+bJbAAdqz/9k0TsjIhfIqI3zy4u0J+/3ZidHr05Oz2axNzca38kWbnrs9OjZdFyuR1F5kglovJxEs8mS7c7efHS2ZFabfxCkR+cOvfO4OTFS0+cOTdyevz0+PnhEyeOHxt6+qnhJ1sSZxrX9f3vTxzY99IbV14ZPXnlze+/Squ192A+f2EcK7rZIKAG+tO99udcpn7e4TXU/V6wa0E66W5jRViTrohID1c1a/+90RXzB683XvyorZUDNlT63bSl+eyZOWATS6LdNQDao/yiT69/y9cd6nrcFa49F9FTpG/MTo/euBV/d1SK6dUN3H5/RJyc+fvz9BVrvQ8BALAOWd/m8Ub9v0rszd7zsY5/FWMofRGxOyL+HRH/iYg9EfHfiKzs/yLi//nCc72r3H5/XX5p/6dytWGdWyTt/z0TZTd4Yf+vUr71dRW5XVn81eTUmdr40WKfHInqljQ/tMw2vnnh50+bzVvY/0tf6fbLvmBRgavddTfoxkamRlq1E659GLG/e77vOx9/cmskID0D9kXE/rWsuCfbPZkzj355oFmxleNfRgvGmea+iHgk7/vPRF38pWT58cnBrVEbPzpYnhVL/fDT5Vebbf+24m+B9Phvj0XHv65E719JPl5bjVpt/MLk2rdx+ddPml7TrPf870lez8asf3wrn/beyNTUhaGInuTlLF9e02XTh+eXLfNl+TT+I4canP+755dJ478vItKT+GBE3B8RDxR1fzAiHoqIQ8vE/93zD7+9TPxJJNHW4z8Wjdt/oS9ZOF6/jkTX2W+/bjZivrrjfzxmss/aXPb5t0RlUW61FWzBLgQAAIC7XnrVvDOSykCe7t8ZlcrAQP4//Htie6U2MTn12KmJd8+P5c8I9EW1Ut7p6l1wP3QomSnWmOeHi3vF5fxjxS2Vz7q2ZfmB0YnaWJtjh063Y3H7j7L9p37vanftgA3neS3oXPXtv9KmegB33mq+/xtfC/S0vC7AndWg/W9rVE5rh83H9T90rkbt/4O6vLEA2JyWtv/fGvxkHbAZ6f9D52ra/v2SK2x6Wjl0pNt5rn/9ifJhgfWvZ+uqn/C/RxI3I+K21lMOzm5kVbfF/JSIrRF3xa7rhETaYlYqc7i6cpnVJwz3AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAm8M/AQAA//8/kt+l")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mknodat$loop(r0, &(0x7f00000003c0)='./file0\x00', 0x2000, 0x1)
r1 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50)
getdents(r1, 0x0, 0x0)
lseek(r1, 0x6, 0x1)
getdents(r1, 0x0, 0x0)

500.813012ms ago: executing program 3 (id=2098):
r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x2a003)
r1 = socket(0x2, 0x1, 0x0)
r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x9)
ioctl$NBD_DO_IT(r2, 0xab03)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)

138.599858ms ago: executing program 1 (id=2099):
openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
epoll_create1(0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000180)={0x23800200, &(0x7f0000000040)=<r0=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x20, 0x0, 0x0, 0x800, 0x0, 0x2}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a9}, 0x0, 0x0)
io_setup(0x8, &(0x7f0000000600)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}])

0s ago: executing program 4 (id=2100):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
munmap(&(0x7f0000aaf000/0x1000)=nil, 0x1000)
mlock2(&(0x7f00005ab000/0x3000)=nil, 0x3000, 0x1)
mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)

kernel console output (not intermixed with test programs):

 to user failed while replacing table
[  351.919056][T11878] loop1: detected capacity change from 0 to 4096
[  351.981875][T11886] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1736'.
[  352.146889][T11891] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  352.250611][T11894] FAULT_INJECTION: forcing a failure.
[  352.250611][T11894] name failslab, interval 1, probability 0, space 0, times 0
[  352.250659][T11894] CPU: 1 UID: 0 PID: 11894 Comm: syz.0.1737 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  352.250693][T11894] Tainted: [L]=SOFTLOCKUP
[  352.250702][T11894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  352.250717][T11894] Call Trace:
[  352.250726][T11894]  <TASK>
[  352.250736][T11894]  dump_stack_lvl+0xe8/0x150
[  352.250769][T11894]  should_fail_ex+0x3eb/0x540
[  352.250798][T11894]  should_failslab+0xa8/0x100
[  352.250824][T11894]  __kmalloc_noprof+0xf9/0x710
[  352.250848][T11894]  ? netlink_realloc_groups+0xf4/0x310
[  352.250870][T11894]  ? netlink_realloc_groups+0xf4/0x310
[  352.250900][T11894]  netlink_realloc_groups+0xf4/0x310
[  352.250923][T11894]  ? aa_sk_perm+0x6ff/0x8f0
[  352.250949][T11894]  netlink_bind+0x2ab/0xda0
[  352.250979][T11894]  ? __pfx_netlink_bind+0x10/0x10
[  352.251010][T11894]  ? bpf_lsm_socket_bind+0x9/0x20
[  352.251036][T11894]  __sys_bind+0x2e3/0x410
[  352.251063][T11894]  ? __pfx___sys_bind+0x10/0x10
[  352.251099][T11894]  ? rcu_is_watching+0x16/0xb0
[  352.251130][T11894]  __x64_sys_bind+0x7a/0x90
[  352.251154][T11894]  do_syscall_64+0x166/0x520
[  352.251174][T11894]  ? trace_irq_disable+0x3b/0x140
[  352.251195][T11894]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  352.251219][T11894]  ? clear_bhb_loop+0x70/0xc0
[  352.251244][T11894]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  352.251268][T11894] RIP: 0033:0x7f9b56b9e159
[  352.251289][T11894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  352.251309][T11894] RSP: 002b:00007f9b54df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031
[  352.251334][T11894] RAX: ffffffffffffffda RBX: 00007f9b56e25fa0 RCX: 00007f9b56b9e159
[  352.251352][T11894] RDX: 000000000000000c RSI: 0000200000514ff4 RDI: 0000000000000003
[  352.251366][T11894] RBP: 00007f9b56c3506b R08: 0000000000000000 R09: 0000000000000000
[  352.251381][T11894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  352.251402][T11894] R13: 00007f9b56e26038 R14: 00007f9b56e25fa0 R15: 00007ffdbdfbc3f8
[  352.251437][T11894]  </TASK>
[  352.519010][T11896] loop4: detected capacity change from 0 to 1024
[  352.523312][T11896] EXT4-fs: Ignoring removed bh option
[  352.632761][T11896] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  352.632890][T11896] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  352.852128][   T32] kauditd_printk_skb: 47 callbacks suppressed
[  352.852149][   T32] audit: type=1800 audit(1790959241.988:156): pid=11878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1733" name="file1" dev="loop1" ino=15 res=0 errno=-22
[  353.009453][ T9588] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  353.330433][T11924] FAULT_INJECTION: forcing a failure.
[  353.330433][T11924] name failslab, interval 1, probability 0, space 0, times 0
[  353.330471][T11924] CPU: 1 UID: 0 PID: 11924 Comm: syz.9.1744 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  353.330503][T11924] Tainted: [L]=SOFTLOCKUP
[  353.330511][T11924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  353.330524][T11924] Call Trace:
[  353.330532][T11924]  <TASK>
[  353.330542][T11924]  dump_stack_lvl+0xe8/0x150
[  353.330572][T11924]  should_fail_ex+0x3eb/0x540
[  353.330602][T11924]  should_failslab+0xa8/0x100
[  353.330626][T11924]  __kmalloc_noprof+0xf9/0x710
[  353.330647][T11924]  ? prepare_creds+0x30/0x820
[  353.330670][T11924]  ? security_prepare_creds+0x52/0x360
[  353.330691][T11924]  ? security_prepare_creds+0x52/0x360
[  353.330714][T11924]  ? kmem_cache_alloc_noprof+0x151/0x600
[  353.330741][T11924]  security_prepare_creds+0x52/0x360
[  353.330767][T11924]  prepare_creds+0x57d/0x820
[  353.330793][T11924]  __sys_setuid+0x91/0x560
[  353.330818][T11924]  do_syscall_64+0x166/0x520
[  353.330842][T11924]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  353.330866][T11924]  ? clear_bhb_loop+0x70/0xc0
[  353.330890][T11924]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  353.330913][T11924] RIP: 0033:0x7ff7d4f9e159
[  353.330934][T11924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  353.330953][T11924] RSP: 002b:00007ff7d5e29028 EFLAGS: 00000246 ORIG_RAX: 0000000000000069
[  353.330977][T11924] RAX: ffffffffffffffda RBX: 00007ff7d5225fa0 RCX: 00007ff7d4f9e159
[  353.330994][T11924] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee01
[  353.331007][T11924] RBP: 00007ff7d503506b R08: 0000000000000000 R09: 0000000000000000
[  353.331021][T11924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  353.331034][T11924] R13: 00007ff7d5226038 R14: 00007ff7d5225fa0 R15: 00007fffba0725a8
[  353.331069][T11924]  </TASK>
[  353.976565][T11954] netlink: 'syz.4.1752': attribute type 1 has an invalid length.
[  353.976591][T11954] netlink: 'syz.4.1752': attribute type 4 has an invalid length.
[  353.976605][T11954] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.1752'.
[  354.001780][T11952] block nbd0: Cannot use ioctl interface on a netlink controlled device.
[  354.036031][T11952] block nbd0: Cannot use ioctl interface on a netlink controlled device.
[  354.913623][ T6830] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  355.065458][ T6830] usb 2-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00
[  355.066675][ T6830] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  355.066710][ T6830] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  355.067109][ T6830] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  355.067156][ T6830] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  355.099192][ T6830] usb 2-1: config 0 descriptor??
[  355.143540][ T6831] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  355.294412][ T6831] usb 4-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00
[  355.298267][ T6831] usb 4-1: config 1 has an invalid interface number: 3 but max is 0
[  355.298295][ T6831] usb 4-1: config 1 has no interface number 0
[  355.314690][ T6831] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  355.314720][ T6831] usb 4-1: Product: syz
[  355.314737][ T6831] usb 4-1: Manufacturer: syz
[  355.314817][ T6831] usb 4-1: SerialNumber: syz
[  355.386498][ T6831] usb 4-1: 3:0 : does not exist
[  355.386526][ T6831] usb 4-1: 3:0 : does not exist
[  355.685865][  T989] usb 4-1: USB disconnect, device number 15
[  355.729597][ T6830] plantronics 0003:047F:FFFF.000F: reserved main item tag 0xd
[  355.731575][ T6830] hid_parser_main: 8 callbacks suppressed
[  355.731596][ T6830] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0
[  355.731626][ T6830] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0
[  355.731661][ T6830] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0
[  355.741394][ T6830] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0
[  355.741428][ T6830] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0
[  355.854211][ T6830] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  356.032391][    T9] usb 2-1: USB disconnect, device number 17
[  356.098843][T12005] FAULT_FLAG_ALLOW_RETRY missing 801
[  356.098872][T12005] CPU: 0 UID: 0 PID: 12005 Comm: syz.0.1764 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  356.098907][T12005] Tainted: [L]=SOFTLOCKUP
[  356.098916][T12005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  356.098931][T12005] Call Trace:
[  356.098940][T12005]  <TASK>
[  356.098950][T12005]  dump_stack_lvl+0xe8/0x150
[  356.098982][T12005]  handle_userfault+0x1305/0x1ad0
[  356.099018][T12005]  ? __folio_put+0x4b3/0x590
[  356.099053][T12005]  ? __pfx_handle_userfault+0x10/0x10
[  356.099106][T12005]  handle_mm_fault+0x1a53/0x3750
[  356.099142][T12005]  ? handle_mm_fault+0xf1/0x3750
[  356.099178][T12005]  ? __pfx_handle_mm_fault+0x10/0x10
[  356.099209][T12005]  ? follow_page_pte+0x748/0xf10
[  356.099242][T12005]  ? __pfx_follow_page_pte+0x10/0x10
[  356.099277][T12005]  __get_user_pages+0x1669/0x26e0
[  356.099340][T12005]  populate_vma_page_range+0x311/0x3f0
[  356.099370][T12005]  ? __pfx_populate_vma_page_range+0x10/0x10
[  356.099394][T12005]  ? vma_wants_writenotify+0xb2/0x340
[  356.099421][T12005]  ? vma_set_page_prot+0xc3/0x100
[  356.099448][T12005]  mprotect_fixup+0x9e9/0xda0
[  356.099481][T12005]  ? __pfx_mprotect_fixup+0x10/0x10
[  356.099501][T12005]  ? mas_next_slot+0xc91/0xd70
[  356.099541][T12005]  ? apparmor_file_mprotect+0x1ec/0x3a0
[  356.099563][T12005]  ? security_file_mprotect+0x1a/0x290
[  356.099595][T12005]  do_mprotect_pkey+0x8e7/0xd10
[  356.099631][T12005]  ? __pfx_do_mprotect_pkey+0x10/0x10
[  356.099684][T12005]  ? rcu_is_watching+0x16/0xb0
[  356.099717][T12005]  __x64_sys_mprotect+0x80/0x90
[  356.099802][T12005]  do_syscall_64+0x166/0x520
[  356.099824][T12005]  ? trace_irq_disable+0x3b/0x140
[  356.099849][T12005]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  356.099931][T12005]  ? clear_bhb_loop+0x70/0xc0
[  356.099958][T12005]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  356.100076][T12005] RIP: 0033:0x7f9b56b9e159
[  356.100100][T12005] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  356.100122][T12005] RSP: 002b:00007f9b54dd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000000a
[  356.100148][T12005] RAX: ffffffffffffffda RBX: 00007f9b56e26090 RCX: 00007f9b56b9e159
[  356.100167][T12005] RDX: 000000000000000a RSI: 0000000000c00000 RDI: 0000200000400000
[  356.100183][T12005] RBP: 00007f9b56c3506b R08: 0000000000000000 R09: 0000000000000000
[  356.100198][T12005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  356.100212][T12005] R13: 00007f9b56e26128 R14: 00007f9b56e26090 R15: 00007ffdbdfbc3f8
[  356.100344][T12005]  </TASK>
[  356.802534][T12019] loop3: detected capacity change from 0 to 2048
[  356.829874][T12019] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=18881, location=18881
[  356.866423][T12019] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  356.995119][T12022] loop0: detected capacity change from 0 to 256
[  356.998242][T12022] exfat: Deprecated parameter 'utf8'
[  357.064891][T12022] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x72bddf51, utbl_chksum : 0xe619d30d)
[  357.259447][T12030] FAULT_INJECTION: forcing a failure.
[  357.259447][T12030] name failslab, interval 1, probability 0, space 0, times 0
[  357.259487][T12030] CPU: 1 UID: 0 PID: 12030 Comm: syz.4.1773 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  357.259531][T12030] Tainted: [L]=SOFTLOCKUP
[  357.259539][T12030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  357.259558][T12030] Call Trace:
[  357.259567][T12030]  <TASK>
[  357.259577][T12030]  dump_stack_lvl+0xe8/0x150
[  357.259609][T12030]  should_fail_ex+0x3eb/0x540
[  357.259640][T12030]  should_failslab+0xa8/0x100
[  357.259663][T12030]  ? security_file_alloc+0x34/0x310
[  357.259687][T12030]  kmem_cache_alloc_noprof+0x9c/0x600
[  357.259711][T12030]  ? rcu_is_watching+0x16/0xb0
[  357.259734][T12030]  ? security_file_alloc+0x34/0x310
[  357.259765][T12030]  security_file_alloc+0x34/0x310
[  357.259788][T12030]  init_file+0x90/0x2b0
[  357.259810][T12030]  alloc_empty_file+0x74/0x1d0
[  357.259834][T12030]  alloc_file_pseudo+0x110/0x1e0
[  357.259859][T12030]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  357.259883][T12030]  ? _raw_spin_unlock+0x28/0x50
[  357.259912][T12030]  sock_alloc_file+0xb8/0x2e0
[  357.259934][T12030]  ? __sys_socket+0x12b/0x1b0
[  357.259959][T12030]  __sys_socket+0x13f/0x1b0
[  357.259985][T12030]  __x64_sys_socket+0x7a/0x90
[  357.260007][T12030]  do_syscall_64+0x166/0x520
[  357.260025][T12030]  ? trace_irq_disable+0x3b/0x140
[  357.260044][T12030]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  357.260065][T12030]  ? clear_bhb_loop+0x70/0xc0
[  357.260088][T12030]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  357.260111][T12030] RIP: 0033:0x7f634799e159
[  357.260132][T12030] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  357.260152][T12030] RSP: 002b:00007f63487d5fc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  357.260177][T12030] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f634799e159
[  357.260194][T12030] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 000000000000001f
[  357.260207][T12030] RBP: 00007f6347a3506b R08: 0000000000000000 R09: 0000000000000000
[  357.260221][T12030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  357.260235][T12030] R13: 00007f6347c26038 R14: 00007f6347c25fa0 R15: 00007ffec928d6e8
[  357.260269][T12030]  </TASK>
[  357.968165][T12054] loop9: detected capacity change from 0 to 128
[  358.044630][T12054] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  358.044667][T12054] hpfs: filesystem error: improperly stopped
[  358.044682][T12054] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  358.044698][T12054] hpfs: You really don't want any checks? You are crazy...
[  358.044710][T12054] hpfs: Code page index out of array
[  358.044718][T12054] hpfs: code page support is disabled
[  358.044841][T12054] hpfs: hpfs_map_4sectors(): unaligned read
[  358.044916][T12054] hpfs: hpfs_map_4sectors(): unaligned read
[  358.044933][T12054] hpfs: filesystem error: unable to find root dir
[  358.299270][T12066] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1781'.
[  358.972670][T12065] loop4: detected capacity change from 0 to 32768
[  359.073380][T12065] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  359.372465][ T9588] ocfs2: Unmounting device (7,4) on (node local)
[  359.647229][T12106] loop0: detected capacity change from 0 to 512
[  359.749285][T12106] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  359.749595][T12106] ext4 filesystem being mounted at /127/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  360.248341][T12062] Bluetooth: hci1: command 0x0406 tx timeout
[  360.248356][T12061] Bluetooth: hci7: command 0x0406 tx timeout
[  360.367723][  T989] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  360.409632][ T9144] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  360.515850][  T989] usb 5-1: Using ep0 maxpacket: 16
[  360.516744][  T989] usb 5-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=0.40
[  360.518153][  T989] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  360.518178][  T989] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  360.519461][T12136] loop0: detected capacity change from 0 to 16
[  360.521135][  T989] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  360.521160][  T989] usb 5-1: Product: syz
[  360.521175][  T989] usb 5-1: Manufacturer: syz
[  360.521191][  T989] usb 5-1: SerialNumber: syz
[  360.591520][T12136] erofs (device loop0): mounted with root inode @ nid 36.
[  360.614989][  T989] usb 5-1: 0:2 : does not exist
[  360.764532][  T989] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[  360.983334][  T989] usb 5-1: USB disconnect, device number 26
[  361.245247][ T5623] udevd[5623]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  361.419491][T12158] loop0: detected capacity change from 0 to 128
[  361.443775][T12158] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  361.589223][T12158] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  361.642287][T12163] loop4: detected capacity change from 0 to 512
[  361.871088][T12168] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993
[  361.914722][ T6825] usb 5-1: new full-speed USB device number 27 using dummy_hcd
[  362.069594][ T6825] usb 5-1: unable to get BOS descriptor or descriptor too short
[  362.070078][ T6825] usb 5-1: not running at top speed; connect to a high speed hub
[  362.070106][ T6825] usb 5-1: New USB device found: idVendor=0582, idProduct=0023, bcdDevice=0.40
[  362.071992][ T6825] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 4
[  362.072023][ T6825] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8 has invalid maxpacket 1024, setting to 1023
[  362.072058][ T6825] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  362.072107][ T6825] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  362.147726][ T6825] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  362.147755][ T6825] usb 5-1: Product: syz
[  362.147770][ T6825] usb 5-1: Manufacturer: syz
[  362.147785][ T6825] usb 5-1: SerialNumber: syz
[  362.267424][    T9] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  362.583095][    T9] hid-generic 0000:0000:0000.0010: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  362.611250][T12183] FAULT_INJECTION: forcing a failure.
[  362.611250][T12183] name failslab, interval 1, probability 0, space 0, times 0
[  362.611289][T12183] CPU: 0 UID: 0 PID: 12183 Comm: syz.0.1814 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  362.611319][T12183] Tainted: [L]=SOFTLOCKUP
[  362.611327][T12183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  362.611339][T12183] Call Trace:
[  362.611347][T12183]  <TASK>
[  362.611355][T12183]  dump_stack_lvl+0xe8/0x150
[  362.611385][T12183]  should_fail_ex+0x3eb/0x540
[  362.611414][T12183]  should_failslab+0xa8/0x100
[  362.611434][T12183]  ? security_file_alloc+0x34/0x310
[  362.611454][T12183]  kmem_cache_alloc_noprof+0x9c/0x600
[  362.611474][T12183]  ? rcu_is_watching+0x16/0xb0
[  362.611494][T12183]  ? security_file_alloc+0x34/0x310
[  362.611528][T12183]  security_file_alloc+0x34/0x310
[  362.611553][T12183]  init_file+0x90/0x2b0
[  362.611575][T12183]  alloc_empty_file+0x74/0x1d0
[  362.611595][T12183]  alloc_file_pseudo+0x110/0x1e0
[  362.611618][T12183]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  362.611648][T12183]  anon_inode_getfd+0xca/0x1f0
[  362.611673][T12183]  bpf_enable_stats+0xdc/0x140
[  362.611694][T12183]  __sys_bpf+0xa4c/0xe00
[  362.611720][T12183]  ? __pfx___sys_bpf+0x10/0x10
[  362.611742][T12183]  ? do_futex+0x3e7/0x4e0
[  362.611787][T12183]  ? rcu_is_watching+0x16/0xb0
[  362.611814][T12183]  __x64_sys_bpf+0xba/0xd0
[  362.611838][T12183]  do_syscall_64+0x166/0x520
[  362.611856][T12183]  ? trace_irq_disable+0x3b/0x140
[  362.611872][T12183]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  362.611892][T12183]  ? clear_bhb_loop+0x70/0xc0
[  362.611914][T12183]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  362.611933][T12183] RIP: 0033:0x7f9b56b9e159
[  362.611954][T12183] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  362.611973][T12183] RSP: 002b:00007f9b54df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  362.611994][T12183] RAX: ffffffffffffffda RBX: 00007f9b56e25fa0 RCX: 00007f9b56b9e159
[  362.612009][T12183] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000020
[  362.612022][T12183] RBP: 00007f9b56c3506b R08: 0000000000000000 R09: 0000000000000000
[  362.612035][T12183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  362.612046][T12183] R13: 00007f9b56e26038 R14: 00007f9b56e25fa0 R15: 00007ffdbdfbc3f8
[  362.612077][T12183]  </TASK>
[  363.010593][T12184] fido_id[12184]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  363.344813][ T5608] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  363.433670][T12200] syzkaller0: entered promiscuous mode
[  363.433700][T12200] syzkaller0: entered allmulticast mode
[  363.805237][T12208] loop9: detected capacity change from 0 to 32768
[  363.861631][T12208] JBD2: Ignoring recovery information on journal
[  363.910926][T12208] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode.
[  364.018628][T12208] OCFS2: ERROR (device loop9): int ocfs2_reserve_local_alloc_bits(struct ocfs2_super *, u32, struct ocfs2_alloc_context *): local alloc inode 76 says it has 9 used bits, but a count shows 8
[  364.018671][T12208] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  364.018683][T12208] OCFS2: File system is now read-only.
[  364.018695][T12208] (syz.9.1820,12208,0):ocfs2_reserve_local_alloc_bits:710 ERROR: status = -30
[  364.018721][T12208] (syz.9.1820,12208,0):ocfs2_reserve_clusters_with_limit:1288 ERROR: status = -30
[  364.018762][T12208] (syz.9.1820,12208,0):ocfs2_reserve_clusters_with_limit:1337 ERROR: status = -30
[  364.018784][T12208] (syz.9.1820,12208,0):ocfs2_lock_allocators:3292 ERROR: status = -30
[  364.018807][T12208] (syz.9.1820,12208,0):ocfs2_write_begin_nolock:1724 ERROR: status = -30
[  364.018845][T12208] (syz.9.1820,12208,0):ocfs2_write_begin:1888 ERROR: status = -30
[  364.168103][T12215] loop1: detected capacity change from 0 to 128
[  364.253761][T12215] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  364.253819][T12215] hpfs: filesystem error: improperly stopped
[  364.253836][T12215] hpfs: You really don't want any checks? You are crazy...
[  364.254240][T12215] hpfs: hpfs_map_sector(): read error
[  364.254254][T12215] hpfs: code page support is disabled
[  364.258656][T12215] hpfs: hpfs_map_4sectors(): unaligned read
[  364.258750][T12215] hpfs: hpfs_map_4sectors(): unaligned read
[  364.258762][T12215] hpfs: filesystem error: unable to find root dir
[  364.310607][ T5608] Bluetooth: hci3: command 0x2016 tx timeout
[  364.378895][T12218] FAULT_INJECTION: forcing a failure.
[  364.378895][T12218] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  364.378940][T12218] CPU: 0 UID: 0 PID: 12218 Comm: syz.0.1822 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  364.378972][T12218] Tainted: [L]=SOFTLOCKUP
[  364.378981][T12218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  364.378994][T12218] Call Trace:
[  364.379003][T12218]  <TASK>
[  364.379012][T12218]  dump_stack_lvl+0xe8/0x150
[  364.379042][T12218]  should_fail_ex+0x3eb/0x540
[  364.379073][T12218]  _copy_to_user+0x31/0xb0
[  364.379098][T12218]  bpf_verifier_vlog+0x52a/0x900
[  364.379133][T12218]  __btf_verifier_log+0xe2/0x140
[  364.379158][T12218]  ? __sort_r+0x2c3f/0x3530
[  364.379183][T12218]  ? __pfx___btf_verifier_log+0x10/0x10
[  364.379219][T12218]  __btf_verifier_log_type+0x4fd/0x6a0
[  364.379257][T12218]  ? __pfx___btf_verifier_log_type+0x10/0x10
[  364.379297][T12218]  btf_datasec_check_meta+0x40e/0xad0
[  364.379325][T12218]  ? __pfx_sort+0x10/0x10
[  364.379345][T12218]  ? __pfx_btf_sec_info_cmp+0x10/0x10
[  364.379375][T12218]  btf_parse_type_sec+0x3cf/0x24a0
[  364.379406][T12218]  ? __pfx_btf_check_sec_info+0x10/0x10
[  364.379435][T12218]  ? btf_parse_str_sec+0x244/0x2f0
[  364.379460][T12218]  btf_new_fd+0x4ad/0xc20
[  364.379485][T12218]  ? do_accept+0x540/0x730
[  364.379508][T12218]  __sys_bpf+0xda7/0xe00
[  364.379534][T12218]  ? do_accept+0x540/0x730
[  364.379555][T12218]  ? __pfx___sys_bpf+0x10/0x10
[  364.379580][T12218]  ? do_futex+0x3e7/0x4e0
[  364.379603][T12218]  ? do_accept+0x540/0x730
[  364.379650][T12218]  ? rcu_is_watching+0x16/0xb0
[  364.379679][T12218]  __x64_sys_bpf+0xba/0xd0
[  364.379705][T12218]  do_syscall_64+0x166/0x520
[  364.379726][T12218]  ? trace_irq_disable+0x3b/0x140
[  364.379746][T12218]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  364.379770][T12218]  ? clear_bhb_loop+0x70/0xc0
[  364.379798][T12218]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  364.379821][T12218] RIP: 0033:0x7f9b56b9e159
[  364.379842][T12218] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  364.379862][T12218] RSP: 002b:00007f9b54df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  364.379888][T12218] RAX: ffffffffffffffda RBX: 00007f9b56e25fa0 RCX: 00007f9b56b9e159
[  364.379906][T12218] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012
[  364.379929][T12218] RBP: 00007f9b56c3506b R08: 0000000000000000 R09: 0000000000000000
[  364.379944][T12218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  364.379958][T12218] R13: 00007f9b56e26038 R14: 00007f9b56e25fa0 R15: 00007ffdbdfbc3f8
[  364.379993][T12218]  </TASK>
[  364.730409][T12215] hpfs: hpfs_map_4sectors(): unaligned read
[  364.730884][T12215] hpfs: hpfs_map_sector(): read error
[  364.733283][ T9128] ocfs2: Unmounting device (7,9) on (node local)
[  364.736985][T12221] hpfs: hpfs_map_4sectors(): unaligned read
[  364.737019][T12221] hpfs: hpfs_map_sector(): read error
[  364.847885][ T6825] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  364.909646][T12220] loop3: detected capacity change from 0 to 4096
[  364.924275][T12220] EXT4-fs: Ignoring removed mblk_io_submit option
[  364.924415][T12220] EXT4-fs: Ignoring removed orlov option
[  364.966478][T12220] EXT4-fs (loop3): Test dummy encryption mode enabled
[  365.030773][T12220] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  365.197110][ T6825] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -2
[  365.225216][ T6825] usb 5-1: USB disconnect, device number 27
[  365.408710][ T5623] udevd[5623]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  365.499567][T12240] FAULT_INJECTION: forcing a failure.
[  365.499567][T12240] name failslab, interval 1, probability 0, space 0, times 0
[  365.499605][T12240] CPU: 1 UID: 0 PID: 12240 Comm: syz.1.1831 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  365.499637][T12240] Tainted: [L]=SOFTLOCKUP
[  365.499645][T12240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  365.499659][T12240] Call Trace:
[  365.499668][T12240]  <TASK>
[  365.499678][T12240]  dump_stack_lvl+0xe8/0x150
[  365.499709][T12240]  should_fail_ex+0x3eb/0x540
[  365.499739][T12240]  should_failslab+0xa8/0x100
[  365.499765][T12240]  __kmalloc_cache_node_noprof+0xa5/0x620
[  365.499800][T12240]  ? __get_vm_area_node+0x155/0x2f0
[  365.499821][T12240]  ? __get_vm_area_node+0x155/0x2f0
[  365.499845][T12240]  ? kasan_save_track+0x4f/0x80
[  365.499872][T12240]  __get_vm_area_node+0x155/0x2f0
[  365.499893][T12240]  ? video_usercopy+0x860/0x1430
[  365.499916][T12240]  ? __se_sys_ioctl+0xfc/0x170
[  365.499942][T12240]  __vmalloc_node_range_noprof+0x36e/0x16f0
[  365.499967][T12240]  ? vb2_vmalloc_alloc+0xef/0x360
[  365.500027][T12240]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  365.500052][T12240]  ? __kasan_kmalloc+0x93/0xb0
[  365.500075][T12240]  ? __kmalloc_cache_noprof+0x31c/0x600
[  365.500103][T12240]  vmalloc_user_noprof+0xad/0xe0
[  365.500126][T12240]  ? vb2_vmalloc_alloc+0xef/0x360
[  365.500150][T12240]  vb2_vmalloc_alloc+0xef/0x360
[  365.500171][T12240]  ? __pfx_vb2_vmalloc_alloc+0x10/0x10
[  365.500196][T12240]  __vb2_queue_alloc+0xa0b/0x1660
[  365.500248][T12240]  vb2_core_reqbufs+0xc3f/0x1470
[  365.500289][T12240]  ? __pfx_vb2_core_reqbufs+0x10/0x10
[  365.500330][T12240]  ? __video_do_ioctl+0x473/0xc70
[  365.500364][T12240]  ? vb2_verify_memory_type+0x1fc/0x570
[  365.500387][T12240]  vb2_ioctl_reqbufs+0x4bb/0x850
[  365.500420][T12240]  __video_do_ioctl+0x8af/0xc70
[  365.500449][T12240]  ? __pfx___video_do_ioctl+0x10/0x10
[  365.500471][T12240]  ? __might_fault+0xaf/0x130
[  365.500500][T12240]  video_usercopy+0x860/0x1430
[  365.500525][T12240]  ? __pfx___video_do_ioctl+0x10/0x10
[  365.500564][T12240]  ? __pfx_video_usercopy+0x10/0x10
[  365.500611][T12240]  ? __fget_files+0x2a/0x420
[  365.500630][T12240]  ? __fget_files+0x2a/0x420
[  365.500650][T12240]  v4l2_ioctl+0x18d/0x1e0
[  365.500687][T12240]  ? __pfx_v4l2_ioctl+0x10/0x10
[  365.500707][T12240]  __se_sys_ioctl+0xfc/0x170
[  365.500730][T12240]  do_syscall_64+0x166/0x520
[  365.500750][T12240]  ? trace_irq_disable+0x3b/0x140
[  365.500768][T12240]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  365.500790][T12240]  ? clear_bhb_loop+0x70/0xc0
[  365.500819][T12240]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  365.500840][T12240] RIP: 0033:0x7fe62759e159
[  365.500860][T12240] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  365.500878][T12240] RSP: 002b:00007fe62838e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  365.500900][T12240] RAX: ffffffffffffffda RBX: 00007fe627825fa0 RCX: 00007fe62759e159
[  365.500915][T12240] RDX: 0000200000000300 RSI: 00000000c0145608 RDI: 0000000000000004
[  365.500930][T12240] RBP: 00007fe62763506b R08: 0000000000000000 R09: 0000000000000000
[  365.500944][T12240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  365.500958][T12240] R13: 00007fe627826038 R14: 00007fe627825fa0 R15: 00007ffdf24f8108
[  365.500991][T12240]  </TASK>
[  365.501030][T12240] warn_alloc: 1 callbacks suppressed
[  365.501041][T12240] syz.1.1831: vmalloc error: size 32768, align 0x1000, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  365.501134][T12240] CPU: 1 UID: 0 PID: 12240 Comm: syz.1.1831 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  365.501162][T12240] Tainted: [L]=SOFTLOCKUP
[  365.501169][T12240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  365.501182][T12240] Call Trace:
[  365.501189][T12240]  <TASK>
[  365.501196][T12240]  dump_stack_lvl+0xe8/0x150
[  365.501221][T12240]  warn_alloc+0x24d/0x270
[  365.501242][T12240]  ? __kasan_kmalloc+0x22/0xb0
[  365.501266][T12240]  ? __pfx_warn_alloc+0x10/0x10
[  365.501285][T12240]  ? __get_vm_area_node+0x155/0x2f0
[  365.501325][T12240]  ? kasan_save_track+0x4f/0x80
[  365.501351][T12240]  ? __get_vm_area_node+0x2a9/0x2f0
[  365.501371][T12240]  ? video_usercopy+0x860/0x1430
[  365.501400][T12240]  __vmalloc_node_range_noprof+0x396/0x16f0
[  365.501461][T12240]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  365.501486][T12240]  ? __kasan_kmalloc+0x93/0xb0
[  365.501508][T12240]  ? __kmalloc_cache_noprof+0x31c/0x600
[  365.501535][T12240]  vmalloc_user_noprof+0xad/0xe0
[  365.501558][T12240]  ? vb2_vmalloc_alloc+0xef/0x360
[  365.501581][T12240]  vb2_vmalloc_alloc+0xef/0x360
[  365.501602][T12240]  ? __pfx_vb2_vmalloc_alloc+0x10/0x10
[  365.501625][T12240]  __vb2_queue_alloc+0xa0b/0x1660
[  365.501675][T12240]  vb2_core_reqbufs+0xc3f/0x1470
[  365.501714][T12240]  ? __pfx_vb2_core_reqbufs+0x10/0x10
[  365.501742][T12240]  ? __video_do_ioctl+0x473/0xc70
[  365.501767][T12240]  ? vb2_verify_memory_type+0x1fc/0x570
[  365.501800][T12240]  vb2_ioctl_reqbufs+0x4bb/0x850
[  365.501838][T12240]  __video_do_ioctl+0x8af/0xc70
[  365.501872][T12240]  ? __pfx___video_do_ioctl+0x10/0x10
[  365.501900][T12240]  ? __might_fault+0xaf/0x130
[  365.501931][T12240]  video_usercopy+0x860/0x1430
[  365.501962][T12240]  ? __pfx___video_do_ioctl+0x10/0x10
[  365.501987][T12240]  ? __pfx_video_usercopy+0x10/0x10
[  365.502026][T12240]  ? __fget_files+0x2a/0x420
[  365.502048][T12240]  ? __fget_files+0x2a/0x420
[  365.502073][T12240]  v4l2_ioctl+0x18d/0x1e0
[  365.502096][T12240]  ? __pfx_v4l2_ioctl+0x10/0x10
[  365.502118][T12240]  __se_sys_ioctl+0xfc/0x170
[  365.502143][T12240]  do_syscall_64+0x166/0x520
[  365.502164][T12240]  ? trace_irq_disable+0x3b/0x140
[  365.502195][T12240]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  365.502217][T12240]  ? clear_bhb_loop+0x70/0xc0
[  365.502259][T12240]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  365.502282][T12240] RIP: 0033:0x7fe62759e159
[  365.502316][T12240] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  365.502335][T12240] RSP: 002b:00007fe62838e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  365.502357][T12240] RAX: ffffffffffffffda RBX: 00007fe627825fa0 RCX: 00007fe62759e159
[  365.502374][T12240] RDX: 0000200000000300 RSI: 00000000c0145608 RDI: 0000000000000004
[  365.502388][T12240] RBP: 00007fe62763506b R08: 0000000000000000 R09: 0000000000000000
[  365.502402][T12240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  365.502415][T12240] R13: 00007fe627826038 R14: 00007fe627825fa0 R15: 00007ffdf24f8108
[  365.502448][T12240]  </TASK>
[  365.502458][T12240] Mem-Info:
[  365.502468][T12240] active_anon:13070 inactive_anon:0 isolated_anon:0
[  365.502468][T12240]  active_file:0 inactive_file:55616 isolated_file:0
[  365.502468][T12240]  unevictable:0 dirty:339 writeback:0
[  365.502468][T12240]  slab_reclaimable:9108 slab_unreclaimable:104620
[  365.502468][T12240]  mapped:30688 shmem:1884 pagetables:1916
[  365.502468][T12240]  sec_pagetables:0 bounce:0
[  365.502468][T12240]  kernel_misc_reclaimable:0
[  365.502468][T12240]  free:1290723 free_pcp:14461 free_cma:0
[  365.502535][T12240] Node 0 active_anon:52280kB inactive_anon:0kB active_file:0kB inactive_file:222204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:122752kB dirty:1356kB writeback:0kB shmem:7536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15712kB pagetables:7564kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  365.502595][T12240] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:260kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:100kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  365.502648][T12240] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  365.502726][T12240] lowmem_reserve[]: 0 2486 2486 2486 2486
[  365.502768][T12240] Node 0 DMA32 free:1221496kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:52280kB inactive_anon:0kB active_file:0kB inactive_file:222204kB unevictable:0kB writepending:1356kB zspages:0kB present:3129332kB managed:2546656kB mlocked:0kB bounce:0kB free_pcp:45556kB local_pcp:19188kB free_cma:0kB
[  365.502842][T12240] lowmem_reserve[]: 0 0 0 0 0
[  365.502881][T12240] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  365.502943][T12240] lowmem_reserve[]: 0 0 0 0 0
[  365.502983][T12240] Node 1 Normal free:3926036kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:260kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:12288kB local_pcp:0kB free_cma:0kB
[  365.503050][T12240] lowmem_reserve[]: 0 0 0 0 0
[  365.503101][T12240] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  365.503272][T12240] Node 0 DMA32: 732*4kB (U) 615*8kB (UE) 1344*16kB (UME) 1038*32kB (UME) 642*64kB (UME) 281*128kB (UME) 64*256kB (UME) 39*512kB (UME) 17*1024kB (UME) 2*2048kB (M) 250*4096kB (UM) = 1221480kB
[  365.571917][T12240] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  365.572056][T12240] Node 1 Normal: 1*4kB (M) 0*8kB 7*16kB (U) 3*32kB (U) 5*64kB (UM) 6*128kB (UM) 3*256kB (UM) 2*512kB (M) 1*1024kB (M) 5*2048kB (UM) 955*4096kB (M) = 3926036kB
[  365.572233][T12240] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  365.572264][T12240] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  365.572284][T12240] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  365.572303][T12240] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[  365.572322][T12240] 57396 total pagecache pages
[  365.572332][T12240] 0 pages in swap cache
[  365.572341][T12240] Free swap  = 124996kB
[  365.572350][T12240] Total swap = 124996kB
[  365.572360][T12240] 2097051 pages RAM
[  365.572369][T12240] 0 pages HighMem/MovableOnly
[  365.572377][T12240] 428771 pages reserved
[  365.572386][T12240] 0 pages cma reserved
[  366.665428][T12249] netlink: 'syz.9.1824': attribute type 14 has an invalid length.
[  366.717957][T12249] bond1: option xmit_hash_policy: invalid value (11)
[  366.723253][T12249] bond1 (unregistering): Released all slaves
[  366.742385][T10954] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  367.007658][T12253] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  367.025365][T12249] netlink: 'syz.9.1824': attribute type 14 has an invalid length.
[  367.078935][T12249] bond1: option xmit_hash_policy: invalid value (11)
[  367.158333][T12249] bond1 (unregistering): Released all slaves
[  367.514568][ T9044] bond1: (slave gretap1): link status up again after 0 ms
[  367.534490][ T9044] bond1: (slave gretap1): link status up again after 0 ms
[  367.553495][ T9044] bond1: (slave gretap1): link status up again after 0 ms
[  367.574521][ T7832] bond1: (slave gretap1): link status up again after 0 ms
[  367.605647][ T7826] bond1: (slave gretap1): link status up again after 0 ms
[  367.628638][ T7832] bond1: (slave gretap1): link status up again after 0 ms
[  367.656223][ T9044] bond1: (slave gretap1): link status up again after 0 ms
[  367.673686][ T7832] bond1: (slave gretap1): link status up again after 0 ms
[  367.694273][ T9044] bond1: (slave gretap1): link status up again after 0 ms
[  367.715040][ T7832] bond1: (slave gretap1): link status up again after 0 ms
[  367.822247][T12274] loop9: detected capacity change from 0 to 4096
[  367.989615][T12274] ntfs3(loop9): ino=19, mi_enum_attr
[  367.989652][T12274] ntfs3(loop9): Mark volume as dirty due to NTFS errors
[  368.374723][T12291] FAULT_INJECTION: forcing a failure.
[  368.374723][T12291] name failslab, interval 1, probability 0, space 0, times 0
[  368.374766][T12291] CPU: 1 UID: 0 PID: 12291 Comm: syz.0.1839 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  368.374801][T12291] Tainted: [L]=SOFTLOCKUP
[  368.374811][T12291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  368.374826][T12291] Call Trace:
[  368.374837][T12291]  <TASK>
[  368.374848][T12291]  dump_stack_lvl+0xe8/0x150
[  368.374882][T12291]  should_fail_ex+0x3eb/0x540
[  368.374912][T12291]  should_failslab+0xa8/0x100
[  368.374939][T12291]  __kmalloc_cache_noprof+0x9e/0x600
[  368.374965][T12291]  ? write_ldt+0x4bd/0x930
[  368.374987][T12291]  ? write_ldt+0x4bd/0x930
[  368.375029][T12291]  write_ldt+0x4bd/0x930
[  368.375052][T12291]  ? __se_sys_futex+0x3a8/0x450
[  368.375081][T12291]  ? __pfx_write_ldt+0x10/0x10
[  368.375104][T12291]  ? rcu_is_watching+0x16/0xb0
[  368.375134][T12291]  __se_sys_modify_ldt+0x6c/0x310
[  368.375161][T12291]  do_syscall_64+0x166/0x520
[  368.375184][T12291]  ? trace_irq_disable+0x3b/0x140
[  368.375206][T12291]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  368.375232][T12291]  ? clear_bhb_loop+0x70/0xc0
[  368.375257][T12291]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  368.375282][T12291] RIP: 0033:0x7f9b56b9e159
[  368.375305][T12291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  368.375325][T12291] RSP: 002b:00007f9b54df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a
[  368.375351][T12291] RAX: ffffffffffffffda RBX: 00007f9b56e25fa0 RCX: 00007f9b56b9e159
[  368.375369][T12291] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000001
[  368.375384][T12291] RBP: 00007f9b56c3506b R08: 0000000000000000 R09: 0000000000000000
[  368.375400][T12291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  368.375415][T12291] R13: 00007f9b56e26038 R14: 00007f9b56e25fa0 R15: 00007ffdbdfbc3f8
[  368.375452][T12291]  </TASK>
[  368.756310][T12297] bridge0: port 1(bridge_slave_0) entered learning state
[  368.779993][T12305] loop5: detected capacity change from 0 to 7
[  368.845060][T12305] Dev loop5: unable to read RDB block 7
[  368.845108][T12305]  loop5: unable to read partition table
[  368.845316][T12305] loop5: partition table beyond EOD, truncated
[  368.845354][T12305] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  369.113444][ T6826] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  369.146817][T12312] bridge0: port 3(vlan2) entered blocking state
[  369.150215][T12312] bridge0: port 3(vlan2) entered disabled state
[  369.152120][T12312] vlan2: entered allmulticast mode
[  369.152141][T12312] geneve0: entered allmulticast mode
[  369.189243][T12312] vlan2: entered promiscuous mode
[  369.189268][T12312] geneve0: entered promiscuous mode
[  369.263700][ T6826] usb 4-1: Using ep0 maxpacket: 16
[  369.266395][ T6826] usb 4-1: New USB device found: idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  369.267569][ T6826] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  369.267600][ T6826] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  369.271788][ T6826] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  369.271815][ T6826] usb 4-1: Product: syz
[  369.271831][ T6826] usb 4-1: Manufacturer: syz
[  369.271848][ T6826] usb 4-1: SerialNumber: syz
[  369.342471][ T6826] usb 4-1: config 0 descriptor??
[  369.367589][ T6826] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  369.367629][ T6826] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class)
[  369.998506][ T6826] em28xx 4-1:0.0: unknown em28xx chip ID (0)
[  369.999178][ T6826] em28xx 4-1:0.0: Config register raw data: 0xeb
[  369.999200][ T6826] em28xx 4-1:0.0: I2S Audio (1 sample rate(s))
[  369.999218][ T6826] em28xx 4-1:0.0: No AC97 audio processor
[  370.072167][T12342] FAULT_INJECTION: forcing a failure.
[  370.072167][T12342] name failslab, interval 1, probability 0, space 0, times 0
[  370.072205][T12342] CPU: 1 UID: 0 PID: 12342 Comm: syz.9.1854 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  370.072241][T12342] Tainted: [L]=SOFTLOCKUP
[  370.072251][T12342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  370.072266][T12342] Call Trace:
[  370.072275][T12342]  <TASK>
[  370.072286][T12342]  dump_stack_lvl+0xe8/0x150
[  370.072346][T12342]  should_fail_ex+0x3eb/0x540
[  370.072376][T12342]  should_failslab+0xa8/0x100
[  370.072400][T12342]  ? ptlock_alloc+0x20/0x70
[  370.072423][T12342]  kmem_cache_alloc_noprof+0x9c/0x600
[  370.072458][T12342]  ? ptlock_alloc+0x20/0x70
[  370.072487][T12342]  ptlock_alloc+0x20/0x70
[  370.072510][T12342]  pte_alloc_one+0x7a/0x370
[  370.072536][T12342]  do_pte_missing+0x1358/0x3570
[  370.072564][T12342]  ? do_raw_spin_unlock+0xf5/0x200
[  370.072591][T12342]  ? _raw_spin_unlock+0x28/0x50
[  370.072612][T12342]  ? __pmd_alloc+0x40a/0x5c0
[  370.072640][T12342]  handle_mm_fault+0x1a53/0x3750
[  370.072675][T12342]  ? handle_mm_fault+0xf1/0x3750
[  370.072710][T12342]  ? __pfx_handle_mm_fault+0x10/0x10
[  370.072748][T12342]  ? __lock_acquire+0x747/0x2de0
[  370.072773][T12342]  ? lock_mm_and_find_vma+0xa7/0x340
[  370.072799][T12342]  do_user_addr_fault+0x7f6/0x1480
[  370.072840][T12342]  exc_page_fault+0x6a/0xc0
[  370.072865][T12342]  asm_exc_page_fault+0x26/0x30
[  370.072886][T12342] RIP: 0010:rep_movs_alternative+0x30/0xa0
[  370.072911][T12342] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 cd 76 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08
[  370.072931][T12342] RSP: 0018:ffffc900062ffcf8 EFLAGS: 00050216
[  370.072954][T12342] RAX: 00007ffffffff001 RBX: 0000000000000020 RCX: 0000000000000020
[  370.072970][T12342] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffc900062ffe20
[  370.072986][T12342] RBP: ffffc900062ffea8 R08: ffffc900062ffe3f R09: 1ffff92000c5ffc7
[  370.073004][T12342] R10: dffffc0000000000 R11: fffff52000c5ffc8 R12: 0000000000000026
[  370.073021][T12342] R13: 1ffff92000c5ffac R14: ffffc900062ffe20 R15: 0000000000000000
[  370.073056][T12342]  _copy_from_user+0x7a/0xb0
[  370.073081][T12342]  do_fcntl+0x913/0x1a20
[  370.073107][T12342]  ? lock_acquire+0x115/0x350
[  370.073129][T12342]  ? __pfx_do_fcntl+0x10/0x10
[  370.073160][T12342]  ? __fget_files+0x2a/0x420
[  370.073184][T12342]  ? __fget_files+0x2a/0x420
[  370.073215][T12342]  ? bpf_lsm_file_fcntl+0x9/0x20
[  370.073242][T12342]  __se_sys_fcntl+0xc8/0x150
[  370.073268][T12342]  do_syscall_64+0x166/0x520
[  370.073291][T12342]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  370.073314][T12342]  ? clear_bhb_loop+0x70/0xc0
[  370.073339][T12342]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  370.073362][T12342] RIP: 0033:0x7ff7d4f9e159
[  370.073382][T12342] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  370.073403][T12342] RSP: 002b:00007ff7d5e29028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048
[  370.073427][T12342] RAX: ffffffffffffffda RBX: 00007ff7d5225fa0 RCX: 00007ff7d4f9e159
[  370.073454][T12342] RDX: 0000000000000000 RSI: 0000000000000026 RDI: 0000000000000003
[  370.073468][T12342] RBP: 00007ff7d503506b R08: 0000000000000000 R09: 0000000000000000
[  370.073484][T12342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  370.073498][T12342] R13: 00007ff7d5226038 R14: 00007ff7d5225fa0 R15: 00007fffba0725a8
[  370.073534][T12342]  </TASK>
[  370.676845][ T6826] usb 4-1: USB disconnect, device number 16
[  370.915027][    T9] usb 10-1: new low-speed USB device number 6 using dummy_hcd
[  371.023705][T12357] loop4: detected capacity change from 0 to 256
[  371.047824][T12357] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  371.083972][T12357] exFAT-fs (loop4): valid_size(562949953421322) is greater than size(10)
[  371.085275][   T32] audit: type=1800 audit(1790959260.228:157): pid=12357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1860" name="file1" dev="loop4" ino=15 res=0 errno=-22
[  371.149789][    T9] usb 10-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  371.151142][    T9] usb 10-1: config 168 descriptor has 1 excess byte, ignoring
[  371.151188][    T9] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  371.151217][    T9] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  371.151242][    T9] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  371.151269][    T9] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  371.181812][    T9] usb 10-1: config 168 descriptor has 1 excess byte, ignoring
[  371.181875][    T9] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  371.181907][    T9] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  371.181937][    T9] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  371.181965][    T9] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  371.206248][    T9] usb 10-1: config 168 descriptor has 1 excess byte, ignoring
[  371.206296][    T9] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  371.206323][    T9] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  371.206348][    T9] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  371.206374][    T9] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  371.336018][    T9] usb 10-1: string descriptor 0 read error: -22
[  371.336174][    T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  371.375058][    T9] adutux 10-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  371.593523][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  371.641112][    T9] usb 10-1: USB disconnect, device number 6
[  372.198999][T12353] loop0: detected capacity change from 0 to 32768
[  372.323147][T12353] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  372.410121][T12353] XFS (loop0): Ending clean mount
[  372.434978][   T32] audit: type=1800 audit(1790959261.578:158): pid=12353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1858" name="file1" dev="loop0" ino=6150 res=0 errno=-22
[  372.542252][T12400] loop9: detected capacity change from 0 to 128
[  372.623923][ T7822] net_ratelimit: 40 callbacks suppressed
[  372.623948][ T7822] bond1: (slave gretap1): failed to get link speed/duplex
[  372.664444][ T6827] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  372.687516][T12400] FAULT_INJECTION: forcing a failure.
[  372.687516][T12400] name failslab, interval 1, probability 0, space 0, times 0
[  372.687554][T12400] CPU: 1 UID: 0 PID: 12400 Comm: syz.9.1869 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  372.687588][T12400] Tainted: [L]=SOFTLOCKUP
[  372.687604][T12400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  372.687619][T12400] Call Trace:
[  372.687629][T12400]  <TASK>
[  372.687640][T12400]  dump_stack_lvl+0xe8/0x150
[  372.687673][T12400]  should_fail_ex+0x3eb/0x540
[  372.687704][T12400]  ? __pfx_fat_alloc_inode+0x10/0x10
[  372.687733][T12400]  should_failslab+0xa8/0x100
[  372.687759][T12400]  ? __pfx_fat_alloc_inode+0x10/0x10
[  372.687781][T12400]  kmem_cache_alloc_lru_noprof+0xa2/0x5f0
[  372.687809][T12400]  ? fat_alloc_inode+0x30/0xf0
[  372.687831][T12400]  ? fat_alloc_inode+0x30/0xf0
[  372.687860][T12400]  ? __pfx_fat_alloc_inode+0x10/0x10
[  372.687882][T12400]  fat_alloc_inode+0x30/0xf0
[  372.687907][T12400]  ? __pfx_fat_alloc_inode+0x10/0x10
[  372.687929][T12400]  alloc_inode+0x6a/0x1b0
[  372.687955][T12400]  new_inode+0x1f/0x170
[  372.687981][T12400]  fat_build_inode+0x201/0x3e0
[  372.688012][T12400]  vfat_lookup+0x255/0x490
[  372.688042][T12400]  ? __pfx_vfat_lookup+0x10/0x10
[  372.688072][T12400]  ? do_raw_spin_unlock+0xf5/0x200
[  372.688100][T12400]  ? _raw_spin_unlock+0x28/0x50
[  372.688122][T12400]  ? d_alloc+0x144/0x190
[  372.688156][T12400]  lookup_one_qstr_excl+0x12d/0x360
[  372.688188][T12400]  filename_create+0x20e/0x370
[  372.688220][T12400]  ? __pfx_filename_create+0x10/0x10
[  372.688258][T12400]  filename_mknodat+0x18c/0x660
[  372.688288][T12400]  ? __pfx_filename_mknodat+0x10/0x10
[  372.688317][T12400]  ? do_getname+0x151/0x250
[  372.688344][T12400]  __se_sys_mknodat+0x3b/0x150
[  372.688371][T12400]  do_syscall_64+0x166/0x520
[  372.688393][T12400]  ? trace_irq_disable+0x3b/0x140
[  372.688418][T12400]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  372.688443][T12400]  ? clear_bhb_loop+0x70/0xc0
[  372.688469][T12400]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  372.688493][T12400] RIP: 0033:0x7ff7d4f9e159
[  372.688516][T12400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  372.688537][T12400] RSP: 002b:00007ff7d5e29028 EFLAGS: 00000246 ORIG_RAX: 0000000000000103
[  372.688562][T12400] RAX: ffffffffffffffda RBX: 00007ff7d5225fa0 RCX: 00007ff7d4f9e159
[  372.688581][T12400] RDX: 0000000000001000 RSI: 0000200000000140 RDI: ffffffffffffff9c
[  372.688598][T12400] RBP: 00007ff7d503506b R08: 0000000000000000 R09: 0000000000000000
[  372.688614][T12400] R10: 0000000000000713 R11: 0000000000000246 R12: 0000000000000000
[  372.688629][T12400] R13: 00007ff7d5226038 R14: 00007ff7d5225fa0 R15: 00007fffba0725a8
[  372.688668][T12400]  </TASK>
[  372.740712][ T7822] bond1: (slave gretap1): failed to get link speed/duplex
[  372.844547][ T6827] usb 4-1: Using ep0 maxpacket: 16
[  372.862703][ T7832] bond1: (slave gretap1): failed to get link speed/duplex
[  372.864653][ T6826] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  372.867434][ T6827] usb 4-1: New USB device found: idVendor=056a, idProduct=0331, bcdDevice=0.00
[  372.935032][ T6827] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  372.935152][ T6827] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  372.935223][ T6827] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[  372.935298][ T6827] usb 4-1: config 0 interface 0 has no altsetting 0
[  372.935395][ T6827] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  372.964258][ T5949] bond1: (slave gretap1): failed to get link speed/duplex
[  372.983963][ T6827] usb 4-1: config 0 descriptor??
[  373.056091][ T6826] usb 2-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00
[  373.084566][ T7828] bond1: (slave gretap1): failed to get link speed/duplex
[  373.107815][ T6826] usb 2-1: config 1 has an invalid interface number: 3 but max is 0
[  373.107836][ T6826] usb 2-1: config 1 has no interface number 0
[  373.131024][ T6826] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  373.131061][ T6826] usb 2-1: Product: syz
[  373.131072][ T6826] usb 2-1: Manufacturer: syz
[  373.131084][ T6826] usb 2-1: SerialNumber: syz
[  373.162606][   T32] audit: type=1800 audit(1790959262.268:159): pid=12401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1858" name="file1" dev="loop0" ino=6150 res=0 errno=-4
[  373.194425][ T7832] bond1: (slave gretap1): failed to get link speed/duplex
[  373.241633][ T6826] usb 2-1: 3:0 : does not exist
[  373.241658][ T6826] usb 2-1: 3:0 : does not exist
[  373.313215][   T13] bond1: (slave gretap1): failed to get link speed/duplex
[  373.332494][ T9144] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  373.415012][   T13] bond1: (slave gretap1): failed to get link speed/duplex
[  373.487922][ T6827] hid (null): unknown global tag 0xe
[  373.514175][ T6827] hid (null): unknown global tag 0x88
[  373.514278][ T6827] hid (null): global environment stack underflow
[  373.534339][ T5949] bond1: (slave gretap1): failed to get link speed/duplex
[  373.644654][ T5949] bond1: (slave gretap1): failed to get link speed/duplex
[  373.722826][ T6827] usb 4-1: USB disconnect, device number 17
[  373.727432][ T6826] usb 2-1: USB disconnect, device number 18
[  374.142600][T12411] loop9: detected capacity change from 0 to 32768
[  374.157191][T12411] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.1871 (12411)
[  374.201645][T12411] BTRFS info (device loop9): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  374.201691][T12411] BTRFS info (device loop9): using blake2b checksum algorithm
[  374.279939][ T5618] udevd[5618]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  374.590263][T12411] BTRFS info (device loop9): enabling ssd optimizations
[  374.590292][T12411] BTRFS info (device loop9): turning on async discard
[  374.590310][T12411] BTRFS info (device loop9): enabling free space tree
[  374.590330][T12411] BTRFS info (device loop9): use zstd compression, level 3
[  375.003489][T12461] loop4: detected capacity change from 0 to 256
[  375.605658][ T9128] BTRFS info (device loop9): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  375.891193][T12477] loop4: detected capacity change from 0 to 2048
[  375.918649][T12477] ext4: Unknown parameter 'nouser_xattr'
[  376.045951][T12483] loop0: detected capacity change from 0 to 1024
[  376.151246][T12483] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  376.151352][T12483] ext4 filesystem being mounted at /149/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  376.317300][T12483] EXT4-fs error (device loop0): ext4_map_blocks:832: inode #15: comm syz.0.1891: lblock 0 mapped to illegal pblock 0 (length 6)
[  376.407521][T12483] EXT4-fs (loop0): Remounting filesystem read-only
[  376.456922][T12500] loop9: detected capacity change from 0 to 256
[  376.461133][T12500] exfat: Deprecated parameter 'utf8'
[  376.542535][T12501] loop3: detected capacity change from 0 to 128
[  376.602122][T12500] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x1a991031, utbl_chksum : 0xe619d30d)
[  376.648912][ T9144] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  376.753399][ T5814] usb 5-1: new full-speed USB device number 28 using dummy_hcd
[  376.798929][T12061] Bluetooth: hci3: unexpected event for opcode 0x1003
[  376.800474][T12061] Bluetooth: hci3: unexpected event for opcode 0x2003
[  376.878827][   T32] audit: type=1800 audit(1790959266.029:160): pid=12500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1882" name="file1" dev="loop9" ino=18 res=0 errno=-22
[  376.924096][ T5814] usb 5-1: New USB device found: idVendor=0b48, idProduct=1003, bcdDevice=1.00
[  376.925286][ T5814] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  376.925350][ T5814] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0
[  376.925376][ T5814] usb 5-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  376.925420][ T5814] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  377.100937][T12519] FAULT_INJECTION: forcing a failure.
[  377.100937][T12519] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  377.100975][T12519] CPU: 1 UID: 0 PID: 12519 Comm: syz.0.1901 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  377.101008][T12519] Tainted: [L]=SOFTLOCKUP
[  377.101017][T12519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  377.101032][T12519] Call Trace:
[  377.101040][T12519]  <TASK>
[  377.101051][T12519]  dump_stack_lvl+0xe8/0x150
[  377.101084][T12519]  should_fail_ex+0x3eb/0x540
[  377.101115][T12519]  _copy_to_user+0x31/0xb0
[  377.101140][T12519]  bpf_verifier_vlog+0x52a/0x900
[  377.101182][T12519]  __btf_verifier_log+0xe2/0x140
[  377.101214][T12519]  ? __pfx___btf_verifier_log+0x10/0x10
[  377.101254][T12519]  btf_verifier_log_vsi+0x1fc/0x3e0
[  377.101296][T12519]  ? __pfx_btf_verifier_log_vsi+0x10/0x10
[  377.101339][T12519]  btf_datasec_check_meta+0x95c/0xad0
[  377.101383][T12519]  btf_parse_type_sec+0x3cf/0x24a0
[  377.101416][T12519]  ? __pfx_btf_check_sec_info+0x10/0x10
[  377.101447][T12519]  ? btf_parse_str_sec+0x244/0x2f0
[  377.101476][T12519]  btf_new_fd+0x4ad/0xc20
[  377.101501][T12519]  ? do_accept+0x540/0x730
[  377.101528][T12519]  __sys_bpf+0xda7/0xe00
[  377.101557][T12519]  ? do_accept+0x540/0x730
[  377.101579][T12519]  ? __pfx___sys_bpf+0x10/0x10
[  377.101618][T12519]  ? do_futex+0x458/0x4e0
[  377.101642][T12519]  ? do_accept+0x540/0x730
[  377.101689][T12519]  ? rcu_is_watching+0x16/0xb0
[  377.101719][T12519]  __x64_sys_bpf+0xba/0xd0
[  377.101746][T12519]  do_syscall_64+0x166/0x520
[  377.101768][T12519]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  377.101792][T12519]  ? clear_bhb_loop+0x70/0xc0
[  377.101817][T12519]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  377.101840][T12519] RIP: 0033:0x7f9b56b9e159
[  377.101862][T12519] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  377.101883][T12519] RSP: 002b:00007f9b54df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  377.101909][T12519] RAX: ffffffffffffffda RBX: 00007f9b56e25fa0 RCX: 00007f9b56b9e159
[  377.101927][T12519] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012
[  377.101942][T12519] RBP: 00007f9b56c3506b R08: 0000000000000000 R09: 0000000000000000
[  377.101957][T12519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  377.101971][T12519] R13: 00007f9b56e26038 R14: 00007f9b56e25fa0 R15: 00007ffdbdfbc3f8
[  377.102008][T12519]  </TASK>
[  377.584052][ T5814] dvb_ttusb_budget: ttusb_init_controller: error
[  377.584074][ T5814] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  377.687165][ T5814] DVB: Unable to find symbol stv0299_attach()
[  377.705634][ T5949] net_ratelimit: 35 callbacks suppressed
[  377.705655][ T5949] bond1: (slave gretap1): failed to get link speed/duplex
[  377.757296][ T5814] DVB: Unable to find symbol tda8083_attach()
[  377.757315][ T5814] dvb_ttusb_budget: no frontend driver found for device [0b48:1003]
[  377.795236][ T6825] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[  377.814452][ T7832] bond1: (slave gretap1): failed to get link speed/duplex
[  377.924369][ T7828] bond1: (slave gretap1): failed to get link speed/duplex
[  377.943461][ T6825] usb 10-1: Using ep0 maxpacket: 32
[  377.946742][ T6825] usb 10-1: New USB device found: idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  377.948002][ T6825] usb 10-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[  377.948047][ T6825] usb 10-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  377.948073][ T6825] usb 10-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  377.948132][ T6825] usb 10-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  377.951693][ T6825] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  377.951726][ T6825] usb 10-1: Product: syz
[  377.951741][ T6825] usb 10-1: Manufacturer: syz
[  377.951757][ T6825] usb 10-1: SerialNumber: syz
[  378.001746][    C1] imon 10-1:155.0: imon usb_rx_callback_intf0: status(-71)
[  378.050752][   T13] bond1: (slave gretap1): failed to get link speed/duplex
[  378.065991][T12538] dvb_ttusb_budget: cmd xter failed, receive error -90
[  378.068053][ T6826] usb 5-1: USB disconnect, device number 28
[  378.124408][ T6825] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:155.0/input/input22
[  378.150171][ T5707] usb 1-1: new full-speed USB device number 12 using dummy_hcd
[  378.163456][   T13] bond1: (slave gretap1): failed to get link speed/duplex
[  378.280094][ T7829] bond1: (slave gretap1): failed to get link speed/duplex
[  378.280236][ T6825] imon 10-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[  378.280254][ T6825]  (id 0x00)
[  378.334088][ T5707] usb 1-1: New USB device found: idVendor=04b8, idProduct=0202, bcdDevice=0.40
[  378.338422][ T5707] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  378.338450][ T5707] usb 1-1: Product: syz
[  378.338467][ T5707] usb 1-1: Manufacturer: syz
[  378.338483][ T5707] usb 1-1: SerialNumber: syz
[  378.385589][   T13] bond1: (slave gretap1): failed to get link speed/duplex
[  378.415398][ T6825] rc_core: IR keymap rc-imon-pad not found
[  378.415419][ T6825] Registered IR keymap rc-empty
[  378.415832][ T6825] imon 10-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[  378.415853][ T6825] imon 10-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  378.475003][ T6825] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:155.0/rc/rc0
[  378.480682][ T6825] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:155.0/rc/rc0/input23
[  378.500510][ T7826] bond1: (slave gretap1): failed to get link speed/duplex
[  378.515704][ T6825] imon 10-1:155.0: iMON device (15c2:ffdc) on usb<10:7> initialized
[  378.604373][ T7824] bond1: (slave gretap1): failed to get link speed/duplex
[  378.629327][ T1314] ieee802154 phy0 wpan0: encryption failed: -22
[  378.629383][ T1314] ieee802154 phy1 wpan1: encryption failed: -22
[  378.703055][ T6825] usb 10-1: USB disconnect, device number 7
[  378.714080][ T7826] bond1: (slave gretap1): failed to get link speed/duplex
[  378.835204][ T5707] usblp 1-1:1.0: usblp1: USB Unidirectional printer dev 12 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202
[  378.870534][T12543] loop3: detected capacity change from 0 to 32768
[  378.937755][T12545] loop4: detected capacity change from 0 to 4096
[  378.985045][T12543] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  379.010893][T12545] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  379.082243][T12543] XFS (loop3): Ending clean mount
[  379.406217][T12563] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer.
[  379.510056][T10954] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  380.195755][ T9588] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  380.253384][ T6825] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[  380.322402][T12588] loop1: detected capacity change from 0 to 256
[  380.376744][T12588] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011bf5, chksum : 0x8604b368, utbl_chksum : 0xe619d30d)
[  380.378328][T12588] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  380.379402][T12588] exFAT-fs (loop1): failed to load alloc-bitmap
[  380.379417][T12588] exFAT-fs (loop1): failed to recognize exfat type
[  380.407796][ T6825] usb 10-1: New USB device found: idVendor=0525, idProduct=a4a7, bcdDevice=1.00
[  380.421873][ T6825] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  380.535909][T12588] loop1: detected capacity change from 256 to 1
[  380.660944][ T6825] cdc_acm 10-1:1.0: ttyACM0: USB ACM device
[  380.701323][T12595] 9pnet_fd: p9_fd_create_unix (12595): problem connecting socket: ./proc: -12
[  380.703301][T12061] Bluetooth: hci5: command 0x0406 tx timeout
[  380.836100][T12597] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1926'.
[  380.918558][    T9] usb 1-1: USB disconnect, device number 12
[  380.947197][    T9] usblp1: removed
[  380.989693][T12605] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1930'.
[  381.015791][T12605] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1930'.
[  381.061644][T12608] FAULT_INJECTION: forcing a failure.
[  381.061644][T12608] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  381.061689][T12608] CPU: 0 UID: 0 PID: 12608 Comm: syz.0.1932 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  381.061727][T12608] Tainted: [L]=SOFTLOCKUP
[  381.061738][T12608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  381.061755][T12608] Call Trace:
[  381.061765][T12608]  <TASK>
[  381.061795][T12608]  dump_stack_lvl+0xe8/0x150
[  381.061832][T12608]  should_fail_ex+0x3eb/0x540
[  381.061867][T12608]  _copy_to_iter+0x404/0x1810
[  381.061913][T12608]  ? __pfx__copy_to_iter+0x10/0x10
[  381.061938][T12608]  ? rcu_is_watching+0x16/0xb0
[  381.061964][T12608]  ? __up_read+0x29c/0x930
[  381.061989][T12608]  ? pin_user_pages_remote+0xdc/0x130
[  381.062022][T12608]  ? __pfx___up_read+0x10/0x10
[  381.062051][T12608]  copy_page_to_iter+0x23f/0x330
[  381.062083][T12608]  process_vm_rw+0x863/0xba0
[  381.062123][T12608]  ? __pfx_process_vm_rw+0x10/0x10
[  381.062147][T12608]  ? futex_wait+0x2a2/0x390
[  381.062242][T12608]  ? rcu_is_watching+0x16/0xb0
[  381.062275][T12608]  __x64_sys_process_vm_readv+0xe0/0x100
[  381.062309][T12608]  do_syscall_64+0x166/0x520
[  381.062334][T12608]  ? trace_irq_disable+0x3b/0x140
[  381.062358][T12608]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  381.062386][T12608]  ? clear_bhb_loop+0x70/0xc0
[  381.062427][T12608]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  381.062463][T12608] RIP: 0033:0x7f9b56b9e159
[  381.062488][T12608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  381.062512][T12608] RSP: 002b:00007f9b54df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000136
[  381.062540][T12608] RAX: ffffffffffffffda RBX: 00007f9b56e25fa0 RCX: 00007f9b56b9e159
[  381.062560][T12608] RDX: 0000000000000002 RSI: 0000200000008400 RDI: 000000000000018e
[  381.062577][T12608] RBP: 00007f9b56c3506b R08: 0000000000000286 R09: 0000000000000000
[  381.062596][T12608] R10: 0000200000008640 R11: 0000000000000246 R12: 0000000000000000
[  381.062613][T12608] R13: 00007f9b56e26038 R14: 00007f9b56e25fa0 R15: 00007ffdbdfbc3f8
[  381.062653][T12608]  </TASK>
[  381.116118][ T6825] usb 5-1: new full-speed USB device number 29 using dummy_hcd
[  381.314560][ T6825] usb 5-1: New USB device found: idVendor=046d, idProduct=c29c, bcdDevice=0.40
[  381.316243][ T6825] usb 5-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  381.316282][ T6825] usb 5-1: config 1 interface 0 has no altsetting 0
[  381.368306][ T6825] usb 5-1: string descriptor 0 read error: -22
[  381.368462][ T6825] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  381.377962][ T6826] usb 10-1: USB disconnect, device number 8
[  381.419375][T12602] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  381.442144][T12613] loop1: detected capacity change from 0 to 512
[  381.453701][T12613] EXT4-fs: Ignoring removed oldalloc option
[  381.497314][T12613] EXT4-fs warning (device loop1): dx_probe:861: inode #2: comm syz.1.1934: dx entry: limit 1024 != root limit 124
[  381.497361][T12613] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.1934: Corrupt directory, running e2fsck is recommended
[  381.558369][T12613] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117
[  381.558526][T12613] EXT4-fs error (device loop1): ext4_iget_extra_inode:5210: inode #15: comm syz.1.1934: corrupted in-inode xattr: invalid ea_ino
[  381.558592][T12613] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  381.563375][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  381.563482][    C1] EXT4-fs (loop1): initial error at time 1790959270: ext4_iget_extra_inode:5210: inode 15
[  381.563592][    C1] EXT4-fs (loop1): last error at time 1790959270: ext4_iget_extra_inode:5210: inode 15
[  381.567559][T12613] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.1934: couldn't read orphan inode 15 (err -117)
[  381.567593][T12613] loop1: lost filesystem error report for type 5 error -117
[  381.660232][T12613] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  381.745041][T12613] EXT4-fs warning (device loop1): dx_probe:861: inode #2: comm syz.1.1934: dx entry: limit 1024 != root limit 124
[  381.745084][T12613] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.1934: Corrupt directory, running e2fsck is recommended
[  381.822621][T12613] EXT4-fs warning (device loop1): dx_probe:861: inode #2: comm syz.1.1934: dx entry: limit 1024 != root limit 124
[  381.822660][T12613] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.1934: Corrupt directory, running e2fsck is recommended
[  381.838916][T12619] EXT4-fs warning (device loop1): dx_probe:861: inode #2: comm syz.1.1934: dx entry: limit 1024 != root limit 124
[  381.839060][T12619] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.1934: Corrupt directory, running e2fsck is recommended
[  381.888625][T12613] EXT4-fs warning (device loop1): dx_probe:861: inode #2: comm syz.1.1934: dx entry: limit 1024 != root limit 124
[  381.888663][T12613] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.1934: Corrupt directory, running e2fsck is recommended
[  381.892080][T12613] EXT4-fs warning (device loop1): dx_probe:861: inode #2: comm syz.1.1934: dx entry: limit 1024 != root limit 124
[  381.892140][T12613] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.1934: Corrupt directory, running e2fsck is recommended
[  381.960222][ T6825] logitech 0003:046D:C29C.0012: unknown main item tag 0x0
[  381.960262][ T6825] logitech 0003:046D:C29C.0012: unknown main item tag 0x0
[  381.960292][ T6825] logitech 0003:046D:C29C.0012: unknown main item tag 0x0
[  381.960331][ T6825] logitech 0003:046D:C29C.0012: unknown main item tag 0x0
[  381.960357][ T6825] logitech 0003:046D:C29C.0012: unknown main item tag 0x0
[  381.960392][ T6825] logitech 0003:046D:C29C.0012: unknown main item tag 0x0
[  381.960420][ T6825] logitech 0003:046D:C29C.0012: unknown main item tag 0x0
[  381.960446][ T6825] logitech 0003:046D:C29C.0012: unknown main item tag 0x0
[  381.960473][ T6825] logitech 0003:046D:C29C.0012: unknown main item tag 0x0
[  381.960500][ T6825] logitech 0003:046D:C29C.0012: unknown main item tag 0x0
[  382.119078][ T9260] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  382.136843][ T6825] logitech 0003:046D:C29C.0012: hidraw0: USB HID v0.22 Device [HID 046d:c29c] on usb-dummy_hcd.4-1/input0
[  382.174367][ T6825] logitech 0003:046D:C29C.0012: no inputs found
[  382.261313][ T6825] usb 5-1: USB disconnect, device number 29
[  382.370640][T12630] fido_id[12630]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  382.389730][ T5814] usb 10-1: new high-speed USB device number 9 using dummy_hcd
[  382.520839][T12642] FAULT_INJECTION: forcing a failure.
[  382.520839][T12642] name failslab, interval 1, probability 0, space 0, times 0
[  382.520876][T12642] CPU: 1 UID: 0 PID: 12642 Comm: syz.1.1943 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  382.520922][T12642] Tainted: [L]=SOFTLOCKUP
[  382.520932][T12642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  382.520955][T12642] Call Trace:
[  382.520964][T12642]  <TASK>
[  382.520982][T12642]  dump_stack_lvl+0xe8/0x150
[  382.521026][T12642]  should_fail_ex+0x3eb/0x540
[  382.521056][T12642]  should_failslab+0xa8/0x100
[  382.521082][T12642]  __kvmalloc_node_noprof+0x171/0x820
[  382.521108][T12642]  ? __kmalloc_cache_noprof+0x31c/0x600
[  382.521135][T12642]  ? io_ring_ctx_alloc+0x1ad/0xb80
[  382.521156][T12642]  ? io_ring_ctx_alloc+0x1ad/0xb80
[  382.521186][T12642]  io_ring_ctx_alloc+0x1ad/0xb80
[  382.521210][T12642]  ? io_prepare_config+0x8c8/0xc70
[  382.521238][T12642]  io_uring_create+0x50/0x980
[  382.521265][T12642]  __se_sys_io_uring_setup+0x2a8/0x2c0
[  382.521288][T12642]  ? lock_acquire+0x115/0x350
[  382.521311][T12642]  ? __pfx___se_sys_io_uring_setup+0x10/0x10
[  382.521350][T12642]  ? rcu_is_watching+0x16/0xb0
[  382.521387][T12642]  do_syscall_64+0x166/0x520
[  382.521415][T12642]  ? trace_irq_disable+0x3b/0x140
[  382.521435][T12642]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  382.521460][T12642]  ? clear_bhb_loop+0x70/0xc0
[  382.521485][T12642]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  382.521509][T12642] RIP: 0033:0x7fe62759e159
[  382.521531][T12642] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  382.521552][T12642] RSP: 002b:00007fe62838dfb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9
[  382.521576][T12642] RAX: ffffffffffffffda RBX: 0000200000000340 RCX: 00007fe62759e159
[  382.521594][T12642] RDX: 0000200000000040 RSI: 0000200000000340 RDI: 0000000000000021
[  382.521610][T12642] RBP: 00007fe62763506b R08: 0000000000000000 R09: 0000000000000000
[  382.521626][T12642] R10: 0000200000000140 R11: 0000000000000206 R12: 0000200000000040
[  382.521642][T12642] R13: 0000200000000140 R14: 0000200000000000 R15: 00007ffdf24f8108
[  382.521677][T12642]  </TASK>
[  382.569034][ T5814] usb 10-1: New USB device found: idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  382.644815][ T5814] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  382.644854][ T5814] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  382.644907][ T5814] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  382.793157][ T9044] net_ratelimit: 35 callbacks suppressed
[  382.793563][ T9044] bond1: (slave gretap1): failed to get link speed/duplex
[  382.812893][T12627] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  382.829577][ T5814] usb 10-1: Quirk or no altset; falling back to MIDI 1.0
[  382.904710][ T7826] bond1: (slave gretap1): failed to get link speed/duplex
[  383.014047][   T13] bond1: (slave gretap1): failed to get link speed/duplex
[  383.126062][ T5949] bond1: (slave gretap1): failed to get link speed/duplex
[  383.129895][ T6825] usb 10-1: USB disconnect, device number 9
[  383.234050][   T13] bond1: (slave gretap1): failed to get link speed/duplex
[  383.345027][ T9044] bond1: (slave gretap1): failed to get link speed/duplex
[  383.453498][ T9044] bond1: (slave gretap1): failed to get link speed/duplex
[  383.481092][T12665] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1952'.
[  383.481128][T12665] netlink: 'syz.3.1952': attribute type 12 has an invalid length.
[  383.507809][T12665] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1952'.
[  383.507842][T12665] netlink: 'syz.3.1952': attribute type 12 has an invalid length.
[  383.526676][   T13] netdevsim netdevsim3 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0
[  383.529159][ T9044] netdevsim netdevsim3 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0
[  383.529260][ T9044] netdevsim netdevsim3 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0
[  383.529366][ T9044] netdevsim netdevsim3 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0
[  383.568403][ T5949] bond1: (slave gretap1): failed to get link speed/duplex
[  383.674323][   T13] bond1: (slave gretap1): failed to get link speed/duplex
[  383.784756][ T9044] bond1: (slave gretap1): failed to get link speed/duplex
[  384.018060][T12679] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1959'.
[  384.018204][T12679] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  384.083377][T12679] batman_adv: batadv0: Removing interface: batadv_slave_1
[  384.533438][ T5814] usb 1-1: new full-speed USB device number 13 using dummy_hcd
[  384.695774][ T5814] usb 1-1: New USB device found: idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  384.701242][ T5814] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  384.701292][ T5814] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[  384.701322][ T5814] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10
[  384.701351][ T5814] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  384.701385][ T5814] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  384.775944][ T5814] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  384.775975][ T5814] usb 1-1: Product: syz
[  384.775992][ T5814] usb 1-1: Manufacturer: syz
[  384.776010][ T5814] usb 1-1: SerialNumber: syz
[  384.801786][ T5814] usb 1-1: config 0 descriptor??
[  384.828708][T12704] netlink: 'syz.4.1970': attribute type 1 has an invalid length.
[  384.888280][T12704] bond2: entered promiscuous mode
[  384.888863][T12704] 8021q: adding VLAN 0 to HW filter on device bond2
[  384.999347][T12693] loop1: detected capacity change from 0 to 40427
[  385.010518][T12704] 8021q: adding VLAN 0 to HW filter on device bond2
[  385.010986][T12704] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address
[  385.011009][T12704] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  385.063563][T12693] F2FS-fs (loop1): invalid crc value
[  385.081260][T12704] bond2: (slave wireguard0): making interface the new active one
[  385.081286][T12704] wireguard0: entered promiscuous mode
[  385.097975][T12704] bond2: (slave wireguard0): Enslaving as an active interface with an up link
[  385.131847][ T5814] radio-si470x 1-1:0.0: DeviceID=0x0000 ChipID=0x0000
[  385.131894][ T5814] radio-si470x 1-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0.
[  385.329357][ T5814] radio-si470x 1-1:0.0: software version 0, hardware version 0
[  385.329387][ T5814] radio-si470x 1-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0.
[  385.329410][ T5814] radio-si470x 1-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org
[  385.412266][T12715] sctp: [Deprecated]: syz.4.1972 (pid 12715) Use of int in max_burst socket option deprecated.
[  385.412266][T12715] Use struct sctp_assoc_value instead
[  385.533413][ T5814] radio-si470x 1-1:0.0: submitting int urb failed (-90)
[  385.587445][T12693] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  385.702759][T12693] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  385.726165][T12720] FAULT_INJECTION: forcing a failure.
[  385.726165][T12720] name failslab, interval 1, probability 0, space 0, times 0
[  385.726205][T12720] CPU: 0 UID: 0 PID: 12720 Comm: syz.9.1974 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  385.726238][T12720] Tainted: [L]=SOFTLOCKUP
[  385.726248][T12720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  385.726263][T12720] Call Trace:
[  385.726272][T12720]  <TASK>
[  385.726283][T12720]  dump_stack_lvl+0xe8/0x150
[  385.726314][T12720]  should_fail_ex+0x3eb/0x540
[  385.726346][T12720]  should_failslab+0xa8/0x100
[  385.726373][T12720]  __kmalloc_node_track_caller_noprof+0xf6/0x720
[  385.726400][T12720]  ? __lock_acquire+0x747/0x2de0
[  385.726423][T12720]  ? __kernfs_new_node+0xa9/0x980
[  385.726444][T12720]  ? __kernfs_new_node+0xa9/0x980
[  385.726475][T12720]  kstrdup+0x42/0x100
[  385.726500][T12720]  __kernfs_new_node+0xa9/0x980
[  385.726535][T12720]  ? __pfx___kernfs_new_node+0x10/0x10
[  385.726559][T12720]  ? kernfs_root+0x1c/0x230
[  385.726597][T12720]  ? kernfs_root+0x1c/0x230
[  385.726618][T12720]  ? kernfs_root+0x1c/0x230
[  385.726638][T12720]  ? kernfs_root+0x1c/0x230
[  385.726667][T12720]  kernfs_create_dir_ns+0xf7/0x220
[  385.726696][T12720]  sysfs_create_dir_ns+0x12f/0x2a0
[  385.726726][T12720]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  385.726755][T12720]  ? do_raw_spin_unlock+0xf5/0x200
[  385.726784][T12720]  kobject_add_internal+0x622/0xcd0
[  385.726816][T12720]  kobject_add+0x163/0x240
[  385.726846][T12720]  ? __pfx_kobject_add+0x10/0x10
[  385.726866][T12720]  ? kobject_put+0x50f/0x550
[  385.726895][T12720]  ? get_device_parent+0x366/0x3a0
[  385.726924][T12720]  device_add+0x3fa/0xb80
[  385.726950][T12720]  netdev_register_kobject+0x197/0x350
[  385.726981][T12720]  register_netdevice+0x142e/0x1eb0
[  385.727024][T12720]  ? __pfx_register_netdevice+0x10/0x10
[  385.727048][T12720]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  385.727094][T12720]  ? idr_alloc+0x89/0xd0
[  385.727118][T12720]  ppp_dev_configure+0x806/0xaa0
[  385.727142][T12720]  ? alloc_netdev_mqs+0xe92/0x1240
[  385.727172][T12720]  ppp_ioctl+0xaff/0x1c00
[  385.727201][T12720]  ? __pfx_ppp_ioctl+0x10/0x10
[  385.727220][T12720]  ? __fget_files+0x2a/0x420
[  385.727257][T12720]  ? __fget_files+0x2a/0x420
[  385.727277][T12720]  ? __fget_files+0x2a/0x420
[  385.727301][T12720]  ? bpf_lsm_file_ioctl+0x9/0x20
[  385.727323][T12720]  ? __pfx_ppp_ioctl+0x10/0x10
[  385.727342][T12720]  __se_sys_ioctl+0xfc/0x170
[  385.727366][T12720]  do_syscall_64+0x166/0x520
[  385.727386][T12720]  ? trace_irq_disable+0x3b/0x140
[  385.727406][T12720]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  385.727429][T12720]  ? clear_bhb_loop+0x70/0xc0
[  385.727454][T12720]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  385.727476][T12720] RIP: 0033:0x7ff7d4f9e159
[  385.727513][T12720] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  385.727534][T12720] RSP: 002b:00007ff7d5e29028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  385.727561][T12720] RAX: ffffffffffffffda RBX: 00007ff7d5225fa0 RCX: 00007ff7d4f9e159
[  385.727586][T12720] RDX: 0000200000000200 RSI: 00000000c004743e RDI: 0000000000000004
[  385.727603][T12720] RBP: 00007ff7d503506b R08: 0000000000000000 R09: 0000000000000000
[  385.727617][T12720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  385.727631][T12720] R13: 00007ff7d5226038 R14: 00007ff7d5225fa0 R15: 00007fffba0725a8
[  385.727668][T12720]  </TASK>
[  385.727800][T12720] kobject: kobject_add_internal failed for ppp260 (error: -12 parent: net)
[  386.188213][T12710] f2fs_ckpt-7:1: attempt to access beyond end of device
[  386.188213][T12710] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  386.218567][T12710] CPU: 1 UID: 0 PID: 12710 Comm: f2fs_ckpt-7:1 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  386.218611][T12710] Tainted: [L]=SOFTLOCKUP
[  386.218620][T12710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  386.218635][T12710] Call Trace:
[  386.218645][T12710]  <TASK>
[  386.218655][T12710]  dump_stack_lvl+0xe8/0x150
[  386.218686][T12710]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  386.218719][T12710]  f2fs_write_end_bio+0xda7/0x11c0
[  386.218762][T12710]  __submit_merged_bio+0x258/0x6a0
[  386.218786][T12710]  ? rcu_is_watching+0x16/0xb0
[  386.218816][T12710]  f2fs_submit_merged_write_cond+0x1ef/0x590
[  386.218845][T12710]  ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10
[  386.218897][T12710]  f2fs_write_data_pages+0x2a13/0x36e0
[  386.218965][T12710]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  386.219033][T12710]  ? arch_stack_walk+0x11b/0x150
[  386.219112][T12710]  ? add_lock_to_list+0xc7/0x100
[  386.219138][T12710]  ? lockdep_unlock+0x5c/0xd0
[  386.219157][T12710]  ? __lock_acquire+0x1511/0x2de0
[  386.219195][T12710]  ? irqentry_exit+0x218/0x920
[  386.219216][T12710]  ? trace_irq_disable+0x3b/0x140
[  386.219250][T12710]  ? do_raw_spin_lock+0x12b/0x2f0
[  386.219286][T12710]  ? do_raw_spin_unlock+0xf5/0x200
[  386.219310][T12710]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  386.219335][T12710]  do_writepages+0x338/0x560
[  386.219371][T12710]  ? do_raw_spin_unlock+0xf5/0x200
[  386.219399][T12710]  filemap_fdatawrite+0x1e9/0x2f0
[  386.219427][T12710]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  386.219501][T12710]  ? do_raw_spin_unlock+0xf5/0x200
[  386.219529][T12710]  f2fs_sync_dirty_inodes+0x471/0x970
[  386.219571][T12710]  f2fs_write_checkpoint+0x860/0x24d0
[  386.219635][T12710]  __checkpoint_and_complete_reqs+0x135/0x480
[  386.219662][T12710]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  386.219694][T12710]  ? __pfx___checkpoint_and_complete_reqs+0x10/0x10
[  386.219739][T12710]  ? schedule+0x90/0x2b0
[  386.219772][T12710]  issue_checkpoint_thread+0xd5/0x270
[  386.219800][T12710]  ? __pfx_issue_checkpoint_thread+0x10/0x10
[  386.219825][T12710]  ? __pfx_autoremove_wake_function+0x10/0x10
[  386.219852][T12710]  ? __kthread_parkme+0x71/0x1f0
[  386.219876][T12710]  ? __kthread_parkme+0x199/0x1f0
[  386.219905][T12710]  kthread+0x38b/0x480
[  386.219927][T12710]  ? __pfx_issue_checkpoint_thread+0x10/0x10
[  386.219950][T12710]  ? __pfx_kthread+0x10/0x10
[  386.219974][T12710]  ret_from_fork+0x514/0xb70
[  386.219994][T12710]  ? save_fpregs_to_fpstate+0x176/0x200
[  386.220027][T12710]  ? __pfx_ret_from_fork+0x10/0x10
[  386.220049][T12710]  ? __switch_to+0xc78/0x1410
[  386.220076][T12710]  ? __pfx_kthread+0x10/0x10
[  386.220100][T12710]  ret_from_fork_asm+0x1a/0x30
[  386.220141][T12710]  </TASK>
[  386.221655][T12710] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  386.391112][ T5814] radio-si470x 1-1:0.0: si470x_get_report: usb_control_msg returned -71
[  386.392024][ T5814] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -22
[  386.529308][ T5814] usb 1-1: USB disconnect, device number 13
[  386.538538][T12724] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1975'.
[  387.700791][T12756] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1982'.
[  387.700819][T12756] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1982'.
[  387.827912][T12756] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1982'.
[  387.827950][T12756] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1982'.
[  387.889052][T12740] loop4: detected capacity change from 0 to 40427
[  387.915453][ T5608] block nbd3: Receive control failed (result -32)
[  387.931296][ T9044] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  387.931342][ T9044] net_ratelimit: 31 callbacks suppressed
[  387.931364][ T9044] bond1: (slave gretap1): failed to get link speed/duplex
[  387.931392][ T9044] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  387.931424][ T9044] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  387.931454][ T9044] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  388.033314][   T13] bond1: (slave gretap1): failed to get link speed/duplex
[  388.093599][T12755] block nbd3: shutting down sockets
[  388.102915][T12740] F2FS-fs (loop4): invalid crc value
[  388.147386][ T7824] bond1: (slave gretap1): failed to get link speed/duplex
[  388.230564][T12740] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  388.251582][T12740] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  388.265088][ T7826] bond1: (slave gretap1): failed to get link speed/duplex
[  388.308877][T12740] syz.4.1978: attempt to access beyond end of device
[  388.308877][T12740] loop4: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  388.345242][ T6825] usb 2-1: new full-speed USB device number 19 using dummy_hcd
[  388.385253][ T7840] bond1: (slave gretap1): failed to get link speed/duplex
[  388.404668][ T9588] syz-executor: attempt to access beyond end of device
[  388.404668][ T9588] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  388.433140][ T9588] CPU: 1 UID: 0 PID: 9588 Comm: syz-executor Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  388.433183][ T9588] Tainted: [L]=SOFTLOCKUP
[  388.433193][ T9588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  388.433206][ T9588] Call Trace:
[  388.433216][ T9588]  <TASK>
[  388.433226][ T9588]  dump_stack_lvl+0xe8/0x150
[  388.433257][ T9588]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  388.433289][ T9588]  f2fs_write_end_bio+0xda7/0x11c0
[  388.433342][ T9588]  __submit_merged_bio+0x258/0x6a0
[  388.433366][ T9588]  ? rcu_is_watching+0x16/0xb0
[  388.433395][ T9588]  f2fs_submit_merged_write_cond+0x1ef/0x590
[  388.433437][ T9588]  ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10
[  388.433488][ T9588]  f2fs_write_data_pages+0x2a13/0x36e0
[  388.433551][ T9588]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  388.433588][ T9588]  ? is_bpf_text_address+0x292/0x2b0
[  388.433610][ T9588]  ? is_bpf_text_address+0x26/0x2b0
[  388.433662][ T9588]  ? stack_trace_save+0xa9/0x100
[  388.433684][ T9588]  ? __pfx_stack_trace_save+0x10/0x10
[  388.433725][ T9588]  ? lockdep_unlock+0x5c/0xd0
[  388.433744][ T9588]  ? __lock_acquire+0x1511/0x2de0
[  388.433795][ T9588]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  388.433820][ T9588]  do_writepages+0x338/0x560
[  388.433856][ T9588]  ? do_raw_spin_unlock+0xf5/0x200
[  388.433884][ T9588]  filemap_fdatawrite+0x1e9/0x2f0
[  388.433911][ T9588]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  388.433983][ T9588]  ? do_raw_spin_unlock+0xf5/0x200
[  388.434010][ T9588]  f2fs_sync_dirty_inodes+0x471/0x970
[  388.434050][ T9588]  f2fs_write_checkpoint+0x860/0x24d0
[  388.434112][ T9588]  kill_f2fs_super+0x2dc/0x700
[  388.434160][ T9588]  ? rcu_do_enqueue+0x616/0x870
[  388.434188][ T9588]  ? lockdep_hardirqs_on+0x7b/0x110
[  388.434211][ T9588]  ? __pfx_kill_f2fs_super+0x10/0x10
[  388.434252][ T9588]  ? __pfx_call_rcu+0x10/0x10
[  388.434286][ T9588]  ? shrinker_free+0x2a7/0x3b0
[  388.434322][ T9588]  deactivate_locked_super+0xbe/0x110
[  388.434355][ T9588]  cleanup_mnt+0x3d3/0x460
[  388.434384][ T9588]  task_work_run+0x1d9/0x260
[  388.434410][ T9588]  ? __pfx_task_work_run+0x10/0x10
[  388.434445][ T9588]  exit_to_user_mode_loop+0x204/0x770
[  388.434469][ T9588]  ? rcu_is_watching+0x16/0xb0
[  388.434496][ T9588]  do_syscall_64+0x328/0x520
[  388.434518][ T9588]  ? trace_irq_disable+0x3b/0x140
[  388.434539][ T9588]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  388.434563][ T9588]  ? clear_bhb_loop+0x70/0xc0
[  388.434590][ T9588]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  388.434614][ T9588] RIP: 0033:0x7f634799f397
[  388.434636][ T9588] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  388.434657][ T9588] RSP: 002b:00007ffec928c958 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  388.434682][ T9588] RAX: 0000000000000000 RBX: 00007f6347a344bb RCX: 00007f634799f397
[  388.434699][ T9588] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffec928ca10
[  388.434714][ T9588] RBP: 00007ffec928ca10 R08: 00007ffec928da10 R09: 00000000ffffffff
[  388.434730][ T9588] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffec928daa0
[  388.434746][ T9588] R13: 00007f6347a344bb R14: 000000000005ecad R15: 00007ffec928dae0
[  388.434782][ T9588]  </TASK>
[  388.512669][ T7840] bond1: (slave gretap1): failed to get link speed/duplex
[  388.547360][ T6825] usb 2-1: New USB device found: idVendor=046d, idProduct=c293, bcdDevice=0.00
[  388.547408][ T6825] usb 2-1: too many configurations: 253, using maximum allowed: 8
[  388.551214][ T9588] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  388.554522][ T6825] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  388.598334][ T6825] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  388.619421][ T6825] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  388.627777][   T13] bond1: (slave gretap1): failed to get link speed/duplex
[  388.650534][ T6825] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  388.682870][ T6825] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  388.733753][ T6825] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  388.759483][ T6825] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  388.771606][ T7829] bond1: (slave gretap1): failed to get link speed/duplex
[  388.822135][ T6825] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  388.822186][ T6825] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  388.886839][ T6825] usb 2-1: config 0 descriptor??
[  388.932867][ T6825] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  388.955555][ T7829] bond1: (slave gretap1): failed to get link speed/duplex
[  389.064588][ T7840] bond1: (slave gretap1): failed to get link speed/duplex
[  389.141524][ T5814] usb 2-1: USB disconnect, device number 19
[  389.583330][ T5814] usb 2-1: new full-speed USB device number 20 using dummy_hcd
[  389.734299][ T5814] usb 2-1: New USB device found: idVendor=1044, idProduct=7001, bcdDevice=5.20
[  389.735494][ T5814] usb 2-1: config 4 has an invalid interface number: 44 but max is 0
[  389.735521][ T5814] usb 2-1: config 4 has no interface number 0
[  389.735562][ T5814] usb 2-1: config 4 interface 44 altsetting 0 has an endpoint descriptor with address 0xFD, changing to 0x8D
[  389.735589][ T5814] usb 2-1: config 4 interface 44 altsetting 0 endpoint 0x8D has invalid maxpacket 256, setting to 64
[  389.735619][ T5814] usb 2-1: config 4 interface 44 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  389.737661][ T5814] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  389.737688][ T5814] usb 2-1: Product: syz
[  389.737703][ T5814] usb 2-1: Manufacturer: syz
[  389.737719][ T5814] usb 2-1: SerialNumber: syz
[  390.148460][ T5814] dvb-usb: found a 'Gigabyte U7000' in warm state.
[  390.150748][ T5814] dvb-usb: will use the device's hardware PID filter (table count: 32).
[  390.151301][ T5814] dvbdev: DVB: registering new adapter (Gigabyte U7000)
[  390.151338][ T5814] usb 2-1: media controller created
[  390.152954][ T5814] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  390.220203][ T5814] DVB: Unable to find symbol dib7000p_attach()
[  390.220217][ T5814] dvb-usb: no frontend was attached by 'Gigabyte U7000'
[  390.293258][ T5814] rc_core: IR keymap rc-dib0700-rc5 not found
[  390.293280][ T5814] Registered IR keymap rc-empty
[  390.293561][ T5814] dvb-usb: could not initialize remote control.
[  390.293573][ T5814] dvb-usb: Gigabyte U7000 successfully initialized and connected.
[  390.350853][ T5814] dib0700: There's no endpoint for remote controller
[  390.556408][ T6825] usb 2-1: USB disconnect, device number 20
[  390.576734][ T6825] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected.
[  392.944518][ T7828] net_ratelimit: 34 callbacks suppressed
[  392.944548][ T7828] bond1: (slave gretap1): failed to get link speed/duplex
[  393.060442][ T9044] bond1: (slave gretap1): failed to get link speed/duplex
[  393.164642][ T7828] bond1: (slave gretap1): failed to get link speed/duplex
[  393.274194][ T9044] bond1: (slave gretap1): failed to get link speed/duplex
[  393.383550][ T9044] bond1: (slave gretap1): failed to get link speed/duplex
[  393.495745][ T9044] bond1: (slave gretap1): failed to get link speed/duplex
[  393.604465][ T7829] bond1: (slave gretap1): failed to get link speed/duplex
[  393.714673][ T7829] bond1: (slave gretap1): failed to get link speed/duplex
[  393.825051][ T7828] bond1: (slave gretap1): failed to get link speed/duplex
[  393.933743][ T7840] bond1: (slave gretap1): failed to get link speed/duplex
[  394.588306][T12819] loop1: detected capacity change from 0 to 32768
[  394.687053][T12826] FAULT_INJECTION: forcing a failure.
[  394.687053][T12826] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  394.687093][T12826] CPU: 1 UID: 0 PID: 12826 Comm: syz.9.2000 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  394.687138][T12826] Tainted: [L]=SOFTLOCKUP
[  394.687148][T12826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  394.687162][T12826] Call Trace:
[  394.687171][T12826]  <TASK>
[  394.687181][T12826]  dump_stack_lvl+0xe8/0x150
[  394.687213][T12826]  should_fail_ex+0x3eb/0x540
[  394.687243][T12826]  prepare_alloc_pages+0x21e/0x5f0
[  394.687274][T12826]  __alloc_frozen_pages_noprof+0x17a/0x400
[  394.687305][T12826]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  394.687339][T12826]  ? policy_nodemask+0x2cc/0x8e0
[  394.687370][T12826]  alloc_pages_mpol+0x21e/0x390
[  394.687399][T12826]  alloc_pages_noprof+0xb1/0x2b0
[  394.687425][T12826]  pte_alloc_one+0x22/0x370
[  394.687452][T12826]  __pte_alloc+0x25/0x1a0
[  394.687479][T12826]  walk_pgd_range+0xfd5/0x1dc0
[  394.687525][T12826]  ? __pfx_guard_install_set_pte+0x10/0x10
[  394.687548][T12826]  ? __pfx_guard_install_set_pte+0x10/0x10
[  394.687569][T12826]  ? __pfx_guard_install_set_pte+0x10/0x10
[  394.687594][T12826]  ? __pfx_guard_install_set_pte+0x10/0x10
[  394.687621][T12826]  ? __pfx_guard_install_pte_entry+0x10/0x10
[  394.687646][T12826]  ? __pfx_walk_pgd_range+0x10/0x10
[  394.687678][T12826]  __walk_page_range+0x16d/0x720
[  394.687707][T12826]  ? find_vma+0xed/0x160
[  394.687727][T12826]  ? __pfx_find_vma+0x10/0x10
[  394.687760][T12826]  walk_page_range_mm_unsafe+0x46b/0x680
[  394.687784][T12826]  ? look_up_lock_class+0x57/0x110
[  394.687824][T12826]  ? __pfx_walk_page_range_mm_unsafe+0x10/0x10
[  394.687866][T12826]  madvise_vma_behavior+0x43a8/0x5180
[  394.687904][T12826]  ? __pfx_madvise_vma_behavior+0x10/0x10
[  394.687936][T12826]  ? do_raw_spin_lock+0x12b/0x2f0
[  394.687969][T12826]  ? rcu_is_watching+0x16/0xb0
[  394.687993][T12826]  ? trace_hrtimer_start+0x82/0x200
[  394.688021][T12826]  ? __pfx_guard_install_pud_entry+0x10/0x10
[  394.688043][T12826]  ? __pfx_guard_install_pmd_entry+0x10/0x10
[  394.688083][T12826]  ? __pfx_guard_install_pte_entry+0x10/0x10
[  394.688111][T12826]  ? __pfx_guard_install_set_pte+0x10/0x10
[  394.688135][T12826]  ? __lock_acquire+0x747/0x2de0
[  394.688161][T12826]  ? finish_task_switch+0x40e/0xc60
[  394.688183][T12826]  ? lockdep_hardirqs_on+0x7b/0x110
[  394.688209][T12826]  ? rcu_is_watching+0x16/0xb0
[  394.688235][T12826]  ? __lock_acquire+0x747/0x2de0
[  394.688266][T12826]  ? mtree_range_walk+0x707/0x8b0
[  394.688299][T12826]  ? mt_find+0x186/0x630
[  394.688325][T12826]  ? mt_find+0x481/0x630
[  394.688350][T12826]  ? mt_find+0x186/0x630
[  394.688372][T12826]  ? __pfx_mt_find+0x10/0x10
[  394.688402][T12826]  ? find_vma_prev+0x123/0x1b0
[  394.688423][T12826]  ? lock_acquire+0x115/0x350
[  394.688454][T12826]  ? find_vma+0xed/0x160
[  394.688482][T12826]  ? down_read+0x2b9/0x320
[  394.688508][T12826]  madvise_walk_vmas+0x57d/0xb70
[  394.688544][T12826]  ? __pfx_madvise_walk_vmas+0x10/0x10
[  394.688573][T12826]  ? blk_start_plug+0x6e/0x1b0
[  394.688599][T12826]  madvise_do_behavior+0x385/0x540
[  394.688623][T12826]  ? __pfx_futex_wait+0x10/0x10
[  394.688650][T12826]  ? __pfx_madvise_do_behavior+0x10/0x10
[  394.688696][T12826]  do_madvise+0x26f/0x330
[  394.688730][T12826]  ? __pfx_do_madvise+0x10/0x10
[  394.688765][T12826]  ? rcu_is_watching+0x16/0xb0
[  394.688799][T12826]  __x64_sys_madvise+0xa6/0xc0
[  394.688837][T12826]  do_syscall_64+0x166/0x520
[  394.688860][T12826]  ? trace_irq_disable+0x3b/0x140
[  394.688881][T12826]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  394.688907][T12826]  ? clear_bhb_loop+0x70/0xc0
[  394.688932][T12826]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  394.688969][T12826] RIP: 0033:0x7ff7d4f9e159
[  394.688991][T12826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  394.689013][T12826] RSP: 002b:00007ff7d5e29028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c
[  394.689039][T12826] RAX: ffffffffffffffda RBX: 00007ff7d5225fa0 RCX: 00007ff7d4f9e159
[  394.689057][T12826] RDX: 0000000000000066 RSI: 0000000000600722 RDI: 0000200000000000
[  394.689073][T12826] RBP: 00007ff7d503506b R08: 0000000000000000 R09: 0000000000000000
[  394.689088][T12826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  394.689103][T12826] R13: 00007ff7d5226038 R14: 00007ff7d5225fa0 R15: 00007fffba0725a8
[  394.689140][T12826]  </TASK>
[  394.692648][T12819] JBD2: Ignoring recovery information on journal
[  394.831256][T12819] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  395.262296][T12819] OCFS2: ERROR (device loop1): int ocfs2_reserve_local_alloc_bits(struct ocfs2_super *, u32, struct ocfs2_alloc_context *): local alloc inode 76 says it has 9 used bits, but a count shows 8
[  395.262343][T12819] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  395.262362][T12819] OCFS2: File system is now read-only.
[  395.262374][T12819] (syz.1.1997,12819,1):ocfs2_reserve_local_alloc_bits:710 ERROR: status = -30
[  395.262403][T12819] (syz.1.1997,12819,1):ocfs2_reserve_clusters_with_limit:1288 ERROR: status = -30
[  395.262441][T12819] (syz.1.1997,12819,1):ocfs2_reserve_clusters_with_limit:1337 ERROR: status = -30
[  395.262480][T12819] (syz.1.1997,12819,1):ocfs2_lock_allocators:3292 ERROR: status = -30
[  395.262503][T12819] (syz.1.1997,12819,1):ocfs2_write_begin_nolock:1724 ERROR: status = -30
[  395.262543][T12819] (syz.1.1997,12819,1):ocfs2_write_begin:1888 ERROR: status = -30
[  395.406216][T12832] FAULT_INJECTION: forcing a failure.
[  395.406216][T12832] name failslab, interval 1, probability 0, space 0, times 0
[  395.406252][T12832] CPU: 0 UID: 0 PID: 12832 Comm: syz.3.2001 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  395.406284][T12832] Tainted: [L]=SOFTLOCKUP
[  395.406294][T12832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  395.406308][T12832] Call Trace:
[  395.406317][T12832]  <TASK>
[  395.406327][T12832]  dump_stack_lvl+0xe8/0x150
[  395.406358][T12832]  should_fail_ex+0x3eb/0x540
[  395.406387][T12832]  should_failslab+0xa8/0x100
[  395.406413][T12832]  __kmalloc_cache_noprof+0x9e/0x600
[  395.406438][T12832]  ? dev_ethtool+0x13f/0x29e0
[  395.406458][T12832]  ? dev_ethtool+0x13f/0x29e0
[  395.406487][T12832]  dev_ethtool+0x13f/0x29e0
[  395.406507][T12832]  ? __lock_acquire+0x747/0x2de0
[  395.406544][T12832]  ? __pfx_dev_ethtool+0x10/0x10
[  395.406568][T12832]  ? kasan_quarantine_put+0xbb/0x1f0
[  395.406599][T12832]  ? lock_acquire+0x115/0x350
[  395.406632][T12832]  ? dev_load+0x21/0x1f0
[  395.406656][T12832]  ? dev_load+0x21/0x1f0
[  395.406679][T12832]  dev_ioctl+0x392/0x1150
[  395.406706][T12832]  sock_do_ioctl+0x23e/0x320
[  395.406732][T12832]  ? __pfx_sock_do_ioctl+0x10/0x10
[  395.406754][T12832]  ? do_futex+0x3e7/0x4e0
[  395.406792][T12832]  sock_ioctl+0x57a/0x7e0
[  395.406815][T12832]  ? __fget_files+0x2a/0x420
[  395.406836][T12832]  ? __pfx_sock_ioctl+0x10/0x10
[  395.406874][T12832]  ? __fget_files+0x2a/0x420
[  395.406896][T12832]  ? __fget_files+0x2a/0x420
[  395.406921][T12832]  ? bpf_lsm_file_ioctl+0x9/0x20
[  395.406944][T12832]  ? __pfx_sock_ioctl+0x10/0x10
[  395.406966][T12832]  __se_sys_ioctl+0xfc/0x170
[  395.406992][T12832]  do_syscall_64+0x166/0x520
[  395.407014][T12832]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  395.407038][T12832]  ? clear_bhb_loop+0x70/0xc0
[  395.407063][T12832]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  395.407086][T12832] RIP: 0033:0x7f677d59e159
[  395.407107][T12832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  395.407128][T12832] RSP: 002b:00007f677e3ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  395.407153][T12832] RAX: ffffffffffffffda RBX: 00007f677d825fa0 RCX: 00007f677d59e159
[  395.407172][T12832] RDX: 0000200000000340 RSI: 0000000000008946 RDI: 0000000000000003
[  395.407187][T12832] RBP: 00007f677d63506b R08: 0000000000000000 R09: 0000000000000000
[  395.407202][T12832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  395.407217][T12832] R13: 00007f677d826038 R14: 00007f677d825fa0 R15: 00007ffe45f82d98
[  395.407253][T12832]  </TASK>
[  395.814141][T12838] loop0: detected capacity change from 0 to 4096
[  395.956225][ T9260] ocfs2: Unmounting device (7,1) on (node local)
[  396.000311][T12838] ntfs3(loop0): ino=19, mi_enum_attr
[  396.000347][T12838] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  398.166765][T12890] loop0: detected capacity change from 0 to 32768
[  398.187150][ T5949] net_ratelimit: 33 callbacks suppressed
[  398.187167][ T5949] bond1: (slave gretap1): failed to get link speed/duplex
[  398.219372][T12890] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  398.219389][T12890] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  398.312437][ T7826] bond1: (slave gretap1): failed to get link speed/duplex
[  398.399402][T12890] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[  398.423854][ T7826] bond1: (slave gretap1): failed to get link speed/duplex
[  398.471620][ T6819] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  398.471677][ T6819] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  398.554582][ T7826] bond1: (slave gretap1): failed to get link speed/duplex
[  398.664370][ T7826] bond1: (slave gretap1): failed to get link speed/duplex
[  398.773295][ T7829] bond1: (slave gretap1): failed to get link speed/duplex
[  398.801853][T12897] FAULT_INJECTION: forcing a failure.
[  398.801853][T12897] name failslab, interval 1, probability 0, space 0, times 0
[  398.801892][T12897] CPU: 1 UID: 0 PID: 12897 Comm: syz.9.2025 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  398.801923][T12897] Tainted: [L]=SOFTLOCKUP
[  398.801933][T12897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  398.801956][T12897] Call Trace:
[  398.801965][T12897]  <TASK>
[  398.801975][T12897]  dump_stack_lvl+0xe8/0x150
[  398.802006][T12897]  should_fail_ex+0x3eb/0x540
[  398.802035][T12897]  should_failslab+0xa8/0x100
[  398.802061][T12897]  __kmalloc_cache_noprof+0x9e/0x600
[  398.802084][T12897]  ? push_stack+0x7e/0x380
[  398.802104][T12897]  ? push_stack+0x7e/0x380
[  398.802132][T12897]  push_stack+0x7e/0x380
[  398.802157][T12897]  do_check_insn+0x80f1/0xd270
[  398.802212][T12897]  ? __pfx_do_check_insn+0x10/0x10
[  398.802252][T12897]  do_check_common+0x386f/0x5970
[  398.802312][T12897]  ? __pfx_do_check_common+0x10/0x10
[  398.802351][T12897]  do_check_main+0xa2/0x1f0
[  398.802377][T12897]  bpf_check+0x2c46/0x32f0
[  398.802417][T12897]  ? __pfx_bpf_check+0x10/0x10
[  398.802441][T12897]  ? bpf_obj_name_cpy+0x194/0x1e0
[  398.802468][T12897]  bpf_prog_load+0x14da/0x1c60
[  398.802501][T12897]  ? __pfx_bpf_prog_load+0x10/0x10
[  398.802539][T12897]  ? __might_fault+0xaf/0x130
[  398.802569][T12897]  __sys_bpf+0xd86/0xe00
[  398.802600][T12897]  ? __pfx___sys_bpf+0x10/0x10
[  398.802626][T12897]  ? do_futex+0x3e7/0x4e0
[  398.802676][T12897]  ? rcu_is_watching+0x16/0xb0
[  398.802706][T12897]  __x64_sys_bpf+0xba/0xd0
[  398.802733][T12897]  do_syscall_64+0x166/0x520
[  398.802755][T12897]  ? trace_irq_disable+0x3b/0x140
[  398.802775][T12897]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  398.802799][T12897]  ? clear_bhb_loop+0x70/0xc0
[  398.802824][T12897]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  398.802848][T12897] RIP: 0033:0x7ff7d4f9e159
[  398.802869][T12897] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  398.802890][T12897] RSP: 002b:00007ff7d5e29028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  398.802914][T12897] RAX: ffffffffffffffda RBX: 00007ff7d5225fa0 RCX: 00007ff7d4f9e159
[  398.802932][T12897] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005
[  398.802957][T12897] RBP: 00007ff7d503506b R08: 0000000000000000 R09: 0000000000000000
[  398.802973][T12897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  398.802988][T12897] R13: 00007ff7d5226038 R14: 00007ff7d5225fa0 R15: 00007fffba0725a8
[  398.803024][T12897]  </TASK>
[  398.897918][ T7829] bond1: (slave gretap1): failed to get link speed/duplex
[  399.006080][ T7829] bond1: (slave gretap1): failed to get link speed/duplex
[  399.114509][ T7826] bond1: (slave gretap1): failed to get link speed/duplex
[  399.227298][ T9044] bond1: (slave gretap1): failed to get link speed/duplex
[  399.349455][ T6819] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 877ms
[  399.423742][ T6819] gfs2: fsid=syz:syz.0: jid=0: Done
[  399.425826][T12890] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  400.093182][    T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!!
[  400.827938][T12918] loop1: detected capacity change from 0 to 512
[  400.896909][T12918] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  400.897016][T12918] ext4 filesystem being mounted at /183/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  401.209674][ T9260] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  401.311154][T12910] loop9: detected capacity change from 0 to 256
[  401.335309][T12910] FAT-fs (loop9): data area starts beyond volume (274 > 64)
[  401.335341][T12910] FAT-fs (loop9): Can't find a valid FAT filesystem
[  401.380400][T12934] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2037'.
[  401.427523][T12934] vlan2: entered promiscuous mode
[  401.427568][T12934] bond0: entered promiscuous mode
[  401.427586][T12934] bond_slave_0: entered promiscuous mode
[  401.427909][T12934] bond_slave_1: entered promiscuous mode
[  401.447668][T12939] netlink: 'syz.3.2037': attribute type 10 has an invalid length.
[  401.508808][ T5707] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  401.593551][T12939] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  401.611684][T12939] netdevsim netdevsim3 netdevsim1: entered promiscuous mode
[  401.614143][T12939] bond0: (slave netdevsim1): Enslaving as an active interface with an up link
[  401.653305][ T5707] usb 1-1: Using ep0 maxpacket: 8
[  401.654154][ T5707] usb 1-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  401.655810][ T5707] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  401.661965][ T5707] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  401.661996][ T5707] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  401.662023][ T5707] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  401.662049][ T5707] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  401.662093][ T5707] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  401.958178][ T5707] usb 1-1: usb_control_msg returned -32
[  401.958245][ T5707] usbtmc 1-1:16.0: can't read capabilities
[  403.194914][ T7828] net_ratelimit: 33 callbacks suppressed
[  403.194940][ T7828] bond1: (slave gretap1): failed to get link speed/duplex
[  403.313220][ T7829] bond1: (slave gretap1): failed to get link speed/duplex
[  403.424721][ T7829] bond1: (slave gretap1): failed to get link speed/duplex
[  403.533317][ T7828] bond1: (slave gretap1): failed to get link speed/duplex
[  403.645783][ T7829] bond1: (slave gretap1): failed to get link speed/duplex
[  403.753355][ T9044] bond1: (slave gretap1): failed to get link speed/duplex
[  403.863364][ T7828] bond1: (slave gretap1): failed to get link speed/duplex
[  403.973982][ T9044] bond1: (slave gretap1): failed to get link speed/duplex
[  404.083272][ T7829] bond1: (slave gretap1): failed to get link speed/duplex
[  404.203239][ T7828] bond1: (slave gretap1): failed to get link speed/duplex
[  404.233381][  T989] usb 1-1: USB disconnect, device number 14
[  404.642417][T12988] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2053'.
[  404.682548][T12987] loop1: detected capacity change from 0 to 4096
[  404.683419][ T6825] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  404.737417][T12987] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  404.762594][T12988] gretap0: entered promiscuous mode
[  404.795565][T12988] macvtap1: entered promiscuous mode
[  404.795811][T12988] macvtap1: entered allmulticast mode
[  404.795830][T12988] gretap0: entered allmulticast mode
[  404.853334][ T6825] usb 4-1: Using ep0 maxpacket: 16
[  404.854076][ T6825] usb 4-1: New USB device found: idVendor=28bd, idProduct=0071, bcdDevice=0.00
[  404.854630][ T6825] usb 4-1: config 128 has too many interfaces: 254, using maximum allowed: 32
[  404.854657][ T6825] usb 4-1: config 128 has 0 interfaces, different from the descriptor's value: 254
[  404.854696][ T6825] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  404.955323][T12991] gretap0: left allmulticast mode
[  404.956708][T12991] gretap0: left promiscuous mode
[  404.976313][T12991] macvtap1: left promiscuous mode
[  404.976339][T12991] macvtap1: left allmulticast mode
[  405.117652][  T989] usb 4-1: USB disconnect, device number 18
[  405.435296][   T32] audit: type=1326 audit(1790959294.579:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13001 comm="syz.0.2057" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9b56b9e159 code=0x0
[  405.612770][T13009] cramfs: checking physical address 0x0000000028220000 for linear cramfs image
[  405.623758][T13009] cramfs: wrong magic
[  405.640080][T13009] cramfs: wrong magic
[  405.888750][ T9260] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  406.350150][T13035] gadgetfs: bound to dummy_udc driver
[  406.872405][T13053] overlayfs: failed to clone upperpath
[  407.010817][T13055] loop3: detected capacity change from 0 to 4096
[  407.051872][T13055] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  407.654283][T13070] loop9: detected capacity change from 0 to 512
[  407.710753][T13070] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  407.710854][T13070] ext4 filesystem being mounted at /197/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  407.756635][T13070] EXT4-fs (loop9): shut down requested (2)
[  407.838984][ T9128] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  407.957537][T13074] loop9: detected capacity change from 0 to 2048
[  408.010622][T13076] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  408.075813][T13063] loop1: detected capacity change from 0 to 32768
[  408.110788][   T32] audit: type=1800 audit(1790959297.249:162): pid=13074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2083" name="file1" dev="loop9" ino=15 res=0 errno=-22
[  408.148936][T13063] JBD2: Ignoring recovery information on journal
[  408.161795][T13076] NILFS (loop9): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  408.177685][T13076] NILFS error (device loop9): nilfs_bmap_propagate: broken bmap (inode number=4)
[  408.245883][T13076] Remounting filesystem read-only
[  408.270374][T13063] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  408.294229][   T85] net_ratelimit: 33 callbacks suppressed
[  408.294256][   T85] bond1: (slave gretap1): failed to get link speed/duplex
[  408.415558][ T9046] bond1: (slave gretap1): failed to get link speed/duplex
[  408.442366][T10954] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  408.526836][ T9046] bond1: (slave gretap1): failed to get link speed/duplex
[  408.608782][ T9128] NILFS (loop9): disposed unprocessed dirty file(s) when stopping log writer
[  408.632336][ T9128] NILFS (loop9): disposed unprocessed dirty file(s) when detaching log writer
[  408.686791][T13085] pim6reg1: entered promiscuous mode
[  408.686820][T13085] pim6reg1: entered allmulticast mode
[  408.832886][T13063] OCFS2: ERROR (device loop1): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has bit count 2061 but max bitmap bits of 2048
[  408.848539][T13063] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  408.848557][T13063] OCFS2: Returning error to the calling process.
[  408.848571][T13063] (syz.1.2076,13063,1):ocfs2_search_chain:1935 ERROR: status = -5
[  408.848599][T13063] (syz.1.2076,13063,1):ocfs2_search_chain:2058 ERROR: status = -5
[  408.848623][T13063] (syz.1.2076,13063,1):ocfs2_claim_suballoc_bits:2145 ERROR: status = -5
[  408.848647][T13063] (syz.1.2076,13063,1):ocfs2_claim_suballoc_bits:2198 ERROR: status = -5
[  408.848671][T13063] (syz.1.2076,13063,1):ocfs2_claim_new_inode:2439 ERROR: status = -5
[  408.848692][T13063] (syz.1.2076,13063,1):ocfs2_claim_new_inode:2454 ERROR: status = -5
[  408.848714][T13063] (syz.1.2076,13063,1):ocfs2_mknod_locked:644 ERROR: status = -5
[  408.848738][T13063] (syz.1.2076,13063,1):ocfs2_mknod:389 ERROR: status = -5
[  408.849122][T13063] (syz.1.2076,13063,1):ocfs2_mknod:508 ERROR: status = -5
[  408.849150][T13063] (syz.1.2076,13063,1):ocfs2_mkdir:664 ERROR: status = -5
[  408.974041][ T9049] bond1: (slave gretap1): failed to get link speed/duplex
[  409.073350][ T7821] bond1: (slave gretap1): failed to get link speed/duplex
[  409.107186][ T6819] usb 10-1: new full-speed USB device number 10 using dummy_hcd
[  409.186362][ T7821] bond1: (slave gretap1): failed to get link speed/duplex
[  409.254033][ T6819] usb 10-1: New USB device found: idVendor=05ac, idProduct=027a, bcdDevice=0.00
[  409.259560][ T6819] usb 10-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  409.259600][ T6819] usb 10-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  409.259630][ T6819] usb 10-1: config 0 interface 0 has no altsetting 0
[  409.259667][ T6819] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  409.309328][ T9049] bond1: (slave gretap1): failed to get link speed/duplex
[  409.327449][ T6819] usb 10-1: config 0 descriptor??
[  409.328311][T13093] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  409.413733][ T7834] bond1: (slave gretap1): failed to get link speed/duplex
[  409.434929][ T9260] ocfs2: Unmounting device (7,1) on (node local)
[  409.524110][ T7821] bond1: (slave gretap1): failed to get link speed/duplex
[  409.634736][ T9049] bond1: (slave gretap1): failed to get link speed/duplex
[  409.793677][ T6819] apple 0003:05AC:027A.0013: Fn key not found (Apple Wireless Keyboard clone?), disabling Fn key handling
[  409.842395][ T6819] input: HID 05ac:027a as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:05AC:027A.0013/input/input25
[  409.913678][ T6819] apple 0003:05AC:027A.0013: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:027a] on usb-dummy_hcd.9-1/input0
[  410.569303][T13128] loop1: detected capacity change from 0 to 512
[  410.595539][T13128] EXT4-fs error (device loop1): ext4_orphan_get:1403: inode #15: comm syz.1.2097: inode has both inline data and extents flags
[  410.595580][T13128] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  410.596970][T13128] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.2097: couldn't read orphan inode 15 (err -117)
[  410.597004][T13128] loop1: lost filesystem error report for type 5 error -117
[  410.640831][T13128] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  410.697351][ T6819] usb 10-1: USB disconnect, device number 10
[  410.817731][T13133] nbd3: detected capacity change from 0 to 18
[  410.820384][T12061] block nbd3: Receive control failed (result -107)
[  410.900322][T12893] blk_print_req_error: 11 callbacks suppressed
[  410.900347][T12893] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  410.900380][T12893] buffer_io_error: 10 callbacks suppressed
[  410.900393][T12893] Buffer I/O error on dev nbd3, logical block 0, async page read
[  410.937698][ T1749] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  410.937738][ T1749] Buffer I/O error on dev nbd3, logical block 0, async page read
[  410.939894][ T1749] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  410.939988][ T1749] Buffer I/O error on dev nbd3, logical block 0, async page read
[  410.941497][ T1749] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  410.941583][ T1749] Buffer I/O error on dev nbd3, logical block 0, async page read
[  410.951192][ T1749] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  410.951370][ T1749] Buffer I/O error on dev nbd3, logical block 0, async page read
[  410.958749][ T1749] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  410.958846][ T1749] Buffer I/O error on dev nbd3, logical block 0, async page read
[  410.969612][ T1749] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  410.969703][ T1749] Buffer I/O error on dev nbd3, logical block 0, async page read
[  410.970044][ T1749] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  410.970147][ T1749] Buffer I/O error on dev nbd3, logical block 0, async page read
[  410.972620][T12839] ldm_validate_partition_table(): Disk read failed.
[  411.055442][ T9260] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  411.090307][ T1749] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  411.090337][ T1749] Buffer I/O error on dev nbd3, logical block 0, async page read
[  411.092152][ T1749] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  411.092187][ T1749] Buffer I/O error on dev nbd3, logical block 0, async page read
[  411.134052][T12839] Dev nbd3: unable to read RDB block 0
[  411.134368][T12839]  nbd3: unable to read partition table
[  411.134610][T12839] nbd3: partition table beyond EOD, truncated
[  411.140949][T12839] ldm_validate_partition_table(): Disk read failed.
[  411.141344][T12839] Dev nbd3: unable to read RDB block 0
[  411.176340][T12839]  nbd3: unable to read partition table
[  411.176579][T12839] nbd3: partition table beyond EOD, truncated
[  411.262683][T13134] block nbd3: shutting down sockets
[  411.397683][T13131] 
[  411.400128][T13131] ======================================================
[  411.407184][T13131] WARNING: possible circular locking dependency detected
[  411.414270][T13131] syzkaller #0 Tainted: G             L      
[  411.420397][T13131] ------------------------------------------------------
[  411.427451][T13131] syz.3.2098/13131 is trying to acquire lock:
[  411.433596][T13131] ffffffff8ee90740 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x5f/0x600
[  411.443510][T13131] 
[  411.443510][T13131] but task is already holding lock:
[  411.450913][T13131] ffffffff905f0f40 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x27e/0x560
[  411.461505][T13131] 
[  411.461505][T13131] which lock already depends on the new lock.
[  411.461505][T13131] 
[  411.471947][T13131] 
[  411.471947][T13131] the existing dependency chain (in reverse order) is:
[  411.480998][T13131] 
[  411.480998][T13131] -> #9 (uevent_sock_mutex){+.+.}-{4:4}:
[  411.488870][T13131]        __mutex_lock+0x197/0x15a0
[  411.494036][T13131]        kobject_uevent_net_broadcast+0x27e/0x560
[  411.500510][T13131]        kobject_uevent_env+0x566/0x9e0
[  411.506101][T13131]        device_add+0x544/0xb80
[  411.510996][T13131]        device_create+0x269/0x300
[  411.516186][T13131]        msr_device_create+0x33/0x50
[  411.521519][T13131]        cpuhp_invoke_callback+0x434/0x810
[  411.527401][T13131]        cpuhp_thread_fun+0x362/0x780
[  411.532822][T13131]        smpboot_thread_fn+0x565/0xa70
[  411.538364][T13131]        kthread+0x38b/0x480
[  411.542995][T13131]        ret_from_fork+0x514/0xb70
[  411.548149][T13131]        ret_from_fork_asm+0x1a/0x30
[  411.553477][T13131] 
[  411.553477][T13131] -> #8 (cpuhp_state-up){+.+.}-{0:0}:
[  411.561078][T13131]        cpuhp_thread_fun+0x127/0x780
[  411.566504][T13131]        smpboot_thread_fn+0x565/0xa70
[  411.572044][T13131]        kthread+0x38b/0x480
[  411.576674][T13131]        ret_from_fork+0x514/0xb70
[  411.581829][T13131]        ret_from_fork_asm+0x1a/0x30
[  411.587153][T13131] 
[  411.587153][T13131] -> #7 (cpu_hotplug_lock){++++}-{0:0}:
[  411.595050][T13131]        cpus_read_lock+0x3d/0x160
[  411.600207][T13131]        static_key_slow_inc+0x12/0x30
[  411.605709][T13131]        setup_udp_tunnel_sock+0x2eb/0x4f0
[  411.611638][T13131]        l2tp_tunnel_register+0xe77/0x1570
[  411.617496][T13131]        pppol2tp_connect+0x8e3/0x18b0
[  411.623086][T13131]        __sys_connect+0x316/0x450
[  411.628235][T13131]        __x64_sys_connect+0x7a/0x90
[  411.633553][T13131]        do_syscall_64+0x166/0x520
[  411.638703][T13131]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  411.645159][T13131] 
[  411.645159][T13131] -> #6 (sk_lock-AF_INET){+.+.}-{0:0}:
[  411.652844][T13131]        lock_sock_nested+0x41/0x100
[  411.658175][T13131]        inet_shutdown+0x6a/0x390
[  411.663235][T13131]        nbd_mark_nsock_dead+0x2cb/0x550
[  411.668905][T13131]        recv_work+0x1cee/0x1e10
[  411.673906][T13131]        process_scheduled_works+0xc3d/0x1630
[  411.680025][T13131]        worker_thread+0xa47/0xfb0
[  411.685182][T13131]        kthread+0x38b/0x480
[  411.689818][T13131]        ret_from_fork+0x514/0xb70
[  411.695001][T13131]        ret_from_fork_asm+0x1a/0x30
[  411.700334][T13131] 
[  411.700334][T13131] -> #5 (&nsock->tx_lock){+.+.}-{4:4}:
[  411.708036][T13131]        __mutex_lock+0x197/0x15a0
[  411.713177][T13131]        nbd_queue_rq+0x373/0xff0
[  411.718219][T13131]        blk_mq_dispatch_rq_list+0x499/0x1990
[  411.724309][T13131]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  411.731184][T13131]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  411.737698][T13131]        blk_mq_run_work_fn+0x167/0x2f0
[  411.743293][T13131]        process_scheduled_works+0xc3d/0x1630
[  411.749391][T13131]        worker_thread+0xa47/0xfb0
[  411.754527][T13131]        kthread+0x38b/0x480
[  411.759134][T13131]        ret_from_fork+0x514/0xb70
[  411.764264][T13131]        ret_from_fork_asm+0x1a/0x30
[  411.769565][T13131] 
[  411.769565][T13131] -> #4 (&cmd->lock){+.+.}-{4:4}:
[  411.776796][T13131]        __mutex_lock+0x197/0x15a0
[  411.781922][T13131]        nbd_queue_rq+0xc1/0xff0
[  411.786881][T13131]        blk_mq_dispatch_rq_list+0x499/0x1990
[  411.792972][T13131]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  411.799846][T13131]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  411.806377][T13131]        blk_mq_run_work_fn+0x167/0x2f0
[  411.811947][T13131]        process_scheduled_works+0xc3d/0x1630
[  411.818034][T13131]        worker_thread+0xa47/0xfb0
[  411.823183][T13131]        kthread+0x38b/0x480
[  411.827790][T13131]        ret_from_fork+0x514/0xb70
[  411.832935][T13131]        ret_from_fork_asm+0x1a/0x30
[  411.838245][T13131] 
[  411.838245][T13131] -> #3 (set->srcu){.+.+}-{0:0}:
[  411.845404][T13131]        __synchronize_srcu+0xca/0x2f0
[  411.850884][T13131]        elevator_switch+0x1e8/0x7b0
[  411.856192][T13131]        elevator_change+0x2fa/0x480
[  411.861507][T13131]        elevator_set_default+0x375/0x440
[  411.867260][T13131]        blk_register_queue+0x3f3/0x4e0
[  411.872849][T13131]        __add_disk+0x6b8/0xdb0
[  411.877736][T13131]        add_disk_fwnode+0x100/0x3a0
[  411.883051][T13131]        nbd_dev_add+0x733/0xb60
[  411.888011][T13131]        nbd_init+0x168/0x1f0
[  411.892717][T13131]        do_one_initcall+0x250/0x870
[  411.898019][T13131]        do_initcall_level+0x10a/0x1a0
[  411.903500][T13131]        do_initcalls+0x59/0xa0
[  411.908378][T13131]        kernel_init_freeable+0x29d/0x3e0
[  411.914123][T13131]        kernel_init+0x22/0x1d0
[  411.918991][T13131]        ret_from_fork+0x514/0xb70
[  411.924115][T13131]        ret_from_fork_asm+0x1a/0x30
[  411.929416][T13131] 
[  411.929416][T13131] -> #2 (&q->elevator_lock){+.+.}-{4:4}:
[  411.937277][T13131]        __mutex_lock+0x197/0x15a0
[  411.942433][T13131]        elevator_change+0x1af/0x480
[  411.947729][T13131]        elv_iosched_store+0x504/0x630
[  411.953208][T13131]        queue_attr_store+0x207/0x2b0
[  411.958616][T13131]        kernfs_fop_write_iter+0x3a4/0x540
[  411.964446][T13131]        vfs_write+0x612/0xba0
[  411.969229][T13131]        ksys_write+0x150/0x270
[  411.974106][T13131]        do_syscall_64+0x166/0x520
[  411.979241][T13131]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  411.985678][T13131] 
[  411.985678][T13131] -> #1 (&q->q_usage_counter(io)#66){++++}-{0:0}:
[  411.994304][T13131]        blk_alloc_queue+0x544/0x690
[  411.999631][T13131]        __blk_mq_alloc_disk+0x194/0x390
[  412.005283][T13131]        null_add_dev+0xe82/0x1d70
[  412.010421][T13131]        null_init+0x1e3/0x390
[  412.015207][T13131]        do_one_initcall+0x250/0x870
[  412.020519][T13131]        do_initcall_level+0x10a/0x1a0
[  412.025989][T13131]        do_initcalls+0x59/0xa0
[  412.030851][T13131]        kernel_init_freeable+0x29d/0x3e0
[  412.036584][T13131]        kernel_init+0x22/0x1d0
[  412.041446][T13131]        ret_from_fork+0x514/0xb70
[  412.046574][T13131]        ret_from_fork_asm+0x1a/0x30
[  412.051878][T13131] 
[  412.051878][T13131] -> #0 (fs_reclaim){+.+.}-{0:0}:
[  412.059111][T13131]        __lock_acquire+0x164c/0x2de0
[  412.064523][T13131]        lock_acquire+0x115/0x350
[  412.069561][T13131]        fs_reclaim_acquire+0x71/0x100
[  412.075033][T13131]        kmem_cache_alloc_node_noprof+0x5f/0x600
[  412.081379][T13131]        __alloc_skb+0x27a/0x7a0
[  412.086336][T13131]        alloc_uevent_skb+0x7d/0x230
[  412.091648][T13131]        kobject_uevent_net_broadcast+0x2fa/0x560
[  412.098079][T13131]        kobject_uevent_env+0x566/0x9e0
[  412.103648][T13131]        nbd_config_put+0x2c8/0x7e0
[  412.108873][T13131]        nbd_release+0xfe/0x140
[  412.113744][T13131]        bdev_release+0x571/0x690
[  412.118799][T13131]        blkdev_release+0x15/0x20
[  412.123838][T13131]        __fput+0x413/0xa50
[  412.128383][T13131]        fput_close_sync+0x11f/0x240
[  412.133700][T13131]        filp_close_sync+0x6e/0xa0
[  412.138846][T13131]        __se_sys_close_range+0xa77/0xef0
[  412.144585][T13131]        do_syscall_64+0x166/0x520
[  412.149716][T13131]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  412.156143][T13131] 
[  412.156143][T13131] other info that might help us debug this:
[  412.156143][T13131] 
[  412.166564][T13131] Chain exists of:
[  412.166564][T13131]   fs_reclaim --> cpuhp_state-up --> uevent_sock_mutex
[  412.166564][T13131] 
[  412.179275][T13131]  Possible unsafe locking scenario:
[  412.179275][T13131] 
[  412.186736][T13131]        CPU0                    CPU1
[  412.192109][T13131]        ----                    ----
[  412.197502][T13131]   lock(uevent_sock_mutex);
[  412.202116][T13131]                                lock(cpuhp_state-up);
[  412.208993][T13131]                                lock(uevent_sock_mutex);
[  412.216152][T13131]   lock(fs_reclaim);
[  412.220165][T13131] 
[  412.220165][T13131]  *** DEADLOCK ***
[  412.220165][T13131] 
[  412.228326][T13131] locks held by syz.3.2098/13131: 3, last CPU#0:
[  412.234675][T13131]  #0: ffff888026c22350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x1b8/0x690
[  412.244365][T13131]  #1: ffff888026c1a260 (&nbd->config_lock){+.+.}-{4:4}, at: refcount_dec_and_mutex_lock+0x30/0xa0
[  412.255099][T13131]  #2: ffffffff905f0f40 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x27e/0x560
[  412.266100][T13131] 
[  412.266100][T13131] stack backtrace:
[  412.272005][T13131] CPU: 0 UID: 0 PID: 13131 Comm: syz.3.2098 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  412.283051][T13131] Tainted: [L]=SOFTLOCKUP
[  412.287398][T13131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  412.297477][T13131] Call Trace:
[  412.300803][T13131]  <TASK>
[  412.303753][T13131]  dump_stack_lvl+0xe8/0x150
[  412.308382][T13131]  print_circular_bug+0x2e2/0x300
[  412.313432][T13131]  check_noncircular+0x12f/0x150
[  412.318412][T13131]  __lock_acquire+0x164c/0x2de0
[  412.323299][T13131]  ? blkdev_release+0x15/0x20
[  412.327993][T13131]  ? filp_close_sync+0x6e/0xa0
[  412.332778][T13131]  ? do_syscall_64+0x166/0x520
[  412.337555][T13131]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  412.343666][T13131]  lock_acquire+0x115/0x350
[  412.348185][T13131]  ? kmem_cache_alloc_node_noprof+0x5f/0x600
[  412.354192][T13131]  ? __alloc_skb+0x27a/0x7a0
[  412.358800][T13131]  fs_reclaim_acquire+0x71/0x100
[  412.363755][T13131]  ? kmem_cache_alloc_node_noprof+0x5f/0x600
[  412.369751][T13131]  kmem_cache_alloc_node_noprof+0x5f/0x600
[  412.375574][T13131]  ? __alloc_skb+0x18d/0x7a0
[  412.380178][T13131]  ? __alloc_skb+0x27a/0x7a0
[  412.384794][T13131]  ? __alloc_skb+0x18d/0x7a0
[  412.389404][T13131]  __alloc_skb+0x27a/0x7a0
[  412.393839][T13131]  alloc_uevent_skb+0x7d/0x230
[  412.398621][T13131]  kobject_uevent_net_broadcast+0x2fa/0x560
[  412.404536][T13131]  kobject_uevent_env+0x566/0x9e0
[  412.409587][T13131]  nbd_config_put+0x2c8/0x7e0
[  412.414290][T13131]  ? __pfx_nbd_config_put+0x10/0x10
[  412.419506][T13131]  ? __mutex_lock+0x305/0x15a0
[  412.424293][T13131]  ? do_raw_spin_unlock+0xf5/0x200
[  412.429428][T13131]  nbd_release+0xfe/0x140
[  412.433775][T13131]  ? __pfx_nbd_release+0x10/0x10
[  412.438751][T13131]  bdev_release+0x571/0x690
[  412.443288][T13131]  ? __pfx_blkdev_release+0x10/0x10
[  412.448507][T13131]  blkdev_release+0x15/0x20
[  412.453031][T13131]  __fput+0x413/0xa50
[  412.457040][T13131]  fput_close_sync+0x11f/0x240
[  412.461819][T13131]  ? __pfx_fput_close_sync+0x10/0x10
[  412.467127][T13131]  filp_close_sync+0x6e/0xa0
[  412.471736][T13131]  __se_sys_close_range+0xa77/0xef0
[  412.476958][T13131]  ? __pfx___se_sys_close_range+0x10/0x10
[  412.482703][T13131]  do_syscall_64+0x166/0x520
[  412.487310][T13131]  ? trace_irq_disable+0x3b/0x140
[  412.492352][T13131]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  412.498444][T13131]  ? clear_bhb_loop+0x70/0xc0
[  412.503141][T13131]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  412.509055][T13131] RIP: 0033:0x7f677d59e159
[  412.513498][T13131] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  412.533309][T13131] RSP: 002b:00007ffe45f82ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  412.541743][T13131] RAX: ffffffffffffffda RBX: 00007f677d827da0 RCX: 00007f677d59e159
[  412.549731][T13131] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  412.557816][T13131] RBP: 00007f677d827da0 R08: 00007f677d826128 R09: 0000000000000000
[  412.565822][T13131] R10: 00000000005f6634 R11: 0000000000000246 R12: 0000000000064772
[  412.573819][T13131] R13: 00007f677d82609c R14: 00000000000644e0 R15: 00007ffe45f83000
[  412.581813][T13131]  </TASK>
[  413.355301][ T9049] net_ratelimit: 24 callbacks suppressed
[  413.355327][ T9049] bond1: (slave gretap1): failed to get link speed/duplex
[  413.465480][ T9049] bond1: (slave gretap1): failed to get link speed/duplex
[  413.573330][ T9046] bond1: (slave gretap1): failed to get link speed/duplex
[  413.684816][ T7821] bond1: (slave gretap1): failed to get link speed/duplex
[  413.793170][   T13] bond1: (slave gretap1): failed to get link speed/duplex
[  413.903491][ T7832] bond1: (slave gretap1): failed to get link speed/duplex
[  414.013861][ T7821] bond1: (slave gretap1): failed to get link speed/duplex
[  414.133353][ T9046] bond1: (slave gretap1): failed to get link speed/duplex
[  414.245122][ T9049] bond1: (slave gretap1): failed to get link speed/duplex
[  414.353234][ T7832] bond1: (slave gretap1): failed to get link speed/duplex
[  418.363225][ T9049] net_ratelimit: 35 callbacks suppressed
[  418.363249][ T9049] bond1: (slave gretap1): failed to get link speed/duplex
[  418.473133][ T7834] bond1: (slave gretap1): failed to get link speed/duplex
[  418.583167][ T7834] bond1: (slave gretap1): failed to get link speed/duplex
[  418.693145][   T13] bond1: (slave gretap1): failed to get link speed/duplex
[  418.803155][   T13] bond1: (slave gretap1): failed to get link speed/duplex
[  418.913149][ T7834] bond1: (slave gretap1): failed to get link speed/duplex
[  419.023228][   T13] bond1: (slave gretap1): failed to get link speed/duplex
[  419.133130][ T9046] bond1: (slave gretap1): failed to get link speed/duplex
[  419.243199][ T7834] bond1: (slave gretap1): failed to get link speed/duplex
[  419.353227][ T7834] bond1: (slave gretap1): failed to get link speed/duplex