last executing test programs:

43.507592057s ago: executing program 4 (id=369):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x3008000, &(0x7f0000000080)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1000}}, {@nobh}, {@quota}]}, 0x1, 0x560, &(0x7f0000000440)="$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")
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f00000023c0)={{}, {0x1, 0x5}, [], {0x4, 0x5}, [], {0x10, 0x7}}, 0x24, 0x2)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x408, 0x103)
socket$inet6(0xa, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0)
syz_mount_image$exfat(0x0, &(0x7f0000000200)='./bus\x00', 0xe1c00, 0x0, 0x0, 0x0, &(0x7f0000000000))
mknod(&(0x7f00000001c0)='./bus\x00', 0x800, 0x2)
futex(0x0, 0x9, 0x4, 0x0, 0x0, 0x400000)

42.976201401s ago: executing program 4 (id=373):
r0 = syz_usb_connect(0x0, 0x62, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d24060101030200010006000609240305050306058109240306010304050507240405"], 0x0)
syz_usb_control_io$printer(r0, &(0x7f00000007c0)={0x14, 0x0, 0x0}, 0x0)
syz_usb_control_io$printer(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x81a}}}, 0x0)

39.865743988s ago: executing program 4 (id=382):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000c80)={0x2, 0x4e21, @empty}, 0x10)
r1 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000000000)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r2, 0x1, &(0x7f0000000040), 0x0)
sendto$inet(r0, &(0x7f0000000340)='\x00', 0x1, 0x4c001, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000900)="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", 0x116, 0x8012, 0x0, 0x0)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)

37.240323282s ago: executing program 4 (id=388):
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000080)='./file0\x00', 0x1a04447, &(0x7f0000000240)=ANY=[], 0x0, 0x1e6, &(0x7f0000000400)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x70010, 0x0)
llistxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)

37.004635683s ago: executing program 4 (id=390):
openat$kvm(0xffffffffffffff9c, 0x0, 0x80600, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x10000000000)
mlockall(0x7)

36.692148576s ago: executing program 4 (id=393):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {0xf}, {0xfff3, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x40)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x103081, 0x0)
ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r3, 0x80083313, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000600)={[{@grpid}]}, 0x1, 0x521, &(0x7f0000000640)="$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")
r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x182)
ioctl$UFFDIO_WRITEPROTECT(r4, 0xc018aa06, &(0x7f0000000280)={{&(0x7f0000bc8000/0x3000)=nil, 0x3000}, 0x1})
fallocate(r4, 0x0, 0x1, 0x2000402)
lseek(r4, 0x403, 0x3)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x1, 0x4, 0x8, 0x1, 0x1, 0x0, 0x0, '\x00', 0x0, r5, 0x1, 0x3}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000780), &(0x7f0000000900), 0x4, r6, 0x4}, 0x38)

21.661349952s ago: executing program 32 (id=393):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {0xf}, {0xfff3, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x40)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x103081, 0x0)
ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r3, 0x80083313, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000600)={[{@grpid}]}, 0x1, 0x521, &(0x7f0000000640)="$eJzs3d9rZFcdAPDvvcmkyW5qpiqyFmyLrewW3ZmksRpF2gqiTwW1vq8xmYSQSSZkJnUTiqb4BwgiKvgH+CL44KMg/RNEWNB3UVFEd/VR98qdudH8mEnGZJJZJ58PnMw598f5nnPJ3Lk/DvcGcG29EBFvRMRYRLwcETPF9LRIsd9J+XKPHr6zlKcksuytvyaRFNMO6srL4xFxs1htMiK++qWIbyQn4zZ399YX6/XadlGutja2qs3dvbtrG4urtdXa5vz83M8j4tWF2axwoX6WI+K1L/zxB9/9yRdf++Unvvm7e3++8628WZ/7UKfdEbF0oQA9dOoutbfFgXwbbV9GsCHJ+1MaG3YrAADoR36M//6I+Gj7+H8mxtpHcwAAAMAoyV6fjn8mERkAAAAwstKImI4krRRjAaYjTSuVzhjeD8aNtN5otj6+0tjZXM7nRZSjlK6s1WuzxVjhcpSSvDxXjLE9KL9yrDwfEc9ExPdnptrlylKjvjzsix8AAABwTdx8/uj5/z9m0nYeAAAAGDHlngUAAABgVDjlBwAAgNHn/B8AAABG2pfffDNP2cF7vJff3t1Zb7x9d7nWXK9s7CxVlhrbW5XVRmO1/cy+jbPqqzcaW5+MzZ371Vat2ao2d/fubTR2Nlv31o68AhsAAAC4Qs88/95vk4jY/+xUO0XxHECAI/4w7AYAgzQ27AYAQzM+7AYAQ1M6cwl7CBh1yRnzTw7e6VwrjF9dTnsAAIDBu/3hk/f/J4p5Z18bAP6fGesDANfP0bt7U0NrB3D1SucdAXhr0C0BhuV9nY+nes3v+fCOPu7/d64xZNm5GgYAAAzMdDslaaU4Tp+ONK1UIp6Ox1k5SsnKWr02W5wf/Gam9FRenmuvmZw5ZhgAAAAAAAAAAAAAAAAAAAAAAAAA6MiyJDIAAABgpEWkf0raT/OPuD3z0vTRqwPH3vr147d+eH+x1dqei5hI/jaTT5qIiNaPiumvZF4JAAAAAMM1lf/pnKcXn3PDbhIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAo+bRw3eWDtJVxv3L5yOi3C3+eEy2PyejFBE3/p7E+KH1kogYG0D8/Xcj4la3+Ek8zrKsXLSiW/ypS45fbm+a7vHTiLg5gPhwnb2X73/e6Pb9S+OF9mf37994kS6q9/4v/c/+b6zH/ufpY+Venn3ws2rP+O9GPDveff9zED/pxD8SIi+82Gcfv/61vb2uMw5V2S3+4VjV1sZWtbm7d3dtY3G1tlrbnJ+f+9TCpxdeXZitrqzVa8XfrmG+95FfPD6t/zd6xC8f7f+J7f9SX73P4l8P7j/8QKdQ6hb/zovdf39v9YifFr99Hyvy+fzbB/n9Tv6w53766+dO6/9yj/5PntH/O331Pz7z8le+8/uuc05sDQDgKjR399YX6/Xa9imZyT6W+Z8yERet5/WBtudJyMTZy0w+IU29jEz27c7/48XqueDqJzLZRVYfjwE0Y+LE93QszlthErGf19XnPyQAADBi/nvQf9odJAAAAAAAAAAAAAAAAAAAAOAynfOxZJMR0ffCx2PuD6erAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACn+ncAAAD//+8b0g8=")
r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x182)
ioctl$UFFDIO_WRITEPROTECT(r4, 0xc018aa06, &(0x7f0000000280)={{&(0x7f0000bc8000/0x3000)=nil, 0x3000}, 0x1})
fallocate(r4, 0x0, 0x1, 0x2000402)
lseek(r4, 0x403, 0x3)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x1, 0x4, 0x8, 0x1, 0x1, 0x0, 0x0, '\x00', 0x0, r5, 0x1, 0x3}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000780), &(0x7f0000000900), 0x4, r6, 0x4}, 0x38)

6.724803793s ago: executing program 0 (id=501):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb4147000001000000008f2b9000f22425e4097ed62cbc891061017cfa6f6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe68db8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3542646bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48)
recvmmsg(r0, &(0x7f0000003340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/64, 0x40}, 0x4}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003040)=""/243, 0xf3}, 0x1}], 0x2, 0x40000002, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil})
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="7b87f20f", @ANYRES64=r4], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

5.944241332s ago: executing program 1 (id=503):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x82)
fchdir(r4)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000005000000020000000700000000000000", @ANYRES32=0x1, @ANYBLOB="0000472e675fc5"], 0x50)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0xf)
ioctl$TCSETSF2(r5, 0x402c542d, &(0x7f0000001c00)={0x5, 0x1ff, 0x8001, 0x3ff, 0x3, "60596f07e377b9dfae1b21a75f426a335035a7", 0x400, 0x5})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_procs(r6, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r7, &(0x7f00000001c0), 0x12)

5.854647145s ago: executing program 3 (id=504):
r0 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r1, 0x1, &(0x7f0000000040), 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0xc00)

5.837893732s ago: executing program 0 (id=505):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x4, 0x7ffc0001}]})
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x2c000010)
unshare(0x22020600)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x804, 0x0, 0x0)
syz_mount_image$f2fs(&(0x7f0000002100), &(0x7f00000000c0)='./bus\x00', 0x10000, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodiscard,alloc_mode=default,acl,alloc_mode=reuse,mode=fragment:block,disable_roll_forward,background_gc=on,nouser_xattr,checkpoint=disable,fsync_mode=strict,nobarrier,jqfmt=vfsold,mode=fragment:block,\x00', @ANYRESDEC=0x0], 0x1, 0x5505, &(0x7f0000002480)="$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")
r1 = open(&(0x7f0000000140)='./bus\x00', 0xe2b40, 0x9a)
quotactl_fd$Q_SYNC(r1, 0xffffffff80000100, 0x0, 0x0)

4.936448613s ago: executing program 3 (id=506):
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x80)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000280)=[{0x20, 0x0, 0x8, 0xfffff00c}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab000e271f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1ff032aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f757036303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e0800000092e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9be7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa5200002fe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb0972d39e4b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e501ddddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b605908000000f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c332c34812382e57c0e0d83f3f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217b6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2a434b9048ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b4783d66661a92f174f2b88cd544b2a8e1b05ea7cf51578169fff7765f9978883b4b5983b42a35a05dabfc325ec2a2ec2f9b0882fdcf5d6f72272d2ff0d8eea60f5494ba42b4d40f144f0ab680a6f40f9094d3afb58a1efd6109894b8605c6b3b3f020c222f6446195b2274f634fbb737948a1f36ea729467e132385e9da614e4625175f4443b97a675934db90010e4b884200c3546c4d86d712c3939e11be3343f693846f509ad4c445ade5cd6d126d5694462ac5d3b527c3bd51c0a715a28d65fe94b255d02cdc1fab99b5b9c352f1b284115e4046285a824d22b6f0afbed8d6096a72fef72ebd6aae78b02fa1993e8fe2020ae93aae2bcfffa40b98549f1fb9fcefa74329909a207336d07f6f59da423ac5fa47852055d5ce6d2c56bdbbcdbf3458ba478c669f39d5272e65c90908ea2cb86d38f8ebf80a8cb85d8399b42403c94b8662af5cf1411526f177b4d476169a5d5a8c37d0d8893a77d0bd47b8a0bba60b3e26094209c889585f997ff556bcd2cc223f9c0c44de9d0fe1b5a8a815f652e79747d3e1f413fa0575d51f652d22883e143065c5ad74bdc864754ba3dad5a8fc8fc2c807d1a51dfb29884adee415c13f2ce14d307bd6165ec6ba68a766adfcbe444ea72d586bb47dd98a225467aab538a77667d19bae2e51727ba6d190e6d7"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82d", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
socket(0x10, 0x803, 0x0)
write(r2, 0x0, 0x0)

4.936006218s ago: executing program 1 (id=507):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00', <r1=>0x0})
sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f0000000340)={&(0x7f0000000140), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x0, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x20, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x79}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2982}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xf7, 0x485, &(0x7f0000001040)="$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")
mkdir(&(0x7f0000000000)='dir0\x00', 0x80)
mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000a00)='dir0/per_cpu/cpu0/trace\x00', 0x105a02, 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x2)
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f0000000340), 0x11000)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000300)={0x40, 0x94, 0x8}, 0x18)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
copy_file_range(r4, 0x0, r4, &(0x7f0000000040), 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f0000000380)={[{@numtail}, {@uni_xlate}, {@numtail}, {@shortname_lower}, {@uni_xlate}, {@uni_xlate}, {@fat=@quiet}, {@utf8no}, {@numtail}, {@fat=@fmask={'fmask', 0x3d, 0x100000000}}, {}, {@uni_xlate}, {@utf8}, {@rodir}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'cp950'}}]}, 0x3, 0x27b, &(0x7f0000000640)="$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")
setns(r4, 0x0)

4.80372288s ago: executing program 2 (id=508):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x800001, &(0x7f0000000340)=ANY=[@ANYRES16=0x0], 0x25, 0x55a8, &(0x7f0000000f80)="$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")
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a8a439, &(0x7f000001dcc0)=ANY=[], 0xd, 0x0, &(0x7f0000000000))

4.646157621s ago: executing program 1 (id=509):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000000600), 0x0, 0x40000003, &(0x7f0000000640))
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r3, &(0x7f0000000000)='3', 0x4e)

4.364311505s ago: executing program 3 (id=510):
socket$inet6_tcp(0xa, 0x1, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x989680}, 0x0)

4.110177488s ago: executing program 3 (id=511):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000000008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
getpid()
sched_setaffinity(0x0, 0x0, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(r1, 0x541c, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

2.513822136s ago: executing program 1 (id=512):
syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e131f8104c1302007eac0102030109021b0001000000000904000001098b7500090583", @ANYRES8], 0x0)
syz_open_dev$evdev(&(0x7f0000000000), 0x6f1022e4, 0x101)

2.364328868s ago: executing program 3 (id=513):
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201ea0503ebb6103b0b12165d01010203010902120001080780030904a60c0033e75f00"], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0})
syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000402609333340000102030109022d000101ff90090904000d020301010509210500770122b10f090581032000030864090502c2d3"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0})
r0 = syz_usb_connect(0x0, 0x2f, &(0x7f0000000140)=ANY=[@ANYBLOB="12010102b4e98a401320480204eed500030109021d00020407180709047603004354a20709046800000d10b90b0231"], 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_connect$hid(0x2, 0x3f, 0x0, 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000201c1b100c00000000000109022d00010000600009040080020300000009210604000122050009058103200009"], 0x0)
syz_usb_disconnect(r1)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000002c0)={0x2b, 0x0, 0x0, &(0x7f0000000600)=ANY=[], 0x0}, 0x0)
syz_usb_connect$midi(0x5, 0x31, &(0x7f00000037c0)=ANY=[@ANYBLOB], &(0x7f00000039c0)={0x0, 0x0, 0x0, 0x0})
syz_usb_disconnect(r0)
syz_usb_connect$cdc_ncm(0x3, 0x72, &(0x7f0000000140)=ANY=[], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000001040)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$evdev(0x0, 0x2, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x42)
ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000200)={0x0, 0x16, 0x0, 0x1000101, "0020946fc67f0000201b14700c1e0ac74f000000001600000000000900"})

2.306132285s ago: executing program 2 (id=514):
r0 = socket(0x10, 0x80003, 0x0)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080))

1.983313276s ago: executing program 0 (id=515):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xfffffff8, 0x2}}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bridge_slave_0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x14}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
r3 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000240)='./bus\x00', 0x3010050, &(0x7f0000000600)=ANY=[], 0x41, 0x14fe, &(0x7f0000000700)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1f7)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0xff, 0x0, &(0x7f00000007c0))
openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1123102, 0x0)
pipe2(&(0x7f00000038c0), 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./bus/file0\x00', 0x308080a, 0x0, 0xfd, 0x0, &(0x7f0000000140))
renameat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000a00)='./file1\x00', 0x0)
preadv(r3, 0x0, 0x0, 0x0, 0x0)

1.67264603s ago: executing program 1 (id=516):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
fchdir(r0)
setns(0xffffffffffffffff, 0x46000000)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x129942, 0x18)
mount_setattr(0xffffffffffffffff, 0x0, 0x8800, 0x0, 0x0)

1.483904109s ago: executing program 2 (id=517):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@RTM_NEWMDB={0x38, 0x54, 0x401, 0x0, 0x0, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x0, {@in6_addr=@dev={0xfe, 0x80, '\x00', 0x2b}, 0x86dd}}}]}, 0x38}}, 0x0)

1.466752087s ago: executing program 2 (id=518):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x2008002, &(0x7f00000000c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1000}}, {@nobh}, {@quota}]}, 0x1, 0x560, &(0x7f0000000440)="$eJzs3c9vI1cdAPDvTH42u212oQeogF2gsKDV2htvu6p6abmAUFWpouLEYRsSbxTWXi+xU5oQifRvAAkkTvAncEDigNQTB24ckTgAohyQCkSgDRIHoxlPEjdxWLN2bDb+fKTZ+fFm5vuevTPv+dmZF8DEuhoRuxExGxFvRcRisT0ppni1M2X7PdzbWdnf21lJot1+829Jnp5ti65jMheKc85HxNe+EvHN5GTc5tb2veVarbpRrJdb9Qfl5tb2jfX68lp1rXq/Urm9dPvmS7derAytrFfqP/vgy+uvff2Xv/jk+7/Z/eJ3s2xdLNK6yzFMnaLPHMbJTEfEa2cRbAymivnsmPPB40kj4iMR8Zn8+l+Mqfx/JwBwnrXbi9Fe7F4HAM67NO8DS9JSRKRp0Qgodfrwno2FtNZotq7fbWzeX+30lV2KmfTueq168/Lc776d7zyTZOtLeVqenq9Xjq3fiojLEfGDuafy9dJKo7Y6niYPAEy8C931f0T8cy5NS6W+Du3xrR4A8MSYH3cGAICRU/8DwORR/wPA5Omj/i++7N8987wAAKPh8z8ATB71PwBMHvU/AEyUN15/PZva+8Xzr1ff3tq813j7xmq1ea9U31wprTQ2HpTWGo21/Jk99Uedr9ZoPFh6ITbfKbeqzVa5ubV9p97YvN+6kz/X+051ZiSlAgD+m8tX3vttEhG7Lz+VT9E1loO6Gs63dIh7AU+WqUEO1kCAJ5rRvmBy9VWF542EX595XoDx6Pkw7/meix/2o/8hiN8Zwf+Vax/vv//fGM9wvujZh8n1eP3/rww9H8DoPXb//x+Gmw9g9Nrt5PiY/7OHSd3eGOWoxADAWRrgJ3zt7w2rEQKM1aMG8x7K9/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwzlyMiG9FkpbyscDT7N+0VIp4OiIuxUxyd71WvRkRz8SViJiZy9aXxp1pAGBA6V+SYvyva4vPXzyeOpv8ay6fR8R3fvzmD99ZbrU2lrLtfz/cPncwfFjl6LgBxhUEAPr3p352yuvvSjHv+iD/cG9n5WA6wzye8MGXDgcfXdnf28mnTsp0tNvtdsR83pZY+EcS08Ux8xHxXERMDSH+7rsR8bFe5U/yvpFLxcin3fGjiP30SOOnH4qf5mmdefbyfXQIeYFJ8152/3m11/WXxtV83vv6n8/vUIPL73/zEQf3vv2u+NNFpKke8bNr/mq/MV741VdPbGwvdtLejXhuulf85DB+ckr85/uM//tPfOr7r5yS1v5JxLXoHb87VrlVf1Bubm3fWK8vr1XXqvcrldtLt2++dOvFSjnvoy4f9FSf9NeXrz9zWt6y8i+cEr/zzl84Vv7Zw2M/12f5f/rvt77x6aPVuePxv/DZ3u//s/m89+uf1Ymf7zP+8sLPTx2+O4u/ekr5H/X+X+8z/vt/3l7tc1cAYASaW9v3lmu16sZAC9mn0GGc58RClsX+dj5oLg4W9I+RLxy9LEkkMexyZY2xfnaeOatX9cwXpg/bisM44VRnYaE45YiLkw6pFIMtxKVi4eGogo7nfgSMztFFP+6cAAAAAAAAAAAAAAAApxnF3zCNu4wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcX/8JAAD//7a0vsc=")
syz_mount_image$exfat(0x0, &(0x7f0000000200)='./bus\x00', 0xe1c00, 0x0, 0x0, 0x0, &(0x7f0000000000))
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4808, 0x0, 0x0, 0x0, &(0x7f0000000180))
renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0)

815.827616ms ago: executing program 2 (id=519):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/clocksource/clocksource0/current_clocksource\x00', 0x2, 0x0)
sendfile(r0, r0, 0x0, 0x23e)

640.264536ms ago: executing program 1 (id=520):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setresgid(0xee00, 0xee01, 0x0)
r3 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r3, &(0x7f0000000140)={0x18, 0x2, {0xfffe, @loopback}}, 0x1e)
connect$pptp(r3, &(0x7f0000000080)={0x18, 0x2, {0xfff8, @multicast1}}, 0x1e)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0)
ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000340)=0x1)
dup3(r4, r3, 0x0)

519.190185ms ago: executing program 0 (id=521):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
r0 = fspick(0xffffffffffffffff, &(0x7f0000001040)='./file0\x00', 0x1)
fsmount(r0, 0x0, 0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000080)=0x21e6, 0x4)
sendmmsg$inet(r1, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800)
recvfrom(r1, 0x0, 0x0, 0x2101, 0x0, 0x0)
ioctl$SIOCGSTAMPNS(r1, 0x8907, 0x0)

424.784935ms ago: executing program 2 (id=522):
socket$xdp(0x2c, 0x3, 0x0)
process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000002380), 0x0, 0x0)
sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(0xffffffffffffffff, 0xc008aec1, &(0x7f0000000280)={0x1, 0x0, [{0xb, 0x10001, 0x0, 0x4, 0x3, 0x9}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079100000000000007b0a00ff"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xed8}, 0x94)
socket$nl_xfrm(0x10, 0x3, 0x6)
fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0)
io_uring_setup(0x5594, 0x0)
setpriority(0x0, 0x0, 0x2a14b58)
pipe2$9p(&(0x7f0000000140), 0x800)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r0=>0x0)
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x480})
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x5, 0x2, 0x2, 0x80000000000029, 0x43, 0x80, 0x1, 0xab}, 0x0, &(0x7f0000002080)={0x3ff, 0x0, 0x9, 0x100000001, 0x6, 0x6, 0x7ffffffe, 0x2}, 0x0, 0x0)

298.49686ms ago: executing program 0 (id=523):
r0 = socket$inet6(0xa, 0x3, 0x84)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x10}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e25, 0x0, 0x0, 0xffff, 0xa}, {0x0, 0x1, 0x37, 0xfffffffffffffffe, 0xb, 0x6, 0x6, 0x40000000000000}, {0xffffffffffffffff, 0x1000000000, 0xd, 0x20}, 0x7f, 0x1, 0x1, 0x0, 0x3, 0x3}, {{@in6=@empty, 0x4d0, 0x32}, 0x2, @in=@remote, 0x1502, 0x1, 0x3, 0x2, 0x0, 0xfffffffd, 0x1}}, 0xe8)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x99, @loopback}, 0x1c)

291.47499ms ago: executing program 3 (id=524):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
recvmmsg(r0, &(0x7f00000055c0)=[{{&(0x7f0000000500)=@ethernet={0x0, @remote}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000580)=""/1, 0x1}], 0x1, &(0x7f0000000600)=""/211, 0xd3}, 0x9}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003540)=""/228, 0xe4}, 0x2daa7a90}, {{0x0, 0x0, &(0x7f0000004c40), 0x0, &(0x7f0000004d00)=""/205, 0xcd}, 0x7}, {{&(0x7f0000004e00)=@tipc=@id, 0x80, &(0x7f0000005000)=[{&(0x7f0000004e80)=""/162, 0xa2}, {0x0}], 0x2, &(0x7f0000005040)=""/70, 0x46}}, {{0x0, 0x0, &(0x7f00000052c0)=[{&(0x7f0000005140)=""/215, 0xd7}, {&(0x7f0000005240)=""/108, 0x6c}], 0x2, &(0x7f0000005300)=""/247, 0xf7}, 0xf109}, {{&(0x7f0000005400)=@nl, 0x80, &(0x7f0000005580)=[{&(0x7f0000005480)=""/87, 0x57}], 0x1}, 0x6264}], 0x6, 0x12140, 0x0)

249.98399ms ago: executing program 5 (id=463):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2)

0s ago: executing program 0 (id=525):
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x189080, 0x0)
prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB='extent_cache,acl\x00nolazytime,grpjquota=rootcontext,checkpoint=merge,heap,flush_merge,noinline_dentry,quota,grpquota=(:,age_extent_cache,heap,resgid=', @ANYRESHEX=0x0, @ANYBLOB="2c636865636b706f696e743d6d657267652c7375db6a5f757365723d3a7bc17b285c71002c7065726d69745f646972656374696f2c686173682c7375626a5f757365723d657874656e68652c646566636f6e746578743d7261636b66736465663d657874656e745f63616368652c7375626a5f7479f43133666f1fe17a7974696d652c00000000000000"], 0xf7, 0x555e, &(0x7f0000005a80)="$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")
sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@stripe={'stripe', 0x3d, 0x4}}, {}, {@block_validity}, {@norecovery}, {@dioread_nolock}, {@oldalloc}, {@oldalloc}, {@sysvgroups}, {@norecovery}]}, 0x3, 0x566, &(0x7f00000015c0)="$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")
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b)
listen(0xffffffffffffffff, 0x80)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0)
syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x23, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
creat(&(0x7f0000000000)='./file0\x00', 0xc1)
r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0)
write$P9_RREADLINK(r3, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab)
lsetxattr$security_ima(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, 0x0, 0x1)

kernel console output (not intermixed with test programs):

access
[  147.920075][   T27] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access
[  147.923403][   T27] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access
[  147.924144][   T27] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access
[  147.927312][   T27] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access
[  147.928214][   T27] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access
[  147.929636][   T27] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access
[  147.930854][   T27] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access
[  147.938739][   T27] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access
[  147.939784][   T27] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access
[  147.943411][   T27] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access
[  147.944309][   T27] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access
[  147.946500][   T27] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access
[  147.947225][   T27] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access
[  147.948654][   T27] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access
[  147.949437][   T27] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access
[  147.950810][   T27] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access
[  147.951550][   T27] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access
[  147.952002][   T27] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access
[  147.952794][   T27] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access
[  147.953160][   T27] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access
[  147.953906][   T27] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access
[  147.954264][   T27] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0336:ffffffb9
[  147.954461][   T27] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71
[  147.962916][   T27] usb 1-1: USB disconnect, device number 17
[  148.423110][   T27] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  148.489008][ T5731] usb 2-1: reset high-speed USB device number 14 using dummy_hcd
[  148.491399][ T5731] usb 2-1: device reset changed ep0 maxpacket size!
[  148.500051][ T5731] usb 2-1: USB disconnect, device number 14
[  148.586153][   T27] usb 1-1: New USB device found: idVendor=0cf3, idProduct=9271, bcdDevice=1.08
[  148.589938][   T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  148.589959][   T27] usb 1-1: Product: syz
[  148.589972][   T27] usb 1-1: Manufacturer: syz
[  148.589984][   T27] usb 1-1: SerialNumber: syz
[  148.624020][   T27] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  148.654722][ T5731] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  148.660049][    T9] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  148.817041][ T5731] usb 2-1: New USB device found: idVendor=0af0, idProduct=6711, bcdDevice=0.00
[  148.818587][ T5731] usb 2-1: config index 0 descriptor too short (expected 42, got 18)
[  148.818670][ T5731] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  148.826552][ T5731] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  148.826572][ T5731] usb 2-1: Product: syz
[  148.826585][ T5731] usb 2-1: Manufacturer: syz
[  148.849721][ T5731] hso 2-1:1.0: Can't find BULK endpoints
[  148.943861][ T5701] usb 1-1: USB disconnect, device number 18
[  148.958047][    T9] usb 5-1: New USB device found: idVendor=0919, idProduct=3333, bcdDevice=0.40
[  148.975679][    T9] usb 5-1: config 0 has no interfaces?
[  148.975710][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  149.045204][ T5731] usb 2-1: USB disconnect, device number 15
[  149.131715][    T9] usb 5-1: config 0 descriptor??
[  149.356200][ T6424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  149.358019][ T6424] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  149.359947][ T5731] usb 5-1: USB disconnect, device number 16
[  149.377275][ T6426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  149.384089][ T6426] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  149.423755][ T5724] usb 3-1: USB disconnect, device number 19
[  149.429145][    C0] ldusb 3-1:0.0: usb_submit_urb failed (-19)
[  149.452221][ T5724] ldusb 3-1:0.0: LD USB Device #0 now disconnected
[  149.697366][   T27] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[  149.697519][   T27] ath9k_htc: Failed to initialize the device
[  149.698428][ T5701] usb 1-1: ath9k_htc: USB layer deinitialized
[  149.834606][ T5731] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  149.854625][ T5724] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  149.925185][   T58] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  149.987437][ T5731] usb 5-1: New USB device found: idVendor=0681, idProduct=0005, bcdDevice=1.00
[  149.988385][ T5731] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  149.988408][ T5731] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[  149.988441][ T5731] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  150.002541][ T5731] idmouse 5-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached
[  150.007347][ T5724] usb 3-1: Using ep0 maxpacket: 16
[  150.014696][ T5724] usb 3-1: unable to get BOS descriptor or descriptor too short
[  150.014737][ T5724] usb 3-1: New USB device found: idVendor=0b3b, idProduct=1612, bcdDevice=1.5d
[  150.017572][ T5701] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  150.018894][ T5724] usb 3-1: config 8 has an invalid interface number: 166 but max is 0
[  150.018915][ T5724] usb 3-1: config 8 has no interface number 0
[  150.018940][ T5724] usb 3-1: config 8 interface 166 has no altsetting 0
[  150.021108][ T5724] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  150.021129][ T5724] usb 3-1: Product: syz
[  150.021141][ T5724] usb 3-1: Manufacturer: syz
[  150.021153][ T5724] usb 3-1: SerialNumber: syz
[  150.075909][   T58] usb 2-1: New USB device found: idVendor=0738, idProduct=1709, bcdDevice=0.00
[  150.078853][   T58] usb 2-1: too many endpoints for config 0 interface 0 altsetting 5: 66, using maximum allowed: 30
[  150.078923][   T58] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  150.078947][   T58] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 66
[  150.078969][   T58] usb 2-1: config 0 interface 0 has no altsetting 0
[  150.078999][   T58] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  150.088506][   T58] usb 2-1: config 0 descriptor??
[  150.112908][ T5804] usb 4-1: USB disconnect, device number 19
[  150.167373][ T5701] usb 1-1: New USB device found: idVendor=0cf3, idProduct=1002, bcdDevice=1.08
[  150.175359][ T5701] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  150.175380][ T5701] usb 1-1: Product: syz
[  150.175394][ T5701] usb 1-1: Manufacturer: syz
[  150.175406][ T5701] usb 1-1: SerialNumber: syz
[  150.250524][ T6428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  150.251008][ T6428] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  150.261025][ T6428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  150.262497][ T6428] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  150.324627][ T5701] usb 1-1: reset high-speed USB device number 19 using dummy_hcd
[  150.469842][ T6428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  150.470288][ T6428] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  150.510700][   T58] input: HID 0738:1709 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0738:1709.000C/input/input22
[  150.544645][ T5804] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  150.676480][ T6428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  150.677175][ T6428] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  150.695373][ T5804] usb 4-1: New USB device found: idVendor=0919, idProduct=3333, bcdDevice=0.40
[  150.696150][ T5804] usb 4-1: config 0 has no interfaces?
[  150.696178][ T5804] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  150.702872][ T5804] usb 4-1: config 0 descriptor??
[  150.880205][ T6428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  150.880801][ T6428] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  150.910440][ T6432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  150.911017][ T6432] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  150.912266][ T5804] usb 4-1: USB disconnect, device number 20
[  151.014761][ T5701] usb 1-1: device descriptor read/64, error -71
[  151.254627][ T5701] usb 1-1: reset high-speed USB device number 19 using dummy_hcd
[  151.354593][ T5804] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  151.443638][ T5701] usb 1-1: driver   API: 1.9.9 2016-02-15 [1-1]
[  151.443673][ T5701] usb 1-1: firmware API: 1.9.6 2012-07-07
[  151.505303][ T5804] usb 4-1: New USB device found: idVendor=0681, idProduct=0005, bcdDevice=1.00
[  151.506564][ T5804] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  151.506588][ T5804] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[  151.506622][ T5804] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  151.616215][    T9] usb 1-1: USB disconnect, device number 19
[  151.617255][    C1] device 1-1 is not registered
[  151.641876][   T27] usb 5-1: USB disconnect, device number 17
[  151.693197][ T5804] idmouse 4-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached
[  151.697641][   T27] idmouse 5-1:1.0: disconnected
[  151.710842][   T58] saitek 0003:0738:1709.000C: input,hiddev1,hidraw0: USB HID v0.00 Device [HID 0738:1709] on usb-dummy_hcd.1-1/input0
[  151.740594][ T5724] usb 3-1: USB disconnect, device number 20
[  152.484616][ T5701] usb 1-1: firmware upload failed (-110).
[  152.500494][  T192] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  152.534594][ T5724] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  152.654597][  T192] usb 5-1: Using ep0 maxpacket: 32
[  152.655277][  T192] usb 5-1: New USB device found: idVendor=044e, idProduct=120b, bcdDevice=0.00
[  152.656298][  T192] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 252, changing to 11
[  152.656314][  T192] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  152.656333][  T192] usb 5-1: config 0 interface 0 has no altsetting 0
[  152.656362][  T192] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.658562][  T192] usb 5-1: config 0 descriptor??
[  152.684696][ T5724] usb 3-1: Using ep0 maxpacket: 16
[  152.685611][ T5724] usb 3-1: New USB device found: idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  152.690784][ T5724] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  152.690806][ T5724] usb 3-1: Product: syz
[  152.690819][ T5724] usb 3-1: Manufacturer: syz
[  152.690831][ T5724] usb 3-1: SerialNumber: syz
[  152.696685][ T5724] usb 3-1: config 0 descriptor??
[  152.704023][ T5724] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  152.731259][ T5701] usb 2-1: USB disconnect, device number 16
[  152.794635][    T9] usb 1-1: new full-speed USB device number 20 using dummy_hcd
[  152.955155][    T9] usb 1-1: New USB device found: idVendor=17cc, idProduct=1969, bcdDevice=1.00
[  152.956269][    T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  152.956327][    T9] usb 1-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4
[  152.959054][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  152.959067][    T9] usb 1-1: Product: syz
[  152.959075][    T9] usb 1-1: Manufacturer: syz
[  152.959085][    T9] usb 1-1: SerialNumber: syz
[  153.374944][    C0] usb 1-1: received EP1 urb->status = -2
[  153.374981][    T9] usb 1-1: unable to init card! (ret=-110)
[  153.375354][    T9] snd-usb-caiaq 1-1:1.0: probe with driver snd-usb-caiaq failed with error -110
[  153.443735][    T9] usb 4-1: USB disconnect, device number 21
[  153.458486][    T9] idmouse 4-1:1.0: disconnected
[  153.577624][ T5701] usb 1-1: USB disconnect, device number 20
[  153.671859][ T6442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  153.672423][ T6442] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  153.804741][    T9] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  153.834623][ T5709] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  153.907878][ T5724] usb 3-1: Quatech SSU-100 USB to Serial Driver converter now attached to ttyUSB0
[  153.954611][    T9] usb 4-1: Using ep0 maxpacket: 32
[  153.955129][    T9] usb 4-1: New USB device found: idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  153.956020][    T9] usb 4-1: config index 0 descriptor too short (expected 156, got 27)
[  153.956075][    T9] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  153.956104][    T9] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  153.956117][    T9] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  153.956130][    T9] usb 4-1: config 0 interface 0 has no altsetting 0
[  153.957987][    T9] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  153.958003][    T9] usb 4-1: Product: syz
[  153.958011][    T9] usb 4-1: Manufacturer: syz
[  153.958018][    T9] usb 4-1: SerialNumber: syz
[  153.959869][    T9] usb 4-1: config 0 descriptor??
[  153.964280][    T9] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  153.975576][    T9] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  153.994868][ T5709] usb 2-1: Using ep0 maxpacket: 16
[  153.995554][ T5709] usb 2-1: New USB device found: idVendor=6161, idProduct=4d15, bcdDevice=0.00
[  153.997948][ T5709] usb 2-1: config 0 has an invalid interface number: 4 but max is 0
[  153.997969][ T5709] usb 2-1: config 0 has no interface number 0
[  153.998003][ T5709] usb 2-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  153.998047][ T5709] usb 2-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  153.998078][ T5709] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  154.007941][ T5709] usb 2-1: config 0 descriptor??
[  154.083113][  T192] hid-alps 0003:044E:120B.000D: failed read register (-71)
[  154.083201][  T192] hid-alps 0003:044E:120B.000D: failed U1_NUM_SENS_X (-71)
[  154.094986][  T192] hid-alps 0003:044E:120B.000D: hidraw0: USB HID v80.00 Joystick [HID 044e:120b] on usb-dummy_hcd.4-1/input0
[  154.107859][  T192] usb 5-1: USB disconnect, device number 18
[  154.121516][    T9] usb 3-1: USB disconnect, device number 21
[  154.141999][    T9] ssu100 ttyUSB0: Quatech SSU-100 USB to Serial Driver converter now disconnected from ttyUSB0
[  154.142576][    T9] ssu100 3-1:0.0: device disconnected
[  154.239027][ T6451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  154.239434][ T6451] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  154.267544][ T6451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  154.267967][ T6451] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  154.278987][ T6452] fido_id[6452]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  154.323172][   T58] usb 4-1: USB disconnect, device number 22
[  154.323178][    C0] ldusb 4-1:0.0: usb_submit_urb failed (-19)
[  154.329577][ T6449] ldusb 4-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71
[  154.329699][ T6453] ldusb 4-1:0.0: Couldn't submit HID_REQ_SET_REPORT -19
[  154.356189][   T58] ldusb 4-1:0.0: LD USB Device #0 now disconnected
[  154.472019][ T6451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  154.472423][ T6451] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  154.473481][ T6451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  154.473980][ T6451] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  154.476244][ T6451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  154.476625][ T6451] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  154.554632][ T5724] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  154.690224][ T5709] usbhid 2-1:0.4: can't add hid device: -71
[  154.690315][ T5709] usbhid 2-1:0.4: probe with driver usbhid failed with error -71
[  154.703767][ T5709] usb 2-1: USB disconnect, device number 17
[  154.735245][ T5724] usb 1-1: New USB device found: idVendor=13d8, idProduct=0010, bcdDevice=8f.72
[  154.736156][ T5724] usb 1-1: config 0 has an invalid interface number: 120 but max is 0
[  154.736177][ T5724] usb 1-1: config 0 has no interface number 0
[  154.736203][ T5724] usb 1-1: config 0 interface 120 has no altsetting 0
[  154.738047][ T5724] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  154.738068][ T5724] usb 1-1: Product: syz
[  154.738081][ T5724] usb 1-1: Manufacturer: syz
[  154.738093][ T5724] usb 1-1: SerialNumber: syz
[  154.739895][ T5724] usb 1-1: config 0 descriptor??
[  154.803957][    T9] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  154.934699][ T5702] usb 5-1: new full-speed USB device number 19 using dummy_hcd
[  154.944710][  T192] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  154.960143][    T9] usb 4-1: Using ep0 maxpacket: 32
[  154.966388][    T9] usb 4-1: New USB device found: idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  154.968535][    T9] usb 4-1: config index 0 descriptor too short (expected 156, got 27)
[  154.968569][    T9] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  154.968604][    T9] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  154.968627][    T9] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  154.968651][    T9] usb 4-1: config 0 interface 0 has no altsetting 0
[  154.970666][    T9] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  154.970688][    T9] usb 4-1: Product: syz
[  154.970701][    T9] usb 4-1: Manufacturer: syz
[  154.970714][    T9] usb 4-1: SerialNumber: syz
[  154.972956][    T9] usb 4-1: config 0 descriptor??
[  155.015833][    T9] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  155.025642][    T9] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  155.095390][ T5702] usb 5-1: New USB device found: idVendor=05ac, idProduct=027a, bcdDevice=0.00
[  155.096355][ T5702] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  155.096382][ T5702] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  155.096406][ T5702] usb 5-1: config 0 interface 0 has no altsetting 0
[  155.096435][ T5702] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  155.098822][ T5702] usb 5-1: config 0 descriptor??
[  155.099489][ T6458] raw-gadget.8 gadget.4: fail, usb_ep_enable returned -22
[  155.137691][  T192] usb 3-1: Using ep0 maxpacket: 8
[  155.138399][  T192] usb 3-1: New USB device found: idVendor=0225, idProduct=0000, bcdDevice=0.00
[  155.139405][  T192] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  155.139425][  T192] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[  155.139463][  T192] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[  155.139508][  T192] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[  155.139543][  T192] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  155.145828][  T192] hub 3-1:1.0: bad descriptor, ignoring hub
[  155.145849][  T192] hub 3-1:1.0: probe with driver hub failed with error -5
[  155.146444][  T192] cdc_wdm 3-1:1.0: skipping garbage
[  155.146457][  T192] cdc_wdm 3-1:1.0: skipping garbage
[  155.148784][  T192] cdc_wdm 3-1:1.0: cdc-wdm1: USB WDM device
[  155.148801][  T192] cdc_wdm 3-1:1.0: Unknown control protocol
[  155.271499][ T5724] usb 1-1: Direct firmware load for usbduxfast_firmware.bin failed with error -2
[  155.271523][ T5724] usb 1-1: Falling back to sysfs fallback for: usbduxfast_firmware.bin
[  155.505256][ T6458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  155.505677][ T6458] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  155.535305][    T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  155.654902][  T192] usb 3-1: USB disconnect, device number 22
[  155.677710][ T5702] usbhid 5-1:0.0: can't add hid device: -71
[  155.677765][ T5702] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  155.683274][ T5702] usb 5-1: USB disconnect, device number 19
[  155.688559][    T9] usb 2-1: New USB device found: idVendor=10c4, idProduct=ea90, bcdDevice=0.80
[  155.693067][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  155.693094][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  155.693150][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  155.699765][    T9] usb 2-1: config 0 descriptor??
[  155.905761][ T6462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  155.906151][ T6462] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  155.909765][    T9] usbhid 2-1:0.0: can't add hid device: -71
[  155.909875][    T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  155.917510][    T9] usb 2-1: USB disconnect, device number 18
[  156.014843][  T192] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  156.165025][  T192] usb 3-1: Using ep0 maxpacket: 8
[  156.165732][  T192] usb 3-1: New USB device found: idVendor=0225, idProduct=0000, bcdDevice=0.00
[  156.166695][  T192] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  156.166707][  T192] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[  156.166730][  T192] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[  156.166743][  T192] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[  156.166780][  T192] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.172414][  T192] hub 3-1:1.0: bad descriptor, ignoring hub
[  156.172467][  T192] hub 3-1:1.0: probe with driver hub failed with error -5
[  156.173076][  T192] cdc_wdm 3-1:1.0: skipping garbage
[  156.173091][  T192] cdc_wdm 3-1:1.0: skipping garbage
[  156.191173][  T192] cdc_wdm 3-1:1.0: cdc-wdm1: USB WDM device
[  156.191190][  T192] cdc_wdm 3-1:1.0: Unknown control protocol
[  156.344869][    T9] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  156.365729][ T6467] loop4: detected capacity change from 0 to 128
[  156.406822][ T6467] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  156.412411][ T6467] ext4 filesystem being mounted at /39/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  156.463113][ T5605] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  156.495026][   T58] usb 3-1: USB disconnect, device number 23
[  156.499573][    T9] usb 2-1: New USB device found: idVendor=10c4, idProduct=ea90, bcdDevice=0.80
[  156.503868][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  156.503895][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  156.503928][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.537075][    T9] usb 2-1: config 0 descriptor??
[  156.598575][ T5709] usb 4-1: USB disconnect, device number 23
[  156.598674][    C0] ldusb 4-1:0.0: usb_submit_urb failed (-19)
[  156.629223][ T5709] ldusb 4-1:0.0: LD USB Device #0 now disconnected
[  156.691822][ T6473] netlink: 16 bytes leftover after parsing attributes in process `syz.3.206'.
[  156.787862][ T6475] loop4: detected capacity change from 0 to 512
[  156.818413][ T6475] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  156.818500][ T6475] ext4 filesystem being mounted at /41/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  156.869265][   T58] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  157.035223][   T58] usb 3-1: Using ep0 maxpacket: 8
[  157.038810][   T58] usb 3-1: New USB device found: idVendor=0225, idProduct=0000, bcdDevice=0.00
[  157.074349][   T58] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  157.085601][   T58] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[  157.086017][   T58] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[  157.086067][   T58] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[  157.097518][   T58] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  157.217272][ T6462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  157.256800][ T6462] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  157.281559][   T58] hub 3-1:1.0: bad descriptor, ignoring hub
[  157.281582][   T58] hub 3-1:1.0: probe with driver hub failed with error -5
[  157.305724][   T58] cdc_wdm 3-1:1.0: skipping garbage
[  157.305741][   T58] cdc_wdm 3-1:1.0: skipping garbage
[  157.315097][    T9] hid_parser_main: 435 callbacks suppressed
[  157.315114][    T9] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0
[  157.315142][    T9] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0
[  157.315166][    T9] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0
[  157.315190][    T9] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0
[  157.315214][    T9] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0
[  157.315238][    T9] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0
[  157.315262][    T9] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0
[  157.359741][    T9] cp2112 0003:10C4:EA90.000E: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0
[  157.409266][   T58] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  157.409283][   T58] cdc_wdm 3-1:1.0: Unknown control protocol
[  157.421182][    T9] cp2112 0003:10C4:EA90.000E: Part Number: 0x00 Device Version: 0x00
[  157.466472][   T58] usb 3-1: USB disconnect, device number 24
[  157.858261][ T6487] EXT4-fs (loop0): unable to read superblock
[  159.397846][ T6493] loop3: detected capacity change from 0 to 2048
[  159.400196][ T6475] EXT4-fs: Remounting file system with no journal so ignoring journalled data option
[  159.400213][ T6475] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  159.434287][ T6475] EXT4-fs (loop4): changing journal_checksum during remount not supported; ignoring
[  159.434705][  T192] usb 2-1: reset high-speed USB device number 19 using dummy_hcd
[  159.487908][ T6493] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  159.487993][ T6493] ext4 filesystem being mounted at /42/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  159.507783][ T6475] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  159.632872][ T6494] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  159.743611][ T5612] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  160.040575][ T5605] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  160.150362][ T6513] loop4: detected capacity change from 0 to 128
[  160.160241][ T6511] loop3: detected capacity change from 0 to 256
[  160.161267][ T6511] exfat: Deprecated parameter 'namecase'
[  160.161301][ T6511] exfat: Deprecated parameter 'namecase'
[  160.209377][    T9] usb 2-1: USB disconnect, device number 19
[  160.253282][ T6513] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  160.255945][ T6513] ext4 filesystem being mounted at /42/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  160.286427][ T6511] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d)
[  160.385865][ T6511] exFAT-fs (loop3): start_clu is invalid cluster(0xff000008)
[  160.554358][ T6519] loop1: detected capacity change from 0 to 512
[  160.565051][ T6519] EXT4-fs (loop1): Test dummy encryption mode enabled
[  160.587914][ T6519] EXT4-fs error (device loop1): ext4_iget_extra_inode:5210: inode #15: comm syz.1.219: corrupted in-inode xattr: invalid ea_ino
[  160.588139][ T6519] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  160.589755][ T6519] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.219: couldn't read orphan inode 15 (err -117)
[  160.589845][ T6519] loop1: lost filesystem error report for type 5 error -117
[  160.595394][ T6519] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  160.673990][ T5605] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  160.732885][ T5604] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  160.810471][ T6528] loop4: detected capacity change from 0 to 256
[  161.731770][ T6554] loop4: detected capacity change from 0 to 128
[  162.151742][ T6562] loop4: detected capacity change from 0 to 128
[  162.165494][ T6562] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  162.165521][ T6562] FAT-fs (loop4): data area starts beyond volume (36 > 6)
[  162.165537][ T6562] FAT-fs (loop4): Can't find a valid FAT filesystem
[  162.365517][ T6537] loop0: detected capacity change from 0 to 40427
[  162.400806][ T6537] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  162.401234][ T6537] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  163.120892][ T6537] F2FS-fs (loop0): invalid crc value
[  164.028394][ T6537] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  164.050421][ T6537] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  164.050553][ T6537] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  164.334030][ T6593] loop3: detected capacity change from 0 to 256
[  164.348066][ T6593] FAT-fs (loop3): bogus logical sector size 0
[  164.348083][ T6593] FAT-fs (loop3): Can't find a valid FAT filesystem
[  164.847575][ T6603] loop4: detected capacity change from 0 to 128
[  165.027821][ T6603] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  165.027900][ T6603] FAT-fs (loop4): data area starts beyond volume (36 > 11)
[  165.027934][ T6603] FAT-fs (loop4): Can't find a valid FAT filesystem
[  165.593834][ T6605] FAULT_INJECTION: forcing a failure.
[  165.593834][ T6605] name failslab, interval 1, probability 0, space 0, times 1
[  165.593879][ T6605] CPU: 1 UID: 0 PID: 6605 Comm: syz.3.242 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  165.593907][ T6605] Tainted: [L]=SOFTLOCKUP
[  165.593914][ T6605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  165.593926][ T6605] Call Trace:
[  165.593934][ T6605]  <TASK>
[  165.593943][ T6605]  dump_stack_lvl+0xe8/0x150
[  165.593983][ T6605]  should_fail_ex+0x3eb/0x540
[  165.594013][ T6605]  should_failslab+0xa8/0x100
[  165.594036][ T6605]  ? fcntl_setlk+0xa9/0x1060
[  165.594058][ T6605]  kmem_cache_alloc_noprof+0x9c/0x600
[  165.594089][ T6605]  ? fcntl_setlk+0xa9/0x1060
[  165.594116][ T6605]  fcntl_setlk+0xa9/0x1060
[  165.594147][ T6605]  ? lock_acquire+0x115/0x350
[  165.594175][ T6605]  ? __pfx_fcntl_setlk+0x10/0x10
[  165.594203][ T6605]  ? __might_fault+0xaf/0x130
[  165.594235][ T6605]  do_fcntl+0x94c/0x1a20
[  165.594259][ T6605]  ? __pfx_do_futex+0x10/0x10
[  165.594282][ T6605]  ? kmem_cache_free+0x182/0x650
[  165.594301][ T6605]  ? __pfx_do_fcntl+0x10/0x10
[  165.594328][ T6605]  ? __se_sys_futex+0x3a8/0x450
[  165.594359][ T6605]  ? bpf_lsm_file_fcntl+0x9/0x20
[  165.594385][ T6605]  __se_sys_fcntl+0xc8/0x150
[  165.594409][ T6605]  do_syscall_64+0x166/0x520
[  165.594435][ T6605]  ? trace_irq_disable+0x3b/0x140
[  165.594458][ T6605]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  165.594478][ T6605]  ? clear_bhb_loop+0x70/0xc0
[  165.594501][ T6605]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  165.594521][ T6605] RIP: 0033:0x7f18c739e159
[  165.594543][ T6605] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  165.594559][ T6605] RSP: 002b:00007f18c8268028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048
[  165.594579][ T6605] RAX: ffffffffffffffda RBX: 00007f18c7625fa0 RCX: 00007f18c739e159
[  165.594594][ T6605] RDX: 0000200000000200 RSI: 0000000000000025 RDI: 0000000000000004
[  165.594608][ T6605] RBP: 00007f18c743506b R08: 0000000000000000 R09: 0000000000000000
[  165.594620][ T6605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  165.594632][ T6605] R13: 00007f18c7626038 R14: 00007f18c7625fa0 R15: 00007fffcfc867b8
[  165.594662][ T6605]  </TASK>
[  166.465649][ T6616] loop0: detected capacity change from 0 to 256
[  166.468096][ T6616] msdos: Bad value for 'uid'
[  166.468112][ T6616] msdos: Bad value for 'uid'
[  167.174636][  T192] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  167.324661][  T192] usb 2-1: Using ep0 maxpacket: 8
[  167.328188][  T192] usb 2-1: New USB device found: idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8
[  167.329895][  T192] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  167.329936][  T192] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89
[  167.329985][  T192] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7
[  167.330009][  T192] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024
[  167.330032][  T192] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  167.330053][  T192] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  167.332942][  T192] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  167.332962][  T192] usb 2-1: Product: syz
[  167.332975][  T192] usb 2-1: Manufacturer: syz
[  167.332987][  T192] usb 2-1: SerialNumber: syz
[  167.338154][  T192] usb 2-1: config 0 descriptor??
[  167.339871][ T6625] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  167.347594][ T5709] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  167.525705][ T5709] usb 4-1: Using ep0 maxpacket: 8
[  167.527983][ T5709] usb 4-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  167.532636][ T5709] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  167.532682][ T5709] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  167.532703][ T5709] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  167.532747][ T5709] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  167.532769][ T5709] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  167.532808][ T5709] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  167.830897][ T5709] usb 4-1: GET_CAPABILITIES returned 0
[  167.830942][ T5709] usbtmc 4-1:16.0: can't read capabilities
[  167.854613][ T5804] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  167.864894][   T58] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  168.005248][ T5804] usb 3-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40
[  168.006107][ T5804] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  168.006138][ T5804] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  168.008022][ T5804] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  168.008043][ T5804] usb 3-1: Product: syz
[  168.008056][ T5804] usb 3-1: Manufacturer: syz
[  168.008069][ T5804] usb 3-1: SerialNumber: syz
[  168.025304][   T58] usb 5-1: New USB device found: idVendor=04f2, idProduct=1421, bcdDevice=0.00
[  168.026325][   T58] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  168.026345][   T58] usb 5-1: config 0 has no interface number 0
[  168.026379][   T58] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  168.026401][   T58] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  168.026443][   T58] usb 5-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  168.027724][   T58] usb 5-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0
[  168.027747][   T58] usb 5-1: Product: syz
[  168.031568][   T58] usb 5-1: config 0 descriptor??
[  168.041930][ T6627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  168.042493][ T6627] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  168.043504][    C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  168.046374][   T27] usb 4-1: USB disconnect, device number 24
[  168.181983][ T6625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  168.182655][ T6625] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  168.217235][ T6629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  168.218385][ T6629] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  168.226942][ T5804] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22
[  168.240493][ T5804] usb 3-1: USB disconnect, device number 25
[  168.589095][ T6625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  168.591983][ T6625] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  168.651973][   T58] chicony 0003:04F2:1421.000F: collection stack underflow
[  168.652017][   T58] chicony 0003:04F2:1421.000F: item 0 1 0 12 parsing failed
[  168.653125][   T58] chicony 0003:04F2:1421.000F: Chicony hid parse failed: -22
[  168.653192][   T58] chicony 0003:04F2:1421.000F: probe with driver chicony failed with error -22
[  168.689263][ T5709] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  168.725139][  T192] rc_core: IR keymap rc-snapstream-firefly not found
[  168.725155][  T192] Registered IR keymap rc-empty
[  168.726578][  T192] rc rc0: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  168.729298][  T192] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input24
[  168.767792][  T192] input: syz syz mouse as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input25
[  168.781209][    C0] ati_remote 2-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19
[  168.781240][  T192] usb 2-1: USB disconnect, device number 20
[  168.846562][ T5709] usb 3-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40
[  168.847922][ T5709] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  168.847949][ T5709] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  168.850204][ T5709] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  168.850226][ T5709] usb 3-1: Product: syz
[  168.850240][ T5709] usb 3-1: Manufacturer: syz
[  168.850252][ T5709] usb 3-1: SerialNumber: syz
[  168.864335][ T5804] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  168.866503][   T58] usb 5-1: USB disconnect, device number 20
[  169.035139][ T5804] usb 4-1: Using ep0 maxpacket: 16
[  169.035700][ T5804] usb 4-1: New USB device found: idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  169.036727][ T5804] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  169.036752][ T5804] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  169.036763][ T5804] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  169.036785][ T5804] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  169.039390][ T5804] usb 4-1: config 0 descriptor??
[  169.063841][ T6629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  169.065968][ T6629] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  169.245336][ T6635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  169.245828][ T6635] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  169.414717][   T58] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  169.436468][ T6640] loop4: detected capacity change from 0 to 2048
[  169.521409][ T6629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  169.524174][ T6629] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  169.578415][ T6629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  169.578915][ T6629] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  169.615399][ T5804] shield 0003:0955:7214.0010: unknown main item tag 0x0
[  169.615430][ T5804] shield 0003:0955:7214.0010: unknown main item tag 0x0
[  169.615453][ T5804] shield 0003:0955:7214.0010: unknown main item tag 0x0
[  169.615476][ T5804] shield 0003:0955:7214.0010: unknown main item tag 0x0
[  169.615515][ T5804] shield 0003:0955:7214.0010: unknown main item tag 0x0
[  169.619071][ T5804] input: HID 0955:7214 Haptics as /devices/virtual/input/input26
[  169.640957][ T5804] shield 0003:0955:7214.0010: Registered Thunderstrike controller
[  169.641241][ T5804] shield 0003:0955:7214.0010: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0
[  169.665800][ T6635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  169.668913][ T6635] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  169.672456][ T6635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  169.680644][ T6635] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  169.683198][ T6635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  169.683592][ T6635] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  169.694589][   T58] usb 2-1: Using ep0 maxpacket: 8
[  169.701600][   T58] usb 2-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  169.702594][   T58] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  169.702614][   T58] usb 2-1: config 0 has no interface number 0
[  169.702650][   T58] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  169.702710][   T58] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  169.741860][ T6635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  170.016771][ T6635] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  170.673951][ T5701] shield 0003:0955:7214.0010: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[  170.675298][ T5701] shield 0003:0955:7214.0010: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[  170.677770][ T5701] shield 0003:0955:7214.0010: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[  170.680761][ T5701] shield 0003:0955:7214.0010: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[  170.729254][   T58] usb 2-1: config 0 descriptor??
[  170.762978][ T5804] usb 4-1: USB disconnect, device number 25
[  170.876213][   T58] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  171.133219][ T6638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  171.133731][ T6638] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  171.163031][ T6638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  171.174022][ T6638] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  171.185864][ T6638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  171.188916][ T6638] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  171.376457][ T5709] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22
[  171.384064][ T5709] usb 3-1: USB disconnect, device number 26
[  171.438106][ T6649] loop2: detected capacity change from 0 to 512
[  171.512084][ T6649] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  171.512196][ T6649] ext4 filesystem being mounted at /49/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  171.630320][ T6649] EXT4-fs error (device loop2): ext4_readdir:280: inode #2: block 3: comm syz.2.257: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1
[  171.648897][ T6649] EXT4-fs error (device loop2): ext4_readdir:280: inode #2: block 12: comm syz.2.257: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=5066064, rec_len=65536, size=2048 fake=0
[  171.684639][ T6649] EXT4-fs error (device loop2): ext4_readdir:280: inode #2: block 13: comm syz.2.257: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=3653246737, rec_len=65536, size=2048 fake=0
[  171.690767][ T6659] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #2: block 18: comm syz.2.257: lblock 23 mapped to illegal pblock 18 (length 1)
[  171.778957][ T5804] usb 2-1: USB disconnect, device number 21
[  171.779071][    C1] iowarrior 2-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19
[  171.830781][ T5616] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  171.958469][ T6665] loop0: detected capacity change from 0 to 512
[  171.963265][ T6665] EXT4-fs (loop0): invalid journal inode
[  172.127317][ T6667] loop2: detected capacity change from 0 to 512
[  172.149879][ T6667] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (65057!=18645)
[  172.149908][ T6667] EXT4-fs (loop2): group descriptors corrupted!
[  172.966772][ T6675] loop1: detected capacity change from 0 to 256
[  173.021070][ T6675] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  173.345338][ T6688] loop2: detected capacity change from 0 to 512
[  173.380616][ T6688] EXT4-fs error (device loop2): ext4_iget_extra_inode:5210: inode #15: comm syz.2.268: corrupted in-inode xattr: invalid ea_ino
[  173.380647][ T6688] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  173.381272][ T6688] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.268: couldn't read orphan inode 15 (err -117)
[  173.381300][ T6688] loop2: lost filesystem error report for type 5 error -117
[  173.387383][ T6688] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  173.424059][ T6694] loop4: detected capacity change from 0 to 512
[  173.494412][ T6694] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  173.494495][ T6694] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  173.561262][ T5605] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  173.620161][ T5616] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  173.802378][ T6705] loop4: detected capacity change from 0 to 256
[  173.803209][ T6705] exfat: Deprecated parameter 'utf8'
[  173.803367][ T6705] exfat: Deprecated parameter 'utf8'
[  173.803390][ T6705] exfat: Deprecated parameter 'namecase'
[  173.888872][ T6705] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbcba5927, utbl_chksum : 0xe619d30d)
[  175.249997][ T6715] loop0: detected capacity change from 0 to 40427
[  175.257837][ T6715] F2FS-fs (loop0): invalid crc value
[  175.395154][ T6715] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  175.459695][ T6715] F2FS-fs (loop0): f2fs_disable_checkpoint starts, unusable: 0
[  175.459720][ T6715] F2FS-fs (loop0): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[  175.459776][ T6715] F2FS-fs (loop0): Start checkpoint disabled!
[  175.502697][ T6715] F2FS-fs (loop0): f2fs_disable_checkpoint finishes, err:0
[  175.558139][   T51] Bluetooth: hci5: Frame reassembly failed (-84)
[  175.576767][ T6715] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  175.830973][ T5969] kworker/u8:14: attempt to access beyond end of device
[  175.830973][ T5969] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  175.880446][ T5969] CPU: 1 UID: 0 PID: 5969 Comm: kworker/u8:14 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  175.880489][ T5969] Tainted: [L]=SOFTLOCKUP
[  175.880496][ T5969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  175.880507][ T5969] Workqueue: writeback wb_workfn (flush-7:0)
[  175.880539][ T5969] Call Trace:
[  175.880547][ T5969]  <TASK>
[  175.880555][ T5969]  dump_stack_lvl+0xe8/0x150
[  175.880584][ T5969]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  175.880618][ T5969]  f2fs_write_end_bio+0x112c/0x15f0
[  175.880662][ T5969]  __submit_merged_bio+0x258/0x6a0
[  175.880688][ T5969]  ? rcu_is_watching+0x16/0xb0
[  175.880719][ T5969]  __submit_merged_write_cond+0x426/0x550
[  175.880755][ T5969]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  175.880806][ T5969]  f2fs_write_data_pages+0x2a1d/0x36f0
[  175.880863][ T5969]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  175.880897][ T5969]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  175.880953][ T5969]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  175.880989][ T5969]  ? __lock_acquire+0x747/0x2de0
[  175.881038][ T5969]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  175.881060][ T5969]  do_writepages+0x338/0x560
[  175.881094][ T5969]  ? reacquire_held_locks+0x117/0x1a0
[  175.881118][ T5969]  ? writeback_sb_inodes+0x450/0x1af0
[  175.881150][ T5969]  __writeback_single_inode+0x136/0x1220
[  175.881179][ T5969]  ? do_raw_spin_unlock+0xf5/0x200
[  175.881202][ T5969]  writeback_sb_inodes+0x9de/0x1af0
[  175.881227][ T5969]  ? __lock_acquire+0x747/0x2de0
[  175.881263][ T5969]  ? lock_acquire+0x115/0x350
[  175.881291][ T5969]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  175.881359][ T5969]  ? rcu_is_watching+0x16/0xb0
[  175.881384][ T5969]  ? queue_io+0x2d3/0x470
[  175.881414][ T5969]  wb_writeback+0x41c/0xad0
[  175.881442][ T5969]  ? queue_io+0x241/0x470
[  175.881474][ T5969]  ? __pfx_wb_writeback+0x10/0x10
[  175.881497][ T5969]  ? do_raw_spin_lock+0x12b/0x2f0
[  175.881531][ T5969]  wb_workfn+0x431/0x10f0
[  175.881572][ T5969]  ? __pfx_wb_workfn+0x10/0x10
[  175.881608][ T5969]  ? do_raw_spin_lock+0x12b/0x2f0
[  175.881636][ T5969]  ? lock_acquire+0x115/0x350
[  175.881666][ T5969]  ? rcu_is_watching+0x16/0xb0
[  175.881693][ T5969]  ? process_scheduled_works+0x97a/0x1630
[  175.881719][ T5969]  process_scheduled_works+0xc3d/0x1630
[  175.881778][ T5969]  ? __pfx_process_scheduled_works+0x10/0x10
[  175.881811][ T5969]  ? assign_work+0x3cf/0x5d0
[  175.881842][ T5969]  worker_thread+0xa47/0xfb0
[  175.881883][ T5969]  ? __kthread_parkme+0x71/0x1f0
[  175.881913][ T5969]  kthread+0x38b/0x480
[  175.881934][ T5969]  ? __pfx_worker_thread+0x10/0x10
[  175.881958][ T5969]  ? __pfx_kthread+0x10/0x10
[  175.881980][ T5969]  ret_from_fork+0x514/0xb70
[  175.881997][ T5969]  ? save_fpregs_to_fpstate+0x176/0x200
[  175.882026][ T5969]  ? __pfx_ret_from_fork+0x10/0x10
[  175.882045][ T5969]  ? __switch_to+0xc78/0x1410
[  175.882073][ T5969]  ? __pfx_kthread+0x10/0x10
[  175.882095][ T5969]  ret_from_fork_asm+0x1a/0x30
[  175.882138][ T5969]  </TASK>
[  176.052858][ T5969] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  176.052959][ T5969] CPU: 0 UID: 0 PID: 5969 Comm: kworker/u8:14 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  176.052984][ T5969] Tainted: [L]=SOFTLOCKUP
[  176.052990][ T5969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  176.053000][ T5969] Workqueue: writeback wb_workfn (flush-7:0)
[  176.053031][ T5969] Call Trace:
[  176.053039][ T5969]  <TASK>
[  176.053046][ T5969]  dump_stack_lvl+0xe8/0x150
[  176.053072][ T5969]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  176.053104][ T5969]  f2fs_write_end_bio+0x112c/0x15f0
[  176.053146][ T5969]  __submit_merged_bio+0x258/0x6a0
[  176.053172][ T5969]  ? rcu_is_watching+0x16/0xb0
[  176.053201][ T5969]  __submit_merged_write_cond+0x426/0x550
[  176.053236][ T5969]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  176.053284][ T5969]  f2fs_write_data_pages+0x2a1d/0x36f0
[  176.053337][ T5969]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  176.053370][ T5969]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  176.053423][ T5969]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  176.053462][ T5969]  ? __lock_acquire+0x747/0x2de0
[  176.053509][ T5969]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  176.053530][ T5969]  do_writepages+0x338/0x560
[  176.053562][ T5969]  ? reacquire_held_locks+0x117/0x1a0
[  176.053585][ T5969]  ? writeback_sb_inodes+0x450/0x1af0
[  176.053614][ T5969]  __writeback_single_inode+0x136/0x1220
[  176.053643][ T5969]  ? do_raw_spin_unlock+0xf5/0x200
[  176.053665][ T5969]  writeback_sb_inodes+0x9de/0x1af0
[  176.053689][ T5969]  ? __lock_acquire+0x747/0x2de0
[  176.053723][ T5969]  ? lock_acquire+0x115/0x350
[  176.053749][ T5969]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  176.053814][ T5969]  ? rcu_is_watching+0x16/0xb0
[  176.053838][ T5969]  ? queue_io+0x2d3/0x470
[  176.053866][ T5969]  wb_writeback+0x41c/0xad0
[  176.053893][ T5969]  ? queue_io+0x241/0x470
[  176.053922][ T5969]  ? __pfx_wb_writeback+0x10/0x10
[  176.053945][ T5969]  ? do_raw_spin_lock+0x12b/0x2f0
[  176.053980][ T5969]  wb_workfn+0x431/0x10f0
[  176.054019][ T5969]  ? __pfx_wb_workfn+0x10/0x10
[  176.054053][ T5969]  ? do_raw_spin_lock+0x12b/0x2f0
[  176.054079][ T5969]  ? lock_acquire+0x115/0x350
[  176.054108][ T5969]  ? rcu_is_watching+0x16/0xb0
[  176.054133][ T5969]  ? process_scheduled_works+0x97a/0x1630
[  176.054159][ T5969]  process_scheduled_works+0xc3d/0x1630
[  176.054214][ T5969]  ? __pfx_process_scheduled_works+0x10/0x10
[  176.054245][ T5969]  ? assign_work+0x3cf/0x5d0
[  176.054275][ T5969]  worker_thread+0xa47/0xfb0
[  176.054314][ T5969]  ? __kthread_parkme+0x71/0x1f0
[  176.054341][ T5969]  kthread+0x38b/0x480
[  176.054362][ T5969]  ? __pfx_worker_thread+0x10/0x10
[  176.054385][ T5969]  ? __pfx_kthread+0x10/0x10
[  176.054406][ T5969]  ret_from_fork+0x514/0xb70
[  176.054423][ T5969]  ? save_fpregs_to_fpstate+0x176/0x200
[  176.054446][ T5969]  ? __pfx_ret_from_fork+0x10/0x10
[  176.054463][ T5969]  ? __switch_to+0xc78/0x1410
[  176.054494][ T5969]  ? __pfx_kthread+0x10/0x10
[  176.054517][ T5969]  ret_from_fork_asm+0x1a/0x30
[  176.054557][ T5969]  </TASK>
[  176.081538][ T5969] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  176.332494][ T5723] loop0: lost filesystem error report for type 5 error -108
[  176.486436][ T6737] netlink: 'syz.1.286': attribute type 12 has an invalid length.
[  177.604791][ T5606] Bluetooth: hci5: command 0x1003 tx timeout
[  177.604807][ T5613] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  178.144754][ T6790] loop4: detected capacity change from 0 to 512
[  178.162591][ T6790] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  178.181789][ T6790] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=842c018, mo2=0002]
[  178.182033][ T6790] EXT4-fs (loop4): orphan cleanup on readonly fs
[  178.225210][ T6790] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4223: comm syz.4.299: Allocating blocks 41-42 which overlap fs metadata
[  178.225241][ T6790] loop4: lost filesystem error report for type 5 error -117
[  178.234595][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  178.234614][    C1] EXT4-fs (loop4): initial error at time 1790168070: ext4_mb_mark_diskspace_used:4223
[  178.234636][    C1] EXT4-fs (loop4): last error at time 1790168070: ext4_mb_mark_diskspace_used:4223
[  178.293204][ T6790] Quota error (device loop4): write_blk: dquota write failed
[  178.293341][ T6790] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  178.293376][ T6790] EXT4-fs error (device loop4): ext4_acquire_dquot:7069: comm syz.4.299: Failed to acquire dquot type 0
[  178.293396][ T6790] loop4: lost filesystem error report for type 5 error -117
[  178.350808][ T6790] EXT4-fs error (device loop4): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  178.363601][ T6790] EXT4-fs error (device loop4): ext4_do_update_inode:5801: inode #12: comm syz.4.299: corrupted inode contents
[  178.363684][ T6790] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  178.374615][ T6790] EXT4-fs error (device loop4): ext4_dirty_inode:6736: inode #12: comm syz.4.299: mark_inode_dirty error
[  178.374643][ T6790] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  178.375442][ T6790] EXT4-fs error (device loop4): ext4_do_update_inode:5801: inode #12: comm syz.4.299: corrupted inode contents
[  178.375467][ T6790] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  178.378133][ T6790] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #12: comm syz.4.299: mark_inode_dirty error
[  178.378159][ T6790] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  178.388876][ T6790] EXT4-fs error (device loop4): ext4_do_update_inode:5801: inode #12: comm syz.4.299: corrupted inode contents
[  178.389105][ T6790] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  178.409481][ T6790] EXT4-fs error (device loop4) in ext4_orphan_del:304: Corrupt filesystem
[  178.409502][ T6790] loop4: lost filesystem error report for type 5 error -117
[  178.410762][ T6790] EXT4-fs error (device loop4): ext4_do_update_inode:5801: inode #12: comm syz.4.299: corrupted inode contents
[  178.410787][ T6790] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  178.412014][ T6790] EXT4-fs error (device loop4): ext4_truncate:4721: inode #12: comm syz.4.299: mark_inode_dirty error
[  178.412039][ T6790] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  178.414825][ T6790] EXT4-fs error (device loop4) in ext4_process_orphan:346: Corrupt filesystem
[  178.414845][ T6790] loop4: lost filesystem error report for type 5 error -117
[  178.421595][ T6790] EXT4-fs (loop4): 1 truncate cleaned up
[  178.421858][ T6790] EXT4-fs (loop4): pa ffff8880239d8000: logic 1, phys. 41, len 23
[  178.421881][ T6790] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5460: group 0, free 22, pa_free 23
[  178.437825][ T6790] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  178.623612][ T5605] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  179.107958][ T6806] loop0: detected capacity change from 0 to 128
[  179.114375][ T6806] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  179.121253][ T6803] loop3: detected capacity change from 0 to 16
[  179.196236][ T6803] erofs (device loop3): invalid ishare xattr prefix id 0
[  179.593155][ T6759] loop2: detected capacity change from 0 to 131072
[  179.617308][ T6759] F2FS-fs (loop2): invalid crc value
[  179.842996][ T6823] loop3: detected capacity change from 0 to 512
[  179.863788][ T6823] EXT4-fs: Ignoring removed nomblk_io_submit option
[  179.863832][ T6823] EXT4-fs: Ignoring removed nomblk_io_submit option
[  179.905844][ T6823] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  180.036289][ T6823] EXT4-fs (loop3): 1 truncate cleaned up
[  180.038664][ T6759] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  180.094665][ T6759] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  180.094952][ T6823] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  180.342872][ T5612] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  182.633394][ T6863] loop0: detected capacity change from 0 to 512
[  182.642133][ T6863] EXT4-fs (loop0): Test dummy encryption mode enabled
[  182.660549][ T6863] EXT4-fs error (device loop0): ext4_orphan_get:1403: inode #11: comm syz.0.314: casefold flag without casefold feature
[  182.660577][ T6863] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  182.664543][    C1] EXT4-fs (loop0): error count since last fsck: 1
[  182.664562][    C1] EXT4-fs (loop0): initial error at time 1790168075: ext4_orphan_get:1403: inode 11
[  182.664588][    C1] EXT4-fs (loop0): last error at time 1790168075: ext4_orphan_get:1403: inode 11
[  182.665273][ T6863] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.314: couldn't read orphan inode 11 (err -117)
[  182.665297][ T6863] loop0: lost filesystem error report for type 5 error -117
[  182.695490][ T6863] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  184.558666][ T5611] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  184.998076][ T6918] loop4: detected capacity change from 0 to 128
[  185.013402][ T6918] vfat: Bad value for 'uid'
[  185.013421][ T6918] vfat: Bad value for 'uid'
[  185.203857][ T6927] loop0: detected capacity change from 0 to 128
[  185.213287][ T6927] msdos: Unknown parameter 'gžJC"ÿ¤î‹BµþLîµé"Ë}.Àu-Ùbbn6¬â‰ªž¦^x³UŠ	ïuͤÿÿÿÿÿÿÿÿÿÿÿÿ'
[  185.242037][ T6927] fuse: Bad value for 'fd'
[  185.506915][ T6934] input: syz1 as /devices/virtual/input/input27
[  185.873613][ T6943] FAULT_INJECTION: forcing a failure.
[  185.873613][ T6943] name failslab, interval 1, probability 0, space 0, times 0
[  185.873646][ T6943] CPU: 0 UID: 0 PID: 6943 Comm: syz.4.335 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  185.873672][ T6943] Tainted: [L]=SOFTLOCKUP
[  185.873679][ T6943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  185.873691][ T6943] Call Trace:
[  185.873698][ T6943]  <TASK>
[  185.873706][ T6943]  dump_stack_lvl+0xe8/0x150
[  185.873736][ T6943]  should_fail_ex+0x3eb/0x540
[  185.873773][ T6943]  should_failslab+0xa8/0x100
[  185.873800][ T6943]  kmem_cache_alloc_lru_noprof+0xa2/0x5f0
[  185.873830][ T6943]  ? __d_alloc+0x37/0x6f0
[  185.873848][ T6943]  ? __d_alloc+0x37/0x6f0
[  185.873871][ T6943]  __d_alloc+0x37/0x6f0
[  185.873892][ T6943]  ? __lock_acquire+0x747/0x2de0
[  185.873916][ T6943]  d_alloc_pseudo+0x21/0xc0
[  185.873937][ T6943]  alloc_path_pseudo+0x107/0x220
[  185.873967][ T6943]  ? __pfx_alloc_path_pseudo+0x10/0x10
[  185.874000][ T6943]  alloc_file_pseudo+0xa8/0x1e0
[  185.874028][ T6943]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  185.874062][ T6943]  anon_inode_getfd+0xca/0x1f0
[  185.874092][ T6943]  map_create+0x61f/0x1b70
[  185.874126][ T6943]  ? __pfx_map_create+0x10/0x10
[  185.874156][ T6943]  ? __might_fault+0xaf/0x130
[  185.874182][ T6943]  ? bpf_lsm_bpf+0x9/0x20
[  185.874204][ T6943]  ? security_bpf+0x7e/0x2d0
[  185.874229][ T6943]  __sys_bpf+0xaea/0xd90
[  185.874261][ T6943]  ? __pfx___sys_bpf+0x10/0x10
[  185.874290][ T6943]  ? do_futex+0x458/0x4e0
[  185.874334][ T6943]  ? rcu_is_watching+0x16/0xb0
[  185.874366][ T6943]  __x64_sys_bpf+0xba/0xd0
[  185.874392][ T6943]  do_syscall_64+0x166/0x520
[  185.874419][ T6943]  ? trace_irq_disable+0x3b/0x140
[  185.874443][ T6943]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  185.874461][ T6943]  ? clear_bhb_loop+0x70/0xc0
[  185.874484][ T6943]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  185.874502][ T6943] RIP: 0033:0x7f786d19e159
[  185.874522][ T6943] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  185.874538][ T6943] RSP: 002b:00007f786e0da028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  185.874557][ T6943] RAX: ffffffffffffffda RBX: 00007f786d425fa0 RCX: 00007f786d19e159
[  185.874572][ T6943] RDX: 0000000000000050 RSI: 00002000000000c0 RDI: 0000000000000000
[  185.874585][ T6943] RBP: 00007f786d23506b R08: 0000000000000000 R09: 0000000000000000
[  185.874597][ T6943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  185.874608][ T6943] R13: 00007f786d426038 R14: 00007f786d425fa0 R15: 00007ffd29d48918
[  185.874639][ T6943]  </TASK>
[  186.375741][ T6949] loop3: detected capacity change from 0 to 2048
[  187.180242][ T6949]  loop3: p1 < > p4
[  187.180242][ T6949]  p4: <netbsd: >
[  187.183749][ T6949] loop3: p4 size 722688 extends beyond EOD, truncated
[  189.847924][ T6975] loop2: detected capacity change from 0 to 128
[  189.900668][ T6975] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  189.900728][ T6975] FAT-fs (loop2): data area starts beyond volume (36 > 11)
[  189.900760][ T6975] FAT-fs (loop2): Can't find a valid FAT filesystem
[  191.012817][ T6977] loop3: detected capacity change from 0 to 16
[  191.139675][ T4926] Bluetooth: hci3: command 0x0406 tx timeout
[  191.139706][ T4926] Bluetooth: hci1: command 0x0406 tx timeout
[  191.139725][ T4926] Bluetooth: hci0: command 0x0406 tx timeout
[  191.139742][ T4926] Bluetooth: hci4: command 0x0406 tx timeout
[  191.139795][ T5618] Bluetooth: hci2: command 0x0406 tx timeout
[  191.197345][ T6977] erofs (device loop3): mounted with root inode @ nid 36.
[  191.279647][ T6977] syz.3.346: attempt to access beyond end of device
[  191.279647][ T6977] loop3: rw=524288, sector=8, nr_sectors = 24 limit=16
[  191.304138][ T6977] erofs (device loop3): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 4096
[  191.304170][ T6977] erofs (device loop3): read error -117 @ 0 of nid 89
[  191.304371][   T33] audit: type=1800 audit(1790168083.742:13): pid=6977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.346" name="file2" dev="loop3" ino=89 res=0 errno=0
[  191.358669][ T6977] erofs (device loop3): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 4096
[  191.358701][ T6977] erofs (device loop3): read error -117 @ 0 of nid 89
[  192.389440][ T6995] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies.
[  193.582403][ T6989] loop3: detected capacity change from 0 to 4096
[  193.591793][ T6989] ext4: Unknown parameter 'noacl'
[  193.650718][ T7006] loop4: detected capacity change from 0 to 1024
[  193.729663][ T7006] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  193.729753][ T7006] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  193.903427][ T7006] EXT4-fs error (device loop4): ext4_map_blocks:832: inode #15: comm syz.4.356: lblock 0 mapped to illegal pblock 0 (length 6)
[  193.925823][ T7006] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117
[  193.925851][ T7006] EXT4-fs (loop4): This should not happen!! Data will be lost
[  193.925851][ T7006] 
[  193.927915][ T7005] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #15: comm syz.4.356: lblock 0 mapped to illegal pblock 0 (length 4)
[  193.947320][ T7005] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #15: comm syz.4.356: lblock 0 mapped to illegal pblock 0 (length 4)
[  193.947807][ T7005] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #15: comm syz.4.356: lblock 0 mapped to illegal pblock 0 (length 4)
[  193.963881][ T7005] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #15: comm syz.4.356: lblock 0 mapped to illegal pblock 0 (length 4)
[  193.965994][ T7005] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #15: comm syz.4.356: lblock 0 mapped to illegal pblock 0 (length 4)
[  193.966415][ T7005] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #15: comm syz.4.356: lblock 0 mapped to illegal pblock 0 (length 4)
[  193.994680][ T7005] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #15: comm syz.4.356: lblock 0 mapped to illegal pblock 0 (length 4)
[  194.031282][ T7005] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #15: comm syz.4.356: lblock 0 mapped to illegal pblock 0 (length 4)
[  194.031696][ T7005] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #15: comm syz.4.356: lblock 0 mapped to illegal pblock 0 (length 4)
[  194.176079][ T1317] ieee802154 phy0 wpan0: encryption failed: -22
[  194.176132][ T1317] ieee802154 phy1 wpan1: encryption failed: -22
[  194.195616][ T7018] loop3: detected capacity change from 0 to 256
[  194.198313][ T7018] exfat: Deprecated parameter 'utf8'
[  194.198436][ T7018] exfat: Deprecated parameter 'namecase'
[  194.198467][ T7018] exfat: Deprecated parameter 'namecase'
[  194.245777][ T7018] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0x9420891b, utbl_chksum : 0xe619d30d)
[  194.271752][ T7023] loop2: detected capacity change from 0 to 512
[  194.343610][ T7023] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  194.343702][ T7023] ext4 filesystem being mounted at /67/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  194.505029][ T7023] EXT4-fs: Remounting file system with no journal so ignoring journalled data option
[  194.505048][ T7023] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  194.511317][   T51] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  194.511342][   T51] EXT4-fs (loop4): This should not happen!! Data will be lost
[  194.511342][   T51] 
[  194.511354][ T7023] EXT4-fs (loop2): changing journal_checksum during remount not supported; ignoring
[  194.543013][ T5605] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  194.582333][ T7023] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  194.711217][ T5616] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  194.767384][ T7031] overlayfs: failed to resolve './bus': -2
[  194.800448][ T7028] loop0: detected capacity change from 0 to 512
[  194.801282][ T7034] loop4: detected capacity change from 0 to 128
[  194.850577][ T7036] overlayfs: failed to clone upperpath
[  194.852830][ T7034] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  194.861679][ T7028] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002]
[  194.861801][ T7028] System zones: 1-12
[  194.893661][ T7028] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: inode #12: comm syz.0.352: missing EA_INODE flag
[  194.893688][ T7028] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  194.894661][    C1] EXT4-fs (loop0): initial error at time 1790168087: ext4_xattr_inode_iget:437: inode 12
[  194.894689][    C1] EXT4-fs (loop0): last error at time 1790168087: ext4_xattr_inode_iget:437: inode 12
[  194.923294][ T7028] EXT4-fs error (device loop0): ext4_xattr_inode_iget:442: comm syz.0.352: error while reading EA inode 12 err=-117
[  194.923321][ T7028] loop0: lost filesystem error report for type 5 error -117
[  194.928224][ T7028] EXT4-fs (loop0): 1 orphan inode deleted
[  194.943430][ T7028] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  195.154446][ T5611] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  195.191680][ T7041] loop3: detected capacity change from 0 to 256
[  195.207877][ T7041] FAT-fs (loop3): Directory bread(block 1285) failed
[  195.207908][ T7041] FAT-fs (loop3): Directory bread(block 1286) failed
[  195.207931][ T7041] FAT-fs (loop3): Directory bread(block 1287) failed
[  195.209700][ T7041] FAT-fs (loop3): Directory bread(block 1288) failed
[  195.240129][ T7041] FAT-fs (loop3): Directory bread(block 1285) failed
[  195.240155][ T7041] FAT-fs (loop3): Directory bread(block 1286) failed
[  195.240175][ T7041] FAT-fs (loop3): Directory bread(block 1287) failed
[  195.240195][ T7041] FAT-fs (loop3): Directory bread(block 1288) failed
[  195.302834][ T7045] loop4: detected capacity change from 0 to 512
[  195.303692][ T7045] EXT4-fs: Ignoring removed nobh option
[  195.361272][ T7045] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  195.361354][ T7045] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  195.406685][ T7045] EXT4-fs error (device loop4): ext4_do_update_inode:5801: inode #2: comm syz.4.369: corrupted inode contents
[  195.410804][ T7045] EXT4-fs error (device loop4): ext4_dirty_inode:6736: inode #2: comm syz.4.369: mark_inode_dirty error
[  195.442636][ T7045] EXT4-fs error (device loop4): ext4_do_update_inode:5801: inode #2: comm syz.4.369: corrupted inode contents
[  195.476697][ T7045] EXT4-fs error (device loop4): ext4_do_update_inode:5801: inode #2: comm syz.4.369: corrupted inode contents
[  195.501661][ T7045] EXT4-fs error (device loop4): ext4_dirty_inode:6736: inode #2: comm syz.4.369: mark_inode_dirty error
[  195.502532][ T7045] EXT4-fs error (device loop4): ext4_do_update_inode:5801: inode #2: comm syz.4.369: corrupted inode contents
[  195.503605][ T7045] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #2: comm syz.4.369: mark_inode_dirty error
[  195.548666][ T7045] EXT4-fs warning (device loop4): ext4_es_cache_extent:1082: inode #2: comm syz.4.369: ES cache extent failed: add [0,1,21,0x1] conflict with existing [0,8,576460752303423487,0x18]
[  195.548666][ T7045] 
[  195.556864][ T7045] EXT4-fs error (device loop4): ext4_do_update_inode:5801: inode #2: comm syz.4.369: corrupted inode contents
[  195.559087][ T7045] EXT4-fs error (device loop4): ext4_append:88: inode #2: comm syz.4.369: mark_inode_dirty error
[  195.560265][ T7045] EXT4-fs error (device loop4) in ext4_append:100: Corrupt filesystem
[  195.620984][ T7053] binfmt_misc: register: failed to install interpreter ./file0/file0
[  195.771051][ T5605] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  195.891281][ T7057] loop3: detected capacity change from 0 to 256
[  195.902052][ T7057] exfat: Deprecated parameter 'utf8'
[  195.902098][ T7057] exfat: Deprecated parameter 'namecase'
[  195.902191][ T7057] exfat: Deprecated parameter 'namecase'
[  195.902213][ T7057] exfat: Deprecated parameter 'utf8'
[  195.954113][ T7057] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d)
[  195.954390][ T7057] exFAT-fs (loop3): failed to test first cluster bit of root dir(5)
[  196.024151][ T7055] loop0: detected capacity change from 0 to 40427
[  196.507662][ T7057] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  197.166576][ T5701] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  197.624565][ T5701] usb 5-1: Using ep0 maxpacket: 8
[  197.631120][ T5701] usb 5-1: New USB device found: idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  197.632815][ T5701] usb 5-1: config 0 has an invalid interface number: 31 but max is 0
[  197.632839][ T5701] usb 5-1: config 0 has no interface number 0
[  197.682545][ T5701] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  197.682569][ T5701] usb 5-1: Product: syz
[  197.682582][ T5701] usb 5-1: Manufacturer: syz
[  197.682596][ T5701] usb 5-1: SerialNumber: syz
[  197.729852][ T5701] usb 5-1: config 0 descriptor??
[  197.951457][ T5701] uvcvideo 5-1:0.31: Found UVC 0.04 device syz (046d:08c3)
[  197.951545][ T5701] uvcvideo 5-1:0.31: Entity type for entity Output 32774 was not initialized!
[  198.177660][  T192] usb 5-1: USB disconnect, device number 21
[  198.306541][ T7072] loop2: detected capacity change from 0 to 512
[  198.349134][ T7072] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[  198.350844][ T7072] EXT4-fs error (device loop2) in ext4_process_orphan:346: Out of memory
[  198.390443][ T7072] loop2: lost filesystem error report for type 5 error -12
[  198.394342][ T7072] EXT4-fs (loop2): 1 truncate cleaned up
[  198.396232][ T7072] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  198.481076][ T5616] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.565700][ T7080] overlayfs: failed to resolve './bus': -2
[  198.628392][ T7082] loop2: detected capacity change from 0 to 4096
[  198.637781][ T7082] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement.
[  199.704668][   T58] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  199.854708][   T58] usb 4-1: Using ep0 maxpacket: 16
[  199.859198][   T58] usb 4-1: New USB device found: idVendor=0bd3, idProduct=0569, bcdDevice=0.5b
[  199.883311][   T58] usb 4-1: config 32 has an invalid interface number: 64 but max is 0
[  199.883371][   T58] usb 4-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config
[  199.883678][   T58] usb 4-1: config 32 has no interface number 0
[  199.895825][   T58] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  200.763611][ T7090] loop3: detected capacity change from 0 to 256
[  200.836083][ T7090] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  200.869832][   T58] usb 4-1: string descriptor 0 read error: -71
[  200.869889][   T58] uvcvideo 4-1:32.64: Found UVC 0.00 device <unnamed> (0bd3:0569)
[  200.869914][   T58] uvcvideo 4-1:32.64: No valid video chain found.
[  200.897715][   T58] usb 4-1: USB disconnect, device number 26
[  201.562497][ T7102] loop4: detected capacity change from 0 to 16
[  201.565751][ T7102] erofs (device loop4): invalid ishare xattr prefix id 0
[  201.582854][ T7099] loop3: detected capacity change from 0 to 256
[  201.583698][ T7099] exfat: Deprecated parameter 'utf8'
[  201.585160][ T7099] exfat: Deprecated parameter 'utf8'
[  201.658381][ T7099] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  202.371924][ T7119] random: crng reseeded on system resumption
[  203.020530][ T7120] loop4: detected capacity change from 0 to 512
[  203.057073][ T7120] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  203.271413][ T7120] EXT4-fs (loop4): 1 orphan inode deleted
[  203.273069][ T7120] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  203.294926][  T101] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  203.295049][  T101] EXT4-fs error (device loop4): ext4_release_dquot:7105: comm kworker/u8:5: Failed to release dquot type 1
[  203.295070][  T101] loop4: lost filesystem error report for type 5 error -117
[  203.296742][ T7120] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  205.117556][ T7141] usb usb7: check_ctrlrecip: process 7141 (syz.2.398) requesting ep 01 but needs 81
[  205.527460][ T7153] netlink: 36 bytes leftover after parsing attributes in process `syz.0.400'.
[  206.282714][ T7154] netlink: 20 bytes leftover after parsing attributes in process `syz.3.396'.
[  206.483349][ T7154] syz.3.396 (7154) used greatest stack depth: 17664 bytes left
[  206.498529][ T7156] loop2: detected capacity change from 0 to 256
[  206.564094][ T7158] sock: sock_set_timeout: `syz.1.405' (pid 7158) tries to set negative timeout
[  207.054172][ T7164] loop0: detected capacity change from 0 to 512
[  207.062376][ T7164] EXT4-fs (loop0): VFS: Found ext4 filesystem with invalid superblock checksum.  Run e2fsck?
[  207.259442][ T6299] udevd[6299]: incorrect ext4 checksum on /dev/loop0
[  209.029658][ T7176] loop3: detected capacity change from 0 to 512
[  209.203912][ T7176] EXT4-fs (loop3): blocks per group (34) and clusters per group (32768) inconsistent
[  209.343151][ T7180] loop0: detected capacity change from 0 to 128
[  209.355311][ T7180] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x00000000 (sector = 1)
[  209.562956][ T7178] loop2: detected capacity change from 0 to 40427
[  209.578656][ T7178] F2FS-fs (loop2): Corrupted extension count (327717 + 1 > 64)
[  209.578679][ T7178] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[  209.579174][ T7178] F2FS-fs (loop2): build fault injection rate: 771
[  209.606103][ T7178] F2FS-fs (loop2): invalid crc value
[  209.707115][ T7178] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  209.734211][ T7178] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0
[  209.734234][ T7178] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  209.753578][ T7187] netlink: 48 bytes leftover after parsing attributes in process `syz.1.417'.
[  209.948205][ T5616] syz-executor: attempt to access beyond end of device
[  209.948205][ T5616] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  209.949086][ T5616] CPU: 0 UID: 0 PID: 5616 Comm: syz-executor Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  209.949121][ T5616] Tainted: [L]=SOFTLOCKUP
[  209.949127][ T5616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  209.949138][ T5616] Call Trace:
[  209.949146][ T5616]  <TASK>
[  209.949154][ T5616]  dump_stack_lvl+0xe8/0x150
[  209.949185][ T5616]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  209.949218][ T5616]  f2fs_write_end_bio+0x112c/0x15f0
[  209.949262][ T5616]  __submit_merged_bio+0x258/0x6a0
[  209.949289][ T5616]  ? rcu_is_watching+0x16/0xb0
[  209.949320][ T5616]  __submit_merged_write_cond+0x426/0x550
[  209.949356][ T5616]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  209.949405][ T5616]  f2fs_write_data_pages+0x2a1d/0x36f0
[  209.949462][ T5616]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  209.949526][ T5616]  ? __bfs+0x153/0x290
[  209.949547][ T5616]  ? __pfx_hlock_conflict+0x10/0x10
[  209.949588][ T5616]  ? lockdep_unlock+0x5c/0xd0
[  209.949606][ T5616]  ? __lock_acquire+0x1511/0x2de0
[  209.949653][ T5616]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  209.949675][ T5616]  do_writepages+0x338/0x560
[  209.949712][ T5616]  ? do_raw_spin_unlock+0xf5/0x200
[  209.949735][ T5616]  filemap_fdatawrite+0x1e9/0x2f0
[  209.949760][ T5616]  ? check_noncircular+0xdb/0x150
[  209.949787][ T5616]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  209.949811][ T5616]  ? add_lock_to_list+0xc7/0x100
[  209.949882][ T5616]  ? do_raw_spin_unlock+0xf5/0x200
[  209.949904][ T5616]  f2fs_sync_dirty_inodes+0x471/0x970
[  209.949941][ T5616]  f2fs_write_checkpoint+0xa07/0x2840
[  209.949962][ T5616]  ? __lock_acquire+0x747/0x2de0
[  209.950039][ T5616]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  209.950097][ T5616]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  209.950124][ T5616]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  209.950147][ T5616]  ? __wake_up_common_lock+0x195/0x1f0
[  209.950180][ T5616]  kill_f2fs_super+0x2dd/0x700
[  209.950203][ T5616]  ? rcu_do_enqueue+0x616/0x870
[  209.950223][ T5616]  ? lockdep_hardirqs_on+0x7b/0x110
[  209.950247][ T5616]  ? __pfx_kill_f2fs_super+0x10/0x10
[  209.950284][ T5616]  ? __pfx_call_rcu+0x10/0x10
[  209.950314][ T5616]  ? shrinker_free+0x2a7/0x3b0
[  209.950344][ T5616]  deactivate_locked_super+0xbe/0x110
[  209.950373][ T5616]  cleanup_mnt+0x3d3/0x460
[  209.950399][ T5616]  task_work_run+0x1d9/0x260
[  209.950425][ T5616]  ? __pfx_task_work_run+0x10/0x10
[  209.950458][ T5616]  exit_to_user_mode_loop+0x204/0x770
[  209.950481][ T5616]  ? rcu_is_watching+0x16/0xb0
[  209.950509][ T5616]  do_syscall_64+0x328/0x520
[  209.950533][ T5616]  ? trace_irq_disable+0x3b/0x140
[  209.950556][ T5616]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  209.950574][ T5616]  ? clear_bhb_loop+0x70/0xc0
[  209.950597][ T5616]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  209.950615][ T5616] RIP: 0033:0x7f6ef159f397
[  209.950632][ T5616] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  209.950648][ T5616] RSP: 002b:00007ffc0439f9b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  209.950668][ T5616] RAX: 0000000000000000 RBX: 00007f6ef16344bb RCX: 00007f6ef159f397
[  209.950681][ T5616] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc0439fa70
[  209.950693][ T5616] RBP: 00007ffc0439fa70 R08: 00007ffc043a0a70 R09: 00000000ffffffff
[  209.950705][ T5616] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc043a0b00
[  209.950717][ T5616] R13: 00007f6ef16344bb R14: 00000000000333c6 R15: 00007ffc043a0b40
[  209.950748][ T5616]  </TASK>
[  210.016204][ T5616] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  210.445049][ T7191] loop0: detected capacity change from 0 to 40427
[  210.453709][ T7191] F2FS-fs (loop0): build fault injection rate: 690
[  210.473439][ T7191] F2FS-fs (loop0): invalid crc value
[  210.591383][ T7184] loop3: detected capacity change from 0 to 40427
[  210.611351][ T7184] F2FS-fs (loop3): Invalid SB checksum offset: 0
[  210.611370][ T7184] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[  210.647156][ T7184] F2FS-fs (loop3): invalid crc value
[  210.740112][ T7191] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  210.780314][ T7191] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  210.798715][ T7184] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  210.820560][ T7184] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0
[  210.820582][ T7184] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  211.421324][ T7222] tipc: Can't bind to reserved service type 0
[  211.566178][ T5611] syz-executor: attempt to access beyond end of device
[  211.566178][ T5611] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  211.567001][ T5611] CPU: 0 UID: 0 PID: 5611 Comm: syz-executor Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  211.567029][ T5611] Tainted: [L]=SOFTLOCKUP
[  211.567036][ T5611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  211.567046][ T5611] Call Trace:
[  211.567054][ T5611]  <TASK>
[  211.567065][ T5611]  dump_stack_lvl+0xe8/0x150
[  211.567097][ T5611]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  211.567132][ T5611]  f2fs_write_end_bio+0x112c/0x15f0
[  211.567180][ T5611]  __submit_merged_bio+0x258/0x6a0
[  211.567206][ T5611]  ? rcu_is_watching+0x16/0xb0
[  211.567238][ T5611]  __submit_merged_write_cond+0x426/0x550
[  211.567276][ T5611]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  211.567329][ T5611]  f2fs_write_data_pages+0x2a1d/0x36f0
[  211.567389][ T5611]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  211.567407][ T5611]  ? is_bpf_text_address+0x26/0x2b0
[  211.567447][ T5611]  ? arch_stack_walk+0xfb/0x150
[  211.567501][ T5611]  ? add_lock_to_list+0xc7/0x100
[  211.567528][ T5611]  ? lockdep_unlock+0x5c/0xd0
[  211.567546][ T5611]  ? __lock_acquire+0x1511/0x2de0
[  211.567599][ T5611]  ? do_raw_spin_lock+0x12b/0x2f0
[  211.567630][ T5611]  ? do_raw_spin_unlock+0xf5/0x200
[  211.567648][ T5611]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  211.567670][ T5611]  do_writepages+0x338/0x560
[  211.567708][ T5611]  ? do_raw_spin_unlock+0xf5/0x200
[  211.567732][ T5611]  filemap_fdatawrite+0x1e9/0x2f0
[  211.567762][ T5611]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  211.567787][ T5611]  ? add_lock_to_list+0xc7/0x100
[  211.567917][ T5611]  ? do_raw_spin_unlock+0xf5/0x200
[  211.567940][ T5611]  f2fs_sync_dirty_inodes+0x471/0x970
[  211.567980][ T5611]  f2fs_write_checkpoint+0xa07/0x2840
[  211.568000][ T5611]  ? __lock_acquire+0x747/0x2de0
[  211.568061][ T5611]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  211.568124][ T5611]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  211.568151][ T5611]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  211.568174][ T5611]  ? __wake_up_common_lock+0x195/0x1f0
[  211.568209][ T5611]  kill_f2fs_super+0x2dd/0x700
[  211.568235][ T5611]  ? rcu_do_enqueue+0x616/0x870
[  211.568257][ T5611]  ? lockdep_hardirqs_on+0x7b/0x110
[  211.568282][ T5611]  ? __pfx_kill_f2fs_super+0x10/0x10
[  211.568323][ T5611]  ? __pfx_call_rcu+0x10/0x10
[  211.568356][ T5611]  ? shrinker_free+0x2a7/0x3b0
[  211.568386][ T5611]  deactivate_locked_super+0xbe/0x110
[  211.568416][ T5611]  cleanup_mnt+0x3d3/0x460
[  211.568443][ T5611]  task_work_run+0x1d9/0x260
[  211.568469][ T5611]  ? __pfx_task_work_run+0x10/0x10
[  211.568503][ T5611]  exit_to_user_mode_loop+0x204/0x770
[  211.568526][ T5611]  ? rcu_is_watching+0x16/0xb0
[  211.568557][ T5611]  do_syscall_64+0x328/0x520
[  211.568581][ T5611]  ? trace_irq_disable+0x3b/0x140
[  211.568603][ T5611]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  211.568621][ T5611]  ? clear_bhb_loop+0x70/0xc0
[  211.568645][ T5611]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  211.568664][ T5611] RIP: 0033:0x7fc78879f397
[  211.568681][ T5611] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  211.568697][ T5611] RSP: 002b:00007ffdf730bb18 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  211.568716][ T5611] RAX: 0000000000000000 RBX: 00007fc7888344bb RCX: 00007fc78879f397
[  211.568729][ T5611] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdf730bbd0
[  211.568741][ T5611] RBP: 00007ffdf730bbd0 R08: 00007ffdf730cbd0 R09: 00000000ffffffff
[  211.568754][ T5611] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdf730cc60
[  211.568766][ T5611] R13: 00007fc7888344bb R14: 000000000003395a R15: 00007ffdf730cca0
[  211.568800][ T5611]  </TASK>
[  211.767330][ T5611] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  212.202477][ T7226] loop2: detected capacity change from 0 to 40427
[  212.228530][ T7226] F2FS-fs (loop2): invalid crc value
[  212.339632][ T7226] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  212.361065][ T7226] F2FS-fs (loop2): f2fs_disable_checkpoint starts, unusable: 0
[  212.361089][ T7226] F2FS-fs (loop2): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[  212.361112][ T7226] F2FS-fs (loop2): Start checkpoint disabled!
[  212.409896][ T7226] F2FS-fs (loop2): f2fs_disable_checkpoint finishes, err:0
[  212.410422][ T7226] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  212.438165][ T7226] F2FS-fs (loop2): Stopped filesystem due to reason: 0
[  212.632009][ T7239] futex_wake_op: syz.3.428 tries to shift op by 144; fix this program
[  212.652885][ T7239] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  212.670017][ T7239] loop3: detected capacity change from 0 to 256
[  212.783354][ T7239] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  212.814765][ T7239] exFAT-fs (loop3): valid_size(562949953421322) is greater than size(10)
[  213.119796][   T32] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  213.265693][   T32] usb 4-1: New USB device found: idVendor=046d, idProduct=0823, bcdDevice=39.48
[  213.267119][   T32] usb 4-1: config 0 has an invalid interface number: 64 but max is 0
[  213.267143][   T32] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  213.267160][   T32] usb 4-1: config 0 has no interface number 0
[  213.270180][   T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  213.270203][   T32] usb 4-1: Product: syz
[  213.270217][   T32] usb 4-1: Manufacturer: syz
[  213.270230][   T32] usb 4-1: SerialNumber: syz
[  213.274420][   T32] usb 4-1: config 0 descriptor??
[  213.344389][   T32] uvcvideo 4-1:0.64: probe with driver uvcvideo failed with error -22
[  214.921799][ T7265] loop2: detected capacity change from 0 to 512
[  214.988888][ T7265] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  215.089385][ T7270] netlink: 44 bytes leftover after parsing attributes in process `syz.0.440'.
[  215.245239][ T7265] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4223: comm syz.2.437: Allocating blocks 41-42 which overlap fs metadata
[  215.245272][ T7265] loop2: lost filesystem error report for type 5 error -117
[  215.254543][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  215.254560][    C1] EXT4-fs (loop2): initial error at time 1790168107: ext4_mb_mark_diskspace_used:4223
[  215.254574][    C1] EXT4-fs (loop2): last error at time 1790168107: ext4_mb_mark_diskspace_used:4223
[  215.324754][ T7265] EXT4-fs (loop2): Remounting filesystem read-only
[  215.325248][ T7265] Quota error (device loop2): write_blk: dquota write failed
[  215.325265][ T7265] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5
[  215.325592][ T7265] Quota error (device loop2): write_blk: dquota write failed
[  215.325814][ T7265] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  215.325933][ T7265] EXT4-fs (loop2): 1 truncate cleaned up
[  215.327846][ T7265] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  215.418335][ T5616] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  215.522787][ T7279] netlink: 16 bytes leftover after parsing attributes in process `syz.2.442'.
[  215.553395][ T5709] usb 4-1: USB disconnect, device number 27
[  215.674479][ T7281] loop2: detected capacity change from 0 to 512
[  215.679476][ T7281] EXT4-fs: Ignoring removed nomblk_io_submit option
[  215.717966][ T7283] loop3: detected capacity change from 0 to 256
[  215.724302][ T7281] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  215.724391][ T7281] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  215.751352][ T7281] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  215.980671][ T7291] netlink: 4 bytes leftover after parsing attributes in process `syz.0.445'.
[  216.124009][ T7303] loop0: detected capacity change from 0 to 512
[  216.129874][ T7303] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (65057!=18645)
[  216.129897][ T7303] EXT4-fs (loop0): group descriptors corrupted!
[  216.245340][   T58] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  216.395285][   T58] usb 3-1: New USB device found: idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  216.396319][   T58] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  216.396346][   T58] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  216.399718][   T58] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  216.399737][   T58] usb 3-1: Product: syz
[  216.399747][   T58] usb 3-1: Manufacturer: syz
[  216.399756][   T58] usb 3-1: SerialNumber: syz
[  216.403865][   T58] usb 3-1: config 0 descriptor??
[  216.425170][ T7295] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  216.425267][ T7295] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  216.639288][ T7295] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  216.639411][ T7295] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  216.845729][   T58] Error reading MAC address
[  216.862226][   T58] usb 3-1: USB disconnect, device number 27
[  217.365779][ T5607] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  217.370834][ T5607] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  217.371568][ T5607] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  217.404552][ T5607] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  217.406652][ T5607] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  217.537877][ T7337] ip_tables: iptables: counters copy to user failed while replacing table
[  217.965150][ T7310] loop0: detected capacity change from 0 to 131072
[  217.977999][ T7339] overlayfs: failed to resolve './file1/../file0': -2
[  217.981240][ T7310] F2FS-fs (loop0): Test dummy encryption mode enabled
[  218.004373][ T7310] F2FS-fs (loop0): invalid crc value
[  218.305772][ T7348] netlink: 4 bytes leftover after parsing attributes in process `syz.3.466'.
[  218.306483][ T7348] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  219.114319][ T7310] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  219.165077][ T7310] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  219.189403][ T7348] batman_adv: batadv0: Removing interface: batadv_slave_0
[  219.444591][ T5607] Bluetooth: hci5: command tx timeout
[  219.808458][ T5724] usbduxfast 1-1:0.120: driver 'usbduxfast' failed to auto-configure device.
[  219.877027][ T5724] usbduxfast 1-1:0.120: probe with driver usbduxfast failed with error -110
[  219.899103][ T7119] hwrng_fill thread creation failed
[  219.997282][ T5724] usb 1-1: USB disconnect, device number 21
[  220.085174][ T7353] loop2: detected capacity change from 0 to 40427
[  220.088227][ T7353] F2FS-fs (loop2): Small segment_count (9 < 1 * 24)
[  220.088259][ T7353] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  220.216567][ T7353] F2FS-fs (loop2): invalid crc value
[  220.542865][ T7353] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  220.569351][ T7353] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  220.569376][ T7353] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  220.831079][ T5616] syz-executor: attempt to access beyond end of device
[  220.831079][ T5616] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  220.833977][ T5616] CPU: 1 UID: 0 PID: 5616 Comm: syz-executor Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  220.834010][ T5616] Tainted: [L]=SOFTLOCKUP
[  220.834017][ T5616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  220.834028][ T5616] Call Trace:
[  220.834036][ T5616]  <TASK>
[  220.834044][ T5616]  dump_stack_lvl+0xe8/0x150
[  220.834075][ T5616]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  220.834109][ T5616]  f2fs_write_end_bio+0x112c/0x15f0
[  220.834154][ T5616]  __submit_merged_bio+0x258/0x6a0
[  220.834180][ T5616]  ? rcu_is_watching+0x16/0xb0
[  220.834220][ T5616]  __submit_merged_write_cond+0x426/0x550
[  220.834256][ T5616]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  220.834307][ T5616]  f2fs_write_data_pages+0x2a1d/0x36f0
[  220.834363][ T5616]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  220.834399][ T5616]  ? __lock_acquire+0x747/0x2de0
[  220.834449][ T5616]  ? __bfs+0x153/0x290
[  220.834469][ T5616]  ? __pfx_hlock_conflict+0x10/0x10
[  220.834509][ T5616]  ? lockdep_unlock+0x5c/0xd0
[  220.834526][ T5616]  ? __lock_acquire+0x1511/0x2de0
[  220.834573][ T5616]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  220.834594][ T5616]  do_writepages+0x338/0x560
[  220.834631][ T5616]  ? do_raw_spin_unlock+0xf5/0x200
[  220.834654][ T5616]  filemap_fdatawrite+0x1e9/0x2f0
[  220.834684][ T5616]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  220.834707][ T5616]  ? add_lock_to_list+0xc7/0x100
[  220.834779][ T5616]  ? do_raw_spin_unlock+0xf5/0x200
[  220.834801][ T5616]  f2fs_sync_dirty_inodes+0x471/0x970
[  220.834838][ T5616]  f2fs_write_checkpoint+0xa07/0x2840
[  220.834895][ T5616]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  220.834953][ T5616]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  220.834976][ T5616]  ? rcu_is_watching+0x16/0xb0
[  220.835007][ T5616]  kill_f2fs_super+0x2dd/0x700
[  220.835034][ T5616]  ? rcu_do_enqueue+0x616/0x870
[  220.835054][ T5616]  ? lockdep_hardirqs_on+0x7b/0x110
[  220.835080][ T5616]  ? __pfx_kill_f2fs_super+0x10/0x10
[  220.835117][ T5616]  ? __pfx_call_rcu+0x10/0x10
[  220.835147][ T5616]  ? shrinker_free+0x2a7/0x3b0
[  220.835177][ T5616]  deactivate_locked_super+0xbe/0x110
[  220.835213][ T5616]  cleanup_mnt+0x3d3/0x460
[  220.835238][ T5616]  task_work_run+0x1d9/0x260
[  220.835264][ T5616]  ? __pfx_task_work_run+0x10/0x10
[  220.835296][ T5616]  exit_to_user_mode_loop+0x204/0x770
[  220.835319][ T5616]  ? rcu_is_watching+0x16/0xb0
[  220.835348][ T5616]  do_syscall_64+0x328/0x520
[  220.835372][ T5616]  ? trace_irq_disable+0x3b/0x140
[  220.835393][ T5616]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  220.835412][ T5616]  ? clear_bhb_loop+0x70/0xc0
[  220.835435][ T5616]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  220.835452][ T5616] RIP: 0033:0x7f6ef159f397
[  220.835470][ T5616] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  220.835485][ T5616] RSP: 002b:00007ffc0439f9b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  220.835505][ T5616] RAX: 0000000000000000 RBX: 00007f6ef16344bb RCX: 00007f6ef159f397
[  220.835518][ T5616] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc0439fa70
[  220.835530][ T5616] RBP: 00007ffc0439fa70 R08: 00007ffc043a0a70 R09: 00000000ffffffff
[  220.835542][ T5616] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc043a0b00
[  220.835554][ T5616] R13: 00007f6ef16344bb R14: 0000000000035dac R15: 00007ffc043a0b40
[  220.835586][ T5616]  </TASK>
[  220.841621][ T5616] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  221.568380][ T5607] Bluetooth: hci5: command tx timeout
[  222.125763][ T1176] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  222.306030][ T1176] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  222.429271][ T1176] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  222.696741][ T1176] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  223.196845][ T7388] netlink: 4 bytes leftover after parsing attributes in process `syz.2.476'.
[  223.385962][ T7388] team0: Port device team_slave_0 removed
[  223.558745][ T1176] bridge_slave_1: left allmulticast mode
[  223.558788][ T1176] bridge_slave_1: left promiscuous mode
[  223.560466][ T1176] bridge0: port 2(bridge_slave_1) entered disabled state
[  223.593262][ T1176] bridge_slave_0: left allmulticast mode
[  223.593277][ T1176] bridge_slave_0: left promiscuous mode
[  223.593388][ T1176] bridge0: port 1(bridge_slave_0) entered disabled state
[  223.606854][ T5607] Bluetooth: hci5: command tx timeout
[  224.125501][ T7417] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  224.145431][   T33] audit: type=1804 audit(1790168116.592:14): pid=7417 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.484" name="file0" dev="tmpfs" ino=676 res=1 errno=0
[  224.217740][ T1176] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  224.252833][ T1176] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  224.375038][ T1176] bond0 (unregistering): Released all slaves
[  224.458103][ T7422] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  224.589670][   T33] audit: type=1804 audit(1790168117.032:15): pid=7422 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.485" name="/newroot/94/file0" dev="tmpfs" ino=532 res=1 errno=0
[  224.645391][ T7331] bridge0: port 1(bridge_slave_0) entered blocking state
[  224.645959][ T7331] bridge0: port 1(bridge_slave_0) entered disabled state
[  224.680997][ T7331] bridge_slave_0: entered allmulticast mode
[  224.944192][ T7429] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  224.987235][   T33] audit: type=1804 audit(1790168117.432:16): pid=7429 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.486" name="/newroot/94/file0" dev="tmpfs" ino=546 res=1 errno=0
[  225.779595][ T5607] Bluetooth: hci5: command tx timeout
[  226.000328][ T7331] bridge_slave_0: entered promiscuous mode
[  227.335767][ T7331] bridge0: port 2(bridge_slave_1) entered blocking state
[  227.336622][ T7331] bridge0: port 2(bridge_slave_1) entered disabled state
[  227.337650][ T7331] bridge_slave_1: entered allmulticast mode
[  227.345682][ T7331] bridge_slave_1: entered promiscuous mode
[  227.701196][ T7331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  227.768826][ T7331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  228.697694][ T7445] bridge0: port 2(bridge_slave_1) entered disabled state
[  228.720319][ T7331] team0: Port device team_slave_0 added
[  228.722995][ T7331] team0: Port device team_slave_1 added
[  228.910426][ T7331] batman_adv: batadv0: Adding interface: batadv_slave_0
[  228.910441][ T7331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  228.910464][ T7331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  228.954035][ T7331] batman_adv: batadv0: Adding interface: batadv_slave_1
[  228.954050][ T7331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  228.954075][ T7331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  229.246082][ T7454] loop3: detected capacity change from 0 to 2048
[  229.864353][ T7454] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  229.961939][ T7331] hsr_slave_0: entered promiscuous mode
[  229.962882][ T7331] hsr_slave_1: entered promiscuous mode
[  229.963547][ T7331] debugfs: 'hsr0' already exists in 'hsr'
[  229.963565][ T7331] Cannot create hsr debugfs directory
[  230.138140][ T7474] loop0: detected capacity change from 0 to 128
[  230.148925][ T7474] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  230.151001][ T7474] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  230.256935][ T7468] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  230.274197][ T1176] hsr_slave_0: left promiscuous mode
[  230.283084][ T1176] hsr_slave_1: left promiscuous mode
[  230.283997][ T1176] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  230.284319][ T1176] batman_adv: batadv0: Removing interface: batadv_slave_0
[  230.292578][ T1176] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  230.292597][ T1176] batman_adv: batadv0: Removing interface: batadv_slave_1
[  230.354370][ T1176] veth1_macvtap: left promiscuous mode
[  230.354433][ T1176] veth0_macvtap: left promiscuous mode
[  230.355631][ T1176] veth1_vlan: left promiscuous mode
[  230.357147][ T1176] veth0_vlan: left promiscuous mode
[  230.874664][ T7457] loop2: detected capacity change from 0 to 40427
[  230.891814][ T7457] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  230.891837][ T7457] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  230.900894][ T7457] F2FS-fs (loop2): invalid crc value
[  230.995717][  T510] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 642 with error 28
[  230.995746][  T510] EXT4-fs (loop3): This should not happen!! Data will be lost
[  230.995746][  T510] 
[  230.995760][  T510] EXT4-fs (loop3): Total free blocks count 0
[  230.995772][  T510] EXT4-fs (loop3): Free/Dirty block details
[  230.995783][  T510] EXT4-fs (loop3): free_blocks=4096
[  230.995819][  T510] EXT4-fs (loop3): dirty_blocks=656
[  230.995830][  T510] EXT4-fs (loop3): Block reservation details
[  230.995841][  T510] EXT4-fs (loop3): i_reserved_data_blocks=41
[  231.121712][ T5612] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  231.168372][ T7457] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  231.205729][ T7457] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  231.205752][ T7457] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  231.441914][ T5847] kworker/u8:12: attempt to access beyond end of device
[  231.441914][ T5847] loop2: rw=1, sector=77824, nr_sectors = 1704 limit=40427
[  231.539627][ T1176] team0 (unregistering): Port device team_slave_1 removed
[  231.552619][ T1176] team0 (unregistering): Port device team_slave_0 removed
[  231.852779][ T5271] 8021q: adding VLAN 0 to HW filter on device eth1
[  232.125275][ T5702] usb 3-1: new low-speed USB device number 28 using dummy_hcd
[  232.276779][ T5702] usb 3-1: New USB device found: idVendor=05ac, idProduct=0247, bcdDevice=0.00
[  232.277909][ T5702] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  232.277936][ T5702] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8
[  232.277959][ T5702] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  232.277997][ T5702] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  232.307359][ T5702] usb 3-1: config 0 descriptor??
[  232.309414][ T7504] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  232.453136][ T7331] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  232.475246][ T7331] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  232.476598][ T7331] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  232.480930][ T7331] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  232.506023][ T7331] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  232.514471][ T7331] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  232.529521][ T7331] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  232.549482][ T7331] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  232.611245][ T7511] loop3: detected capacity change from 0 to 8192
[  232.645375][ T7511] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  232.740347][ T7331] 8021q: adding VLAN 0 to HW filter on device bond0
[  232.767319][ T7331] 8021q: adding VLAN 0 to HW filter on device team0
[  232.792510][ T5702] apple 0003:05AC:0247.0011: Fn key not found (Apple Wireless Keyboard clone?), disabling Fn key handling
[  232.798231][  T510] bridge0: port 1(bridge_slave_0) entered blocking state
[  232.798354][  T510] bridge0: port 1(bridge_slave_0) entered forwarding state
[  232.820765][ T5702] input: HID 05ac:0247 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:05AC:0247.0011/input/input28
[  232.863668][ T1176] bridge0: port 2(bridge_slave_1) entered blocking state
[  232.863764][ T1176] bridge0: port 2(bridge_slave_1) entered forwarding state
[  232.954970][   T33] audit: type=1326 audit(1790168125.392:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7527 comm="syz.0.505" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc78879e159 code=0x7ffc0000
[  232.955306][   T33] audit: type=1326 audit(1790168125.402:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7527 comm="syz.0.505" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc78879e159 code=0x7ffc0000
[  232.957958][   T33] audit: type=1326 audit(1790168125.402:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7527 comm="syz.0.505" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc78879e159 code=0x7ffc0000
[  232.958184][   T33] audit: type=1326 audit(1790168125.402:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7527 comm="syz.0.505" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc78879e159 code=0x7ffc0000
[  232.958370][   T33] audit: type=1326 audit(1790168125.402:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7527 comm="syz.0.505" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc78879e159 code=0x7ffc0000
[  232.958604][   T33] audit: type=1326 audit(1790168125.402:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7527 comm="syz.0.505" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc78879e159 code=0x7ffc0000
[  232.958803][   T33] audit: type=1326 audit(1790168125.402:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7527 comm="syz.0.505" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc78879e159 code=0x7ffc0000
[  232.959240][   T33] audit: type=1326 audit(1790168125.402:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7527 comm="syz.0.505" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc78879e159 code=0x7ffc0000
[  232.959439][   T33] audit: type=1326 audit(1790168125.402:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7527 comm="syz.0.505" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fc78879e159 code=0x7ffc0000
[  232.960599][   T33] audit: type=1326 audit(1790168125.402:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7527 comm="syz.0.505" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc78879e159 code=0x7ffc0000
[  233.305745][ T5702] apple 0003:05AC:0247.0011: input,hidraw0: USB HID v0.00 Joystick [HID 05ac:0247] on usb-dummy_hcd.2-1/input0
[  233.336193][ T5702] usb 3-1: USB disconnect, device number 28
[  233.456010][ T7446] udevd[7446]: setting mode of /dev/input/js0 to 020664 failed: No such file or directory
[  233.456118][ T7446] udevd[7446]: setting owner of /dev/input/js0 to uid=0, gid=104 failed: No such file or directory
[  233.477265][ T7435] udevd[7435]: Error opening device "/dev/input/event4": No such file or directory
[  233.477365][ T7435] udevd[7435]: Unable to EVIOCGABS device "/dev/input/event4"
[  233.478003][ T7435] udevd[7435]: Unable to EVIOCGABS device "/dev/input/event4"
[  233.478096][ T7435] udevd[7435]: Unable to EVIOCGABS device "/dev/input/event4"
[  233.478196][ T7435] udevd[7435]: Unable to EVIOCGABS device "/dev/input/event4"
[  233.622235][ T7541] fido_id[7541]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  234.092054][ T5271] 8021q: adding VLAN 0 to HW filter on device eth2
[  234.205837][ T7528] loop0: detected capacity change from 0 to 40427
[  234.255796][ T7528] F2FS-fs (loop0): invalid crc value
[  235.562438][ T7331] 8021q: adding VLAN 0 to HW filter on device batadv0
[  235.578150][ T7528] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  235.631796][ T7528] F2FS-fs (loop0): f2fs_disable_checkpoint starts, unusable: 0
[  235.631821][ T7528] F2FS-fs (loop0): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[  235.631844][ T7528] F2FS-fs (loop0): Start checkpoint disabled!
[  235.704762][ T7528] F2FS-fs (loop0): f2fs_disable_checkpoint finishes, err:0
[  235.705071][ T7528] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  235.827452][ T7557] loop2: detected capacity change from 0 to 40427
[  235.845385][ T7557] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  235.845407][ T7557] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  235.870052][ T7557] F2FS-fs (loop2): invalid crc value
[  236.084218][ T7557] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  236.118872][ T7557] F2FS-fs (loop2): Try to recover 1th superblock, ret: -30
[  236.118896][ T7557] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  236.200090][ T1176] kworker/u8:10: attempt to access beyond end of device
[  236.200090][ T1176] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  236.200161][ T1176] CPU: 1 UID: 0 PID: 1176 Comm: kworker/u8:10 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  236.200186][ T1176] Tainted: [L]=SOFTLOCKUP
[  236.200193][ T1176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  236.200204][ T1176] Workqueue: writeback wb_workfn (flush-7:0)
[  236.200236][ T1176] Call Trace:
[  236.200244][ T1176]  <TASK>
[  236.200252][ T1176]  dump_stack_lvl+0xe8/0x150
[  236.200280][ T1176]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  236.200314][ T1176]  f2fs_write_end_bio+0x112c/0x15f0
[  236.200362][ T1176]  __submit_merged_bio+0x258/0x6a0
[  236.200388][ T1176]  ? rcu_is_watching+0x16/0xb0
[  236.200420][ T1176]  __submit_merged_write_cond+0x426/0x550
[  236.200457][ T1176]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  236.200510][ T1176]  f2fs_write_data_pages+0x2a1d/0x36f0
[  236.200571][ T1176]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  236.200606][ T1176]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  236.200666][ T1176]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  236.200705][ T1176]  ? __lock_acquire+0x747/0x2de0
[  236.200752][ T1176]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  236.200773][ T1176]  do_writepages+0x338/0x560
[  236.200809][ T1176]  ? reacquire_held_locks+0x117/0x1a0
[  236.200833][ T1176]  ? writeback_sb_inodes+0x450/0x1af0
[  236.200865][ T1176]  __writeback_single_inode+0x136/0x1220
[  236.200896][ T1176]  ? do_raw_spin_unlock+0xf5/0x200
[  236.200920][ T1176]  writeback_sb_inodes+0x9de/0x1af0
[  236.200944][ T1176]  ? __lock_acquire+0x747/0x2de0
[  236.200982][ T1176]  ? lock_acquire+0x115/0x350
[  236.201011][ T1176]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  236.201094][ T1176]  ? rcu_is_watching+0x16/0xb0
[  236.201119][ T1176]  ? queue_io+0x2d3/0x470
[  236.201149][ T1176]  wb_writeback+0x41c/0xad0
[  236.201177][ T1176]  ? queue_io+0x241/0x470
[  236.201210][ T1176]  ? __pfx_wb_writeback+0x10/0x10
[  236.201234][ T1176]  ? do_raw_spin_lock+0x12b/0x2f0
[  236.201271][ T1176]  wb_workfn+0x431/0x10f0
[  236.201315][ T1176]  ? __pfx_wb_workfn+0x10/0x10
[  236.201353][ T1176]  ? do_raw_spin_lock+0x12b/0x2f0
[  236.201382][ T1176]  ? lock_acquire+0x115/0x350
[  236.201413][ T1176]  ? rcu_is_watching+0x16/0xb0
[  236.201441][ T1176]  ? process_scheduled_works+0x97a/0x1630
[  236.201467][ T1176]  process_scheduled_works+0xc3d/0x1630
[  236.201529][ T1176]  ? __pfx_process_scheduled_works+0x10/0x10
[  236.201563][ T1176]  ? assign_work+0x3cf/0x5d0
[  236.201595][ T1176]  worker_thread+0xa47/0xfb0
[  236.201649][ T1176]  kthread+0x38b/0x480
[  236.201670][ T1176]  ? __pfx_worker_thread+0x10/0x10
[  236.201694][ T1176]  ? __pfx_kthread+0x10/0x10
[  236.201718][ T1176]  ret_from_fork+0x514/0xb70
[  236.201741][ T1176]  ? __pfx_ret_from_fork+0x10/0x10
[  236.201760][ T1176]  ? __switch_to+0xc78/0x1410
[  236.201790][ T1176]  ? __pfx_kthread+0x10/0x10
[  236.201814][ T1176]  ret_from_fork_asm+0x1a/0x30
[  236.201861][ T1176]  </TASK>
[  236.356946][ T1176] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  236.688541][ T5709] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  236.844737][ T5709] usb 4-1: Using ep0 maxpacket: 16
[  236.847781][ T5709] usb 4-1: unable to get BOS descriptor or descriptor too short
[  236.847824][ T5709] usb 4-1: New USB device found: idVendor=0b3b, idProduct=1612, bcdDevice=1.5d
[  236.848765][ T5709] usb 4-1: config 8 has an invalid interface number: 166 but max is 0
[  236.848787][ T5709] usb 4-1: config 8 has no interface number 0
[  236.848814][ T5709] usb 4-1: config 8 interface 166 has no altsetting 0
[  236.850725][ T5709] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  236.850747][ T5709] usb 4-1: Product: syz
[  236.850760][ T5709] usb 4-1: Manufacturer: syz
[  236.850773][ T5709] usb 4-1: SerialNumber: syz
[  237.038744][ T7331] veth0_vlan: entered promiscuous mode
[  237.096532][ T7593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  237.103261][ T7593] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  237.118971][ T7593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  237.119405][ T7593] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  237.119587][ T5271] 8021q: adding VLAN 0 to HW filter on device eth3
[  237.126086][ T7331] veth1_vlan: entered promiscuous mode
[  237.292755][ T7331] veth0_macvtap: entered promiscuous mode
[  237.315313][ T7331] veth1_macvtap: entered promiscuous mode
[  237.341796][ T7593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  237.342271][ T7593] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  237.382972][ T7331] batman_adv: batadv0: Interface activated: batadv_slave_0
[  237.412349][ T7331] batman_adv: batadv0: Interface activated: batadv_slave_1
[  237.414427][ T7613] loop2: detected capacity change from 0 to 512
[  237.423905][ T7613] EXT4-fs: Ignoring removed nobh option
[  237.442353][ T7615] loop0: detected capacity change from 0 to 256
[  237.449938][ T7615] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  237.449953][ T7615] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  237.460368][   T62] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  237.460437][   T62] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  237.460572][   T62] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  237.460602][   T62] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  237.522436][ T7615] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  237.522993][ T7615] exFAT-fs (loop0): failed to load alloc-bitmap
[  237.523006][ T7615] exFAT-fs (loop0): failed to recognize exfat type
[  237.537954][ T7613] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  237.538065][ T7613] ext4 filesystem being mounted at /101/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  237.575058][ T7593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  237.575528][ T7593] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  237.645404][ T7613] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #2: comm syz.2.518: corrupted inode contents
[  237.676944][ T7613] EXT4-fs error (device loop2): ext4_dirty_inode:6736: inode #2: comm syz.2.518: mark_inode_dirty error
[  237.688975][ T7613] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #2: comm syz.2.518: corrupted inode contents
[  237.690950][ T7613] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #2: comm syz.2.518: mark_inode_dirty error
[  237.716342][ T7613] EXT4-fs warning (device loop2): ext4_es_cache_extent:1082: inode #2: comm syz.2.518: ES cache extent failed: add [0,1,21,0x1] conflict with existing [0,8,576460752303423487,0x18]
[  237.716342][ T7613] 
[  237.717510][ T7613] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #2: comm syz.2.518: corrupted inode contents
[  237.718179][ T7613] EXT4-fs error (device loop2): ext4_append:88: inode #2: comm syz.2.518: mark_inode_dirty error
[  237.720004][ T7613] EXT4-fs error (device loop2) in ext4_append:100: Corrupt filesystem
[  237.728137][ T7613] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #2: comm syz.2.518: corrupted inode contents
[  237.731988][ T7613] EXT4-fs error (device loop2): add_dirent_to_buf:2153: inode #2: comm syz.2.518: mark_inode_dirty error
[  237.795356][ T7593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  237.810200][ T7593] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  237.872687][ T5709] usb 4-1: USB disconnect, device number 28
[  237.896759][ T1176] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  237.896777][ T1176] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  237.961849][ T5616] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  238.122533][ T1176] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  238.122553][ T1176] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  239.056248][ T7655] loop0: detected capacity change from 0 to 40427
[  239.059492][ T7655] ------------[ cut here ]------------
[  239.059504][ T7655] UBSAN: shift-out-of-bounds in fs/f2fs/super.c:3950:27
[  239.059522][ T7655] shift exponent 4294967287 is too large for 64-bit type 'sector_t' (aka 'unsigned long long')
[  239.059543][ T7655] CPU: 1 UID: 0 PID: 7655 Comm: syz.0.525 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  239.059569][ T7655] Tainted: [L]=SOFTLOCKUP
[  239.059576][ T7655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  239.059587][ T7655] Call Trace:
[  239.059595][ T7655]  <TASK>
[  239.059604][ T7655]  dump_stack_lvl+0xe8/0x150
[  239.059634][ T7655]  ubsan_epilogue+0xa/0x30
[  239.059655][ T7655]  __ubsan_handle_shift_out_of_bounds+0x36d/0x400
[  239.059692][ T7655]  ? folio_unlock+0x101/0x160
[  239.059716][ T7655]  __f2fs_commit_super+0x43e/0x4d0
[  239.059748][ T7655]  sanity_check_area_boundary+0x7c5/0xe20
[  239.059794][ T7655]  f2fs_fill_super+0x1920/0x7fa0
[  239.059844][ T7655]  ? set_blocksize+0x1c9/0x440
[  239.059888][ T7655]  get_tree_bdev_flags+0x430/0x4f0
[  239.059913][ T7655]  ? __pfx_f2fs_fill_super+0x10/0x10
[  239.059934][ T7655]  ? __pfx_get_tree_bdev_flags+0x10/0x10
[  239.059967][ T7655]  vfs_get_tree+0x92/0x2a0
[  239.059991][ T7655]  do_new_mount+0x319/0xdc0
[  239.060025][ T7655]  ? __pfx_do_new_mount+0x10/0x10
[  239.060053][ T7655]  ? ns_capable+0x84/0xe0
[  239.060081][ T7655]  ? path_mount+0x647/0x1050
[  239.060112][ T7655]  ? user_path_at+0xd4/0x160
[  239.060134][ T7655]  __se_sys_mount+0x31d/0x420
[  239.060158][ T7655]  ? __pfx___se_sys_mount+0x10/0x10
[  239.060181][ T7655]  ? __x64_sys_mount+0x20/0xc0
[  239.060201][ T7655]  do_syscall_64+0x166/0x520
[  239.060226][ T7655]  ? trace_irq_disable+0x3b/0x140
[  239.060248][ T7655]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  239.060266][ T7655]  ? clear_bhb_loop+0x70/0xc0
[  239.060291][ T7655]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  239.060311][ T7655] RIP: 0033:0x7fc78879f3ca
[  239.060330][ T7655] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  239.060346][ T7655] RSP: 002b:00007fc7896c4e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  239.060367][ T7655] RAX: ffffffffffffffda RBX: 00007fc7896c4ee0 RCX: 00007fc78879f3ca
[  239.060382][ T7655] RDX: 0000200000000040 RSI: 0000200000000240 RDI: 00007fc7896c4ea0
[  239.060396][ T7655] RBP: 0000200000000040 R08: 00007fc7896c4ee0 R09: 0000000000000000
[  239.060410][ T7655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000240
[  239.060422][ T7655] R13: 00007fc7896c4ea0 R14: 000000000000555e R15: 0000200000000780
[  239.060454][ T7655]  </TASK>
[  239.060480][ T7655] ---[ end trace ]---
[  239.060503][ T7655] Kernel panic - not syncing: UBSAN: panic_on_warn set ...
[  239.331539][ T7655] CPU: 1 UID: 0 PID: 7655 Comm: syz.0.525 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  239.342374][ T7655] Tainted: [L]=SOFTLOCKUP
[  239.346684][ T7655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  239.356723][ T7655] Call Trace:
[  239.359992][ T7655]  <TASK>
[  239.362908][ T7655]  vpanic+0x26f/0x710
[  239.366888][ T7655]  panic+0xc5/0xd0
[  239.370605][ T7655]  ? __pfx_panic+0x10/0x10
[  239.375016][ T7655]  ? __pfx__printk+0x10/0x10
[  239.379598][ T7655]  check_panic_on_warn+0x89/0xb0
[  239.384525][ T7655]  __ubsan_handle_shift_out_of_bounds+0x36d/0x400
[  239.390940][ T7655]  ? folio_unlock+0x101/0x160
[  239.395607][ T7655]  __f2fs_commit_super+0x43e/0x4d0
[  239.400716][ T7655]  sanity_check_area_boundary+0x7c5/0xe20
[  239.406442][ T7655]  f2fs_fill_super+0x1920/0x7fa0
[  239.411389][ T7655]  ? set_blocksize+0x1c9/0x440
[  239.416158][ T7655]  get_tree_bdev_flags+0x430/0x4f0
[  239.421263][ T7655]  ? __pfx_f2fs_fill_super+0x10/0x10
[  239.426535][ T7655]  ? __pfx_get_tree_bdev_flags+0x10/0x10
[  239.432161][ T7655]  vfs_get_tree+0x92/0x2a0
[  239.436569][ T7655]  do_new_mount+0x319/0xdc0
[  239.441071][ T7655]  ? __pfx_do_new_mount+0x10/0x10
[  239.446103][ T7655]  ? ns_capable+0x84/0xe0
[  239.450431][ T7655]  ? path_mount+0x647/0x1050
[  239.455016][ T7655]  ? user_path_at+0xd4/0x160
[  239.459596][ T7655]  __se_sys_mount+0x31d/0x420
[  239.464260][ T7655]  ? __pfx___se_sys_mount+0x10/0x10
[  239.469446][ T7655]  ? __x64_sys_mount+0x20/0xc0
[  239.474201][ T7655]  do_syscall_64+0x166/0x520
[  239.478784][ T7655]  ? trace_irq_disable+0x3b/0x140
[  239.483798][ T7655]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  239.489851][ T7655]  ? clear_bhb_loop+0x70/0xc0
[  239.494523][ T7655]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  239.500406][ T7655] RIP: 0033:0x7fc78879f3ca
[  239.504814][ T7655] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  239.524411][ T7655] RSP: 002b:00007fc7896c4e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  239.532815][ T7655] RAX: ffffffffffffffda RBX: 00007fc7896c4ee0 RCX: 00007fc78879f3ca
[  239.540779][ T7655] RDX: 0000200000000040 RSI: 0000200000000240 RDI: 00007fc7896c4ea0
[  239.548738][ T7655] RBP: 0000200000000040 R08: 00007fc7896c4ee0 R09: 0000000000000000
[  239.556695][ T7655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000240
[  239.564652][ T7655] R13: 00007fc7896c4ea0 R14: 000000000000555e R15: 0000200000000780
[  239.572625][ T7655]  </TASK>
[  239.575798][ T7655] Kernel Offset: disabled
[  239.580115][ T7655] Rebooting in 86400 seconds..