last executing test programs:

6.685375521s ago: executing program 0 (id=398):
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0x1218088, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x4a, 0x2df, &(0x7f0000000580)="$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")
getpid()
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000880)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
setuid(0xee01)
utimensat(r0, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, 0x0)

6.556614895s ago: executing program 2 (id=399):
r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x4)
r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cgroup.controllers\x00', 0x5000000, 0x0)
readv(r2, &(0x7f00000012c0)=[{&(0x7f0000002c40)=""/4081, 0xff1}], 0x1)

6.198112719s ago: executing program 2 (id=403):
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
getdents64(r0, &(0x7f00000002c0)=""/141, 0x8d)
getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0)

6.151336891s ago: executing program 0 (id=404):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)=@newtaction={0x18, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x20000015)
setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000040)=0x482, 0x4)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

5.831714751s ago: executing program 1 (id=406):
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
setresuid(0xee01, 0x0, 0x0)
linkat(r0, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000)

5.691517332s ago: executing program 0 (id=409):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x6a855000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
personality(0x619641b6fb4b8591)
socket$nl_route(0x10, 0x3, 0x0)

5.442201365s ago: executing program 1 (id=412):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x27)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{0x0, 0x0, 0xfffd, 0x8001}, 'syz1\x00', 0xb})
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x7f)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)

5.202854554s ago: executing program 5 (id=415):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e80), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000000c0)={'wpan0\x00', <r3=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000000)={0x38, r1, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x96}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4010}, 0x0)

4.907186017s ago: executing program 1 (id=416):
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x400)
socket(0x10, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r4}, &(0x7f0000000800), &(0x7f0000000840)=r5}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1)
write$tun(r1, &(0x7f0000000380)=ANY=[], 0xfdef)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(r2, 0x0, 0x2)
r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r7, r7)
setpgid(0x0, r7)
fchdir(r6)
lstat(&(0x7f00000001c0)='./file0\x00', 0x0)
writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}], 0x1)

4.901240448s ago: executing program 5 (id=417):
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, 0x0)
setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000080), 0x7, 0x20000)
ioctl$BLKFRASET(r1, 0x1264, 0x0)

4.87190537s ago: executing program 4 (id=418):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x2, 0x0, 0x0, 0x2, 0x2}})
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0)
read$char_usb(r1, &(0x7f00000001c0)=""/4068, 0xfe4)

4.638558623s ago: executing program 5 (id=419):
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x81, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g_uac2/idVendor\x00', 0x1, 0x0)
lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01)

4.357826195s ago: executing program 0 (id=420):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r1, &(0x7f0000000080)='7', 0x1)
fremovexattr(0xffffffffffffffff, 0x0)
syz_usb_disconnect(r0)

4.271091845s ago: executing program 2 (id=421):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="70000000ffffffffffffaaaa88aaaabb080045000014000020"], 0xfdef)

3.948600789s ago: executing program 5 (id=422):
syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef0201406d042d158fefb32da0f10902"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_debugfs\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./my_debugfs\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./my_debugfs/usb/devices\x00', 0x0, 0x0)
read(r0, &(0x7f0000000500)=""/100, 0x7ffe)

3.236106021s ago: executing program 4 (id=424):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x65, 0x24, 0x1, 0x70bd2c, 0x25cfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfffb}, {0xffff, 0xffff}, {0x2, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x840)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

3.092734721s ago: executing program 1 (id=425):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002})
socket(0x200000000000011, 0x2, 0xd)
bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x9, 0x0, 0x1, 0x1, 0x6, @remote}, 0x14)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4})
mount(0x0, 0x0, &(0x7f0000000100)='9p\x00', 0x1a0480c, 0x0)
r3 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
read$FUSE(r3, &(0x7f0000004140)={0x2020}, 0x2020)
pread64(r3, 0x0, 0x0, 0xab7f)
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_REGISTER(r2, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2})
epoll_create(0x9)
setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r5, &(0x7f0000000340)="0a000300010000", 0x7)
recvmmsg(r5, 0x0, 0x0, 0x12022, 0x0)
r6 = syz_open_dev$loop(&(0x7f0000000080), 0x7, 0x20000)
ioctl$BLKFRASET(r6, 0x1264, 0x0)
sendto$inet6(r4, 0x0, 0x0, 0x20004041, 0x0, 0x0)
connect$inet6(r4, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x7}, 0x1c)
fdatasync(r4)

2.88253136s ago: executing program 2 (id=427):
openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=<r0=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_setup(0x8, &(0x7f0000000600)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}])

2.827324772s ago: executing program 3 (id=428):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000003100)={0x0, 0x0, &(0x7f00000030c0)={&(0x7f0000000200)={0x34, r0, 0x1, 0x70bd23, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, @NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c054}, 0x0)

2.826350415s ago: executing program 4 (id=429):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000000, &(0x7f0000000740)={[{@i_version}, {@grpquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@barrier}]}, 0xfe, 0x2a4, &(0x7f0000000a80)="$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")
syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140))
mkdir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
creat(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x185)
syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x820051, 0x0, 0x1, 0x0, &(0x7f0000000d40))

2.674702333s ago: executing program 3 (id=430):
sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000940)={0x3c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200c0814}, 0x8000)
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000002040)=0x4, 0x4)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000690005"], 0x28}}, 0x0)
recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/91, 0x5b}}, {{&(0x7f0000000000)=@isdn, 0x0, &(0x7f0000000640)=[{&(0x7f0000000080)=""/225}, {&(0x7f00000001c0)=""/65}, {&(0x7f0000000d40)=""/4096}, {&(0x7f0000000240)=""/99}, {&(0x7f00000002c0)=""/122}, {&(0x7f0000000340)=""/217}, {&(0x7f00000008c0)=""/35}, {&(0x7f0000000500)=""/227}, {&(0x7f0000000600)=""/1}]}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000700)=""/27}], 0x0, &(0x7f0000000780)=""/112}}], 0x40000000000024a, 0x40002002, 0x0)

2.43145968s ago: executing program 3 (id=431):
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, 0x0)
setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0)
r1 = syz_open_dev$loop(0x0, 0x7, 0x20000)
ioctl$BLKFRASET(r1, 0x1264, 0x0)

2.381596839s ago: executing program 2 (id=432):
syz_mount_image$nilfs2(&(0x7f0000000140), &(0x7f0000000f00)='./file1\x00', 0x208800, &(0x7f0000003100)=ANY=[], 0x2, 0xf04, &(0x7f0000001e80)="$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")
r0 = open(&(0x7f0000000240)='.\x00', 0x0, 0x0)
flock(r0, 0x6)
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0xc0000, 0x0, 0xbe, 0x0, &(0x7f00000007c0))
rmdir(&(0x7f0000000080)='./bus\x00')

2.375217677s ago: executing program 4 (id=433):
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/cpu/cpuidle/current_governor\x00', 0x2, 0x0)
write$P9_RREAD(r0, &(0x7f0000000180)=ANY=[], 0xb)

2.203301499s ago: executing program 3 (id=434):
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000009c0)=@newtfilter={0x50, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0x4}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffa}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x3, 0x0, 0x0, {{0x7, 0x4, 0xfffa}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x24049094}, 0x0)

2.18269826s ago: executing program 0 (id=435):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x5, 0x51c, &(0x7f0000000700)="$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")
r0 = open(&(0x7f0000000100)='./bus\x00', 0xc442, 0x106)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x147142, 0xc1)
ftruncate(r1, 0x2007ffb)
fallocate(r0, 0x8, 0x0, 0x10000)

2.127547369s ago: executing program 1 (id=436):
syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000bec9ff10cd0631016016af02030109021b0001000000000904"], 0x0)
mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0x2, 0x0)
ioctl$TCXONC(r0, 0x540a, 0x2)

1.991479436s ago: executing program 4 (id=437):
syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa00010, &(0x7f0000000440)=ANY=[@ANYBLOB='iocharset=iso8859-1,nostrict,iocharset=default,anchor=00000000000000000145,gid=', @ANYRESDEC=0x0, @ANYBLOB="2c706172746974696f6e3d30303030303030303030303030303030303030322c756e64656c6574652c706172746974696f6e3d30303030303030303030303030303030303030312c756e686964652c001e066340c987db28915dbe6892bc3dce41ae76eaf528dc889820692d753009e30e567403a6c30e933de68a0a923eec1dccf226b58adb7d968bafe76628bceade8672fb893f87dc88", @ANYRESDEC, @ANYRESOCT=0x0, @ANYRES8], 0x1, 0xc5a, &(0x7f0000001040)="$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")
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r0 = open(&(0x7f0000000040)='.\x00', 0x8c00, 0x0)
getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0)
getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0)

1.882276942s ago: executing program 3 (id=438):
syz_mount_image$nilfs2(&(0x7f0000000380), &(0x7f0000000a40)='./file0\x00', 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB='\x00'], 0xf, 0xa02, &(0x7f0000001ec0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80, 0x0)
ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, &(0x7f0000000040)={{0x0, 0x0, 0x40, 0xd, 0xde}, {0x0, 0x0, 0x10, 0x20c, 0xfffffffffffffff7}, {0x0, 0x0, 0x8, 0x4, 0x3}, {0x0, 0x0, 0x28, 0x9, 0xffffffffffffff2d}, {&(0x7f00000003c0)=[0x9], 0x1, 0x8, 0x98f, 0x8}})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80, 0x0)
ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r1, 0x40786e88, &(0x7f0000000040)={{&(0x7f0000000280)=[{0x3, 0x0, 0x3, {0x2, 0xfb}, 0x58, 0xea}], 0x1, 0x40, 0xd, 0xde}, {0x0, 0x0, 0x10, 0x20c, 0xfffffffffffffff7}, {0x0, 0x0, 0x8, 0x4, 0x3}, {0x0, 0x0, 0x28, 0x9, 0xffffffffffffff2d}, {&(0x7f00000003c0)=[0x9], 0x1, 0x8, 0x98f, 0x8}})

1.656128295s ago: executing program 2 (id=439):
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0))
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2})

1.621129009s ago: executing program 0 (id=440):
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x400)
socket(0x10, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r4}, &(0x7f0000000800), &(0x7f0000000840)=r5}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1)
write$tun(r1, &(0x7f0000000380)=ANY=[], 0xfdef)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(r2, 0x0, 0x2)
r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r7, r7)
setpgid(0x0, r7)
fchdir(r6)
lstat(&(0x7f00000001c0)='./file0\x00', 0x0)
writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}], 0x1)

1.260784173s ago: executing program 5 (id=441):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0xffff}, {0xffff, 0xffff}, {0xf, 0x6}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0xffdf, {{0xd, [0x8, 0x1, 0xc, 0xd, 0x1, 0x0, 0x3, 0x1, 0x1, 0x8, 0xc, 0x0, 0x5, 0xb, 0xd, 0xd], 0x1, [0x3, 0x94fe, 0x9, 0xfc00, 0x77, 0x7, 0x8834, 0x40, 0x4, 0xc445, 0x1001, 0x8, 0x6, 0xb840, 0x9, 0x3], [0x9, 0xde, 0x1ff, 0x4, 0x1, 0x4, 0xb, 0x5, 0x3, 0x1, 0x0, 0x7, 0x7, 0x268, 0x7ff, 0x2d]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x8004001}, 0x0)

1.260574278s ago: executing program 4 (id=442):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
recvmsg(r0, &(0x7f0000002440)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, &(0x7f0000001440)=""/4096, 0x1000}, 0x0)
setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000000)=0x81, 0x4)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x66, 0x0, 0x0, 0x11, 0x0, @private=0xa010101, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0)

71.90087ms ago: executing program 3 (id=443):
syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10040, &(0x7f0000000100)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@quota}]}, 0xfd, 0x269, &(0x7f0000000a00)="$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")
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x20020c0, 0x0, 0x1, 0x0, &(0x7f0000001a00))
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x0)
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0)

51.588375ms ago: executing program 5 (id=444):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7)
syz_mount_image$f2fs(&(0x7f0000010580), &(0x7f0000000000)='./file0\x00', 0x400, &(0x7f0000000600)=ANY=[@ANYBLOB="64697361626c655f6578745f6964656e746966792c6673796e635f6d6f64653d7374726963742c6e6f636865636b706f696e745f6d657267652c6e6f657874656e745f63616368652c746573745f64756d6d795f656e6372797074696f6e2c00ca7f3b2f981996b7a00b17c2a1b3aa2a3e156ef54c8301c5808a0289acc8150d1456efcff6a1ad284947038ee7ebbae2a3343cc6974b8b89266c96dc9fdb0ec647e94616bce9b99dc61c3152a4a98da019eb6bf3f231707e05bb76742e3b67ca80224862c9aa07a11c57130ed13661ae753b267c11c000"/224], 0x1, 0x10598, &(0x7f0000031140)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x40)
fallocate(r0, 0x10, 0x1000, 0x8009)

0s ago: executing program 1 (id=445):
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x61)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_type(r0, &(0x7f00000000c0), 0x2, 0x0)
write$cgroup_type(r1, &(0x7f0000000140), 0x9)
rmdir(&(0x7f0000000100)='./cgroup/../file0\x00')

kernel console output (not intermixed with test programs):

18][ T5626] team0: Port device team_slave_1 added
[   80.371615][ T5625] hsr_slave_0: entered promiscuous mode
[   80.372574][ T5625] hsr_slave_1: entered promiscuous mode
[   80.374260][ T5625] debugfs: 'hsr0' already exists in 'hsr'
[   80.374280][ T5625] Cannot create hsr debugfs directory
[   80.376219][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_0
[   80.376233][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   80.376259][ T5626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   80.385532][ T5623] hsr_slave_0: entered promiscuous mode
[   80.386656][ T5623] hsr_slave_1: entered promiscuous mode
[   80.387483][ T5623] debugfs: 'hsr0' already exists in 'hsr'
[   80.387502][ T5623] Cannot create hsr debugfs directory
[   80.477680][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_1
[   80.477697][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   80.477724][ T5626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   80.505812][ T5621] hsr_slave_0: entered promiscuous mode
[   80.506969][ T5621] hsr_slave_1: entered promiscuous mode
[   80.507845][ T5621] debugfs: 'hsr0' already exists in 'hsr'
[   80.507864][ T5621] Cannot create hsr debugfs directory
[   80.571016][ T5629] Bluetooth: hci0: command tx timeout
[   80.651375][ T5629] Bluetooth: hci1: command tx timeout
[   80.765379][ T5626] hsr_slave_0: entered promiscuous mode
[   80.766310][ T5626] hsr_slave_1: entered promiscuous mode
[   80.766933][ T5626] debugfs: 'hsr0' already exists in 'hsr'
[   80.766959][ T5626] Cannot create hsr debugfs directory
[   80.822017][ T5629] Bluetooth: hci2: command tx timeout
[   80.822050][ T5629] Bluetooth: hci5: command tx timeout
[   80.891278][ T5629] Bluetooth: hci4: command tx timeout
[   80.891364][ T4928] Bluetooth: hci3: command tx timeout
[   81.124041][ T5612] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   81.141190][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   81.142369][ T5612] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   81.146296][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   81.196405][ T5612] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   81.211377][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   81.220232][ T5612] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   81.242867][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   81.438119][ T5616] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   81.442990][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   81.444081][ T5616] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   81.452773][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   81.477454][ T5616] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   81.481718][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   81.482792][ T5616] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   81.492741][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   81.596543][ T5625] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   81.602339][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   81.612214][ T5625] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   81.627087][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   81.643904][ T5625] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   81.647412][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   81.671973][ T5625] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   81.675288][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   81.769734][ T5623] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   81.777579][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   81.783986][ T5623] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   81.793737][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   81.794526][ T5623] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   81.800600][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   81.812087][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.818716][ T5623] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   81.834238][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   81.923827][ T5612] 8021q: adding VLAN 0 to HW filter on device team0
[   81.955159][ T5621] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   81.959590][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   81.960765][ T5621] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   81.973401][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   82.005223][ T5621] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   82.009510][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   82.018068][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.018279][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[   82.028427][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.043123][ T5621] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   82.052423][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   82.070576][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.070656][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[   82.185779][ T5626] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   82.189230][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   82.190696][ T5626] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   82.204588][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   82.209382][ T5616] 8021q: adding VLAN 0 to HW filter on device team0
[   82.235413][ T5626] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   82.238723][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   82.245828][  T989] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.245933][  T989] bridge0: port 1(bridge_slave_0) entered forwarding state
[   82.248625][  T989] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.248777][  T989] bridge0: port 2(bridge_slave_1) entered forwarding state
[   82.288780][ T5626] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   82.298350][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   82.369266][ T5612] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   82.406198][ T5625] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.522614][ T5623] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.526264][ T5625] 8021q: adding VLAN 0 to HW filter on device team0
[   82.590539][ T5623] 8021q: adding VLAN 0 to HW filter on device team0
[   82.628815][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.628923][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[   82.661613][ T4928] Bluetooth: hci0: command tx timeout
[   82.667601][   T50] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.667732][   T50] bridge0: port 1(bridge_slave_0) entered forwarding state
[   82.710468][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.710573][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   82.717851][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.717961][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   82.733304][ T4928] Bluetooth: hci1: command tx timeout
[   82.808766][ T5621] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.892476][ T4928] Bluetooth: hci5: command tx timeout
[   82.892512][ T4928] Bluetooth: hci2: command tx timeout
[   82.963950][ T5621] 8021q: adding VLAN 0 to HW filter on device team0
[   82.979933][ T5626] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.981510][ T5629] Bluetooth: hci3: command tx timeout
[   82.981542][ T5629] Bluetooth: hci4: command tx timeout
[   82.998107][ T5625] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   83.094630][  T998] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.094743][  T998] bridge0: port 1(bridge_slave_0) entered forwarding state
[   83.125024][ T1170] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.125132][ T1170] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.223886][ T5626] 8021q: adding VLAN 0 to HW filter on device team0
[   83.296772][  T998] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.296882][  T998] bridge0: port 1(bridge_slave_0) entered forwarding state
[   83.348623][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.348734][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.497482][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0
[   83.804107][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0
[   83.848208][ T5612] veth0_vlan: entered promiscuous mode
[   83.922670][ T5612] veth1_vlan: entered promiscuous mode
[   84.134499][ T5616] veth0_vlan: entered promiscuous mode
[   84.149314][ T5612] veth0_macvtap: entered promiscuous mode
[   84.180005][ T5612] veth1_macvtap: entered promiscuous mode
[   84.239086][ T5616] veth1_vlan: entered promiscuous mode
[   84.268863][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0
[   84.308138][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1
[   84.381512][ T1019] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   84.381924][ T1019] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   84.381978][ T1019] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   84.382020][ T1019] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   84.386721][ T5623] 8021q: adding VLAN 0 to HW filter on device batadv0
[   84.487105][ T5616] veth0_macvtap: entered promiscuous mode
[   84.527962][ T5625] 8021q: adding VLAN 0 to HW filter on device batadv0
[   84.554016][ T5616] veth1_macvtap: entered promiscuous mode
[   84.726017][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0
[   84.731844][ T4928] Bluetooth: hci0: command tx timeout
[   84.778676][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1
[   84.779310][ T5623] veth0_vlan: entered promiscuous mode
[   84.811204][ T4928] Bluetooth: hci1: command tx timeout
[   84.827694][   T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.827716][   T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.875858][   T50] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   84.876408][   T50] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   84.876455][   T50] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   84.876497][   T50] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   84.912231][ T5623] veth1_vlan: entered promiscuous mode
[   84.971671][ T5629] Bluetooth: hci5: command tx timeout
[   84.971727][ T4928] Bluetooth: hci2: command tx timeout
[   85.049043][  T998] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.049067][  T998] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.062594][ T4928] Bluetooth: hci4: command tx timeout
[   85.062649][ T4928] Bluetooth: hci3: command tx timeout
[   85.102804][ T5621] 8021q: adding VLAN 0 to HW filter on device batadv0
[   85.156108][ T5626] 8021q: adding VLAN 0 to HW filter on device batadv0
[   85.258996][ T5612] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   85.282129][  T998] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.282151][  T998] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.339503][ T5623] veth0_macvtap: entered promiscuous mode
[   85.354148][ T5623] veth1_macvtap: entered promiscuous mode
[   85.470501][  T989] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.470526][  T989] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.558384][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_0
[   85.597739][ T5621] veth0_vlan: entered promiscuous mode
[   85.609303][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_1
[   85.627511][ T5625] veth0_vlan: entered promiscuous mode
[   85.685831][ T5621] veth1_vlan: entered promiscuous mode
[   85.738734][ T5625] veth1_vlan: entered promiscuous mode
[   85.781515][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   85.781570][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   85.781612][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   85.781653][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   85.937155][ T5852] netlink: 92 bytes leftover after parsing attributes in process `syz.3.8'.
[   85.981661][ T5728] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   86.024542][   T10] cfg80211: failed to load regulatory.db
[   86.044381][ T5626] veth0_vlan: entered promiscuous mode
[   86.071165][ T5621] veth0_macvtap: entered promiscuous mode
[   86.079527][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.079548][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.109078][ T5625] veth0_macvtap: entered promiscuous mode
[   86.124070][ T5621] veth1_macvtap: entered promiscuous mode
[   86.137591][ T5728] usb 3-1: Using ep0 maxpacket: 32
[   86.145592][ T5728] usb 3-1: unable to get BOS descriptor or descriptor too short
[   86.145692][ T5728] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[   86.150263][ T5728] usb 3-1: config 14 has an invalid interface number: 57 but max is 1
[   86.150290][ T5728] usb 3-1: config 14 has an invalid interface number: 228 but max is 1
[   86.150312][ T5728] usb 3-1: config 14 has no interface number 0
[   86.150331][ T5728] usb 3-1: config 14 has no interface number 1
[   86.150398][ T5728] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[   86.150425][ T5728] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[   86.150454][ T5728] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[   86.150485][ T5728] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[   86.150516][ T5728] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10
[   86.150547][ T5728] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[   86.150577][ T5728] usb 3-1: config 14 interface 57 has no altsetting 0
[   86.150598][ T5728] usb 3-1: config 14 interface 228 has no altsetting 0
[   86.159247][ T5625] veth1_macvtap: entered promiscuous mode
[   86.249569][ T5626] veth1_vlan: entered promiscuous mode
[   86.287758][ T5728] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   86.287788][ T5728] usb 3-1: Product: syz
[   86.287806][ T5728] usb 3-1: Manufacturer: syz
[   86.287823][ T5728] usb 3-1: SerialNumber: syz
[   86.340098][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_0
[   86.351869][  T989] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.351889][  T989] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.375060][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_1
[   86.442801][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_0
[   86.516931][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_1
[   86.547583][    C1] raw-gadget.0 gadget.2: ignoring, device is not running
[   86.566266][ T5728] legousbtower 3-1:14.57: interrupt endpoints not found
[   86.587842][ T5626] veth0_macvtap: entered promiscuous mode
[   86.603592][ T5728] legousbtower 3-1:14.228: get version request failed: -71
[   86.603777][ T5728] legousbtower 3-1:14.228: probe with driver legousbtower failed with error -71
[   86.610818][ T5728] usb 3-1: USB disconnect, device number 2
[   86.673444][ T5626] veth1_macvtap: entered promiscuous mode
[   86.801131][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   86.803730][ T1019] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   86.804120][ T1019] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   86.804311][ T1019] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   86.804482][ T1019] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   86.804830][ T1019] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   86.852203][ T1019] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   86.872675][  T998] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.872695][  T998] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.888634][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_0
[   86.951458][  T998] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   86.964261][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_1
[   87.062124][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.062145][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.230985][ T1019] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.275355][  T998] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.276085][  T998] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.283275][  T989] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.283295][  T989] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.571967][  T998] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.606178][ T1019] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.606202][ T1019] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.656837][ T5878] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   87.708496][  T989] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.708520][  T989] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.909389][ T1019] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.909415][ T1019] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.250782][ T5881] loop3: detected capacity change from 0 to 32768
[   89.979550][ T5911] FAULT_INJECTION: forcing a failure.
[   89.979550][ T5911] name failslab, interval 1, probability 0, space 0, times 1
[   89.979590][ T5911] CPU: 0 UID: 0 PID: 5911 Comm: syz.0.26 Not tainted syzkaller #0 PREEMPT(full) 
[   89.979617][ T5911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026
[   89.979632][ T5911] Call Trace:
[   89.979643][ T5911]  <TASK>
[   89.979653][ T5911]  dump_stack_lvl+0xe8/0x150
[   89.979695][ T5911]  should_fail_ex+0x410/0x560
[   89.979730][ T5911]  should_failslab+0xa8/0x100
[   89.979765][ T5911]  __kmalloc_cache_noprof+0xa3/0x600
[   89.979793][ T5911]  ? do_epoll_create+0x75/0x440
[   89.979821][ T5911]  ? do_epoll_create+0x75/0x440
[   89.979857][ T5911]  do_epoll_create+0x75/0x440
[   89.979889][ T5911]  __x64_sys_epoll_create1+0x37/0x40
[   89.979915][ T5911]  do_syscall_64+0x166/0x520
[   89.979946][ T5911]  ? trace_irq_disable+0x3b/0x140
[   89.979973][ T5911]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   89.980006][ T5911]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   89.980031][ T5911] RIP: 0033:0x7f2f6359e159
[   89.980058][ T5911] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   89.980078][ T5911] RSP: 002b:00007f2f6444a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000123
[   89.980105][ T5911] RAX: ffffffffffffffda RBX: 00007f2f63825fa0 RCX: 00007f2f6359e159
[   89.980124][ T5911] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   89.980139][ T5911] RBP: 00007f2f6363506b R08: 0000000000000000 R09: 0000000000000000
[   89.980155][ T5911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   89.980170][ T5911] R13: 00007f2f63826038 R14: 00007f2f63825fa0 R15: 00007ffd9d8226e8
[   89.980209][ T5911]  </TASK>
[   90.186671][ T5913] loop4: detected capacity change from 0 to 128
[   90.412271][ T5728] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   90.446406][ T5913] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   90.447502][ T5913] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   90.541171][ T5857] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   90.583023][ T5913] fscrypt (loop4, inode 12): Unsupported encryption flags (0x7b)
[   90.602325][ T5728] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[   90.607020][ T5728] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[   90.607048][ T5728] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   90.607069][ T5728] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[   90.607116][ T5728] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   90.607574][ T5908] loop1: detected capacity change from 0 to 32768
[   90.640186][ T5728] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[   90.640216][ T5728] usb 6-1: Product: syz
[   90.640233][ T5728] usb 6-1: Manufacturer: syz
[   90.699240][ T5908] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.24 (5908)
[   90.747539][ T5728] cdc_wdm 6-1:1.0: skipping garbage
[   90.747563][ T5728] cdc_wdm 6-1:1.0: skipping garbage
[   90.762527][ T5857] usb 4-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00
[   90.774706][ T5857] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[   90.774737][ T5857] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[   90.802611][ T5857] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   90.802643][ T5857] usb 4-1: Product: syz
[   90.802660][ T5857] usb 4-1: Manufacturer: syz
[   90.802677][ T5857] usb 4-1: SerialNumber: syz
[   90.835777][ T5728] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[   90.835801][ T5728] cdc_wdm 6-1:1.0: Unknown control protocol
[   90.857699][ T5626] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   90.904971][ T5908] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   90.905007][ T5908] BTRFS info (device loop1): using crc32c checksum algorithm
[   90.908043][ T5857] ums-sddr09 4-1:1.0: USB Mass Storage device detected
[   90.973170][ T5627] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   90.997431][ T5728] usb 6-1: USB disconnect, device number 2
[   91.042248][ T5857] ums-sddr09 4-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller)
[   91.042248][ T5857]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[   91.124727][ T5627] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[   91.127450][ T5627] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 254, changing to 11
[   91.127486][ T5627] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   91.127530][ T5627] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   91.160424][ T5627] usb 1-1: config 0 descriptor??
[   91.235924][ T5908] BTRFS info (device loop1): enabling ssd optimizations
[   91.235954][ T5908] BTRFS info (device loop1): turning on flush-on-commit
[   91.235973][ T5908] BTRFS info (device loop1): enabling free space tree
[   91.235992][ T5908] BTRFS info (device loop1): enabling auto defrag
[   91.236012][ T5908] BTRFS info (device loop1): use lzo compression, level 1
[   91.236032][ T5908] BTRFS info (device loop1): max_inline set to 4096
[   91.331279][ T5857] ums-sddr09 4-1:1.0: probe with driver ums-sddr09 failed with error -32
[   91.678064][ T5627] hid-multitouch 0003:1FD2:6007.0001: unknown main item tag 0x0
[   91.678101][ T5627] hid-multitouch 0003:1FD2:6007.0001: unknown main item tag 0x0
[   91.678126][ T5627] hid-multitouch 0003:1FD2:6007.0001: unknown main item tag 0x0
[   91.678150][ T5627] hid-multitouch 0003:1FD2:6007.0001: unknown main item tag 0x0
[   91.678174][ T5627] hid-multitouch 0003:1FD2:6007.0001: unknown main item tag 0x0
[   91.678198][ T5627] hid-multitouch 0003:1FD2:6007.0001: unknown main item tag 0x0
[   91.678222][ T5627] hid-multitouch 0003:1FD2:6007.0001: unknown main item tag 0x0
[   91.678246][ T5627] hid-multitouch 0003:1FD2:6007.0001: unknown main item tag 0x0
[   91.678270][ T5627] hid-multitouch 0003:1FD2:6007.0001: unknown main item tag 0x0
[   91.678294][ T5627] hid-multitouch 0003:1FD2:6007.0001: unknown main item tag 0x0
[   91.784929][ T5627] hid-multitouch 0003:1FD2:6007.0001: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.0-1/input0
[   91.814830][ T5959] syz.5.36 uses obsolete (PF_INET,SOCK_PACKET)
[   91.880328][   T10] usb 1-1: USB disconnect, device number 2
[   91.917568][ T5621] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   92.136328][ T5961] fido_id[5961]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[   92.574554][ T5973] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   92.752127][ T5978] loop2: detected capacity change from 0 to 512
[   92.772884][ T5978] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   92.772905][ T5978] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   92.865839][ T5978] EXT4-fs (loop2): 1 truncate cleaned up
[   92.881095][ T5978] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   93.067243][ T5991] netlink: 'syz.4.45': attribute type 39 has an invalid length.
[   93.985770][ T5612] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   94.070896][ T5857] usb 4-1: USB disconnect, device number 2
[   94.455760][ T6003] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000
[   94.455792][ T6003] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[   94.455812][ T6003] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[   94.455834][ T6003] page_type: f5(slab)
[   94.455857][ T6003] raw: 00fff00000000040 ffff88801b042140 dead000000000100 dead000000000122
[   94.455879][ T6003] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[   94.455903][ T6003] head: 00fff00000000040 ffff88801b042140 dead000000000100 dead000000000122
[   94.455936][ T6003] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[   94.455959][ T6003] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
[   94.455982][ T6003] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[   94.455996][ T6003] page dumped because: unmovable page
[   94.456008][ T6003] page_owner tracks the page as allocated
[   94.456018][ T6003] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4984, tgid 4984 (udevd), ts 43265198184
[   94.456056][ T6003]  post_alloc_hook+0x1f9/0x250
[   94.456097][ T6003]  get_page_from_freelist+0x2209/0x2280
[   94.456123][ T6003]  __alloc_frozen_pages_noprof+0x217/0x5a0
[   94.456150][ T6003]  allocate_slab+0x7d/0x620
[   94.456182][ T6003]  refill_objects+0x2d5/0x350
[   94.456214][ T6003]  __pcs_replace_empty_main+0x2c8/0x6c0
[   94.456245][ T6003]  __kmalloc_noprof+0x47b/0x720
[   94.456268][ T6003]  tomoyo_realpath_from_path+0xef/0x640
[   94.456302][ T6003]  tomoyo_path_number_perm+0x246/0x5f0
[   94.456328][ T6003]  tomoyo_path_mknod+0x14a/0x1a0
[   94.456363][ T6003]  security_path_mknod+0x176/0x370
[   94.456397][ T6003]  lookup_open+0x626/0x1a40
[   94.456418][ T6003]  path_openat+0x677/0x1d60
[   94.456441][ T6003]  do_file_open+0x23e/0x4a0
[   94.456462][ T6003]  do_sys_openat2+0x115/0x200
[   94.456492][ T6003]  __x64_sys_openat+0x138/0x170
[   94.456523][ T6003] page last free pid 4988 tgid 4988 ts 43249887437 stack trace:
[   94.456540][ T6003]  __free_frozen_pages+0xc93/0xd90
[   94.456578][ T6003]  __slab_free+0x274/0x2c0
[   94.456601][ T6003]  qlist_free_all+0x99/0x100
[   94.456625][ T6003]  kasan_quarantine_reduce+0x148/0x160
[   94.456649][ T6003]  __kasan_slab_alloc+0x22/0x80
[   94.456676][ T6003]  __kvmalloc_node_noprof+0x49f/0x820
[   94.456702][ T6003]  seq_read_iter+0x1ea/0xca0
[   94.456729][ T6003]  vfs_read+0x595/0xa80
[   94.456763][ T6003]  ksys_read+0x150/0x270
[   94.456797][ T6003]  do_syscall_64+0x166/0x520
[   94.456828][ T6003]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   94.458483][ T6009] loop4: detected capacity change from 0 to 256
[   94.521854][   T25] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[   94.627592][ T6009] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xf9634425, utbl_chksum : 0xe619d30d)
[   94.695722][   T25] usb 6-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00
[   94.701858][   T25] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[   94.701886][   T25] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[   94.701934][   T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   94.843419][ T6013] loop2: detected capacity change from 0 to 4096
[   94.851582][ T6013] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[   95.070815][ T6013] ntfs3(loop2): ino=19, mi_enum_attr
[   95.078902][ T6013] ntfs3(loop2): Failed to initialize $Extend/$ObjId.
[   95.135945][   T25] usb 6-1: USB disconnect, device number 3
[   95.314303][ T6022] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   95.441937][ T6025] loop1: detected capacity change from 0 to 512
[   95.538995][ T6025] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   95.539096][ T6025] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   95.743634][ T5630] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   95.882268][   T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   96.081072][   T10] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00
[   96.124689][   T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   96.124891][   T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64
[   96.124938][   T10] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[   96.125087][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   96.263032][ T5630] usb 5-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00
[   96.295277][ T5630] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[   96.295381][ T5630] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[   96.325199][ T6039] EXT4-fs error (device loop1): ext4_xattr_block_get:608: inode #15: comm syz.1.61: corrupted xattr block 33: invalid ea_ino
[   96.519820][ T5630] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.519869][ T5630] usb 5-1: Product: syz
[   96.519971][ T5630] usb 5-1: Manufacturer: syz
[   96.520063][ T5630] usb 5-1: SerialNumber: syz
[   96.752221][ T5630] ums-sddr09 5-1:1.0: USB Mass Storage device detected
[   96.816487][ T5630] ums-sddr09 5-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller)
[   96.816487][ T5630]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[   96.999993][ T6050] Bluetooth: MGMT ver 1.23
[   97.687293][ T5621] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.716039][   T10] cxacru 4-1:1.0: response to cm 0x91 failed: 0x1e
[   97.716082][   T10] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -5
[   97.716093][   T10] ATM dev 0: usbatm_atm_init: atm_start failed: -5!
[   97.747339][ T5630] ums-sddr09 5-1:1.0: probe with driver ums-sddr09 failed with error -32
[   97.761693][ T6052] netlink: 4 bytes leftover after parsing attributes in process `syz.5.67'.
[   97.794605][   T10] cxacru 4-1:1.0: probe with driver cxacru failed with error -5
[   97.816055][   T10] usb 4-1: USB disconnect, device number 3
[   97.937757][ T6055] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4)
[   97.937788][ T6055] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   97.945020][ T6055] vhci_hcd vhci_hcd.0: Device attached
[   98.103589][ T6064] loop5: detected capacity change from 0 to 1024
[   98.121866][   T25] vhci_hcd vhci_hcd.0: vhci_device speed not set
[   98.127380][ T6064] EXT4-fs: Ignoring removed orlov option
[   98.193833][   T25] usb 33-1: new full-speed USB device number 2 using vhci_hcd
[   98.194532][ T5857] usb 1-1: new low-speed USB device number 3 using dummy_hcd
[   98.209027][ T6064] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   98.311618][ T6072] sctp: [Deprecated]: syz.2.74 (pid 6072) Use of int in max_burst socket option deprecated.
[   98.311618][ T6072] Use struct sctp_assoc_value instead
[   98.355517][ T5857] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[   98.356970][ T5857] usb 1-1: config 0 has no interfaces?
[   98.357006][ T5857] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   98.368631][ T5857] usb 1-1: config 0 descriptor??
[   98.410293][ T6074] loop1: detected capacity change from 0 to 512
[   98.420814][ T6074] =======================================================
[   98.420814][ T6074] WARNING: The mand mount option has been deprecated and
[   98.420814][ T6074]          and is ignored by this kernel. Remove the mand
[   98.420814][ T6074]          option from the mount to silence this warning.
[   98.420814][ T6074] =======================================================
[   98.517878][ T5625] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.585436][ T6058] usbip_core: unknown command
[   98.585453][ T6058] vhci_hcd: unknown pdu 0
[   98.585465][ T6058] usbip_core: unknown command
[   98.587935][   T12] vhci_hcd vhci_hcd.0: stop threads
[   98.587956][   T12] vhci_hcd vhci_hcd.0: release socket
[   98.590359][   T12] vhci_hcd vhci_hcd.0: disconnect device
[   98.636845][  T971] usb 1-1: USB disconnect, device number 3
[   98.663599][   T25] vhci_hcd vhci_hcd.0: vhci_device speed not set
[   98.745065][ T6078] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size.
[   98.747143][ T6076] loop3: detected capacity change from 0 to 32768
[   98.761624][ T6076] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.76 (6076)
[   98.808977][ T6076] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   98.809015][ T6076] BTRFS info (device loop3): using sha256 checksum algorithm
[   98.862857][ T5728] usb 5-1: USB disconnect, device number 2
[   98.926254][ T6076] BTRFS info (device loop3): enabling ssd optimizations
[   98.926285][ T6076] BTRFS info (device loop3): turning on sync discard
[   98.926304][ T6076] BTRFS info (device loop3): enabling free space tree
[   98.926325][ T6076] BTRFS info (device loop3): use zlib compression, level 3
[   99.799545][   T31] audit: type=1800 audit(1789721400.677:2): pid=6102 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.76" name="file1" dev="loop3" ino=260 res=0 errno=0
[   99.937126][ T6104] loop1: detected capacity change from 0 to 1024
[  100.115799][ T6111] loop5: detected capacity change from 0 to 128
[  100.119783][ T6104] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback.
[  100.119895][ T6104] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  100.221150][ T5616] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  100.671452][ T6104] EXT4-fs error (device loop1): ext4_validate_block_bitmap:445: comm syz.1.81: bg 0: block 112: padding at end of block bitmap is not set
[  100.855123][ T6104] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28
[  100.997848][ T6104] EXT4-fs (loop1): This should not happen!! Data will be lost
[  100.997848][ T6104] 
[  100.997894][ T6104] EXT4-fs (loop1): Total free blocks count 0
[  101.028655][ T6104] EXT4-fs (loop1): Free/Dirty block details
[  101.028720][ T6104] EXT4-fs (loop1): free_blocks=0
[  101.028839][ T6104] EXT4-fs (loop1): dirty_blocks=80
[  101.028857][ T6104] EXT4-fs (loop1): Block reservation details
[  101.028915][ T6104] EXT4-fs (loop1): i_reserved_data_blocks=5
[  101.522098][ T5621] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  101.549488][ T6124] loop2: detected capacity change from 0 to 128
[  101.654463][ T6124] syz.2.99: attempt to access beyond end of device
[  101.654463][ T6124] loop2: rw=2049, sector=138, nr_sectors = 8 limit=128
[  101.658640][ T6124] syz.2.99: attempt to access beyond end of device
[  101.658640][ T6124] loop2: rw=2049, sector=146, nr_sectors = 8 limit=128
[  101.669416][ T6125] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  101.716367][ T6124] syz.2.99: attempt to access beyond end of device
[  101.716367][ T6124] loop2: rw=2049, sector=170, nr_sectors = 8 limit=128
[  101.751834][ T6124] syz.2.99: attempt to access beyond end of device
[  101.751834][ T6124] loop2: rw=2049, sector=178, nr_sectors = 8 limit=128
[  101.756534][ T6124] syz.2.99: attempt to access beyond end of device
[  101.756534][ T6124] loop2: rw=2049, sector=202, nr_sectors = 8 limit=128
[  101.787001][ T6124] syz.2.99: attempt to access beyond end of device
[  101.787001][ T6124] loop2: rw=2049, sector=210, nr_sectors = 8 limit=128
[  101.803815][ T6124] syz.2.99: attempt to access beyond end of device
[  101.803815][ T6124] loop2: rw=2049, sector=234, nr_sectors = 8 limit=128
[  101.817754][ T6129] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  101.863953][ T6124] syz.2.99: attempt to access beyond end of device
[  101.863953][ T6124] loop2: rw=2049, sector=242, nr_sectors = 8 limit=128
[  101.885563][ T6124] syz.2.99: attempt to access beyond end of device
[  101.885563][ T6124] loop2: rw=2049, sector=154, nr_sectors = 8 limit=128
[  101.896348][ T6124] syz.2.99: attempt to access beyond end of device
[  101.896348][ T6124] loop2: rw=2049, sector=162, nr_sectors = 8 limit=128
[  102.069373][ T6136] loop0: detected capacity change from 0 to 2048
[  102.075227][ T6138] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  102.101075][ T6130] Buffer I/O error on dev loop2, logical block 124, lost async page write
[  102.124588][ T6132] Buffer I/O error on dev loop2, logical block 124, lost async page write
[  102.148647][ T6136] NILFS (loop0): invalid segment: Magic number mismatch
[  102.148675][ T6136] NILFS (loop0): trying rollback from an earlier position
[  102.391253][ T5770] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  102.483562][   T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  102.632728][ T5770] usb 2-1: Using ep0 maxpacket: 16
[  102.694479][   T10] usb 4-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00
[  102.717802][   T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  102.717846][   T10] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  102.759680][ T5770] usb 2-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00
[  102.778567][ T5770] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  102.778885][ T5770] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  102.778986][ T5770] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  102.779029][ T5770] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  102.779135][ T5770] usb 2-1: config 0 interface 0 has no altsetting 0
[  102.779363][ T5770] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.880428][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.880457][   T10] usb 4-1: Product: syz
[  102.880551][   T10] usb 4-1: Manufacturer: syz
[  102.880699][   T10] usb 4-1: SerialNumber: syz
[  103.186003][ T5770] usb 2-1: config 0 descriptor??
[  103.578222][   T10] ums-sddr09 4-1:1.0: USB Mass Storage device detected
[  103.607474][   T10] ums-sddr09 4-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller)
[  103.607474][   T10]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[  103.637638][ T6136] NILFS (loop0): recovery complete
[  103.654477][ T6150] loop4: detected capacity change from 0 to 512
[  103.667997][ T6153] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  103.769403][ T6150] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  103.769543][ T6150] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  103.848932][ T5770] logitech-djreceiver 0003:046D:C53A.0002: hiddev0,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.1-1/input0
[  103.884959][   T10] ums-sddr09 4-1:1.0: probe with driver ums-sddr09 failed with error -32
[  104.110998][   T25] usb 6-1: new full-speed USB device number 4 using dummy_hcd
[  104.125873][  T971] usb 2-1: USB disconnect, device number 2
[  104.262923][   T25] usb 6-1: New USB device found, idVendor=0925, idProduct=8888, bcdDevice= 0.00
[  104.266878][   T25] usb 6-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  104.266913][   T25] usb 6-1: config 0 interface 0 has no altsetting 0
[  104.266949][   T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  104.270058][ T5626] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.286984][   T25] usb 6-1: config 0 descriptor??
[  104.288673][ T6162] loop0: detected capacity change from 0 to 4096
[  104.385815][ T6162] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  104.414087][ T6166] fido_id[6166]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  104.507935][ T6170] FAULT_INJECTION: forcing a failure.
[  104.507935][ T6170] name failslab, interval 1, probability 0, space 0, times 0
[  104.507970][ T6170] CPU: 0 UID: 0 PID: 6170 Comm: syz.4.101 Not tainted syzkaller #0 PREEMPT(full) 
[  104.507993][ T6170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026
[  104.508007][ T6170] Call Trace:
[  104.508016][ T6170]  <TASK>
[  104.508026][ T6170]  dump_stack_lvl+0xe8/0x150
[  104.508068][ T6170]  should_fail_ex+0x410/0x560
[  104.508104][ T6170]  should_failslab+0xa8/0x100
[  104.508139][ T6170]  __kmalloc_cache_noprof+0xa3/0x600
[  104.508168][ T6170]  ? proc_thread_self_get_link+0xfc/0x190
[  104.508194][ T6170]  ? proc_thread_self_get_link+0xfc/0x190
[  104.508221][ T6170]  ? __task_pid_nr_ns+0x399/0x470
[  104.508252][ T6170]  proc_thread_self_get_link+0xfc/0x190
[  104.508278][ T6170]  ? __pfx_proc_thread_self_get_link+0x10/0x10
[  104.508306][ T6170]  pick_link+0x72f/0xfe0
[  104.508355][ T6170]  step_into_slowpath+0x58a/0x820
[  104.508394][ T6170]  ? __pfx_step_into_slowpath+0x10/0x10
[  104.508429][ T6170]  ? srso_alias_return_thunk+0x5/0xfbef5
[  104.508462][ T6170]  ? srso_alias_return_thunk+0x5/0xfbef5
[  104.508500][ T6170]  link_path_walk+0xd5e/0x1910
[  104.508562][ T6170]  path_openat+0x1c9/0x1d60
[  104.508610][ T6170]  do_file_open+0x23e/0x4a0
[  104.508642][ T6170]  ? __pfx_do_file_open+0x10/0x10
[  104.508692][ T6170]  ? srso_alias_return_thunk+0x5/0xfbef5
[  104.508722][ T6170]  ? _raw_spin_unlock+0x28/0x50
[  104.508748][ T6170]  ? srso_alias_return_thunk+0x5/0xfbef5
[  104.508777][ T6170]  ? alloc_fd+0x651/0x6c0
[  104.508822][ T6170]  do_sys_openat2+0x115/0x200
[  104.508852][ T6170]  ? srso_alias_return_thunk+0x5/0xfbef5
[  104.508882][ T6170]  ? __se_sys_futex+0x3a8/0x450
[  104.508922][ T6170]  ? __pfx_do_sys_openat2+0x10/0x10
[  104.508962][ T6170]  ? rcu_is_watching+0x16/0xb0
[  104.508993][ T6170]  ? srso_alias_return_thunk+0x5/0xfbef5
[  104.509028][ T6170]  __x64_sys_openat+0x138/0x170
[  104.509067][ T6170]  do_syscall_64+0x166/0x520
[  104.509101][ T6170]  ? trace_irq_disable+0x3b/0x140
[  104.509128][ T6170]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  104.509160][ T6170]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  104.509184][ T6170] RIP: 0033:0x7fc76235e98e
[  104.509205][ T6170] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  104.509226][ T6170] RSP: 002b:00007fc763261ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  104.509253][ T6170] RAX: ffffffffffffffda RBX: 00007fc7632626c0 RCX: 00007fc76235e98e
[  104.509272][ T6170] RDX: 0000000000000002 RSI: 00007fc763261f90 RDI: ffffffffffffff9c
[  104.509290][ T6170] RBP: 00007fc76243506b R08: 0000000000000000 R09: 0000000000000000
[  104.509306][ T6170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  104.509321][ T6170] R13: 00007fc762626038 R14: 00007fc762625fa0 R15: 00007ffda2e09e58
[  104.509359][ T6170]  </TASK>
[  104.756072][ T6171] input: syz1 as /devices/virtual/input/input7
[  104.850620][   T25] smartjoyplus 0003:0925:8888.0003: unknown main item tag 0x0
[  104.850656][   T25] smartjoyplus 0003:0925:8888.0003: unknown main item tag 0x0
[  104.850681][   T25] smartjoyplus 0003:0925:8888.0003: unknown main item tag 0x0
[  104.850705][   T25] smartjoyplus 0003:0925:8888.0003: unknown main item tag 0x0
[  104.850729][   T25] smartjoyplus 0003:0925:8888.0003: unknown main item tag 0x0
[  104.850752][   T25] smartjoyplus 0003:0925:8888.0003: unknown main item tag 0x0
[  104.907998][   T25] smartjoyplus 0003:0925:8888.0003: hidraw0: USB HID v10.01 Device [HID 0925:8888] on usb-dummy_hcd.5-1/input0
[  104.958886][ T5623] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.968703][ T5640] udevd[5640]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory
[  105.027563][ T6176] binder: 6175:6176 ioctl 4018620d 0 returned -22
[  105.189227][   T25] usb 6-1: USB disconnect, device number 4
[  106.148794][ T5857] usb 4-1: USB disconnect, device number 4
[  106.242345][ T6179] fido_id[6179]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  106.429617][ T6188] device-mapper: ioctl: Target spec extends beyond end of parameters
[  106.429636][ T6188] device-mapper: ioctl: unable to find target
[  106.552856][ T6195] loop0: detected capacity change from 0 to 4096
[  106.649985][ T6195] ntfs3(loop0): Failed to load $Extend (-22).
[  106.650013][ T6195] ntfs3(loop0): Failed to initialize $Extend.
[  106.671322][ T5857] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  106.779432][ T6205] loop5: detected capacity change from 0 to 1024
[  106.780481][ T6205] EXT4-fs: Ignoring removed oldalloc option
[  106.780533][ T6205] EXT4-fs: Ignoring removed bh option
[  106.821295][ T5857] usb 4-1: Using ep0 maxpacket: 32
[  106.822895][ T5857] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  106.824332][ T5857] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  106.824364][ T5857] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  106.824404][ T5857] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  106.875610][ T6205] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  106.875726][ T6205] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  106.878962][ T5857] usb 4-1: config 0 descriptor??
[  106.960024][ T6205] EXT4-fs error (device loop5): ext4_validate_block_bitmap:445: comm syz.5.115: bg 0: block 112: padding at end of block bitmap is not set
[  106.986664][ T6205] EXT4-fs (loop5): Remounting filesystem read-only
[  107.044945][ T5625] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  107.157397][ T6216] Zero length message leads to an empty skb
[  107.246070][ T6216] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22
[  107.253356][ T6216] netdevsim netdevsim4: Direct firmware load for . failed with error -22
[  107.253381][ T6216] netdevsim netdevsim4: Falling back to sysfs fallback for: .
[  107.356298][ T6223] process 'syz.5.123' launched '/dev/fd/7' with NULL argv: empty string added
[  107.436667][ T5857] savu 0003:1E7D:2D5A.0004: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0
[  107.645198][ T6232] loop0: detected capacity change from 0 to 512
[  107.676905][   T25] usb 4-1: USB disconnect, device number 5
[  107.696319][ T6232] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  107.697824][ T6232] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  107.731575][ T5857] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  107.752542][ T5623] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.755563][ T6236] loop6: detected capacity change from 0 to 8
[  107.787994][ T6236] Dev loop6: unable to read RDB block 8
[  107.788033][ T6236]  loop6: unable to read partition table
[  107.788260][ T6236] loop6: partition table beyond EOD, truncated
[  107.788280][ T6236] loop_reread_partitions: partition scan of loop6 (þ被xü^>Ñà–ì) failed (rc=-5)
[  107.882388][ T5857] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00
[  107.883485][ T5857] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  107.883514][ T5857] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  107.885609][ T5857] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.885635][ T5857] usb 2-1: Product: syz
[  107.885652][ T5857] usb 2-1: Manufacturer: syz
[  107.885669][ T5857] usb 2-1: SerialNumber: syz
[  107.953171][ T5857] ums-sddr09 2-1:1.0: USB Mass Storage device detected
[  107.981993][ T5857] ums-sddr09 2-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller)
[  107.981993][ T5857]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[  108.581231][ T6253] loop2: detected capacity change from 0 to 32768
[  108.585662][ T6253] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.133 (6253)
[  108.589751][ T6253] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  108.589781][ T6253] BTRFS info (device loop2): using sha256 checksum algorithm
[  108.677446][ T5857] ums-sddr09 2-1:1.0: probe with driver ums-sddr09 failed with error -32
[  108.701124][ T5770] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  108.719564][  T971] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  108.795669][ T6253] BTRFS info (device loop2): enabling ssd optimizations
[  108.795699][ T6253] BTRFS info (device loop2): turning on sync discard
[  108.795718][ T6253] BTRFS info (device loop2): enabling free space tree
[  108.795739][ T6253] BTRFS info (device loop2): use zlib compression, level 3
[  108.923818][  T971] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  108.929643][  T971] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.929673][  T971] usb 4-1: Product: syz
[  108.929691][  T971] usb 4-1: Manufacturer: syz
[  108.929708][  T971] usb 4-1: SerialNumber: syz
[  109.050439][ T5770] usb 5-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40
[  109.058837][ T5770] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  109.058864][ T5770] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  109.058931][ T5770] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 28719, setting to 1024
[  109.058960][ T5770] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 1024
[  109.064251][ T5770] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  109.064277][ T5770] usb 5-1: Product: syz
[  109.064294][ T5770] usb 5-1: Manufacturer: syz
[  109.064311][ T5770] usb 5-1: SerialNumber: syz
[  109.675299][   T31] audit: type=1800 audit(1789721410.507:3): pid=6277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.133" name="file1" dev="loop2" ino=260 res=0 errno=0
[  109.937168][ T5770] usb 5-1: 0:2 : does not exist
[  109.980211][  T971] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO
[  109.980291][  T971] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71
[  109.980314][  T971] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  110.025663][  T971] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71
[  110.030501][ T5612] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  110.072423][  T971] usb 4-1: USB disconnect, device number 6
[  110.119555][ T5770] usb 5-1: USB disconnect, device number 3
[  110.201254][ T5756] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  110.205428][ T6256] loop5: detected capacity change from 0 to 32768
[  110.351677][ T6256] JBD2: Ignoring recovery information on journal
[  110.361204][ T5756] usb 1-1: Using ep0 maxpacket: 8
[  110.362223][ T5756] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[  110.371866][ T5756] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.371893][ T5756] usb 1-1: Product: syz
[  110.371910][ T5756] usb 1-1: Manufacturer: syz
[  110.371927][ T5756] usb 1-1: SerialNumber: syz
[  110.391060][ T5756] usb 1-1: config 0 descriptor??
[  110.470366][  T971] usb 2-1: USB disconnect, device number 3
[  110.562482][ T6256] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  110.615850][ T6256] OCFS2: ERROR (device loop5): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #1056 has bad signature 
[  110.615902][ T6256] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  110.615915][ T6256] OCFS2: File system is now read-only.
[  110.615926][ T6256] (syz.5.134,6256,1):ocfs2_trim_mainbm:7640 ERROR: status = -30
[  110.672679][ T5756] usb 1-1: dvb_usb_v2: found a 'Terratec H7' in warm state
[  111.375415][ T5625] ocfs2: Unmounting device (7,5) on (node local)
[  111.789117][ T5756] usb write operation failed. (-71)
[  111.808513][ T5756] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  111.809174][ T5756] dvbdev: DVB: registering new adapter (Terratec H7)
[  111.809222][ T5756] usb 1-1: media controller created
[  111.809971][ T5756] usb read operation failed. (-71)
[  111.810441][ T5756] usb write operation failed. (-71)
[  111.819278][ T5756] dvb_usb_az6007 1-1:0.0: probe with driver dvb_usb_az6007 failed with error -5
[  111.825321][ T5756] usb 1-1: USB disconnect, device number 4
[  112.027089][ T6304] loop1: detected capacity change from 0 to 1024
[  112.115067][ T6309] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[  112.115110][ T6309] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[  112.115131][ T6309] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[  112.301057][ T5756] usb 3-1: new full-speed USB device number 3 using dummy_hcd
[  112.453453][ T5756] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  112.462401][ T5756] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  112.462434][ T5756] usb 3-1: Product: syz
[  112.462452][ T5756] usb 3-1: Manufacturer: syz
[  112.462468][ T5756] usb 3-1: SerialNumber: syz
[  112.487380][ T5756] usb 3-1: config 0 descriptor??
[  112.575218][ T6319] loop6: detected capacity change from 0 to 2640
[  112.594446][ T5926] Buffer I/O error on dev loop6, logical block 0, async page read
[  112.595210][ T5926] Buffer I/O error on dev loop6, logical block 0, async page read
[  112.595711][ T5926] Buffer I/O error on dev loop6, logical block 0, async page read
[  112.597539][ T5926] Buffer I/O error on dev loop6, logical block 0, async page read
[  112.598173][ T5926] Buffer I/O error on dev loop6, logical block 0, async page read
[  112.714826][ T5756] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  113.047490][ T6323] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  113.165208][ T5756] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  113.197513][ T5756] usb 3-1: USB disconnect, device number 3
[  113.389764][ T6331] netlink: 4 bytes leftover after parsing attributes in process `syz.4.157'.
[  113.442599][ T6331] netlink: 4 bytes leftover after parsing attributes in process `syz.4.157'.
[  113.474544][ T6338] loop1: detected capacity change from 0 to 256
[  113.844689][ T5756] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  114.224387][ T5756] usb 4-1: Using ep0 maxpacket: 16
[  114.234010][ T5756] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  114.252212][   T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  114.359721][ T5756] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  114.359780][ T5756] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  114.359811][ T5756] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  114.359835][ T5756] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  114.359862][ T5756] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  114.431271][ T5756] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  114.431302][ T5756] usb 4-1: Manufacturer: syz
[  114.468344][ T5756] usb 4-1: config 0 descriptor??
[  114.537795][   T10] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  114.542833][   T10] usb 1-1: config 0 has an invalid interface number: 50 but max is 0
[  114.542888][   T10] usb 1-1: config 0 has no interface number 0
[  114.542931][   T10] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  114.550586][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.550613][   T10] usb 1-1: Product: syz
[  114.550629][   T10] usb 1-1: Manufacturer: syz
[  114.550646][   T10] usb 1-1: SerialNumber: syz
[  114.573172][   T10] usb 1-1: config 0 descriptor??
[  114.665258][   T10] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0
[  114.814755][ T6351] loop2: detected capacity change from 0 to 512
[  114.815903][ T6351] EXT4-fs: Ignoring removed nobh option
[  114.867908][ T6351] EXT4-fs (loop2): 1 truncate cleaned up
[  114.879625][ T6351] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  114.935236][ T6334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  114.935736][ T6334] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  114.941028][ T5756] rc_core: IR keymap rc-hauppauge not found
[  114.941045][ T5756] Registered IR keymap rc-empty
[  114.941408][ T5756] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  114.964570][ T5756] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  114.984560][ T5756] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  114.989889][ T5756] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input8
[  115.020297][ T5756] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  115.032015][ T5756] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  115.051684][ T5756] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  115.070971][ T5728] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  115.071300][ T5756] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  115.093389][ T5756] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  115.111851][ T5756] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  115.132161][ T5756] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  115.151069][ T5756] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  115.171439][ T5756] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  115.177359][ T5612] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.195806][ T5756] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  115.232371][ T5756] mceusb 4-1:0.0: Registered  with mce emulator interface version 1
[  115.232398][ T5756] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  115.251542][    C0] usb 1-1: yurex_control_callback - control failed: -71
[  115.253277][ T5627] usb 1-1: USB disconnect, device number 5
[  115.277600][ T5728] usb 5-1: unable to get BOS descriptor or descriptor too short
[  115.277649][ T5728] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  115.278636][ T5728] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  115.278661][ T5728] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  115.278706][ T5728] usb 5-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30
[  115.278745][ T5728] usb 5-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188
[  115.278788][ T5728] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  115.278818][ T5728] usb 5-1: config 1 interface 1 has no altsetting 0
[  115.343007][ T5627] yurex 1-1:0.50: USB YUREX #0 now disconnected
[  115.360490][   T10] usb 4-1: USB disconnect, device number 7
[  115.374469][ T5728] usb 5-1: string descriptor 0 read error: -22
[  115.374625][ T5728] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.431041][  T971] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  115.523758][ T6365] loop2: detected capacity change from 0 to 8192
[  115.582490][  T971] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  115.588389][  T971] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.588415][  T971] usb 2-1: Product: syz
[  115.588433][  T971] usb 2-1: Manufacturer: syz
[  115.588477][  T971] usb 2-1: SerialNumber: syz
[  115.703059][ T6369] loop6: detected capacity change from 0 to 2640
[  115.703711][ T6369] Buffer I/O error on dev loop6, logical block 0, async page read
[  115.703750][ T6369] Buffer I/O error on dev loop6, logical block 0, async page read
[  115.703782][ T6369] Buffer I/O error on dev loop6, logical block 0, async page read
[  115.703813][ T6369] Buffer I/O error on dev loop6, logical block 0, async page read
[  115.703843][ T6369] Buffer I/O error on dev loop6, logical block 0, async page read
[  115.703935][ T6369] ldm_validate_partition_table(): Disk read failed.
[  115.704014][ T6369] Dev loop6: unable to read RDB block 0
[  115.704195][ T6369]  loop6: unable to read partition table
[  115.709614][ T6369] loop_reread_partitions: partition scan of loop6 (3Ÿ¾‚³˜) failed (rc=-5)
[  115.793767][ T6369] Invalid logical block size (255)
[  115.921359][  T971] rtl8150 2-1:1.0: couldn't reset the device
[  115.921763][  T971] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5
[  115.930585][  T971] usb 2-1: USB disconnect, device number 4
[  116.069173][ T6374] syzkaller1: entered promiscuous mode
[  116.069227][ T6374] syzkaller1: entered allmulticast mode
[  116.402606][ T6375] netlink: 136 bytes leftover after parsing attributes in process `syz.0.169'.
[  116.402650][ T6375] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  116.624316][ T5728] usb 5-1: 2:0: failed to get current value for ch 1 (-71)
[  116.948185][   T12] IPVS: starting estimator thread 0...
[  117.121228][ T6384] IPVS: using max 23 ests per chain, 55200 per kthread
[  118.635596][ T6395] loop1: detected capacity change from 0 to 2048
[  118.658035][ T5728] usb 5-1: USB disconnect, device number 4
[  118.721073][ T6401] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  118.747603][ T6403] loop5: detected capacity change from 0 to 128
[  118.749523][ T6403] FAT-fs (loop5): invalid media value (0x06)
[  118.749545][ T6403] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  118.749562][ T6403] FAT-fs (loop5): Can't find a valid FAT filesystem
[  119.031316][   T31] audit: type=1800 audit(1789721420.347:4): pid=6395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.177" name="bus" dev="loop1" ino=2097152 res=0 errno=0
[  119.077753][ T6406] NILFS (loop1): nilfs_sufile_do_free: segment 9 is already clean
[  119.300963][ T5728] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  119.311394][ T5756] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  119.369413][ T6421] loop1: detected capacity change from 0 to 256
[  119.455899][ T5728] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  119.459719][ T5728] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  119.459858][ T5728] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  119.459901][ T5728] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  119.459947][ T5728] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  119.460103][ T5728] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  119.581758][ T5756] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  119.590196][ T5756] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  119.710323][ T6421] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011f1c, chksum : 0x850fc7e5, utbl_chksum : 0xe619d30d)
[  119.807124][ T5728] usb 6-1: config 0 descriptor??
[  119.884879][ T6416] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  120.237267][ T6421] exFAT-fs (loop1): error, exfat_zeroed_cluster: out of range(sect:224 len:8)
[  120.237297][ T6421] exFAT-fs (loop1): Filesystem has been set read-only
[  120.268693][ T5756] usb 4-1: config 0 descriptor??
[  120.293753][ T5756] cp210x 4-1:0.0: cp210x converter detected
[  120.412759][ T6430] loop0: detected capacity change from 0 to 64
[  120.466776][ T5728] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  120.466812][ T5728] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  120.466837][ T5728] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  120.466861][ T5728] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  120.466885][ T5728] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  120.466909][ T5728] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  120.466938][ T5728] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  120.466962][ T5728] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  120.466987][ T5728] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  120.467011][ T5728] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  120.556576][ T5728] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  120.623252][ T6430] hfs: walked past end of dir
[  120.830087][ T5630] usb 6-1: USB disconnect, device number 5
[  120.891504][ T6437] Invalid argument reading file caps for ./file0
[  120.956412][ T6431] fido_id[6431]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  120.993955][ T5756] cp210x 4-1:0.0: failed to get vendor val 0x370c size 73: -71
[  120.993987][ T5756] cp210x 4-1:0.0: GPIO initialisation failed: -71
[  121.029788][ T5756] usb 4-1: cp210x converter now attached to ttyUSB0
[  121.067853][ T5756] usb 4-1: USB disconnect, device number 8
[  121.197636][ T5756] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  121.320979][ T5756] cp210x 4-1:0.0: device disconnected
[  124.587105][ T6448] loop0: detected capacity change from 0 to 131072
[  124.607219][ T6448] F2FS-fs (loop0): Wrong NAT boundary, start(2560) end(3584) blocks(12321792)
[  124.607250][ T6448] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[  124.688553][ T6448] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  124.709154][ T6448] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0
[  124.709326][ T6448] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  124.761337][ T6448] F2FS-fs (loop0): access invalid blkaddr:0
[  124.761367][ T6448] CPU: 1 UID: 0 PID: 6448 Comm: syz.0.196 Not tainted syzkaller #0 PREEMPT(full) 
[  124.761394][ T6448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026
[  124.761409][ T6448] Call Trace:
[  124.761425][ T6448]  <TASK>
[  124.761436][ T6448]  dump_stack_lvl+0xe8/0x150
[  124.761477][ T6448]  __f2fs_is_valid_blkaddr+0xe62/0x14f0
[  124.761526][ T6448]  sanity_check_extent_cache+0x1ab/0xa30
[  124.761569][ T6448]  ? srso_alias_return_thunk+0x5/0xfbef5
[  124.761598][ T6448]  ? f2fs_sanity_check_inline_data+0x70/0x740
[  124.761635][ T6448]  f2fs_iget+0x4211/0x6270
[  124.761703][ T6448]  f2fs_lookup+0x3ff/0xa50
[  124.761738][ T6448]  ? srso_alias_return_thunk+0x5/0xfbef5
[  124.761767][ T6448]  ? do_raw_spin_lock+0x12b/0x2f0
[  124.761803][ T6448]  ? __pfx_f2fs_lookup+0x10/0x10
[  124.761834][ T6448]  ? srso_alias_return_thunk+0x5/0xfbef5
[  124.761872][ T6448]  ? do_raw_spin_unlock+0xf5/0x200
[  124.761910][ T6448]  ? srso_alias_return_thunk+0x5/0xfbef5
[  124.761938][ T6448]  ? _raw_spin_unlock+0x28/0x50
[  124.761963][ T6448]  ? srso_alias_return_thunk+0x5/0xfbef5
[  124.761991][ T6448]  ? d_alloc+0x144/0x190
[  124.762034][ T6448]  lookup_one_qstr_excl+0x12d/0x360
[  124.762073][ T6448]  ? srso_alias_return_thunk+0x5/0xfbef5
[  124.762107][ T6448]  filename_create+0x20e/0x370
[  124.762141][ T6448]  ? __pfx_filename_create+0x10/0x10
[  124.762179][ T6448]  filename_mkdirat+0xd2/0x510
[  124.762214][ T6448]  ? __pfx_filename_mkdirat+0x10/0x10
[  124.762245][ T6448]  ? srso_alias_return_thunk+0x5/0xfbef5
[  124.762273][ T6448]  ? do_getname+0x151/0x250
[  124.762309][ T6448]  __se_sys_mkdirat+0x35/0x150
[  124.762345][ T6448]  do_syscall_64+0x166/0x520
[  124.762376][ T6448]  ? trace_irq_disable+0x3b/0x140
[  124.762402][ T6448]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  124.762438][ T6448]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  124.762463][ T6448] RIP: 0033:0x7f2f6359cfc7
[  124.762486][ T6448] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  124.762505][ T6448] RSP: 002b:00007f2f64449e58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  124.762531][ T6448] RAX: ffffffffffffffda RBX: 00007f2f64449ee0 RCX: 00007f2f6359cfc7
[  124.762550][ T6448] RDX: 00000000000001ff RSI: 0000200000000000 RDI: 00000000ffffff9c
[  124.762566][ T6448] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  124.762581][ T6448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000
[  124.762597][ T6448] R13: 00007f2f64449ea0 R14: 0000000000000000 R15: 0000000000000000
[  124.762634][ T6448]  </TASK>
[  124.763340][ T6448] F2FS-fs (loop0): sanity_check_extent_cache: inode (ino=4) extent info [0, 0, 5178624] is incorrect, run fsck to fix
[  124.788341][ T6448] F2FS-fs (loop0): access invalid blkaddr:0
[  124.788369][ T6448] CPU: 1 UID: 0 PID: 6448 Comm: syz.0.196 Not tainted syzkaller #0 PREEMPT(full) 
[  124.788396][ T6448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026
[  124.788410][ T6448] Call Trace:
[  124.788420][ T6448]  <TASK>
[  124.788430][ T6448]  dump_stack_lvl+0xe8/0x150
[  124.788478][ T6448]  __f2fs_is_valid_blkaddr+0xe62/0x14f0
[  124.788527][ T6448]  sanity_check_extent_cache+0x1ab/0xa30
[  124.788569][ T6448]  ? srso_alias_return_thunk+0x5/0xfbef5
[  124.788598][ T6448]  ? f2fs_sanity_check_inline_data+0x70/0x740
[  124.788636][ T6448]  f2fs_iget+0x4211/0x6270
[  124.788703][ T6448]  f2fs_lookup+0x3ff/0xa50
[  124.788738][ T6448]  ? srso_alias_return_thunk+0x5/0xfbef5
[  124.788767][ T6448]  ? do_raw_spin_lock+0x12b/0x2f0
[  124.788803][ T6448]  ? __pfx_f2fs_lookup+0x10/0x10
[  124.788834][ T6448]  ? srso_alias_return_thunk+0x5/0xfbef5
[  124.788872][ T6448]  ? do_raw_spin_unlock+0xf5/0x200
[  124.788910][ T6448]  ? srso_alias_return_thunk+0x5/0xfbef5
[  124.788939][ T6448]  ? _raw_spin_unlock+0x28/0x50
[  124.788964][ T6448]  ? srso_alias_return_thunk+0x5/0xfbef5
[  124.788992][ T6448]  ? d_alloc+0x144/0x190
[  124.789035][ T6448]  lookup_one_qstr_excl+0x12d/0x360
[  124.789074][ T6448]  ? srso_alias_return_thunk+0x5/0xfbef5
[  124.789108][ T6448]  filename_create+0x20e/0x370
[  124.789143][ T6448]  ? __pfx_filename_create+0x10/0x10
[  124.789181][ T6448]  filename_mkdirat+0xd2/0x510
[  124.789220][ T6448]  ? __pfx_filename_mkdirat+0x10/0x10
[  124.789251][ T6448]  ? srso_alias_return_thunk+0x5/0xfbef5
[  124.789280][ T6448]  ? do_getname+0x151/0x250
[  124.789316][ T6448]  __se_sys_mkdirat+0x35/0x150
[  124.789347][ T6448]  do_syscall_64+0x166/0x520
[  124.789377][ T6448]  ? trace_irq_disable+0x3b/0x140
[  124.789403][ T6448]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  124.789435][ T6448]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  124.789466][ T6448] RIP: 0033:0x7f2f6359cfc7
[  124.789488][ T6448] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  124.789508][ T6448] RSP: 002b:00007f2f64449e58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  124.789534][ T6448] RAX: ffffffffffffffda RBX: 00007f2f64449ee0 RCX: 00007f2f6359cfc7
[  124.789552][ T6448] RDX: 00000000000001ff RSI: 0000200000000000 RDI: 00000000ffffff9c
[  124.789568][ T6448] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  124.789583][ T6448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000
[  124.789599][ T6448] R13: 00007f2f64449ea0 R14: 0000000000000000 R15: 0000000000000000
[  124.789637][ T6448]  </TASK>
[  124.789673][ T6448] F2FS-fs (loop0): sanity_check_extent_cache: inode (ino=4) extent info [0, 0, 5178624] is incorrect, run fsck to fix
[  125.033745][ T6461] loop4: detected capacity change from 0 to 764
[  125.051714][ T6463] FAULT_INJECTION: forcing a failure.
[  125.051714][ T6463] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  125.051751][ T6463] CPU: 1 UID: 0 PID: 6463 Comm: syz.2.201 Not tainted syzkaller #0 PREEMPT(full) 
[  125.051778][ T6463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026
[  125.051793][ T6463] Call Trace:
[  125.051804][ T6463]  <TASK>
[  125.051814][ T6463]  dump_stack_lvl+0xe8/0x150
[  125.051855][ T6463]  should_fail_ex+0x410/0x560
[  125.051890][ T6463]  _copy_from_user+0x2d/0xb0
[  125.051931][ T6463]  __x64_sys_clock_adjtime+0x11e/0x340
[  125.051973][ T6463]  ? __pfx___x64_sys_clock_adjtime+0x10/0x10
[  125.052033][ T6463]  ? srso_alias_return_thunk+0x5/0xfbef5
[  125.052062][ T6463]  ? rcu_is_watching+0x16/0xb0
[  125.052093][ T6463]  ? srso_alias_return_thunk+0x5/0xfbef5
[  125.052136][ T6463]  do_syscall_64+0x166/0x520
[  125.052167][ T6463]  ? trace_irq_disable+0x3b/0x140
[  125.052193][ T6463]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.052225][ T6463]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.052250][ T6463] RIP: 0033:0x7f5a1499e159
[  125.052273][ T6463] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  125.052292][ T6463] RSP: 002b:00007f5a15918028 EFLAGS: 00000246 ORIG_RAX: 0000000000000131
[  125.052318][ T6463] RAX: ffffffffffffffda RBX: 00007f5a14c25fa0 RCX: 00007f5a1499e159
[  125.052336][ T6463] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[  125.052351][ T6463] RBP: 00007f5a14a3506b R08: 0000000000000000 R09: 0000000000000000
[  125.052366][ T6463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  125.052381][ T6463] R13: 00007f5a14c26038 R14: 00007f5a14c25fa0 R15: 00007ffc18a14398
[  125.052419][ T6463]  </TASK>
[  125.081847][ T5728] usb 4-1: new full-speed USB device number 9 using dummy_hcd
[  125.165663][ T6461] isofs: Unable to find the "." directory for NFS.
[  125.234293][  T971] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  125.259521][ T5728] usb 4-1: New USB device found, idVendor=04b4, idProduct=ed81, bcdDevice= 0.00
[  125.263922][ T5728] usb 4-1: config 0 interface 0 altsetting 222 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  125.263957][ T5728] usb 4-1: config 0 interface 0 has no altsetting 0
[  125.263993][ T5728] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.283805][ T5728] usb 4-1: config 0 descriptor??
[  125.285026][ T6459] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  125.422052][  T971] usb 6-1: Using ep0 maxpacket: 16
[  125.427996][  T971] usb 6-1: New USB device found, idVendor=046d, idProduct=c215, bcdDevice= 0.00
[  125.438840][  T971] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  125.438873][  T971] usb 6-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  125.438902][  T971] usb 6-1: config 0 interface 0 has no altsetting 0
[  125.438937][  T971] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.461367][  T971] usb 6-1: config 0 descriptor??
[  126.605230][ T5728] hid_parser_main: 5 callbacks suppressed
[  126.605255][ T5728] cypress 0003:04B4:ED81.0006: unknown main item tag 0x1
[  126.605328][ T5728] cypress 0003:04B4:ED81.0006: invalid report_size -1267609179
[  126.605345][ T5728] cypress 0003:04B4:ED81.0006: item 0 4 1 7 parsing failed
[  126.606115][ T5728] cypress 0003:04B4:ED81.0006: parse failed
[  126.606219][ T5728] cypress 0003:04B4:ED81.0006: probe with driver cypress failed with error -22
[  126.628659][  T971] input: HID 046d:c215 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:046D:C215.0007/input/input9
[  126.885035][  T971] logitech 0003:046D:C215.0007: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 046d:c215] on usb-dummy_hcd.5-1/input0
[  126.901155][  T971] usb 6-1: USB disconnect, device number 6
[  127.008110][ T5728] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  127.161940][ T5728] usb 5-1: Using ep0 maxpacket: 32
[  127.163409][ T5728] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  127.165511][ T5728] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  127.226054][ T5728] usb 5-1: config 0 descriptor??
[  127.304051][ T6484] FAULT_INJECTION: forcing a failure.
[  127.304051][ T6484] name failslab, interval 1, probability 0, space 0, times 0
[  127.304089][ T6484] CPU: 0 UID: 0 PID: 6484 Comm: syz.5.208 Not tainted syzkaller #0 PREEMPT(full) 
[  127.304116][ T6484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026
[  127.304131][ T6484] Call Trace:
[  127.304142][ T6484]  <TASK>
[  127.304152][ T6484]  dump_stack_lvl+0xe8/0x150
[  127.304193][ T6484]  should_fail_ex+0x410/0x560
[  127.304228][ T6484]  should_failslab+0xa8/0x100
[  127.304262][ T6484]  __kmalloc_cache_noprof+0xa3/0x600
[  127.304288][ T6484]  ? srso_alias_return_thunk+0x5/0xfbef5
[  127.304320][ T6484]  ? __se_sys_fspick+0x203/0x3c0
[  127.304347][ T6484]  ? __se_sys_fspick+0x203/0x3c0
[  127.304383][ T6484]  __se_sys_fspick+0x203/0x3c0
[  127.304414][ T6484]  ? __pfx___se_sys_fspick+0x10/0x10
[  127.304466][ T6484]  do_syscall_64+0x166/0x520
[  127.304497][ T6484]  ? trace_irq_disable+0x3b/0x140
[  127.304522][ T6484]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  127.304554][ T6484]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  127.304579][ T6484] RIP: 0033:0x7f742059e159
[  127.304602][ T6484] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  127.304622][ T6484] RSP: 002b:00007f74213d9028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b1
[  127.304647][ T6484] RAX: ffffffffffffffda RBX: 00007f7420825fa0 RCX: 00007f742059e159
[  127.304666][ T6484] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c
[  127.304682][ T6484] RBP: 00007f742063506b R08: 0000000000000000 R09: 0000000000000000
[  127.304698][ T6484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  127.304713][ T6484] R13: 00007f7420826038 R14: 00007f7420825fa0 R15: 00007ffe8450ec48
[  127.304751][ T6484]  </TASK>
[  127.527699][ T5728] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  127.629323][ T6485] fido_id[6485]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  127.660767][ T5728] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  127.667726][ T6487] loop1: detected capacity change from 0 to 256
[  127.670377][ T5728] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  127.670428][ T5728] usb 5-1: media controller created
[  127.781390][ T5756] usb 4-1: USB disconnect, device number 9
[  127.792907][ T6487] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  128.527761][ T5728] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  128.903182][ T6506] netlink: 8 bytes leftover after parsing attributes in process `syz.3.214'.
[  129.132189][    C1] raw-gadget.1 gadget.4: ignoring, device is not running
[  129.133736][ T5728] az6027: usb out operation failed. (-32)
[  129.133754][ T5728] stb0899_attach: Driver disabled by Kconfig
[  129.133765][ T5728] az6027: no front-end attached
[  129.133765][ T5728] 
[  129.134019][    C1] raw-gadget.1 gadget.4: ignoring, device is not running
[  129.135310][ T5728] az6027: usb out operation failed. (-32)
[  129.135327][ T5728] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  129.182025][ T5728] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input10
[  129.226603][ T5728] dvb-usb: schedule remote query interval to 400 msecs.
[  129.226630][ T5728] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  129.253414][ T5728] usb 5-1: USB disconnect, device number 5
[  129.523650][ T5728] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  129.542972][   T10] usb 4-1: new full-speed USB device number 10 using dummy_hcd
[  129.840595][ T6526] loop0: detected capacity change from 0 to 32768
[  129.842739][ T6526] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.224 (6526)
[  129.858176][ T6526] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  129.858211][ T6526] BTRFS info (device loop0): using sha256 checksum algorithm
[  129.868556][ T6518] loop3: detected capacity change from 0 to 512
[  129.904025][ T6518] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002]
[  129.904137][ T6518] System zones: 0-2, 18-18, 34-35
[  129.950292][ T6518] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  129.950402][ T6518] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  130.161657][  T971] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  130.268412][   T10] usb 4-1: unable to get BOS descriptor or descriptor too short
[  130.310965][  T971] usb 6-1: Using ep0 maxpacket: 16
[  130.311871][  T971] usb 6-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00
[  130.325807][  T971] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  130.325861][  T971] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  130.325889][  T971] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  130.325914][  T971] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  130.325950][  T971] usb 6-1: config 0 interface 0 has no altsetting 0
[  130.325987][  T971] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  130.351411][  T971] usb 6-1: config 0 descriptor??
[  130.533445][ T6526] BTRFS info (device loop0): enabling ssd optimizations
[  130.533477][ T6526] BTRFS info (device loop0): turning on sync discard
[  130.533496][ T6526] BTRFS info (device loop0): enabling free space tree
[  130.533518][ T6526] BTRFS info (device loop0): use zlib compression, level 3
[  130.547912][   T10] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[  130.583549][   T10] usb 4-1: unable to read config index 0 descriptor/start: -71
[  130.583593][   T10] usb 4-1: can't read configurations, error -71
[  130.746592][ T5728] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  131.155953][ T5728] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[  131.511621][ T5728] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  131.511654][ T5728] usb 5-1: Product: syz
[  131.512962][ T5728] usb 5-1: SerialNumber: syz
[  131.516779][ T5728] usb 5-1: config 0 descriptor??
[  132.103575][   T31] audit: type=1800 audit(1789721432.927:5): pid=6561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.224" name="file1" dev="loop0" ino=260 res=0 errno=0
[  132.110987][ T1308] ieee802154 phy0 wpan0: encryption failed: -22
[  132.111068][ T1308] ieee802154 phy1 wpan1: encryption failed: -22
[  132.238451][ T5728] hso 5-1:0.0: Failed to find BULK eps
[  132.414783][  T971] logitech-djreceiver 0003:046D:C53A.0008: hiddev0,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.5-1/input0
[  132.445870][ T5728] usb 5-1: USB disconnect, device number 6
[  132.517459][ T5623] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  132.523821][ T5616] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.550519][ T5755] usb 6-1: USB disconnect, device number 7
[  132.844217][ T5728] usb 2-1: new full-speed USB device number 5 using dummy_hcd
[  132.887770][ T6567] fido_id[6567]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  133.007511][ T5728] usb 2-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44
[  133.016634][ T5728] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  133.034569][ T5728] usb 2-1: config 0 descriptor??
[  133.054345][ T5728] pwc: Samsung MPC-C10 USB webcam detected.
[  133.181871][   T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  133.331883][   T10] usb 1-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00
[  133.333134][   T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  133.333181][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  133.408537][ T5728] pwc: send_video_command error -71
[  133.408558][ T5728] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  133.408663][ T5728] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71
[  133.434919][ T5728] usb 2-1: USB disconnect, device number 5
[  133.678964][   T10] qmi_wwan 1-1:1.0: cdc-wdm0: USB WDM device
[  133.744368][   T10] wwan wwan0: port wwan0qmi0 attached
[  133.892653][ T5728] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  133.924407][   T10] qmi_wwan 1-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.0-1, WWAN/QMI device, 12:af:03:01:a8:67
[  133.926548][   T10] usb 1-1: USB disconnect, device number 6
[  133.930265][   T10] qmi_wwan 1-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.0-1, WWAN/QMI device
[  134.046177][ T5728] usb 2-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44
[  134.052830][ T5728] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  134.085936][   T10] wwan wwan0: port wwan0qmi0 disconnected
[  134.095962][ T5728] usb 2-1: config 0 descriptor??
[  134.154622][ T5728] pwc: Samsung MPC-C10 USB webcam detected.
[  134.718659][ T6597] loop5: detected capacity change from 0 to 32768
[  134.724327][ T6597] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.243 (6597)
[  134.728328][ T5728] pwc: recv_control_msg error -32 req 02 val 2b00
[  134.731764][ T6597] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  134.731795][ T6597] BTRFS info (device loop5): using sha256 checksum algorithm
[  134.755946][ T5728] pwc: recv_control_msg error -71 req 02 val 2700
[  134.757366][ T5728] pwc: recv_control_msg error -71 req 04 val 1700
[  134.758990][ T5728] pwc: recv_control_msg error -71 req 02 val 2c00
[  134.761115][ T5728] pwc: recv_control_msg error -71 req 04 val 1000
[  134.761973][ T5728] pwc: recv_control_msg error -71 req 04 val 1300
[  134.806698][ T5728] pwc: recv_control_msg error -71 req 04 val 1400
[  134.808707][ T5728] pwc: recv_control_msg error -71 req 02 val 2000
[  134.810700][ T5728] pwc: recv_control_msg error -71 req 02 val 2100
[  134.812548][ T5728] pwc: recv_control_msg error -71 req 02 val 2200
[  134.847433][ T5728] pwc: recv_control_msg error -71 req 06 val 0600
[  134.868737][ T5728] pwc: recv_control_msg error -71 req 04 val 1500
[  134.894375][ T5728] pwc: recv_control_msg error -71 req 02 val 2500
[  134.904536][ T5728] pwc: recv_control_msg error -71 req 02 val 2400
[  134.904991][ T5728] pwc: recv_control_msg error -71 req 02 val 2600
[  134.905430][ T5728] pwc: recv_control_msg error -71 req 02 val 2900
[  134.907575][ T5728] pwc: recv_control_msg error -71 req 02 val 2800
[  134.910428][ T5728] pwc: recv_control_msg error -71 req 04 val 1100
[  134.914961][ T5728] pwc: recv_control_msg error -71 req 04 val 1200
[  134.951492][ T5728] pwc: Registered as video103.
[  134.964751][ T5728] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input11
[  134.985712][ T5728] usb 2-1: USB disconnect, device number 6
[  135.000457][ T6597] BTRFS info (device loop5): enabling ssd optimizations
[  135.000485][ T6597] BTRFS info (device loop5): turning on sync discard
[  135.000504][ T6597] BTRFS info (device loop5): enabling free space tree
[  135.000524][ T6597] BTRFS info (device loop5): use zlib compression, level 3
[  135.011209][ T6620] mmap: syz.3.240 (6620) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  135.771615][   T31] audit: type=1800 audit(1789721437.706:6): pid=6622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.243" name="file1" dev="loop5" ino=260 res=0 errno=0
[  136.241770][ T6630] bridge0: port 3(syz_tun) entered blocking state
[  136.241891][ T6630] bridge0: port 3(syz_tun) entered disabled state
[  136.242065][ T6630] syz_tun: entered allmulticast mode
[  136.249626][ T6630] syz_tun: entered promiscuous mode
[  136.252062][ T6630] bridge0: port 3(syz_tun) entered blocking state
[  136.252187][ T6630] bridge0: port 3(syz_tun) entered forwarding state
[  136.351478][ T5625] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  136.352093][ T6630] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  138.002691][ T6652] syzkaller1: entered promiscuous mode
[  138.002717][ T6652] syzkaller1: entered allmulticast mode
[  138.997155][   T31] audit: type=1326 audit(1789721441.316:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6662 comm="syz.0.260" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2f6359e159 code=0x0
[  139.415607][  T971] lg-g15 0003:046D:0A07.0009: hidraw0: USB HID v0.00 Device [syz0] on syz0
[  139.450692][  T971] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.0009/input/input12
[  139.511623][ T6674] loop2: detected capacity change from 0 to 164
[  139.702363][ T6678] FAULT_INJECTION: forcing a failure.
[  139.702363][ T6678] name failslab, interval 1, probability 0, space 0, times 0
[  139.702400][ T6678] CPU: 1 UID: 0 PID: 6678 Comm: syz.5.265 Not tainted syzkaller #0 PREEMPT(full) 
[  139.702433][ T6678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026
[  139.702448][ T6678] Call Trace:
[  139.702457][ T6678]  <TASK>
[  139.702468][ T6678]  dump_stack_lvl+0xe8/0x150
[  139.702509][ T6678]  should_fail_ex+0x410/0x560
[  139.702543][ T6678]  should_failslab+0xa8/0x100
[  139.702576][ T6678]  __kmalloc_cache_noprof+0xa3/0x600
[  139.702603][ T6678]  ? alloc_fs_context+0x66/0xd00
[  139.702627][ T6678]  ? alloc_fs_context+0x66/0xd00
[  139.702659][ T6678]  alloc_fs_context+0x66/0xd00
[  139.702682][ T6678]  ? srso_alias_return_thunk+0x5/0xfbef5
[  139.702712][ T6678]  ? security_capable+0x7e/0x2c0
[  139.702744][ T6678]  ? srso_alias_return_thunk+0x5/0xfbef5
[  139.702778][ T6678]  path_mount+0xc5e/0x1050
[  139.702817][ T6678]  ? user_path_at+0xd4/0x160
[  139.702862][ T6678]  __se_sys_mount+0x31d/0x420
[  139.702904][ T6678]  ? __pfx___se_sys_mount+0x10/0x10
[  139.702947][ T6678]  ? srso_alias_return_thunk+0x5/0xfbef5
[  139.702976][ T6678]  ? __x64_sys_mount+0x20/0xc0
[  139.703014][ T6678]  do_syscall_64+0x166/0x520
[  139.703045][ T6678]  ? trace_irq_disable+0x3b/0x140
[  139.703072][ T6678]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  139.703103][ T6678]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  139.703128][ T6678] RIP: 0033:0x7f742059e159
[  139.703150][ T6678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  139.703169][ T6678] RSP: 002b:00007f74213d9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  139.703196][ T6678] RAX: ffffffffffffffda RBX: 00007f7420825fa0 RCX: 00007f742059e159
[  139.703214][ T6678] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000000
[  139.703230][ T6678] RBP: 00007f742063506b R08: 0000200000000200 R09: 0000000000000000
[  139.703248][ T6678] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000000
[  139.703264][ T6678] R13: 00007f7420826038 R14: 00007f7420825fa0 R15: 00007ffe8450ec48
[  139.703302][ T6678]  </TASK>
[  139.756476][ T6677] fido_id[6677]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  139.768522][ T6684] netlink: 24 bytes leftover after parsing attributes in process `syz.4.266'.
[  139.768553][ T6684] netlink: 48 bytes leftover after parsing attributes in process `syz.4.266'.
[  139.945922][  T971] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  140.073425][ T6686] jffs2: notice: (6686) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  140.133272][  T971] usb 2-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[  140.134487][  T971] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  140.134538][  T971] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  140.134567][  T971] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  140.134590][  T971] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  140.134617][  T971] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[  140.134661][  T971] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  140.203734][ T6694] netlink: 12 bytes leftover after parsing attributes in process `syz.4.272'.
[  140.204098][ T6694] syz_tun: Device is already in use.
[  140.265817][ T6681] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  140.284530][  T971] keyspan 2-1:1.0: Keyspan 2 port adapter converter detected
[  140.386849][  T971] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 84
[  140.386947][  T971] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 2
[  140.454541][  T971] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  140.489222][  T971] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 88
[  140.489316][  T971] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 6
[  140.529797][  T971] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  141.525257][ T5630] usb 2-1: USB disconnect, device number 7
[  141.558450][ T5630] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  141.612368][ T5630] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  141.613060][ T5630] keyspan 2-1:1.0: device disconnected
[  142.445982][ T6728] netlink: 16 bytes leftover after parsing attributes in process `syz.0.280'.
[  142.452273][ T6727] proc: Unknown parameter ''
[  142.464959][ T6730] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size
[  142.629156][ T6734] FAULT_INJECTION: forcing a failure.
[  142.629156][ T6734] name failslab, interval 1, probability 0, space 0, times 0
[  142.629194][ T6734] CPU: 0 UID: 0 PID: 6734 Comm: syz.3.283 Not tainted syzkaller #0 PREEMPT(full) 
[  142.629221][ T6734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026
[  142.629236][ T6734] Call Trace:
[  142.629245][ T6734]  <TASK>
[  142.629256][ T6734]  dump_stack_lvl+0xe8/0x150
[  142.629298][ T6734]  should_fail_ex+0x410/0x560
[  142.629332][ T6734]  should_failslab+0xa8/0x100
[  142.629367][ T6734]  __kmalloc_noprof+0xfe/0x720
[  142.629393][ T6734]  ? kstrdup_quotable+0x1a4/0x560
[  142.629451][ T6734]  ? kstrdup_quotable+0x1a4/0x560
[  142.629494][ T6734]  kstrdup_quotable+0x1a4/0x560
[  142.629543][ T6734]  ? __pfx_kstrdup_quotable+0x10/0x10
[  142.629577][ T6734]  ? mmput+0x66/0x70
[  142.629606][ T6734]  ? __entry_text_end+0xfdf57/0x102039
[  142.629634][ T6734]  ? get_cmdline+0x2b0/0x320
[  142.629668][ T6734]  kstrdup_quotable_cmdline+0x342/0x3c0
[  142.629708][ T6734]  __report_access+0x76/0x320
[  142.629744][ T6734]  task_work_run+0x1d9/0x270
[  142.629773][ T6734]  ? __pfx_task_work_run+0x10/0x10
[  142.629797][ T6734]  ? __se_sys_ptrace+0x340/0x3a0
[  142.629841][ T6734]  exit_to_user_mode_loop+0x204/0x770
[  142.629864][ T6734]  ? srso_alias_return_thunk+0x5/0xfbef5
[  142.629891][ T6734]  ? rcu_is_watching+0x16/0xb0
[  142.629931][ T6734]  do_syscall_64+0x328/0x520
[  142.629959][ T6734]  ? trace_irq_disable+0x3b/0x140
[  142.629984][ T6734]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  142.630015][ T6734]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  142.630040][ T6734] RIP: 0033:0x7ff1d139e159
[  142.630061][ T6734] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  142.630080][ T6734] RSP: 002b:00007ff1d22d8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000065
[  142.630107][ T6734] RAX: ffffffffffffffff RBX: 00007ff1d1625fa0 RCX: 00007ff1d139e159
[  142.630124][ T6734] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000010
[  142.630139][ T6734] RBP: 00007ff1d143506b R08: 0000000000000000 R09: 0000000000000000
[  142.630154][ T6734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  142.630169][ T6734] R13: 00007ff1d1626038 R14: 00007ff1d1625fa0 R15: 00007ffefed1c4a8
[  142.630207][ T6734]  </TASK>
[  142.630354][ T6734] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[5616] was attempted by "(null)"[6734]
[  143.823372][ T6748] sctp: [Deprecated]: syz.4.288 (pid 6748) Use of struct sctp_assoc_value in delayed_ack socket option.
[  143.823372][ T6748] Use struct sctp_sack_info instead
[  145.710502][ T6771] ip6tnl1: entered allmulticast mode
[  145.837034][ T6780] netlink: 8 bytes leftover after parsing attributes in process `syz.0.301'.
[  145.840730][ T6780] netlink: 28 bytes leftover after parsing attributes in process `syz.0.301'.
[  145.893726][   T59] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  145.893972][   T59] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  145.921086][   T10] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  146.111166][   T10] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  146.379745][ T6799] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[5626] was attempted by "ci-upstream-kasan-gce-root/syz-executor exec"[6799]
[  146.681051][ T5627] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  148.359343][ T6822] netlink: 24 bytes leftover after parsing attributes in process `syz.0.317'.
[  148.359373][ T6822] bond0: invalid ARP target 0.0.0.0 specified for addition
[  148.359391][ T6822] bond0: option arp_ip_target: invalid value (0)
[  148.643470][ T6830] ip_tables: iptables: counters copy to user failed while replacing table
[  148.762111][ T6836] warning: `syz.2.322' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  148.770282][ T6838] jffs2: notice: (6838) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  148.976993][ T6842] netlink: 3568 bytes leftover after parsing attributes in process `syz.1.324'.
[  150.341133][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  151.550180][ T6877] loop4: detected capacity change from 0 to 32768
[  151.557781][ T6877] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.335 (6877)
[  151.575129][ T6877] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  151.575162][ T6877] BTRFS info (device loop4): using sha256 checksum algorithm
[  151.709707][ T6877] BTRFS info (device loop4): enabling ssd optimizations
[  151.709737][ T6877] BTRFS info (device loop4): turning on sync discard
[  151.709756][ T6877] BTRFS info (device loop4): enabling free space tree
[  151.709776][ T6877] BTRFS info (device loop4): use zlib compression, level 3
[  152.431138][   T31] audit: type=1800 audit(1789721454.356:8): pid=6899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.335" name="file1" dev="loop4" ino=260 res=0 errno=0
[  152.981330][ T6904] netlink: 12 bytes leftover after parsing attributes in process `syz.3.340'.
[  153.038254][ T5626] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  153.188600][ T6905] loop2: detected capacity change from 0 to 32768
[  153.190224][ T6905] BTRFS info: device /dev/loop2 (7:2) using temp-fsid a4303f77-2dea-43c8-ba95-2f846fa19480
[  153.190284][ T6905] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.339 (6905)
[  153.199300][ T6905] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  153.199331][ T6905] BTRFS info (device loop2): using sha256 checksum algorithm
[  153.374174][ T6905] BTRFS info (device loop2): enabling ssd optimizations
[  153.374205][ T6905] BTRFS info (device loop2): turning on sync discard
[  153.374224][ T6905] BTRFS info (device loop2): enabling free space tree
[  153.374245][ T6905] BTRFS info (device loop2): use zlib compression, level 3
[  154.154932][   T31] audit: type=1800 audit(1789721456.106:9): pid=6935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.339" name="file1" dev="loop2" ino=260 res=0 errno=0
[  154.226910][ T6933] bridge0: port 3(veth0) entered blocking state
[  154.230175][ T6933] bridge0: port 3(veth0) entered disabled state
[  154.299050][ T6933] veth0: entered allmulticast mode
[  154.390358][ T6933] veth0: entered promiscuous mode
[  154.412393][ T6933] bridge0: port 3(veth0) entered blocking state
[  154.412513][ T6933] bridge0: port 3(veth0) entered forwarding state
[  155.402262][ T5612] BTRFS info (device loop2): last unmount of filesystem a4303f77-2dea-43c8-ba95-2f846fa19480
[  155.590187][ T6948] netlink: zone id is out of range
[  155.590418][ T6948] netlink: zone id is out of range
[  155.591081][ T6948] netlink: zone id is out of range
[  155.591386][ T6948] netlink: zone id is out of range
[  155.603847][ T6948] netlink: zone id is out of range
[  155.610222][ T6948] netlink: zone id is out of range
[  155.610506][ T6948] netlink: zone id is out of range
[  155.610549][ T6948] netlink: zone id is out of range
[  155.612890][ T6948] netlink: zone id is out of range
[  155.613023][ T6948] netlink: zone id is out of range
[  157.070646][ T6970] 9p: Bad value for 'rfdno'
[  157.338176][ T6978] loop1: detected capacity change from 0 to 256
[  157.788167][ T6993] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-61)
[  158.138033][ T7002] loop2: detected capacity change from 0 to 512
[  158.206499][ T7002] EXT4-fs error (device loop2) in ext4_process_orphan:346: Out of memory
[  158.224923][ T7002] loop2: lost filesystem error report for type 5 error -12
[  158.230891][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  158.230914][    C0] EXT4-fs (loop2): initial error at time 1789721460: ext4_process_orphan:346
[  158.230942][    C0] EXT4-fs (loop2): last error at time 1789721460: ext4_process_orphan:346
[  158.288862][ T7002] EXT4-fs (loop2): 2 truncates cleaned up
[  158.304625][ T7002] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  158.380572][ T7008] FAULT_INJECTION: forcing a failure.
[  158.380572][ T7008] name failslab, interval 1, probability 0, space 0, times 0
[  158.380614][ T7008] CPU: 0 UID: 0 PID: 7008 Comm: syz.1.371 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  158.380648][ T7008] Tainted: [L]=SOFTLOCKUP
[  158.380657][ T7008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026
[  158.380672][ T7008] Call Trace:
[  158.380681][ T7008]  <TASK>
[  158.380692][ T7008]  dump_stack_lvl+0xe8/0x150
[  158.380734][ T7008]  should_fail_ex+0x410/0x560
[  158.380768][ T7008]  should_failslab+0xa8/0x100
[  158.380803][ T7008]  __kmalloc_noprof+0xfe/0x720
[  158.380831][ T7008]  ? prepare_creds+0x30/0x820
[  158.380860][ T7008]  ? security_prepare_creds+0x52/0x360
[  158.380887][ T7008]  ? security_prepare_creds+0x52/0x360
[  158.380915][ T7008]  ? kmem_cache_alloc_noprof+0x156/0x600
[  158.380959][ T7008]  security_prepare_creds+0x52/0x360
[  158.380991][ T7008]  prepare_creds+0x57d/0x820
[  158.381025][ T7008]  lookup_user_key+0x316/0x1150
[  158.381062][ T7008]  ? __pfx_lookup_user_key+0x10/0x10
[  158.381095][ T7008]  ? __pfx_lookup_user_key_possessed+0x10/0x10
[  158.381133][ T7008]  ? srso_alias_return_thunk+0x5/0xfbef5
[  158.381163][ T7008]  ? _copy_from_user+0x94/0xb0
[  158.381195][ T7008]  ? srso_alias_return_thunk+0x5/0xfbef5
[  158.381224][ T7008]  ? memdup_user+0x99/0xd0
[  158.381256][ T7008]  __se_sys_add_key+0x315/0x420
[  158.381299][ T7008]  ? __pfx___se_sys_add_key+0x10/0x10
[  158.381340][ T7008]  ? srso_alias_return_thunk+0x5/0xfbef5
[  158.381376][ T7008]  ? srso_alias_return_thunk+0x5/0xfbef5
[  158.381406][ T7008]  ? __x64_sys_add_key+0x20/0xc0
[  158.381454][ T7008]  do_syscall_64+0x166/0x520
[  158.381486][ T7008]  ? trace_irq_disable+0x3b/0x140
[  158.381512][ T7008]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  158.381544][ T7008]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  158.381570][ T7008] RIP: 0033:0x7f048019e159
[  158.381592][ T7008] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  158.381612][ T7008] RSP: 002b:00007f0481067028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[  158.381638][ T7008] RAX: ffffffffffffffda RBX: 00007f0480425fa0 RCX: 00007f048019e159
[  158.381657][ T7008] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000200000000000
[  158.381674][ T7008] RBP: 00007f048023506b R08: fffffffffffffffe R09: 0000000000000000
[  158.381691][ T7008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  158.381707][ T7008] R13: 00007f0480426038 R14: 00007f0480425fa0 R15: 00007ffea8c47818
[  158.381746][ T7008]  </TASK>
[  158.771799][ T5612] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  159.621138][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  159.626574][ T7019] loop4: detected capacity change from 0 to 131072
[  159.650629][ T7019] F2FS-fs (loop4): invalid crc value
[  159.729068][ T7019] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  159.747905][ T7019] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  159.866344][ T7029] loop2: detected capacity change from 0 to 256
[  159.965684][ T7029] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x2ab34fd4, utbl_chksum : 0xe619d30d)
[  160.171034][ T5630] usb 1-1: new full-speed USB device number 7 using dummy_hcd
[  160.326904][ T5630] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  160.347616][ T5630] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  160.347644][ T5630] usb 1-1: Product: syz
[  160.347661][ T5630] usb 1-1: Manufacturer: syz
[  160.347677][ T5630] usb 1-1: SerialNumber: syz
[  160.386460][ T5630] usb 1-1: config 0 descriptor??
[  160.407871][ T7035] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  160.408007][ T7035] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  160.548193][ T7035] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  160.629243][ T7035] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  160.631258][ T7035] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  160.703618][ T5630] usb 1-1: USB disconnect, device number 7
[  160.713344][ T7011] loop3: detected capacity change from 0 to 32768
[  160.722280][ T7035] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  160.739233][ T7011] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.372 (7011)
[  160.781250][ T7035] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  160.781319][ T7035] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  160.865236][ T7035] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  160.878621][ T7011] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  160.878652][ T7011] BTRFS info (device loop3): using crc32c checksum algorithm
[  160.942216][ T7035] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  160.942371][ T7035] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  160.994175][ T7035] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  161.037522][ T7035] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  161.037615][ T7035] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  161.057171][ T5916] udevd[5916]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  161.087849][ T7011] BTRFS info (device loop3): enabling ssd optimizations
[  161.087879][ T7011] BTRFS info (device loop3): turning on flush-on-commit
[  161.087899][ T7011] BTRFS info (device loop3): enabling free space tree
[  161.087917][ T7011] BTRFS info (device loop3): enabling auto defrag
[  161.087938][ T7011] BTRFS info (device loop3): use lzo compression, level 1
[  161.087967][ T7011] BTRFS info (device loop3): max_inline set to 4096
[  161.164094][ T7035] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  161.179776][ T7035] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  161.180044][ T7035] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  161.228649][ T7035] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  161.334648][ T7062] loop0: detected capacity change from 0 to 1024
[  161.446731][ T7062] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  161.732086][ T5623] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.864994][ T5616] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  162.275394][ T7083] netlink: 'syz.3.395': attribute type 34 has an invalid length.
[  162.416537][ T5629] Bluetooth: hci0: command 0x0c1a tx timeout
[  162.437832][ T7088] loop0: detected capacity change from 0 to 256
[  162.651480][ T5629] Bluetooth: hci1: command 0x0c1a tx timeout
[  162.812651][ T5629] Bluetooth: hci2: command 0x0c1a tx timeout
[  162.918402][ T7105] jffs2: notice: (7105) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  162.972405][ T5629] Bluetooth: hci3: command 0x0c1a tx timeout
[  163.052737][ T5629] Bluetooth: hci4: command 0x0c1a tx timeout
[  163.210928][ T5629] Bluetooth: hci5: command 0x0c1a tx timeout
[  163.424770][ T7118] loop8: detected capacity change from 0 to 7
[  163.442428][ T7118]  loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2
[  163.442470][ T7118] loop8: partition table partially beyond EOD, truncated
[  163.442679][ T7118] loop8: p1 size 1905483274 extends beyond EOD, truncated
[  163.471746][ T7118] loop8: p2 start 121280928 is beyond EOD, truncated
[  163.663899][ T7123] input: syz1 as /devices/virtual/input/input13
[  163.757395][ T5916] udevd[5916]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory
[  164.484405][ T7140] loop5: detected capacity change from 0 to 4096
[  164.490976][ T5629] Bluetooth: hci0: command 0x0c1a tx timeout
[  164.587296][ T7140] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  164.730963][ T5629] Bluetooth: hci1: command 0x0c1a tx timeout
[  164.890936][ T5629] Bluetooth: hci2: command 0x0c1a tx timeout
[  165.001152][ T5630] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  165.052127][ T5629] Bluetooth: hci3: command 0x0c1a tx timeout
[  165.131239][ T5629] Bluetooth: hci4: command 0x0c1a tx timeout
[  165.151883][ T5630] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  165.151930][ T5630] usb 1-1: too many configurations: 9, using maximum allowed: 8
[  165.153511][ T5630] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  165.153563][ T5630] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  165.153594][ T5630] usb 1-1: config 0 interface 0 has no altsetting 0
[  165.154785][ T5630] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  165.154835][ T5630] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  165.154866][ T5630] usb 1-1: config 0 interface 0 has no altsetting 0
[  165.156032][ T5630] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  165.156081][ T5630] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  165.156112][ T5630] usb 1-1: config 0 interface 0 has no altsetting 0
[  165.157746][ T5630] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  165.157796][ T5630] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  165.157827][ T5630] usb 1-1: config 0 interface 0 has no altsetting 0
[  165.159132][ T5630] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  165.159182][ T5630] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  165.159212][ T5630] usb 1-1: config 0 interface 0 has no altsetting 0
[  165.160357][ T5630] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  165.160407][ T5630] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  165.160451][ T5630] usb 1-1: config 0 interface 0 has no altsetting 0
[  165.292849][ T5629] Bluetooth: hci5: command 0x0c1a tx timeout
[  165.386339][ T5630] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  165.386397][ T5630] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  165.386428][ T5630] usb 1-1: config 0 interface 0 has no altsetting 0
[  165.391243][ T5630] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  165.391296][ T5630] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  165.391326][ T5630] usb 1-1: config 0 interface 0 has no altsetting 0
[  165.424979][ T5630] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  165.425008][ T5630] usb 1-1: Product: syz
[  165.425023][ T5630] usb 1-1: Manufacturer: syz
[  165.425037][ T5630] usb 1-1: SerialNumber: syz
[  165.463691][ T5625] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  165.511733][ T5630] usb 1-1: config 0 descriptor??
[  165.544911][ T5630] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0
[  165.784519][    C0] usb 1-1: yurex_control_callback - control failed: -71
[  165.785741][ T5627] usb 1-1: USB disconnect, device number 8
[  165.813983][ T7155] netlink: 8 bytes leftover after parsing attributes in process `syz.4.424'.
[  165.834897][ T5627] yurex 1-1:0.0: USB YUREX #0 now disconnected
[  165.873111][ T7155] netlink: 8 bytes leftover after parsing attributes in process `syz.4.424'.
[  165.883531][ T6557] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  165.885140][   T50] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  165.885182][   T50] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  165.885221][   T50] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  166.071283][ T5755] usb 6-1: new full-speed USB device number 8 using dummy_hcd
[  166.164726][ T7168] loop4: detected capacity change from 0 to 128
[  166.173226][ T7168] EXT4-fs: Ignoring removed i_version option
[  166.221929][ T5755] usb 6-1: not running at top speed; connect to a high speed hub
[  166.221963][ T5755] usb 6-1: New USB device found, idVendor=046d, idProduct=152d, bcdDevice=ef.8f
[  166.222001][ T5755] usb 6-1: too many configurations: 241, using maximum allowed: 8
[  166.223696][ T5755] usb 6-1: config 0 has no interfaces?
[  166.224349][ T5755] usb 6-1: config 0 has no interfaces?
[  166.224867][ T5755] usb 6-1: config 0 has no interfaces?
[  166.225384][ T5755] usb 6-1: config 0 has no interfaces?
[  166.225873][ T5755] usb 6-1: config 0 has no interfaces?
[  166.226948][ T5755] usb 6-1: config 0 has no interfaces?
[  166.227443][ T5755] usb 6-1: config 0 has no interfaces?
[  166.228203][ T7168] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  166.230166][ T5755] usb 6-1: config 0 has no interfaces?
[  166.230471][ T7168] ext4 filesystem being mounted at /67/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  166.328189][ T7174] netlink: 16 bytes leftover after parsing attributes in process `syz.3.430'.
[  166.335082][ T5755] usb 6-1: New USB device strings: Mfr=179, Product=45, SerialNumber=160
[  166.335109][ T5755] usb 6-1: Product: syz
[  166.335126][ T5755] usb 6-1: Manufacturer: syz
[  166.335143][ T5755] usb 6-1: SerialNumber: syz
[  166.341403][ T5755] usb 6-1: config 0 descriptor??
[  166.531575][ T5626] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  166.571045][ T5629] Bluetooth: hci0: command 0x0c1a tx timeout
[  166.779008][ T5627] usb 6-1: USB disconnect, device number 8
[  166.811259][ T5629] Bluetooth: hci1: command 0x0c1a tx timeout
[  166.842537][ T7178] loop2: detected capacity change from 0 to 4096
[  166.891666][ T7185] loop0: detected capacity change from 0 to 512
[  166.939239][ T7190] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  166.956476][ T7185] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  166.956589][ T7185] ext4 filesystem being mounted at /76/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  166.971064][ T5629] Bluetooth: hci2: command 0x0c1a tx timeout
[  167.054668][   T31] audit: type=1800 audit(1789721469.376:10): pid=7185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.435" name="bus" dev="loop0" ino=18 res=0 errno=0
[  167.058387][   T31] audit: type=1800 audit(1789721469.376:11): pid=7192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.435" name="bus" dev="loop0" ino=18 res=0 errno=0
[  167.113971][ T7191] loop4: detected capacity change from 0 to 2048
[  167.132818][ T5629] Bluetooth: hci3: command 0x0c1a tx timeout
[  167.158980][ T7191] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  167.160963][ T5728] usb 2-1: new full-speed USB device number 8 using dummy_hcd
[  167.212417][ T5629] Bluetooth: hci4: command 0x0c1a tx timeout
[  167.285947][ T5623] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.301757][ T7194] loop3: detected capacity change from 0 to 2048
[  167.313289][ T5728] usb 2-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60
[  167.315252][ T5728] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  167.327437][ T5728] usb 2-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3
[  167.327485][ T5728] usb 2-1: Product: syz
[  167.327503][ T5728] usb 2-1: Manufacturer: syz
[  167.327520][ T5728] usb 2-1: SerialNumber: syz
[  167.370925][ T5629] Bluetooth: hci5: command 0x0c1a tx timeout
[  167.377031][ T5728] usb 2-1: config 0 descriptor??
[  167.404836][ T5728] keyspan 2-1:0.0: Keyspan 4 port adapter converter detected
[  167.410712][ T7194] NILFS (loop3): invalid segment: Magic number mismatch
[  167.410737][ T7194] NILFS (loop3): trying rollback from an earlier position
[  167.413813][ T5728] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81
[  167.413894][ T5728] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 88
[  167.448272][ T5728] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1
[  167.463357][ T5728] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0
[  167.483842][ T5728] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2
[  167.497770][ T5728] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1
[  167.499848][ T7194] NILFS (loop3): recovery complete
[  167.514919][ T7198] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  167.518480][ T5728] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 4
[  167.570370][ T5728] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2
[  167.588597][ T5728] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 6
[  167.607860][ T7194] NILFS (loop3): nilfs_sufile_do_free: segment 9 is already clean
[  167.608081][ T5728] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3
[  167.699595][ T7200] NILFS (loop3): nilfs_sufile_do_free: segment 9 is already clean
[  167.699966][ T7200] NILFS (loop3): nilfs_direct_assign (ino=4): invalid pointer: 0
[  167.699986][ T7200] NILFS error (device loop3): nilfs_bmap_assign: broken bmap (inode number=4)
[  167.734038][ T7200] Remounting filesystem read-only
[  167.734099][ T7200] NILFS (loop3): error -5 cleaning segments
[  168.116182][ T7200] NILFS (loop3): error -30 cleaning segments
[  168.205460][  T971] usb 2-1: USB disconnect, device number 8
[  168.733771][  T971] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0
[  168.762051][  T971] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1
[  168.773413][  T971] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2
[  168.788890][  T971] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3
[  168.804778][  T971] keyspan 2-1:0.0: device disconnected
[  168.882362][ T7209] net_ratelimit: 13 callbacks suppressed
[  168.882386][ T7209] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  168.912873][ T5616] VFS: Busy inodes after unmount of loop3 (nilfs2)
[  168.913138][ T5616] ------------[ cut here ]------------
[  168.913148][ T5616] kernel BUG at fs/super.c:765!
[  168.913195][ T5616] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI
[  168.936316][ T5616] CPU: 1 UID: 0 PID: 5616 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  168.947320][ T5616] Tainted: [L]=SOFTLOCKUP
[  168.951644][ T5616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026
[  168.961686][ T5616] RIP: 0010:generic_shutdown_super+0x2c7/0x2d0
[  168.967854][ T5616] Code: 03 42 80 3c 28 00 74 08 4c 89 f7 e8 73 1a ec ff 49 8b 16 48 81 c3 a8 06 00 00 48 c7 c7 20 a8 1f 8c 48 89 de e8 9a ff db fe 90 <0f> 0b 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90
[  168.987465][ T5616] RSP: 0018:ffffc90003e7fd10 EFLAGS: 00010246
[  168.993542][ T5616] RAX: 0000000000000030 RBX: ffff8880780ba6a8 RCX: d4d6b77ae9c91a00
[  169.001506][ T5616] RDX: 0000000000000000 RSI: 8000000000000000 RDI: 0000000000000000
[  169.009469][ T5616] RBP: 1ffff1100f0174f7 R08: ffffc90003e7fa87 R09: 1ffff920007cff50
[  169.017430][ T5616] R10: dffffc0000000000 R11: fffff520007cff51 R12: 0000000000000000
[  169.025394][ T5616] R13: dffffc0000000000 R14: ffffffff8f316020 R15: ffff8880780ba7b8
[  169.033360][ T5616] FS:  0000555579101500(0000) GS:ffff888124dce000(0000) knlGS:0000000000000000
[  169.042282][ T5616] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  169.048860][ T5616] CR2: 0000001b33723ffc CR3: 0000000058edd000 CR4: 0000000000350ef0
[  169.056828][ T5616] Call Trace:
[  169.060102][ T5616]  <TASK>
[  169.063032][ T5616]  kill_block_super+0x44/0xa0
[  169.067720][ T5616]  deactivate_locked_super+0xbc/0x110
[  169.073098][ T5616]  cleanup_mnt+0x3d3/0x460
[  169.077525][ T5616]  task_work_run+0x1d9/0x270
[  169.082118][ T5616]  ? __pfx_task_work_run+0x10/0x10
[  169.087234][ T5616]  exit_to_user_mode_loop+0x204/0x770
[  169.092611][ T5616]  ? srso_alias_return_thunk+0x5/0xfbef5
[  169.098247][ T5616]  ? rcu_is_watching+0x16/0xb0
[  169.103016][ T5616]  do_syscall_64+0x328/0x520
[  169.107606][ T5616]  ? trace_irq_disable+0x3b/0x140
[  169.112628][ T5616]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  169.118700][ T5616]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  169.124592][ T5616] RIP: 0033:0x7ff1d139f397
[  169.129004][ T5616] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  169.148604][ T5616] RSP: 002b:00007ffefed1b718 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  169.157014][ T5616] RAX: 0000000000000000 RBX: 00007ff1d14344bb RCX: 00007ff1d139f397
[  169.164972][ T5616] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffefed1b7d0
[  169.172930][ T5616] RBP: 00007ffefed1b7d0 R08: 00007ffefed1c7d0 R09: 00000000ffffffff
[  169.180892][ T5616] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffefed1c860
[  169.188855][ T5616] R13: 00007ff1d14344bb R14: 0000000000029035 R15: 00007ffefed1c8a0
[  169.196825][ T5616]  </TASK>
[  169.199825][ T5616] Modules linked in:
[  169.204546][ T5616] ---[ end trace 0000000000000000 ]---
[  169.681071][ T7213] loop5: detected capacity change from 0 to 131072
[  169.731108][ T7213] F2FS-fs (loop5): Test dummy encryption mode enabled
[  169.814784][ T7213] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  169.819814][ T7213] F2FS-fs (loop5): Mounted with checkpoint version = 1b41e955
[  169.843575][ 
** replaying previous printk message **
[  169.843575][ T7213] F2FS-fs (loop5): f2fs_convert_inline_folio: corrupted inline inode ino=7, i_addr[0]:0xff0000, run fsck to fix.
[  169.859753][ T5616] RIP: 0010:generic_shutdown_super+0x2c7/0x2d0
[  169.859797][ T5616] Code: 03 42 80 3c 28 00 74 08 4c 89 f7 e8 73 1a ec ff 49 8b 16 48 81 c3 a8 06 00 00 48 c7 c7 20 a8 1f 8c 48 89 de e8 9a ff db fe 90 <0f> 0b 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90
[  169.859818][ T5616] RSP: 0018:ffffc90003e7fd10 EFLAGS: 00010246
[  169.859841][ T5616] RAX: 0000000000000030 RBX: ffff8880780ba6a8 RCX: d4d6b77ae9c91a00
[  169.859859][ T5616] RDX: 0000000000000000 RSI: 8000000000000000 RDI: 0000000000000000
[  169.859876][ T5616] RBP: 1ffff1100f0174f7 R08: ffffc90003e7fa87 R09: 1ffff920007cff50
[  169.859894][ T5616] R10: dffffc0000000000 R11: fffff520007cff51 R12: 0000000000000000
[  169.859911][ T5616] R13: dffffc0000000000 R14: ffffffff8f316020 R15: ffff8880780ba7b8
[  169.859933][ T5616] FS:  0000555579101500(0000) GS:ffff888124dce000(0000) knlGS:0000000000000000
[  169.859954][ T5616] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  169.859971][ T5616] CR2: 0000001b33d13ff8 CR3: 0000000058edd000 CR4: 0000000000350ef0
[  169.859992][ T5616] Kernel panic - not syncing: Fatal exception
[  169.977830][ T5616] Kernel Offset: disabled
[  169.982141][ T5616] Rebooting in 86400 seconds..