last executing test programs:

4m52.406073363s ago: executing program 32 (id=1313):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cgroup.clone_children\x00', 0x2, 0x0)
sendfile(r1, r1, 0x0, 0x1)

4m43.283477749s ago: executing program 33 (id=1377):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

3m58.605777063s ago: executing program 1 (id=1789):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000540), 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x5, 0x0, 0x1, {0x77359400}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "3fae8a9ad451a727"}}, 0x48}, 0x1, 0x0, 0x0, 0x20008840}, 0x0)
sendmsg$can_bcm(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={0x5, 0x609f, 0x40000, {0x0, 0x2710}, {0x0, 0xea60}, {}, 0x1, @can={{0x3, 0x1}, 0x2, 0x3}}, 0x48}, 0x1, 0x0, 0x0, 0x24000805}, 0x44801)

3m58.132162515s ago: executing program 1 (id=1796):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a01010000000f000000000a0000060900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSETELEM={0x3c, 0xe, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x64}, 0x1, 0x0, 0x0, 0x8080}, 0x24008040)

3m57.918326671s ago: executing program 1 (id=1799):
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010000081000418e00000004fcff", 0x58}], 0x1)
capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x200002, 0x200003, 0x801, 0x4, 0x7, 0x4})
syz_genetlink_get_family_id$team(&(0x7f0000000000), r0)

3m57.199295156s ago: executing program 1 (id=1804):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xc0ed4040, &(0x7f0000000100)={[{@noblock_validity}, {@lazytime}, {@quota}, {@noblock_validity}, {@nobarrier}, {@noinit_itable}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x57}}, {@noload}]}, 0xf9, 0x48b, &(0x7f00000004c0)="$eJzs3MtvVNUfAPDvvZ2WlscPfogPCGgVjMRHS8tDFiZGowkLjUZdYFzVaSFIAQM1EUIUXWCMC0Pi3rg08S9wpRujrkx0iXtDQgwb0NWYO/fePoaZtkMHpjCfT3KZc+6Dc75z7rk999zbBtCzhrN/koj1EXE5IjZGRKVxh+H848a189V/rp2vJlGrvfl3kh0W16+drxb/RX3JrMtX1GpFfk2Tci++EzExPT11usiPzpx4f/TM2XPPHDsxcXTq6NTJ8YMH9+3dMXBgfH9H4sziur7to1Pbtx56+9Kr1cOX3v3lu6y+64vtZRydNJx/u0093unCumzDvHRS6WJFaEvWbv3FcjlqfX0xNLttY7z8aVcrB9xulWY/nwsXasA9LBuoA72o/EGf3f+Wy1LjhQ6OPbru6gt5RFncN4ol31KJtNinv+H+tpMGI+LwhX+/zpa4TfMQAADz/ZCNf55uNv5L44F5+/2veIayKSL+HxGbI+K+iNgSEfdH1Pd9MCIearP8xickN49/0isLsrW+NktYXDb+e654trVw/FeO/mJTX5HbUI+/PzlybHpqT/Gd7I7+NVl+bMEhC/340u9fNq77ophmH543/suWrPyFEaZXGifoJidmJlYeee7qJxHbKs3iT2YH+klEbI2IbbdYxrEnv93ealuz+Mux8JI6cCdS+ybiibz9L0RD/KWk5fPJsWcPjO8fHYzpqT2j5Vlxs19/u/h6q/JXFH8HZO2/tun5n8ef3SMmgxFnzp47Xn9ee+YWCvnzs2rSYtOWIv7+lvHffP5Xd0UMJG/V0wPlXsXnQPJK9jFUrv9wYmbm9PjcsWW+/jmWx79751z8EzHX/zfnt2eR/PHG7PE7IuLhiHikaLtHI+KxiNi5SPg/v7jrvVbbWrf/IrPyHZTFP7lI+2eXvCw11/7tJ/qO//R9q/JrS57/Wfvvq6d2F2uWc/1bbgVX8t0BAADA3SKtvwOfpCOz6TQdGcnf4d8Sa9NKRDx15NQHJyfzd+U3RX9aznRtnDcfOlbMDZf58Yb83mLe+Ku+oXp+pHpqerLbwUOPW9ei/2f+6uyjFmA1uqfe6APaov9D79L/oXfp/9C7nu92BYDuGGi++uM7XQ+gK9of/w/elnoAd577f+hd+j/0Lv0felLL341PV/Qr/3drorI6qtE0MbQ6qlEmIl1yn3SVVHV5idc+z7vEaqlPmags+49Z3GJiTdNNTS8Xh9bf2csTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAiv0XAAD//1ub24E=")
mount$overlay(0x0, &(0x7f0000002e40)='./file0\x00', &(0x7f0000002e80), 0x0, &(0x7f0000002ec0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002f00)='./file0\x00', 0x0, 0x0)
getdents64(r0, 0x0, 0x0)

3m56.696795209s ago: executing program 1 (id=1809):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r1)
sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x70bd25, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000010}, 0x0)

3m55.899896704s ago: executing program 1 (id=1814):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000040)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0)
sendfile(r1, r1, 0x0, 0x2)

3m54.930789334s ago: executing program 34 (id=1814):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000040)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0)
sendfile(r1, r1, 0x0, 0x2)

3m43.467717846s ago: executing program 3 (id=1924):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002680)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002700)={&(0x7f0000002740)={0x2c, r0, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}]}, 0x2c}}, 0x0)

3m43.3933397s ago: executing program 3 (id=1926):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'geneve1\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x401, 0x0, 0x25df5bff, {0x0, 0x0, 0x0, r2, 0x59010, 0x54042}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x12, @empty}]}}}]}, 0x48}}, 0x40)

3m43.106860086s ago: executing program 3 (id=1929):
syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x495, &(0x7f0000000780)="$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")
mknod$loop(&(0x7f0000000c40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
mkdir(&(0x7f0000000180)='./bus\x00', 0x63)
mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x8, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})

3m42.850098656s ago: executing program 6 (id=1933):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/class/ptp/ptp0/n_vclocks\x00', 0x2, 0x0)
write$cgroup_pid(r0, &(0x7f0000000100), 0x12)

3m42.698051623s ago: executing program 6 (id=1936):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x0, 0x10}, 0xc)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23, 0x4, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000000180)='\x00', 0x1, 0x0, &(0x7f00000001c0)={0xa, 0x4e23, 0x20, @loopback, 0x1}, 0x1c)

3m42.638272954s ago: executing program 3 (id=1937):
syz_mount_image$ext4(&(0x7f0000000980)='ext2\x00', &(0x7f0000000900)='./file0\x00', 0x201804d, &(0x7f000001a1c0), 0x1, 0x491, &(0x7f000001a200)="$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")
mount$overlay(0x0, &(0x7f0000000e80)='./file0\x00', &(0x7f0000000ec0), 0x0, &(0x7f0000000f00)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000f40)='./file0\x00', 0x141104, 0x80)
getdents64(r0, 0x0, 0x0)

3m42.279624977s ago: executing program 6 (id=1941):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000))
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, 0x0)

3m41.76791611s ago: executing program 6 (id=1944):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c00000002060108000034e4000000000000000805000400030000000900020073797a3100000000050005000200000014000300686173683a69702c706f72742c6970000500010007"], 0x4c}, 0x1, 0x0, 0x0, 0x20044095}, 0xc012)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)={0x6c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10004893}, 0x80)

3m41.392946034s ago: executing program 3 (id=1946):
r0 = socket(0x200000000000011, 0x2, 0xd)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000040)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @multicast}, 0x14)
syz_emit_ethernet(0xfdef, &(0x7f0000000580)={@link_local={0x3}, @random="ea6576681159", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @local}, @info_reply={0x10, 0x0, 0x0, 0x6, 0x7}}}}}, 0x0)

3m41.226756831s ago: executing program 6 (id=1947):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0xfffffffc, 0x0, 0x2, 0x2}})
write$binfmt_misc(r0, &(0x7f0000000000), 0x6)

3m40.835841443s ago: executing program 6 (id=1950):
syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000bc0)='./file1\x00', 0xc00, &(0x7f0000000c00)=ANY=[], 0x9, 0xc1e, &(0x7f0000001440)="$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")
mknod$loop(&(0x7f0000002080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6000, 0x1)
sync()
unlink(&(0x7f0000002180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

3m39.958996058s ago: executing program 3 (id=1956):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000001f00)='cgroup.clone_children\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f0000000040), 0x1)

3m39.288647993s ago: executing program 35 (id=1956):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000001f00)='cgroup.clone_children\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f0000000040), 0x1)

3m25.727514309s ago: executing program 36 (id=1950):
syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000bc0)='./file1\x00', 0xc00, &(0x7f0000000c00)=ANY=[], 0x9, 0xc1e, &(0x7f0000001440)="$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")
mknod$loop(&(0x7f0000002080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6000, 0x1)
sync()
unlink(&(0x7f0000002180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

3m11.926676425s ago: executing program 5 (id=2190):
r0 = syz_io_uring_setup(0x18d7, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x177}, &(0x7f0000ffe000), &(0x7f0000ffe000), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x2, &(0x7f0000000180), 0xfe)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00')
read$FUSE(r1, &(0x7f0000002140)={0x2020}, 0x2020)

3m11.143648234s ago: executing program 5 (id=2194):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x80201)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000800)={0xff, 0x52, 0x0, 'queue0\x00'})
write$sndseq(r0, &(0x7f00000008c0)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40045304, &(0x7f0000000900)={{0x0, 0x83}, {0x3, 0xfa}, 0x5, 0x4, 0x7})

3m9.99740293s ago: executing program 5 (id=2198):
setns(0xc9, 0x0)
r0 = socket(0x2a, 0x2, 0x9)
connect(r0, &(0x7f0000000ac0)=@qipcrtr={0x2a, 0x1, 0x7fff}, 0x80)
writev(r0, &(0x7f0000000c40)=[{&(0x7f0000000b40)="dd0b", 0x2}], 0x1)

3m9.414789578s ago: executing program 5 (id=2201):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1008002, &(0x7f0000002d80)={[{@journal_ioprio}]}, 0x3, 0x5ee, &(0x7f00000025c0)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000002bc0)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0)
setxattr$trusted_overlay_origin(&(0x7f0000002c00)='./file0\x00', &(0x7f0000002c40), &(0x7f0000002c80), 0x64, 0x1)
mount$overlay(0x0, &(0x7f0000002cc0)='./file0\x00', &(0x7f0000002d00), 0x8, &(0x7f0000002d40)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]})

3m8.216621383s ago: executing program 5 (id=2207):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000004c0)={0x1, &(0x7f0000000500)=[{0x6}]}, 0x10)
bind$inet(r0, &(0x7f0000000540)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000580)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0)

3m6.113855095s ago: executing program 5 (id=2217):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/devices/system/machinecheck/machinecheck0/check_interval\x00', 0x2, 0x0)
sendfile(r0, r0, 0x0, 0x3)

3m4.135023152s ago: executing program 37 (id=2217):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/devices/system/machinecheck/machinecheck0/check_interval\x00', 0x2, 0x0)
sendfile(r0, r0, 0x0, 0x3)

10.408976479s ago: executing program 8 (id=3086):
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x2800088, &(0x7f0000000200)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x93, 0x2d1, &(0x7f0000000bc0)="$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")
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
io_setup(0x1, &(0x7f0000000780)=<r0=>0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x101042, 0x10d)
io_submit(r0, 0x1, &(0x7f0000000800)=[&(0x7f0000000840)={0xffffff7f00000000, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000880)='i', 0x1, 0x1400}])

9.264186204s ago: executing program 8 (id=3091):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file0\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x5, 0x445a, &(0x7f0000004480)="$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")
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2824000, 0x0, 0x5, 0x0, &(0x7f0000000000))
syz_open_dev$video4linux(0x0, 0x8005, 0x103800)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./bus\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f0000000a80)='l', 0x1, 0x404042ffc)

7.08738061s ago: executing program 4 (id=3100):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000180)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x0, 0x27dfdbfb, {0xa, 0x0, 0x10, 0xfc, 0x0, 0x0, 0x0, 0x7}}, 0x1c}}, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
syz_usb_disconnect(r0)
syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000100)=ANY=[], 0x0)
ioctl$EVIOCRMFF(r0, 0xc0085504, &(0x7f0000000180)=0x17)

6.294136706s ago: executing program 0 (id=3102):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$unix(0x1, 0x2, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001780)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)={0x44, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x40070}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884)

5.54277301s ago: executing program 4 (id=3107):
r0 = syz_mount_image$udf(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="73686f72746164000000006d653d3030303030303030303030303030303030b030342c6e6f6164696e6963622c7569643d00", @ANYRES64, @ANYRESHEX], 0x2, 0xa1b, &(0x7f0000000500)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x8042, 0x0)
fcntl$setlease(r1, 0x400, 0x0)
link(&(0x7f0000000400)='./file1\x00', &(0x7f0000000440)='./bus\x00')
unlinkat(r0, &(0x7f0000000080)='./bus\x00', 0x0)

5.477649141s ago: executing program 0 (id=3108):
getgroups(0x2, &(0x7f00000000c0)=[0xee01, <r0=>0xee01])
setresgid(r0, 0x0, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0xffffffffffffffff, 0x1000)

5.067557889s ago: executing program 8 (id=3110):
r0 = userfaultfd(0x80801)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000500)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000540)={&(0x7f0000800000/0x1000)=nil, 0x1000})

4.939873687s ago: executing program 2 (id=3111):
syz_mount_image$vfat(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x101c08a, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], 0x6, 0x2c1, &(0x7f0000000f40)="$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")
mount(0x0, 0x0, 0x0, 0x4000, 0x0)
dup(0xffffffffffffffff)
r0 = openat(0xffffffffffffff9c, &(0x7f00000014c0)='./file2\x00', 0x109141, 0xd6)
pwrite64(r0, &(0x7f0000001500)="cf", 0x20, 0x7ff)

4.890515927s ago: executing program 7 (id=3112):
r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x55}, &(0x7f0000000100), &(0x7f0000000140)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_setup(0x7d5, &(0x7f0000000480)={0x0, 0x8e61, 0x2000, 0x2, 0x113, 0x0, r0}, &(0x7f0000000500)=<r4=>0x0, &(0x7f0000000540), &(0x7f0000000580))
syz_io_uring_submit(r4, r1, r2, &(0x7f00000001c0)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, {0x0, r3}})
io_uring_enter(r0, 0x1, 0xfffffffd, 0x9, 0x0, 0x0)

4.829770214s ago: executing program 0 (id=3113):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0)
r1 = landlock_create_ruleset(&(0x7f0000000240)={0x7f6e}, 0x18, 0x0)
landlock_restrict_self(r1, 0xe)

4.543779448s ago: executing program 4 (id=3114):
r0 = creat(&(0x7f0000001ec0)='./bus\x00', 0x0)
r1 = fanotify_init(0xf00, 0x2)
fanotify_mark(r1, 0x105, 0x8971, r0, 0x0)
readv(r1, &(0x7f0000001f00)=[{&(0x7f0000001f40), 0x3c}], 0x4c)
rename(&(0x7f0000001f80)='./bus\x00', &(0x7f0000001fc0)='./file1\x00')

4.232138666s ago: executing program 7 (id=3116):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x20, 0x24, 0x107, 0x70bd2e, 0x25dfdbfb, {0x2, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010)

4.092460402s ago: executing program 2 (id=3117):
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e27, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x6}, 0x1c)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000140)=0x1ca, 0x4)
write(r0, 0x0, 0x0)
recvfrom(r0, 0x0, 0x0, 0x2021, 0x0, 0x0)

3.741510803s ago: executing program 9 (id=3118):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x3)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x28, 0x0, 0x0, 0xffffefff}, {0x6, 0x0, 0x0, 0x8006}]}, 0x10)
syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "a297f5", 0x14, 0x6, 0x0, @local, @local, {[], {{0x2, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x1}}}}}}}, 0x0)

3.62304178s ago: executing program 4 (id=3119):
gettid()
syz_mount_image$ext4(&(0x7f00000006c0)='ext4\x00', &(0x7f0000000700)='./file2\x00', 0x1018ed8, &(0x7f0000000740)={[{@sysvgroups}, {@noload}, {@mblk_io_submit}, {@jqfmt_vfsv0}, {@discard}, {@usrjquota}, {@grpquota}, {@quota}]}, 0x6, 0x659, &(0x7f00000007c0)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000e80)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x8004587d, &(0x7f0000000ec0)={0x0, 0xffffffffffffffff, 0x8000200000000000, 0x0, 0x85c, 0x2})
quotactl$Q_QUOTAOFF(0xffffffff80000302, &(0x7f0000000f00)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)

3.591761618s ago: executing program 2 (id=3120):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000005c0)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000025c0)={'ip6tnl0\x00', <r2=>0x0})
sendto$packet(r0, 0x0, 0x0, 0xc1, &(0x7f00000026c0)={0x11, 0xd, r2, 0x1, 0x8, 0x6, @random="ea6bfe71c5b9"}, 0x14)

3.380063813s ago: executing program 7 (id=3121):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', <r2=>0x0})
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r2}, 0x90)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010027bd70000000000000000000", @ANYRES32=r1, @ANYBLOB="004100000000000014002b8008000100", @ANYRES32=r3], 0x34}}, 0x4008000)

3.030641451s ago: executing program 9 (id=3122):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = gettid()
timer_create(0x1, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000080)=<r2=>0x0)
timer_settime(r2, 0x1, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d65746100000000140002800800014000000012080002400000002214000000110001"], 0xd8}}, 0x0)

3.029271991s ago: executing program 8 (id=3123):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x94)
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x80)

2.909804545s ago: executing program 2 (id=3124):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x13, &(0x7f00000009c0)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000a80)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000ac0)=""/222}, 0x78)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000cc0)='memory.numa_stat\x00', 0x26e1, 0x0)
close(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d00))
ioctl$SIOCSIFHWADDR(r0, 0x8b0b, &(0x7f0000000d40)={'wlan1\x00', @random='\x00\x00  \x00'})

2.528957372s ago: executing program 0 (id=3125):
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc\x00', 0x4)
mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000440)='10', 0x2)
unshare(0x62040200)

2.514647808s ago: executing program 9 (id=3126):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000140)=0x7ffffffd, 0x4)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f00000001c0)={0x7f, 0x8, 0x8, 0x7156}, 0x10)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xffffffff, 0x0, 0x4}, 0x1c)
syz_emit_ethernet(0xfdef, &(0x7f00000001c0)=ANY=[], 0x0)

2.500561509s ago: executing program 7 (id=3127):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140)={<r1=>0xffffffffffffffff}, 0x2, 0x5}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x1, 0xfa00, @id_resuseaddr={&(0x7f0000000240)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000280)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000540)={0x7, 0x8, 0xfa00, {r1, 0xfffffff7}}, 0x10)

1.97667066s ago: executing program 2 (id=3128):
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./debug\x00', 0x80)
mount(0x0, &(0x7f00000001c0)='./debug\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./debug/tracing/events/sched/sched_switch/enable\x00', 0x2141, 0x1d1)
write(r0, &(0x7f0000000280)='1', 0x1)
write(r0, &(0x7f00000002c0)='0', 0x1)

1.923631594s ago: executing program 8 (id=3129):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x40802, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x7, r1, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1004000})
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0x214c1000)

1.830444511s ago: executing program 0 (id=3130):
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xa)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2)

1.70210739s ago: executing program 9 (id=3131):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x6, @random="29c4596fa9b5"}, 0x10)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x4, @local}, 0x10)
setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000140)={r1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10)

1.577546268s ago: executing program 4 (id=3132):
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x8)
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00089aafc727346c3e0d8728525a2641b3b31621730c58dcf8e0ca2e6767a45a978776e9d2c689feab83a160d00a77ae5112cd4e7141cad333d7cbb69dc6b314609d3855f026cbf8c41ff5b565176b461e9327059c11066ba0b4b95c12d2d9ff9c8896d9e247bd55f9ff578a06e0e9d0ca07693396b00d2ef44adb4858475a07d5e8fa3ef5b306fe8a5d1cd2d8e06e7f88226ece092c6aabf8870e140124d5a48670513e0c419c99b7c5105959e7a535f12694634cf272490e0000"], 0x81, 0x4ac, &(0x7f0000000a40)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./file1\x00', 0x101042, 0x0)
sendfile(r0, r0, 0x0, 0xe3aa6ea)

1.409684442s ago: executing program 2 (id=3133):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x6828, 0x0)
ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000100)=[0x58, 0x1])

1.096615407s ago: executing program 9 (id=3134):
r0 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000980)={'ipvlan1\x00', <r1=>0x0})
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
sendmsg$nl_route_sched(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0x2, 0xffff}, {0x5, 0xfff3}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x24040050)

912.842647ms ago: executing program 4 (id=3135):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0)
ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r0, 0xe503, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
io_setup(0x2, &(0x7f0000000080)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xc2, r0, 0x0, 0x0, 0xe}])

864.870203ms ago: executing program 7 (id=3136):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x12, 0x3, 0x4, 0x2, 0x4}, 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f00000000c0)="a9", &(0x7f0000000100)=@tcp6=r0, 0x1}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20)

224.605341ms ago: executing program 0 (id=3137):
syz_mount_image$hfs(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x1000812, &(0x7f0000000100)=ANY=[], 0x1, 0x305, &(0x7f0000000600)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./file1\x00', 0xc4842, 0x1ff)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000980), 0x6200, 0x0)
sendfile(r0, r1, 0x0, 0x18ad414)
sendfile(r0, r0, &(0x7f0000000200)=0xd, 0x3)

75.72643ms ago: executing program 7 (id=3138):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c)
sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f0000000180)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x15}}, 0x4}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000200)='\b', 0x1}], 0x1}, 0x4048043)
getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000240)={0x0, 0x7, 0x33b, 0x8, 0x3, 0xd06, 0x9, 0x40, {0x0, @in6={{0xa, 0x4e22, 0x8000, @private0, 0x8}}, 0x6, 0x8, 0x7, 0x9, 0x80000000}}, &(0x7f0000000300)=0xb0)

43.184171ms ago: executing program 8 (id=3139):
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000140), 0x2)
r1 = memfd_create(&(0x7f0000000040)='-&:{-\xaa]{\x00', 0x2)
pwrite64(r1, &(0x7f00000000c0)='i', 0x1, 0x3fff)
fcntl$addseals(r1, 0x409, 0x6)
ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000100)={0x1, 0x2, [{r1, 0x0, 0x1000, 0x2000}, {r1, 0x0, 0x10000, 0x1000000}]})

0s ago: executing program 9 (id=3140):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105704da0700000000000109022400010000ba0009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022220000009523b31ce93ee907000000002990370900be0083000000000b09307a15b3"], 0x0}, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x0}, 0x0)
syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x14e040)

kernel console output (not intermixed with test programs):

me="manufacturer" dev="sysfs" ino=241517 res=0 errno=-22
[  454.104561][   T31] audit: type=1800 audit(1794488952.088:1503): pid=6442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=241518 res=0 errno=-22
[  454.109920][   T10] usb 1-1: USB disconnect, device number 10
[  454.202471][   T31] audit: type=1800 audit(1794488952.178:1504): pid=6099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=241650 res=0 errno=-22
[  454.260715][   T31] audit: type=1800 audit(1794488952.238:1505): pid=6099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=241679 res=0 errno=-22
[  454.294813][T13783] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters
[  454.651894][ T5784] pyra 0003:1E7D:2CF6.000F: unknown main item tag 0x0
[  454.651920][ T5784] pyra 0003:1E7D:2CF6.000F: unknown main item tag 0x0
[  454.651939][ T5784] pyra 0003:1E7D:2CF6.000F: unknown main item tag 0x0
[  454.651955][ T5784] pyra 0003:1E7D:2CF6.000F: unknown main item tag 0x0
[  454.651974][ T5784] pyra 0003:1E7D:2CF6.000F: unknown main item tag 0x0
[  454.651990][ T5784] pyra 0003:1E7D:2CF6.000F: unknown main item tag 0x0
[  454.652007][ T5784] pyra 0003:1E7D:2CF6.000F: unknown main item tag 0x0
[  454.731364][ T5784] pyra 0003:1E7D:2CF6.000F: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.8-1/input0
[  454.789324][ T5874] kernel read not supported for file /trace_pipe (pid: 5874 comm: kworker/0:8)
[  454.892205][ T9359] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  455.275566][ T5784] pyra 0003:1E7D:2CF6.000F: couldn't init struct pyra_device
[  455.275650][ T5784] pyra 0003:1E7D:2CF6.000F: couldn't install mouse
[  455.382076][ T5784] pyra 0003:1E7D:2CF6.000F: probe with driver pyra failed with error -71
[  455.425247][ T5784] usb 9-1: USB disconnect, device number 12
[  455.610260][ T5290] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  456.029958][T13815] Bluetooth: MGMT ver 1.23
[  456.095566][ T5630] Bluetooth: hci6: unexpected event for opcode 0x1405
[  456.117868][ T5784] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  456.140296][ T5630] Bluetooth: hci6: unexpected event for opcode 0x0c2d
[  456.263946][ T5784] usb 8-1: Using ep0 maxpacket: 16
[  456.269470][ T5784] usb 8-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=f.89
[  456.288203][ T5784] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  456.288224][ T5784] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[  456.292975][ T5784] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  456.292996][ T5784] usb 8-1: SerialNumber: syz
[  456.350556][ T5784] usb 8-1: 0:2 : does not exist
[  456.673616][T13823] loop0: detected capacity change from 0 to 16
[  456.750871][T13823] erofs (device loop0): bogus i_mode (177777) @ nid 36
[  457.081055][ T5784] usb 8-1: 5:0: failed to get current value for ch 0 (-22)
[  457.269242][T13799] loop9: detected capacity change from 0 to 32768
[  457.386286][T13799] ERROR: (device loop9): xtSearch: xt_getpage: xtree page corrupt
[  457.386286][T13799] 
[  457.386319][T13799] xtLookup: xtSearch returned -5
[  457.386328][T13799] free_index: error reading directory table
[  457.386335][T13799] ERROR: (device loop9): xtSearch: xt_getpage: xtree page corrupt
[  457.386335][T13799] 
[  457.386357][T13799] xtLookup: xtSearch returned -5
[  457.386364][T13799] free_index: error reading directory table
[  457.386372][T13799] ERROR: (device loop9): xtSearch: xt_getpage: xtree page corrupt
[  457.386372][T13799] 
[  457.386393][T13799] xtLookup: xtSearch returned -5
[  457.386401][T13799] free_index: error reading directory table
[  457.386408][T13799] ERROR: (device loop9): xtSearch: xt_getpage: xtree page corrupt
[  457.386408][T13799] 
[  457.386430][T13799] xtLookup: xtSearch returned -5
[  457.386438][T13799] free_index: error reading directory table
[  457.386445][T13799] ERROR: (device loop9): xtSearch: xt_getpage: xtree page corrupt
[  457.386445][T13799] 
[  457.386466][T13799] xtLookup: xtSearch returned -5
[  457.386474][T13799] free_index: error reading directory table
[  457.386482][T13799] ERROR: (device loop9): xtSearch: xt_getpage: xtree page corrupt
[  457.386482][T13799] 
[  457.386503][T13799] xtLookup: xtSearch returned -5
[  457.386511][T13799] add_index: get/read_metapage failed!
[  457.386520][T13799] ERROR: (device loop9): xtSearch: xt_getpage: xtree page corrupt
[  457.386520][T13799] 
[  457.386547][T13799] xtLookup: xtSearch returned -5
[  457.386555][T13799] free_index: error reading directory table
[  457.386562][T13799] ERROR: (device loop9): xtSearch: xt_getpage: xtree page corrupt
[  457.386562][T13799] 
[  457.386583][T13799] xtLookup: xtSearch returned -5
[  457.386591][T13799] free_index: error reading directory table
[  457.386598][T13799] ERROR: (device loop9): xtSearch: xt_getpage: xtree page corrupt
[  457.386598][T13799] 
[  457.386619][T13799] xtLookup: xtSearch returned -5
[  457.386627][T13799] free_index: error reading directory table
[  457.386634][T13799] ERROR: (device loop9): xtSearch: xt_getpage: xtree page corrupt
[  457.386634][T13799] 
[  457.386655][T13799] xtLookup: xtSearch returned -5
[  457.386663][T13799] free_index: error reading directory table
[  457.386670][T13799] ERROR: (device loop9): xtSearch: xt_getpage: xtree page corrupt
[  457.386670][T13799] 
[  457.386692][T13799] xtLookup: xtSearch returned -5
[  457.386705][T13799] free_index: error reading directory table
[  457.749045][T13799] ERROR: (device loop9): xtSearch: xt_getpage: xtree page corrupt
[  457.749045][T13799] 
[  457.749079][T13799] xtLookup: xtSearch returned -5
[  457.749088][T13799] add_index: get/read_metapage failed!
[  457.816671][ T5784] usb 8-1: USB disconnect, device number 5
[  457.872806][   T31] kauditd_printk_skb: 17 callbacks suppressed
[  457.872823][   T31] audit: type=1800 audit(1794488955.848:1523): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=241891 res=0 errno=-22
[  457.924207][   T31] audit: type=1800 audit(1794488955.908:1524): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=241904 res=0 errno=-22
[  457.969317][   T31] audit: type=1800 audit(1794488955.948:1525): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=241945 res=0 errno=-22
[  458.039662][   T31] audit: type=1326 audit(1794488956.018:1526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13830 comm="syz.0.2775" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe388da94d9 code=0x7fc00000
[  458.039711][   T31] audit: type=1326 audit(1794488956.018:1527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13830 comm="syz.0.2775" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7fe388da94d9 code=0x7fc00000
[  458.039748][   T31] audit: type=1326 audit(1794488956.018:1528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13830 comm="syz.0.2775" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe388da94d9 code=0x7fc00000
[  458.039785][   T31] audit: type=1326 audit(1794488956.018:1529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13830 comm="syz.0.2775" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe388da94d9 code=0x7fc00000
[  458.039821][   T31] audit: type=1326 audit(1794488956.018:1530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13830 comm="syz.0.2775" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe388da94d9 code=0x7fc00000
[  458.039858][   T31] audit: type=1326 audit(1794488956.018:1531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13830 comm="syz.0.2775" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe388da94d9 code=0x7fc00000
[  458.039894][   T31] audit: type=1326 audit(1794488956.018:1532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13830 comm="syz.0.2775" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe388da94d9 code=0x7fc00000
[  458.102516][ T5631] Bluetooth: hci0: Opcode 0x1405 failed: -110
[  458.103459][ T5631] Bluetooth: hci0: command 0x1405 tx timeout
[  459.498364][T13854] loop9: detected capacity change from 0 to 33280
[  459.555864][T13854] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  459.609586][T13856] FAULT_INJECTION: forcing a failure.
[  459.609586][T13856] name failslab, interval 1, probability 0, space 0, times 0
[  459.609614][T13856] CPU: 0 UID: 0 PID: 13856 Comm: syz.0.2783 Not tainted syzkaller #0 PREEMPT(full) 
[  459.609636][T13856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  459.609647][T13856] Call Trace:
[  459.609655][T13856]  <TASK>
[  459.609663][T13856]  dump_stack_lvl+0xe8/0x150
[  459.609699][T13856]  should_fail_ex+0x3eb/0x540
[  459.609727][T13856]  should_failslab+0xa8/0x100
[  459.609758][T13856]  ? alloc_empty_file+0x5b/0x1d0
[  459.609781][T13856]  kmem_cache_alloc_noprof+0x9c/0x600
[  459.609807][T13856]  ? alloc_empty_file+0x5b/0x1d0
[  459.609830][T13856]  ? srso_alias_return_thunk+0x5/0xfbef5
[  459.609858][T13856]  alloc_empty_file+0x5b/0x1d0
[  459.609881][T13856]  alloc_file_pseudo+0x110/0x1e0
[  459.609907][T13856]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  459.609930][T13856]  ? _raw_spin_unlock+0x28/0x50
[  459.609951][T13856]  ? srso_alias_return_thunk+0x5/0xfbef5
[  459.609982][T13856]  sock_alloc_file+0xb8/0x2e0
[  459.610007][T13856]  ? __sys_socket+0x12b/0x1b0
[  459.610037][T13856]  __sys_socket+0x13f/0x1b0
[  459.610078][T13856]  __x64_sys_socket+0x7a/0x90
[  459.610108][T13856]  do_syscall_64+0x16a/0x530
[  459.610132][T13856]  ? trace_irq_disable+0x3b/0x140
[  459.610161][T13856]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  459.610186][T13856]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  459.610206][T13856] RIP: 0033:0x7fe388da94d9
[  459.610224][T13856] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  459.610240][T13856] RSP: 002b:00007fe389ca1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  459.610261][T13856] RAX: ffffffffffffffda RBX: 00007fe389025fa0 RCX: 00007fe388da94d9
[  459.610280][T13856] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000026
[  459.610291][T13856] RBP: 00007fe388e3804e R08: 0000000000000000 R09: 0000000000000000
[  459.610303][T13856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  459.610315][T13856] R13: 00007fe389026038 R14: 00007fe389025fa0 R15: 00007fff3ea74428
[  459.610346][T13856]  </TASK>
[  459.661522][ T5784] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  459.885681][T13854] EXT4-fs warning (device loop9): ext4_dirblock_csum_verify:375: inode #2: comm syz.9.2778: No space for directory leaf checksum. Please run e2fsck -D.
[  459.885772][T13854] EXT4-fs error (device loop9): ext4_readdir:226: inode #2: comm syz.9.2778: path /137/file2: directory fails checksum at offset 0
[  459.927398][ T5784] usb 3-1: Using ep0 maxpacket: 32
[  459.930833][ T5784] usb 3-1: New USB device found: idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  459.958575][ T5784] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  459.958599][ T5784] usb 3-1: Product: syz
[  459.958612][ T5784] usb 3-1: Manufacturer: syz
[  459.958625][ T5784] usb 3-1: SerialNumber: syz
[  459.995231][ T5784] usb 3-1: config 0 descriptor??
[  460.041181][ T5784] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  460.203184][T11221] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  460.872956][T13873] loop4: detected capacity change from 0 to 33280
[  460.892365][T13873] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[  460.892379][T13873] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  460.941877][T13873] EXT4-fs (loop4): 1 truncate cleaned up
[  460.951410][T13873] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  461.079104][T13873] EXT4-fs error (device loop4): __ext4_expand_extra_isize:7453: inode #12: comm syz.4.2790: bad extra_isize 62 (inode size 256)
[  461.127621][ T5784] gspca_ov534_9: reg_w failed -71
[  461.199685][T13873] EXT4-fs (loop4): Remounting filesystem read-only
[  461.199708][T13873] EXT4-fs warning (device loop4): ext4_rename_delete:3742: inode #12: comm syz.4.2790: Deleting old file: nlink 2, error=-30
[  461.200159][T13846] loop8: detected capacity change from 0 to 40427
[  461.278060][T13846] F2FS-fs (loop8): invalid crc value
[  461.414784][ T5784] gspca_ov534_9: Unknown sensor 0000
[  461.414860][ T5784] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22
[  461.452334][ T5784] usb 3-1: USB disconnect, device number 12
[  461.478060][ T5636] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  461.881527][T13846] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  461.933372][ T5784] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[  462.086794][ T5784] usb 10-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40
[  462.088666][ T5784] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  462.088688][ T5784] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  462.088705][ T5784] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66
[  462.088740][ T5784] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  462.088761][ T5784] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  462.177375][ T5784] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  462.177399][ T5784] usb 10-1: Product: syz
[  462.177412][ T5784] usb 10-1: Manufacturer: syz
[  462.352207][ T5784] cdc_wdm 10-1:1.0: skipping garbage
[  462.352226][ T5784] cdc_wdm 10-1:1.0: skipping garbage
[  462.377924][ T5784] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device
[  462.377941][ T5784] cdc_wdm 10-1:1.0: Unknown control protocol
[  462.641422][T13896] gadgetfs: bound to dummy_udc driver
[  462.903427][ T5784] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  462.903647][    C0] gadgetfs: connected
[  462.903988][ T5784] gadgetfs: disconnected
[  462.931920][    C0] cdc_wdm 10-1:1.0: Unexpected error -71
[  462.934373][    C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71
[  462.934488][    C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes
[  462.934851][    C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71
[  462.934868][    C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes
[  462.935868][    C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71
[  462.935883][    C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes
[  462.936071][    C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71
[  462.936086][    C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes
[  462.936271][    C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71
[  462.936286][    C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes
[  462.936470][    C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71
[  462.936485][    C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes
[  462.936667][    C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71
[  462.936682][    C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes
[  462.936870][    C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71
[  462.936885][    C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes
[  462.937075][    C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71
[  462.937090][    C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes
[  462.942844][    C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71
[  462.942860][    C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes
[  463.059754][    C0] gadgetfs: connected
[  463.060073][ T5784] usb 1-1: New USB device found: idVendor=1234, idProduct=5678, bcdDevice=1.00
[  463.068937][ T5784] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  463.155251][    C0] gadgetfs: configuration #1
[  463.156984][ T5785] usb 10-1: USB disconnect, device number 8
[  463.157120][    C0] cdc_wdm 10-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  463.224106][   T31] kauditd_printk_skb: 60 callbacks suppressed
[  463.224123][   T31] audit: type=1800 audit(1794488961.208:1593): pid=6433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=242566 res=0 errno=-22
[  463.275517][   T31] audit: type=1800 audit(1794488961.258:1594): pid=6433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=242595 res=0 errno=-22
[  463.317489][   T31] audit: type=1800 audit(1794488961.298:1595): pid=6433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=242573 res=0 errno=-22
[  463.317531][   T31] audit: type=1800 audit(1794488961.298:1596): pid=6433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=242574 res=0 errno=-22
[  463.376679][   T31] audit: type=1800 audit(1794488961.358:1597): pid=6433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=242575 res=0 errno=-22
[  463.418838][ T5784] input: USB Touchscreen 1234:5678 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input21
[  463.493555][   T31] audit: type=1800 audit(1794488961.468:1598): pid=6433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=242615 res=0 errno=-22
[  463.496031][T13896] gadgetfs: suspended from state 3
[  463.496184][T13896] gadgetfs: disconnected
[  463.575296][   T31] audit: type=1800 audit(1794488961.558:1599): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=242636 res=0 errno=-22
[  463.609479][ T5784] usb 1-1: USB disconnect, device number 11
[  463.609618][    C0] usbtouchscreen 1-1:1.0: usbtouch_irq - usb_submit_urb failed with result: -19
[  463.630937][ T5783] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  463.662359][   T31] audit: type=1800 audit(1794488961.638:1600): pid=6433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ev" dev="sysfs" ino=242664 res=0 errno=-22
[  463.709554][   T31] audit: type=1800 audit(1794488961.688:1601): pid=6433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="abs" dev="sysfs" ino=242667 res=0 errno=-22
[  463.735835][   T31] audit: type=1800 audit(1794488961.718:1602): pid=6433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="rel" dev="sysfs" ino=242666 res=0 errno=-22
[  463.777551][ T5783] usb 8-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00
[  463.782246][ T5783] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  463.782283][ T5783] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  463.782305][ T5783] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  463.782325][ T5783] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  463.782358][ T5783] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  463.874630][ T5783] usb 8-1: config 0 descriptor??
[  464.190394][T13885] loop0: detected capacity change from 0 to 32768
[  464.261308][T13885] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  464.349834][ T5783] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0
[  464.349860][ T5783] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0
[  464.349878][ T5783] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0
[  464.349912][ T5783] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0
[  464.349929][ T5783] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0
[  464.349946][ T5783] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0
[  464.349963][ T5783] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0
[  464.349979][ T5783] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0
[  464.349996][ T5783] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0
[  464.350013][ T5783] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0
[  464.462595][T13885] XFS (loop0): Ending clean mount
[  464.520481][T13921] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2804'.
[  464.554039][ T5783] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0
[  464.672028][ T5783] usb 8-1: USB disconnect, device number 6
[  464.752110][T12034] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  465.188192][T13929] netlink: 'syz.0.2806': attribute type 4 has an invalid length.
[  465.659161][T13935] loop2: detected capacity change from 0 to 32768
[  465.742079][T13935] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  466.209633][T13944] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000)
[  466.795510][T13949] loop0: detected capacity change from 0 to 32768
[  466.858015][T13949] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  466.858033][T13949] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  466.892553][T11652] ocfs2: Unmounting device (7,2) on (node local)
[  467.000512][T13949] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[  467.012169][ T5783] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  467.012184][ T5783] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  467.130885][ T5630] Bluetooth: hci0: command 0x1405 tx timeout
[  467.287631][T13959] FAULT_INJECTION: forcing a failure.
[  467.287631][T13959] name failslab, interval 1, probability 0, space 0, times 0
[  467.287660][T13959] CPU: 0 UID: 0 PID: 13959 Comm: syz.8.2818 Not tainted syzkaller #0 PREEMPT(full) 
[  467.287681][T13959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  467.287692][T13959] Call Trace:
[  467.287700][T13959]  <TASK>
[  467.287708][T13959]  dump_stack_lvl+0xe8/0x150
[  467.287744][T13959]  should_fail_ex+0x3eb/0x540
[  467.287772][T13959]  should_failslab+0xa8/0x100
[  467.287805][T13959]  kmem_cache_alloc_lru_noprof+0xa2/0x5f0
[  467.287832][T13959]  ? __d_alloc+0x37/0x820
[  467.287855][T13959]  ? __d_alloc+0x37/0x820
[  467.287886][T13959]  __d_alloc+0x37/0x820
[  467.287912][T13959]  ? srso_alias_return_thunk+0x5/0xfbef5
[  467.287939][T13959]  d_alloc_pseudo+0x21/0xc0
[  467.287967][T13959]  alloc_path_pseudo+0x107/0x220
[  467.287993][T13959]  ? __pfx_alloc_path_pseudo+0x10/0x10
[  467.288016][T13959]  ? srso_alias_return_thunk+0x5/0xfbef5
[  467.288038][T13959]  ? do_raw_spin_lock+0x12b/0x2f0
[  467.288065][T13959]  alloc_file_pseudo+0xa8/0x1e0
[  467.288091][T13959]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  467.288113][T13959]  ? _raw_spin_unlock+0x28/0x50
[  467.288134][T13959]  ? srso_alias_return_thunk+0x5/0xfbef5
[  467.288168][T13959]  sock_alloc_file+0xb8/0x2e0
[  467.288193][T13959]  ? __sys_socket+0x12b/0x1b0
[  467.288223][T13959]  __sys_socket+0x13f/0x1b0
[  467.288254][T13959]  __x64_sys_socket+0x7a/0x90
[  467.288284][T13959]  do_syscall_64+0x16a/0x530
[  467.288308][T13959]  ? trace_irq_disable+0x3b/0x140
[  467.288335][T13959]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  467.288360][T13959]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  467.288379][T13959] RIP: 0033:0x7fe9ab9a94d9
[  467.288396][T13959] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  467.288411][T13959] RSP: 002b:00007fe9ac78c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  467.288431][T13959] RAX: ffffffffffffffda RBX: 00007fe9abc25fa0 RCX: 00007fe9ab9a94d9
[  467.288445][T13959] RDX: 0000000000000002 RSI: 0000000000000002 RDI: 000000000000001d
[  467.288456][T13959] RBP: 00007fe9aba3804e R08: 0000000000000000 R09: 0000000000000000
[  467.288468][T13959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  467.288479][T13959] R13: 00007fe9abc26038 R14: 00007fe9abc25fa0 R15: 00007ffcd149c9e8
[  467.288510][T13959]  </TASK>
[  467.954545][ T5783] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 942ms
[  467.954714][ T5783] gfs2: fsid=syz:syz.0: jid=0: Done
[  467.954747][T13949] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  468.429630][T13975] lo speed is unknown, defaulting to 1000
[  468.429681][T13975] lo speed is unknown, defaulting to 1000
[  468.430292][T13975] lo speed is unknown, defaulting to 1000
[  468.431076][T13975] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  468.431104][T13975] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  468.431138][T13975] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  468.860798][T13981] FAULT_INJECTION: forcing a failure.
[  468.860798][T13981] name failslab, interval 1, probability 0, space 0, times 0
[  468.860827][T13981] CPU: 0 UID: 0 PID: 13981 Comm: syz.4.2824 Not tainted syzkaller #0 PREEMPT(full) 
[  468.860849][T13981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  468.860860][T13981] Call Trace:
[  468.860868][T13981]  <TASK>
[  468.860877][T13981]  dump_stack_lvl+0xe8/0x150
[  468.860914][T13981]  should_fail_ex+0x3eb/0x540
[  468.860942][T13981]  should_failslab+0xa8/0x100
[  468.860976][T13981]  __kvmalloc_node_noprof+0x171/0x820
[  468.861006][T13981]  ? srso_alias_return_thunk+0x5/0xfbef5
[  468.861029][T13981]  ? __se_sys_setgroups+0xf2/0x4d0
[  468.861051][T13981]  ? __se_sys_setgroups+0xf2/0x4d0
[  468.861080][T13981]  __se_sys_setgroups+0xf2/0x4d0
[  468.861113][T13981]  do_syscall_64+0x16a/0x530
[  468.861138][T13981]  ? trace_irq_disable+0x3b/0x140
[  468.861166][T13981]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  468.861191][T13981]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  468.861211][T13981] RIP: 0033:0x7f877d3a94d9
[  468.861228][T13981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  468.861244][T13981] RSP: 002b:00007f877e190028 EFLAGS: 00000246 ORIG_RAX: 0000000000000074
[  468.861263][T13981] RAX: ffffffffffffffda RBX: 00007f877d625fa0 RCX: 00007f877d3a94d9
[  468.861277][T13981] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  468.861289][T13981] RBP: 00007f877d43804e R08: 0000000000000000 R09: 0000000000000000
[  468.861301][T13981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  468.861312][T13981] R13: 00007f877d626038 R14: 00007f877d625fa0 R15: 00007ffe1c973728
[  468.861343][T13981]  </TASK>
[  469.149143][   T31] kauditd_printk_skb: 19 callbacks suppressed
[  469.149159][   T31] audit: type=1800 audit(1794488967.128:1622): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=243146 res=0 errno=-22
[  469.211650][   T31] audit: type=1800 audit(1794488967.188:1623): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=243160 res=0 errno=-22
[  469.240786][T13975] lo speed is unknown, defaulting to 1000
[  469.268946][T13984] FAULT_INJECTION: forcing a failure.
[  469.268946][T13984] name failslab, interval 1, probability 0, space 0, times 0
[  469.268973][T13984] CPU: 0 UID: 0 PID: 13984 Comm: syz.2.2825 Not tainted syzkaller #0 PREEMPT(full) 
[  469.268994][T13984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  469.269005][T13984] Call Trace:
[  469.269013][T13984]  <TASK>
[  469.269021][T13984]  dump_stack_lvl+0xe8/0x150
[  469.269058][T13984]  should_fail_ex+0x3eb/0x540
[  469.269087][T13984]  should_failslab+0xa8/0x100
[  469.269119][T13984]  __kmalloc_cache_noprof+0x9e/0x600
[  469.269146][T13984]  ? ceph_alloc_options+0x4e/0x1d0
[  469.269167][T13984]  ? ceph_alloc_options+0x4e/0x1d0
[  469.269190][T13984]  ? ceph_init_fs_context+0x54/0x4b0
[  469.269217][T13984]  ceph_alloc_options+0x4e/0x1d0
[  469.269241][T13984]  ceph_init_fs_context+0x68/0x4b0
[  469.269267][T13984]  alloc_fs_context+0x99e/0xd00
[  469.269305][T13984]  __se_sys_fsopen+0x118/0x370
[  469.269328][T13984]  do_syscall_64+0x16a/0x530
[  469.269352][T13984]  ? trace_irq_disable+0x3b/0x140
[  469.269380][T13984]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  469.269405][T13984]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  469.269424][T13984] RIP: 0033:0x7f2424da94d9
[  469.269442][T13984] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  469.269457][T13984] RSP: 002b:00007f2425d39028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae
[  469.269482][T13984] RAX: ffffffffffffffda RBX: 00007f2425025fa0 RCX: 00007f2424da94d9
[  469.269496][T13984] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000300
[  469.269508][T13984] RBP: 00007f2424e3804e R08: 0000000000000000 R09: 0000000000000000
[  469.269520][T13984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  469.269533][T13984] R13: 00007f2425026038 R14: 00007f2425025fa0 R15: 00007ffd2e02c8d8
[  469.269575][T13984]  </TASK>
[  469.542798][T13975] lo speed is unknown, defaulting to 1000
[  469.575703][T13975] lo speed is unknown, defaulting to 1000
[  469.616361][T13975] lo speed is unknown, defaulting to 1000
[  469.649322][T13975] lo speed is unknown, defaulting to 1000
[  469.668338][T13975] lo speed is unknown, defaulting to 1000
[  469.688553][T13975] lo speed is unknown, defaulting to 1000
[  469.709732][T13975] lo speed is unknown, defaulting to 1000
[  469.725646][   T31] audit: type=1800 audit(1794488967.708:1624): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=243113 res=0 errno=-22
[  470.007911][T13988] FAULT_INJECTION: forcing a failure.
[  470.007911][T13988] name failslab, interval 1, probability 0, space 0, times 0
[  470.007939][T13988] CPU: 0 UID: 0 PID: 13988 Comm: syz.4.2827 Not tainted syzkaller #0 PREEMPT(full) 
[  470.007960][T13988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  470.007972][T13988] Call Trace:
[  470.007980][T13988]  <TASK>
[  470.007988][T13988]  dump_stack_lvl+0xe8/0x150
[  470.008026][T13988]  should_fail_ex+0x3eb/0x540
[  470.008055][T13988]  should_failslab+0xa8/0x100
[  470.008089][T13988]  __kmalloc_node_track_caller_noprof+0xf6/0x720
[  470.008127][T13988]  ? snd_pcm_hw_rule_add+0x196/0x800
[  470.008155][T13988]  ? snd_pcm_hw_rule_add+0x196/0x800
[  470.008186][T13988]  ? kfree+0x4d/0x650
[  470.008207][T13988]  ? snd_pcm_hw_rule_add+0x196/0x800
[  470.008238][T13988]  krealloc_node_align_noprof+0x19a/0x390
[  470.008272][T13988]  snd_pcm_hw_rule_add+0x196/0x800
[  470.008303][T13988]  ? __pfx_snd_pcm_hw_rule_muldivk+0x10/0x10
[  470.008325][T13988]  ? __pfx_snd_pcm_hw_rule_format+0x10/0x10
[  470.008348][T13988]  ? __pfx_snd_pcm_hw_rule_add+0x10/0x10
[  470.008380][T13988]  ? srso_alias_return_thunk+0x5/0xfbef5
[  470.008405][T13988]  ? snd_pcm_attach_substream+0x893/0xb90
[  470.008437][T13988]  snd_pcm_open_substream+0xebf/0x24f0
[  470.008466][T13988]  ? snd_pcm_open+0x180/0x620
[  470.008502][T13988]  ? __pfx_snd_pcm_open_substream+0x10/0x10
[  470.008531][T13988]  ? srso_alias_return_thunk+0x5/0xfbef5
[  470.008557][T13988]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  470.008585][T13988]  ? srso_alias_return_thunk+0x5/0xfbef5
[  470.008613][T13988]  snd_pcm_open+0x1df/0x620
[  470.008647][T13988]  ? __pfx_snd_pcm_open+0x10/0x10
[  470.008673][T13988]  ? __pfx_default_wake_function+0x10/0x10
[  470.008718][T13988]  snd_pcm_capture_open+0x62/0xc0
[  470.008748][T13988]  chrdev_open+0x4d9/0x600
[  470.008771][T13988]  ? __pfx_chrdev_open+0x10/0x10
[  470.008790][T13988]  ? fsnotify_open_perm_and_set_mode+0x135/0x6b0
[  470.008820][T13988]  ? devcgroup_check_permission+0x31/0x8f0
[  470.008848][T13988]  ? __pfx_chrdev_open+0x10/0x10
[  470.008867][T13988]  do_dentry_open+0x80e/0x1360
[  470.008899][T13988]  vfs_open_consume+0x4a/0x350
[  470.008918][T13988]  ? path_openat+0x16e1/0x20f0
[  470.008950][T13988]  path_openat+0x16fc/0x20f0
[  470.008998][T13988]  do_file_open+0x23e/0x4a0
[  470.009032][T13988]  ? __pfx_do_file_open+0x10/0x10
[  470.009087][T13988]  ? _raw_spin_unlock+0x28/0x50
[  470.009106][T13988]  ? srso_alias_return_thunk+0x5/0xfbef5
[  470.009130][T13988]  ? alloc_fd+0x6af/0x760
[  470.009164][T13988]  do_sys_openat2+0x115/0x200
[  470.009190][T13988]  ? __pfx_do_sys_openat2+0x10/0x10
[  470.009218][T13988]  ? srso_alias_return_thunk+0x5/0xfbef5
[  470.009241][T13988]  ? do_user_addr_fault+0xd3f/0x1480
[  470.009271][T13988]  __x64_sys_openat+0x138/0x170
[  470.009300][T13988]  do_syscall_64+0x16a/0x530
[  470.009325][T13988]  ? trace_irq_disable+0x3b/0x140
[  470.009353][T13988]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  470.009378][T13988]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  470.009398][T13988] RIP: 0033:0x7f877d369d0e
[  470.009415][T13988] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  470.009431][T13988] RSP: 002b:00007f877e18fb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  470.009451][T13988] RAX: ffffffffffffffda RBX: 00007f877e1906c0 RCX: 00007f877d369d0e
[  470.009465][T13988] RDX: 0000000003000000 RSI: 00007f877e18fc00 RDI: ffffffffffffff9c
[  470.009479][T13988] RBP: 00007f877e18fc00 R08: 0000000000000000 R09: 0000000000000000
[  470.009492][T13988] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[  470.009504][T13988] R13: 00007f877d626038 R14: 00007f877d625fa0 R15: 00007ffe1c973728
[  470.009536][T13988]  </TASK>
[  470.581329][T13993] FAULT_INJECTION: forcing a failure.
[  470.581329][T13993] name failslab, interval 1, probability 0, space 0, times 0
[  470.581356][T13993] CPU: 0 UID: 0 PID: 13993 Comm: syz.2.2828 Not tainted syzkaller #0 PREEMPT(full) 
[  470.581378][T13993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  470.581389][T13993] Call Trace:
[  470.581397][T13993]  <TASK>
[  470.581405][T13993]  dump_stack_lvl+0xe8/0x150
[  470.581441][T13993]  should_fail_ex+0x3eb/0x540
[  470.581471][T13993]  should_failslab+0xa8/0x100
[  470.581505][T13993]  __kvmalloc_node_noprof+0x171/0x820
[  470.581538][T13993]  ? v4l2_ctrl_handler_init_class+0x1b3/0x2e0
[  470.581567][T13993]  ? v4l2_ctrl_handler_init_class+0x1b3/0x2e0
[  470.581592][T13993]  ? srso_alias_return_thunk+0x5/0xfbef5
[  470.581620][T13993]  v4l2_ctrl_handler_init_class+0x1b3/0x2e0
[  470.581649][T13993]  vim2m_open+0x111/0x640
[  470.581682][T13993]  v4l2_open+0x1bc/0x3a0
[  470.581713][T13993]  chrdev_open+0x4d9/0x600
[  470.581735][T13993]  ? __pfx_chrdev_open+0x10/0x10
[  470.581753][T13993]  ? srso_alias_return_thunk+0x5/0xfbef5
[  470.581775][T13993]  ? fsnotify_open_perm_and_set_mode+0x135/0x6b0
[  470.581806][T13993]  ? devcgroup_check_permission+0x31/0x8f0
[  470.581833][T13993]  ? __pfx_chrdev_open+0x10/0x10
[  470.581852][T13993]  do_dentry_open+0x80e/0x1360
[  470.581884][T13993]  vfs_open_consume+0x4a/0x350
[  470.581903][T13993]  ? path_openat+0x16e1/0x20f0
[  470.581934][T13993]  path_openat+0x16fc/0x20f0
[  470.581980][T13993]  do_file_open+0x23e/0x4a0
[  470.582014][T13993]  ? __pfx_do_file_open+0x10/0x10
[  470.582063][T13993]  ? _raw_spin_unlock+0x28/0x50
[  470.582084][T13993]  ? srso_alias_return_thunk+0x5/0xfbef5
[  470.582106][T13993]  ? alloc_fd+0x6af/0x760
[  470.582139][T13993]  do_sys_openat2+0x115/0x200
[  470.582161][T13993]  ? srso_alias_return_thunk+0x5/0xfbef5
[  470.582183][T13993]  ? __se_sys_futex+0x3a8/0x450
[  470.582204][T13993]  ? __pfx_do_sys_openat2+0x10/0x10
[  470.582231][T13993]  ? rcu_is_watching+0x16/0xb0
[  470.582262][T13993]  ? srso_alias_return_thunk+0x5/0xfbef5
[  470.582288][T13993]  __x64_sys_openat+0x138/0x170
[  470.582317][T13993]  do_syscall_64+0x16a/0x530
[  470.582341][T13993]  ? trace_irq_disable+0x3b/0x140
[  470.582368][T13993]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  470.582393][T13993]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  470.582412][T13993] RIP: 0033:0x7f2424da94d9
[  470.582430][T13993] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  470.582445][T13993] RSP: 002b:00007f2425d39028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  470.582464][T13993] RAX: ffffffffffffffda RBX: 00007f2425025fa0 RCX: 00007f2424da94d9
[  470.582478][T13993] RDX: 0000000000000002 RSI: 0000200000000240 RDI: ffffffffffffff9c
[  470.582491][T13993] RBP: 00007f2424e3804e R08: 0000000000000000 R09: 0000000000000000
[  470.582503][T13993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  470.582514][T13993] R13: 00007f2425026038 R14: 00007f2425025fa0 R15: 00007ffd2e02c8d8
[  470.582545][T13993]  </TASK>
[  470.807193][ T1175] block nbd0: Possible stuck request ffff888027da0000: control (read@0,2048B). Runtime 360 seconds
[  471.257766][T13996] loop0: detected capacity change from 0 to 32768
[  471.336357][T13996] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  471.336376][T13996] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  471.425929][T13996] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[  471.435670][ T5783] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  471.435686][ T5783] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  471.438200][   T31] audit: type=1800 audit(1794488969.418:1625): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14872 res=0 errno=-22
[  471.991656][ T5783] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 555ms
[  472.013998][ T5783] gfs2: fsid=syz:syz.0: jid=0: Done
[  472.014062][T13996] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  472.063736][ T5785] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  472.244425][ T5785] usb 3-1: Using ep0 maxpacket: 16
[  472.247286][ T5785] usb 3-1: New USB device found: idVendor=045e, idProduct=07da, bcdDevice=0.00
[  472.264651][ T5785] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  472.264692][ T5785] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  472.331627][ T5785] usb 3-1: config 0 descriptor??
[  472.358295][   T31] audit: type=1800 audit(1794488970.338:1626): pid=6442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=243485 res=0 errno=-22
[  472.414797][   T31] audit: type=1800 audit(1794488970.398:1627): pid=6442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=243514 res=0 errno=-22
[  472.478017][   T31] audit: type=1800 audit(1794488970.458:1628): pid=6442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=243492 res=0 errno=-22
[  472.478062][   T31] audit: type=1800 audit(1794488970.458:1629): pid=6442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=243493 res=0 errno=-22
[  472.535746][   T31] audit: type=1800 audit(1794488970.518:1630): pid=6442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=243494 res=0 errno=-22
[  472.598951][   T31] audit: type=1800 audit(1794488970.578:1631): pid=6442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=243534 res=0 errno=-22
[  472.687181][ T5631] Bluetooth: hci6: adv larger than maximum supported
[  472.687201][ T5631] Bluetooth: hci6: Malformed LE Event: 0x0d
[  472.692062][T14018] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (comedi_parport)
[  472.694271][ T5785] usb 3-1: USB disconnect, device number 13
[  473.810966][T14034] loop0: detected capacity change from 0 to 40427
[  473.842988][T14034] F2FS-fs (loop0): build fault injection rate: 174
[  473.843008][T14034] F2FS-fs (loop0): build fault injection type: 0x3bfe8c
[  473.860869][T14034] F2FS-fs (loop0): invalid crc value
[  473.929609][T14034] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  473.965335][T14034] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  474.121014][T14034] F2FS-fs (loop0): inject page get in f2fs_filemap_get_folio of generic_perform_write+0x2d5/0x8e0
[  474.122602][T14034] syz.0.2838: attempt to access beyond end of device
[  474.122602][T14034] loop0: rw=2049, sector=45096, nr_sectors = 336 limit=40427
[  474.205437][T14042] loop2: detected capacity change from 0 to 2048
[  474.251229][T14045] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  474.315582][   T31] kauditd_printk_skb: 28 callbacks suppressed
[  474.315601][   T31] audit: type=1800 audit(1794488972.298:1660): pid=14042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2842" name="file1" dev="loop2" ino=15 res=0 errno=-22
[  474.398828][   T31] audit: type=1800 audit(1794488972.378:1661): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15118 res=0 errno=-22
[  474.718506][T14045] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  474.718533][T14045] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4)
[  474.748550][T14045] Remounting filesystem read-only
[  474.762296][T11652] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer
[  474.782946][T12034] syz-executor: attempt to access beyond end of device
[  474.782946][T12034] loop0: rw=2049, sector=45432, nr_sectors = 8 limit=40427
[  474.836848][T12034] CPU: 0 UID: 0 PID: 12034 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  474.836876][T12034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  474.836888][T12034] Call Trace:
[  474.836896][T12034]  <TASK>
[  474.836904][T12034]  dump_stack_lvl+0xe8/0x150
[  474.836940][T12034]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  474.836978][T12034]  f2fs_write_end_bio+0x118e/0x15d0
[  474.837018][T12034]  __submit_merged_bio+0x258/0x6a0
[  474.837050][T12034]  ? srso_alias_return_thunk+0x5/0xfbef5
[  474.837076][T12034]  ? rcu_is_watching+0x16/0xb0
[  474.837114][T12034]  f2fs_submit_merged_write_cond+0x1ef/0x590
[  474.837163][T12034]  ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10
[  474.837206][T12034]  ? srso_alias_return_thunk+0x5/0xfbef5
[  474.837238][T12034]  f2fs_write_data_pages+0x2a13/0x36e0
[  474.837295][T12034]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  474.837314][T12034]  ? srso_alias_return_thunk+0x5/0xfbef5
[  474.837349][T12034]  ? srso_alias_return_thunk+0x5/0xfbef5
[  474.837371][T12034]  ? is_bpf_text_address+0x292/0x2b0
[  474.837391][T12034]  ? is_bpf_text_address+0x26/0x2b0
[  474.837436][T12034]  ? srso_alias_return_thunk+0x5/0xfbef5
[  474.837458][T12034]  ? stack_trace_save+0xa9/0x100
[  474.837483][T12034]  ? __pfx_stack_trace_save+0x10/0x10
[  474.837512][T12034]  ? srso_alias_return_thunk+0x5/0xfbef5
[  474.837545][T12034]  ? srso_alias_return_thunk+0x5/0xfbef5
[  474.837572][T12034]  ? srso_alias_return_thunk+0x5/0xfbef5
[  474.837595][T12034]  ? __lock_acquire+0x1511/0x2de0
[  474.837644][T12034]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  474.837667][T12034]  do_writepages+0x338/0x560
[  474.837691][T12034]  ? srso_alias_return_thunk+0x5/0xfbef5
[  474.837716][T12034]  ? srso_alias_return_thunk+0x5/0xfbef5
[  474.837741][T12034]  ? srso_alias_return_thunk+0x5/0xfbef5
[  474.837763][T12034]  ? do_raw_spin_unlock+0xf5/0x200
[  474.837788][T12034]  filemap_fdatawrite+0x1e9/0x2f0
[  474.837815][T12034]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  474.837872][T12034]  ? srso_alias_return_thunk+0x5/0xfbef5
[  474.837896][T12034]  ? srso_alias_return_thunk+0x5/0xfbef5
[  474.837923][T12034]  ? do_raw_spin_unlock+0xf5/0x200
[  474.837947][T12034]  f2fs_sync_dirty_inodes+0x471/0x970
[  474.837987][T12034]  f2fs_write_checkpoint+0x867/0x24d0
[  474.838046][T12034]  kill_f2fs_super+0x2df/0x700
[  474.838073][T12034]  ? rcu_do_enqueue+0x616/0x870
[  474.838097][T12034]  ? lockdep_hardirqs_on+0x7b/0x110
[  474.838122][T12034]  ? __pfx_kill_f2fs_super+0x10/0x10
[  474.838160][T12034]  ? __pfx_call_rcu+0x10/0x10
[  474.838183][T12034]  ? srso_alias_return_thunk+0x5/0xfbef5
[  474.838205][T12034]  ? shrinker_free+0x2a7/0x3b0
[  474.838231][T12034]  deactivate_locked_super+0xbe/0x110
[  474.838258][T12034]  cleanup_mnt+0x204/0x2a0
[  474.838291][T12034]  task_work_run+0x1d9/0x260
[  474.838319][T12034]  ? __pfx_task_work_run+0x10/0x10
[  474.838354][T12034]  exit_to_user_mode_loop+0x204/0x770
[  474.838379][T12034]  ? srso_alias_return_thunk+0x5/0xfbef5
[  474.838402][T12034]  ? rcu_is_watching+0x16/0xb0
[  474.838435][T12034]  do_syscall_64+0x32c/0x530
[  474.838459][T12034]  ? trace_irq_disable+0x3b/0x140
[  474.838486][T12034]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  474.838511][T12034]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  474.838531][T12034] RIP: 0033:0x7fe388daa747
[  474.838548][T12034] Code: a2 c7 05 ac 2f 25 00 00 00 00 00 eb 96 e8 b1 13 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  474.838564][T12034] RSP: 002b:00007fff3ea73698 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  474.838588][T12034] RAX: 0000000000000000 RBX: 00007fe388e37433 RCX: 00007fe388daa747
[  474.838602][T12034] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff3ea73750
[  474.838613][T12034] RBP: 00007fff3ea73750 R08: 00007fff3ea74750 R09: 00000000ffffffff
[  474.838626][T12034] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff3ea747e0
[  474.838638][T12034] R13: 00007fe388e37433 R14: 0000000000073d46 R15: 00007fff3ea74820
[  474.838669][T12034]  </TASK>
[  475.025519][T12034] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  475.485054][ T5785] loop0: lost filesystem error report for type 5 error -108
[  475.731350][T14062] FAULT_INJECTION: forcing a failure.
[  475.731350][T14062] name failslab, interval 1, probability 0, space 0, times 0
[  475.731379][T14062] CPU: 0 UID: 0 PID: 14062 Comm: syz.2.2847 Not tainted syzkaller #0 PREEMPT(full) 
[  475.731399][T14062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  475.731411][T14062] Call Trace:
[  475.731418][T14062]  <TASK>
[  475.731427][T14062]  dump_stack_lvl+0xe8/0x150
[  475.731464][T14062]  should_fail_ex+0x3eb/0x540
[  475.731492][T14062]  should_failslab+0xa8/0x100
[  475.731525][T14062]  kmem_cache_alloc_lru_noprof+0xa2/0x5f0
[  475.731548][T14062]  ? inode_set_ctime_current+0x261/0xb00
[  475.731580][T14062]  ? __d_alloc+0x37/0x820
[  475.731603][T14062]  ? __d_alloc+0x37/0x820
[  475.731636][T14062]  ? ns_owner+0xc4/0x120
[  475.731659][T14062]  __d_alloc+0x37/0x820
[  475.731689][T14062]  path_from_stashed+0x35c/0x580
[  475.731724][T14062]  open_namespace_file+0x97/0x140
[  475.731751][T14062]  ? __pfx_open_namespace_file+0x10/0x10
[  475.731778][T14062]  ? srso_alias_return_thunk+0x5/0xfbef5
[  475.731802][T14062]  ? __unlock_mount+0x344/0x380
[  475.731835][T14062]  open_new_namespace+0x1f7/0xb50
[  475.731869][T14062]  ? vfs_open_tree+0x3e1/0x480
[  475.731902][T14062]  ? __pfx_open_new_namespace+0x10/0x10
[  475.731938][T14062]  ? srso_alias_return_thunk+0x5/0xfbef5
[  475.731960][T14062]  ? do_getname+0x151/0x250
[  475.731984][T14062]  vfs_open_tree+0x3e1/0x480
[  475.732018][T14062]  ? __pfx_vfs_open_tree+0x10/0x10
[  475.732057][T14062]  __x64_sys_open_tree+0x93/0x110
[  475.732082][T14062]  do_syscall_64+0x16a/0x530
[  475.732106][T14062]  ? trace_irq_disable+0x3b/0x140
[  475.732134][T14062]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  475.732159][T14062]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  475.732178][T14062] RIP: 0033:0x7f2424da94d9
[  475.732195][T14062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  475.732210][T14062] RSP: 002b:00007f2425d39028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac
[  475.732230][T14062] RAX: ffffffffffffffda RBX: 00007f2425025fa0 RCX: 00007f2424da94d9
[  475.732244][T14062] RDX: 0000000000001902 RSI: 0000200000000480 RDI: ffffffffffffff9c
[  475.732258][T14062] RBP: 00007f2424e3804e R08: 0000000000000000 R09: 0000000000000000
[  475.732270][T14062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  475.732282][T14062] R13: 00007f2425026038 R14: 00007f2425025fa0 R15: 00007ffd2e02c8d8
[  475.732312][T14062]  </TASK>
[  476.476386][T14070] loop9: detected capacity change from 0 to 33792
[  476.544370][T14070] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  476.577667][T14070] ext4 filesystem being mounted at /151/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  476.641657][   T31] audit: type=1800 audit(1794488974.618:1662): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15979 res=0 errno=-22
[  476.999040][T11221] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  477.125751][ T5874] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  477.284674][ T5874] usb 1-1: Using ep0 maxpacket: 16
[  477.291355][ T5874] usb 1-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=0.40
[  477.307214][ T5874] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  477.307236][ T5874] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  477.335128][ T5874] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  477.335151][ T5874] usb 1-1: Product: syz
[  477.335178][ T5874] usb 1-1: Manufacturer: syz
[  477.335191][ T5874] usb 1-1: SerialNumber: syz
[  477.397853][   T31] audit: type=1800 audit(1794488975.378:1663): pid=6099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=243863 res=0 errno=-22
[  477.436083][   T31] audit: type=1800 audit(1794488975.418:1664): pid=6099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=243895 res=0 errno=-22
[  477.438963][ T5874] usb 1-1: 0:2 : does not exist
[  477.479975][   T31] audit: type=1800 audit(1794488975.458:1665): pid=6099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=243870 res=0 errno=-22
[  477.528553][   T31] audit: type=1800 audit(1794488975.508:1666): pid=6099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=243871 res=0 errno=-22
[  477.655220][ T5874] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[  477.801839][   T31] audit: type=1800 audit(1794488975.778:1667): pid=14091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.2857" name="speed" dev="sysfs" ino=26217 res=0 errno=-22
[  477.835582][ T5785] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  477.983723][ T5785] usb 3-1: Using ep0 maxpacket: 8
[  477.984660][ T5785] usb 3-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  477.987141][ T5785] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  477.987178][ T5785] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  478.040062][ T5785] usb 3-1: config 0 descriptor??
[  478.058407][   T31] audit: type=1800 audit(1794488976.038:1668): pid=6442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=244018 res=0 errno=-22
[  478.111545][   T31] audit: type=1800 audit(1794488976.088:1669): pid=6442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=244047 res=0 errno=-22
[  478.178960][ T5874] usb 1-1: USB disconnect, device number 12
[  478.342900][ T5785] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  478.828319][ T5874] usb 3-1: USB disconnect, device number 14
[  478.890376][T14105] loop0: detected capacity change from 0 to 256
[  480.584695][T14135] loop2: detected capacity change from 0 to 7
[  480.591439][T14135] Dev loop2: unable to read RDB block 7
[  480.591462][T14135]  loop2: AHDI p1 p2 p3
[  480.591481][T14135] loop2: partition table partially beyond EOD, truncated
[  480.591655][T14135] loop2: p1 start 1601398130 is beyond EOD, truncated
[  480.591672][T14135] loop2: p2 start 1702059890 is beyond EOD, truncated
[  480.737643][T14138] netlink: 256 bytes leftover after parsing attributes in process `syz.7.2876'.
[  480.737668][T14138] netlink: 256 bytes leftover after parsing attributes in process `syz.7.2876'.
[  481.244482][T14148] loop9: detected capacity change from 0 to 32768
[  481.278359][T14148] (syz.9.2879,14148,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  481.278598][T14148] (syz.9.2879,14148,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  481.314696][ T5785] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  481.334900][T14148] JBD2: Ignoring recovery information on journal
[  481.390234][T14148] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode.
[  481.434365][T14149] loop8: detected capacity change from 0 to 512
[  481.455546][   T31] kauditd_printk_skb: 10 callbacks suppressed
[  481.455560][   T31] audit: type=1800 audit(1794488979.438:1680): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15979 res=0 errno=-22
[  481.471653][ T5785] usb 5-1: New USB device found: idVendor=091e, idProduct=0003, bcdDevice=0.01
[  481.539914][ T5785] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  481.539956][ T5785] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  481.539977][ T5785] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  481.582322][ T5785] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  481.582344][ T5785] usb 5-1: Product: syz
[  481.582357][ T5785] usb 5-1: Manufacturer: syz
[  481.672142][ T5874] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  481.695754][T14141] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  481.700491][   T31] audit: type=1800 audit(1794488979.678:1681): pid=14149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2880" name="file1" dev="loop8" ino=104 res=0 errno=-22
[  481.702097][ T5785] garmin_gps 5-1:1.0: Garmin GPS usb/tty converter detected
[  481.775625][ T5785] usb 5-1: Garmin GPS usb/tty converter now attached to ttyUSB0
[  481.813160][   T31] audit: type=1800 audit(1794488979.788:1682): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15856 res=0 errno=-22
[  481.835628][ T5874] usb 1-1: Using ep0 maxpacket: 32
[  481.851920][ T5874] usb 1-1: New USB device found: idVendor=0582, idProduct=0025, bcdDevice=0.40
[  481.873815][ T5874] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  481.873837][ T5874] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  481.873874][ T5874] usb 1-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30
[  481.873924][ T5874] usb 1-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  481.873956][ T5874] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  481.873976][ T5874] usb 1-1: config 1 interface 1 has no altsetting 0
[  481.968069][ T5874] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  481.968093][ T5874] usb 1-1: Product: syz
[  481.968106][ T5874] usb 1-1: Manufacturer: syz
[  481.968120][ T5874] usb 1-1: SerialNumber: syz
[  482.009755][   T31] audit: type=1800 audit(1794488979.978:1683): pid=6442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=244275 res=0 errno=-22
[  482.050898][   T31] audit: type=1800 audit(1794488980.028:1684): pid=6442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=244306 res=0 errno=-22
[  482.089925][   T31] audit: type=1800 audit(1794488980.068:1685): pid=6442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=244282 res=0 errno=-22
[  482.128057][   T31] audit: type=1800 audit(1794488980.108:1686): pid=6442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=244283 res=0 errno=-22
[  482.170667][   T31] audit: type=1800 audit(1794488980.148:1688): pid=6099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=244419 res=0 errno=-22
[  482.171688][   T31] audit: type=1800 audit(1794488980.108:1687): pid=6442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=244304 res=0 errno=-22
[  482.221533][   T31] audit: type=1800 audit(1794488980.178:1689): pid=6442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=244305 res=0 errno=-22
[  482.350993][ T5874] usb 1-1: selecting invalid altsetting 0
[  482.352896][ T5871] usb 5-1: USB disconnect, device number 13
[  482.441056][ T5871] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0
[  482.463476][ T5871] garmin_gps 5-1:1.0: device disconnected
[  482.541076][ T5874] usb 1-1: 1:1: cannot get freq (v2/v3): err -32
[  482.674734][T14156] FAULT_INJECTION: forcing a failure.
[  482.674734][T14156] name fail_futex, interval 1, probability 0, space 0, times 1
[  482.674766][T14156] CPU: 0 UID: 0 PID: 14156 Comm: syz.7.2883 Not tainted syzkaller #0 PREEMPT(full) 
[  482.674794][T14156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  482.674807][T14156] Call Trace:
[  482.674816][T14156]  <TASK>
[  482.674825][T14156]  dump_stack_lvl+0xe8/0x150
[  482.674863][T14156]  should_fail_ex+0x3eb/0x540
[  482.674892][T14156]  get_futex_key+0x1ab/0x1410
[  482.674933][T14156]  ? __pfx_get_futex_key+0x10/0x10
[  482.674973][T14156]  futex_wake+0x119/0x5f0
[  482.674999][T14156]  ? srso_alias_return_thunk+0x5/0xfbef5
[  482.675025][T14156]  ? __pfx_futex_wake+0x10/0x10
[  482.675057][T14156]  ? mm_exit_exec_release+0x20/0x290
[  482.675089][T14156]  do_futex+0x458/0x4e0
[  482.675115][T14156]  ? __pfx_do_futex+0x10/0x10
[  482.675141][T14156]  ? __might_fault+0xaf/0x130
[  482.675166][T14156]  mm_exit_exec_release+0x10d/0x290
[  482.675196][T14156]  exit_mm+0x50/0x240
[  482.675220][T14156]  do_exit+0x6a8/0x2360
[  482.675249][T14156]  ? __pfx_do_exit+0x10/0x10
[  482.675273][T14156]  ? do_raw_spin_lock+0x12b/0x2f0
[  482.675297][T14156]  ? srso_alias_return_thunk+0x5/0xfbef5
[  482.675327][T14156]  do_group_exit+0x22d/0x2f0
[  482.675347][T14156]  ? _raw_spin_unlock_irq+0x23/0x50
[  482.675373][T14156]  get_signal+0x136a/0x1430
[  482.675420][T14156]  arch_do_signal_or_restart+0xbb/0x860
[  482.675454][T14156]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  482.675482][T14156]  ? do_pwritev+0x289/0x2d0
[  482.675512][T14156]  exit_to_user_mode_loop+0x10e/0x770
[  482.675539][T14156]  ? srso_alias_return_thunk+0x5/0xfbef5
[  482.675563][T14156]  ? rcu_is_watching+0x16/0xb0
[  482.675599][T14156]  do_syscall_64+0x32c/0x530
[  482.675624][T14156]  ? trace_irq_disable+0x3b/0x140
[  482.675652][T14156]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  482.675677][T14156]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  482.675697][T14156] RIP: 0033:0x7f61727a94d9
[  482.675715][T14156] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  482.675731][T14156] RSP: 002b:00007f61709f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  482.675750][T14156] RAX: fffffffffffffe00 RBX: 00007f6172a25fa8 RCX: 00007f61727a94d9
[  482.675765][T14156] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f6172a25fa8
[  482.675777][T14156] RBP: 00007f6172a25fa0 R08: 0000000000000000 R09: 0000000000000000
[  482.675790][T14156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  482.675802][T14156] R13: 00007f6172a26038 R14: 00007ffc19602450 R15: 00007ffc19602538
[  482.675833][T14156]  </TASK>
[  483.255999][T11221] ocfs2: Unmounting device (7,9) on (node local)
[  483.524760][ T5874] usb 1-1: USB disconnect, device number 13
[  484.159718][T14177] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  484.844785][ T5874] usb 8-1: new full-speed USB device number 7 using dummy_hcd
[  485.010205][ T5874] usb 8-1: unable to get BOS descriptor or descriptor too short
[  485.026421][ T5874] usb 8-1: not running at top speed; connect to a high speed hub
[  485.026451][ T5874] usb 8-1: New USB device found: idVendor=0582, idProduct=004c, bcdDevice=0.40
[  485.032336][ T5874] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  485.032356][ T5874] usb 8-1: config 1 has 0 interfaces, different from the descriptor's value: 3
[  485.076414][ T5874] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  485.076440][ T5874] usb 8-1: Product: syz
[  485.076454][ T5874] usb 8-1: Manufacturer: syz
[  485.076467][ T5874] usb 8-1: SerialNumber: syz
[  485.239723][T14200] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2898'.
[  485.369264][T14199] loop2: detected capacity change from 0 to 2048
[  485.568845][T14199]  loop2: p2 p3 < > p4 < p5 >
[  485.568957][T14199] loop2: partition table partially beyond EOD, truncated
[  485.600138][T14199] loop2: p3 start 4284289 is beyond EOD, truncated
[  485.651999][ T5874] usb 8-1: USB disconnect, device number 7
[  485.921467][T14171] loop4: detected capacity change from 0 to 32768
[  486.018079][T14171] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  486.151338][T14171] XFS (loop4): Ending clean mount
[  486.559268][T14229] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2905'.
[  486.692655][T14234] loop7: detected capacity change from 0 to 256
[  486.751523][ T5636] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  486.811243][T14234] exFAT-fs (loop7): failed to load upcase table (idx : 0x00011f1c, chksum : 0x850fc7e5, utbl_chksum : 0xe619d30d)
[  487.053659][T14239] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  487.056609][T14238] FAULT_INJECTION: forcing a failure.
[  487.056609][T14238] name failslab, interval 1, probability 0, space 0, times 0
[  487.056634][T14238] CPU: 0 UID: 0 PID: 14238 Comm: syz.8.2908 Not tainted syzkaller #0 PREEMPT(full) 
[  487.056655][T14238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  487.056667][T14238] Call Trace:
[  487.056675][T14238]  <TASK>
[  487.056684][T14238]  dump_stack_lvl+0xe8/0x150
[  487.056721][T14238]  should_fail_ex+0x3eb/0x540
[  487.056750][T14238]  should_failslab+0xa8/0x100
[  487.056783][T14238]  __kmalloc_cache_noprof+0x9e/0x600
[  487.056810][T14238]  ? lock_acquire+0x115/0x350
[  487.056834][T14238]  ? x509_cert_parse+0x5a/0x7a0
[  487.056862][T14238]  ? x509_cert_parse+0x5a/0x7a0
[  487.056898][T14238]  x509_cert_parse+0x5a/0x7a0
[  487.056931][T14238]  x509_key_preparse+0x64/0x6d0
[  487.056949][T14238]  ? srso_alias_return_thunk+0x5/0xfbef5
[  487.056976][T14238]  ? down_read+0x2b9/0x320
[  487.057009][T14238]  asymmetric_key_preparse+0xb9/0x1b0
[  487.057039][T14238]  __key_create_or_update+0x360/0xab0
[  487.057071][T14238]  ? srso_alias_return_thunk+0x5/0xfbef5
[  487.057101][T14238]  ? __pfx___key_create_or_update+0x10/0x10
[  487.057130][T14238]  ? lookup_user_key+0x112c/0x12c0
[  487.057191][T14238]  ? __pfx_lookup_user_key_possessed+0x10/0x10
[  487.057227][T14238]  ? srso_alias_return_thunk+0x5/0xfbef5
[  487.057255][T14238]  key_create_or_update+0x42/0x60
[  487.057290][T14238]  __se_sys_add_key+0x349/0x420
[  487.057316][T14238]  ? __pfx___se_sys_add_key+0x10/0x10
[  487.057340][T14238]  ? srso_alias_return_thunk+0x5/0xfbef5
[  487.057369][T14238]  ? srso_alias_return_thunk+0x5/0xfbef5
[  487.057392][T14238]  ? __x64_sys_add_key+0x20/0xc0
[  487.057417][T14238]  do_syscall_64+0x16a/0x530
[  487.057442][T14238]  ? trace_irq_disable+0x3b/0x140
[  487.057471][T14238]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  487.057497][T14238]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  487.057518][T14238] RIP: 0033:0x7fe9ab9a94d9
[  487.057536][T14238] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  487.057552][T14238] RSP: 002b:00007fe9ac78c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[  487.057576][T14238] RAX: ffffffffffffffda RBX: 00007fe9abc25fa0 RCX: 00007fe9ab9a94d9
[  487.057597][T14238] RDX: 0000200000000840 RSI: 0000000000000000 RDI: 0000200000000800
[  487.057610][T14238] RBP: 00007fe9aba3804e R08: ffffffffffffffff R09: 0000000000000000
[  487.057624][T14238] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000
[  487.057636][T14238] R13: 00007fe9abc26038 R14: 00007fe9abc25fa0 R15: 00007ffcd149c9e8
[  487.057668][T14238]  </TASK>
[  487.545996][T14234] exFAT-fs (loop7): error, exfat_zeroed_cluster: out of range(sect:224 len:8)
[  487.546019][T14234] exFAT-fs (loop7): Filesystem has been set read-only
[  487.909833][ T1414] IPVS: starting estimator thread 0...
[  487.930064][T14249] IPVS: wlc: FWM 3 0x00000003 - no destination available
[  488.013637][T14252] IPVS: using max 34 ests per chain, 81600 per kthread
[  488.704118][ T5871] usb 9-1: new high-speed USB device number 13 using dummy_hcd
[  488.798268][T14273] blktrace: Concurrent blktraces are not allowed on loop14
[  488.855092][ T5871] usb 9-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40
[  488.856196][ T5871] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  488.856216][ T5871] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  488.856233][ T5871] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66
[  488.856269][ T5871] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  488.856291][ T5871] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  488.858087][ T5871] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  488.858116][ T5871] usb 9-1: Product: syz
[  488.858130][ T5871] usb 9-1: Manufacturer: syz
[  488.955697][   T31] kauditd_printk_skb: 31 callbacks suppressed
[  488.955712][   T31] audit: type=1800 audit(1794488986.938:1721): pid=6433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=245018 res=0 errno=-22
[  489.006116][ T5871] cdc_wdm 9-1:1.0: skipping garbage
[  489.006134][ T5871] cdc_wdm 9-1:1.0: skipping garbage
[  489.029195][   T31] audit: type=1800 audit(1794488986.988:1722): pid=6433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=245049 res=0 errno=-22
[  489.029239][   T31] audit: type=1800 audit(1794488987.008:1723): pid=6433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=245025 res=0 errno=-22
[  489.030169][ T5871] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device
[  489.030186][ T5871] cdc_wdm 9-1:1.0: Unknown control protocol
[  489.100424][   T31] audit: type=1800 audit(1794488987.078:1724): pid=6433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=245026 res=0 errno=-22
[  489.127780][   T31] audit: type=1800 audit(1794488987.108:1725): pid=6433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=245047 res=0 errno=-22
[  489.131934][ T5631] Bluetooth: min 9 > max 0
[  489.155267][   T31] audit: type=1800 audit(1794488987.138:1726): pid=6433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=245048 res=0 errno=-22
[  489.199626][   T31] audit: type=1800 audit(1794488987.178:1727): pid=6433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=245027 res=0 errno=-22
[  489.252983][   T31] audit: type=1800 audit(1794488987.228:1728): pid=6433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=245069 res=0 errno=-22
[  489.300653][   T31] audit: type=1800 audit(1794488987.278:1729): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=245086 res=0 errno=-22
[  489.551570][T14284] loop7: detected capacity change from 0 to 33280
[  489.595794][T14284] EXT4-fs error (device loop7): ext4_orphan_get:1404: inode #15: comm syz.7.2928: inode has both inline data and extents flags
[  489.595823][T14284] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  489.609307][    C0] EXT4-fs (loop7): error count since last fsck: 1
[  489.609325][    C0] EXT4-fs (loop7): initial error at time 1794488987: ext4_orphan_get:1404: inode 15
[  489.609352][    C0] EXT4-fs (loop7): last error at time 1794488987: ext4_orphan_get:1404: inode 15
[  489.656536][T14284] EXT4-fs error (device loop7): ext4_orphan_get:1409: comm syz.7.2928: couldn't read orphan inode 15 (err -117)
[  489.656565][T14284] loop7: lost filesystem error report for type 5 error -117
[  489.661896][T14284] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  489.714756][    C0] cdc_wdm 9-1:1.0: Unexpected error -71
[  489.714830][    C0] wdm_int_callback: 323 callbacks suppressed
[  489.714845][    C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71
[  489.714858][    C0] wdm_int_callback: 323 callbacks suppressed
[  489.714871][    C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes
[  489.715086][    C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71
[  489.715103][    C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes
[  489.715293][    C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71
[  489.715308][    C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes
[  489.715499][    C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71
[  489.715514][    C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes
[  489.715707][    C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71
[  489.715723][    C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes
[  489.715914][    C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71
[  489.715929][    C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes
[  489.716113][    C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71
[  489.716128][    C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes
[  489.716361][    C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71
[  489.716377][    C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes
[  489.716578][    C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71
[  489.716600][    C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes
[  489.716789][    C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71
[  489.716804][    C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes
[  489.720242][ T5871] usb 9-1: USB disconnect, device number 13
[  489.720334][    C0] cdc_wdm 9-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  489.973496][   T31] audit: type=1800 audit(1794488987.948:1730): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15733 res=0 errno=-22
[  490.054102][T14284] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 7952 vs 220 free clusters
[  490.229581][ T9359] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  490.335371][T14292] loop2: detected capacity change from 0 to 8
[  490.353770][T14292] Dev loop2: unable to read RDB block 8
[  490.353798][T14292]  loop2: unable to read partition table
[  490.353983][T14292] loop2: partition table beyond EOD, truncated
[  490.354004][T14292] loop_reread_partitions: partition scan of loop2 (þ被Y<M�H#+a ) failed (rc=-5)
[  490.905231][T14305] Bluetooth: MGMT ver 1.23
[  491.142381][T14309] loop9: detected capacity change from 0 to 2048
[  491.203637][ T5631] Bluetooth: hci6: command 0x0406 tx timeout
[  491.228275][T14309]  loop9: p2 < > p3 < p5 > p4
[  491.319464][T14309] loop9: p4 start 458752 is beyond EOD, truncated
[  491.319492][T14309] loop9: p5 start 458752 is beyond EOD, truncated
[  491.919517][T14332] loop8: detected capacity change from 0 to 33280
[  491.961360][T14332] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem
[  491.996513][T14332] EXT4-fs (loop8): invalid journal inode
[  491.996572][T14332] EXT4-fs (loop8): can't get journal size
[  492.172498][T14332] EXT4-fs (loop8): 1 truncate cleaned up
[  492.269512][T14332] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  493.066530][T10782] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  493.408851][T14330] loop7: detected capacity change from 0 to 32768
[  493.428346][T14330] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.2947 (14330)
[  493.465549][T14330] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  493.465574][T14330] BTRFS info (device loop7): using crc32c checksum algorithm
[  493.608037][T14330] BTRFS info (device loop7): setting nodatasum
[  493.608060][T14330] BTRFS info (device loop7): setting nodatacow
[  493.608075][T14330] BTRFS info (device loop7): turning off barriers
[  493.608089][T14330] BTRFS info (device loop7): disabling tree log
[  493.608104][T14330] BTRFS info (device loop7): turning on sync discard
[  493.608119][T14330] BTRFS info (device loop7): enabling free space tree
[  493.750733][T14370] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  493.876041][ T5785] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  493.990552][ T9359] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  494.045983][ T5785] usb 1-1: Using ep0 maxpacket: 8
[  494.050431][ T5785] usb 1-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  494.070307][ T5785] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  494.070352][ T5785] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  494.070375][ T5785] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  494.070400][ T5785] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  494.070433][ T5785] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  494.070470][ T5785] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  494.178872][   T31] kauditd_printk_skb: 36 callbacks suppressed
[  494.178889][   T31] audit: type=1800 audit(1794488992.158:1767): pid=6442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=245582 res=0 errno=-22
[  494.236651][   T31] audit: type=1800 audit(1794488992.198:1768): pid=6442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=245611 res=0 errno=-22
[  494.236698][   T31] audit: type=1800 audit(1794488992.218:1769): pid=6442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=245589 res=0 errno=-22
[  494.292876][   T31] audit: type=1800 audit(1794488992.278:1770): pid=6442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=245590 res=0 errno=-22
[  494.332246][   T31] audit: type=1800 audit(1794488992.278:1771): pid=6442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=245591 res=0 errno=-22
[  494.384000][   T31] audit: type=1800 audit(1794488992.368:1772): pid=6442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=245631 res=0 errno=-22
[  494.450991][T14379] siw: device registration error -23
[  494.460863][   T31] audit: type=1800 audit(1794488992.438:1773): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=245648 res=0 errno=-22
[  494.523008][T14380] loop9: detected capacity change from 0 to 33280
[  494.542616][T14380] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[  494.542630][T14380] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  494.578789][T14380] EXT4-fs error (device loop9): ext4_orphan_get:1430: comm syz.9.2961: bad orphan inode 131083
[  494.578814][T14380] loop9: lost filesystem error report for type 5 error -117
[  494.590127][    C0] EXT4-fs (loop9): error count since last fsck: 1
[  494.590145][    C0] EXT4-fs (loop9): initial error at time 1794488992: ext4_orphan_get:1430
[  494.590165][    C0] EXT4-fs (loop9): last error at time 1794488992: ext4_orphan_get:1430
[  494.641966][T14380] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  494.684488][   T31] audit: type=1800 audit(1794488992.668:1774): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15979 res=0 errno=-22
[  494.802592][T14380] EXT4-fs error (device loop9): ext4_generic_delete_entry:2675: inode #2: block 13: comm syz.9.2961: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  494.910534][T14380] EXT4-fs error (device loop9) in ext4_delete_entry:2746: Corrupt filesystem
[  494.935567][T14380] EXT4-fs warning (device loop9): ext4_rename_delete:3742: inode #2: comm syz.9.2961: Deleting old file: nlink 5, error=-117
[  495.229247][T11221] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  495.366356][T14387] usbtmc 1-1:16.0: simple usb_control_msg failed -32
[  495.372912][ T5874] usb 1-1: USB disconnect, device number 14
[  495.467375][T14389] loop8: detected capacity change from 0 to 33280
[  495.488927][T14389] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended
[  495.613371][   T31] audit: type=1800 audit(1794488993.588:1775): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15856 res=0 errno=-22
[  495.738126][T14389] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4221: comm syz.8.2963: Allocating blocks 41-42 which overlap fs metadata
[  495.738158][T14389] loop8: lost filesystem error report for type 5 error -117
[  495.744233][    C0] EXT4-fs (loop8): error count since last fsck: 1
[  495.744253][    C0] EXT4-fs (loop8): initial error at time 1794488993: ext4_mb_mark_diskspace_used:4221
[  495.744274][    C0] EXT4-fs (loop8): last error at time 1794488993: ext4_mb_mark_diskspace_used:4221
[  496.073024][T14389] EXT4-fs (loop8): Remounting filesystem read-only
[  496.073169][T14389] Quota error (device loop8): write_blk: dquota write failed
[  496.075375][T14389] EXT4-fs (loop8): 1 truncate cleaned up
[  496.116061][T14389] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  496.249117][T14389] EXT4-fs (loop8): shut down requested (2)
[  496.284077][T14401] kernel read not supported for file bus/pci/00/00.0 (pid: 14401 comm: syz.4.2967)
[  496.462928][T10782] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  498.550101][T14444] loop7: detected capacity change from 0 to 131072
[  498.585522][T14444] F2FS-fs (loop7): Wrong CP boundary, start(512) end(1536) blocks(0)
[  498.585548][T14444] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  498.606961][T14444] F2FS-fs (loop7): invalid crc value
[  498.651904][T14446] loop9: detected capacity change from 0 to 33280
[  498.676757][T14446] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[  498.676771][T14446] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  498.803865][T14444] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  498.847117][T14446] EXT4-fs (loop9): 1 truncate cleaned up
[  498.847678][T14444] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  498.847696][T14444] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4
[  498.849245][T14446] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  498.963122][T14441] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  499.007923][T14446] EXT4-fs error (device loop9): ext4_generic_delete_entry:2675: inode #2: block 13: comm syz.9.2986: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  499.084800][T14446] EXT4-fs (loop9): Remounting filesystem read-only
[  499.365959][T11221] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  500.058543][T14477] tmpfs: Using encoding : utf8-12.1.0
[  500.136470][T14478] loop0: detected capacity change from 0 to 2048
[  500.187455][T14478] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  500.240099][   T31] kauditd_printk_skb: 6 callbacks suppressed
[  500.240116][   T31] audit: type=1800 audit(1794488998.218:1779): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14872 res=0 errno=-22
[  500.506465][T14487] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size.
[  500.897428][ T1311] ieee802154 phy0 wpan0: encryption failed: -22
[  500.897476][ T1311] ieee802154 phy1 wpan1: encryption failed: -22
[  500.903846][ T1175] block nbd0: Possible stuck request ffff888027da0000: control (read@0,2048B). Runtime 390 seconds
[  501.045807][T14493] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3003'.
[  501.366024][ T5874] usb 10-1: new high-speed USB device number 9 using dummy_hcd
[  501.516416][ T5874] usb 10-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00
[  501.529397][ T5874] usb 10-1: config 1 has an invalid interface number: 3 but max is 0
[  501.529418][ T5874] usb 10-1: config 1 has no interface number 0
[  501.555085][ T5874] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  501.555109][ T5874] usb 10-1: Product: syz
[  501.555122][ T5874] usb 10-1: Manufacturer: syz
[  501.555136][ T5874] usb 10-1: SerialNumber: syz
[  501.596228][   T31] audit: type=1800 audit(1794488999.578:1780): pid=6433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=246040 res=0 errno=-22
[  501.626442][T14500] loop8: detected capacity change from 0 to 4096
[  501.648621][T14500] ntfs3(loop8): Different NTFS sector size (2048) and media sector size (512).
[  501.661405][   T31] audit: type=1800 audit(1794488999.648:1781): pid=6433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=246072 res=0 errno=-22
[  501.689209][ T5874] usb 10-1: 3:1 : does not exist
[  501.689229][ T5874] usb 10-1: 3:2 : does not exist
[  501.708091][   T31] audit: type=1800 audit(1794488999.688:1782): pid=6433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=246047 res=0 errno=-22
[  501.747768][   T31] audit: type=1800 audit(1794488999.728:1783): pid=6433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=246048 res=0 errno=-22
[  501.823326][   T31] audit: type=1800 audit(1794488999.798:1784): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15856 res=0 errno=-22
[  501.985597][T14500] ntfs3(loop8): Mark volume as dirty due to NTFS errors
[  502.012738][T14495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  502.013113][T14495] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  502.284613][   T31] audit: type=1800 audit(1794489000.258:1785): pid=6433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=246069 res=0 errno=-22
[  502.284674][T14511] FAULT_INJECTION: forcing a failure.
[  502.284674][T14511] name failslab, interval 1, probability 0, space 0, times 0
[  502.284695][T14511] CPU: 0 UID: 0 PID: 14511 Comm: syz.0.3010 Not tainted syzkaller #0 PREEMPT(full) 
[  502.284716][T14511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  502.284728][T14511] Call Trace:
[  502.284737][T14511]  <TASK>
[  502.284746][T14511]  dump_stack_lvl+0xe8/0x150
[  502.284783][T14511]  should_fail_ex+0x3eb/0x540
[  502.284813][T14511]  should_failslab+0xa8/0x100
[  502.284844][T14511]  ? do_getname+0x2e/0x250
[  502.284866][T14511]  kmem_cache_alloc_noprof+0x9c/0x600
[  502.284892][T14511]  ? do_getname+0x2e/0x250
[  502.284919][T14511]  do_getname+0x2e/0x250
[  502.284938][T14511]  ? getname_flags+0x11/0x20
[  502.284962][T14511]  __se_sys_statx+0xd7/0x2a0
[  502.284992][T14511]  ? __pfx___se_sys_statx+0x10/0x10
[  502.285021][T14511]  ? srso_alias_return_thunk+0x5/0xfbef5
[  502.285045][T14511]  ? __se_sys_futex+0x3a8/0x450
[  502.285074][T14511]  ? srso_alias_return_thunk+0x5/0xfbef5
[  502.285097][T14511]  ? rcu_is_watching+0x16/0xb0
[  502.285128][T14511]  ? srso_alias_return_thunk+0x5/0xfbef5
[  502.285157][T14511]  ? srso_alias_return_thunk+0x5/0xfbef5
[  502.285179][T14511]  ? __x64_sys_statx+0x20/0xc0
[  502.285205][T14511]  do_syscall_64+0x16a/0x530
[  502.285231][T14511]  ? trace_irq_disable+0x3b/0x140
[  502.285258][T14511]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  502.285284][T14511]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  502.285304][T14511] RIP: 0033:0x7fe388da94d9
[  502.285322][T14511] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  502.285338][T14511] RSP: 002b:00007fe389ca1028 EFLAGS: 00000246 ORIG_RAX: 000000000000014c
[  502.285363][T14511] RAX: ffffffffffffffda RBX: 00007fe389025fa0 RCX: 00007fe388da94d9
[  502.285377][T14511] RDX: 0000000000006000 RSI: 0000000000000000 RDI: 0000000000000003
[  502.285389][T14511] RBP: 00007fe388e3804e R08: 0000000000000000 R09: 0000000000000000
[  502.285402][T14511] R10: 0000000000000080 R11: 0000000000000246 R12: 0000000000000000
[  502.285414][T14511] R13: 00007fe389026038 R14: 00007fe389025fa0 R15: 00007fff3ea74428
[  502.285446][T14511]  </TASK>
[  502.285875][   T31] audit: type=1800 audit(1794489000.268:1786): pid=6433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=246070 res=0 errno=-22
[  502.321114][   T31] audit: type=1800 audit(1794489000.298:1787): pid=6433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=246049 res=0 errno=-22
[  502.364102][   T31] audit: type=1800 audit(1794489000.348:1788): pid=6433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=246071 res=0 errno=-22
[  502.929113][T14519] input: syz0 as /devices/virtual/input/input22
[  504.258163][ T5874] usb 10-1: USB disconnect, device number 9
[  504.461822][T14543] device-mapper: table: 248:7: adding target device (start sect 0 len 5320) caused an alignment inconsistency
[  505.022730][T14554] loop4: detected capacity change from 0 to 256
[  505.738038][T14572] loop9: detected capacity change from 0 to 512
[  505.814462][T14567] loop4: detected capacity change from 0 to 4096
[  505.839213][   T31] kauditd_printk_skb: 21 callbacks suppressed
[  505.839228][   T31] audit: type=1800 audit(1794489003.818:1810): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15979 res=0 errno=-22
[  506.086431][T14575] loop0: detected capacity change from 0 to 32768
[  506.162843][T14575] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  506.254141][T14567] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  506.259810][   T31] audit: type=1800 audit(1794489004.238:1811): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14872 res=0 errno=-22
[  506.411099][T14567] ntfs3(loop4): Failed to load $Extend (-22).
[  506.411122][T14567] ntfs3(loop4): Failed to initialize $Extend.
[  506.779475][T12034] ocfs2: Unmounting device (7,0) on (node local)
[  506.890447][T14582] loop8: detected capacity change from 0 to 164
[  506.974402][ T5874] usb 10-1: new high-speed USB device number 10 using dummy_hcd
[  507.010295][   T31] audit: type=1800 audit(1794489004.988:1812): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15856 res=0 errno=-22
[  507.129349][ T5874] usb 10-1: New USB device found: idVendor=05d1, idProduct=2021, bcdDevice=9.00
[  507.146428][ T5874] usb 10-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0
[  507.146451][ T5874] usb 10-1: Product: syz
[  507.174823][ T5874] usb 10-1: config 0 descriptor??
[  507.194963][   T31] audit: type=1800 audit(1794489005.178:1813): pid=6434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=246516 res=0 errno=-22
[  507.199717][ T5874] ftdi_sio 10-1:0.0: FTDI USB Serial Device converter detected
[  507.242691][   T31] audit: type=1800 audit(1794489005.218:1814): pid=6434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=246546 res=0 errno=-22
[  507.268579][ T5874] usb 10-1: Detected FT232H
[  507.291442][   T31] audit: type=1800 audit(1794489005.268:1815): pid=6434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=246523 res=0 errno=-22
[  507.329057][   T31] audit: type=1800 audit(1794489005.308:1816): pid=6434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=246524 res=0 errno=-22
[  507.454805][ T5874] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  507.746630][T14591] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3041'.
[  507.795108][T14594] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (comedi_parport)
[  507.889128][T14591] vlan2: entered allmulticast mode
[  507.889149][T14591] dummy0: entered allmulticast mode
[  507.889882][T14591] bridge0: port 3(vlan2) entered blocking state
[  507.889976][T14591] bridge0: port 3(vlan2) entered disabled state
[  507.942305][T14591] vlan2: entered promiscuous mode
[  507.942326][T14591] dummy0: entered promiscuous mode
[  508.110953][T14600] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0xff21 instead
[  508.111179][T14600] jffs2: notice: (14600) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  508.225297][ T5874] usb 10-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  508.254105][ T5874] usb 10-1: USB disconnect, device number 10
[  508.299452][ T5874] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  508.299990][ T5874] ftdi_sio 10-1:0.0: device disconnected
[  508.372715][   T31] audit: type=1800 audit(1794489006.348:1817): pid=6434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=246545 res=0 errno=-19
[  508.466844][   T31] audit: type=1800 audit(1794489006.448:1818): pid=6442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=27597 res=0 errno=-22
[  509.161143][   T31] audit: type=1800 audit(1794489007.138:1819): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=246831 res=0 errno=-22
[  509.399196][T14619] FAULT_INJECTION: forcing a failure.
[  509.399196][T14619] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  509.399224][T14619] CPU: 0 UID: 0 PID: 14619 Comm: syz.8.3054 Not tainted syzkaller #0 PREEMPT(full) 
[  509.399246][T14619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  509.399258][T14619] Call Trace:
[  509.399266][T14619]  <TASK>
[  509.399276][T14619]  dump_stack_lvl+0xe8/0x150
[  509.399312][T14619]  should_fail_ex+0x3eb/0x540
[  509.399342][T14619]  _copy_from_user+0x2d/0xb0
[  509.399368][T14619]  insn_fetch_from_user+0x97/0x170
[  509.399396][T14619]  fixup_umip_exception+0x147/0x930
[  509.399428][T14619]  ? __pfx_fixup_umip_exception+0x10/0x10
[  509.399455][T14619]  ? do_futex+0x3e7/0x4e0
[  509.399475][T14619]  ? __pfx_do_seccomp+0x10/0x10
[  509.399498][T14619]  ? srso_alias_return_thunk+0x5/0xfbef5
[  509.399525][T14619]  ? srso_alias_return_thunk+0x5/0xfbef5
[  509.399548][T14619]  ? static_key_count+0x41/0x70
[  509.399581][T14619]  ? srso_alias_return_thunk+0x5/0xfbef5
[  509.399603][T14619]  ? fixup_vdso_exception+0x2ef/0x330
[  509.399643][T14619]  exc_general_protection+0xad/0x1f0
[  509.399672][T14619]  ? srso_alias_return_thunk+0x5/0xfbef5
[  509.399711][T14619]  asm_exc_general_protection+0x26/0x30
[  509.399730][T14619] RIP: 0033:0x7fe9ac793c1d
[  509.399749][T14619] Code: c1 e5 04 4e 8d 3c 2b 49 83 c7 28 49 b9 ff ff ff ff ff ff ff 3f 4d 8d 51 01 44 8b 23 41 f6 c4 01 75 48 8b 43 04 83 f8 01 75 51 <0f> 01 f9 66 90 48 c1 e2 20 48 09 c2 4c 21 f2 4d 8b 47 08 48 2b 53
[  509.399764][T14619] RSP: 002b:00007fe9ac78bfe8 EFLAGS: 00010246
[  509.399782][T14619] RAX: 0000000000000001 RBX: 00007fe9ac78d000 RCX: 0000000000000001
[  509.399795][T14619] RDX: 00007fe9ababfa60 RSI: 00007fe9ac78c0b0 RDI: 0000000000000001
[  509.399809][T14619] RBP: 00007fe9ac78c030 R08: 0000000000000000 R09: 3fffffffffffffff
[  509.399823][T14619] R10: 4000000000000000 R11: 0000000000000246 R12: 0000000000017af0
[  509.399837][T14619] R13: 0000000000000010 R14: 7fffffffffffffff R15: 00007fe9ac78d038
[  509.399868][T14619]  </TASK>
[  509.796181][T14597] loop0: detected capacity change from 0 to 32768
[  510.834787][ T5871] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  510.987419][ T5871] usb 1-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00
[  510.988618][ T5871] usb 1-1: config index 0 descriptor too short (expected 45, got 36)
[  510.988664][ T5871] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  510.988686][ T5871] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  510.988709][ T5871] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  510.988732][ T5871] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  510.988767][ T5871] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  511.088565][ T5871] usb 1-1: config 0 descriptor??
[  511.093679][T14638] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  511.121911][   T31] kauditd_printk_skb: 3 callbacks suppressed
[  511.121927][   T31] audit: type=1800 audit(1794489009.098:1823): pid=6442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=246865 res=0 errno=-22
[  511.199226][   T31] audit: type=1800 audit(1794489009.178:1824): pid=6442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=246894 res=0 errno=-22
[  511.231816][   T31] audit: type=1800 audit(1794489009.208:1825): pid=6442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=246872 res=0 errno=-22
[  511.231861][   T31] audit: type=1800 audit(1794489009.208:1826): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=23630 res=0 errno=-22
[  511.296330][   T31] audit: type=1800 audit(1794489009.278:1827): pid=6442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=246873 res=0 errno=-22
[  511.297442][   T31] audit: type=1800 audit(1794489009.278:1828): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=23817 res=0 errno=-22
[  511.357728][   T31] audit: type=1800 audit(1794489009.338:1829): pid=6442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=246874 res=0 errno=-22
[  511.433162][   T31] audit: type=1800 audit(1794489009.408:1830): pid=6442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=246914 res=0 errno=-22
[  511.569483][T14650] loop7: detected capacity change from 0 to 64
[  511.660392][ T5871] hid_parser_main: 14 callbacks suppressed
[  511.660414][ T5871] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x1
[  511.660436][ T5871] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0
[  511.660453][ T5871] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0
[  511.660471][ T5871] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0
[  511.767709][   T31] audit: type=1800 audit(1794489009.748:1831): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15733 res=0 errno=-22
[  511.827196][   T31] audit: type=1800 audit(1794489009.808:1832): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=246939 res=0 errno=-22
[  511.910697][ T5871] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  511.967857][ T5871] usb 1-1: USB disconnect, device number 15
[  512.747604][T14647] loop8: detected capacity change from 0 to 49152
[  512.772484][T14647] EXT4-fs (loop8): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0
[  512.911590][T14647] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w with ordered data mode. Quota mode: none.
[  512.911701][T14647] ext4 filesystem being mounted at /181/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  513.104232][ T5785] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  513.260652][ T5785] usb 8-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00
[  513.262226][ T5785] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  513.262268][ T5785] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  513.316686][ T5785] keyspan 8-1:1.0: Keyspan 2 port adapter converter detected
[  513.331058][ T5785] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 81
[  513.331115][ T5785] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 1
[  513.356077][ T5785] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 84
[  513.356144][ T5785] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 2
[  513.383527][ T5785] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  513.407083][ T5785] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 88
[  513.407151][ T5785] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 6
[  513.442170][ T5785] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  513.689503][T10782] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  513.972437][T14676] loop9: detected capacity change from 0 to 33280
[  514.082234][T14676] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  514.082346][T14676] ext4 filesystem being mounted at /190/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  514.193785][T14676] fs-verity (loop9, inode 15): Verity descriptor has invalid size (0 bytes)
[  514.222812][T14676] fs-verity (loop9, inode 15): Verity descriptor has invalid size (0 bytes)
[  514.258263][T14676] fs-verity (loop9, inode 15): Verity descriptor has invalid size (0 bytes)
[  514.504869][T11221] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  514.617745][ T5783] usb 8-1: USB disconnect, device number 8
[  514.662361][ T5783] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  514.792653][ T5783] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  514.810918][ T5783] keyspan 8-1:1.0: device disconnected
[  515.114438][ T5871] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  515.266562][ T5871] usb 5-1: New USB device found: idVendor=18d1, idProduct=1eaf, bcdDevice=0.00
[  515.285284][ T5871] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  515.285309][ T5871] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  515.343576][ T5871] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  515.343602][ T5871] usb 5-1: Product: syz
[  515.343615][ T5871] usb 5-1: Manufacturer: syz
[  515.343629][ T5871] usb 5-1: SerialNumber: syz
[  515.912398][T14699] loop9: detected capacity change from 0 to 32768
[  515.984875][T14699] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  515.984893][T14699] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  516.040031][T14699] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[  516.118958][T14709] loop2: detected capacity change from 0 to 128
[  516.132175][ T5785] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  516.132191][ T5785] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  516.170970][T14709] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  516.171000][T14709] hpfs: filesystem error: improperly stopped
[  516.171014][T14709] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  516.171028][T14709] hpfs: You really don't want any checks? You are crazy...
[  516.171039][T14709] hpfs: Code page index out of array
[  516.171046][T14709] hpfs: code page support is disabled
[  516.171335][T14709] hpfs: hpfs_map_4sectors(): unaligned read
[  516.171418][T14709] hpfs: hpfs_map_4sectors(): unaligned read
[  516.171428][T14709] hpfs: filesystem error: unable to find root dir
[  516.309898][    C0] usb 5-1: invalid arpc response id received: 31085
[  516.380895][   T31] kauditd_printk_skb: 23 callbacks suppressed
[  516.380913][   T31] audit: type=1800 audit(1794489014.348:1856): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15118 res=0 errno=-22
[  516.528516][ T5871] usb 5-1: failed to send ARPC request 1: -71
[  516.528866][ T5871] usb 5-1: failed to execute ARPC: -71
[  516.528881][ T5871] usb 5-1: failed to set connected state for cport 0: -71
[  516.528898][ T5871] greybus greybus1: 0/0:0: failed to set connected state: -71
[  516.575273][ T5871] usb 5-1: failed to send ARPC request 3: -71
[  516.575483][ T5871] usb 5-1: failed to execute ARPC: -71
[  516.675756][ T5871] usb 5-1: failed to clear cport 0: -71
[  516.675778][ T5871] greybus greybus1: 0/0:0: failed to clear host cport: -71
[  516.786132][T14709] hpfs: hpfs_map_4sectors(): unaligned read
[  516.840229][ T5871] es2_ap_driver 5-1:1.0: probe with driver es2_ap_driver failed with error -71
[  516.903983][   T31] audit: type=1800 audit(1794489014.878:1857): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=247461 res=0 errno=-22
[  516.958338][   T31] audit: type=1800 audit(1794489014.938:1858): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=247476 res=0 errno=-22
[  517.001923][ T5871] usb 5-1: USB disconnect, device number 14
[  517.037523][T14717] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (comedi_parport)
[  517.053872][   T31] audit: type=1800 audit(1794489015.018:1859): pid=6433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=247313 res=0 errno=-22
[  517.055002][   T31] audit: type=1800 audit(1794489015.038:1860): pid=6433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=247314 res=0 errno=-22
[  517.117950][   T31] audit: type=1800 audit(1794489015.098:1861): pid=6433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=247293 res=0 errno=-22
[  517.250446][T14719] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3083'.
[  517.395311][ T5785] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 1263ms
[  517.412622][ T5785] gfs2: fsid=syz:syz.0: jid=0: Done
[  517.412669][T14699] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  517.972274][T14724] loop8: detected capacity change from 0 to 256
[  518.060333][   T31] audit: type=1800 audit(1794489016.028:1862): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15856 res=0 errno=-22
[  518.071264][T14724] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  518.071289][T14724] FAT-fs (loop8): Filesystem has been set read-only
[  518.071341][T14724] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  518.071367][T14724] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  518.071563][   T31] audit: type=1800 audit(1794489016.048:1863): pid=14724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.3086" name="file1" dev="loop8" ino=106 res=0 errno=-5
[  518.076894][T14724] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  518.221530][T14724] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  518.261126][T14724] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  518.334740][   T10] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  518.499424][   T10] usb 5-1: unable to get BOS descriptor or descriptor too short
[  518.499470][   T10] usb 5-1: New USB device found: idVendor=200c, idProduct=100b, bcdDevice=0.40
[  518.505115][ T5871] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  518.505668][   T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  518.517017][   T10] usb 5-1: string descriptor 0 read error: -22
[  518.517180][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  518.607389][   T31] audit: type=1800 audit(1794489016.588:1864): pid=6433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=247532 res=0 errno=-22
[  518.609024][   T31] audit: type=1800 audit(1794489016.588:1865): pid=6433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=247561 res=0 errno=-22
[  518.677009][ T5871] usb 3-1: Using ep0 maxpacket: 32
[  518.681121][ T5871] usb 3-1: New USB device found: idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  518.685538][ T5871] usb 3-1: config 0 has an invalid interface number: 51 but max is 0
[  518.685560][ T5871] usb 3-1: config 0 has no interface number 0
[  518.696377][ T5871] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  518.696402][ T5871] usb 3-1: Product: syz
[  518.696416][ T5871] usb 3-1: Manufacturer: syz
[  518.696429][ T5871] usb 3-1: SerialNumber: syz
[  518.699319][ T5871] usb 3-1: config 0 descriptor??
[  518.782486][ T5871] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  518.996890][ T5871] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  519.042718][ T5871] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  519.208364][    C0] quatech-serial ttyUSB0: qt2_process_read_urb - change_port message too short
[  519.211520][T14744] Set syz1 is full, maxelem 246 reached
[  519.298684][   T10] usb 5-1: current rate 47877 is different from the runtime rate 48000
[  519.418107][    C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71
[  519.418540][ T5871] usb 3-1: USB disconnect, device number 15
[  519.499444][ T5871] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  519.527706][ T5871] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  519.528278][ T5871] quatech2 3-1:0.51: device disconnected
[  519.932595][   T10] usb 5-1: USB disconnect, device number 15
[  520.385685][T14758] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  520.962083][T14771] FAULT_INJECTION: forcing a failure.
[  520.962083][T14771] name failslab, interval 1, probability 0, space 0, times 0
[  520.962114][T14771] CPU: 0 UID: 0 PID: 14771 Comm: syz.0.3098 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  520.962140][T14771] Tainted: [L]=SOFTLOCKUP
[  520.962148][T14771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  520.962160][T14771] Call Trace:
[  520.962168][T14771]  <TASK>
[  520.962177][T14771]  dump_stack_lvl+0xe8/0x150
[  520.962214][T14771]  should_fail_ex+0x3eb/0x540
[  520.962244][T14771]  should_failslab+0xa8/0x100
[  520.962279][T14771]  __kmalloc_cache_noprof+0x9e/0x600
[  520.962307][T14771]  ? __debugfs_file_get+0x144/0x720
[  520.962330][T14771]  ? __debugfs_file_get+0x144/0x720
[  520.962361][T14771]  __debugfs_file_get+0x144/0x720
[  520.962389][T14771]  ? __pfx___debugfs_file_get+0x10/0x10
[  520.962415][T14771]  ? __pfx_apparmor_file_open+0x10/0x10
[  520.962442][T14771]  ? srso_alias_return_thunk+0x5/0xfbef5
[  520.962470][T14771]  open_proxy_open+0x72/0x480
[  520.962493][T14771]  ? do_dentry_open+0x7ff/0x1360
[  520.962515][T14771]  ? __pfx_open_proxy_open+0x10/0x10
[  520.962540][T14771]  do_dentry_open+0x80e/0x1360
[  520.962572][T14771]  vfs_open_consume+0x4a/0x350
[  520.962592][T14771]  ? path_openat+0x16e1/0x20f0
[  520.962624][T14771]  path_openat+0x16fc/0x20f0
[  520.962671][T14771]  do_file_open+0x23e/0x4a0
[  520.962715][T14771]  ? __pfx_do_file_open+0x10/0x10
[  520.962764][T14771]  ? _raw_spin_unlock+0x28/0x50
[  520.962786][T14771]  ? srso_alias_return_thunk+0x5/0xfbef5
[  520.962809][T14771]  ? alloc_fd+0x6af/0x760
[  520.962847][T14771]  do_sys_openat2+0x115/0x200
[  520.962870][T14771]  ? srso_alias_return_thunk+0x5/0xfbef5
[  520.962892][T14771]  ? __se_sys_futex+0x3a8/0x450
[  520.962914][T14771]  ? __pfx_do_sys_openat2+0x10/0x10
[  520.962942][T14771]  ? rcu_is_watching+0x16/0xb0
[  520.962973][T14771]  ? srso_alias_return_thunk+0x5/0xfbef5
[  520.963001][T14771]  __x64_sys_openat+0x138/0x170
[  520.963029][T14771]  do_syscall_64+0x16a/0x530
[  520.963054][T14771]  ? trace_irq_disable+0x3b/0x140
[  520.963082][T14771]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  520.963108][T14771]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  520.963128][T14771] RIP: 0033:0x7fe388da94d9
[  520.963147][T14771] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  520.963163][T14771] RSP: 002b:00007fe389ca1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  520.963184][T14771] RAX: ffffffffffffffda RBX: 00007fe389025fa0 RCX: 00007fe388da94d9
[  520.963199][T14771] RDX: 0000000000000002 RSI: 0000200000000640 RDI: ffffffffffffff9c
[  520.963213][T14771] RBP: 00007fe388e3804e R08: 0000000000000000 R09: 0000000000000000
[  520.963226][T14771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  520.963238][T14771] R13: 00007fe389026038 R14: 00007fe389025fa0 R15: 00007fff3ea74428
[  520.963269][T14771]  </TASK>
[  521.342549][T14746] loop8: detected capacity change from 0 to 32768
[  521.415818][T14746] ocfs2: Slot 0 on device (7,8) was already allocated to this node!
[  521.455314][T14746] JBD2: Ignoring recovery information on journal
[  521.458504][   T31] kauditd_printk_skb: 36 callbacks suppressed
[  521.458518][   T31] audit: type=1800 audit(1794489019.438:1902): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15856 res=0 errno=-22
[  521.647426][T14746] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode.
[  521.712134][T14768] loop9: detected capacity change from 0 to 8192
[  521.825843][   T31] audit: type=1800 audit(1794489019.808:1903): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15979 res=0 errno=-22
[  522.589422][T14746] (syz.8.3091,14746,0):ocfs2_file_write_iter:2489 ERROR: status = -27
[  522.636711][T14800] loop4: detected capacity change from 0 to 1024
[  522.720510][T14800] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  522.786179][   T31] audit: type=1800 audit(1794489020.768:1904): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15364 res=0 errno=-22
[  522.827376][   T31] audit: type=1800 audit(1794489020.808:1905): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=248073 res=0 errno=-22
[  523.162907][T10782] ocfs2: Unmounting device (7,8) on (node local)
[  523.302657][T14809] loop2: detected capacity change from 0 to 256
[  523.430237][   T31] audit: type=1800 audit(1794489021.408:1906): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15118 res=0 errno=-22
[  523.950518][T14814] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  523.950627][T14814] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  524.174093][T14814] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  524.174214][T14814] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  524.177855][T14831] netlink: 'syz.7.3116': attribute type 2 has an invalid length.
[  524.177872][T14831] netlink: 'syz.7.3116': attribute type 2 has an invalid length.
[  524.400398][T14814] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  524.400508][T14814] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  524.488251][T14814] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  524.489773][T14814] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  524.524599][T14814] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  524.525414][T14814] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  524.551123][T14814] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  524.553731][T14814] Bluetooth: hci6: Opcode 0x0406 failed: -4
[  524.597987][T14840] loop4: detected capacity change from 0 to 33792
[  524.598747][T14840] EXT4-fs: Ignoring removed mblk_io_submit option
[  524.636249][T14840] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  524.636557][T14840] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  524.697522][T14840] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #11: comm syz.4.3119: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[  524.697566][T14840] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  524.699411][T14840] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.3119: couldn't read orphan inode 11 (err -117)
[  524.699437][T14840] loop4: lost filesystem error report for type 5 error -117
[  524.701482][T14840] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  524.791704][   T31] audit: type=1800 audit(1794489022.768:1907): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15364 res=0 errno=-22
[  524.791764][T14814] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  524.793156][T14814] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  524.912290][T14840] EXT4-fs (loop4): shut down requested (0)
[  525.042493][T14847] erspan0: entered promiscuous mode
[  525.184693][T14847] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3121'.
[  525.289960][T14856] netlink: 'syz.8.3123': attribute type 10 has an invalid length.
[  525.441699][T14856] syz_tun: entered promiscuous mode
[  525.521873][T14856] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  525.630074][T14863] FAULT_INJECTION: forcing a failure.
[  525.630074][T14863] name failslab, interval 1, probability 0, space 0, times 0
[  525.630105][T14863] CPU: 0 UID: 0 PID: 14863 Comm: syz.0.3125 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  525.630131][T14863] Tainted: [L]=SOFTLOCKUP
[  525.630139][T14863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  525.630151][T14863] Call Trace:
[  525.630159][T14863]  <TASK>
[  525.630168][T14863]  dump_stack_lvl+0xe8/0x150
[  525.630206][T14863]  should_fail_ex+0x3eb/0x540
[  525.630235][T14863]  should_failslab+0xa8/0x100
[  525.630268][T14863]  __kmalloc_noprof+0xf9/0x710
[  525.630295][T14863]  ? copy_net_ns+0x1ac/0x780
[  525.630324][T14863]  ? copy_net_ns+0x1ac/0x780
[  525.630359][T14863]  ? do_raw_spin_unlock+0xf5/0x200
[  525.630384][T14863]  copy_net_ns+0x1ac/0x780
[  525.630413][T14863]  ? copy_cgroup_ns+0x65c/0x880
[  525.630446][T14863]  create_new_namespaces+0x3f0/0x6b0
[  525.630481][T14863]  ? security_capable+0x7e/0x2c0
[  525.630517][T14863]  unshare_nsproxy_namespaces+0x144/0x190
[  525.630551][T14863]  ksys_unshare+0x532/0x890
[  525.630585][T14863]  ? __pfx_ksys_unshare+0x10/0x10
[  525.630619][T14863]  ? rcu_is_watching+0x16/0xb0
[  525.630668][T14863]  __x64_sys_unshare+0x38/0x50
[  525.630699][T14863]  do_syscall_64+0x16a/0x530
[  525.630725][T14863]  ? trace_irq_disable+0x3b/0x140
[  525.630753][T14863]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  525.630779][T14863]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  525.630803][T14863] RIP: 0033:0x7fe388da94d9
[  525.630822][T14863] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  525.630838][T14863] RSP: 002b:00007fe389ca1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  525.630859][T14863] RAX: ffffffffffffffda RBX: 00007fe389025fa0 RCX: 00007fe388da94d9
[  525.630874][T14863] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200
[  525.630886][T14863] RBP: 00007fe388e3804e R08: 0000000000000000 R09: 0000000000000000
[  525.630899][T14863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  525.630911][T14863] R13: 00007fe389026038 R14: 00007fe389025fa0 R15: 00007fff3ea74428
[  525.630942][T14863]  </TASK>
[  525.845739][ T5630] Bluetooth: hci3: command 0x0406 tx timeout
[  526.151068][T14869] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  526.211755][T14872] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  526.229516][T14865] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  526.233150][   T31] audit: type=1800 audit(1794489024.208:1908): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=248168 res=0 errno=-22
[  526.263459][ T5630] Bluetooth: hci4: command 0x0406 tx timeout
[  526.334766][ T5636] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  526.403864][ T5630] Bluetooth: hci2: command 0x0406 tx timeout
[  526.540376][T14878] batadv_slave_1: entered promiscuous mode
[  526.565748][ T5630] Bluetooth: hci6: command 0x0406 tx timeout
[  526.565782][ T5630] Bluetooth: hci5: command 0x0405 tx timeout
[  526.565805][ T5630] Bluetooth: hci1: command 0x0406 tx timeout
[  526.594611][T14876] batadv_slave_1: left promiscuous mode
[  526.711957][T14884] loop4: detected capacity change from 0 to 128
[  526.720781][T14884] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  526.741343][T14884] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  526.803915][ T5631] Bluetooth: hci0: command 0x1405 tx timeout
[  526.849862][   T31] audit: type=1800 audit(1794489024.828:1909): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15364 res=0 errno=-22
[  526.933759][ T5785] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  527.084775][ T5785] usb 3-1: New USB device found: idVendor=0d8c, idProduct=0022, bcdDevice=0.00
[  527.086734][ T5785] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  527.086760][ T5785] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  527.086792][ T5785] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  527.149862][ T5785] usb 3-1: config 0 descriptor??
[  527.168305][   T31] audit: type=1800 audit(1794489025.148:1910): pid=6442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=248202 res=0 errno=-22
[  527.228943][   T31] audit: type=1800 audit(1794489025.208:1911): pid=6442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=248231 res=0 errno=-22
[  527.230134][   T31] audit: type=1800 audit(1794489025.208:1912): pid=6442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=248209 res=0 errno=-22
[  527.345172][   T31] audit: type=1800 audit(1794489025.328:1913): pid=6442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=248210 res=0 errno=-22
[  527.379323][   T31] audit: type=1800 audit(1794489025.358:1914): pid=6442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=248211 res=0 errno=-22
[  527.453393][   T31] audit: type=1800 audit(1794489025.428:1915): pid=6442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=248251 res=0 errno=-22
[  527.671068][   T31] audit: type=1800 audit(1794489025.648:1916): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=248269 res=0 errno=-22
[  527.701587][ T5785] cm6533_jd 0003:0D8C:0022.0012: unknown main item tag 0x0
[  527.701684][ T5785] cm6533_jd 0003:0D8C:0022.0012: unknown main item tag 0x0
[  527.750534][ T5785] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.0012/input/input24
[  527.769385][   T31] audit: type=1800 audit(1794489025.748:1917): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=248291 res=0 errno=-22
[  527.842000][   T31] audit: type=1800 audit(1794489025.818:1918): pid=6433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ev" dev="sysfs" ino=248307 res=0 errno=-22
[  527.923450][ T5631] Bluetooth: hci3: command 0x0406 tx timeout
[  527.984483][ T5785] cm6533_jd 0003:0D8C:0022.0012: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0
[  528.045472][ T5785] usb 3-1: USB disconnect, device number 16
[  528.131252][T14896] loop0: detected capacity change from 0 to 64
[  528.324449][ T5631] Bluetooth: hci4: command 0x0406 tx timeout
[  528.405316][   T34] INFO: task syz.6.1950:11179 blocked for more than 204 seconds.
[  528.405343][   T34]       Tainted: G             L      syzkaller #0
[  528.405355][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  528.405364][   T34] task:syz.6.1950      state:D stack:25096 pid:11179 tgid:11178 ppid:9169   task_flags:0x400140 flags:0x00080002
[  528.405541][   T34] Call Trace:
[  528.405548][   T34]  <TASK>
[  528.405561][   T34]  __schedule+0x1828/0x58c0
[  528.405605][   T34]  ? do_writepages+0x4c1/0x560
[  528.405632][   T34]  ? srso_alias_return_thunk+0x5/0xfbef5
[  528.405675][   T34]  ? __pfx___schedule+0x10/0x10
[  528.405707][   T34]  ? schedule+0x90/0x2b0
[  528.405734][   T34]  schedule+0x164/0x2b0
[  528.405760][   T34]  schedule_preempt_disabled+0x13/0x30
[  528.405783][   T34]  __mutex_lock+0x7c4/0x15a0
[  528.405846][   T34]  ? __mutex_lock+0x5cd/0x15a0
[  528.405877][   T34]  ? sync_bdevs+0x294/0x480
[  528.405913][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  528.405946][   T34]  ? __pfx_kobject_get_unless_zero+0x10/0x10
[  528.405970][   T34]  ? iput+0x451/0xf00
[  528.406001][   T34]  sync_bdevs+0x294/0x480
[  528.406037][   T34]  __ia32_sys_sync+0xc5/0x120
[  528.406069][   T34]  ? __pfx___ia32_sys_sync+0x10/0x10
[  528.406103][   T34]  ? do_syscall_64+0xc8/0x530
[  528.406132][   T34]  do_syscall_64+0x16a/0x530
[  528.406156][   T34]  ? trace_irq_disable+0x3b/0x140
[  528.406186][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  528.406213][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  528.406233][   T34] RIP: 0033:0x7fd6a79a94d9
[  528.406251][   T34] RSP: 002b:00007fd6a8856028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2
[  528.406272][   T34] RAX: ffffffffffffffda RBX: 00007fd6a7c25fa0 RCX: 00007fd6a79a94d9
[  528.406287][   T34] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  528.406300][   T34] RBP: 00007fd6a7c25fa0 R08: 0000000000000000 R09: 0000000000000000
[  528.406313][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  528.406325][   T34] R13: 00007fd6a7c26038 R14: 00007fd6a7c25fa0 R15: 00007fff216065b8
[  528.406358][   T34]  </TASK>
[  528.406397][   T34] 
[  528.406397][   T34] Showing all locks held in the system:
[  528.406406][   T34] locks held by kworker/0:0/10: 3, last CPU#0:
[  528.406421][   T34]  #0: ffff88813fe0e148 ((wq_completion)events_freezable){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  528.406484][   T34]  #1: ffffc900000f7c40 ((work_completion)(&hcd->wakeup_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  528.406543][   T34]  #2: ffff88802a3491d8 (&dev->mutex){....}-{4:4}, at: usb_remote_wakeup+0x23/0x120
[  528.406603][   T34] locks held by khungtaskd/34: 1, on CPU#0:
[  528.406617][   T34]  #0: ffffffff9015a260 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  528.406708][   T34] locks held by udevd/4995: 1, on CPU#0:
[  528.406722][   T34]  #0: ffff88807c9b9bb8 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}, at: process_measurement+0x7d0/0x1c10
[  528.406956][   T34] locks held by udevd/5644: 1, last CPU#0:
[  528.406975][   T34]  #0: ffff88802773d350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70
[  528.407036][   T34] locks held by kworker/0:6/5785: 6, on CPU#0:
[  528.407049][   T34]  #0: ffff888022abd548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  528.407109][   T34]  #1: ffffc90004cffc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  528.407167][   T34]  #2: ffff88802ab451d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30
[  528.407213][   T34]  #3: ffff8880794161d8 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xfc/0x9a0
[  528.407267][   T34]  #4: ffff88802b4ac1a0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xa9/0x7d0
[  528.407319][   T34]  #5: ffff888070dc9a58 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xa9/0x7d0
[  528.407398][   T34] locks held by syz.6.1950/11179: 1, last CPU#0:
[  528.407412][   T34]  #0: ffff88802773d350 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x294/0x480
[  528.407478][   T34] locks held by getty/13595: 2, last CPU#0:
[  528.407491][   T34]  #0: ffff888029c8e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  528.407543][   T34]  #1: ffffc9000575b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360
[  528.407591][   T34] locks held by syz.4.3135/14892: 2, on CPU#0:
[  528.407604][   T34]  #0: ffff888036108340 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x19c/0xa40
[  528.407654][   T34]  #1: ffffffff9015a260 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240
[  528.407707][   T34] locks held by syz.0.3137/14896: 1, on CPU#0:
[  528.407721][   T34]  #0: ffff8880364c8478 (sb_writers#27){.+.+}-{0:0}, at: direct_splice_actor+0x49/0x160
[  528.407780][   T34] locks held by syz.0.3137/14906: 1, on CPU#0:
[  528.407794][   T34]  #0: ffff8880274c3bc0 (&sb->s_type->i_mutex_key#39){+.+.}-{4:4}, at: __blockdev_direct_IO+0x351/0x3380
[  528.407855][   T34] locks held by syz.8.3139/14901: 2, on CPU#0:
[  528.407868][   T34]  #0: ffff88803610d900 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x2d5/0xa40
[  528.407917][   T34]  #1: ffff8880786a4a88 (vm_lock){++++}-{0:0}, at: __vma_start_write+0xdc/0x290
[  528.407964][   T34] locks held by syz.7.3138/14903: 2, on CPU#0:
[  528.407978][   T34]  #0: ffff88803610ccc0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x19c/0xa40
[  528.408026][   T34]  #1: ffffffff9015a260 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240
[  528.408073][   T34] locks held by fido_id/14902: 2, on CPU#0:
[  528.408086][   T34]  #0: ffff88807d301bc0 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1ed/0x520
[  528.408138][   T34]  #1: ffff8880369c88b0 (&anon_vma->rwsem){++++}-{4:4}, at: validate_mm+0x1e4/0x4c0
[  528.408195][   T34] locks held by sed/14907: 2, on CPU#0:
[  528.408208][   T34]  #0: ffff88813fe32800 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x19c/0xa40
[  528.408255][   T34]  #1: ffffffff9015a260 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240
[  528.408304][   T34] 
[  528.408309][   T34] =============================================
[  528.408309][   T34] 
[  528.408318][   T34] NMI backtrace for cpu 0
[  528.408332][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  528.408357][   T34] Tainted: [L]=SOFTLOCKUP
[  528.408364][   T34] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  528.408376][   T34] Call Trace:
[  528.408384][   T34]  <TASK>
[  528.408392][   T34]  dump_stack_lvl+0xe8/0x150
[  528.408427][   T34]  nmi_cpu_backtrace+0x274/0x2d0
[  528.408450][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  528.408476][   T34]  nmi_trigger_cpumask_backtrace+0x17d/0x390
[  528.408505][   T34]  sys_info+0x135/0x170
[  528.408534][   T34]  watchdog+0x1073/0x10f0
[  528.408569][   T34]  ? watchdog+0x209/0x10f0
[  528.408602][   T34]  kthread+0x38b/0x480
[  528.408626][   T34]  ? __pfx_watchdog+0x10/0x10
[  528.408651][   T34]  ? __pfx_kthread+0x10/0x10
[  528.408680][   T34]  ret_from_fork+0x514/0xb70
[  528.408706][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  528.408728][   T34]  ? srso_alias_return_thunk+0x5/0xfbef5
[  528.408750][   T34]  ? __switch_to+0xc78/0x1410
[  528.408772][   T34]  ? __pfx_kthread+0x10/0x10
[  528.408797][   T34]  ret_from_fork_asm+0x1a/0x30
[  528.408833][   T34]  </TASK>
[  528.485182][ T5631] Bluetooth: hci2: command 0x0406 tx timeout
[  528.562186][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  529.140987][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  529.151737][   T34] Tainted: [L]=SOFTLOCKUP
[  529.156041][   T34] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  529.166081][   T34] Call Trace:
[  529.169873][   T34]  <TASK>
[  529.172787][   T34]  vpanic+0x26f/0x710
[  529.176936][   T34]  panic+0xc5/0xd0
[  529.180653][   T34]  ? __pfx_panic+0x10/0x10
[  529.185049][   T34]  ? preempt_schedule_common+0x7f/0xd0
[  529.190523][   T34]  ? preempt_schedule_thunk+0x16/0x40
[  529.195913][   T34]  ? nmi_trigger_cpumask_backtrace+0x31a/0x390
[  529.202077][   T34]  ? nmi_trigger_cpumask_backtrace+0x31f/0x390
[  529.208258][   T34]  watchdog+0x10e7/0x10f0
[  529.212597][   T34]  ? watchdog+0x209/0x10f0
[  529.217016][   T34]  kthread+0x38b/0x480
[  529.221075][   T34]  ? __pfx_watchdog+0x10/0x10
[  529.225746][   T34]  ? __pfx_kthread+0x10/0x10
[  529.230327][   T34]  ret_from_fork+0x514/0xb70
[  529.234905][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  529.240001][   T34]  ? srso_alias_return_thunk+0x5/0xfbef5
[  529.245619][   T34]  ? __switch_to+0xc78/0x1410
[  529.250282][   T34]  ? __pfx_kthread+0x10/0x10
[  529.254860][   T34]  ret_from_fork_asm+0x1a/0x30
[  529.259631][   T34]  </TASK>
[  529.262639][   T34] Kernel Offset: disabled
[  529.267030][   T34] Rebooting in 86400 seconds..