last executing test programs:

1m49.811132029s ago: executing program 0 (id=32):
ioprio_set$uid(0x3, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0)
pwritev2(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="a76054", 0x3}], 0x1, 0x0, 0x0, 0x17)

1m49.029076916s ago: executing program 0 (id=39):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000001c0)={@val={0x2000}, @void, @eth={@broadcast, @link_local, @void, {@mpls_uc}}}, 0x12)

1m48.804161596s ago: executing program 0 (id=40):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sec\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/apparmor/profiles\x00', 0x0, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
close_range(r0, 0xffffffffffffffff, 0x200000000000000)

1m48.736902619s ago: executing program 0 (id=41):
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f00000002c0)={[{@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@norecovery}]}, 0x1, 0x7b9, &(0x7f00000007c0)="$eJzs3d9rHNUeAPDvbJLmR3tvcuFy7+1b4EJvoHRzU2Or4EPFBxEsFPTZNmy2oWaTLdlNaULAFhF8EVR8EPSlz/6ob776A3zS/8IHaamaFis+SGR2Z5M02c2vJtloPh+YzDkzsznnO+fMzNmdYTeAQ2sw/ZOLOB4RbycR/dnyJCK6aqnOiHP17R4uLvRERCGJpaWXfkpq2zxYXCjEqtekjmaZ/0TEV29EnMytL7cyNz85VioVZ7L8cHXq6nBlbv7UlamxieJEcfrMyOjo6bNPnj2ze7H+8t38sbvvPP+/T8/99vq/b7/1dRLn4li2bnUcu2UwBrN90pXuwkc8t9uFtVnS7gqwI+mh2VE/yuN49EdHLdVC737WDADYK69FxBIAcMgkrv8AcMg0Pgd4sLhQaEzt/URif917NiJ66vE/zKb6ms7snl1P7T5o34PkkTsjSUQM7EL5gxHx4eevnOjI8mk93EsD9sONmxFxaWBw/fk/WffMwnb9f6OVS9212eCaxYft+gPt9EU6/nmq2fgvtzz+iSbjn+76sfuvxy1/8+M/d+dxy9hIOv57pv5s25rx3/JDawMdWe5vtTFfV3L5SqmYntv+HhFD0dWd5kdqmzYfuQ3d//1+q/Kz8d/H6fTzu69+lJafzle2yN3p7H70NeNj1c5vHjfwzL2b0Zcl18SfLLd/0mL8e2GLZbzw9JsftFqXxp/G25jWx7+3lm5FnGja/ittmWz4fOJwrTsMNzpFE599/35fq/JXt386peWn892PtLl7N6PWAZJkZR/U1yzHP5Csfl6zsv0yvr3V/2WrdZvH37T/jx1JXq6lj2TLro9VqzMjEUeSF9cvP73y2ka+sX0a/9B/mx//9WKb9//0PeGlLcbfeffHT3Ye/95K4x/fuP+vaf+ebPHKks0Stx9OdrQqf2vtP1pLDWVL0vbfLK6t1GtnvRkAAAAAAAAAAAAAAAAAAAAAAAAAti8XEcciyeWX07lcPl//De9/Rl+uVK5UT14uz06PR+23sgeiK9f4qsv+Vd+HOpJ9H34jf3pN/omI+EdEvNfdW8vnC+XSeLuDBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDM0Ra//5/6obvdtQMA9kxPuysAAOw7138AOHy2d/3v3bN6AAD7x/t/ADh8tnz9v7S39QAA9o/3/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOyxC+fPp9PSr4sLhTQ/fm1udrJ87dR4sTKZn5ot5Avlmav5iXJ5olTMF8pTLf/RjfqsVC5fHY3p2evD1WKlOlyZm784VZ6drl68MjU2UbxY7Nq3yAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg6ypz85NjpVJx5i+RuLES2C7/5962xtV3MHbvqkRnHIhqHOhEdxyIauwwsfos0duGMxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAn8MfAQAA//94WBdi")
creat(&(0x7f00000004c0)='./bus\x00', 0x20)
mount(&(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000540)='./bus\x00', 0x4c000, 0x14c)
preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4083, 0xffffffdf}], 0x20, 0x0, 0x0, 0x1f)

1m48.542616169s ago: executing program 0 (id=42):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
setsockopt$inet_int(r0, 0x0, 0x3, 0x0, 0x0)

1m48.027581723s ago: executing program 0 (id=47):
r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x10, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000300)=<r3=>0x0, &(0x7f0000000400)=<r4=>0x0)
syz_io_uring_submit(r2, r3, r4, &(0x7f0000000800)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x1}})
syz_io_uring_submit(r2, r0, r4, &(0x7f0000000900)=@IORING_OP_RENAMEAT={0x23, 0x19, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x6})
io_uring_enter(r1, 0x2, 0x0, 0x0, 0x0, 0x0)

1m47.500221378s ago: executing program 32 (id=47):
r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x10, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000300)=<r3=>0x0, &(0x7f0000000400)=<r4=>0x0)
syz_io_uring_submit(r2, r3, r4, &(0x7f0000000800)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x1}})
syz_io_uring_submit(r2, r0, r4, &(0x7f0000000900)=@IORING_OP_RENAMEAT={0x23, 0x19, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x6})
io_uring_enter(r1, 0x2, 0x0, 0x0, 0x0, 0x0)

48.176330687s ago: executing program 4 (id=418):
r0 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd)
pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0xe5)
r2 = add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000140)="be13", 0x2, r0)
keyctl$unlink(0x9, r2, r0)

48.1009093s ago: executing program 4 (id=419):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x3f)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000000)='3', 0x4e)
set_mempolicy(0x4005, &(0x7f0000000040)=0x13, 0x6)

47.701933829s ago: executing program 4 (id=420):
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1_to_team\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x9, 0xf}, {}, {0x10, 0x5}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0xe6a7, 0x0, 0xfffe}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40004}, 0x2008c010)

47.423059623s ago: executing program 4 (id=421):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x84000, 0x0)

47.324383537s ago: executing program 4 (id=422):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000003c0)={0x0, 0x80000001}, 0x8)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="5a00000002000000", 0x8)
sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000000)='M', 0x1}], 0x1}, 0x1)

46.926056396s ago: executing program 4 (id=424):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x9)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x7f)

46.240082928s ago: executing program 33 (id=424):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x9)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x7f)

5.784854677s ago: executing program 3 (id=632):
r0 = socket$unix(0x1, 0x5, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000100)={0x0, 0x20, &(0x7f00000000c0)={&(0x7f0000000640)={0x40, r2, 0x1, 0xfffffffd, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x1]}}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x40}}, 0x0)

5.670762053s ago: executing program 3 (id=633):
syz_mount_image$xfs(&(0x7f0000000280), &(0x7f0000009740)='./file1\x00', 0x8, &(0x7f0000009780), 0x1, 0x9798, &(0x7f0000016540)="$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")
syz_mount_image$exfat(0x0, &(0x7f0000000300)='./bus\x00', 0x400, 0x0, 0x0, 0x0, &(0x7f0000000300))
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x0)
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0)

5.185682526s ago: executing program 1 (id=638):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0xd1)
setsockopt$inet_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000280)="d5", 0x1)
listen(r0, 0xe)
accept$inet(r0, 0x0, 0x0)

4.975665016s ago: executing program 5 (id=639):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x10, 0x1000000, @vifc_lcl_addr=@multicast2, @remote}, 0x10)
setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000280)={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, "614af285791a63abd0f993af8077b5cd01e03d64a831683fdc3fd440829c82ae"}, 0x3c)
close(r0)

4.749040316s ago: executing program 1 (id=640):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_LAPIC(r2, 0x8400ae8e, &(0x7f0000000d40))

4.488110989s ago: executing program 5 (id=643):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000000)='3', 0x4e)
setresuid(0x0, 0xee01, 0x0)

4.24465055s ago: executing program 1 (id=644):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
fcntl$setstatus(r1, 0x4, 0x800)
preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000700)=""/73, 0x49}, {0x0}], 0x2, 0x5, 0xffe)

3.995268802s ago: executing program 5 (id=645):
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000001c0)="b9800000890f3235000400000f30440f20c03508000000440f22c036646665f36526f20f22a5430f01c50f01d1edc4a39979250b00000008b9800000c00f3235010000000f30f245ab48b800000000000000800f23c00f21f83500000b000f23f8c481e57dcd", 0x66}], 0x1, 0x10, 0x0, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000000000000000000400", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}})

3.636506209s ago: executing program 5 (id=646):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000340)='./file1\x00', 0x40, &(0x7f000001f500)={[{@compress_algo={'compress', 0x3d, 'zstd'}}, {@clear_cache}, {@space_cache_v1}]}, 0xff, 0x50d4, &(0x7f00000051c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
fallocate(r0, 0x0, 0x7351, 0x8001)
write$FUSE_GETXATTR(r0, &(0x7f0000000040)={0x18, 0xffffffffffffffda, 0x0, {0x2}}, 0x18)
lseek(r0, 0x0, 0x3)

2.584186698s ago: executing program 3 (id=650):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10)
sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000180)=0xffffffffffffffff)
recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb)

2.33498058s ago: executing program 2 (id=652):
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./sys_sec\x00', 0x10, 0x0, 0x1, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x4a)
read(r0, &(0x7f0000000300)=""/24, 0x18)
read(r0, &(0x7f0000000280)=""/26, 0x1a)

2.11319071s ago: executing program 1 (id=653):
syz_open_dev$usbmon(&(0x7f0000000240), 0x8, 0x1c1300)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fd/3\x00')
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x200a})
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)={0x2000000b})

2.033813194s ago: executing program 2 (id=654):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, 0x0, &(0x7f0000000040)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.69925903s ago: executing program 1 (id=655):
r0 = socket$unix(0x1, 0x1, 0x0)
fstat(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x804, &(0x7f0000000640)=ANY=[@ANYBLOB='utf8,dmask=00000000000000000000004,iocharset=cp949,namecase=1,uid=', @ANYRESHEX=0x0, @ANYBLOB=',iocharset=iso8859-3,fmask=00000000000000000000000,uid=', @ANYRESHEX=r1, @ANYBLOB=',errors=remount-ro,errors=continue,allow_utime=00000000000000000200000,time_offset=0xfffffffffgffff05,\x00'], 0x4, 0x153b, &(0x7f0000001280)="$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")
stat(&(0x7f0000000300)='./sec/tomoyo/profile\x00', 0x0)
lstat(&(0x7f00000004c0)='./sec\x00', 0x0)

1.242436192s ago: executing program 2 (id=656):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4080000}, 0x80)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810)
recvmsg(r1, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20)

1.174749055s ago: executing program 1 (id=657):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0)
syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x3, 0x101000)
syz_usb_disconnect(r0)
syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[], 0x0)
syz_usb_disconnect(r0)

1.084676679s ago: executing program 5 (id=658):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_team\x00', <r1=>0x0})
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4)
sendto$packet(r0, &(0x7f00000000c0)="3f03fe7feee8140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14)

907.130987ms ago: executing program 2 (id=659):
syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000140)='./bus\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0x1, 0x2f6, &(0x7f0000000700)="$eJzs3U1rE0Ecx/HfbJI2faDGtiJ4UaoFvRSrHsRLQHL17knUJoViqNhWUC9W8Si+APHqKxB8EV4qvgFvevEF9OTKzM4mm3SzSTDb9OH7gS6zszOz/2GfZlbiCsCpdbf28/PNX/bPSAUVJN2RAkllqSjpnM6Xn2/ubOw0G/Wshgquhv0zimqaaMNUu8zaZiOtqq3nangVu1bUbDIP+Qj/hmEohW6JU8td/SkCadJfh257+ZDjysuudHHcMYzU7/5FkgfY7GtfLzSXZ0gAgKPPP/8D/5iYdVlGQSAt+8f+iXr+7487gNG6NXEgK3s8n3j+u9FdaOzxPeM2ted7bgpntwfxLHGQYEpd6y62oGuAafrNKl0swdT6RlEra29UD/RWVS9RbNEt69GpG+sT7VI8Nx1M79ZKujcd9caNKLvFIa1vNBuTNpES/8Jwe/x/5pv5bh6Yij6q3hr/FUOjCX2SvrjVjiMVlGz813u3OGMXFVtKftpfrVaDjiJn3U4u+HPB69PLcvqMJNlm/IJgtxVBVpxu3/PqfK0Q9W61T62FtFqV1lqPWosdtQr+TFhZe9rMfJWSj7iL5oO5b5b0R19VS4z/AxvfshJXZtat3riS/syI+nPwDuTb9bqaa18ul7pLTg7VL3jDvS17r8e6rbntl6+eFJrNxpZNPEpJPJvdMj6n9E5KLZN/oqCMMtpt54TW6zActOUwz+CvjbRBe/9o5djLJ62wvcpaOcFhHyafiM+x8ex9lIkevajtKeuEPD6JMJR6bMrhDoUjZ9vEB91nTI05IBw2O+4y0fzPjeT9qM5NkeyikjFO7/uPRokWV1szuM6h4LxbTg81g5vpPYNL7PFGjzmjm3NdvipdSWQaZe6x4uM8IUxNP/SQ9/8AAAAAAAAAAAAAAAAAAADHzQh/ThD/kvHApjF3EQAAAAAAAAAAAAAAAAAAAACAY2+A7//O70VF219qSvs/4t33fysp3/9NGN33f7O/DARgIP8CAAD//wP4dNM=")
openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4842, 0x1ff)
unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0)
creat(&(0x7f0000000580)='./bus\x00', 0x0)
rename(&(0x7f0000000100)='./bus\x00', &(0x7f0000000140)='./file1\x00')

696.441817ms ago: executing program 3 (id=660):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @empty, 0x2}, 0x1c)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f00000000c0)=0x4, 0x4)
bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0xfffffffd, @mcast2, 0x12}, 0x1c)

481.013748ms ago: executing program 2 (id=661):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000018c0)={0x4c, r1, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x5}, @NL80211_ATTR_PMKID={0x14, 0x55, "c5db6d8b6ec822ff46f876846f30481c"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x4f}, @NL80211_ATTR_MAC={0xa, 0x6, @random="970732f94021"}]}, 0x4c}}, 0x20008010)

409.208601ms ago: executing program 3 (id=662):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005a40), r0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000005a80)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000005ac0)={0x30, r2, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x3, 0x70}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x40004}, 0x0)

33.189419ms ago: executing program 3 (id=663):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x1, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="200004000000001008007c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17.054189ms ago: executing program 2 (id=664):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
socket$packet(0x11, 0x3, 0x300)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4)
syz_emit_ethernet(0x33, &(0x7f0000000140)={@link_local, @random="4bb7e00d2cac", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x25, 0x100, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x11, 0x0, @gue={{0x1, 0x1, 0x0, 0x3, 0x100, @void}, "1c013fe5e7"}}}}}}, 0x0)

0s ago: executing program 5 (id=665):
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$FIBMAP(r0, 0x1261, 0x0)

kernel console output (not intermixed with test programs):

 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  103.648897][    C1] igorplugusb 1-1:0.0: receive overflow invalid: 255
[  103.665220][ T2987] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  103.680368][ T5823] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  103.726253][ T5823] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  103.753784][ T5823] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  103.769011][ T5823] usb 4-1: config 0 descriptor??
[  103.777909][ T5823] hub 4-1:0.0: USB hub found
[  103.907104][ T5846] usb 1-1: USB disconnect, device number 2
[  103.972419][ T5862] syz.2.7[5862]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[  104.019911][ T5864] input: syz0 as /devices/virtual/input/input6
[  104.028963][ T5823] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19)
[  104.142098][ T5862] loop2: detected capacity change from 0 to 4096
[  104.207752][ T5862] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512).
[  104.368206][ T5862] ntfs3: loop2: Failed to initialize $Extend/$ObjId.
[  104.469667][ T5823] hid-generic 0003:046D:C31C.0001: unknown main item tag 0x0
[  104.532701][ T5823] hid-generic 0003:046D:C31C.0001: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.3-1/input0
[  104.676004][ T5847] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  104.683728][ T5871] loop0: detected capacity change from 0 to 16
[  104.776268][ T5783] Bluetooth: hci2: command tx timeout
[  104.780206][ T5790] Bluetooth: hci3: command tx timeout
[  104.801087][ T5871] erofs: (device loop0): mounted with root inode @ nid 36.
[  104.856916][ T5790] Bluetooth: hci0: command tx timeout
[  104.867029][ T5847] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  104.895163][ T5847] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  104.925054][ T5847] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  104.935371][ T5790] Bluetooth: hci1: command tx timeout
[  104.963987][ T5847] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  104.999882][ T5847] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  105.068467][ T5847] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  105.092739][ T5847] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  105.115701][ T5847] usb 2-1: Product: syz
[  105.125438][ T5847] usb 2-1: Manufacturer: syz
[  105.141791][ T5847] cdc_wdm 2-1:1.0: skipping garbage
[  105.155220][ T5847] cdc_wdm 2-1:1.0: skipping garbage
[  105.183598][ T5847] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  105.195135][ T5847] cdc_wdm 2-1:1.0: Unknown control protocol
[  105.205478][   T23] usb 4-1: USB disconnect, device number 2
[  105.272416][    T8] cfg80211: failed to load regulatory.db
[  105.555146][ T5873] loop2: detected capacity change from 0 to 32768
[  105.577949][ T5873] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.11 (5873)
[  105.617587][ T5873] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  105.633568][ T5873] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  105.642897][ T5873] BTRFS info (device loop2): using free space tree
[  105.839546][ T5873] BTRFS info (device loop2): enabling ssd optimizations
[  105.854632][ T5873] BTRFS info (device loop2): auto enabling async discard
[  106.016968][ T5821] usb 2-1: USB disconnect, device number 2
[  106.189073][ T5903] =======================================================
[  106.189073][ T5903] WARNING: The mand mount option has been deprecated and
[  106.189073][ T5903]          and is ignored by this kernel. Remove the mand
[  106.189073][ T5903]          option from the mount to silence this warning.
[  106.189073][ T5903] =======================================================
[  106.318650][ T5777] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  106.404035][ T5907] capability: warning: `syz.3.19' uses deprecated v2 capabilities in a way that may be insecure
[  106.563108][ T5911] loop1: detected capacity change from 0 to 512
[  106.634062][ T5911] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  106.695653][ T5911] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  106.723938][ T5793] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop2 scanned by udevd (5793)
[  106.753757][ T5915] process 'syz.3.22' launched './file0' with NULL argv: empty string added
[  106.800297][ T5911] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082]
[  106.835220][ T5911] System zones: 1-12
[  106.852956][ T5911] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  106.883698][ T5911] EXT4-fs (loop1): 1 truncate cleaned up
[  106.894139][ T5911] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  107.241063][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.275292][ T5930] loop8: detected capacity change from 0 to 7
[  107.315343][ T5930] Dev loop8: unable to read RDB block 7
[  107.341601][ T5930]  loop8: unable to read partition table
[  107.355448][ T5930] loop8: partition table beyond EOD, truncated
[  107.386547][ T5930] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5)
[  108.035228][ T5940] loop0: detected capacity change from 0 to 32768
[  108.045614][ T1200] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  108.208165][ T5940] jfs_rmdir: dtDelete returned -2
[  108.235017][ T1200] usb 3-1: Using ep0 maxpacket: 32
[  108.243964][ T1200] usb 3-1: config index 0 descriptor too short (expected 29220, got 36)
[  108.267801][ T1200] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  108.295933][ T1200] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81
[  108.314169][ T1200] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  108.345380][ T1200] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  108.384980][ T1200] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  108.435034][ T1200] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  108.468071][ T5946] dlm: non-version read from control device 4096
[  108.489025][ T1200] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  108.516776][ T1200] usb 3-1: config 0 descriptor??
[  108.776490][ T1200] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  108.787675][ T5952] Bluetooth: MGMT ver 1.22
[  109.096738][ T5821] usb 3-1: USB disconnect, device number 2
[  109.124662][ T5821] usblp0: removed
[  109.184865][ T5963] syz.0.39 uses obsolete (PF_INET,SOCK_PACKET)
[  109.428736][ T5967] loop0: detected capacity change from 0 to 2048
[  109.487259][ T5967] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  109.561460][ T5778] EXT4-fs error (device loop0): ext4_ext_check_inode:532: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  109.594124][ T5778] EXT4-fs error (device loop0): ext4_ext_check_inode:532: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  109.929771][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  109.941247][ T5973] device-mapper: ioctl: Invalid ioctl structure: name m, dev f800
[  110.164320][ T5982] loop1: detected capacity change from 0 to 256
[  110.184539][ T5982] exfat: Deprecated parameter 'utf8'
[  110.193720][ T5982] exfat: Deprecated parameter 'namecase'
[  110.217197][   T74] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.281206][ T5982] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  110.453308][   T74] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.578608][   T74] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.700279][   T74] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.755188][ T5991] netlink: 'syz.2.53': attribute type 9 has an invalid length.
[  110.763090][ T5991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.53'.
[  110.840205][ T5991] gretap0: entered promiscuous mode
[  110.880875][ T5991] macvlan2: entered promiscuous mode
[  110.895442][ T5991] macvlan2: entered allmulticast mode
[  110.910040][ T5991] gretap0: entered allmulticast mode
[  110.945100][ T5992] netlink: 'syz.2.53': attribute type 9 has an invalid length.
[  110.995015][ T5992] netlink: 8 bytes leftover after parsing attributes in process `syz.2.53'.
[  111.058959][ T5992] macvlan3: entered promiscuous mode
[  111.064555][ T5992] macvlan3: entered allmulticast mode
[  111.102512][ T5992] Zero length message leads to an empty skb
[  111.274392][ T5783] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  111.284035][ T5783] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  111.292764][ T5783] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  111.308004][ T5783] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  111.321254][ T5783] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  111.340594][ T5783] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  111.863423][ T6017] binder: 6016:6017 ioctl c0306201 200000000080 returned -14
[  112.361622][ T6008] loop3: detected capacity change from 0 to 32768
[  112.478458][ T6008] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  112.635623][ T1200] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  112.636707][ T6008] XFS (loop3): Ending clean mount
[  112.666452][ T6045] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  112.710801][ T6000] chnl_net:caif_netlink_parms(): no params data found
[  112.855670][   T28] audit: type=1800 audit(1789183289.253:2): pid=6008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.59" name="file1" dev="loop3" ino=6150 res=0 errno=0
[  112.882481][ T1200] usb 3-1: Using ep0 maxpacket: 32
[  112.902485][ T1200] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  112.925286][ T1200] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  112.943558][ T1200] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  112.953203][ T1200] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  112.990208][ T1200] usb 3-1: config 0 descriptor??
[  113.009986][ T1200] hub 3-1:0.0: USB hub found
[  113.220248][ T1200] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19)
[  113.320333][ T6000] bridge0: port 1(bridge_slave_0) entered blocking state
[  113.327991][ T6000] bridge0: port 1(bridge_slave_0) entered disabled state
[  113.335391][ T6000] bridge_slave_0: entered allmulticast mode
[  113.343683][ T6000] bridge_slave_0: entered promiscuous mode
[  113.361657][ T6000] bridge0: port 2(bridge_slave_1) entered blocking state
[  113.371616][ T6000] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.381036][ T6000] bridge_slave_1: entered allmulticast mode
[  113.407668][ T6000] bridge_slave_1: entered promiscuous mode
[  113.414577][ T5780] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  113.504046][ T5783] Bluetooth: hci3: command tx timeout
[  113.658372][ T1200] hid-generic 0003:046D:C31C.0002: item fetching failed at offset 0/1
[  113.679314][ T6000] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  113.687831][ T1200] hid-generic: probe of 0003:046D:C31C.0002 failed with error -22
[  113.929367][ T6000] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  114.040421][    T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  114.057104][ T5767] usb 3-1: USB disconnect, device number 3
[  114.083692][    T9] smpboot: CPU 1 is now offline
[  114.185880][    T8] hid-generic 0000:0000:0000.0003: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  114.261155][ T6000] team0: Port device team_slave_0 added
[  114.435711][ T6070] smpboot: Booting Node 0 Processor 1 APIC 0x1
[  114.663148][ T6000] team0: Port device team_slave_1 added
[  114.841654][ T6077] netlink: 8 bytes leftover after parsing attributes in process `syz.2.71'.
[  114.852020][ T6000] batman_adv: batadv0: Adding interface: batadv_slave_0
[  114.872334][ T6000] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  114.931247][ T6000] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  114.971289][ T6000] batman_adv: batadv0: Adding interface: batadv_slave_1
[  115.008479][ T6000] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  115.134992][ T6000] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  115.242836][   T74] hsr_slave_0: left promiscuous mode
[  115.250214][   T74] hsr_slave_1: left promiscuous mode
[  115.274184][   T74] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  115.292266][   T74] batman_adv: batadv0: Removing interface: batadv_slave_0
[  115.319563][   T74] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  115.340468][   T74] batman_adv: batadv0: Removing interface: batadv_slave_1
[  115.412419][   T74] bridge_slave_1: left allmulticast mode
[  115.423127][   T74] bridge_slave_1: left promiscuous mode
[  115.438785][   T74] bridge0: port 2(bridge_slave_1) entered disabled state
[  115.486491][   T74] bridge_slave_0: left allmulticast mode
[  115.492242][   T74] bridge_slave_0: left promiscuous mode
[  115.510297][   T74] bridge0: port 1(bridge_slave_0) entered disabled state
[  115.550543][   T28] audit: type=1326 audit(1789183291.943:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6093 comm="syz.1.76" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dabb9e159 code=0x7ffc0000
[  115.575847][ T5783] Bluetooth: hci3: command tx timeout
[  115.609159][   T28] audit: type=1326 audit(1789183291.943:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6093 comm="syz.1.76" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dabb9e159 code=0x7ffc0000
[  115.640345][   T74] veth1_macvtap: left promiscuous mode
[  115.646738][   T74] veth0_macvtap: left promiscuous mode
[  115.652495][   T74] veth1_vlan: left promiscuous mode
[  115.657997][   T28] audit: type=1326 audit(1789183291.943:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6093 comm="syz.1.76" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dabb9e159 code=0x7ffc0000
[  115.682010][   T28] audit: type=1326 audit(1789183291.943:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6093 comm="syz.1.76" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dabb9e159 code=0x7ffc0000
[  115.707747][   T28] audit: type=1326 audit(1789183291.943:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6093 comm="syz.1.76" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dabb9e159 code=0x7ffc0000
[  115.708296][   T74] veth0_vlan: left promiscuous mode
[  115.743411][   T28] audit: type=1326 audit(1789183291.943:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6093 comm="syz.1.76" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7f3dabb9e159 code=0x7ffc0000
[  115.773803][   T28] audit: type=1326 audit(1789183291.943:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6093 comm="syz.1.76" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dabb9e159 code=0x7ffc0000
[  115.807804][   T28] audit: type=1326 audit(1789183291.943:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6093 comm="syz.1.76" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dabb9e159 code=0x7ffc0000
[  115.873579][   T28] audit: type=1326 audit(1789183291.943:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6093 comm="syz.1.76" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dabb9e159 code=0x7ffc0000
[  116.011965][ T5823] IPVS: starting estimator thread 0...
[  116.125341][ T6098] IPVS: using max 19 ests per chain, 45600 per kthread
[  117.073683][   T74] team0 (unregistering): Port device team_slave_1 removed
[  117.161488][   T74] team0 (unregistering): Port device team_slave_0 removed
[  117.250441][   T74] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  117.344042][   T74] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  117.434913][    C0] sched: RT throttling activated
[  117.655085][ T5783] Bluetooth: hci3: command tx timeout
[  117.702165][ T6110] loop1: detected capacity change from 0 to 131072
[  117.720646][ T6110] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0)
[  117.729208][ T6110] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  117.746930][ T6110] F2FS-fs (loop1): invalid crc value
[  117.834007][ T6110] F2FS-fs (loop1): Found nat_bits in checkpoint
[  117.920163][ T6110] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  117.927731][ T6110] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  118.169973][   T74] bond0 (unregistering): Released all slaves
[  118.269829][ T6107] loop3: detected capacity change from 0 to 32768
[  118.317255][ T6107] JBD2: Ignoring recovery information on journal
[  118.391846][ T6107] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  118.500804][ T6000] hsr_slave_0: entered promiscuous mode
[  118.527949][ T6000] hsr_slave_1: entered promiscuous mode
[  118.947504][ T5780] ocfs2: Unmounting device (7,3) on (node local)
[  119.355371][ T6000] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  119.448220][ T6000] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  119.496008][ T6000] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  119.511950][ T6000] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  119.745411][ T5783] Bluetooth: hci3: command tx timeout
[  119.889815][ T6000] 8021q: adding VLAN 0 to HW filter on device bond0
[  119.959455][ T6000] 8021q: adding VLAN 0 to HW filter on device team0
[  120.018246][ T2981] bridge0: port 1(bridge_slave_0) entered blocking state
[  120.025502][ T2981] bridge0: port 1(bridge_slave_0) entered forwarding state
[  120.081032][ T2981] bridge0: port 2(bridge_slave_1) entered blocking state
[  120.088316][ T2981] bridge0: port 2(bridge_slave_1) entered forwarding state
[  120.184852][ T6000] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  120.656727][ T6154] loop3: detected capacity change from 0 to 32768
[  120.676778][ T6154] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.91 (6154)
[  120.711011][ T6154] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  120.722426][ T6154] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm
[  120.732276][ T6154] BTRFS info (device loop3): force zlib compression, level 3
[  120.739765][ T6154] BTRFS info (device loop3): force clearing of disk cache
[  120.747075][ T6154] BTRFS info (device loop3): allowing degraded mounts
[  120.753916][ T6154] BTRFS info (device loop3): using free space tree
[  120.892817][ T6000] 8021q: adding VLAN 0 to HW filter on device batadv0
[  120.935730][ T6154] BTRFS info (device loop3): enabling ssd optimizations
[  120.942793][ T6154] BTRFS info (device loop3): auto enabling async discard
[  120.957974][ T6154] BTRFS info (device loop3): rebuilding free space tree
[  121.168182][ T6154] BTRFS info (device loop3): setting incompat feature flag for DEFAULT_SUBVOL (0x2)
[  121.363830][ T6194] loop1: detected capacity change from 0 to 128
[  121.372527][ T5780] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  121.459159][ T6194] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  122.185193][ T6000] veth0_vlan: entered promiscuous mode
[  122.216380][    T8] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  122.233936][ T6000] veth1_vlan: entered promiscuous mode
[  122.380213][ T6000] veth0_macvtap: entered promiscuous mode
[  122.415485][ T6000] veth1_macvtap: entered promiscuous mode
[  122.434498][    T8] usb 4-1: Using ep0 maxpacket: 8
[  122.457022][ T6000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  122.468546][    T8] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  122.495059][    T8] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  122.521331][ T6000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  122.528051][    T8] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  122.565283][ T6000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  122.597359][    T8] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024
[  122.605450][ T6000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  122.640046][    T8] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  122.645018][ T6000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  122.669358][ T6000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  122.682307][ T6000] batman_adv: batadv0: Interface activated: batadv_slave_0
[  122.689816][    T8] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  122.689878][    T8] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  122.689906][    T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  122.754119][ T6222] loop1: detected capacity change from 0 to 64
[  122.769728][ T6000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  122.805487][ T6000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  122.827926][ T6000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  122.847161][ T6000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  122.859083][ T6000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  122.904992][ T6000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  122.924566][ T6000] batman_adv: batadv0: Interface activated: batadv_slave_1
[  123.000098][ T6000] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  123.009536][ T6000] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  123.027152][ T6000] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  123.036340][ T6000] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  123.048835][   T28] kauditd_printk_skb: 9 callbacks suppressed
[  123.048849][   T28] audit: type=1800 audit(1789183299.453:21): pid=6222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.101" name="file1" dev="loop1" ino=22 res=0 errno=0
[  123.107599][    T8] usb 4-1: GET_CAPABILITIES returned 0
[  123.113205][    T8] usbtmc 4-1:16.0: can't read capabilities
[  123.286084][   T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  123.335395][   T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  123.399304][ T6224] binder: 6223:6224 ioctl c0306201 200000001a80 returned -14
[  123.410499][ T5823] usb 4-1: USB disconnect, device number 3
[  123.422897][   T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  123.440538][   T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  123.624692][ T6232] loop1: detected capacity change from 0 to 4096
[  124.152098][ T6247] FAULT_INJECTION: forcing a failure.
[  124.152098][ T6247] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  124.211001][ T6247] CPU: 0 PID: 6247 Comm: syz.4.106 Not tainted syzkaller #0
[  124.218394][ T6247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  124.228538][ T6247] Call Trace:
[  124.231913][ T6247]  <TASK>
[  124.234938][ T6247]  dump_stack_lvl+0x18c/0x250
[  124.239712][ T6247]  ? show_regs_print_info+0x20/0x20
[  124.245084][ T6247]  ? load_image+0x420/0x420
[  124.249645][ T6247]  ? __might_fault+0xaa/0x120
[  124.254816][ T6247]  ? __lock_acquire+0x7d80/0x7d80
[  124.260009][ T6247]  should_fail_ex+0x394/0x4c0
[  124.264854][ T6247]  _copy_from_user+0x2f/0xe0
[  124.269512][ T6247]  __se_sys_landlock_create_ruleset+0x233/0x380
[  124.275840][ T6247]  ? __x64_sys_landlock_create_ruleset+0x80/0x80
[  124.282252][ T6247]  ? lockdep_hardirqs_on+0x98/0x150
[  124.287537][ T6247]  do_syscall_64+0x55/0xb0
[  124.292027][ T6247]  ? clear_bhb_loop+0x40/0x90
[  124.296772][ T6247]  ? clear_bhb_loop+0x40/0x90
[  124.301573][ T6247]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  124.307534][ T6247] RIP: 0033:0x7f97fe99e159
[  124.312028][ T6247] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  124.331711][ T6247] RSP: 002b:00007f97ff8a7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001bc
[  124.340201][ T6247] RAX: ffffffffffffffda RBX: 00007f97fec25fa0 RCX: 00007f97fe99e159
[  124.348264][ T6247] RDX: 0000000000000000 RSI: 0000000000000018 RDI: 0000200000000180
[  124.356305][ T6247] RBP: 00007f97fea3503b R08: 0000000000000000 R09: 0000000000000000
[  124.364341][ T6247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  124.372369][ T6247] R13: 00007f97fec26038 R14: 00007f97fec25fa0 R15: 00007ffe56115488
[  124.380389][ T6247]  </TASK>
[  124.395644][ T6250] FAULT_INJECTION: forcing a failure.
[  124.395644][ T6250] name fail_futex, interval 1, probability 0, space 0, times 1
[  124.434251][ T6250] CPU: 0 PID: 6250 Comm: syz.3.107 Not tainted syzkaller #0
[  124.441642][ T6250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  124.451757][ T6250] Call Trace:
[  124.455094][ T6250]  <TASK>
[  124.458072][ T6250]  dump_stack_lvl+0x18c/0x250
[  124.462831][ T6250]  ? show_regs_print_info+0x20/0x20
[  124.468093][ T6250]  ? load_image+0x420/0x420
[  124.472757][ T6250]  ? __lock_acquire+0x1336/0x7d80
[  124.477866][ T6250]  should_fail_ex+0x394/0x4c0
[  124.482625][ T6250]  get_futex_key+0x136/0x1030
[  124.487384][ T6250]  ? futex_setup_timer+0xc0/0xc0
[  124.492423][ T6250]  futex_wake+0x127/0x4f0
[  124.496825][ T6250]  ? futex_wake_mark+0x150/0x150
[  124.501841][ T6250]  do_futex+0x35d/0x3e0
[  124.506095][ T6250]  ? __might_fault+0xaa/0x120
[  124.510851][ T6250]  ? __ia32_sys_get_robust_list+0x110/0x110
[  124.516804][ T6250]  ? __might_fault+0xc6/0x120
[  124.521545][ T6250]  mm_release+0x184/0x3a0
[  124.525931][ T6250]  ? exit_mm_release+0x30/0x30
[  124.530741][ T6250]  ? lockdep_hardirqs_on+0x98/0x150
[  124.536024][ T6250]  exit_mm+0xa4/0x340
[  124.540070][ T6250]  ? sysctl_delayacct+0x220/0x220
[  124.545154][ T6250]  ? do_exit+0x2530/0x2530
[  124.549642][ T6250]  do_exit+0x909/0x2530
[  124.553884][ T6250]  ? put_task_struct+0xc0/0xc0
[  124.558703][ T6250]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  124.564721][ T6250]  ? get_signal+0x100e/0x1390
[  124.569430][ T6250]  ? lock_chain_count+0x20/0x20
[  124.574316][ T6250]  ? _raw_spin_lock_irq+0xbb/0xf0
[  124.579373][ T6250]  do_group_exit+0x22d/0x2f0
[  124.584007][ T6250]  ? lockdep_hardirqs_on+0x98/0x150
[  124.589265][ T6250]  get_signal+0x12a6/0x1390
[  124.593809][ T6250]  arch_do_signal_or_restart+0xc2/0x7b0
[  124.599391][ T6250]  ? __ia32_sys_get_robust_list+0x110/0x110
[  124.605323][ T6250]  ? get_sigframe_size+0x20/0x20
[  124.610321][ T6250]  ? exit_to_user_mode_loop+0x3b/0x110
[  124.615818][ T6250]  exit_to_user_mode_loop+0x70/0x110
[  124.621141][ T6250]  exit_to_user_mode_prepare+0xee/0x180
[  124.626732][ T6250]  syscall_exit_to_user_mode+0x1a/0x50
[  124.632257][ T6250]  do_syscall_64+0x61/0xb0
[  124.636714][ T6250]  ? clear_bhb_loop+0x40/0x90
[  124.641427][ T6250]  ? clear_bhb_loop+0x40/0x90
[  124.646154][ T6250]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  124.652081][ T6250] RIP: 0033:0x7f7b3779e159
[  124.656540][ T6250] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  124.676178][ T6250] RSP: 002b:00007f7b386f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  124.684621][ T6250] RAX: fffffffffffffe00 RBX: 00007f7b37a25fa8 RCX: 00007f7b3779e159
[  124.692642][ T6250] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7b37a25fa8
[  124.700675][ T6250] RBP: 00007f7b37a25fa0 R08: 0000000000000000 R09: 0000000000000000
[  124.708695][ T6250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  124.716706][ T6250] R13: 00007f7b37a26038 R14: 00007ffd6a3b80b0 R15: 00007ffd6a3b8198
[  124.724737][ T6250]  </TASK>
[  124.865048][ T6257] loop1: detected capacity change from 0 to 512
[  124.885074][ T6257] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  125.006551][ T6257] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  125.062899][ T6257] EXT4-fs (loop1): 1 truncate cleaned up
[  125.109437][ T6257] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  125.231612][ T6257] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  125.681794][ T6278] loop2: detected capacity change from 0 to 1024
[  125.723661][ T6278] EXT4-fs: Ignoring removed oldalloc option
[  125.751084][ T6278] EXT4-fs: Ignoring removed oldalloc option
[  125.796731][ T6278] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  125.838091][ T6278] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (16), stripe is disabled
[  125.915556][ T6278] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  126.339121][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  126.598270][ T6309] loop1: detected capacity change from 0 to 128
[  126.606919][ T6305] loop4: detected capacity change from 0 to 1024
[  126.614699][ T6305] EXT4-fs: Ignoring removed bh option
[  126.650463][ T6309] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  126.738867][ T6305] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  127.088761][ T6000] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  127.163502][ T6322] mmap: syz.2.130 (6322) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  127.835153][ T5823] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  128.028084][ T5823] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  128.066304][ T5823] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  128.109371][ T5823] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  128.145209][ T5823] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  128.162123][ T6357] loop4: detected capacity change from 0 to 128
[  128.187974][ T5823] usb 2-1: config 0 descriptor??
[  128.620116][ T6366] loop2: detected capacity change from 0 to 128
[  128.656681][ T5823] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0
[  128.674336][ T5823] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0
[  128.688079][ T6366] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  128.700446][ T5823] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0
[  128.719365][ T5823] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0
[  128.735641][ T5823] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0
[  128.742965][ T6366] ext4 filesystem being mounted at /42/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  128.773874][ T5823] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0
[  128.786882][ T5823] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0
[  128.818719][ T5823] cp2112 0003:10C4:EA90.0004: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0
[  128.941518][ T5823] cp2112 0003:10C4:EA90.0004: Part Number: 0x82 Device Version: 0xFE
[  128.971232][ T5777] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  129.053923][ T6371] loop4: detected capacity change from 0 to 128
[  129.143762][ T6371] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  129.200846][ T6371] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  129.269535][ T6346] loop3: detected capacity change from 0 to 40427
[  129.344791][ T5823] cp2112 0003:10C4:EA90.0004: error setting SMBus config
[  129.365529][ T5823] cp2112: probe of 0003:10C4:EA90.0004 failed with error -71
[  129.391645][ T5823] usb 2-1: USB disconnect, device number 3
[  129.409509][ T6346] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504)
[  129.456004][ T6346] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  129.502619][ T6346] F2FS-fs (loop3): invalid crc value
[  129.518232][ T6000] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  129.567152][ T6346] F2FS-fs (loop3): Found nat_bits in checkpoint
[  129.729542][ T6346] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  129.748332][ T6346] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  130.031958][ T5780] syz-executor: attempt to access beyond end of device
[  130.031958][ T5780] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  130.097506][ T5780] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  130.714064][ T6414] sctp: [Deprecated]: syz.2.156 (pid 6414) Use of int in max_burst socket option deprecated.
[  130.714064][ T6414] Use struct sctp_assoc_value instead
[  131.527717][ T6437] loop3: detected capacity change from 0 to 8
[  131.590701][ T6437] SQUASHFS error: lzo decompression failed, data probably corrupt
[  131.633324][ T6437] SQUASHFS error: Failed to read block 0x91: -5
[  131.663863][ T6437] SQUASHFS error: Unable to read metadata cache entry [8f]
[  131.677609][ T6440] input: syz1 as /devices/virtual/input/input7
[  131.708845][ T6437] SQUASHFS error: Unable to read inode 0x11f
[  131.723773][ T6440] input: failed to attach handler leds to device input7, error: -6
[  131.941172][ T6448] loop4: detected capacity change from 0 to 512
[  131.959366][ T6448] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  131.996282][ T6448] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.166: invalid indirect mapped block 9 (level 0)
[  132.049105][ T6448] EXT4-fs (loop4): 1 truncate cleaned up
[  132.071949][ T6448] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  132.157256][ T6453] loop2: detected capacity change from 0 to 256
[  132.231818][ T6000] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.759341][ T6464] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  133.225556][ T6474] loop1: detected capacity change from 0 to 512
[  133.252460][ T6474] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  133.299540][ T6474] EXT4-fs warning (device loop1): ext4_multi_mount_protect:292: Invalid MMP block in superblock
[  133.575005][ T5783] Bluetooth: hci1: command tx timeout
[  133.863050][ T6460] loop3: detected capacity change from 0 to 40427
[  133.935676][ T6460] F2FS-fs (loop3): invalid crc value
[  133.972666][ T6460] F2FS-fs (loop3): Found nat_bits in checkpoint
[  134.222039][ T6460] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  134.286868][ T6460] F2FS-fs (loop3): Stopped filesystem due to reason: 0
[  135.431010][ T6513] loop1: detected capacity change from 0 to 40427
[  135.507880][ T6513] F2FS-fs (loop1): invalid crc value
[  135.513318][ T6513] F2FS-fs (loop1): Ignore s_resuid=3, s_resgid=0 w/o reserve_root
[  135.584935][ T6513] F2FS-fs (loop1): Found nat_bits in checkpoint
[  135.803179][ T6513] F2FS-fs (loop1): Start checkpoint disabled!
[  135.870779][ T6513] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  135.918654][ T6545] capability: warning: `syz.4.197' uses 32-bit capabilities (legacy support in use)
[  135.951483][ T5823] IPVS: starting estimator thread 0...
[  135.958594][ T6546] IPVS: fo: FWM 3 0x00000003 - no destination available
[  136.034004][ T6513] syz.1.183: attempt to access beyond end of device
[  136.034004][ T6513] loop1: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  136.075053][ T6547] IPVS: using max 20 ests per chain, 48000 per kthread
[  136.280615][ T6552] loop2: detected capacity change from 0 to 8192
[  136.288335][ T6555] loop7: detected capacity change from 0 to 7
[  136.315272][ T6555] Dev loop7: unable to read RDB block 7
[  136.330700][ T6555]  loop7: unable to read partition table
[  136.336822][ T6552] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  136.339730][ T6555] loop7: partition table beyond EOD, truncated
[  136.372869][   T74] kworker/u4:4: attempt to access beyond end of device
[  136.372869][   T74] loop1: rw=1, sector=45096, nr_sectors = 8 limit=40427
[  136.402684][ T6555] loop_reread_partitions: partition scan of loop7 (þ被xü—ŸÑà0–š
<¨�â·û) failed (rc=-5)
[  136.434648][   T74] kworker/u4:4: attempt to access beyond end of device
[  136.434648][   T74] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  136.458870][   T74] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  136.466019][   T55] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  136.500751][   T74] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  136.675016][   T55] usb 4-1: Using ep0 maxpacket: 8
[  136.695542][   T55] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[  136.703986][   T55] usb 4-1: config 179 has no interface number 0
[  136.741036][   T55] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  136.783325][   T55] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  136.820356][   T55] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  136.854746][   T55] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  136.887684][   T55] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  136.942553][   T55] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  136.975166][   T55] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.006802][ T6553] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  137.528041][ T5823] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input8
[  137.943800][ T6559] loop2: detected capacity change from 0 to 40427
[  137.996284][ T5823] usb 4-1: USB disconnect, device number 4
[  137.996356][    C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  138.010660][    C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  138.022998][ T5823] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  138.055580][ T6559] F2FS-fs (loop2): invalid crc value
[  138.085612][ T6559] F2FS-fs (loop2): Found nat_bits in checkpoint
[  138.244657][ T6569] loop1: detected capacity change from 0 to 8192
[  138.252397][ T6559] F2FS-fs (loop2): Start checkpoint disabled!
[  138.265390][ T5847] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  138.298974][ T6559] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  138.481319][ T5847] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  138.515761][ T5847] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.550538][ T5847] usb 5-1: Product: syz
[  138.556974][ T5847] usb 5-1: Manufacturer: syz
[  138.574919][ T5847] usb 5-1: SerialNumber: syz
[  138.807753][ T5847] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32
[  138.831962][ T5847] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32
[  138.899889][ T2934] kworker/u4:10: attempt to access beyond end of device
[  138.899889][ T2934] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  138.916496][ T2934] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  138.926042][ T2934] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  139.065067][ T5823] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  139.261566][ T5847] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71
[  139.266027][ T5823] usb 4-1: Using ep0 maxpacket: 16
[  139.290039][ T5847] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  139.302934][ T5847] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  139.312119][ T5823] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  139.312156][ T5823] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  139.312181][ T5823] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  139.312229][ T5823] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  139.312256][ T5823] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  139.373643][ T5823] usb 4-1: config 0 descriptor??
[  139.380623][ T5847] lan78xx: probe of 5-1:1.0 failed with error -71
[  139.414444][ T5847] usb 5-1: USB disconnect, device number 2
[  139.846849][ T5823] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0005/input/input9
[  139.985723][ T5823] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0
[  140.052730][ T5823] usb 4-1: USB disconnect, device number 5
[  140.191195][ T6595] fido_id[6595]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory
[  140.269230][ T6598] loop4: detected capacity change from 0 to 512
[  140.323094][ T6598] EXT4-fs (loop4): 1 truncate cleaned up
[  140.360938][ T6598] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  140.482380][ T6598] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.213: bg 0: block 465: padding at end of block bitmap is not set
[  140.533296][ T6598] EXT4-fs (loop4): Remounting filesystem read-only
[  140.628224][ T6000] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  140.963645][ T6616] netlink: 20 bytes leftover after parsing attributes in process `syz.1.218'.
[  141.022485][ T6616] netlink: 20 bytes leftover after parsing attributes in process `syz.1.218'.
[  141.100415][ T6620] loop4: detected capacity change from 0 to 512
[  141.111978][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  141.119789][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  141.139378][ T6620] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  141.166584][ T6620] EXT4-fs (loop4): 1 truncate cleaned up
[  141.173758][ T6620] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  141.421972][ T6000] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  141.644749][ T6633] loop4: detected capacity change from 0 to 1764
[  141.784384][ T6633] syz.4.225: attempt to access beyond end of device
[  141.784384][ T6633] loop4: rw=0, sector=7180648572, nr_sectors = 4 limit=1764
[  141.859107][ T6633] Buffer I/O error on dev loop4, logical block 1795162143, async page read
[  141.890929][ T6633] syz.4.225: attempt to access beyond end of device
[  141.890929][ T6633] loop4: rw=0, sector=7180648572, nr_sectors = 4 limit=1764
[  141.949598][ T6633] Buffer I/O error on dev loop4, logical block 1795162143, async page read
[  141.991947][   T28] audit: type=1800 audit(1789183318.393:22): pid=6633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.225" name="file0" dev="loop4" ino=1923 res=0 errno=0
[  142.167911][ T6647] netlink: 'syz.2.231': attribute type 12 has an invalid length.
[  142.203191][ T6647] netlink: 'syz.2.231': attribute type 29 has an invalid length.
[  142.215436][ T6647] netlink: 148 bytes leftover after parsing attributes in process `syz.2.231'.
[  142.259996][ T6647] netlink: 'syz.2.231': attribute type 3 has an invalid length.
[  142.316578][ T6647] netlink: 'syz.2.231': attribute type 2 has an invalid length.
[  142.349600][ T6647] netlink: 35 bytes leftover after parsing attributes in process `syz.2.231'.
[  142.637585][ T6663] loop3: detected capacity change from 0 to 64
[  142.657847][ T6662] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  142.743712][   T28] audit: type=1800 audit(1789183319.143:23): pid=6663 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.236" name="file1" dev="loop3" ino=21 res=0 errno=0
[  143.333353][ T6681] loop1: detected capacity change from 0 to 512
[  143.374118][ T6681] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  143.453170][ T6681] EXT4-fs (loop1): 1 truncate cleaned up
[  143.478144][ T6681] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  143.627119][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  143.785048][   T55] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  143.992220][   T55] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00
[  144.032886][   T55] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  144.742640][   T55] cxacru 3-1:1.0: wrong cm 0xa0 in response to cm 0x91
[  144.776782][   T55] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -5
[  144.805536][   T55] ATM dev 0: usbatm_atm_init: atm_start failed: -5!
[  144.857127][   T55] cxacru: probe of 3-1:1.0 failed with error -5
[  144.894133][ T6725] loop4: detected capacity change from 0 to 512
[  144.905972][   T55] usb 3-1: USB disconnect, device number 4
[  144.993186][ T6725] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  145.072541][ T6725] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  145.120161][ T6728] loop1: detected capacity change from 0 to 4096
[  145.279994][ T6000] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  145.533315][ T6738] loop4: detected capacity change from 0 to 1024
[  145.557050][ T6738] EXT4-fs: Ignoring removed orlov option
[  145.575241][ T6738] EXT4-fs: Ignoring removed i_version option
[  145.601640][ T6711] loop3: detected capacity change from 0 to 40427
[  145.691224][ T6711] F2FS-fs (loop3): Invalid Fs Meta Ino: node(0) meta(2) root(0)
[  145.692167][ T6738] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  145.735102][ T6711] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  145.775366][ T6711] F2FS-fs (loop3): invalid crc value
[  145.819031][ T6748] loop1: detected capacity change from 0 to 128
[  145.839117][ T6711] F2FS-fs (loop3): Found nat_bits in checkpoint
[  145.881217][ T6748] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  145.925203][ T6748] ext4 filesystem being mounted at /67/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  146.049745][ T6711] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  146.049982][ T6738] EXT4-fs (loop4): Online defrag not supported with bigalloc
[  146.112820][ T6711] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  146.232826][ T6000] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  146.317941][ T6711] syz.3.249: attempt to access beyond end of device
[  146.317941][ T6711] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  146.357470][ T5779] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  146.396156][ T6711] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  146.428255][ T6711] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  146.652963][ T6760] loop1: detected capacity change from 0 to 512
[  146.660849][ T6755] loop4: detected capacity change from 0 to 4096
[  146.827774][ T6763] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  146.860484][ T6743] loop2: detected capacity change from 0 to 32768
[  146.914669][ T6743] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.257 (6743)
[  147.065054][ T6743] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  147.134299][ T6743] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  147.155550][ T6767] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  147.185122][ T6743] BTRFS info (device loop2): using free space tree
[  147.442413][ T6743] BTRFS info (device loop2): enabling ssd optimizations
[  147.493395][ T6755] syz.4.259 (6755) used greatest stack depth: 19344 bytes left
[  147.501921][ T6743] BTRFS info (device loop2): auto enabling async discard
[  148.193470][ T5777] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  148.409072][ T6811] loop4: detected capacity change from 0 to 512
[  148.555844][ T6811] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  148.587810][ T6811] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  148.675434][ T6811] EXT4-fs (loop4): orphan cleanup on readonly fs
[  148.736244][ T6811] EXT4-fs error (device loop4): ext4_orphan_get:1434: comm syz.4.267: bad orphan inode 17
[  148.811071][ T6811] ext4_test_bit(bit=16, block=4) = 1
[  148.823455][ T6811] is_bad_inode(inode)=0
[  148.833994][ T6811] NEXT_ORPHAN(inode)=0
[  148.839855][ T6811] max_ino=32
[  148.843122][ T6811] i_nlink=1
[  148.867149][ T6811] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  148.995893][ T6811] EXT4-fs (loop4): shut down requested (0)
[  149.169183][ T6000] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  150.318634][ T6835] loop4: detected capacity change from 0 to 32768
[  150.436746][   T28] audit: type=1800 audit(1789183326.833:24): pid=6835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.272" name="file1" dev="loop4" ino=7 res=0 errno=0
[  150.538726][   T28] audit: type=1800 audit(1789183326.843:25): pid=6835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.272" name="file1" dev="loop4" ino=7 res=0 errno=0
[  150.583585][ T6836] loop1: detected capacity change from 0 to 32768
[  150.752498][ T6836] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  151.364817][ T5779] ocfs2: Unmounting device (7,1) on (node local)
[  151.373671][ T6876] loop3: detected capacity change from 0 to 1024
[  152.390871][ T6905] loop4: detected capacity change from 0 to 1024
[  152.476490][ T6905] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  152.758117][ T6000] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  152.899442][ T6921] loop1: detected capacity change from 0 to 16
[  152.910228][ T6923] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  152.961774][ T6923] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  152.975452][ T6921] erofs: (device loop1): mounted with root inode @ nid 36.
[  153.405211][ T5823] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  153.500044][ T6933] loop3: detected capacity change from 0 to 8192
[  153.542964][ T6933] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  153.615771][ T5823] usb 3-1: Using ep0 maxpacket: 8
[  153.627559][ T5823] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  153.646338][ T5823] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  153.684938][ T5823] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  153.700015][    T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  153.727013][ T5823] usb 3-1: config 0 descriptor??
[  153.894353][ T6945] loop4: detected capacity change from 0 to 1024
[  153.907300][    T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  153.938373][    T9] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  153.991361][    T9] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  154.008839][ T5823] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  154.036262][ T6945] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  154.059784][    T9] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01
[  154.081571][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  154.099043][    T9] usb 2-1: Product: syz
[  154.107632][    T9] usb 2-1: Manufacturer: syz
[  154.126413][ T6936] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  154.153815][    T9] garmin_gps 2-1:1.0: Garmin GPS usb/tty converter detected
[  154.198360][    T9] usb 2-1: Garmin GPS usb/tty converter now attached to ttyUSB0
[  154.486584][    T9] usb 2-1: USB disconnect, device number 4
[  154.541972][ T6000] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  154.566335][ T5823] usb 3-1: USB disconnect, device number 5
[  154.574182][    T9] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0
[  154.614803][    T9] garmin_gps 2-1:1.0: device disconnected
[  154.773469][ T6964] loop4: detected capacity change from 0 to 64
[  154.977101][ T2920] kworker/u4:9: attempt to access beyond end of device
[  154.977101][ T2920] loop4: rw=1, sector=2320, nr_sectors = 1 limit=64
[  155.014425][ T2920] Buffer I/O error on dev loop4, logical block 2320, lost async page write
[  155.032311][ T2920] kworker/u4:9: attempt to access beyond end of device
[  155.032311][ T2920] loop4: rw=1, sector=2321, nr_sectors = 1 limit=64
[  155.046833][ T2920] Buffer I/O error on dev loop4, logical block 2321, lost async page write
[  155.057989][ T2920] kworker/u4:9: attempt to access beyond end of device
[  155.057989][ T2920] loop4: rw=1, sector=2322, nr_sectors = 1 limit=64
[  155.071857][ T2920] Buffer I/O error on dev loop4, logical block 2322, lost async page write
[  155.085369][ T2920] kworker/u4:9: attempt to access beyond end of device
[  155.085369][ T2920] loop4: rw=1, sector=2323, nr_sectors = 1 limit=64
[  155.114501][ T2920] Buffer I/O error on dev loop4, logical block 2323, lost async page write
[  155.131558][ T2920] kworker/u4:9: attempt to access beyond end of device
[  155.131558][ T2920] loop4: rw=2049, sector=2320, nr_sectors = 1 limit=64
[  155.192882][ T2920] Buffer I/O error on dev loop4, logical block 2320, lost async page write
[  155.257990][ T2920] kworker/u4:9: attempt to access beyond end of device
[  155.257990][ T2920] loop4: rw=2049, sector=2321, nr_sectors = 1 limit=64
[  155.312647][ T2920] Buffer I/O error on dev loop4, logical block 2321, lost async page write
[  155.323369][ T2920] kworker/u4:9: attempt to access beyond end of device
[  155.323369][ T2920] loop4: rw=2049, sector=2322, nr_sectors = 1 limit=64
[  155.338445][ T2920] Buffer I/O error on dev loop4, logical block 2322, lost async page write
[  155.348206][ T2920] kworker/u4:9: attempt to access beyond end of device
[  155.348206][ T2920] loop4: rw=2049, sector=2323, nr_sectors = 1 limit=64
[  155.362289][ T2920] Buffer I/O error on dev loop4, logical block 2323, lost async page write
[  155.531139][ T2934] Bluetooth: hci4: Frame reassembly failed (-84)
[  156.465118][ T5767] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  156.661787][ T5767] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  156.686626][ T5767] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  156.721908][ T5767] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  156.741850][ T5767] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  156.775096][ T5767] usb 3-1: SerialNumber: syz
[  156.976581][ T7027] warning: `syz.4.332' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  156.998910][ T7027] loop4: detected capacity change from 0 to 512
[  157.029764][ T7027] EXT4-fs error (device loop4): ext4_get_journal_inode:5820: comm syz.4.332: inode #196608: comm syz.4.332: iget: illegal inode #
[  157.062056][ T5767] usb 3-1: 0:2 : does not exist
[  157.083516][ T7027] EXT4-fs (loop4): Remounting filesystem read-only
[  157.098977][ T7027] EXT4-fs (loop4): no journal found
[  157.104278][ T7027] EXT4-fs (loop4): can't get journal size
[  157.125551][ T7027] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended
[  157.145883][ T7027] EXT4-fs (loop4): failed to initialize system zone (-22)
[  157.153209][ T7027] EXT4-fs (loop4): mount failed
[  157.233699][ T5767] usb 3-1: USB disconnect, device number 6
[  157.575093][ T5790] Bluetooth: hci4: command 0x1003 tx timeout
[  157.583727][ T5783] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  157.811926][ T7035] loop1: detected capacity change from 0 to 512
[  157.865003][ T7035] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  157.925035][ T7035] EXT4-fs error (device loop1): ext4_orphan_get:1434: comm syz.1.335: bad orphan inode 131083
[  157.976524][ T7035] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  158.041493][ T7029] loop3: detected capacity change from 0 to 32768
[  158.121341][ T7035] fscrypt (loop1, inode 18): Mutually exclusive encryption flags (0x0c)
[  158.170074][ T7029] JBD2: Ignoring recovery information on journal
[  158.196164][ T7042] loop2: detected capacity change from 0 to 16
[  158.242977][ T7042] erofs: (device loop2): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 16300)
[  158.279927][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  158.315117][ T7029] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  158.500975][ T7048] loop1: detected capacity change from 0 to 128
[  158.643917][ T7042] loop2: detected capacity change from 0 to 8192
[  158.799876][ T7042] FAT-fs (loop2): error, invalid access to FAT (entry 0x00003c09)
[  158.823581][ T7042] FAT-fs (loop2): Filesystem has been set read-only
[  158.823985][ T5780] ocfs2: Unmounting device (7,3) on (node local)
[  158.837374][ T7042] FAT-fs (loop2): error, invalid access to FAT (entry 0x00003c09)
[  158.852841][ T7051] loop1: detected capacity change from 0 to 8
[  158.859687][ T7042] FAT-fs (loop2): error, invalid access to FAT (entry 0x00003c09)
[  158.896043][ T7042] FAT-fs (loop2): error, invalid access to FAT (entry 0x00003c09)
[  158.928541][ T7042] FAT-fs (loop2): error, invalid access to FAT (entry 0x00003c09)
[  158.973453][ T7042] FAT-fs (loop2): error, invalid access to FAT (entry 0x00003c09)
[  159.023306][ T7042] syz.2.337: attempt to access beyond end of device
[  159.023306][ T7042] loop2: rw=0, sector=15583, nr_sectors = 1 limit=8192
[  159.075140][ T7042] Buffer I/O error on dev loop2, logical block 15583, async page read
[  159.083514][ T7042] FAT-fs (loop2): error, invalid access to FAT (entry 0x00003c09)
[  159.132130][ T7042] FAT-fs (loop2): error, invalid access to FAT (entry 0x00003c09)
[  159.155870][ T7042] FAT-fs (loop2): error, invalid access to FAT (entry 0x00003c09)
[  159.163809][ T7042] FAT-fs (loop2): error, invalid access to FAT (entry 0x00003c09)
[  159.204138][ T7042] FAT-fs (loop2): error, invalid access to FAT (entry 0x00003c09)
[  159.246300][ T7042] FAT-fs (loop2): error, invalid access to FAT (entry 0x00003c09)
[  159.254240][ T7042] FAT-fs (loop2): error, invalid access to FAT (entry 0x00003c09)
[  159.299501][ T7042] FAT-fs (loop2): error, invalid access to FAT (entry 0x00003c09)
[  159.319862][ T7042] FAT-fs (loop2): error, invalid access to FAT (entry 0x00003c09)
[  159.348520][ T7042] FAT-fs (loop2): error, invalid access to FAT (entry 0x00003c09)
[  159.365508][ T7042] FAT-fs (loop2): error, invalid access to FAT (entry 0x00003c09)
[  159.395042][ T7042] FAT-fs (loop2): error, invalid access to FAT (entry 0x00003c09)
[  159.435132][   T28] audit: type=1800 audit(1789183335.803:26): pid=7042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.337" name="file2" dev="loop2" ino=1048603 res=0 errno=0
[  159.527391][ T7060] loop3: detected capacity change from 0 to 512
[  159.544780][ T7042] syz.2.337 (7042) used greatest stack depth: 19120 bytes left
[  159.591706][ T7060] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (27202!=33349)
[  159.659401][ T7060] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  159.921012][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  160.150916][ T7069] loop1: detected capacity change from 0 to 8192
[  160.795552][ T5767] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  161.004983][ T5767] usb 4-1: Using ep0 maxpacket: 16
[  161.023832][ T5767] usb 4-1: config 0 has an invalid interface number: 34 but max is 0
[  161.035520][ T5767] usb 4-1: config 0 has no interface number 0
[  161.041748][ T5767] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  161.062705][ T5767] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  161.082922][ T5767] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  161.105019][ T5767] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.125264][ T5767] usb 4-1: Product: syz
[  161.129713][ T5767] usb 4-1: Manufacturer: syz
[  161.137807][ T5767] usb 4-1: SerialNumber: syz
[  161.153066][ T5767] usb 4-1: config 0 descriptor??
[  161.168886][ T7082] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  161.176739][ T7082] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  161.425779][ T7082] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  161.458354][ T7082] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  161.490075][ T7098] loop4: detected capacity change from 0 to 2048
[  161.524260][ T7098] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  161.538228][ T7098] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[  161.558885][ T7098] UDF-fs: Scanning with blocksize 512 failed
[  161.598107][ T7098] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  161.670553][   T28] audit: type=1800 audit(1789183338.073:27): pid=7098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.361" name="file1" dev="loop4" ino=838 res=0 errno=0
[  161.706564][ T5767] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  162.106312][ T7109] netlink: 'syz.2.366': attribute type 2 has an invalid length.
[  162.134353][ T7109] netlink: 'syz.2.366': attribute type 2 has an invalid length.
[  162.189701][ T7113] loop4: detected capacity change from 0 to 256
[  162.345836][ T5767] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  162.363969][ T5767] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9
[  162.428825][ T5767] asix: probe of 4-1:0.34 failed with error -71
[  162.469049][ T5767] usb 4-1: USB disconnect, device number 6
[  162.837669][ T7131] loop4: detected capacity change from 0 to 256
[  162.859502][    T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  162.883203][ T7131] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xa9436649, utbl_chksum : 0xe619d30d)
[  163.081964][    T9] usb 3-1: Using ep0 maxpacket: 8
[  163.098078][    T9] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  163.117135][    T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  163.149240][    T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  163.194134][    T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  163.240820][    T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  163.281449][    T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  163.306660][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  163.325269][ T7139] ieee802154 phy0 wpan0: encryption failed: -22
[  163.574497][    T9] usb 3-1: usb_control_msg returned -32
[  163.588252][    T9] usbtmc 3-1:16.0: can't read capabilities
[  163.724072][ T7146] netlink: 'syz.1.381': attribute type 6 has an invalid length.
[  163.952043][ T7150] usbtmc 3-1:16.0: usb_control_msg returned -32
[  163.962855][ T7135] loop3: detected capacity change from 0 to 40427
[  163.972881][    T9] usb 3-1: USB disconnect, device number 7
[  164.003043][ T7135] F2FS-fs (loop3): invalid crc value
[  164.031238][ T7135] F2FS-fs (loop3): Found nat_bits in checkpoint
[  164.121861][ T7135] F2FS-fs (loop3): Start checkpoint disabled!
[  164.171058][ T7135] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  164.407535][ T2934] kworker/u4:10: attempt to access beyond end of device
[  164.407535][ T2934] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  164.426600][ T2934] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  164.852453][ T7158] loop2: detected capacity change from 0 to 512
[  164.916709][ T7158] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  164.965298][ T7158] ext4 filesystem being mounted at /111/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  165.058142][ T7158] fs-verity (loop2, inode 15): Unrecognized descriptor size: 0 bytes
[  165.088327][ T7164] fs-verity (loop2, inode 15): Unrecognized descriptor size: 0 bytes
[  165.146357][ T7158] fs-verity (loop2, inode 15): Unrecognized descriptor size: 0 bytes
[  165.197434][ T7168] input: syz0 as /devices/virtual/input/input11
[  165.244775][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  165.447211][ T7173] loop2: detected capacity change from 0 to 1024
[  165.655813][ T5790] Bluetooth: hci4: command 0x1003 tx timeout
[  165.663927][ T5783] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  166.045132][ T7185] netlink: 24 bytes leftover after parsing attributes in process `syz.2.396'.
[  166.073630][    T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  166.280908][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  166.313563][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  166.344422][    T9] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  166.370108][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  166.410032][    T9] usb 2-1: config 0 descriptor??
[  166.497833][ T7196] loop4: detected capacity change from 0 to 512
[  166.533522][ T7196] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  166.584301][ T7196] EXT4-fs error (device loop4): ext4_validate_block_bitmap:430: comm syz.4.402: bg 0: block 4: invalid block bitmap
[  166.603520][ T7196] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6655: Corrupt filesystem
[  166.617820][ T7196] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.402: invalid indirect mapped block 1 (level 1)
[  166.671809][ T7201] loop2: detected capacity change from 0 to 1024
[  166.684496][    T9] usbhid 2-1:0.0: can't add hid device: -71
[  166.698557][ T7196] EXT4-fs (loop4): 1 truncate cleaned up
[  166.711037][ T7196] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  166.717540][    T9] usbhid: probe of 2-1:0.0 failed with error -71
[  166.746409][ T7201] EXT4-fs: Ignoring removed nomblk_io_submit option
[  166.766471][    T9] usb 2-1: USB disconnect, device number 5
[  166.833229][ T7201] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  166.959949][ T7204] loop3: detected capacity change from 0 to 4096
[  166.981824][ T6000] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.010304][ T7204] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512).
[  167.073193][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.144764][ T7204] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  167.345095][    T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  167.561134][    T9] usb 2-1: Using ep0 maxpacket: 16
[  167.575755][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  167.606060][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  167.637207][    T9] usb 2-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.40
[  167.674960][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  167.698789][    T9] usb 2-1: config 0 descriptor??
[  167.912140][ T7208] loop4: detected capacity change from 0 to 40427
[  167.948163][ T7208] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x7ffff
[  167.990878][ T7208] F2FS-fs (loop4): Image doesn't support compression
[  168.012729][ T7208] F2FS-fs (loop4): invalid crc value
[  168.048665][ T7208] F2FS-fs (loop4): Found nat_bits in checkpoint
[  168.164808][    T9] mcp2200 0003:04D8:00DF.0006: item fetching failed at offset 0/1
[  168.196003][    T9] mcp2200 0003:04D8:00DF.0006: can't parse reports
[  168.223258][    T9] mcp2200: probe of 0003:04D8:00DF.0006 failed with error -22
[  168.246643][ T7208] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  168.333710][ T7208] syz.4.405: attempt to access beyond end of device
[  168.333710][ T7208] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  168.352018][ T7208] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  168.429877][    T9] usb 2-1: USB disconnect, device number 6
[  168.493677][ T7212] loop2: detected capacity change from 0 to 32768
[  168.582638][   T28] audit: type=1800 audit(1789183344.983:28): pid=7212 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.407" name="file1" dev="loop2" ino=4 res=0 errno=0
[  168.609736][ T7214] loop3: detected capacity change from 0 to 32768
[  168.667004][ T7214] XFS (loop3): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  168.875184][ T7214] XFS (loop3): Ending clean mount
[  168.931478][ T7214] XFS (loop3): Quotacheck needed: Please wait.
[  169.126793][ T7214] XFS (loop3): Quotacheck: Done.
[  169.253841][ T7214] jffs2: notice: (7214) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  169.411718][ T7234] loop4: detected capacity change from 0 to 256
[  169.769515][ T7236] loop2: detected capacity change from 0 to 8192
[  169.817438][ T7236] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  169.847265][ T5780] XFS (loop3): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  169.873268][ T7236] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal
[  169.933827][ T7236] REISERFS (device loop2): using ordered data mode
[  169.954978][ T5823] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  169.986555][ T7236] reiserfs: using flush barriers
[  170.015979][ T7236] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  170.060083][ T7236] REISERFS (device loop2): checking transaction log (loop2)
[  170.085161][ T7249] FAULT_INJECTION: forcing a failure.
[  170.085161][ T7249] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  170.099323][ T7249] CPU: 1 PID: 7249 Comm: syz.4.419 Not tainted syzkaller #0
[  170.106684][ T7249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  170.116801][ T7249] Call Trace:
[  170.120129][ T7249]  <TASK>
[  170.123105][ T7249]  dump_stack_lvl+0x18c/0x250
[  170.127833][ T7249]  ? show_regs_print_info+0x20/0x20
[  170.133074][ T7249]  ? load_image+0x420/0x420
[  170.137617][ T7249]  ? __might_fault+0xaa/0x120
[  170.142421][ T7249]  ? __lock_acquire+0x7d80/0x7d80
[  170.147483][ T7249]  should_fail_ex+0x394/0x4c0
[  170.152202][ T7249]  _copy_from_user+0x2f/0xe0
[  170.156821][ T7249]  get_nodes+0x2b0/0x3c0
[  170.161098][ T7249]  ? vma_replace_policy+0x4a0/0x4a0
[  170.166344][ T7249]  __x64_sys_set_mempolicy+0x183/0x200
[  170.171960][ T7249]  ? __ia32_sys_mbind+0xf0/0xf0
[  170.176879][ T7249]  ? lockdep_hardirqs_on+0x98/0x150
[  170.182132][ T7249]  do_syscall_64+0x55/0xb0
[  170.187213][ T7249]  ? clear_bhb_loop+0x40/0x90
[  170.191939][ T7249]  ? clear_bhb_loop+0x40/0x90
[  170.196656][ T7249]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  170.202594][ T7249] RIP: 0033:0x7f97fe99e159
[  170.207056][ T7249] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  170.226709][ T7249] RSP: 002b:00007f97ff8a7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ee
[  170.235178][ T7249] RAX: ffffffffffffffda RBX: 00007f97fec25fa0 RCX: 00007f97fe99e159
[  170.243187][ T7249] RDX: 0000000000000006 RSI: 0000200000000040 RDI: 0000000000004005
[  170.251196][ T7249] RBP: 00007f97fea3503b R08: 0000000000000000 R09: 0000000000000000
[  170.259208][ T7249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  170.267240][ T7249] R13: 00007f97fec26038 R14: 00007f97fec25fa0 R15: 00007ffe56115488
[  170.275283][ T7249]  </TASK>
[  170.309221][ T5823] usb 2-1: unable to get BOS descriptor or descriptor too short
[  170.320471][ T5823] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  170.341393][ T5823] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  170.363758][ T5823] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  170.383755][ T5823] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  170.401933][ T5823] usb 2-1: Product: syz
[  170.407676][ T5823] usb 2-1: Manufacturer: syz
[  170.412349][ T5823] usb 2-1: SerialNumber: syz
[  170.463907][ T5823] usb 2-1: selecting invalid altsetting 1
[  170.473838][ T7236] REISERFS (device loop2): Using tea hash to sort names
[  170.483421][ T5823] usb 2-1: unit 6 not found!
[  170.491996][ T7236] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  171.378316][ T3013] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.445083][ T5823] snd-usb-audio: probe of 2-1:1.0 failed with error -22
[  171.490088][ T5823] usb 2-1: USB disconnect, device number 7
[  171.562416][ T5793] udevd[5793]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  171.711966][ T3013] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.829531][ T3013] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.929467][ T3013] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.053659][ T7268] loop2: detected capacity change from 0 to 4096
[  172.156965][ T7268] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  172.437943][ T7278] loop1: detected capacity change from 0 to 1024
[  172.481878][ T7278] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  172.561783][ T7278] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  172.939477][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  173.137522][ T5790] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  173.155088][ T5790] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  173.165219][ T5790] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  173.197311][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  173.211382][ T5790] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  173.226045][ T5790] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  173.235182][ T5790] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  174.007327][ T7313] loop1: detected capacity change from 0 to 64
[  174.378843][ T5823] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  174.599185][ T7332] netlink: 136 bytes leftover after parsing attributes in process `syz.1.439'.
[  174.608548][ T5823] usb 3-1: Using ep0 maxpacket: 16
[  174.622259][ T5823] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  174.645124][ T5823] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  174.656496][ T5823] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 4
[  174.681166][ T5823] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  174.691333][ T5823] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  174.710356][ T5823] usb 3-1: SerialNumber: syz
[  174.788436][ T7318] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  174.805391][ T5767] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  174.833843][ T5823] cdc_acm 3-1:1.0: skipping garbage
[  174.851549][ T5823] cdc_acm: probe of 3-1:1.0 failed with error -12
[  174.953343][ T7288] chnl_net:caif_netlink_parms(): no params data found
[  175.011282][ T5767] usb 4-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice= 1.00
[  175.051250][ T3013] hsr_slave_0: left promiscuous mode
[  175.060540][ T5767] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  175.078113][ T3013] hsr_slave_1: left promiscuous mode
[  175.092081][ T3013] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  175.113276][ T3013] batman_adv: batadv0: Removing interface: batadv_slave_0
[  175.130486][ T3013] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  175.144999][ T5823] usb 3-1: USB disconnect, device number 8
[  175.156559][ T3013] batman_adv: batadv0: Removing interface: batadv_slave_1
[  175.183521][ T3013] bridge_slave_1: left allmulticast mode
[  175.194341][ T3013] bridge_slave_1: left promiscuous mode
[  175.204478][ T3013] bridge0: port 2(bridge_slave_1) entered disabled state
[  175.215714][ T3013] bridge_slave_0: left allmulticast mode
[  175.221745][ T3013] bridge_slave_0: left promiscuous mode
[  175.228283][ T3013] bridge0: port 1(bridge_slave_0) entered disabled state
[  175.268436][ T3013] veth1_macvtap: left promiscuous mode
[  175.274330][ T3013] veth0_macvtap: left promiscuous mode
[  175.280362][ T3013] veth1_vlan: left promiscuous mode
[  175.290101][ T3013] veth0_vlan: left promiscuous mode
[  175.336301][ T5783] Bluetooth: hci3: command tx timeout
[  175.405073][    T8] usb 2-1: new full-speed USB device number 8 using dummy_hcd
[  175.611183][    T8] usb 2-1: config 0 has no interfaces?
[  175.622895][    T8] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  175.635182][    T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  175.651445][    T8] usb 2-1: Product: syz
[  175.662706][    T8] usb 2-1: Manufacturer: syz
[  175.667811][    T8] usb 2-1: SerialNumber: syz
[  175.684614][    T8] usb 2-1: config 0 descriptor??
[  176.368292][ T7348] 9pnet: p9_errstr2errno: server reported unknown error 00000000000000000000005
[  176.453843][    T8] usb 2-1: USB disconnect, device number 8
[  176.571691][ T7350] loop2: detected capacity change from 0 to 512
[  176.579787][ T7350] EXT4-fs: Ignoring removed nobh option
[  176.599731][ T7350] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13
[  176.614418][ T7350] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.445: attempt to clear invalid blocks 1 len 1
[  176.642167][ T3013] team0 (unregistering): Port device team_slave_1 removed
[  176.646482][ T7350] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  176.676260][ T7350] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.445: invalid indirect mapped block 1819239214 (level 0)
[  176.709366][ T7350] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.445: invalid indirect mapped block 1819239214 (level 1)
[  176.732055][ T7350] EXT4-fs (loop2): 1 truncate cleaned up
[  176.739598][ T7350] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  176.808161][ T3013] team0 (unregistering): Port device team_slave_0 removed
[  176.849686][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  176.929267][ T3013] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  177.041433][ T3013] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  177.420526][ T5790] Bluetooth: hci3: command tx timeout
[  177.584115][ T3013] bond0 (unregistering): Released all slaves
[  177.702382][ T5767] net1080 4-1:1.0 usb0: register 'net1080' at usb-dummy_hcd.3-1, NetChip TurboCONNECT, e2:1e:0e:09:9e:ea
[  177.793173][ T5783] block nbd2: Receive control failed (result -32)
[  177.801179][ T7355] block nbd2: shutting down sockets
[  178.168812][ T7366] loop2: detected capacity change from 0 to 512
[  178.177237][ T7366] EXT4-fs: Ignoring removed oldalloc option
[  178.188952][ T7366] EXT4-fs (loop2): Test dummy encryption mode enabled
[  178.230678][ T7366] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  179.495271][ T5783] Bluetooth: hci3: command tx timeout
[  181.575002][ T5783] Bluetooth: hci3: command tx timeout
[  182.835246][ T5767] usb 4-1: USB disconnect, device number 7
[  182.844089][ T5767] net1080 4-1:1.0 usb0: unregister 'net1080' usb-dummy_hcd.3-1, NetChip TurboCONNECT
[  183.035570][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  183.472502][ T7288] bridge0: port 1(bridge_slave_0) entered blocking state
[  183.515091][ T7288] bridge0: port 1(bridge_slave_0) entered disabled state
[  183.522523][ T7288] bridge_slave_0: entered allmulticast mode
[  183.574236][ T7288] bridge_slave_0: entered promiscuous mode
[  183.632970][ T7288] bridge0: port 2(bridge_slave_1) entered blocking state
[  183.667525][ T7288] bridge0: port 2(bridge_slave_1) entered disabled state
[  183.695493][ T7288] bridge_slave_1: entered allmulticast mode
[  183.721060][ T7288] bridge_slave_1: entered promiscuous mode
[  183.863109][ T7288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  183.889670][ T7288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  183.931334][ T7402] FAULT_INJECTION: forcing a failure.
[  183.931334][ T7402] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  183.970837][ T7288] team0: Port device team_slave_0 added
[  183.984729][ T7288] team0: Port device team_slave_1 added
[  184.004165][ T7402] CPU: 0 PID: 7402 Comm: syz.3.459 Not tainted syzkaller #0
[  184.011564][ T7402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  184.021686][ T7402] Call Trace:
[  184.025018][ T7402]  <TASK>
[  184.028003][ T7402]  dump_stack_lvl+0x18c/0x250
[  184.032753][ T7402]  ? show_regs_print_info+0x20/0x20
[  184.038026][ T7402]  ? load_image+0x420/0x420
[  184.042604][ T7402]  ? __might_fault+0xaa/0x120
[  184.047340][ T7402]  ? __lock_acquire+0x7d80/0x7d80
[  184.052428][ T7402]  should_fail_ex+0x394/0x4c0
[  184.057220][ T7402]  _copy_from_user+0x2f/0xe0
[  184.061887][ T7402]  __se_sys_io_uring_setup+0x170/0x2b0
[  184.067425][ T7402]  ? __x64_sys_io_uring_setup+0x60/0x60
[  184.073067][ T7402]  ? lockdep_hardirqs_on+0x98/0x150
[  184.078372][ T7402]  do_syscall_64+0x55/0xb0
[  184.082850][ T7402]  ? clear_bhb_loop+0x40/0x90
[  184.087669][ T7402]  ? clear_bhb_loop+0x40/0x90
[  184.092411][ T7402]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  184.098374][ T7402] RIP: 0033:0x7f7b3779e159
[  184.101067][ T7288] batman_adv: batadv0: Adding interface: batadv_slave_0
[  184.102824][ T7402] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  184.129639][ T7402] RSP: 002b:00007f7b386f5fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9
[  184.138095][ T7402] RAX: ffffffffffffffda RBX: 0000200000000040 RCX: 00007f7b3779e159
[  184.146101][ T7402] RDX: 0000200000000280 RSI: 0000200000000040 RDI: 000000000000001d
[  184.154105][ T7402] RBP: 00007f7b3783503b R08: 0000000000000000 R09: 0000000000000000
[  184.162200][ T7402] R10: 0000200000000140 R11: 0000000000000206 R12: 0000200000000280
[  184.170229][ T7402] R13: 0000200000000140 R14: 0000200000000100 R15: 00007ffd6a3b8198
[  184.178250][ T7402]  </TASK>
[  184.194894][ T7288] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  184.278358][ T7288] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  184.317129][ T7397] loop2: detected capacity change from 0 to 8192
[  184.343312][ T7288] batman_adv: batadv0: Adding interface: batadv_slave_1
[  184.365592][ T7288] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  184.444723][ T7288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  184.493407][ T7410] loop1: detected capacity change from 0 to 256
[  184.516154][ T7410] exfat: Unknown parameter 'dmask&u‹xT0000000P000002002'
[  184.582355][ T7410]  nullb0: [CUMANA/ADFS] p1
[  184.582634][ T7410] nullb0: p1 size 3609636590 extends beyond EOD, truncated
[  184.684355][ T7288] hsr_slave_0: entered promiscuous mode
[  184.726684][ T7288] hsr_slave_1: entered promiscuous mode
[  185.449927][ T7288] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  185.502000][ T7288] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  185.531820][ T7288] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  185.559070][ T7288] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  185.698949][ T7442] loop1: detected capacity change from 0 to 1024
[  185.751864][ T7442] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only.
[  186.049502][ T7288] 8021q: adding VLAN 0 to HW filter on device bond0
[  186.122056][ T7288] 8021q: adding VLAN 0 to HW filter on device team0
[  186.163090][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  186.170399][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  186.229299][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  186.236617][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  186.404621][ T7288] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  186.799825][ T7461] hfsplus: filesystem is marked journaled, leaving read-only.
[  186.982850][ T7288] 8021q: adding VLAN 0 to HW filter on device batadv0
[  187.265694][ T7476] batadv_slave_1: entered promiscuous mode
[  187.295655][ T7474] batadv_slave_1: left promiscuous mode
[  187.636000][ T7487] loop1: detected capacity change from 0 to 512
[  187.702189][ T7487] EXT4-fs error (device loop1): ext4_do_update_inode:5256: inode #15: comm syz.1.477: corrupted inode contents
[  187.771579][ T7487] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem
[  187.813473][ T7487] EXT4-fs error (device loop1): ext4_do_update_inode:5256: inode #15: comm syz.1.477: corrupted inode contents
[  187.853286][ T7487] EXT4-fs error (device loop1): ext4_evict_inode:302: inode #15: comm syz.1.477: mark_inode_dirty error
[  187.900556][ T7487] EXT4-fs (loop1): 1 orphan inode deleted
[  187.922962][ T7487] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  188.067626][ T7288] veth0_vlan: entered promiscuous mode
[  188.127934][ T7288] veth1_vlan: entered promiscuous mode
[  188.204005][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  188.267090][ T7288] veth0_macvtap: entered promiscuous mode
[  188.291596][ T7288] veth1_macvtap: entered promiscuous mode
[  188.393822][ T7288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  188.438339][ T7288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  188.450189][ T7288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  188.465876][ T7288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  188.479949][ T7288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  188.499713][ T7288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  188.519189][ T7288] batman_adv: batadv0: Interface activated: batadv_slave_0
[  188.568147][ T7288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  188.605481][ T7288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  188.642791][ T7288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  188.675323][ T7288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  188.715104][ T7288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  188.737126][ T7288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  188.751932][ T7288] batman_adv: batadv0: Interface activated: batadv_slave_1
[  188.813156][ T7288] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  188.835977][ T7288] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  188.844771][ T7288] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  188.874927][ T7288] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  189.193956][ T2981] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  189.233407][ T2981] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  189.416787][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  189.442317][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  189.615073][ T7528] netlink: 12 bytes leftover after parsing attributes in process `syz.2.489'.
[  190.278611][ T7547] loop5: detected capacity change from 0 to 64
[  190.350769][ T7548] netlink: 'syz.1.495': attribute type 10 has an invalid length.
[  190.399422][ T7548] bridge0: port 2(bridge_slave_1) entered disabled state
[  190.467730][ T7548] bridge_slave_1: left allmulticast mode
[  190.473608][ T7548] bridge_slave_1: left promiscuous mode
[  190.497653][ T7548] bridge0: port 2(bridge_slave_1) entered disabled state
[  190.565488][ T7548] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  190.594273][ T7288] hfs: node 4:3 still has 1 user(s)!
[  190.636887][    C1] Illegal XDP return value 16128 on prog  (id 30) dev bridge_slave_1, expect packet loss!
[  190.997726][ T7559] loop1: detected capacity change from 0 to 2048
[  191.055023][ T7559] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  191.300993][ T7568] loop5: detected capacity change from 0 to 256
[  191.624733][ T7551] loop2: detected capacity change from 0 to 32768
[  191.686903][ T7551] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.496 (7551)
[  191.760518][ T7551] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  191.799768][ T7551] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  191.830888][ T7551] BTRFS info (device loop2): force clearing of disk cache
[  191.873068][ T7551] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  191.915254][ T7551] BTRFS info (device loop2): use zstd compression, level 3
[  191.935339][ T7551] BTRFS info (device loop2): using free space tree
[  192.116133][ T7593] netlink: 40 bytes leftover after parsing attributes in process `syz.1.504'.
[  192.149696][ T7551] BTRFS info (device loop2): enabling ssd optimizations
[  192.172779][ T7593] netlink: 40 bytes leftover after parsing attributes in process `syz.1.504'.
[  192.185204][ T7551] BTRFS info (device loop2): rebuilding free space tree
[  193.056391][ T5777] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  193.118347][ T5767] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  193.156264][ T5767] hid-generic 0000:0000:0000.0007: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  193.670231][ T7630] netlink: 12 bytes leftover after parsing attributes in process `syz.2.511'.
[  194.097372][ T7638] hid-generic 0000:0000:0000.0007: pid 7638 passed too short report
[  194.619120][ T7647] loop2: detected capacity change from 0 to 512
[  194.683692][ T7647] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002]
[  194.718705][ T7647] System zones: 0-2, 18-18, 34-35
[  194.746493][ T7647] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  194.787723][ T7647] ext4 filesystem being mounted at /157/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  195.098188][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  195.585176][ T5767] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  195.812997][ T5767] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 254, changing to 11
[  195.844948][ T5767] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  195.888880][ T5767] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[  195.914407][ T5767] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  195.958710][ T5767] usb 3-1: config 0 descriptor??
[  196.274998][    T8] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  196.409740][ T5767] hid-multitouch 0003:1FD2:6007.0008: unknown main item tag 0x0
[  196.438144][ T5767] hid-multitouch 0003:1FD2:6007.0008: unknown main item tag 0x0
[  196.465198][ T5767] hid-multitouch 0003:1FD2:6007.0008: unknown main item tag 0x0
[  196.493485][ T5767] hid-multitouch 0003:1FD2:6007.0008: unknown main item tag 0x0
[  196.501366][    T8] usb 4-1: Using ep0 maxpacket: 32
[  196.517096][ T5767] hid-multitouch 0003:1FD2:6007.0008: unknown main item tag 0x0
[  196.550587][ T5767] hid-multitouch 0003:1FD2:6007.0008: unknown main item tag 0x0
[  196.570894][    T8] usb 4-1: config 0 has an invalid interface number: 51 but max is 0
[  196.589428][ T5767] hid-multitouch 0003:1FD2:6007.0008: unknown main item tag 0x0
[  196.608054][    T8] usb 4-1: config 0 has no interface number 0
[  196.635005][ T5767] hid-multitouch 0003:1FD2:6007.0008: unknown main item tag 0x0
[  196.655095][ T5767] hid-multitouch 0003:1FD2:6007.0008: unknown main item tag 0x0
[  196.683906][ T5767] hid-multitouch 0003:1FD2:6007.0008: unknown main item tag 0x0
[  196.695346][    T8] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  196.706820][    T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  196.735558][ T5767] hid-multitouch 0003:1FD2:6007.0008: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.2-1/input0
[  196.747874][    T8] usb 4-1: Product: syz
[  196.752154][    T8] usb 4-1: Manufacturer: syz
[  196.781289][    T8] usb 4-1: SerialNumber: syz
[  196.809210][ T5767] usb 3-1: USB disconnect, device number 9
[  196.827911][    T8] usb 4-1: config 0 descriptor??
[  196.892786][    T8] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  196.946716][ T1200] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  196.998341][ T1200] hid-generic 0000:0000:0000.0009: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  197.072054][ T7694] fido_id[7694]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  197.129537][    T8] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  197.225241][    T8] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  197.555917][ T7705] TCP: tcp_parse_options: Illegal window scaling value 16 > 14 received
[  197.701737][ T7689] loop1: detected capacity change from 0 to 40427
[  197.747653][ T7689] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504)
[  197.767021][    C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71
[  197.777983][    T8] usb 4-1: USB disconnect, device number 8
[  197.794203][ T7689] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  197.831186][    T8] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  197.869279][ T7689] F2FS-fs (loop1): invalid crc value
[  197.879427][ T7689] F2FS-fs (loop1): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root
[  197.907619][    T8] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  197.948134][    T8] quatech2 4-1:0.51: device disconnected
[  197.991850][ T7689] F2FS-fs (loop1): Found nat_bits in checkpoint
[  198.173013][ T7714] loop2: detected capacity change from 0 to 1024
[  198.228101][ T7689] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  198.247427][ T7689] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  198.272559][ T7714] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  198.539548][ T5779] syz-executor: attempt to access beyond end of device
[  198.539548][ T5779] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  198.596193][ T5779] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  198.763905][ T7725] loop5: detected capacity change from 0 to 8
[  198.802665][ T7725] SQUASHFS error: lzo decompression failed, data probably corrupt
[  198.812702][ T7725] SQUASHFS error: Failed to read block 0x91: -5
[  198.819476][ T7725] SQUASHFS error: Unable to read metadata cache entry [8f]
[  198.835434][ T7725] SQUASHFS error: Unable to read inode 0x11f
[  198.880099][ T7373] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  199.208326][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.337441][ T1200] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  199.542830][ T1200] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  199.553639][ T1200] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  199.573611][ T1200] usb 6-1: config 0 descriptor??
[  199.595988][ T1200] cp210x 6-1:0.0: cp210x converter detected
[  199.632570][ T7737] loop2: detected capacity change from 0 to 1024
[  199.698699][ T7737] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  200.041470][ T1200] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32
[  200.056512][ T7746] FAULT_INJECTION: forcing a failure.
[  200.056512][ T7746] name failslab, interval 1, probability 0, space 0, times 0
[  200.069599][    T8] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  200.080407][ T7746] CPU: 0 PID: 7746 Comm: syz.3.547 Not tainted syzkaller #0
[  200.087826][ T7746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  200.097938][ T7746] Call Trace:
[  200.101265][ T7746]  <TASK>
[  200.104249][ T7746]  dump_stack_lvl+0x18c/0x250
[  200.109042][ T7746]  ? show_regs_print_info+0x20/0x20
[  200.114315][ T7746]  ? load_image+0x420/0x420
[  200.118886][ T7746]  ? __might_sleep+0xe0/0xe0
[  200.123552][ T7746]  ? __lock_acquire+0x7d80/0x7d80
[  200.128661][ T7746]  should_fail_ex+0x394/0x4c0
[  200.128839][ T1200] usb 6-1: cp210x converter now attached to ttyUSB0
[  200.133391][ T7746]  should_failslab+0x9/0x20
[  200.144544][ T7746]  slab_pre_alloc_hook+0x59/0x300
[  200.149649][ T7746]  kmem_cache_alloc_lru+0x4d/0x2b0
[  200.154823][ T7746]  ? __d_alloc+0x31/0x710
[  200.159259][ T7746]  __d_alloc+0x31/0x710
[  200.163511][ T7746]  ? alloc_fd+0x590/0x640
[  200.167911][ T7746]  d_alloc_pseudo+0x1d/0x70
[  200.172480][ T7746]  alloc_file_pseudo+0xe4/0x210
[  200.177493][ T7746]  ? fput+0x1a0/0x1a0
[  200.181556][ T7746]  ? alloc_fd+0x590/0x640
[  200.185965][ T7746]  sock_alloc_file+0xb7/0x280
[  200.190723][ T7746]  __sys_socket+0x140/0x1b0
[  200.195308][ T7746]  __x64_sys_socket+0x7a/0x90
[  200.200042][ T7746]  do_syscall_64+0x55/0xb0
[  200.204526][ T7746]  ? clear_bhb_loop+0x40/0x90
[  200.209267][ T7746]  ? clear_bhb_loop+0x40/0x90
[  200.214013][ T7746]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  200.219977][ T7746] RIP: 0033:0x7f7b3779e159
[  200.224451][ T7746] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  200.244123][ T7746] RSP: 002b:00007f7b386f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  200.252619][ T7746] RAX: ffffffffffffffda RBX: 00007f7b37a25fa0 RCX: 00007f7b3779e159
[  200.260657][ T7746] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000000a
[  200.268684][ T7746] RBP: 00007f7b3783503b R08: 0000000000000000 R09: 0000000000000000
[  200.277586][ T7746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  200.285616][ T7746] R13: 00007f7b37a26038 R14: 00007f7b37a25fa0 R15: 00007ffd6a3b8198
[  200.293661][ T7746]  </TASK>
[  200.331237][   T55] usb 6-1: USB disconnect, device number 2
[  200.354747][   T55] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  200.399018][   T55] cp210x 6-1:0.0: device disconnected
[  200.405207][    T8] usb 2-1: Using ep0 maxpacket: 32
[  200.415151][    T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  200.435026][    T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  200.456033][    T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  200.464178][    T8] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  200.484332][    T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  200.506651][    T8] usb 2-1: config 0 descriptor??
[  200.521467][    T8] hub 2-1:0.0: USB hub found
[  200.647926][    T9] usb 3-1: Using ep0 maxpacket: 32
[  200.655269][    T9] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 252, changing to 11
[  200.667972][    T9] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  200.695241][    T9] usb 3-1: config 0 interface 0 has no altsetting 0
[  200.712183][    T9] usb 3-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00
[  200.735928][    T8] hub 2-1:0.0: 1 port detected
[  200.744981][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  200.804462][    T9] usb 3-1: config 0 descriptor??
[  200.949109][    T8] hub 2-1:0.0: hub_hub_status failed (err = -71)
[  200.964988][    T8] hub 2-1:0.0: config failed, can't get hub status (err -71)
[  201.028931][    T8] usbhid 2-1:0.0: can't add hid device: -71
[  201.046949][    T8] usbhid: probe of 2-1:0.0 failed with error -71
[  201.096329][    T8] usb 2-1: USB disconnect, device number 9
[  201.147280][ T7762] sctp: [Deprecated]: syz.3.553 (pid 7762) Use of int in max_burst socket option.
[  201.147280][ T7762] Use struct sctp_assoc_value instead
[  201.325238][ T1200] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  201.518789][ T1200] usb 6-1: Using ep0 maxpacket: 16
[  201.534140][ T1200] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  201.540549][ T5767] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  201.545671][ T1200] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  201.563135][ T1200] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  201.579805][ T1200] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  201.590378][ T1200] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  201.601571][ T1200] usb 6-1: config 0 descriptor??
[  201.787593][ T5767] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  201.815480][ T5767] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  201.845308][    T9] hid-alps 0003:044E:120B.000A: failed to read command (-71)
[  201.857097][ T5767] usb 4-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00
[  201.875619][    T9] hid-alps 0003:044E:120B.000A: failed to change TP mode (-71)
[  201.893621][ T5767] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  201.908701][    T9] hid-alps 0003:044E:120B.000A: hidraw0: USB HID v80.00 Joystick [HID 044e:120b] on usb-dummy_hcd.2-1/input0
[  201.925194][ T5767] usb 4-1: Product: syz
[  201.929443][ T5767] usb 4-1: Manufacturer: syz
[  201.954457][ T5767] usb 4-1: SerialNumber: syz
[  201.974234][    T9] usb 3-1: USB disconnect, device number 10
[  202.095776][ T1200] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.000B/input/input13
[  202.114780][ T7774] fido_id[7774]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  202.119889][ T7776] loop1: detected capacity change from 0 to 512
[  202.166340][ T7776] EXT4-fs: Ignoring removed nobh option
[  202.199209][ T7776] EXT4-fs (loop1): orphan cleanup on readonly fs
[  202.228164][ T1200] microsoft 0003:045E:07DA.000B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0
[  202.277052][ T1200] usb 6-1: USB disconnect, device number 3
[  202.313702][ T5767] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900
[  202.325140][ T7776] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.557: EA inode hash validation failed
[  202.403863][ T7776] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  202.458743][ T7776] EXT4-fs error (device loop1): ext4_do_update_inode:5256: inode #15: comm syz.1.557: corrupted inode contents
[  202.521798][ T7776] EXT4-fs error (device loop1): ext4_dirty_inode:6144: inode #15: comm syz.1.557: mark_inode_dirty error
[  202.539862][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  202.547886][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  202.582198][ T7776] EXT4-fs error (device loop1): ext4_do_update_inode:5256: inode #15: comm syz.1.557: corrupted inode contents
[  202.614565][ T7783] fido_id[7783]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  202.630589][ T7776] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3003: inode #15: comm syz.1.557: mark_inode_dirty error
[  202.666591][ T7776] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3006: inode #15: comm syz.1.557: mark inode dirty (error -117)
[  202.688919][ T7776] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117)
[  202.721721][ T7776] EXT4-fs (loop1): 1 orphan inode deleted
[  202.737615][ T7776] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  202.767382][    T9] usb 4-1: USB disconnect, device number 9
[  202.788661][    T9] usblp0: removed
[  202.857471][ T7776] jffs2: notice: (7776) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found.
[  202.900436][ T7788] loop2: detected capacity change from 0 to 1024
[  202.989431][ T7788] hfsplus: xattr exists yet
[  203.001973][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  203.129272][   T11] hfsplus: b-tree write err: -5, ino 8
[  204.071854][ T7819] loop1: detected capacity change from 0 to 512
[  204.164240][ T7819] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  204.427013][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  204.592490][ T7832] loop2: detected capacity change from 0 to 512
[  204.718734][ T7832] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  204.775357][ T7832] ext4 filesystem being mounted at /172/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  204.870581][ T7816] loop3: detected capacity change from 0 to 32768
[  205.101967][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  205.874995][    T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  206.077770][ T7873] macsec1: entered allmulticast mode
[  206.087643][    T9] usb 4-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice= 1.00
[  206.107474][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  206.781259][ T7867] loop1: detected capacity change from 0 to 32768
[  206.843048][ T7867] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  207.137672][ T7867] XFS (loop1): Ending clean mount
[  207.167824][    T9] usb 4-1: NFC: Unable to get FW version
[  207.226756][    T9] pn533_usb: probe of 4-1:1.0 failed with error -71
[  207.270865][    T9] usb 4-1: USB disconnect, device number 10
[  207.464145][ T5779] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  207.539741][ T7911] Line length is too long: Should be less than 4094
[  209.243948][ T7962] netlink: 8 bytes leftover after parsing attributes in process `syz.1.611'.
[  209.416450][ T7967] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  210.557388][ T7977] loop5: detected capacity change from 0 to 32768
[  210.594817][ T7977] JBD2: Ignoring recovery information on journal
[  210.688298][ T7977] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  211.359030][ T8014] netlink: 24 bytes leftover after parsing attributes in process `syz.2.623'.
[  211.549345][ T7288] ocfs2: Unmounting device (7,5) on (node local)
[  211.687372][ T8022] Invalid argument reading file caps for ./file0
[  211.882562][ T8028] FAULT_INJECTION: forcing a failure.
[  211.882562][ T8028] name failslab, interval 1, probability 0, space 0, times 0
[  211.896016][ T8028] CPU: 0 PID: 8028 Comm: syz.1.629 Not tainted syzkaller #0
[  211.903377][ T8028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  211.913583][ T8028] Call Trace:
[  211.916924][ T8028]  <TASK>
[  211.919905][ T8028]  dump_stack_lvl+0x18c/0x250
[  211.924664][ T8028]  ? show_regs_print_info+0x20/0x20
[  211.929927][ T8028]  ? load_image+0x420/0x420
[  211.934513][ T8028]  ? mark_lock+0x94/0x320
[  211.938908][ T8028]  ? __lock_acquire+0x1336/0x7d80
[  211.944025][ T8028]  should_fail_ex+0x394/0x4c0
[  211.948786][ T8028]  should_failslab+0x9/0x20
[  211.953363][ T8028]  slab_pre_alloc_hook+0x59/0x300
[  211.958468][ T8028]  kmem_cache_alloc+0x5a/0x2c0
[  211.963292][ T8028]  ? radix_tree_node_alloc+0x7e/0x3a0
[  211.968776][ T8028]  radix_tree_node_alloc+0x7e/0x3a0
[  211.974082][ T8028]  idr_get_free+0x28f/0xa10
[  211.978675][ T8028]  idr_alloc_cyclic+0x28a/0x610
[  211.983601][ T8028]  ? idr_alloc+0x2e0/0x2e0
[  211.988086][ T8028]  ? do_raw_spin_lock+0x11f/0x2b0
[  211.993190][ T8028]  ? bpf_map_alloc_id+0x21/0xd0
[  211.998113][ T8028]  bpf_map_alloc_id+0x40/0xd0
[  212.003031][ T8028]  map_create+0xe24/0x12f0
[  212.007554][ T8028]  __sys_bpf+0x651/0x890
[  212.011864][ T8028]  ? bpf_link_show_fdinfo+0x390/0x390
[  212.017325][ T8028]  ? lock_chain_count+0x20/0x20
[  212.022258][ T8028]  __x64_sys_bpf+0x7c/0x90
[  212.026739][ T8028]  do_syscall_64+0x55/0xb0
[  212.031259][ T8028]  ? clear_bhb_loop+0x40/0x90
[  212.036011][ T8028]  ? clear_bhb_loop+0x40/0x90
[  212.040837][ T8028]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  212.046792][ T8028] RIP: 0033:0x7f3dabb9e159
[  212.051264][ T8028] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  212.070964][ T8028] RSP: 002b:00007f3daca3e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  212.079451][ T8028] RAX: ffffffffffffffda RBX: 00007f3dabe25fa0 RCX: 00007f3dabb9e159
[  212.087485][ T8028] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 0000000000000000
[  212.095523][ T8028] RBP: 00007f3dabc3503b R08: 0000000000000000 R09: 0000000000000000
[  212.103553][ T8028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  212.111600][ T8028] R13: 00007f3dabe26038 R14: 00007f3dabe25fa0 R15: 00007ffef7386118
[  212.119666][ T8028]  </TASK>
[  212.168177][ T8031] loop2: detected capacity change from 0 to 1024
[  212.262937][ T8036] netlink: 'syz.3.631': attribute type 3 has an invalid length.
[  212.387438][ T8037] bridge0: port 2(bridge_slave_1) entered disabled state
[  212.792827][ T2920] tipc: Subscription rejected, illegal request
[  213.254579][ T8065] pimreg: entered allmulticast mode
[  213.293758][ T8065] pimreg: left allmulticast mode
[  213.752068][ T8079] FAULT_INJECTION: forcing a failure.
[  213.752068][ T8079] name failslab, interval 1, probability 0, space 0, times 0
[  213.771478][ T8079] CPU: 1 PID: 8079 Comm: syz.5.643 Not tainted syzkaller #0
[  213.778879][ T8079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  213.789002][ T8079] Call Trace:
[  213.792330][ T8079]  <TASK>
[  213.795303][ T8079]  dump_stack_lvl+0x18c/0x250
[  213.800192][ T8079]  ? show_regs_print_info+0x20/0x20
[  213.805460][ T8079]  ? load_image+0x420/0x420
[  213.810032][ T8079]  ? __might_sleep+0xe0/0xe0
[  213.814690][ T8079]  ? __lock_acquire+0x7d80/0x7d80
[  213.819785][ T8079]  should_fail_ex+0x394/0x4c0
[  213.824563][ T8079]  should_failslab+0x9/0x20
[  213.829316][ T8079]  slab_pre_alloc_hook+0x59/0x300
[  213.834425][ T8079]  kmem_cache_alloc+0x5a/0x2c0
[  213.839299][ T8079]  ? prepare_creds+0x30/0x5d0
[  213.844044][ T8079]  prepare_creds+0x30/0x5d0
[  213.848623][ T8079]  __sys_setresuid+0x62a/0xc40
[  213.853473][ T8079]  do_syscall_64+0x55/0xb0
[  213.857978][ T8079]  ? clear_bhb_loop+0x40/0x90
[  213.862758][ T8079]  ? clear_bhb_loop+0x40/0x90
[  213.867508][ T8079]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  213.873463][ T8079] RIP: 0033:0x7fd88f19e159
[  213.874278][ T8080] loop2: detected capacity change from 0 to 2048
[  213.877907][ T8079] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  213.877936][ T8079] RSP: 002b:00007fd88ffed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000075
[  213.877959][ T8079] RAX: ffffffffffffffda RBX: 00007fd88f425fa0 RCX: 00007fd88f19e159
[  213.877976][ T8079] RDX: 0000000000000000 RSI: 000000000000ee01 RDI: 0000000000000000
[  213.877989][ T8079] RBP: 00007fd88f23503b R08: 0000000000000000 R09: 0000000000000000
[  213.878004][ T8079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  213.878017][ T8079] R13: 00007fd88f426038 R14: 00007fd88f425fa0 R15: 00007ffcd3d3f5f8
[  213.878049][ T8079]  </TASK>
[  213.973831][ T8042] loop3: detected capacity change from 0 to 32768
[  214.069787][ T8042] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  214.173500][ T8042] XFS (loop3): Ending clean mount
[  214.236451][ T8095] loop5: detected capacity change from 0 to 7
[  214.244180][ T8080] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  214.269985][ T8095] Dev loop5: unable to read RDB block 7
[  214.295014][ T5767] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  214.295675][ T8095]  loop5: unable to read partition table
[  214.355489][ T8095] loop5: partition table beyond EOD, truncated
[  214.375809][ T8095] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  214.468081][ T5143] Dev loop5: unable to read RDB block 7
[  214.473769][ T5143]  loop5: unable to read partition table
[  214.485091][ T5767] usb 2-1: Using ep0 maxpacket: 8
[  214.495819][ T5143] loop5: partition table beyond EOD, truncated
[  214.505293][ T5767] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  214.535524][ T5767] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  214.554650][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  214.566672][ T5767] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  214.594060][ T5767] usb 2-1: config 0 descriptor??
[  214.782205][ T8108] FAULT_INJECTION: forcing a failure.
[  214.782205][ T8108] name failslab, interval 1, probability 0, space 0, times 0
[  214.795410][ T8108] CPU: 0 PID: 8108 Comm: syz.2.647 Not tainted syzkaller #0
[  214.802790][ T8108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  214.812914][ T8108] Call Trace:
[  214.816248][ T8108]  <TASK>
[  214.819224][ T8108]  dump_stack_lvl+0x18c/0x250
[  214.823974][ T8108]  ? show_regs_print_info+0x20/0x20
[  214.829310][ T8108]  ? load_image+0x420/0x420
[  214.833889][ T8108]  ? __might_sleep+0xe0/0xe0
[  214.838529][ T8108]  ? __lock_acquire+0x7d80/0x7d80
[  214.843598][ T8108]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  214.849701][ T8108]  should_fail_ex+0x394/0x4c0
[  214.854421][ T8108]  should_failslab+0x9/0x20
[  214.858982][ T8108]  slab_pre_alloc_hook+0x59/0x300
[  214.864060][ T8108]  ? ktime_get_coarse_real_ts64+0x2f/0x120
[  214.869910][ T8108]  kmem_cache_alloc_lru+0x4d/0x2b0
[  214.875093][ T8108]  ? __d_alloc+0x31/0x710
[  214.879486][ T8108]  __d_alloc+0x31/0x710
[  214.883674][ T8108]  d_alloc_pseudo+0x1d/0x70
[  214.888208][ T8108]  alloc_file_pseudo+0xe4/0x210
[  214.893096][ T8108]  ? fput+0x1a0/0x1a0
[  214.897110][ T8108]  ? inode_update_timestamps+0x600/0x600
[  214.902798][ T8108]  ? debug_mutex_init+0x38/0x70
[  214.907690][ T8108]  ? create_pipe_files+0x2c7/0x700
[  214.912851][ T8108]  create_pipe_files+0x3ac/0x700
[  214.917832][ T8108]  __do_pipe_flags+0x4c/0x2c0
[  214.922559][ T8108]  do_pipe2+0xab/0x190
[  214.926685][ T8108]  ? _compound_head+0x120/0x120
[  214.931573][ T8108]  ? lock_chain_count+0x20/0x20
[  214.936466][ T8108]  ? syscall_enter_from_user_mode+0x25/0x80
[  214.942492][ T8108]  __x64_sys_pipe2+0x5a/0x70
[  214.947209][ T8108]  do_syscall_64+0x55/0xb0
[  214.951680][ T8108]  ? clear_bhb_loop+0x40/0x90
[  214.956392][ T8108]  ? clear_bhb_loop+0x40/0x90
[  214.961105][ T8108]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  214.967035][ T8108] RIP: 0033:0x7fc24359e159
[  214.971484][ T8108] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  214.991219][ T8108] RSP: 002b:00007fc24455a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000125
[  214.999673][ T8108] RAX: ffffffffffffffda RBX: 00007fc243825fa0 RCX: 00007fc24359e159
[  215.007857][ T8108] RDX: 0000000000000000 RSI: 0000000000080000 RDI: 0000000000000000
[  215.015890][ T8108] RBP: 00007fc24363503b R08: 0000000000000000 R09: 0000000000000000
[  215.023904][ T8108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  215.031915][ T8108] R13: 00007fc243826038 R14: 00007fc243825fa0 R15: 00007fff2e846658
[  215.039981][ T8108]  </TASK>
[  215.087849][ T5767] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  215.323377][ T5767] usb 2-1: USB disconnect, device number 10
[  215.512195][ T5780] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  215.822464][ T8103] loop5: detected capacity change from 0 to 32768
[  215.871154][ T8103] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop5 scanned by syz.5.646 (8103)
[  215.914784][ T8103] BTRFS info (device loop5): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  215.957679][ T8103] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[  215.975851][ T8103] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  216.044049][ T8103] BTRFS info (device loop5): use zstd compression, level 3
[  216.067046][ T8103] BTRFS info (device loop5): force clearing of disk cache
[  216.103730][ T8103] BTRFS info (device loop5): enabling disk space caching
[  216.134927][ T8103] BTRFS info (device loop5): disk space caching is enabled
[  216.345882][ T8103] BTRFS info (device loop5): enabling ssd optimizations
[  216.354884][ T8103] BTRFS info (device loop5): auto enabling async discard
[  216.377019][ T8103] BTRFS info (device loop5): rebuilding free space tree
[  216.464808][ T8103] BTRFS info (device loop5): disabling free space tree
[  216.471946][ T8103] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  216.503220][ T8103] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  216.609700][ T8156] loop1: detected capacity change from 0 to 256
[  216.637568][ T8156] exfat: Deprecated parameter 'utf8'
[  216.658956][ T8156] exfat: Deprecated parameter 'namecase'
[  216.744776][ T8156] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0x01ce8137, utbl_chksum : 0xe619d30d)
[  217.163769][ T7288] BTRFS info (device loop5): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  217.292787][ T8167] loop2: detected capacity change from 0 to 64
[  217.385194][   T55] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  217.451860][   T28] audit: type=1800 audit(1789183393.843:29): pid=8167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.659" name="file1" dev="loop2" ino=21 res=0 errno=0
[  217.617443][   T55] usb 2-1: config index 0 descriptor too short (expected 39, got 27)
[  217.646061][   T55] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  217.697605][   T55] usb 2-1: config 0 interface 0 has no altsetting 0
[  217.731287][   T55] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  217.754993][   T55] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  217.815117][   T55] usb 2-1: Product: syz
[  217.829444][   T55] usb 2-1: Manufacturer: syz
[  217.845872][   T55] usb 2-1: SerialNumber: syz
[  217.882582][   T55] usb 2-1: config 0 descriptor??
[  217.987042][   T55] hub 2-1:0.0: bad descriptor, ignoring hub
[  218.024951][   T55] hub: probe of 2-1:0.0 failed with error -5
[  218.038536][   T55] usb 2-1: selecting invalid altsetting 0
[  218.296545][   T55] usb 2-1: USB disconnect, device number 11
[  218.327305][ T8190] 
[  218.329720][ T8190] ======================================================
[  218.336805][ T8190] WARNING: possible circular locking dependency detected
[  218.343884][ T8190] syzkaller #0 Not tainted
[  218.348342][ T8190] ------------------------------------------------------
[  218.355412][ T8190] syz.5.665/8190 is trying to acquire lock:
[  218.361339][ T8190] ffff88814ddc00e0 (&type->s_umount_key#32){++++}-{3:3}, at: super_lock+0x189/0x390
[  218.370815][ T8190] 
[  218.370815][ T8190] but task is already holding lock:
[  218.378221][ T8190] ffff888148d39888 (&bdev->bd_holder_lock){+.+.}-{3:3}, at: blkdev_common_ioctl+0x838/0x2580
[  218.388478][ T8190] 
[  218.388478][ T8190] which lock already depends on the new lock.
[  218.388478][ T8190] 
[  218.398924][ T8190] 
[  218.398924][ T8190] the existing dependency chain (in reverse order) is:
[  218.407979][ T8190] 
[  218.407979][ T8190] -> #4 (&bdev->bd_holder_lock){+.+.}-{3:3}:
[  218.416219][ T8190]        __mutex_lock+0x135/0xc80
[  218.421325][ T8190]        bd_finish_claiming+0x229/0x3f0
[  218.426923][ T8190]        blkdev_get_by_dev+0x469/0x610
[  218.432442][ T8190]        bdev_open_by_dev+0x77/0x100
[  218.437785][ T8190]        setup_bdev_super+0x59/0x660
[  218.443131][ T8190]        mount_bdev+0x1ce/0x2c0
[  218.448100][ T8190]        legacy_get_tree+0xea/0x180
[  218.453380][ T8190]        vfs_get_tree+0x8c/0x280
[  218.458375][ T8190]        do_new_mount+0x24a/0xa40
[  218.463456][ T8190]        init_mount+0xde/0x130
[  218.468283][ T8190]        do_mount_root+0x97/0x230
[  218.473371][ T8190]        mount_root_generic+0x1a6/0x3e0
[  218.478975][ T8190]        prepare_namespace+0xc2/0x100
[  218.484605][ T8190]        kernel_init_freeable+0x41a/0x560
[  218.490385][ T8190]        kernel_init+0x1d/0x1c0
[  218.495298][ T8190]        ret_from_fork+0x48/0x80
[  218.500302][ T8190]        ret_from_fork_asm+0x11/0x20
[  218.505149][    T8] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  218.505634][ T8190] 
[  218.505634][ T8190] -> #3 (bdev_lock){+.+.}-{3:3}:
[  218.505670][ T8190]        __mutex_lock+0x135/0xc80
[  218.505704][ T8190]        bd_prepare_to_claim+0x1d9/0x4a0
[  218.505724][ T8190]        truncate_bdev_range+0x4e/0x260
[  218.505742][ T8190]        blkdev_fallocate+0x50d/0x6a0
[  218.505763][ T8190]        vfs_fallocate+0x585/0x6f0
[  218.505786][ T8190]        __x64_sys_fallocate+0xc1/0x110
[  218.505808][ T8190]        do_syscall_64+0x55/0xb0
[  218.505831][ T8190]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  218.505855][ T8190] 
[  218.505855][ T8190] -> #2 (mapping.invalidate_lock){++++}-{3:3}:
[  218.505888][ T8190]        down_write+0x97/0x200
[  218.505915][ T8190]        set_blocksize+0x247/0x4b0
[  218.505933][ T8190]        sb_min_blocksize+0xbe/0x190
[  218.505950][ T8190]        ext4_fill_super+0x6e7/0x6870
[  218.505976][ T8190]        get_tree_bdev+0x3e5/0x520
[  218.505997][ T8190]        vfs_get_tree+0x8c/0x280
[  218.506018][ T8190]        do_new_mount+0x24a/0xa40
[  218.506048][ T8190]        init_mount+0xde/0x130
[  218.506072][ T8190]        do_mount_root+0x97/0x230
[  218.506094][ T8190]        mount_root_generic+0x1a6/0x3e0
[  218.506117][ T8190]        prepare_namespace+0xc2/0x100
[  218.506139][ T8190]        kernel_init_freeable+0x41a/0x560
[  218.506160][ T8190]        kernel_init+0x1d/0x1c0
[  218.506178][ T8190]        ret_from_fork+0x48/0x80
[  218.506202][ T8190]        ret_from_fork_asm+0x11/0x20
[  218.506229][ T8190] 
[  218.506229][ T8190] -> #1 (&sb->s_type->i_mutex_key#8){++++}-{3:3}:
[  218.659360][ T8190]        down_write+0x97/0x200
[  218.664188][ T8190]        set_blocksize+0x1ff/0x4b0
[  218.669365][ T8190]        sb_min_blocksize+0xbe/0x190
[  218.674708][ T8190]        ext4_fill_super+0x6e7/0x6870
[  218.680143][ T8190]        get_tree_bdev+0x3e5/0x520
[  218.685312][ T8190]        vfs_get_tree+0x8c/0x280
[  218.690308][ T8190]        do_new_mount+0x24a/0xa40
[  218.695346][    T8] usb 4-1: Using ep0 maxpacket: 32
[  218.695389][ T8190]        init_mount+0xde/0x130
[  218.705329][ T8190]        do_mount_root+0x97/0x230
[  218.710429][ T8190]        mount_root_generic+0x1a6/0x3e0
[  218.716044][ T8190]        prepare_namespace+0xc2/0x100
[  218.721471][ T8190]        kernel_init_freeable+0x41a/0x560
[  218.727338][ T8190]        kernel_init+0x1d/0x1c0
[  218.732246][ T8190]        ret_from_fork+0x48/0x80
[  218.737243][ T8190]        ret_from_fork_asm+0x11/0x20
[  218.738538][    T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  218.742660][ T8190] 
[  218.742660][ T8190] -> #0 (&type->s_umount_key#32){++++}-{3:3}:
[  218.761936][ T8190]        __lock_acquire+0x37ef/0x7d80
[  218.767377][ T8190]        lock_acquire+0x19e/0x420
[  218.772464][ T8190]        down_read+0x46/0x2e0
[  218.777207][ T8190]        super_lock+0x189/0x390
[  218.782118][ T8190]        fs_bdev_sync+0xa4/0x170
[  218.787107][ T8190]        blkdev_common_ioctl+0x8a9/0x2580
[  218.792879][ T8190]        blkdev_ioctl+0x512/0x730
[  218.797970][ T8190]        __se_sys_ioctl+0xfd/0x170
[  218.803143][ T8190]        do_syscall_64+0x55/0xb0
[  218.808136][ T8190]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  218.814603][ T8190] 
[  218.814603][ T8190] other info that might help us debug this:
[  218.814603][ T8190] 
[  218.824869][ T8190] Chain exists of:
[  218.824869][ T8190]   &type->s_umount_key#32 --> bdev_lock --> &bdev->bd_holder_lock
[  218.824869][ T8190] 
[  218.839192][ T8190]  Possible unsafe locking scenario:
[  218.839192][ T8190] 
[  218.842453][    T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  218.846659][ T8190]        CPU0                    CPU1
[  218.846667][ T8190]        ----                    ----
[  218.846673][ T8190]   lock(&bdev->bd_holder_lock);
[  218.846690][ T8190]                                lock(bdev_lock);
[  218.846706][ T8190]                                lock(&bdev->bd_holder_lock);
[  218.846721][ T8190]   rlock(&type->s_umount_key#32);
[  218.891357][ T8190] 
[  218.891357][ T8190]  *** DEADLOCK ***
[  218.891357][ T8190] 
[  218.899539][ T8190] 1 lock held by syz.5.665/8190:
[  218.899540][    T8] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  218.904501][ T8190]  #0: ffff888148d39888 (&bdev->bd_holder_lock){+.+.}-{3:3}, at: blkdev_common_ioctl+0x838/0x2580
[  218.924219][ T8190] 
[  218.924219][ T8190] stack backtrace:
[  218.930144][ T8190] CPU: 1 PID: 8190 Comm: syz.5.665 Not tainted syzkaller #0
[  218.937495][ T8190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  218.947603][ T8190] Call Trace:
[  218.950920][ T8190]  <TASK>
[  218.951330][    T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  218.953880][ T8190]  dump_stack_lvl+0x18c/0x250
[  218.966625][ T8190]  ? load_image+0x420/0x420
[  218.971173][ T8190]  ? show_regs_print_info+0x20/0x20
[  218.976427][ T8190]  ? print_circular_bug+0x12b/0x1a0
[  218.981694][ T8190]  check_noncircular+0x2fc/0x400
[  218.986701][ T8190]  ? print_deadlock_bug+0x5d0/0x5d0
[  218.991953][ T8190]  ? lockdep_lock+0xf5/0x230
[  218.996624][ T8190]  ? _find_first_zero_bit+0xd6/0x100
[  219.001991][ T8190]  __lock_acquire+0x37ef/0x7d80
[  219.006935][ T8190]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  219.010218][    T8] usb 4-1: config 0 descriptor??
[  219.013055][ T8190]  ? arch_stack_walk+0x160/0x190
[  219.023002][ T8190]  ? verify_lock_unused+0x140/0x140
[  219.028256][ T8190]  ? verify_lock_unused+0x140/0x140
[  219.033597][ T8190]  ? stack_trace_save+0xaa/0x100
[  219.038618][ T8190]  ? stack_trace_snprint+0xf0/0xf0
[  219.043790][ T8190]  ? __stack_depot_save+0x1f/0x660
[  219.048950][ T8190]  ? do_syscall_64+0x55/0xb0
[  219.053603][ T8190]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  219.059727][ T8190]  lock_acquire+0x19e/0x420
[  219.064285][ T8190]  ? super_lock+0x189/0x390
[  219.068850][ T8190]  ? __might_sleep+0xe0/0xe0
[  219.073491][ T8190]  ? read_lock_is_recursive+0x20/0x20
[  219.078913][ T8190]  ? __mutex_trylock_common+0x160/0x270
[  219.084522][ T8190]  ? trace_raw_output_contention_end+0xd0/0xd0
[  219.086920][    T8] hub 4-1:0.0: USB hub found
[  219.090711][ T8190]  down_read+0x46/0x2e0
[  219.099530][ T8190]  ? super_lock+0x189/0x390
[  219.104085][ T8190]  super_lock+0x189/0x390
[  219.108471][ T8190]  ? end_current_label_crit_section+0x170/0x170
[  219.114804][ T8190]  ? user_get_super+0x180/0x180
[  219.119705][ T8190]  ? mutex_lock_nested+0x20/0x20
[  219.124708][ T8190]  fs_bdev_sync+0xa4/0x170
[  219.129170][ T8190]  ? fs_bdev_mark_dead+0x1f0/0x1f0
[  219.134336][ T8190]  blkdev_common_ioctl+0x8a9/0x2580
[  219.139595][ T8190]  ? tomoyo_path_number_perm+0x56b/0x5e0
[  219.145300][ T8190]  ? blkdev_bszset+0x1f0/0x1f0
[  219.150158][ T8190]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  219.155707][ T8190]  blkdev_ioctl+0x512/0x730
[  219.160280][ T8190]  ? blkdev_compat_ptr_ioctl+0xd0/0xd0
[  219.165803][ T8190]  ? bpf_lsm_file_ioctl+0x9/0x10
[  219.170797][ T8190]  ? security_file_ioctl+0x80/0xa0
[  219.175976][ T8190]  ? blkdev_compat_ptr_ioctl+0xd0/0xd0
[  219.181496][ T8190]  __se_sys_ioctl+0xfd/0x170
[  219.186153][ T8190]  do_syscall_64+0x55/0xb0
[  219.190623][ T8190]  ? clear_bhb_loop+0x40/0x90
[  219.195354][ T8190]  ? clear_bhb_loop+0x40/0x90
[  219.200086][ T8190]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  219.206063][ T8190] RIP: 0033:0x7fd88f19e159
[  219.210528][ T8190] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  219.230190][ T8190] RSP: 002b:00007fd88ffed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  219.238664][ T8190] RAX: ffffffffffffffda RBX: 00007fd88f425fa0 RCX: 00007fd88f19e159
[  219.244219][ T7780] udevd[7780]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  219.246666][ T8190] RDX: 0000000000000000 RSI: 0000000000001261 RDI: 0000000000000004
[  219.246684][ T8190] RBP: 00007fd88f23503b R08: 0000000000000000 R09: 0000000000000000
[  219.246697][ T8190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  219.246710][ T8190] R13: 00007fd88f426038 R14: 00007fd88f425fa0 R15: 00007ffcd3d3f5f8
[  219.246734][ T8190]  </TASK>
[  219.299415][   T55] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  219.345059][    T8] hub 4-1:0.0: 1 port detected
[  219.498820][   T55] usb 2-1: config index 0 descriptor too short (expected 39, got 27)
[  219.507603][   T55] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  219.518191][   T55] usb 2-1: config 0 interface 0 has no altsetting 0
[  219.529442][   T55] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  219.541727][   T55] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  219.550825][   T55] usb 2-1: Product: syz
[  219.557831][   T55] usb 2-1: Manufacturer: syz
[  219.562811][   T55] usb 2-1: SerialNumber: syz
[  219.571442][   T55] usb 2-1: config 0 descriptor??
[  219.580337][   T55] hub 2-1:0.0: bad descriptor, ignoring hub
[  219.589187][   T55] hub: probe of 2-1:0.0 failed with error -5
[  219.600434][   T55] usb 2-1: selecting invalid altsetting 0
[  219.935272][    T8] usb 2-1: USB disconnect, device number 12
[  219.975139][ T5791] Bluetooth: hci1: command 0x0406 tx timeout
[  219.981252][ T5791] Bluetooth: hci2: command 0x0406 tx timeout
[  220.057261][   T55] hub 4-1:0.0: activate --> -90
[  220.263525][    T8] usb 4-1: USB disconnect, device number 11
[  220.270737][   T55] hub 4-1:0.0: hub_ext_port_status failed (err = -71)