last executing test programs:

7m17.13668248s ago: executing program 3 (id=60):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x44, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x20044000}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

7m17.060130722s ago: executing program 3 (id=61):
r0 = socket(0xa, 0x3, 0x3a)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000200)={'fscrypt:', @auto=[0x61, 0x35, 0x62, 0x64, 0x39, 0x63, 0x65, 0x34, 0x64, 0x62, 0x35, 0x37, 0x64, 0x65, 0x39, 0x65]}, &(0x7f0000000300)={0x0, "470f70bd989b74fc1963471df7d1ba26479918a5138a6a93e2abce7f2f9cdb7931450c6679c369b428e4403b24f03148bdf1f9558d12deadab63b858c64b24d9", 0x8029}, 0x48, 0xfffffffffffffffc)
openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
read$FUSE(r1, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'geneve0\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="00f1ff0f0900000000", @ANYRES32=0x0, @ANYBLOB="03000000000000003000128009000100766c616e00000000200002800600010002000000100003800c0042000d000000060000000400048008000500", @ANYRES32=r4, @ANYBLOB], 0x58}}, 0x0)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0)
mount$9p_virtio(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0)
openat$dir(0xffffffffffffff9c, 0x0, 0x175a978679bbbe1d, 0x80a0a1240160183d)
open$dir(0x0, 0x40000, 0x4)
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000680)=@mmap={0x8, 0xb, 0x4, 0x4, 0x8000, {}, {0x5, 0x0, 0xc, 0x2, 0xf1, 0x7, "8f22a717"}, 0x5, 0x1, {}, 0x1})
syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000f80)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='mode=00000000000000000000202,umask=00000000000000000000002,dmode=00000000000000000100002,gid=forget,longad,shortad,novrs,iocharset=cp437,uid=forget,umask=00000000000000000000006,dmode=00000000000000000000010,gid=', @ANYRESDEC=0x0, @ANYRES16], 0x1, 0xc68, &(0x7f0000000fc0)="$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")
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x20020c0, 0x0, 0x1, 0x0, &(0x7f0000001a00))
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x50)
setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff})
truncate(&(0x7f0000000340)='./file1\x00', 0x20fffbfffc)

7m13.313909509s ago: executing program 3 (id=70):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={r0, &(0x7f0000000000)='FZ', 0x0}, 0x20)

7m13.048367595s ago: executing program 3 (id=72):
r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000002040)={0x1c, &(0x7f0000000280)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f0000000180)={0x40, 0x17, 0x1, 'i'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000940)=ANY=[], 0x0, 0x0})

7m9.405934939s ago: executing program 3 (id=81):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000))
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r1)
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0xd49920d352514f42}, 0x4000000)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000580)={'syztnl1\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0x1, 0x9, 0x42, @private0, @local, 0x7, 0x8000, 0x7, 0x80000000}})
r2 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r2, 0x0, 0x0)
listen(r2, 0x28)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'tunl0\x00', 0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newnexthop={0x28, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_OIF={0x8, 0x5, 0x1}]}, 0x38}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newnexthop={0x20, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, 0x1}]}, 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newnexthop={0x50, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x3}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_GROUP={0x14, 0x2, [{0x1, 0x1}, {0x2, 0x1}]}, @NHA_RES_GROUP={0x14, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xe0b}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x64}]}]}, 0x50}}, 0x0)

7m8.823931563s ago: executing program 3 (id=82):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000008000000070000000300000001"], 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r0}, 0x38)

6m53.389824449s ago: executing program 32 (id=82):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000008000000070000000300000001"], 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r0}, 0x38)

12.643201206s ago: executing program 2 (id=1230):
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8410)
ioctl$NILFS_IOCTL_CHANGE_CPMODE(0xffffffffffffffff, 0x40106e80, 0x0)
r0 = open(&(0x7f00000001c0)='./file0\x00', 0x800, 0x20)
readahead(r0, 0x0, 0x0)
writev(r0, &(0x7f00000005c0)=[{&(0x7f00000002c0)="e7e4080c2637cb124e93e972854bf29b9ee79875e927b08bdf8f1ec2d84008715e51e198052398fc0d817dc7b758f192a280eba4606efc6cf5a104bb3ac579de8d2285b3cf3df253eb81fa80b19e2aeea4241c1462dfc5a49bfaaf43608fc223fc4a01d5ab7bc478278e87b80f66c8c0d710645f28bf9fd0c4a11841c1ec7fadcd", 0x81}, {&(0x7f0000000380)="0b68d91722a5e99f7c6a7f609faafc5981348fa9e8a97ff54186c398133923", 0x1f}, {&(0x7f00000003c0)="88edb8ff632cbc53868e3cbec168cf57c8cc66a90b9fb172b96e180068c36e662337938dd6a155c8470ea1b6aee49e7caf205b6fdba1048a1cd3911b2339d72a04b06dd8ae3a16aa1c1264849cf8fa2502e1d550b9", 0x55}, {&(0x7f0000000480)="139cc252a9bd4df1fc81b7a2ee8bbb9f2d61f5090032afa28bd5b54f387156fddb25dba927a807be49e92ead3e85fe8276ca6cf806f7349b0a8e0e8fce79b52898f0a2567078793526416f47a215e340ad17cfd91a34195b38090b5384b57dfd1c5bee5bc90315e70c8b8ec50588719528161557bb2f2c9297203692c20870bd3fdb68dad7ee6fe7ff6552a437a974ee53d3663aa3f1b9279fc3141a3f56de411067fc86103e5b043ee682218b6e1f461081fbfe089bf223beadf61a23bb7c326cf3e99844c401ca9a2f103bdc02142d0aa7623752fa511f4bc5e65123aa46165134914ab2fc2e63bdc99ad11a53f100ca7329c757", 0xf5}, {&(0x7f0000000580)}], 0x5)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_mount_image$btrfs(&(0x7f0000000140), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000240)={[{@noenospc_debug}, {@compress}, {@discard}]}, 0xfc, 0x559e, &(0x7f000000ac40)="$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")
write$nci(0xffffffffffffffff, 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getpeername$unix(r2, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x59}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
open(&(0x7f0000000440)='./file1\x00', 0x4242, 0x1df2a23c5997faa6)

12.06038763s ago: executing program 1 (id=1233):
openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102)
bpf$LINK_DETACH(0x22, 0x0, 0x0)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x108)
sendfile(r2, r2, 0x0, 0xfff2)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
write(r0, &(0x7f0000000600)='sessname=s+ device_path=/dev/ram0 path=ip:127.0.0.1', 0x33)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)

11.333838606s ago: executing program 2 (id=1234):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r2=>0x0})
syz_usb_connect$uac3(0x1, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x407}}, {0x5, &(0x7f0000000640)=@string={0x5, 0x3, "da7995"}}, {0x59, &(0x7f00000006c0)=@string={0x59, 0x3, "f985de4e6c570918c0431310a5130c3b0bc8e409d3f48586e4b57936d941ec6dc6425fadf2d3c4423ea3c234023767f2c059c1736f99b1fedec54b4560a6514d093204ed9140f4d50e081e743f69b437f210a3b9cd12dd"}}]})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

11.268316568s ago: executing program 1 (id=1235):
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000280)='./bus\x00', 0x21081e, &(0x7f0000000340)={[{@test_dummy_encryption}, {@grpquota}, {@data_journal}, {@barrier}, {@nodioread_nolock}]}, 0x1, 0x516, &(0x7f00000005c0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x3)
io_setup(0x4, &(0x7f0000000600)=<r4=>0x0)
fcntl$getownex(r3, 0x10, 0x0)
io_submit(r4, 0x1, &(0x7f0000000080)=[0x0])
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0)
writev(r5, &(0x7f0000001b40)=[{&(0x7f0000000140)='?', 0x1}, {0x0}], 0x2)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x0, 0x3c}, 0x28)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0)

9.696689245s ago: executing program 1 (id=1236):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x3a)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c)
sendto$inet6(r3, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0)

8.526941232s ago: executing program 2 (id=1239):
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8410)
ioctl$NILFS_IOCTL_CHANGE_CPMODE(0xffffffffffffffff, 0x40106e80, 0x0)
r0 = open(&(0x7f00000001c0)='./file0\x00', 0x800, 0x20)
readahead(r0, 0x0, 0x0)
writev(r0, &(0x7f00000005c0)=[{&(0x7f00000002c0)="e7e4080c2637cb124e93e972854bf29b9ee79875e927b08bdf8f1ec2d84008715e51e198052398fc0d817dc7b758f192a280eba4606efc6cf5a104bb3ac579de8d2285b3cf3df253eb81fa80b19e2aeea4241c1462dfc5a49bfaaf43608fc223fc4a01d5ab7bc478278e87b80f66c8c0d710645f28bf9fd0c4a11841c1ec7fadcd", 0x81}, {&(0x7f0000000380)="0b68d91722a5e99f7c6a7f609faafc5981348fa9e8a97ff54186c398133923", 0x1f}, {&(0x7f00000003c0)="88edb8ff632cbc53868e3cbec168cf57c8cc66a90b9fb172b96e180068c36e662337938dd6a155c8470ea1b6aee49e7caf205b6fdba1048a1cd3911b2339d72a04b06dd8ae3a16aa1c1264849cf8fa2502e1d550b9", 0x55}, {&(0x7f0000000480)="139cc252a9bd4df1fc81b7a2ee8bbb9f2d61f5090032afa28bd5b54f387156fddb25dba927a807be49e92ead3e85fe8276ca6cf806f7349b0a8e0e8fce79b52898f0a2567078793526416f47a215e340ad17cfd91a34195b38090b5384b57dfd1c5bee5bc90315e70c8b8ec50588719528161557bb2f2c9297203692c20870bd3fdb68dad7ee6fe7ff6552a437a974ee53d3663aa3f1b9279fc3141a3f56de411067fc86103e5b043ee682218b6e1f461081fbfe089bf223beadf61a23bb7c326cf3e99844c401ca9a2f103bdc02142d0aa7623752fa511f4bc5e65123aa46165134914ab2fc2e63bdc99ad11a53f100ca7329c757", 0xf5}, {&(0x7f0000000580)}], 0x5)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0)
syz_mount_image$btrfs(&(0x7f0000000140), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000240)={[{@noenospc_debug}, {@compress}, {@discard}]}, 0xfc, 0x559e, &(0x7f000000ac40)="$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")
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x59}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
r4 = open(&(0x7f0000000440)='./file1\x00', 0x4242, 0x1df2a23c5997faa6)
sendfile(r4, r4, &(0x7f0000000080), 0x7f03)

8.355385856s ago: executing program 0 (id=1240):
syz_open_dev$video(&(0x7f0000000100), 0x9, 0x1e3a00)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a09007, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x2)

7.33108235s ago: executing program 0 (id=1241):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6a72c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x4c, 0x12, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0xfd, {0x4001}, 0x0, 0xfffffffe}}, 0x4c}}, 0x0)

5.894879163s ago: executing program 1 (id=1242):
connect$tipc(0xffffffffffffffff, &(0x7f0000000040)=@name={0x1e, 0x2, 0x3, {{0x40, 0x2}, 0x2}}, 0x10)
recvfrom$unix(0xffffffffffffffff, &(0x7f00000000c0)=""/41, 0x29, 0x10003, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
syz_open_dev$vim2m(0x0, 0x1, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000280)=0x5)
getpgrp(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
lseek(0xffffffffffffffff, 0x1fd, 0x3)
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCSETS2(r4, 0x402c542b, &(0x7f0000000080)={0xfffffe01, 0x4, 0xeffffe01, 0x7fff, 0xff, "fe67e23fb5533a39eb5c0b319b7d34441000", 0x6, 0x10})
ioctl$TIOCL_PASTESEL(r4, 0x541c, &(0x7f0000000000))

5.888583923s ago: executing program 4 (id=1243):
openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102)
bpf$LINK_DETACH(0x22, 0x0, 0x0)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x108)
sendfile(r2, r2, 0x0, 0xfff2)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
write(r0, &(0x7f0000000600)='sessname=s+ device_path=/dev/ram0 path=ip:127.0.0.1', 0x33)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)

4.675582782s ago: executing program 1 (id=1244):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x11c, 0x4)
sendmmsg$inet(r0, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000e80)="f77d2b5dd5f7d74f0748cf3d2cf2fbd644566aea48c78d151d61ed3a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb104600190d8bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0af490958ba3211eb99dfc8dbbc0f9c941aaa1495893d0b000000000000005afd7476413f322c8f79de769deb0200000000000000e3ed6641e50fe595e1e0dbe84ed0f7", 0xc5}], 0x1}}], 0x1, 0x240068c0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x221, 0x10008095, 0x0, 0x0)

4.565772474s ago: executing program 4 (id=1245):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/sys/kernel/printk_devkmsg\x00', 0x2, 0x0)
write(r0, &(0x7f0000000680)="6f66620ba58477", 0x7)

4.32435361s ago: executing program 4 (id=1246):
ioctl$SNDCTL_SEQ_CTRLRATE(0xffffffffffffffff, 0xc0045103, &(0x7f0000000040)=0x4)
connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x7fff}, 0x1c)
bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x6, 0x6, @remote}, 0x14)
sendmmsg$sock(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0x1000000}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@txtime={{0x18, 0x1, 0x3d, 0x4c}}], 0x6}}], 0x4000114, 0x40500f0)
mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240), 0x4000095, 0x0)
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x45)

4.263972591s ago: executing program 2 (id=1247):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r2=>0x0})
syz_usb_connect$uac3(0x1, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x407}}, {0x5, &(0x7f0000000640)=@string={0x5, 0x3, "da7995"}}, {0x5f, &(0x7f00000006c0)=@string={0x5f, 0x3, "f985de4e6c570918c0431310a5130c3b0bc8e409d3f48586e4b57936d941ec6dc6425fadf2d3c4423ea3c234023767f2c059c1736f99b1fedec54b4560a6514d093204ed9140f4d50e081e743f69b437f210a3b9cd12ddc674d1acf339"}}]})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

4.081806265s ago: executing program 4 (id=1248):
r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x2}, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0, &(0x7f00000002c0)=<r3=>0x0)
r4 = syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0xc, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x3, 0x104}}}, &(0x7f0000000300)=<r5=>0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000000)='mysys\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='mysys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='mysys/bus/usb/devices/usb1/bNumInterfaces\x00', 0x0, 0x0)
syz_open_dev$ublk_chdev(0x0, r4, 0x2)
syz_ublk_setup_queues(r6, r5, 0x0, 0x0, 0x4, 0x0, 0x0)

3.752170863s ago: executing program 4 (id=1249):
syz_open_dev$video(&(0x7f0000000100), 0x9, 0x1e3a00)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a09007, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x2)

3.101453308s ago: executing program 0 (id=1250):
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_route(0x10, 0x3, 0x0)
open$dir(0x0, 0x40000, 0x4)
r1 = syz_open_dev$swradio(0x0, 0x1, 0x2)
ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, 0x0)
syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000f80)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='mode=00000000000000000000202,umask=00000000000000000000002,dmode=00000000000000000100002,gid=forget,longad,shortad,novrs,iocharset=cp437,uid=forget,umask=00000000000000000000006,dmode=00000000000000000000010,gid=', @ANYRESDEC=0x0, @ANYRES16], 0x1, 0xc68, &(0x7f0000000fc0)="$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")
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff})
truncate(&(0x7f0000000340)='./file1\x00', 0x20fffbfffc)

2.317165316s ago: executing program 2 (id=1251):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
add_key$keyring(0x0, 0x0, 0x0, 0xfeffff, 0xfffffffffffffffd)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)

2.209311679s ago: executing program 4 (id=1252):
r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000002040)={0x1c, &(0x7f0000000280)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f0000000180)={0x40, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

932.357569ms ago: executing program 2 (id=1253):
openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
bpf$LINK_DETACH(0x22, 0x0, 0x0)
writev(r1, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x108)
sendfile(r2, r2, 0x0, 0xfff2)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
write(r0, &(0x7f0000000600)='sessname=s+ device_path=/dev/ram0 path=ip:127.0.0.1', 0x33)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)

445.01275ms ago: executing program 0 (id=1254):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/sys/kernel/printk_devkmsg\x00', 0x2, 0x0)
write(r0, &(0x7f0000000680)="6f66620ba58477", 0x7)

213.939976ms ago: executing program 1 (id=1255):
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8410)
ioctl$NILFS_IOCTL_CHANGE_CPMODE(0xffffffffffffffff, 0x40106e80, 0x0)
r0 = open(&(0x7f00000001c0)='./file0\x00', 0x800, 0x20)
readahead(r0, 0x0, 0x0)
writev(r0, &(0x7f00000005c0)=[{&(0x7f00000002c0)="e7e4080c2637cb124e93e972854bf29b9ee79875e927b08bdf8f1ec2d84008715e51e198052398fc0d817dc7b758f192a280eba4606efc6cf5a104bb3ac579de8d2285b3cf3df253eb81fa80b19e2aeea4241c1462dfc5a49bfaaf43608fc223fc4a01d5ab7bc478278e87b80f66c8c0d710645f28bf9fd0c4a11841c1ec7fadcd", 0x81}, {&(0x7f0000000380)="0b68d91722a5e99f7c6a7f609faafc5981348fa9e8a97ff54186c398133923", 0x1f}, {&(0x7f00000003c0)="88edb8ff632cbc53868e3cbec168cf57c8cc66a90b9fb172b96e180068c36e662337938dd6a155c8470ea1b6aee49e7caf205b6fdba1048a1cd3911b2339d72a04b06dd8ae3a16aa1c1264849cf8fa2502e1d550b9", 0x55}, {&(0x7f0000000480)="139cc252a9bd4df1fc81b7a2ee8bbb9f2d61f5090032afa28bd5b54f387156fddb25dba927a807be49e92ead3e85fe8276ca6cf806f7349b0a8e0e8fce79b52898f0a2567078793526416f47a215e340ad17cfd91a34195b38090b5384b57dfd1c5bee5bc90315e70c8b8ec50588719528161557bb2f2c9297203692c20870bd3fdb68dad7ee6fe7ff6552a437a974ee53d3663aa3f1b9279fc3141a3f56de411067fc86103e5b043ee682218b6e1f461081fbfe089bf223beadf61a23bb7c326cf3e99844c401ca9a2f103bdc02142d0aa7623752fa511f4bc5e65123aa46165134914ab2fc2e63bdc99ad11a53f100ca7329c757", 0xf5}, {&(0x7f0000000580)}], 0x5)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0)
syz_mount_image$btrfs(&(0x7f0000000140), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000240)={[{@noenospc_debug}, {@compress}, {@discard}]}, 0xfc, 0x559e, &(0x7f000000ac40)="$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")
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x59}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
r4 = open(&(0x7f0000000440)='./file1\x00', 0x4242, 0x1df2a23c5997faa6)
sendfile(r4, r4, &(0x7f0000000080), 0x7f03)

96.290098ms ago: executing program 0 (id=1256):
ioctl$SNDCTL_SEQ_CTRLRATE(0xffffffffffffffff, 0xc0045103, &(0x7f0000000040)=0x4)
connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x7fff}, 0x1c)
bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x6, 0x6, @remote}, 0x14)
sendmmsg$sock(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0x1000000}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@txtime={{0x18, 0x1, 0x3d, 0x4c}}], 0x6}}], 0x4000114, 0x40500f0)
mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240), 0x4000095, 0x0)
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x45)

0s ago: executing program 0 (id=1257):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x5, 0x4445, &(0x7f000000cd00)="$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")
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804071, 0x0, 0x1, 0x0, &(0x7f0000000000))
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
munlockall()
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r3], 0xa)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff)
mount(0x0, 0x0, &(0x7f0000000080)='securityfs\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000100), 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r4 = inotify_init()
inotify_add_watch(r4, &(0x7f0000000000)='.\x00', 0x400017e)
setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0)
removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00')
r5 = io_uring_setup(0x1195, 0x0)
io_uring_enter(r5, 0x2219, 0xcf74, 0x16, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x8000)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
openat(0xffffffffffffff9c, &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2440, 0x0)
syz_open_dev$video(&(0x7f00000001c0), 0x101, 0x1a200)
write$proc_mixer(0xffffffffffffffff, 0x0, 0x33)

kernel console output (not intermixed with test programs):

le+0xc7/0x170
[  280.120315][ T8151]  ? futex_wait_queue+0x27/0x1b0
[  280.125295][ T8151]  ? futex_wait+0x4a7/0x5c0
[  280.129799][ T8151]  ? __pidfd_prepare+0x140/0x140
[  280.134743][ T8151]  kernel_clone+0x24b/0x8a0
[  280.139253][ T8151]  ? create_io_thread+0x190/0x190
[  280.144286][ T8151]  ? do_futex+0x2ff/0x3e0
[  280.148616][ T8151]  __x64_sys_clone+0x1b7/0x230
[  280.153380][ T8151]  ? __ia32_sys_vfork+0x140/0x140
[  280.158414][ T8151]  ? lock_chain_count+0x20/0x20
[  280.163269][ T8151]  ? lockdep_hardirqs_on+0x98/0x150
[  280.168469][ T8151]  do_syscall_64+0x55/0xb0
[  280.172886][ T8151]  ? clear_bhb_loop+0x40/0x90
[  280.177566][ T8151]  ? clear_bhb_loop+0x40/0x90
[  280.182246][ T8151]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  280.188143][ T8151] RIP: 0033:0x7fc50a39e159
[  280.192556][ T8151] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  280.212160][ T8151] RSP: 002b:00007fc50b2affd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[  280.220574][ T8151] RAX: ffffffffffffffda RBX: 00007fc50a625fa0 RCX: 00007fc50a39e159
[  280.228543][ T8151] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  280.236518][ T8151] RBP: 00007fc50a435024 R08: 0000000000000000 R09: 0000000000000000
[  280.244485][ T8151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  280.252454][ T8151] R13: 00007fc50a626038 R14: 00007fc50a625fa0 R15: 00007ffecb5b0098
[  280.260434][ T8151]  </TASK>
[  280.369599][ T8155] loop4: detected capacity change from 0 to 64
[  280.614125][ T8157] FAULT_INJECTION: forcing a failure.
[  280.614125][ T8157] name failslab, interval 1, probability 0, space 0, times 0
[  280.652200][ T8157] CPU: 1 PID: 8157 Comm: syz.2.554 Not tainted syzkaller #0
[  280.659556][ T8157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  280.662811][ T8154] loop1: detected capacity change from 0 to 512
[  280.669612][ T8157] Call Trace:
[  280.669624][ T8157]  <TASK>
[  280.669632][ T8157]  dump_stack_lvl+0x18c/0x250
[  280.669664][ T8157]  ? show_regs_print_info+0x20/0x20
[  280.669687][ T8157]  ? load_image+0x420/0x420
[  280.696459][ T8157]  ? __might_sleep+0xe0/0xe0
[  280.701083][ T8157]  ? __lock_acquire+0x7d80/0x7d80
[  280.706138][ T8157]  should_fail_ex+0x394/0x4c0
[  280.710830][ T8157]  should_failslab+0x9/0x20
[  280.715346][ T8157]  slab_pre_alloc_hook+0x59/0x300
[  280.720382][ T8157]  kmem_cache_alloc+0x5a/0x2c0
[  280.725144][ T8157]  ? security_inode_alloc+0x34/0x110
[  280.730433][ T8157]  security_inode_alloc+0x34/0x110
[  280.735549][ T8157]  inode_init_always+0x914/0xc90
[  280.740488][ T8157]  new_inode_pseudo+0x95/0x1d0
[  280.745255][ T8157]  __sock_create+0x12d/0x940
[  280.749844][ T8157]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  280.755831][ T8157]  __sys_socket+0xd7/0x1b0
[  280.760248][ T8157]  __x64_sys_socket+0x7a/0x90
[  280.764934][ T8157]  do_syscall_64+0x55/0xb0
[  280.769352][ T8157]  ? clear_bhb_loop+0x40/0x90
[  280.774028][ T8157]  ? clear_bhb_loop+0x40/0x90
[  280.778704][ T8157]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  280.784596][ T8157] RIP: 0033:0x7fd0bf59e159
[  280.789006][ T8157] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  280.808624][ T8157] RSP: 002b:00007fd0c0549028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  280.817039][ T8157] RAX: ffffffffffffffda RBX: 00007fd0bf825fa0 RCX: 00007fd0bf59e159
[  280.825008][ T8157] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010
[  280.832976][ T8157] RBP: 00007fd0bf635024 R08: 0000000000000000 R09: 0000000000000000
[  280.840943][ T8157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  280.848912][ T8157] R13: 00007fd0bf826038 R14: 00007fd0bf825fa0 R15: 00007ffe475fe858
[  280.856897][ T8157]  </TASK>
[  280.881052][ T8157] socket: no more sockets
[  280.934470][ T8154] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  281.062862][ T8154] EXT4-fs (loop1): 1 orphan inode deleted
[  281.080789][ T8154] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  281.135652][ T8154] ext4 filesystem being mounted at /143/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  281.158343][ T3517] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  281.170841][ T8154] Bluetooth: hci0: invalid length 0, exp 2 for type 12
[  281.181088][ T3517] EXT4-fs error (device loop1): ext4_release_dquot:6989: comm kworker/u4:9: Failed to release dquot type 1
[  281.214826][ T8171] netlink: 12 bytes leftover after parsing attributes in process `syz.2.559'.
[  281.320293][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  281.421421][ T8173] Bluetooth: hci0: unsupported parameter 5135
[  281.443819][ T8173] Bluetooth: hci0: unsupported parameter 8192
[  281.449961][ T8173] Bluetooth: hci0: unsupported parameter 5135
[  281.477979][ T8175] loop1: detected capacity change from 0 to 2048
[  281.485065][ T8173] Bluetooth: hci0: unsupported parameter 8192
[  281.529941][ T8175] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  281.584995][ T8164] loop0: detected capacity change from 0 to 32768
[  281.625449][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  281.677278][ T8164] JBD2: Ignoring recovery information on journal
[  281.827463][ T8181] overlayfs: failed to resolve './bus': -2
[  281.953099][ T8164] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  282.075126][ T8164] (syz.0.557,8164,1):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount
[  282.301677][ T8173] loop2: detected capacity change from 0 to 32768
[  282.337667][ T8173] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 12
[  282.395777][ T8189] FAULT_INJECTION: forcing a failure.
[  282.395777][ T8189] name failslab, interval 1, probability 0, space 0, times 0
[  282.467020][ T8189] CPU: 1 PID: 8189 Comm: syz.4.564 Not tainted syzkaller #0
[  282.474380][ T8189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  282.484461][ T8189] Call Trace:
[  282.487760][ T8189]  <TASK>
[  282.490707][ T8189]  dump_stack_lvl+0x18c/0x250
[  282.495421][ T8189]  ? show_regs_print_info+0x20/0x20
[  282.500643][ T8189]  ? load_image+0x420/0x420
[  282.505170][ T8189]  ? __lock_acquire+0x7d80/0x7d80
[  282.510218][ T8189]  ? kasan_set_track+0x5f/0x70
[  282.515004][ T8189]  ? kasan_save_free_info+0x28/0x40
[  282.520226][ T8189]  ? ____kasan_slab_free+0x126/0x1f0
[  282.525535][ T8189]  ? slab_free_freelist_hook+0x130/0x1a0
[  282.531196][ T8189]  should_fail_ex+0x394/0x4c0
[  282.535904][ T8189]  should_failslab+0x9/0x20
[  282.540439][ T8189]  slab_pre_alloc_hook+0x59/0x300
[  282.545497][ T8189]  ? blk_mq_init_tags+0x75/0x280
[  282.550459][ T8189]  __kmem_cache_alloc_node+0x53/0x250
[  282.555861][ T8189]  ? blk_mq_init_tags+0x75/0x280
[  282.560821][ T8189]  kmalloc_node_trace+0x26/0xe0
[  282.565703][ T8189]  blk_mq_init_tags+0x75/0x280
[  282.570490][ T8189]  blk_mq_alloc_map_and_rqs+0xc5/0x910
[  282.575973][ T8189]  ? kasan_quarantine_put+0xd8/0x220
[  282.581289][ T8189]  ? lockdep_hardirqs_on+0x98/0x150
[  282.586526][ T8189]  blk_mq_alloc_set_map_and_rqs+0x1a0/0x800
[  282.592463][ T8189]  blk_mq_alloc_tag_set+0x868/0x1020
[  282.597785][ T8189]  loop_add+0x2eb/0x990
[  282.601968][ T8189]  loop_control_ioctl+0x128/0x590
[  282.607020][ T8189]  ? loop_set_hw_queue_depth+0x110/0x110
[  282.612682][ T8189]  ? bpf_lsm_file_ioctl+0x9/0x10
[  282.617639][ T8189]  ? security_file_ioctl+0x80/0xa0
[  282.622774][ T8189]  ? loop_set_hw_queue_depth+0x110/0x110
[  282.628433][ T8189]  __se_sys_ioctl+0xfd/0x170
[  282.633055][ T8189]  do_syscall_64+0x55/0xb0
[  282.637495][ T8189]  ? clear_bhb_loop+0x40/0x90
[  282.642198][ T8189]  ? clear_bhb_loop+0x40/0x90
[  282.646899][ T8189]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  282.652819][ T8189] RIP: 0033:0x7f892b79e159
[  282.657255][ T8189] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  282.676891][ T8189] RSP: 002b:00007f892c618028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  282.685340][ T8189] RAX: ffffffffffffffda RBX: 00007f892ba25fa0 RCX: 00007f892b79e159
[  282.693345][ T8189] RDX: 0000000007000000 RSI: 0000000000004c80 RDI: 0000000000000004
[  282.701346][ T8189] RBP: 00007f892b835024 R08: 0000000000000000 R09: 0000000000000000
[  282.709341][ T8189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  282.717341][ T8189] R13: 00007f892ba26038 R14: 00007f892ba25fa0 R15: 00007ffcfcc1a1e8
[  282.725353][ T8189]  </TASK>
[  282.764128][ T5770] ocfs2: Unmounting device (7,0) on (node local)
[  282.887160][ T8191] FAULT_INJECTION: forcing a failure.
[  282.887160][ T8191] name fail_futex, interval 1, probability 0, space 0, times 0
[  282.914959][ T8189] blk-mq: reduced tag depth (128 -> 64)
[  282.918268][ T5775] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 12
[  282.973818][ T8191] CPU: 1 PID: 8191 Comm: syz.2.566 Not tainted syzkaller #0
[  282.981166][ T8191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  282.991250][ T8191] Call Trace:
[  282.994540][ T8191]  <TASK>
[  282.997483][ T8191]  dump_stack_lvl+0x18c/0x250
[  283.002198][ T8191]  ? show_regs_print_info+0x20/0x20
[  283.007415][ T8191]  ? load_image+0x420/0x420
[  283.011935][ T8191]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  283.017950][ T8191]  ? lock_chain_count+0x20/0x20
[  283.022828][ T8191]  should_fail_ex+0x394/0x4c0
[  283.027535][ T8191]  get_futex_key+0x136/0x1030
[  283.032232][ T8191]  ? fcntl_setlk+0xc05/0x1070
[  283.036929][ T8191]  ? futex_setup_timer+0xc0/0xc0
[  283.041893][ T8191]  futex_wake+0x127/0x4f0
[  283.046247][ T8191]  ? futex_wake_mark+0x150/0x150
[  283.051214][ T8191]  ? vfs_lock_file+0x110/0x110
[  283.056004][ T8191]  ? __might_fault+0xaa/0x120
[  283.060702][ T8191]  do_futex+0x35d/0x3e0
[  283.064885][ T8191]  ? __ia32_sys_get_robust_list+0x110/0x110
[  283.070809][ T8191]  __se_sys_futex+0x3a9/0x440
[  283.075512][ T8191]  ? __x64_sys_futex+0xf0/0xf0
[  283.080300][ T8191]  ? __x64_sys_futex+0x21/0xf0
[  283.085084][ T8191]  do_syscall_64+0x55/0xb0
[  283.089517][ T8191]  ? clear_bhb_loop+0x40/0x90
[  283.094211][ T8191]  ? clear_bhb_loop+0x40/0x90
[  283.098909][ T8191]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  283.104825][ T8191] RIP: 0033:0x7fd0bf59e159
[  283.109256][ T8191] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  283.128885][ T8191] RSP: 002b:00007fd0c05490e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  283.137328][ T8191] RAX: ffffffffffffffda RBX: 00007fd0bf825fa8 RCX: 00007fd0bf59e159
[  283.145321][ T8191] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd0bf825fac
[  283.153314][ T8191] RBP: 00007fd0bf825fa0 R08: 0000000000745ae6 R09: 0000000000000000
[  283.161304][ T8191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  283.169290][ T8191] R13: 00007fd0bf826038 R14: 00007ffe475fe770 R15: 00007ffe475fe858
[  283.177297][ T8191]  </TASK>
[  283.443546][ T8196] FAULT_INJECTION: forcing a failure.
[  283.443546][ T8196] name failslab, interval 1, probability 0, space 0, times 0
[  283.476994][ T8196] CPU: 0 PID: 8196 Comm: syz.1.567 Not tainted syzkaller #0
[  283.484345][ T8196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  283.494414][ T8196] Call Trace:
[  283.497703][ T8196]  <TASK>
[  283.500659][ T8196]  dump_stack_lvl+0x18c/0x250
[  283.505358][ T8196]  ? show_regs_print_info+0x20/0x20
[  283.510568][ T8196]  ? load_image+0x420/0x420
[  283.515080][ T8196]  ? __might_sleep+0xe0/0xe0
[  283.519682][ T8196]  ? __lock_acquire+0x7d80/0x7d80
[  283.524722][ T8196]  should_fail_ex+0x394/0x4c0
[  283.529415][ T8196]  should_failslab+0x9/0x20
[  283.533935][ T8196]  slab_pre_alloc_hook+0x59/0x300
[  283.538977][ T8196]  kmem_cache_alloc+0x5a/0x2c0
[  283.543751][ T8196]  ? security_inode_alloc+0x34/0x110
[  283.549065][ T8196]  security_inode_alloc+0x34/0x110
[  283.554200][ T8196]  inode_init_always+0x914/0xc90
[  283.559172][ T8196]  new_inode_pseudo+0x95/0x1d0
[  283.563968][ T8196]  __sock_create+0x12d/0x940
[  283.568576][ T8196]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  283.574585][ T8196]  __sys_socket+0xd7/0x1b0
[  283.579020][ T8196]  __x64_sys_socket+0x7a/0x90
[  283.583701][ T8196]  do_syscall_64+0x55/0xb0
[  283.588124][ T8196]  ? clear_bhb_loop+0x40/0x90
[  283.592828][ T8196]  ? clear_bhb_loop+0x40/0x90
[  283.597509][ T8196]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  283.603402][ T8196] RIP: 0033:0x7fb9a399e159
[  283.607818][ T8196] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  283.627450][ T8196] RSP: 002b:00007fb9a48d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  283.635894][ T8196] RAX: ffffffffffffffda RBX: 00007fb9a3c25fa0 RCX: 00007fb9a399e159
[  283.643871][ T8196] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010
[  283.651844][ T8196] RBP: 00007fb9a3a35024 R08: 0000000000000000 R09: 0000000000000000
[  283.659826][ T8196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  283.667800][ T8196] R13: 00007fb9a3c26038 R14: 00007fb9a3c25fa0 R15: 00007ffdcfb0e028
[  283.675786][ T8196]  </TASK>
[  283.689824][ T8202] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0)
[  283.701577][ T8202] rtrs_client L2075: <s+>: Failed to resolve address, err: -19
[  283.709353][ T8202] rtrs_client L2618: <s+>: init_conns() failed: err=-19 path=<invalid address family>@ip:127.0.0.1 [:0]
[  283.752021][ T8196] socket: no more sockets
[  284.154036][ T8209] overlayfs: failed to resolve './bus': -2
[  285.034266][ T8211] netlink: 8 bytes leftover after parsing attributes in process `syz.0.565'.
[  285.501470][ T8217] Bluetooth: hci0: unsupported parameter 5135
[  285.526381][ T8217] Bluetooth: hci0: unsupported parameter 8192
[  285.535367][ T8217] Bluetooth: hci0: unsupported parameter 5135
[  285.553755][ T8217] Bluetooth: hci0: unsupported parameter 8192
[  285.577372][ T8219] loop0: detected capacity change from 0 to 1024
[  285.613861][ T8219] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  285.643095][ T8219] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  285.820212][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  286.842415][ T8217] loop1: detected capacity change from 0 to 32768
[  286.894185][ T8217] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 12
[  287.002245][ T8235] netlink: 12 bytes leftover after parsing attributes in process `syz.0.579'.
[  287.184821][ T8233] loop4: detected capacity change from 0 to 32768
[  287.198586][ T8233] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 12
[  287.247712][ T8237] FAULT_INJECTION: forcing a failure.
[  287.247712][ T8237] name failslab, interval 1, probability 0, space 0, times 0
[  287.273800][ T8237] CPU: 0 PID: 8237 Comm: syz.0.582 Not tainted syzkaller #0
[  287.281160][ T8237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  287.291240][ T8237] Call Trace:
[  287.294523][ T8237]  <TASK>
[  287.297452][ T8237]  dump_stack_lvl+0x18c/0x250
[  287.302139][ T8237]  ? show_regs_print_info+0x20/0x20
[  287.307340][ T8237]  ? load_image+0x420/0x420
[  287.311848][ T8237]  ? __lock_acquire+0x7d80/0x7d80
[  287.316931][ T8237]  should_fail_ex+0x394/0x4c0
[  287.321612][ T8237]  should_failslab+0x9/0x20
[  287.326120][ T8237]  slab_pre_alloc_hook+0x59/0x300
[  287.331150][ T8237]  kmem_cache_alloc_lru+0x4d/0x2b0
[  287.336266][ T8237]  ? sock_alloc_inode+0x28/0xc0
[  287.341124][ T8237]  sock_alloc_inode+0x28/0xc0
[  287.345799][ T8237]  ? sockfs_init_fs_context+0xb0/0xb0
[  287.351179][ T8237]  new_inode_pseudo+0x63/0x1d0
[  287.355951][ T8237]  __sock_create+0x12d/0x940
[  287.360552][ T8237]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  287.366538][ T8237]  __sys_socket+0xd7/0x1b0
[  287.370953][ T8237]  __x64_sys_socket+0x7a/0x90
[  287.375629][ T8237]  do_syscall_64+0x55/0xb0
[  287.380041][ T8237]  ? clear_bhb_loop+0x40/0x90
[  287.384724][ T8237]  ? clear_bhb_loop+0x40/0x90
[  287.389401][ T8237]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  287.395302][ T8237] RIP: 0033:0x7fc50a39e159
[  287.399715][ T8237] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  287.419332][ T8237] RSP: 002b:00007fc50b2b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  287.427751][ T8237] RAX: ffffffffffffffda RBX: 00007fc50a625fa0 RCX: 00007fc50a39e159
[  287.435721][ T8237] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010
[  287.443695][ T8237] RBP: 00007fc50a435024 R08: 0000000000000000 R09: 0000000000000000
[  287.451663][ T8237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  287.459641][ T8237] R13: 00007fc50a626038 R14: 00007fc50a625fa0 R15: 00007ffecb5b0098
[  287.467629][ T8237]  </TASK>
[  287.479110][ T8237] socket: no more sockets
[  287.492487][ T5775] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 12
[  287.602629][ T5788] I/O error, dev loop4, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  287.690411][ T8242] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0)
[  287.806791][ T8241] overlayfs: failed to resolve './bus': -2
[  288.586936][ T8242] rtrs_client L2075: <s+>: Failed to resolve address, err: -19
[  288.603530][ T8242] rtrs_client L2618: <s+>: init_conns() failed: err=-19 path=<invalid address family>@ip:127.0.0.1 [:0]
[  290.129814][ T8272] FAULT_INJECTION: forcing a failure.
[  290.129814][ T8272] name failslab, interval 1, probability 0, space 0, times 0
[  290.223125][ T8271] overlayfs: failed to resolve './bus': -2
[  290.538590][ T8275] loop4: detected capacity change from 0 to 32768
[  290.555033][ T8272] CPU: 0 PID: 8272 Comm: syz.1.591 Not tainted syzkaller #0
[  290.562393][ T8272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  290.572477][ T8272] Call Trace:
[  290.575784][ T8272]  <TASK>
[  290.578732][ T8272]  dump_stack_lvl+0x18c/0x250
[  290.583448][ T8272]  ? show_regs_print_info+0x20/0x20
[  290.588682][ T8272]  ? load_image+0x420/0x420
[  290.593218][ T8272]  ? __might_sleep+0xe0/0xe0
[  290.597838][ T8272]  ? __lock_acquire+0x7d80/0x7d80
[  290.602897][ T8272]  should_fail_ex+0x394/0x4c0
[  290.607611][ T8272]  should_failslab+0x9/0x20
[  290.612146][ T8272]  slab_pre_alloc_hook+0x59/0x300
[  290.617216][ T8272]  kmem_cache_alloc+0x5a/0x2c0
[  290.622009][ T8272]  ? security_inode_alloc+0x34/0x110
[  290.627331][ T8272]  security_inode_alloc+0x34/0x110
[  290.632478][ T8272]  inode_init_always+0x914/0xc90
[  290.637448][ T8272]  new_inode_pseudo+0x95/0x1d0
[  290.642247][ T8272]  __sock_create+0x12d/0x940
[  290.646863][ T8272]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  290.652878][ T8272]  __sys_socket+0xd7/0x1b0
[  290.657324][ T8272]  __x64_sys_socket+0x7a/0x90
[  290.662028][ T8272]  do_syscall_64+0x55/0xb0
[  290.666472][ T8272]  ? clear_bhb_loop+0x40/0x90
[  290.671177][ T8272]  ? clear_bhb_loop+0x40/0x90
[  290.675913][ T8272]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  290.681835][ T8272] RIP: 0033:0x7fb9a399e159
[  290.686275][ T8272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  290.705912][ T8272] RSP: 002b:00007fb9a48d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  290.714360][ T8272] RAX: ffffffffffffffda RBX: 00007fb9a3c25fa0 RCX: 00007fb9a399e159
[  290.722359][ T8272] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010
[  290.730350][ T8272] RBP: 00007fb9a3a35024 R08: 0000000000000000 R09: 0000000000000000
[  290.738347][ T8272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  290.746347][ T8272] R13: 00007fb9a3c26038 R14: 00007fb9a3c25fa0 R15: 00007ffdcfb0e028
[  290.754397][ T8272]  </TASK>
[  290.781559][ T8275] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 12
[  290.851034][ T8272] socket: no more sockets
[  291.297405][ T5788] I/O error, dev loop4, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  291.366899][ T8278] loop2: detected capacity change from 0 to 1024
[  291.538252][ T8282] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0)
[  291.635931][ T8282] rtrs_client L2075: <s+>: Failed to resolve address, err: -19
[  291.643590][ T8282] rtrs_client L2618: <s+>: init_conns() failed: err=-19 path=<invalid address family>@ip:127.0.0.1 [:0]
[  291.968947][ T8291] loop1: detected capacity change from 0 to 256
[  291.982953][ T8291] exfat: Deprecated parameter 'namecase'
[  292.259909][ T8265] loop0: detected capacity change from 0 to 32768
[  292.307956][ T8291] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d)
[  292.423909][ T8265] BTRFS error (device loop0): open_ctree failed: -4
[  292.629208][ T5788] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by udevd (5788)
[  292.703784][ T5779] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  292.911462][ T5779] usb 3-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01
[  292.921177][ T5779] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  292.929801][ T5779] usb 3-1: Product: syz
[  292.934604][ T5779] usb 3-1: Manufacturer: syz
[  292.939356][ T5779] usb 3-1: SerialNumber: syz
[  292.951475][ T5779] ums-karma 3-1:1.0: USB Mass Storage device detected
[  292.960669][ T5777] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201'
[  292.970804][ T5777] CPU: 0 PID: 5777 Comm: kworker/u5:3 Not tainted syzkaller #0
[  292.978359][ T5777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  292.988417][ T5777] Workqueue: hci4 hci_rx_work
[  292.993102][ T5777] Call Trace:
[  292.996378][ T5777]  <TASK>
[  292.999300][ T5777]  dump_stack_lvl+0x18c/0x250
[  293.003989][ T5777]  ? show_regs_print_info+0x20/0x20
[  293.009200][ T5777]  ? load_image+0x420/0x420
[  293.013747][ T5777]  sysfs_create_dir_ns+0x26e/0x2a0
[  293.018903][ T5777]  ? __lock_acquire+0x7d80/0x7d80
[  293.023936][ T5777]  ? sysfs_warn_dup+0xa0/0xa0
[  293.028611][ T5777]  ? do_raw_spin_unlock+0x121/0x230
[  293.033812][ T5777]  kobject_add_internal+0x617/0xc90
[  293.039019][ T5777]  kobject_add+0x164/0x240
[  293.043448][ T5777]  ? kobject_init+0x1d0/0x1d0
[  293.048157][ T5777]  ? get_device_parent+0x366/0x390
[  293.053284][ T5777]  device_add+0x3fa/0xc40
[  293.057624][ T5777]  hci_conn_add_sysfs+0xd5/0x1e0
[  293.062571][ T5777]  le_conn_complete_evt+0xe9f/0x1480
[  293.067865][ T5777]  ? hci_le_big_info_adv_report_evt+0x910/0x910
[  293.074109][ T5777]  ? __mutex_unlock_slowpath+0x1b4/0x6c0
[  293.079745][ T5777]  ? mutex_unlock+0x10/0x10
[  293.084280][ T5777]  ? skb_pull_data+0xf0/0x1f0
[  293.088981][ T5777]  hci_le_conn_complete_evt+0x187/0x440
[  293.094533][ T5777]  ? hci_remote_host_features_evt+0x150/0x150
[  293.100597][ T5777]  hci_event_packet+0x7b4/0x1280
[  293.105542][ T5777]  ? __lock_acquire+0x7d80/0x7d80
[  293.110575][ T5777]  ? lock_chain_count+0x20/0x20
[  293.115425][ T5777]  ? bis_list+0x290/0x290
[  293.119751][ T5777]  ? kcov_remote_start+0x513/0x810
[  293.124857][ T5777]  ? lockdep_hardirqs_on+0x98/0x150
[  293.130055][ T5777]  ? hci_send_to_monitor+0xd7/0x4f0
[  293.135255][ T5777]  hci_rx_work+0x43a/0xd60
[  293.139675][ T5777]  ? process_scheduled_works+0x975/0x1600
[  293.145414][ T5777]  process_scheduled_works+0xa60/0x1600
[  293.151002][ T5777]  ? worker_attach_to_pool+0x370/0x370
[  293.156503][ T5777]  ? assign_work+0x3cc/0x5d0
[  293.161110][ T5777]  worker_thread+0xa5e/0xfe0
[  293.165714][ T5777]  kthread+0x2fa/0x390
[  293.169774][ T5777]  ? pr_cont_work+0x550/0x550
[  293.174448][ T5777]  ? kthread_blkcg+0xd0/0xd0
[  293.179032][ T5777]  ret_from_fork+0x48/0x80
[  293.183447][ T5777]  ? kthread_blkcg+0xd0/0xd0
[  293.188029][ T5777]  ret_from_fork_asm+0x11/0x20
[  293.192811][ T5777]  </TASK>
[  293.197434][ T5777] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  293.197570][ T5779] ums-karma 3-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller)
[  293.197570][ T5779]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[  293.211602][ T5777] Bluetooth: hci4: failed to register connection device
[  293.286765][ T5779] ums-karma: probe of 3-1:1.0 failed with error -5
[  293.377959][ T5779] usb 3-1: USB disconnect, device number 8
[  293.686045][ T8309] loop1: detected capacity change from 0 to 32768
[  293.709087][ T8311] loop4: detected capacity change from 0 to 1024
[  293.730772][ T8309] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  293.741022][ T8309] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  293.749719][ T8309] BTRFS info (device loop1): setting nodatacow, compression disabled
[  293.757813][ T8309] BTRFS info (device loop1): turning on flush-on-commit
[  293.764785][ T8309] BTRFS info (device loop1): force clearing of disk cache
[  293.771883][ T8309] BTRFS info (device loop1): turning on sync discard
[  293.778628][ T8309] BTRFS info (device loop1): turning off barriers
[  293.785107][ T8309] BTRFS info (device loop1): use no compression
[  293.791337][ T8309] BTRFS info (device loop1): disabling free space tree
[  293.798246][ T8309] BTRFS info (device loop1): enabling ssd optimizations
[  293.806048][ T8309] BTRFS info (device loop1): using spread ssd allocation scheme
[  294.007500][ T8309] BTRFS info (device loop1): rebuilding free space tree
[  294.024762][ T8309] BTRFS info (device loop1): disabling free space tree
[  294.031766][ T8309] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  294.042618][ T8309] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  294.048445][ T8332] FAULT_INJECTION: forcing a failure.
[  294.048445][ T8332] name failslab, interval 1, probability 0, space 0, times 0
[  294.917919][ T8335] overlay: Unknown parameter '/'
[  295.379181][ T8332] CPU: 0 PID: 8332 Comm: syz.2.605 Not tainted syzkaller #0
[  295.386529][ T8332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  295.396793][ T8332] Call Trace:
[  295.400100][ T8332]  <TASK>
[  295.403062][ T8332]  dump_stack_lvl+0x18c/0x250
[  295.407787][ T8332]  ? show_regs_print_info+0x20/0x20
[  295.413024][ T8332]  ? load_image+0x420/0x420
[  295.417564][ T8332]  ? __might_sleep+0xe0/0xe0
[  295.422194][ T8332]  ? __lock_acquire+0x7d80/0x7d80
[  295.427265][ T8332]  should_fail_ex+0x394/0x4c0
[  295.431990][ T8332]  should_failslab+0x9/0x20
[  295.436530][ T8332]  slab_pre_alloc_hook+0x59/0x300
[  295.441601][ T8332]  kmem_cache_alloc+0x5a/0x2c0
[  295.446397][ T8332]  ? security_inode_alloc+0x34/0x110
[  295.451729][ T8332]  security_inode_alloc+0x34/0x110
[  295.456890][ T8332]  inode_init_always+0x914/0xc90
[  295.461875][ T8332]  new_inode_pseudo+0x95/0x1d0
[  295.466677][ T8332]  __sock_create+0x12d/0x940
[  295.471300][ T8332]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  295.477326][ T8332]  __sys_socket+0xd7/0x1b0
[  295.481792][ T8332]  __x64_sys_socket+0x7a/0x90
[  295.486507][ T8332]  do_syscall_64+0x55/0xb0
[  295.491048][ T8332]  ? clear_bhb_loop+0x40/0x90
[  295.495766][ T8332]  ? clear_bhb_loop+0x40/0x90
[  295.500481][ T8332]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  295.506407][ T8332] RIP: 0033:0x7fd0bf59e159
[  295.510859][ T8332] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  295.530500][ T8332] RSP: 002b:00007fd0c0549028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  295.538956][ T8332] RAX: ffffffffffffffda RBX: 00007fd0bf825fa0 RCX: 00007fd0bf59e159
[  295.546963][ T8332] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010
[  295.554964][ T8332] RBP: 00007fd0bf635024 R08: 0000000000000000 R09: 0000000000000000
[  295.562968][ T8332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  295.570976][ T8332] R13: 00007fd0bf826038 R14: 00007fd0bf825fa0 R15: 00007ffe475fe858
[  295.578993][ T8332]  </TASK>
[  295.588873][ T8332] socket: no more sockets
[  295.699643][ T8341] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0)
[  295.711518][ T8341] rtrs_client L2075: <s+>: Failed to resolve address, err: -19
[  295.722518][ T8341] rtrs_client L2618: <s+>: init_conns() failed: err=-19 path=<invalid address family>@ip:127.0.0.1 [:0]
[  295.804261][ T5769] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  296.561177][ T8352] overlayfs: failed to resolve './bus': -2
[  297.678189][ T8345] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma?
[  298.048165][ T8348] loop0: detected capacity change from 0 to 32768
[  298.088986][ T8348] (syz.0.612,8348,1):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options
[  298.126000][ T8348] (syz.0.612,8348,0):ocfs2_fill_super:1178 ERROR: status = -22
[  298.439830][ T8357] loop0: detected capacity change from 0 to 1024
[  298.616147][ T8361] loop0: detected capacity change from 0 to 16
[  298.627622][ T8361] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  299.987083][ T5786] Bluetooth: hci4: command 0x0406 tx timeout
[  300.285818][ T8375] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0)
[  300.405853][ T8379] overlayfs: failed to resolve './bus': -2
[  301.173987][    T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!!
[  301.325339][ T8375] rtrs_client L2075: <s+>: Failed to resolve address, err: -19
[  301.333892][ T8375] rtrs_client L2618: <s+>: init_conns() failed: err=-19 path=<invalid address family>@ip:127.0.0.1 [:0]
[  301.843848][ T8396] binder: 8395:8396 unknown command 1074553620
[  301.850084][ T8396] binder: 8395:8396 ioctl c0306201 200000000640 returned -22
[  302.079289][ T8398] loop0: detected capacity change from 0 to 128
[  302.310619][ T8394] loop4: detected capacity change from 0 to 32768
[  302.348366][ T8394] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10
[  302.432013][ T8399] loop0: detected capacity change from 0 to 8192
[  302.453582][ T8401] FAULT_INJECTION: forcing a failure.
[  302.453582][ T8401] name failslab, interval 1, probability 0, space 0, times 0
[  302.468968][ T8401] CPU: 1 PID: 8401 Comm: syz.1.619 Not tainted syzkaller #0
[  302.476313][ T8401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  302.486397][ T8401] Call Trace:
[  302.489702][ T8401]  <TASK>
[  302.492649][ T8401]  dump_stack_lvl+0x18c/0x250
[  302.497374][ T8401]  ? show_regs_print_info+0x20/0x20
[  302.502612][ T8401]  ? load_image+0x420/0x420
[  302.507159][ T8401]  ? __might_sleep+0xe0/0xe0
[  302.511785][ T8401]  ? __lock_acquire+0x7d80/0x7d80
[  302.516853][ T8401]  should_fail_ex+0x394/0x4c0
[  302.521578][ T8401]  should_failslab+0x9/0x20
[  302.526118][ T8401]  slab_pre_alloc_hook+0x59/0x300
[  302.531188][ T8401]  kmem_cache_alloc+0x5a/0x2c0
[  302.535983][ T8401]  ? security_inode_alloc+0x34/0x110
[  302.541310][ T8401]  security_inode_alloc+0x34/0x110
[  302.546465][ T8401]  inode_init_always+0x914/0xc90
[  302.551439][ T8401]  new_inode_pseudo+0x95/0x1d0
[  302.556241][ T8401]  __sock_create+0x12d/0x940
[  302.560878][ T8401]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  302.566908][ T8401]  __sys_socket+0xd7/0x1b0
[  302.571362][ T8401]  __x64_sys_socket+0x7a/0x90
[  302.576065][ T8401]  do_syscall_64+0x55/0xb0
[  302.580489][ T8401]  ? clear_bhb_loop+0x40/0x90
[  302.585169][ T8401]  ? clear_bhb_loop+0x40/0x90
[  302.589849][ T8401]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  302.595743][ T8401] RIP: 0033:0x7fb9a399e159
[  302.600157][ T8401] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  302.619772][ T8401] RSP: 002b:00007fb9a48d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  302.628194][ T8401] RAX: ffffffffffffffda RBX: 00007fb9a3c25fa0 RCX: 00007fb9a399e159
[  302.636181][ T8401] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010
[  302.644160][ T8401] RBP: 00007fb9a3a35024 R08: 0000000000000000 R09: 0000000000000000
[  302.652145][ T8401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  302.660117][ T8401] R13: 00007fb9a3c26038 R14: 00007fb9a3c25fa0 R15: 00007ffdcfb0e028
[  302.668108][ T8401]  </TASK>
[  302.681825][ T8401] socket: no more sockets
[  302.701583][ T5775] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10
[  302.728488][ T5778] I/O error, dev loop0, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  303.228752][ T8417] overlayfs: failed to resolve './bus': -2
[  304.311690][ T8414] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0)
[  304.378660][ T8414] rtrs_client L2075: <s+>: Failed to resolve address, err: -19
[  304.401972][ T8414] rtrs_client L2618: <s+>: init_conns() failed: err=-19 path=<invalid address family>@ip:127.0.0.1 [:0]
[  304.560574][ T8423] loop0: detected capacity change from 0 to 4096
[  304.605387][ T8423] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512).
[  304.823998][ T8429] FAULT_INJECTION: forcing a failure.
[  304.823998][ T8429] name failslab, interval 1, probability 0, space 0, times 0
[  304.887317][ T8429] CPU: 1 PID: 8429 Comm: syz.2.639 Not tainted syzkaller #0
[  304.894670][ T8429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  304.904765][ T8429] Call Trace:
[  304.908069][ T8429]  <TASK>
[  304.911029][ T8429]  dump_stack_lvl+0x18c/0x250
[  304.915750][ T8429]  ? show_regs_print_info+0x20/0x20
[  304.920982][ T8429]  ? load_image+0x420/0x420
[  304.925522][ T8429]  ? __might_sleep+0xe0/0xe0
[  304.930154][ T8429]  ? __lock_acquire+0x7d80/0x7d80
[  304.935226][ T8429]  should_fail_ex+0x394/0x4c0
[  304.939945][ T8429]  should_failslab+0x9/0x20
[  304.944485][ T8429]  slab_pre_alloc_hook+0x59/0x300
[  304.949541][ T8429]  kmem_cache_alloc+0x5a/0x2c0
[  304.954315][ T8429]  ? security_inode_alloc+0x34/0x110
[  304.959604][ T8429]  security_inode_alloc+0x34/0x110
[  304.964727][ T8429]  inode_init_always+0x914/0xc90
[  304.969673][ T8429]  new_inode_pseudo+0x95/0x1d0
[  304.974439][ T8429]  __sock_create+0x12d/0x940
[  304.979026][ T8429]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  304.985018][ T8429]  __sys_socket+0xd7/0x1b0
[  304.989436][ T8429]  __x64_sys_socket+0x7a/0x90
[  304.994112][ T8429]  do_syscall_64+0x55/0xb0
[  304.998530][ T8429]  ? clear_bhb_loop+0x40/0x90
[  305.003296][ T8429]  ? clear_bhb_loop+0x40/0x90
[  305.007974][ T8429]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  305.013869][ T8429] RIP: 0033:0x7fd0bf59e159
[  305.018281][ T8429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  305.037890][ T8429] RSP: 002b:00007fd0c0549028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  305.046314][ T8429] RAX: ffffffffffffffda RBX: 00007fd0bf825fa0 RCX: 00007fd0bf59e159
[  305.054290][ T8429] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010
[  305.062256][ T8429] RBP: 00007fd0bf635024 R08: 0000000000000000 R09: 0000000000000000
[  305.070227][ T8429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  305.078205][ T8429] R13: 00007fd0bf826038 R14: 00007fd0bf825fa0 R15: 00007ffe475fe858
[  305.086224][ T8429]  </TASK>
[  305.266164][ T5777] Bluetooth: hci1: unexpected event for opcode 0x2003
[  305.304429][ T8429] socket: no more sockets
[  305.564598][ T8441] netlink: 8 bytes leftover after parsing attributes in process `syz.2.643'.
[  305.573532][ T8441] netlink: 32 bytes leftover after parsing attributes in process `syz.2.643'.
[  306.824541][ T5777] Bluetooth: hci4: link tx timeout
[  306.830228][ T5777] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  306.979808][ T8450] overlayfs: failed to resolve './bus': -2
[  307.732484][ T8458] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0)
[  307.828555][ T8458] rtrs_client L2075: <s+>: Failed to resolve address, err: -19
[  307.953376][ T8458] rtrs_client L2618: <s+>: init_conns() failed: err=-19 path=<invalid address family>@ip:127.0.0.1 [:0]
[  308.153973][ T8464] loop2: detected capacity change from 0 to 4096
[  308.179531][ T8464] NILFS (loop2): invalid segment: Checksum error in segment payload
[  308.195553][ T8464] NILFS (loop2): trying rollback from an earlier position
[  308.234548][ T8464] NILFS (loop2): recovery complete
[  308.261019][ T8467] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  308.296659][ T8469] loop0: detected capacity change from 0 to 512
[  308.632157][ T8479] loop1: detected capacity change from 0 to 16
[  308.845097][ T8479] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  309.502545][ T8482] overlayfs: failed to resolve './bus': -2
[  309.526992][ T5777] Bluetooth: hci4: command 0x0406 tx timeout
[  310.836316][ T8491] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0)
[  310.933542][ T8491] rtrs_client L2075: <s+>: Failed to resolve address, err: -19
[  310.947413][ T8493] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0)
[  310.986489][ T8491] rtrs_client L2618: <s+>: init_conns() failed: err=-19 path=<invalid address family>@ip:127.0.0.1 [:0]
[  311.195664][ T8498] loop0: detected capacity change from 0 to 4096
[  311.403577][   T27] audit: type=1800 audit(1788855872.798:25): pid=8498 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.663" name="file1" dev="loop0" ino=34 res=0 errno=0
[  311.525939][ T8508] f_midi2: Invalid MIDI1 group definitions for block 0:1
[  311.699435][ T8512] overlayfs: failed to resolve './bus': -2
[  313.280546][ T8516] overlayfs: failed to resolve './bus': -2
[  313.838523][ T8527] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0)
[  313.913353][ T8527] rtrs_client L2075: <s+>: Failed to resolve address, err: -19
[  313.974948][ T8527] rtrs_client L2618: <s+>: init_conns() failed: err=-19 path=<invalid address family>@ip:127.0.0.1 [:0]
[  314.511276][ T8536] overlayfs: failed to resolve './bus': -2
[  315.658924][ T8548] overlayfs: failed to resolve './bus': -2
[  317.207800][   T27] audit: type=1326 audit(1788855878.608:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8559 comm="syz.1.685" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9a399e159 code=0x7ffc0000
[  317.246181][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  317.261787][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  317.430348][   T27] audit: type=1326 audit(1788855878.638:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8559 comm="syz.1.685" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9a399e159 code=0x7ffc0000
[  317.472364][   T27] audit: type=1326 audit(1788855878.728:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8559 comm="syz.1.685" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9a399e159 code=0x7ffc0000
[  317.497057][   T27] audit: type=1326 audit(1788855878.728:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8559 comm="syz.1.685" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9a399e159 code=0x7ffc0000
[  317.521814][   T27] audit: type=1326 audit(1788855878.728:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8559 comm="syz.1.685" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7fb9a399e159 code=0x7ffc0000
[  317.546709][  T789] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  317.562196][   T27] audit: type=1326 audit(1788855878.728:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8559 comm="syz.1.685" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9a399e159 code=0x7ffc0000
[  317.658698][   T27] audit: type=1326 audit(1788855878.728:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8559 comm="syz.1.685" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9a399e159 code=0x7ffc0000
[  317.702211][ T8567] loop0: detected capacity change from 0 to 2048
[  317.711623][ T8569] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0)
[  317.787337][ T8570] overlayfs: failed to resolve './bus': -2
[  317.804871][  T789] usb 3-1: config 0 has no interfaces?
[  317.827418][  T789] usb 3-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00
[  317.856289][  T789] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  317.868520][   T27] audit: type=1326 audit(1788855878.738:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8559 comm="syz.1.685" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb9a399e159 code=0x7ffc0000
[  317.958564][ T8569] rtrs_client L2075: <s+>: Failed to resolve address, err: -19
[  317.980770][  T789] usb 3-1: Product: syz
[  318.038021][  T789] usb 3-1: Manufacturer: syz
[  318.097138][ T8569] rtrs_client L2618: <s+>: init_conns() failed: err=-19 path=<invalid address family>@ip:127.0.0.1 [:0]
[  318.120872][ T8567] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  318.151546][  T789] usb 3-1: SerialNumber: syz
[  318.239987][   T27] audit: type=1326 audit(1788855878.768:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8559 comm="syz.1.685" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fb9a399e159 code=0x7ffc0000
[  318.298396][  T789] usb 3-1: config 0 descriptor??
[  318.333276][ T8567] CacheFiles: No cache directory specified
[  318.497104][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  318.597147][ T8578] overlayfs: failed to resolve './bus': -2
[  318.754845][ T8554] netlink: 8 bytes leftover after parsing attributes in process `syz.2.673'.
[  319.031553][ T8554] dummy0: entered promiscuous mode
[  319.091074][   T28] usb 3-1: USB disconnect, device number 9
[  319.152176][ T8582] Bluetooth: hci0: unsupported parameter 5135
[  319.171539][ T8582] Bluetooth: hci0: unsupported parameter 8192
[  319.189200][ T8582] Bluetooth: hci0: unsupported parameter 5135
[  319.198801][ T8582] Bluetooth: hci0: unsupported parameter 8192
[  319.602822][ T8583] loop1: detected capacity change from 0 to 32768
[  319.651464][ T8583] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.693 (8583)
[  320.861152][ T8583] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  320.925083][ T8583] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  320.954703][ T8583] BTRFS info (device loop1): setting nodatacow, compression disabled
[  320.992591][ T8583] BTRFS info (device loop1): turning on flush-on-commit
[  321.023673][ T8583] BTRFS info (device loop1): force clearing of disk cache
[  321.053775][ T8583] BTRFS info (device loop1): turning on sync discard
[  321.060522][ T8583] BTRFS info (device loop1): turning off barriers
[  321.091026][ T8583] BTRFS info (device loop1): use no compression
[  321.103512][ T8583] BTRFS info (device loop1): disabling free space tree
[  321.175361][ T8583] BTRFS info (device loop1): enabling ssd optimizations
[  321.182360][ T8583] BTRFS info (device loop1): using spread ssd allocation scheme
[  321.379139][ T8594] loop4: detected capacity change from 0 to 32768
[  321.449113][ T8594] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.695 (8594)
[  321.698237][ T8594] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  321.708534][ T8594] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  321.717252][ T8594] BTRFS info (device loop4): use zlib compression, level 3
[  321.724538][ T8594] BTRFS info (device loop4): turning on sync discard
[  321.731247][ T8594] BTRFS info (device loop4): using free space tree
[  321.944592][ T8583] BTRFS info (device loop1): rebuilding free space tree
[  321.967612][ T8631] f_midi2: Invalid MIDI1 group definitions for block 0:1
[  321.994080][ T8583] BTRFS info (device loop1): disabling free space tree
[  322.004633][ T8594] BTRFS info (device loop4): enabling ssd optimizations
[  322.014342][ T8583] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  322.025766][ T8583] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  322.063240][ T8635] overlayfs: failed to resolve './bus': -2
[  322.794433][   T27] audit: type=1800 audit(1788855884.068:35): pid=8637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.695" name="file1" dev="loop4" ino=260 res=0 errno=0
[  323.198218][ T8643] overlayfs: failed to resolve './bus': -2
[  323.302832][ T5769] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  324.577010][ T6309] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  324.613906][ T8646] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0)
[  324.713155][ T8646] rtrs_client L2075: <s+>: Failed to resolve address, err: -19
[  324.946118][ T8646] rtrs_client L2618: <s+>: init_conns() failed: err=-19 path=<invalid address family>@ip:127.0.0.1 [:0]
[  325.919753][ T8653] loop0: detected capacity change from 0 to 16
[  325.981226][ T8653] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  326.279854][ T8657] f_midi2: Invalid MIDI1 group definitions for block 0:1
[  326.619691][ T8669] overlayfs: failed to resolve './bus': -2
[  326.775735][ T8670] Bluetooth: hci0: unsupported parameter 5135
[  326.782067][   T28] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  326.846107][ T8670] Bluetooth: hci0: unsupported parameter 8192
[  327.013792][ T8670] Bluetooth: hci0: unsupported parameter 5135
[  327.073852][ T8670] Bluetooth: hci0: unsupported parameter 8192
[  327.104120][   T28] usb 2-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01
[  327.143753][   T28] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  327.172296][   T28] usb 2-1: Product: syz
[  327.213262][   T28] usb 2-1: Manufacturer: syz
[  327.249364][   T28] usb 2-1: SerialNumber: syz
[  327.300931][   T28] ums-karma 2-1:1.0: USB Mass Storage device detected
[  327.681386][ T8674] loop2: detected capacity change from 0 to 32768
[  327.699604][ T8674] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.711 (8674)
[  327.731698][ T8674] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  327.742209][ T8674] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  327.750992][ T8674] BTRFS info (device loop2): use zlib compression, level 3
[  327.758339][ T8674] BTRFS info (device loop2): turning on sync discard
[  327.765321][ T8674] BTRFS info (device loop2): using free space tree
[  327.794449][   T28] ums-karma 2-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller)
[  327.794449][   T28]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[  328.091591][ T8674] BTRFS info (device loop2): enabling ssd optimizations
[  328.119410][   T28] ums-karma: probe of 2-1:1.0 failed with error -5
[  328.150720][   T28] usb 2-1: USB disconnect, device number 3
[  328.292462][ T8696] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0)
[  328.304763][ T8696] rtrs_client L2075: <s+>: Failed to resolve address, err: -19
[  328.313909][ T8696] rtrs_client L2618: <s+>: init_conns() failed: err=-19 path=<invalid address family>@ip:127.0.0.1 [:0]
[  328.486730][   T27] audit: type=1800 audit(1788855889.878:36): pid=8699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.711" name="file1" dev="loop2" ino=260 res=0 errno=0
[  328.863341][ T6228] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  328.911668][ T8701] loop1: detected capacity change from 0 to 64
[  328.956243][ T8672] loop0: detected capacity change from 0 to 32768
[  328.968135][ T8672] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.710 (8672)
[  329.007598][ T8672] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  329.023516][ T8672] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  329.107347][ T8701] BFS-fs: bfs_readdir(): Bad f_pos=0000ab07 for loop1:00000002
[  329.123185][ T8672] BTRFS info (device loop0): setting nodatacow, compression disabled
[  329.183895][ T8672] BTRFS info (device loop0): turning on flush-on-commit
[  329.248768][ T8672] BTRFS info (device loop0): force clearing of disk cache
[  329.421389][ T8672] BTRFS info (device loop0): turning on sync discard
[  329.662791][ T8672] BTRFS info (device loop0): turning off barriers
[  329.835352][ T8672] BTRFS info (device loop0): use no compression
[  329.949382][ T8672] BTRFS info (device loop0): disabling free space tree
[  329.964595][ T8672] BTRFS info (device loop0): enabling ssd optimizations
[  330.013747][ T8672] BTRFS info (device loop0): using spread ssd allocation scheme
[  330.051713][ T8672] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR
[  330.052503][ T8672] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR
[  330.155840][ T8672] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR
[  330.168055][ T8672] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR
[  330.187254][ T8672] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR
[  330.197377][ T8672] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR
[  330.207675][ T8672] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR
[  330.218263][ T8672] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR
[  330.229457][ T8672] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR
[  330.240326][ T8672] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR
[  330.251509][ T8672] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR
[  330.277817][ T8672] BTRFS error (device loop0): open_ctree failed: -12
[  330.360971][ T8727] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0)
[  330.433226][ T8728] loop1: detected capacity change from 0 to 16
[  330.457894][ T8727] rtrs_client L2075: <s+>: Failed to resolve address, err: -19
[  330.466626][ T8727] rtrs_client L2618: <s+>: init_conns() failed: err=-19 path=<invalid address family>@ip:127.0.0.1 [:0]
[  330.643314][ T8728] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  331.644625][ T8730] f_midi2: Invalid MIDI1 group definitions for block 0:1
[  331.695590][ T8735] overlayfs: failed to resolve './bus': -2
[  335.704111][ T8751] overlayfs: missing 'lowerdir'
[  335.778652][ T8753] overlay: Unknown parameter '/'
[  336.543032][ T8761] Bluetooth: hci0: unsupported parameter 5135
[  336.553760][ T8761] Bluetooth: hci0: unsupported parameter 8192
[  336.573734][ T8761] Bluetooth: hci0: unsupported parameter 5135
[  336.583914][ T8761] Bluetooth: hci0: unsupported parameter 8192
[  336.884982][ T8764] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0)
[  336.899531][ T8764] rtrs_client L2075: <s+>: Failed to resolve address, err: -19
[  336.907598][ T8764] rtrs_client L2618: <s+>: init_conns() failed: err=-19 path=<invalid address family>@ip:127.0.0.1 [:0]
[  337.977743][ T8761] loop4: detected capacity change from 0 to 32768
[  338.008858][ T8761] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.727 (8761)
[  338.134890][ T8769] f_midi2: Invalid MIDI1 group definitions for block 0:1
[  338.183360][ T8767] loop0: detected capacity change from 0 to 32768
[  338.218247][ T8767] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.723 (8767)
[  338.238078][ T8761] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  338.260383][ T8767] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  338.270728][ T8767] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  338.279462][ T8767] BTRFS info (device loop0): use zlib compression, level 3
[  338.286758][ T8767] BTRFS info (device loop0): turning on sync discard
[  338.293473][ T8767] BTRFS info (device loop0): using free space tree
[  338.303504][ T8761] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  338.323903][ T8761] BTRFS info (device loop4): setting nodatacow, compression disabled
[  338.353793][ T8761] BTRFS info (device loop4): turning on flush-on-commit
[  338.360801][ T8761] BTRFS info (device loop4): force clearing of disk cache
[  338.368500][ T8761] BTRFS info (device loop4): turning on sync discard
[  338.375524][ T8761] BTRFS info (device loop4): turning off barriers
[  338.381986][ T8761] BTRFS info (device loop4): use no compression
[  338.389015][ T8761] BTRFS info (device loop4): disabling free space tree
[  338.396203][ T8761] BTRFS info (device loop4): enabling ssd optimizations
[  338.403573][ T8761] BTRFS info (device loop4): using spread ssd allocation scheme
[  338.535582][ T8767] BTRFS info (device loop0): enabling ssd optimizations
[  339.734146][   T27] audit: type=1800 audit(1788855900.988:37): pid=8805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.723" name="file1" dev="loop0" ino=260 res=0 errno=0
[  340.064958][ T8761] BTRFS error (device loop4): open_ctree failed: -4
[  340.217260][ T5770] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  340.328905][ T8806] overlayfs: failed to resolve './bus': -2
[  340.586863][ T8809] loop4: detected capacity change from 0 to 128
[  341.663843][ T5786] Bluetooth: hci1: Unable to find connection with handle 0x0000
[  342.311046][ T8832] loop0: detected capacity change from 0 to 2048
[  342.343906][ T5779] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  342.378978][ T8832] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  342.440820][ T8832] CacheFiles: Empty directory specified
[  342.470596][ T8832] CacheFiles: No cache directory specified
[  342.477072][ T8838] Bluetooth: hci0: unsupported parameter 5135
[  342.503789][ T8838] Bluetooth: hci0: unsupported parameter 8192
[  342.523715][ T5779] usb 2-1: Using ep0 maxpacket: 32
[  342.530876][ T5779] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  342.534658][ T8838] Bluetooth: hci0: unsupported parameter 5135
[  342.542464][ T5779] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  342.573933][ T5779] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  342.587569][ T8838] Bluetooth: hci0: unsupported parameter 8192
[  342.596457][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  342.603461][ T5779] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  342.626307][ T5779] usb 2-1: config 0 descriptor??
[  343.073124][ T5779] usbhid 2-1:0.0: can't add hid device: -71
[  343.094056][ T8843] overlayfs: failed to resolve './bus': -2
[  343.180463][ T5779] usbhid: probe of 2-1:0.0 failed with error -71
[  343.428745][ T5779] usb 2-1: USB disconnect, device number 4
[  344.922162][ T8839] loop4: detected capacity change from 0 to 32768
[  345.008182][ T8839] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.741 (8839)
[  345.667309][ T8839] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  345.729448][ T8839] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  345.784096][ T8839] BTRFS info (device loop4): setting nodatacow, compression disabled
[  345.792247][ T8839] BTRFS info (device loop4): turning on flush-on-commit
[  345.846681][ T8864] loop0: detected capacity change from 0 to 2048
[  345.853950][ T8839] BTRFS info (device loop4): force clearing of disk cache
[  345.876233][ T8839] BTRFS info (device loop4): turning on sync discard
[  345.888833][ T8839] BTRFS info (device loop4): turning off barriers
[  345.901460][ T8839] BTRFS info (device loop4): use no compression
[  345.912122][ T8839] BTRFS info (device loop4): disabling free space tree
[  345.955528][ T8864] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  346.844075][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  347.180615][ T8871] tty tty2: ldisc open failed (-12), clearing slot 1
[  347.277703][ T8839] BTRFS info (device loop4): enabling ssd optimizations
[  347.338659][ T8839] BTRFS info (device loop4): using spread ssd allocation scheme
[  347.347325][ T8864] CacheFiles: Empty directory specified
[  347.357353][ T8839] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR
[  347.358144][ T8839] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR
[  347.376168][ T8864] CacheFiles: No cache directory specified
[  347.404397][ T8839] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR
[  347.405010][ T8839] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR
[  347.434678][ T8839] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR
[  347.463401][ T8839] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR
[  347.495874][ T8839] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR
[  347.530157][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  347.554385][ T8839] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR
[  347.555078][ T8839] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR
[  347.575932][ T8839] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR
[  347.610296][ T8839] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR
[  347.653075][ T8839] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR
[  347.847584][ T8839] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[  348.024073][ T5786] Bluetooth: hci4: link tx timeout
[  348.394102][ T8839] BTRFS error (device loop4): open_ctree failed: -12
[  350.223851][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  351.833921][   T28] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  352.024453][   T28] usb 2-1: Using ep0 maxpacket: 32
[  352.044280][   T28] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  352.072946][   T28] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  352.084004][   T28] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  352.093597][   T28] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  352.110130][   T28] usb 2-1: config 0 descriptor??
[  352.649544][ T8926] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma?
[  353.713835][   T28] usbhid 2-1:0.0: can't add hid device: -71
[  353.719977][   T28] usbhid: probe of 2-1:0.0 failed with error -71
[  353.742900][ T5771] IPVS: starting estimator thread 0...
[  353.784449][   T28] usb 2-1: USB disconnect, device number 5
[  353.830255][ T8929] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22
[  353.852664][ T8929] netdevsim netdevsim2: Direct firmware load for . failed with error -22
[  353.862945][ T8929] netdevsim netdevsim2: Falling back to sysfs fallback for: .
[  353.871123][ T8931] IPVS: using max 23 ests per chain, 55200 per kthread
[  355.296645][ T8956] FAULT_INJECTION: forcing a failure.
[  355.296645][ T8956] name fail_futex, interval 1, probability 0, space 0, times 0
[  355.377642][ T8956] CPU: 1 PID: 8956 Comm: syz.2.775 Not tainted syzkaller #0
[  355.384990][ T8956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  355.395064][ T8956] Call Trace:
[  355.398450][ T8956]  <TASK>
[  355.401469][ T8956]  dump_stack_lvl+0x18c/0x250
[  355.406301][ T8956]  ? show_regs_print_info+0x20/0x20
[  355.411567][ T8956]  ? load_image+0x420/0x420
[  355.416097][ T8956]  ? __lock_acquire+0x1336/0x7d80
[  355.421161][ T8956]  should_fail_ex+0x394/0x4c0
[  355.425866][ T8956]  get_futex_key+0x16f/0x1030
[  355.430566][ T8956]  ? futex_setup_timer+0xc0/0xc0
[  355.435529][ T8956]  futex_wake+0x127/0x4f0
[  355.439883][ T8956]  ? futex_wake_mark+0x150/0x150
[  355.444848][ T8956]  do_futex+0x35d/0x3e0
[  355.449032][ T8956]  ? __might_fault+0xaa/0x120
[  355.453738][ T8956]  ? __ia32_sys_get_robust_list+0x110/0x110
[  355.459659][ T8956]  ? __might_fault+0xc6/0x120
[  355.464360][ T8956]  mm_release+0x184/0x3a0
[  355.468710][ T8956]  ? exit_mm_release+0x30/0x30
[  355.473496][ T8956]  ? lockdep_hardirqs_on+0x98/0x150
[  355.478728][ T8956]  exit_mm+0xa4/0x340
[  355.482742][ T8956]  ? sysctl_delayacct+0x220/0x220
[  355.487781][ T8956]  ? do_exit+0x2530/0x2530
[  355.492229][ T8956]  do_exit+0x909/0x2530
[  355.496419][ T8956]  ? put_task_struct+0xc0/0xc0
[  355.501207][ T8956]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  355.507203][ T8956]  ? get_signal+0x100e/0x1390
[  355.511894][ T8956]  ? lock_chain_count+0x20/0x20
[  355.516768][ T8956]  ? _raw_spin_lock_irq+0xbb/0xf0
[  355.521889][ T8956]  do_group_exit+0x22d/0x2f0
[  355.526502][ T8956]  ? lockdep_hardirqs_on+0x98/0x150
[  355.531729][ T8956]  get_signal+0x12a6/0x1390
[  355.536274][ T8956]  arch_do_signal_or_restart+0xc2/0x7b0
[  355.541860][ T8956]  ? __ia32_sys_get_robust_list+0x110/0x110
[  355.547772][ T8956]  ? get_sigframe_size+0x20/0x20
[  355.552747][ T8956]  ? exit_to_user_mode_loop+0x3b/0x110
[  355.558228][ T8956]  exit_to_user_mode_loop+0x70/0x110
[  355.563530][ T8956]  exit_to_user_mode_prepare+0xee/0x180
[  355.569095][ T8956]  syscall_exit_to_user_mode+0x1a/0x50
[  355.574589][ T8956]  do_syscall_64+0x61/0xb0
[  355.579022][ T8956]  ? clear_bhb_loop+0x40/0x90
[  355.583787][ T8956]  ? clear_bhb_loop+0x40/0x90
[  355.588483][ T8956]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  355.594388][ T8956] RIP: 0033:0x7fd0bf59e159
[  355.598876][ T8956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  355.618562][ T8956] RSP: 002b:00007fd0c05490e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  355.627008][ T8956] RAX: fffffffffffffe00 RBX: 00007fd0bf825fa8 RCX: 00007fd0bf59e159
[  355.631864][ T8937] loop4: detected capacity change from 0 to 32768
[  355.634981][ T8956] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd0bf825fa8
[  355.634997][ T8956] RBP: 00007fd0bf825fa0 R08: 0000000000000000 R09: 0000000000000000
[  355.635007][ T8956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  355.635018][ T8956] R13: 00007fd0bf826038 R14: 00007ffe475fe770 R15: 00007ffe475fe858
[  355.635043][ T8956]  </TASK>
[  355.669118][ T8937] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.767 (8937)
[  355.763916][ T5779] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  355.853940][ T8937] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  355.876352][ T8960] RDS: rds_bind could not find a transport for ::ffff:172.30.0.2, load rds_tcp or rds_rdma?
[  355.983835][ T5779] usb 1-1: Using ep0 maxpacket: 32
[  356.006690][ T5779] usb 1-1: config 0 has an invalid interface number: 119 but max is 0
[  356.015271][ T5779] usb 1-1: config 0 has no interface number 0
[  356.021405][ T5779] usb 1-1: config 0 interface 119 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  356.023900][ T8937] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  356.038650][ T5779] usb 1-1: config 0 interface 119 altsetting 0 has an invalid endpoint with address 0xE3, skipping
[  356.108448][ T5779] usb 1-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  356.197157][ T5779] usb 1-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73
[  356.213917][ T5779] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  356.230287][ T5779] usb 1-1: Product: syz
[  356.235846][ T5779] usb 1-1: Manufacturer: syz
[  356.241111][ T5779] usb 1-1: SerialNumber: syz
[  356.278486][ T5779] usb 1-1: config 0 descriptor??
[  356.279125][ T8937] BTRFS info (device loop4): using free space tree
[  356.289197][ T5779] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.119/input/input8
[  356.432795][   T49] BTRFS warning (device loop4): checksum verify failed on logical 5332992 mirror 1 wanted 0x45c4daa94c2fee9c24887d4bee8f983cd8ca9d8901c4a5aa51fab9bc8d8bf5d6 found 0x3c843944728decf3cd3fa7371a3ec67a8337b2e38cfad5e02888af45fe48cce7 level 0
[  356.457142][ T8977] loop2: detected capacity change from 0 to 64
[  356.500780][ T8937] BTRFS warning (device loop4): couldn't read tree root
[  356.615235][ T8937] BTRFS error (device loop4): open_ctree failed: -5
[  356.724761][ T5775] I/O error, dev loop4, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  356.793225][  T790] usb 1-1: USB disconnect, device number 3
[  356.913322][ T8981] loop2: detected capacity change from 0 to 512
[  357.104271][ T5815] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  357.172634][ T8986] loop4: detected capacity change from 0 to 1024
[  357.315890][ T5815] usb 2-1: Using ep0 maxpacket: 32
[  357.341822][ T5815] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  357.374198][ T5815] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  357.393486][ T5815] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  357.436525][ T5815] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  357.471971][ T5815] usb 2-1: config 0 descriptor??
[  358.693655][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  359.262990][ T5815] usbhid 2-1:0.0: can't add hid device: -71
[  359.284014][ T5815] usbhid: probe of 2-1:0.0 failed with error -71
[  359.294654][ T5815] usb 2-1: USB disconnect, device number 6
[  359.651192][ T9000] loop4: detected capacity change from 0 to 32768
[  359.660332][ T9000] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.786 (9000)
[  359.688205][ T9000] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  359.698891][ T9000] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  359.707854][ T9000] BTRFS info (device loop4): use zlib compression, level 3
[  359.715194][ T9000] BTRFS info (device loop4): turning on sync discard
[  359.721903][ T9000] BTRFS info (device loop4): using free space tree
[  359.811214][ T9000] BTRFS info (device loop4): enabling ssd optimizations
[  360.214494][   T27] audit: type=1800 audit(1788855921.578:38): pid=9022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.786" name="file1" dev="loop4" ino=260 res=0 errno=0
[  360.808084][ T6309] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  360.934043][ T9023] input: ! as /devices/virtual/input/input9
[  361.006151][ T9025] loop2: detected capacity change from 0 to 1024
[  361.031412][ T5775] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop4 scanned by udevd (5775)
[  362.692748][ T9052] loop1: detected capacity change from 0 to 64
[  362.925818][ T9057] loop1: detected capacity change from 0 to 1024
[  362.983891][ T5771] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  363.183939][ T5771] usb 5-1: Using ep0 maxpacket: 32
[  363.322640][ T5771] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  364.083755][ T5771] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  364.153922][ T5771] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  364.163095][ T5771] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  364.177999][ T5771] usb 5-1: config 0 descriptor??
[  364.397767][ T9069] loop1: detected capacity change from 0 to 2048
[  364.468708][ T9069] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  364.631843][ T5771] usbhid 5-1:0.0: can't add hid device: -71
[  364.640417][ T5771] usbhid: probe of 5-1:0.0 failed with error -71
[  364.683931][ T5771] usb 5-1: USB disconnect, device number 6
[  364.750302][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  365.980062][ T9094] loop1: detected capacity change from 0 to 1024
[  367.860850][ T9105] loop1: detected capacity change from 0 to 2048
[  367.957019][ T9105] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  368.225556][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  368.453923][ T5815] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  368.653709][ T5815] usb 3-1: Using ep0 maxpacket: 32
[  368.705730][ T5815] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  368.752972][ T5815] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  368.814707][ T5815] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  368.861711][ T5815] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  368.894875][ T5815] usb 3-1: config 0 descriptor??
[  370.731124][ T5815] usbhid 3-1:0.0: can't add hid device: -71
[  370.737519][ T5815] usbhid: probe of 3-1:0.0 failed with error -71
[  370.794403][ T5815] usb 3-1: USB disconnect, device number 10
[  371.494751][ T9130] loop1: detected capacity change from 0 to 1024
[  373.450749][ T9147] loop4: detected capacity change from 0 to 2048
[  373.615433][ T9132] loop2: detected capacity change from 0 to 32768
[  373.663064][ T9132] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10
[  373.690750][ T9147] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  374.467501][ T6309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  375.004366][    T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!!
[  376.021500][ T5771] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  376.253940][ T5771] usb 2-1: Using ep0 maxpacket: 32
[  376.282440][ T5771] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  376.320406][ T5771] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  377.011486][ T5771] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  377.021338][ T5771] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  377.044753][ T5771] usb 2-1: config 0 descriptor??
[  377.624611][ T5771] usbhid 2-1:0.0: can't add hid device: -71
[  377.630659][ T5771] usbhid: probe of 2-1:0.0 failed with error -71
[  377.679679][ T5771] usb 2-1: USB disconnect, device number 7
[  377.753025][ T9179] loop2: detected capacity change from 0 to 2048
[  377.809285][ T9179] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  378.001307][ T6228] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  378.213512][ T9185] loop0: detected capacity change from 0 to 1024
[  378.287625][ T9189] netlink: 'syz.1.838': attribute type 1 has an invalid length.
[  378.306390][ T9189] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.838'.
[  378.580392][ T9191] loop0: detected capacity change from 0 to 4096
[  378.671541][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  378.678074][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  378.842601][ T9194] loop1: detected capacity change from 0 to 32768
[  378.852608][ T9194] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10
[  379.183009][ T5788] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10
[  379.338545][ T9187] loop2: detected capacity change from 0 to 32768
[  380.752825][ T9207] loop0: detected capacity change from 0 to 2048
[  380.816994][ T9207] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  380.975506][ T9216] loop1: detected capacity change from 0 to 1024
[  381.121236][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  381.734530][ T9222] loop2: detected capacity change from 0 to 32768
[  381.755100][ T9222] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10
[  381.893954][ T5779] usb 1-1: new full-speed USB device number 4 using dummy_hcd
[  381.982588][ T9228] tipc: Started in network mode
[  382.010043][ T9228] tipc: Node identity faf95ed8bdc1, cluster identity 4711
[  382.030039][ T5775] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10
[  382.049600][ T9228] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  382.127684][ T9230] syzkaller0: entered promiscuous mode
[  382.133365][ T9230] syzkaller0: entered allmulticast mode
[  382.140035][ T9230] tipc: Resetting bearer <eth:syzkaller0>
[  382.166470][ T9227] tipc: Resetting bearer <eth:syzkaller0>
[  382.723107][ T5779] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  382.904740][ T5779] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  382.958005][ T5779] usb 1-1: Product: syz
[  382.962225][ T5779] usb 1-1: Manufacturer: syz
[  382.990060][ T5779] usb 1-1: SerialNumber: syz
[  383.139351][ T5779] usb 1-1: config 0 descriptor??
[  383.361970][ T5779] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  384.801532][    C1] raw-gadget.0 gadget.0: ignoring, device is not running
[  384.809974][    C1] raw-gadget.0 gadget.0: ignoring, device is not running
[  384.818060][    C1] raw-gadget.0 gadget.0: ignoring, device is not running
[  384.826200][    C1] raw-gadget.0 gadget.0: ignoring, device is not running
[  384.835678][    C1] raw-gadget.0 gadget.0: ignoring, device is not running
[  384.843211][ T5779] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -32
[  384.857823][ T5779] usb 1-1: USB disconnect, device number 4
[  385.752096][ T9248] loop0: detected capacity change from 0 to 1024
[  386.792539][ T9256] loop0: detected capacity change from 0 to 32768
[  386.800792][ T9256] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10
[  386.981705][ T5775] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10
[  387.118404][ T9227] tipc: Disabling bearer <eth:syzkaller0>
[  387.140518][ T5813] tipc: Node number set to 1194876632
[  388.647863][ T9286] loop0: detected capacity change from 0 to 2048
[  388.682717][ T9286] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found!
[  388.716787][ T9286] UDF-fs: warning (device loop0): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount
[  390.718759][ T9292] loop0: detected capacity change from 0 to 512
[  391.183792][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  391.731473][ T9295] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  393.724310][ T9316] loop0: detected capacity change from 0 to 32768
[  393.733997][ T9316] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10
[  393.794931][ T5775] I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  394.095663][ T9310] loop4: detected capacity change from 0 to 40427
[  394.122157][ T9310] F2FS-fs (loop4): build fault injection attr: rate: 174, type: 0x7ffff
[  396.176105][   T28] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  396.222283][ T9343] loop1: detected capacity change from 0 to 32768
[  396.234652][ T9343] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10
[  396.287176][ T5775] I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  396.396140][   T28] usb 5-1: Using ep0 maxpacket: 8
[  396.447904][   T28] usb 5-1: config 0 interface 0 altsetting 88 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  396.483782][   T28] usb 5-1: config 0 interface 0 has no altsetting 0
[  396.503074][   T28] usb 5-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[  396.789224][ T9350] loop0: detected capacity change from 0 to 32768
[  396.805082][   T28] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  396.813338][ T9350] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10
[  397.024785][   T28] usb 5-1: config 0 descriptor??
[  397.034931][ T5775] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10
[  398.744111][ T5787] Bluetooth: hci4: link tx timeout
[  398.776839][ T5787] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa
[  398.790109][ T5787] Bluetooth: hci4: link tx timeout
[  399.137086][   T28] isku 0003:1E7D:319C.0002: unknown main item tag 0x0
[  399.146881][   T28] isku 0003:1E7D:319C.0002: unknown main item tag 0x0
[  399.153776][   T28] isku 0003:1E7D:319C.0002: unknown main item tag 0x0
[  399.160577][   T28] isku 0003:1E7D:319C.0002: unknown main item tag 0x0
[  399.167439][   T28] isku 0003:1E7D:319C.0002: unknown main item tag 0x0
[  399.186019][   T28] isku 0003:1E7D:319C.0002: unknown main item tag 0x0
[  399.332124][   T28] isku 0003:1E7D:319C.0002: unknown main item tag 0x0
[  399.339956][   T28] isku 0003:1E7D:319C.0002: unknown main item tag 0x0
[  399.346844][   T28] isku 0003:1E7D:319C.0002: unknown main item tag 0x0
[  399.353927][   T28] isku 0003:1E7D:319C.0002: unknown main item tag 0x0
[  399.360749][   T28] isku 0003:1E7D:319C.0002: unknown main item tag 0x0
[  399.370091][   T28] isku 0003:1E7D:319C.0002: unknown main item tag 0x0
[  399.378702][   T28] isku 0003:1E7D:319C.0002: unknown main item tag 0x0
[  399.393204][   T28] isku 0003:1E7D:319C.0002: unknown main item tag 0x0
[  399.425945][   T28] isku 0003:1E7D:319C.0002: unknown main item tag 0x0
[  399.451190][   T28] isku 0003:1E7D:319C.0002: unknown main item tag 0x0
[  399.480044][   T28] isku 0003:1E7D:319C.0002: unknown main item tag 0x0
[  399.501458][   T28] isku 0003:1E7D:319C.0002: unknown main item tag 0x0
[  399.555707][   T28] isku 0003:1E7D:319C.0002: unknown main item tag 0x0
[  399.607758][   T28] isku 0003:1E7D:319C.0002: unknown main item tag 0x0
[  399.687596][   T28] isku 0003:1E7D:319C.0002: unknown main item tag 0x0
[  399.801593][   T28] isku 0003:1E7D:319C.0002: unknown main item tag 0x0
[  399.962242][   T28] isku 0003:1E7D:319C.0002: unknown main item tag 0x0
[  400.290093][ T9384] loop1: detected capacity change from 0 to 32768
[  400.303960][ T9384] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10
[  400.319120][   T28] isku 0003:1E7D:319C.0002: unknown main item tag 0x0
[  400.333733][   T28] isku 0003:1E7D:319C.0002: unknown main item tag 0x0
[  400.340587][   T28] isku 0003:1E7D:319C.0002: unknown main item tag 0x0
[  400.353188][   T28] isku 0003:1E7D:319C.0002: unknown main item tag 0x0
[  400.381379][ T5788] I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  400.464763][   T28] isku 0003:1E7D:319C.0002: unknown main item tag 0x0
[  400.471677][   T28] isku 0003:1E7D:319C.0002: unknown main item tag 0x0
[  400.479271][   T28] isku 0003:1E7D:319C.0002: unknown main item tag 0x0
[  400.486352][   T28] isku 0003:1E7D:319C.0002: unknown main item tag 0x0
[  400.493168][   T28] isku 0003:1E7D:319C.0002: unknown main item tag 0x0
[  400.784053][ T9388] loop2: detected capacity change from 0 to 32768
[  400.797256][   T28] isku 0003:1E7D:319C.0002: unknown main item tag 0x0
[  400.804205][   T28] isku 0003:1E7D:319C.0002: unknown main item tag 0x0
[  400.813099][   T28] isku 0003:1E7D:319C.0002: unknown main item tag 0x0
[  400.820201][   T28] isku 0003:1E7D:319C.0002: unknown main item tag 0x0
[  400.827077][   T28] isku 0003:1E7D:319C.0002: unknown main item tag 0x0
[  400.831401][ T5786] Bluetooth: hci4: command 0x0406 tx timeout
[  400.833940][   T28] isku 0003:1E7D:319C.0002: unknown main item tag 0x0
[  400.848605][   T28] isku 0003:1E7D:319C.0002: unknown main item tag 0x0
[  400.864988][ T9388] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10
[  400.893711][   T28] isku 0003:1E7D:319C.0002: unknown main item tag 0x0
[  401.857779][   T28] isku 0003:1E7D:319C.0002: unknown main item tag 0x0
[  401.913080][   T28] isku 0003:1E7D:319C.0002: unknown main item tag 0x0
[  402.113030][   T28] isku 0003:1E7D:319C.0002: unknown main item tag 0x0
[  402.144517][   T28] isku 0003:1E7D:319C.0002: unknown main item tag 0x0
[  403.164376][    T0] NOHZ tick-stop error: local softirq work is pending, handler #1c2!!!
[  403.460899][   T28] isku 0003:1E7D:319C.0002: hidraw0: USB HID v0.09 Device [HID 1e7d:319c] on usb-dummy_hcd.4-1/input0
[  403.549533][ T5775] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10
[  403.563494][   T28] usb 5-1: USB disconnect, device number 7
[  403.740126][ T9404] fido_id[9404]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  404.616531][ T9409] f_midi2: Invalid MIDI1 group definitions for block 0:1
[  405.827777][ T9417] loop2: detected capacity change from 0 to 32768
[  405.845316][ T9417] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10
[  405.925747][ T9421] loop4: detected capacity change from 0 to 1024
[  406.097303][ T5788] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  407.757494][ T5813] usb 1-1: new full-speed USB device number 5 using dummy_hcd
[  408.124573][ T9440] FAULT_INJECTION: forcing a failure.
[  408.124573][ T9440] name fail_futex, interval 1, probability 0, space 0, times 0
[  408.158575][ T9440] CPU: 1 PID: 9440 Comm: syz.4.926 Not tainted syzkaller #0
[  408.165925][ T9440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  408.176003][ T9440] Call Trace:
[  408.179299][ T9440]  <TASK>
[  408.182248][ T9440]  dump_stack_lvl+0x18c/0x250
[  408.186958][ T9440]  ? show_regs_print_info+0x20/0x20
[  408.192194][ T9440]  ? load_image+0x420/0x420
[  408.196720][ T9440]  ? __lock_acquire+0x1336/0x7d80
[  408.201785][ T9440]  should_fail_ex+0x394/0x4c0
[  408.206493][ T9440]  get_futex_key+0x16f/0x1030
[  408.211199][ T9440]  ? futex_setup_timer+0xc0/0xc0
[  408.216168][ T9440]  futex_wake+0x127/0x4f0
[  408.220526][ T9440]  ? futex_wake_mark+0x150/0x150
[  408.225504][ T9440]  do_futex+0x35d/0x3e0
[  408.229686][ T9440]  ? __might_fault+0xaa/0x120
[  408.234390][ T9440]  ? __ia32_sys_get_robust_list+0x110/0x110
[  408.240312][ T9440]  ? __might_fault+0xc6/0x120
[  408.245014][ T9440]  mm_release+0x184/0x3a0
[  408.249366][ T9440]  ? exit_mm_release+0x30/0x30
[  408.254151][ T9440]  ? lockdep_hardirqs_on+0x98/0x150
[  408.259392][ T9440]  exit_mm+0xa4/0x340
[  408.263405][ T9440]  ? sysctl_delayacct+0x220/0x220
[  408.268460][ T9440]  ? do_exit+0x2530/0x2530
[  408.272946][ T9440]  do_exit+0x909/0x2530
[  408.277148][ T9440]  ? put_task_struct+0xc0/0xc0
[  408.281939][ T9440]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  408.287943][ T9440]  ? get_signal+0x100e/0x1390
[  408.292646][ T9440]  ? lock_chain_count+0x20/0x20
[  408.297523][ T9440]  ? _raw_spin_lock_irq+0xbb/0xf0
[  408.302576][ T9440]  do_group_exit+0x22d/0x2f0
[  408.307192][ T9440]  ? lockdep_hardirqs_on+0x98/0x150
[  408.312419][ T9440]  get_signal+0x12a6/0x1390
[  408.316963][ T9440]  arch_do_signal_or_restart+0xc2/0x7b0
[  408.322538][ T9440]  ? __ia32_sys_get_robust_list+0x110/0x110
[  408.328455][ T9440]  ? get_sigframe_size+0x20/0x20
[  408.333434][ T9440]  ? exit_to_user_mode_loop+0x3b/0x110
[  408.338940][ T9440]  exit_to_user_mode_loop+0x70/0x110
[  408.344257][ T9440]  exit_to_user_mode_prepare+0xee/0x180
[  408.349825][ T9440]  syscall_exit_to_user_mode+0x1a/0x50
[  408.355310][ T9440]  do_syscall_64+0x61/0xb0
[  408.359749][ T9440]  ? clear_bhb_loop+0x40/0x90
[  408.364449][ T9440]  ? clear_bhb_loop+0x40/0x90
[  408.369148][ T9440]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  408.375065][ T9440] RIP: 0033:0x7f892b79e159
[  408.379506][ T9440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  408.399140][ T9440] RSP: 002b:00007f892c6180e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  408.407579][ T9440] RAX: fffffffffffffe00 RBX: 00007f892ba25fa8 RCX: 00007f892b79e159
[  408.415566][ T9440] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f892ba25fa8
[  408.423553][ T9440] RBP: 00007f892ba25fa0 R08: 0000000000000000 R09: 0000000000000000
[  408.431551][ T9440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  408.439552][ T9440] R13: 00007f892ba26038 R14: 00007ffcfcc1a100 R15: 00007ffcfcc1a1e8
[  408.447563][ T9440]  </TASK>
[  408.800767][ T6394] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  408.964073][ T6394] usb 2-1: device descriptor read/64, error -71
[  409.130990][ T9444] f_midi2: Invalid MIDI1 group definitions for block 0:1
[  409.243881][ T6394] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  409.413824][ T6394] usb 2-1: device descriptor read/64, error -71
[  409.483701][ T5813] usb 1-1: device not accepting address 5, error -71
[  409.514173][ T9453] loop0: detected capacity change from 0 to 1024
[  409.533943][ T6394] usb usb2-port1: attempt power cycle
[  409.895830][ T9455] loop0: detected capacity change from 0 to 32768
[  409.908833][ T9455] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10
[  410.081964][ T5775] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10
[  410.226024][ T6394] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  410.299675][ T6394] usb 2-1: device descriptor read/8, error -71
[  410.670834][ T6394] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  410.760876][ T6394] usb 2-1: device descriptor read/8, error -71
[  410.904302][ T6394] usb usb2-port1: unable to enumerate USB device
[  411.123963][   T28] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  411.313743][   T28] usb 3-1: device descriptor read/64, error -71
[  411.556478][ T9474] loop1: detected capacity change from 0 to 1024
[  411.992132][   T28] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  412.145565][   T28] usb 3-1: device descriptor read/64, error -71
[  412.273985][   T28] usb usb3-port1: attempt power cycle
[  412.783754][   T28] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  412.867499][   T28] usb 3-1: device descriptor read/8, error -71
[  413.183834][   T28] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  413.252715][   T28] usb 3-1: device descriptor read/8, error -71
[  413.314505][ T6394] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  413.508523][   T28] usb usb3-port1: unable to enumerate USB device
[  413.536191][ T9502] loop0: detected capacity change from 0 to 1024
[  413.652841][ T6394] usb 2-1: device descriptor read/64, error -71
[  413.968830][ T6394] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  414.123974][ T6394] usb 2-1: device descriptor read/64, error -71
[  414.263392][ T6394] usb usb2-port1: attempt power cycle
[  414.723841][ T6394] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  414.775758][ T6394] usb 2-1: device descriptor read/8, error -71
[  415.073765][ T6394] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  416.419943][ T9525] loop2: detected capacity change from 0 to 1024
[  416.439775][ T6394] usb 2-1: device descriptor read/8, error -71
[  416.597978][ T6394] usb usb2-port1: unable to enumerate USB device
[  417.173986][ T6394] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  417.344329][ T6394] usb 2-1: device descriptor read/64, error -71
[  417.753811][ T6394] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  417.933807][ T6394] usb 2-1: device descriptor read/64, error -71
[  418.084128][ T6394] usb usb2-port1: attempt power cycle
[  418.525034][ T6394] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  418.567476][ T6394] usb 2-1: device descriptor read/8, error -71
[  418.853705][ T6394] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  418.903460][ T6394] usb 2-1: device descriptor read/8, error -71
[  418.910103][ T5779] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  419.034054][ T6394] usb usb2-port1: unable to enumerate USB device
[  420.400571][ T5779] usb 3-1: device descriptor read/64, error -71
[  420.423178][ T9562] loop0: detected capacity change from 0 to 1024
[  420.685962][ T5779] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  421.323793][ T5779] usb 3-1: device descriptor read/64, error -71
[  421.842007][ T5779] usb usb3-port1: attempt power cycle
[  423.083853][    T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  423.192285][ T9590] loop2: detected capacity change from 0 to 1024
[  423.323048][    T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  423.347233][    T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64
[  423.374106][    T9] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  423.391314][    T9] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00
[  423.409899][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  423.583768][  T790] usb 2-1: new full-speed USB device number 20 using dummy_hcd
[  423.651705][ T9585] 9pnet_fd: Insufficient options for proto=fd
[  423.771400][  T790] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  423.803745][  T790] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  423.803758][ T5779] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  423.811809][  T790] usb 2-1: Product: syz
[  423.829163][  T790] usb 2-1: Manufacturer: syz
[  423.834231][  T790] usb 2-1: SerialNumber: syz
[  423.879519][  T790] usb 2-1: config 0 descriptor??
[  423.921884][    T9] cxacru 1-1:1.0: send of cm 0x91 failed (-71)
[  423.940188][    T9] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71
[  423.961562][    T9] ATM dev 0: usbatm_atm_init: atm_start failed: -71!
[  423.982138][    T9] cxacru: probe of 1-1:1.0 failed with error -71
[  424.011431][    T9] usb 1-1: USB disconnect, device number 7
[  424.075618][ T5779] usb 3-1: device descriptor read/64, error -71
[  424.368574][ T5779] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  424.575176][ T5779] usb 3-1: device descriptor read/64, error -71
[  424.810692][  T790] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  424.834350][ T5779] usb usb3-port1: attempt power cycle
[  425.284265][ T5779] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  425.402899][ T5779] usb 3-1: device descriptor read/8, error -71
[  425.693796][ T5779] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  426.195071][ T5779] usb 3-1: device descriptor read/8, error -71
[  426.336060][ T5779] usb usb3-port1: unable to enumerate USB device
[  426.562329][ T9625] loop4: detected capacity change from 0 to 1024
[  427.095659][ T9622] loop0: detected capacity change from 0 to 32768
[  427.224455][  T790] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -110
[  427.261396][ T9622] non-latin1 character 0x3ff found in JFS file name
[  427.308716][ T9622] mount with iocharset=utf8 to access
[  427.314243][ T9622] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4
[  427.314243][ T9622] 
[  427.333482][ T9622] ERROR: (device loop0): remounting filesystem as read-only
[  428.449346][ T5779] usb 2-1: USB disconnect, device number 20
[  429.295189][  T790] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  429.530139][ T9656] loop4: detected capacity change from 0 to 1024
[  429.623875][  T790] usb 2-1: device descriptor read/64, error -71
[  430.357162][  T790] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  431.214586][  T790] usb 2-1: device descriptor read/64, error -71
[  431.333932][  T790] usb usb2-port1: attempt power cycle
[  431.395436][ T5779] usb 5-1: new full-speed USB device number 8 using dummy_hcd
[  431.797239][ T5779] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  431.887756][ T5779] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  431.976170][ T5779] usb 5-1: Product: syz
[  432.018668][ T5779] usb 5-1: Manufacturer: syz
[  432.099890][ T5779] usb 5-1: SerialNumber: syz
[  432.175864][ T5779] usb 5-1: config 0 descriptor??
[  432.388733][ T5779] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  432.539899][ T9689] loop0: detected capacity change from 0 to 1024
[  434.363796][  T790] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  434.543904][  T790] usb 3-1: device descriptor read/64, error -71
[  434.668520][ T5779] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71
[  434.684091][ T5779] usb 5-1: USB disconnect, device number 8
[  435.641895][  T790] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  435.874390][  T790] usb 3-1: device descriptor read/64, error -71
[  436.078274][  T790] usb usb3-port1: attempt power cycle
[  436.201750][ T9718] loop0: detected capacity change from 0 to 1024
[  437.607518][  T790] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  437.789402][ T9732] overlayfs: failed to resolve './bus': -2
[  437.844096][  T790] usb 3-1: device not accepting address 24, error -71
[  438.558747][ T9730] loop2: detected capacity change from 0 to 131072
[  438.617082][ T9730] F2FS-fs (loop2): Invalid segment/section count (458783, 24 x 150994945)
[  438.625823][ T9730] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  438.642814][ T9730] F2FS-fs (loop2): invalid crc value
[  438.722176][ T9730] F2FS-fs (loop2): Found nat_bits in checkpoint
[  438.853775][ T9730] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  438.860907][ T9730] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  439.782576][ T9747] Bluetooth: hci0: unsupported parameter 5135
[  439.796518][ T9747] Bluetooth: hci0: unsupported parameter 8192
[  439.802768][ T9747] Bluetooth: hci0: unsupported parameter 5135
[  439.818926][ T9747] Bluetooth: hci0: unsupported parameter 8192
[  440.107093][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  440.113529][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  441.224633][ T9754] loop1: detected capacity change from 0 to 1024
[  441.278426][ T9747] loop4: detected capacity change from 0 to 32768
[  441.306347][ T9747] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.1029 (9747)
[  441.387429][ T9747] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  441.431476][ T9747] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  441.450713][ T9747] BTRFS info (device loop4): setting nodatacow, compression disabled
[  441.475623][ T9747] BTRFS info (device loop4): turning on flush-on-commit
[  441.482675][ T9747] BTRFS info (device loop4): force clearing of disk cache
[  441.500008][ T9747] BTRFS info (device loop4): turning on sync discard
[  441.507162][ T9747] BTRFS info (device loop4): turning off barriers
[  441.514103][ T9747] BTRFS info (device loop4): use no compression
[  441.520444][ T9747] BTRFS info (device loop4): disabling free space tree
[  441.550901][ T9747] BTRFS info (device loop4): enabling ssd optimizations
[  441.568171][ T9747] BTRFS info (device loop4): using spread ssd allocation scheme
[  441.729016][ T9747] BTRFS info (device loop4): rebuilding free space tree
[  441.816580][ T9747] BTRFS info (device loop4): disabling free space tree
[  441.823563][ T9747] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  441.853840][ T9747] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  441.953880][    T9] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  442.050723][ T6309] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  442.163951][    T9] usb 2-1: Using ep0 maxpacket: 32
[  442.177655][    T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  442.205326][    T9] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  442.237597][    T9] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  442.254500][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  442.284419][    T9] usb 2-1: config 0 descriptor??
[  445.107250][ T9801] loop0: detected capacity change from 0 to 1024
[  445.529039][ T9807] overlayfs: failed to resolve './bus': -2
[  445.967974][   T28] usb 2-1: USB disconnect, device number 24
[  448.598957][ T9826] loop1: detected capacity change from 0 to 32768
[  448.635811][ T9826] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1050 (9826)
[  448.739790][ T9826] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  448.750422][ T9826] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  448.759253][ T9826] BTRFS info (device loop1): use zlib compression, level 3
[  448.766602][ T9826] BTRFS info (device loop1): turning on sync discard
[  448.773311][ T9826] BTRFS info (device loop1): using free space tree
[  448.876906][ T9826] BTRFS info (device loop1): enabling ssd optimizations
[  448.890278][ T9833] loop0: detected capacity change from 0 to 1024
[  449.135684][   T27] audit: type=1800 audit(1788856010.538:39): pid=9826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1050" name="file1" dev="loop1" ino=260 res=0 errno=0
[  449.177932][  T790] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  449.305447][ T5769] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  449.391710][  T790] usb 3-1: Using ep0 maxpacket: 32
[  449.411242][  T790] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  449.562955][  T790] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  449.572752][  T790] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  449.582056][  T790] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  449.614108][  T790] usb 3-1: config 0 descriptor??
[  449.620187][ T5775] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop1 scanned by udevd (5775)
[  451.424567][ T9861] overlayfs: failed to resolve './bus': -2
[  451.754813][ T9875] loop0: detected capacity change from 0 to 1024
[  452.157816][ T9878] loop0: detected capacity change from 0 to 32768
[  452.166016][ T9878] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10
[  452.352502][ T5788] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10
[  453.328153][ T5771] usb 3-1: USB disconnect, device number 26
[  454.624729][ T9896] overlayfs: failed to resolve './bus': -2
[  454.733024][ T9905] loop0: detected capacity change from 0 to 1024
[  455.549319][ T9915] overlayfs: missing 'lowerdir'
[  458.269654][ T9929] loop2: detected capacity change from 0 to 32768
[  458.278034][ T9929] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10
[  458.378079][ T9933] overlayfs: failed to resolve './bus': -2
[  459.542671][ T5775] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  459.591895][ T9936] loop4: detected capacity change from 0 to 1024
[  460.134204][ T5771] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  460.334671][ T5771] usb 1-1: Using ep0 maxpacket: 32
[  460.826394][ T9955] overlayfs: missing 'lowerdir'
[  461.544988][ T5771] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  461.556411][ T5771] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  461.583901][ T5771] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  461.633901][ T5771] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  461.810553][ T5771] usb 1-1: config 0 descriptor??
[  462.778812][ T9971] overlayfs: failed to resolve './bus': -2
[  463.636586][ T9969] loop1: detected capacity change from 0 to 1024
[  464.508473][ T9980] loop1: detected capacity change from 0 to 32768
[  465.184092][    T8] usb 1-1: USB disconnect, device number 8
[  465.243323][ T9980] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  465.253669][ T9980] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  465.262312][ T9980] BTRFS info (device loop1): use zlib compression, level 3
[  465.269592][ T9980] BTRFS info (device loop1): turning on sync discard
[  465.276329][ T9980] BTRFS info (device loop1): using free space tree
[  466.569860][ T9980] BTRFS info (device loop1): enabling ssd optimizations
[  466.879232][   T27] audit: type=1800 audit(1788856028.278:40): pid=10011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1094" name="file1" dev="loop1" ino=260 res=0 errno=0
[  467.153703][ T5815] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  468.020625][ T5769] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  468.080747][T10021] loop2: detected capacity change from 0 to 1024
[  468.095790][ T5815] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  468.123049][ T5815] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  468.154140][ T5815] usb 5-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01
[  468.187478][ T5815] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  468.196588][ T5815] usb 5-1: Product: syz
[  468.200874][ T5815] usb 5-1: Manufacturer: syz
[  468.205859][ T5815] usb 5-1: SerialNumber: syz
[  468.245697][ T5815] ums-karma 5-1:1.0: USB Mass Storage device detected
[  468.280014][ T5815] ums-karma 5-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller)
[  468.280014][ T5815]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[  468.452187][ T5815] usb 5-1: USB disconnect, device number 9
[  468.623843][ T5771] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  469.985749][ T5771] usb 3-1: Using ep0 maxpacket: 32
[  470.008184][ T5771] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[  470.023900][ T5771] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  470.033026][ T5771] usb 3-1: Product: syz
[  470.050372][ T5771] usb 3-1: Manufacturer: syz
[  470.056987][ T5771] usb 3-1: SerialNumber: syz
[  470.074794][ T5771] usb 3-1: config 0 descriptor??
[  470.086773][ T5771] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[  470.101674][ T5771] dvb-usb: bulk message failed: -22 (4/0)
[  470.107909][ T5771] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  470.118799][ T5771] dvb-usb: bulk message failed: -22 (5/0)
[  470.129394][ T5771] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  470.148442][ T5814] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  470.162906][ T5771] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  470.178706][ T5771] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[  470.187323][ T5771] usb 3-1: media controller created
[  470.220489][ T5771] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  470.260442][ T5771] usb 3-1: selecting invalid altsetting 3
[  470.266878][ T5771] ttusb2: set interface to alts=3 failed
[  470.290937][T10025] dvb-usb: bulk message failed: -22 (7/0)
[  470.297307][T10025] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0)
[  470.313410][T10025] ttusb2: i2c transfer failed.
[  470.337630][ T5771] DVB: Unable to find symbol tda10086_attach()
[  470.345744][ T5771] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[  470.354003][ T5814] usb 2-1: Using ep0 maxpacket: 32
[  470.360186][ T5771] dvb-usb: bulk message failed: -22 (4/0)
[  470.367393][ T5771] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  470.368596][ T5814] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  470.389196][ T5771] dvb-usb: bulk message failed: -22 (5/0)
[  470.395252][ T5771] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  470.405552][ T5771] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[  470.414586][ T5814] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  470.443997][ T5771] usb 3-1: USB disconnect, device number 27
[  470.450145][ T5814] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  470.480822][ T5814] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  470.516863][ T5814] usb 2-1: config 0 descriptor??
[  470.531324][ T5814] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  470.558640][ T5771] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[  470.782837][T10044] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[  470.791665][T10044] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[  470.800639][T10044] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[  470.924935][ T5771] IPVS: starting estimator thread 0...
[  471.075534][T10046] IPVS: using max 18 ests per chain, 43200 per kthread
[  471.745615][T10053] loop0: detected capacity change from 0 to 512
[  471.798001][ T5775] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  471.983235][T10055] loop2: detected capacity change from 0 to 256
[  472.138178][T10060] loop0: detected capacity change from 0 to 1024
[  472.950523][ T5815] usb 2-1: USB disconnect, device number 25
[  473.111620][T10066] kAFS: Invalid Command on /proc/fs/afs/cells file
[  477.083777][ T5814] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  477.293689][ T5814] usb 1-1: Using ep0 maxpacket: 32
[  477.491203][ T5814] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  477.507703][ T5814] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  477.521217][ T5814] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  477.530678][ T5814] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  477.540503][ T5814] usb 1-1: config 0 descriptor??
[  477.551071][ T5814] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  477.778348][T10108] loop4: detected capacity change from 0 to 1024
[  479.878484][ T5815] usb 1-1: USB disconnect, device number 9
[  483.153024][T10148] loop0: detected capacity change from 0 to 1024
[  484.046750][T10159] loop4: detected capacity change from 0 to 4096
[  484.057660][T10159] EXT4-fs: Ignoring removed nobh option
[  484.065030][T10159] EXT4-fs: Ignoring removed bh option
[  484.079029][T10159] EXT4-fs (loop4): Test dummy encryption mode enabled
[  484.116471][T10159] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  484.514200][T10159] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[  484.565742][T10173] vxcan0: tx drop: invalid da for name 0x00000000000000c8
[  484.714267][ T6309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  485.523786][    T8] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  485.636644][T10182] FAULT_INJECTION: forcing a failure.
[  485.636644][T10182] name failslab, interval 1, probability 0, space 0, times 0
[  485.649380][T10182] CPU: 1 PID: 10182 Comm: syz.4.1150 Not tainted syzkaller #0
[  485.656871][T10182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  485.666952][T10182] Call Trace:
[  485.670254][T10182]  <TASK>
[  485.673210][T10182]  dump_stack_lvl+0x18c/0x250
[  485.677934][T10182]  ? show_regs_print_info+0x20/0x20
[  485.683164][T10182]  ? load_image+0x420/0x420
[  485.687705][T10182]  ? __might_sleep+0xe0/0xe0
[  485.692334][T10182]  ? __lock_acquire+0x7d80/0x7d80
[  485.697391][T10182]  should_fail_ex+0x394/0x4c0
[  485.702088][T10182]  should_failslab+0x9/0x20
[  485.706603][T10182]  slab_pre_alloc_hook+0x59/0x300
[  485.711643][T10182]  kmem_cache_alloc+0x5a/0x2c0
[  485.716412][T10182]  ? security_file_alloc+0x34/0x120
[  485.721620][T10182]  security_file_alloc+0x34/0x120
[  485.726648][T10182]  init_file+0x94/0x1f0
[  485.730809][T10182]  alloc_empty_file+0xb7/0x1d0
[  485.735570][T10182]  alloc_file+0x5b/0x600
[  485.739813][T10182]  alloc_file_pseudo+0x184/0x210
[  485.744768][T10182]  ? fput+0x1a0/0x1a0
[  485.748762][T10182]  ? _raw_spin_unlock+0x28/0x40
[  485.753623][T10182]  anon_inode_getfd+0xca/0x1c0
[  485.758398][T10182]  __se_sys_fsopen+0x22d/0x2c0
[  485.763170][T10182]  do_syscall_64+0x55/0xb0
[  485.767587][T10182]  ? clear_bhb_loop+0x40/0x90
[  485.772286][T10182]  ? clear_bhb_loop+0x40/0x90
[  485.776965][T10182]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  485.782858][T10182] RIP: 0033:0x7f892b79e159
[  485.787281][T10182] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  485.806900][T10182] RSP: 002b:00007f892c618028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae
[  485.815326][T10182] RAX: ffffffffffffffda RBX: 00007f892ba25fa0 RCX: 00007f892b79e159
[  485.823295][T10182] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080
[  485.831263][T10182] RBP: 00007f892b835024 R08: 0000000000000000 R09: 0000000000000000
[  485.839233][T10182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  485.847204][T10182] R13: 00007f892ba26038 R14: 00007f892ba25fa0 R15: 00007ffcfcc1a1e8
[  485.855270][T10182]  </TASK>
[  485.897163][    T8] usb 3-1: Using ep0 maxpacket: 32
[  485.907280][    T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  485.918943][    T8] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  486.008970][T10187] loop0: detected capacity change from 0 to 1024
[  487.199650][    T8] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  487.208921][    T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  487.219363][    T8] usb 3-1: config 0 descriptor??
[  487.226890][    T8] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  487.449654][    T8] usb 3-1: USB disconnect, device number 28
[  488.979535][T10215] loop1: detected capacity change from 0 to 1024
[  490.786953][    T9] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  491.226483][    T9] usb 3-1: Using ep0 maxpacket: 8
[  491.257556][    T9] usb 3-1: config index 0 descriptor too short (expected 30, got 18)
[  491.313198][    T9] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  491.327500][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  491.342994][    T9] usb 3-1: Product: syz
[  491.357515][    T9] usb 3-1: Manufacturer: syz
[  491.371292][    T9] usb 3-1: SerialNumber: syz
[  491.401416][    T9] usb 3-1: config 0 descriptor??
[  491.418171][    T9] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  491.433685][    T9] usb 3-1: setting power ON
[  491.444518][    T9] dvb-usb: bulk message failed: -22 (2/0)
[  491.510730][    T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  491.544867][    T9] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  491.572490][    T9] usb 3-1: media controller created
[  491.619977][T10212] dvb-usb: bulk message failed: -22 (4/0)
[  491.647332][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  491.714602][T10212] cxusb: i2c read failed
[  491.727941][    T9] usb 3-1: selecting invalid altsetting 6
[  491.958266][    T9] usb 3-1: digital interface selection failed (-22)
[  491.966336][    T9] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  491.979901][    T9] usb 3-1: setting power OFF
[  491.994094][    T9] dvb-usb: bulk message failed: -22 (2/0)
[  492.109989][    T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  492.122376][    T9] (NULL device *): no alternate interface
[  492.443594][    T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  492.468015][    T9] usb 3-1: USB disconnect, device number 29
[  493.005833][T10248] sch_tbf: peakrate 5 is lower than or equals to rate 5 !
[  495.488336][   T27] audit: type=1807 audit(1788856056.878:41): UNKNOWN=? res=0
[  495.499292][T10277] ima: policy update failed
[  495.529098][   T27] audit: type=1802 audit(1788856056.898:42): pid=10278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.4.1182" res=0 errno=0
[  495.619801][   T27] audit: type=1802 audit(1788856056.928:43): pid=10277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.1182" res=0 errno=0
[  495.898058][T10282] loop0: detected capacity change from 0 to 32768
[  495.907641][T10282] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1183 (10282)
[  495.968886][T10282] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  495.979164][T10282] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  495.987867][T10282] BTRFS info (device loop0): use zlib compression, level 3
[  495.995113][T10282] BTRFS info (device loop0): turning on sync discard
[  496.001775][T10282] BTRFS info (device loop0): using free space tree
[  496.172257][T10282] BTRFS info (device loop0): enabling ssd optimizations
[  496.426161][   T27] audit: type=1800 audit(1788856057.808:44): pid=10308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1183" name="file1" dev="loop0" ino=260 res=0 errno=0
[  497.600480][ T5770] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  497.696012][T10312] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  501.577845][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  501.593583][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  503.539168][T10353] overlayfs: missing 'lowerdir'
[  506.937032][T10385] overlayfs: missing 'lowerdir'
[  508.596174][T10394] sg_write: data in/out 270400/136 bytes for SCSI command 0x0-- guessing data in;
[  508.596174][T10394]    program syz.2.1214 not setting count and/or reply_len properly
[  510.954900][T10410] overlayfs: missing 'lowerdir'
[  513.000109][T10423] loop0: detected capacity change from 0 to 4096
[  513.201566][T10423] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  513.313269][T10423] ntfs3: loop0: Failed to load $Extend (-22).
[  513.342022][T10423] ntfs3: loop0: Failed to initialize $Extend.
[  513.584051][   T28] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  513.723816][ T5771] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  513.824013][   T28] usb 2-1: Using ep0 maxpacket: 32
[  513.921117][   T28] usb 2-1: unable to get BOS descriptor or descriptor too short
[  513.991869][ T5771] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  514.064758][ T5771] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  514.080374][ T5771] usb 5-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00
[  514.089914][ T5771] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  514.107862][ T5771] usb-storage 5-1:1.0: USB Mass Storage device detected
[  514.147230][   T62] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222  rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery"
[  514.181102][   T28] usb 2-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice= 0.40
[  514.196806][   T62] (NULL device *): queue 0 connect admin queue failed (-111).
[  514.208613][   T28] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  514.218966][   T62] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111)
[  514.231697][   T28] usb 2-1: Product: syz
[  514.237335][   T62] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds
[  514.244993][   T28] usb 2-1: Manufacturer: syz
[  514.249718][   T28] usb 2-1: SerialNumber: syz
[  514.258370][T10423] nvme nvme0: NVME-FC{0}: new ctrl: NQN "nqn.2014-08.org.nvmexpress.discovery"
[  514.400875][ T5771] usb 5-1: USB disconnect, device number 10
[  515.295900][T10445] overlayfs: missing 'lowerdir'
[  515.342949][   T28] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  515.502699][   T28] usb 2-1: USB disconnect, device number 26
[  515.831491][T10449] loop2: detected capacity change from 0 to 32768
[  515.839770][T10449] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1230 (10449)
[  515.872159][T10449] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  515.882428][T10449] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  515.891283][T10449] BTRFS info (device loop2): use zlib compression, level 3
[  515.898585][T10449] BTRFS info (device loop2): turning on sync discard
[  515.905330][T10449] BTRFS info (device loop2): using free space tree
[  516.032080][T10449] BTRFS info (device loop2): enabling ssd optimizations
[  516.267854][   T62] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222  rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery"
[  516.727916][   T62] (NULL device *): queue 0 connect admin queue failed (-111).
[  516.733691][   T27] audit: type=1800 audit(1788856077.778:45): pid=10471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1230" name="file1" dev="loop2" ino=260 res=0 errno=0
[  516.736460][   T62] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111)
[  516.768019][   T62] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds
[  516.890474][ T6228] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  516.932259][T10474] loop1: detected capacity change from 0 to 512
[  517.050335][T10474] EXT4-fs: test_dummy_encryption requires encrypt feature
[  517.852388][T10473] ima: policy update failed
[  518.248050][   T27] audit: type=1807 audit(1788856079.048:46): UNKNOWN=? res=0
[  518.291580][   T27] audit: type=1802 audit(1788856079.048:47): pid=10477 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.1.1235" res=0 errno=0
[  518.433088][   T27] audit: type=1802 audit(1788856079.258:48): pid=10473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.1235" res=0 errno=0
[  518.799576][T10488] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0)
[  518.814309][T10488] rtrs_client L2075: <s+>: Failed to resolve address, err: -19
[  518.822474][T10488] rtrs_client L2618: <s+>: init_conns() failed: err=-19 path=<invalid address family>@ip:127.0.0.1 [:0]
[  518.881946][   T11] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222  rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery"
[  519.122537][   T11] (NULL device *): queue 0 connect admin queue failed (-111).
[  519.281872][   T11] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111)
[  519.455947][   T11] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds
[  520.655184][T10493] overlayfs: missing 'lowerdir'
[  521.409969][T10492] loop2: detected capacity change from 0 to 32768
[  521.429974][T10492] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1239 (10492)
[  521.626433][ T3437] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222  rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery"
[  521.956232][ T3437] (NULL device *): queue 0 connect admin queue failed (-111).
[  522.043223][ T3437] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111)
[  522.075055][ T3437] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds
[  522.143098][T10492] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  522.196471][T10492] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  522.226054][T10492] BTRFS info (device loop2): use zlib compression, level 3
[  522.233333][T10492] BTRFS info (device loop2): turning on sync discard
[  522.266765][T10492] BTRFS info (device loop2): using free space tree
[  523.434035][T10492] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR
[  523.434485][T10492] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR
[  523.493691][T10492] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR
[  523.504413][T10492] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR
[  523.516052][T10492] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR
[  523.526917][T10492] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR
[  523.546181][T10492] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR
[  523.564698][T10492] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR
[  523.595419][T10492] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[  523.671890][T10492] BTRFS error (device loop2): open_ctree failed: -12
[  524.103772][   T12] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222  rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery"
[  524.125374][   T12] (NULL device *): queue 0 connect admin queue failed (-111).
[  524.133040][   T12] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111)
[  524.145411][   T12] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds
[  525.764256][T10534] overlayfs: missing 'lowerdir'
[  527.137690][   T62] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222  rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery"
[  527.269532][T10544] loop0: detected capacity change from 0 to 2048
[  527.320802][T10544] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  527.435157][   T62] (NULL device *): queue 0 connect admin queue failed (-111).
[  527.583379][   T62] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111)
[  527.653960][   T62] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds
[  528.465101][T10554] loop0: detected capacity change from 0 to 32768
[  528.562792][T10554] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  528.848829][T10550] loop1: detected capacity change from 0 to 32768
[  528.913036][T10550] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1255 (10550)
[  528.944712][T10558] 
[  528.947082][T10558] ======================================================
[  528.954109][T10558] WARNING: possible circular locking dependency detected
[  528.961146][T10558] syzkaller #0 Not tainted
[  528.965564][T10558] ------------------------------------------------------
[  528.972586][T10558] syz.0.1257/10558 is trying to acquire lock:
[  528.978658][T10558] ffff8880773289d8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x171/0x44a0
[  528.991922][T10558] 
[  528.991922][T10558] but task is already holding lock:
[  528.999288][T10558] ffff88805d1231b8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x495/0x13a0
[  529.008809][T10558] 
[  529.008809][T10558] which lock already depends on the new lock.
[  529.008809][T10558] 
[  529.019229][T10558] 
[  529.019229][T10558] the existing dependency chain (in reverse order) is:
[  529.028256][T10558] 
[  529.028256][T10558] -> #4 (&oi->ip_xattr_sem){++++}-{3:3}:
[  529.036095][T10558]        down_read+0x46/0x2e0
[  529.040793][T10558]        ocfs2_init_acl+0x30a/0x770
[  529.046008][T10558]        ocfs2_mknod+0x1427/0x2310
[  529.051144][T10558]        ocfs2_mkdir+0x196/0x430
[  529.056103][T10558]        vfs_mkdir+0x2a5/0x470
[  529.060878][T10558]        do_mkdirat+0x1dc/0x450
[  529.065762][T10558]        __x64_sys_mkdirat+0x89/0xa0
[  529.071057][T10558]        do_syscall_64+0x55/0xb0
[  529.076017][T10558]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  529.082441][T10558] 
[  529.082441][T10558] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}:
[  529.090969][T10558]        down_read+0x46/0x2e0
[  529.095672][T10558]        ocfs2_start_trans+0x3a8/0x6f0
[  529.101144][T10558]        ocfs2_reserve_suballoc_bits+0x7a5/0x44a0
[  529.107572][T10558]        ocfs2_reserve_new_metadata_blocks+0x416/0x9a0
[  529.114437][T10558]        ocfs2_extend_dir+0xd3c/0x49b0
[  529.119915][T10558]        ocfs2_prepare_dir_for_insert+0x30e7/0x5520
[  529.126618][T10558]        ocfs2_mknod+0x831/0x2310
[  529.131655][T10558]        ocfs2_mkdir+0x196/0x430
[  529.136600][T10558]        vfs_mkdir+0x2a5/0x470
[  529.141369][T10558]        do_mkdirat+0x1dc/0x450
[  529.146226][T10558]        __x64_sys_mkdirat+0x89/0xa0
[  529.151521][T10558]        do_syscall_64+0x55/0xb0
[  529.156469][T10558]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  529.162894][T10558] 
[  529.162894][T10558] -> #2 (sb_internal#3){.+.+}-{0:0}:
[  529.170390][T10558]        ocfs2_start_trans+0x2a9/0x6f0
[  529.175863][T10558]        ocfs2_reserve_suballoc_bits+0x7a5/0x44a0
[  529.182292][T10558]        ocfs2_reserve_new_metadata_blocks+0x416/0x9a0
[  529.189157][T10558]        ocfs2_extend_dir+0xd3c/0x49b0
[  529.194632][T10558]        ocfs2_prepare_dir_for_insert+0x30e7/0x5520
[  529.201234][T10558]        ocfs2_mknod+0x831/0x2310
[  529.206271][T10558]        ocfs2_mkdir+0x196/0x430
[  529.211213][T10558]        vfs_mkdir+0x2a5/0x470
[  529.215996][T10558]        do_mkdirat+0x1dc/0x450
[  529.220860][T10558]        __x64_sys_mkdirat+0x89/0xa0
[  529.226175][T10558]        do_syscall_64+0x55/0xb0
[  529.231126][T10558]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  529.237550][T10558] 
[  529.237550][T10558] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}:
[  529.248088][T10558]        down_write+0x97/0x200
[  529.252872][T10558]        ocfs2_reserve_suballoc_bits+0x171/0x44a0
[  529.259305][T10558]        ocfs2_reserve_clusters_with_limit+0x3bd/0xc20
[  529.266170][T10558]        ocfs2_reserve_suballoc_bits+0x783/0x44a0
[  529.272598][T10558]        ocfs2_reserve_new_metadata_blocks+0x416/0x9a0
[  529.279460][T10558]        ocfs2_extend_dir+0xd3c/0x49b0
[  529.284934][T10558]        ocfs2_prepare_dir_for_insert+0x30e7/0x5520
[  529.291546][T10558]        ocfs2_mknod+0x831/0x2310
[  529.296582][T10558]        ocfs2_mkdir+0x196/0x430
[  529.301523][T10558]        vfs_mkdir+0x2a5/0x470
[  529.306294][T10558]        do_mkdirat+0x1dc/0x450
[  529.311177][T10558]        __x64_sys_mkdirat+0x89/0xa0
[  529.316466][T10558]        do_syscall_64+0x55/0xb0
[  529.321415][T10558]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  529.327844][T10558] 
[  529.327844][T10558] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2){+.+.}-{3:3}:
[  529.338374][T10558]        __lock_acquire+0x37ef/0x7d80
[  529.343756][T10558]        lock_acquire+0x19e/0x420
[  529.348792][T10558]        down_write+0x97/0x200
[  529.353566][T10558]        ocfs2_reserve_suballoc_bits+0x171/0x44a0
[  529.359998][T10558]        ocfs2_reserve_new_metadata_blocks+0x416/0x9a0
[  529.366861][T10558]        ocfs2_init_xattr_set_ctxt+0x30b/0x710
[  529.373108][T10558]        ocfs2_xattr_set+0xc75/0x13a0
[  529.378489][T10558]        __vfs_setxattr+0x437/0x470
[  529.383697][T10558]        __vfs_setxattr_noperm+0x12a/0x5e0
[  529.389512][T10558]        vfs_setxattr+0x16b/0x2f0
[  529.394544][T10558]        path_setxattr+0x33a/0x590
[  529.399670][T10558]        __x64_sys_setxattr+0xbb/0xd0
[  529.405053][T10558]        do_syscall_64+0x55/0xb0
[  529.409997][T10558]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  529.416419][T10558] 
[  529.416419][T10558] other info that might help us debug this:
[  529.416419][T10558] 
[  529.426652][T10558] Chain exists of:
[  529.426652][T10558]   &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2 --> &journal->j_trans_barrier --> &oi->ip_xattr_sem
[  529.426652][T10558] 
[  529.443623][T10558]  Possible unsafe locking scenario:
[  529.443623][T10558] 
[  529.451074][T10558]        CPU0                    CPU1
[  529.456440][T10558]        ----                    ----
[  529.461804][T10558]   lock(&oi->ip_xattr_sem);
[  529.466401][T10558]                                lock(&journal->j_trans_barrier);
[  529.474213][T10558]                                lock(&oi->ip_xattr_sem);
[  529.481327][T10558]   lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2);
[  529.488624][T10558] 
[  529.488624][T10558]  *** DEADLOCK ***
[  529.488624][T10558] 
[  529.496766][T10558] 3 locks held by syz.0.1257/10558:
[  529.501967][T10558]  #0: ffff8880660f8418 (sb_writers#18){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  529.511232][T10558]  #1: ffff88805d123498 (&sb->s_type->i_mutex_key#23){+.+.}-{3:3}, at: vfs_setxattr+0x144/0x2f0
[  529.521729][T10558]  #2: ffff88805d1231b8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x495/0x13a0
[  529.531672][T10558] 
[  529.531672][T10558] stack backtrace:
[  529.537563][T10558] CPU: 0 PID: 10558 Comm: syz.0.1257 Not tainted syzkaller #0
[  529.545030][T10558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  529.555091][T10558] Call Trace:
[  529.558392][T10558]  <TASK>
[  529.561330][T10558]  dump_stack_lvl+0x18c/0x250
[  529.566027][T10558]  ? load_image+0x420/0x420
[  529.570539][T10558]  ? show_regs_print_info+0x20/0x20
[  529.575754][T10558]  ? print_circular_bug+0x12b/0x1a0
[  529.580969][T10558]  check_noncircular+0x2fc/0x400
[  529.585929][T10558]  ? print_deadlock_bug+0x5d0/0x5d0
[  529.591140][T10558]  ? lockdep_lock+0xf5/0x230
[  529.595742][T10558]  ? _find_first_zero_bit+0xd6/0x100
[  529.601045][T10558]  __lock_acquire+0x37ef/0x7d80
[  529.605907][T10558]  ? verify_lock_unused+0x140/0x140
[  529.611131][T10558]  ? stack_trace_snprint+0xf0/0xf0
[  529.616253][T10558]  ? check_noncircular+0x18a/0x400
[  529.621376][T10558]  ? verify_lock_unused+0x140/0x140
[  529.626588][T10558]  ? igrab+0x8b/0xa0
[  529.630494][T10558]  ? __lock_acquire+0x7d80/0x7d80
[  529.635540][T10558]  ? do_raw_spin_lock+0x11f/0x2b0
[  529.640582][T10558]  lock_acquire+0x19e/0x420
[  529.645095][T10558]  ? ocfs2_reserve_suballoc_bits+0x171/0x44a0
[  529.651178][T10558]  ? _raw_spin_unlock+0x28/0x40
[  529.656040][T10558]  ? ocfs2_get_system_file_inode+0x1f9/0x820
[  529.662029][T10558]  ? __might_sleep+0xe0/0xe0
[  529.666631][T10558]  ? read_lock_is_recursive+0x20/0x20
[  529.672015][T10558]  ? ocfs2_fast_symlink_read_folio+0x550/0x550
[  529.678178][T10558]  ? verify_lock_unused+0x140/0x140
[  529.683387][T10558]  ? check_noncircular+0x18a/0x400
[  529.688510][T10558]  down_write+0x97/0x200
[  529.692766][T10558]  ? ocfs2_reserve_suballoc_bits+0x171/0x44a0
[  529.698847][T10558]  ? down_read_killable+0x340/0x340
[  529.704062][T10558]  ? deref_stack_reg+0x1ab/0x230
[  529.709005][T10558]  ocfs2_reserve_suballoc_bits+0x171/0x44a0
[  529.714916][T10558]  ? mark_lock+0x94/0x320
[  529.719261][T10558]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  529.725248][T10558]  ? __lock_acquire+0x7d80/0x7d80
[  529.730290][T10558]  ? lock_chain_count+0x20/0x20
[  529.735154][T10558]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  529.741057][T10558]  ? lockdep_hardirqs_on+0x98/0x150
[  529.746269][T10558]  ? ocfs2_block_group_search+0x470/0x470
[  529.752000][T10558]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  529.757903][T10558]  ? _raw_spin_unlock+0x40/0x40
[  529.762771][T10558]  ? stack_trace_save+0xaa/0x100
[  529.767719][T10558]  ? stack_trace_snprint+0xf0/0xf0
[  529.772845][T10558]  ? __stack_depot_save+0x575/0x660
[  529.778053][T10558]  ? kasan_set_track+0x5f/0x70
[  529.782824][T10558]  ? kasan_set_track+0x4e/0x70
[  529.787595][T10558]  ? __kasan_kmalloc+0x8f/0xa0
[  529.792368][T10558]  ? ocfs2_reserve_new_metadata_blocks+0x10d/0x9a0
[  529.798890][T10558]  ? ocfs2_init_xattr_set_ctxt+0x30b/0x710
[  529.804710][T10558]  ? ocfs2_xattr_set+0xc75/0x13a0
[  529.809745][T10558]  ? __vfs_setxattr+0x437/0x470
[  529.814610][T10558]  ? __vfs_setxattr_noperm+0x12a/0x5e0
[  529.820084][T10558]  ? vfs_setxattr+0x16b/0x2f0
[  529.824776][T10558]  ? path_setxattr+0x33a/0x590
[  529.829551][T10558]  ? __x64_sys_setxattr+0xbb/0xd0
[  529.834598][T10558]  ? do_syscall_64+0x55/0xb0
[  529.839233][T10558]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  529.845345][T10558]  ocfs2_reserve_new_metadata_blocks+0x416/0x9a0
[  529.851709][T10558]  ? ocfs2_init_steal_slots+0x160/0x160
[  529.857275][T10558]  ? ocfs2_xattr_block_set+0x2dc0/0x2dc0
[  529.862938][T10558]  ocfs2_init_xattr_set_ctxt+0x30b/0x710
[  529.868589][T10558]  ? _raw_spin_unlock+0x28/0x40
[  529.873455][T10558]  ? ocfs2_prepare_refcount_xattr+0xff0/0xff0
[  529.879601][T10558]  ? ocfs2_truncate_log_needs_flush+0x130/0x310
[  529.885885][T10558]  ? ocfs2_remove_btree_range+0x15e0/0x15e0
[  529.891795][T10558]  ? down_write+0x16e/0x200
[  529.896318][T10558]  ? down_read_killable+0x340/0x340
[  529.901521][T10558]  ? up_write+0x1be/0x410
[  529.905863][T10558]  ocfs2_xattr_set+0xc75/0x13a0
[  529.910748][T10558]  ? __ocfs2_xattr_set_handle+0xf30/0xf30
[  529.916492][T10558]  ? __lock_acquire+0x7d80/0x7d80
[  529.921527][T10558]  ? do_raw_spin_lock+0x11f/0x2b0
[  529.926573][T10558]  ? ocfs2_inode_unlock_tracker+0x270/0x2e0
[  529.932473][T10558]  ? __rwlock_init+0x150/0x150
[  529.937243][T10558]  ? do_raw_spin_unlock+0x121/0x230
[  529.942444][T10558]  ? put_pid+0xde/0x120
[  529.946604][T10558]  ? ocfs2_xattr_user_set+0xab/0xf0
[  529.951802][T10558]  ? ocfs2_xattr_user_get+0xe0/0xe0
[  529.957002][T10558]  __vfs_setxattr+0x437/0x470
[  529.961684][T10558]  __vfs_setxattr_noperm+0x12a/0x5e0
[  529.966976][T10558]  vfs_setxattr+0x16b/0x2f0
[  529.971478][T10558]  ? xattr_permission+0x460/0x460
[  529.976499][T10558]  ? __mnt_want_write+0x223/0x2a0
[  529.981527][T10558]  ? path_setxattr+0x2ec/0x590
[  529.986295][T10558]  path_setxattr+0x33a/0x590
[  529.990886][T10558]  ? simple_xattrs_free+0x150/0x150
[  529.996096][T10558]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  530.002080][T10558]  ? lock_chain_count+0x20/0x20
[  530.006929][T10558]  __x64_sys_setxattr+0xbb/0xd0
[  530.011778][T10558]  do_syscall_64+0x55/0xb0
[  530.016191][T10558]  ? clear_bhb_loop+0x40/0x90
[  530.020865][T10558]  ? clear_bhb_loop+0x40/0x90
[  530.025538][T10558]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  530.031432][T10558] RIP: 0033:0x7fc50a39e159
[  530.035841][T10558] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  530.055449][T10558] RSP: 002b:00007fc50b26e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc
[  530.063863][T10558] RAX: ffffffffffffffda RBX: 00007fc50a626180 RCX: 00007fc50a39e159
[  530.071826][T10558] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000200000000340
[  530.079792][T10558] RBP: 00007fc50a435024 R08: 0000000000000000 R09: 0000000000000000
[  530.087758][T10558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  530.095722][T10558] R13: 00007fc50a626218 R14: 00007fc50a626180 R15: 00007ffecb5b0098
[  530.103697][T10558]  </TASK>
[  530.147033][ T1147] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222  rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery"
[  530.184018][ T1147] (NULL device *): queue 0 connect admin queue failed (-111).
[  530.198928][ T1147] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111)
[  530.215060][ T1147] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds
[  530.229555][T10550] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  530.257101][T10550] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  530.269737][T10550] BTRFS info (device loop1): use zlib compression, level 3
[  530.289118][T10550] BTRFS info (device loop1): turning on sync discard
[  530.297097][T10550] BTRFS info (device loop1): using free space tree
[  530.358464][T10550] BTRFS info (device loop1): enabling ssd optimizations
[  530.543703][ T5815] usb 5-1: new full-speed USB device number 11 using dummy_hcd
[  530.737180][ T5815] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  530.750754][ T5815] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  530.761434][ T5815] usb 5-1: Product: syz
[  530.769259][ T5815] usb 5-1: Manufacturer: syz
[  530.774831][ T5815] usb 5-1: SerialNumber: syz
[  530.792822][ T5770] ocfs2: Unmounting device (7,0) on (node local)
[  530.801168][ T5815] usb 5-1: config 0 descriptor??
[  530.892121][   T27] audit: type=1800 audit(1788856092.288:49): pid=10580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1255" name="file1" dev="loop1" ino=260 res=0 errno=0
[  531.046568][ T5815] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  531.084660][ T5769] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  532.264046][ T4297] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222  rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery"
[  532.280542][ T4297] (NULL device *): queue 0 connect admin queue failed (-111).
[  532.288112][ T4297] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111)
[  532.296126][ T4297] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds
[  532.468550][ T5815] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71
[  532.477637][ T5815] usb 5-1: USB disconnect, device number 11
[  534.353759][ T2892] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222  rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery"
[  534.370063][ T2892] (NULL device *): queue 0 connect admin queue failed (-111).
[  534.377618][ T2892] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111)
[  534.385475][ T2892] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds
[  536.424009][   T11] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222  rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery"
[  536.439996][   T11] (NULL device *): queue 0 connect admin queue failed (-111).
[  536.447498][   T11] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111)
[  536.455248][   T11] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds
[  538.504104][ T2892] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222  rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery"
[  538.520377][ T2892] (NULL device *): queue 0 connect admin queue failed (-111).
[  538.529161][ T2892] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111)
[  538.537330][ T2892] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds