last executing test programs:

31.68708481s ago: executing program 0 (id=767):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYRES32=0x0], 0x1, 0x5505, &(0x7f0000002480)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x275a, 0x0)
mmap(&(0x7f000048a000/0x1000)=nil, 0x1000, 0x2, 0x12, r0, 0x0)
ftruncate(r0, 0xc17a)
ftruncate(r0, 0x84)

30.358720252s ago: executing program 0 (id=781):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310002000015000300686173683a69702c706f72742c6e6574000000"], 0x5c}}, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0xc0c1)
r1 = socket$netlink(0x10, 0x3, 0xc)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)

28.737643767s ago: executing program 0 (id=783):
r0 = io_uring_setup(0x1f8c, &(0x7f00000003c0)={0x0, 0x8c63b, 0x1, 0x0, 0xb6})
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x8000000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
io_uring_enter(r0, 0x0, 0x2, 0xf, &(0x7f0000000000), 0x18)

27.624543008s ago: executing program 0 (id=787):
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x2800010, &(0x7f0000000940)=ANY=[@ANYBLOB="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", @ANYRES8], 0x3, 0x230, &(0x7f00000006c0)="$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")
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)

27.331239722s ago: executing program 0 (id=790):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f0000002380)=ANY=[], 0x104a)

26.794117357s ago: executing program 0 (id=795):
syz_mount_image$nilfs2(&(0x7f0000000140), &(0x7f0000000f00)='./file1\x00', 0x208800, &(0x7f0000003100)=ANY=[], 0x2, 0xf04, &(0x7f0000001e80)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
fcntl$setlease(r0, 0x400, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)

26.390216416s ago: executing program 32 (id=795):
syz_mount_image$nilfs2(&(0x7f0000000140), &(0x7f0000000f00)='./file1\x00', 0x208800, &(0x7f0000003100)=ANY=[], 0x2, 0xf04, &(0x7f0000001e80)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
fcntl$setlease(r0, 0x400, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)

5.419725409s ago: executing program 1 (id=897):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="04000000040000000400000010"], 0x50)
close(0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="18120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7030000f2717ca8bfa400000000000007040000f8ffffffb705000000000000850000001900000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x0, 0xe, 0x300, &(0x7f00000002c0)="f57b0bb7994307a7ac95a7c71016", 0x0, 0x1000000, 0x0, 0x0, 0x38, 0x0, &(0x7f0000000180)="b8"}, 0x3a)

4.076891371s ago: executing program 1 (id=903):
r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0)
ioctl$CEC_ADAP_S_PHYS_ADDR(r0, 0x40026102, &(0x7f0000000040)=0x1000)
ioctl$CEC_DQEVENT(r0, 0xc0506107, 0x0)
ioctl$CEC_DQEVENT(r0, 0xc0506107, &(0x7f0000000100)={0x0, 0x0, 0x0, @raw})
ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000180)=0xd0)

4.050135932s ago: executing program 4 (id=904):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0)
syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x400a8, &(0x7f0000000380)=ANY=[], 0x5, 0x0, 0x0)
symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
syz_mount_image$iso9660(&(0x7f0000000700), &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYRES8=0x0, @ANYRES64=0x0, @ANYRES8=0x0, @ANYRES32, @ANYRES8=0x0, @ANYRESOCT=0x0, @ANYRESHEX=0x0, @ANYRESOCT], 0x1, 0x404, &(0x7f00000007c0)="$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")

3.903372539s ago: executing program 2 (id=905):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r0, 0xffffffffffffffff, 0x0)

3.88335189s ago: executing program 5 (id=906):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x2}, 0x6)
recvmmsg(r0, &(0x7f0000000580)=[{{&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000100)=""/230, 0xe6}, {&(0x7f0000000240)=""/200, 0xc8}, {&(0x7f0000000340)=""/175, 0xaf}, {&(0x7f0000000400)=""/53, 0x35}, {&(0x7f0000000440)=""/119, 0x77}], 0x5, &(0x7f0000000540)=""/55, 0x37}}], 0x400000000000222, 0x0, 0x0)
r1 = dup2(r0, r0)
sendmsg$AUDIT_USER_TTY(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x10, 0x464, 0x300, 0x70bd27, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)

3.762379286s ago: executing program 3 (id=907):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x3, 0xff, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x40)

3.610997543s ago: executing program 4 (id=908):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0xe38, @remote, 0x6}}, 0x0, 0x0, 0x4c, 0x0, "2e58c49f3b17e89fd787ce327eabc9f3380a912ff389626729df3b9445f60f55e71be605729840ba239c8e297d7b181196a599f0fcb6300e62a23fa76965b44ffcf3f6e58b9eff83108b8a7554343532"}, 0xd8)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
syz_emit_ethernet(0x3e, &(0x7f0000000200)={@local, @empty, @val={@val={0x88a8, 0x0, 0x0, 0x3}, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x21, 0x28, 0x64, 0x0, 0x4, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x40, 0x0, 0xe7}}}}}}, 0x0)

3.599500444s ago: executing program 2 (id=909):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@ip_retopts={{0x18, 0x0, 0x7, {[@rr={0x7, 0x3, 0x2f}, @rr={0x7, 0x3, 0xb0}]}}}], 0x18}}], 0x2, 0xf00)

3.562530525s ago: executing program 5 (id=910):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x2, 0xa}}, 0x20)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc000000190001002bbd700000000000ff020000000000000000000000000001ff02000000000000000000000000000100000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000006000000002204003c00000000000000ffffffffffffffff000000000020000000000000000000000000000000000000000a000000000000feffffffff7f400002000000000000080100000000000000010000000000000044000500000000000000000000000000000000010000000032"], 0xfc}}, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x6, @loopback, 0x2}, {0xa, 0x4e24, 0x101, @remote, 0x5}, r1, 0x6}}, 0x48)

3.495087218s ago: executing program 1 (id=911):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
ftruncate(r0, 0x1f)

3.348820255s ago: executing program 2 (id=912):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xfff1, 0xffff}}}, 0x24}}, 0x10)
r0 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x4e22, 0x0, 0x4e23, 0x3, 0xa, 0x0, 0x10}, {0x100000000, 0x2, 0x1, 0x0, 0xffffffffffffffff, 0x6, 0x8, 0x4}, {0x9, 0xfffffffffffffffe, 0x0, 0xd}, 0xd6, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x4d3, 0x32}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffb}}, 0xe8)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffe0)

3.327806366s ago: executing program 3 (id=913):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
chdir(&(0x7f0000000000)='./proc/fs/nfsd\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x78)
lseek(r0, 0x7fffdfff, 0x2)

3.304836557s ago: executing program 4 (id=914):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x132)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
listxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000300)=""/100, 0x64)

3.273847679s ago: executing program 5 (id=915):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000))
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000001c0))
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)=0x1c)
ioctl$SOUND_PCM_READ_RATE(r0, 0x80045002, 0x0)

3.02500024s ago: executing program 2 (id=916):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @rand_addr=0x64010102}]}, &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000300)=0x8)
setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000080)={r2, 0x5, 0xaf}, 0x8)

2.933478664s ago: executing program 3 (id=917):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
io_setup(0x8, &(0x7f0000000600)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000080)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x4, r1, 0x0}])

2.887914826s ago: executing program 5 (id=918):
socket$inet_tcp(0x2, 0x1, 0x0)
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
io_setup(0x3ff, &(0x7f0000000500)=<r2=>0x0)
readv(r0, &(0x7f0000000380)=[{&(0x7f0000000100)=""/145, 0x91}], 0x1)
io_submit(r2, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)='m', 0xffffff4c}])

2.875020637s ago: executing program 4 (id=919):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, 0x0, 0x0)
syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000540)='./file1\x00', 0xa00010, &(0x7f0000000340)=ANY=[@ANYBLOB="2c6e6c733d69736f383835392d310000000072726965722c00bcd0f0b5c4e2957974ff5d7ea3c3dcee087e4983684e8a4c4e4e87b134e30ce77162b12885b964b3506ff3eae0f3599447b36e31ac14de48349767164f5f6431bbdeaef96a4f2bce64b5cfa76ce3a2c4302374bc5535d7e2eb8dfb2e5d58a37b7e37836597c21f51bcdf6df4cad825cfd9ef5ee9e89e04b15cd3cea9e152d67b9a7eedc5dfe6d85a3ce7c342da8cc969b552197cb8bcc4a1009f38f4a85b7c742101ba5bc03115feca2b994c699812b372cae837c9e5c5c80c719abec2f0e1d37f96e0ef730264db1304c9f6fcd0b44f81a2583c4b1e50d5065bd8bfde0204c4b2178ec7f063a115baa7010100000000000022042a718d3742f6df4c32f92c9e6991c943ec3cfb707b5168952d8f1c8a47f0db71e8083ec8c7aca0c65aa2f9090d2a72cb7eb0d61a6f79abeadbcb8f55e2113fedfeabd409ec9fd22ed33f2cfbba2c689c00"/361, @ANYRESHEX=0xee01, @ANYRES16, @ANYRES64=r0, @ANYRESOCT, @ANYRESOCT, @ANYRESHEX=r0], 0xd, 0x643, &(0x7f0000001380)="$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")
renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0x708)

2.428434238s ago: executing program 4 (id=920):
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0)
ioctl(r0, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d")
ioctl(r0, 0xc138fd09, &(0x7f0000000000))

2.130474312s ago: executing program 4 (id=921):
prlimit64(0x0, 0xe, 0x0, 0x0)
syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f0000004800)="$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")
creat(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
chown(&(0x7f0000000000)='./file0\x00', 0x0, 0xee01)

2.063720475s ago: executing program 1 (id=922):
r0 = creat(&(0x7f0000000080)='./file0\x00', 0xc7)
close(r0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r1, &(0x7f0000000c80)={&(0x7f0000000980)=@id, 0x10, 0x0}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x4440, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

1.977674939s ago: executing program 2 (id=923):
open(0x0, 0x108843, 0x190)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
mount$bind(0x0, 0x0, 0x0, 0x100010, 0x0)

1.760168119s ago: executing program 5 (id=924):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05000400000003c055170640000008000300", @ANYRES32=r2, @ANYBLOB="0800050003"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001080)={0x6c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2b, 0xe, {{{}, {}, @broadcast, @device_a, @random="b92e35ac622e"}, 0x0, @default, 0xb, @void, @void, @val={0x3, 0x1, 0x95}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x5, 0x91, "7f"}, @NL80211_ATTR_IE_ASSOC_RESP={0x4}]]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x0)

1.390561056s ago: executing program 5 (id=925):
r0 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000070904000001020d0000052406000105240000000d240f0100000000000000000006241a00000809058103000200fe000904010001020d00000904010102020d00000905820200020942f9090503"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

940.464167ms ago: executing program 1 (id=926):
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r1 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2)
ftruncate(r1, 0x1)
fcntl$addseals(r1, 0x409, 0x7)
ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x8000})

668.361099ms ago: executing program 3 (id=927):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r0=>0xffffffffffffffff})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000040)={0x48, r2, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x28c}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0)

472.020809ms ago: executing program 1 (id=928):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000002000000b705000008000000850000006900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c300000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xb, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r1, 0x5, 0xe, 0x0, &(0x7f00000000c0)="469dc2d342e2b7000091000000000bcf48f3ac4e19a56ceb0b42c0", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x22)

359.060083ms ago: executing program 2 (id=929):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x0, 0x1, 0x6})

316.893606ms ago: executing program 3 (id=930):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100002}, 0x50)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4e24, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0xb8}}, 0x4004)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffb}}}, 0xb8}}, 0x0)

0s ago: executing program 3 (id=931):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file0\x00', 0x800810, &(0x7f0000000300)={[{@nossd_spread}, {@nodatasum}, {@compress_force}, {@compress_force}, {@flushoncommit}, {@skip_balance}, {@max_inline={'max_inline', 0x3d, [0x38, 0x31, 0x65]}}, {@nodiscard}]}, 0xfb, 0x510a, &(0x7f000000d000)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x441, 0x193)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x110)
pwrite64(r1, &(0x7f00000000c0)="9f", 0x1, 0x10000)
ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, 0x0)

kernel console output (not intermixed with test programs):

21197][ T5380] loop0: detected capacity change from 0 to 32768
[  136.442006][ T5380] XFS (loop0): Mounting V5 Filesystem
[  136.678674][ T5380] XFS (loop0): Ending clean mount
[  136.716835][ T5380] XFS (loop0): Quotacheck needed: Please wait.
[  136.845373][ T5380] XFS (loop0): Quotacheck: Done.
[  137.062078][ T5395] loop2: detected capacity change from 0 to 32768
[  137.117768][ T5395] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.338 (5395)
[  137.167523][ T5399] loop1: detected capacity change from 0 to 32768
[  137.196502][ T5395] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  137.203099][ T4280] XFS (loop0): Unmounting Filesystem
[  137.259811][ T5395] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  137.276029][ T5399] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[  137.283113][ T5395] BTRFS info (device loop2): force clearing of disk cache
[  137.291493][ T5395] BTRFS info (device loop2): enabling auto defrag
[  137.305447][ T5395] BTRFS info (device loop2): max_inline at 0
[  137.314419][ T5395] BTRFS info (device loop2): enabling disk space caching
[  137.321485][ T5395] BTRFS info (device loop2): disk space caching is enabled
[  137.365198][ T5421] loop4: detected capacity change from 0 to 8192
[  137.400710][ T5399] JBD2: Ignoring recovery information on journal
[  137.427274][ T5421] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  137.496138][ T5421] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal
[  137.506162][ T5421] REISERFS (device loop4): using ordered data mode
[  137.512712][ T5421] reiserfs: using flush barriers
[  137.540813][ T5421] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  137.599911][ T5421] REISERFS (device loop4): checking transaction log (loop4)
[  137.642644][ T5399] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  137.692902][ T5415] loop3: detected capacity change from 0 to 32768
[  137.765453][ T5395] BTRFS info (device loop2): enabling ssd optimizations
[  137.797040][ T5415] XFS (loop3): Mounting V5 Filesystem
[  137.816741][ T5395] BTRFS info (device loop2): rebuilding free space tree
[  137.894160][ T5415] XFS (loop3): Ending clean mount
[  137.982119][ T5395] BTRFS info (device loop2): disabling free space tree
[  138.000109][ T5395] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  138.057731][ T5395] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  138.144636][ T5421] REISERFS (device loop4): Using tea hash to sort names
[  138.151977][ T5421] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2)
[  138.172805][ T4679] XFS (loop3): Unmounting Filesystem
[  138.234874][ T5421] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  138.277718][ T4271] ocfs2: Unmounting device (7,1) on (node local)
[  138.623050][ T4333] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared)
[  138.831722][ T4285] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  139.847946][ T5493] loop1: detected capacity change from 0 to 2048
[  139.953540][ T5493] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  139.964582][ T5493] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  140.160375][ T5481] loop0: detected capacity change from 0 to 32768
[  140.170900][ T5503] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.360: bg 0: block 345: padding at end of block bitmap is not set
[  140.200591][ T4328] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  140.213661][ T5503] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 17 with error 117
[  140.236311][ T5503] EXT4-fs (loop1): This should not happen!! Data will be lost
[  140.236311][ T5503] 
[  140.249438][ T5481] 
[  140.249438][ T5481]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  140.249438][ T5481] 
[  140.276828][ T5481] ERROR: (device loop0): diWrite: ixpxd invalid
[  140.276828][ T5481] 
[  140.302246][ T5481] ERROR: (device loop0): remounting filesystem as read-only
[  140.309902][ T5481] ERROR: (device loop0): txCommit: 
[  140.309902][ T5481] 
[  140.355849][ T5481] jfs_readdir: bad index table
[  140.370854][ T5504] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 15 with error 28
[  140.401494][ T5504] EXT4-fs (loop1): This should not happen!! Data will be lost
[  140.401494][ T5504] 
[  140.424160][ T4328] usb 4-1: Using ep0 maxpacket: 32
[  140.431181][ T4328] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[  140.433177][ T5504] EXT4-fs (loop1): Total free blocks count 0
[  140.464067][ T4328] usb 4-1: config 0 has no interface number 0
[  140.470517][ T5504] EXT4-fs (loop1): Free/Dirty block details
[  140.475144][ T4328] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  140.505127][ T4328] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.508522][ T5504] EXT4-fs (loop1): free_blocks=0
[  140.513323][ T4328] usb 4-1: Product: syz
[  140.544156][ T4328] usb 4-1: Manufacturer: syz
[  140.548825][ T4328] usb 4-1: SerialNumber: syz
[  140.557233][ T5504] EXT4-fs (loop1): dirty_blocks=208
[  140.588625][ T5504] EXT4-fs (loop1): Block reservation details
[  140.595090][ T4328] usb 4-1: config 0 descriptor??
[  140.640348][ T4328] smsc95xx v2.0.0
[  140.723559][ T5512] loop4: detected capacity change from 0 to 256
[  141.023586][ T4328] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  141.054136][ T4328] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  141.482190][ T4328] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71
[  141.513723][ T4328] smsc95xx: probe of 4-1:0.67 failed with error -71
[  141.545574][ T4328] usb 4-1: USB disconnect, device number 5
[  141.676203][ T4324] Process accounting resumed
[  141.723328][ T5523] Process accounting resumed
[  141.783024][ T5516] loop2: detected capacity change from 0 to 40427
[  141.842670][ T5516] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64)
[  141.863729][ T5516] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  141.910328][ T5516] F2FS-fs (loop2): invalid crc value
[  141.952749][ T5516] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  141.956418][ T5536] bridge0: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  142.057913][ T5536] bridge0: port 2(bridge_slave_1) entered disabled state
[  142.067374][ T5536] bridge0: port 1(bridge_slave_0) entered disabled state
[  142.130947][ T5516] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  142.172488][ T5539] netlink: 8 bytes leftover after parsing attributes in process `syz.1.378'.
[  142.192510][ T5516] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  142.194322][ T5539] netlink: 'syz.1.378': attribute type 20 has an invalid length.
[  142.242870][ T5539] netlink: 'syz.1.378': attribute type 21 has an invalid length.
[  142.273377][ T5539] Zero length message leads to an empty skb
[  142.306471][ T5534] f2fs_ckpt-7:2: attempt to access beyond end of device
[  142.306471][ T5534] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  142.611545][ T5546] loop0: detected capacity change from 0 to 2048
[  142.704289][ T5546] device-mapper: ioctl: invalid device name
[  142.720665][ T5469] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  142.793007][ T5469] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  143.289084][ T5565] loop0: detected capacity change from 0 to 128
[  143.339752][ T5565] FAT-fs (loop0): bogus number of reserved sectors
[  143.364535][ T5565] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  143.430833][ T5565] FAT-fs (loop0): Can't find a valid FAT filesystem
[  143.831695][ T5578] netlink: 9 bytes leftover after parsing attributes in process `syz.0.393'.
[  144.031038][ T5583] virtiofs: Unknown parameter 'always0000000		0
[  144.031038][ T5583] 18	nlmon0    :     1      V3
[  144.031038][ T5583] 				010000E0     1 0:00000000		0
[  144.031038][ T5583] 20	batadv0   :     1      V3
[  144.031038][ T5583] 				010000E0     1 0:00000000		0
[  144.031038][ T5583] 21	vxcan0    :     1      V3
[  144.031038][ T5583] 				010000E0     1 0:00000000		0
[  144.031038][ T5583] 22	vxcan1    :     1      V3
[  144.031038][ T5583] 				010000E0     1 0:00000000		0
[  144.031038][ T5583] 23	veth0     :     1      V3
[  144.031038][ T5583] 				010000E0     1 0:00000000		0
[  144.031038][ T5583] 24	veth1     :     1      V3
[  144.031038][ T5583] 				010000E0     1 0:00000000		0
[  144.031038][ T5583] 25	wg0       :     1      V3
[  144.031038][ T5583] 				010000E0     1 0:00000000		0
[  144.031038][ T5583] 26	wg1       :     1      V3
[  144.031038][ T5583] 				010000E0     1 0:00000000		0
[  144.031038][ T5583] 27	wg2       :     1      V3
[  144.453864][ T5571] loop2: detected capacity change from 0 to 32768
[  144.526342][ T5595] netlink: 4 bytes leftover after parsing attributes in process `syz.0.403'.
[  144.540769][ T5599] loop1: detected capacity change from 0 to 8
[  144.569895][ T5571] XFS (loop2): Mounting V5 Filesystem
[  144.761817][ T5607] loop3: detected capacity change from 0 to 4096
[  144.768700][ T5571] XFS (loop2): Ending clean mount
[  144.854539][ T5607] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512)
[  144.980242][ T4285] XFS (loop2): Unmounting Filesystem
[  145.094734][ T5607] ntfs3: loop3: ino=1f, "file2" failed to open parent directory r=5 to update
[  145.243390][ T4333] ntfs3: loop3: ino=1f, failed to open parent directory r=5 to update
[  145.425717][ T5618] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input8
[  146.076443][ T4757] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  146.164277][ T5469] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  146.274092][ T4757] usb 3-1: Using ep0 maxpacket: 16
[  146.281354][ T4757] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  146.307143][ T4757] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  146.339257][ T4757] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  146.350946][ T4757] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  146.366185][ T5469] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  146.389605][ T5469] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[  146.394090][ T4757] usb 3-1: config 0 interface 0 has no altsetting 0
[  146.431550][ T4757] usb 3-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00
[  146.431900][ T5469] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  146.442666][ T5639] loop4: detected capacity change from 0 to 32768
[  146.456367][ T4757] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.487544][ T5469] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.488500][ T4757] usb 3-1: config 0 descriptor??
[  146.541954][ T5469] usb 1-1: config 0 descriptor??
[  146.572426][ T5469] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  146.602917][ T5659] loop1: detected capacity change from 0 to 128
[  146.617670][ T5659] EXT4-fs (loop1): Test dummy encryption mode enabled
[  146.658490][ T5639] XFS (loop4): Mounting V5 Filesystem
[  146.710742][ T5659] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  146.767317][ T5659] ext4 filesystem being mounted at /107/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  146.811145][ T5639] XFS (loop4): Ending clean mount
[  146.818335][ T5637] netlink: 27 bytes leftover after parsing attributes in process `syz.0.417'.
[  146.850865][ T5639] XFS (loop4): Quotacheck needed: Please wait.
[  146.868745][ T4324] usb 1-1: USB disconnect, device number 4
[  146.946309][ T5659] EXT4-fs (loop1): re-mounted. Quota mode: none.
[  146.990318][ T4757] logitech-djreceiver 0003:046D:C53A.0003: hiddev0,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.2-1/input0
[  147.028282][ T5639] XFS (loop4): Quotacheck: Done.
[  147.081858][ T4271] EXT4-fs (loop1): unmounting filesystem.
[  147.301852][ T5464] usb 3-1: USB disconnect, device number 6
[  147.379313][ T5667] fido_id[5667]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  147.444631][ T4276] XFS (loop4): Unmounting Filesystem
[  147.538339][ T5669] loop1: detected capacity change from 0 to 512
[  147.554362][ T5669] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  147.566476][ T5669] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  147.591815][ T5669] EXT4-fs (loop1): 1 truncate cleaned up
[  147.600055][ T5669] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  147.633550][ T5669] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.435: inode #4294967040: comm syz.1.435: iget: illegal inode #
[  147.671285][ T5669] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.435: error while reading EA inode 4294967040 err=-117
[  147.738976][ T5669] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2805: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  147.929838][ T4271] EXT4-fs (loop1): unmounting filesystem.
[  148.063963][ T5681] loop0: detected capacity change from 0 to 128
[  148.144368][ T4328] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  148.292649][ T5690] loop1: detected capacity change from 0 to 1024
[  148.334242][ T4328] usb 4-1: Using ep0 maxpacket: 8
[  148.344776][ T4328] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  148.369419][ T4328] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  148.424135][ T4328] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  148.463260][ T4328] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  148.500991][ T4324] Process accounting resumed
[  148.507023][ T4328] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  148.521218][ T4328] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  148.554189][ T4328] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  148.605044][ T5695] bridge0: port 1(bridge_slave_0) entered disabled state
[  148.621050][ T5685] Process accounting resumed
[  148.781827][ T5697] netlink: 24 bytes leftover after parsing attributes in process `syz.1.437'.
[  148.799067][ T4328] usb 4-1: usb_control_msg returned -32
[  148.807859][ T4328] usbtmc 4-1:16.0: can't read capabilities
[  149.416871][ T5470] usb 4-1: USB disconnect, device number 6
[  149.623574][ T5719] loop4: detected capacity change from 0 to 512
[  149.698933][ T5719] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  149.730222][ T5719] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  149.957497][ T4276] EXT4-fs (loop4): unmounting filesystem.
[  150.068275][ T5728] loop1: detected capacity change from 0 to 1024
[  150.299915][ T5734] loop2: detected capacity change from 0 to 1024
[  150.403066][ T5734] hfsplus: failed to load catalog file
[  150.856551][ T5757] netlink: 'syz.3.461': attribute type 11 has an invalid length.
[  150.884343][ T5757] netlink: 36 bytes leftover after parsing attributes in process `syz.3.461'.
[  151.155397][ T5767] loop1: detected capacity change from 0 to 64
[  151.183812][ T5765] input: syz0 as /devices/virtual/input/input9
[  151.521708][ T4271] hfs: node 4:3 still has 1 user(s)!
[  151.658109][ T5777] netlink: 'syz.1.470': attribute type 12 has an invalid length.
[  151.733817][ T5776] loop0: detected capacity change from 0 to 2048
[  151.872487][ T5776] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  151.897765][ T5776] ext4 filesystem being mounted at /105/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  152.070444][ T5788] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.469: bg 0: block 345: padding at end of block bitmap is not set
[  152.101137][ T5788] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 17 with error 117
[  152.199900][ T5788] EXT4-fs (loop0): This should not happen!! Data will be lost
[  152.199900][ T5788] 
[  152.275450][ T5789] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 15 with error 28
[  152.302289][ T5761] loop4: detected capacity change from 0 to 32768
[  152.309403][ T5789] EXT4-fs (loop0): This should not happen!! Data will be lost
[  152.309403][ T5789] 
[  152.343645][ T5789] EXT4-fs (loop0): Total free blocks count 0
[  152.382245][ T5789] EXT4-fs (loop0): Free/Dirty block details
[  152.386520][ T5796] loop1: detected capacity change from 0 to 512
[  152.396649][ T5789] EXT4-fs (loop0): free_blocks=0
[  152.401845][ T5789] EXT4-fs (loop0): dirty_blocks=48
[  152.420430][ T5761] XFS (loop4): Mounting V5 Filesystem
[  152.444136][ T5796] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  152.460360][ T5789] EXT4-fs (loop0): Block reservation details
[  152.598847][ T5761] XFS (loop4): Ending clean mount
[  152.622912][ T5761] XFS (loop4): Quotacheck needed: Please wait.
[  152.803098][ T5761] XFS (loop4): Quotacheck: Done.
[  152.837505][ T5761] XFS (loop4): User initiated shutdown received.
[  152.858875][ T5761] XFS (loop4): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:499).  Shutting down filesystem.
[  152.873127][ T5761] XFS (loop4): Please unmount the filesystem and rectify the problem(s)
[  152.952635][ T5811] netlink: 4 bytes leftover after parsing attributes in process `syz.1.478'.
[  152.975407][ T4276] XFS (loop4): Unmounting Filesystem
[  153.124204][ T4762] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  153.228353][ T5793] loop3: detected capacity change from 0 to 32768
[  153.325949][ T4762] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  153.368578][ T4762] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  153.399055][ T4762] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  153.404444][ T5793] XFS (loop3): Mounting V5 Filesystem
[  153.438066][ T4762] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  153.451015][ T4762] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  153.501180][ T4762] usb 1-1: config 0 descriptor??
[  153.563552][ T5793] XFS (loop3): Ending clean mount
[  153.732299][ T4679] XFS (loop3): Unmounting Filesystem
[  153.830335][ T5828] loop4: detected capacity change from 0 to 128
[  153.892483][ T5828] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  153.919336][ T5828] hpfs: filesystem error: improperly stopped
[  153.926222][ T5828] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  153.952090][ T5828] hpfs: You really don't want any checks? You are crazy...
[  153.953651][ T4762] plantronics 0003:047F:FFFF.0004: unknown main item tag 0xd
[  153.972029][ T5828] hpfs: Code page index out of array
[  153.989289][ T4762] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving
[  153.992086][ T5828] hpfs: code page support is disabled
[  154.037484][ T5828] hpfs: hpfs_map_4sectors(): unaligned read
[  154.051752][ T5828] hpfs: hpfs_map_4sectors(): unaligned read
[  154.054482][ T4762] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  154.087534][ T5828] hpfs: filesystem error: unable to find root dir
[  154.242602][ T4762] usb 1-1: USB disconnect, device number 5
[  154.380562][ T5839] netlink: 4 bytes leftover after parsing attributes in process `syz.4.486'.
[  154.424477][ T5839] device hsr_slave_0 left promiscuous mode
[  154.447159][ T5839] device hsr_slave_1 left promiscuous mode
[  154.536688][ T5837] fido_id[5837]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  154.776650][ T5850] input: syz0 as /devices/virtual/input/input11
[  155.379209][ T5870] loop3: detected capacity change from 0 to 512
[  155.460703][ T5873] process 'syz.2.499' launched './file1' with NULL argv: empty string added
[  155.481065][ T5870] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  155.565664][ T5877] loop4: detected capacity change from 0 to 64
[  155.827302][ T4276] hfs: node 4:3 still has 1 user(s)!
[  155.944572][ T5883] Bluetooth: MGMT ver 1.22
[  156.107819][ T5892] loop4: detected capacity change from 0 to 128
[  156.126154][ T5892] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  156.167142][ T5892] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  156.269851][    T7] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  156.282834][ T5894] FAULT_INJECTION: forcing a failure.
[  156.282834][ T5894] name failslab, interval 1, probability 0, space 0, times 0
[  156.304496][ T5894] CPU: 1 PID: 5894 Comm: syz.0.511 Not tainted syzkaller #0
[  156.311857][ T5894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  156.321959][ T5894] Call Trace:
[  156.325257][ T5894]  <TASK>
[  156.328222][ T5894]  dump_stack_lvl+0x188/0x24e
[  156.332917][ T5894]  ? show_regs_print_info+0x12/0x12
[  156.338131][ T5894]  ? load_image+0x410/0x410
[  156.342635][ T5894]  ? __might_sleep+0xd0/0xd0
[  156.347246][ T5894]  ? __lock_acquire+0x7c40/0x7c40
[  156.352284][ T5894]  should_fail_ex+0x390/0x4c0
[  156.356988][ T5894]  should_failslab+0x5/0x20
[  156.361516][ T5894]  slab_pre_alloc_hook+0x59/0x300
[  156.366560][ T5894]  ? memcg_list_lru_alloc+0x22d/0xb00
[  156.371967][ T5894]  __kmem_cache_alloc_node+0x4f/0x270
[  156.377360][ T5894]  ? memcg_list_lru_alloc+0x22d/0xb00
[  156.382744][ T5894]  __kmalloc+0xa3/0x240
[  156.386920][ T5894]  memcg_list_lru_alloc+0x22d/0xb00
[  156.392156][ T5894]  ? slab_pre_alloc_hook+0xb1/0x300
[  156.397368][ T5894]  ? memcg_reparent_list_lrus+0x850/0x850
[  156.403109][ T5894]  ? get_obj_cgroup_from_current+0xd0/0x280
[  156.409021][ T5894]  ? get_obj_cgroup_from_current+0xd0/0x280
[  156.414937][ T5894]  slab_pre_alloc_hook+0x2ad/0x300
[  156.420063][ T5894]  ? slab_pre_alloc_hook+0xb1/0x300
[  156.425279][ T5894]  kmem_cache_alloc_lru+0x49/0x2e0
[  156.430396][ T5894]  ? hugetlbfs_alloc_inode+0xef/0x140
[  156.435793][ T5894]  hugetlbfs_alloc_inode+0xef/0x140
[  156.440999][ T5894]  ? hugetlbfs_fill_super+0x910/0x910
[  156.446389][ T5894]  new_inode_pseudo+0x5f/0x1c0
[  156.451168][ T5894]  new_inode+0x25/0x1d0
[  156.455331][ T5894]  ? resv_map_alloc+0x1c0/0x2b0
[  156.460194][ T5894]  hugetlbfs_get_inode+0x78/0x510
[  156.465234][ T5894]  hugetlb_file_setup+0x27b/0x610
[  156.470271][ T5894]  newseg+0x412/0xb00
[  156.474272][ T5894]  ? rwsem_write_trylock+0x135/0x1c0
[  156.479575][ T5894]  ? ksys_shmget+0x140/0x140
[  156.484183][ T5894]  ipcget+0x1cd/0xe10
[  156.488172][ T5894]  ? do_futex+0x310/0x320
[  156.492513][ T5894]  ? __ia32_sys_get_robust_list+0x100/0x100
[  156.498417][ T5894]  ? ipc_obtain_object_check+0x1a0/0x1a0
[  156.504089][ T5894]  __x64_sys_shmget+0x13d/0x180
[  156.508953][ T5894]  ? lock_chain_count+0x20/0x20
[  156.513816][ T5894]  ? shm_more_checks+0x80/0x80
[  156.518600][ T5894]  ? lockdep_hardirqs_on+0x94/0x140
[  156.523815][ T5894]  do_syscall_64+0x4c/0xa0
[  156.528240][ T5894]  ? clear_bhb_loop+0x60/0xb0
[  156.532926][ T5894]  ? clear_bhb_loop+0x60/0xb0
[  156.537614][ T5894]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  156.543521][ T5894] RIP: 0033:0x7fdaf5f9e159
[  156.547946][ T5894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  156.567564][ T5894] RSP: 002b:00007fdaf6ef2028 EFLAGS: 00000246 ORIG_RAX: 000000000000001d
[  156.575990][ T5894] RAX: ffffffffffffffda RBX: 00007fdaf6225fa0 RCX: 00007fdaf5f9e159
[  156.583970][ T5894] RDX: 0000000054001800 RSI: 0000000000003000 RDI: 0000000000000000
[  156.591971][ T5894] RBP: 00007fdaf603506b R08: 0000000000000000 R09: 0000000000000000
[  156.599953][ T5894] R10: 000020000010d000 R11: 0000000000000246 R12: 0000000000000000
[  156.607934][ T5894] R13: 00007fdaf6226038 R14: 00007fdaf6225fa0 R15: 00007fffc4535be8
[  156.615932][ T5894]  </TASK>
[  156.644355][    T7] usb 4-1: Using ep0 maxpacket: 8
[  156.651370][    T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  156.692936][    T7] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  156.721787][    T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.758909][    T7] usb 4-1: config 0 descriptor??
[  156.941932][ T5902] loop1: detected capacity change from 0 to 128
[  156.983212][    T7] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  157.000290][ T5902] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  157.041382][ T5902] FAT-fs (loop1): Filesystem has been set read-only
[  157.095817][ T5902] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  157.126854][ T5902] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  157.154212][ T5902] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  157.172963][ T5902] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  157.197571][ T4757] usb 4-1: USB disconnect, device number 7
[  157.203452][    C0] iowarrior 4-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19
[  157.231956][ T5902] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  157.301481][ T5902] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  157.317080][ T5902] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  157.359337][ T5902] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  157.375282][ T5902] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  157.397537][ T5902] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  157.411567][ T5902] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  157.427471][ T5902] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  157.438764][ T5902] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  157.451401][ T5902] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  157.462803][ T5902] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  157.475397][ T5902] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  157.488812][ T5902] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  157.503119][ T5902] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  157.543929][ T5902] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  157.559057][ T5902] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  157.568438][ T5902] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  157.583020][ T5902] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  157.594981][ T5912] loop0: detected capacity change from 0 to 64
[  157.604965][ T5902] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  157.637698][ T5902] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  157.662427][ T5902] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  157.677771][ T5902] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  157.690118][ T5902] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  157.704426][ T5902] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  157.724112][ T4280] hfs: node 4:3 still has 1 user(s)!
[  157.731402][ T5902] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  157.785880][ T5902] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  157.820036][ T5902] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  157.835723][ T5902] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  157.846668][ T5907] loop4: detected capacity change from 0 to 32768
[  157.849998][ T5902] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  157.864338][ T5902] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  157.873101][ T5907] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.517 (5907)
[  157.886499][   T26] audit: type=1800 audit(1790061301.744:26): pid=5902 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.515" name="file1" dev="loop1" ino=1048609 res=0 errno=0
[  157.934346][ T5907] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  157.965911][ T5907] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  158.012509][ T5907] BTRFS info (device loop4): force clearing of disk cache
[  158.071435][ T5907] BTRFS info (device loop4): use zlib compression, level 3
[  158.092978][ T5907] BTRFS info (device loop4): enabling ssd optimizations
[  158.115454][ T5907] BTRFS info (device loop4): using spread ssd allocation scheme
[  158.154684][ T5907] BTRFS info (device loop4): using free space tree
[  158.167014][ T5923] jffs2: notice: (5923) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  158.339603][ T5907] BTRFS info (device loop4): rebuilding free space tree
[  158.401006][ T5907] BTRFS info (device loop4): checking UUID tree
[  158.722647][ T4276] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  158.858509][ T4374] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 11 /dev/loop4 scanned by udevd (4374)
[  158.947448][ T5955] loop0: detected capacity change from 0 to 512
[  158.995122][ T5955] EXT4-fs: Ignoring removed i_version option
[  159.012762][ T5955] EXT4-fs: Ignoring removed oldalloc option
[  159.051635][ T5955] EXT4-fs (loop0): Test dummy encryption mode enabled
[  159.102627][ T5955] EXT4-fs (loop0): 1 truncate cleaned up
[  159.148967][ T5955] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  159.259260][   T26] audit: type=1800 audit(1790061303.114:27): pid=5955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.528" name="file1" dev="loop0" ino=15 res=0 errno=0
[  159.378450][ T5968] loop2: detected capacity change from 0 to 256
[  159.462451][ T5968] exfat: Deprecated parameter 'utf8'
[  159.483951][ T5968] exfat: Deprecated parameter 'namecase'
[  159.511842][ T5968] exfat: Deprecated parameter 'namecase'
[  159.561149][ T5968] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbcba5927, utbl_chksum : 0xe619d30d)
[  159.768365][ T4280] EXT4-fs (loop0): unmounting filesystem.
[  160.379938][ T5971] loop1: detected capacity change from 0 to 32768
[  160.385849][ T5973] loop4: detected capacity change from 0 to 32768
[  160.490565][ T5973] XFS (loop4): Mounting V5 Filesystem
[  160.499579][   T26] audit: type=1326 audit(1790061304.354:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5991 comm="syz.0.541" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdaf5f9e159 code=0x0
[  160.611737][ T5973] XFS (loop4): Ending clean mount
[  160.655543][   T26] audit: type=1800 audit(1790061304.504:29): pid=5973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.534" name="file1" dev="loop4" ino=6150 res=0 errno=0
[  160.688961][ T5973] XFS (loop4): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair.
[  160.844088][ T2188] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  161.012843][ T4276] XFS (loop4): Unmounting Filesystem
[  161.060005][ T2188] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  161.080107][ T2188] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  161.111861][ T2188] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  161.137439][ T2188] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  161.167479][ T2188] usb 4-1: SerialNumber: syz
[  161.398061][ T6006] FAULT_INJECTION: forcing a failure.
[  161.398061][ T6006] name failslab, interval 1, probability 0, space 0, times 0
[  161.444115][ T2188] usb 4-1: 0:2 : does not exist
[  161.444272][ T6006] CPU: 1 PID: 6006 Comm: syz.2.546 Not tainted syzkaller #0
[  161.449539][ T2188] usb 4-1: unit 2 not found!
[  161.456650][ T6006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  161.456668][ T6006] Call Trace:
[  161.456676][ T6006]  <TASK>
[  161.456685][ T6006]  dump_stack_lvl+0x188/0x24e
[  161.456716][ T6006]  ? show_regs_print_info+0x12/0x12
[  161.456737][ T6006]  ? load_image+0x410/0x410
[  161.492070][ T6006]  ? __might_sleep+0xd0/0xd0
[  161.496714][ T6006]  should_fail_ex+0x390/0x4c0
[  161.501447][ T6006]  should_failslab+0x5/0x20
[  161.505990][ T6006]  slab_pre_alloc_hook+0x59/0x300
[  161.511018][ T6006]  kmem_cache_alloc+0x56/0x2f0
[  161.515780][ T6006]  ? zswap_frontswap_store+0x414/0x1680
[  161.521325][ T6006]  zswap_frontswap_store+0x414/0x1680
[  161.526698][ T6006]  ? zswap_frontswap_init+0x100/0x100
[  161.532171][ T6006]  ? __lock_acquire+0x7c40/0x7c40
[  161.537208][ T6006]  ? do_raw_spin_lock+0x128/0x2f0
[  161.542238][ T6006]  ? __rwlock_init+0x140/0x140
[  161.547021][ T6006]  ? do_raw_spin_unlock+0x11d/0x230
[  161.552265][ T6006]  __frontswap_store+0x2d9/0x5b0
[  161.557255][ T6006]  swap_writepage+0xc8/0x1a0
[  161.561903][ T6006]  shrink_folio_list+0x2f81/0x8050
[  161.567093][ T6006]  ? reclaim_clean_pages_from_list+0xb80/0xb80
[  161.573301][ T6006]  ? __lock_acquire+0x1465/0x7c40
[  161.578413][ T6006]  ? verify_lock_unused+0x140/0x140
[  161.583677][ T6006]  ? __mod_memcg_state+0x30/0x90
[  161.588654][ T6006]  ? __mod_memcg_lruvec_state+0x1a7/0x270
[  161.594413][ T6006]  reclaim_folio_list+0x85/0x2e0
[  161.599391][ T6006]  ? __mod_node_page_state+0xe7/0x140
[  161.604828][ T6006]  reclaim_pages+0x575/0x690
[  161.609473][ T6006]  ? folio_isolate_lru+0xf10/0xf10
[  161.610845][ T2188] usb 4-1: USB disconnect, device number 8
[  161.614606][ T6006]  ? do_raw_spin_unlock+0x11d/0x230
[  161.614638][ T6006]  madvise_cold_or_pageout_pte_range+0x1936/0x1f30
[  161.614681][ T6006]  ? folio_put+0xd0/0xd0
[  161.636473][ T6006]  ? __lock_acquire+0x7c40/0x7c40
[  161.641558][ T6006]  walk_pgd_range+0xb28/0x1370
[  161.646395][ T6006]  __walk_page_range+0x136/0x590
[  161.651386][ T6006]  walk_page_range+0x3b9/0x590
[  161.656203][ T6006]  ? page_mapped_in_vma+0x800/0x800
[  161.661452][ T6006]  ? mlock_page_drain_local+0x75/0x490
[  161.666953][ T6006]  ? mlock_page_drain_local+0x75/0x490
[  161.672467][ T6006]  do_madvise+0x1cb1/0x3520
[  161.677005][ T6006]  ? plist_add+0x3d7/0x490
[  161.681430][ T6006]  ? madvise_set_anon_name+0x420/0x420
[  161.686905][ T6006]  ? schedule+0xd0/0x180
[  161.691170][ T6006]  ? futex_wait_queue+0x23/0x1b0
[  161.696116][ T6006]  ? futex_wait_queue+0x134/0x1b0
[  161.701160][ T6006]  ? futex_unqueue+0xc7/0xf0
[  161.705764][ T6006]  ? futex_wait+0x4a3/0x5c0
[  161.710317][ T6006]  ? futex_wait_setup+0x270/0x270
[  161.715399][ T6006]  ? file_end_write+0x156/0x250
[  161.720280][ T6006]  ? vfs_write+0x777/0x9a0
[  161.724728][ T6006]  ? do_futex+0x310/0x320
[  161.729089][ T6006]  ? __ia32_sys_get_robust_list+0x100/0x100
[  161.735051][ T6006]  ? lock_chain_count+0x20/0x20
[  161.739953][ T6006]  __x64_sys_madvise+0xa2/0xb0
[  161.744761][ T6006]  do_syscall_64+0x4c/0xa0
[  161.749224][ T6006]  ? clear_bhb_loop+0x60/0xb0
[  161.753950][ T6006]  ? clear_bhb_loop+0x60/0xb0
[  161.758752][ T6006]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  161.764687][ T6006] RIP: 0033:0x7fc15f59e159
[  161.769223][ T6006] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  161.788866][ T6006] RSP: 002b:00007fc16050a028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c
[  161.797328][ T6006] RAX: ffffffffffffffda RBX: 00007fc15f825fa0 RCX: 00007fc15f59e159
[  161.805327][ T6006] RDX: 0000000000000015 RSI: 0000000000800000 RDI: 0000200000000000
[  161.813324][ T6006] RBP: 00007fc15f63506b R08: 0000000000000000 R09: 0000000000000000
[  161.821333][ T6006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  161.829350][ T6006] R13: 00007fc15f826038 R14: 00007fc15f825fa0 R15: 00007ffdf70f33e8
[  161.837369][ T6006]  </TASK>
[  162.515419][ T6010] loop1: detected capacity change from 0 to 131072
[  162.530635][ T6010] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0)
[  162.538807][ T6010] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  162.548047][ T6010] F2FS-fs (loop1): invalid crc value
[  162.660154][ T6010] F2FS-fs (loop1): Found nat_bits in checkpoint
[  162.756501][ T6020] loop0: detected capacity change from 0 to 128
[  162.801890][ T6010] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  162.809614][ T6010] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  162.873976][ T6020] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  162.893283][ T6024] loop3: detected capacity change from 0 to 256
[  162.900319][ T6020] FAT-fs (loop0): Filesystem has been set read-only
[  162.924956][ T6020] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  162.933456][ T6020] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  162.989811][ T6020] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  163.063683][ T6020] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  163.116118][ T6020] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  163.150211][ T6020] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  163.168270][ T6020] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  163.201980][ T6020] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  163.221989][ T6020] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  163.278577][ T6020] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  163.305001][ T6020] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  163.313618][ T6020] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  163.343838][ T6020] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  163.365748][ T6020] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  163.392911][ T6020] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  163.411021][ T6020] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  163.423655][ T6020] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  163.436965][ T6020] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  163.459226][ T6020] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  163.469524][ T6020] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  163.483260][ T6020] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  163.493476][ T6020] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  163.507148][ T6020] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  163.530211][ T6020] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  163.539186][  T126] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  163.556427][ T6020] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  163.570675][ T6020] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  163.618790][ T6037] FAULT_INJECTION: forcing a failure.
[  163.618790][ T6037] name failslab, interval 1, probability 0, space 0, times 0
[  163.632228][ T6020] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  163.644490][ T6037] CPU: 0 PID: 6037 Comm: syz.2.558 Not tainted syzkaller #0
[  163.651837][ T6037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  163.655366][ T6020] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  163.661902][ T6037] Call Trace:
[  163.673685][ T6037]  <TASK>
[  163.676645][ T6037]  dump_stack_lvl+0x188/0x24e
[  163.681367][ T6037]  ? show_regs_print_info+0x12/0x12
[  163.686616][ T6037]  ? load_image+0x410/0x410
[  163.687263][ T6020] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  163.691151][ T6037]  ? __might_sleep+0xd0/0xd0
[  163.691178][ T6037]  ? __lock_acquire+0x7c40/0x7c40
[  163.691209][ T6037]  should_fail_ex+0x390/0x4c0
[  163.713191][ T6020] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  163.713953][ T6037]  should_failslab+0x5/0x20
[  163.726907][ T6037]  slab_pre_alloc_hook+0x59/0x300
[  163.731977][ T6037]  ? memcg_list_lru_alloc+0x22d/0xb00
[  163.732607][ T6020] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  163.737377][ T6037]  __kmem_cache_alloc_node+0x4f/0x270
[  163.737417][ T6037]  ? memcg_list_lru_alloc+0x22d/0xb00
[  163.737441][ T6037]  __kmalloc+0xa3/0x240
[  163.737473][ T6037]  memcg_list_lru_alloc+0x22d/0xb00
[  163.737502][ T6037]  ? slab_pre_alloc_hook+0xb1/0x300
[  163.737524][ T6037]  ? memcg_reparent_list_lrus+0x850/0x850
[  163.737558][ T6037]  ? get_obj_cgroup_from_current+0xd0/0x280
[  163.760685][ T6020] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  163.760869][ T6037]  ? get_obj_cgroup_from_current+0xd0/0x280
[  163.772853][ T6020] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  163.776984][ T6037]  slab_pre_alloc_hook+0x2ad/0x300
[  163.777014][ T6037]  ? slab_pre_alloc_hook+0xb1/0x300
[  163.777040][ T6037]  kmem_cache_alloc_lru+0x49/0x2e0
[  163.777059][ T6037]  ? hugetlbfs_alloc_inode+0xef/0x140
[  163.777089][ T6037]  hugetlbfs_alloc_inode+0xef/0x140
[  163.777111][ T6037]  ? hugetlbfs_fill_super+0x910/0x910
[  163.793072][ T6020] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  163.797310][ T6037]  new_inode_pseudo+0x5f/0x1c0
[  163.797342][ T6037]  new_inode+0x25/0x1d0
[  163.797364][ T6037]  ? resv_map_alloc+0x1c0/0x2b0
[  163.797386][ T6037]  hugetlbfs_get_inode+0x78/0x510
[  163.797416][ T6037]  hugetlb_file_setup+0x27b/0x610
[  163.797443][ T6037]  newseg+0x412/0xb00
[  163.820616][   T26] audit: type=1800 audit(1790061307.674:30): pid=6020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.551" name="file1" dev="loop0" ino=1048611 res=0 errno=0
[  163.821730][ T6037]  ? rwsem_write_trylock+0x135/0x1c0
[  163.821765][ T6037]  ? ksys_shmget+0x140/0x140
[  163.903858][ T6037]  ipcget+0x1cd/0xe10
[  163.907882][ T6037]  ? do_futex+0x310/0x320
[  163.912252][ T6037]  ? __ia32_sys_get_robust_list+0x100/0x100
[  163.918189][ T6037]  ? ipc_obtain_object_check+0x1a0/0x1a0
[  163.923869][ T6037]  __x64_sys_shmget+0x13d/0x180
[  163.928798][ T6037]  ? lock_chain_count+0x20/0x20
[  163.933691][ T6037]  ? shm_more_checks+0x80/0x80
[  163.938503][ T6037]  ? lockdep_hardirqs_on+0x94/0x140
[  163.943747][ T6037]  do_syscall_64+0x4c/0xa0
[  163.948197][ T6037]  ? clear_bhb_loop+0x60/0xb0
[  163.952911][ T6037]  ? clear_bhb_loop+0x60/0xb0
[  163.957634][ T6037]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  163.963575][ T6037] RIP: 0033:0x7fc15f59e159
[  163.968036][ T6037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  163.987689][ T6037] RSP: 002b:00007fc16050a028 EFLAGS: 00000246 ORIG_RAX: 000000000000001d
[  163.996145][ T6037] RAX: ffffffffffffffda RBX: 00007fc15f825fa0 RCX: 00007fc15f59e159
[  164.004140][ T6037] RDX: 0000000054001800 RSI: 0000000000003000 RDI: 0000000000000000
[  164.012124][ T6037] RBP: 00007fc15f63506b R08: 0000000000000000 R09: 0000000000000000
[  164.020100][ T6037] R10: 000020000010d000 R11: 0000000000000246 R12: 0000000000000000
[  164.028072][ T6037] R13: 00007fc15f826038 R14: 00007fc15f825fa0 R15: 00007ffdf70f33e8
[  164.036090][ T6037]  </TASK>
[  164.136043][  T126] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  164.174440][  T126] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  164.219647][  T126] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  164.258409][  T126] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  164.272323][  T126] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  164.290865][  T126] usb 4-1: config 0 descriptor??
[  164.717845][  T126] plantronics 0003:047F:FFFF.0005: unknown main item tag 0xd
[  164.756498][  T126] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving
[  164.795602][  T126] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  164.820441][ T6063] loop0: detected capacity change from 0 to 1024
[  164.867381][ T6063] EXT4-fs: Ignoring removed bh option
[  164.873636][ T6063] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  165.025129][ T6063] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  165.082236][  T126] usb 4-1: USB disconnect, device number 9
[  165.198866][ T6068] fido_id[6068]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  165.388550][ T4280] EXT4-fs (loop0): unmounting filesystem.
[  165.404188][ T5464] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  165.518273][ T6083] FAULT_INJECTION: forcing a failure.
[  165.518273][ T6083] name fail_futex, interval 1, probability 0, space 0, times 1
[  165.541411][ T6083] CPU: 1 PID: 6083 Comm: syz.0.574 Not tainted syzkaller #0
[  165.548773][ T6083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  165.558873][ T6083] Call Trace:
[  165.562181][ T6083]  <TASK>
[  165.565147][ T6083]  dump_stack_lvl+0x188/0x24e
[  165.569893][ T6083]  ? show_regs_print_info+0x12/0x12
[  165.575131][ T6083]  ? load_image+0x410/0x410
[  165.579694][ T6083]  ? preempt_schedule_common+0xa5/0xd0
[  165.585215][ T6083]  should_fail_ex+0x390/0x4c0
[  165.589943][ T6083]  get_futex_key+0x1b1/0x1000
[  165.594656][ T6083]  ? preempt_schedule_thunk+0x16/0x18
[  165.600081][ T6083]  ? try_to_wake_up+0x6c1/0x10b0
[  165.605067][ T6083]  ? futex_setup_timer+0xc0/0xc0
[  165.610053][ T6083]  futex_wake+0x123/0x4f0
[  165.614435][ T6083]  ? futex_wake_mark+0x150/0x150
[  165.619412][ T6083]  ? __lock_acquire+0x7c40/0x7c40
[  165.624485][ T6083]  ? file_end_write+0x156/0x250
[  165.629394][ T6083]  ? vfs_write+0x777/0x9a0
[  165.633868][ T6083]  do_futex+0x2e2/0x320
[  165.638072][ T6083]  ? __ia32_sys_get_robust_list+0x100/0x100
[  165.644020][ T6083]  __se_sys_futex+0x381/0x410
[  165.648743][ T6083]  ? __x64_sys_futex+0xf0/0xf0
[  165.653560][ T6083]  ? __x64_sys_futex+0x1d/0xf0
[  165.658374][ T6083]  do_syscall_64+0x4c/0xa0
[  165.662846][ T6083]  ? clear_bhb_loop+0x60/0xb0
[  165.667556][ T6083]  ? clear_bhb_loop+0x60/0xb0
[  165.672275][ T6083]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  165.678215][ T6083] RIP: 0033:0x7fdaf5f9e159
[  165.682693][ T6083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  165.702340][ T6083] RSP: 002b:00007fdaf6ef20e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  165.710800][ T6083] RAX: ffffffffffffffda RBX: 00007fdaf6225fa8 RCX: 00007fdaf5f9e159
[  165.718839][ T6083] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fdaf6225fac
[  165.726864][ T6083] RBP: 00007fdaf6225fa0 R08: 001ba1957ed8fa4c R09: 0000000000000000
[  165.734883][ T6083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  165.742891][ T6083] R13: 00007fdaf6226038 R14: 00007fffc4535b00 R15: 00007fffc4535be8
[  165.750921][ T6083]  </TASK>
[  165.784549][ T5464] usb 2-1: Using ep0 maxpacket: 32
[  165.801057][ T5464] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  165.834317][ T5464] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  165.860419][ T5464] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  165.889478][ T5464] usb 2-1: config 0 descriptor??
[  165.939523][ T5464] hub 2-1:0.0: USB hub found
[  166.138441][ T6103] netlink: 12 bytes leftover after parsing attributes in process `syz.0.585'.
[  166.147575][ T6103] netlink: 12 bytes leftover after parsing attributes in process `syz.0.585'.
[  166.159184][ T6103] netlink: 20 bytes leftover after parsing attributes in process `syz.0.585'.
[  166.159382][ T5464] hub 2-1:0.0: 1 port detected
[  166.168418][ T6103] netlink: 20 bytes leftover after parsing attributes in process `syz.0.585'.
[  166.581011][ T5464] usb 2-1: USB disconnect, device number 3
[  166.750851][ T6117] loop3: detected capacity change from 0 to 1024
[  166.793928][ T6117] hfsplus: request for non-existent node -709361664 in B*Tree
[  166.821912][ T6117] hfsplus: request for non-existent node -709361664 in B*Tree
[  166.846203][ T6117] hfsplus: b-tree write err: -5, ino 8
[  166.870531][ T6117] EXT4-fs (loop3): VFS: Can't find ext4 filesystem
[  166.927612][ T6107] loop0: detected capacity change from 0 to 32768
[  167.062819][ T6107] XFS (loop0): Mounting V5 Filesystem
[  167.153678][ T6107] XFS (loop0): Ending clean mount
[  167.172305][ T6107] XFS (loop0): Quotacheck needed: Please wait.
[  167.251352][ T6131] loop1: detected capacity change from 0 to 512
[  167.300483][ T6131] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8806c118, mo2=0002]
[  167.309487][ T6107] XFS (loop0): Quotacheck: Done.
[  167.316449][ T6131] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[  167.338191][ T6107] XFS (loop0): User initiated shutdown received.
[  167.354349][ T6107] XFS (loop0): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:499).  Shutting down filesystem.
[  167.374447][ T6107] XFS (loop0): Please unmount the filesystem and rectify the problem(s)
[  167.389493][ T6131] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2
[  167.494818][ T6131] EXT4-fs (loop1): 1 truncate cleaned up
[  167.500538][ T6131] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  167.520787][ T6134] netlink: 12 bytes leftover after parsing attributes in process `syz.2.598'.
[  167.555467][ T6134] netlink: 12 bytes leftover after parsing attributes in process `syz.2.598'.
[  167.578236][ T4280] XFS (loop0): Unmounting Filesystem
[  167.580913][ T6115] loop4: detected capacity change from 0 to 32768
[  167.605937][ T6134] netlink: 20 bytes leftover after parsing attributes in process `syz.2.598'.
[  167.644503][ T6134] netlink: 20 bytes leftover after parsing attributes in process `syz.2.598'.
[  167.664752][ T6131] System zones: 1-12
[  167.670225][ T6131] EXT4-fs (loop1): re-mounted. Quota mode: writeback.
[  167.790390][ T6115] XFS (loop4): Mounting V5 Filesystem
[  167.917629][ T6115] XFS (loop4): Ending clean mount
[  167.932026][ T4271] EXT4-fs (loop1): unmounting filesystem.
[  168.140799][ T4276] XFS (loop4): Unmounting Filesystem
[  168.794422][ T6175] loop0: detected capacity change from 0 to 1024
[  169.470199][  T126] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  169.689962][  T126] usb 5-1: Using ep0 maxpacket: 8
[  169.697391][  T126] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  169.748433][  T126] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  169.789655][  T126] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  169.803607][ T6181] loop2: detected capacity change from 0 to 32768
[  169.861287][  T126] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  169.889345][ T6181] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 11
[  169.940857][  T126] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  169.996579][  T126] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  170.192348][ T6183] loop0: detected capacity change from 0 to 131072
[  170.203426][ T6183] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0)
[  170.211684][ T6183] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  170.225500][ T6183] F2FS-fs (loop0): invalid crc value
[  170.272704][  T126] usb 5-1: GET_CAPABILITIES returned 0
[  170.278642][  T126] usbtmc 5-1:16.0: can't read capabilities
[  170.290162][ T6183] F2FS-fs (loop0): Found nat_bits in checkpoint
[  170.345175][ T6183] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  170.352321][ T6183] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  170.439541][ T6201] netlink: 8 bytes leftover after parsing attributes in process `syz.1.620'.
[  170.523763][ T4374] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 11
[  170.545190][  T126] usb 5-1: USB disconnect, device number 3
[  171.134337][ T4324] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  171.189745][ T5469] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  171.219647][ T6219] netlink: 12 bytes leftover after parsing attributes in process `syz.3.627'.
[  171.326311][ T4324] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  171.354160][ T4324] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  171.371771][ T4324] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  171.384416][ T5469] usb 3-1: Using ep0 maxpacket: 32
[  171.401707][ T5469] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  171.434069][ T4324] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  171.444455][ T4324] usb 1-1: SerialNumber: syz
[  171.449899][ T5469] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  171.479709][ T5469] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  171.521842][ T5469] usb 3-1: config 0 descriptor??
[  171.533400][ T5469] hub 3-1:0.0: USB hub found
[  171.687576][ T4324] usb 1-1: 0:2 : does not exist
[  171.710852][ T4324] usb 1-1: unit 2 not found!
[  171.746721][ T5469] hub 3-1:0.0: 1 port detected
[  171.843483][ T4324] usb 1-1: USB disconnect, device number 6
[  171.977830][ T6225] loop3: detected capacity change from 0 to 8192
[  172.175364][ T5469] usb 3-1: USB disconnect, device number 7
[  172.185695][ T4374] udevd[4374]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  172.470964][ T6224] loop4: detected capacity change from 0 to 131072
[  172.479586][ T6224] F2FS-fs (loop4): Invalid log sectorsize (67108873)
[  172.486381][ T6224] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  172.497244][ T6224] F2FS-fs (loop4): invalid crc value
[  172.556312][ T4679] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1)
[  172.584988][ T6224] F2FS-fs (loop4): Found nat_bits in checkpoint
[  172.595850][ T4679] FAT-fs (loop3): Filesystem has been set read-only
[  172.681295][ T6224] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  172.688959][ T6224] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  172.764990][   T26] audit: type=1800 audit(1790061316.624:31): pid=6224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.630" name="file1" dev="loop4" ino=7 res=0 errno=0
[  172.866715][ T6239] loop0: detected capacity change from 0 to 512
[  172.895909][ T6239] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  172.952673][ T6240] loop3: detected capacity change from 0 to 512
[  172.995002][ T6239] EXT4-fs (loop0): 1 truncate cleaned up
[  173.000718][ T6239] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  173.025686][ T6240] EXT4-fs: Mount option(s) incompatible with ext2
[  173.348951][ T4280] EXT4-fs (loop0): unmounting filesystem.
[  173.453403][ T6251] input: syz0 as /devices/virtual/input/input13
[  174.248924][ T6252] loop2: detected capacity change from 0 to 40427
[  174.274844][ T6252] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64)
[  174.291088][ T6252] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  174.323221][ T6252] F2FS-fs (loop2): invalid crc value
[  174.335782][ T6252] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  174.511122][ T6252] F2FS-fs (loop2): Start checkpoint disabled!
[  174.523741][ T6272] loop0: detected capacity change from 0 to 512
[  174.536650][ T6272] EXT4-fs (loop0): Test dummy encryption mode enabled
[  174.570579][ T6272] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  174.587744][ T6252] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  174.601880][ T6252] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  174.630659][ T6272] EXT4-fs error (device loop0): ext4_orphan_get:1435: comm syz.0.648: bad orphan inode 131083
[  174.732056][ T6272] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  174.825532][    T9] kworker/u4:0: attempt to access beyond end of device
[  174.825532][    T9] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  174.840758][ T6272] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 13: comm syz.0.648: path /138/bus: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  175.072424][ T4280] EXT4-fs (loop0): unmounting filesystem.
[  175.512578][ T6294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.655'.
[  176.249357][ T6313] loop1: detected capacity change from 0 to 2048
[  176.318238][ T6313] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  176.948621][ T6326] loop1: detected capacity change from 0 to 256
[  177.022316][ T6326] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d)
[  177.080453][ T6328] netlink: 4 bytes leftover after parsing attributes in process `syz.4.666'.
[  177.396652][ T6337] FAULT_INJECTION: forcing a failure.
[  177.396652][ T6337] name failslab, interval 1, probability 0, space 0, times 0
[  177.397117][ T6339] loop4: detected capacity change from 0 to 164
[  177.460213][ T6337] CPU: 0 PID: 6337 Comm: syz.2.670 Not tainted syzkaller #0
[  177.467576][ T6337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  177.477672][ T6337] Call Trace:
[  177.480981][ T6337]  <TASK>
[  177.483938][ T6337]  dump_stack_lvl+0x188/0x24e
[  177.488657][ T6337]  ? show_regs_print_info+0x12/0x12
[  177.493895][ T6337]  ? load_image+0x410/0x410
[  177.498445][ T6337]  ? __lock_acquire+0x7c40/0x7c40
[  177.503518][ T6337]  should_fail_ex+0x390/0x4c0
[  177.508243][ T6337]  should_failslab+0x5/0x20
[  177.512782][ T6337]  slab_pre_alloc_hook+0x59/0x300
[  177.517850][ T6337]  ? __vmalloc_node_range+0x584/0x1380
[  177.523353][ T6337]  __kmem_cache_alloc_node+0x4f/0x270
[  177.528774][ T6337]  ? __vmalloc_node_range+0x584/0x1380
[  177.534271][ T6337]  __kmalloc_node+0xa2/0x240
[  177.538907][ T6337]  __vmalloc_node_range+0x584/0x1380
[  177.544256][ T6337]  ? aa_get_newest_label+0xf9/0x5b0
[  177.549495][ T6337]  ? free_vm_area+0x50/0x50
[  177.554028][ T6337]  ? end_current_label_crit_section+0x170/0x170
[  177.560302][ T6337]  ? __lock_acquire+0x7c40/0x7c40
[  177.565344][ T6337]  ? bpf_prog_alloc_no_stats+0x37/0x3a0
[  177.570909][ T6337]  __vmalloc+0x76/0x80
[  177.574992][ T6337]  ? bpf_prog_alloc_no_stats+0x37/0x3a0
[  177.580552][ T6337]  bpf_prog_alloc_no_stats+0x37/0x3a0
[  177.585941][ T6337]  ? bpf_prog_alloc+0x13/0x1b0
[  177.590716][ T6337]  bpf_prog_alloc+0x1c/0x1b0
[  177.595323][ T6337]  bpf_prog_load+0x7d4/0x1530
[  177.600020][ T6337]  ? map_freeze+0x390/0x390
[  177.604535][ T6337]  ? __might_fault+0xa6/0x120
[  177.609226][ T6337]  ? __might_fault+0xa6/0x120
[  177.613907][ T6337]  ? __might_fault+0xc2/0x120
[  177.618592][ T6337]  ? __might_fault+0xa6/0x120
[  177.623275][ T6337]  ? bpf_lsm_bpf+0x5/0x10
[  177.627615][ T6337]  ? security_bpf+0x7a/0xa0
[  177.632192][ T6337]  __sys_bpf+0x5b8/0x780
[  177.636447][ T6337]  ? bpf_link_show_fdinfo+0x380/0x380
[  177.641845][ T6337]  ? lock_chain_count+0x20/0x20
[  177.646715][ T6337]  __x64_sys_bpf+0x78/0x90
[  177.651146][ T6337]  do_syscall_64+0x4c/0xa0
[  177.655570][ T6337]  ? clear_bhb_loop+0x60/0xb0
[  177.660252][ T6337]  ? clear_bhb_loop+0x60/0xb0
[  177.664939][ T6337]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  177.670849][ T6337] RIP: 0033:0x7fc15f59e159
[  177.675275][ T6337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  177.694891][ T6337] RSP: 002b:00007fc16050a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  177.703315][ T6337] RAX: ffffffffffffffda RBX: 00007fc15f825fa0 RCX: 00007fc15f59e159
[  177.711297][ T6337] RDX: 0000000000000094 RSI: 0000200000000280 RDI: 0000000000000005
[  177.719276][ T6337] RBP: 00007fc15f63506b R08: 0000000000000000 R09: 0000000000000000
[  177.727250][ T6337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  177.735224][ T6337] R13: 00007fc15f826038 R14: 00007fc15f825fa0 R15: 00007ffdf70f33e8
[  177.743213][ T6337]  </TASK>
[  177.817830][ T6339] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  178.282768][ T6322] loop0: detected capacity change from 0 to 40427
[  178.363090][ T6322] F2FS-fs (loop0): Corrupted extension count (64 + 1 > 64)
[  178.373053][ T6322] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  178.427287][ T6322] F2FS-fs (loop0): invalid crc value
[  178.458728][ T6322] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  178.537332][ T6354] netlink: 27 bytes leftover after parsing attributes in process `syz.3.677'.
[  178.633766][ T6322] F2FS-fs (loop0): Start checkpoint disabled!
[  178.676786][ T6322] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  178.692159][ T6322] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  178.861752][   T41] kworker/u4:2: attempt to access beyond end of device
[  178.861752][   T41] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  179.189868][ T6374] FAULT_INJECTION: forcing a failure.
[  179.189868][ T6374] name failslab, interval 1, probability 0, space 0, times 0
[  179.233713][ T6374] CPU: 0 PID: 6374 Comm: syz.4.684 Not tainted syzkaller #0
[  179.241083][ T6374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  179.251180][ T6374] Call Trace:
[  179.254494][ T6374]  <TASK>
[  179.257447][ T6374]  dump_stack_lvl+0x188/0x24e
[  179.262161][ T6374]  ? show_regs_print_info+0x12/0x12
[  179.267384][ T6374]  ? load_image+0x410/0x410
[  179.271903][ T6374]  ? __lock_acquire+0x7c40/0x7c40
[  179.276948][ T6374]  should_fail_ex+0x390/0x4c0
[  179.281641][ T6374]  should_failslab+0x5/0x20
[  179.286169][ T6374]  slab_pre_alloc_hook+0x59/0x300
[  179.291230][ T6374]  kmem_cache_alloc_node+0x5a/0x310
[  179.296451][ T6374]  ? alloc_vmap_area+0x6a3/0x18d0
[  179.301501][ T6374]  alloc_vmap_area+0x6a3/0x18d0
[  179.306380][ T6374]  ? vm_map_ram+0xab0/0xab0
[  179.310894][ T6374]  ? rcu_is_watching+0x11/0xa0
[  179.315674][ T6374]  __get_vm_area_node+0x158/0x330
[  179.320707][ T6374]  ? finish_task_switch+0x262/0x8e0
[  179.325922][ T6374]  __vmalloc_node_range+0x357/0x1380
[  179.331217][ T6374]  ? bpf_prog_alloc_no_stats+0x37/0x3a0
[  179.336800][ T6374]  ? aa_get_newest_label+0xf9/0x5b0
[  179.342017][ T6374]  ? free_vm_area+0x50/0x50
[  179.346537][ T6374]  ? end_current_label_crit_section+0x170/0x170
[  179.352794][ T6374]  ? __lock_acquire+0x7c40/0x7c40
[  179.357859][ T6374]  ? bpf_prog_alloc_no_stats+0x37/0x3a0
[  179.363415][ T6374]  __vmalloc+0x76/0x80
[  179.367491][ T6374]  ? bpf_prog_alloc_no_stats+0x37/0x3a0
[  179.373077][ T6374]  bpf_prog_alloc_no_stats+0x37/0x3a0
[  179.378484][ T6374]  ? bpf_prog_alloc+0x13/0x1b0
[  179.383270][ T6374]  bpf_prog_alloc+0x1c/0x1b0
[  179.387885][ T6374]  bpf_prog_load+0x7d4/0x1530
[  179.392590][ T6374]  ? map_freeze+0x390/0x390
[  179.397105][ T6374]  ? __might_fault+0xa6/0x120
[  179.401797][ T6374]  ? __might_fault+0xa6/0x120
[  179.406480][ T6374]  ? __might_fault+0xc2/0x120
[  179.411163][ T6374]  ? __might_fault+0xa6/0x120
[  179.415844][ T6374]  ? bpf_lsm_bpf+0x5/0x10
[  179.420185][ T6374]  ? security_bpf+0x7a/0xa0
[  179.424701][ T6374]  __sys_bpf+0x5b8/0x780
[  179.428959][ T6374]  ? bpf_link_show_fdinfo+0x380/0x380
[  179.434352][ T6374]  ? lock_chain_count+0x20/0x20
[  179.439221][ T6374]  __x64_sys_bpf+0x78/0x90
[  179.443651][ T6374]  do_syscall_64+0x4c/0xa0
[  179.448077][ T6374]  ? clear_bhb_loop+0x60/0xb0
[  179.452768][ T6374]  ? clear_bhb_loop+0x60/0xb0
[  179.457452][ T6374]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  179.463358][ T6374] RIP: 0033:0x7f1dbc39e159
[  179.467785][ T6374] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  179.487402][ T6374] RSP: 002b:00007f1dbd2f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  179.495824][ T6374] RAX: ffffffffffffffda RBX: 00007f1dbc625fa0 RCX: 00007f1dbc39e159
[  179.503803][ T6374] RDX: 0000000000000094 RSI: 0000200000000280 RDI: 0000000000000005
[  179.511785][ T6374] RBP: 00007f1dbc43506b R08: 0000000000000000 R09: 0000000000000000
[  179.519761][ T6374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  179.527734][ T6374] R13: 00007f1dbc626038 R14: 00007f1dbc625fa0 R15: 00007ffd5a0dbd78
[  179.535725][ T6374]  </TASK>
[  181.232628][ T6477] loop3: detected capacity change from 0 to 512
[  181.463087][ T6477] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  181.622765][ T6477] EXT4-fs (loop3): 1 truncate cleaned up
[  181.650558][ T6477] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  181.835673][ T4679] EXT4-fs (loop3): unmounting filesystem.
[  182.061466][ T6498] netlink: 8 bytes leftover after parsing attributes in process `syz.3.693'.
[  182.136776][ T6497] loop2: detected capacity change from 0 to 128
[  182.426411][ T6500] loop3: detected capacity change from 0 to 128
[  182.529884][ T6500] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  182.647002][ T6500] ext4 filesystem being mounted at /92/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  182.793052][ T6506] loop2: detected capacity change from 0 to 164
[  182.883208][ T6506] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  182.939082][ T6500] EXT4-fs (loop3): shut down requested (2)
[  183.080404][ T6494] loop1: detected capacity change from 0 to 131072
[  183.107120][ T6494] F2FS-fs (loop1): Invalid log sectorsize (67108873)
[  183.113911][ T6494] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  183.122752][ T6494] F2FS-fs (loop1): invalid crc value
[  183.158054][ T6494] F2FS-fs (loop1): Found nat_bits in checkpoint
[  183.208924][ T6494] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  183.216650][ T6494] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  183.238918][ T4679] EXT4-fs (loop3): unmounting filesystem.
[  183.347818][   T26] audit: type=1800 audit(1790061327.204:32): pid=6494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.695" name="file1" dev="loop1" ino=7 res=0 errno=0
[  183.384133][    T7] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  183.596623][    T7] usb 1-1: Using ep0 maxpacket: 8
[  183.605296][    T7] usb 1-1: config index 0 descriptor too short (expected 74, got 45)
[  183.650468][    T7] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  183.673267][    T7] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  183.705065][    T7] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[  183.737063][    T7] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  183.739671][ T6519] loop2: detected capacity change from 0 to 8192
[  183.788221][    T7] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  183.817368][    T7] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  183.863805][    T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  184.049914][ T4285] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1)
[  184.069313][ T4285] FAT-fs (loop2): Filesystem has been set read-only
[  184.115363][    T7] usb 1-1: GET_CAPABILITIES returned 0
[  184.131169][    T7] usbtmc 1-1:16.0: can't read capabilities
[  184.176142][ T6516] loop4: detected capacity change from 0 to 32768
[  184.282252][   T26] audit: type=1800 audit(1790061328.134:33): pid=6516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.703" name="file1" dev="loop4" ino=4 res=0 errno=0
[  184.360748][    C1] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[  184.373322][ T6510] usbtmc 1-1:16.0: Unable to send data, error -71
[  184.403376][ T4324] usb 1-1: USB disconnect, device number 7
[  184.472828][   T26] audit: type=1800 audit(1790061328.324:34): pid=6532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.703" name="file1" dev="loop4" ino=4 res=0 errno=0
[  184.488350][ T6534] loop2: detected capacity change from 0 to 1024
[  184.542134][ T6536] loop1: detected capacity change from 0 to 128
[  184.666963][ T6534] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  184.685801][ T6534] ext4 filesystem being mounted at /143/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  184.889603][ T6443] EXT4-fs error (device loop2): ext4_map_blocks:747: inode #15: comm kworker/u4:35: lblock 0 mapped to illegal pblock 0 (length 6)
[  184.926436][ T6443] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117
[  185.007378][ T6443] EXT4-fs (loop2): This should not happen!! Data will be lost
[  185.007378][ T6443] 
[  185.016810][ T6542] loop3: detected capacity change from 0 to 256
[  185.059256][ T6443] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm kworker/u4:35: bg 0: block 112: padding at end of block bitmap is not set
[  185.102833][ T6443] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 48 with error 28
[  185.134910][ T6542] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d)
[  185.170114][ T6443] EXT4-fs (loop2): This should not happen!! Data will be lost
[  185.170114][ T6443] 
[  185.210079][ T6443] EXT4-fs (loop2): Total free blocks count 0
[  185.240621][ T6443] EXT4-fs (loop2): Free/Dirty block details
[  185.269954][ T6443] EXT4-fs (loop2): free_blocks=0
[  185.275629][ T6443] EXT4-fs (loop2): dirty_blocks=48
[  185.276394][ T6545] loop0: detected capacity change from 0 to 4096
[  185.280758][ T6443] EXT4-fs (loop2): Block reservation details
[  185.495812][ T6549] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  185.624471][ T6545] NILFS (loop0): error -2 reading inode: ino=35184372089024
[  186.594348][ T5469] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  186.725143][ T6582] device-mapper: ioctl: Invalid ioctl structure: name m, dev f800
[  186.794222][ T5469] usb 1-1: Using ep0 maxpacket: 16
[  186.802496][ T5469] usb 1-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  186.832998][ T5469] usb 1-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  186.893144][ T5469] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  186.920379][ T5469] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  186.991165][ T6572] loop1: detected capacity change from 0 to 32768
[  187.058214][   T26] audit: type=1800 audit(1790061330.914:35): pid=6572 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.725" name="file1" dev="loop1" ino=4 res=0 errno=0
[  187.060437][ T6589] support for the xor transformation has been removed.
[  187.203039][   T26] audit: type=1800 audit(1790061331.054:36): pid=6591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.725" name="file1" dev="loop1" ino=4 res=0 errno=0
[  187.399926][ T5469] mcp2221 0003:04D8:00DD.0006: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0
[  187.595404][ T5469] usb 1-1: USB disconnect, device number 8
[  188.390138][ T6614] loop0: detected capacity change from 0 to 1024
[  188.445244][ T6614] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  188.504499][ T6614] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  188.549727][ T6614] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002]
[  188.563458][ T6621] loop3: detected capacity change from 0 to 256
[  188.591375][ T6614] System zones: 0-1, 3-36
[  188.602367][ T6621] exfat: Deprecated parameter 'utf8'
[  188.620113][ T6621] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x72bddf51, utbl_chksum : 0xe619d30d)
[  188.660168][ T6624] loop1: detected capacity change from 0 to 128
[  188.674344][ T6614] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  188.683219][ T6624] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  188.753595][   T26] audit: type=1800 audit(1790061332.604:37): pid=6624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.745" name="bus" dev="loop1" ino=115 res=0 errno=0
[  188.847849][ T6628] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  188.901423][ T6624] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  188.932198][ T6628] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  189.062219][ T4280] EXT4-fs (loop0): unmounting filesystem.
[  189.473055][ T6643] loop1: detected capacity change from 0 to 128
[  189.537312][ T6643] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  189.550301][ T6643] ext4 filesystem being mounted at /180/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  189.600680][ T6643] EXT4-fs (loop1): shut down requested (2)
[  189.641761][ T4271] EXT4-fs (loop1): unmounting filesystem.
[  189.842050][ T6631] loop2: detected capacity change from 0 to 32768
[  189.894473][  T126] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  190.133634][  T126] usb 4-1: unable to get BOS descriptor or descriptor too short
[  190.153680][  T126] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  190.174229][  T126] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  190.184418][  T126] usb 4-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30
[  190.216449][  T126] usb 4-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188
[  190.250212][  T126] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  190.271759][  T126] usb 4-1: config 1 interface 1 has no altsetting 0
[  190.302950][  T126] usb 4-1: string descriptor 0 read error: -22
[  190.314530][  T126] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  190.343978][  T126] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  190.542618][ T6667] netlink: 12 bytes leftover after parsing attributes in process `syz.1.761'.
[  190.760874][ T6665] loop4: detected capacity change from 0 to 8192
[  190.786627][ T6671] loop2: detected capacity change from 0 to 256
[  190.793702][  T126] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2)
[  190.867277][ T6665] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  190.900768][ T6665] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal
[  190.920387][ T6665] REISERFS (device loop4): using ordered data mode
[  190.927403][ T6665] reiserfs: using flush barriers
[  190.937045][ T6665] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  190.954377][ T6665] REISERFS (device loop4): checking transaction log (loop4)
[  190.964518][ T6665] REISERFS (device loop4): Using r5 hash to sort names
[  190.972232][ T6665] REISERFS (device loop4): using 3.5.x disk format
[  190.982319][ T6665] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  191.239529][  T126] usb 4-1: 2:0: failed to get current value for ch 1 (-71)
[  191.292305][  T126] usb 4-1: USB disconnect, device number 10
[  191.365950][ T4413] udevd[4413]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  191.377749][ T6676] loop2: detected capacity change from 0 to 4096
[  191.517290][ T6679] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  191.583408][ T6676] NILFS (loop2): error -2 reading inode: ino=35184372089024
[  192.338851][ T6681] loop0: detected capacity change from 0 to 40427
[  192.354669][ T6681] F2FS-fs (loop0): invalid crc value
[  192.377021][ T6681] F2FS-fs (loop0): Found nat_bits in checkpoint
[  192.444146][ T6681] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  192.538830][ T4280] syz-executor: attempt to access beyond end of device
[  192.538830][ T4280] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  192.874613][ T6701] netlink: 12 bytes leftover after parsing attributes in process `syz.0.781'.
[  193.707230][ T6698] loop1: detected capacity change from 0 to 40427
[  193.752775][ T6698] F2FS-fs (loop1): invalid crc value
[  193.778585][ T6698] F2FS-fs (loop1): Found nat_bits in checkpoint
[  193.914314][  T126] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  193.914856][ T6698] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  194.072392][ T6723] loop2: detected capacity change from 0 to 256
[  194.126470][  T126] usb 5-1: Using ep0 maxpacket: 16
[  194.151420][  T126] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  194.181518][ T4271] syz-executor: attempt to access beyond end of device
[  194.181518][ T4271] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  194.184100][  T126] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  194.227103][  T126] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  194.300470][  T126] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  194.316587][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  194.322975][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  194.344318][ T6725] loop3: detected capacity change from 0 to 4096
[  194.452032][ T6728] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  194.473740][ T6726] FAT-fs (loop2): error, clusters badly computed (0 != 128)
[  194.501277][ T6725] NILFS (loop3): error -2 reading inode: ino=35184372089024
[  194.520163][ T6723] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  194.549487][ T6726] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  194.604191][ T6723] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  194.636270][ T6723] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  194.677674][ T6723] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  194.717592][ T6723] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  194.755766][ T6723] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  194.769535][  T126] mcp2221 0003:04D8:00DD.0007: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0
[  194.800176][ T6723] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  194.824363][ T6723] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  194.843419][ T6723] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  194.860101][ T6723] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  194.885521][ T6723] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  194.960494][ T6723] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  195.029752][ T6723] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  195.049333][ T5470] usb 5-1: USB disconnect, device number 4
[  195.051572][ T6723] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  195.096815][ T6723] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  195.128068][ T6723] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  195.148420][ T6723] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  195.168656][ T6723] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  195.184098][ T6723] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  195.206375][ T6723] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  195.250597][ T6723] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  195.267891][ T6723] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  195.324399][ T6723] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  195.332979][ T6723] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  195.350468][ T6723] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  195.359637][ T6723] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  195.375126][ T6723] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  195.400021][ T6723] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  195.429884][ T6723] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  195.451286][ T6723] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  195.469214][ T6723] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  195.502207][ T6723] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  195.522315][ T6723] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  195.526661][ T6742] loop0: detected capacity change from 0 to 128
[  195.539691][ T6723] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  195.554237][ T6723] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  195.573824][ T6723] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  195.612186][ T6723] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  195.672327][ T6723] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  195.700306][ T6723] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  195.714133][ T6723] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  195.728626][ T4280] FAT-fs (loop0): error, corrupted directory (invalid entries)
[  195.739480][ T4280] FAT-fs (loop0): Filesystem has been set read-only
[  195.739493][ T6723] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  195.747772][ T4280] FAT-fs (loop0): error, corrupted directory (invalid entries)
[  195.799953][ T6723] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  195.844078][ T6723] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  195.853349][ T6723] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  195.883182][ T6723] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  195.920836][ T6723] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  195.960251][ T6723] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  195.961362][ T6748] loop3: detected capacity change from 0 to 256
[  196.004782][ T6723] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  196.013378][ T6723] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  196.042699][ T6723] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  196.062885][ T6723] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  196.071774][ T6723] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  196.090260][ T6723] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  196.134135][ T6723] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  196.152922][ T6723] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  196.183245][ T6723] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  196.203517][ T6723] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  196.229055][ T6723] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  196.269040][ T6723] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  196.293488][ T6723] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  196.357960][ T6723] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  196.401576][ T6723] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  196.413752][ T6753] vcan0: tx drop: invalid da for name 0x0000000000000002
[  196.427550][ T6723] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  196.440395][   T41] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  196.451277][ T6723] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  196.480730][ T6723] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  196.507547][ T6723] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  196.524313][ T6723] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  196.545217][ T6723] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  196.578960][ T6723] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  196.593916][   T41] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  196.614213][ T6723] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  196.643301][ T6723] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  196.659609][ T6723] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  196.669471][ T6723] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  196.683238][ T6723] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  196.693124][ T6723] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  196.707124][ T6723] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  196.720228][ T6723] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  196.761241][ T6723] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  196.763377][   T41] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  196.790892][ T6723] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  196.810882][ T6723] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  196.828567][ T6723] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  196.837454][ T6759] netlink: 32 bytes leftover after parsing attributes in process `syz.1.798'.
[  196.853463][ T6723] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  196.862465][ T6759] (unnamed net_device) (uninitialized): option ad_select: invalid value (10)
[  196.875791][ T6723] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  196.885191][ T6723] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  196.894094][ T6723] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  196.923620][ T6723] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  196.952014][ T6723] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  196.978238][ T6723] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  196.990702][   T41] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.003038][ T6723] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  197.042275][ T6723] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  197.067381][ T6723] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  197.081882][ T6723] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  197.101591][    T7] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  197.110278][ T6723] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  197.135624][ T6723] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  197.169520][ T6723] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  197.191391][ T6723] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  197.232169][   T26] audit: type=1800 audit(1790061341.084:38): pid=6723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.791" name="file1" dev="loop2" ino=1048637 res=0 errno=0
[  197.314254][    T7] usb 4-1: Using ep0 maxpacket: 8
[  197.327415][    T7] usb 4-1: config index 0 descriptor too short (expected 74, got 45)
[  197.363077][    T7] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  197.386428][    T7] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  197.401565][    T7] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[  197.416522][    T7] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  197.457807][    T7] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  197.491479][    T7] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  197.512716][    T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  197.575301][ T4292] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  197.594627][ T4292] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  197.615917][ T4292] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  197.624866][ T4292] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  197.634141][ T4292] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  197.642432][ T4292] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  197.762511][    T7] usb 4-1: GET_CAPABILITIES returned 0
[  197.768334][    T7] usbtmc 4-1:16.0: can't read capabilities
[  197.973061][ T6761] usbtmc 4-1:16.0: send_request_dev_dep_msg_in returned -71
[  198.004747][ T4321] usb 4-1: USB disconnect, device number 11
[  198.084318][    T7] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  198.297047][    T7] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  198.317519][    T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  198.384803][    T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  198.426550][    T7] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  198.480631][    T7] usb 3-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94
[  198.509459][    T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  198.567592][    T7] usb 3-1: config 0 descriptor??
[  198.582743][ T6785] loop1: detected capacity change from 0 to 32768
[  198.617101][ T6773] chnl_net:caif_netlink_parms(): no params data found
[  198.645498][ T6785] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.808 (6785)
[  198.723230][ T6785] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  198.733872][ T6798] loop4: detected capacity change from 0 to 8192
[  198.762741][ T6785] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  198.804862][ T6785] BTRFS info (device loop1): setting nodatasum
[  198.812162][ T6785] BTRFS info (device loop1): force zlib compression, level 3
[  198.826705][ T6798] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  198.851575][ T5469] usb 3-1: USB disconnect, device number 8
[  198.874480][ T6785] BTRFS info (device loop1): turning on flush-on-commit
[  198.900239][ T6785] BTRFS info (device loop1): max_inline at 4096
[  198.910715][ T6785] BTRFS info (device loop1): using free space tree
[  199.148991][ T6785] BTRFS info (device loop1): enabling ssd optimizations
[  199.211340][ T6773] bridge0: port 1(bridge_slave_0) entered blocking state
[  199.229107][ T6773] bridge0: port 1(bridge_slave_0) entered disabled state
[  199.283365][ T6773] device bridge_slave_0 entered promiscuous mode
[  199.288479][ T6830] Invalid argument reading file caps for ./file0
[  199.386833][ T6773] bridge0: port 2(bridge_slave_1) entered blocking state
[  199.400897][ T6773] bridge0: port 2(bridge_slave_1) entered disabled state
[  199.449921][ T6773] device bridge_slave_1 entered promiscuous mode
[  199.587193][ T4271] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  199.628526][ T6773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  199.642954][ T6837] loop2: detected capacity change from 0 to 16
[  199.671303][ T6837] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  199.688144][ T4278] Bluetooth: hci3: command 0x0409 tx timeout
[  199.938539][ T6773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  200.080870][ T6844] loop4: detected capacity change from 0 to 512
[  200.286249][ T6848] netlink: 16 bytes leftover after parsing attributes in process `syz.2.818'.
[  200.418109][ T6773] team0: Port device team_slave_0 added
[  200.606398][ T6855] FAULT_INJECTION: forcing a failure.
[  200.606398][ T6855] name failslab, interval 1, probability 0, space 0, times 0
[  200.664756][ T6855] CPU: 1 PID: 6855 Comm: syz.3.819 Not tainted syzkaller #0
[  200.672112][ T6855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  200.682204][ T6855] Call Trace:
[  200.685516][ T6855]  <TASK>
[  200.688326][ T6863] loop2: detected capacity change from 0 to 256
[  200.688459][ T6855]  dump_stack_lvl+0x188/0x24e
[  200.699424][ T6855]  ? show_regs_print_info+0x12/0x12
[  200.704668][ T6855]  ? load_image+0x410/0x410
[  200.709223][ T6855]  ? __might_sleep+0xd0/0xd0
[  200.713853][ T6855]  ? __lock_acquire+0x7c40/0x7c40
[  200.718931][ T6855]  should_fail_ex+0x390/0x4c0
[  200.723662][ T6855]  should_failslab+0x5/0x20
[  200.728203][ T6855]  slab_pre_alloc_hook+0x59/0x300
[  200.733267][ T6855]  ? madvise_collapse+0x147/0xc30
[  200.738329][ T6855]  __kmem_cache_alloc_node+0x4f/0x270
[  200.743744][ T6855]  ? madvise_collapse+0x147/0xc30
[  200.748795][ T6855]  kmalloc_trace+0x26/0xe0
[  200.753241][ T6855]  madvise_collapse+0x147/0xc30
[  200.758119][ T6855]  ? generic_get_unmapped_area+0x530/0x530
[  200.763960][ T6855]  do_madvise+0x744/0x3520
[  200.768406][ T6855]  ? release_firmware_map_entry+0x187/0x187
[  200.774319][ T6855]  ? plist_add+0x3d7/0x490
[  200.778762][ T6855]  ? madvise_set_anon_name+0x420/0x420
[  200.784232][ T6855]  ? schedule+0xd0/0x180
[  200.788489][ T6855]  ? futex_wait_queue+0x23/0x1b0
[  200.793453][ T6855]  ? futex_wait_queue+0x134/0x1b0
[  200.798508][ T6855]  ? futex_unqueue+0xc7/0xf0
[  200.803129][ T6855]  ? futex_wait+0x4a3/0x5c0
[  200.807670][ T6855]  ? futex_wait_setup+0x270/0x270
[  200.812733][ T6855]  ? file_end_write+0x156/0x250
[  200.817602][ T6855]  ? vfs_write+0x777/0x9a0
[  200.822033][ T6855]  ? do_futex+0x310/0x320
[  200.826372][ T6855]  ? __ia32_sys_get_robust_list+0x100/0x100
[  200.832285][ T6855]  ? lock_chain_count+0x20/0x20
[  200.837157][ T6855]  __x64_sys_madvise+0xa2/0xb0
[  200.841933][ T6855]  do_syscall_64+0x4c/0xa0
[  200.846358][ T6855]  ? clear_bhb_loop+0x60/0xb0
[  200.851043][ T6855]  ? clear_bhb_loop+0x60/0xb0
[  200.855728][ T6855]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  200.861639][ T6855] RIP: 0033:0x7f783ed9e159
[  200.866066][ T6855] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  200.885685][ T6855] RSP: 002b:00007f783fc6a028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c
[  200.894107][ T6855] RAX: ffffffffffffffda RBX: 00007f783f025fa0 RCX: 00007f783ed9e159
[  200.902084][ T6855] RDX: 0000000000000019 RSI: 0000000000600722 RDI: 0000200000000000
[  200.910061][ T6855] RBP: 00007f783ee3506b R08: 0000000000000000 R09: 0000000000000000
[  200.918067][ T6855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  200.926068][ T6855] R13: 00007f783f026038 R14: 00007f783f025fa0 R15: 00007ffee5d351e8
[  200.934383][ T6855]  </TASK>
[  200.986499][ T6773] team0: Port device team_slave_1 added
[  201.086388][   T41] device hsr_slave_0 left promiscuous mode
[  201.101375][   T41] device hsr_slave_1 left promiscuous mode
[  201.102991][ T6867] loop4: detected capacity change from 0 to 256
[  201.115145][   T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  201.132039][ T6867] exfat: Deprecated parameter 'namecase'
[  201.159388][   T41] batman_adv: batadv0: Removing interface: batadv_slave_0
[  201.191172][ T6867] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  201.243066][   T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  201.294342][   T41] batman_adv: batadv0: Removing interface: batadv_slave_1
[  201.349754][   T41] device bridge_slave_1 left promiscuous mode
[  201.355095][ T6863] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d)
[  201.380759][   T41] bridge0: port 2(bridge_slave_1) entered disabled state
[  201.442232][   T41] device bridge_slave_0 left promiscuous mode
[  201.459004][   T41] bridge0: port 1(bridge_slave_0) entered disabled state
[  201.514156][ T4278] Bluetooth: hci1: command 0x0406 tx timeout
[  201.554125][ T6839] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  201.607810][   T41] device veth1_vlan left promiscuous mode
[  201.613738][   T41] device veth0_vlan left promiscuous mode
[  201.744293][ T6839] usb 2-1: Using ep0 maxpacket: 8
[  201.764322][ T4278] Bluetooth: hci3: command 0x041b tx timeout
[  201.771521][ T6839] usb 2-1: config index 0 descriptor too short (expected 74, got 45)
[  201.782484][ T6839] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  201.793797][ T6839] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  201.804028][ T6839] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[  201.815453][ T6839] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  201.826186][ T6839] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  201.839343][ T6839] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  201.884141][ T6839] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  202.121967][ T6839] usb 2-1: GET_CAPABILITIES returned 0
[  202.127644][ T6839] usbtmc 2-1:16.0: can't read capabilities
[  202.392463][ T4327] usb 2-1: USB disconnect, device number 4
[  202.531025][ T6839] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  202.724363][ T6839] usb 3-1: Using ep0 maxpacket: 32
[  202.733522][ T6839] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  202.751507][ T6839] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  202.762498][ T6839] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  202.778738][ T6839] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  202.820083][ T6839] usb 3-1: config 0 descriptor??
[  202.962444][ T6900] gadgetfs: bound to dummy_udc driver
[  202.978667][   T41] team0 (unregistering): Port device team_slave_1 removed
[  203.161424][ T4769] smpboot: CPU 1 is now offline
[  203.260116][ T6839] savu 0003:1E7D:2D5A.0008: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0
[  203.343947][   T41] team0 (unregistering): Port device team_slave_0 removed
[  203.581162][ T6839] usb 3-1: USB disconnect, device number 9
[  203.629251][   T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  203.645331][ T6461] ACPI: \_SB_.CP01: Eject incomplete - status 0xf
[  203.708094][ T6910] ALSA: mixer_oss: invalid OSS volume 'AF_VSOCK'
[  203.798321][   T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  203.821317][ T6912] loop4: detected capacity change from 0 to 256
[  203.845701][ T4278] Bluetooth: hci3: command 0x040f tx timeout
[  204.319543][ T6920] loop4: detected capacity change from 0 to 512
[  204.396997][ T6920] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  204.459514][ T6920] EXT4-fs error (device loop4): ext4_orphan_get:1435: comm syz.4.847: bad orphan inode 131083
[  204.532462][ T6920] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  204.720736][ T4276] EXT4-fs (loop4): unmounting filesystem.
[  205.263700][ T6941] maxtcpc: probe of 0-0022 failed with error -5
[  205.326665][ T6941] i2c i2c-0: new_device: Instantiated device maxtcpc at 0x22
[  205.503116][ T6948] loop4: detected capacity change from 0 to 1024
[  205.576544][ T6948] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8003c01c, mo2=0002]
[  205.637054][ T6948] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  205.740388][ T6948] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8003c01c, mo2=0002]
[  206.349726][ T6953] loop2: detected capacity change from 0 to 131072
[  206.360986][ T4278] Bluetooth: hci3: command 0x0419 tx timeout
[  206.380764][ T6953] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0)
[  206.389047][ T6953] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  206.408480][ T6948] EXT4-fs warning (device loop4): ext4_multi_mount_protect:338: MMP startup interrupted, failing mount
[  206.408480][ T6948] 
[  206.434594][ T6953] F2FS-fs (loop2): invalid crc value
[  206.452059][ T6953] F2FS-fs (loop2): Found nat_bits in checkpoint
[  206.483735][ T6953] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  206.490968][ T6953] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  206.589273][   T41] bond0 (unregistering): Released all slaves
[  206.670208][ T4276] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 32: comm syz-executor: path /182/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=12, inode=16777218, rec_len=15, size=1024 fake=1
[  206.822956][ T4276] EXT4-fs (loop4): unmounting filesystem.
[  207.033868][ T6773] batman_adv: batadv0: Adding interface: batadv_slave_0
[  207.055635][ T4327] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  207.083401][ T6773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  207.109318][    C0] vkms_vblank_simulate: vblank timer overrun
[  207.232208][ T6773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  207.320729][ T4327] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  207.339660][ T6773] batman_adv: batadv0: Adding interface: batadv_slave_1
[  207.387563][ T6773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  207.414165][ T4327] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  207.423923][ T4327] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  207.547637][ T4327] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  207.594132][ T6773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  207.624530][ T4327] usb 2-1: config 0 descriptor??
[  207.643864][ T6966] loop2: detected capacity change from 0 to 4096
[  207.872726][ T6970] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  207.921569][ T6773] device hsr_slave_0 entered promiscuous mode
[  207.998627][ T6773] device hsr_slave_1 entered promiscuous mode
[  208.042901][ T6773] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  208.082160][ T6962] loop4: detected capacity change from 0 to 32768
[  208.118766][ T6773] Cannot create hsr debugfs directory
[  208.125726][ T4327] pyra 0003:1E7D:2CF6.0009: unknown main item tag 0x0
[  208.132510][ T4327] pyra 0003:1E7D:2CF6.0009: unknown main item tag 0x0
[  208.140874][ T6966] NILFS (loop2): nilfs_sufile_do_free: segment 9 is already clean
[  208.195606][ T6962] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.862 (6962)
[  208.234377][ T4327] pyra 0003:1E7D:2CF6.0009: unknown main item tag 0x0
[  208.287590][ T4327] pyra 0003:1E7D:2CF6.0009: unknown main item tag 0x0
[  208.338851][ T4327] pyra 0003:1E7D:2CF6.0009: unknown main item tag 0x0
[  208.371749][ T4327] pyra 0003:1E7D:2CF6.0009: unknown main item tag 0x0
[  208.399398][ T4327] pyra 0003:1E7D:2CF6.0009: unknown main item tag 0x0
[  208.436091][ T4327] pyra 0003:1E7D:2CF6.0009: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0
[  208.495740][ T6962] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  208.576665][ T6962] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  208.664203][ T6962] BTRFS info (device loop4): using free space tree
[  208.874257][ T6962] BTRFS info (device loop4): enabling ssd optimizations
[  208.890365][ T4327] pyra 0003:1E7D:2CF6.0009: couldn't init struct pyra_device
[  208.928741][ T4327] pyra 0003:1E7D:2CF6.0009: couldn't install mouse
[  208.980713][ T4327] pyra: probe of 0003:1E7D:2CF6.0009 failed with error -71
[  209.064184][ T4327] usb 2-1: USB disconnect, device number 5
[  209.175631][ T4767] wiimote 0005:057E:0306.000A: hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0
[  209.277876][ T4767] wiimote 0005:057E:0306.000A: New device registered
[  209.392522][ T6773] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  209.499895][ T6773] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  209.567084][ T7006] fido_id[7006]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  209.634181][ T6839] usb 4-1: new full-speed USB device number 12 using dummy_hcd
[  209.674793][ T4767] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  209.741737][ T6773] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  209.904152][ T4767] usb 3-1: Using ep0 maxpacket: 16
[  209.910693][ T6839] usb 4-1: config 0 has an invalid interface number: 41 but max is 0
[  209.936529][ T4767] usb 3-1: config 0 has no interfaces?
[  209.985581][ T6839] usb 4-1: config 0 has no interface number 0
[  210.005636][ T4767] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  210.057732][ T6839] usb 4-1: config 0 interface 41 has no altsetting 0
[  210.099061][ T4767] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  210.127050][ T6839] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  210.174129][ T4767] usb 3-1: Product: syz
[  210.187890][ T6839] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  210.201851][ T4767] usb 3-1: Manufacturer: syz
[  210.238198][ T4767] usb 3-1: SerialNumber: syz
[  210.243384][ T6839] usb 4-1: Product: syz
[  210.274299][ T4767] usb 3-1: config 0 descriptor??
[  210.287627][ T6839] usb 4-1: Manufacturer: syz
[  210.307887][ T6839] usb 4-1: SerialNumber: syz
[  210.352888][ T6839] usb 4-1: config 0 descriptor??
[  210.381059][ T6773] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  210.474263][    T7] wiimote 0005:057E:0306.000A: detected device: Nintendo Wii Remote (Gen 1)
[  210.484877][ T4278] Bluetooth: hci4: command 0x0406 tx timeout
[  210.637837][    T7] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.000A/input/input15
[  210.708725][    T7] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.000A/input/input16
[  210.759923][    T7] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.000A/input/input14
[  210.896173][ T4276] BTRFS info (device loop4): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  211.018731][ T6839] CoreChips: probe of 4-1:0.41 failed with error -32
[  211.080260][ T6839] usb 4-1: USB disconnect, device number 12
[  211.250624][ T6773] 8021q: adding VLAN 0 to HW filter on device bond0
[  211.343765][ T6451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  211.388780][ T6451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  211.450122][ T6773] 8021q: adding VLAN 0 to HW filter on device team0
[  211.469824][ T7025] capability: warning: `syz.1.873' uses deprecated v2 capabilities in a way that may be insecure
[  211.523260][ T6388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  211.559197][ T6388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  211.620669][ T6388] bridge0: port 1(bridge_slave_0) entered blocking state
[  211.627851][ T6388] bridge0: port 1(bridge_slave_0) entered forwarding state
[  211.753261][ T6388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  211.821008][ T6388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  211.897673][ T6388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  211.948946][ T6388] bridge0: port 2(bridge_slave_1) entered blocking state
[  211.956087][ T6388] bridge0: port 2(bridge_slave_1) entered forwarding state
[  212.110287][ T7001] wiimote 0005:057E:0306.000A: Device removed
[  212.124261][ T4767] usb 3-1: USB disconnect, device number 10
[  212.130468][ T6388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  212.262389][ T6388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  212.316928][ T6388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  212.388519][ T6388] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  212.460116][ T6773] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  212.597808][ T6773] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  212.657716][ T6388] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  212.702405][ T6388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  212.738893][ T6388] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  212.778592][ T6388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  212.832870][ T6388] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  212.879888][ T6388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  212.918625][ T6388] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  212.973615][ T6388] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  213.656855][ T4278] Bluetooth: hci1: unexpected event for opcode 0x0c56
[  213.720021][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  213.737881][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  213.780079][ T6773] 8021q: adding VLAN 0 to HW filter on device batadv0
[  213.875904][ T7032] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  214.082691][ T7032] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  214.134785][ T7032] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  214.189068][ T7032] usb 4-1: New USB device found, idVendor=8086, idProduct=0000, bcdDevice= 0.00
[  214.272050][ T7032] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  214.710721][ T7104] ieee802154 phy0 wpan0: encryption failed: -22
[  214.739944][ T7032] hid-generic 0003:8086:0000.000B: unbalanced collection at end of report description
[  214.781870][ T7032] hid-generic: probe of 0003:8086:0000.000B failed with error -22
[  214.823573][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  214.881203][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  214.962415][ T6773] device veth0_vlan entered promiscuous mode
[  214.998417][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  215.033035][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  215.042838][ T7032] usb 4-1: USB disconnect, device number 13
[  215.093030][ T7110] netlink: 12 bytes leftover after parsing attributes in process `syz.1.890'.
[  215.111601][ T6773] device veth1_vlan entered promiscuous mode
[  215.148191][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  215.175345][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  215.193467][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  215.271910][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  215.294981][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  215.319909][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  215.351076][ T6773] device veth0_macvtap entered promiscuous mode
[  215.402369][ T6773] device veth1_macvtap entered promiscuous mode
[  215.471677][ T6773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  215.529173][ T6773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.569767][ T6773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  215.610871][ T6773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.651409][ T6773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  215.679819][ T7108] loop4: detected capacity change from 0 to 32768
[  215.694091][ T6773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.718590][ T7108] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.891 (7108)
[  215.742996][ T6773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  215.784548][ T6773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.811622][ T7108] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  215.824139][ T7032] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  215.857064][ T6773] batman_adv: batadv0: Interface activated: batadv_slave_0
[  215.876555][ T7108] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  215.901951][ T6388] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  215.920016][ T7108] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  215.937022][ T6388] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  215.965855][ T6388] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  215.976840][ T7108] BTRFS info (device loop4): use zstd compression, level 3
[  216.015955][ T7032] usb 2-1: Using ep0 maxpacket: 16
[  216.043367][ T7032] usb 2-1: config index 0 descriptor too short (expected 51443, got 18)
[  216.065924][ T7108] BTRFS info (device loop4): using free space tree
[  216.073361][ T6388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  216.112168][ T7032] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[  216.145666][ T6773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  216.195119][ T7032] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  216.207362][ T6773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  216.237958][ T7108] BTRFS info (device loop4): enabling ssd optimizations
[  216.279032][ T7032] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  216.296538][ T6773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  216.334649][ T7032] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  216.372775][ T6773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  216.395850][ T7032] usb 2-1: Product: syz
[  216.400083][ T7032] usb 2-1: Manufacturer: syz
[  216.436478][ T6773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  216.452211][ T7032] usb 2-1: SerialNumber: syz
[  216.478163][ T7032] r8152-cfgselector 2-1: config 0 descriptor??
[  216.495024][ T6773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  216.534750][ T6773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  216.586498][ T6773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  216.674403][ T6773] batman_adv: batadv0: Interface activated: batadv_slave_1
[  216.682853][ T6388] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  216.725095][ T7032] usbip-host 2-1: 2-1 is not in match_busid table... skip!
[  216.733575][ T6388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  216.791916][   T26] audit: type=1800 audit(1790061360.644:39): pid=7108 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.891" name="bus" dev="loop4" ino=263 res=0 errno=0
[  216.826794][ T6773] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  216.877983][ T6773] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  216.892399][ T7147] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied.
[  216.954513][ T6773] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  216.963241][ T6773] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  217.009147][ T7035] usb 2-1: USB disconnect, device number 6
[  217.086143][ T4276] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  217.305733][   T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  217.313576][   T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  217.394896][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  217.450321][ T7153] device syzkaller1 entered promiscuous mode
[  217.473935][ T6445] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  217.526859][ T6445] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  217.828156][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  218.009879][ T4278] Bluetooth: hci2: unexpected event for opcode 0x200f
[  219.073898][ T7187] netlink: 64 bytes leftover after parsing attributes in process `syz.3.902'.
[  219.203391][ T7190] loop4: detected capacity change from 0 to 136
[  219.284195][ T7190] Attempt to read inode for relocated directory
[  219.313402][ T7196] ima: policy update failed
[  219.361682][   T26] audit: type=1802 audit(1790061363.214:40): pid=7196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.905" res=0 errno=0
[  219.835055][ T4321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  219.917469][ T4321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  220.502775][ T7235] loop4: detected capacity change from 0 to 1024
[  220.666486][ T4321] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  220.822460][ T7243] device-mapper: ioctl: populate_table: no targets specified
[  220.874443][ T2188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  220.883337][ T4321] usb 4-1: Using ep0 maxpacket: 8
[  220.899677][ T4321] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  220.949358][ T4321] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  220.990108][ T4321] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  221.020152][ T4321] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  221.070886][ T4321] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  221.141527][ T4321] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  221.190430][ T4321] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  221.463219][ T4321] usb 4-1: GET_CAPABILITIES returned 0
[  221.484168][ T4321] usbtmc 4-1:16.0: can't read capabilities
[  221.786671][ T4771] usb 4-1: USB disconnect, device number 14
[  221.914618][ T2188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  222.125783][ T4321] usb 6-1: new full-speed USB device number 2 using dummy_hcd
[  222.260457][ T7252] loop4: detected capacity change from 0 to 32768
[  222.315774][ T7252] (syz.4.921,7252,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  222.332352][ T4321] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  222.395498][ T4321] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  222.450889][ T7252] (syz.4.921,7252,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  222.513437][ T4321] usb 6-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  222.588649][ T7252] JBD2: Ignoring recovery information on journal
[  222.619462][ T4321] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  222.722773][ T4321] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  222.788810][ T7252] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  222.843467][ T4321] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  222.898265][ T4321] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  222.977295][ T4321] usb 6-1: Product: syz
[  223.003939][ T4321] usb 6-1: Manufacturer: syz
[  223.032113][ T4321] usb 6-1: SerialNumber: syz
[  223.084570][ T7259] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  223.120310][ T4771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  223.129179][ T7033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  223.166263][ T7252] 
[  223.168626][ T7252] ======================================================
[  223.175635][ T7252] WARNING: possible circular locking dependency detected
[  223.182640][ T7252] syzkaller #0 Not tainted
[  223.187043][ T7252] ------------------------------------------------------
[  223.194066][ T7252] syz.4.921/7252 is trying to acquire lock:
[  223.199944][ T7252] ffff888076f16650 (sb_internal#3){.+.+}-{0:0}, at: ocfs2_acquire_dquot+0x69a/0xb80
[  223.209332][ T7252] 
[  223.209332][ T7252] but task is already holding lock:
[  223.216688][ T7252] ffff888071413120 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_lock_global_qf+0x1fe/0x290
[  223.227541][ T7252] 
[  223.227541][ T7252] which lock already depends on the new lock.
[  223.227541][ T7252] 
[  223.237948][ T7252] 
[  223.237948][ T7252] the existing dependency chain (in reverse order) is:
[  223.246951][ T7252] 
[  223.246951][ T7252] -> #6 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}:
[  223.255801][ T7252]        down_write+0x36/0x60
[  223.260471][ T7252]        ocfs2_lock_global_qf+0x1fe/0x290
[  223.266192][ T7252]        ocfs2_acquire_dquot+0x2b8/0xb80
[  223.271811][ T7252]        dqget+0x713/0xbb0
[  223.276218][ T7252]        __dquot_initialize+0x3a9/0xd00
[  223.281757][ T7252]        ocfs2_get_init_inode+0x144/0x1b0
[  223.287463][ T7252]        ocfs2_mknod+0xbe8/0x25e0
[  223.292474][ T7252]        ocfs2_create+0x1b6/0x4b0
[  223.297483][ T7252]        path_openat+0x11b9/0x2f10
[  223.302597][ T7252]        do_filp_open+0x1ee/0x420
[  223.307611][ T7252]        do_sys_openat2+0x14b/0x4f0
[  223.312802][ T7252]        __x64_sys_creat+0x8c/0xb0
[  223.317922][ T7252]        do_syscall_64+0x4c/0xa0
[  223.322867][ T7252]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  223.329286][ T7252] 
[  223.329286][ T7252] -> #5 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7){+.+.}-{3:3}:
[  223.339813][ T7252]        down_write+0x36/0x60
[  223.344501][ T7252]        ocfs2_lock_global_qf+0x1d7/0x290
[  223.350220][ T7252]        ocfs2_acquire_dquot+0x2b8/0xb80
[  223.355842][ T7252]        dqget+0x713/0xbb0
[  223.360250][ T7252]        __dquot_initialize+0x3a9/0xd00
[  223.365802][ T7252]        ocfs2_get_init_inode+0x144/0x1b0
[  223.371529][ T7252]        ocfs2_mknod+0xbe8/0x25e0
[  223.376554][ T7252]        ocfs2_create+0x1b6/0x4b0
[  223.381571][ T7252]        path_openat+0x11b9/0x2f10
[  223.386671][ T7252]        do_filp_open+0x1ee/0x420
[  223.391687][ T7252]        do_sys_openat2+0x14b/0x4f0
[  223.396890][ T7252]        __x64_sys_creat+0x8c/0xb0
[  223.402037][ T7252]        do_syscall_64+0x4c/0xa0
[  223.406976][ T7252]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  223.413416][ T7252] 
[  223.413416][ T7252] -> #4 (&dquot->dq_lock){+.+.}-{3:3}:
[  223.421051][ T7252]        __mutex_lock+0x12d/0xae0
[  223.426070][ T7252]        dquot_commit+0x5a/0x410
[  223.431020][ T7252]        ext4_write_dquot+0x1f0/0x360
[  223.436390][ T7252]        mark_all_dquot_dirty+0xf9/0x400
[  223.442032][ T7252]        __dquot_alloc_space+0x5f6/0xe50
[  223.447693][ T7252]        ext4_mb_new_blocks+0xf55/0x44d0
[  223.453331][ T7252]        ext4_ext_map_blocks+0x18d1/0x6640
[  223.459136][ T7252]        ext4_map_blocks+0x9d7/0x1a90
[  223.464496][ T7252]        ext4_getblk+0x1c5/0x720
[  223.469424][ T7252]        ext4_bread+0x26/0x170
[  223.474272][ T7252]        ext4_append+0x2bb/0x560
[  223.479200][ T7252]        ext4_init_new_dir+0x2b8/0x550
[  223.484648][ T7252]        ext4_mkdir+0x4c3/0xc90
[  223.489485][ T7252]        vfs_mkdir+0x386/0x570
[  223.494241][ T7252]        do_mkdirat+0x1d8/0x440
[  223.499077][ T7252]        __x64_sys_mkdirat+0x85/0x90
[  223.504347][ T7252]        do_syscall_64+0x4c/0xa0
[  223.509268][ T7252]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  223.515692][ T7252] 
[  223.515692][ T7252] -> #3 (&ei->i_data_sem){++++}-{3:3}:
[  223.523323][ T7252]        down_write+0x36/0x60
[  223.527987][ T7252]        ext4_map_blocks+0x914/0x1a90
[  223.533345][ T7252]        ext4_writepages+0x12aa/0x2e70
[  223.538788][ T7252]        do_writepages+0x3c6/0x640
[  223.543886][ T7252]        __writeback_single_inode+0x153/0x1170
[  223.550030][ T7252]        writeback_sb_inodes+0xad5/0x17f0
[  223.555737][ T7252]        __writeback_inodes_wb+0x12a/0x3f0
[  223.561534][ T7252]        wb_writeback+0x484/0xd40
[  223.566548][ T7252]        wb_workfn+0xc1c/0xee0
[  223.571309][ T7252]        process_one_work+0x8ab/0x1160
[  223.576766][ T7252]        worker_thread+0xaf5/0x12a0
[  223.581949][ T7252]        kthread+0x29d/0x330
[  223.586537][ T7252]        ret_from_fork+0x1f/0x30
[  223.591477][ T7252] 
[  223.591477][ T7252] -> #2 (jbd2_handle){++++}-{0:0}:
[  223.598757][ T7252]        wait_transaction_locked+0x1bf/0x270
[  223.604726][ T7252]        start_this_handle+0x7e7/0x2240
[  223.610254][ T7252]        jbd2__journal_restart+0x235/0x6c0
[  223.616061][ T7252]        ocfs2_extend_trans+0x2fc/0x800
[  223.621596][ T7252]        ocfs2_try_to_merge_extent+0xdb9/0x1cd0
[  223.627822][ T7252]        ocfs2_split_extent+0x14e3/0x21e0
[  223.633526][ T7252]        ocfs2_change_extent_flag+0xb11/0xe30
[  223.639595][ T7252]        ocfs2_mark_extent_written+0x30f/0x600
[  223.645735][ T7252]        ocfs2_dio_end_io+0x881/0x1400
[  223.651182][ T7252]        dio_complete+0x249/0x710
[  223.656191][ T7252]        __blockdev_direct_IO+0x2e15/0x34c0
[  223.662089][ T7252]        ocfs2_direct_IO+0x233/0x2a0
[  223.667363][ T7252]        generic_file_direct_write+0x112/0x330
[  223.673519][ T7252]        __generic_file_write_iter+0x15f/0x2a0
[  223.679664][ T7252]        ocfs2_file_write_iter+0x1731/0x1fc0
[  223.685631][ T7252]        do_iter_write+0x638/0xb10
[  223.690725][ T7252]        do_pwritev+0x23e/0x3a0
[  223.695738][ T7252]        do_syscall_64+0x4c/0xa0
[  223.700667][ T7252]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  223.707087][ T7252] 
[  223.707087][ T7252] -> #1 (&journal->j_trans_barrier){.+.+}-{3:3}:
[  223.715580][ T7252]        down_read+0x42/0x2d0
[  223.720248][ T7252]        ocfs2_start_trans+0x3a4/0x6f0
[  223.725697][ T7252]        ocfs2_mknod+0x12d7/0x25e0
[  223.730792][ T7252]        ocfs2_create+0x1b6/0x4b0
[  223.735814][ T7252]        path_openat+0x11b9/0x2f10
[  223.740912][ T7252]        do_filp_open+0x1ee/0x420
[  223.745921][ T7252]        do_sys_openat2+0x14b/0x4f0
[  223.751107][ T7252]        __x64_sys_openat+0x135/0x160
[  223.756467][ T7252]        do_syscall_64+0x4c/0xa0
[  223.761389][ T7252]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  223.767814][ T7252] 
[  223.767814][ T7252] -> #0 (sb_internal#3){.+.+}-{0:0}:
[  223.775289][ T7252]        __lock_acquire+0x2d18/0x7c40
[  223.780663][ T7252]        lock_acquire+0x1bb/0x4a0
[  223.785707][ T7252]        ocfs2_start_trans+0x2a5/0x6f0
[  223.791159][ T7252]        ocfs2_acquire_dquot+0x69a/0xb80
[  223.796778][ T7252]        dqget+0x713/0xbb0
[  223.801181][ T7252]        __dquot_initialize+0x3a9/0xd00
[  223.806715][ T7252]        ocfs2_get_init_inode+0x144/0x1b0
[  223.812422][ T7252]        ocfs2_mknod+0xbe8/0x25e0
[  223.817429][ T7252]        ocfs2_create+0x1b6/0x4b0
[  223.822441][ T7252]        path_openat+0x11b9/0x2f10
[  223.827542][ T7252]        do_filp_open+0x1ee/0x420
[  223.832554][ T7252]        do_sys_openat2+0x14b/0x4f0
[  223.837743][ T7252]        __x64_sys_creat+0x8c/0xb0
[  223.842845][ T7252]        do_syscall_64+0x4c/0xa0
[  223.847767][ T7252]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  223.854173][ T7252] 
[  223.854173][ T7252] other info that might help us debug this:
[  223.854173][ T7252] 
[  223.864384][ T7252] Chain exists of:
[  223.864384][ T7252]   sb_internal#3 --> &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7 --> &ocfs2_quota_ip_alloc_sem_key
[  223.864384][ T7252] 
[  223.881343][ T7252]  Possible unsafe locking scenario:
[  223.881343][ T7252] 
[  223.888780][ T7252]        CPU0                    CPU1
[  223.894183][ T7252]        ----                    ----
[  223.899560][ T7252]   lock(&ocfs2_quota_ip_alloc_sem_key);
[  223.905206][ T7252]                                lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7);
[  223.915006][ T7252]                                lock(&ocfs2_quota_ip_alloc_sem_key);
[  223.923150][ T7252]   lock(sb_internal#3);
[  223.927387][ T7252] 
[  223.927387][ T7252]  *** DEADLOCK ***
[  223.927387][ T7252] 
[  223.935534][ T7252] 6 locks held by syz.4.921/7252:
[  223.940540][ T7252]  #0: ffff888076f16460 (sb_writers#16){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90
[  223.949752][ T7252]  #1: ffff888071412648 (&type->i_mutex_dir_key#13){+.+.}-{3:3}, at: path_openat+0x7e8/0x2f10
[  223.960004][ T7252]  #2: ffff888071555f48 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x16a/0x4810
[  223.974184][ T7252]  #3: ffff8880714ea0a8 (&dquot->dq_lock){+.+.}-{3:3}, at: ocfs2_acquire_dquot+0x2ab/0xb80
[  223.984201][ T7252]  #4: ffff888071413488 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7){+.+.}-{3:3}, at: ocfs2_lock_global_qf+0x1d7/0x290
[  223.997169][ T7252]  #5: ffff888071413120 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_lock_global_qf+0x1fe/0x290
[  224.008463][ T7252] 
[  224.008463][ T7252] stack backtrace:
[  224.014343][ T7252] CPU: 0 PID: 7252 Comm: syz.4.921 Not tainted syzkaller #0
[  224.021619][ T7252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  224.031660][ T7252] Call Trace:
[  224.034932][ T7252]  <TASK>
[  224.037854][ T7252]  dump_stack_lvl+0x188/0x24e
[  224.042524][ T7252]  ? load_image+0x410/0x410
[  224.047019][ T7252]  ? show_regs_print_info+0x12/0x12
[  224.052205][ T7252]  ? print_circular_bug+0x12b/0x1a0
[  224.057394][ T7252]  check_noncircular+0x296/0x330
[  224.062326][ T7252]  ? add_chain_block+0x9b0/0x9b0
[  224.067259][ T7252]  ? lockdep_lock+0xf1/0x1f0
[  224.071845][ T7252]  ? _find_first_zero_bit+0xd2/0x100
[  224.077136][ T7252]  __lock_acquire+0x2d18/0x7c40
[  224.081982][ T7252]  ? verify_lock_unused+0x140/0x140
[  224.087170][ T7252]  ? verify_lock_unused+0x140/0x140
[  224.092365][ T7252]  ? mark_lock+0x94/0x320
[  224.096687][ T7252]  ? verify_lock_unused+0x140/0x140
[  224.101875][ T7252]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  224.107847][ T7252]  lock_acquire+0x1bb/0x4a0
[  224.112348][ T7252]  ? ocfs2_acquire_dquot+0x69a/0xb80
[  224.117622][ T7252]  ? __might_sleep+0xd0/0xd0
[  224.122208][ T7252]  ? do_raw_spin_lock+0x128/0x2f0
[  224.127219][ T7252]  ? read_lock_is_recursive+0x10/0x10
[  224.132580][ T7252]  ? __rwlock_init+0x140/0x140
[  224.137328][ T7252]  ? do_raw_spin_unlock+0x11d/0x230
[  224.142518][ T7252]  ocfs2_start_trans+0x2a5/0x6f0
[  224.147446][ T7252]  ? ocfs2_acquire_dquot+0x69a/0xb80
[  224.152718][ T7252]  ? ocfs2_recovery_exit+0x50/0x50
[  224.157823][ T7252]  ? do_raw_spin_unlock+0x11d/0x230
[  224.163008][ T7252]  ? _raw_spin_unlock+0x24/0x40
[  224.167849][ T7252]  ? ocfs2_qinfo_unlock+0x11a/0x140
[  224.173038][ T7252]  ocfs2_acquire_dquot+0x69a/0xb80
[  224.178139][ T7252]  ? ocfs2_destroy_dquot+0x40/0x40
[  224.183239][ T7252]  ? percpu_counter_add_batch+0x135/0x150
[  224.188948][ T7252]  dqget+0x713/0xbb0
[  224.192835][ T7252]  __dquot_initialize+0x3a9/0xd00
[  224.197863][ T7252]  ? do_raw_spin_unlock+0x11d/0x230
[  224.203047][ T7252]  ? dquot_initialize+0x20/0x20
[  224.207884][ T7252]  ? do_raw_spin_unlock+0x11d/0x230
[  224.213066][ T7252]  ? inode_init_owner+0x277/0x420
[  224.218086][ T7252]  ocfs2_get_init_inode+0x144/0x1b0
[  224.223271][ T7252]  ? ocfs2_create_inode_in_orphan+0x1180/0x1180
[  224.229501][ T7252]  ocfs2_mknod+0xbe8/0x25e0
[  224.233991][ T7252]  ? mark_lock+0x94/0x320
[  224.238313][ T7252]  ? ocfs2_mkdir+0x4b0/0x4b0
[  224.242891][ T7252]  ? __lock_acquire+0x1465/0x7c40
[  224.247910][ T7252]  ? verify_lock_unused+0x140/0x140
[  224.253100][ T7252]  ? lockdep_hardirqs_on+0x94/0x140
[  224.258287][ T7252]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  224.264169][ T7252]  ? _raw_spin_unlock+0x40/0x40
[  224.269016][ T7252]  ? ocfs2_inode_unlock+0xa1/0x140
[  224.274116][ T7252]  ? __lock_acquire+0x7c40/0x7c40
[  224.279133][ T7252]  ? __rwlock_init+0x140/0x140
[  224.283883][ T7252]  ? do_raw_spin_unlock+0x11d/0x230
[  224.289066][ T7252]  ? rcu_is_watching+0x11/0xa0
[  224.293819][ T7252]  ? ocfs2_lookup+0x51c/0xae0
[  224.298484][ T7252]  ocfs2_create+0x1b6/0x4b0
[  224.302973][ T7252]  ? ocfs2_update_inode_fsync_trans+0x200/0x200
[  224.309199][ T7252]  ? rwsem_write_trylock+0x135/0x1c0
[  224.314474][ T7252]  ? ocfs2_lookup+0xae0/0xae0
[  224.319136][ T7252]  ? HAS_UNMAPPED_ID+0x1c5/0x220
[  224.324066][ T7252]  ? inode_permission+0xef/0x480
[  224.328986][ T7252]  ? bpf_lsm_inode_create+0x5/0x10
[  224.334088][ T7252]  ? security_inode_create+0xb3/0x100
[  224.339464][ T7252]  ? ocfs2_lookup+0xae0/0xae0
[  224.344129][ T7252]  path_openat+0x11b9/0x2f10
[  224.348715][ T7252]  ? do_filp_open+0x420/0x420
[  224.353383][ T7252]  do_filp_open+0x1ee/0x420
[  224.357877][ T7252]  ? vfs_tmpfile+0x470/0x470
[  224.362479][ T7252]  ? _raw_spin_unlock+0x24/0x40
[  224.367319][ T7252]  ? alloc_fd+0x590/0x640
[  224.371648][ T7252]  do_sys_openat2+0x14b/0x4f0
[  224.376315][ T7252]  ? do_sys_open+0xe0/0xe0
[  224.380724][ T7252]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  224.386695][ T7252]  ? lock_chain_count+0x20/0x20
[  224.391535][ T7252]  __x64_sys_creat+0x8c/0xb0
[  224.396115][ T7252]  do_syscall_64+0x4c/0xa0
[  224.400518][ T7252]  ? clear_bhb_loop+0x60/0xb0
[  224.405180][ T7252]  ? clear_bhb_loop+0x60/0xb0
[  224.409843][ T7252]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  224.415743][ T7252] RIP: 0033:0x7f1dbc39e159
[  224.420152][ T7252] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  224.439744][ T7252] RSP: 002b:00007f1dbd2f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
[  224.448145][ T7252] RAX: ffffffffffffffda RBX: 00007f1dbc625fa0 RCX: 00007f1dbc39e159
[  224.456104][ T7252] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000001c0
[  224.464063][ T7252] RBP: 00007f1dbc43506b R08: 0000000000000000 R09: 0000000000000000
[  224.472022][ T7252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  224.479979][ T7252] R13: 00007f1dbc626038 R14: 00007f1dbc625fa0 R15: 00007ffd5a0dbd78
[  224.487939][ T7252]  </TASK>
[  224.517196][ T7259] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  224.530968][ T4771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  224.789335][ T7286] loop3: detected capacity change from 0 to 32768
[  224.802724][ T7286] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.931 (7286)
[  224.843193][ T7286] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  224.868243][ T7286] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  224.889617][ T7286] BTRFS info (device loop3): setting nodatasum
[  224.904259][ T7286] BTRFS info (device loop3): force zlib compression, level 3
[  224.922771][ T7286] BTRFS info (device loop3): turning on flush-on-commit
[  224.941347][ T7286] BTRFS info (device loop3): max_inline at 4096
[  224.957117][ T7286] BTRFS info (device loop3): using free space tree
[  225.003764][ T7286] BTRFS info (device loop3): enabling ssd optimizations
[  225.107504][ T4679] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  225.170635][ T7259] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  225.289566][ T4276] ocfs2: Unmounting device (7,4) on (node local)
[  225.388409][ T4321] cdc_ncm 6-1:1.0: bind() failure
[  225.400734][ T4321] cdc_ncm: probe of 6-1:1.1 failed with error -71
[  225.407568][ T4321] cdc_mbim: probe of 6-1:1.1 failed with error -71
[  225.415606][ T4321] usbtest: probe of 6-1:1.1 failed with error -71
[  225.426827][ T4321] usb 6-1: USB disconnect, device number 2
[  225.594353][ T4767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  225.674572][ T4321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  225.683397][ T4767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  226.154182][ T4767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  226.634508][ T4767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  227.674296][ T4767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  228.714240][ T4767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  229.194189][ T4321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  229.754281][ T4321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  230.794571][    T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  231.835232][ T4767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  232.234170][    T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  232.874294][    T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog