last executing test programs:

2m2.682594317s ago: executing program 2 (id=124):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETOFFLOAD(r0, 0x400454ce, 0xa)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})

2m2.441543453s ago: executing program 2 (id=126):
r0 = fsopen(&(0x7f0000000200)='ramfs\x00', 0x0)
unshare(0x22020400)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x88)
io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0x20, 0x2, 0xc1, 0x0, r1})

2m2.195070369s ago: executing program 2 (id=129):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80, 0xbd}, 'port1\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x3, 0x32cbe4cd, 0x1})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f00000001c0)={0x800100, 0x101, 0x8006, 0xe1d9, 0x7, 0xffffffff})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f0000000700)={0x800100, 0x1080, 0xde, 0x7, 0x3, 0xd3})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0x241, @time={0x4, 0x1}, 0x6, {0x5, 0x5}})

2m1.980177464s ago: executing program 2 (id=131):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0)
mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x11050ca, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)

2m1.852365137s ago: executing program 2 (id=132):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x1214040, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
lseek(r0, 0x101, 0x1)
getdents64(r0, 0xfffffffffffffffe, 0x29)

2m1.420408178s ago: executing program 2 (id=136):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x28}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000070"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

2m0.93064425s ago: executing program 32 (id=136):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x28}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000070"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

3.621726571s ago: executing program 3 (id=918):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005d832, 0xffffffffffffffff, 0x2000)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000)
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})

3.461669445s ago: executing program 3 (id=920):
r0 = io_uring_setup(0x6001, &(0x7f00000002c0)={0x0, 0xeec5, 0x1, 0x0, 0x65})
close_range(r0, r0, 0x0)
r1 = timerfd_create(0x1, 0x80000)
timerfd_settime(r1, 0x3, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
read(r0, &(0x7f00000001c0)=""/243, 0xf3)

3.197172082s ago: executing program 3 (id=926):
io_setup(0x5, &(0x7f0000000000)=<r0=>0x0)
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000040)={0x2, "425ae375378532d249154c94b4c78a38b4c9810000f910000000000000001e00", <r2=>0xffffffffffffffff})
poll(&(0x7f0000000080)=[{r2, 0x4000}], 0x1, 0xfff)
io_submit(r0, 0x19, &(0x7f00000003c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}])

2.915229379s ago: executing program 0 (id=931):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r1 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_ifreq(r1, 0x8914, &(0x7f0000000100)={'dummy0\x00', @ifru_flags})
ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000200)={'bond0\x00', @ifru_names='dummy0\x00'})

2.663783395s ago: executing program 0 (id=933):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x4)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b)
write(r0, &(0x7f0000000000)='7', 0x1)
memfd_secret(0x80000)

2.624015456s ago: executing program 1 (id=934):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf47, 0x4cc, 0xffff, 0x9dff, 0x1, "8003e3ffff072000"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"})
r1 = syz_open_pts(r0, 0x200)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x3)

2.240283055s ago: executing program 1 (id=935):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x20008891}, 0x4054)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r2, @in={{0x2, 0x4e24, @empty}}, 0x27c0}, 0x90)

2.174373527s ago: executing program 1 (id=936):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
mbind(&(0x7f00001e7000/0x2000)=nil, 0x2000, 0x8003, &(0x7f0000000000)=0x9, 0x3, 0x2)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00')
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
read$FUSE(r0, &(0x7f00000007c0)={0x2020}, 0x2020)

2.165915677s ago: executing program 0 (id=937):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpuidle/current_governor\x00', 0x2, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
write(r0, &(0x7f00000001c0)='ha', 0x2)

2.099034859s ago: executing program 3 (id=939):
syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x6, 0x3, 0x10007e, 0x20000006, 0x53, 0x6, 0x10000, 0x80005, 0x1, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x26, 0xd, 0x1, 0x6, 0x7, 0xe661, 0x4, 0x7, 0x7, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x800080ee, 0xa, 0x17, 0x92c, 0x9, 0x200, 0x3e, 0x8c, 0x6, 0xca9, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x8445, 0x6, 0x5, 0x1, 0x40], [0x1000000b, 0x9, 0x80000130, 0x8004, 0x5, 0xfffffff3, 0x2, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x4, 0x0, 0x0, 0x5, 0x42f, 0xe, 0x312, 0x78, 0x1, 0x1e, 0x4, 0x7, 0x7fff, 0x6, 0x4400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x101, 0x1, 0x4, 0xffff80f1, 0x1, 0x6, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0xfffffe01, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93695, 0x43, 0x9], [0x7, 0xa, 0x4, 0x8005, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x5, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x5, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x11, 0x800003, 0x200, 0x400080, 0x3, 0x4, 0x2950bfaf, 0x2, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x21c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x24], [0x9, 0x40bb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xbb, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x1, 0x6, 0x96, 0xffffffff, 0x80000001, 0x7, 0x4, 0xc8, 0x1, 0xfffff000, 0x4010080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d69b, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x928, 0xb1e, 0xc7, 0x200, 0xffff2441, 0xfff]}, 0x45c)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

1.988618981s ago: executing program 0 (id=940):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='dctcp', 0x5)
listen(r0, 0x10040)
syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a9646", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xfffe}}}}}}}, 0x0)

1.931555893s ago: executing program 1 (id=942):
openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000012bf14000000000000000000fe80000000000000000000000000002bfffffffd0000000014000d00200100000000000000000000000000000c001a"], 0x48}}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="90010000305200001c00128009000100626f6e64000000000c00028005"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x0)

1.816126845s ago: executing program 0 (id=944):
syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000002, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/375], 0x12, 0x9ef, &(0x7f0000000e40)="$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")
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b705000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000003b0007010000000000000000047c0000ec0000000c00018006000600800a0000100002800c0003"], 0x34}}, 0xc000)

1.717143348s ago: executing program 1 (id=945):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0)
syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004025057a1200010102030109023200010100c0010904000002ff0000000705010208"], 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/ttyUSB0\x00', 0x2, 0x0)
ioctl$TIOCSBRK(r0, 0x5427)

1.608884271s ago: executing program 0 (id=946):
r0 = syz_usb_connect$uac2(0x5, 0xa0, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x582, 0x4c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8e, 0x3, 0x1, 0x5, 0x30, 0x9, {0x8, 0xb, 0x0, 0x1, 0x1, 0x7, 0x20, 0x8c}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4000, 0x4, 0x15, 0x7}, [@output_terminal={0xc, 0x24, 0x3, 0x2, 0x307, 0x0, 0x4, 0x0, 0x7, 0x81}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0xb, 0x4, {0x8, 0x25, 0x1, 0x0, 0x0, 0x40, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x4, 0x1ccc, 0x5}, @as_header={0x10, 0x24, 0x1, 0x2, 0x1, 0x0, 0x4, 0x8, 0xb8, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x40, 0x6, 0x3, {0x8, 0x25, 0x1, 0x82, 0x3, 0xf3, 0x6}}}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, &(0x7f0000000700)={0x2c, 0x0, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac2(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

981.525276ms ago: executing program 4 (id=947):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
setresuid(0x0, 0xee00, 0x0)
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7})
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000480), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

481.089589ms ago: executing program 4 (id=948):
ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x10040)
syz_emit_ethernet(0x4e, &(0x7f0000000b80)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xb, 0xc2, 0x2, 0x0, 0x6, {[@fastopen={0x22, 0xf, "7c38727216400127444414b62e"}, @generic={0x8, 0x2}, @mss={0x2, 0x4, 0x5}, @window={0x3, 0x3, 0x10}]}}}}}}}, 0x0)

431.723109ms ago: executing program 4 (id=949):
unshare(0x6020400)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000006c0), 0x121802, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000700)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000740)={0xc, r1})
ioctl$IOMMU_VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x4)

330.186792ms ago: executing program 4 (id=950):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x40000000, 0x0, 0x0, 0x83, "00000000000000000000ffff00"})
r1 = syz_open_pts(r0, 0x0)
poll(&(0x7f0000000000)=[{r1, 0xa}], 0x1, 0xa1)
dup3(r1, r0, 0x0)

263.386454ms ago: executing program 3 (id=951):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0xe99f, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x8}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e25, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x7}, 0x1c)
write(r0, &(0x7f0000000200)="89", 0xffe3)

165.675286ms ago: executing program 3 (id=952):
syz_mount_image$reiserfs(&(0x7f0000000140), &(0x7f0000001140)='./file6\x00', 0x98, &(0x7f0000000280), 0x1, 0x10ef, &(0x7f0000001180)="$eJzs2DGLE0EYBuB3dg/kqshcvx5oYSHHHfEPXKGQxsLaLljZmUrJz/HnyFX2R3pTBOyVTQwJEhDJYuB4Hlh252Vmvp1yvgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvLPlekosmqdusSVKSrrubLJJ02/zx17ZJydv3k9mrj+PXs8209FmT0q9aj+vN01rHdVxv6suL22d19unzh3avZEmX+9V8ev5mOehR+trtoDsCAADAw/DzaKMT1wcAAAD+ZrBGAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAA6vajSVKSrrubLJJ0p/0tAAAA4EglTd6NDuWbNsDOi3wblZRHu+RH6edc58uB9QAAAMC/KXv38ec5z5O9/DJnubrajH+/srxN2iTXf+xzv5pP18/lfFr+5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAGCqAAAA//9TGNII")
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0/file1\x00', 0x1000000, 0x0, 0x0, 0x0, 0x0)
setxattr$trusted_overlay_origin(&(0x7f0000000500)='./file0/file1\x00', &(0x7f0000000540), 0x0, 0x0, 0x1)
unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200)

97.169018ms ago: executing program 4 (id=953):
setns(0xc9, 0x0)
r0 = socket(0x8, 0x5, 0xb)
ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x6180, 0x0)
r1 = socket(0x8, 0x5, 0x5)
ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x618f, 0x0)

96.907048ms ago: executing program 1 (id=954):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000040)={[{@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0x5, 0x559a, &(0x7f0000005680)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1, 0x100)
write$P9_RSTATu(r0, &(0x7f00000021c0)=ANY=[], 0x54)
lseek(r1, 0x3c, 0x4)

0s ago: executing program 4 (id=955):
syz_mount_image$f2fs(&(0x7f0000002100), &(0x7f0000000340)='./bus\x00', 0x2, &(0x7f0000002000)=ANY=[@ANYBLOB='nodiscard,alloc_mode=default,acl,alloc_mode=reuse,mode=fragment:block,disable_roll_forward,background_gc=on,nouser_xattr,checkpoint=disable,fsync_mode=strict,nobarrier,jqfmt=vfsold,mode=fragment:block,\x00'], 0x1, 0x5505, &(0x7f00000079c0)="$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")
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000340)={{}, {}, [{0x2, 0x4}, {0x2, 0x7}, {0x2, 0x6}, {0x2, 0x2}, {0x2, 0x2}, {0x2, 0x6}]}, 0x54, 0x3)
syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181)
mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

kernel console output (not intermixed with test programs):

umber 5 using dummy_hcd
[  156.726851][    T9] usb 2-1: Using ep0 maxpacket: 8
[  156.740039][    T9] usb 2-1: config index 0 descriptor too short (expected 74, got 45)
[  156.761558][    T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  156.784777][    T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  156.810790][    T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[  156.836278][    T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  156.867180][    T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  156.885999][    T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  156.901144][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.917481][ T7083] netlink: 20 bytes leftover after parsing attributes in process `syz.0.356'.
[  156.938295][ T7083] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  157.131066][ T7085] loop3: detected capacity change from 0 to 4096
[  157.143779][    T9] usb 2-1: GET_CAPABILITIES returned 0
[  157.149355][    T9] usbtmc 2-1:16.0: can't read capabilities
[  157.157282][ T7087] netlink: 4 bytes leftover after parsing attributes in process `syz.0.358'.
[  157.170056][ T7085] EXT4-fs: Ignoring removed nobh option
[  157.365725][    C0] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[  157.391494][ T7059] usbtmc 2-1:16.0: Unable to send data, error -71
[  157.412282][ T5822] usb 2-1: USB disconnect, device number 5
[  157.434281][ T7085] EXT4-fs: Ignoring removed bh option
[  157.444702][ T7085] EXT4-fs (loop3): Test dummy encryption mode enabled
[  157.486328][ T7085] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  157.700849][ T7085] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  157.741554][ T7104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.362'.
[  157.854431][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  157.976422][ T7109] tun0: tun_chr_ioctl cmd 2147767511
[  157.987442][ T7109] tun0: tun_chr_ioctl cmd 35108
[  158.293463][    T8] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  158.403614][ T7127] FAULT_INJECTION: forcing a failure.
[  158.403614][ T7127] name fail_futex, interval 1, probability 0, space 0, times 1
[  158.427295][ T7127] CPU: 0 PID: 7127 Comm: syz.0.372 Not tainted syzkaller #0
[  158.434690][ T7127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  158.444807][ T7127] Call Trace:
[  158.448141][ T7127]  <TASK>
[  158.451119][ T7127]  dump_stack_lvl+0x18c/0x250
[  158.455862][ T7127]  ? show_regs_print_info+0x20/0x20
[  158.461113][ T7127]  ? load_image+0x420/0x420
[  158.465705][ T7127]  should_fail_ex+0x394/0x4c0
[  158.470497][ T7127]  get_futex_key+0x136/0x1030
[  158.475230][ T7127]  ? futex_wait_queue+0x9d/0x1b0
[  158.480227][ T7127]  ? futex_setup_timer+0xc0/0xc0
[  158.485231][ T7127]  futex_requeue+0x246/0x13c0
[  158.489975][ T7127]  ? futex_unqueue+0xcb/0xf0
[  158.494635][ T7127]  ? put_task_struct+0xc0/0xc0
[  158.499460][ T7127]  ? futex_wait_setup+0x270/0x270
[  158.504578][ T7127]  do_futex+0x32b/0x3e0
[  158.508811][ T7127]  ? __ia32_sys_get_robust_list+0x110/0x110
[  158.514769][ T7127]  __se_sys_futex+0x3a9/0x440
[  158.519505][ T7127]  ? __x64_sys_futex+0xf0/0xf0
[  158.524330][ T7127]  ? __x64_sys_futex+0x21/0xf0
[  158.529156][ T7127]  do_syscall_64+0x55/0xb0
[  158.533634][ T7127]  ? clear_bhb_loop+0x40/0x90
[  158.538401][ T7127]  ? clear_bhb_loop+0x40/0x90
[  158.543136][ T7127]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  158.549097][ T7127] RIP: 0033:0x7fa441f9e2d9
[  158.553570][ T7127] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  158.573255][ T7127] RSP: 002b:00007fa442e1f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  158.581756][ T7127] RAX: ffffffffffffffda RBX: 00007fa442225fa0 RCX: 00007fa441f9e2d9
[  158.589788][ T7127] RDX: 0000000000000003 RSI: 0000000000000084 RDI: 0000000000000000
[  158.597816][ T7127] RBP: 00007fa442035888 R08: 0000000000000000 R09: 0000000000000001
[  158.605842][ T7127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  158.613863][ T7127] R13: 00007fa442226038 R14: 00007fa442225fa0 R15: 00007ffe320dc5d8
[  158.621939][ T7127]  </TASK>
[  158.680740][    T8] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  158.690843][    T8] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  158.710863][    T8] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  158.740213][    T8] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  158.750297][    T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  158.769830][    T8] usb 4-1: Product: syz
[  158.779922][    T8] usb 4-1: Manufacturer: syz
[  158.788994][ T7128] loop4: detected capacity change from 0 to 8192
[  158.801389][    T8] usb 4-1: SerialNumber: syz
[  158.863328][ T7128] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  158.914550][ T7122] loop1: detected capacity change from 0 to 32768
[  158.934389][ T7122] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.370 (7122)
[  158.973448][ T7122] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  158.986886][ T7128] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal
[  159.026015][ T7122] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  159.048992][ T7128] REISERFS (device loop4): using journaled data mode
[  159.061764][ T7122] BTRFS info (device loop1): force clearing of disk cache
[  159.064404][    T8] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  159.086538][ T7128] reiserfs: using flush barriers
[  159.091751][ T7122] BTRFS info (device loop1): use zlib compression, level 3
[  159.099037][ T7122] BTRFS info (device loop1): enabling ssd optimizations
[  159.127046][ T7122] BTRFS info (device loop1): using spread ssd allocation scheme
[  159.150475][ T7122] BTRFS info (device loop1): using free space tree
[  159.163779][ T7128] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  159.240129][ T7128] REISERFS (device loop4): checking transaction log (loop4)
[  159.273064][ T5821] usb 4-1: USB disconnect, device number 5
[  159.290124][ T5821] usblp0: removed
[  159.324642][ T7128] REISERFS (device loop4): Using tea hash to sort names
[  159.326564][ T7122] BTRFS info (device loop1): auto enabling async discard
[  159.351411][ T7128] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  159.382937][ T7128] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  159.396921][ T7122] BTRFS info (device loop1): rebuilding free space tree
[  159.448913][ T7128] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  159.487776][ T7128] REISERFS warning (device loop4): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block
[  159.527777][ T7122] BTRFS info (device loop1): checking UUID tree
[  159.900500][ T5779] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  160.050923][   T28] kauditd_printk_skb: 6 callbacks suppressed
[  160.050939][   T28] audit: type=1800 audit(1791887361.305:23): pid=7158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.379" name="dead_threshold" dev="configfs" ino=12683 res=0 errno=0
[  160.118746][ T7156] loop4: detected capacity change from 0 to 1024
[  160.230706][ T7156] syz.4.375: attempt to access beyond end of device
[  160.230706][ T7156] loop4: rw=0, sector=5778, nr_sectors = 2 limit=1024
[  160.272239][ T7161] FAULT_INJECTION: forcing a failure.
[  160.272239][ T7161] name failslab, interval 1, probability 0, space 0, times 0
[  160.317749][ T7161] CPU: 0 PID: 7161 Comm: syz.0.380 Not tainted syzkaller #0
[  160.325136][ T7161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  160.335332][ T7161] Call Trace:
[  160.338656][ T7161]  <TASK>
[  160.341642][ T7161]  dump_stack_lvl+0x18c/0x250
[  160.346390][ T7161]  ? show_regs_print_info+0x20/0x20
[  160.351644][ T7161]  ? load_image+0x420/0x420
[  160.356225][ T7161]  ? __might_sleep+0xe0/0xe0
[  160.360870][ T7161]  ? __lock_acquire+0x7eb0/0x7eb0
[  160.361944][ T7164] syz.4.375: attempt to access beyond end of device
[  160.361944][ T7164] loop4: rw=0, sector=5778, nr_sectors = 2 limit=1024
[  160.365933][ T7161]  should_fail_ex+0x394/0x4c0
[  160.365980][ T7161]  should_failslab+0x9/0x20
[  160.388823][ T7161]  slab_pre_alloc_hook+0x59/0x300
[  160.393916][ T7161]  kmem_cache_alloc_lru+0x4d/0x2b0
[  160.399089][ T7161]  ? new_inode_pseudo+0x82/0x1d0
[  160.404081][ T7161]  new_inode_pseudo+0x82/0x1d0
[  160.408893][ T7161]  create_pipe_files+0x51/0x700
[  160.413785][ T7161]  ? __ia32_sys_get_robust_list+0x110/0x110
[  160.419713][ T7161]  __do_pipe_flags+0x4c/0x2c0
[  160.424443][ T7161]  do_pipe2+0xab/0x190
[  160.428560][ T7161]  ? _compound_head+0x120/0x120
[  160.433458][ T7161]  ? lock_chain_count+0x20/0x20
[  160.438349][ T7161]  ? syscall_enter_from_user_mode+0x25/0x80
[  160.444282][ T7161]  __x64_sys_pipe+0x3a/0x40
[  160.448821][ T7161]  do_syscall_64+0x55/0xb0
[  160.453270][ T7161]  ? clear_bhb_loop+0x40/0x90
[  160.457977][ T7161]  ? clear_bhb_loop+0x40/0x90
[  160.462695][ T7161]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  160.468648][ T7161] RIP: 0033:0x7fa441f9e2d9
[  160.473103][ T7161] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  160.492749][ T7161] RSP: 002b:00007fa442e1f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000016
[  160.501198][ T7161] RAX: ffffffffffffffda RBX: 00007fa442225fa0 RCX: 00007fa441f9e2d9
[  160.509196][ T7161] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  160.517193][ T7161] RBP: 00007fa442035888 R08: 0000000000000000 R09: 0000000000000000
[  160.525194][ T7161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  160.533203][ T7161] R13: 00007fa442226038 R14: 00007fa442225fa0 R15: 00007ffe320dc5d8
[  160.541218][ T7161]  </TASK>
[  160.847111][ T7168] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  161.335841][ T5847] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  161.371783][ T5821] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  161.431504][   T27] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  161.523562][ T5847] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  161.538746][ T5847] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  161.549344][ T5847] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64
[  161.562293][ T5847] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64
[  161.574338][ T5821] usb 2-1: config index 0 descriptor too short (expected 64906, got 45)
[  161.597583][ T5821] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  161.611397][ T5847] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  161.621482][   T27] usb 4-1: Using ep0 maxpacket: 8
[  161.631699][ T5821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.647823][ T5847] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  161.658288][   T27] usb 4-1: config index 0 descriptor too short (expected 8475, got 27)
[  161.666861][ T5821] usb 2-1: Product: syz
[  161.676489][ T5821] usb 2-1: Manufacturer: syz
[  161.681798][   T27] usb 4-1: config 0 has an invalid interface number: 200 but max is 0
[  161.690041][   T27] usb 4-1: config 0 has no interface number 0
[  161.696932][ T5847] usb 1-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5
[  161.710835][ T5821] usb 2-1: SerialNumber: syz
[  161.730214][   T27] usb 4-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid maxpacket 118, setting to 64
[  161.746457][   T27] usb 4-1: config 0 interface 200 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  161.762687][ T5847] usb 1-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice= 1.00
[  161.777878][ T5847] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.786248][   T27] usb 4-1: config 0 interface 200 has no altsetting 0
[  161.794029][ T5847] usb 1-1: Product: syz
[  161.814932][   T27] usb 4-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.5a
[  161.841459][ T5847] usb 1-1: Manufacturer: syz
[  161.850981][   T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.859589][ T5847] usb 1-1: SerialNumber: syz
[  161.875753][ T7177] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  161.890531][   T27] usb 4-1: Product: syz
[  161.901790][ T7177] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  161.909381][   T27] usb 4-1: Manufacturer: syz
[  161.919557][   T27] usb 4-1: SerialNumber: syz
[  161.928575][ T7177] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  161.954213][   T27] usb 4-1: config 0 descriptor??
[  161.974012][ T5847] keyspan 1-1:1.0: Keyspan 1 port adapter converter detected
[  161.997914][ T5847] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 84
[  162.039725][ T5847] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 82
[  162.060857][ T5821] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71
[  162.080421][ T5847] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 2
[  162.108848][ T5821] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71
[  162.126123][ T5847] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  162.178210][ T5821] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71
[  162.268149][ T5821] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  162.305587][   T27] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.200/input/input15
[  162.339974][ T5821] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  162.403676][ T5821] lan78xx: probe of 2-1:1.0 failed with error -71
[  162.480300][   T27] usb 4-1: USB disconnect, device number 6
[  162.510038][ T5821] usb 2-1: USB disconnect, device number 6
[  162.588169][ T7185] loop4: detected capacity change from 0 to 131072
[  162.598231][ T7185] F2FS-fs (loop4): Wrong secs_per_zone / total_sections (512, 24)
[  162.606252][ T7185] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  162.614651][ T7185] F2FS-fs (loop4): Test dummy encryption mode enabled
[  162.657098][ T7185] F2FS-fs (loop4): invalid crc value
[  162.698884][ T7185] F2FS-fs (loop4): Found nat_bits in checkpoint
[  162.747063][ T7185] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix.
[  162.775170][ T7185] F2FS-fs (loop4): Start checkpoint disabled!
[  162.819844][    T8] usb 1-1: USB disconnect, device number 6
[  162.838601][    T8] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  162.848290][ T7185] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[  162.855427][ T7185] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  162.913851][    T8] keyspan 1-1:1.0: device disconnected
[  163.641924][    T8] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  163.859786][    T8] usb 4-1: Using ep0 maxpacket: 8
[  163.887253][    T8] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  163.931411][    T8] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  163.977924][    T8] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  164.039945][    T8] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  164.074095][    T8] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  164.131445][    T8] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  164.140585][    T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  164.474614][    T8] usb 4-1: usb_control_msg returned -32
[  164.501971][    T8] usbtmc 4-1:16.0: can't read capabilities
[  164.979273][ T7219] loop0: detected capacity change from 0 to 32768
[  165.027930][ T7219] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.401 (7219)
[  165.101904][ T7219] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  165.130817][ T7219] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  165.160712][ T7219] BTRFS info (device loop0): setting nodatasum
[  165.190983][ T7219] BTRFS info (device loop0): force zlib compression, level 3
[  165.209146][ T7219] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8)
[  165.231433][ T7219] BTRFS info (device loop0): use lzo compression, level 0
[  165.238679][ T7219] BTRFS info (device loop0): turning on flush-on-commit
[  165.261526][ T7219] BTRFS info (device loop0): enabling auto defrag
[  165.271658][ T7219] BTRFS info (device loop0): max_inline at 4096
[  165.277989][ T7219] BTRFS info (device loop0): using free space tree
[  165.417054][ T7219] BTRFS info (device loop0): enabling ssd optimizations
[  165.569555][ T5777] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  165.668642][ T7224] loop4: detected capacity change from 0 to 40427
[  165.733756][ T7224] F2FS-fs (loop4): Invalid SB checksum offset: 0
[  165.740295][ T7224] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  165.794852][ T7224] F2FS-fs (loop4): invalid crc value
[  166.116414][ T7224] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[  166.123961][ T7224] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  166.273568][ T6231] syz-executor: attempt to access beyond end of device
[  166.273568][ T6231] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  166.293897][ T6231] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  166.401583][   T27] usb 4-1: USB disconnect, device number 7
[  166.601861][ T7256] loop3: detected capacity change from 0 to 4096
[  166.690523][ T7256] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  166.877046][   T28] audit: type=1800 audit(1791887368.125:24): pid=7256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.407" name="file1" dev="loop3" ino=15 res=0 errno=0
[  166.961498][   T28] audit: type=1804 audit(1791887368.205:25): pid=7256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.407" name=2F6E6577726F6F742F3131342F131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D3382F66696C6531 dev="loop3" ino=15 res=1 errno=0
[  167.085719][   T28] audit: type=1800 audit(1791887368.205:26): pid=7256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.407" name="file1" dev="loop3" ino=15 res=0 errno=0
[  167.098671][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.286892][ T7254] loop0: detected capacity change from 0 to 32768
[  167.334152][ T7254] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.415 (7254)
[  167.399333][ T7254] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  167.413029][ T7254] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  167.422695][ T7254] BTRFS info (device loop0): force clearing of disk cache
[  167.431243][ T7254] BTRFS info (device loop0): use zlib compression, level 3
[  167.450109][ T7254] BTRFS info (device loop0): enabling ssd optimizations
[  167.466780][ T7254] BTRFS info (device loop0): using spread ssd allocation scheme
[  167.485123][ T7254] BTRFS info (device loop0): using free space tree
[  167.744329][ T7254] BTRFS info (device loop0): auto enabling async discard
[  167.781848][ T7254] BTRFS info (device loop0): rebuilding free space tree
[  167.884486][ T7254] BTRFS info (device loop0): checking UUID tree
[  168.200270][ T5777] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  168.910238][ T7327] tun0: tun_chr_ioctl cmd 1074025675
[  168.922526][ T7327] tun0: persist enabled
[  168.935306][ T7327] tun0: tun_chr_ioctl cmd 1074025675
[  168.950926][ T7327] tun0: persist disabled
[  169.067171][ T7320] loop4: detected capacity change from 0 to 32768
[  169.407139][ T7330] loop3: detected capacity change from 0 to 256
[  169.472797][ T7330] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  169.542845][   T28] audit: type=1800 audit(1791887370.805:27): pid=7330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.432" name="file1" dev="loop3" ino=1048646 res=0 errno=0
[  169.891655][    T8] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  170.000327][ T7340] loop3: detected capacity change from 0 to 32768
[  170.009400][ T7340] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.435 (7340)
[  170.040738][ T7340] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  170.056083][ T7340] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  170.065355][ T7340] BTRFS info (device loop3): force clearing of disk cache
[  170.077930][ T7340] BTRFS info (device loop3): use zlib compression, level 3
[  170.085803][ T7340] BTRFS info (device loop3): enabling ssd optimizations
[  170.093426][ T7340] BTRFS info (device loop3): using spread ssd allocation scheme
[  170.101149][ T7340] BTRFS info (device loop3): using free space tree
[  170.110413][    T8] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  170.121661][    T8] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  170.139459][    T8] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  170.154360][    T8] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  170.176591][    T8] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[  170.207891][    T8] usb 1-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[  170.220040][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  170.220078][ T7340] BTRFS info (device loop3): auto enabling async discard
[  170.239211][ T7332] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  170.260137][    T8] keyspan 1-1:1.0: Keyspan 2 port adapter converter detected
[  170.268055][ T7340] BTRFS info (device loop3): rebuilding free space tree
[  170.284302][    T8] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 84
[  170.305696][    T8] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 2
[  170.317345][ T7340] BTRFS info (device loop3): checking UUID tree
[  170.326224][    T8] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  170.358340][    T8] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 88
[  170.376048][    T8] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 6
[  170.398179][    T8] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  170.645166][ T5780] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  170.786939][ T5822] usb 1-1: USB disconnect, device number 7
[  170.817673][ T5822] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  170.865816][ T5822] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  170.909015][ T5822] keyspan 1-1:1.0: device disconnected
[  171.281738][ T5785] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  171.501143][ T7377] loop4: detected capacity change from 0 to 1024
[  171.583605][ T7377] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  171.662233][ T7387] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  171.857721][ T7392] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  171.871738][ T7392] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  171.891130][ T6231] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  172.261804][ T7409] netlink: 'syz.1.455': attribute type 3 has an invalid length.
[  172.271192][ T7409] netlink: 76 bytes leftover after parsing attributes in process `syz.1.455'.
[  172.688419][   T28] audit: type=1326 audit(1791887373.945:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7391 comm="syz.3.448" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73fdd9e2d9 code=0x7fc00000
[  172.827798][ T7431] FAULT_INJECTION: forcing a failure.
[  172.827798][ T7431] name failslab, interval 1, probability 0, space 0, times 0
[  172.855041][ T7431] CPU: 0 PID: 7431 Comm: syz.0.467 Not tainted syzkaller #0
[  172.862430][ T7431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  172.872547][ T7431] Call Trace:
[  172.875871][ T7431]  <TASK>
[  172.878845][ T7431]  dump_stack_lvl+0x18c/0x250
[  172.883588][ T7431]  ? show_regs_print_info+0x20/0x20
[  172.888842][ T7431]  ? load_image+0x420/0x420
[  172.893419][ T7431]  ? __might_sleep+0xe0/0xe0
[  172.898073][ T7431]  ? __lock_acquire+0x7eb0/0x7eb0
[  172.903162][ T7431]  should_fail_ex+0x394/0x4c0
[  172.907916][ T7431]  should_failslab+0x9/0x20
[  172.912490][ T7431]  slab_pre_alloc_hook+0x59/0x300
[  172.917575][ T7431]  ? d_instantiate+0x6f/0x90
[  172.922222][ T7431]  kmem_cache_alloc+0x5a/0x2c0
[  172.927044][ T7431]  ? alloc_empty_file+0x9e/0x1d0
[  172.932042][ T7431]  alloc_empty_file+0x9e/0x1d0
[  172.936864][ T7431]  alloc_file+0x5b/0x600
[  172.941166][ T7431]  alloc_file_pseudo+0x184/0x210
[  172.946161][ T7431]  ? fput+0x1a0/0x1a0
[  172.950197][ T7431]  ? alloc_fd+0x590/0x640
[  172.955203][ T7431]  sock_alloc_file+0xb7/0x280
[  172.959952][ T7431]  __sys_socket+0x140/0x1b0
[  172.964525][ T7431]  __x64_sys_socket+0x7a/0x90
[  172.969267][ T7431]  do_syscall_64+0x55/0xb0
[  172.973733][ T7431]  ? clear_bhb_loop+0x40/0x90
[  172.978463][ T7431]  ? clear_bhb_loop+0x40/0x90
[  172.983182][ T7431]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  172.989145][ T7431] RIP: 0033:0x7fa441f9e2d9
[  172.993594][ T7431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  173.013242][ T7431] RSP: 002b:00007fa442e1f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  173.021704][ T7431] RAX: ffffffffffffffda RBX: 00007fa442225fa0 RCX: 00007fa441f9e2d9
[  173.029710][ T7431] RDX: 0000000000000002 RSI: 0000000000000003 RDI: 000000000000000f
[  173.037717][ T7431] RBP: 00007fa442035888 R08: 0000000000000000 R09: 0000000000000000
[  173.045728][ T7431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  173.053823][ T7431] R13: 00007fa442226038 R14: 00007fa442225fa0 R15: 00007ffe320dc5d8
[  173.061844][ T7431]  </TASK>
[  173.065012][    C0] vkms_vblank_simulate: vblank timer overrun
[  173.160754][   T28] audit: type=1800 audit(1791887374.415:29): pid=7435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.469" name="direction" dev="configfs" ino=13391 res=0 errno=0
[  173.341439][   T27] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  173.449093][ T7443] loop0: detected capacity change from 0 to 256
[  173.531624][   T27] usb 4-1: Using ep0 maxpacket: 16
[  173.549681][   T27] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  173.580864][   T27] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  173.604272][   T27] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  173.620158][   T27] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  173.638173][   T27] usb 4-1: config 0 interface 0 has no altsetting 0
[  173.642075][    T8] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  173.658444][   T27] usb 4-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00
[  173.679477][   T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  173.702612][   T27] usb 4-1: config 0 descriptor??
[  173.740379][ T7445] loop0: detected capacity change from 0 to 4096
[  173.749185][ T7445] EXT4-fs: Ignoring removed nobh option
[  173.756475][ T7445] EXT4-fs: Ignoring removed bh option
[  173.785778][ T7445] EXT4-fs (loop0): Test dummy encryption mode enabled
[  173.837851][ T7445] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  173.861454][    T8] usb 5-1: Using ep0 maxpacket: 16
[  173.873844][    T8] usb 5-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  173.895253][    T8] usb 5-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0
[  173.905613][    T8] usb 5-1: config 0 interface 0 has no altsetting 0
[  173.912369][    T8] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  173.921802][    T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  173.932745][    T8] usb 5-1: config 0 descriptor??
[  174.072643][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  174.219441][   T27] logitech-djreceiver 0003:046D:C53A.0006: hiddev0,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.3-1/input0
[  174.309169][   T28] audit: type=1326 audit(1791887375.565:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7450 comm="syz.0.476" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa441f9e2d9 code=0x0
[  174.411555][    T8] mcp2221 0003:04D8:00DD.0007: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0
[  174.762448][   T55] usb 5-1: USB disconnect, device number 5
[  175.180867][ T7460] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input16
[  175.690498][ T7464] loop1: detected capacity change from 0 to 32768
[  175.701646][ T7464] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 scanned by syz.1.480 (7464)
[  175.741456][ T7464] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  175.753215][ T7464] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  175.768037][ T7464] BTRFS info (device loop1): using free space tree
[  175.855033][ T7464] BTRFS info (device loop1): enabling ssd optimizations
[  175.864673][ T7464] BTRFS info (device loop1): auto enabling async discard
[  176.006084][ T5779] BTRFS info (device loop1): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  176.070983][ T7490] loop3: detected capacity change from 0 to 256
[  176.108494][ T7490] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d)
[  176.259063][ T7492] loop0: detected capacity change from 0 to 1024
[  176.271844][   T27] usb 4-1: USB disconnect, device number 8
[  176.404330][ T7492] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  176.629952][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  176.936801][ T7511] loop3: detected capacity change from 0 to 1024
[  176.973284][ T7511] EXT4-fs: Ignoring removed nomblk_io_submit option
[  176.984481][ T5820] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  176.992609][ T7511] EXT4-fs: inline encryption not supported
[  177.028623][ T7511] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  177.171497][ T5820] usb 2-1: Using ep0 maxpacket: 32
[  177.195318][ T5820] usb 2-1: config 0 has an invalid interface number: 67 but max is 0
[  177.214299][ T5820] usb 2-1: config 0 has no interface number 0
[  177.234052][ T5820] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  177.255663][ T5820] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  177.275219][ T5820] usb 2-1: Product: syz
[  177.279564][ T5820] usb 2-1: Manufacturer: syz
[  177.296101][ T5820] usb 2-1: SerialNumber: syz
[  177.324272][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  177.339374][ T5820] usb 2-1: config 0 descriptor??
[  177.347822][ T5820] smsc95xx v2.0.0
[  177.852199][ T7546] loop0: detected capacity change from 0 to 128
[  177.886244][ T7546] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  177.991931][ T7548] sctp: [Deprecated]: syz.4.509 (pid 7548) Use of struct sctp_assoc_value in delayed_ack socket option.
[  177.991931][ T7548] Use struct sctp_sack_info instead
[  178.158217][ T7550] loop0: detected capacity change from 0 to 512
[  178.186498][ T5820] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout
[  178.309470][ T7556] tun0: tun_chr_ioctl cmd 1074025675
[  178.321415][ T7556] tun0: persist enabled
[  178.326689][ T7556] tun0: tun_chr_ioctl cmd 1074025675
[  178.334855][ T7556] tun0: persist disabled
[  178.399741][ T5820] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  178.416520][ T5847] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  178.432958][ T5820] smsc95xx: probe of 2-1:0.67 failed with error -71
[  178.464901][ T5820] usb 2-1: USB disconnect, device number 7
[  178.643660][ T5847] usb 5-1: config 0 interface 0 altsetting 255 bulk endpoint 0x3 has invalid maxpacket 61
[  178.666628][ T5847] usb 5-1: config 0 interface 0 has no altsetting 0
[  178.684549][ T5847] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  178.702359][ T5847] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  178.719307][ T5847] usb 5-1: Product: syz
[  178.724556][ T5847] usb 5-1: Manufacturer: syz
[  178.729238][ T5847] usb 5-1: SerialNumber: syz
[  178.743095][ T5847] usb 5-1: config 0 descriptor??
[  178.750307][ T7554] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  178.770237][ T5847] usb 5-1: selecting invalid altsetting 0
[  178.866448][ T7566] loop0: detected capacity change from 0 to 256
[  178.879035][ T7566] exfat: Deprecated parameter 'utf8'
[  178.888390][ T7566] exfat: Deprecated parameter 'utf8'
[  178.938186][ T7566] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  179.065521][ T7554] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled
[  179.074696][ T7554] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled
[  179.101058][ T7554] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled
[  179.481541][   T27] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  179.677793][   T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  179.689026][   T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  179.699013][   T27] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  179.719570][   T27] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  179.730253][   T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  179.744835][   T27] usb 4-1: config 0 descriptor??
[  180.135559][ T7581] tun0: tun_chr_ioctl cmd 1074025675
[  180.143860][ T7581] tun0: persist enabled
[  180.156810][ T7581] tun0: tun_chr_ioctl cmd 1074025675
[  180.166372][ T7581] tun0: persist disabled
[  180.177914][   T27] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving
[  180.212072][   T27] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  180.258956][ T7583] loop0: detected capacity change from 0 to 2048
[  180.325999][ T7583] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  180.470892][ T5777] EXT4-fs error (device loop0): ext4_ext_check_inode:532: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  180.497516][ T5777] EXT4-fs error (device loop0): ext4_ext_check_inode:532: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  180.524144][    T8] usb 4-1: USB disconnect, device number 9
[  180.711499][   T27] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  180.786291][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  180.829132][ T7553] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled
[  180.873692][ T2897] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  180.891713][   T27] usb 2-1: Using ep0 maxpacket: 8
[  180.899827][   T27] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  180.910408][   T27] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  180.919970][   T27] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  180.942988][   T27] usb 2-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40
[  180.957246][   T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  180.967726][   T27] usb 2-1: Product: syz
[  180.985378][   T27] usb 2-1: Manufacturer: syz
[  180.991014][   T27] usb 2-1: SerialNumber: syz
[  181.021663][ T2897] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  181.142692][ T2897] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  181.319655][ T2897] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  181.612026][    T8] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  181.634922][   T27] usb 2-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[  181.658040][   T27] usb 2-1: clock source 0 is not valid, cannot use
[  181.726014][ T5789] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  181.740260][ T5789] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  181.750744][ T5789] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  181.759905][ T5789] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  181.772318][ T5789] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  181.780879][ T5789] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  181.811598][    T8] usb 4-1: Using ep0 maxpacket: 32
[  181.842119][    T8] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[  181.850306][    T8] usb 4-1: config 0 has no interface number 0
[  181.879562][ T5820] usb 5-1: USB disconnect, device number 6
[  181.893630][   T27] usb 2-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[  181.910928][    T8] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  181.939397][    T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  181.969914][    T8] usb 4-1: Product: syz
[  181.981723][    T8] usb 4-1: Manufacturer: syz
[  181.986447][    T8] usb 4-1: SerialNumber: syz
[  182.042033][   T27] usb 2-1: USB disconnect, device number 8
[  182.113048][    T8] usb 4-1: config 0 descriptor??
[  182.148062][    T8] smsc95xx v2.0.0
[  182.705979][ T7611] loop4: detected capacity change from 0 to 256
[  182.987211][    T8] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout
[  183.096384][ T7592] chnl_net:caif_netlink_parms(): no params data found
[  183.189124][    T8] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  183.217961][    T8] smsc95xx: probe of 4-1:0.67 failed with error -71
[  183.230745][    T8] usb 4-1: USB disconnect, device number 10
[  183.421427][ T5821] usb 2-1: new full-speed USB device number 9 using dummy_hcd
[  183.463663][ T7592] bridge0: port 1(bridge_slave_0) entered blocking state
[  183.470969][ T7592] bridge0: port 1(bridge_slave_0) entered disabled state
[  183.478942][ T7592] bridge_slave_0: entered allmulticast mode
[  183.486926][ T7592] bridge_slave_0: entered promiscuous mode
[  183.496172][ T7592] bridge0: port 2(bridge_slave_1) entered blocking state
[  183.504466][ T7592] bridge0: port 2(bridge_slave_1) entered disabled state
[  183.512468][ T7592] bridge_slave_1: entered allmulticast mode
[  183.520960][ T7592] bridge_slave_1: entered promiscuous mode
[  183.551793][  T971] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  183.607849][ T5821] usb 2-1: config 2 has an invalid interface number: 49 but max is 1
[  183.618101][ T5821] usb 2-1: config 2 has an invalid interface number: 116 but max is 1
[  183.629125][ T5821] usb 2-1: config 2 has no interface number 0
[  183.641084][ T5821] usb 2-1: config 2 has no interface number 1
[  183.652262][ T5821] usb 2-1: config 2 interface 116 altsetting 10 endpoint 0x2 has invalid maxpacket 1023, setting to 64
[  183.674750][ T7592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  183.684265][ T5821] usb 2-1: config 2 interface 116 altsetting 10 endpoint 0x84 has invalid maxpacket 62055, setting to 64
[  183.701119][ T5821] usb 2-1: config 2 interface 116 altsetting 10 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  183.714955][ T5821] usb 2-1: config 2 interface 49 has no altsetting 0
[  183.722675][ T5821] usb 2-1: config 2 interface 116 has no altsetting 0
[  183.739806][ T5821] usb 2-1: New USB device found, idVendor=05ac, idProduct=0225, bcdDevice=80.16
[  183.763617][  T971] usb 5-1: too many endpoints for config 0 interface 0 altsetting 76: 206, using maximum allowed: 30
[  183.781400][  T971] usb 5-1: config 0 interface 0 altsetting 76 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  183.783479][ T5821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  183.809528][ T5821] usb 2-1: Product: syz
[  183.813922][ T5821] usb 2-1: Manufacturer: syz
[  183.818569][ T5821] usb 2-1: SerialNumber: syz
[  183.840025][  T971] usb 5-1: config 0 interface 0 altsetting 76 endpoint 0x81 has invalid wMaxPacketSize 0
[  183.847950][ T5785] Bluetooth: hci0: command tx timeout
[  183.862011][ T2897] hsr_slave_0: left promiscuous mode
[  183.873656][  T971] usb 5-1: config 0 interface 0 altsetting 76 has 1 endpoint descriptor, different from the interface descriptor's value: 206
[  183.888349][ T2897] hsr_slave_1: left promiscuous mode
[  183.895942][  T971] usb 5-1: config 0 interface 0 has no altsetting 0
[  183.903874][ T2897] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  183.911697][ T2897] batman_adv: batadv0: Removing interface: batadv_slave_0
[  183.920127][ T2897] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  183.928684][ T2897] batman_adv: batadv0: Removing interface: batadv_slave_1
[  183.949800][  T971] usb 5-1: New USB device found, idVendor=12ba, idProduct=074b, bcdDevice= 0.00
[  183.950126][ T2897] bridge_slave_1: left allmulticast mode
[  183.965322][ T2897] bridge_slave_1: left promiscuous mode
[  183.971355][ T2897] bridge0: port 2(bridge_slave_1) entered disabled state
[  183.987027][  T971] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  183.998717][ T2897] bridge_slave_0: left allmulticast mode
[  184.004929][ T2897] bridge_slave_0: left promiscuous mode
[  184.010877][ T2897] bridge0: port 1(bridge_slave_0) entered disabled state
[  184.035827][  T971] usb 5-1: config 0 descriptor??
[  184.134133][ T2897] veth1_macvtap: left promiscuous mode
[  184.139810][ T2897] veth0_macvtap: left promiscuous mode
[  184.149067][ T2897] veth1_vlan: left promiscuous mode
[  184.154884][ T2897] veth0_vlan: left promiscuous mode
[  184.319103][ T5821] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:2.49/input/input17
[  184.522549][  T971] input: HID 12ba:074b as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:12BA:074B.0009/input/input18
[  184.741347][    C0] bcm5974 2-1:2.49: button urb failed: -1
[  184.944368][ T5123] bcm5974 2-1:2.49: could not read from device
[  184.965018][ T5123] bcm5974 2-1:2.49: could not read from device
[  185.009138][ T5123] bcm5974 2-1:2.49: could not read from device
[  185.023750][  T971] sony 0003:12BA:074B.0009: input,hidraw0: USB HID v80.00 Joystick [HID 12ba:074b] on usb-dummy_hcd.4-1/input0
[  185.051461][ T5821] usb 2-1: USB disconnect, device number 9
[  185.058791][ T5123] bcm5974 2-1:2.49: could not read from device
[  185.155895][  T971] usb 5-1: USB disconnect, device number 7
[  185.257989][ T7647] fido_id[7647]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory
[  185.642785][ T2897] team0 (unregistering): Port device team_slave_1 removed
[  185.667562][ T7652] 9pnet: p9_errstr2errno: server reported unknown error 0xffffffffffffffff
[  185.790889][ T2897] team0 (unregistering): Port device team_slave_0 removed
[  185.811178][ T7657] loop4: detected capacity change from 0 to 256
[  185.909234][ T7657] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  185.921383][ T5785] Bluetooth: hci0: command tx timeout
[  185.976742][ T2897] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  186.076691][ T7661] loop1: detected capacity change from 0 to 1024
[  186.116529][ T2897] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  186.225080][ T7663] netlink: 4 bytes leftover after parsing attributes in process `syz.4.544'.
[  186.665171][ T2897] bond0 (unregistering): Released all slaves
[  186.741046][ T7592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  186.750589][ T7633] veth1_to_bond: entered promiscuous mode
[  186.757742][ T7633] veth1_to_bond: left promiscuous mode
[  186.866805][ T7592] team0: Port device team_slave_0 added
[  186.927492][ T7592] team0: Port device team_slave_1 added
[  187.010975][ T7592] batman_adv: batadv0: Adding interface: batadv_slave_0
[  187.018113][ T7592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  187.044054][    C0] vkms_vblank_simulate: vblank timer overrun
[  187.118024][ T7592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  187.157365][ T7592] batman_adv: batadv0: Adding interface: batadv_slave_1
[  187.202033][ T7592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  187.268124][ T7679] loop1: detected capacity change from 0 to 512
[  187.281682][ T7592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  187.340743][   T28] audit: type=1326 audit(1791887388.595:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7674 comm="syz.1.550" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fb879e2d9 code=0x7ffc0000
[  187.471535][   T28] audit: type=1326 audit(1791887388.595:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7674 comm="syz.1.550" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fb879e2d9 code=0x7ffc0000
[  187.495415][    C0] vkms_vblank_simulate: vblank timer overrun
[  187.560605][   T28] audit: type=1326 audit(1791887388.595:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7674 comm="syz.1.550" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fb879e2d9 code=0x7ffc0000
[  187.589337][   T28] audit: type=1326 audit(1791887388.595:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7674 comm="syz.1.550" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fb879e2d9 code=0x7ffc0000
[  187.642309][ T7592] hsr_slave_0: entered promiscuous mode
[  187.675360][ T7592] hsr_slave_1: entered promiscuous mode
[  187.712227][   T28] audit: type=1326 audit(1791887388.595:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7674 comm="syz.1.550" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fb879e2d9 code=0x7ffc0000
[  187.793846][   T28] audit: type=1326 audit(1791887388.595:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7674 comm="syz.1.550" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f5fb879e2d9 code=0x7ffc0000
[  187.901471][   T28] audit: type=1326 audit(1791887388.595:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7674 comm="syz.1.550" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fb879e2d9 code=0x7ffc0000
[  187.925383][    C0] vkms_vblank_simulate: vblank timer overrun
[  187.950254][   T28] audit: type=1326 audit(1791887388.605:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7674 comm="syz.1.550" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fb879e2d9 code=0x7ffc0000
[  187.974181][    C0] vkms_vblank_simulate: vblank timer overrun
[  188.011162][ T5785] Bluetooth: hci0: command tx timeout
[  188.088597][   T28] audit: type=1326 audit(1791887388.605:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7674 comm="syz.1.550" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fb879e2d9 code=0x7ffc0000
[  188.114666][ T2897] IPVS: stop unused estimator thread 0...
[  188.188190][   T28] audit: type=1326 audit(1791887388.635:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7674 comm="syz.1.550" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f5fb879e2d9 code=0x7ffc0000
[  189.269822][ T7735] loop1: detected capacity change from 0 to 256
[  189.327349][ T7592] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  189.399500][ T7592] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  189.433106][ T7592] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  189.460852][ T7592] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  189.673793][ T7737] loop3: detected capacity change from 0 to 8192
[  189.824342][ T7592] 8021q: adding VLAN 0 to HW filter on device bond0
[  189.910574][ T7592] 8021q: adding VLAN 0 to HW filter on device team0
[  189.986979][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  189.994300][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  190.075349][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  190.082641][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  190.090664][ T5785] Bluetooth: hci0: command tx timeout
[  190.414368][ T7592] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  191.094856][ T7592] 8021q: adding VLAN 0 to HW filter on device batadv0
[  191.424012][ T7592] veth0_vlan: entered promiscuous mode
[  191.479804][ T7592] veth1_vlan: entered promiscuous mode
[  191.679246][ T7592] veth0_macvtap: entered promiscuous mode
[  191.721249][ T7592] veth1_macvtap: entered promiscuous mode
[  191.785479][ T7592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  191.805873][ T7592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  191.825821][ T7592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  191.846546][ T7592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  191.865821][ T7592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  191.886667][ T7592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  191.911229][ T7592] batman_adv: batadv0: Interface activated: batadv_slave_0
[  191.911931][ T5819] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  191.950555][ T7592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  191.971516][ T7592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  191.992540][ T7592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  192.013698][ T7592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  192.035974][ T7592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  192.062739][ T7592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  192.079575][ T7592] batman_adv: batadv0: Interface activated: batadv_slave_1
[  192.109873][ T7592] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  192.121490][ T5819] usb 5-1: Using ep0 maxpacket: 8
[  192.134464][ T7592] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  192.134475][ T5819] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  192.134554][ T5819] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  192.143397][ T7592] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  192.174655][ T5819] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  192.185927][ T5819] usb 5-1: config 0 descriptor??
[  192.212208][ T7592] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  192.411948][ T5819] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  192.459624][ T3432] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  192.498642][ T3432] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  192.564658][ T2897] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  192.597628][ T2897] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  192.715764][ T7795] loop1: detected capacity change from 0 to 32768
[  192.796365][ T7795] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  192.833260][ T5821] usb 5-1: USB disconnect, device number 8
[  192.918714][ T7795] XFS (loop1): Ending clean mount
[  193.172935][ T5779] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  193.683609][ T7840] syzkaller1: entered promiscuous mode
[  193.701596][ T7840] syzkaller1: entered allmulticast mode
[  194.471611][    T9] usb 5-1: new full-speed USB device number 9 using dummy_hcd
[  194.481222][ T7873] loop3: detected capacity change from 0 to 2048
[  194.522893][ T7873]  loop3: p1 p2 p3 p4
[  194.530303][ T7873] loop3: p1 start 3405774849 is beyond EOD, truncated
[  194.538700][ T7873] loop3: p2 start 53543428 is beyond EOD, truncated
[  194.546892][ T7873] loop3: p3 start 4259840 is beyond EOD, truncated
[  194.674943][    T9] usb 5-1: not running at top speed; connect to a high speed hub
[  194.695755][    T9] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00
[  194.718710][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  194.733552][    T8] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  194.741963][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  194.743838][    T9] usb 5-1: Product: syz
[  194.748694][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  194.753428][    T9] usb 5-1: Manufacturer: syz
[  194.780982][    T9] usb 5-1: SerialNumber: syz
[  194.795079][    T9] keyspan 5-1:1.0: Keyspan 4 port adapter converter detected
[  194.830153][    T9] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0
[  194.862735][    T9] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1
[  194.885021][   T27] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  194.897017][    T9] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2
[  194.913215][    T9] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3
[  194.943860][    T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  194.983114][    T8] usb 2-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf
[  195.007400][    T8] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0
[  195.043527][    T8] usb 2-1: Manufacturer: syz
[  195.052154][    T8] usb 2-1: config 0 descriptor??
[  195.063698][    T8] usb 2-1: Found UVC 0.00 device <unnamed> (18ec:3288)
[  195.070767][    T8] usb 2-1: No valid video chain found.
[  195.110211][ T7885] netlink: 'syz.0.595': attribute type 34 has an invalid length.
[  195.118229][   T27] usb 4-1: Using ep0 maxpacket: 32
[  195.133699][   T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 176, changing to 11
[  195.179300][   T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 18112, setting to 1024
[  195.241551][   T27] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  195.271665][   T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  195.298902][   T27] usb 4-1: config 0 descriptor??
[  195.305942][ T7873] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  195.324826][   T27] hub 4-1:0.0: USB hub found
[  195.370353][  T971] usb 2-1: USB disconnect, device number 10
[  195.551663][   T27] hub 4-1:0.0: 26 ports detected
[  195.557316][   T27] hub 4-1:0.0: insufficient power available to use all downstream ports
[  195.739810][   T27] hub 4-1:0.0: hub_hub_status failed (err = -71)
[  195.746525][   T27] hub 4-1:0.0: config failed, can't get hub status (err -71)
[  195.765219][   T27] usbhid 4-1:0.0: can't add hid device: -71
[  195.771830][   T27] usbhid: probe of 4-1:0.0 failed with error -71
[  195.817666][   T27] usb 4-1: USB disconnect, device number 11
[  196.035616][ T7901] loop1: detected capacity change from 0 to 8
[  196.488890][ T7913] loop3: detected capacity change from 0 to 512
[  196.507991][ T7913] EXT4-fs: inline encryption not supported
[  196.531599][ T7913] EXT4-fs: Ignoring removed nobh option
[  196.543804][ T7913] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  196.570054][ T7916] loop0: detected capacity change from 0 to 64
[  196.620948][ T7913] EXT4-fs (loop3): 1 truncate cleaned up
[  196.670517][ T7913] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  196.863193][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  197.008247][ T7925] loop3: detected capacity change from 0 to 2048
[  197.054174][ T7925] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  197.269395][ T5821] usb 5-1: USB disconnect, device number 9
[  197.309366][ T5821] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0
[  197.359532][ T5821] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1
[  197.396714][ T5821] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2
[  197.435326][ T7934] loop4: detected capacity change from 0 to 2048
[  197.448244][ T7932] loop0: detected capacity change from 0 to 256
[  197.462136][ T5821] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3
[  197.477403][ T7934]  loop4: p1 p2 p3 p4
[  197.485581][ T5821] keyspan 5-1:1.0: device disconnected
[  197.491545][ T7934] loop4: p1 start 3405774849 is beyond EOD, truncated
[  197.501260][ T7934] loop4: p2 start 53543428 is beyond EOD, truncated
[  197.505016][ T7932] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  197.527068][ T7934] loop4: p3 start 4259840 is beyond EOD, truncated
[  197.580281][ T7932] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  197.645104][ T7932] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001033e, chksum : 0x4df55fa3, utbl_chksum : 0xe619d30d)
[  197.693592][ T7932] exFAT-fs (loop0): failed to load alloc-bitmap
[  197.700024][ T7932] exFAT-fs (loop0): failed to recognize exfat type
[  197.835451][ T7938] loop3: detected capacity change from 0 to 2048
[  197.850401][ T7940] loop1: detected capacity change from 0 to 512
[  197.898397][ T7940] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm syz.1.622: bg 0: block 5: invalid block bitmap
[  197.958816][ T7938] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  197.971726][ T7940] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6655: Corrupt filesystem
[  197.982308][ T5821] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  198.040661][ T7940] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.622: invalid indirect mapped block 3 (level 2)
[  198.079701][ T7938] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  198.103185][ T7940] EXT4-fs (loop1): 1 orphan inode deleted
[  198.109013][ T7940] EXT4-fs (loop1): 1 truncate cleaned up
[  198.120845][ T7938] EXT4-fs (loop3): Remounting filesystem read-only
[  198.129947][ T7940] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  198.144150][ T7938] EXT4-fs (loop3): error restoring inline_data for inode -- potential data loss! (inode 18, error -5)
[  198.191671][ T5821] usb 5-1: Using ep0 maxpacket: 32
[  198.199158][ T5821] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 176, changing to 11
[  198.211466][ T5821] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 18112, setting to 1024
[  198.233756][ T5821] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  198.248848][ T5821] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  198.258815][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[  198.279673][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.316811][ T5821] usb 5-1: config 0 descriptor??
[  198.337209][ T7934] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  198.357294][ T5821] hub 5-1:0.0: USB hub found
[  198.466251][ T7950] loop3: detected capacity change from 0 to 2048
[  198.501554][ T7950] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  198.529398][ T7950] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  198.574894][ T5821] hub 5-1:0.0: 26 ports detected
[  198.588861][ T5821] hub 5-1:0.0: insufficient power available to use all downstream ports
[  198.658190][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.784095][ T5821] hub 5-1:0.0: hub_hub_status failed (err = -71)
[  198.800865][ T5821] hub 5-1:0.0: config failed, can't get hub status (err -71)
[  198.825016][ T5821] usbhid 5-1:0.0: can't add hid device: -71
[  198.831558][ T5821] usbhid: probe of 5-1:0.0 failed with error -71
[  198.893975][ T5821] usb 5-1: USB disconnect, device number 10
[  199.098100][ T7964] input: syz1 as /devices/virtual/input/input19
[  199.330128][ T7956] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  199.347214][   T28] kauditd_printk_skb: 10 callbacks suppressed
[  199.347229][   T28] audit: type=1326 audit(1791887400.605:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7967 comm="syz.0.631" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fac4b79e2d9 code=0x0
[  199.430237][ T7956] XFS (loop3): Ending clean mount
[  199.491465][ T5821] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  199.546606][ T5780] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  199.684110][ T5821] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 154, changing to 7
[  199.712733][ T5821] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9861, setting to 1024
[  199.745015][ T5821] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  199.754464][ T5821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  199.774699][ T5821] usb 2-1: Product: syz
[  199.791494][ T5821] usb 2-1: Manufacturer: syz
[  199.796627][ T5821] usb 2-1: SerialNumber: syz
[  200.259080][ T7982] set_capacity_and_notify: 1 callbacks suppressed
[  200.259098][ T7982] loop4: detected capacity change from 0 to 40427
[  200.298553][ T7982] F2FS-fs (loop4): invalid crc value
[  200.324143][ T7982] F2FS-fs (loop4): Found nat_bits in checkpoint
[  200.331139][ T7988] loop0: detected capacity change from 0 to 2048
[  200.390885][ T7988] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  200.460499][ T7982] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  200.513759][ T7215] udevd[7215]: incorrect nilfs2 checksum on /dev/loop0
[  200.528429][ T7993] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  200.674152][ T7982] syz.4.635: attempt to access beyond end of device
[  200.674152][ T7982] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  200.698234][ T7982] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  200.850551][ T5821] cdc_ncm 2-1:1.0: bind() failure
[  200.868958][ T5821] cdc_ncm: probe of 2-1:1.1 failed with error -71
[  200.889692][ T5821] cdc_mbim: probe of 2-1:1.1 failed with error -71
[  200.920072][ T5821] usbtest: probe of 2-1:1.1 failed with error -71
[  200.946918][ T5821] usb 2-1: USB disconnect, device number 11
[  201.401830][ T8006] ALSA: mixer_oss: invalid OSS volume 'lo'
[  201.543415][ T8010] syzkaller1: entered promiscuous mode
[  201.558356][ T8010] syzkaller1: entered allmulticast mode
[  201.648972][ T8017] loop3: detected capacity change from 0 to 1024
[  201.903201][  T146] hfsplus: b-tree write err: -5, ino 3
[  202.002401][ T5785] Bluetooth: hci3: command tx timeout
[  202.538549][ T8043] loop0: detected capacity change from 0 to 2048
[  202.650007][ T8043] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  202.669290][ T8051] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  202.669290][ T8051] The task syz.4.659 (8051) triggered the difference, watch for misbehavior.
[  202.788569][ T8053] loop1: detected capacity change from 0 to 256
[  202.854510][ T8053] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d)
[  203.241535][   T27] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  203.267649][ T8057] netlink: 292 bytes leftover after parsing attributes in process `syz.0.663'.
[  203.431577][   T27] usb 2-1: Using ep0 maxpacket: 8
[  203.451491][   T27] usb 2-1: config 1 has an invalid descriptor of length 239, skipping remainder of the config
[  203.482720][   T27] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  203.511465][   T27] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  203.564420][   T27] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  203.591575][   T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  203.616960][ T8061] loop4: detected capacity change from 0 to 1024
[  203.628158][   T27] usb 2-1: Product: syz
[  203.638749][   T27] usb 2-1: Manufacturer: syz
[  203.659127][   T27] usb 2-1: SerialNumber: syz
[  203.743697][ T8061] hfsplus: invalid length 32517 has been corrected to 255
[  203.837375][ T8049] loop3: detected capacity change from 0 to 131072
[  203.851603][ T8049] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0)
[  203.859774][ T8049] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  203.883175][ T8049] F2FS-fs (loop3): invalid crc value
[  203.915000][ T8049] F2FS-fs (loop3): Found nat_bits in checkpoint
[  203.930251][   T27] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found
[  203.962730][   T27] cdc_ncm 2-1:1.0: bind() failure
[  204.008299][ T8049] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  204.015941][ T8049] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  204.051810][   T28] audit: type=1800 audit(1791887405.285:52): pid=8061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.665" name="file1" dev="loop4" ino=20 res=0 errno=0
[  204.082047][   T27] usb 2-1: USB disconnect, device number 12
[  204.108119][   T12] hfsplus: b-tree write err: -5, ino 20
[  204.312703][ T8074] loop4: detected capacity change from 0 to 1024
[  204.367870][ T8074] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  204.599538][ T6231] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  204.830134][   T28] audit: type=1326 audit(1791887406.085:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8086 comm="syz.4.670" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4b3d9e2d9 code=0x7ffc0000
[  204.906221][   T28] audit: type=1326 audit(1791887406.125:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8086 comm="syz.4.670" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4b3d9e2d9 code=0x7ffc0000
[  205.024001][   T28] audit: type=1326 audit(1791887406.125:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8086 comm="syz.4.670" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4b3d9e2d9 code=0x7ffc0000
[  205.101651][   T28] audit: type=1326 audit(1791887406.125:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8086 comm="syz.4.670" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4b3d9e2d9 code=0x7ffc0000
[  205.168178][ T8090] netlink: 'syz.4.674': attribute type 4 has an invalid length.
[  205.183316][   T28] audit: type=1326 audit(1791887406.125:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8086 comm="syz.4.670" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fb4b3d9e2d9 code=0x7ffc0000
[  205.263931][   T28] audit: type=1326 audit(1791887406.125:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8086 comm="syz.4.670" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4b3d9e2d9 code=0x7ffc0000
[  205.356555][   T28] audit: type=1326 audit(1791887406.125:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8086 comm="syz.4.670" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4b3d9e2d9 code=0x7ffc0000
[  205.421469][   T28] audit: type=1326 audit(1791887406.125:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8086 comm="syz.4.670" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4b3d9e2d9 code=0x7ffc0000
[  205.481510][  T971] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  205.491533][   T28] audit: type=1326 audit(1791887406.125:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8086 comm="syz.4.670" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4b3d9e2d9 code=0x7ffc0000
[  205.545151][   T28] audit: type=1326 audit(1791887406.125:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8086 comm="syz.4.670" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fb4b3d9e2d9 code=0x7ffc0000
[  205.681416][  T971] usb 1-1: Using ep0 maxpacket: 8
[  205.689008][  T971] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  205.698000][  T971] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  205.718392][  T971] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  205.738884][  T971] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  205.759426][  T971] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  205.778486][ T8084] loop3: detected capacity change from 0 to 40427
[  205.785717][  T971] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  205.822202][ T8084] F2FS-fs (loop3): invalid crc value
[  205.829849][  T971] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  205.861894][ T8084] F2FS-fs (loop3): Found nat_bits in checkpoint
[  205.957137][ T8084] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  206.045227][ T8084] F2FS-fs (loop3): Stopped filesystem due to reason: 0
[  206.067475][  T971] usb 1-1: usb_control_msg returned -32
[  206.077040][  T971] usbtmc 1-1:16.0: can't read capabilities
[  206.161780][ T8087] loop1: detected capacity change from 0 to 32768
[  206.404478][ T8104] loop3: detected capacity change from 0 to 1024
[  206.460062][ T8104] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  206.475146][ T8107] usbtmc 1-1:16.0: usb_control_msg returned -32
[  206.486717][ T5819] usb 1-1: USB disconnect, device number 8
[  206.833183][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  207.141455][ T5819] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  207.178286][ T8121] macsec1: entered allmulticast mode
[  207.346088][ T5819] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 109
[  207.375532][ T5819] usb 2-1: string descriptor 0 read error: -22
[  207.391483][ T5819] usb 2-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice= 0.01
[  207.400643][ T5819] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  207.436130][ T8115] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  207.456696][ T5819] etas_es58x 2-1:1.0: Starting (null) (null) (Serial Number (null))
[  207.468299][ T5819] etas_es58x 2-1:1.0: could not retrieve the product info string
[  207.628274][ T8117] loop3: detected capacity change from 0 to 32768
[  207.694708][ T8117] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[  207.716084][ T8115] etas_es58x 2-1:1.0 can0: bit-timing not yet defined
[  207.723180][    C1] etas_es58x 2-1:1.0 can0: es58x_write_bulk_callback: error -EPROTO
[  207.751569][    C1] etas_es58x 2-1:1.0: es58x_read_bulk_callback: error -ENOENT
[  207.764055][    C1] etas_es58x 2-1:1.0: es58x_read_bulk_callback: error -ENOENT
[  207.774221][    C1] etas_es58x 2-1:1.0: es58x_read_bulk_callback: error -ENOENT
[  207.782311][    C1] etas_es58x 2-1:1.0: es58x_read_bulk_callback: error -ENOENT
[  207.790786][    C1] etas_es58x 2-1:1.0: es58x_read_bulk_callback: error -ENOENT
[  207.799631][ T8115] etas_es58x 2-1:1.0 can0: es58x_open: Could not open the network device: -EINVAL
[  207.809908][ T8117] JBD2: Ignoring recovery information on journal
[  207.834046][ T5820] usb 2-1: USB disconnect, device number 13
[  207.857266][ T5820] etas_es58x 2-1:1.0: Disconnecting (null) (null)
[  207.977264][ T8117] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  208.276497][ T8148] loop0: detected capacity change from 0 to 8
[  208.363800][ T8148] SQUASHFS error: Failed to read block 0x8f: -5
[  208.397271][ T8148] SQUASHFS error: Failed to read block 0x285: -5
[  208.408648][ T8148] SQUASHFS error: Unable to read metadata cache entry [283]
[  208.422055][ T8148] SQUASHFS error: read_indexes: reading block [283:0]
[  208.439586][ T8148] SQUASHFS error: Failed to read block 0x0: -5
[  208.458492][ T8148] SQUASHFS error: Unable to read metadata cache entry [283]
[  208.481747][ T8148] SQUASHFS error: read_indexes: reading block [283:0]
[  208.502942][ T8148] SQUASHFS error: Failed to read block 0x0: -5
[  208.524582][ T8148] SQUASHFS error: Unable to read metadata cache entry [283]
[  208.533704][ T5780] ocfs2: Unmounting device (7,3) on (node local)
[  208.542587][ T8148] SQUASHFS error: read_indexes: reading block [283:0]
[  208.554855][ T8148] SQUASHFS error: Failed to read block 0x0: -5
[  208.572942][ T8148] SQUASHFS error: Unable to read metadata cache entry [283]
[  208.595971][ T8148] SQUASHFS error: read_indexes: reading block [283:0]
[  208.617288][ T8148] SQUASHFS error: Failed to read block 0x0: -5
[  208.632005][ T8148] SQUASHFS error: Unable to read metadata cache entry [283]
[  208.659828][ T8148] SQUASHFS error: read_indexes: reading block [283:0]
[  208.673852][ T8148] SQUASHFS error: Failed to read block 0x0: -5
[  208.689270][ T8148] SQUASHFS error: Unable to read metadata cache entry [283]
[  208.730778][ T8148] SQUASHFS error: read_indexes: reading block [283:0]
[  208.770632][ T8148] SQUASHFS error: Failed to read block 0x0: -5
[  208.781510][ T8148] SQUASHFS error: Unable to read metadata cache entry [283]
[  208.799168][ T8148] SQUASHFS error: read_indexes: reading block [283:0]
[  208.818379][ T8148] SQUASHFS error: Failed to read block 0x0: -5
[  208.826133][ T8148] SQUASHFS error: Unable to read metadata cache entry [283]
[  208.841865][ T8148] SQUASHFS error: read_indexes: reading block [283:0]
[  208.855577][ T8148] SQUASHFS error: Failed to read block 0x0: -5
[  208.870230][ T8148] SQUASHFS error: Unable to read metadata cache entry [283]
[  208.887320][ T8148] SQUASHFS error: read_indexes: reading block [283:0]
[  208.903556][ T8160] capability: warning: `syz.1.698' uses 32-bit capabilities (legacy support in use)
[  208.914282][ T8148] SQUASHFS error: Failed to read block 0x0: -5
[  208.928423][ T8148] SQUASHFS error: Unable to read metadata cache entry [283]
[  208.961698][ T8148] SQUASHFS error: read_indexes: reading block [283:0]
[  208.991081][ T8148] SQUASHFS error: Unable to read metadata cache entry [283]
[  209.008002][ T8148] SQUASHFS error: read_indexes: reading block [283:0]
[  209.026354][ T8148] SQUASHFS error: Unable to read metadata cache entry [283]
[  209.052833][ T8148] SQUASHFS error: read_indexes: reading block [283:0]
[  209.067597][ T8148] SQUASHFS error: Unable to read metadata cache entry [283]
[  209.082147][ T8148] SQUASHFS error: read_indexes: reading block [283:0]
[  209.151855][ T8148] SQUASHFS error: Unable to read metadata cache entry [283]
[  209.159248][ T8148] SQUASHFS error: read_indexes: reading block [283:0]
[  209.276639][ T8170] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  209.491458][  T971] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  209.691444][  T971] usb 2-1: Using ep0 maxpacket: 32
[  209.699636][  T971] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  209.721245][  T971] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  209.772177][  T971] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  209.798551][  T971] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  209.817396][  T971] usb 2-1: Product: syz
[  209.827550][  T971] usb 2-1: Manufacturer: syz
[  209.853558][  T971] hub 2-1:4.0: USB hub found
[  209.999382][ T8199] loop4: detected capacity change from 0 to 2048
[  210.080809][ T8199] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  210.118596][  T971] hub 2-1:4.0: config failed, can't read hub descriptor (err -22)
[  210.189334][ T8199] ext4 filesystem being mounted at /152/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  210.251341][  T971] usb 2-1: USB disconnect, device number 14
[  210.361260][ T8209] loop3: detected capacity change from 0 to 8
[  210.470352][ T6231] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  210.568084][ T8209] SQUASHFS error: Failed to read block 0x8f: -5
[  210.615701][   T28] kauditd_printk_skb: 16 callbacks suppressed
[  210.615718][   T28] audit: type=1800 audit(1791887411.875:79): pid=8209 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.711" name="file1" dev="loop3" ino=5 res=0 errno=0
[  210.673201][ T8216] loop4: detected capacity change from 0 to 1024
[  210.782159][ T8216] hfsplus: catalog searching failed
[  210.811889][  T971] usb 2-1: new full-speed USB device number 15 using dummy_hcd
[  210.936980][   T76] hfsplus: b-tree write err: -5, ino 3
[  210.987292][ T8220] loop3: detected capacity change from 0 to 1024
[  211.007190][  T971] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  211.033538][ T6231] hfsplus: node 4:3 still has 1 user(s)!
[  211.059993][  T971] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  211.113534][  T971] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  211.122715][ T8220] hfsplus: invalid length 32517 has been corrected to 255
[  211.159662][  T971] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  211.173955][   T28] audit: type=1800 audit(1791887412.435:80): pid=8220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.714" name="file1" dev="loop3" ino=20 res=0 errno=0
[  211.215042][  T971] usb 2-1: Product: syz
[  211.219312][  T971] usb 2-1: Manufacturer: syz
[  211.273101][  T971] hub 2-1:4.0: USB hub found
[  211.332765][   T76] hfsplus: b-tree write err: -5, ino 20
[  211.469198][  T971] hub 2-1:4.0: 1 port detected
[  211.884162][  T971] hub 2-1:4.0: set hub depth failed
[  211.900030][  T971] usb 2-1: USB disconnect, device number 15
[  212.054740][    T9] kernel write not supported for file /gssd/clntXX/gssd (pid: 9 comm: kworker/0:1)
[  212.361492][ T5820] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  212.552454][ T5820] usb 1-1: Using ep0 maxpacket: 32
[  212.560580][ T5820] usb 1-1: config 0 has an invalid interface number: 67 but max is 0
[  212.569011][ T5820] usb 1-1: config 0 has no interface number 0
[  212.579273][ T5820] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  212.599826][ T5820] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  212.612984][ T5820] usb 1-1: Product: syz
[  212.617234][ T5820] usb 1-1: Manufacturer: syz
[  212.625956][ T8262] sch_tbf: peakrate 3 is lower than or equals to rate 7809596203242017904 !
[  212.627868][ T5820] usb 1-1: SerialNumber: syz
[  212.646744][ T5820] usb 1-1: config 0 descriptor??
[  212.664261][ T5820] smsc95xx v2.0.0
[  212.851702][ T8270] input: syz0 as /devices/virtual/input/input20
[  213.207190][ T5821] IPVS: starting estimator thread 0...
[  213.321553][ T8277] IPVS: using max 18 ests per chain, 43200 per kthread
[  213.707808][ T5820] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71
[  213.728090][ T5820] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA
[  213.740170][ T5820] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  213.756369][ T5820] smsc95xx: probe of 1-1:0.67 failed with error -71
[  213.768922][ T5820] usb 1-1: USB disconnect, device number 9
[  213.807484][ T8274] loop4: detected capacity change from 0 to 65536
[  213.881726][ T8274] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  213.945381][ T8274] XFS (loop4): Ending clean mount
[  214.074020][ T6231] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  214.411529][    T8] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  214.601661][    T8] usb 4-1: Using ep0 maxpacket: 8
[  214.612561][    T8] usb 4-1: config 0 has no interfaces?
[  214.618458][    T8] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  214.635867][    T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  214.661208][    T8] usb 4-1: config 0 descriptor??
[  214.891183][    T8] usb 4-1: USB disconnect, device number 12
[  215.224236][ T8309] loop1: detected capacity change from 0 to 2048
[  215.240276][ T8309] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=3932051, location=3932051
[  215.289631][ T8309] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  215.420070][ T8300] loop4: detected capacity change from 0 to 32768
[  215.486869][ T8300] JBD2: Ignoring recovery information on journal
[  215.589623][ T8312] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  215.601937][ T8300] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  216.106029][ T6231] ocfs2: Unmounting device (7,4) on (node local)
[  216.154533][ T8326] FAULT_INJECTION: forcing a failure.
[  216.154533][ T8326] name failslab, interval 1, probability 0, space 0, times 0
[  216.187218][ T8328] input: syz1 as /devices/virtual/input/input21
[  216.190736][ T8326] CPU: 0 PID: 8326 Comm: syz.3.758 Not tainted syzkaller #0
[  216.200878][ T8326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  216.210989][ T8326] Call Trace:
[  216.214330][ T8326]  <TASK>
[  216.217317][ T8326]  dump_stack_lvl+0x18c/0x250
[  216.222069][ T8326]  ? show_regs_print_info+0x20/0x20
[  216.227329][ T8326]  ? load_image+0x420/0x420
[  216.231910][ T8326]  ? __might_sleep+0xe0/0xe0
[  216.236565][ T8326]  ? __lock_acquire+0x7eb0/0x7eb0
[  216.241660][ T8326]  should_fail_ex+0x394/0x4c0
[  216.246414][ T8326]  should_failslab+0x9/0x20
[  216.250980][ T8326]  slab_pre_alloc_hook+0x59/0x300
[  216.256194][ T8326]  kmem_cache_alloc+0x5a/0x2c0
[  216.261034][ T8326]  ? locks_get_lock_context+0x116/0x370
[  216.266657][ T8326]  locks_get_lock_context+0x116/0x370
[  216.272114][ T8326]  flock_lock_inode+0x10c/0x1730
[  216.277126][ T8326]  ? aa_file_perm+0x11b/0xee0
[  216.281869][ T8326]  ? __might_sleep+0xe0/0xe0
[  216.286531][ T8326]  ? aa_file_perm+0x3e3/0xee0
[  216.291281][ T8326]  ? check_conflicting_open+0x230/0x230
[  216.296911][ T8326]  locks_lock_inode_wait+0x117/0x480
[  216.302275][ T8326]  ? fcntl_setlease+0x320/0x320
[  216.307193][ T8326]  ? lockdep_softirqs_off+0x440/0x440
[  216.312633][ T8326]  ? end_current_label_crit_section+0x149/0x170
[  216.318963][ T8326]  ? common_file_perm+0x198/0x1f0
[  216.324065][ T8326]  ? bpf_lsm_file_lock+0x9/0x10
[  216.328988][ T8326]  __se_sys_flock+0x4bb/0x620
[  216.333745][ T8326]  ? __x64_sys_flock+0x60/0x60
[  216.338590][ T8326]  ? lock_chain_count+0x20/0x20
[  216.343515][ T8326]  ? lockdep_hardirqs_on+0x98/0x150
[  216.348778][ T8326]  do_syscall_64+0x55/0xb0
[  216.353248][ T8326]  ? clear_bhb_loop+0x40/0x90
[  216.357971][ T8326]  ? clear_bhb_loop+0x40/0x90
[  216.362714][ T8326]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  216.368676][ T8326] RIP: 0033:0x7f73fdd9e2d9
[  216.373139][ T8326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  216.392808][ T8326] RSP: 002b:00007f73febd0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000049
[  216.401290][ T8326] RAX: ffffffffffffffda RBX: 00007f73fe025fa0 RCX: 00007f73fdd9e2d9
[  216.409318][ T8326] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000003
[  216.417345][ T8326] RBP: 00007f73fde35888 R08: 0000000000000000 R09: 0000000000000000
[  216.425375][ T8326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  216.433403][ T8326] R13: 00007f73fe026038 R14: 00007f73fe025fa0 R15: 00007ffe22660fb8
[  216.441447][ T8326]  </TASK>
[  216.751208][ T8338] loop0: detected capacity change from 0 to 512
[  216.882744][ T8338] EXT4-fs error (device loop0): ext4_orphan_get:1408: inode #15: comm syz.0.763: iget: bad i_size value: 38620345925642
[  216.962898][ T8338] EXT4-fs error (device loop0): ext4_orphan_get:1413: comm syz.0.763: couldn't read orphan inode 15 (err -117)
[  217.028395][ T8338] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  217.177947][ T8348] loop4: detected capacity change from 0 to 128
[  217.250062][   T49] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm kworker/u4:3: bg 0: block 5: invalid block bitmap
[  217.300051][ T8348] syz.4.767: attempt to access beyond end of device
[  217.300051][ T8348] loop4: rw=2049, sector=138, nr_sectors = 112 limit=128
[  217.323076][   T49] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 131587 with max blocks 1 with error 28
[  217.336741][ T5821] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  217.355427][   T49] EXT4-fs (loop0): This should not happen!! Data will be lost
[  217.355427][   T49] 
[  217.370504][ T5789] Bluetooth: hci2: command 0x0406 tx timeout
[  217.405055][   T49] EXT4-fs (loop0): Total free blocks count 0
[  217.417595][   T49] EXT4-fs (loop0): Free/Dirty block details
[  217.427444][   T49] EXT4-fs (loop0): free_blocks=0
[  217.435611][   T49] EXT4-fs (loop0): dirty_blocks=1
[  217.441103][   T49] EXT4-fs (loop0): Block reservation details
[  217.449829][   T49] EXT4-fs (loop0): i_reserved_data_blocks=1
[  217.470309][ T7592] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  217.535156][ T5821] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  217.549639][ T5821] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  217.560103][ T5821] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 48, changing to 9
[  217.580627][ T5821] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 26217, setting to 1024
[  217.597280][ T5821] usb 2-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00
[  217.608237][ T5821] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  217.639415][ T8346] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  217.666536][ T8346] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  217.701777][ T8346] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  217.715636][ T5821] pl2303 2-1:1.0: pl2303 converter detected
[  217.777585][ T5821] usb 2-1: pl2303 converter now attached to ttyUSB0
[  217.999136][ T8335] loop3: detected capacity change from 0 to 131072
[  218.008323][ T8335] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0)
[  218.016609][ T8335] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  218.051629][ T8335] F2FS-fs (loop3): invalid crc value
[  218.072955][ T8335] F2FS-fs (loop3): Found nat_bits in checkpoint
[  218.132745][ T5821] sony 0005:054C:03D5.000A: UNIQ does not contain a MAC address; duplicate check skipped
[  218.171896][ T8346] pl2303 2-1:1.0: pl2303_vendor_write - failed to write [0007]: -110
[  218.187731][ T8346] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32
[  218.195983][ T8346] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32
[  218.221558][ T8335] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  218.228768][ T8335] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  218.241100][ T8346] pl2303 2-1:1.0: pl2303_vendor_read - failed to read [000a]: -32
[  218.271372][ T8346] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32
[  218.411683][ T5819] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  218.505344][ T5821] input: syz0 as /devices/virtual/misc/uhid/0005:054C:03D5.000A/input/input22
[  218.601739][ T8346] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32
[  218.626767][ T5819] usb 5-1: Using ep0 maxpacket: 8
[  218.651478][ T5819] usb 5-1: config 0 has no interfaces?
[  218.657585][ T8346] pl2303 ttyUSB0: error sending break = -32
[  218.663639][ T5819] usb 5-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5
[  218.663670][ T5819] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  218.663693][ T5819] usb 5-1: Product: syz
[  218.663709][ T5819] usb 5-1: Manufacturer: syz
[  218.663726][ T5819] usb 5-1: SerialNumber: syz
[  218.716369][ T5821] sony 0005:054C:03D5.000A: input,hidraw0: BLUETOOTH HID v0.00 Joystick [syz0] on syz0
[  218.812550][ T5819] usb 5-1: config 0 descriptor??
[  218.969771][ T5819] usb 2-1: USB disconnect, device number 16
[  218.996587][ T5819] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0
[  219.019139][ T5819] pl2303 2-1:1.0: device disconnected
[  219.124778][ T5821] usb 5-1: USB disconnect, device number 11
[  219.662593][ T8361] loop0: detected capacity change from 0 to 40427
[  219.707976][ T8361] F2FS-fs (loop0): invalid crc value
[  219.748200][ T8361] F2FS-fs (loop0): Found nat_bits in checkpoint
[  219.950696][ T8361] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  220.070070][ T7592] syz-executor: attempt to access beyond end of device
[  220.070070][ T7592] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  220.118966][ T7592] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  220.261432][ T5819] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  220.386862][ T8391] netlink: 27 bytes leftover after parsing attributes in process `syz.1.782'.
[  220.453584][ T5819] usb 4-1: Using ep0 maxpacket: 16
[  220.464637][ T5819] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  220.481377][ T5819] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  220.500668][ T5819] usb 4-1: Product: syz
[  220.510317][ T5819] usb 4-1: Manufacturer: syz
[  220.520457][ T5819] usb 4-1: SerialNumber: syz
[  220.548708][ T5819] usb 4-1: config 0 descriptor??
[  220.570087][ T5819] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  220.745179][ T8387] loop4: detected capacity change from 0 to 32768
[  220.795280][ T8387] ocfs2: Slot 0 on device (7,4) was already allocated to this node!
[  220.814560][ T8387] JBD2: Ignoring recovery information on journal
[  220.870321][ T8387] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  221.021419][   T28] audit: type=1326 audit(1791887422.275:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8400 comm="syz.0.786" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac4b79e2d9 code=0x7ffc0000
[  221.091436][   T28] audit: type=1326 audit(1791887422.275:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8400 comm="syz.0.786" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac4b79e2d9 code=0x7ffc0000
[  221.185745][ T5819] ssu100: probe of 4-1:0.0 failed with error -71
[  221.196866][   T28] audit: type=1326 audit(1791887422.275:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8400 comm="syz.0.786" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac4b79e2d9 code=0x7ffc0000
[  221.231706][ T5819] usb 4-1: USB disconnect, device number 13
[  221.281795][   T28] audit: type=1326 audit(1791887422.275:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8400 comm="syz.0.786" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac4b79e2d9 code=0x7ffc0000
[  221.386903][ T6231] ocfs2: Unmounting device (7,4) on (node local)
[  221.396007][   T28] audit: type=1326 audit(1791887422.275:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8400 comm="syz.0.786" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fac4b79e2d9 code=0x7ffc0000
[  221.421194][   T28] audit: type=1326 audit(1791887422.275:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8400 comm="syz.0.786" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac4b79e2d9 code=0x7ffc0000
[  221.498055][   T28] audit: type=1326 audit(1791887422.275:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8400 comm="syz.0.786" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac4b79e2d9 code=0x7ffc0000
[  221.538208][   T28] audit: type=1326 audit(1791887422.275:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8400 comm="syz.0.786" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac4b79e2d9 code=0x7ffc0000
[  221.602186][   T28] audit: type=1326 audit(1791887422.275:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8400 comm="syz.0.786" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7fac4b79e2d9 code=0x7ffc0000
[  221.627672][   T28] audit: type=1326 audit(1791887422.275:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8400 comm="syz.0.786" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac4b79e2d9 code=0x7ffc0000
[  221.953712][ T8425] netlink: 'syz.4.795': attribute type 1 has an invalid length.
[  221.961855][ T8425] netlink: 4 bytes leftover after parsing attributes in process `syz.4.795'.
[  222.011522][   T27] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  222.201535][   T27] usb 1-1: Using ep0 maxpacket: 16
[  222.214722][   T27] usb 1-1: config 7 has an invalid interface number: 3 but max is 0
[  222.224236][   T27] usb 1-1: config 7 has no interface number 0
[  222.230974][   T27] usb 1-1: config 7 interface 3 has no altsetting 0
[  222.245732][   T27] usb 1-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice=ad.d0
[  222.255160][   T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  222.267006][   T27] usb 1-1: Product: syz
[  222.275173][   T27] usb 1-1: Manufacturer: syz
[  222.280020][   T27] usb 1-1: SerialNumber: syz
[  222.370026][ T8439] loop1: detected capacity change from 0 to 128
[  222.445890][ T8439] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  222.473705][ T8439] ext4 filesystem being mounted at /178/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  222.493088][ T8439] fscrypt (loop1, inode 12): Unsupported encryption flags (0x7b)
[  222.511492][   T27] catc 1-1:7.3: Can't set altsetting 1.
[  222.520698][   T27] catc: probe of 1-1:7.3 failed with error -5
[  222.544881][   T27] usb 1-1: USB disconnect, device number 10
[  222.565426][ T5779] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  222.658560][ T8443] loop1: detected capacity change from 0 to 1024
[  222.690479][ T8443] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  222.703109][ T8443] ext4 filesystem being mounted at /179/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  222.764872][ T8443] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.803: bg 0: block 112: padding at end of block bitmap is not set
[  222.810998][ T8443] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 64 with max blocks 6 with error 28
[  222.830491][ T8443] EXT4-fs (loop1): This should not happen!! Data will be lost
[  222.830491][ T8443] 
[  222.847798][ T8443] EXT4-fs (loop1): Total free blocks count 0
[  222.857119][ T8443] EXT4-fs (loop1): Free/Dirty block details
[  222.865942][ T8443] EXT4-fs (loop1): free_blocks=0
[  222.871091][ T8443] EXT4-fs (loop1): dirty_blocks=64
[  222.876685][ T8443] EXT4-fs (loop1): Block reservation details
[  222.895400][ T8443] EXT4-fs (loop1): i_reserved_data_blocks=4
[  222.933031][ T8443] syz.1.803 (8443) used greatest stack depth: 19736 bytes left
[  223.017739][   T76] EXT4-fs error (device loop1): ext4_map_blocks:720: inode #15: block 3: comm kworker/u4:4: lblock 3 mapped to illegal pblock 3 (length 3)
[  223.064495][   T76] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  223.094972][ T3432] EXT4-fs error (device loop1): ext4_map_blocks:720: inode #15: block 8: comm kworker/u4:8: lblock 8 mapped to illegal pblock 8 (length 8)
[  223.179381][ T8454] netlink: 68 bytes leftover after parsing attributes in process `syz.3.809'.
[  223.311540][ T5820] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  224.639289][ T8462] loop0: detected capacity change from 0 to 131072
[  224.647100][ T8462] XFS: ikeep mount option is deprecated.
[  224.660919][ T5820] usb 5-1: Using ep0 maxpacket: 16
[  224.669958][ T5820] usb 5-1: too many endpoints for config 0 interface 0 altsetting 6: 254, using maximum allowed: 30
[  224.685727][ T5820] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  224.699761][ T5820] usb 5-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  224.732462][ T8462] XFS (loop0): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[  224.744396][ T5820] usb 5-1: config 0 interface 0 has no altsetting 0
[  224.752088][ T5820] usb 5-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00
[  224.762962][ T5820] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  224.782167][ T5820] usb 5-1: config 0 descriptor??
[  224.842458][ T8467] loop3: detected capacity change from 0 to 8192
[  224.863800][ T8467] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  224.964935][ T8462] XFS (loop0): Starting recovery (logdev: internal)
[  225.057722][ T8462] XFS (loop0): Ending recovery (logdev: internal)
[  225.210682][ T8477] loop5: detected capacity change from 0 to 7
[  225.233557][ T8477] Dev loop5: unable to read RDB block 7
[  225.248322][ T5820] input: HID 0925:8866 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0925:8866.000B/input/input23
[  225.280420][ T8477]  loop5: unable to read partition table
[  225.297449][ T8477] loop5: partition table beyond EOD, truncated
[  225.322340][ T7592] XFS (loop0): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[  225.329290][ T8477] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  225.456874][ T5820] smartjoyplus 0003:0925:8866.000B: input,hidraw0: USB HID vd.8b Joystick [HID 0925:8866] on usb-dummy_hcd.4-1/input0
[  225.560894][ T5820] smartjoyplus 0003:0925:8866.000B: no output reports found
[  225.622769][ T5820] usb 5-1: USB disconnect, device number 12
[  225.742366][ T8478] fido_id[8478]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory
[  225.775336][ T8480] loop0: detected capacity change from 0 to 256
[  225.821052][ T8480] exfat: Deprecated parameter 'utf8'
[  225.917997][ T8480] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d)
[  226.222389][ T8486] netlink: 4 bytes leftover after parsing attributes in process `syz.0.818'.
[  226.819076][ T8484] loop3: detected capacity change from 0 to 32768
[  226.878048][ T8484] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.817 (8484)
[  226.941560][    T8] usb 1-1: new full-speed USB device number 11 using dummy_hcd
[  226.952124][ T8484] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  226.972291][ T8484] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  226.995016][ T8484] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  227.015137][ T8484] BTRFS info (device loop3): use zstd compression, level 3
[  227.035428][ T8484] BTRFS info (device loop3): using free space tree
[  227.127525][    T8] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  227.186712][    T8] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  227.232987][ T8484] BTRFS info (device loop3): enabling ssd optimizations
[  227.240047][ T8484] BTRFS info (device loop3): auto enabling async discard
[  227.279510][    T8] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  227.339641][    T8] usb 1-1: config 0 interface 0 has no altsetting 0
[  227.368610][    T8] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[  227.416078][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  227.462301][    T8] usb 1-1: config 0 descriptor??
[  227.585652][ T5780] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  227.754449][ T5999] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 10 /dev/loop3 scanned by udevd (5999)
[  227.951749][    T8] input: HID 17ef:6047 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:17EF:6047.000C/input/input24
[  228.085748][ T8492] loop4: detected capacity change from 0 to 40427
[  228.113108][ T8492] F2FS-fs (loop4): invalid crc value
[  228.123824][ T8492] F2FS-fs (loop4): Found nat_bits in checkpoint
[  228.208552][    T8] lenovo 0003:17EF:6047.000C: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.0-1/input0
[  228.296284][    T8] usb 1-1: USB disconnect, device number 11
[  228.375702][ T8492] F2FS-fs (loop4): Start checkpoint disabled!
[  228.399025][ T8492] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  228.522757][ T8524] fido_id[8524]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  228.553265][ T8529] netlink: 24 bytes leftover after parsing attributes in process `syz.1.829'.
[  228.569422][ T8492] syz.4.821: attempt to access beyond end of device
[  228.569422][ T8492] loop4: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  228.864686][ T3432] kworker/u4:8: attempt to access beyond end of device
[  228.864686][ T3432] loop4: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  228.905329][ T3432] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  228.923749][ T3432] kworker/u4:8: attempt to access beyond end of device
[  228.923749][ T3432] loop4: rw=2049, sector=40992, nr_sectors = 8 limit=40427
[  228.947000][ T3432] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  229.457392][ T8548] loop0: detected capacity change from 0 to 256
[  229.486021][ T8548] exfat: Deprecated parameter 'namecase'
[  229.497959][ T8548] exfat: Deprecated parameter 'namecase'
[  229.538139][ T8548] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xef5d2b8f, utbl_chksum : 0xe619d30d)
[  229.733114][ T8553] loop0: detected capacity change from 0 to 1024
[  229.748574][ T8553] EXT4-fs: Ignoring removed nomblk_io_submit option
[  229.837326][ T8553] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  229.923222][ T7592] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  230.033069][   T28] kauditd_printk_skb: 7 callbacks suppressed
[  230.033086][   T28] audit: type=1326 audit(1791887431.285:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8562 comm="syz.0.844" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac4b79e2d9 code=0x7ffc0000
[  230.070626][   T28] audit: type=1326 audit(1791887431.285:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8562 comm="syz.0.844" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac4b79e2d9 code=0x7ffc0000
[  230.096828][   T28] audit: type=1326 audit(1791887431.295:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8562 comm="syz.0.844" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac4b79e2d9 code=0x7ffc0000
[  230.123553][   T27] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  230.133804][   T28] audit: type=1326 audit(1791887431.295:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8562 comm="syz.0.844" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac4b79e2d9 code=0x7ffc0000
[  230.184171][   T28] audit: type=1326 audit(1791887431.295:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8562 comm="syz.0.844" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fac4b79e2d9 code=0x7ffc0000
[  230.244712][   T28] audit: type=1326 audit(1791887431.295:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8562 comm="syz.0.844" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac4b79e2d9 code=0x7ffc0000
[  230.277979][   T28] audit: type=1326 audit(1791887431.295:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8562 comm="syz.0.844" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac4b79e2d9 code=0x7ffc0000
[  230.309982][   T28] audit: type=1326 audit(1791887431.305:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8562 comm="syz.0.844" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac4b79e2d9 code=0x7ffc0000
[  230.327953][   T27] usb 5-1: unable to get BOS descriptor or descriptor too short
[  230.346663][   T28] audit: type=1326 audit(1791887431.305:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8562 comm="syz.0.844" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac4b79e2d9 code=0x7ffc0000
[  230.356887][   T27] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  230.386947][   T27] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  230.400215][   T27] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  230.410090][   T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  230.424237][   T27] usb 5-1: Product: syz
[  230.428469][   T27] usb 5-1: Manufacturer: syz
[  230.436423][   T27] usb 5-1: SerialNumber: syz
[  230.446381][   T28] audit: type=1326 audit(1791887431.305:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8562 comm="syz.0.844" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fac4b79e2d9 code=0x7ffc0000
[  230.478422][   T27] usb 5-1: selecting invalid altsetting 1
[  230.505977][   T27] usb 5-1: unit 6 not found!
[  230.525622][ T8572] loop1: detected capacity change from 0 to 256
[  230.550076][ T8572] exfat: Deprecated parameter 'utf8'
[  230.603437][ T8572] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d)
[  230.987279][ T8582] loop1: detected capacity change from 0 to 1024
[  231.200023][ T8582] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  231.245486][ T8582] ext4 filesystem being mounted at /193/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  231.331226][ T8582] EXT4-fs error (device loop1): ext4_map_blocks:720: inode #15: block 3: comm syz.1.852: lblock 3 mapped to illegal pblock 3 (length 3)
[  231.380690][ T8591] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.852: bg 0: block 112: padding at end of block bitmap is not set
[  231.436197][ T8582] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  231.480508][ T8582] EXT4-fs (loop1): This should not happen!! Data will be lost
[  231.480508][ T8582] 
[  231.505836][ T8591] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 64 with max blocks 5 with error 28
[  231.551173][ T8591] EXT4-fs (loop1): This should not happen!! Data will be lost
[  231.551173][ T8591] 
[  231.598116][ T8591] EXT4-fs (loop1): Total free blocks count 0
[  231.618413][ T8591] EXT4-fs (loop1): Free/Dirty block details
[  231.635308][ T8591] EXT4-fs (loop1): free_blocks=0
[  231.660289][ T8591] EXT4-fs (loop1): dirty_blocks=64
[  231.674756][ T8591] EXT4-fs (loop1): Block reservation details
[  231.822955][   T49] EXT4-fs error (device loop1): ext4_map_blocks:720: inode #15: block 8: comm kworker/u4:3: lblock 8 mapped to illegal pblock 8 (length 8)
[  232.362048][ T8585] loop3: detected capacity change from 0 to 131072
[  232.369820][ T8585] XFS: ikeep mount option is deprecated.
[  232.410664][ T8585] XFS (loop3): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[  232.639196][   T27] snd-usb-audio: probe of 5-1:1.0 failed with error -22
[  232.670833][   T27] usb 5-1: USB disconnect, device number 13
[  232.773466][ T5996] udevd[5996]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  232.878894][ T8585] XFS (loop3): Starting recovery (logdev: internal)
[  232.942861][ T8585] XFS (loop3): Ending recovery (logdev: internal)
[  233.087516][ T5780] XFS (loop3): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[  233.346927][ T8623] loop1: detected capacity change from 0 to 256
[  233.412696][ T8623] exfat: Deprecated parameter 'namecase'
[  233.418468][ T8623] exfat: Deprecated parameter 'namecase'
[  233.502011][ T8623] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d)
[  234.549701][ T8650] loop0: detected capacity change from 0 to 256
[  234.614821][ T8651] loop4: detected capacity change from 0 to 1024
[  234.883065][ T3432] hfsplus: b-tree write err: -5, ino 25
[  234.911517][ T3432] hfsplus: b-tree write err: -5, ino 4
[  234.917314][ T3432] hfsplus: b-tree write err: -5, ino 2
[  234.931858][ T3432] hfsplus: b-tree write err: -5, ino 26
[  235.134945][ T8662] loop4: detected capacity change from 0 to 2048
[  235.222512][ T8662] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  235.311033][ T8644] loop3: detected capacity change from 0 to 40427
[  235.319354][ T8644] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64)
[  235.326946][ T8644] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  235.336147][ T8644] F2FS-fs (loop3): Image doesn't support compression
[  235.342983][ T8644] F2FS-fs (loop3): Image doesn't support compression
[  235.361183][ T8664] loop1: detected capacity change from 0 to 8192
[  235.372643][ T8644] F2FS-fs (loop3): invalid crc value
[  235.421926][ T8664] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  235.455954][ T8664] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[  235.497623][ T6231] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  235.531808][ T8664] REISERFS (device loop1): using ordered data mode
[  235.558786][ T8664] reiserfs: using flush barriers
[  235.565163][ T8644] F2FS-fs (loop3): Start checkpoint disabled!
[  235.586380][ T8644] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  235.590553][ T8664] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  235.594119][ T8644] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  235.672297][ T8664] REISERFS (device loop1): checking transaction log (loop1)
[  235.936038][ T8675] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  236.038651][ T8664] REISERFS (device loop1): Using tea hash to sort names
[  236.070060][ T8664] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  236.238780][ T3432] kworker/u4:8: attempt to access beyond end of device
[  236.238780][ T3432] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  236.258839][ T3432] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  236.632062][ T8688] loop0: detected capacity change from 0 to 164
[  237.075695][ T8706] netlink: 8 bytes leftover after parsing attributes in process `syz.1.899'.
[  238.188658][ T8743] bond0: (slave dummy0): Error: Slave does not support XDP
[  238.754064][ T8772] netlink: 64 bytes leftover after parsing attributes in process `syz.0.929'.
[  238.914213][ T8774] bond0: (slave dummy0): Error: Slave does not support XDP
[  239.156774][ T8781] FAULT_INJECTION: forcing a failure.
[  239.156774][ T8781] name failslab, interval 1, probability 0, space 0, times 0
[  239.187891][ T8781] CPU: 1 PID: 8781 Comm: syz.0.933 Not tainted syzkaller #0
[  239.195275][ T8781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  239.205397][ T8781] Call Trace:
[  239.208731][ T8781]  <TASK>
[  239.211725][ T8781]  dump_stack_lvl+0x18c/0x250
[  239.216458][ T8781]  ? show_regs_print_info+0x20/0x20
[  239.221719][ T8781]  ? load_image+0x420/0x420
[  239.226289][ T8781]  ? __might_sleep+0xe0/0xe0
[  239.230943][ T8781]  ? __lock_acquire+0x7eb0/0x7eb0
[  239.236033][ T8781]  should_fail_ex+0x394/0x4c0
[  239.240777][ T8781]  should_failslab+0x9/0x20
[  239.245348][ T8781]  slab_pre_alloc_hook+0x59/0x300
[  239.250416][ T8781]  ? memcg_list_lru_alloc+0x231/0xb00
[  239.255831][ T8781]  ? memcg_list_lru_alloc+0x231/0xb00
[  239.261243][ T8781]  __kmem_cache_alloc_node+0x53/0x250
[  239.266674][ T8781]  ? memcg_list_lru_alloc+0x231/0xb00
[  239.272085][ T8781]  __kmalloc+0xa7/0x240
[  239.276285][ T8781]  memcg_list_lru_alloc+0x231/0xb00
[  239.281526][ T8781]  ? get_obj_cgroup_from_current+0xd4/0x280
[  239.287457][ T8781]  ? memcg_reparent_list_lrus+0x860/0x860
[  239.293218][ T8781]  ? get_obj_cgroup_from_current+0xd4/0x280
[  239.299154][ T8781]  slab_pre_alloc_hook+0x2ad/0x300
[  239.304299][ T8781]  ? slab_pre_alloc_hook+0xb1/0x300
[  239.309533][ T8781]  kmem_cache_alloc_lru+0x4d/0x2b0
[  239.314689][ T8781]  ? __d_alloc+0x31/0x710
[  239.319057][ T8781]  __d_alloc+0x31/0x710
[  239.323250][ T8781]  d_alloc_pseudo+0x1d/0x70
[  239.327791][ T8781]  alloc_file_pseudo+0xe4/0x210
[  239.332716][ T8781]  ? fput+0x1a0/0x1a0
[  239.336731][ T8781]  ? anon_inode_make_secure_inode+0xfb/0x160
[  239.342759][ T8781]  ? do_compat_epoll_pwait+0x1c0/0x1c0
[  239.348290][ T8781]  ? _raw_spin_unlock+0x28/0x40
[  239.353215][ T8781]  __se_sys_memfd_secret+0x125/0x300
[  239.358568][ T8781]  do_syscall_64+0x55/0xb0
[  239.363024][ T8781]  ? clear_bhb_loop+0x40/0x90
[  239.367738][ T8781]  ? clear_bhb_loop+0x40/0x90
[  239.372454][ T8781]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  239.378391][ T8781] RIP: 0033:0x7fac4b79e2d9
[  239.382835][ T8781] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  239.402478][ T8781] RSP: 002b:00007fac4c6fd028 EFLAGS: 00000246 ORIG_RAX: 00000000000001bf
[  239.410937][ T8781] RAX: ffffffffffffffda RBX: 00007fac4ba25fa0 RCX: 00007fac4b79e2d9
[  239.418947][ T8781] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000080000
[  239.427040][ T8781] RBP: 00007fac4b835888 R08: 0000000000000000 R09: 0000000000000000
[  239.435095][ T8781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  239.443122][ T8781] R13: 00007fac4ba26038 R14: 00007fac4ba25fa0 R15: 00007ffe5f593878
[  239.451169][ T8781]  </TASK>
[  239.872312][ T8799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.942'.
[  239.885561][ T8799] netlink: 'syz.1.942': attribute type 26 has an invalid length.
[  239.967877][ T8801] loop0: detected capacity change from 0 to 1764
[  239.981504][ T5819] usb 4-1: new low-speed USB device number 14 using dummy_hcd
[  240.055422][ T8801] openvswitch: netlink: Actions may not be safe on all matching packets
[  240.138290][ T8803] loop4: detected capacity change from 0 to 8192
[  240.174187][ T8803] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  240.201890][ T8803] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal
[  240.212848][ T5819] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  240.220966][ T5819] usb 4-1: config 0 has no interface number 0
[  240.228048][ T5819] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  240.239216][ T8803] REISERFS (device loop4): using ordered data mode
[  240.246409][ T5819] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  240.257340][ T8803] reiserfs: using flush barriers
[  240.262568][ T5819] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  240.272383][ T5819] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  240.285872][ T5819] usb 4-1: config 0 descriptor??
[  240.291990][ T8793] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  240.310782][ T8803] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  240.328879][ T5819] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  240.341905][   T27] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  240.350094][ T8803] REISERFS (device loop4): checking transaction log (loop4)
[  240.515839][ T8803] REISERFS (device loop4): Using tea hash to sort names
[  240.527727][ T8803] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  240.545562][   T27] usb 2-1: config index 0 descriptor too short (expected 50, got 32)
[  240.564228][   T27] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  240.581379][ T5824] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  240.600991][   T27] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8
[  240.614763][   T27] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  240.633690][   T27] usb 2-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00
[  240.649532][   T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  240.669267][   T27] usb 2-1: Product: syz
[  240.674937][   T27] usb 2-1: Manufacturer: syz
[  240.679769][   T27] usb 2-1: SerialNumber: syz
[  240.723526][ T8805] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  240.750309][   T27] usb_debug 2-1:1.0: debug converter detected
[  240.779167][ T5824] usb 1-1: unable to get BOS descriptor or descriptor too short
[  240.791694][   T27] usb 2-1: debug converter now attached to ttyUSB0
[  240.801034][ T5824] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[  240.845137][ T5824] usb 1-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[  240.881816][ T5824] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  240.910850][ T5824] usb 1-1: Product: syz
[  240.921389][ T5824] usb 1-1: Manufacturer: syz
[  240.926239][ T5824] usb 1-1: SerialNumber: syz
[  240.980527][    C0] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71
[  241.042115][    T8] usb 2-1: USB disconnect, device number 17
[  241.071253][    T8] debug ttyUSB0: debug converter now disconnected from ttyUSB0
[  241.089978][    T8] usb_debug 2-1:1.0: device disconnected
[  241.139634][ T8810] overlayfs: upper fs does not support file handles, falling back to index=off.
[  241.224250][ T5824] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  241.350916][    T8] usb 4-1: USB disconnect, device number 14
[  241.422735][ T5824] usb 1-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[  241.452696][ T5824] usb 1-1: found format II with max.bitrate = 4, frame size=7372
[  241.470965][ T5824] usb 1-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22)
[  241.487814][ T5824] usb 1-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[  241.496835][ T5824] usb 1-1: found format II with max.bitrate = 4, frame size=7372
[  241.510571][ T5824] usb 1-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22)
[  241.823674][ T8823] loop3: detected capacity change from 0 to 8192
[  241.847657][ T8823] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  241.877885][ T8823] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[  241.890843][ T8823] REISERFS (device loop3): using ordered data mode
[  241.905381][ T8823] reiserfs: using flush barriers
[  241.916853][ T8823] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  241.940404][ T8823] REISERFS (device loop3): checking transaction log (loop3)
[  242.105750][ T5824] usb 1-1: USB disconnect, device number 12
[  242.216636][ T5995] udevd[5995]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  242.252570][ T8823] REISERFS (device loop3): Using tea hash to sort names
[  242.259961][ T8823] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  242.417032][ T8823] 
[  242.419489][ T8823] ======================================================
[  242.426539][ T8823] WARNING: possible circular locking dependency detected
[  242.433608][ T8823] syzkaller #0 Not tainted
[  242.438052][ T8823] ------------------------------------------------------
[  242.445123][ T8823] syz.3.952/8823 is trying to acquire lock:
[  242.451052][ T8823] ffff888059c93150 (&type->i_mutex_dir_key#22/2){+.+.}-{3:3}, at: delete_one_xattr+0xfa/0x2d0
[  242.462280][ T8823] 
[  242.462280][ T8823] but task is already holding lock:
[  242.469683][ T8823] ffff888059c92ab0 (&type->i_mutex_dir_key#22/3){+.+.}-{3:3}, at: reiserfs_for_each_xattr+0x89a/0xa30
[  242.480766][ T8823] 
[  242.480766][ T8823] which lock already depends on the new lock.
[  242.480766][ T8823] 
[  242.491211][ T8823] 
[  242.491211][ T8823] the existing dependency chain (in reverse order) is:
[  242.500283][ T8823] 
[  242.500283][ T8823] -> #2 (&type->i_mutex_dir_key#22/3){+.+.}-{3:3}:
[  242.509051][ T8823]        down_write_nested+0x9e/0x200
[  242.514483][ T8823]        open_xa_dir+0x146/0x6f0
[  242.519471][ T8823]        xattr_lookup+0x22/0x2a0
[  242.524464][ T8823]        reiserfs_xattr_set_handle+0x11a/0xd10
[  242.530670][ T8823]        reiserfs_xattr_set+0x47b/0x5b0
[  242.536273][ T8823]        __vfs_setxattr+0x437/0x470
[  242.541507][ T8823]        __vfs_setxattr_noperm+0x12a/0x5e0
[  242.547340][ T8823]        vfs_setxattr+0x16b/0x2f0
[  242.552393][ T8823]        path_setxattr+0x33a/0x590
[  242.557529][ T8823]        __x64_sys_lsetxattr+0xb8/0xd0
[  242.563014][ T8823]        do_syscall_64+0x55/0xb0
[  242.567977][ T8823]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  242.574425][ T8823] 
[  242.574425][ T8823] -> #1 (&sb->s_type->i_mutex_key#43){+.+.}-{3:3}:
[  242.583172][ T8823]        down_write+0x97/0x200
[  242.587976][ T8823]        vfs_rename+0x6f4/0xe60
[  242.592855][ T8823]        do_renameat2+0x8b0/0xc80
[  242.597902][ T8823]        __x64_sys_renameat2+0xd2/0xe0
[  242.603386][ T8823]        do_syscall_64+0x55/0xb0
[  242.608345][ T8823]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  242.614798][ T8823] 
[  242.614798][ T8823] -> #0 (&type->i_mutex_dir_key#22/2){+.+.}-{3:3}:
[  242.623546][ T8823]        __lock_acquire+0x3a07/0x7eb0
[  242.628947][ T8823]        lock_acquire+0x19e/0x420
[  242.633996][ T8823]        down_write_nested+0x9e/0x200
[  242.639388][ T8823]        delete_one_xattr+0xfa/0x2d0
[  242.644708][ T8823]        reiserfs_for_each_xattr+0x8a6/0xa30
[  242.650737][ T8823]        reiserfs_delete_xattrs+0x20/0x90
[  242.656521][ T8823]        reiserfs_evict_inode+0x24a/0x4c0
[  242.662292][ T8823]        evict+0x4b7/0x8a0
[  242.666761][ T8823]        vfs_rmdir+0x378/0x4b0
[  242.671566][ T8823]        do_rmdir+0x29f/0x590
[  242.676312][ T8823]        __x64_sys_unlinkat+0xc4/0xe0
[  242.681724][ T8823]        do_syscall_64+0x55/0xb0
[  242.686695][ T8823]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  242.693162][ T8823] 
[  242.693162][ T8823] other info that might help us debug this:
[  242.693162][ T8823] 
[  242.703412][ T8823] Chain exists of:
[  242.703412][ T8823]   &type->i_mutex_dir_key#22/2 --> &sb->s_type->i_mutex_key#43 --> &type->i_mutex_dir_key#22/3
[  242.703412][ T8823] 
[  242.719681][ T8823]  Possible unsafe locking scenario:
[  242.719681][ T8823] 
[  242.727166][ T8823]        CPU0                    CPU1
[  242.732553][ T8823]        ----                    ----
[  242.737934][ T8823]   lock(&type->i_mutex_dir_key#22/3);
[  242.743434][ T8823]                                lock(&sb->s_type->i_mutex_key#43);
[  242.751438][ T8823]                                lock(&type->i_mutex_dir_key#22/3);
[  242.759458][ T8823]   lock(&type->i_mutex_dir_key#22/2);
[  242.764956][ T8823] 
[  242.764956][ T8823]  *** DEADLOCK ***
[  242.764956][ T8823] 
[  242.773119][ T8823] 3 locks held by syz.3.952/8823:
[  242.778159][ T8823]  #0: ffff888030560418 (sb_writers#38){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  242.787436][ T8823]  #1: ffff888059c902f0 (&type->i_mutex_dir_key#22/1){+.+.}-{3:3}, at: do_rmdir+0x1c6/0x590
[  242.797577][ T8823]  #2: ffff888059c92ab0 (&type->i_mutex_dir_key#22/3){+.+.}-{3:3}, at: reiserfs_for_each_xattr+0x89a/0xa30
[  242.809024][ T8823] 
[  242.809024][ T8823] stack backtrace:
[  242.814932][ T8823] CPU: 1 PID: 8823 Comm: syz.3.952 Not tainted syzkaller #0
[  242.822247][ T8823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  242.832327][ T8823] Call Trace:
[  242.835626][ T8823]  <TASK>
[  242.838591][ T8823]  dump_stack_lvl+0x18c/0x250
[  242.843297][ T8823]  ? load_image+0x420/0x420
[  242.847835][ T8823]  ? show_regs_print_info+0x20/0x20
[  242.853059][ T8823]  ? print_circular_bug+0x12b/0x1a0
[  242.858290][ T8823]  check_noncircular+0x2fc/0x400
[  242.863260][ T8823]  ? reiserfs_write_lock_nested+0x60/0xd0
[  242.869104][ T8823]  ? look_up_lock_class+0x75/0x140
[  242.874275][ T8823]  ? print_deadlock_bug+0x5d0/0x5d0
[  242.879533][ T8823]  ? lockdep_lock+0xf5/0x230
[  242.884170][ T8823]  ? _find_first_zero_bit+0xd6/0x100
[  242.889494][ T8823]  __lock_acquire+0x3a07/0x7eb0
[  242.894479][ T8823]  ? verify_lock_unused+0x140/0x140
[  242.899718][ T8823]  ? __mutex_unlock_slowpath+0x1b4/0x6c0
[  242.905390][ T8823]  ? verify_lock_unused+0x140/0x140
[  242.910616][ T8823]  ? mutex_unlock+0x10/0x10
[  242.915155][ T8823]  lock_acquire+0x19e/0x420
[  242.919690][ T8823]  ? delete_one_xattr+0xfa/0x2d0
[  242.924672][ T8823]  ? __might_sleep+0xe0/0xe0
[  242.929306][ T8823]  ? read_lock_is_recursive+0x20/0x20
[  242.934711][ T8823]  ? __might_sleep+0xe0/0xe0
[  242.939329][ T8823]  ? read_lock_is_recursive+0x20/0x20
[  242.944735][ T8823]  down_write_nested+0x9e/0x200
[  242.949612][ T8823]  ? delete_one_xattr+0xfa/0x2d0
[  242.954580][ T8823]  ? down_read_non_owner+0x310/0x310
[  242.959891][ T8823]  ? down_write_nested+0x175/0x200
[  242.965027][ T8823]  ? down_read_non_owner+0x310/0x310
[  242.970343][ T8823]  delete_one_xattr+0xfa/0x2d0
[  242.975141][ T8823]  reiserfs_for_each_xattr+0x8a6/0xa30
[  242.980633][ T8823]  ? reiserfs_for_each_xattr+0xa30/0xa30
[  242.986301][ T8823]  ? reiserfs_delete_xattrs+0x90/0x90
[  242.991709][ T8823]  ? reiserfs_xattr_init+0x6a0/0x6a0
[  242.997041][ T8823]  ? inode_wait_for_writeback+0x1e3/0x230
[  243.002814][ T8823]  ? __rwlock_init+0x150/0x150
[  243.007609][ T8823]  reiserfs_delete_xattrs+0x20/0x90
[  243.012837][ T8823]  reiserfs_evict_inode+0x24a/0x4c0
[  243.018061][ T8823]  ? evict+0x482/0x8a0
[  243.022162][ T8823]  ? entry_points_to_object+0x260/0x260
[  243.027739][ T8823]  ? do_raw_spin_lock+0x11f/0x2b0
[  243.032796][ T8823]  ? do_raw_spin_unlock+0x121/0x230
[  243.038047][ T8823]  ? entry_points_to_object+0x260/0x260
[  243.043623][ T8823]  evict+0x4b7/0x8a0
[  243.047567][ T8823]  ? __lock_acquire+0x7eb0/0x7eb0
[  243.052619][ T8823]  ? proc_nr_inodes+0x230/0x230
[  243.057501][ T8823]  ? do_raw_spin_unlock+0x121/0x230
[  243.062753][ T8823]  ? _raw_spin_unlock+0x28/0x40
[  243.067641][ T8823]  vfs_rmdir+0x378/0x4b0
[  243.071914][ T8823]  do_rmdir+0x29f/0x590
[  243.076098][ T8823]  ? __check_object_size+0x4fc/0xa40
[  243.081414][ T8823]  ? d_delete_notify+0x150/0x150
[  243.086382][ T8823]  ? getname_flags+0x20a/0x500
[  243.091168][ T8823]  __x64_sys_unlinkat+0xc4/0xe0
[  243.096053][ T8823]  do_syscall_64+0x55/0xb0
[  243.100491][ T8823]  ? clear_bhb_loop+0x40/0x90
[  243.105188][ T8823]  ? clear_bhb_loop+0x40/0x90
[  243.109893][ T8823]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  243.115822][ T8823] RIP: 0033:0x7f73fdd9e2d9
[  243.120260][ T8823] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  243.139895][ T8823] RSP: 002b:00007f73febd0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000107
[  243.148367][ T8823] RAX: ffffffffffffffda RBX: 00007f73fe025fa0 RCX: 00007f73fdd9e2d9
[  243.156365][ T8823] RDX: 0000000000000200 RSI: 00002000000001c0 RDI: ffffffffffffff9c
[  243.164362][ T8823] RBP: 00007f73fde35888 R08: 0000000000000000 R09: 0000000000000000
[  243.172359][ T8823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  243.180353][ T8823] R13: 00007f73fe026038 R14: 00007f73fe025fa0 R15: 00007ffe22660fb8
[  243.188362][ T8823]  </TASK>
[  243.219550][ T5789] Bluetooth: hci3: command 0x0406 tx timeout
[  243.287807][ T8825] loop1: detected capacity change from 0 to 32768
[  243.320167][ T8825] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10
[  243.396746][ T8827] loop4: detected capacity change from 0 to 40427
[  243.414631][ T8827] F2FS-fs (loop4): invalid crc value
[  243.423307][ T8827] F2FS-fs (loop4): Found nat_bits in checkpoint
[  243.490320][ T5996] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10
[  243.568163][ T8827] F2FS-fs (loop4): Start checkpoint disabled!
[  243.588807][ T8827] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  243.717227][ T6231] syz-executor: attempt to access beyond end of device
[  243.717227][ T6231] loop4: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[  243.731813][ T6231] syz-executor: attempt to access beyond end of device
[  243.731813][ T6231] loop4: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  243.799934][ T3432] kworker/u4:8: attempt to access beyond end of device
[  243.799934][ T3432] loop4: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  243.814236][ T3432] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  243.821429][ T3432] kworker/u4:8: attempt to access beyond end of device
[  243.821429][ T3432] loop4: rw=2049, sector=41000, nr_sectors = 8 limit=40427
[  243.835844][ T3432] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  244.100636][ T3432] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  244.180796][ T3432] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  244.246451][ T3432] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  244.328874][ T3432] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  245.149109][ T3432] hsr_slave_0: left promiscuous mode
[  245.155647][ T3432] hsr_slave_1: left promiscuous mode
[  245.163335][ T3432] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  245.170788][ T3432] batman_adv: batadv0: Removing interface: batadv_slave_0
[  245.187499][ T3432] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  245.195699][ T3432] batman_adv: batadv0: Removing interface: batadv_slave_1
[  245.204059][ T3432] bridge_slave_1: left allmulticast mode
[  245.209756][ T3432] bridge_slave_1: left promiscuous mode
[  245.216913][ T3432] bridge0: port 2(bridge_slave_1) entered disabled state
[  245.226315][ T3432] bridge_slave_0: left allmulticast mode
[  245.233327][ T3432] bridge_slave_0: left promiscuous mode
[  245.239141][ T3432] bridge0: port 1(bridge_slave_0) entered disabled state
[  245.254647][ T3432] veth1_macvtap: left promiscuous mode
[  245.260230][ T3432] veth0_macvtap: left promiscuous mode
[  245.266638][ T3432] veth1_vlan: left promiscuous mode
[  245.273663][ T3432] veth0_vlan: left promiscuous mode
[  245.505170][ T3432] team0 (unregistering): Port device team_slave_1 removed
[  245.540116][ T3432] team0 (unregistering): Port device team_slave_0 removed
[  245.576266][ T3432] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  245.620757][ T3432] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  245.773450][ T3432] bond0 (unregistering): Released all slaves