last executing test programs:

1m25.95375604s ago: executing program 0 (id=117):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x200000, &(0x7f0000000140), 0x1, 0x4dd, &(0x7f0000000d40)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x10b442, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x42, 0xe)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000000)={0x0, r0, 0x1, 0x5, 0x9, 0x1000000000004})

1m25.740193575s ago: executing program 0 (id=120):
syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file1\x00', 0x1004810, &(0x7f0000000240)=ANY=[], 0xfd, 0x1515, &(0x7f00000057c0)="$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")
chdir(&(0x7f0000000240)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0)

1m25.416925553s ago: executing program 0 (id=122):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xe0480, 0x3a)
r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x8, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2})
ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x2)
close_range(r0, 0xffffffffffffffff, 0x0)

1m25.173129959s ago: executing program 0 (id=124):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000140)={[{@discard}, {@dioread_lock}, {@test_dummy_encryption}]}, 0xfe, 0x244, &(0x7f0000000400)="$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")
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$setregset(0x4205, r0, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0xf8})
ptrace$setregset(0x4205, r0, 0x200, &(0x7f00000001c0)={&(0x7f0000000440)="c94522e546f93f6dedf11f1509685636", 0x60})

1m24.768075658s ago: executing program 0 (id=131):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000009c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)={0x4c, r1, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x2}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x6}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x8}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000000}, 0x1048)

1m24.017336896s ago: executing program 0 (id=137):
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
lsetxattr$trusted_overlay_redirect(&(0x7f0000000180)='./mnt\x00', &(0x7f00000001c0), 0x0, 0x0, 0x3)

1m23.582988507s ago: executing program 32 (id=137):
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
lsetxattr$trusted_overlay_redirect(&(0x7f0000000180)='./mnt\x00', &(0x7f00000001c0), 0x0, 0x0, 0x3)

45.709583743s ago: executing program 1 (id=432):
r0 = syz_open_dev$loop(&(0x7f0000000280), 0x4400000d, 0x200)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/address_bits', 0x40000, 0x1b)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000000000000ffd, 0x0, 0x0, 0xd, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0xa]}})
r2 = syz_open_dev$loop(&(0x7f0000000180), 0x75d, 0x2480)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000400)={r0, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0xa, 0x0, 0x6, 0x14, 0xd, "fee8a2ab78fc17c2d1f8a0e91dda0ab7bd64c6a4b4e00d8683dda1af1ea89de2b7fb0a0100000000000300", "2809e8dbe108598964224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac0000000000000000001a00", "90be8b1c551265416c7f30680300", [0xfffffffffffffffd]}})

45.445892899s ago: executing program 1 (id=436):
syz_mount_image$reiserfs(&(0x7f0000001100), &(0x7f00000002c0)='./file0\x00', 0x98, &(0x7f0000001180), 0x1, 0x10f6, &(0x7f00000022c0)="$eJzs2LFqFEEYB/D/7J6C1cmkXwJaKEhIOF8ghcI1FtZ2h5WdVyn3OD6OpLIPeYAUAXtlb10NIki4JQfH7wfL7vyZb76dciYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQmyUPkxw1SR2zJklJuu5ieZWkG/PHX9smJW/fL9evPi5er4dp6bMmpa/ajuvZk1oXdVHP6suj86d1/enzh/ZWy5Iulzeb1aM315Nupe/dTroiAAAAHIYfO5vvuT8AAADwP5NdJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMoI4fTZKSdN3F8ipJt9/fAgAAAHZU0uTd/F/5cA3wx4t8m5dtPvpe+jmn+TLUP7979wd3LwEAAIADVW6dx59l9vtc3mfHmeXkZBj/euX6PGmTnP61zuXNZrV9jjercp8bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB+sgPHAgAAAADC/K3T6NgAAAAAAAAAAAAAAACAqQIAAP//I7HRJg==")
openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x0)
truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd)
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

44.490365493s ago: executing program 1 (id=443):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r0, 0x402)
syz_emit_ethernet(0x56, &(0x7f0000000500)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc, 0x6, 0x1, 0x4, 0x2, 0xa}]}}}}}}}}, 0x0)

44.204736589s ago: executing program 1 (id=446):
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$nfs(&(0x7f00000001c0)='..\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x85000, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00')
syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x10000, &(0x7f00000003c0)={[{@uid={'uid', 0x3d, 0xee00}}, {@utf8}, {}, {@fmask={'fmask', 0x3d, 0x2}}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@gid}, {@discard}, {@namecase}, {@time_offset={'time_offset', 0x3d, 0x5}}, {@errors_continue}, {@utf8}]}, 0x1, 0x1535, &(0x7f0000001380)="$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")
read$FUSE(r0, &(0x7f0000002a40)={0x2020}, 0x2020)

43.923093166s ago: executing program 1 (id=449):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10)
connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f00000041c0)=""/4093, 0xa15b0}], 0x5f, 0x0, 0xfffffe5e}, 0x700)

43.545180606s ago: executing program 1 (id=450):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022220000009603000700000000070c00000016b8ef0a1a7083000000000b0000170083"], 0x0}, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2)
ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000000)={0x3, 0x0, 0x4, 0x3, "b75fc47f994d6d4056b9b835c0a5dd0fcd70131cb9a8f007512701d3987e5821"})

43.416428249s ago: executing program 33 (id=450):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022220000009603000700000000070c00000016b8ef0a1a7083000000000b0000170083"], 0x0}, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2)
ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000000)={0x3, 0x0, 0x4, 0x3, "b75fc47f994d6d4056b9b835c0a5dd0fcd70131cb9a8f007512701d3987e5821"})

3.580998512s ago: executing program 4 (id=823):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x0, 0x7fc00100}]})
fsopen(0x0, 0x1)

2.391387851s ago: executing program 5 (id=838):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r1, &(0x7f00000009c0)=[{&(0x7f0000000400)="1e", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc})

2.296965293s ago: executing program 5 (id=840):
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000440)='./file0\x00', 0x300000a, &(0x7f00000000c0)={[{@nodatacow}, {@datasum}, {@nodiscard}, {@compress_force_algo={'compress-force', 0x3d, 'zstd'}}, {@datasum}, {@discard_sync}, {@treelog}, {@thread_pool={'thread_pool', 0x3d, 0x8}}, {@commit={'commit', 0x3d, 0xa913}}, {@ssd_spread}, {@ssd_spread}, {@nossd}]}, 0x3, 0x55a3, &(0x7f000000e0c0)="$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")
openat$nullb(0xffffffffffffff9c, 0x0, 0x6200, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff)
ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000780)={0x2, 0x7, {0x3ff, @usage=0x53ca, 0x0, 0x4, 0x9, 0x5, 0x5, 0x6bd, 0x21, @usage=0x2080000001, 0x6400, 0xb83c, [0xfffffffffffffd6e, 0x20008b08, 0x2, 0x81, 0x6, 0x40]}, {0x7fff, @struct={0x1, 0x10000001}, 0x0, 0xfffffffffffffffc, 0xffffffff, 0xcc, 0x8, 0x0, 0x20, @usage=0x4, 0x9, 0x372f2380, [0x4, 0xb25, 0xd, 0x1d52b6d3, 0x7e, 0x5]}, {0x3, @usage=0x5000000000000000, 0x0, 0x4d, 0x7, 0x0, 0x8, 0x8, 0x500, @usage, 0xb31, 0x4, [0xffffffffffffffd1, 0x6, 0x1000000000000006, 0xe9, 0x9, 0x2]}, {0x2, 0x745, 0x9}})

2.278018214s ago: executing program 4 (id=841):
syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x47, 0xc11, &(0x7f0000000d00)="$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")
setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x442, 0x100)
pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x404043000)
truncate(&(0x7f0000000080)='./file1\x00', 0x400000f000)

2.277514014s ago: executing program 3 (id=842):
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x48)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
mount$fuseblk(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x800006, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}})
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00')
read$FUSE(r1, &(0x7f0000002480)={0x2020}, 0x2020)

2.05847831s ago: executing program 3 (id=844):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x280440e, &(0x7f0000000600)={[{@nolazytime}, {@test_dummy_encryption_v1}, {@nodioread_nolock}, {@delalloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@noblock_validity}, {@minixdf}, {@sysvgroups}, {@errors_remount}, {@jqfmt_vfsv0}, {@acl}, {@noinit_itable}, {@jqfmt_vfsv1}]}, 0x1, 0xbdb, &(0x7f0000001000)="$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")
syz_mount_image$exfat(0x0, &(0x7f0000000300)='./bus\x00', 0x280d824, 0x0, 0x1, 0x0, &(0x7f0000000300))
chdir(&(0x7f00000003c0)='./bus\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f00000000c0))

1.885056174s ago: executing program 2 (id=845):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
recvmmsg(r2, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}, 0x2fa}], 0x1, 0x2, 0x0)

1.405971855s ago: executing program 3 (id=846):
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0)
r1 = epoll_create(0x2)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000009b80)={0x40000012})
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$UHID_INPUT(r2, &(0x7f0000000e00)={0xfc, {"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", 0x1000}}, 0x1006)

1.405027746s ago: executing program 4 (id=854):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000040)={0x4, r0, 0x1})
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/4\x00')
read$FUSE(r2, &(0x7f0000000a00)={0x2020}, 0x2020)

1.252679239s ago: executing program 4 (id=847):
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
ioprio_set$pid(0x2, 0x0, 0x0)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv2(r0, &(0x7f0000001d40)=[{&(0x7f00000009c0)=""/242, 0xf2}], 0x1, 0xfffffffe, 0x2, 0x1e053c45963db87c)

1.119071142s ago: executing program 4 (id=848):
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r1=>0x0})
connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64, @ANYRES64=r0, @ANYRES64=0x77359400, @ANYRES64, @ANYBLOB="0000000001"], 0x48}}, 0x0)

934.100697ms ago: executing program 4 (id=849):
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000201c1b100c00000000000109022d0001000060000904008002030000000921060400012205000905810320000908070905020340"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000080)='>')

933.365377ms ago: executing program 3 (id=850):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
setresuid(0x0, 0xee00, 0x0)
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7})
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000480), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

927.449717ms ago: executing program 2 (id=851):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
dup2(r1, r0)
connect$inet(r0, &(0x7f0000001600)={0x27, 0x4e20, @loopback}, 0x9)

761.871611ms ago: executing program 3 (id=852):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x50)
socketpair$tipc(0x1e, 0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x53e, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50)

761.573271ms ago: executing program 2 (id=853):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x10004004, &(0x7f00000001c0)={0xa, 0x4e21, 0x767, @mcast2, 0x6}, 0x1c)
recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/129, 0x81}, 0xdb2a}], 0x1, 0x40032060, 0x0)

673.021673ms ago: executing program 3 (id=855):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000300)=0x8)
getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000100)={r2, 0x9}, &(0x7f0000000140)=0x8)

659.296543ms ago: executing program 5 (id=856):
setns(0xc9, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbfa, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x4}, @NL80211_ATTR_PREV_BSSID={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0xc00)

645.131604ms ago: executing program 2 (id=857):
mkdir(&(0x7f0000000240)='./file0\x00', 0xa2)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r1 = fspick(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0)

501.760627ms ago: executing program 2 (id=858):
setns(0xc9, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/netfilter/nf_conntrack_buckets\x00', 0x2, 0x0)
read$FUSE(r0, 0x0, 0x0)

322.815372ms ago: executing program 2 (id=859):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'gre0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x50, 0x2c, 0xf3f, 0x30bd29, 0x25dfd3f5, {0x0, 0x0, 0x0, r1, {0x1, 0xfff2}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @dev={0xac, 0x14, 0x14, 0x5a}}, @TCA_FLOWER_KEY_ETH_DST={0xa, 0x4, @multicast}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x88a8}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20041890}, 0x0)
nanosleep(&(0x7f0000000300)={0x1}, 0x0)

234.327764ms ago: executing program 5 (id=860):
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0)
r1 = epoll_create(0x2)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000009b80)={0x40000012})
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$UHID_INPUT(r2, &(0x7f0000000e00)={0xfc, {"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", 0x1000}}, 0x1006)

60.737498ms ago: executing program 5 (id=861):
r0 = shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil)
shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
read$FUSE(r1, &(0x7f00000005c0)={0x2020}, 0x2020)

0s ago: executing program 5 (id=862):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f00000001c0)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00000000000000000003,coherency=full,resv_level=00000000000000000000\x00\x00\x00\x00\x00\x00\x00\x00ocks,coherency=full,inode64,\x00'], 0x1, 0x4421, &(0x7f0000004500)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
fallocate(r0, 0x0, 0x5, 0x8ffff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff)
ioctl$FITRIM(r1, 0x40406f06, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x100})

kernel console output (not intermixed with test programs):

criptor's value: 9
[  102.822581][   T23] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  102.834453][ T5779] Bluetooth: hci1: command tx timeout
[  102.868250][   T23] usb 2-1: config 0 interface 0 has no altsetting 0
[  102.894143][   T23] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  102.903343][   T23] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  102.931780][   T23] usb 2-1: config 0 interface 0 has no altsetting 0
[  102.940126][   T23] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  102.962513][   T23] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  102.982519][   T23] usb 2-1: config 0 interface 0 has no altsetting 0
[  103.002388][   T23] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  103.011372][   T23] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  103.037473][   T23] usb 2-1: config 0 interface 0 has no altsetting 0
[  103.049511][   T23] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  103.058961][   T23] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  103.091758][   T23] usb 2-1: Product: syz
[  103.096017][   T23] usb 2-1: Manufacturer: syz
[  103.112591][   T23] usb 2-1: SerialNumber: syz
[  103.132908][   T23] usb 2-1: config 0 descriptor??
[  103.149362][   T23] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0
[  103.259122][ T6188] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  103.287830][ T6188] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  103.364374][ T6188] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  103.378125][ T6188] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  103.538171][  T789] usb 2-1: USB disconnect, device number 3
[  103.559701][  T789] yurex 2-1:0.0: USB YUREX #0 now disconnected
[  103.650472][ T6188] 8021q: adding VLAN 0 to HW filter on device bond0
[  103.692961][ T6188] 8021q: adding VLAN 0 to HW filter on device team0
[  103.734215][ T2909] bridge0: port 1(bridge_slave_0) entered blocking state
[  103.741393][ T2909] bridge0: port 1(bridge_slave_0) entered forwarding state
[  103.791029][ T2909] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.798312][ T2909] bridge0: port 2(bridge_slave_1) entered forwarding state
[  104.364810][ T6188] 8021q: adding VLAN 0 to HW filter on device batadv0
[  104.499145][ T6342] loop1: detected capacity change from 0 to 128
[  104.577355][ T6342] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006)
[  104.622515][ T6342] FAT-fs (loop1): Filesystem has been set read-only
[  104.629668][ T6342] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006)
[  104.649303][ T6342] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006)
[  104.660085][ T6342] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006)
[  104.680761][ T6342] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006)
[  104.697430][ T6342] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006)
[  104.709523][ T6342] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006)
[  104.731297][ T6342] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006)
[  104.756219][ T6342] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006)
[  104.781904][ T6342] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006)
[  104.804409][   T27] kauditd_printk_skb: 24 callbacks suppressed
[  104.804423][   T27] audit: type=1800 audit(1791209979.405:8): pid=6342 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.181" name="file2" dev="loop1" ino=1048627 res=0 errno=0
[  104.829049][ T6342] syz.1.181 (6342) used greatest stack depth: 20464 bytes left
[  104.903624][ T5779] Bluetooth: hci1: command tx timeout
[  105.177185][ T6359] FAULT_INJECTION: forcing a failure.
[  105.177185][ T6359] name failslab, interval 1, probability 0, space 0, times 0
[  105.203658][ T6359] CPU: 1 PID: 6359 Comm: syz.1.184 Not tainted syzkaller #0
[  105.211011][ T6359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  105.221115][ T6359] Call Trace:
[  105.224440][ T6359]  <TASK>
[  105.227404][ T6359]  dump_stack_lvl+0x18c/0x250
[  105.232146][ T6359]  ? show_regs_print_info+0x20/0x20
[  105.237389][ T6359]  ? load_image+0x420/0x420
[  105.241932][ T6359]  ? __might_sleep+0xe0/0xe0
[  105.246563][ T6359]  ? __lock_acquire+0x7eb0/0x7eb0
[  105.251627][ T6359]  should_fail_ex+0x394/0x4c0
[  105.256338][ T6359]  should_failslab+0x9/0x20
[  105.260871][ T6359]  slab_pre_alloc_hook+0x59/0x300
[  105.265934][ T6359]  ? mas_next_slot+0x910/0x980
[  105.270741][ T6359]  kmem_cache_alloc+0x5a/0x2c0
[  105.275542][ T6359]  ? vm_area_dup+0x27/0x270
[  105.280076][ T6359]  vm_area_dup+0x27/0x270
[  105.284435][ T6359]  __split_vma+0x1a8/0xc20
[  105.288901][ T6359]  ? mmap_write_unlock+0x160/0x160
[  105.294058][ T6359]  ? split_vma+0x8f/0x110
[  105.298431][ T6359]  mlock_fixup+0x415/0x550
[  105.302893][ T6359]  apply_vma_lock_flags+0x2a7/0x3c0
[  105.308122][ T6359]  ? do_mlock+0x740/0x740
[  105.312495][ T6359]  ? down_write_killable+0x181/0x230
[  105.314762][ T6188] veth0_vlan: entered promiscuous mode
[  105.317815][ T6359]  do_mlock+0x4be/0x740
[  105.327475][ T6359]  ? lru_gen_add_folio+0xe00/0xe00
[  105.332617][ T6359]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  105.338640][ T6359]  ? lock_chain_count+0x20/0x20
[  105.339542][ T6188] veth1_vlan: entered promiscuous mode
[  105.343504][ T6359]  ? syscall_enter_from_user_mode+0x25/0x80
[  105.343535][ T6359]  __x64_sys_mlock+0x60/0x70
[  105.343560][ T6359]  do_syscall_64+0x55/0xb0
[  105.343585][ T6359]  ? clear_bhb_loop+0x40/0x90
[  105.368670][ T6359]  ? clear_bhb_loop+0x40/0x90
[  105.373385][ T6359]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  105.379328][ T6359] RIP: 0033:0x7f983e39e199
[  105.383780][ T6359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  105.400331][ T6188] veth0_macvtap: entered promiscuous mode
[  105.403389][ T6359] RSP: 002b:00007f983f1d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095
[  105.403413][ T6359] RAX: ffffffffffffffda RBX: 00007f983e625fa0 RCX: 00007f983e39e199
[  105.403427][ T6359] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000200000ffc000
[  105.403445][ T6359] RBP: 00007f983e4350b8 R08: 0000000000000000 R09: 0000000000000000
[  105.441499][ T6359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  105.443481][ T6188] veth1_macvtap: entered promiscuous mode
[  105.449472][ T6359] R13: 00007f983e626038 R14: 00007f983e625fa0 R15: 00007ffec7cc8b88
[  105.463214][ T6359]  </TASK>
[  105.547134][ T6188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  105.611694][ T6188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.652791][ T6188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  105.695327][ T6188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.723435][ T6188] batman_adv: batadv0: Interface activated: batadv_slave_0
[  105.762745][ T6188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  105.813874][ T6188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.837431][ T6188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  105.857815][ T6188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.876763][ T6188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  105.888579][ T6188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.910882][ T6188] batman_adv: batadv0: Interface activated: batadv_slave_1
[  105.931275][ T6368] warning: `syz.3.185' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  105.961299][ T6188] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  105.964481][ T6372] x86/PAT: syz.1.186:6372 freeing invalid memtype [mem 0xfe004000-0xfe004fff]
[  105.990041][ T6188] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  106.025131][ T6188] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  106.037267][ T6188] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  106.078617][ T6376] loop3: detected capacity change from 0 to 512
[  106.113497][ T6376] EXT4-fs (loop3): VFS: Can't find ext4 filesystem
[  106.315387][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  106.359855][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  106.415358][ T6297] syz.2.171 (6297): drop_caches: 1
[  106.453358][ T3487] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  106.486446][ T3487] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  106.982358][ T5779] Bluetooth: hci1: command tx timeout
[  107.002192][ T6403] netlink: 12 bytes leftover after parsing attributes in process `syz.1.196'.
[  107.116317][ T6408] Bluetooth: MGMT ver 1.22
[  107.451873][ T2196] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  107.519162][ T6390] loop2: detected capacity change from 0 to 40427
[  107.547031][ T6390] F2FS-fs (loop2): Invalid SB checksum offset: 0
[  107.568619][ T6390] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[  107.597682][ T6390] F2FS-fs (loop2): invalid crc value
[  107.647286][ T2196] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  107.670241][ T2196] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  107.725247][ T2196] usb 5-1: config 0 interface 0 has no altsetting 0
[  107.744537][ T2196] usb 5-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00
[  107.772466][ T2196] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  107.807865][ T2196] usb 5-1: config 0 descriptor??
[  107.895594][ T6390] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0
[  107.908360][ T6390] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  108.074694][ T2196] usbhid 5-1:0.0: can't add hid device: -71
[  108.100521][ T2196] usbhid: probe of 5-1:0.0 failed with error -71
[  108.129337][ T2196] usb 5-1: USB disconnect, device number 2
[  108.461120][ T5777] syz-executor: attempt to access beyond end of device
[  108.461120][ T5777] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  108.498806][ T5777] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  109.028083][ T6473] syzkaller1: entered promiscuous mode
[  109.041878][ T6473] syzkaller1: entered allmulticast mode
[  109.162387][ T6483] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  109.301798][ T5834] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  109.527089][ T5834] usb 3-1: config 0 has an invalid interface number: 6 but max is 0
[  109.540161][ T5834] usb 3-1: config 0 has no interface number 0
[  109.561844][ T5834] usb 3-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b
[  109.581269][ T5834] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  109.612989][ T5834] usb 3-1: config 0 descriptor??
[  109.633263][ T5834] ums-realtek 3-1:0.6: USB Mass Storage device detected
[  109.876926][   T42] usb 3-1: USB disconnect, device number 2
[  109.902566][ T6515] capability: warning: `syz.4.227' uses deprecated v2 capabilities in a way that may be insecure
[  109.966667][ T6518] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received
[  110.647280][ T6546] bridge0: port 2(bridge_slave_1) entered disabled state
[  110.656578][ T6546] bridge0: port 1(bridge_slave_0) entered disabled state
[  110.690462][ T6546] bridge0: port 2(bridge_slave_1) entered blocking state
[  110.697978][ T6546] bridge0: port 2(bridge_slave_1) entered forwarding state
[  110.706938][ T6546] bridge0: port 1(bridge_slave_0) entered blocking state
[  110.714103][ T6546] bridge0: port 1(bridge_slave_0) entered forwarding state
[  110.760972][ T6546] team0: Port device bridge0 added
[  110.821914][ T5834] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  110.917205][ T6554] loop1: detected capacity change from 0 to 512
[  110.935826][ T6554] EXT4-fs (loop1): VFS: Found ext4 filesystem with invalid superblock checksum.  Run e2fsck?
[  110.962772][ T5765] udevd[5765]: incorrect ext4 checksum on /dev/loop1
[  111.011984][ T5834] usb 4-1: Using ep0 maxpacket: 8
[  111.033340][ T5834] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  111.041612][ T5834] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  111.070269][ T5834] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  111.090224][ T5834] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  111.101320][ T5834] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  111.114538][ T5834] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  111.123752][ T5834] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  111.354779][ T5834] usb 4-1: GET_CAPABILITIES returned 0
[  111.360514][ T5834] usbtmc 4-1:16.0: can't read capabilities
[  111.404799][   T27] audit: type=1326 audit(1791209986.005:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6566 comm="syz.4.243" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18d0f9e199 code=0x7ffc0000
[  111.429481][   T27] audit: type=1326 audit(1791209986.005:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6566 comm="syz.4.243" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18d0f9e199 code=0x7ffc0000
[  111.454273][   T27] audit: type=1326 audit(1791209986.015:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6566 comm="syz.4.243" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f18d0f9e199 code=0x7ffc0000
[  111.474681][   T42] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  111.525020][   T27] audit: type=1326 audit(1791209986.125:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6566 comm="syz.4.243" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18d0f9e199 code=0x7ffc0000
[  111.558304][   T27] audit: type=1326 audit(1791209986.125:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6566 comm="syz.4.243" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18d0f9e199 code=0x7ffc0000
[  111.601443][  T789] usb 4-1: USB disconnect, device number 6
[  111.672887][   T42] usb 2-1: Using ep0 maxpacket: 8
[  111.681413][   T42] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  111.708361][   T42] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  111.717643][   T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  111.740408][   T42] usb 2-1: config 0 descriptor??
[  111.826530][ T6577] FAULT_INJECTION: forcing a failure.
[  111.826530][ T6577] name failslab, interval 1, probability 0, space 0, times 0
[  111.855803][ T6577] CPU: 1 PID: 6577 Comm: syz.2.246 Not tainted syzkaller #0
[  111.863167][ T6577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  111.873247][ T6577] Call Trace:
[  111.876526][ T6577]  <TASK>
[  111.879447][ T6577]  dump_stack_lvl+0x18c/0x250
[  111.884126][ T6577]  ? show_regs_print_info+0x20/0x20
[  111.889320][ T6577]  ? load_image+0x420/0x420
[  111.893830][ T6577]  ? __lock_acquire+0x7eb0/0x7eb0
[  111.898863][ T6577]  ? rcu_is_watching+0x15/0xb0
[  111.903621][ T6577]  ? trace_contention_end+0x39/0xe0
[  111.908813][ T6577]  should_fail_ex+0x394/0x4c0
[  111.913507][ T6577]  should_failslab+0x9/0x20
[  111.918026][ T6577]  slab_pre_alloc_hook+0x59/0x300
[  111.923064][ T6577]  ? snd_card_file_add+0x58/0x250
[  111.928094][ T6577]  __kmem_cache_alloc_node+0x53/0x250
[  111.933486][ T6577]  ? snd_card_file_add+0x58/0x250
[  111.938512][ T6577]  kmalloc_trace+0x2a/0xe0
[  111.942934][ T6577]  snd_card_file_add+0x58/0x250
[  111.947791][ T6577]  snd_mixer_oss_open+0xa7/0x250
[  111.952739][ T6577]  chrdev_open+0x58c/0x600
[  111.957217][ T6577]  ? cd_forget+0x160/0x160
[  111.961651][ T6577]  ? fsnotify_perm+0x3ed/0x5e0
[  111.966446][ T6577]  do_dentry_open+0x880/0x14b0
[  111.971221][ T6577]  ? cd_forget+0x160/0x160
[  111.975655][ T6577]  path_openat+0x284f/0x3270
[  111.980267][ T6577]  ? do_sys_openat2+0xda/0x1d0
[  111.985039][ T6577]  ? __x64_sys_openat+0x139/0x160
[  111.990069][ T6577]  ? verify_lock_unused+0x140/0x140
[  111.995270][ T6577]  ? do_filp_open+0x430/0x430
[  111.999960][ T6577]  do_filp_open+0x1f2/0x430
[  112.004468][ T6577]  ? vfs_tmpfile+0x620/0x620
[  112.009073][ T6577]  ? _raw_spin_unlock+0x28/0x40
[  112.013926][ T6577]  ? alloc_fd+0x590/0x640
[  112.018266][ T6577]  do_sys_openat2+0x134/0x1d0
[  112.022952][ T6577]  ? do_sys_open+0xe0/0xe0
[  112.027377][ T6577]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  112.033365][ T6577]  ? lock_chain_count+0x20/0x20
[  112.038264][ T6577]  __x64_sys_openat+0x139/0x160
[  112.043153][ T6577]  do_syscall_64+0x55/0xb0
[  112.047600][ T6577]  ? clear_bhb_loop+0x40/0x90
[  112.052278][ T6577]  ? clear_bhb_loop+0x40/0x90
[  112.056957][ T6577]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  112.062872][ T6577] RIP: 0033:0x7f3ca3f9e199
[  112.067311][ T6577] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  112.086922][ T6577] RSP: 002b:00007f3ca4e58028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  112.095346][ T6577] RAX: ffffffffffffffda RBX: 00007f3ca4225fa0 RCX: 00007f3ca3f9e199
[  112.103339][ T6577] RDX: 0000000000000400 RSI: 0000200000000080 RDI: ffffffffffffff9c
[  112.111324][ T6577] RBP: 00007f3ca40350b8 R08: 0000000000000000 R09: 0000000000000000
[  112.119314][ T6577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  112.127293][ T6577] R13: 00007f3ca4226038 R14: 00007f3ca4225fa0 R15: 00007ffe39ba7618
[  112.135288][ T6577]  </TASK>
[  112.188930][   T42] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  112.475125][ T6591] syz.3.251 uses obsolete (PF_INET,SOCK_PACKET)
[  112.601774][ T5834] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  112.624177][ T6596] FAULT_INJECTION: forcing a failure.
[  112.624177][ T6596] name failslab, interval 1, probability 0, space 0, times 0
[  112.638358][ T6596] CPU: 0 PID: 6596 Comm: syz.3.253 Not tainted syzkaller #0
[  112.645690][ T6596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  112.655762][ T6596] Call Trace:
[  112.659053][ T6596]  <TASK>
[  112.661996][ T6596]  dump_stack_lvl+0x18c/0x250
[  112.666710][ T6596]  ? show_regs_print_info+0x20/0x20
[  112.671935][ T6596]  ? load_image+0x420/0x420
[  112.676454][ T6596]  ? __lock_acquire+0x7eb0/0x7eb0
[  112.681485][ T6596]  should_fail_ex+0x394/0x4c0
[  112.686183][ T6596]  should_failslab+0x9/0x20
[  112.690704][ T6596]  slab_pre_alloc_hook+0x59/0x300
[  112.695829][ T6596]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  112.701822][ T6596]  kmem_cache_alloc_lru+0x4d/0x2b0
[  112.706949][ T6596]  ? new_inode_pseudo+0x82/0x1d0
[  112.711895][ T6596]  new_inode_pseudo+0x82/0x1d0
[  112.716669][ T6596]  alloc_anon_inode+0x1e/0x2f0
[  112.721443][ T6596]  aio_setup_ring+0x104/0xf30
[  112.726138][ T6596]  ? pcpu_alloc+0x11e7/0x1880
[  112.730914][ T6596]  ? ioctx_alloc+0x2e2/0x770
[  112.735518][ T6596]  ? free_ioctx_reqs+0x190/0x190
[  112.740479][ T6596]  ioctx_alloc+0x316/0x770
[  112.744908][ T6596]  __se_sys_io_setup+0x7b/0x190
[  112.749767][ T6596]  do_syscall_64+0x55/0xb0
[  112.754194][ T6596]  ? clear_bhb_loop+0x40/0x90
[  112.758881][ T6596]  ? clear_bhb_loop+0x40/0x90
[  112.763564][ T6596]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  112.769468][ T6596] RIP: 0033:0x7f000eb9e199
[  112.773892][ T6596] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  112.793556][ T6596] RSP: 002b:00007f000fa03028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce
[  112.801998][ T6596] RAX: ffffffffffffffda RBX: 00007f000ee25fa0 RCX: 00007f000eb9e199
[  112.809988][ T6596] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007
[  112.817972][ T6596] RBP: 00007f000ec350b8 R08: 0000000000000000 R09: 0000000000000000
[  112.825968][ T6596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  112.833955][ T6596] R13: 00007f000ee26038 R14: 00007f000ee25fa0 R15: 00007ffd2fdc38b8
[  112.841960][ T6596]  </TASK>
[  112.911926][   T42] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  112.952172][ T5834] usb 5-1: Using ep0 maxpacket: 16
[  112.959088][ T5834] usb 5-1: config 0 has an invalid interface number: 34 but max is 0
[  112.970249][ T5834] usb 5-1: config 0 has no interface number 0
[  112.977353][ T5834] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  112.990169][ T5834] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  113.003022][ T5834] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  113.012147][ T5834] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.020159][ T5834] usb 5-1: Product: syz
[  113.024408][ T5834] usb 5-1: Manufacturer: syz
[  113.029033][ T5834] usb 5-1: SerialNumber: syz
[  113.039576][ T5834] usb 5-1: config 0 descriptor??
[  113.045541][ T6587] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  113.052976][ T6587] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  113.105146][   T42] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  113.131833][   T42] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  113.150693][  T789] usb 2-1: USB disconnect, device number 4
[  113.158702][   T42] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  113.173364][   T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.194934][   T42] usb 3-1: Product: syz
[  113.199169][   T42] usb 3-1: Manufacturer: syz
[  113.206919][   T42] usb 3-1: SerialNumber: syz
[  113.228908][   T42] cdc_mbim 3-1:1.0: skipping garbage
[  113.267729][ T6604] loop1: detected capacity change from 0 to 1024
[  113.287326][ T6604] EXT4-fs: Ignoring removed oldalloc option
[  113.299562][ T6604] EXT4-fs: Ignoring removed orlov option
[  113.317631][ T6587] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  113.328936][ T6587] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  113.345936][ T6604] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  113.459548][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  113.472008][ T6593] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  113.540131][ T5834] asix 5-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  113.564845][ T6609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.257'.
[  113.573982][ T6609] netlink: 11 bytes leftover after parsing attributes in process `syz.1.257'.
[  113.957174][ T6618] loop3: detected capacity change from 0 to 256
[  113.976056][ T6618] exfat: Deprecated parameter 'utf8'
[  114.027097][ T6618] exfat: Deprecated parameter 'namecase'
[  114.056371][ T6618] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  114.099581][ T6593] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  114.108034][   T42] cdc_mbim 3-1:1.0: setting tx_max = 16384
[  114.117039][   T42] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device
[  114.141172][   T42] wwan wwan0: port wwan0mbim0 attached
[  114.164849][ T5834] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  114.178525][ T5834] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9
[  114.181172][   T42] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, 4e:e9:74:6b:86:10
[  114.240851][ T5834] asix: probe of 5-1:0.34 failed with error -71
[  114.273514][ T5834] usb 5-1: USB disconnect, device number 3
[  114.296177][   T23] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  114.305957][ T6624] syzkaller1: entered promiscuous mode
[  114.322841][ T6624] syzkaller1: entered allmulticast mode
[  114.405924][    T9] usb 3-1: USB disconnect, device number 3
[  114.415737][    T9] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM
[  114.509267][    T9] wwan wwan0: port wwan0mbim0 disconnected
[  114.512610][   T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  114.551855][   T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  114.567694][   T23] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  114.604543][   T23] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  114.637780][   T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  114.668398][   T23] usb 2-1: config 0 descriptor??
[  115.139264][   T23] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving
[  115.198077][ T6646] FAULT_INJECTION: forcing a failure.
[  115.198077][ T6646] name failslab, interval 1, probability 0, space 0, times 0
[  115.211542][   T23] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  115.236750][ T6646] CPU: 0 PID: 6646 Comm: syz.2.267 Not tainted syzkaller #0
[  115.244116][ T6646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  115.254377][ T6646] Call Trace:
[  115.257711][ T6646]  <TASK>
[  115.260686][ T6646]  dump_stack_lvl+0x18c/0x250
[  115.265428][ T6646]  ? show_regs_print_info+0x20/0x20
[  115.270685][ T6646]  ? load_image+0x420/0x420
[  115.275247][ T6646]  ? __might_sleep+0xe0/0xe0
[  115.279886][ T6646]  ? __lock_acquire+0x7eb0/0x7eb0
[  115.284961][ T6646]  should_fail_ex+0x394/0x4c0
[  115.289694][ T6646]  should_failslab+0x9/0x20
[  115.294247][ T6646]  slab_pre_alloc_hook+0x59/0x300
[  115.299331][ T6646]  kmem_cache_alloc_lru+0x4d/0x2b0
[  115.304492][ T6646]  ? __d_alloc+0x31/0x710
[  115.308861][ T6646]  __d_alloc+0x31/0x710
[  115.313051][ T6646]  ? alloc_fd+0x590/0x640
[  115.317417][ T6646]  d_alloc_pseudo+0x1d/0x70
[  115.322049][ T6646]  alloc_file_pseudo+0xe4/0x210
[  115.326942][ T6646]  ? fput+0x1a0/0x1a0
[  115.330968][ T6646]  ? alloc_fd+0x590/0x640
[  115.335339][ T6646]  sock_alloc_file+0xb7/0x280
[  115.340060][ T6646]  __sys_socket+0x140/0x1b0
[  115.344610][ T6646]  __x64_sys_socket+0x7a/0x90
[  115.349334][ T6646]  do_syscall_64+0x55/0xb0
[  115.353799][ T6646]  ? clear_bhb_loop+0x40/0x90
[  115.358509][ T6646]  ? clear_bhb_loop+0x40/0x90
[  115.363224][ T6646]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  115.369168][ T6646] RIP: 0033:0x7f3ca3f9e199
[  115.373633][ T6646] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  115.393279][ T6646] RSP: 002b:00007f3ca4e58028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  115.401754][ T6646] RAX: ffffffffffffffda RBX: 00007f3ca4225fa0 RCX: 00007f3ca3f9e199
[  115.409768][ T6646] RDX: 0000000000000002 RSI: 0000000000000003 RDI: 000000000000000f
[  115.417779][ T6646] RBP: 00007f3ca40350b8 R08: 0000000000000000 R09: 0000000000000000
[  115.426235][ T6646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  115.427436][ T6634] loop3: detected capacity change from 0 to 32768
[  115.434220][ T6646] R13: 00007f3ca4226038 R14: 00007f3ca4225fa0 R15: 00007ffe39ba7618
[  115.434252][ T6646]  </TASK>
[  115.588035][ T6634] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  115.795619][ T6634] XFS (loop3): Ending clean mount
[  115.919030][ T6634] XFS (loop3): Metadata CRC error detected at xfs_agfl_read_verify+0x18d/0x250, xfs_agfl block 0x3 
[  115.941042][ T6634] XFS (loop3): Unmount and run xfs_repair
[  115.966239][ T6634] XFS (loop3): First 128 bytes of corrupted metadata buffer:
[  115.985375][ T6634] 00000000: 58 41 46 4c 00 00 00 00 d7 dc 42 4e 07 00 00 00  XAFL......BN....
[  116.008948][ T6634] 00000010: 9f 91 9c b7 20 0a 10 1d 00 00 00 00 00 00 00 00  .... ...........
[  116.041824][ T6634] 00000020: e6 0a 0e bb ff ff ff ff 00 00 0b f0 00 00 0b f1  ................
[  116.072207][ T6634] 00000030: 00 00 0b f2 00 00 0b f3 00 00 0b f4 00 00 0b f5  ................
[  116.095890][ T6634] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  116.107384][ T6634] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  116.118230][ T6634] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  116.131914][ T6634] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  116.148332][ T6634] XFS (loop3): metadata I/O error in "xfs_alloc_read_agfl+0x223/0x400" at daddr 0x3 len 1 error 74
[  116.170870][ T6634] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x519/0x8b0 (fs/xfs/xfs_trans_buf.c:296).  Shutting down filesystem.
[  116.185921][ T6634] XFS (loop3): Please unmount the filesystem and rectify the problem(s)
[  116.247008][ T5780] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  116.909304][ T6680] loop2: detected capacity change from 0 to 32768
[  117.002176][ T6680] JBD2: Ignoring recovery information on journal
[  117.076849][ T5835] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  117.130625][ T6680] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  117.293113][ T5835] usb 4-1: config 0 has an invalid interface number: 6 but max is 0
[  117.301177][ T5835] usb 4-1: config 0 has no interface number 0
[  117.337131][  T789] usb 2-1: USB disconnect, device number 5
[  117.343242][ T5835] usb 4-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b
[  117.367053][ T5835] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  117.404107][ T5835] usb 4-1: config 0 descriptor??
[  117.418359][ T5835] ums-realtek 4-1:0.6: USB Mass Storage device detected
[  117.629120][ T6697] loop1: detected capacity change from 0 to 32768
[  117.637510][ T5777] ocfs2: Unmounting device (7,2) on (node local)
[  117.674591][ T5835] usb 4-1: USB disconnect, device number 7
[  117.831366][ T6703] loop4: detected capacity change from 0 to 32768
[  117.959283][ T6697] jfs_unlink: dtDelete returned -116
[  117.972630][ T6697] jfs_unlink: dtDelete returned -116
[  118.519782][ T6712] loop4: detected capacity change from 0 to 4096
[  118.563200][ T6712] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512).
[  118.721955][ T6712] ntfs3: loop4: ino=3, ntfs_set_state failed, -22.
[  118.752739][   T49] ntfs3: loop4: ino=3, ntfs3_write_inode failed, -22.
[  118.761142][ T6712] ntfs3: loop4: ino=3, ntfs_set_state failed, -22.
[  118.771430][ T6712] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  118.783874][ T6712] ntfs3: loop4: ino=3, ntfs_set_state failed, -22.
[  118.797760][   T49] ntfs3: loop4: ino=3, ntfs3_write_inode failed, -22.
[  118.816926][ T6712] ntfs3: loop4: ino=5, "/" mi_enum_attr
[  118.839487][ T6712] ntfs3: loop4: ino=5, directory corrupted
[  119.516469][ T6741] netlink: 8 bytes leftover after parsing attributes in process `syz.2.291'.
[  119.545676][ T6741] netlink: 11 bytes leftover after parsing attributes in process `syz.2.291'.
[  119.701140][ T6747] loop2: detected capacity change from 0 to 128
[  119.741110][ T6747] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  119.762590][ T5835] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  119.775660][ T6749] input: syz1 as /devices/virtual/input/input7
[  119.805562][ T6747] ext4 filesystem being mounted at /75/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  119.892388][   T27] audit: type=1800 audit(1791209994.486:14): pid=6747 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.295" name="file1" dev="loop2" ino=12 res=0 errno=0
[  119.961758][ T5835] usb 2-1: Using ep0 maxpacket: 16
[  119.975346][ T5835] usb 2-1: config 0 has an invalid interface number: 34 but max is 0
[  119.985004][ T5835] usb 2-1: config 0 has no interface number 0
[  119.998259][ T5835] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  120.018882][ T5835] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  120.020874][ T5777] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  120.032671][ T5835] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  120.055771][ T5835] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.065648][ T5835] usb 2-1: Product: syz
[  120.069992][ T5835] usb 2-1: Manufacturer: syz
[  120.075258][ T5835] usb 2-1: SerialNumber: syz
[  120.086816][ T5835] usb 2-1: config 0 descriptor??
[  120.109358][ T6740] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  120.127300][ T6740] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  120.375035][ T6740] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  120.392343][ T6740] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  120.637802][ T5835] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  120.899844][ T6773] CacheFiles: Failed to register: -95
[  121.147126][ T6784] netlink: 8 bytes leftover after parsing attributes in process `syz.3.306'.
[  121.161058][ T6784] netlink: 11 bytes leftover after parsing attributes in process `syz.3.306'.
[  121.236473][ T5835] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  121.262180][ T5835] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9
[  121.342782][ T5835] asix: probe of 2-1:0.34 failed with error -71
[  121.372477][ T5835] usb 2-1: USB disconnect, device number 6
[  122.243408][ T2196] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  122.244334][ T6801] loop3: detected capacity change from 0 to 40427
[  122.268270][ T6801] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  122.293992][ T6801] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  122.312885][ T6801] F2FS-fs (loop3): invalid crc value
[  122.334809][ T6801] F2FS-fs (loop3): Found nat_bits in checkpoint
[  122.421761][ T5835] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  122.422050][ T2196] usb 2-1: Using ep0 maxpacket: 8
[  122.445698][ T6801] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  122.454198][ T2196] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  122.461770][ T6801] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  122.477843][ T2196] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  122.502364][ T2196] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  122.531467][ T2196] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  122.552226][ T2196] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  122.567138][ T2196] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  122.576452][ T2196] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  122.624329][ T5835] usb 5-1: unable to get BOS descriptor or descriptor too short
[  122.641164][ T5835] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[  122.708094][ T5835] usb 5-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[  122.727580][ T5835] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.760951][ T5835] usb 5-1: Product: syz
[  122.769636][ T5835] usb 5-1: Manufacturer: syz
[  122.782731][ T5835] usb 5-1: SerialNumber: syz
[  122.837206][ T2196] usb 2-1: GET_CAPABILITIES returned 0
[  122.859077][ T2196] usbtmc 2-1:16.0: can't read capabilities
[  123.055427][ T5835] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  123.107555][ T2196] usb 2-1: USB disconnect, device number 7
[  123.248391][ T5835] usb 5-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[  123.269512][ T5835] usb 5-1: found format II with max.bitrate = 4, frame size=7372
[  123.293936][ T5835] usb 5-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22)
[  123.322051][ T5835] usb 5-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[  123.340867][ T5835] usb 5-1: found format II with max.bitrate = 4, frame size=7372
[  123.361212][ T5835] usb 5-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22)
[  123.664504][ T5779] block nbd3: Receive control failed (result -107)
[  123.697137][ T5762] block nbd3: shutting down sockets
[  123.836948][ T6874] ip6erspan0: entered allmulticast mode
[  123.977415][ T5835] usb 5-1: USB disconnect, device number 4
[  124.093166][ T2196] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  124.124889][ T5764] udevd[5764]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  124.362129][ T2196] usb 4-1: Using ep0 maxpacket: 16
[  124.374636][ T2196] usb 4-1: config 0 has an invalid interface number: 34 but max is 0
[  124.391949][ T2196] usb 4-1: config 0 has no interface number 0
[  124.421797][ T2196] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  124.461925][ T2196] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  124.490859][ T2196] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  124.510158][ T2196] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.541862][ T2196] usb 4-1: Product: syz
[  124.546088][ T2196] usb 4-1: Manufacturer: syz
[  124.551330][ T2196] usb 4-1: SerialNumber: syz
[  124.578169][ T2196] usb 4-1: config 0 descriptor??
[  124.603448][ T6872] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  124.610780][ T6872] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  124.872479][ T6872] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  124.879925][ T6872] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  125.121833][ T2196] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  125.488187][ T6942] loop4: detected capacity change from 0 to 256
[  125.506648][ T6942] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x8f9fe1ed, utbl_chksum : 0xe619d30d)
[  125.691910][ T5834] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  125.728643][ T2196] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  125.751404][ T2196] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9
[  125.806884][ T2196] asix: probe of 4-1:0.34 failed with error -71
[  125.826357][ T2196] usb 4-1: USB disconnect, device number 8
[  125.876388][ T6955] netlink: 4 bytes leftover after parsing attributes in process `syz.1.344'.
[  125.897783][ T5834] usb 3-1: unable to get BOS descriptor or descriptor too short
[  125.915556][ T5834] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[  125.939376][ T5834] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[  125.952021][ T5834] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.970523][ T5834] usb 3-1: Product: syz
[  125.978021][ T5834] usb 3-1: Manufacturer: syz
[  125.991775][ T5834] usb 3-1: SerialNumber: syz
[  126.052538][ T6961] netlink: 28 bytes leftover after parsing attributes in process `syz.1.346'.
[  126.237481][ T5834] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  126.446362][ T5834] usb 3-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[  126.471918][ T5834] usb 3-1: found format II with max.bitrate = 4, frame size=7372
[  126.475903][ T6970] loop3: detected capacity change from 0 to 2048
[  126.502952][ T5834] usb 3-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22)
[  126.520809][ T6957] loop4: detected capacity change from 0 to 32768
[  126.555091][ T5834] usb 3-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[  126.579622][ T6957] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.345 (6957)
[  126.600700][ T5834] usb 3-1: found format II with max.bitrate = 4, frame size=7372
[  126.625967][ T6977] capability: warning: `syz.1.348' uses 32-bit capabilities (legacy support in use)
[  126.637605][ T6970] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  126.650491][ T5834] usb 3-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22)
[  126.692209][ T6957] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  126.703303][ T6957] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  126.713240][ T6957] BTRFS info (device loop4): setting nodatasum
[  126.719447][ T6957] BTRFS info (device loop4): force zlib compression, level 3
[  126.727294][ T6957] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8)
[  126.737213][ T6957] BTRFS info (device loop4): use lzo compression, level 0
[  126.745233][ T6957] BTRFS info (device loop4): turning on flush-on-commit
[  126.773101][ T6957] BTRFS info (device loop4): enabling auto defrag
[  126.779640][ T6957] BTRFS info (device loop4): max_inline at 0
[  126.811771][ T6957] BTRFS info (device loop4): using free space tree
[  126.941745][ T6957] BTRFS info (device loop4): enabling ssd optimizations
[  127.056064][   T11] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  127.123207][   T11] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 578 with error 28
[  127.162598][   T11] EXT4-fs (loop3): This should not happen!! Data will be lost
[  127.162598][   T11] 
[  127.194764][ T5834] usb 3-1: USB disconnect, device number 4
[  127.214094][   T11] EXT4-fs (loop3): Total free blocks count 0
[  127.231779][   T11] EXT4-fs (loop3): Free/Dirty block details
[  127.264098][   T11] EXT4-fs (loop3): free_blocks=4096
[  127.269396][   T11] EXT4-fs (loop3): dirty_blocks=592
[  127.272666][ T7007] loop1: detected capacity change from 0 to 1024
[  127.287899][   T11] EXT4-fs (loop3): Block reservation details
[  127.295365][ T7007] EXT4-fs: Ignoring removed nomblk_io_submit option
[  127.322984][   T11] EXT4-fs (loop3): i_reserved_data_blocks=37
[  127.427970][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  127.430535][ T7007] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  127.487702][ T6884] udevd[6884]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  127.765527][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  127.806915][ T6188] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  128.160687][ T7027] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  128.229803][ T7027] CIFS mount error: No usable UNC path provided in device string!
[  128.229803][ T7027] 
[  128.265633][ T7027] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  128.587175][ T7045] loop3: detected capacity change from 0 to 256
[  128.617680][ T7045] exfat: Deprecated parameter 'utf8'
[  128.641016][ T7045] exfat: Deprecated parameter 'namecase'
[  128.691145][ T7045] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  128.759096][ T7055] netlink: 16 bytes leftover after parsing attributes in process `syz.1.368'.
[  129.494613][ T7094] loop2: detected capacity change from 0 to 512
[  129.534670][ T7094] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  129.558456][ T7094] ext4 filesystem being mounted at /101/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  129.558706][ T7098] loop4: detected capacity change from 0 to 1024
[  129.581164][ T7098] EXT4-fs: Ignoring removed oldalloc option
[  129.587190][ T7098] EXT4-fs: Ignoring removed orlov option
[  129.601888][ T7098] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 ro without journal. Quota mode: writeback.
[  129.652553][ T7098] EXT4-fs error (device loop4): ext4_readdir:263: inode #12: block 80: comm syz.4.386: path /: bad entry in directory: rec_len is smaller than minimal - offset=296, inode=0, rec_len=0, size=1024 fake=0
[  129.713140][ T6188] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 16: comm syz-executor: path /52/file1: bad entry in directory: rec_len is smaller than minimal - offset=876, inode=0, rec_len=0, size=1024 fake=0
[  129.726424][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  129.741173][ T6188] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 37: comm syz-executor: path /52/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0
[  129.743558][   T42] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  129.817723][ T6188] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  129.952499][   T42] usb 4-1: Using ep0 maxpacket: 8
[  129.963661][   T42] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  129.999004][   T42] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  130.024704][   T42] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  130.051713][   T42] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  130.071047][   T42] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  130.082275][   T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  130.102508][ T7111] sd 0:0:1:0: PR command failed: 1026
[  130.112691][ T7111] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[  130.120059][ T7111] sd 0:0:1:0: Add. Sense: Invalid command operation code
[  130.241831][ T2196] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  130.303484][   T42] usb 4-1: GET_CAPABILITIES returned 0
[  130.320257][   T42] usbtmc 4-1:16.0: can't read capabilities
[  130.761421][   T42] kernel write not supported for file /usbtmc0 (pid: 42 comm: kworker/1:1)
[  130.816265][   T42] usb 4-1: USB disconnect, device number 9
[  131.420403][ T7119] loop1: detected capacity change from 0 to 131072
[  131.432638][ T7119] F2FS-fs (loop1): Invalid log sectorsize (67108873)
[  131.439413][ T7119] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  131.458346][ T7119] F2FS-fs (loop1): invalid crc value
[  131.468994][ T7119] F2FS-fs (loop1): Found nat_bits in checkpoint
[  131.520327][ T2196] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  131.538401][ T2196] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  131.551412][ T7119] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  131.558535][ T7119] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  131.567452][ T2196] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  131.577525][ T2196] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  131.593421][ T2196] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  131.604036][ T2196] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  131.613988][ T2196] usb 5-1: Manufacturer: syz
[  131.629286][ T2196] usb 5-1: config 0 descriptor??
[  131.959704][ T7136] loop2: detected capacity change from 0 to 4096
[  131.982202][ T7136] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512).
[  132.035554][ T7136] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  132.063578][ T7136] ntfs3: loop2: Failed to initialize $Extend/$Reparse.
[  132.098380][ T2196] appleir 0003:05AC:8243.0005: unknown main item tag 0x0
[  132.130791][ T2196] appleir 0003:05AC:8243.0005: No inputs registered, leaving
[  132.179983][ T2196] appleir 0003:05AC:8243.0005: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0
[  132.494170][ T5835] usb 5-1: USB disconnect, device number 5
[  132.783863][ T7134] loop3: detected capacity change from 0 to 40427
[  132.820211][ T7134] F2FS-fs (loop3): Found nat_bits in checkpoint
[  132.997181][ T7134] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  133.072570][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  133.081796][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  133.111544][ T7134] syz.3.400: attempt to access beyond end of device
[  133.111544][ T7134] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  133.196191][ T7153] netlink: 16 bytes leftover after parsing attributes in process `syz.2.405'.
[  133.209127][ T5780] syz-executor: attempt to access beyond end of device
[  133.209127][ T5780] loop3: rw=2049, sector=45112, nr_sectors = 8 limit=40427
[  133.228523][ T5780] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  133.522046][    T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  133.529704][ T7150] loop1: detected capacity change from 0 to 32768
[  133.560549][ T7150] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  133.607312][ T7150] XFS (loop1): Ending clean mount
[  133.735309][    T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  133.746245][ T5771] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  133.757103][    T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  133.769585][    T9] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  133.780401][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  133.788843][    T9] usb 5-1: SerialNumber: syz
[  134.035248][    T9] usb 5-1: 0:2 : does not exist
[  134.081918][    T9] usb 5-1: USB disconnect, device number 6
[  134.164414][ T5765] udevd[5765]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  134.525926][   T27] audit: type=1326 audit(1791210009.126:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7189 comm="syz.1.419" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983e39e199 code=0x7ffc0000
[  134.556453][   T27] audit: type=1326 audit(1791210009.126:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7189 comm="syz.1.419" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983e39e199 code=0x7ffc0000
[  134.589978][   T27] audit: type=1326 audit(1791210009.126:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7189 comm="syz.1.419" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983e39e199 code=0x7ffc0000
[  134.621863][   T27] audit: type=1326 audit(1791210009.126:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7189 comm="syz.1.419" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983e39e199 code=0x7ffc0000
[  134.653684][   T27] audit: type=1326 audit(1791210009.126:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7189 comm="syz.1.419" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f983e39e199 code=0x7ffc0000
[  134.708058][   T27] audit: type=1326 audit(1791210009.126:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7189 comm="syz.1.419" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983e39e199 code=0x7ffc0000
[  134.741399][   T27] audit: type=1326 audit(1791210009.126:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7189 comm="syz.1.419" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983e39e199 code=0x7ffc0000
[  134.791876][   T27] audit: type=1326 audit(1791210009.126:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7189 comm="syz.1.419" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983e39e199 code=0x7ffc0000
[  134.852173][   T27] audit: type=1326 audit(1791210009.126:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7189 comm="syz.1.419" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983e39e199 code=0x7ffc0000
[  134.901706][   T27] audit: type=1326 audit(1791210009.126:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7189 comm="syz.1.419" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f983e39e199 code=0x7ffc0000
[  135.331935][ T7208] loop4: detected capacity change from 0 to 8192
[  135.365912][ T7208] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  135.545828][ T7216] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  135.701362][ T7221] loop1: detected capacity change from 0 to 8
[  135.720361][ T7221] Dev loop1: unable to read RDB block 8
[  135.727920][ T7221]  loop1: unable to read partition table
[  135.734423][ T7221] loop1: partition table beyond EOD, truncated
[  135.740651][ T7221] loop_reread_partitions: partition scan of loop1 (úùƒå¡™‰ü�¾CêjÌ–ã¢P=ý?ã}X‹ºÐ	œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö�˜Èµ4FLQkÝŠ) failed (rc=-5)
[  135.916245][ T1035] Bluetooth: hci4: Frame reassembly failed (-84)
[  135.935044][ T7228] loop2: detected capacity change from 0 to 1024
[  135.976314][ T7228] EXT4-fs: Ignoring removed oldalloc option
[  135.993930][ T7228] EXT4-fs: Ignoring removed orlov option
[  136.026831][ T7228] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 ro without journal. Quota mode: writeback.
[  136.075509][ T7232] loop1: detected capacity change from 0 to 8192
[  136.097936][ T7232] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  136.112272][ T7232] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[  136.126781][ T7228] EXT4-fs error (device loop2): ext4_readdir:263: inode #12: block 80: comm syz.2.435: path /: bad entry in directory: rec_len is smaller than minimal - offset=296, inode=0, rec_len=0, size=1024 fake=0
[  136.146949][ T7232] REISERFS (device loop1): using ordered data mode
[  136.176198][ T7232] reiserfs: using flush barriers
[  136.219442][ T7232] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  136.255963][ T7237] loop4: detected capacity change from 0 to 512
[  136.272224][ T7232] REISERFS (device loop1): checking transaction log (loop1)
[  136.279910][ T5777] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 16: comm syz-executor: path /120/file1: bad entry in directory: rec_len is smaller than minimal - offset=876, inode=0, rec_len=0, size=1024 fake=0
[  136.295965][ T7237] EXT4-fs: inline encryption not supported
[  136.307710][ T7237] EXT4-fs: Ignoring removed nobh option
[  136.325923][ T5777] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 37: comm syz-executor: path /120/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0
[  136.351150][ T7237] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  136.379825][ T7237] EXT4-fs (loop4): 1 truncate cleaned up
[  136.388655][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  136.405514][ T7237] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  136.466072][ T7232] REISERFS (device loop1): Using tea hash to sort names
[  136.500170][ T7232] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2)
[  136.530849][ T6188] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  136.538487][ T7241] loop2: detected capacity change from 0 to 512
[  136.540560][ T7232] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  136.902440][ T7249] loop2: detected capacity change from 0 to 512
[  136.929367][ T7249] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  137.031924][ T5834] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  137.075241][ T2909] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  137.200136][ T7255] loop1: detected capacity change from 0 to 256
[  137.207542][ T7255] exfat: Deprecated parameter 'utf8'
[  137.216846][ T7255] exfat: Deprecated parameter 'namecase'
[  137.225703][ T5834] usb 5-1: Using ep0 maxpacket: 8
[  137.229211][ T7255] exfat: Deprecated parameter 'utf8'
[  137.240012][ T5834] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  137.267536][ T5834] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  137.291457][ T5834] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.305036][ T7255] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  137.318554][ T5834] usb 5-1: config 0 descriptor??
[  137.551806][ T5834] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  137.751261][ T5835] usb 5-1: USB disconnect, device number 7
[  137.942943][ T5779] Bluetooth: hci4: Entering manufacturer mode failed (-110)
[  137.943206][ T5783] Bluetooth: hci4: command 0xfc11 tx timeout
[  138.217651][ T5783] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  138.229634][ T5783] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  138.240612][ T5783] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  138.248637][ T5783] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  138.256657][ T5783] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  138.265341][ T5783] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  138.440050][ T7268] hsr0: entered promiscuous mode
[  138.451114][ T7268] netlink: 4 bytes leftover after parsing attributes in process `syz.4.453'.
[  138.460710][ T7268] hsr_slave_0: left promiscuous mode
[  138.467375][ T7268] hsr_slave_1: left promiscuous mode
[  138.510924][ T7268] hsr0 (unregistering): left promiscuous mode
[  138.615443][ T7261] chnl_net:caif_netlink_parms(): no params data found
[  138.793438][ T7261] bridge0: port 1(bridge_slave_0) entered blocking state
[  138.800568][ T7261] bridge0: port 1(bridge_slave_0) entered disabled state
[  138.823878][ T7261] bridge_slave_0: entered allmulticast mode
[  138.831395][ T7261] bridge_slave_0: entered promiscuous mode
[  138.842205][ T7261] bridge0: port 2(bridge_slave_1) entered blocking state
[  138.849389][ T7261] bridge0: port 2(bridge_slave_1) entered disabled state
[  138.856820][ T7261] bridge_slave_1: entered allmulticast mode
[  138.864452][ T7261] bridge_slave_1: entered promiscuous mode
[  138.899986][ T7261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  138.912901][ T7261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  138.945211][ T7285] netlink: 8 bytes leftover after parsing attributes in process `syz.4.459'.
[  138.971917][ T7285] netlink: 8 bytes leftover after parsing attributes in process `syz.4.459'.
[  138.991158][ T7261] team0: Port device team_slave_0 added
[  139.009817][ T7261] team0: Port device team_slave_1 added
[  139.077500][ T5835] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  139.078617][ T7261] batman_adv: batadv0: Adding interface: batadv_slave_0
[  139.114758][ T7261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  139.143772][ T5835] hid-generic 0000:0000:0000.0006: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  139.177699][ T7261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  139.213968][ T7261] batman_adv: batadv0: Adding interface: batadv_slave_1
[  139.220975][ T7261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  139.275059][ T7261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  139.365712][ T7261] hsr_slave_0: entered promiscuous mode
[  139.383307][ T7261] hsr_slave_1: entered promiscuous mode
[  139.391854][ T7261] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  139.400105][ T7261] Cannot create hsr debugfs directory
[  139.464841][ T5783] Bluetooth: hci5: command 0x1003 tx timeout
[  139.465274][ T5775] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  139.841379][ T7261] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  139.864706][ T7261] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  139.885924][ T7261] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  139.910661][ T7261] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  140.143681][ T7314] loop5: detected capacity change from 0 to 4095
[  140.161427][    C0] I/O error, dev loop5, sector 3840 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  140.170534][ T7261] 8021q: adding VLAN 0 to HW filter on device bond0
[  140.171719][    C0] I/O error, dev loop5, sector 3840 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  140.187496][    C0] Buffer I/O error on dev loop5, logical block 480, async page read
[  140.245623][    C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x84700 phys_seg 128 prio class 2
[  140.256779][    C1] I/O error, dev loop5, sector 1072 op 0x0:(READ) flags 0x84700 phys_seg 128 prio class 2
[  140.266948][    C1] I/O error, dev loop5, sector 2096 op 0x0:(READ) flags 0x80700 phys_seg 58 prio class 2
[  140.277074][ T7261] 8021q: adding VLAN 0 to HW filter on device team0
[  140.292570][    C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  140.301872][    C1] Buffer I/O error on dev loop5, logical block 0, async page read
[  140.329362][ T7318] loop2: detected capacity change from 0 to 24
[  140.341894][ T5775] Bluetooth: hci0: command tx timeout
[  140.350511][ T7318] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  140.350520][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  140.364361][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  140.381209][ T7318] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  140.393702][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  140.400876][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  140.482962][ T7322] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  140.673955][ T7326] loop3: detected capacity change from 0 to 256
[  141.092267][ T7261] 8021q: adding VLAN 0 to HW filter on device batadv0
[  141.194743][ T7343] loop2: detected capacity change from 0 to 1764
[  141.743952][ T7261] veth0_vlan: entered promiscuous mode
[  141.833616][ T7261] veth1_vlan: entered promiscuous mode
[  141.918928][ T7261] veth0_macvtap: entered promiscuous mode
[  141.947452][ T7261] veth1_macvtap: entered promiscuous mode
[  141.984460][ T7261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  142.012868][ T7261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  142.041721][ T7261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  142.091725][ T7261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  142.103649][ T7374] loop3: detected capacity change from 0 to 1024
[  142.116727][ T7261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  142.137297][ T7261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  142.150336][ T7261] batman_adv: batadv0: Interface activated: batadv_slave_0
[  142.203723][ T7261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  142.254974][ T7261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  142.265867][ T7261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  142.276915][ T7261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  142.288416][ T7261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  142.322004][ T7261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  142.351299][ T7261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  142.362687][ T7381] loop4: detected capacity change from 0 to 512
[  142.396055][ T7261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  142.396614][ T7381] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  142.422152][ T5775] Bluetooth: hci0: command tx timeout
[  142.437020][ T7261] batman_adv: batadv0: Interface activated: batadv_slave_1
[  142.444625][ T1135] hfsplus: b-tree write err: -5, ino 25
[  142.493899][ T7261] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  142.504967][ T7261] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  142.507698][ T1135] hfsplus: b-tree write err: -5, ino 4
[  142.513935][ T7261] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  142.513967][ T7261] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  142.527317][ T7383] loop2: detected capacity change from 0 to 256
[  142.565728][ T1135] hfsplus: b-tree write err: -5, ino 2
[  142.580940][ T1135] hfsplus: b-tree write err: -5, ino 26
[  142.619135][   T11] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  142.725325][ T7385] input: syz1 as /devices/virtual/input/input10
[  142.855365][ T7387] loop4: detected capacity change from 0 to 16
[  142.866680][ T2909] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  142.886012][ T2909] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  142.930579][ T7387] erofs: (device loop4): mounted with root inode @ nid 36.
[  143.015348][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  143.045157][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  143.500462][ T7408] loop3: detected capacity change from 0 to 8
[  143.546164][ T7408] SQUASHFS error: Unknown inode type 0 in squashfs_iget!
[  143.650434][ T7406] loop2: detected capacity change from 0 to 4096
[  143.693389][ T7406] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512).
[  143.870243][ T7406] ntfs3: loop2: Failed to initialize $Extend/$ObjId.
[  143.954834][ T7413] loop3: detected capacity change from 0 to 2048
[  144.108490][ T7413] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  144.188919][ T7413] ext4 filesystem being mounted at /119/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  144.403930][ T7420] FS-Cache: Cache "CacheFiles" added (type cachefiles)
[  144.442980][ T7420] CacheFiles: File cache on CacheFiles registered
[  144.469597][ T7412] CacheFiles: File cache on CacheFiles unregistering
[  144.497021][ T7412] FS-Cache: Withdrawing cache "CacheFiles" (0 objs)
[  144.503205][ T5775] Bluetooth: hci0: command tx timeout
[  144.604264][ T7400] loop5: detected capacity change from 0 to 40427
[  144.652786][ T7400] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  144.676818][ T7400] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  144.697187][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  144.706879][ T7400] F2FS-fs (loop5): invalid crc value
[  144.761799][ T7400] F2FS-fs (loop5): Found nat_bits in checkpoint
[  144.926541][ T7400] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  144.944697][ T7400] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  145.249176][ T7433] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  145.824512][ T7439] loop3: detected capacity change from 0 to 1024
[  145.849937][ T7439] EXT4-fs: Ignoring removed orlov option
[  145.920828][ T7439] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  145.954858][ T7444] loop2: detected capacity change from 0 to 64
[  146.054407][ T7439] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000)
[  146.109338][   T27] kauditd_printk_skb: 284 callbacks suppressed
[  146.109354][   T27] audit: type=1800 audit(1791210020.706:309): pid=7444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.520" name="file1" dev="loop2" ino=21 res=0 errno=0
[  146.168906][ T7444] syz.2.520: attempt to access beyond end of device
[  146.168906][ T7444] loop2: rw=34817, sector=57, nr_sectors = 8 limit=64
[  146.228376][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  146.410471][ T7450] netlink: 52 bytes leftover after parsing attributes in process `syz.5.516'.
[  146.441122][ T7450] bridge0: port 2(bridge_slave_1) entered disabled state
[  146.450193][ T7450] bridge0: port 1(bridge_slave_0) entered disabled state
[  146.581885][ T5775] Bluetooth: hci0: command tx timeout
[  146.905940][ T5834] usb 6-1: new low-speed USB device number 2 using dummy_hcd
[  146.924754][ T7449] F2FS-fs (loop2): invalid crc value
[  146.933021][ T7449] F2FS-fs (loop2): Found nat_bits in checkpoint
[  146.959389][    C1] TCP: tcp_parse_options: Illegal window scaling value 16 > 14 received
[  147.063618][ T7449] F2FS-fs (loop2): Start checkpoint disabled!
[  147.091495][ T7449] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  147.134510][ T5834] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  147.163096][ T5834] usb 6-1: config 0 has no interface number 0
[  147.166360][ T7449] syz.2.522: attempt to access beyond end of device
[  147.166360][ T7449] loop2: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  147.169241][ T5834] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  147.208693][ T5834] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  147.230665][ T5834] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  147.241075][ T5834] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  147.279476][ T5834] usb 6-1: config 0 descriptor??
[  147.327459][ T7458] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  147.357588][ T5834] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  147.420544][   T60] kworker/u4:4: attempt to access beyond end of device
[  147.420544][   T60] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  147.437550][   T60] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  147.446386][   T60] kworker/u4:4: attempt to access beyond end of device
[  147.446386][   T60] loop2: rw=2049, sector=41000, nr_sectors = 8 limit=40427
[  147.465126][   T60] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  147.656737][ T7482] overlayfs: overlay with incompat feature 'volatile' cannot be mounted
[  147.783923][ T5834] usb 6-1: USB disconnect, device number 2
[  147.825813][ T7485] netlink: 256 bytes leftover after parsing attributes in process `syz.4.536'.
[  148.124070][ T7496] set_capacity_and_notify: 1 callbacks suppressed
[  148.124087][ T7496] loop3: detected capacity change from 0 to 1764
[  148.552882][ T7517] sch_tbf: burst 65537 is lower than device lo mtu (65550) !
[  148.680719][ T7522] kernel read not supported for file /events/enable (pid: 7522 comm: syz.4.553)
[  148.934940][ T7536] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  149.343593][ T7555] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  149.347073][ T7557] loop4: detected capacity change from 0 to 64
[  149.377634][ T7554] gadgetfs: bound to dummy_udc driver
[  149.499012][ T6188] hfs: node 4:3 still has 1 user(s)!
[  150.157187][ T7577] loop3: detected capacity change from 0 to 512
[  150.178926][ T7579] loop2: detected capacity change from 0 to 512
[  150.204558][ T7579] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  150.259023][ T7579] EXT4-fs (loop2): 1 truncate cleaned up
[  150.271427][ T7585] FAULT_INJECTION: forcing a failure.
[  150.271427][ T7585] name failslab, interval 1, probability 0, space 0, times 0
[  150.276591][ T7577] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  150.334810][ T7579] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  150.360853][ T7585] CPU: 1 PID: 7585 Comm: syz.4.579 Not tainted syzkaller #0
[  150.368211][ T7585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  150.378294][ T7585] Call Trace:
[  150.381597][ T7585]  <TASK>
[  150.384544][ T7585]  dump_stack_lvl+0x18c/0x250
[  150.389265][ T7585]  ? show_regs_print_info+0x20/0x20
[  150.394497][ T7585]  ? load_image+0x420/0x420
[  150.399037][ T7585]  ? __lock_acquire+0x7eb0/0x7eb0
[  150.404351][ T7585]  should_fail_ex+0x394/0x4c0
[  150.409065][ T7585]  should_failslab+0x9/0x20
[  150.413605][ T7585]  slab_pre_alloc_hook+0x59/0x300
[  150.418647][ T7585]  ? sctp_endpoint_new+0x11d/0xa10
[  150.423760][ T7585]  __kmem_cache_alloc_node+0x53/0x250
[  150.429140][ T7585]  ? sctp_endpoint_new+0x11d/0xa10
[  150.434250][ T7585]  kmalloc_trace+0x2a/0xe0
[  150.438693][ T7585]  sctp_endpoint_new+0x11d/0xa10
[  150.443636][ T7585]  sctp_init_sock+0x95f/0x11f0
[  150.448404][ T7585]  sctp_v6_init_sock+0x16/0x70
[  150.453169][ T7585]  inet6_create+0xdf9/0x1160
[  150.457770][ T7585]  __sock_create+0x49e/0x940
[  150.462379][ T7585]  __sys_socket+0xd7/0x1b0
[  150.466800][ T7585]  __x64_sys_socket+0x7a/0x90
[  150.471480][ T7585]  do_syscall_64+0x55/0xb0
[  150.475908][ T7585]  ? clear_bhb_loop+0x40/0x90
[  150.480588][ T7585]  ? clear_bhb_loop+0x40/0x90
[  150.485272][ T7585]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  150.491169][ T7585] RIP: 0033:0x7f18d0f9e199
[  150.495591][ T7585] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  150.515285][ T7585] RSP: 002b:00007f18d1e81028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  150.523704][ T7585] RAX: ffffffffffffffda RBX: 00007f18d1225fa0 RCX: 00007f18d0f9e199
[  150.531678][ T7585] RDX: 0000000000000084 RSI: 0000000000000005 RDI: 000000000000000a
[  150.539650][ T7585] RBP: 00007f18d10350b8 R08: 0000000000000000 R09: 0000000000000000
[  150.547625][ T7585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  150.555594][ T7585] R13: 00007f18d1226038 R14: 00007f18d1225fa0 R15: 00007ffc35a045e8
[  150.563586][ T7585]  </TASK>
[  150.571926][ T7577] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  150.743293][ T7579] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  150.777843][ T7588] loop4: detected capacity change from 0 to 1024
[  150.791836][ T7579] EXT4-fs: Remounting file system with no journal so ignoring journalled data option
[  150.802480][ T7579] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000.
[  150.815373][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  150.843588][ T7588] EXT4-fs: Ignoring removed bh option
[  150.907128][ T7588] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  150.993886][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  151.003995][ T7592] Bluetooth: MGMT ver 1.22
[  151.008552][ T7592] Bluetooth: hci0: load_link_keys: too big key_count value 6144
[  151.044218][ T7588] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000.
[  151.150338][ T6188] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  151.189441][ T7598] netlink: 20 bytes leftover after parsing attributes in process `syz.3.584'.
[  151.260463][ T7600] netlink: 28 bytes leftover after parsing attributes in process `syz.5.585'.
[  151.297040][ T7600] netlink: 28 bytes leftover after parsing attributes in process `syz.5.585'.
[  151.640687][ T7619] loop5: detected capacity change from 0 to 764
[  151.682639][ T7619] rock: directory entry would overflow storage
[  151.690936][ T7619] rock: sig=0x5245, size=8, remaining=5
[  151.851929][  T789] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  151.911966][ T7616] loop3: detected capacity change from 0 to 32768
[  151.939676][ T7616] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  151.952724][ T5834] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  151.988497][ T7616] XFS (loop3): Ending clean mount
[  152.035173][ T7616] XFS (loop3): User initiated shutdown received.
[  152.042997][ T7616] XFS (loop3): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501).  Shutting down filesystem.
[  152.057493][  T789] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  152.068752][ T7616] XFS (loop3): Please unmount the filesystem and rectify the problem(s)
[  152.077358][  T789] usb 5-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice= 1.00
[  152.087131][  T789] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.147601][ T5780] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  152.156485][ T5834] usb 3-1: Using ep0 maxpacket: 32
[  152.176552][ T5834] usb 3-1: config index 0 descriptor too short (expected 29220, got 36)
[  152.193230][ T5834] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  152.210873][ T5834] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81
[  152.216707][  T789] rtsx_usb: probe of 5-1:1.0 failed with error -22
[  152.220711][ T5834] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  152.245720][ T5834] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  152.270560][ T5834] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  152.306477][ T5834] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  152.328588][  T789] usb 5-1: USB disconnect, device number 8
[  152.355961][ T5834] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.391439][ T5834] usb 3-1: config 0 descriptor??
[  152.593979][ T7635] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input11
[  152.643627][ T5834] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  152.749506][ T7641] loop3: detected capacity change from 0 to 256
[  152.887005][  T789] usb 3-1: USB disconnect, device number 5
[  152.907407][  T789] usblp0: removed
[  152.930297][ T7647] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  152.969437][ T7647] overlayfs: failed to look up (tracing) for ino (-66)
[  153.123346][   T42] usb 4-1: new full-speed USB device number 10 using dummy_hcd
[  153.189150][ T7655] bridge0: port 1(bridge_slave_0) entered disabled state
[  153.197829][ T7657] ieee802154 phy0 wpan0: encryption failed: -22
[  153.324854][   T42] usb 4-1: not running at top speed; connect to a high speed hub
[  153.328173][ T7663] loop5: detected capacity change from 0 to 164
[  153.338686][   T42] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  153.359492][   T42] usb 4-1: config 1 interface 0 altsetting 200 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  153.378624][   T42] usb 4-1: config 1 interface 0 has no altsetting 0
[  153.404823][   T42] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  153.419939][   T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.429981][   T42] usb 4-1: Product: syz
[  153.436275][   T42] usb 4-1: Manufacturer: syz
[  153.441020][   T42] usb 4-1: SerialNumber: syz
[  153.558281][  T789] usb 5-1: new full-speed USB device number 9 using dummy_hcd
[  153.681057][   T42] cdc_ether 4-1:1.0: skipping garbage
[  153.695336][   T42] usb 4-1: bad CDC descriptors
[  153.720253][   T42] usb 4-1: USB disconnect, device number 10
[  153.754602][  T789] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  153.763056][ T7676] loop5: detected capacity change from 0 to 64
[  153.771148][  T789] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  153.818445][  T789] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  153.839217][  T789] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  153.848721][  T789] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  153.871441][  T789] usb 5-1: config 0 descriptor??
[  154.036629][ T7684] overlayfs: upper fs does not support file handles, falling back to index=off.
[  154.140421][ T7687] netlink: 24 bytes leftover after parsing attributes in process `syz.2.620'.
[  154.294960][  T789] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving
[  154.323540][  T789] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  154.592870][ T7705] netlink: 'syz.5.629': attribute type 64 has an invalid length.
[  154.602141][ T7705] netlink: 'syz.5.629': attribute type 64 has an invalid length.
[  154.743249][ T2196] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  154.749707][ T7714] loop5: detected capacity change from 0 to 1024
[  154.781812][ T7714] EXT4-fs: Ignoring removed bh option
[  154.807482][ T7714] EXT4-fs (loop5): can't mount with data=, fs mounted w/o journal
[  154.931743][ T2196] usb 3-1: Using ep0 maxpacket: 8
[  154.939219][ T2196] usb 3-1: config index 0 descriptor too short (expected 292, got 36)
[  154.951885][ T2196] usb 3-1: config 0 has an invalid interface number: 65 but max is -1
[  154.970959][ T2196] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0
[  154.992538][ T2196] usb 3-1: config 0 has no interface number 0
[  154.998798][ T2196] usb 3-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  155.022956][ T2196] usb 3-1: config 0 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  155.041035][ T2196] usb 3-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  155.052950][ T2196] usb 3-1: config 0 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  155.067364][ T2196] usb 3-1: config 0 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  155.086886][ T2196] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=7c.eb
[  155.098594][ T2196] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  155.110164][ T2196] usb 3-1: config 0 descriptor??
[  155.132922][ T7699] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  155.142768][ T2196] hub 3-1:0.65: bad descriptor, ignoring hub
[  155.149819][ T2196] hub: probe of 3-1:0.65 failed with error -5
[  155.478235][ T7722] loop5: detected capacity change from 0 to 8192
[  155.478666][ T2196] usb 3-1: USB disconnect, device number 6
[  155.484732][    C0] xpad 3-1:0.65: xpad_irq_in - usb_submit_urb failed with result -19
[  155.484783][    C0] xpad 3-1:0.65: xpad_irq_out - usb_submit_urb failed with result -19
[  155.537129][ T7722] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  155.617846][ T7722] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal
[  155.652490][ T7722] REISERFS (device loop5): using ordered data mode
[  155.659052][ T7722] reiserfs: using flush barriers
[  155.695529][ T7722] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  155.736806][ T7722] REISERFS (device loop5): checking transaction log (loop5)
[  155.891865][ T7722] REISERFS (device loop5): Using tea hash to sort names
[  155.900688][ T7722] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage.
[  155.967801][ T7722] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2)
[  156.298509][ T7732] loop4: detected capacity change from 0 to 512
[  156.364996][ T7732] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  156.382023][ T7732] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  156.477617][    T9] usb 5-1: USB disconnect, device number 9
[  156.541994][ T5834] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  156.622701][ T6188] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  156.750761][ T5834] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  156.766312][ T5834] usb 6-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3
[  156.775442][ T5834] usb 6-1: Product: syz
[  156.779654][ T5834] usb 6-1: Manufacturer: syz
[  156.784573][ T5834] usb 6-1: SerialNumber: syz
[  156.801485][ T5834] usb 6-1: config 0 descriptor??
[  156.815234][ T5834] ch341 6-1:0.0: ch341-uart converter detected
[  157.230544][ T7762] loop4: detected capacity change from 0 to 8192
[  157.242180][ T7762] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  157.664360][ T5834] usb 6-1: failed to send control message: -71
[  157.671540][ T5834] ch341-uart: probe of ttyUSB0 failed with error -71
[  157.695499][ T5834] usb 6-1: USB disconnect, device number 3
[  157.710092][ T5834] ch341 6-1:0.0: device disconnected
[  157.744586][ T7774] netlink: 4 bytes leftover after parsing attributes in process `syz.2.655'.
[  157.883951][ T7770] loop4: detected capacity change from 0 to 4096
[  158.023139][ T7781] x86/PAT: syz.3.657:7781 freeing invalid memtype [mem 0xfe004000-0xfe008fff]
[  158.035562][ T7781] x86/PAT: syz.3.657:7781 freeing invalid memtype [mem 0xfe000000-0xfe003fff]
[  158.050023][ T7770] ntfs3: loop4: Failed to initialize $Extend/$ObjId.
[  158.649676][ T7802] Invalid argument reading file caps for ./file0
[  158.666471][ T5835] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  158.695204][ T5835] hid-generic 0000:0000:0000.0008: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  158.774723][ T7804] loop3: detected capacity change from 0 to 1024
[  158.822915][ T7804] hfsplus: failed to load root directory
[  159.401851][ T5813] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  159.418072][ T7818] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  159.469953][ T7818] overlayfs: failed to look up (tracing) for ino (-66)
[  159.570508][ T7820] loop2: detected capacity change from 0 to 512
[  159.612463][ T5813] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  159.638538][ T7820] EXT4-fs (loop2): 1 truncate cleaned up
[  159.644454][ T5813] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  159.644488][ T5813] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  159.644512][ T5813] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  159.656695][ T5813] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  159.689876][ T7820] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  159.691244][ T7807] loop4: detected capacity change from 0 to 32768
[  159.724849][ T7807] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.669 (7807)
[  159.750812][ T7807] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  159.781780][ T7807] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  159.791815][ T7807] BTRFS info (device loop4): setting nodatasum
[  159.798024][ T7807] BTRFS info (device loop4): force zlib compression, level 3
[  159.829991][ T7820] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.675: bg 0: block 465: padding at end of block bitmap is not set
[  159.852014][ T7807] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8)
[  159.854473][ T5813] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  159.881791][ T7807] BTRFS info (device loop4): use lzo compression, level 0
[  159.888983][ T7807] BTRFS info (device loop4): turning on flush-on-commit
[  159.910488][ T7820] EXT4-fs (loop2): Remounting filesystem read-only
[  159.919434][ T5813] usb 6-1: Manufacturer: syz
[  159.926474][ T7807] BTRFS info (device loop4): enabling auto defrag
[  159.954106][ T5813] usb 6-1: config 0 descriptor??
[  159.967455][ T7807] BTRFS info (device loop4): max_inline at 4096
[  160.017507][ T7807] BTRFS info (device loop4): using free space tree
[  160.086213][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  160.314125][ T7807] BTRFS info (device loop4): enabling ssd optimizations
[  160.390461][ T5813] appleir 0003:05AC:8243.0009: item fetching failed at offset 0/1
[  160.426222][ T5813] appleir 0003:05AC:8243.0009: parse failed
[  160.445517][ T5813] appleir: probe of 0003:05AC:8243.0009 failed with error -22
[  160.571707][   T27] audit: type=1800 audit(1791210035.166:310): pid=7807 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.669" name="file1" dev="loop4" ino=260 res=0 errno=0
[  160.613728][ T5813] usb 6-1: USB disconnect, device number 4
[  160.617130][ T7824] loop3: detected capacity change from 0 to 40427
[  160.682216][ T7824] F2FS-fs (loop3): invalid crc value
[  160.701430][ T7824] F2FS-fs (loop3): Found nat_bits in checkpoint
[  160.862926][ T7824] F2FS-fs (loop3): Start checkpoint disabled!
[  160.908669][ T7824] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  161.012798][ T7824] syz.3.676: attempt to access beyond end of device
[  161.012798][ T7824] loop3: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  161.093603][ T6188] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  161.264781][ T1135] kworker/u4:6: attempt to access beyond end of device
[  161.264781][ T1135] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  161.291328][ T1135] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  161.302311][ T1135] kworker/u4:6: attempt to access beyond end of device
[  161.302311][ T1135] loop3: rw=2049, sector=41000, nr_sectors = 8 limit=40427
[  161.319570][ T1135] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  161.353612][ T7842] loop2: detected capacity change from 0 to 32768
[  161.424867][ T7842] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  161.657167][ T7842] XFS (loop2): Ending clean mount
[  161.713555][ T7842] XFS (loop2): Quotacheck needed: Please wait.
[  161.921697][ T7842] XFS (loop2): Quotacheck: Done.
[  162.115684][ T5777] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  162.230085][ T7862] loop4: detected capacity change from 0 to 4096
[  162.262658][ T7862] EXT4-fs: Ignoring removed orlov option
[  162.288872][ T7862] EXT4-fs (loop4): Test dummy encryption mode enabled
[  162.379027][ T7858] loop5: detected capacity change from 0 to 40427
[  162.379483][ T7862] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  162.440082][ T7858] F2FS-fs (loop5): invalid crc value
[  162.478215][ T7858] F2FS-fs (loop5): Found nat_bits in checkpoint
[  162.700524][ T7858] F2FS-fs (loop5): Start checkpoint disabled!
[  162.734293][ T7858] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  162.742172][ T7862] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  162.811234][ T7862] EXT4-fs error (device loop4): __ext4_remount:6756: comm syz.4.678: Abort forced by user
[  162.832149][ T7862] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  162.921371][ T2909] kworker/u4:8: attempt to access beyond end of device
[  162.921371][ T2909] loop5: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[  162.941317][ T6188] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  162.943848][ T2909] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  162.966289][ T2909] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  163.000669][ T2909] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  163.069859][ T7875] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  163.098031][ T7875] overlayfs: failed to look up (tracing) for ino (-66)
[  163.642420][ T7882] loop3: detected capacity change from 0 to 4096
[  163.759071][ T7885] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  163.804890][ T7888] netlink: 40 bytes leftover after parsing attributes in process `syz.2.682'.
[  163.833423][ T7882] ntfs: volume version 3.1.
[  163.948626][ T7888] bond1: option mode: invalid value (69)
[  164.034507][ T7888] bond1 (unregistering): Released all slaves
[  164.217196][ T7895] loop5: detected capacity change from 0 to 1024
[  164.609737][ T7904] device-mapper: table: 248:0: target type multipath must appear alone in table
[  164.658498][ T7904] device-mapper: ioctl: error adding target to table
[  164.756005][ T7889] loop4: detected capacity change from 0 to 32768
[  164.827224][ T7889] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  164.932798][ T7889] XFS (loop4): Ending clean mount
[  165.032054][ T7926] FAULT_INJECTION: forcing a failure.
[  165.032054][ T7926] name failslab, interval 1, probability 0, space 0, times 0
[  165.071729][ T7926] CPU: 0 PID: 7926 Comm: syz.5.703 Not tainted syzkaller #0
[  165.079141][ T7926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  165.089223][ T7926] Call Trace:
[  165.092511][ T7926]  <TASK>
[  165.095446][ T7926]  dump_stack_lvl+0x18c/0x250
[  165.100149][ T7926]  ? show_regs_print_info+0x20/0x20
[  165.105362][ T7926]  ? load_image+0x420/0x420
[  165.109871][ T7926]  ? __might_sleep+0xe0/0xe0
[  165.114464][ T7926]  ? __lock_acquire+0x7eb0/0x7eb0
[  165.119495][ T7926]  should_fail_ex+0x394/0x4c0
[  165.124185][ T7926]  should_failslab+0x9/0x20
[  165.128691][ T7926]  slab_pre_alloc_hook+0x59/0x300
[  165.133812][ T7926]  kmem_cache_alloc_lru+0x4d/0x2b0
[  165.138928][ T7926]  ? __d_alloc+0x31/0x710
[  165.143270][ T7926]  __d_alloc+0x31/0x710
[  165.147457][ T7926]  ? alloc_fd+0x590/0x640
[  165.151812][ T7926]  d_alloc_pseudo+0x1d/0x70
[  165.156324][ T7926]  alloc_file_pseudo+0xe4/0x210
[  165.161186][ T7926]  ? fput+0x1a0/0x1a0
[  165.165180][ T7926]  ? alloc_fd+0x590/0x640
[  165.169523][ T7926]  sock_alloc_file+0xb7/0x280
[  165.174210][ T7926]  __sys_socket+0x140/0x1b0
[  165.178718][ T7926]  __x64_sys_socket+0x7a/0x90
[  165.183401][ T7926]  do_syscall_64+0x55/0xb0
[  165.187828][ T7926]  ? clear_bhb_loop+0x40/0x90
[  165.192504][ T7926]  ? clear_bhb_loop+0x40/0x90
[  165.197176][ T7926]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  165.203078][ T7926] RIP: 0033:0x7fb680b9e199
[  165.207497][ T7926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  165.227113][ T7926] RSP: 002b:00007fb681b1c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  165.235533][ T7926] RAX: ffffffffffffffda RBX: 00007fb680e25fa0 RCX: 00007fb680b9e199
[  165.243504][ T7926] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 000000000000002c
[  165.251501][ T7926] RBP: 00007fb680c350b8 R08: 0000000000000000 R09: 0000000000000000
[  165.259473][ T7926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  165.267439][ T7926] R13: 00007fb680e26038 R14: 00007fb680e25fa0 R15: 00007ffe483cfdb8
[  165.275427][ T7926]  </TASK>
[  165.418726][ T6188] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  165.602122][ T7934] netlink: 104 bytes leftover after parsing attributes in process `syz.5.709'.
[  165.661102][ T7932] loop2: detected capacity change from 0 to 8192
[  165.700770][ T7932] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  165.739068][ T7932] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal
[  165.748797][ T7932] REISERFS (device loop2): using ordered data mode
[  165.756473][ T7932] reiserfs: using flush barriers
[  165.776033][ T7932] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  165.808719][ T7932] REISERFS (device loop2): checking transaction log (loop2)
[  166.008853][ T7932] REISERFS (device loop2): Using tea hash to sort names
[  166.030429][ T7932] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  166.137005][ T7932] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2)
[  166.336998][ T5813] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  166.389441][ T7958] loop2: detected capacity change from 0 to 128
[  166.416367][ T7958] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  166.435745][ T7958] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  166.448836][ T7958] ext2 filesystem being mounted at /190/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  166.496442][ T5777] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  166.531880][ T5813] usb 6-1: Using ep0 maxpacket: 16
[  166.547239][ T5813] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  166.571809][ T5813] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  166.593461][ T5813] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[  166.631421][ T5813] usb 6-1: config 0 interface 0 has no altsetting 0
[  166.653864][ T5813] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  166.663278][ T5835] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  166.681761][ T5813] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  166.706677][ T5813] usb 6-1: config 0 descriptor??
[  166.740069][ T7969] netlink: 'syz.3.722': attribute type 3 has an invalid length.
[  166.807466][ T7973] netlink: 24 bytes leftover after parsing attributes in process `syz.3.724'.
[  166.846323][ T5835] usb 5-1: Using ep0 maxpacket: 8
[  166.854438][ T5835] usb 5-1: config index 0 descriptor too short (expected 292, got 36)
[  166.869538][ T5835] usb 5-1: config 0 has an invalid interface number: 65 but max is -1
[  166.879360][ T5835] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0
[  166.893918][ T5835] usb 5-1: config 0 has no interface number 0
[  166.898361][ T7977] IPv6: NLM_F_CREATE should be specified when creating new route
[  166.900129][ T5835] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  166.926023][ T7977] loop3: detected capacity change from 0 to 1024
[  166.963441][ T5835] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  166.977907][ T5835] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  167.008348][   T12] hfsplus: b-tree write err: -5, ino 25
[  167.016087][ T5835] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  167.021334][   T12] hfsplus: b-tree write err: -5, ino 4
[  167.037746][ T5835] usb 5-1: config 0 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  167.041985][   T12] hfsplus: b-tree write err: -5, ino 2
[  167.068346][ T5835] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=7c.eb
[  167.087676][ T5835] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  167.104080][ T5835] usb 5-1: config 0 descriptor??
[  167.123303][ T7960] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  167.132044][ T5835] hub 5-1:0.65: bad descriptor, ignoring hub
[  167.138083][ T5835] hub: probe of 5-1:0.65 failed with error -5
[  167.344564][ T5813] hid (null): report_id 289651734 is invalid
[  167.357480][ T5813] hid (null): report_id 0 is invalid
[  167.362956][ T5813] hid (null): unknown global tag 0x50
[  167.465615][ T5835] usb 5-1: USB disconnect, device number 10
[  167.471560][    C1] xpad 5-1:0.65: xpad_irq_in - usb_submit_urb failed with result -19
[  167.471592][    C1] xpad 5-1:0.65: xpad_irq_out - usb_submit_urb failed with result -19
[  167.573575][ T5813] usb 6-1: USB disconnect, device number 5
[  167.946793][ T7994] loop3: detected capacity change from 0 to 2048
[  167.993880][ T7994]  loop3: p2 p3 < > p4 < p5 >
[  168.011293][ T7994] loop3: partition table partially beyond EOD, truncated
[  168.027871][ T7994] loop3: p2 start 53543428 is beyond EOD, truncated
[  168.041798][ T7994] loop3: p3 start 4284289 is beyond EOD, truncated
[  168.063591][ T7994] loop3: p5 start 53543428 is beyond EOD, truncated
[  168.409203][ T7996] loop2: detected capacity change from 0 to 32768
[  168.442444][ T7996] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.734 (7996)
[  168.500669][ T7996] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  168.522530][ T7996] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  168.531296][ T7996] BTRFS info (device loop2): using free space tree
[  168.545855][   T27] audit: type=1326 audit(1791210043.136:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8006 comm="syz.3.738" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f000eb9e199 code=0x7ffc0000
[  168.581255][ T8009] loop4: detected capacity change from 0 to 512
[  168.598867][   T27] audit: type=1326 audit(1791210043.136:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8006 comm="syz.3.738" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f000eb9e199 code=0x7ffc0000
[  168.625425][   T27] audit: type=1326 audit(1791210043.146:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8006 comm="syz.3.738" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f000eb9e199 code=0x7ffc0000
[  168.637041][ T8009] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  168.663720][   T27] audit: type=1326 audit(1791210043.146:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8006 comm="syz.3.738" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f000eb9e199 code=0x7ffc0000
[  168.690300][ T8009] EXT4-fs (loop4): invalid journal inode
[  168.711839][ T8009] EXT4-fs (loop4): can't get journal size
[  168.775385][ T8009] EXT4-fs (loop4): 1 truncate cleaned up
[  168.781254][ T7996] BTRFS info (device loop2): enabling ssd optimizations
[  168.785421][   T27] audit: type=1326 audit(1791210043.146:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8006 comm="syz.3.738" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f000eb9e199 code=0x7ffc0000
[  168.791067][ T7996] BTRFS info (device loop2): auto enabling async discard
[  168.826189][ T8009] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  168.859302][   T27] audit: type=1326 audit(1791210043.186:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8006 comm="syz.3.738" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f000eb9e199 code=0x7ffc0000
[  168.884048][   T27] audit: type=1326 audit(1791210043.186:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8006 comm="syz.3.738" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f000eb9e199 code=0x7ffc0000
[  168.909907][   T27] audit: type=1326 audit(1791210043.186:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8006 comm="syz.3.738" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f000eb9e199 code=0x7ffc0000
[  168.934861][   T27] audit: type=1326 audit(1791210043.186:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8006 comm="syz.3.738" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f000eb9e199 code=0x7ffc0000
[  168.960012][   T27] audit: type=1326 audit(1791210043.186:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8006 comm="syz.3.738" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f000eb97f17 code=0x7ffc0000
[  169.146263][ T6188] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  169.419130][ T5777] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  169.959528][ T8045] loop3: detected capacity change from 0 to 4096
[  170.057530][ T8045] NILFS (loop3): invalid segment: Checksum error in segment payload
[  170.108686][ T8045] NILFS (loop3): trying rollback from an earlier position
[  170.219867][ T8045] NILFS (loop3): recovery complete
[  170.245838][ T8060] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  170.342771][ T8045] NILFS (loop3): nilfs_palloc_freev (ino=3): entry number 239 already freed
[  170.364771][ T8045] NILFS (loop3): error -2 preparing GC: cannot delete virtual blocks from DAT file
[  170.382884][ T8064] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  170.521151][ T8066] loop4: detected capacity change from 0 to 2048
[  170.542505][ T8066] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  170.571787][ T8066] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  170.610304][ T8066] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4
[  170.643658][ T8066] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  171.002072][ T5834] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  171.038878][ T8070] loop5: detected capacity change from 0 to 32768
[  171.063568][ T8070] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  171.114291][ T8070] XFS (loop5): Ending clean mount
[  171.158824][ T5813] XFS (loop5): Metadata CRC error detected at xfs_agfl_read_verify+0x18d/0x250, xfs_agfl block 0x3 
[  171.172186][ T5813] XFS (loop5): Unmount and run xfs_repair
[  171.177978][ T5813] XFS (loop5): First 128 bytes of corrupted metadata buffer:
[  171.185881][ T5813] 00000000: 58 41 46 4c 00 00 00 00 d7 dc 42 4e 07 00 00 00  XAFL......BN....
[  171.196827][ T5813] 00000010: 9f 91 9c b7 20 0a 10 1d 00 00 00 00 00 00 00 00  .... ...........
[  171.206185][ T5834] usb 5-1: Using ep0 maxpacket: 32
[  171.211505][ T5813] 00000020: e6 0a 0e bb ff ff ff ff 00 00 0b f0 00 00 0b f1  ................
[  171.223909][ T5813] 00000030: 00 00 0b f2 00 00 0b f3 00 00 0b f4 00 00 0b f5  ................
[  171.235016][ T5813] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  171.246196][ T5834] usb 5-1: too many endpoints for config 0 interface 0 altsetting 252: 223, using maximum allowed: 30
[  171.257662][ T5813] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  171.266645][ T5834] usb 5-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 223
[  171.279858][ T5813] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  171.288812][ T5834] usb 5-1: config 0 interface 0 has no altsetting 0
[  171.295471][ T5813] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  171.305444][ T5834] usb 5-1: New USB device found, idVendor=056a, idProduct=00c5, bcdDevice= 0.00
[  171.314612][ T5834] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  171.319002][ T8070] XFS (loop5): metadata I/O error in "xfs_alloc_read_agfl+0x223/0x400" at daddr 0x3 len 1 error 74
[  171.324947][ T5834] usb 5-1: config 0 descriptor??
[  171.350780][ T8070] XFS (loop5): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x519/0x8b0 (fs/xfs/xfs_trans_buf.c:296).  Shutting down filesystem.
[  171.366175][ T8070] XFS (loop5): Please unmount the filesystem and rectify the problem(s)
[  171.406170][ T7261] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  171.794437][ T5834] wacom 0003:056A:00C5.000B: ignoring exceeding usage max
[  171.810857][ T5834] wacom 0003:056A:00C5.000B: unknown main item tag 0xe
[  171.852564][ T5834] wacom 0003:056A:00C5.000B: hidraw0: USB HID v0.81 Device [HID 056a:00c5] on usb-dummy_hcd.4-1/input0
[  172.092333][ T5834] usb 5-1: USB disconnect, device number 11
[  172.228302][ T8093] loop5: detected capacity change from 0 to 32768
[  172.255585][ T8093] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.764 (8093)
[  172.330272][ T8093] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  172.342204][ T8093] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[  172.363057][ T8093] BTRFS info (device loop5): setting nodatasum
[  172.374454][ T8093] BTRFS info (device loop5): force zlib compression, level 3
[  172.384934][ T8093] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_LZO (0x8)
[  172.401947][ T8093] BTRFS info (device loop5): use lzo compression, level 0
[  172.415698][ T8093] BTRFS info (device loop5): turning on flush-on-commit
[  172.434310][ T8093] BTRFS info (device loop5): enabling auto defrag
[  172.451081][ T8093] BTRFS info (device loop5): max_inline at 4096
[  172.464765][ T8093] BTRFS info (device loop5): using free space tree
[  172.516161][ T8093] BTRFS info (device loop5): enabling ssd optimizations
[  172.604719][ T8128] loop2: detected capacity change from 0 to 64
[  172.905993][ T8133] tun0: tun_chr_ioctl cmd 2147767511
[  172.924938][ T8133] tun0: tun_chr_ioctl cmd 35108
[  172.965379][ T7261] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  173.265604][ T8143] overlayfs: overlapping lowerdir path
[  173.406624][ T8147] loop3: detected capacity change from 0 to 128
[  173.421825][ T5834] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  173.465406][ T8147] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  173.641747][ T5834] usb 3-1: Using ep0 maxpacket: 32
[  173.663592][ T5834] usb 3-1: config 0 has an invalid interface number: 51 but max is 0
[  173.691957][ T5834] usb 3-1: config 0 has no interface number 0
[  173.708609][ T5834] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  173.733326][ T5834] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  173.741418][ T5834] usb 3-1: Product: syz
[  173.750557][ T5834] usb 3-1: Manufacturer: syz
[  173.755683][ T5834] usb 3-1: SerialNumber: syz
[  173.763672][ T5834] usb 3-1: config 0 descriptor??
[  173.773972][ T5834] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  173.907208][ T8164] FAULT_INJECTION: forcing a failure.
[  173.907208][ T8164] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  173.920811][ T8164] CPU: 1 PID: 8164 Comm: syz.4.788 Not tainted syzkaller #0
[  173.928141][ T8164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  173.938224][ T8164] Call Trace:
[  173.941535][ T8164]  <TASK>
[  173.944488][ T8164]  dump_stack_lvl+0x18c/0x250
[  173.949211][ T8164]  ? show_regs_print_info+0x20/0x20
[  173.954446][ T8164]  ? load_image+0x420/0x420
[  173.958995][ T8164]  ? __might_fault+0xaa/0x120
[  173.963699][ T8164]  ? __lock_acquire+0x7eb0/0x7eb0
[  173.968764][ T8164]  ? __virt_addr_valid+0x10c/0x380
[  173.973920][ T8164]  should_fail_ex+0x394/0x4c0
[  173.978640][ T8164]  _copy_from_user+0x2f/0xe0
[  173.983267][ T8164]  __se_sys_memfd_create+0x295/0x660
[  173.988587][ T8164]  do_syscall_64+0x55/0xb0
[  173.993036][ T8164]  ? clear_bhb_loop+0x40/0x90
[  173.997735][ T8164]  ? clear_bhb_loop+0x40/0x90
[  174.002426][ T8164]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  174.008386][ T8164] RIP: 0033:0x7f18d0f9e199
[  174.012814][ T8164] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  174.032443][ T8164] RSP: 002b:00007f18d1e81028 EFLAGS: 00000246 ORIG_RAX: 000000000000013f
[  174.040866][ T8164] RAX: ffffffffffffffda RBX: 00007f18d1225fa0 RCX: 00007f18d0f9e199
[  174.048839][ T8164] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000200000000040
[  174.056810][ T8164] RBP: 00007f18d10350b8 R08: 0000000000000000 R09: 0000000000000000
[  174.064784][ T8164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  174.072755][ T8164] R13: 00007f18d1226038 R14: 00007f18d1225fa0 R15: 00007ffc35a045e8
[  174.080743][ T8164]  </TASK>
[  174.085510][ T5834] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  174.099637][ T5834] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  174.438624][ T8179] loop3: detected capacity change from 0 to 2048
[  174.445223][ T8173] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size
[  174.475445][ T8179] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  174.489628][    C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71
[  174.508975][ T5834] usb 3-1: USB disconnect, device number 7
[  174.539615][ T5834] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  174.588195][ T5834] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  174.631405][ T5834] quatech2 3-1:0.51: device disconnected
[  175.153547][ T8203] netlink: 256 bytes leftover after parsing attributes in process `syz.2.802'.
[  175.377391][ T8213] loop4: detected capacity change from 0 to 1024
[  175.458698][ T8213] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  175.487180][ T8213] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  175.532899][ T8213] EXT4-fs error (device loop4): ext4_map_blocks:720: inode #15: comm syz.4.806: lblock 0 mapped to illegal pblock 0 (length 1)
[  175.553255][ T8213] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  175.565725][ T8213] EXT4-fs (loop4): This should not happen!! Data will be lost
[  175.565725][ T8213] 
[  175.577986][ T8213] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #15: comm syz.4.806: lblock 0 mapped to illegal pblock 0 (length 1)
[  175.596018][ T8213] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.806: bg 0: block 112: padding at end of block bitmap is not set
[  175.616711][ T8213] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28
[  175.634031][ T8213] EXT4-fs (loop4): This should not happen!! Data will be lost
[  175.634031][ T8213] 
[  175.644104][ T8213] EXT4-fs (loop4): Total free blocks count 0
[  175.651220][ T8213] EXT4-fs (loop4): Free/Dirty block details
[  175.657352][ T8213] EXT4-fs (loop4): free_blocks=0
[  175.663158][ T8213] EXT4-fs (loop4): dirty_blocks=64
[  175.668323][ T8213] EXT4-fs (loop4): Block reservation details
[  175.759950][ T8228] loop4: detected capacity change from 0 to 512
[  175.776896][ T8228] EXT4-fs error (device loop4): ext4_orphan_get:1408: inode #15: comm syz.4.810: iget: bad i_size value: 38620345925642
[  175.795893][ T8228] EXT4-fs error (device loop4): ext4_orphan_get:1413: comm syz.4.810: couldn't read orphan inode 15 (err -117)
[  175.808071][ T5813] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  175.819376][ T8228] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  175.926902][ T3487] EXT4-fs error (device loop4): ext4_validate_block_bitmap:430: comm kworker/u4:10: bg 0: block 5: invalid block bitmap
[  175.960017][ T3487] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 131587 with max blocks 1 with error 28
[  175.981270][ T3487] EXT4-fs (loop4): This should not happen!! Data will be lost
[  175.981270][ T3487] 
[  175.991504][ T3487] EXT4-fs (loop4): Total free blocks count 0
[  176.004181][ T5813] usb 3-1: Using ep0 maxpacket: 32
[  176.010715][ T3487] EXT4-fs (loop4): Free/Dirty block details
[  176.020688][ T3487] EXT4-fs (loop4): free_blocks=0
[  176.026261][ T5813] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  176.041713][ T3487] EXT4-fs (loop4): dirty_blocks=1
[  176.046806][ T3487] EXT4-fs (loop4): Block reservation details
[  176.055167][ T5813] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  176.070574][ T3487] EXT4-fs (loop4): i_reserved_data_blocks=1
[  176.078002][ T5813] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  176.094460][ T5813] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  176.107684][ T5813] usb 3-1: config 0 descriptor??
[  176.107893][ T6188] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  176.381348][ T8236] Invalid argument reading file caps for ./file0
[  176.438327][ T8231] loop3: detected capacity change from 0 to 32768
[  176.505692][ T8231] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  176.559645][ T5813] savu 0003:1E7D:2D5A.000C: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0
[  176.716024][ T8231] XFS (loop3): Ending clean mount
[  176.740038][ T8231] XFS (loop3): Quotacheck needed: Please wait.
[  176.829272][ T5813] usb 3-1: USB disconnect, device number 8
[  176.840425][ T8231] XFS (loop3): Quotacheck: Done.
[  177.001612][ T8234] loop4: detected capacity change from 0 to 32768
[  177.029327][ T8234] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.812 (8234)
[  177.059462][ T8234] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  177.071064][ T8234] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  177.081939][ T8234] BTRFS info (device loop4): setting nodatasum
[  177.088166][ T8234] BTRFS info (device loop4): force zlib compression, level 3
[  177.100817][ T8234] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8)
[  177.109883][ T5780] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  177.126665][ T8234] BTRFS info (device loop4): use lzo compression, level 0
[  177.136059][ T8234] BTRFS info (device loop4): turning on flush-on-commit
[  177.147413][ T8255] loop5: detected capacity change from 0 to 1024
[  177.175688][ T8234] BTRFS info (device loop4): enabling auto defrag
[  177.191051][ T8234] BTRFS info (device loop4): max_inline at 4096
[  177.221520][ T8234] BTRFS info (device loop4): using free space tree
[  177.483250][   T60] hfsplus: b-tree write err: -5, ino 3
[  177.489506][ T8234] BTRFS info (device loop4): enabling ssd optimizations
[  177.849377][ T6188] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  178.688625][ T8311] loop2: detected capacity change from 0 to 256
[  179.169828][ T8331] loop4: detected capacity change from 0 to 2048
[  179.242255][ T8331] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  179.514100][ T8335] loop3: detected capacity change from 0 to 4096
[  179.537537][ T8335] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  179.567140][ T8335] EXT4-fs (loop3): Test dummy encryption mode enabled
[  179.599284][ T8335] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  179.706112][ T8327] loop5: detected capacity change from 0 to 32768
[  179.723521][ T8327] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.840 (8327)
[  179.770134][ T8327] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  179.807124][ T8327] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  179.823320][ T8327] BTRFS info (device loop5): setting nodatacow, compression disabled
[  179.847787][ T8327] BTRFS info (device loop5): setting datasum, datacow enabled
[  179.874167][ T8327] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  179.897950][ T8327] BTRFS info (device loop5): force zstd compression, level 3
[  179.913785][ T8327] BTRFS info (device loop5): turning on sync discard
[  179.924398][ T8327] BTRFS warning (device loop5): excessive commit interval 43283
[  179.933434][ T8327] BTRFS info (device loop5): enabling ssd optimizations
[  179.940737][ T8327] BTRFS info (device loop5): using spread ssd allocation scheme
[  179.950996][ T8327] BTRFS info (device loop5): not using ssd optimizations
[  179.958705][ T8327] BTRFS info (device loop5): not using spread ssd allocation scheme
[  179.968321][ T8327] BTRFS info (device loop5): using free space tree
[  179.975498][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  180.218651][   T27] kauditd_printk_skb: 194 callbacks suppressed
[  180.218665][   T27] audit: type=1800 audit(1791210054.816:515): pid=8327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.840" name="file1" dev="loop5" ino=260 res=0 errno=0
[  180.328856][ T8327] BTRFS info (device loop5): balance: start -sconvert=raid0,usage=0..1342177280
[  180.407225][ T8327] BTRFS info (device loop5): relocating block group 1048576 flags system
[  180.517910][ T8373] overlayfs: upper fs does not support file handles, falling back to index=off.
[  180.572059][ T8327] BTRFS info (device loop5): balance: ended with status: 0
[  180.675360][ T7261] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  180.739432][ T5834] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  180.969313][ T5834] usb 5-1: Using ep0 maxpacket: 32
[  180.979793][ T5834] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  181.008692][ T5834] usb 5-1: config 0 interface 0 has no altsetting 0
[  181.016693][ T5834] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
[  181.039092][ T5834] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.050999][ T5834] usb 5-1: config 0 descriptor??
[  181.490138][ T5834] corsair-cpro 0003:1B1C:0C10.000D: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.4-1/input0
[  181.680067][ T8395] loop5: detected capacity change from 0 to 32768
[  181.713636][ T8395] JBD2: Ignoring recovery information on journal
[  181.758596][ T8395] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  181.810491][ T8395] 
[  181.812858][ T8395] ======================================================
[  181.819900][ T8395] WARNING: possible circular locking dependency detected
[  181.826948][ T8395] syzkaller #0 Not tainted
[  181.831375][ T8395] ------------------------------------------------------
[  181.838403][ T8395] syz.5.862/8395 is trying to acquire lock:
[  181.844308][ T8395] ffff88806f85b498 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}, at: __ocfs2_move_extents_range+0x1a35/0x3450
[  181.857575][ T8395] 
[  181.857575][ T8395] but task is already holding lock:
[  181.864962][ T8395] ffff88805b626d98 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}, at: __ocfs2_move_extents_range+0x1323/0x3450
[  181.878234][ T8395] 
[  181.878234][ T8395] which lock already depends on the new lock.
[  181.878234][ T8395] 
[  181.888736][ T8395] 
[  181.888736][ T8395] the existing dependency chain (in reverse order) is:
[  181.897753][ T8395] 
[  181.897753][ T8395] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}:
[  181.908286][ T8395]        down_write+0x97/0x200
[  181.913061][ T8395]        __ocfs2_flush_truncate_log+0x352/0x1130
[  181.919385][ T8395]        ocfs2_flush_truncate_log+0x4f/0x60
[  181.925277][ T8395]        ocfs2_sync_fs+0x11d/0x330
[  181.930381][ T8395]        sync_filesystem+0x1c2/0x220
[  181.935661][ T8395]        generic_shutdown_super+0x6f/0x2b0
[  181.941461][ T8395]        kill_block_super+0x44/0x90
[  181.946656][ T8395]        deactivate_locked_super+0x97/0x100
[  181.952542][ T8395]        cleanup_mnt+0x3d7/0x460
[  181.957473][ T8395]        task_work_run+0x1d4/0x260
[  181.962584][ T8395]        exit_to_user_mode_loop+0xe6/0x110
[  181.968389][ T8395]        exit_to_user_mode_prepare+0xee/0x180
[  181.974452][ T8395]        syscall_exit_to_user_mode+0x1a/0x50
[  181.980429][ T8395]        do_syscall_64+0x61/0xb0
[  181.985360][ T8395]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  181.991779][ T8395] 
[  181.991779][ T8395] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}:
[  182.002308][ T8395]        __lock_acquire+0x3a07/0x7eb0
[  182.007692][ T8395]        lock_acquire+0x19e/0x420
[  182.012711][ T8395]        down_write+0x97/0x200
[  182.017469][ T8395]        __ocfs2_move_extents_range+0x1a35/0x3450
[  182.023883][ T8395]        ocfs2_move_extents+0x3f9/0xa10
[  182.029426][ T8395]        ocfs2_ioctl_move_extents+0x4db/0x6e0
[  182.035493][ T8395]        ocfs2_ioctl+0x199/0x7e0
[  182.040430][ T8395]        __se_sys_ioctl+0xfd/0x170
[  182.045537][ T8395]        do_syscall_64+0x55/0xb0
[  182.050475][ T8395]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  182.056896][ T8395] 
[  182.056896][ T8395] other info that might help us debug this:
[  182.056896][ T8395] 
[  182.067111][ T8395]  Possible unsafe locking scenario:
[  182.067111][ T8395] 
[  182.074552][ T8395]        CPU0                    CPU1
[  182.079902][ T8395]        ----                    ----
[  182.085254][ T8395]   lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5);
[  182.092544][ T8395]                                lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6);
[  182.102349][ T8395]                                lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5);
[  182.112156][ T8395]   lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6);
[  182.119440][ T8395] 
[  182.119440][ T8395]  *** DEADLOCK ***
[  182.119440][ T8395] 
[  182.127833][ T8395] 5 locks held by syz.5.862/8395:
[  182.132843][ T8395]  #0: ffff888026862418 (sb_writers#31){.+.+}-{0:0}, at: mnt_want_write_file+0x63/0x200
[  182.142599][ T8395]  #1: ffff88806f85c2d8 (&sb->s_type->i_mutex_key#33){+.+.}-{3:3}, at: ocfs2_move_extents+0x1a0/0xa10
[  182.153571][ T8395]  #2: ffff88806f85bf60 (&oi->ip_alloc_sem){+.+.}-{3:3}, at: ocfs2_move_extents+0x3ec/0xa10
[  182.163750][ T8395]  #3: ffff88805b621818 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x171/0x44a0
[  182.177428][ T8395]  #4: ffff88805b626d98 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}, at: __ocfs2_move_extents_range+0x1323/0x3450
[  182.191113][ T8395] 
[  182.191113][ T8395] stack backtrace:
[  182.197019][ T8395] CPU: 0 PID: 8395 Comm: syz.5.862 Not tainted syzkaller #0
[  182.204398][ T8395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  182.214451][ T8395] Call Trace:
[  182.217726][ T8395]  <TASK>
[  182.220650][ T8395]  dump_stack_lvl+0x18c/0x250
[  182.225335][ T8395]  ? load_image+0x420/0x420
[  182.229836][ T8395]  ? show_regs_print_info+0x20/0x20
[  182.235045][ T8395]  ? print_circular_bug+0x12b/0x1a0
[  182.240243][ T8395]  check_noncircular+0x2fc/0x400
[  182.245185][ T8395]  ? look_up_lock_class+0x75/0x140
[  182.250295][ T8395]  ? print_deadlock_bug+0x5d0/0x5d0
[  182.255490][ T8395]  ? lockdep_lock+0xf5/0x230
[  182.260074][ T8395]  ? ocfs2_read_blocks+0x110a/0x1450
[  182.265369][ T8395]  ? _find_first_zero_bit+0xd6/0x100
[  182.270649][ T8395]  __lock_acquire+0x3a07/0x7eb0
[  182.275496][ T8395]  ? ocfs2_refresh_inode+0x900/0x900
[  182.280811][ T8395]  ? verify_lock_unused+0x140/0x140
[  182.286007][ T8395]  ? ocfs2_read_inode_block+0x124/0x190
[  182.291557][ T8395]  ? ocfs2_read_inode_block_full+0x1a0/0x1a0
[  182.297578][ T8395]  ? do_raw_spin_unlock+0x121/0x230
[  182.302809][ T8395]  lock_acquire+0x19e/0x420
[  182.307357][ T8395]  ? __ocfs2_move_extents_range+0x1a35/0x3450
[  182.313447][ T8395]  ? ocfs2_downconvert_lock+0x4c0/0x4c0
[  182.319014][ T8395]  ? ocfs2_get_system_file_inode+0x1f9/0x820
[  182.325013][ T8395]  ? __might_sleep+0xe0/0xe0
[  182.329606][ T8395]  ? read_lock_is_recursive+0x20/0x20
[  182.334985][ T8395]  ? ocfs2_fast_symlink_read_folio+0x550/0x550
[  182.341134][ T8395]  ? ocfs2_lock_meta_allocator_move_extents+0x3e5/0x5a0
[  182.348074][ T8395]  down_write+0x97/0x200
[  182.352316][ T8395]  ? __ocfs2_move_extents_range+0x1a35/0x3450
[  182.358377][ T8395]  ? down_read_killable+0x340/0x340
[  182.363590][ T8395]  __ocfs2_move_extents_range+0x1a35/0x3450
[  182.369510][ T8395]  ? ocfs2_find_victim_alloc_group+0x9f0/0x9f0
[  182.375682][ T8395]  ? ocfs2_inode_lock_full_nested+0x14d/0x1b10
[  182.381836][ T8395]  ? verify_lock_unused+0x140/0x140
[  182.387030][ T8395]  ? ocfs2_read_inode_block+0x124/0x190
[  182.392578][ T8395]  ? ocfs2_read_inode_block_full+0x1a0/0x1a0
[  182.398568][ T8395]  ? do_raw_spin_unlock+0x121/0x230
[  182.403775][ T8395]  ? ocfs2_downconvert_lock+0x4c0/0x4c0
[  182.409318][ T8395]  ? __might_sleep+0xe0/0xe0
[  182.413906][ T8395]  ? read_lock_is_recursive+0x20/0x20
[  182.419279][ T8395]  ? ocfs2_move_extents+0x178/0xa10
[  182.424486][ T8395]  ? down_write+0x16e/0x200
[  182.428983][ T8395]  ? down_read_killable+0x340/0x340
[  182.434180][ T8395]  ? do_raw_spin_unlock+0x121/0x230
[  182.439375][ T8395]  ocfs2_move_extents+0x3f9/0xa10
[  182.444399][ T8395]  ? ocfs2_validate_and_adjust_move_goal+0x460/0x460
[  182.451072][ T8395]  ? __might_fault+0xaa/0x120
[  182.455754][ T8395]  ? __lock_acquire+0x7eb0/0x7eb0
[  182.460775][ T8395]  ? __brelse+0x59/0x90
[  182.464941][ T8395]  ? ocfs2_validate_and_adjust_move_goal+0x330/0x460
[  182.471708][ T8395]  ocfs2_ioctl_move_extents+0x4db/0x6e0
[  182.477261][ T8395]  ? ocfs2_dump_resv+0x550/0x550
[  182.482204][ T8395]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  182.487670][ T8395]  ocfs2_ioctl+0x199/0x7e0
[  182.492086][ T8395]  ? ocfs2_fileattr_set+0x800/0x800
[  182.497290][ T8395]  ? __fget_files+0x28/0x460
[  182.501889][ T8395]  ? bpf_lsm_file_ioctl+0x9/0x10
[  182.506824][ T8395]  ? security_file_ioctl+0x80/0xa0
[  182.511935][ T8395]  ? ocfs2_fileattr_set+0x800/0x800
[  182.517151][ T8395]  __se_sys_ioctl+0xfd/0x170
[  182.521761][ T8395]  do_syscall_64+0x55/0xb0
[  182.526189][ T8395]  ? clear_bhb_loop+0x40/0x90
[  182.530863][ T8395]  ? clear_bhb_loop+0x40/0x90
[  182.535627][ T8395]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  182.541545][ T8395] RIP: 0033:0x7fb680b9e199
[  182.545962][ T8395] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  182.565580][ T8395] RSP: 002b:00007fb681b1c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  182.573997][ T8395] RAX: ffffffffffffffda RBX: 00007fb680e25fa0 RCX: 00007fb680b9e199
[  182.581971][ T8395] RDX: 00002000000000c0 RSI: 0000000040406f06 RDI: 0000000000000005
[  182.589934][ T8395] RBP: 00007fb680c350b8 R08: 0000000000000000 R09: 0000000000000000
[  182.597900][ T8395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  182.605863][ T8395] R13: 00007fb680e26038 R14: 00007fb680e25fa0 R15: 00007ffe483cfdb8
[  182.613850][ T8395]  </TASK>
[  182.639769][ T5834] corsair-cpro: probe of 0003:1B1C:0C10.000D failed with error -71
[  182.663199][ T5834] usb 5-1: USB disconnect, device number 12
[  182.758388][ T7261] ocfs2: Unmounting device (7,5) on (node local)