last executing test programs:

2m37.261424877s ago: executing program 2 (id=152):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0xaa001)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000480)=[<r1=>0x0], 0x1})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000400)=[0x0, <r3=>0x0], &(0x7f0000000280), 0x2, r2})
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000040)={0x0, 0x1, &(0x7f00000000c0)=[r2], &(0x7f0000000280), &(0x7f0000000300)=[r3], &(0x7f0000000340)})

2m36.143912595s ago: executing program 2 (id=162):
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x0)
setresuid(0xee01, 0x0, 0xffffffffffffffff)
r0 = syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r1)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
syz_open_procfs(r0, &(0x7f0000000580)='fd/3\x00')

2m35.721615822s ago: executing program 2 (id=165):
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x4480, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]})
chdir(&(0x7f00000003c0)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)

2m35.410805706s ago: executing program 2 (id=167):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0xa00008, &(0x7f0000000100), 0x1, 0x7c8, &(0x7f0000001280)="$eJzs3c9rG1ceAPDvyD/jZNdeWNjNngwLu4YQeZ31JrsQ2JQeSqGBQHtOYmTFpJatYMkhNoYklEIvPbT0UGguOTdtesuhl/64tpf+DT2UhLR1QlN6KC4jjRL5hxw7seQ0/nxgrPdmRnrvO2/mzfPMIAWwZw2nf3IRByN60uRgNj+JbEZ0R5yor/dgeamQTkmsrLz6Q1Jb5/7yUiGa3pPan2X+GhFfvBlxKLe+3MrC4vREqVScy/Kj1ZkLo5WFxcPnZyamilPF2aNj4+NHjv3n2NGdi/WnrxcP3HnnpX9+fOKXN/5y8+0vkzgRB7JlzXHslOEYzrZJT7oJV3lxpwvbZcluV4Ankh6aXfWjPA7GYHRt0pL/72jNAIB2uRwRKwDAHpM4/wPAHtO4DnB/eanQmKJ+P+fK464dHG/3xYkOuPtCRPTX42/c36wv6a7fs/umv3YfdOB+UrtH0pBExNAOlD8cEddunb6RTtGm+5AAG7lyNSLODg2v7f/THm7tMwvb9a8trDPcSHxaf9H/Qed8lo5//rt+/BeRy47//trfteOfvuZj9yms/Yz1x3/u9qpszw4U2iQd/x1verbtQVP8maGuLPeH2pivJzl3vlRM+7Y/RsRI9PSl+bFNyhi59+u9Vsuax38/vvv6h2n56eujNXK3u/tWv2dyojrxNDE3u3s14m/dG8WfPGz/pMX499QWy3j5f2990GpZGn8ab2NaH397rVyP+MeG7f/oOahk0+cTR2u7w2hjp9hg//zk2/cHWpXf3P7XbqUlLRUa/wt0Qtr+A5vHP5Q0P69Z2X4ZX10f/LzVstXxn76Rlr86/o33/97ktVq6N5t3aaJanRuL6E1eWT//yKP3NvKN9dP4R/6+Kv6sBXOb7v/pSmez9MpjHn7svvP9R08ef3ul8U+m7Z9kQTy2/befuPlguqtV+Vtr//FaaiSbs77/6173uVut4FNtPAAAAAAAAAAAAAAAAAAAAAAAAADYolxEHIgkl3+YzuXy+fpveP85BnKlcqV66Fx5fnYyar+VPRQ9ucZXXQ42fR/qWPZ9+I38kTX5f0fEnyLivb59tXy+UC5N7nbwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJDZ3+L3/1Pf9e127QCAtunf7QoAAB23rfO/wQIAPBdanNJ7N569r611AQA6o3b+T7p3uxoAQAe5pA8Ae4/zPwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG126uTJdFr5eXmpkOYnLy7MT5cvHp4sVqbzM/OFfKE8dyE/VS5PlYr5Qnmm5Qddqb+UyuUL4zE7f2m0WqxURysLi2dmyvOz1TPnZyamimeKPR2LDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2rrKwOD1RKhXnJDZPXH4mqnE1a7bd3hrPU+Jstk2flfpsI9EXEe0qormX2Nf5jgkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgd+K3AAAA//+aBB1p")
copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3df1, 0x0)
creat(&(0x7f0000000340)='./bus\x00', 0x11a)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f00000003c0)='./bus\x00', 0x0, 0x41800, 0x0)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x84)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2000003, 0x28011, r0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2800053, 0x0, 0xfc, 0x0, &(0x7f00000000c0))

2m34.745487277s ago: executing program 2 (id=173):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'})
r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0})
io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8)

2m32.491940802s ago: executing program 2 (id=186):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0xd, 0x0, 0x9, 0x3}, 0x1}}, @TCA_IFE_TYPE={0x6}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x40010)

2m32.157067327s ago: executing program 32 (id=186):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0xd, 0x0, 0x9, 0x3}, 0x1}}, @TCA_IFE_TYPE={0x6}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x40010)

1m14.843504443s ago: executing program 4 (id=651):
creat(&(0x7f00000002c0)='./bus\x00', 0x74)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r1 = fanotify_init(0xf00, 0x0)
fanotify_mark(r1, 0x1, 0x10001011, r0, 0x0)
read$FUSE(r1, &(0x7f00000024c0)={0x2020}, 0x2020)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', r0, &(0x7f00000004c0)='./file0\x00', 0x2)

1m14.627292497s ago: executing program 4 (id=654):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x304}, "d56d9847bfcb49e2", "16549f18408d640d012ebcc31bd9870b", "bcd58d40", "4f5b22bc20c62b22"}, 0x28)
sendto$inet6(r0, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0x0)
sendto$inet6(r0, &(0x7f0000000240)="c6", 0x1, 0x8040, 0x0, 0x0)

1m14.461697689s ago: executing program 4 (id=655):
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000010"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r0, &(0x7f0000000000), 0xd)

1m14.205508123s ago: executing program 4 (id=658):
socket$inet(0x2, 0x2, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4008040)
ioctl(0xffffffffffffffff, 0x1, &(0x7f00000001c0))
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r0, &(0x7f0000000140)={{0x6, @rose}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'nr0\x00', 0x2})

1m13.803722329s ago: executing program 4 (id=660):
syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYRES8=0x0], 0x81, 0x4ac, &(0x7f00000011c0)="$eJzs20tsG1UXwPFzPLbruPk+3Adpi6piCSRCS9skLmmrIKE8iEBqG0gaEBUPhdgJJk4cxSkkVUu7BHYsumTJlgUrxBZVYolYoCDUXemGjVeUHeiO52XXSewm8TT1/1e1dx7H7r33zMy914kFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACIDL022NOrYdcCAAC00qWJ8Z4M4z8AAG3lMut/AACAdqJiyR+icnKurBft/YrEhfzC1ZXJkdH6L+tQUYmIZcebv4nevsyZl/vPnnPLjV+/3Y7I2MTlwfRwcX5xKVcq5bLpyYX8dDGba/gdtvr6WsftDkjPz13NzsyU0n2nMlWnV1L39+ztSg30vz8cd2MnR0ZHJwIx0dgj/+8PWW+GHxdLXhSVT374Ti+JSES23hebXDs7rcNuxHG7EZMjo3ZDCvmphWVzUiNOVKS6T+JuH7UgF1sSETH10vj2rNliYsmPojJ0uqxjImK5/XDC/mC4ofqEIWqWriLSLbsgZ4+xPWLJh6Jy53RK3nT61c5/XOR62JXDjos6939Ry/qW/Tww95N5bF54O/3GwkwxEKsR545qZnyocw+GPj600mP+bEqIJWP2HV/W8bArg5brEEvmRSX+9af2vELseelTA2ePPXs+OMM4tMn7mNhTzs3VyJgcc6YOGjF/HqHa2BYJteRPUXnwe8Le73Zyw08E2oRaUhCVf26UVWvWpVZgfe/Z7WvDna1/R2K4uLi6lJ/9eLnu+WRi8KPS8tLUdP3TlbWrFTyy2Tq2VqS5JVlSKyu+Lz4re69z1gD/q+z5tfn2un8tdNeUruD108h2w8+ZJuZRpk6qltwTlZkPDlfGGUk23TftwOR/VFRK5V/UzbST/2hlL5D/V/z+S2h16bFz+//K51ruXOLIlYPrHd+J/Js6mfy/KypDfx92PtOo5N+qiTVxXaLy3u2jTlwkbuKibnMq7ziTL+R6TOy/orL/ZzdW7NikE3vAj+01sSVR+fJOdexeJ/agH9tnYtdE5e5v9WOf9mMzJnbV5Otu2o1NmthjTmyXH3tquljIbtatJv99ovLOzdfVbfO6+Q/c/7dqSs9DOd94e7vynwocu+Xk9YqT/+gm+f9KVFb/Ouq22+5797LaZ//r59/Mlb+/XR3rTkb3+7G9jTYrbCb/+0Tl/qtrXpudtjm7foaC+X8mWl16/RpS/vcFjqWcesWb7It2VFq9NjdVKOSW2GCDDTa8jbCfTGgFM/6Pm1G931J3HuOM/52VPX/G9OBzf/wfqCk9IY3/+wPHBpxZSywqklieX4wdEkmUVq+dzM9PzeZmcwuZM/09fefP9GTOxeLu5M7farjvngQm/ydE5cZPv3rrmOr5X/35f7Km9ISU/wPBNlXNaxruirZk8t8pKv331rz15kbzf3f93/1cdendfyHl/2DgWMqpV2eTfQEAAAAAAAAAAAAAAAAAu0lSLXleVFbGX1L3O0SN/P5ftqb0hPT7X12BY9nt/16D+9WoqlONVh0AAAAAAAAAAKCVImLJN6LygpT1pjnQKXIxWOKJ9l8AAAD//16uQhc=")
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0x40049366, 0x0)

1m13.468215544s ago: executing program 4 (id=662):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000133}, &(0x7f00000006c0)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/204, 0xcc}], 0x1})
io_uring_enter(r2, 0x847ba, 0xffffffff, 0xe, 0x0, 0xfffffd67)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x492492492492846, 0x0)
connect$unix(r0, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e)

58.23890609s ago: executing program 33 (id=662):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000133}, &(0x7f00000006c0)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/204, 0xcc}], 0x1})
io_uring_enter(r2, 0x847ba, 0xffffffff, 0xe, 0x0, 0xfffffd67)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x492492492492846, 0x0)
connect$unix(r0, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e)

50.760579256s ago: executing program 3 (id=714):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000200), 0x80b02, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x359, "0600000000000000c64c3b6e6ff82a75e5318fca4288c2ffbdbec772020acd2c", <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
r2 = syz_io_uring_setup(0x10f, &(0x7f0000000140)={0x0, 0xfad9}, &(0x7f0000000240)=<r3=>0x0, &(0x7f00000000c0)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x241}})
io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0)

50.372889202s ago: executing program 3 (id=718):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000140), 0x1, 0x25f, &(0x7f0000000b00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents64(r0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0)
getdents64(0xffffffffffffffff, 0x0, 0x0)
creat(0x0, 0x37)

49.753781761s ago: executing program 3 (id=720):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = syz_clone(0x4200000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
waitid(0x2, 0x0, 0x0, 0x4, &(0x7f00000004c0))
wait4(r2, 0x0, 0x40000000, 0x0)

49.073325871s ago: executing program 3 (id=722):
syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x2000414, &(0x7f0000000340)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2a1, &(0x7f0000000540)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x206e)

48.639790018s ago: executing program 3 (id=723):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10)
r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f00000002c0)={0x0, "de442bfc9610e10ac6000000000000000700000000002fd47a6edb336700000054d24eadb3fa6614c06088e8938e30916300"}, 0x48, 0xffffffffffffffff)
keyctl$chown(0x4, r1, 0xee01, 0xee00)
keyctl$chown(0x4, r1, 0x0, 0x0)

48.127958116s ago: executing program 3 (id=725):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x100)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000001100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f0000000080)=@tcp6=r0}, 0x20)
sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="18", 0x1}], 0x1}}], 0x2, 0x0)

47.325885479s ago: executing program 34 (id=725):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x100)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000001100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f0000000080)=@tcp6=r0}, 0x20)
sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="18", 0x1}], 0x1}}], 0x2, 0x0)

39.838082445s ago: executing program 0 (id=747):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x490, &(0x7f0000000000), 0x2, 0x786, &(0x7f0000000f80)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0x8080c61)
pwrite64(r0, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61)

38.736477432s ago: executing program 0 (id=751):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz1\x00', {0x1b10, 0x0, 0x1, 0x2}, 0x40002f, [0x2, 0x20001, 0x704d, 0x1, 0x5, 0x1, 0x2, 0x7db, 0x4, 0xfffffc04, 0xfffffffb, 0x8, 0x1, 0x100, 0xfe, 0x4a, 0x7, 0x5, 0x2ca, 0x8, 0x76, 0x8, 0x0, 0x81, 0x40, 0x19b1, 0x8000, 0x7, 0x797, 0x4000000, 0x7, 0x3, 0xe, 0x8, 0x1, 0x1, 0x5, 0xf, 0x7, 0x10001, 0x9, 0x7f, 0x8, 0x6, 0xb, 0x4, 0x6, 0x40, 0x7f, 0x9, 0x1, 0x6, 0x3, 0x2284919, 0x4, 0x5643fa73, 0xfffeffff, 0x6, 0x800, 0x2, 0xd, 0xc, 0x1, 0x6], [0xfffffed2, 0x7fffffff, 0x10003, 0x8, 0xe62, 0x7, 0x20000000, 0x9, 0xc33, 0x3, 0x7, 0x400800, 0x6c368000, 0x4, 0x1000007, 0x0, 0xf, 0x8, 0x8, 0x8001, 0x3, 0x7fff, 0x9, 0x3, 0x4, 0x4, 0x4, 0x8, 0x40, 0xc10, 0x80000001, 0x3, 0x3, 0x3, 0x7, 0x8, 0x8, 0x5, 0x5, 0x9, 0x5, 0x3, 0x2, 0x4, 0x0, 0xfff, 0xa4, 0x4, 0x5, 0xd69, 0x9, 0xf404, 0xf1, 0x3, 0x3, 0x1, 0x6, 0x0, 0x0, 0x6, 0x8, 0x800006, 0x4, 0x1000068], [0x1, 0x9, 0x4, 0xfffffffc, 0x0, 0x7fff, 0x407, 0x9, 0x2, 0xffc, 0x7, 0x4, 0xc, 0x2007, 0xa, 0xa, 0x6, 0x4, 0x5, 0x5, 0x2, 0x30000000, 0x644, 0x2, 0xfffffffb, 0x7, 0x5, 0x7f, 0x7ff, 0xd, 0x400, 0x0, 0x41, 0x4, 0xc99, 0x25a, 0x2, 0x0, 0x2, 0x5d9fffa, 0x3ff, 0xff, 0x4, 0x8, 0x10000, 0xe7, 0x200, 0x7af5, 0x0, 0xb, 0x0, 0xffff, 0x7, 0x6, 0x0, 0x81, 0x9, 0x2, 0xb, 0x100, 0x8, 0x0, 0x6, 0x10], [0xffffff80, 0xd5800000, 0x0, 0x7f, 0x2, 0x1, 0x9, 0x1, 0xb343, 0x4, 0x0, 0x8, 0x8000, 0x8, 0xffffff81, 0x80000000, 0x5, 0x3, 0x8, 0xfff, 0x3, 0x0, 0x3c63, 0x7, 0x6, 0x8, 0xffffffff, 0x3, 0x2, 0x7, 0x1, 0x7, 0x7, 0x8, 0x1, 0x0, 0x9, 0xd, 0x0, 0x3, 0x6fe, 0xe, 0x7, 0x13a, 0x7, 0x0, 0xb757, 0x1, 0x11b, 0x996, 0x54, 0x5, 0x0, 0x5, 0x4, 0xf, 0x100, 0x10000400, 0x9, 0x5, 0x3, 0xfffffffb, 0xc, 0x2]}, 0x45c)
r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}})
io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

38.136845791s ago: executing program 0 (id=760):
getpid()
r0 = fsopen(&(0x7f0000000000)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x1, 0x2)
fchdir(r1)
mkdir(0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)

37.770142137s ago: executing program 0 (id=755):
syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000e00)=ANY=[], 0x2, 0xc39, &(0x7f0000001040)="$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")
chdir(&(0x7f0000000200)='./file0\x00')
creat(&(0x7f0000000340)='./bus\x00', 0x11a)
mount(&(0x7f0000000180)=@loop={'/dev/loop', 0x0}, &(0x7f0000000240)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0)
write$binfmt_script(r0, &(0x7f0000000080), 0x208e24b)
creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

37.733386167s ago: executing program 1 (id=756):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "9e3ce079"}]}}, 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000040)={0x3, 0x100, 0x7})
ioctl$HIDIOCGSTRING(r1, 0x81044804, 0x0)

37.022189258s ago: executing program 0 (id=757):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000808000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}}, 0x10)

36.815734771s ago: executing program 5 (id=759):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x9}, 0x14}}, 0x0)
sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x24004052)
r0 = socket$inet(0x2, 0x3, 0x4)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0xe000)

36.508095006s ago: executing program 0 (id=761):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000480)={0x1, 0x0, 0x0, &(0x7f0000001740)=""/97, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400))
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000003700)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/163, 0x0, 0x4000})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0})

35.899368435s ago: executing program 35 (id=761):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000480)={0x1, 0x0, 0x0, &(0x7f0000001740)=""/97, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400))
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000003700)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/163, 0x0, 0x4000})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0})

35.883389046s ago: executing program 5 (id=763):
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x2, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0xe, 0xffff}, {0xa, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048084)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0)

34.820791252s ago: executing program 5 (id=767):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0xe}, 0x1c)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x200002, 0x30}, 0xc)
sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000380)='d', 0x1}], 0x1}, 0x8000)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x1, 0x20}, 0xc)
writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)=',', 0x34000}], 0x1)

34.763278673s ago: executing program 1 (id=768):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, &(0x7f0000000100)={'TPROXY\x00'}, &(0x7f0000000140)=0x1e)
setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, 0x0, 0x0)

34.511967677s ago: executing program 5 (id=769):
syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000e00)=ANY=[], 0x2, 0xc39, &(0x7f0000001040)="$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")
chdir(&(0x7f0000000200)='./file0\x00')
creat(&(0x7f0000000340)='./bus\x00', 0x11a)
mount(&(0x7f0000000180)=@loop={'/dev/loop', 0x0}, &(0x7f0000000240)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0)
write$binfmt_script(r0, &(0x7f0000000080), 0x208e24b)
creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

34.454882128s ago: executing program 1 (id=770):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x281c2, 0x120)
fcntl$setlease(r0, 0x400, 0x1)
open(&(0x7f0000000340)='./file1\x00', 0x11, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0, 0x12)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x19c)
pread64(r1, &(0x7f0000001440)=""/117, 0x75, 0x41)

33.388372835s ago: executing program 1 (id=773):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x400, &(0x7f00000004c0)=ANY=[@ANYBLOB="6e6f626172726965722c6e6f657874656e745f63616368652c6673796e635f6d6f64653d7374726963742c696e6c696e655f78617474720000693a653d3078303030303030303030303030303766662c736d61636b6673726f6f080000006673f52b00e58abba2d0cc27be339f6f4fe5ad35a724e1531a622f050000008586eb5ba3614d2c24abf5a2614c0f111e057112dafd66336a5e3b6512b81cda80be6e9a34ccc2b88c0100008000000000e3f5def862b95c20ee847008000b0c22653d2ff39b36732e46b56357afe57094f42ba61c5e8b4e184d7dd50000000000000000c0469264c247cd3c7fcb39043dda97538456bc294ae31e525d3b664cf8e83b52b1885b866b58698b3f132aced62a4fc7c8c400b805173d7488a35708d2523190c0014689f57be6ee3f5d28935a0000000000000000000000000000000000000059c1403d010001008ab61fa90695a8b268c277645c1e357ec9316354f659d4244fe126a8364eaa0de6bf4ba21c767782a04bdbb8c86d0cc7e3f03f8ef15c0ee311768cccb8affb0ae5d7cd0000000097676c046a6c754c98dd5f400ad99a588d983ae6e07b4e0e0907266aca53b30a815a84295fb5eab2f263613d36994dc15562892c33ed149270907e9c2e4d0cac7dd9735621a0c6768d4f70c664699157854bb1b85ce3f6ea44456e4f1ae1575315d77f2b995ce4d6ce21b17ca891c155ddd9916e997c32e78231e8d54675e4edf480980023b9736180ff98cf93f888eb70abb728b7e91a5d75b7e43e54f92b6e679249576f12533bef1c93aa993977f15c0a7b595423444db6e87480c46c408f6d48afa1ba"], 0x1, 0x5514, &(0x7f0000005d80)="$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")
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f0000000680)='./file0/../file0/../file0/../file0\x00', 0x0, 0x1b73404, 0x0)
chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00')
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00')

33.385695005s ago: executing program 5 (id=774):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x50)
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x6, &(0x7f0000000380)='\a', 0x1)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4)
sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x0)
recvmmsg(r0, &(0x7f0000000800), 0x62, 0x12141, 0x0)

32.906070012s ago: executing program 5 (id=776):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$binder(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1000810, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
getdents(r0, &(0x7f0000000000)=""/27, 0x1b)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
getdents64(r0, &(0x7f0000000240)=""/241, 0xf1)
write$binfmt_format(0xffffffffffffffff, 0x0, 0x0)

32.38795257s ago: executing program 36 (id=776):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$binder(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1000810, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
getdents(r0, &(0x7f0000000000)=""/27, 0x1b)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
getdents64(r0, &(0x7f0000000240)=""/241, 0xf1)
write$binfmt_format(0xffffffffffffffff, 0x0, 0x0)

31.567803733s ago: executing program 1 (id=778):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{}, 0x0, &(0x7f0000000180)}, 0x1c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1)
ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000180)={0x5000, 0x6000, 0x2, 0x1, 0x75})

28.976003283s ago: executing program 1 (id=781):
syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000e00)=ANY=[], 0x2, 0xc39, &(0x7f0000001040)="$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")
chdir(&(0x7f0000000200)='./file0\x00')
creat(&(0x7f0000000340)='./bus\x00', 0x11a)
mount(&(0x7f0000000180)=@loop={'/dev/loop', 0x0}, &(0x7f0000000240)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0)
write$binfmt_script(r0, &(0x7f0000000080), 0x208e24b)
creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

28.51584903s ago: executing program 37 (id=781):
syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000e00)=ANY=[], 0x2, 0xc39, &(0x7f0000001040)="$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")
chdir(&(0x7f0000000200)='./file0\x00')
creat(&(0x7f0000000340)='./bus\x00', 0x11a)
mount(&(0x7f0000000180)=@loop={'/dev/loop', 0x0}, &(0x7f0000000240)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0)
write$binfmt_script(r0, &(0x7f0000000080), 0x208e24b)
creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

9.306429197s ago: executing program 8 (id=848):
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
syz_io_uring_setup(0x73d9, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0xe, 0x0, 0x0)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0)
ioctl$TIOCSSOFTCAR(r0, 0x5453, 0x0)

9.10978563s ago: executing program 7 (id=858):
setresgid(0xee00, 0x0, 0x0)
r0 = syz_clone(0x0, 0x0, 0x60, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00')
fchdir(r1)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r2 = syz_open_procfs(r0, &(0x7f0000000040)='stat\x00')
preadv(r2, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/127, 0x7f}], 0x1, 0x2, 0x9)

8.934982773s ago: executing program 8 (id=851):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0)
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000140)={0x0, 0x0, 0x292})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

8.738357776s ago: executing program 7 (id=852):
openat$sysfs(0xffffffffffffff9c, 0x0, 0x40a02, 0x0)
unshare(0x64000600)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe5, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000d10a8c8315b5defaa01ddec61466d701d4241ace6513daedf7483d907bc279202246ce5345df6d23018c593a6dd210fb20dad4d50cb4026ab2e188ee5ec9f481022d52c957b847d41419c3cdfa65dd8b7331a0e45e3dcaf1267a8bbf271744aa54c87d28d70fc8a87180eeb6c5fe1ae06d372a50f05d"], &(0x7f0000000340)='syzkaller\x00', 0x1, 0xc5, &(0x7f0000000180)=""/197, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2600}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r1}, 0x10)
syz_usb_connect(0x0, 0x4f, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000a6ff0540cdabeecdb9050000000109023d0c020000000009049c00030103510009050a00000000000009050313000000000003270103"], 0x0)

8.327935522s ago: executing program 8 (id=854):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[<r1=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={r1, <r2=>0x0, <r3=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0, <r4=>0x0], 0x2})
ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000a00)={r4, r2, r3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x3, 0x800000})

8.035330037s ago: executing program 8 (id=857):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r1 = fsopen(&(0x7f0000000180)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
fsmount(r1, 0x1, 0x0)

7.637781453s ago: executing program 8 (id=860):
r0 = syz_usb_connect$cdc_ecm(0x0, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a4400001020301090248000101570040090400000002060000052406000005240000000d240f0100080000000000000004240200090581031000000000090582"], 0x0)
syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xc38, &(0x7f0000000080)=ANY=[])
openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0)

7.309529368s ago: executing program 6 (id=863):
r0 = syz_mount_image$btrfs(&(0x7f00000004c0), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000000180)={[{@clear_cache}, {@user_subvol_rm}, {@nodiscard}, {@noautodefrag}, {@autodefrag}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x7, 0x32, 0x38, 0x2d, 0x32, 0x36, 0x78, 0x2d, 0x2d, 0x37]}}, {@space_cache}]}, 0x0, 0x559e, &(0x7f00000103c0)="$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")
chdir(&(0x7f0000000080)='./file0\x00')
ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000580)={0x1})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0)
r2 = open(&(0x7f00000000c0)='./file1\x00', 0x14927e, 0x6)
fallocate(r2, 0x0, 0x0, 0x1001f0)
pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0xe7b, 0x0, 0x2)

5.917807679s ago: executing program 7 (id=864):
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000580)={{0x84, @multicast2, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x7e}, {@private=0xa010102, 0x4e20, 0x2, 0x0, 0x80012d58, 0x12d59}}, 0x44)

3.95989965s ago: executing program 9 (id=865):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48)

3.779334992s ago: executing program 6 (id=866):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
close(0x3)
socket(0x40000000015, 0x5, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0})
io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0)

3.100553593s ago: executing program 9 (id=867):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$igmp6(0xa, 0x3, 0x2)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0)

2.887848636s ago: executing program 8 (id=868):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000600)=""/152, 0x98}], 0x1)
recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r1)

2.64775865s ago: executing program 9 (id=869):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa)
bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c)

2.309776935s ago: executing program 9 (id=870):
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r0, 0x402, 0x8000001f)
r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r1, 0x402, 0x8000003d)
r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r2, 0x402, 0x36)
close_range(r0, r1, 0x0)

2.031940629s ago: executing program 9 (id=871):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x5, 0x4, 0x4, 0x5}, 0x50)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000700850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4)
sendmsg(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x4)

2.031500819s ago: executing program 6 (id=872):
r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000040)={0x1, 0xff, 0x1f})
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0)
read$midi(r0, 0x0, 0x0)
ioctl$SNDCTL_SEQ_PANIC(r1, 0x5111)
ioctl$SNDCTL_SEQ_PANIC(r1, 0x5100)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0)

1.833835953s ago: executing program 7 (id=873):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
write$dsp(r0, &(0x7f0000000200)='m', 0x1)
r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100))
r2 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65)
write$snddsp(r2, &(0x7f0000000200)="a3", 0x1)
ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, &(0x7f0000000040))

1.711410004s ago: executing program 9 (id=874):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x101880a, &(0x7f0000005a80)=ANY=[@ANYBLOB="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"], 0x1, 0x550b, &(0x7f0000000540)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x1a37c1, 0x42)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)
pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc)
renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./bus\x00', 0x0)
unlink(&(0x7f0000000040)='./bus\x00')
ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0)

1.635807536s ago: executing program 6 (id=875):
socket$inet_udplite(0x2, 0x2, 0x88)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000000)={[{@errors_remount}, {@grpquota}]}, 0x4, 0x4f2, &(0x7f0000000c80)="$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")
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./bus\x00', 0x810408, 0x0, 0xff, 0x0, &(0x7f00000007c0))
rename(&(0x7f0000000180)='./bus\x00', &(0x7f0000000a00)='./file0\x00')
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000180)=0x401)

870.839427ms ago: executing program 6 (id=876):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00', <r3=>0x0})
sendto$packet(r2, &(0x7f0000000740)=' ', 0x1, 0x20008801, &(0x7f0000000200)={0x11, 0x8100, r3, 0x1, 0xfe, 0x6, @remote}, 0x14)
setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000200)=0x102, 0x4)
recvmmsg(r1, &(0x7f0000001880)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x0, 0x0)

860.189387ms ago: executing program 7 (id=877):
syz_open_dev$usbmon(&(0x7f0000000280), 0x80000000000000, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
io_setup(0x8, &(0x7f0000004200)=<r1=>0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
io_submit(r1, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])
r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_CLEAR_HALT(r2, 0xc0105502, &(0x7f0000000300)={0x1, 0x1})

186.099378ms ago: executing program 6 (id=878):
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x862b01)
r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x11, 0xb, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r2}, 0x18)
sendmsg$IPSET_CMD_TYPE(r1, 0x0, 0x200000b0)
fcntl$setstatus(r1, 0x4, 0x2400)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250)

0s ago: executing program 7 (id=879):
r0 = io_uring_setup(0x38eb, &(0x7f0000000300)={0x0, 0x342a, 0x40, 0x0, 0x3d7})
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000001300)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90)
r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x4)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r1, r3, 0x3, 0x0, @val=@perf_event={0x1}}, 0x18)
close_range(r0, 0xffffffffffffffff, 0x0)

kernel console output (not intermixed with test programs):

0d)
[  153.652398][ T7233] block nbd1: shutting down sockets
[  153.868563][ T7238] loop1: detected capacity change from 0 to 1024
[  154.014353][ T7238] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  154.156364][ T7248] loop4: detected capacity change from 0 to 7
[  154.198161][ T7248]  loop4: [POWERTEC] p1 p2 p3 p4 p5
[  154.204089][ T7248] loop4: p1 start 1600481121 is beyond EOD, truncated
[  154.258253][ T7248] loop4: p2 size 1346830336 extends beyond EOD, truncated
[  154.294512][ T7248] loop4: p3 start 1572963 is beyond EOD, truncated
[  154.316216][ T7248] loop4: p4 start 1536 is beyond EOD, truncated
[  154.332846][ T7248] loop4: p5 start 12 is beyond EOD, truncated
[  154.438312][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  154.550161][ T6046] udevd[6046]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  154.841943][ T7264] loop3: detected capacity change from 0 to 256
[  154.896761][ T7264] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  154.958745][ T7264] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  155.000387][ T7264] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  155.729416][ T7293] netlink: 12 bytes leftover after parsing attributes in process `syz.1.383'.
[  155.759267][ T7298] loop3: detected capacity change from 0 to 1024
[  155.823998][ T7293] 8021q: adding VLAN 0 to HW filter on device bond1
[  156.657596][ T5814] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  156.866168][ T5814] usb 2-1: Using ep0 maxpacket: 16
[  156.878398][ T5814] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  156.970892][ T5814] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  156.986314][ T5814] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  157.025036][ T5814] usb 2-1: Product: syz
[  157.052651][ T5814] usb 2-1: Manufacturer: syz
[  157.062054][ T5814] usb 2-1: SerialNumber: syz
[  157.095644][ T5814] usb 2-1: config 0 descriptor??
[  157.109783][ T5814] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  157.283488][ T5814] em28xx 2-1:0.0: DVB interface 0 found: bulk
[  157.447491][ T5813] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  157.646527][ T5813] usb 4-1: Using ep0 maxpacket: 32
[  157.675613][ T5813] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  157.686656][ T5813] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  157.702009][ T5813] usb 4-1: config 0 descriptor??
[  157.722861][ T5813] as10x_usb: device has been detected
[  157.729195][ T5814] em28xx 2-1:0.0: unknown em28xx chip ID (0)
[  157.737471][ T5813] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  157.752345][ T7339] netlink: 16 bytes leftover after parsing attributes in process `syz.4.391'.
[  157.791002][ T5813] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  157.835653][ T5813] as10x_usb: error during firmware upload part1
[  157.843756][ T5813] Registered device nBox DVB-T Dongle
[  157.920123][   T28] audit: type=1800 audit(1751318848.463:127): pid=7341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.392" name="file1" dev="overlay" ino=267 res=0 errno=0
[  158.025743][ T5813] usb 4-1: USB disconnect, device number 10
[  158.083642][ T5813] Unregistered device nBox DVB-T Dongle
[  158.093568][ T5813] as10x_usb: device has been disconnected
[  158.410185][ T5814] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  158.433925][ T5814] em28xx 2-1:0.0: board has no eeprom
[  158.516762][ T5814] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  158.524655][ T5814] em28xx 2-1:0.0: dvb set to bulk mode.
[  158.536896][ T5813] em28xx 2-1:0.0: Binding DVB extension
[  158.552955][ T5814] usb 2-1: USB disconnect, device number 5
[  158.580035][ T5814] em28xx 2-1:0.0: Disconnecting em28xx
[  158.703387][ T5813] em28xx 2-1:0.0: Registering input extension
[  158.722652][ T5814] em28xx 2-1:0.0: Closing input extension
[  158.817961][ T5814] em28xx 2-1:0.0: Freeing device
[  159.116690][ T7356] loop4: detected capacity change from 0 to 32768
[  159.197131][ T7356] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode.
[  159.249284][   T34] (kworker/u4:2,34,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=16, inode=66, rec_len=491, name_len=2
[  159.535820][ T7373] loop0: detected capacity change from 0 to 1024
[  159.600215][ T7373] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[  159.625310][ T6478] ocfs2: Unmounting device (7,4) on (node local)
[  159.632219][ T7373] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal
[  160.412808][    C1] Unknown status report in ack skb
[  160.816190][ T5814] usb 2-1: new full-speed USB device number 6 using dummy_hcd
[  161.023658][ T5814] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  161.045009][ T5814] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  161.065090][ T5814] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  161.091666][ T5814] usb 2-1: config 0 descriptor??
[  161.107618][   T27] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  161.108354][ T7400] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  161.309729][   T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  161.321102][   T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  161.331090][   T27] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  161.343032][   T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  161.353931][   T27] usb 1-1: config 0 descriptor??
[  161.580859][ T5814] elan 0003:04F3:0755.0004: unknown main item tag 0x0
[  161.594829][ T5814] elan 0003:04F3:0755.0004: unknown main item tag 0x0
[  161.605137][ T5814] elan 0003:04F3:0755.0004: unknown main item tag 0x0
[  161.616297][ T5814] elan 0003:04F3:0755.0004: unknown main item tag 0x0
[  161.623376][ T5814] elan 0003:04F3:0755.0004: unknown main item tag 0x0
[  161.647980][ T5814] elan 0003:04F3:0755.0004: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0
[  161.849125][ T7400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  161.863021][ T7400] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  161.881954][ T5814] usb 2-1: USB disconnect, device number 6
[  162.094163][ T7428] loop3: detected capacity change from 0 to 8192
[  162.136293][ T7428] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  162.175617][ T7428] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[  162.185793][ T7428] REISERFS (device loop3): using ordered data mode
[  162.192696][ T7428] reiserfs: using flush barriers
[  162.200044][ T7428] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  162.224581][   T27] hid-led 0003:27B8:01ED.0005: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.0-1/input0
[  162.241022][ T7428] REISERFS (device loop3): checking transaction log (loop3)
[  162.273570][ T7428] REISERFS (device loop3): Using r5 hash to sort names
[  162.302503][   T27] hid-led 0003:27B8:01ED.0005: ThingM blink(1) v1 initialized
[  162.315344][ T7428] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  162.517029][ T5814] usb 1-1: USB disconnect, device number 5
[  162.645304][ T7435] loop1: detected capacity change from 0 to 256
[  162.696356][ T7435] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  162.756121][ T7435] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[  162.824849][ T7435] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  163.359316][ T7450] loop0: detected capacity change from 0 to 1024
[  163.381711][ T7450] EXT4-fs: Ignoring removed orlov option
[  163.403847][ T7450] EXT4-fs: Ignoring removed i_version option
[  163.432357][ T7450] EXT4-fs (loop0): Test dummy encryption mode enabled
[  163.464070][ T7450] EXT4-fs (loop0): stripe (7) is not aligned with cluster size (16), stripe is disabled
[  163.519771][ T7450] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  163.725423][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  163.784267][ T7443] loop3: detected capacity change from 0 to 32768
[  163.807093][ T5813] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  163.862968][ T7445] loop1: detected capacity change from 0 to 32768
[  163.877752][ T7443] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  163.942654][ T7443] XFS (loop3): Ending clean mount
[  163.965581][ T7443] XFS (loop3): Quotacheck needed: Please wait.
[  164.000101][ T7445] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  164.017011][ T5813] usb 5-1: Using ep0 maxpacket: 32
[  164.035054][ T5813] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  164.051071][ T5813] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  164.091014][ T5813] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  164.114365][ T7443] XFS (loop3): Quotacheck: Done.
[  164.134378][ T7445] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  164.150674][ T5813] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  164.191039][ T5813] usb 5-1: config 0 descriptor??
[  164.213663][ T7445] XFS (loop1): Starting recovery (logdev: internal)
[  164.230690][ T5813] hub 5-1:0.0: USB hub found
[  164.256314][   T27] usb 1-1: new full-speed USB device number 6 using dummy_hcd
[  164.301079][ T7445] XFS (loop1): Ending recovery (logdev: internal)
[  164.442944][ T5813] hub 5-1:0.0: 1 port detected
[  164.450581][ T5772] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  164.458112][ T7445] XFS (loop1): User initiated shutdown received.
[  164.466532][ T7445] XFS (loop1): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501).  Shutting down filesystem.
[  164.477542][   T27] usb 1-1: config 0 has no interfaces?
[  164.482209][ T7445] XFS (loop1): Please unmount the filesystem and rectify the problem(s)
[  164.492797][   T27] usb 1-1: New USB device found, idVendor=16d6, idProduct=0001, bcdDevice=b2.cd
[  164.506101][   T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  164.517174][   T27] usb 1-1: Product: syz
[  164.521417][   T27] usb 1-1: Manufacturer: syz
[  164.538495][   T27] usb 1-1: SerialNumber: syz
[  164.558345][   T27] usb 1-1: config 0 descriptor??
[  164.635910][ T5782] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  164.826920][   T27] usb 1-1: USB disconnect, device number 6
[  165.071630][ T7479] loop1: detected capacity change from 0 to 256
[  165.093036][   T55] hub 5-1:0.0: activate --> -90
[  165.102360][ T7479] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  165.115036][ T7479] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[  165.137662][ T7479] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d)
[  165.218349][ T7479] exFAT-fs (loop1): invalid start cluster (2155889475)
[  165.402124][ T7481] syzkaller0: entered promiscuous mode
[  165.409367][ T7481] syzkaller0: entered allmulticast mode
[  165.466720][ T7484] tipc: Failed to remove unknown binding: 66,1,1/0:2357130659/2357130661
[  165.476460][ T7484] tipc: Failed to remove unknown binding: 66,1,1/0:2357130659/2357130661
[  165.498278][   T23] usb 5-1: USB disconnect, device number 2
[  165.500369][   T55] usb 5-1-port1: cannot disable (err = -71)
[  165.798572][ T7489] loop2: detected capacity change from 0 to 7
[  165.817368][ T6046]  loop2: [POWERTEC] p1 p2 p3
[  165.835290][ T6046] loop2: p2 start 4294967287 is beyond EOD, truncated
[  165.855336][ T6046] loop2: p3 start 1932423285 is beyond EOD, truncated
[  165.918072][ T7489]  loop2: [POWERTEC] p1 p2 p3
[  165.933938][ T7489] loop2: p2 start 4294967287 is beyond EOD, truncated
[  165.940904][ T7489] loop2: p3 start 1932423285 is beyond EOD, truncated
[  167.117669][ T7510] netlink: 12 bytes leftover after parsing attributes in process `syz.3.451'.
[  169.230735][ T7540] sctp: [Deprecated]: syz.1.464 (pid 7540) Use of struct sctp_assoc_value in delayed_ack socket option.
[  169.230735][ T7540] Use struct sctp_sack_info instead
[  169.620293][ T7533] loop3: detected capacity change from 0 to 32768
[  169.667021][ T7533] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.461 (7533)
[  169.745835][ T7533] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  169.783928][ T7533] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  169.823378][ T7533] BTRFS info (device loop3): setting nodatacow, compression disabled
[  169.846057][ T7533] BTRFS info (device loop3): max_inline at 0
[  169.872613][ T7533] BTRFS info (device loop3): enabling disk space caching
[  169.900695][ T7533] BTRFS info (device loop3): turning off barriers
[  169.921296][ T7533] BTRFS info (device loop3): turning on flush-on-commit
[  169.942679][ T7533] BTRFS info (device loop3): doing ref verification
[  169.950955][ T7533] BTRFS info (device loop3): force clearing of disk cache
[  169.964642][ T7533] BTRFS info (device loop3): enabling ssd optimizations
[  169.980935][ T7558] loop0: detected capacity change from 0 to 64
[  169.984029][ T7533] BTRFS info (device loop3): max_inline at 4096
[  169.993831][ T7533] BTRFS info (device loop3): disk space caching is enabled
[  170.096103][ T5813] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  170.120672][ T7533] BTRFS info (device loop3): auto enabling async discard
[  170.159738][ T7533] BTRFS info (device loop3): rebuilding free space tree
[  170.232013][ T7533] BTRFS info (device loop3): disabling free space tree
[  170.261198][ T7533] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  170.281883][ T7577] loop0: detected capacity change from 0 to 128
[  170.292836][ T7533] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  170.306558][ T5813] usb 5-1: Using ep0 maxpacket: 16
[  170.308566][ T7577] EXT4-fs: Ignoring removed nobh option
[  170.336333][ T5813] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  170.356664][ T5813] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  170.372214][ T7577] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  170.398481][ T7577] ext4 filesystem being mounted at /127/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  170.426647][ T5813] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  170.476963][ T5813] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  170.532107][ T5813] usb 5-1: Product: syz
[  170.552412][ T5813] usb 5-1: Manufacturer: syz
[  170.581611][ T5813] usb 5-1: SerialNumber: syz
[  170.698672][ T5771] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  170.822492][ T5813] usb 5-1: 0:2 : does not exist
[  170.845327][ T5813] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[  170.896483][ T5813] usb 5-1: USB disconnect, device number 3
[  170.979708][ T5772] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  170.996378][ T6046] udevd[6046]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  172.093632][ T7606] loop1: detected capacity change from 0 to 512
[  172.152075][ T7606] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  172.242501][ T7606] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  172.266799][ T7606] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2867: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  172.322633][ T7606] EXT4-fs (loop1): 1 truncate cleaned up
[  172.357598][ T7606] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  172.427577][ T7618] loop3: detected capacity change from 0 to 2048
[  172.435077][ T7618] EXT4-fs: Ignoring removed mblk_io_submit option
[  172.444321][ T7606] syz.1.484[7606] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  172.444470][ T7606] syz.1.484[7606] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  172.456831][ T7618] EXT4-fs: Ignoring removed nobh option
[  172.545304][ T7618] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  172.581564][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  172.875665][ T7633] netlink: 'syz.0.493': attribute type 1 has an invalid length.
[  172.884523][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  172.910493][ T7633] netlink: 'syz.0.493': attribute type 4 has an invalid length.
[  172.920909][ T7633] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.493'.
[  173.096169][ T5813] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  173.303349][ T5813] usb 5-1: config 0 has an invalid interface number: 127 but max is 1
[  173.315522][ T5813] usb 5-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 48
[  173.336357][ T5813] usb 5-1: config 0 has no interface number 1
[  173.342991][ T5813] usb 5-1: config 0 interface 127 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  173.359908][ T5813] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 29
[  173.398938][ T5813] usb 5-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00
[  173.420998][ T5813] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  173.437284][ T5813] usb 5-1: Product: syz
[  173.445177][ T5813] usb 5-1: Manufacturer: syz
[  173.451742][ T5813] usb 5-1: SerialNumber: syz
[  173.469907][ T5813] usb 5-1: config 0 descriptor??
[  173.495005][ T5813] usb-storage 5-1:0.127: USB Mass Storage device detected
[  173.528449][ T5813] usb-storage 5-1:0.127: Quirks match for vid 1908 pid 1315: 20000
[  173.642241][ T5813] usb-storage 5-1:0.0: USB Mass Storage device detected
[  173.677999][ T5813] usb-storage 5-1:0.0: Quirks match for vid 1908 pid 1315: 20000
[  173.761842][ T5813] usb 5-1: USB disconnect, device number 4
[  173.966087][ T5883] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  174.156084][ T5883] usb 1-1: Using ep0 maxpacket: 16
[  174.174086][ T5883] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  174.198654][ T5883] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  174.232325][ T5883] usb 1-1: config 0 descriptor??
[  174.257251][ T5883] gspca_main: sonixj-2.14.0 probing 0471:0327
[  174.839465][ T7660] loop4: detected capacity change from 0 to 512
[  174.881432][ T7660] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  174.977793][ T7660] EXT4-fs (loop4): 1 truncate cleaned up
[  175.004810][ T7660] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  175.321161][ T6478] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  175.332465][ T7663] netlink: 'syz.1.503': attribute type 1 has an invalid length.
[  175.479241][ T7665] bond2: (slave gretap1): making interface the new active one
[  175.490516][ T7665] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  175.582587][ T7669] loop3: detected capacity change from 0 to 512
[  175.631207][ T7671] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  175.647036][ T7669] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  175.657238][ T7665] syz.1.503 (7665) used greatest stack depth: 19304 bytes left
[  175.686666][ T7671] overlayfs: failed to set xattr on upper
[  175.711391][ T7671] overlayfs: ...falling back to index=off.
[  175.726842][ T5883] gspca_sonixj: i2c_w8 err -71
[  175.734129][ T7671] overlayfs: ...falling back to uuid=null.
[  175.756111][ T5883] sonixj: probe of 1-1:0.0 failed with error -71
[  175.775693][ T5883] usb 1-1: USB disconnect, device number 7
[  175.822828][   T28] audit: type=1800 audit(1751318866.363:128): pid=7669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.505" name="bus" dev="loop3" ino=18 res=0 errno=0
[  175.861271][ T7669] Trying to write to read-only block-device loop3
[  175.955156][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  176.116311][ T5813] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  176.312523][ T5813] usb 2-1: config 7 has an invalid interface number: 53 but max is 0
[  176.326920][ T5813] usb 2-1: config 7 has no interface number 0
[  176.343352][ T5813] usb 2-1: config 7 interface 53 has no altsetting 0
[  176.361602][ T5813] usb 2-1: New USB device found, idVendor=0930, idProduct=0708, bcdDevice=f5.01
[  176.378433][ T5813] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  176.407096][ T5813] usb 2-1: Product: syz
[  176.414229][ T5813] usb 2-1: Manufacturer: syz
[  176.423630][ T5813] usb 2-1: SerialNumber: syz
[  176.696129][ T5813] usb 2-1: USB disconnect, device number 7
[  176.697187][ T5883] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  176.785401][ T7696] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0
[  176.952977][ T5883] usb 1-1: config 0 has an invalid interface number: 32 but max is 0
[  176.968677][ T5883] usb 1-1: config 0 has no interface number 0
[  176.974915][ T5883] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  176.985086][ T5883] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  176.997127][ T5883] usb 1-1: config 0 descriptor??
[  177.013137][ T5883] cp210x 1-1:0.32: cp210x converter detected
[  177.206166][ T5813] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  177.236067][   T55] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  177.396056][ T5813] usb 4-1: Using ep0 maxpacket: 16
[  177.403917][ T5813] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  177.420473][ T5813] usb 4-1: config 0 has no interface number 0
[  177.421521][ T5883] cp210x 1-1:0.32: failed to get vendor val 0x000e size 3: -32
[  177.431147][ T5813] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  177.444147][ T5813] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  177.452537][   T55] usb 5-1: Using ep0 maxpacket: 16
[  177.459605][ T5813] usb 4-1: Product: syz
[  177.464133][ T5813] usb 4-1: Manufacturer: syz
[  177.473671][ T5813] usb 4-1: SerialNumber: syz
[  177.479940][   T55] usb 5-1: config 0 interface 0 has no altsetting 0
[  177.493863][   T55] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  177.516117][   T55] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  177.526970][ T5813] usb 4-1: config 0 descriptor??
[  177.544140][ T5813] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  177.554293][   T55] usb 5-1: config 0 descriptor??
[  177.651066][ T5883] cp210x 1-1:0.32: GPIO initialisation failed: -19
[  177.668977][ T5883] usb 1-1: cp210x converter now attached to ttyUSB0
[  177.915499][ T5841] usb 1-1: USB disconnect, device number 8
[  177.951686][ T5841] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  177.993413][ T5841] cp210x 1-1:0.32: device disconnected
[  178.221861][   T55] usb 5-1: USB disconnect, device number 5
[  178.987879][ T5813] gspca_spca1528: reg_w err -71
[  179.013319][ T5813] spca1528: probe of 4-1:0.1 failed with error -71
[  179.051194][ T5813] usb 4-1: USB disconnect, device number 11
[  179.265642][ T7715] loop1: detected capacity change from 0 to 32768
[  179.381885][ T7715] XFS (loop1): DAX unsupported by block device. Turning off DAX.
[  179.408582][ T7715] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  179.482411][ T7728] netlink: 8 bytes leftover after parsing attributes in process `syz.0.530'.
[  179.666177][ T7715] XFS (loop1): Ending clean mount
[  179.700940][ T7715] XFS (loop1): Quotacheck needed: Please wait.
[  179.733182][ T7734] loop0: detected capacity change from 0 to 128
[  179.772461][ T7734] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  179.867442][ T7734] ext4 filesystem being mounted at /140/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  179.893426][ T7715] XFS (loop1): Quotacheck: Done.
[  180.104955][ T5771] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  180.335878][ T7746] tipc: Failed to remove unknown binding: 66,1,1/0:2427682012/2427682014
[  180.347706][ T7746] tipc: Failed to remove unknown binding: 66,1,1/0:2427682012/2427682014
[  180.443940][ T5782] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  180.460978][ T7737] loop3: detected capacity change from 0 to 32768
[  180.508542][ T5788] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  180.950199][ T7756] loop3: detected capacity change from 0 to 1024
[  180.986316][ T7756] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[  181.028515][ T7756] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal
[  181.403237][ T7769] loop0: detected capacity change from 0 to 256
[  181.553090][ T5883] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  181.781861][ T5883] usb 4-1: Using ep0 maxpacket: 8
[  181.813952][ T5883] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  181.856552][ T5883] usb 4-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d
[  181.886292][ T5883] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105
[  181.894577][ T5883] usb 4-1: SerialNumber: syz
[  181.927207][ T5883] usb 4-1: config 0 descriptor??
[  181.943845][ T5883] usb 4-1: Found UVC 0.00 device <unnamed> (05ac:8501)
[  181.967143][ T5883] usb 4-1: Failed to create links for entity 255
[  181.973553][ T5883] usb 4-1: Failed to register entities (-22).
[  182.202578][ T5883] usb 4-1: USB disconnect, device number 12
[  182.281818][ T7791] loop1: detected capacity change from 0 to 64
[  182.304374][ T7791] hfs: unable to locate alternate MDB
[  182.311228][ T7791] hfs: continuing without an alternate MDB
[  182.346424][ T7791] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended.  mounting read-only.
[  182.466448][ T5841] usb 1-1: new full-speed USB device number 9 using dummy_hcd
[  182.678688][ T5841] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  182.692885][ T5841] usb 1-1: config 0 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 7
[  182.709618][ T5841] usb 1-1: config 0 interface 0 has no altsetting 0
[  182.716572][ T5841] usb 1-1: New USB device found, idVendor=047f, idProduct=c055, bcdDevice= 0.00
[  182.725764][ T5841] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  182.747158][ T5841] usb 1-1: config 0 descriptor??
[  182.756662][ T7789] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  183.047957][ T7789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  183.082072][ T7789] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  183.182335][ T5841] usbhid 1-1:0.0: can't add hid device: -71
[  183.212395][ T5841] usbhid: probe of 1-1:0.0 failed with error -71
[  183.240698][ T5841] usb 1-1: USB disconnect, device number 9
[  183.469312][ T7805] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  183.796121][ T5841] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  183.997027][ T5841] usb 1-1: Using ep0 maxpacket: 32
[  184.011862][ T5841] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x2 has an invalid bInterval 129, changing to 11
[  184.025412][ T5841] usb 1-1: config 0 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 7
[  184.040781][ T5841] usb 1-1: config 0 interface 0 has no altsetting 0
[  184.047786][ T5841] usb 1-1: New USB device found, idVendor=047f, idProduct=c055, bcdDevice= 0.00
[  184.058827][ T5841] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  184.070276][ T5841] usb 1-1: config 0 descriptor??
[  184.078914][ T5841] hub 1-1:0.0: bad descriptor, ignoring hub
[  184.084879][ T5841] hub: probe of 1-1:0.0 failed with error -5
[  184.490480][ T5841] plantronics 0003:047F:C055.0007: No inputs registered, leaving
[  184.529202][ T5841] plantronics 0003:047F:C055.0007: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:c055] on usb-dummy_hcd.0-1/input0
[  184.850398][ T5142] udevd[5142]: worker [6046] terminated by signal 33 (Unknown signal 33)
[  184.865661][ T7827] netlink: 60 bytes leftover after parsing attributes in process `syz.4.566'.
[  184.875243][ T5142] udevd[5142]: worker [6046] failed while handling '/bus/gadget/drivers/raw-gadget.1'
[  184.888439][ T7827] netlink: 56 bytes leftover after parsing attributes in process `syz.4.566'.
[  184.916891][    T8] usb 1-1: USB disconnect, device number 10
[  184.924699][ T7827] gretap1: entered promiscuous mode
[  184.951311][ T7827] gretap1: entered allmulticast mode
[  184.959182][ T7828] netlink: 'syz.4.566': attribute type 10 has an invalid length.
[  184.970387][ T7828] netlink: 40 bytes leftover after parsing attributes in process `syz.4.566'.
[  185.042054][ T7828] team0: Port device geneve0 added
[  185.300641][ T7832] loop3: detected capacity change from 0 to 2048
[  186.198609][ T7836] netlink: 'syz.1.576': attribute type 10 has an invalid length.
[  186.222601][ T7836] syz_tun: entered promiscuous mode
[  186.234343][ T5142] Alternate GPT is invalid, using primary GPT.
[  186.264010][ T7836] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  186.275326][ T5142]  loop3: p1 p2 p3
[  186.447308][   T50] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  186.456487][   T50] Bluetooth: hci3: Injecting HCI hardware error event
[  186.466243][ T5783] Bluetooth: hci3: hardware error 0x00
[  186.497637][ T6351] udevd[6351]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[  186.500718][ T5788] udevd[5788]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  186.531964][ T6045] udevd[6045]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[  186.875172][ T7852] netlink: 60 bytes leftover after parsing attributes in process `syz.1.577'.
[  187.267961][    T8] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  187.458051][    T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  187.469206][    T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  187.479094][    T8] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  187.489360][    T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  187.501451][    T8] usb 2-1: config 0 descriptor??
[  187.922233][    T8] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0
[  187.933297][    T8] cp2112 0003:10C4:EA90.0008: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0
[  188.119018][    T8] cp2112 0003:10C4:EA90.0008: Part Number: 0x82 Device Version: 0xFE
[  188.269157][ T7875] netlink: 16 bytes leftover after parsing attributes in process `syz.0.587'.
[  188.424521][ T7879] loop4: detected capacity change from 0 to 65
[  188.456919][ T7879] BFS-fs: bfs_fill_super(): NOTE: filesystem loop4 was created with 512 inodes, the real maximum is 511, mounting anyway
[  188.606894][ T5783] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  188.961674][   T23] usb 2-1: USB disconnect, device number 8
[  190.267941][ T7888] loop4: detected capacity change from 0 to 32768
[  190.366496][ T7888] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  190.514830][ T7888] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  190.600607][ T7888] XFS (loop4): Starting recovery (logdev: internal)
[  190.712901][ T7888] XFS (loop4): Ending recovery (logdev: internal)
[  190.864922][ T7917] tipc: Started in network mode
[  190.874271][ T7917] tipc: Node identity 2, cluster identity 3142
[  190.882451][ T7917] tipc: Node number set to 2
[  190.893955][ T7917] tipc: Cannot configure node identity twice
[  191.064649][ T6478] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  191.197164][ T7918] netlink: 'syz.1.601': attribute type 29 has an invalid length.
[  191.228067][ T7918] netlink: 'syz.1.601': attribute type 29 has an invalid length.
[  191.534063][   T28] audit: type=1326 audit(1751318882.073:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7927 comm="syz.4.605" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9bdbb8e929 code=0x0
[  191.555820][    C0] vkms_vblank_simulate: vblank timer overrun
[  191.766870][ T7936] netlink: 'syz.3.609': attribute type 1 has an invalid length.
[  191.905853][ T7936] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  191.921016][ T7936] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  191.933505][ T7936] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  191.951237][ T7936] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  191.972369][ T7939] nbd1: detected capacity change from 0 to 63
[  191.973712][ T7936] bond2: (slave geneve2): making interface the new active one
[  192.003821][ T7940] block nbd1: NBD_DISCONNECT
[  192.017848][ T7936] bond2: (slave geneve2): Enslaving as an active interface with an up link
[  192.030428][ T7940] block nbd1: Disconnected due to user request.
[  192.040448][ T7940] block nbd1: shutting down sockets
[  192.056460][    C1] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  192.065898][    C1] Buffer I/O error on dev nbd1, logical block 0, async page read
[  192.073751][    C1] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2
[  192.082898][    C1] Buffer I/O error on dev nbd1, logical block 1, async page read
[  192.090709][    C1] Buffer I/O error on dev nbd1, logical block 2, async page read
[  192.098546][    C1] Buffer I/O error on dev nbd1, logical block 3, async page read
[  192.106545][   T24] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  192.116598][   T24] Buffer I/O error on dev nbd1, logical block 0, async page read
[  192.124572][   T24] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2
[  192.133955][   T24] Buffer I/O error on dev nbd1, logical block 1, async page read
[  192.141952][   T24] Buffer I/O error on dev nbd1, logical block 2, async page read
[  192.149907][   T24] Buffer I/O error on dev nbd1, logical block 3, async page read
[  192.160091][   T54] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  192.169948][   T54] Buffer I/O error on dev nbd1, logical block 0, async page read
[  192.179680][   T54] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  192.189056][   T54] Buffer I/O error on dev nbd1, logical block 1, async page read
[  192.206896][   T54] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  192.216316][   T54] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  192.225685][   T54] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  192.235296][   T54] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2
[  192.267116][ T5788] ldm_validate_partition_table(): Disk read failed.
[  192.288020][ T5788] Dev nbd1: unable to read RDB block 0
[  192.319428][ T5788]  nbd1: unable to read partition table
[  192.409452][ T5788] ldm_validate_partition_table(): Disk read failed.
[  192.442772][ T5788] Dev nbd1: unable to read RDB block 0
[  192.466667][ T5788]  nbd1: unable to read partition table
[  192.511589][ T7951] netlink: 212 bytes leftover after parsing attributes in process `syz.0.615'.
[  192.754765][ T7962] xt_CT: You must specify a L4 protocol and not use inversions on it
[  192.993509][ T7966] loop1: detected capacity change from 0 to 2048
[  193.051393][ T7966] Alternate GPT is invalid, using primary GPT.
[  193.058229][ T7966]  loop1: p1 p2 p3
[  194.050645][ T6045] udevd[6045]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[  194.052877][ T6351] udevd[6351]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory
[  194.073254][ T5788] udevd[5788]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  194.417183][ T7985] loop1: detected capacity change from 0 to 1024
[  194.455125][ T7985] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  194.467416][ T7988] input: syz0 as /devices/virtual/input/input9
[  194.500101][ T7985] ext4 filesystem being mounted at /149/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  194.542266][ T1287] ieee802154 phy0 wpan0: encryption failed: -22
[  194.549535][ T1287] ieee802154 phy1 wpan1: encryption failed: -22
[  194.657478][ T7993] loop0: detected capacity change from 0 to 2048
[  194.787575][ T7993] Alternate GPT is invalid, using primary GPT.
[  194.794215][ T7993]  loop0: p1 p2 p3
[  194.845571][ T7985] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 16: comm syz.1.628: path /149/file1: bad entry in directory: rec_len is smaller than minimal - offset=876, inode=0, rec_len=0, size=1024 fake=0
[  195.314267][ T7985] EXT4-fs (loop1): Remounting filesystem read-only
[  195.540911][ T7996] loop6: detected capacity change from 0 to 7
[  195.576133][ T7996] Dev loop6: unable to read RDB block 7
[  195.590383][ T7996]  loop6: AHDI p2 p3 p4
[  195.607693][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  195.625174][ T7996] loop6: partition table partially beyond EOD, truncated
[  195.646294][ T7996] loop6: p2 start 2693342895 is beyond EOD, truncated
[  195.653141][ T7996] loop6: p3 start 1886353253 is beyond EOD, truncated
[  195.697597][ T6045] udevd[6045]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[  195.706538][ T5779] udevd[5779]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory
[  195.719683][ T6351] udevd[6351]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[  196.073698][ T8012] loop4: detected capacity change from 0 to 256
[  196.111236][ T8012] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  196.138686][ T8012] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[  196.183635][ T8012] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  197.712443][ T8048] loop0: detected capacity change from 0 to 8192
[  197.835765][ T8048] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 2074)
[  197.850630][ T8048] FAT-fs (loop0): Filesystem has been set read-only
[  197.857576][ T8048] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 2074)
[  197.879360][ T8048] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 2074)
[  197.903920][ T8048] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 2074)
[  197.976970][ T8054] Bluetooth: hci0: unsupported parameter 4096
[  197.983120][ T8054] Bluetooth: hci0: invalid length 0, exp 2 for type 3
[  198.168649][ T8056] loop3: detected capacity change from 0 to 736
[  198.343366][ T8059] sp0: Synchronizing with TNC
[  198.382974][ T8062] sp0: Found TNC
[  198.647294][ T8064] loop4: detected capacity change from 0 to 128
[  198.706192][ T8064] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  198.743618][ T8064] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  198.951981][ T8073] loop1: detected capacity change from 0 to 512
[  198.975827][ T8073] EXT4-fs: Ignoring removed i_version option
[  199.008518][ T8073] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  199.066256][ T8073] EXT4-fs (loop1): 1 truncate cleaned up
[  199.085416][ T8073] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  199.278619][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.305716][ T8079] netlink: 566 bytes leftover after parsing attributes in process `syz.3.665'.
[  199.421058][ T8081] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  200.005868][ T8099] netlink: 988 bytes leftover after parsing attributes in process `syz.0.674'.
[  201.726251][   T50] Bluetooth: hci0: command 0x0406 tx timeout
[  214.738492][ T8130] netlink: 'syz.1.682': attribute type 4 has an invalid length.
[  214.815386][ T8135] netlink: 'syz.1.682': attribute type 4 has an invalid length.
[  214.845303][ T8134] netlink: 16 bytes leftover after parsing attributes in process `syz.3.684'.
[  214.945424][   T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  214.956877][   T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  214.967876][   T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  214.977488][   T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  214.985315][   T50] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  215.019061][   T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  215.542225][ T2968] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.698712][ T2968] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.803930][ T2968] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.938712][ T2968] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  216.086664][ T8137] chnl_net:caif_netlink_parms(): no params data found
[  216.594561][ T8137] bridge0: port 1(bridge_slave_0) entered blocking state
[  216.611200][ T8137] bridge0: port 1(bridge_slave_0) entered disabled state
[  216.637833][ T8137] bridge_slave_0: entered allmulticast mode
[  216.652262][ T8137] bridge_slave_0: entered promiscuous mode
[  216.716285][ T8137] bridge0: port 2(bridge_slave_1) entered blocking state
[  216.734335][ T8137] bridge0: port 2(bridge_slave_1) entered disabled state
[  216.750513][ T8137] bridge_slave_1: entered allmulticast mode
[  216.768015][ T8137] bridge_slave_1: entered promiscuous mode
[  217.086349][ T5783] Bluetooth: hci2: command tx timeout
[  217.198373][ T8137] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  217.225733][ T8137] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  217.365008][ T8185] netlink: 96 bytes leftover after parsing attributes in process `syz.0.698'.
[  217.622509][ T8137] team0: Port device team_slave_0 added
[  217.730278][ T8137] team0: Port device team_slave_1 added
[  218.040780][ T8137] batman_adv: batadv0: Adding interface: batadv_slave_0
[  218.056977][ T8137] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  218.090164][ T8137] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  218.242003][ T8137] batman_adv: batadv0: Adding interface: batadv_slave_1
[  218.258454][ T8137] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  218.286802][ T8137] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  218.533048][ T8137] hsr_slave_0: entered promiscuous mode
[  218.542063][ T8137] hsr_slave_1: entered promiscuous mode
[  218.550829][ T8137] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  218.558724][ T8137] Cannot create hsr debugfs directory
[  218.789966][ T2968] hsr_slave_0: left promiscuous mode
[  218.808432][ T2968] hsr_slave_1: left promiscuous mode
[  218.816835][ T2968] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  218.824778][ T2968] batman_adv: batadv0: Removing interface: batadv_slave_0
[  218.833771][ T2968] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  218.844303][ T2968] batman_adv: batadv0: Removing interface: batadv_slave_1
[  218.854511][ T2968] bridge_slave_1: left allmulticast mode
[  218.861380][ T2968] bridge_slave_1: left promiscuous mode
[  218.873581][ T2968] bridge0: port 2(bridge_slave_1) entered disabled state
[  218.889069][ T2968] bridge_slave_0: left allmulticast mode
[  218.894985][ T2968] bridge_slave_0: left promiscuous mode
[  218.902000][ T2968] bridge0: port 1(bridge_slave_0) entered disabled state
[  218.961567][ T2968] veth1_macvtap: left promiscuous mode
[  218.970766][ T2968] veth0_macvtap: left promiscuous mode
[  218.991453][ T2968] veth1_vlan: left promiscuous mode
[  219.012022][ T2968] veth0_vlan: left promiscuous mode
[  219.166378][ T5783] Bluetooth: hci2: command tx timeout
[  219.386263][ T5883] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  219.525730][ T2968] team0 (unregistering): Port device geneve0 removed
[  219.575997][ T5883] usb 1-1: Using ep0 maxpacket: 32
[  219.588631][ T5883] usb 1-1: config 0 has an invalid interface number: 132 but max is 0
[  219.611400][ T5883] usb 1-1: config 0 has no interface number 0
[  219.618710][ T5883] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  219.665819][ T5883] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  219.691100][ T5883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  219.705513][ T5883] usb 1-1: Product: syz
[  219.709934][ T5883] usb 1-1: Manufacturer: syz
[  219.714640][ T5883] usb 1-1: SerialNumber: syz
[  219.734429][ T5883] usb 1-1: config 0 descriptor??
[  219.760028][ T5883] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  219.771656][ T5883] em28xx 1-1:0.132: Video interface 132 found:
[  220.187933][ T5883] em28xx 1-1:0.132: unknown em28xx chip ID (0)
[  220.235726][ T2968] team0 (unregistering): Port device team_slave_1 removed
[  220.291187][ T2968] team0 (unregistering): Port device team_slave_0 removed
[  220.366920][ T2968] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  220.429354][ T2968] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  220.860341][ T5883] em28xx 1-1:0.132: failed to read eeprom (err=-110)
[  220.874728][ T5883] em28xx 1-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110]
[  221.107013][ T5883] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  221.120022][ T5883] em28xx 1-1:0.132: analog set to bulk mode.
[  221.128343][   T27] em28xx 1-1:0.132: Registering V4L2 extension
[  221.147827][ T5883] usb 1-1: USB disconnect, device number 11
[  221.167623][ T5883] em28xx 1-1:0.132: Disconnecting em28xx
[  221.246206][ T5783] Bluetooth: hci2: command tx timeout
[  221.249133][ T8242] kvm: MWAIT instruction emulated as NOP!
[  221.317836][ T2968] bond0 (unregistering): Released all slaves
[  221.440889][   T27] em28xx 1-1:0.132: Config register raw data: 0xffffffed
[  221.451424][   T27] em28xx 1-1:0.132: AC97 chip type couldn't be determined
[  221.459434][   T27] em28xx 1-1:0.132: No AC97 audio processor
[  221.479648][   T27] usb 1-1: Decoder not found
[  221.484277][   T27] em28xx 1-1:0.132: failed to create media graph
[  221.493656][   T27] em28xx 1-1:0.132: V4L2 device video103 deregistered
[  221.515055][   T27] em28xx 1-1:0.132: Remote control support is not available for this card.
[  221.523864][ T5883] em28xx 1-1:0.132: Closing input extension
[  221.561400][ T5883] em28xx 1-1:0.132: Freeing device
[  222.111073][ T8261] loop3: detected capacity change from 0 to 128
[  222.153913][ T8261] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535)
[  222.219981][ T8137] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  222.231423][ T8261] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none.
[  222.285696][ T8137] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  222.412793][ T8137] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  222.423359][ T8261] EXT4-fs error (device loop3): htree_dirblock_to_tree:1083: inode #2: comm syz.3.718: Directory block failed checksum
[  222.480461][ T8137] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  222.574296][ T5772] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  222.821788][ T8137] 8021q: adding VLAN 0 to HW filter on device bond0
[  222.888973][ T8137] 8021q: adding VLAN 0 to HW filter on device team0
[  222.928205][   T34] bridge0: port 1(bridge_slave_0) entered blocking state
[  222.935460][   T34] bridge0: port 1(bridge_slave_0) entered forwarding state
[  222.992342][   T34] bridge0: port 2(bridge_slave_1) entered blocking state
[  222.999666][   T34] bridge0: port 2(bridge_slave_1) entered forwarding state
[  223.103829][ T8137] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  223.124070][ T8137] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  223.174958][ T8292] netlink: 4 bytes leftover after parsing attributes in process `syz.1.721'.
[  223.201806][ T8292] netlink: 'syz.1.721': attribute type 15 has an invalid length.
[  223.261281][ T8292] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  223.271104][ T8292] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  223.280606][ T8292] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  223.290752][ T8292] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  223.326539][ T5783] Bluetooth: hci2: command tx timeout
[  223.345270][ T8292] vxlan0: entered promiscuous mode
[  223.448586][ T8298] loop3: detected capacity change from 0 to 128
[  223.534870][ T8125] blk_print_req_error: 72 callbacks suppressed
[  223.534889][ T8125] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  223.786697][ T8137] 8021q: adding VLAN 0 to HW filter on device batadv0
[  224.867553][ T8137] veth0_vlan: entered promiscuous mode
[  224.901197][ T8137] veth1_vlan: entered promiscuous mode
[  225.146357][ T8137] veth0_macvtap: entered promiscuous mode
[  225.193043][ T8137] veth1_macvtap: entered promiscuous mode
[  225.224635][ T8137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  225.243983][ T8137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.265575][ T8137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  225.284046][ T8137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.305632][ T8137] batman_adv: batadv0: Interface activated: batadv_slave_0
[  225.340888][ T8137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  225.351857][ T8137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.366049][ T2128] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  225.374113][ T8137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  225.392674][ T5883] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  225.403469][ T8137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.425824][ T8137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  225.443258][ T8137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.462152][ T8137] batman_adv: batadv0: Interface activated: batadv_slave_1
[  225.488811][ T8137] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  225.498071][ T8137] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  225.508002][ T8137] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  225.517242][ T8137] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  225.576318][ T5883] usb 2-1: Using ep0 maxpacket: 32
[  225.587300][ T2128] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  225.607764][ T5883] usb 2-1: config 0 has an invalid interface number: 184 but max is 0
[  225.616878][ T2128] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  225.627013][ T5883] usb 2-1: config 0 has no interface number 0
[  225.633177][ T5883] usb 2-1: config 0 interface 184 has no altsetting 0
[  225.647684][ T2128] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  225.654467][   T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  225.662331][ T5883] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  225.673994][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  225.676250][   T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  225.685004][ T2128] usb 1-1: config 0 descriptor??
[  225.697065][   T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  225.705492][ T5883] usb 2-1: Product: syz
[  225.710802][   T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  225.721523][   T50] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  225.736921][   T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  225.741334][ T5883] usb 2-1: Manufacturer: syz
[  225.807139][ T5883] usb 2-1: SerialNumber: syz
[  225.822361][ T5883] usb 2-1: config 0 descriptor??
[  225.842645][ T5883] smsc75xx v1.0.0
[  225.971994][ T2128] usbhid 1-1:0.0: can't add hid device: -71
[  225.978089][ T2968] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  225.979644][ T2128] usbhid: probe of 1-1:0.0 failed with error -71
[  225.997555][ T2128] usb 1-1: USB disconnect, device number 12
[  226.006506][ T2968] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  226.144402][   T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  226.181495][   T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  226.425073][ T8329] chnl_net:caif_netlink_parms(): no params data found
[  226.596152][ T2128] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  226.700171][ T8345] loop5: detected capacity change from 0 to 2048
[  227.323909][ T5883] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71
[  227.505160][ T5883] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD
[  227.515059][ T5883] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  227.529615][ T5883] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  227.539464][ T5883] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[  227.550628][ T5883] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  227.562485][ T5883] smsc75xx: probe of 2-1:0.184 failed with error -71
[  227.579707][ T5883] usb 2-1: USB disconnect, device number 9
[  227.582942][ T8345] Alternate GPT is invalid, using primary GPT.
[  227.603408][ T8345]  loop5: p1 p2 p3
[  227.685060][ T2128] usb 1-1: Using ep0 maxpacket: 16
[  227.726233][ T2128] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  227.807222][ T5783] Bluetooth: hci1: command tx timeout
[  227.817116][ T2128] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  227.827364][ T2128] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  227.860638][ T2128] usb 1-1: config 0 descriptor??
[  227.962523][ T8329] bridge0: port 1(bridge_slave_0) entered blocking state
[  227.993506][ T8329] bridge0: port 1(bridge_slave_0) entered disabled state
[  228.026329][ T8329] bridge_slave_0: entered allmulticast mode
[  228.033954][ T8329] bridge_slave_0: entered promiscuous mode
[  228.077541][ T8329] bridge0: port 2(bridge_slave_1) entered blocking state
[  228.103996][ T8329] bridge0: port 2(bridge_slave_1) entered disabled state
[  228.121267][ T8329] bridge_slave_1: entered allmulticast mode
[  228.134966][ T8329] bridge_slave_1: entered promiscuous mode
[  228.160401][ T2128] usbhid 1-1:0.0: can't add hid device: -71
[  228.186226][ T2128] usbhid: probe of 1-1:0.0 failed with error -71
[  228.226837][ T2128] usb 1-1: USB disconnect, device number 13
[  228.269338][ T8329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  228.314238][ T8329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  228.333062][ T8362] netlink: 'syz.0.731': attribute type 4 has an invalid length.
[  228.446489][ T5813] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  228.480501][ T8362] netlink: 'syz.0.731': attribute type 4 has an invalid length.
[  228.523666][ T8329] team0: Port device team_slave_0 added
[  228.542051][ T8329] team0: Port device team_slave_1 added
[  228.608414][ T8329] batman_adv: batadv0: Adding interface: batadv_slave_0
[  228.626663][ T8329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  228.656482][ T5813] usb 2-1: Using ep0 maxpacket: 16
[  228.681800][ T8329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  228.695271][ T5813] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  228.706351][ T5813] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  228.720310][ T8329] batman_adv: batadv0: Adding interface: batadv_slave_1
[  228.727901][ T5813] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  228.739262][ T8329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  228.766291][ T8329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  228.782840][ T5813] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  228.793590][ T5813] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  228.804035][ T5813] usb 2-1: Product: syz
[  228.808515][ T5813] usb 2-1: Manufacturer: syz
[  228.813212][ T5813] usb 2-1: SerialNumber: syz
[  228.822281][ T8370] hub 1-0:1.0: USB hub found
[  228.828465][ T8370] hub 1-0:1.0: 1 port detected
[  228.935285][ T8329] hsr_slave_0: entered promiscuous mode
[  228.947511][ T8329] hsr_slave_1: entered promiscuous mode
[  228.953940][ T8329] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  228.965656][ T8329] Cannot create hsr debugfs directory
[  229.277196][ T5813] usb 2-1: 2:1 : format type 0 is detected, processed as PCM
[  229.503655][ T8329] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  229.532160][ T8329] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  229.552354][ T8329] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  229.598697][ T8329] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  229.887942][ T5783] Bluetooth: hci1: command tx timeout
[  229.893973][ T8329] 8021q: adding VLAN 0 to HW filter on device bond0
[  230.017628][ T8329] 8021q: adding VLAN 0 to HW filter on device team0
[  230.061432][ T2968] bridge0: port 1(bridge_slave_0) entered blocking state
[  230.068693][ T2968] bridge0: port 1(bridge_slave_0) entered forwarding state
[  230.106862][ T2968] bridge0: port 2(bridge_slave_1) entered blocking state
[  230.114088][ T2968] bridge0: port 2(bridge_slave_1) entered forwarding state
[  230.458822][ T5813] usb 2-1: USB disconnect, device number 10
[  230.494256][ T8142] udevd[8142]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  230.633094][ T8329] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  231.400639][ T8329] 8021q: adding VLAN 0 to HW filter on device batadv0
[  231.695176][ T8418] cgroup: fork rejected by pids controller in /syz5
[  231.967216][ T5783] Bluetooth: hci1: command tx timeout
[  232.396122][ T5883] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  232.426053][ T8329] veth0_vlan: entered promiscuous mode
[  232.475451][ T8329] veth1_vlan: entered promiscuous mode
[  232.583373][ T8329] veth0_macvtap: entered promiscuous mode
[  232.590411][ T5883] usb 6-1: Using ep0 maxpacket: 16
[  232.599282][ T5883] usb 6-1: config 0 has no interfaces?
[  232.617762][ T5883] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  232.644045][ T8329] veth1_macvtap: entered promiscuous mode
[  232.657568][ T8482] loop0: detected capacity change from 0 to 2048
[  232.662227][ T5883] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  232.689132][ T5883] usb 6-1: Product: syz
[  232.705591][ T5883] usb 6-1: Manufacturer: syz
[  232.726842][ T5883] usb 6-1: SerialNumber: syz
[  232.734879][ T8329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  232.768167][ T5883] usb 6-1: config 0 descriptor??
[  232.779324][ T8482] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  232.785294][ T8329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  232.802840][ T8329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  232.814587][ T8329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  232.824672][ T8329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  232.835300][ T8329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  232.848006][ T8329] batman_adv: batadv0: Interface activated: batadv_slave_0
[  232.881190][ T8329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  232.894334][ T8329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  232.910812][ T8329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  232.923669][ T8329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  232.934941][ T8329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  232.945881][ T8329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  232.956374][ T8329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  232.969219][ T8329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  232.984431][ T8482] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  233.012658][ T8329] batman_adv: batadv0: Interface activated: batadv_slave_1
[  233.033897][ T8482] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 65793 with max blocks 1 with error 28
[  233.034789][ T5883] usb 6-1: USB disconnect, device number 2
[  233.051402][ T8329] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  233.064550][ T8329] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  233.073425][ T8329] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  233.082377][ T8329] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  233.096931][ T8482] EXT4-fs (loop0): This should not happen!! Data will be lost
[  233.096931][ T8482] 
[  233.108340][ T8482] EXT4-fs (loop0): Total free blocks count 0
[  233.114485][ T8482] EXT4-fs (loop0): Free/Dirty block details
[  233.152118][ T8482] EXT4-fs (loop0): free_blocks=4096
[  233.188251][ T8482] EXT4-fs (loop0): dirty_blocks=288
[  233.193692][ T8482] EXT4-fs (loop0): Block reservation details
[  233.230189][ T8482] EXT4-fs (loop0): i_reserved_data_blocks=18
[  233.309047][ T1140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  233.336393][ T8490] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 513 with error 28
[  233.355081][ T1140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  233.412969][ T8495] "syz.1.750" (8495) uses obsolete ecb(arc4) skcipher
[  233.451166][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  233.463445][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  233.938030][ T5883] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  234.046427][ T5783] Bluetooth: hci1: command tx timeout
[  234.126488][ T5883] usb 7-1: Using ep0 maxpacket: 32
[  234.145242][ T5883] usb 7-1: config 0 has an invalid interface number: 132 but max is 0
[  234.156087][ T5883] usb 7-1: config 0 has no interface number 0
[  234.162851][ T5883] usb 7-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  234.196033][ T5883] usb 7-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  234.235875][ T5883] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  234.245129][ T5883] usb 7-1: Product: syz
[  234.256137][ T8517] hub 1-0:1.0: USB hub found
[  234.296112][ T8517] hub 1-0:1.0: 1 port detected
[  234.306047][ T5883] usb 7-1: Manufacturer: syz
[  234.310728][ T5883] usb 7-1: SerialNumber: syz
[  234.360171][ T5883] usb 7-1: config 0 descriptor??
[  234.388463][ T5883] em28xx 7-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  234.426395][ T5883] em28xx 7-1:0.132: Video interface 132 found:
[  234.665797][ T8531] loop0: detected capacity change from 0 to 2048
[  234.738660][ T8531] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found!
[  234.792619][ T5883] em28xx 7-1:0.132: unknown em28xx chip ID (0)
[  234.816367][ T8531] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  234.946066][ T2128] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  235.147753][ T2128] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  235.159067][ T2128] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  235.170497][ T2128] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  235.183925][ T2128] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  235.193437][ T2128] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  235.208210][ T2128] usb 2-1: config 0 descriptor??
[  235.298253][ T5771] UDF-fs: error (device loop0): udf_verify_fi: directory (ino 1376) has entry at pos 0 with incorrect tag 0
[  235.345486][ T5771] UDF-fs: error (device loop0): udf_verify_fi: directory (ino 1376) has entry at pos 0 with incorrect tag 0
[  235.456072][ T5883] em28xx 7-1:0.132: failed to read eeprom (err=-110)
[  235.462900][ T5883] em28xx 7-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110]
[  235.649042][ T2128] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving
[  235.683119][ T2128] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  235.701537][ T8545] raw_sendmsg: syz.5.759 forgot to set AF_INET. Fix it!
[  235.712638][ T5883] em28xx 7-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  235.729393][ T5883] em28xx 7-1:0.132: analog set to bulk mode.
[  235.747354][ T2128] em28xx 7-1:0.132: Registering V4L2 extension
[  235.785262][ T5883] usb 7-1: USB disconnect, device number 2
[  235.814519][ T5883] em28xx 7-1:0.132: Disconnecting em28xx
[  236.012843][ T2959] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  236.120904][ T2128] em28xx 7-1:0.132: Config register raw data: 0xffffffed
[  236.132784][ T2128] em28xx 7-1:0.132: AC97 chip type couldn't be determined
[  236.140870][ T2128] em28xx 7-1:0.132: No AC97 audio processor
[  236.150687][ T2128] usb 7-1: Decoder not found
[  236.155434][ T2128] em28xx 7-1:0.132: failed to create media graph
[  236.162870][ T2128] em28xx 7-1:0.132: V4L2 device video103 deregistered
[  236.178280][ T2128] em28xx 7-1:0.132: Remote control support is not available for this card.
[  236.193988][ T5883] em28xx 7-1:0.132: Closing input extension
[  236.222439][ T2959] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  236.224877][ T5883] em28xx 7-1:0.132: Freeing device
[  236.375005][ T2959] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  236.578775][ T2959] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  236.588622][ T8555] hub 1-0:1.0: USB hub found
[  236.614915][ T8555] hub 1-0:1.0: 1 port detected
[  236.678319][ T8558] netlink: 4 bytes leftover after parsing attributes in process `syz.5.763'.
[  236.704447][ T8558] netlink: 'syz.5.763': attribute type 15 has an invalid length.
[  236.742465][ T8558] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  236.751334][ T8558] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  236.760416][ T8558] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  236.769461][ T8558] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  236.814627][ T8558] vxlan0: entered promiscuous mode
[  237.209617][   T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  237.223330][   T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  237.233580][   T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  237.244299][   T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  237.270033][   T50] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  237.296173][   T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  237.872999][ T5883] usb 2-1: USB disconnect, device number 11
[  238.009891][ T8584] loop5: detected capacity change from 0 to 2048
[  238.038412][ T8584] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found!
[  238.079463][ T8584] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  238.781624][ T8605] loop6: detected capacity change from 0 to 128
[  238.791205][ T8605] EXT4-fs: Ignoring removed nobh option
[  238.903979][ T8605] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  238.917969][ T8137] UDF-fs: error (device loop5): udf_verify_fi: directory (ino 1376) has entry at pos 0 with incorrect tag 0
[  238.933390][ T8137] UDF-fs: error (device loop5): udf_verify_fi: directory (ino 1376) has entry at pos 0 with incorrect tag 0
[  238.955309][ T8605] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  239.291919][ T8329] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  239.407674][ T5783] Bluetooth: hci0: command tx timeout
[  239.603345][ T8565] chnl_net:caif_netlink_parms(): no params data found
[  239.732160][ T2959] hsr_slave_1: left promiscuous mode
[  239.754909][ T2959] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  239.776187][ T5895] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  239.786162][ T2959] batman_adv: batadv0: Removing interface: batadv_slave_0
[  239.801677][ T2959] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  239.811080][ T2959] batman_adv: batadv0: Removing interface: batadv_slave_1
[  239.836962][ T2959] bridge_slave_1: left allmulticast mode
[  239.859574][ T2959] bridge_slave_1: left promiscuous mode
[  239.887141][ T2959] bridge0: port 2(bridge_slave_1) entered disabled state
[  239.918979][ T2959] bridge_slave_0: left allmulticast mode
[  239.924844][ T2959] bridge_slave_0: left promiscuous mode
[  239.940526][ T2959] bridge0: port 1(bridge_slave_0) entered disabled state
[  239.976340][ T5895] usb 7-1: Using ep0 maxpacket: 32
[  239.988319][ T5895] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  240.014169][ T5895] usb 7-1: config 0 has no interfaces?
[  240.031554][ T5895] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  240.057552][ T2959] veth1_macvtap: left promiscuous mode
[  240.063162][ T2959] veth0_macvtap: left promiscuous mode
[  240.068916][ T5895] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  240.089946][ T5895] usb 7-1: config 0 descriptor??
[  240.100051][ T2959] veth1_vlan: left promiscuous mode
[  240.105441][ T2959] veth0_vlan: left promiscuous mode
[  240.181684][ T8609] loop1: detected capacity change from 0 to 40427
[  240.264123][ T8609] F2FS-fs (loop1): Found nat_bits in checkpoint
[  240.435006][ T8609] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  240.759430][ T5782] F2FS-fs (loop1): access invalid blkaddr:2048
[  240.775722][ T5782] CPU: 0 PID: 5782 Comm: syz-executor Not tainted 6.6.95-syzkaller #0
[  240.783948][ T5782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  240.794052][ T5782] Call Trace:
[  240.797370][ T5782]  <TASK>
[  240.800342][ T5782]  dump_stack_lvl+0x16c/0x230
[  240.805077][ T5782]  ? show_regs_print_info+0x20/0x20
[  240.810320][ T5782]  ? f2fs_get_next_page_offset+0x690/0x690
[  240.816182][ T5782]  f2fs_is_valid_blkaddr+0xef8/0x1580
[  240.821607][ T5782]  f2fs_map_blocks+0xcdd/0x3c00
[  240.826564][ T5782]  ? f2fs_get_block_locked+0xe0/0xe0
[  240.831905][ T5782]  ? __lock_acquire+0x7c80/0x7c80
[  240.836977][ T5782]  ? xas_descend+0x3a4/0x490
[  240.841611][ T5782]  ? xa_load+0x2c0/0x2e0
[  240.845898][ T5782]  ? xa_load+0x64/0x2e0
[  240.850111][ T5782]  ? page_index+0xe7/0x470
[  240.854574][ T5782]  f2fs_mpage_readpages+0x9f5/0x1ec0
[  240.859942][ T5782]  ? detach_page_private+0x4c0/0x4c0
[  240.865274][ T5782]  ? __mod_lruvec_page_state+0xa5/0x420
[  240.870899][ T5782]  ? f2fs_readahead+0x167/0x300
[  240.875779][ T5782]  ? f2fs_dirty_data_folio+0x810/0x810
[  240.881275][ T5782]  read_pages+0x177/0x840
[  240.885648][ T5782]  ? folio_put+0xd0/0xd0
[  240.889925][ T5782]  ? page_cache_ra_unbounded+0x770/0x770
[  240.895611][ T5782]  ? filemap_add_folio+0x192/0x3c0
[  240.900780][ T5782]  page_cache_ra_unbounded+0x692/0x770
[  240.906303][ T5782]  f2fs_readdir+0x44c/0x8c0
[  240.910880][ T5782]  ? f2fs_fill_dentries+0xbb0/0xbb0
[  240.916124][ T5782]  ? mutex_lock_nested+0x20/0x20
[  240.921108][ T5782]  ? end_current_label_crit_section+0x149/0x170
[  240.927410][ T5782]  ? down_read_killable+0x1d0/0x340
[  240.930286][   T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  240.932632][ T5782]  ? fsnotify_perm+0x271/0x5e0
[  240.943362][   T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  240.944633][ T5782]  iterate_dir+0x1c2/0x580
[  240.953126][   T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  240.956007][ T5782]  __se_sys_getdents64+0xe9/0x260
[  240.956047][ T5782]  ? __x64_sys_getdents64+0x80/0x80
[  240.965554][   T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  240.968022][ T5782]  ? filldir+0x680/0x680
[  240.968060][ T5782]  ? lock_chain_count+0x20/0x20
[  240.968089][ T5782]  ? lockdep_hardirqs_on+0x98/0x150
[  240.974261][   T50] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  240.980236][ T5782]  do_syscall_64+0x55/0xb0
[  240.980270][ T5782]  ? clear_bhb_loop+0x40/0x90
[  240.980291][ T5782]  ? clear_bhb_loop+0x40/0x90
[  240.980313][ T5782]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  240.980345][ T5782] RIP: 0033:0x7fba0d7c1293
[  240.985193][   T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  240.989445][ T5782] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 72 3e f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8
[  240.989466][ T5782] RSP: 002b:00007ffc88225fc8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[  240.989490][ T5782] RAX: ffffffffffffffda RBX: 0000555563717600 RCX: 00007fba0d7c1293
[  240.989505][ T5782] RDX: 0000000000008000 RSI: 0000555563717600 RDI: 0000000000000005
[  240.989519][ T5782] RBP: 00005555637175d4 R08: 0000000000000000 R09: 0000000000000000
[  240.989532][ T5782] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffa8
[  240.989546][ T5782] R13: 0000000000000010 R14: 00005555637175d0 R15: 00007ffc88228280
[  240.989578][ T5782]  </TASK>
[  241.182887][ T5782] syz-executor: attempt to access beyond end of device
[  241.182887][ T5782] loop1: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[  241.243059][ T5782] syz-executor: attempt to access beyond end of device
[  241.243059][ T5782] loop1: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  241.314600][ T5782] syz-executor: attempt to access beyond end of device
[  241.314600][ T5782] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  241.344954][ T5782] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  241.489431][ T5783] Bluetooth: hci0: command tx timeout
[  241.792051][ T2959] team0 (unregistering): Port device team_slave_1 removed
[  241.851672][ T2959] team0 (unregistering): Port device team_slave_0 removed
[  241.906849][ T2959] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  241.969380][ T2959] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  242.601472][ T2959] bond0 (unregistering): Released all slaves
[  242.780422][ T8348] usb 7-1: USB disconnect, device number 3
[  242.786898][ T5782] bond0: (slave syz_tun): Releasing backup interface
[  243.161554][ T8565] bridge0: port 1(bridge_slave_0) entered blocking state
[  243.177451][ T5783] Bluetooth: hci2: command tx timeout
[  243.206316][ T8565] bridge0: port 1(bridge_slave_0) entered disabled state
[  243.213608][ T8565] bridge_slave_0: entered allmulticast mode
[  243.221924][ T8565] bridge_slave_0: entered promiscuous mode
[  243.235788][ T8565] bridge0: port 2(bridge_slave_1) entered blocking state
[  243.243891][ T8565] bridge0: port 2(bridge_slave_1) entered disabled state
[  243.261486][ T8565] bridge_slave_1: entered allmulticast mode
[  243.273071][ T8565] bridge_slave_1: entered promiscuous mode
[  243.477272][ T8565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  243.523303][ T8565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  243.566201][ T5783] Bluetooth: hci0: command tx timeout
[  243.703031][ T8565] team0: Port device team_slave_0 added
[  243.782544][ T8565] team0: Port device team_slave_1 added
[  243.902558][ T8565] batman_adv: batadv0: Adding interface: batadv_slave_0
[  243.912010][ T8565] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  243.945632][ T8565] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  244.052463][ T8565] batman_adv: batadv0: Adding interface: batadv_slave_1
[  244.086619][ T8565] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  244.190769][ T8565] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  244.507968][ T2959] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  244.536097][ T2959] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  244.594940][   T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  244.607868][   T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  244.621822][   T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  244.635199][ T8565] hsr_slave_0: entered promiscuous mode
[  244.641265][   T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  244.656329][   T50] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  244.667082][   T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  244.686610][ T8565] hsr_slave_1: entered promiscuous mode
[  244.732054][ T8669] loop6: detected capacity change from 0 to 40427
[  244.769406][ T8669] F2FS-fs (loop6): build fault injection attr: rate: 771, type: 0x7ffff
[  244.780517][ T2959] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  244.792291][ T2959] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  244.814159][ T8669] F2FS-fs (loop6): invalid crc value
[  244.832740][ T8669] F2FS-fs (loop6): Found nat_bits in checkpoint
[  244.861855][ T8635] chnl_net:caif_netlink_parms(): no params data found
[  244.919482][ T8669] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  244.934341][ T2959] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  244.971998][ T2959] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  245.002503][ T8669] syz.6.783: attempt to access beyond end of device
[  245.002503][ T8669] loop6: rw=2049, sector=77824, nr_sectors = 136 limit=40427
[  245.071893][ T8668] F2FS-fs (loop6): inject dquot initialize in f2fs_dquot_initialize of f2fs_truncate+0x2fa/0x700
[  245.129962][ T2959] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  245.140668][ T2959] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  245.160133][ T8329] syz-executor: attempt to access beyond end of device
[  245.160133][ T8329] loop6: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[  245.209120][ T8329] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  245.222200][ T8329] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  245.246093][ T8329] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  245.246559][   T50] Bluetooth: hci2: command tx timeout
[  245.457790][ T8635] bridge0: port 1(bridge_slave_0) entered blocking state
[  245.464982][ T8635] bridge0: port 1(bridge_slave_0) entered disabled state
[  245.480539][ T8635] bridge_slave_0: entered allmulticast mode
[  245.495596][ T8635] bridge_slave_0: entered promiscuous mode
[  245.571741][ T8635] bridge0: port 2(bridge_slave_1) entered blocking state
[  245.585333][ T8635] bridge0: port 2(bridge_slave_1) entered disabled state
[  245.593205][ T8635] bridge_slave_1: entered allmulticast mode
[  245.604000][ T8635] bridge_slave_1: entered promiscuous mode
[  245.646221][   T50] Bluetooth: hci0: command tx timeout
[  245.958092][ T8635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  245.992463][ T8635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  246.277359][ T8635] team0: Port device team_slave_0 added
[  246.304534][ T8635] team0: Port device team_slave_1 added
[  246.589364][ T8635] batman_adv: batadv0: Adding interface: batadv_slave_0
[  246.604399][ T8635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  246.631170][ T8635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  246.696793][ T8635] batman_adv: batadv0: Adding interface: batadv_slave_1
[  246.703805][ T8635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  246.734281][ T8635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  246.778040][   T50] Bluetooth: hci3: command tx timeout
[  246.921245][ T8565] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  246.943874][ T8565] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  246.963614][ T8676] chnl_net:caif_netlink_parms(): no params data found
[  247.038564][ T8635] hsr_slave_0: entered promiscuous mode
[  247.054834][ T8635] hsr_slave_1: entered promiscuous mode
[  247.062802][ T8635] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  247.077904][ T8635] Cannot create hsr debugfs directory
[  247.084873][ T8565] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  247.233950][ T8565] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  247.326292][   T50] Bluetooth: hci2: command tx timeout
[  247.777414][ T8676] bridge0: port 1(bridge_slave_0) entered blocking state
[  247.784634][ T8676] bridge0: port 1(bridge_slave_0) entered disabled state
[  247.793130][ T8676] bridge_slave_0: entered allmulticast mode
[  247.826325][ T8676] bridge_slave_0: entered promiscuous mode
[  247.883768][ T8676] bridge0: port 2(bridge_slave_1) entered blocking state
[  247.900636][ T8676] bridge0: port 2(bridge_slave_1) entered disabled state
[  247.913026][ T8676] bridge_slave_1: entered allmulticast mode
[  247.921079][ T8676] bridge_slave_1: entered promiscuous mode
[  248.088650][ T8676] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  248.163420][ T8676] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  248.311851][ T2959] hsr_slave_0: left promiscuous mode
[  248.318946][ T2959] hsr_slave_1: left promiscuous mode
[  248.326930][ T2959] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  248.334404][ T2959] batman_adv: batadv0: Removing interface: batadv_slave_0
[  248.344424][ T2959] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  248.353941][ T2959] batman_adv: batadv0: Removing interface: batadv_slave_1
[  248.363475][ T2959] bridge_slave_1: left allmulticast mode
[  248.370704][ T2959] bridge_slave_1: left promiscuous mode
[  248.379116][ T2959] bridge0: port 2(bridge_slave_1) entered disabled state
[  248.388845][ T2959] bridge_slave_0: left allmulticast mode
[  248.394529][ T2959] bridge_slave_0: left promiscuous mode
[  248.401011][ T2959] bridge0: port 1(bridge_slave_0) entered disabled state
[  248.447884][ T2959] veth1_macvtap: left promiscuous mode
[  248.456391][ T2959] veth0_macvtap: left promiscuous mode
[  248.462108][ T2959] veth1_vlan: left promiscuous mode
[  248.494994][ T2959] veth0_vlan: left promiscuous mode
[  248.856341][   T50] Bluetooth: hci3: command tx timeout
[  248.916451][ T5883] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  249.147401][ T5883] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  249.159011][ T5883] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  249.169416][ T5883] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  249.178807][ T5883] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  249.189897][ T5883] usb 7-1: config 0 descriptor??
[  249.403427][ T2959] team0 (unregistering): Port device team_slave_1 removed
[  249.416364][   T50] Bluetooth: hci2: command tx timeout
[  249.470022][ T2959] team0 (unregistering): Port device team_slave_0 removed
[  249.541992][ T2959] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  249.605743][ T2959] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  250.398286][ T2959] bond0 (unregistering): Released all slaves
[  250.436632][ T5883] uclogic 0003:256C:006D.000A: v1 frame probing failed: -71
[  250.459546][ T5883] uclogic 0003:256C:006D.000A: failed probing parameters: -71
[  250.467748][ T5883] uclogic: probe of 0003:256C:006D.000A failed with error -71
[  250.478885][ T5883] usb 7-1: USB disconnect, device number 4
[  250.558405][ T8676] team0: Port device team_slave_0 added
[  250.578702][ T8676] team0: Port device team_slave_1 added
[  250.702970][ T8635] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  250.732573][ T8676] batman_adv: batadv0: Adding interface: batadv_slave_0
[  250.741545][ T8676] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  250.769547][ T8676] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  250.782458][ T8676] batman_adv: batadv0: Adding interface: batadv_slave_1
[  250.789520][ T8676] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  250.816322][ T8676] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  250.836070][ T8635] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  250.900744][ T8635] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  250.926413][   T50] Bluetooth: hci3: command tx timeout
[  250.969124][ T8635] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  251.011130][ T8676] hsr_slave_0: entered promiscuous mode
[  251.051221][ T8676] hsr_slave_1: entered promiscuous mode
[  251.076073][ T8676] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  251.083693][ T8676] Cannot create hsr debugfs directory
[  251.204537][ T8565] 8021q: adding VLAN 0 to HW filter on device bond0
[  251.429069][ T8565] 8021q: adding VLAN 0 to HW filter on device team0
[  251.508711][   T34] bridge0: port 1(bridge_slave_0) entered blocking state
[  251.515999][   T34] bridge0: port 1(bridge_slave_0) entered forwarding state
[  251.607974][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state
[  251.615203][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state
[  251.885486][ T8565] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  251.977676][ T8676] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  251.998407][ T8676] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  252.018164][ T8676] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  252.032135][ T8676] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  252.148371][ T8635] 8021q: adding VLAN 0 to HW filter on device bond0
[  252.261708][ T8635] 8021q: adding VLAN 0 to HW filter on device team0
[  252.347293][   T34] bridge0: port 1(bridge_slave_0) entered blocking state
[  252.354496][   T34] bridge0: port 1(bridge_slave_0) entered forwarding state
[  252.402986][ T2981] bridge0: port 2(bridge_slave_1) entered blocking state
[  252.410325][ T2981] bridge0: port 2(bridge_slave_1) entered forwarding state
[  252.597902][ T8676] 8021q: adding VLAN 0 to HW filter on device bond0
[  252.618159][ T8565] 8021q: adding VLAN 0 to HW filter on device batadv0
[  252.698168][ T8635] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  252.788370][ T8676] 8021q: adding VLAN 0 to HW filter on device team0
[  252.884095][ T2981] bridge0: port 1(bridge_slave_0) entered blocking state
[  252.891356][ T2981] bridge0: port 1(bridge_slave_0) entered forwarding state
[  252.936666][ T2981] bridge0: port 2(bridge_slave_1) entered blocking state
[  252.943881][ T2981] bridge0: port 2(bridge_slave_1) entered forwarding state
[  253.017376][   T50] Bluetooth: hci3: command tx timeout
[  253.186251][   T55] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  253.243439][ T8676] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  253.266973][ T8676] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  253.408244][   T55] usb 7-1: config index 0 descriptor too short (expected 3133, got 61)
[  253.426439][   T55] usb 7-1: config 0 has an invalid interface number: 156 but max is 1
[  253.434680][   T55] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  253.444774][ T8635] 8021q: adding VLAN 0 to HW filter on device batadv0
[  253.452079][   T55] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2
[  253.461028][   T55] usb 7-1: config 0 has no interface number 0
[  253.467333][   T55] usb 7-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  253.477371][   T55] usb 7-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  253.498673][   T55] usb 7-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  253.508836][   T55] usb 7-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  253.522395][   T55] usb 7-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9
[  253.532645][   T55] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  253.573120][   T55] usb 7-1: config 0 descriptor??
[  253.602064][   T55] gspca_main: spca561-2.14.0 probing abcd:cdee
[  253.782000][ T8565] veth0_vlan: entered promiscuous mode
[  253.853232][ T8565] veth1_vlan: entered promiscuous mode
[  253.995667][   T55] spca561: probe of 7-1:0.156 failed with error -22
[  254.015065][   T55] usb 7-1: Quirk or no altest; falling back to MIDI 1.0
[  254.036699][   T55] usb 7-1: MIDIStreaming interface descriptor not found
[  254.111017][ T8565] veth0_macvtap: entered promiscuous mode
[  254.178248][ T8565] veth1_macvtap: entered promiscuous mode
[  254.195122][ T8676] 8021q: adding VLAN 0 to HW filter on device batadv0
[  254.207388][   T55] usb 7-1: USB disconnect, device number 5
[  254.338440][ T8565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  254.376338][ T8565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  254.396119][ T8565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  254.416824][ T8565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  254.459787][ T8565] batman_adv: batadv0: Interface activated: batadv_slave_0
[  254.479751][ T8565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  254.493843][ T8565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  254.507944][ T8565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  254.518734][ T8565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  254.546684][ T8565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  254.558793][ T8565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  254.585267][ T8565] batman_adv: batadv0: Interface activated: batadv_slave_1
[  254.621770][ T8565] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  254.634771][ T8565] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  254.670656][ T8565] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  254.683390][ T8565] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  254.907915][ T8856] loop6: detected capacity change from 0 to 64
[  254.938324][ T8635] veth0_vlan: entered promiscuous mode
[  255.159287][ T8635] veth1_vlan: entered promiscuous mode
[  255.333053][   T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  255.378171][   T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  255.443186][ T8676] veth0_vlan: entered promiscuous mode
[  255.473437][ T8635] veth0_macvtap: entered promiscuous mode
[  255.498101][   T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  255.516766][   T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  255.536770][ T8635] veth1_macvtap: entered promiscuous mode
[  255.618808][ T8676] veth1_vlan: entered promiscuous mode
[  255.626945][    T8] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  255.635162][ T8635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  255.654442][ T8635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  255.670530][ T8635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  255.692241][ T8635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  255.703584][ T8635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  255.724781][ T8635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  255.741684][ T8635] batman_adv: batadv0: Interface activated: batadv_slave_0
[  255.796891][ T8635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  255.826129][    T8] usb 7-1: Using ep0 maxpacket: 32
[  255.826474][ T8635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  255.847323][    T8] usb 7-1: unable to get BOS descriptor or descriptor too short
[  255.860321][ T8635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  255.879448][    T8] usb 7-1: unable to read config index 0 descriptor/start: -71
[  255.889643][ T8635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  255.906101][    T8] usb 7-1: can't read configurations, error -71
[  255.942517][ T8635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  255.956946][ T8635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  255.977791][ T1287] ieee802154 phy0 wpan0: encryption failed: -22
[  255.983920][ T8635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  255.984277][ T1287] ieee802154 phy1 wpan1: encryption failed: -22
[  255.995341][ T8635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  256.022736][ T8635] batman_adv: batadv0: Interface activated: batadv_slave_1
[  256.054571][ T8873] netlink: 'syz.7.762': attribute type 5 has an invalid length.
[  256.160912][ T8635] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  256.180078][ T8635] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  256.189322][ T8635] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  256.198383][ T8635] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  256.342511][ T8676] veth0_macvtap: entered promiscuous mode
[  256.374153][ T8676] veth1_macvtap: entered promiscuous mode
[  256.469817][ T8676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  256.509751][ T8676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  256.528311][ T8676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  256.546384][ T8676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  256.556832][ T8676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  256.583870][ T8676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  256.606283][ T8676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  256.626233][ T8676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  256.648026][ T8676] batman_adv: batadv0: Interface activated: batadv_slave_0
[  256.707833][ T8676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  256.756077][ T8676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  256.785765][ T8676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  256.817413][ T8676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  256.856558][ T8676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  256.875935][ T8676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  256.885808][ T8676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  256.924045][ T8676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  256.957305][ T8676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  256.974618][ T8676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  257.010386][ T8676] batman_adv: batadv0: Interface activated: batadv_slave_1
[  257.045752][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  257.093434][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  257.148524][ T8676] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  257.167848][ T8676] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  257.188158][ T8676] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  257.205979][ T8676] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  257.295648][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  257.391562][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  257.538283][   T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  257.560033][   T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  257.635504][   T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  257.677465][   T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  257.977263][ T8914] "syz.9.782" (8914) uses obsolete ecb(arc4) skcipher
[  258.901581][ T8948] netlink: 32 bytes leftover after parsing attributes in process `syz.8.819'.
[  258.920078][ T8948] netlink: 30 bytes leftover after parsing attributes in process `syz.8.819'.
[  259.072753][ T8954] batman_adv: batadv0: Adding interface: ip6gretap1
[  259.080088][ T8954] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  259.108229][ T8954] batman_adv: batadv0: Interface activated: ip6gretap1
[  259.384891][ T8959] Falling back ldisc for ptm0.
[  259.456953][ T8964] netlink: 32 bytes leftover after parsing attributes in process `syz.7.824'.
[  259.735347][ T8971] loop8: detected capacity change from 0 to 2048
[  259.789119][ T8971] UDF-fs: error (device loop8): udf_process_sequence: Primary Volume Descriptor not found!
[  259.863018][ T8971] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  260.250070][ T8988] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  260.466910][   T55] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  260.751084][   T55] usb 10-1: config index 0 descriptor too short (expected 3133, got 61)
[  260.769855][   T55] usb 10-1: config 0 has an invalid interface number: 156 but max is 1
[  260.807624][   T55] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  260.833219][   T55] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2
[  260.865767][   T55] usb 10-1: config 0 has no interface number 0
[  260.883544][   T55] usb 10-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  260.894169][   T55] usb 10-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  260.913554][   T55] usb 10-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  260.923766][   T55] usb 10-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  260.962311][   T55] usb 10-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9
[  260.992745][   T55] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  261.029779][   T55] usb 10-1: config 0 descriptor??
[  261.061669][   T55] gspca_main: spca561-2.14.0 probing abcd:cdee
[  261.423458][   T55] spca561: probe of 10-1:0.156 failed with error -22
[  261.446295][   T55] usb 10-1: Quirk or no altest; falling back to MIDI 1.0
[  261.466246][   T55] usb 10-1: MIDIStreaming interface descriptor not found
[  261.618274][   T55] usb 10-1: USB disconnect, device number 2
[  262.418179][ T9038] netlink: 'syz.7.842': attribute type 4 has an invalid length.
[  262.432262][ T9038] netlink: 'syz.7.842': attribute type 3 has an invalid length.
[  262.459210][ T9038] netlink: 12 bytes leftover after parsing attributes in process `syz.7.842'.
[  262.587097][ T9048] loop8: detected capacity change from 0 to 1024
[  262.599163][ T9048] EXT4-fs: Ignoring removed oldalloc option
[  262.683270][ T9048] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  263.035390][ T8635] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  263.774755][ T9076] input: syz1 as /devices/virtual/input/input11
[  264.196240][   T55] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  264.448108][   T55] usb 8-1: config index 0 descriptor too short (expected 3133, got 61)
[  264.459858][   T55] usb 8-1: config 0 has an invalid interface number: 156 but max is 1
[  264.468843][   T55] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  264.480412][   T55] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2
[  264.495815][   T55] usb 8-1: config 0 has no interface number 0
[  264.512345][   T55] usb 8-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  264.532608][   T55] usb 8-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  264.577070][   T55] usb 8-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  264.599578][   T55] usb 8-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  264.632177][   T55] usb 8-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9
[  264.645152][   T55] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  264.728055][   T55] usb 8-1: config 0 descriptor??
[  264.755160][   T55] gspca_main: spca561-2.14.0 probing abcd:cdee
[  264.986076][ T5813] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  265.207388][ T5813] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  265.229038][ T5813] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  265.296605][   T55] spca561: probe of 8-1:0.156 failed with error -22
[  265.310018][ T5813] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  265.330718][   T55] usb 8-1: Quirk or no altest; falling back to MIDI 1.0
[  265.338399][ T5813] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  265.367275][   T55] usb 8-1: MIDIStreaming interface descriptor not found
[  265.376008][ T5813] usb 9-1: Product: syz
[  265.380325][ T5813] usb 9-1: Manufacturer: syz
[  265.384957][ T5813] usb 9-1: SerialNumber: syz
[  265.524092][   T55] usb 8-1: USB disconnect, device number 2
[  265.638284][ T9104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  265.667250][ T9104] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  265.708793][ T5813] cdc_ether: probe of 9-1:1.0 failed with error -22
[  265.772440][ T5813] usb 9-1: USB disconnect, device number 2
[  266.253335][ T9113] loop6: detected capacity change from 0 to 32768
[  266.276424][ T5813] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  266.306143][ T9113] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.863 (9113)
[  266.330687][ T9110] loop9: detected capacity change from 0 to 32768
[  266.426074][ T9110] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop9 scanned by syz.9.862 (9110)
[  266.440935][ T9113] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  266.476160][ T5813] usb 9-1: Using ep0 maxpacket: 8
[  266.485437][ T9113] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm
[  266.520752][ T5813] usb 9-1: config index 0 descriptor too short (expected 301, got 72)
[  266.527962][ T9110] BTRFS info (device loop9): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  266.544417][ T9113] BTRFS info (device loop6): force clearing of disk cache
[  266.558294][ T5813] usb 9-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  266.575564][ T9110] BTRFS info (device loop9): using blake2b (blake2b-256-generic) checksum algorithm
[  266.589089][ T9113] BTRFS info (device loop6): enabling auto defrag
[  266.601918][ T5813] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  266.623647][ T9113] BTRFS info (device loop6): max_inline at 0
[  266.643856][ T9113] BTRFS info (device loop6): enabling disk space caching
[  266.644499][ T9110] BTRFS info (device loop9): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  266.654050][ T5813] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  266.693528][ T9113] BTRFS info (device loop6): disk space caching is enabled
[  266.714973][ T5813] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  266.722612][ T9110] BTRFS info (device loop9): use zstd compression, level 3
[  266.755562][ T9110] BTRFS info (device loop9): using free space tree
[  266.762877][ T5813] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  266.788707][ T5813] usb 9-1: config 16 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  266.842941][ T5813] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  266.910842][ T5813] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  266.945694][ T9113] BTRFS info (device loop6): enabling ssd optimizations
[  267.023098][ T9113] BTRFS info (device loop6): rebuilding free space tree
[  267.037812][ T9110] BTRFS info (device loop9): enabling ssd optimizations
[  267.044861][ T9110] BTRFS info (device loop9): auto enabling async discard
[  267.147077][ T9113] BTRFS info (device loop6): disabling free space tree
[  267.167466][ T9113] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  267.178719][ T5813] usb 9-1: usb_control_msg returned -32
[  267.184373][ T5813] usbtmc 9-1:16.0: can't read capabilities
[  267.188462][ T9113] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  267.236838][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.242986][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.249188][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.255284][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.261350][    C0] usbtmc 9-1:16.0: invalid notification: 11
[  267.267523][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.274189][    C0] usbtmc 9-1:16.0: invalid notification: 2
[  267.280447][    C0] usbtmc 9-1:16.0: invalid notification: 5
[  267.286490][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.292559][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.300866][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.307027][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.313107][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.323112][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.329493][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.335575][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.341690][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.347802][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.353885][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.360044][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.366124][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.372191][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.378379][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.384495][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.390601][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.396690][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.402757][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.408910][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.414975][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.421068][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.427921][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.434068][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.440157][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.446249][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.452365][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.458498][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.464553][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.470688][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.476787][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.482881][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.490182][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.496753][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.502815][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.508883][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.514942][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.521099][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.528149][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.534439][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.546500][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.552656][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.558723][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.564799][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.570893][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.582211][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.593055][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.599148][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.605282][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.614791][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.620883][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.631559][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.637854][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.643933][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.650185][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.656386][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.662478][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.668636][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.674733][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.680823][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.686937][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.693026][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.699119][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.705146][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.711216][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.723865][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.730827][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.738106][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.744187][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.750656][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.756813][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.762927][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.769022][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.775111][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.781228][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.787384][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.793489][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.799581][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.805655][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.811942][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.818019][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.824095][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.830343][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.837130][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.843307][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.849629][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.855731][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.861772][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.867839][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.873928][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.880025][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.886167][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.892272][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.898340][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.904419][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.910480][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.916562][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.922655][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.928880][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.935649][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.941831][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.947912][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.954006][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.960724][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.966875][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.972961][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.979042][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.985104][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.991170][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  267.997273][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  268.003342][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  268.009426][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  268.015583][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  268.022320][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  268.028400][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  268.034485][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  268.041365][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  268.047618][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  268.053682][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  268.059724][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  268.065776][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  268.071945][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  268.078122][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  268.084177][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  268.090306][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  268.096383][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  268.102469][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  268.108498][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  268.114575][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  268.120647][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  268.128068][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  268.134393][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  268.141198][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  268.147466][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  268.153676][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  268.159751][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  268.165996][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  268.172257][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  268.178332][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  268.184416][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  268.190547][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  268.196649][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  268.202703][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  268.208891][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  268.214967][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  268.221005][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  268.227068][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  268.233153][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  268.239229][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  268.246244][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  268.252580][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  268.266003][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  268.272076][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  268.278137][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  268.284225][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  268.290372][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  268.296555][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  268.303066][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  268.309187][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  268.315340][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  268.321471][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  268.327543][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  268.333613][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  268.339685][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  268.347183][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  268.353328][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  268.359497][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  268.365590][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  268.371677][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  268.377749][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  268.383835][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  268.385818][   T34] BTRFS info (device loop6): qgroup scan completed (inconsistency flag cleared)
[  268.389882][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  268.405672][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  268.411736][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  268.417815][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  268.423914][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  268.430000][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  268.436151][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  268.442256][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  268.448994][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  268.455119][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  268.461260][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  268.467357][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  268.473463][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  268.479548][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  268.485745][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  268.491878][    C0] usbtmc 9-1:16.0: invalid notification: 0
[  268.506680][ T8676] BTRFS info (device loop9): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  268.680197][ T8329] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  268.704900][ T5883] usb 9-1: USB disconnect, device number 3
[  268.796546][ T8123] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 10 /dev/loop9 scanned by udevd (8123)
[  270.834291][ T9205] loop6: detected capacity change from 0 to 512
[  271.019721][ T9205] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  271.075055][ T9205] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  271.255598][ T9205] EXT4-fs error (device loop6): ext4_empty_dir:3139: inode #12: comm syz.6.875: Directory hole found for htree leaf block 0
[  271.294307][ T9205] EXT4-fs (loop6): Remounting filesystem read-only
[  271.464371][ T8329] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  271.576668][ T1140] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  271.615826][ T1140] Quota error (device loop6): write_blk: dquota write failed
[  271.654292][ T1140] Quota error (device loop6): free_dqentry: Can't write quota data block 5
[  271.878163][ T9217] usb usb8: usbfs: process 9217 (syz.7.877) did not claim interface 0 before use
[  272.274807][ T9226] 
[  272.277199][ T9226] =====================================================
[  272.284157][ T9226] WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected
[  272.291737][ T9226] 6.6.95-syzkaller #0 Not tainted
[  272.296788][ T9226] -----------------------------------------------------
[  272.303753][ T9226] syz.6.878/9226 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire:
[  272.311422][ T9226] ffff8880318c0558 (&new->fa_lock){....}-{2:2}, at: kill_fasync+0x192/0x4b0
[  272.320187][ T9226] 
[  272.320187][ T9226] and this task is already holding:
[  272.327578][ T9226] ffff888059bcf028 (&client->buffer_lock){....}-{2:2}, at: evdev_pass_values+0xcb/0xab0
[  272.337379][ T9226] which would create a new lock dependency:
[  272.343294][ T9226]  (&client->buffer_lock){....}-{2:2} -> (&new->fa_lock){....}-{2:2}
[  272.351446][ T9226] 
[  272.351446][ T9226] but this new dependency connects a HARDIRQ-irq-safe lock:
[  272.360910][ T9226]  (&dev->event_lock#2){-...}-{2:2}
[  272.360946][ T9226] 
[  272.360946][ T9226] ... which became HARDIRQ-irq-safe at:
[  272.373945][ T9226]   lock_acquire+0x197/0x410
[  272.378561][ T9226]   _raw_spin_lock_irqsave+0xa8/0xf0
[  272.383870][ T9226]   input_event+0x7a/0xc0
[  272.388214][ T9226]   psmouse_report_standard_packet+0x53/0x200
[  272.394300][ T9226]   psmouse_process_byte+0x478/0x670
[  272.399605][ T9226]   psmouse_handle_byte+0x43/0x490
[  272.404726][ T9226]   ps2_interrupt+0x164/0x980
[  272.409513][ T9226]   serio_interrupt+0x8b/0x130
[  272.414287][ T9226]   i8042_interrupt+0x394/0x730
[  272.419147][ T9226]   __handle_irq_event_percpu+0x276/0x930
[  272.424909][ T9226]   handle_irq_event+0x8b/0x1e0
[  272.429772][ T9226]   handle_edge_irq+0x247/0xb30
[  272.434633][ T9226]   __common_interrupt+0x13b/0x230
[  272.439760][ T9226]   common_interrupt+0xb4/0xd0
[  272.444549][ T9226]   asm_common_interrupt+0x26/0x40
[  272.449679][ T9226]   _raw_spin_unlock_irqrestore+0xa9/0x110
[  272.455510][ T9226]   i8042_aux_write+0x109/0x170
[  272.460372][ T9226]   ps2_do_sendbyte+0x1ff/0x6d0
[  272.465233][ T9226]   ps2_sendbyte+0x5f/0x120
[  272.469839][ T9226]   cypress_send_ext_cmd+0x23d/0x920
[  272.475138][ T9226]   cypress_detect+0x8d/0x190
[  272.479828][ T9226]   psmouse_extensions+0x467/0xbe0
[  272.485047][ T9226]   psmouse_switch_protocol+0xdc/0x610
[  272.490532][ T9226]   psmouse_connect+0x89f/0x1470
[  272.495484][ T9226]   serio_driver_probe+0x7a/0xa0
[  272.500430][ T9226]   really_probe+0x25b/0xb40
[  272.505034][ T9226]   __driver_probe_device+0x18c/0x330
[  272.510428][ T9226]   driver_probe_device+0x4f/0x420
[  272.515553][ T9226]   __driver_attach+0x44e/0x6f0
[  272.520426][ T9226]   bus_for_each_dev+0x22d/0x2a0
[  272.525458][ T9226]   serio_handle_event+0x1a2/0x860
[  272.530583][ T9226]   process_scheduled_works+0xa45/0x15b0
[  272.536235][ T9226]   worker_thread+0xa55/0xfc0
[  272.540967][ T9226]   kthread+0x2fa/0x390
[  272.545153][ T9226]   ret_from_fork+0x48/0x80
[  272.549673][ T9226]   ret_from_fork_asm+0x11/0x20
[  272.554538][ T9226] 
[  272.554538][ T9226] to a HARDIRQ-irq-unsafe lock:
[  272.561557][ T9226]  (tasklist_lock){.+.+}-{2:2}
[  272.561585][ T9226] 
[  272.561585][ T9226] ... which became HARDIRQ-irq-unsafe at:
[  272.574231][ T9226] ...
[  272.574237][ T9226]   lock_acquire+0x197/0x410
[  272.581425][ T9226]   _raw_read_lock+0x36/0x50
[  272.586129][ T9226]   do_wait+0x294/0xaf0
[  272.590305][ T9226]   kernel_wait+0xac/0x170
[  272.594736][ T9226]   call_usermodehelper_exec_work+0xb9/0x220
[  272.600732][ T9226]   process_scheduled_works+0xa45/0x15b0
[  272.606376][ T9226]   worker_thread+0xa55/0xfc0
[  272.611065][ T9226]   kthread+0x2fa/0x390
[  272.615228][ T9226]   ret_from_fork+0x48/0x80
[  272.619744][ T9226]   ret_from_fork_asm+0x11/0x20
[  272.624612][ T9226] 
[  272.624612][ T9226] other info that might help us debug this:
[  272.624612][ T9226] 
[  272.634944][ T9226] Chain exists of:
[  272.634944][ T9226]   &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock
[  272.634944][ T9226] 
[  272.648528][ T9226]  Possible interrupt unsafe locking scenario:
[  272.648528][ T9226] 
[  272.656861][ T9226]        CPU0                    CPU1
[  272.662856][ T9226]        ----                    ----
[  272.668243][ T9226]   lock(tasklist_lock);
[  272.672511][ T9226]                                local_irq_disable();
[  272.679272][ T9226]                                lock(&dev->event_lock#2);
[  272.686487][ T9226]                                lock(&client->buffer_lock);
[  272.693869][ T9226]   <Interrupt>
[  272.697336][ T9226]     lock(&dev->event_lock#2);
[  272.702203][ T9226] 
[  272.702203][ T9226]  *** DEADLOCK ***
[  272.702203][ T9226] 
[  272.710356][ T9226] 7 locks held by syz.6.878/9226:
[  272.715380][ T9226]  #0: ffff8880263c0110 (&evdev->mutex){+.+.}-{3:3}, at: evdev_write+0x17b/0x470
[  272.724892][ T9226]  #1: ffff888026222230 (&dev->event_lock#2){-...}-{2:2}, at: input_inject_event+0xab/0x320
[  272.735023][ T9226]  #2: ffffffff8cd2f760 (rcu_read_lock){....}-{1:2}, at: input_inject_event+0xbc/0x320
[  272.744718][ T9226]  #3: ffffffff8cd2f760 (rcu_read_lock){....}-{1:2}, at: input_pass_values+0xa3/0x1300
[  272.754408][ T9226]  #4: ffffffff8cd2f760 (rcu_read_lock){....}-{1:2}, at: evdev_events+0x79/0x330
[  272.763576][ T9226]  #5: ffff888059bcf028 (&client->buffer_lock){....}-{2:2}, at: evdev_pass_values+0xcb/0xab0
[  272.773782][ T9226]  #6: ffffffff8cd2f760 (rcu_read_lock){....}-{1:2}, at: kill_fasync+0x53/0x4b0
[  272.782865][ T9226] 
[  272.782865][ T9226] the dependencies between HARDIRQ-irq-safe lock and the holding lock:
[  272.793366][ T9226]  -> (&dev->event_lock#2){-...}-{2:2} {
[  272.799041][ T9226]     IN-HARDIRQ-W at:
[  272.803115][ T9226]                       lock_acquire+0x197/0x410
[  272.809459][ T9226]                       _raw_spin_lock_irqsave+0xa8/0xf0
[  272.816500][ T9226]                       input_event+0x7a/0xc0
[  272.822611][ T9226]                       psmouse_report_standard_packet+0x53/0x200
[  272.830438][ T9226]                       psmouse_process_byte+0x478/0x670
[  272.837499][ T9226]                       psmouse_handle_byte+0x43/0x490
[  272.844370][ T9226]                       ps2_interrupt+0x164/0x980
[  272.850805][ T9226]                       serio_interrupt+0x8b/0x130
[  272.857322][ T9226]                       i8042_interrupt+0x394/0x730
[  272.863925][ T9226]                       __handle_irq_event_percpu+0x276/0x930
[  272.871411][ T9226]                       handle_irq_event+0x8b/0x1e0
[  272.878015][ T9226]                       handle_edge_irq+0x247/0xb30
[  272.884615][ T9226]                       __common_interrupt+0x13b/0x230
[  272.891478][ T9226]                       common_interrupt+0xb4/0xd0
[  272.898085][ T9226]                       asm_common_interrupt+0x26/0x40
[  272.904944][ T9226]                       _raw_spin_unlock_irqrestore+0xa9/0x110
[  272.912510][ T9226]                       i8042_aux_write+0x109/0x170
[  272.919111][ T9226]                       ps2_do_sendbyte+0x1ff/0x6d0
[  272.925711][ T9226]                       ps2_sendbyte+0x5f/0x120
[  272.931966][ T9226]                       cypress_send_ext_cmd+0x23d/0x920
[  272.939002][ T9226]                       cypress_detect+0x8d/0x190
[  272.945430][ T9226]                       psmouse_extensions+0x467/0xbe0
[  272.952296][ T9226]                       psmouse_switch_protocol+0xdc/0x610
[  272.959513][ T9226]                       psmouse_connect+0x89f/0x1470
[  272.966235][ T9226]                       serio_driver_probe+0x7a/0xa0
[  272.972920][ T9226]                       really_probe+0x25b/0xb40
[  272.979268][ T9226]                       __driver_probe_device+0x18c/0x330
[  272.986389][ T9226]                       driver_probe_device+0x4f/0x420
[  272.993250][ T9226]                       __driver_attach+0x44e/0x6f0
[  272.999862][ T9226]                       bus_for_each_dev+0x22d/0x2a0
[  273.006546][ T9226]                       serio_handle_event+0x1a2/0x860
[  273.013404][ T9226]                       process_scheduled_works+0xa45/0x15b0
[  273.020790][ T9226]                       worker_thread+0xa55/0xfc0
[  273.027312][ T9226]                       kthread+0x2fa/0x390
[  273.033213][ T9226]                       ret_from_fork+0x48/0x80
[  273.039462][ T9226]                       ret_from_fork_asm+0x11/0x20
[  273.046063][ T9226]     INITIAL USE at:
[  273.050057][ T9226]                      lock_acquire+0x197/0x410
[  273.056309][ T9226]                      _raw_spin_lock_irqsave+0xa8/0xf0
[  273.063268][ T9226]                      input_inject_event+0xab/0x320
[  273.069958][ T9226]                      led_trigger_event+0x133/0x210
[  273.076648][ T9226]                      kbd_led_trigger_activate+0xbd/0x100
[  273.083857][ T9226]                      led_trigger_set+0x524/0x940
[  273.090373][ T9226]                      led_trigger_set_default+0x1a0/0x1e0
[  273.097585][ T9226]                      led_classdev_register_ext+0x6e9/0x940
[  273.104967][ T9226]                      input_leds_connect+0x4eb/0x6b0
[  273.111743][ T9226]                      input_register_device+0xcdc/0x1070
[  273.118868][ T9226]                      atkbd_connect+0x6fb/0x9a0
[  273.125209][ T9226]                      serio_driver_probe+0x7a/0xa0
[  273.131808][ T9226]                      really_probe+0x25b/0xb40
[  273.138067][ T9226]                      __driver_probe_device+0x18c/0x330
[  273.145100][ T9226]                      driver_probe_device+0x4f/0x420
[  273.151890][ T9226]                      __driver_attach+0x44e/0x6f0
[  273.158411][ T9226]                      bus_for_each_dev+0x22d/0x2a0
[  273.165011][ T9226]                      serio_handle_event+0x1a2/0x860
[  273.171817][ T9226]                      process_scheduled_works+0xa45/0x15b0
[  273.179130][ T9226]                      worker_thread+0xa55/0xfc0
[  273.185468][ T9226]                      kthread+0x2fa/0x390
[  273.191284][ T9226]                      ret_from_fork+0x48/0x80
[  273.197447][ T9226]                      ret_from_fork_asm+0x11/0x20
[  273.203966][ T9226]   }
[  273.206556][ T9226]   ... key      at: [<ffffffff971f0960>] input_allocate_device.__key.5+0x0/0x20
[  273.215679][ T9226] -> (&client->buffer_lock){....}-{2:2} {
[  273.221428][ T9226]    INITIAL USE at:
[  273.225327][ T9226]                    lock_acquire+0x197/0x410
[  273.231410][ T9226]                    _raw_spin_lock+0x2e/0x40
[  273.237497][ T9226]                    evdev_pass_values+0xcb/0xab0
[  273.243929][ T9226]                    evdev_events+0x1d8/0x330
[  273.250013][ T9226]                    input_pass_values+0x907/0x1300
[  273.256711][ T9226]                    input_event_dispose+0x346/0x6c0
[  273.263403][ T9226]                    input_inject_event+0x1f9/0x320
[  273.270018][ T9226]                    evdev_write+0x32a/0x470
[  273.276033][ T9226]                    vfs_write+0x288/0x940
[  273.282002][ T9226]                    ksys_write+0x147/0x250
[  273.287917][ T9226]                    do_syscall_64+0x55/0xb0
[  273.293914][ T9226]                    entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  273.301389][ T9226]  }
[  273.303891][ T9226]  ... key      at: [<ffffffff971f0c00>] evdev_open.__key.28+0x0/0x20
[  273.312058][ T9226]  ... acquired at:
[  273.315925][ T9226]    _raw_spin_lock+0x2e/0x40
[  273.320642][ T9226]    evdev_pass_values+0xcb/0xab0
[  273.325693][ T9226]    evdev_events+0x1d8/0x330
[  273.330411][ T9226]    input_pass_values+0x907/0x1300
[  273.335646][ T9226]    input_event_dispose+0x346/0x6c0
[  273.340968][ T9226]    input_inject_event+0x1f9/0x320
[  273.346193][ T9226]    evdev_write+0x32a/0x470
[  273.350800][ T9226]    vfs_write+0x288/0x940
[  273.355238][ T9226]    ksys_write+0x147/0x250
[  273.359753][ T9226]    do_syscall_64+0x55/0xb0
[  273.364453][ T9226]    entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  273.370547][ T9226] 
[  273.372874][ T9226] 
[  273.372874][ T9226] the dependencies between the lock to be acquired
[  273.372883][ T9226]  and HARDIRQ-irq-unsafe lock:
[  273.389132][ T9226]   -> (tasklist_lock){.+.+}-{2:2} {
[  273.394452][ T9226]      HARDIRQ-ON-R at:
[  273.398707][ T9226]                         lock_acquire+0x197/0x410
[  273.405343][ T9226]                         _raw_read_lock+0x36/0x50
[  273.411952][ T9226]                         do_wait+0x294/0xaf0
[  273.418041][ T9226]                         kernel_wait+0xac/0x170
[  273.424396][ T9226]                         call_usermodehelper_exec_work+0xb9/0x220
[  273.432311][ T9226]                         process_scheduled_works+0xa45/0x15b0
[  273.439869][ T9226]                         worker_thread+0xa55/0xfc0
[  273.446470][ T9226]                         kthread+0x2fa/0x390
[  273.452556][ T9226]                         ret_from_fork+0x48/0x80
[  273.458983][ T9226]                         ret_from_fork_asm+0x11/0x20
[  273.465769][ T9226]      SOFTIRQ-ON-R at:
[  273.469938][ T9226]                         lock_acquire+0x197/0x410
[  273.476456][ T9226]                         _raw_read_lock+0x36/0x50
[  273.482976][ T9226]                         do_wait+0x294/0xaf0
[  273.489057][ T9226]                         kernel_wait+0xac/0x170
[  273.495400][ T9226]                         call_usermodehelper_exec_work+0xb9/0x220
[  273.503310][ T9226]                         process_scheduled_works+0xa45/0x15b0
[  273.510866][ T9226]                         worker_thread+0xa55/0xfc0
[  273.517463][ T9226]                         kthread+0x2fa/0x390
[  273.523533][ T9226]                         ret_from_fork+0x48/0x80
[  273.529957][ T9226]                         ret_from_fork_asm+0x11/0x20
[  273.536734][ T9226]      INITIAL USE at:
[  273.540816][ T9226]                        lock_acquire+0x197/0x410
[  273.547238][ T9226]                        _raw_write_lock_irq+0xa3/0xe0
[  273.554093][ T9226]                        copy_process+0x225d/0x3d70
[  273.560687][ T9226]                        kernel_clone+0x21b/0x840
[  273.567111][ T9226]                        user_mode_thread+0xde/0x130
[  273.573844][ T9226]                        rest_init+0x27/0x300
[  273.579952][ T9226]                        arch_call_rest_init+0xe/0x10
[  273.586830][ T9226]                        start_kernel+0x459/0x4e0
[  273.593266][ T9226]                        x86_64_start_reservations+0x2a/0x30
[  273.600667][ T9226]                        copy_bootdata+0x0/0xe0
[  273.606940][ T9226]                        secondary_startup_64_no_verify+0x179/0x17b
[  273.614958][ T9226]      INITIAL READ USE at:
[  273.619478][ T9226]                             lock_acquire+0x197/0x410
[  273.626345][ T9226]                             _raw_read_lock+0x36/0x50
[  273.633215][ T9226]                             do_wait+0x294/0xaf0
[  273.639650][ T9226]                             kernel_wait+0xac/0x170
[  273.646343][ T9226]                             call_usermodehelper_exec_work+0xb9/0x220
[  273.654596][ T9226]                             process_scheduled_works+0xa45/0x15b0
[  273.662501][ T9226]                             worker_thread+0xa55/0xfc0
[  273.669465][ T9226]                             kthread+0x2fa/0x390
[  273.675906][ T9226]                             ret_from_fork+0x48/0x80
[  273.682708][ T9226]                             ret_from_fork_asm+0x11/0x20
[  273.690188][ T9226]    }
[  273.692871][ T9226]    ... key      at: [<ffffffff8ca0a058>] tasklist_lock+0x18/0x40
[  273.700780][ T9226]    ... acquired at:
[  273.704768][ T9226]    _raw_read_lock+0x36/0x50
[  273.709469][ T9226]    send_sigio+0xf9/0x360
[  273.713902][ T9226]    kill_fasync+0x228/0x4b0
[  273.718524][ T9226]    sock_wake_async+0x137/0x160
[  273.723481][ T9226]    sk_wake_async+0x184/0x280
[  273.728261][ T9226]    unix_release_sock+0x6b2/0xc80
[  273.733380][ T9226]    unix_release+0x8c/0xc0
[  273.737899][ T9226]    sock_close+0xbd/0x230
[  273.742326][ T9226]    __fput+0x234/0x970
[  273.746490][ T9226]    task_work_run+0x1ce/0x250
[  273.751271][ T9226]    get_signal+0x1235/0x1400
[  273.755968][ T9226]    arch_do_signal_or_restart+0x96/0x780
[  273.761707][ T9226]    exit_to_user_mode_loop+0x70/0x110
[  273.767196][ T9226]    exit_to_user_mode_prepare+0xb1/0x140
[  273.772967][ T9226]    syscall_exit_to_user_mode+0x1a/0x50
[  273.778625][ T9226]    do_syscall_64+0x61/0xb0
[  273.783505][ T9226]    entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  273.789610][ T9226] 
[  273.791950][ T9226]  -> (&f->f_owner.lock){....}-{2:2} {
[  273.797451][ T9226]     INITIAL USE at:
[  273.801442][ T9226]                      lock_acquire+0x197/0x410
[  273.807788][ T9226]                      _raw_write_lock_irq+0xa3/0xe0
[  273.814474][ T9226]                      __f_setown+0x3b/0x330
[  273.820470][ T9226]                      tty_fasync+0x258/0x340
[  273.826568][ T9226]                      do_fcntl+0xd4f/0x1380
[  273.832565][ T9226]                      __se_sys_fcntl+0xc9/0x1a0
[  273.838937][ T9226]                      do_syscall_64+0x55/0xb0
[  273.845124][ T9226]                      entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  273.852800][ T9226]     INITIAL READ USE at:
[  273.857241][ T9226]                           lock_acquire+0x197/0x410
[  273.864033][ T9226]                           _raw_read_lock_irqsave+0xb0/0x100
[  273.871530][ T9226]                           send_sigurg+0x29/0x3c0
[  273.878056][ T9226]                           sk_send_sigurg+0x6f/0xc0
[  273.884781][ T9226]                           queue_oob+0x4b5/0x5d0
[  273.891211][ T9226]                           unix_stream_sendmsg+0xaa2/0xba0
[  273.898502][ T9226]                           ____sys_sendmsg+0x5bf/0x950
[  273.905443][ T9226]                           ___sys_sendmsg+0x220/0x290
[  273.912320][ T9226]                           __se_sys_sendmsg+0x1a5/0x270
[  273.919369][ T9226]                           do_syscall_64+0x55/0xb0
[  273.926068][ T9226]                           entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  273.934182][ T9226]   }
[  273.936773][ T9226]   ... key      at: [<ffffffff96ef7200>] init_file.__key+0x0/0x20
[  273.944681][ T9226]   ... acquired at:
[  273.948573][ T9226]    _raw_read_lock_irqsave+0xb0/0x100
[  273.954054][ T9226]    send_sigio+0x33/0x360
[  273.958495][ T9226]    kill_fasync+0x228/0x4b0
[  273.963098][ T9226]    sock_wake_async+0x137/0x160
[  273.968097][ T9226]    sk_wake_async+0x184/0x280
[  273.972972][ T9226]    unix_release_sock+0x6b2/0xc80
[  273.978113][ T9226]    unix_release+0x8c/0xc0
[  273.982642][ T9226]    sock_close+0xbd/0x230
[  273.987079][ T9226]    __fput+0x234/0x970
[  273.991251][ T9226]    task_work_run+0x1ce/0x250
[  273.996046][ T9226]    get_signal+0x1235/0x1400
[  274.000751][ T9226]    arch_do_signal_or_restart+0x96/0x780
[  274.006496][ T9226]    exit_to_user_mode_loop+0x70/0x110
[  274.011991][ T9226]    exit_to_user_mode_prepare+0xb1/0x140
[  274.017728][ T9226]    syscall_exit_to_user_mode+0x1a/0x50
[  274.023369][ T9226]    do_syscall_64+0x61/0xb0
[  274.027979][ T9226]    entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  274.034071][ T9226] 
[  274.036404][ T9226] -> (&new->fa_lock){....}-{2:2} {
[  274.041571][ T9226]    INITIAL USE at:
[  274.045471][ T9226]                    lock_acquire+0x197/0x410
[  274.051550][ T9226]                    _raw_write_lock_irq+0xa3/0xe0
[  274.058060][ T9226]                    fasync_remove_entry+0xf4/0x1c0
[  274.064670][ T9226]                    tty_fasync+0xfb/0x340
[  274.070494][ T9226]                    __fput+0x7f3/0x970
[  274.076051][ T9226]                    task_work_run+0x1ce/0x250
[  274.082225][ T9226]                    exit_to_user_mode_loop+0xe6/0x110
[  274.089112][ T9226]                    exit_to_user_mode_prepare+0xb1/0x140
[  274.096251][ T9226]                    syscall_exit_to_user_mode+0x1a/0x50
[  274.103298][ T9226]                    do_syscall_64+0x61/0xb0
[  274.109297][ T9226]                    entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  274.116779][ T9226]    INITIAL READ USE at:
[  274.121135][ T9226]                         lock_acquire+0x197/0x410
[  274.127736][ T9226]                         _raw_read_lock_irqsave+0xb0/0x100
[  274.135063][ T9226]                         kill_fasync+0x192/0x4b0
[  274.141504][ T9226]                         sock_wake_async+0x137/0x160
[  274.148288][ T9226]                         sk_wake_async+0x184/0x280
[  274.154897][ T9226]                         unix_release_sock+0x6b2/0xc80
[  274.161848][ T9226]                         unix_release+0x8c/0xc0
[  274.168199][ T9226]                         sock_close+0xbd/0x230
[  274.174449][ T9226]                         __fput+0x234/0x970
[  274.180459][ T9226]                         task_work_run+0x1ce/0x250
[  274.187091][ T9226]                         get_signal+0x1235/0x1400
[  274.193618][ T9226]                         arch_do_signal_or_restart+0x96/0x780
[  274.201194][ T9226]                         exit_to_user_mode_loop+0x70/0x110
[  274.208512][ T9226]                         exit_to_user_mode_prepare+0xb1/0x140
[  274.216103][ T9226]                         syscall_exit_to_user_mode+0x1a/0x50
[  274.223675][ T9226]                         do_syscall_64+0x61/0xb0
[  274.230114][ T9226]                         entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  274.238062][ T9226]  }
[  274.240658][ T9226]  ... key      at: [<ffffffff96ef7e80>] fasync_insert_entry.__key+0x0/0x20
[  274.249345][ T9226]  ... acquired at:
[  274.253155][ T9226]    _raw_read_lock_irqsave+0xb0/0x100
[  274.258637][ T9226]    kill_fasync+0x192/0x4b0
[  274.263248][ T9226]    evdev_pass_values+0x54b/0xab0
[  274.268397][ T9226]    evdev_events+0x1d8/0x330
[  274.273097][ T9226]    input_pass_values+0x907/0x1300
[  274.278335][ T9226]    input_event_dispose+0x346/0x6c0
[  274.283663][ T9226]    input_inject_event+0x1f9/0x320
[  274.288899][ T9226]    evdev_write+0x32a/0x470
[  274.293513][ T9226]    vfs_write+0x288/0x940
[  274.297951][ T9226]    ksys_write+0x147/0x250
[  274.302472][ T9226]    do_syscall_64+0x55/0xb0
[  274.307081][ T9226]    entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  274.313171][ T9226] 
[  274.315500][ T9226] 
[  274.315500][ T9226] stack backtrace:
[  274.321388][ T9226] CPU: 0 PID: 9226 Comm: syz.6.878 Not tainted 6.6.95-syzkaller #0
[  274.329289][ T9226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  274.339355][ T9226] Call Trace:
[  274.342649][ T9226]  <TASK>
[  274.345597][ T9226]  dump_stack_lvl+0x16c/0x230
[  274.350301][ T9226]  ? load_image+0x3b0/0x3b0
[  274.354822][ T9226]  ? show_regs_print_info+0x20/0x20
[  274.360042][ T9226]  ? load_image+0x3b0/0x3b0
[  274.364560][ T9226]  ? print_shortest_lock_dependencies+0xf4/0x160
[  274.370998][ T9226]  __lock_acquire+0x678f/0x7c80
[  274.375873][ T9226]  ? verify_lock_unused+0x140/0x140
[  274.381529][ T9226]  ? _raw_spin_unlock_irqrestore+0xae/0x110
[  274.387537][ T9226]  ? verify_lock_unused+0x140/0x140
[  274.392757][ T9226]  lock_acquire+0x197/0x410
[  274.397273][ T9226]  ? kill_fasync+0x192/0x4b0
[  274.401886][ T9226]  ? read_lock_is_recursive+0x20/0x20
[  274.407279][ T9226]  _raw_read_lock_irqsave+0xb0/0x100
[  274.412586][ T9226]  ? kill_fasync+0x192/0x4b0
[  274.417240][ T9226]  ? _raw_read_lock+0x50/0x50
[  274.422039][ T9226]  kill_fasync+0x192/0x4b0
[  274.426493][ T9226]  ? kill_fasync+0x53/0x4b0
[  274.431019][ T9226]  evdev_pass_values+0x54b/0xab0
[  274.435996][ T9226]  ? evdev_pass_values+0x5c1/0xab0
[  274.441124][ T9226]  evdev_events+0x1d8/0x330
[  274.445640][ T9226]  ? evdev_events+0x79/0x330
[  274.450249][ T9226]  ? evdev_event+0xe0/0xe0
[  274.454683][ T9226]  input_pass_values+0x907/0x1300
[  274.459728][ T9226]  ? input_pass_values+0xa3/0x1300
[  274.464866][ T9226]  input_event_dispose+0x346/0x6c0
[  274.469997][ T9226]  input_inject_event+0x1f9/0x320
[  274.475047][ T9226]  ? input_inject_event+0xbc/0x320
[  274.480180][ T9226]  evdev_write+0x32a/0x470
[  274.484612][ T9226]  ? evdev_read+0xb50/0xb50
[  274.489136][ T9226]  ? common_file_perm+0x198/0x1f0
[  274.494175][ T9226]  ? fsnotify_perm+0x5d/0x5e0
[  274.498860][ T9226]  ? security_file_permission+0x79/0xa0
[  274.504417][ T9226]  ? evdev_read+0xb50/0xb50
[  274.508939][ T9226]  vfs_write+0x288/0x940
[  274.513206][ T9226]  ? file_end_write+0x250/0x250
[  274.518077][ T9226]  ? __fget_files+0x28/0x4d0
[  274.522687][ T9226]  ? __fget_files+0x44a/0x4d0
[  274.527391][ T9226]  ? __fdget_pos+0x1d8/0x330
[  274.532019][ T9226]  ? ksys_write+0x75/0x250
[  274.536466][ T9226]  ksys_write+0x147/0x250
[  274.540820][ T9226]  ? __ia32_sys_read+0x90/0x90
[  274.545601][ T9226]  ? lockdep_hardirqs_on+0x98/0x150
[  274.550812][ T9226]  do_syscall_64+0x55/0xb0
[  274.555252][ T9226]  ? clear_bhb_loop+0x40/0x90
[  274.559936][ T9226]  ? clear_bhb_loop+0x40/0x90
[  274.564627][ T9226]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  274.570545][ T9226] RIP: 0033:0x7fe7fcb8e929
[  274.574973][ T9226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  274.594604][ T9226] RSP: 002b:00007fe7fd9e1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  274.603045][ T9226] RAX: ffffffffffffffda RBX: 00007fe7fcdb5fa0 RCX: 00007fe7fcb8e929
[  274.611032][ T9226] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000003
[  274.619016][ T9226] RBP: 00007fe7fcc10b39 R08: 0000000000000000 R09: 0000000000000000
[  274.627000][ T9226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  274.634978][ T9226] R13: 0000000000000000 R14: 00007fe7fcdb5fa0 R15: 00007ffc3dcc9868
[  274.642973][ T9226]  </TASK>