last executing test programs:

1m0.009038973s ago: executing program 0 (id=439):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f})
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xb77b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_CREATE(r0, 0x5501)

59.881037935s ago: executing program 0 (id=442):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
read$FUSE(r1, &(0x7f00000041c0)={0x2020}, 0x2020)

58.983637518s ago: executing program 0 (id=448):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4}, 0xe)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={<r1=>0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4, @local}]}, &(0x7f0000000240)=0x10)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={r1, 0x6, 0x20}, &(0x7f00000000c0)=0xc)

58.883877109s ago: executing program 0 (id=449):
syz_mount_image$jfs(&(0x7f0000000200), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1, 0x61ae, &(0x7f0000007640)="$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")
rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})

57.596151629s ago: executing program 0 (id=467):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)

56.733395862s ago: executing program 0 (id=473):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220f00000003a8407a730b93bf0280b3"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x8000)
ioctl$HIDIOCGREPORTINFO(r1, 0xc00c4809, &(0x7f0000000040)={0x3, 0x100, 0x8})

56.456444486s ago: executing program 32 (id=473):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220f00000003a8407a730b93bf0280b3"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x8000)
ioctl$HIDIOCGREPORTINFO(r1, 0xc00c4809, &(0x7f0000000040)={0x3, 0x100, 0x8})

20.052427521s ago: executing program 3 (id=783):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000000180)={[{@clear_cache}, {@user_subvol_rm}, {@compress_force_algo={'compress-force', 0x3d, 'zlib'}}, {@noautodefrag}, {@autodefrag}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x7, 0x32, 0x37, 0x2d, 0x32, 0x36, 0x32, 0x2d, 0x2d, 0x37]}}, {@space_cache}]}, 0x0, 0x559e, &(0x7f00000103c0)="$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")
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xd)
ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f00000005c0)={{r0}, "886104ba185d19be1f20bf6a61cd0e15876752a35ca40a7db08140f63cd91cb99b270dff5566085190ea061a366ce339deec85174601e9baaac5f89ae1043cdbfcbbf54a8712282bf1c0db6ae8276f7e449d75d83617af9f93062395c61af2c5655d4c9831f493c5686c83c477558bab98a1dc4208497cbc3db526e9fe500661dea08a51bdcdcc150be37245ffa49490f742f17fba27a9d80c55c4c73e7189f04b8cf11dc99bcf924f7ce7c490fdc54f01eebf19ec00203ab58be897dca7aad99ce99633e375efca44e1e1b68ee6c65175601e9aee9227b1e1b6c4cfb8294b6bf0cf91351fb28190fb75c5b9a3e606cce33b8fe595e6dc8c73efef8d9e81ac43cc87d78804325143e03719edfc1b77e4983056238cc5d5c3b54d3e95f6fec999c21200497ef211093fe5bbbfe7535b5ac3b55372d222edbef2a0981a22f518f0e4d9c2bcd232795abf86a8d7a7d5029164182389e4510faafb9fe9e9e56a4e47e4e90b53801175d66236479ae92b6f8a295961ebf26784cf80cff96e3cdee47e03c74436d742ae762eb4cd5ec2cb50df238fa0008a35d3ab97d457e6497f6297a17154113ca1d3699e6148ec4494738fe5fcd3ea8b2ba7905ffac8458731d8639e3b9f08cb3087b638f0e90463e3b66955d630ab30beeba40d797d78dbd916d7c5db03027aad4ded00de5075915025deca996dda214d9bd8415f2e36dc5f886231147f0be678129c6f8ab2df88ac413b3efb4a867da290e1a0ebd6af6f343545aa2ccf8294f60c98373886961ec105529599a1ad42c520a0bb2e4e58824bdd57bb86db1d51b3c814f77cfa1e7d054904b0e8163c335d58217f659839b6c0f78af268d33ce6fe0f2fcabb094ab6f480d6af368d68f78a8e2658a22d837405e50bb13759b651fbb815b986e930db1f18c36a89de8b38c0fc593c264fae63fea64c9b19da2712b360c46c723f400eb9fea634174a8a28ec40676fc1f70e073759d9ed329504df1ef010fce3be3f9b12dd70047b7ea85148ecc56c5fd9e8556945950ae028ed79fdd3f7877fbe7c1d706a0e19b75abe2924865943c4a58ee71a41706bbbb63676f1e0ea542924be34a1af8950f02e6c0c07b2c82858228f873285dd24d42e2dfc6d6cd4c382a165953686aba5c9c7be14bca7ed4efb083ebf6a2df62127cec15fc3561c1581e8f23e8917c1924a6c70042e403b03e60a999f2948158b87701b6f84a13859985295542da490bb498c5f02bcc1c47c09500049808d43e9b0800b5a0994ce0c136214d6cf60a8c105a92cd93eb9aab552a10c25f310fd9c2d46b1beb11bbcdfe4fdf68465900a64bfa2be78225d5b63565b24aa5c01e28f406acb9c9ec3a39eb75ce13a76c183324e1d886c63ed70dff651fb1e7f91e13849b155ea00bf1a7939be9cb3a5486824aae0b2224ca96bcbdf6608fb7f070c806dc9975ffd8e24bb8bb1ea235aaa276c3ea642621d8140e51c6eabf00c054ec5f0f9f99c94beebb9115d85733d9cdbb455805febe811794d40fb7c3eac0d4c87a9cb416b62a9a7cb9f719a8fe448f78f8e01f00ffb9b977c43b8c451c6eb49d6115653e817cab0c6b6c69245e1658611d50eeebdff6642242f48c2c98a734ebd8bcb21560e55f8fd039f6fc14fd223dc8b5dc2d17ba950fd5a6ce560b4261b2f9c23fbdfa153b027af701f116ff7c0e6b36a790e16d39a22771eb3b67cf0837337fb89bc885228176da111182a33b0181da962562bc41b46cb3ad0e6208172ba8c056f832578a7f7c9262c1a3742fb6b17d4e916e759fb41c8e8219a59f1e381ffd2f366821015dd0b1f75c1f9263c23caf8f183a064fde6b39ab8217c33975902438560532d7e23a45c09bece7d0ac943984a4289592a4a93f9b2eeb8d2a6bbdc42f95cbfdf99f90cbd19eca9bb2704e268f566f1bcec6c712d58b4d054b4b346c577e1f0e6f0c1a002ec6600503b39047d635a9ae0f208e8454dc4cbbe8a5a3f020a5c29d42ac5c594def8503519188449e0ddfdfba3f306425fd9ef45f34aab4dbd862897bfd2e54cab6e7876b9669b0c272920dc5697314810485a85824857ced9feb04f2d33740c72e15a0cabcdff97fe467e4dce31676dea91a66d1c609928036bebf9d02fa8e011a046c8437864b8deae3dd02dfa99d54c202b35df29b1c8929b31a339e03ebe6c862b6456a324bd4b16c4de746b3930c9d2c2dcb67c8e96948f464302b54294d52fe20066e6778aafe94ec40d74749f7a894fafb5537a99834b02a4d264092fad573721f7519b8f6446052aab786014b898f4b53b95cd79c7f2f41578771e5b50b35ff7c1f2598827946330cb0c2f4cf3f86b4e152c32fe1af719869904656db88a60a672dfda9feef26da3226ac142d38a069cbcc2e3c6b54287a5c74365a0d14322e6d5824c9c5cb822bf14038aaa9d7159c14dcbbceef53ef3d0a30d5dc48ef1ade1965857468cd965f3735c7b37d6fc54a9ca379821ed0c9b764bd2d1d62f3a64ca4aa7bd5cfa7e153bf62a9b8e41c6c762f7df9b5f977f01edf8dd6bb8e7bb17ec1b92932ad7a96fccc5b1fef275e977aed78e9fad7ad368ecf6e10c4b48f40572f4d325f0ecc054618aceef137bf5b155bbf2ebe60dd561f6bbd69ba1bab2cc4b1acc2764af6ba4fde59a4c2ac906491ba3f6238ff5e7571b08b697d5d6b2bf30d9058dbefd6857f2fb2b12d67ccde7f750c435dee97ac2e1536f68390bc175751858c47d41a35043d12cfd185c715d06614e21d4fbadd2079d2f28da2e7c452da09e2ad92ca6ff73113971bd55a198d69a1b47c37d4d9e1281b40676109ec295fb52491f49901fe6d98b52aa8859b0383cd65a62a2b6ad8fb838f15a2f27326dc24f8179feeb083f6a511430b01e7f5815f6f47be22216d40edc7746fcba3d80c893ecc289b85c57842a267c0142419a3572616d2988f99cff3abe71d3d0f6237bd7269df3f920371e5d4ff7dcef6122d38dfc295cd7b9249133af01b4c2bdf4cd1fabc9944ba68ff054ace7c2e5e7ab74cb94ba00e10fddde2458b9b1f46aa0bec7b46ea5b9c6cb8641e660a7988e75ad679b224e43ac5aa73ec0e7055ece4eddc74ee5c7373ecf56c80ee3c25a712bc892f248c8434722a7da5baa7093925457fdde861b00d87d7ffd44e173233281c26e18f2cc21bc77eb2f94c271b5985ac9f3a46f58e17d6a1fb001f96f7bedd7c12e5163176216b8ea3ef90b35e9002317177548550f59d0fa7a7bc4e436c3ee30a61536bc8590d082cff2e574d30554da6192513305e22bd7988714b8567c8a4c8482e1017d88ff64e2eeb56daf23d7f28cb8ed468f7b6cf87b72946e2779c05a14f813a98f6f6c09f0347e3141baacca91e9f6a87113b04f2cc1f0c87b24b5d3687f424995389e6d5b0d94a3d9d2033e08f66b646faed48edd16cda228a3422e5d752f410ea5bcad938c2f54ad0b8348d35888e2a2a5362897523bdcb6b48941c8ae5cbb292efaa5f16ac8958fa68bf7f0f7a1b36d412dbdf30425b1b9af364b7b8dd36e721ce13316d31a9332530b86502c155b2313b8a3fd06118f58ace91ffed18dea1ac2d1da87ea0cbbe5f0053086ab920767a6e7e4e857567d92f0627239eb71f62716f6ff2254aa412a63648d5b7f42ddbbf9a209f38d48870daa9f702225109ed21763e0dd0f97b37bec78dc95a4cb712163618bb78c770e1ee75fae4dee5ba3f41e34a5ead5a2bca0953c0fdc8df7ffb2cedabd1e20e59db199cfa3bf0ccc19bf45218dc673beab05fcec48bf2b08fba6edbdc993d70ed6e47407759f7520f45d0bad0f4c4ee99e984b1f1955fa69286245c41afd8b691eb6cfde1144fcb45f9cc73769d79806fe9aaa81a8ec9243a761b81e4f52d82cae7c3a1b578cabf783c24b205116adb51a1c5a6dfdffe9328c343da2221a777ab222a7017322737b59077ebaf663e40b705ea789b16de399c528ea199ae86aad672d10b99822cf74d54e8a4dc14093c7e90fe7476050bf0672cfa496f44303c7cd74ab26d2a54d4c639933e4d19db5fffd1f68739214927df11c3c3714e1d77f13a153aea62df8bb2e88d94ea084c3c1600f41fe762496446afcc419ae20afbad87f8fc5e22512497d8f8250aab00495b8a306743136113fd2fbea1dba14db2c14288f4871caa12d8583a552a0b74845bdfabc67932e8cbbaf6fc9042882e1bc111858a6331269a3f898ce4fb44f7bbcaad863996ffb3ba526734d16632ac86082224f7eea282fdbd9e000267a5ce67c06807f78234ef80f663197d9fd67e44fdebd5e89ca732e2a4032f1eb36af49cc27bea6efd4ccaa561dff3da651489fc1c224e7e8525fca9ec2f323900a04b1003c0db808a98fc483e1177b4741c6654581994632c2ed232d788eb0d8adc75d97f921803277ffbaa8707752d6e2d8ae4558a909877164a27c98b4ee16befeee936404a6833551c0ff23d470be37f7da40545071b43862958c6b81f3c33c02caf0e53ce41c206167ef0576318b4437f88ba2624276965646af12ea5fcafbc9ac8fa701a06cde1696134ee9e4310a2c2e5764a5596bb482892fafcea46feefd249e5da6546882c0096856c6728c6dd534196e43a807587bc854646b94daddd7e974667f0f983e16302a82c69ec9ba526bbc607b87f517986eec6c72dfa7264c5182e82adc78dec5dc578d86f70be8c1186883f79cb734d1800af3e436a77eea4f9e5b6da690d4e4a272007b1272e2e3315f7d77281094548748462c37cd5eee7c7f61db064331ac1fb062b631d3f2254210baa022f454eb7a14b0ee31483ac7e41fa3ff33baf555fd67a482cd88ff29ac55c075bd3fa604c6964eae2231fecbbec4503b98d104f769075c1017e80740ca98659162b7c26eadcb89385b0328f937f6ab0ad5d58b29d438cc4f2174acd249c030faaf469ad7d2c59b283885b6cdee8e67a6a4d08f4ac6f42c74e752909eb7fc1dec6c368d950a86f7d8171d3c726aecbc74b7d93d69bb9a504f894fefb903fe9cf5c88163df44b6ad27193e81039829b61de21b24a4541d5b367608290809639a41d00f8a4769d4ef5cd6ab5a647ec341e7900cb36f76a67d40fb9ad1474bd1c1abec91b904c07c5300a18ccfc85f38e0fdef4c5e8c64ee7add063434423e5a3cc064d1b660d660e353a167823bf16ace6190f7c0ff419813ed958391da88a6438be8851ac0f4c05bc813d88db12ae863797d67cf6b87a7adcaf664f864103f5e966d5bbe2825e1960ce8c4b065d8c3b9e5c3dab77d171d42db0f3edbd73f8fa0b491473a2ea56cedba65df729a66adc4d77ee5985ad7f5990be66f7c900e43dfd85adc3225d73276203824555a8f9c3802098d98f58410fd28635b5535fd0c4fffeb4e308419ce84af1a84199c48abff3d62a697faf2929f9259246baf5bfcce1088979eaed404eb00a665054ea66609eea952d093afbf9b62e844818f7dec07e9eee9887bc3db12121bd871bbbcb150d0442aa7e92e4242f2c95bdf3a85c0b368f307e5cc78d16059852d8186c426841939429693b764e7da5f8a289ba375616a18c5c84009357c4994136ee078e414e91cbc69bd32f43b6d3af5bbbe10a75f8c8911bc56b3cdd4e597545374e3721b64d99e07ded98798c7e0daeaf3759364dcd918c53191c70c74244a05bff7e38ed36e869c38954aefba4365091ef02623821624e95ef125a3bc3de53a3b555e7e77aa5fd49b2c33428d093f6520f2f42e9bbacbfc45c10e48582b8c548c2ca91725d5777704bce61da523c657"})

19.319186092s ago: executing program 3 (id=786):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000440)={r0, 0x0, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c18e8438ef2a565ef1e83323695c58d66500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200"}})
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x55d)

17.944573262s ago: executing program 3 (id=805):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@test_dummy_encryption}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x460, &(0x7f00000008c0)="$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")
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000))
chdir(&(0x7f00000003c0)='./bus\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents(r0, &(0x7f0000000180)=""/66, 0x42)

17.165702894s ago: executing program 3 (id=813):
syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x82, &(0x7f0000000700)=ANY=[@ANYBLOB='iocharset=default,noadinicb,gid=forget,gid=ignore,nostrict,gid=', @ANYRESDEC=0x0, @ANYBLOB="2c616e63686f723d30303030000088be0900303030303030303030312c7569643d666f726765742c00215e8c2e42462f3ab5e1f7c0527abbb422be9178aa60681964adb069ae876c4a599d560075ac47c0de1a9bb9146af6433efdcdac853a8e8f16d6bad90ecce0a1fab46f48331e6b3c325c08df3c334e4da28067a30b3b1dc64bf692c712fc273bc1702008f563765c6f3e67d97e1369973c2a87f0ecca7320819863179fb85e394a8cf1d62c70d8306633b6958ebf998a0685bc5cdd1f97291328743add4c867115fae1082f8faf482e15eb939968"], 0xfd, 0xc34, &(0x7f0000004400)="$eJzs3U9sHNd9B/DfGy5F0m4rJk5Uu42LTVukMmO5sqSYilW4q5pmG0CWiVDMLQBX5EpdmFoSJNXIbtowvfTQQ4Ci6CEnAq1RIEUDoymKHtnWBZKLD4VPPREtbARFD2wRIKeAxcy+FVf/LMkkJcr+fGzqOzv73sx7M+MZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxO+8cvb48+lhtwIAeJDOT3/1+AnPfwD4RLng//8BAAAAAAAAAAAAAOCgS1HEE5Fi6fxWmq0+dw2fa3euXpuZmLx9tZFU1Ryoypc/w8+fOHnqSy+Mn+7lh9ffa0/Fa9MXztZfXryytNxaWWnN12c67bnF+dY9b2G39W82Vh2A+pXXr85furRSP/HcyRu+vjb6wdDjR0bPjD9z7Ole2ZmJycnpvjK1wY+891vcaYTHoSjiWKR49vs/Ts2IKGL3x+Iu185+G6k6MVZ1YmZisurIQrvZWS2/nOodiCKi3lep0TtGD+Bc7EojYq1sftngsbJ700vN5ebFhVZ9qrm82l5tL3amUre1ZX/qUcTpFLEeEZtDt25uMIqoRYrvHt5KFyNioHccvlgNDL5zO4p97OM9KNtZH4xYLx6Bc3aADUURr0aKn7xTxFx5zPJPfCHi1TL/MeKtMl+KSOWFcSri/eo6GnnILWcv1KKIPyvP/5mtNF/dD3r3lXNfq3+lc2mxr2zvvvLIPx8epAN+bxqOIprVHX8rffTf7AAAAAAAAAAAAAAAAACw10aiiKcixSv//gfVuOKoxqUfPjP+u6M/3z9m/Mm7bKcs+1xErBX3Nib3UB5CPJWmUnrIY4k/yYajiD/K4/++/bAbAwAAAAAAAAAAAAAAAAAA8IlWxHuR4sV3j6b16J9TvN25XL/QvLjQnRW2N/dvb8707e3t7XrqZiPnbM61nOs5N3Ju5owi18/ZyDmbcy3nes6NnJs5YyDXz9nIOZtzLed6zo2cmzmjluvnbOSczbmWcz3nRs7NnHFA5u4FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPg4KaKIn0WK73xjK0WKiEbEbHRzY6hXBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4mIZSET+IFPXfa1xfV4uIVP3bdbT85VQ0DpX56WiMl/lSNM7mbFZZa3z7IbSf3RlMRfwoUgwNv339hOfzP9j9dP0yiLe+ufPpl2rdHOh9OfrB0ONHDp8Zn/yVJ++0nG7XgLFz7c7Va/WZicnJ6b7Vtbz3T/etG837Lfam60TEyhtvvt5cWGgtW/hkLNS6C7XY0y2PROztBvduodZdyPereOjtucNC42A0Y2chqnv/be/ZfGyUz//3I8VvvvsfvQd+7/n/c91P15/w8dM/3nn+v3jzhvbp+f9E37oX8+9GBmsRw6tXlgaPRAyvvPHmsfaV5uXW5Vbn1PHjXx4f//LJ44OHIoYvtRdafUu7PlQAAAAAAAAAAAAAAAAAD1Yq4rcjRfNHW6keEdeq8VqjZ8afOfb0QAxU461uGLf12vSFs/WXF68sLbdWVlrz9ZlOe25xvnWvuxuuhnvNTEzuS2fuamSf2z8y/PLi0hvL7cu/v3rb7x8bPntxZXW5OXf7r2MkiohG/5qxqsEzE5NVoxfazU5VdWqPBmYOpiL+M1LMnaqnz+d1efxfGe8N9pXtH/+/1re+Wt6n8X+fumk/KRXx00jxG3/+ZHy+audjccsxy+X+OlKMnf5cLheHynK9NnTfK9AdGViW/d9I8fc/u7Fsr+9P7JR9/v6O7sFXnv/DkeIHf/q9+NW87sb3P+yM/+w//4/dvKF9Ov+f6Vv32A3vK9h118nn/1ikeOmJt+PX8roPe/9HEdvb29+KOJoLX38/xz6d/8/2rRuN7n5/fe+6DwAAAAAAAAAA8MgaTEX8TaR4erKWXsjr7uXv/83fvKF9+vtfv9i3bv4BzVe064MKAAAAAAfEYCrivUhxefXt62Oo+8Z/3zj+87d25l6fSDd9W/053y9U7w3Yyz//6zea9zu7+24DAAAAAAAAAAAAAAAAAADAgZJSES/k+dRn7zKf+kakeOW/n83l0pGyXG8e+NHq1+Hzi51jZxcWFueaq82LC6369FJzrlXW/Uyk2Pqrz+W6RTW/em+++e4c78PbvbnYlyPF5N/2ynbnYu/NTd6dD7w7F3tZ9lOR4r/+7sayvXmsP7tT9kRZ9i8jxdf/6fZlj+yUPVmW/V6k+OHX672yj5Vle+9H7b6TdLgWC63n5hYXbnkVKgAAAAAAAAAAAAAAAAAAANyvwVTEn0SK/7myHmt52H+e/783A3+tV/atb/bN93+Ta9U8/6PV/P93Wv4o8/+P7llPAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg0ZGiiDcjxdL5rbQxVH7uGj7X7ly9NjMxeftqI6mqOVCVL3+Gnz9x8tSXXhg/3csPr7/XnorXpi+crb+8eGVpubWy0pqvz3Tac4vzrXvewm7r7xy6rrHqANSvvH51/tKllfqJ507e8PW10Q+GHj8yemb8mWNP98rOTExOTveVqQ3ex97vq3E7DkURfxEpnv3+j9M/D0UUsftjcZdrZ7+NVJ0YqzoxMzFZdWSh3eysll9O9Q5EEVHvq9ToHaMHcC52pRGxVja/bPBY2b3ppeZy8+JCqz7VXF5tr7YXO1Op29qyP/Uo4nSKWI+IzaFbNzcYRbweKb57eCv9y1DEQO84fPH89FePn7hzO4p97OM9KNtZH4xYLx6Bc3aADUUR/xApfvLO0fjXoYhadH/iCxGv9hd8KSKVF8apiPdvcx3xaKpFEf9Xnv8zW+mdofJ+0LuvnPta/SudS4t9ZXv3lYP0fNi+/2txZA92e+8O+L1pOIr4YXXH30r/5r9rAAAAAAAAAAAAAAAAgAOkiF+OFC++ezRV44Ovjyludy7XLzQvLnSH9fXG/tUj/rDM7e3t7XrqZiPnbM61nOs5N3Ju5owi18/ZyDmbcy3nes6NnJs5YyDXz9nIOZtzLed6zo2cmzmjVsX29va3uvVruX7OtZzrtYiirJ8/b+aMAzJ2DwAAAAAAAAAAAAAAAAAA+Hgpqn9SfOcbW6maS7URMRvd3DAf6Mfe/wcAAP//3sf+xA==")
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@mode}, {@uid={'uid', 0x3d, 0xee01}}]})
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000000340)={0x2020}, 0xcb0a)

16.654788141s ago: executing program 3 (id=819):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0)
pwritev(r2, &(0x7f00000000c0)=[{0x0, 0x4f}, {&(0x7f0000000140)="de", 0x1}], 0x2, 0x0, 0x0)

15.922386623s ago: executing program 3 (id=832):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan1\x00', <r3=>0x0})
sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x38, r1, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x38}, 0x4, 0x700000000000000}, 0x0)

15.811383984s ago: executing program 33 (id=832):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan1\x00', <r3=>0x0})
sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x38, r1, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x38}, 0x4, 0x700000000000000}, 0x0)

5.433371819s ago: executing program 6 (id=833):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000000)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))

5.101515904s ago: executing program 6 (id=930):
setreuid(0xee01, 0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
splice(r0, 0x0, r1, 0x0, 0xf3a, 0x0)
ioprio_set$uid(0x3, 0xee01, 0x2000)

3.316301001s ago: executing program 5 (id=947):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000480)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0}, 0x0)
gettid()

2.03575403s ago: executing program 6 (id=955):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xd1, 0x0, 0x0, 0x80, 0x5}, 0xe)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r1, 0x84, 0x80, &(0x7f00000000c0)="1a00000002000000", 0x8)

1.860931923s ago: executing program 4 (id=957):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
bind$bt_l2cap(r1, &(0x7f0000000080), 0xe)
listen(r0, 0x9)
ioctl$TIOCOUTQ(r1, 0x5411, 0x0)

1.860047003s ago: executing program 6 (id=958):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0xc906, &(0x7f0000000140)={[{@i_version}, {@noblock_validity}, {@nomblk_io_submit}, {@noinit_itable}, {@errors_remount}, {@init_itable}, {@noauto_da_alloc}, {@usrquota}, {@resgid={'resgid', 0x3d, 0xee00}, 0x32}]}, 0x1e, 0x4ea, &(0x7f0000003040)="$eJzs3VFrW20dAPD/OW22dutsh17MgXO4STt0Sbu6rXgxFUSvBuq8n7VNS2nalCbd1jK0ww8giKjglVfeCH4AQfYRRBjovagoopteePG+y0tOkr1dl6wdS5Nu+f3g7DzPOSf9/5+ueZLnnIdzAhhYFyPiWkQ8r9Vq9fp4c3vaXCKJiN3Gcc+ePlyoL0nUanf+nWS76vX6YVN7fubpxktiJCK+882I7yevxq1s76zOl0rFzWa9UF3bKFS2d66urM0vF5eL67OzMzfmbs5dn5vuSjvHIuLW1//+sx//+hu3fv/F+3+5+8+pHyTN7bGnHd3WaHou+120DEfE5lEE64OhZnty/U4EAIBDaX3P/1xEXInxGMq+zQEAAADvk9pXxuKDJKLWxkjbrS872WnHyMGvBQAAAHojzebAJmm+OQ9gLNI0n2/M4f1UnEpL5Ur1C0vlrfXFxlzZicilSyul4nRzrvBE5JJ6fSYrf1y/tq8+GxFnI+Kn46OjsVIq5hfKpcV+n/wAAACAAXF63/j/f+Npmp/od1YAAABA1+0b77sDAAAAALyHDnW936QAAAAAeKcZ2gMAAMB77Vu3b9eXWuv514v3trdWy/euLhYrq/m1rYX8QnlzI79cLi9n9+xbO+jnlcrljS/F+taDQrVYqRYq2zt318pb69W7Ky89AhsAAADoobOfffznJCJ2vzyaLXUn+p0U0BNvdK+Pvx1dHkDvDfU7AaBv3OsLBleu3wkAfZccsL/j5J0/dD8XAADgaEx+uv31/+TAcwO7aY9SBI6I838wuFz/h8Hl+j8MrlwMhYE8DLajv/5fq71RQgAAQNeNZUuS5iOy8wBjkab5fMSZ7LEAuWRppVScjohPRMSfxnMn6/WZ7JXJgWMGAAAAAAAAAAAAAAAAAAAAAAAAAKChVkui1s7EiwMAAACAd1xE+o+k+fyvyfHLY/vPD5xI/j+erSPi/i/v/PzBfLW6OVPf/p8X26u/aG6/1uuzFwAAAEA7rXF6axwPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN307OnDhdbSy7j/+lpETLSLPxwj2XokhiPi1H+TbN2SRMRQF+LvPoqIc+3iJ/W0YqKZRbv4o32Mn0bE6S7Eh0H2uN7/fLXd+y+Ni9m6/fvvRtZDvb2O/V/SOmIk6+fa9T9nDhnj/JPfFjrGfxRxfrh9/9Pqf5MO8S8dMv73vruz02lf7VcRk20/f5KXYhWqaxuFyvbO1ZW1+eXicnF9dnbmxtzNuetz04WllVKx+e+eLvnii9JPPvO7569r/6kO8ScOaP/lQ7b/wycPnn6yUcy1iz91qf3f37kO8dPmZ9/nm+X6/slWebdR3uvCb/544XXtX2y0f/hN//+nDtn+K9/+0V8PeSgA0AOV7Z3V+VKpuDnQhbf6bdS/Fh2LVhxlYTSORRpdLvzweKRxLAv97ZcAAIDue3UMDAAAAAAAAAAAAAAAAAAAAPRaL++u17Lbn6YCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALzWRwEAAP//pAHGwA==")
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89801)
r1 = fspick(r0, &(0x7f0000000000)='.\x00', 0x0)
fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0)

1.729681905s ago: executing program 4 (id=960):
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f00000000c0)=""/74, 0x2a)
getdents64(r0, 0x0, 0x44)

1.664939936s ago: executing program 2 (id=961):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000500)={'vlan1\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f0000000180)="0b032200e0ff64000200475400f6a13bb1000000080081004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14)

1.642169616s ago: executing program 4 (id=962):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x54, r2, 0x5, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @remote}}, {0x14, 0x2, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x54}}, 0x0)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000080000000017000000400006803c00040067"], 0x54}}, 0x0)

1.522530147s ago: executing program 2 (id=964):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x0)

1.36723566s ago: executing program 2 (id=965):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a0000000000fa82a3fa211411fa0008000a40000000000900020073"], 0x6c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003"], 0xec}}, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)

1.271753861s ago: executing program 2 (id=966):
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x814}, 0x10)
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
write$UHID_INPUT(r1, &(0x7f0000000500)={0x8, {"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", 0x1000}}, 0x1006)

1.261833472s ago: executing program 5 (id=967):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000240)={@hyper})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000300)={{@hyper, 0x800000}, @my=0x1, 0x0, 0x0, 0x2, 0xfffffffffffffffe})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f00000000c0)={{@host, 0xffffffff}, @host, 0x0, 0x0, 0x1, 0x4})

1.166363863s ago: executing program 1 (id=968):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x8000000000002}, 0x18)
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={r2}, &(0x7f00000000c0)=0x8)

1.039080875s ago: executing program 5 (id=969):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
r1 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0xc)
setfsuid(r2)
utimensat(r0, 0x0, &(0x7f0000000380)={{}, {0x77359400}}, 0x0)

1.022723045s ago: executing program 4 (id=970):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x33)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000e00)='%pi6   \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r1}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b70800000000e1ff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

990.561995ms ago: executing program 1 (id=971):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x51a, &(0x7f0000001200)="$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")
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000)
symlinkat(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r0, &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
renameat2(r0, &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r1, &(0x7f0000000240)='./file1\x00', 0x4)

929.573867ms ago: executing program 2 (id=972):
r0 = syz_io_uring_setup(0x67e8, &(0x7f0000000000), &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000240)={0x0, 0x5e, 0x0}})
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x2000002, &(0x7f0000000600)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c646973636172640061727365743d63703835322c757466383d2023d6ffff756d7461696c3d302c6e6f6e75617461696c696f6368619615f9a9d8fc34fd234143727365743d69736f383835392d322c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c757466b83d312c756e695f786c6174653d302c756e695f786c6174653d302c73686f72746e616d653d6d697865642c726f6469722c756e695f786c8e380b24aa44b2a03f9d01000080000000002c4fb4e27388a38ca91b346d2e5535414e8214d26a8c3700"/241], 0x1, 0x368, &(0x7f0000000180)="$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")
io_uring_enter(r0, 0x5ae7, 0x0, 0x0, 0x0, 0x0)

885.068997ms ago: executing program 5 (id=973):
syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f00000004c0)='./file1\x00', 0x1804810, &(0x7f0000000180)=ANY=[], 0xfb, 0x69d, &(0x7f0000000640)="$eJzs3c1vHGcdB/DvrDd2Ni0hSZM2oEq1GgkQEYkTKy3mQkAI5VBVVTlwthKnseKkxXGRWyHi8HrtoX9AOeSCOCFx4hKpcOBCb70hH5GQuJQD4cKimZ211971Zt0mXpt+PtHs8zrPPPObl32xognwuXXlbJoPUuTK2VdWy/L6/dml9fuztzr5V5tJppKsJWW2kaT4d7vd/jC5nBQbwxTb0j7vL869/vEn63/vlJr1UvVvDFtvm7rf2rbqtW7ddJKJOv0Mtox39TOPV2zM/HKSM3UKY3coSXuLH/3l6Y2WHq1Bax/ekzkCT1bRed/scyw5Ul/o5eeA7jtvY29nN7qpEftt/wQBAAAAB031HbjZV72l5osP8zCrxdE9nBYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcaGubz/8v6qXRzU+n6D7/f7KuS53fX17YXfcHT2oeAAAAAAAAALCHXniYh1nN0W65XVR/83+xKpysXp/K27mThSznXFYzn5WsZDkXkhzrGWhydX5lZapbGrbmxUFrLl98xES7Q7cew04DAAAAAAAAwP+fn+XK5t//AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgPyiSiU6S4l5P9bE0mkkOJ5ksK9aSj7r5g+zBuCcAAAAAe2AqeZjVHO2W20VOJnm2+g3gcN7O7axkMStZykKuVb8LdL71N9bvzy6t35+9VS79437nn7uaRjViOr89DN7y6apHK9ezWNWcy9W8maVcS6Nas3S6nk931G3zulfOqfh27eXRZnatTss9f69O+9zd1c7uZJc/phyrInKoE5GJZKaeWxmN490jM/gI7fLobNlSFnIhjY3Jnty2pcmtO7M15ptDNoZt70idlvvzq51iPhadSPy33bGQiz1n37PDY5589Q+/++FMnd8/uzSaiTptV6+t/nNiticSz40SiRtLt2/euH7n7EGLRJ+ZKhKnNspX8v38IGczndeynMX8OPNZyUKm870qN18f/KLnkt8hUpe3lF571Ewm6zO0c7B2N6cXq3WPZjGv5s1cy0Jeqv5dzIW8nEu5lLmeI3xq+BGurvpG/1VfaX9h4OTPfK3OtJL8uk73hzKux3viunnWz1TxPr6lZjNKJ0aI0oB74zDNL9eZchs/f9SNdE9tj8SFnkg8MzwSv6luK3eWbt9cvjH/1mibO/FenSmvo18m0/vnRlKeLyfKg1WVpracHWXbMxttW+NVtp3caGv0tZ3KH9NsdreymLUdr9TJ+jNc/0gXq7bnBrbNVm2ne9oGfd4CYN878vUjk61/tP7a+qD1i9aN1iuHvzv1zannJ3PoT4e+1ZyZ+Erj+eL3+SA/3fz+DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfHp33nn35vzS0sLytky73b770eCmETPd59V8ytW3Z7pPhRqhc6b/9lTZdUDTRNp3d2h6UpkvPZ3s1bb2b+Y/7Xa7ril26PPbP28P1FTGFLr6OX/tfRG6MWXGdksC9sj5lVtvnb/zzrvfWLw1/8bCGwu35y5dmpuZu/TS7Pnri0sLM53Xcc8SeBI23/THPRMAAAAAAAAAAABgVI/5/wysDWoa9z4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB9uVs2k+SJELM+dmyvL6/dmlcunmN3s2kzSSFD9Jig+Ty+ksOdYzXLHTdt5fnHv940/W/9XuqMer+jeGrTeatXrJdJKJTnrvcY13tU6HKobtQrGxh2XAznQDB+P2vwAAAP//eL8QGw==")
rmdir(0x0)
munmap(&(0x7f0000001000/0x4000)=nil, 0x4000)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000)

748.612999ms ago: executing program 1 (id=974):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'bond0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f00000001c0)={0x11, 0x9, r1, 0x1, 0x5, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, 0x14)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0x3}, 0x1c)

747.727729ms ago: executing program 4 (id=976):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000000040)={[{@clear_cache}, {}, {@compress_force}, {@discard_sync}, {@compress_algo={'compress', 0x3d, 'zlib'}}, {@space_cache}, {@notreelog}, {@noflushoncommit}, {@user_subvol_rm}, {@barrier}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0)
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, 0x0)

489.000263ms ago: executing program 1 (id=977):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r0 = socket$inet6(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c)
syz_emit_ethernet(0x6e, &(0x7f00000003c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "00641a", 0x0, 0x3a, 0x0, @empty, @private1, [@hopopts={0x89}]}}}}}}}, 0x0)

362.614605ms ago: executing program 5 (id=978):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x2, 0x7, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x2e)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='kfree\x00', r2}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ec0)={{r0}, &(0x7f0000000e40), &(0x7f0000000e80)=r2}, 0x20)

350.161236ms ago: executing program 6 (id=979):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setreuid(0xee01, 0xee01)
r2 = getpgrp(0x0)
fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x2, r2})
sendmsg$unix(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="b5", 0x1}], 0x1}, 0x4041)

330.220926ms ago: executing program 1 (id=980):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000000e40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000040)="8f", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x4e24, 0x2, @rand_addr=' \x01\x00', 0x6}, 0x1c, &(0x7f0000000700)=[{&(0x7f00000005c0)='<', 0x1}], 0x1}}], 0x2, 0x0)
shutdown(r0, 0x1)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e23, @empty}}, 0xfb3, 0x9}, 0x90)

191.508378ms ago: executing program 2 (id=981):
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10040, &(0x7f0000000380)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@nouid32}]}, 0xfd, 0x269, &(0x7f0000000780)="$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")
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
creat(&(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
mknod$loop(&(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, 0x1)
creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

92.878119ms ago: executing program 5 (id=982):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000010, &(0x7f0000000280)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x81, 0x7a5, &(0x7f0000000f80)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)
pwrite64(r0, &(0x7f0000000140)='3', 0x1, 0xfeca)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a)
fallocate(r1, 0x8, 0x0, 0x8000)

82.29972ms ago: executing program 4 (id=983):
syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000c80)='./file0\x00', 0xc8, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRESDEC], 0x1, 0xc24, &(0x7f0000000d00)="$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")
r0 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)
pwrite64(r1, &(0x7f0000000140)='3', 0x1, 0xfeca)
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x1, 0x7800, 0x0, 0x3)

0s ago: executing program 1 (id=984):
syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x8488, &(0x7f0000000780), 0xfe, 0x10fd, &(0x7f0000001140)="$eJzs2T9rFEEYBvBnds8/3cqmXwQtLCQknF8ghcK1ttqIpDJVrlL8OH4cTWUf0msRsF9Zb/dO5UTwTm1+PzjmvYd9Z2fKmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMZsmnkhxUSTtlVZKSdN3F4ipJN+V33tdVSp6eLpaPz+dPlknqb4+XZ0kZuoa2tMf3brfzdt4et48OTu5/WL5+8+rF2dnp+ThNSZfL6/1vpYzrAQAAAH7U76z5z+8HAAAAfmdvFwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6hvNnU7FVWSknTdxeIqSbel78Y/Wh8AAACwu5Iqz5tt+eoaYONhPjZlnQ/jlzLUR3m3pR8AAAD4pf7WWHz/fb3c3JzHH2S2PpcP2d3Mcni4+j8O+XyS1EmOfpr88vrty+lX+vpv7wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAAAAAPYKAAD///F61s8=")
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0)
symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0)
rename(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

kernel console output (not intermixed with test programs):

9,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback.
[   95.449253][ T4583] attempt to access beyond end of device
[   95.449253][ T4583] loop2: rw=524288, want=49160, limit=40427
[   95.463782][ T4583] attempt to access beyond end of device
[   95.463782][ T4583] loop2: rw=524288, want=49168, limit=40427
[   95.477155][ T4583] attempt to access beyond end of device
[   95.477155][ T4583] loop2: rw=524288, want=49176, limit=40427
[   95.495138][ T4583] attempt to access beyond end of device
[   95.495138][ T4583] loop2: rw=524288, want=49184, limit=40427
[   95.519813][ T4600] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   95.526754][ T4583] attempt to access beyond end of device
[   95.526754][ T4583] loop2: rw=524288, want=49192, limit=40427
[   95.624209][ T4583] attempt to access beyond end of device
[   95.624209][ T4583] loop2: rw=524288, want=49200, limit=40427
[   95.664312][ T4583] attempt to access beyond end of device
[   95.664312][ T4583] loop2: rw=524288, want=49208, limit=40427
[   95.685871][ T4583] attempt to access beyond end of device
[   95.685871][ T4583] loop2: rw=524288, want=49216, limit=40427
[   95.733335][ T4583] attempt to access beyond end of device
[   95.733335][ T4583] loop2: rw=524288, want=49224, limit=40427
[   95.829020][ T4583] attempt to access beyond end of device
[   95.829020][ T4583] loop2: rw=524288, want=49232, limit=40427
[   95.938947][ T4617] loop1: detected capacity change from 0 to 2048
[   95.940519][ T4621] loop4: detected capacity change from 0 to 128
[   95.968530][ T4583] F2FS-fs (loop2) : inject no more block in inc_valid_block_count of __allocate_data_block+0x492/0xb60
[   96.045882][ T4621] EXT4-fs (loop4): mounted filesystem without journal. Opts: sysvgroups,inode_readahead_blks=0x0000000000004000,,errors=continue. Quota mode: none.
[   96.097843][ T4621] ext4 filesystem being mounted at /25/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   96.098557][ T4617] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[   96.133999][ T4617] UDF-fs: Scanning with blocksize 512 failed
[   96.194741][ T4628] loop0: detected capacity change from 0 to 64
[   96.214298][ T4617] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   96.309787][   T26] kauditd_printk_skb: 11 callbacks suppressed
[   96.309803][   T26] audit: type=1800 audit(1743482657.643:3): pid=4617 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.128" name="file1" dev="loop1" ino=818 res=0 errno=0
[   96.401161][ T4632] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   96.676901][ T4638] loop3: detected capacity change from 0 to 2048
[   96.959526][ T4647] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   97.454126][ T4636] loop1: detected capacity change from 0 to 32768
[   97.535923][ T4636] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.136 (4636)
[   97.591383][ T4636] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[   97.604302][ T4657] tun0: tun_chr_ioctl cmd 1074025675
[   97.626110][ T4636] BTRFS info (device loop1): setting nodatacow, compression disabled
[   97.635066][ T4657] tun0: persist enabled
[   97.650594][ T4657] tun0: tun_chr_ioctl cmd 1074025675
[   97.666467][ T4636] BTRFS info (device loop1): enabling auto defrag
[   97.680621][ T4657] tun0: persist enabled
[   97.686771][ T4636] BTRFS info (device loop1): max_inline at 0
[   97.713432][ T4636] BTRFS info (device loop1): using free space tree
[   97.740646][ T4636] BTRFS info (device loop1): has skinny extents
[   97.847917][ T4646] loop0: detected capacity change from 0 to 32768
[   97.946347][ T4651] loop4: detected capacity change from 0 to 32768
[   97.965864][ T4669] input: syz0 as /devices/virtual/input/input6
[   97.986263][ T4646] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.141 (4646)
[   98.063609][ T4676] [U] 
[   98.066825][ T4676] [U] 
[   98.069570][ T4676] [U] 
[   98.072296][ T4676] [U] 
[   98.081122][ T4646] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[   98.090645][ T4676] [U] 
[   98.093388][ T4676] [U] 
[   98.096132][ T4676] [U] 
[   98.098948][ T4676] [U] 
[   98.109057][ T4646] BTRFS info (device loop0): using free space tree
[   98.129660][ T4646] BTRFS info (device loop0): has skinny extents
[   98.137548][ T4676] [U] 
[   98.140320][ T4676] [U] 
[   98.143097][ T4676] [U] 
[   98.146015][ T4676] [U] 
[   98.178705][ T4676] [U] 
[   98.181575][ T4676] [U] 
[   98.184317][ T4676] [U] 
[   98.187387][ T4676] [U] 
[   98.192922][ T4651] JBD2: Ignoring recovery information on journal
[   98.208083][ T4676] [U] 
[   98.210845][ T4676] [U] 
[   98.213652][ T4676] [U] 
[   98.216963][ T4676] [U] 
[   98.225957][ T4676] [U] 
[   98.228828][ T4676] [U] 
[   98.231557][ T4676] [U] 
[   98.234286][ T4676] [U] 
[   98.258411][ T4676] [U] 
[   98.261173][ T4676] [U] 
[   98.263985][ T4676] [U] 
[   98.266715][ T4676] [U] 
[   98.314316][ T4676] [U] 
[   98.317131][ T4676] [U] 
[   98.319839][ T4676] [U] 
[   98.322559][ T4676] [U] 
[   98.386347][ T4676] [U] 
[   98.389103][ T4676] [U] 
[   98.391833][ T4676] [U] 
[   98.394565][ T4676] [U] 
[   98.414381][ T4676] [U] 
[   98.417172][ T4676] [U] 
[   98.419899][ T4676] [U] 
[   98.422627][ T4676] [U] 
[   98.466037][ T4651] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[   98.500670][ T4676] [U] 
[   98.503432][ T4676] [U] 
[   98.506159][ T4676] [U] 
[   98.508886][ T4676] [U] 
[   98.565772][ T4676] [U] 
[   98.568527][ T4676] [U] 
[   98.571251][ T4676] [U] 
[   98.574323][ T4676] [U] 
[   98.639492][ T4646] BTRFS info (device loop0): enabling ssd optimizations
[   98.686440][ T4676] [U] 
[   98.689209][ T4676] [U] 
[   98.691951][ T4676] [U] 
[   98.694673][ T4676] [U] 
[   98.709776][ T4676] [U] 
[   98.712545][ T4676] [U] 
[   98.715262][ T4676] [U] 
[   98.717999][ T4676] [U] 
[   98.735053][ T4676] [U] 
[   98.737838][ T4676] [U] 
[   98.740561][ T4676] [U] 
[   98.743279][ T4676] [U] 
[   98.787744][ T4676] [U] 
[   98.790598][ T4676] [U] 
[   98.793325][ T4676] [U] 
[   98.796060][ T4676] [U] 
[   98.838868][ T4676] [U] 
[   98.841648][ T4676] [U] 
[   98.844406][ T4676] [U] 
[   98.847130][ T4676] [U] 
[   98.892844][ T4676] [U] 
[   98.895697][ T4676] [U] 
[   98.898425][ T4676] [U] 
[   98.901154][ T4676] [U] 
[   98.938175][ T4174] ocfs2: Unmounting device (7,4) on (node local)
[   99.030367][ T4676] [U] 
[   99.033119][ T4676] [U] 
[   99.035834][ T4676] [U] 
[   99.038554][ T4676] [U] 
[   99.065512][ T4676] [U] 
[   99.377682][ T4731] loop4: detected capacity change from 0 to 1024
[   99.994283][ T4714] loop2: detected capacity change from 0 to 32768
[  100.093674][ T4714] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.152 (4714)
[  100.191708][ T4744] loop0: detected capacity change from 0 to 2048
[  100.217146][ T4714] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  100.256666][ T4714] BTRFS info (device loop2): setting nodatacow, compression disabled
[  100.318745][ T4714] BTRFS info (device loop2): max_inline at 0
[  100.360976][ T4714] BTRFS info (device loop2): enabling disk space caching
[  100.368204][ T4714] BTRFS info (device loop2): turning off barriers
[  100.375302][ T4714] BTRFS info (device loop2): turning on flush-on-commit
[  100.383551][ T4744] EXT4-fs (loop0): mounted filesystem without journal. Opts: discard,journal_dev=0x000000000000009b,nobarrier,,errors=continue. Quota mode: none.
[  100.392514][ T4714] BTRFS info (device loop2): doing ref verification
[  100.457632][  T155] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  100.509558][ T4714] BTRFS info (device loop2): force clearing of disk cache
[  100.524592][ T4714] BTRFS info (device loop2): enabling ssd optimizations
[  100.534735][ T4714] BTRFS info (device loop2): max_inline at 4096
[  100.553590][  T155] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 28
[  100.569853][ T4714] BTRFS info (device loop2): disk space caching is enabled
[  100.577106][ T4714] BTRFS info (device loop2): has skinny extents
[  100.597959][  T155] EXT4-fs (loop0): This should not happen!! Data will be lost
[  100.597959][  T155] 
[  100.661120][ T4221] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  100.702593][  T155] EXT4-fs (loop0): Total free blocks count 0
[  100.708627][  T155] EXT4-fs (loop0): Free/Dirty block details
[  100.722616][  T155] EXT4-fs (loop0): free_blocks=2415919104
[  100.729263][  T155] EXT4-fs (loop0): dirty_blocks=16
[  100.739182][  T155] EXT4-fs (loop0): Block reservation details
[  100.753247][  T155] EXT4-fs (loop0): i_reserved_data_blocks=1
[  101.016187][ T4714] BTRFS info (device loop2): clearing free space tree
[  101.019786][ T4221] usb 2-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice=be.42
[  101.026493][ T4714] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  101.042091][ T4714] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  101.103598][ T4221] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.156047][ T4221] usb 2-1: config 0 descriptor??
[  101.221254][ T4221] ldusb 2-1:0.0: Interrupt in endpoint not found
[  101.292561][   T26] audit: type=1800 audit(1743482662.633:4): pid=4714 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.152" name="bus" dev="loop2" ino=263 res=0 errno=0
[  101.467373][ T4221] usb 2-1: USB disconnect, device number 2
[  101.510140][ T4805] loop0: detected capacity change from 0 to 512
[  101.550439][ T4798] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0
[  101.719693][ T4805] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  101.801246][ T4805] ext4 filesystem being mounted at /38/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  101.988336][ T4818] loop3: detected capacity change from 0 to 512
[  102.163989][ T4818] EXT4-fs (loop3): Ignoring removed bh option
[  102.209756][ T4818] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  102.258295][ T4818] EXT4-fs (loop3): invalid journal inode
[  102.296641][ T4818] EXT4-fs (loop3): can't get journal size
[  102.344317][ T4818] EXT4-fs (loop3): 1 truncate cleaned up
[  102.370862][ T4818] EXT4-fs (loop3): mounted filesystem without journal. Opts: norecovery,bh,resuid=0x0000000000000000,auto_da_alloc,,errors=continue. Quota mode: none.
[  102.529816][ T4835] loop4: detected capacity change from 0 to 64
[  102.623720][   T26] audit: type=1800 audit(1743482663.963:5): pid=4835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.181" name="file2" dev="loop4" ino=19 res=0 errno=0
[  102.876741][ T4839] loop4: detected capacity change from 0 to 512
[  102.975798][ T4839] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.183: casefold flag without casefold feature
[  102.998277][ T4839] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.183: couldn't read orphan inode 15 (err -117)
[  103.088550][ T4839] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  103.802895][ T4857] loop4: detected capacity change from 0 to 40427
[  103.902706][ T4857] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  103.910987][ T4857] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  103.922499][ T4857] F2FS-fs (loop4): invalid crc value
[  103.972516][ T4857] F2FS-fs (loop4): Found nat_bits in checkpoint
[  104.045953][ T4857] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  104.053302][ T4857] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  104.110426][ T4853] loop3: detected capacity change from 0 to 32768
[  104.192055][ T4734] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  104.210602][ T4853] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.188 (4853)
[  104.245606][ T4734] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  104.314257][ T4853] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  104.341577][ T4853] BTRFS info (device loop3): setting nodatacow, compression disabled
[  104.385629][ T4853] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  104.427276][ T4853] BTRFS info (device loop3): trying to use backup root at mount time
[  104.456693][ T4853] BTRFS info (device loop3): enabling auto defrag
[  104.468647][ T4852] loop2: detected capacity change from 0 to 32768
[  104.471240][ T4853] BTRFS info (device loop3): max_inline at 4096
[  104.532159][ T4853] BTRFS info (device loop3): using free space tree
[  104.553775][ T4853] BTRFS info (device loop3): has skinny extents
[  104.840528][ T4853] BTRFS info (device loop3): enabling ssd optimizations
[  105.324561][  T140] BTRFS info (device loop3): space_info 5 has 10432512 free, is not full
[  105.333883][  T140] BTRFS info (device loop3): space_info total=11534336, used=53248, pinned=0, reserved=16384, may_use=1032192, readonly=0 zone_unusable=0
[  105.348349][  T140] BTRFS info (device loop3): global_block_rsv: size 851968 reserved 847872
[  105.357692][  T140] BTRFS info (device loop3): trans_block_rsv: size 0 reserved 0
[  105.365789][  T140] BTRFS info (device loop3): chunk_block_rsv: size 0 reserved 0
[  105.373880][  T140] BTRFS info (device loop3): delayed_block_rsv: size 32768 reserved 32768
[  105.382462][  T140] BTRFS info (device loop3): delayed_refs_rsv: size 720896 reserved 151552
[  105.517506][ T4909] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  105.574188][ T4909] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  105.614765][ T4909] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  105.662966][ T4909] device bridge_slave_0 left promiscuous mode
[  105.685979][ T4909] bridge0: port 1(bridge_slave_0) entered disabled state
[  105.758113][ T4912] loop0: detected capacity change from 0 to 2048
[  105.775320][ T4909] device bridge_slave_1 left promiscuous mode
[  105.796631][ T4909] bridge0: port 2(bridge_slave_1) entered disabled state
[  105.831823][ T4909] bond0: (slave bond_slave_0): Releasing backup interface
[  106.020484][ T4912] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  106.368938][ T4909] bond0: (slave bond_slave_1): Releasing backup interface
[  106.582542][ T4909] team0: Port device team_slave_0 removed
[  106.636929][ T4909] team0: Port device team_slave_1 removed
[  106.685255][ T4909] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  106.713753][ T4909] batman_adv: batadv0: Removing interface: batadv_slave_0
[  106.739028][ T4909] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  106.757337][ T4909] batman_adv: batadv0: Removing interface: batadv_slave_1
[  106.826859][ T4910] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  106.903630][ T4920] netlink: 36 bytes leftover after parsing attributes in process `syz.4.205'.
[  106.993747][ T4926] loop3: detected capacity change from 0 to 8192
[  107.122971][ T4926] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  107.187038][ T4940] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  107.399601][ T4222] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  107.531036][ T4953] loop3: detected capacity change from 0 to 128
[  107.553760][ T4955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.219'.
[  107.564847][ T4955] netlink: 12 bytes leftover after parsing attributes in process `syz.2.219'.
[  107.634603][ T4955] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  107.644325][ T4955] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  107.653410][ T4955] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  107.664247][ T4955] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  107.779759][ T4222] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  107.795341][ T4222] usb 5-1: config 0 has no interfaces?
[  107.939668][ T4222] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  107.949226][ T4222] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  107.994937][ T4965] loop3: detected capacity change from 0 to 64
[  107.996344][ T4222] usb 5-1: Product: syz
[  108.016025][ T4222] usb 5-1: Manufacturer: syz
[  108.036557][ T4222] usb 5-1: config 0 descriptor??
[  108.184675][ T4967] Trying to free block not in datazone
[  108.209932][ T4967] Trying to free block not in datazone
[  108.240264][ T4967] Trying to free block not in datazone
[  108.323735][ T4967] Trying to free block not in datazone
[  108.335721][ T4220] usb 5-1: USB disconnect, device number 3
[  109.417138][ T4965] Trying to free block not in datazone
[  109.431294][ T4965] minix_free_inode: bit 3 already cleared
[  110.141876][ T5001] loop3: detected capacity change from 0 to 40427
[  110.196931][ T5001] F2FS-fs (loop3): invalid crc value
[  110.215219][ T5001] F2FS-fs (loop3): Found nat_bits in checkpoint
[  110.293899][ T5001] F2FS-fs (loop3): Start checkpoint disabled!
[  110.305133][ T5009] loop2: detected capacity change from 0 to 1024
[  110.333817][ T5001] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  110.468132][ T5009] hfsplus: request for non-existent node 3 in B*Tree
[  110.505099][ T5009] hfsplus: request for non-existent node 3 in B*Tree
[  110.619049][ T5009] hfsplus: request for non-existent node 4 in B*Tree
[  110.627377][ T5009] hfsplus: request for non-existent node 4 in B*Tree
[  110.641207][ T5009] hfsplus: request for non-existent node 5 in B*Tree
[  110.648312][ T5009] hfsplus: request for non-existent node 5 in B*Tree
[  111.086658][ T5015] loop3: detected capacity change from 0 to 4096
[  111.351559][ T5006] loop4: detected capacity change from 0 to 40427
[  111.374377][ T5006] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  111.404177][ T5006] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  111.500079][ T5006] F2FS-fs (loop4): invalid crc value
[  111.553874][ T5006] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669)
[  111.645255][ T5006] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  111.839126][ T5006] F2FS-fs (loop4): write access unavailable, skipping recovery
[  111.867535][ T5006] F2FS-fs (loop4): Try to recover 1th superblock, ret: -30
[  111.888993][ T5006] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  111.956623][ T5029] Zero length message leads to an empty skb
[  112.139666][ T5033] sctp: [Deprecated]: syz.2.244 (pid 5033) Use of struct sctp_assoc_value in delayed_ack socket option.
[  112.139666][ T5033] Use struct sctp_sack_info instead
[  112.299439][ T4220] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  112.549536][ T4220] usb 4-1: Using ep0 maxpacket: 32
[  112.669497][ T4220] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  112.699421][ T4220] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  112.739517][ T4220] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  112.767659][ T4220] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  112.828378][ T4220] usb 4-1: config 0 descriptor??
[  113.292720][ T4575] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  113.356521][ T4220] savu 0003:1E7D:2D5A.0004: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0
[  113.539605][ T4575] usb 2-1: Using ep0 maxpacket: 32
[  113.613580][ T4220] usb 4-1: USB disconnect, device number 3
[  113.659662][ T4575] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  113.681283][ T4575] usb 2-1: config 0 has no interfaces?
[  113.706073][ T5074] loop2: detected capacity change from 0 to 128
[  113.712674][ T4575] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  113.729402][ T4575] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  113.750152][ T4575] usb 2-1: config 0 descriptor??
[  113.789429][ T5074] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  113.938543][ T5074] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  113.951190][ T5074] ext2 filesystem being mounted at /43/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  114.034641][ T4575] usb 2-1: USB disconnect, device number 3
[  114.093900][ T5072] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 4: comm syz.2.259: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1
[  114.506388][ T5091] device syzkaller1 entered promiscuous mode
[  114.969560][ T4575] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  115.000380][ T5115] loop4: detected capacity change from 0 to 512
[  115.139485][ T4577] usb 3-1: new full-speed USB device number 3 using dummy_hcd
[  115.340296][ T4575] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  115.376098][ T4575] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  115.390168][ T4220] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  115.425895][ T4575] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  115.461320][ T4575] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  115.482239][ T4575] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  115.500879][ T4575] usb 4-1: config 0 descriptor??
[  115.520301][ T4577] usb 3-1: config 0 has no interfaces?
[  115.649416][ T4220] usb 2-1: Using ep0 maxpacket: 32
[  115.679922][ T4577] usb 3-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f
[  115.699714][ T4577] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.707929][ T4577] usb 3-1: Product: syz
[  115.733656][ T4577] usb 3-1: Manufacturer: syz
[  115.755738][ T4577] usb 3-1: SerialNumber: syz
[  115.789624][ T4220] usb 2-1: config 0 has an invalid interface number: 67 but max is 0
[  115.829508][ T4577] usb 3-1: config 0 descriptor??
[  115.834854][ T4220] usb 2-1: config 0 has no interface number 0
[  115.837446][ T1345] kernel write not supported for file bpf-prog (pid: 1345 comm: kworker/0:3)
[  115.853453][ T5138] loop0: detected capacity change from 0 to 512
[  115.938808][ T5138] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  115.952755][ T5138] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  115.983956][ T4575] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving
[  116.010029][ T4220] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  116.046832][ T4575] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  116.069381][ T4220] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.124370][ T4220] usb 2-1: Product: syz
[  116.156200][ T4220] usb 2-1: Manufacturer: syz
[  116.162689][ T4220] usb 2-1: SerialNumber: syz
[  116.185462][ T4220] usb 2-1: config 0 descriptor??
[  116.227111][ T4570] usb 3-1: USB disconnect, device number 3
[  116.251596][ T4220] smsc95xx v2.0.0
[  116.355571][   T13] usb 4-1: USB disconnect, device number 4
[  116.905671][ T5170] loop0: detected capacity change from 0 to 512
[  116.936632][ T5165] all (unregistering): Released all slaves
[  117.014337][ T5173] loop2: detected capacity change from 0 to 1024
[  117.039149][ T5170] EXT4-fs (loop0): 1 orphan inode deleted
[  117.059926][ T5170] EXT4-fs (loop0): mounted filesystem without journal. Opts: nojournal_checksum,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,,errors=continue. Quota mode: writeback.
[  117.082522][    C1] vkms_vblank_simulate: vblank timer overrun
[  117.092114][ T5170] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  117.178469][ T5173] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,barrier=0x0000000000000000,norecovery,debug_want_extra_isize=0x0000000000000080,resuid=0x0000000000000000,nodelalloc,acl,abort,,errors=continue. Quota mode: none.
[  117.343256][ T4220] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71
[  117.378139][ T4220] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA
[  117.420146][ T4220] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  117.447973][ T4220] smsc95xx: probe of 2-1:0.67 failed with error -71
[  117.484440][ T4220] usb 2-1: USB disconnect, device number 4
[  118.344894][ T5185] loop0: detected capacity change from 0 to 32768
[  118.451877][ T5208] loop3: detected capacity change from 0 to 32768
[  118.483239][ T5208] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.316 (5208)
[  118.547417][ T5208] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  118.556520][ T5208] BTRFS info (device loop3): using free space tree
[  118.563271][ T5208] BTRFS info (device loop3): has skinny extents
[  118.609608][ T4220] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  118.651358][ T5208] BTRFS info (device loop3): enabling ssd optimizations
[  118.687058][   T26] audit: type=1800 audit(1743482680.023:6): pid=5208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.316" name="bus" dev="loop3" ino=263 res=0 errno=0
[  118.979543][ T4220] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  119.008319][ T4220] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  119.105832][ T4220] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  119.145307][ T4220] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  119.205387][ T4220] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  119.294725][ T5241] loop2: detected capacity change from 0 to 8192
[  119.379757][ T4220] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  119.399014][ T4220] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  119.418089][ T4220] usb 5-1: Product: syz
[  119.422946][ T4220] usb 5-1: Manufacturer: syz
[  119.514233][ T4220] cdc_wdm 5-1:1.0: skipping garbage
[  119.514275][ T5241] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
[  119.519910][ T4220] cdc_wdm 5-1:1.0: skipping garbage
[  119.546852][ T4220] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  119.553675][ T4220] cdc_wdm 5-1:1.0: Unknown control protocol
[  119.604663][ T5241] REISERFS (device loop2): using ordered data mode
[  119.623657][ T5241] reiserfs: using flush barriers
[  119.675302][ T5241] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  119.748138][ T5241] REISERFS (device loop2): checking transaction log (loop2)
[  119.794951][ T5241] REISERFS (device loop2): Using r5 hash to sort names
[  119.832408][ T5241] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  119.902964][ T4261] usb 5-1: USB disconnect, device number 4
[  119.919649][    C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  119.928085][    C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  119.934196][    C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  120.785268][ T5303] smc: net device wg0 applied user defined pnetid SYZ0
[  120.796166][ T5303] smc: net device wg0 erased user defined pnetid SYZ0
[  120.939479][ T5254] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  121.038038][ T5314] loop0: detected capacity change from 0 to 128
[  121.139225][ T5319] device syzkaller1 entered promiscuous mode
[  121.179424][ T5254] usb 5-1: Using ep0 maxpacket: 32
[  121.190058][ T5315] loop2: detected capacity change from 0 to 4096
[  121.238235][ T5315] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512)
[  121.258924][ T5314] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  121.299668][ T5254] usb 5-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7
[  121.308841][ T5254] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  121.335163][ T5254] usb 5-1: config 0 descriptor??
[  121.340988][ T5314] ext4 filesystem being mounted at /87/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  121.388542][ T5254] gspca_main: sq930x-2.14.0 probing 041e:403c
[  121.435634][ T5315] ntfs3: loop2: ino=1b, "file0" directory corrupted
[  121.730898][ T5331] 9pnet: p9_errstr2errno: server reported unknown error �@í΂Í(ááí
[  121.953685][ T5343] loop0: detected capacity change from 0 to 1024
[  122.120568][ T5249] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  122.352695][   T13] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  122.359626][ T5249] usb 4-1: Using ep0 maxpacket: 32
[  122.466156][ T5254] gspca_sq930x: ucbus_write failed -71
[  122.473698][ T5254] sq930x: probe of 5-1:0.0 failed with error -71
[  122.480924][ T5249] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  122.497722][ T5249] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  122.508188][ T5254] usb 5-1: USB disconnect, device number 5
[  122.527341][ T5249] usb 4-1: config 0 descriptor??
[  122.576236][ T5249] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  122.649683][   T13] usb 3-1: Using ep0 maxpacket: 32
[  122.720081][ T5352] loop0: detected capacity change from 0 to 32768
[  122.779850][   T13] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  122.801546][   T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  122.813553][   T13] usb 3-1: config 0 descriptor??
[  122.828631][ T5352] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  122.873799][   T13] gspca_main: sunplus-2.14.0 probing 041e:400b
[  122.941957][ T4175] (syz-executor,4175,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72
[  122.954741][ T4175] ocfs2: Unmounting device (7,0) on (node local)
[  123.100126][ T1345] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  123.229662][ T5249] gspca_vc032x: reg_w err -71
[  123.234411][ T5249] gspca_vc032x: I2c Bus Busy Wait 00
[  123.249611][ T5249] gspca_vc032x: I2c Bus Busy Wait 00
[  123.259682][ T5249] gspca_vc032x: I2c Bus Busy Wait 00
[  123.269633][ T5249] gspca_vc032x: I2c Bus Busy Wait 00
[  123.275044][ T5249] gspca_vc032x: I2c Bus Busy Wait 00
[  123.291107][ T5249] gspca_vc032x: I2c Bus Busy Wait 00
[  123.306910][ T5249] gspca_vc032x: I2c Bus Busy Wait 00
[  123.319375][ T5249] gspca_vc032x: I2c Bus Busy Wait 00
[  123.324829][ T5249] gspca_vc032x: I2c Bus Busy Wait 00
[  123.330768][ T5249] gspca_vc032x: I2c Bus Busy Wait 00
[  123.336205][ T5249] gspca_vc032x: I2c Bus Busy Wait 00
[  123.342071][ T5249] gspca_vc032x: I2c Bus Busy Wait 00
[  123.347510][ T5249] gspca_vc032x: I2c Bus Busy Wait 00
[  123.353357][ T5249] gspca_vc032x: I2c Bus Busy Wait 00
[  123.358771][ T5249] gspca_vc032x: I2c Bus Busy Wait 00
[  123.365110][ T5249] gspca_vc032x: I2c Bus Busy Wait 00
[  123.379595][ T5249] gspca_vc032x: I2c Bus Busy Wait 00
[  123.382872][ T1345] usb 2-1: Using ep0 maxpacket: 8
[  123.390049][ T5249] gspca_vc032x: I2c Bus Busy Wait 00
[  123.390066][ T5249] gspca_vc032x: Unknown sensor...
[  123.390123][ T5249] vc032x: probe of 4-1:0.0 failed with error -22
[  123.410270][ T5249] usb 4-1: USB disconnect, device number 5
[  123.454130][ T5362] loop4: detected capacity change from 0 to 32768
[  123.549675][ T1345] usb 2-1: config 0 has no interfaces?
[  123.739525][   T13] gspca_sunplus: reg_w_riv err -71
[  123.744754][   T13] sunplus: probe of 3-1:0.0 failed with error -71
[  123.756088][ T1345] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee
[  123.786585][ T1345] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  123.796864][   T13] usb 3-1: USB disconnect, device number 4
[  123.805403][ T1345] usb 2-1: Product: syz
[  123.816923][ T1345] usb 2-1: Manufacturer: syz
[  123.831809][ T1345] usb 2-1: SerialNumber: syz
[  123.843386][ T5369] loop5: detected capacity change from 0 to 6
[  123.849032][ T1345] usb 2-1: config 0 descriptor??
[  123.934305][ T5362] overlayfs: failed to resolve './file0': -2
[  124.130779][ T5254] usb 2-1: USB disconnect, device number 5
[  124.510990][ T5391] vcan0: tx drop: invalid sa for name 0x0000000000000003
[  124.577782][ T5367] loop0: detected capacity change from 0 to 32768
[  124.757944][ T5367] XFS (loop0): Mounting V5 Filesystem
[  124.879833][ T5367] XFS (loop0): Ending clean mount
[  124.905882][ T5417] device pim6reg1 entered promiscuous mode
[  124.907270][ T5367] XFS (loop0): Quotacheck needed: Please wait.
[  125.039206][ T5367] XFS (loop0): Quotacheck: Done.
[  125.420430][ T5423] loop4: detected capacity change from 0 to 40427
[  125.526128][ T5398] loop3: detected capacity change from 0 to 32768
[  125.539536][ T4261] usb 3-1: new full-speed USB device number 5 using dummy_hcd
[  125.698961][ T5435] loop4: detected capacity change from 0 to 4096
[  125.774375][ T4175] XFS (loop0): Unmounting Filesystem
[  125.814263][ T5437] binder: 5436:5437 ioctl c0306201 0 returned -14
[  125.832174][ T5437] binder: 5436:5437 ioctl 400c620e 200000000100 returned -22
[  126.015369][ T4261] usb 3-1: config 0 has an invalid interface number: 110 but max is 0
[  126.036592][ T4261] usb 3-1: config 0 has no interface number 0
[  126.073667][ T4261] usb 3-1: config 0 interface 110 altsetting 0 endpoint 0xC has invalid maxpacket 512, setting to 64
[  126.120587][ T4261] usb 3-1: config 0 interface 110 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 10
[  126.163802][ T4261] usb 3-1: config 0 interface 110 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  126.189412][ T4261] usb 3-1: config 0 interface 110 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  126.223096][ T4261] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=17.65
[  126.246863][ T4261] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  126.298642][ T4261] usb 3-1: config 0 descriptor??
[  126.324238][ T5427] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  126.362709][ T5445] loop4: detected capacity change from 0 to 4096
[  126.371291][ T4261] adutux 3-1:0.110: interrupt endpoints not found
[  126.469633][ T5445] /dev/loop4: Can't open blockdev
[  126.597655][ T4252] usb 3-1: USB disconnect, device number 5
[  126.914832][ T4261] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  127.006807][ T5466] loop4: detected capacity change from 0 to 32768
[  127.028318][ T5458] loop3: detected capacity change from 0 to 32768
[  127.069587][ T5249] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  127.146277][ T5458] XFS (loop3): Mounting V5 Filesystem
[  127.234394][ T4261] usb 1-1: Using ep0 maxpacket: 16
[  127.300099][ T5458] XFS (loop3): Ending clean mount
[  127.331750][ T5458] XFS (loop3): Quotacheck needed: Please wait.
[  127.365468][ T4261] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  127.398426][ T4261] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  127.409735][ T4261] usb 1-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00
[  127.419049][ T4261] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  127.440035][ T5249] usb 2-1: config 0 has too many interfaces: 129, using maximum allowed: 32
[  127.445800][ T4261] usb 1-1: config 0 descriptor??
[  127.459279][ T5249] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 129
[  127.511580][ T5458] XFS (loop3): Quotacheck: Done.
[  127.619714][ T5249] usb 2-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e
[  127.633474][ T5249] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.649444][ T5249] usb 2-1: Product: syz
[  127.654304][ T5249] usb 2-1: Manufacturer: syz
[  127.659017][ T5249] usb 2-1: SerialNumber: syz
[  127.669216][ T5249] usb 2-1: config 0 descriptor??
[  127.708090][ T4182] XFS (loop3): Unmounting Filesystem
[  127.747250][ T5483] loop4: detected capacity change from 0 to 40427
[  127.942369][ T4261] hid-alps 0003:044E:120C.0006: unbalanced delimiter at end of report description
[  127.975827][ T4261] hid-alps 0003:044E:120C.0006: parse failed
[  127.987584][ T4261] hid-alps: probe of 0003:044E:120C.0006 failed with error -22
[  128.185709][ T4261] usb 1-1: USB disconnect, device number 3
[  128.286736][ T5496] loop2: detected capacity change from 0 to 2048
[  128.364727][ T5496] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  128.425347][ T5496] EXT4-fs (loop2): mounted filesystem without journal. Opts: abort,resuid=0x0000000000000000,block_validity,resuid=0x000000000000ee01,discard,noblock_validity,dioread_nolock,,errors=continue. Quota mode: writeback.
[  128.477577][ T5496] EXT4-fs (loop2): shut down requested (2)
[  128.501850][ T5496] EXT4-fs warning (device loop2): empty_inline_dir:1862: bad inline directory (dir #12) - inode 13, rec_len 21, name_len 5inline size 60
[  128.522668][ T5249] mos7840 2-1:0.0: required endpoints missing
[  128.545592][ T5249] usb 2-1: USB disconnect, device number 6
[  128.730094][ T5254] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  128.908594][ T5518] loop2: detected capacity change from 0 to 64
[  128.920834][ T5515] input: syz1 as /devices/virtual/input/input7
[  128.978944][ T5518] capability: warning: `syz.2.440' uses 32-bit capabilities (legacy support in use)
[  129.093468][ T5254] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  129.106264][ T5254] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  129.219600][ T5254] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  129.230405][ T5254] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  129.238652][ T5254] usb 5-1: SerialNumber: syz
[  129.336498][ T5535] device syzkaller1 entered promiscuous mode
[  129.365801][ T5536] loop3: detected capacity change from 0 to 2048
[  129.483836][ T5536] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  129.506312][ T4470] udevd[4470]: incorrect nilfs2 checksum on /dev/loop3
[  129.550573][ T5540] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  129.555274][ T5254] usb 5-1: 0:2 : does not exist
[  129.609158][   T26] audit: type=1800 audit(1743482946.937:7): pid=5536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.445" name="file1" dev="loop3" ino=15 res=0 errno=0
[  129.621299][ T5532] loop2: detected capacity change from 0 to 32768
[  129.654167][   T26] audit: type=1800 audit(1743482946.977:8): pid=5536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.445" name="file1" dev="loop3" ino=15 res=0 errno=0
[  129.669501][ T5536] NILFS (loop3): DAT doesn't have a block to manage vblocknr = 3044605952
[  129.686213][ T5254] usb 5-1: USB disconnect, device number 6
[  129.697491][ T5536] NILFS error (device loop3): nilfs_bmap_truncate: broken bmap (inode number=15)
[  129.748980][ T5536] Remounting filesystem read-only
[  129.755823][ T5536] NILFS (loop3): error -5 truncating bmap (ino=15)
[  129.799762][ T5532] XFS (loop2): Mounting V5 Filesystem
[  129.825709][ T4182] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer
[  129.920759][ T5532] XFS (loop2): Ending clean mount
[  129.942761][ T5532] XFS (loop2): Quotacheck needed: Please wait.
[  129.943223][ T4290] udevd[4290]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  130.079463][ T5532] XFS (loop2): Quotacheck: Done.
[  130.617640][ T4183] XFS (loop2): Unmounting Filesystem
[  130.870265][ T5555] loop0: detected capacity change from 0 to 32768
[  131.080691][ T5555] overlayfs: upper fs needs to support d_type.
[  131.106709][ T5555] overlayfs: upper fs does not support tmpfile.
[  131.119060][ T5555] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  131.414664][ T5590] loop2: detected capacity change from 0 to 2048
[  131.480969][ T5590] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  131.522446][ T4290] udevd[4290]: incorrect nilfs2 checksum on /dev/loop2
[  131.569433][ T5592] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  131.614556][   T26] audit: type=1800 audit(1743482948.947:9): pid=5590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.460" name="file1" dev="loop2" ino=15 res=0 errno=0
[  131.639161][ T5590] NILFS (loop2): DAT doesn't have a block to manage vblocknr = 3044605952
[  131.655610][ T5590] NILFS error (device loop2): nilfs_bmap_truncate: broken bmap (inode number=15)
[  131.665645][   T26] audit: type=1800 audit(1743482948.947:10): pid=5590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.460" name="file1" dev="loop2" ino=15 res=0 errno=0
[  131.668323][ T5590] Remounting filesystem read-only
[  131.700553][ T5590] NILFS (loop2): error -5 truncating bmap (ino=15)
[  131.768304][ T4183] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer
[  131.951046][ T5599] binder: 5598:5599 ioctl c0306201 0 returned -14
[  131.986281][ T5599] binder: 5598:5599 ioctl 400c620e 200000000100 returned -22
[  132.157416][  T155] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.203837][ T5602] netlink: 'syz.2.469': attribute type 21 has an invalid length.
[  132.301944][  T155] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.413314][  T155] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.551457][  T155] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.036323][ T5559] loop4: detected capacity change from 0 to 131072
[  133.255112][ T5633] loop3: detected capacity change from 0 to 512
[  133.341558][ T5638] loop4: detected capacity change from 0 to 2048
[  133.393049][ T5618] chnl_net:caif_netlink_parms(): no params data found
[  133.522147][ T5633] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable,norecovery,journal_ioprio=0x0000000000000004,,errors=continue. Quota mode: writeback.
[  133.603928][ T5633] ext4 filesystem being mounted at /106/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  134.068750][ T5657] loop4: detected capacity change from 0 to 4096
[  134.114887][ T5618] bridge0: port 1(bridge_slave_0) entered blocking state
[  134.158311][ T5618] bridge0: port 1(bridge_slave_0) entered disabled state
[  134.180195][ T5618] device bridge_slave_0 entered promiscuous mode
[  134.189579][ T5657] /dev/loop4: Can't open blockdev
[  134.207238][ T5618] bridge0: port 2(bridge_slave_1) entered blocking state
[  134.245331][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state
[  134.251806][ T5662] loop2: detected capacity change from 0 to 32768
[  134.296958][ T5618] device bridge_slave_1 entered promiscuous mode
[  134.445921][ T5662] XFS (loop2): Mounting V5 Filesystem
[  134.472310][ T5677] loop3: detected capacity change from 0 to 1024
[  134.548853][ T5662] XFS (loop2): Ending clean mount
[  134.552639][ T5618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  134.573623][ T5692] netlink: 5 bytes leftover after parsing attributes in process `syz.1.496'.
[  134.593469][ T5618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  134.620953][ T5662] XFS (loop2): Quotacheck needed: Please wait.
[  134.676734][ T4253] hfsplus: b-tree write err: -5, ino 4
[  134.882428][ T5662] XFS (loop2): Quotacheck: Done.
[  134.896287][ T5618] team0: Port device team_slave_0 added
[  134.919725][   T13] Bluetooth: hci0: command 0x0409 tx timeout
[  134.993666][ T5618] team0: Port device team_slave_1 added
[  135.149641][ T5252] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  135.255048][ T4183] XFS (loop2): Unmounting Filesystem
[  135.423984][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_0
[  135.438507][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  135.518633][ T5618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  135.550129][ T5252] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  135.577890][ T5252] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  135.588772][ T5252] usb 4-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00
[  135.606250][ T5252] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  135.640242][ T5252] usb 4-1: config 0 descriptor??
[  135.661324][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_1
[  135.668557][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  135.698435][ T5618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  135.839823][  T155] device hsr_slave_0 left promiscuous mode
[  135.864370][  T155] device hsr_slave_1 left promiscuous mode
[  135.889530][ T5249] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  135.903940][  T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  135.940015][  T155] batman_adv: batadv0: Removing interface: batadv_slave_0
[  135.958658][  T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  135.986968][  T155] batman_adv: batadv0: Removing interface: batadv_slave_1
[  136.023819][  T155] device bridge_slave_1 left promiscuous mode
[  136.042175][  T155] bridge0: port 2(bridge_slave_1) entered disabled state
[  136.085988][  T155] device bridge_slave_0 left promiscuous mode
[  136.103735][  T155] bridge0: port 1(bridge_slave_0) entered disabled state
[  136.132039][ T5252] nti 0003:0757:0A00.0007: ignoring exceeding usage max
[  136.152458][ T5252] nti 0003:0757:0A00.0007: unknown main item tag 0x0
[  136.159223][ T5252] nti 0003:0757:0A00.0007: unknown main item tag 0x0
[  136.194687][  T155] device veth1_macvtap left promiscuous mode
[  136.204181][ T5252] nti 0003:0757:0A00.0007: hidraw0: USB HID v0.00 Device [HID 0757:0a00] on usb-dummy_hcd.3-1/input0
[  136.215712][  T155] device veth0_macvtap left promiscuous mode
[  136.222277][  T155] device veth1_vlan left promiscuous mode
[  136.237060][  T155] device veth0_vlan left promiscuous mode
[  136.259517][ T5249] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[  136.278751][ T5249] usb 5-1: config 1 has no interface number 0
[  136.290466][ T5249] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  136.317223][ T5249] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[  136.336216][ T5249] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 26, changing to 8
[  136.360569][ T5249] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 26056, setting to 1024
[  136.517404][ T5252] usb 4-1: USB disconnect, device number 6
[  136.530028][ T5249] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  136.539119][ T5249] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  136.555968][ T5249] usb 5-1: Product: syz
[  136.570130][ T5249] usb 5-1: Manufacturer: syz
[  136.574970][ T5249] usb 5-1: SerialNumber: syz
[  136.676713][  T155] team0 (unregistering): Port device team_slave_1 removed
[  136.695530][  T155] team0 (unregistering): Port device team_slave_0 removed
[  136.713299][  T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  136.728261][  T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  136.822245][  T155] bond0 (unregistering): Released all slaves
[  136.838182][ T5728] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  136.898694][ T5618] device hsr_slave_0 entered promiscuous mode
[  136.906171][ T5618] device hsr_slave_1 entered promiscuous mode
[  136.915233][ T5618] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  136.926625][ T5618] Cannot create hsr debugfs directory
[  136.999649][ T4718] Bluetooth: hci0: command 0x041b tx timeout
[  137.294026][ T5618] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  137.352393][ T5618] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  137.372467][ T5618] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  137.385276][ T5618] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  137.490240][ T5728] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  137.502117][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0
[  137.515133][ T5249] cdc_ncm 5-1:1.1: bind() failure
[  137.520912][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  137.528955][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  137.560232][ T5618] 8021q: adding VLAN 0 to HW filter on device team0
[  137.591684][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  137.611203][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  137.627533][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[  137.634862][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[  137.644171][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  137.683524][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  137.702846][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  137.720189][  T154] bridge0: port 2(bridge_slave_1) entered blocking state
[  137.724367][ T4252] usb 5-1: USB disconnect, device number 7
[  137.727295][  T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[  137.760923][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  137.771216][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  137.803352][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  137.820927][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  137.831226][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  137.842534][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  137.851475][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  137.860879][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  137.875386][ T5618] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  137.888913][ T5618] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  137.904835][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  137.918716][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  137.948093][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  138.137112][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  138.151688][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  138.175634][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0
[  138.432810][ T1433] ieee802154 phy0 wpan0: encryption failed: -22
[  138.439137][ T1433] ieee802154 phy1 wpan1: encryption failed: -22
[  138.593550][ T5808] loop3: detected capacity change from 0 to 4096
[  138.768921][ T5818] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  138.882252][ T4734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  138.903844][ T4734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  138.982613][ T4734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  139.006533][ T4734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  139.011604][ T5808] NILFS error (device loop3): nilfs_lookup: deleted inode referenced: 12
[  139.066667][ T4734] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  139.075619][ T4261] Bluetooth: hci0: command 0x040f tx timeout
[  139.098164][ T4734] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  139.109610][ T5808] Remounting filesystem read-only
[  139.146245][ T5618] device veth0_vlan entered promiscuous mode
[  139.206190][ T5618] device veth1_vlan entered promiscuous mode
[  139.279772][ T4734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  139.294680][ T4182] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer
[  139.314136][ T4734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  139.356521][ T5618] device veth0_macvtap entered promiscuous mode
[  139.376807][ T5618] device veth1_macvtap entered promiscuous mode
[  139.436585][ T5618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  139.479791][ T5618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  139.519519][ T5618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  139.543394][ T5845] netlink: 24 bytes leftover after parsing attributes in process `syz.3.526'.
[  139.567070][ T5618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  139.605386][ T5618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  139.652807][ T5618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  139.667548][ T5804] loop4: detected capacity change from 0 to 32768
[  139.687974][ T5845] nbd: socks must be embedded in a SOCK_ITEM attr
[  139.696018][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0
[  139.727909][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  139.749654][ T5804] /dev/loop4: Can't open blockdev
[  139.756280][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  139.774089][ T5851] netlink: 64 bytes leftover after parsing attributes in process `syz.1.527'.
[  139.810239][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  139.819208][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  139.893233][ T5618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  139.925123][ T5618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  139.977216][ T5618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  140.004496][ T5618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  140.047598][ T5618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  140.097268][ T5618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  140.125133][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1
[  140.158840][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  140.181100][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  140.247277][ T5618] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  140.258930][ T5855] loop2: detected capacity change from 0 to 4096
[  140.269133][ T5618] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  140.347605][ T5618] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  140.393751][ T5618] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  140.659793][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  140.668527][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  140.805684][ T4734] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  140.850231][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  140.858800][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  140.904191][ T4734] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  141.149853][ T4261] Bluetooth: hci0: command 0x0419 tx timeout
[  141.530498][ T5910] loop3: detected capacity change from 0 to 512
[  141.619674][ T4261] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  141.633843][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  141.741422][ T5910] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback.
[  141.767085][ T5910] ext4 filesystem being mounted at /119/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  141.862131][ T5910] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.546: bg 0: block 18: invalid block bitmap
[  141.883665][ T5910] Quota error (device loop3): write_blk: dquota write failed
[  141.892370][ T5910] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  141.905277][ T5910] EXT4-fs error (device loop3): ext4_acquire_dquot:6197: comm syz.3.546: Failed to acquire dquot type 1
[  141.997274][ T5910] syz.3.546 (5910) used greatest stack depth: 18688 bytes left
[  142.079043][ T5936] loop4: detected capacity change from 0 to 1024
[  142.099776][ T4261] usb 3-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b
[  142.109879][ T4261] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  142.151783][ T4261] usb 3-1: config 0 descriptor??
[  142.496336][ T5959] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  142.526397][ T5959] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  142.538617][ T5959] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  142.539486][ T4187] usb 4-1: new full-speed USB device number 7 using dummy_hcd
[  142.557566][ T5959] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  142.598917][ T5957] loop5: detected capacity change from 0 to 4096
[  142.666236][ T5964] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  142.677084][ T5964] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  142.793542][ T5964] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  142.808791][ T5964] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  142.820906][ T5964] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  142.831171][ T5964] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  142.849126][ T5964] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  142.867841][ T4261] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  142.884831][ T4261] asix: probe of 3-1:0.0 failed with error -71
[  142.895918][ T4261] usb 3-1: USB disconnect, device number 6
[  143.070310][ T4187] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  143.109132][ T4187] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[  143.138867][ T4187] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  143.154096][ T4187] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  143.185210][ T4187] usb 4-1: config 0 descriptor??
[  143.261716][ T4187] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  143.272586][ T4187] dvb-usb: bulk message failed: -22 (3/0)
[  143.320234][ T4187] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  143.355679][ T4187] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  143.369461][ T5249] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  143.372036][ T4187] usb 4-1: media controller created
[  143.412245][ T4187] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  143.433555][ T5992] loop5: detected capacity change from 0 to 1024
[  143.458805][ T4187] dvb-usb: bulk message failed: -22 (6/0)
[  143.477398][ T4187] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  143.516012][ T5948] loop3: detected capacity change from 0 to 2048
[  143.516816][ T5992] hfsplus: request for non-existent node 3 in B*Tree
[  143.530119][ T5251] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  143.532113][ T4187] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input8
[  143.563264][ T5992] hfsplus: request for non-existent node 3 in B*Tree
[  143.593986][ T4187] dvb-usb: schedule remote query interval to 150 msecs.
[  143.604939][ T4187] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  143.625786][ T5948] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  143.650970][ T5992] hfsplus: request for non-existent node 4 in B*Tree
[  143.678199][ T5992] hfsplus: request for non-existent node 4 in B*Tree
[  143.708683][ T6001] hfsplus: request for non-existent node 5 in B*Tree
[  143.708725][ T6000] loop2: detected capacity change from 0 to 64
[  143.730715][ T5948] handle_bad_sector: 101 callbacks suppressed
[  143.730734][ T5948] attempt to access beyond end of device
[  143.730734][ T5948] loop3: rw=524288, want=33554432, limit=2048
[  143.739737][ T5249] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  143.750507][ T6002] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  143.781221][ T4261] dvb-usb: bulk message failed: -22 (1/0)
[  143.787459][ T4261] dvb-usb: error while querying for an remote control event.
[  143.821188][ T6001] hfsplus: request for non-existent node 5 in B*Tree
[  143.858229][ T5249] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[  143.868473][ T4261] usb 4-1: USB disconnect, device number 7
[  143.886136][ T5249] usb 5-1: config 1 has no interface number 0
[  143.899420][ T5251] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  143.914937][ T5251] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  143.948587][ T5251] usb 2-1: too many endpoints for config 1 interface 1 altsetting 136: 211, using maximum allowed: 30
[  143.960643][ T5251] usb 2-1: config 1 interface 1 altsetting 136 has 0 endpoint descriptors, different from the interface descriptor's value: 211
[  143.976605][ T5251] usb 2-1: config 1 interface 1 has no altsetting 0
[  144.029082][ T4261] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  144.079906][ T5249] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.4b
[  144.090328][ T5249] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.098763][ T5249] usb 5-1: Product: syz
[  144.113655][ T5249] usb 5-1: Manufacturer: syz
[  144.118608][ T5249] usb 5-1: SerialNumber: syz
[  144.140992][ T5251] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  144.166780][ T5251] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.185197][ T5251] usb 2-1: Product: syz
[  144.198006][ T6009] loop5: detected capacity change from 0 to 512
[  144.200897][ T5249] cdc_ether 5-1:1.1: skipping garbage
[  144.216212][ T5251] usb 2-1: Manufacturer: syz
[  144.222006][ T5249] cdc_ether 5-1:1.1: skipping garbage
[  144.227779][ T5251] usb 2-1: SerialNumber: syz
[  144.233178][ T5249] usb 5-1: bad CDC descriptors
[  144.278969][ T6009] EXT4-fs (loop5): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000004739,inode_readahead_blks=0x0000000000000800,norecovery,,errors=continue. Quota mode: writeback.
[  144.300678][ T5251] cdc_ncm 2-1:1.0: skipping garbage
[  144.307557][ T5251] usb 2-1: selecting invalid altsetting 1
[  144.317587][ T6009] ext4 filesystem being mounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  144.331304][ T5251] usb 2-1: selecting invalid altsetting 0
[  144.337149][ T5251] usb 2-1: selecting invalid altsetting 0
[  144.346656][ T5251] cdc_ncm 2-1:1.0: bind() failure
[  144.441271][ T5251] usb 2-1: selecting invalid altsetting 0
[  144.447078][ T5251] usbtest: probe of 2-1:1.1 failed with error -22
[  144.512550][ T5251] usb 2-1: USB disconnect, device number 7
[  144.550798][ T5249] usb 5-1: USB disconnect, device number 8
[  144.791212][ T6032] netlink: 24 bytes leftover after parsing attributes in process `syz.2.581'.
[  144.838789][ T6035] device veth0_to_bridge entered promiscuous mode
[  144.880377][ T6034] device veth0_to_bridge left promiscuous mode
[  144.968120][ T6043] sctp: [Deprecated]: syz.2.584 (pid 6043) Use of struct sctp_assoc_value in delayed_ack socket option.
[  144.968120][ T6043] Use struct sctp_sack_info instead
[  145.406734][ T6042] loop3: detected capacity change from 0 to 65536
[  145.492867][ T6042] XFS (loop3): Mounting V5 Filesystem
[  145.722675][ T6042] XFS (loop3): Ending clean mount
[  145.788841][ T6042] XFS (loop3): Quotacheck needed: Please wait.
[  145.874715][ T6042] XFS (loop3): Quotacheck: Done.
[  146.011860][ T4182] XFS (loop3): Unmounting Filesystem
[  146.116155][ T6091] loop4: detected capacity change from 0 to 128
[  146.454655][ T6098] loop2: detected capacity change from 0 to 512
[  146.617944][ T6098] EXT4-fs (loop2): Ignoring removed nobh option
[  146.723670][ T6087] loop5: detected capacity change from 0 to 40427
[  146.724541][ T6098] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #3: comm syz.2.605: corrupted inode contents
[  146.839185][ T6098] EXT4-fs (loop2): Remounting filesystem read-only
[  146.881222][ T6087] F2FS-fs (loop5): Found nat_bits in checkpoint
[  146.920804][ T6098] EXT4-fs error (device loop2): ext4_dirty_inode:6010: inode #3: comm syz.2.605: mark_inode_dirty error
[  146.956043][ T6098] EXT4-fs (loop2): Remounting filesystem read-only
[  146.997401][ T6098] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #3: comm syz.2.605: corrupted inode contents
[  147.028983][ T6098] EXT4-fs (loop2): Remounting filesystem read-only
[  147.069250][ T6098] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #3: comm syz.2.605: mark_inode_dirty error
[  147.088723][ T6087] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  147.165688][ T6098] EXT4-fs (loop2): Remounting filesystem read-only
[  147.216997][ T6098] Quota error (device loop2): write_blk: dquota write failed
[  147.262032][ T6098] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  147.302941][ T6098] EXT4-fs error (device loop2): ext4_acquire_dquot:6197: comm syz.2.605: Failed to acquire dquot type 0
[  147.353964][ T6098] EXT4-fs (loop2): Remounting filesystem read-only
[  147.362540][ T6105] loop4: detected capacity change from 0 to 40427
[  147.441906][ T5618] attempt to access beyond end of device
[  147.441906][ T5618] loop5: rw=2049, want=45112, limit=40427
[  147.447942][ T6098] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #16: comm syz.2.605: corrupted inode contents
[  147.471807][ T6098] EXT4-fs (loop2): Remounting filesystem read-only
[  147.479270][ T6098] EXT4-fs error (device loop2): ext4_dirty_inode:6010: inode #16: comm syz.2.605: mark_inode_dirty error
[  147.503978][ T6098] EXT4-fs (loop2): Remounting filesystem read-only
[  147.512052][ T6098] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #16: comm syz.2.605: corrupted inode contents
[  147.525604][ T6098] EXT4-fs (loop2): Remounting filesystem read-only
[  147.541100][ T6098] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #16: comm syz.2.605: mark_inode_dirty error
[  147.572846][ T6098] EXT4-fs (loop2): Remounting filesystem read-only
[  147.592075][ T6098] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #16: comm syz.2.605: corrupted inode contents
[  147.622830][ T6098] EXT4-fs (loop2): Remounting filesystem read-only
[  147.650068][ T6098] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem
[  147.656902][    C0] vkms_vblank_simulate: vblank timer overrun
[  147.667795][ T6098] EXT4-fs (loop2): Remounting filesystem read-only
[  147.690874][ T6098] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #16: comm syz.2.605: corrupted inode contents
[  147.740078][ T6098] EXT4-fs (loop2): Remounting filesystem read-only
[  147.764394][ T6098] EXT4-fs error (device loop2): ext4_truncate:4272: inode #16: comm syz.2.605: mark_inode_dirty error
[  147.815414][ T6098] EXT4-fs (loop2): Remounting filesystem read-only
[  147.827053][ T6098] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem
[  147.854335][ T6098] EXT4-fs (loop2): Remounting filesystem read-only
[  147.877977][ T6098] EXT4-fs (loop2): 1 truncate cleaned up
[  147.922708][ T6098] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nobh,. Quota mode: writeback.
[  147.963043][ T6098] ext4 filesystem being mounted at /104/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  147.974178][ T5249] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  148.185643][ T6124] loop3: detected capacity change from 0 to 32768
[  148.230860][ T6124] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.613 (6124)
[  148.239682][ T5249] usb 5-1: Using ep0 maxpacket: 8
[  148.348867][ T6124] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  148.384159][ T6124] BTRFS info (device loop3): force clearing of disk cache
[  148.402110][ T6124] BTRFS info (device loop3): setting nodatacow, compression disabled
[  148.421257][ T6124] BTRFS info (device loop3): enabling auto defrag
[  148.436936][ T6124] BTRFS info (device loop3): max_inline at 0
[  148.451049][ T6124] BTRFS info (device loop3): enabling disk space caching
[  148.472121][ T6124] BTRFS info (device loop3): disk space caching is enabled
[  148.497752][ T6124] BTRFS info (device loop3): has skinny extents
[  148.519663][ T5249] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  148.536663][ T5249] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  148.545937][ T5249] usb 5-1: Product: syz
[  148.557471][ T5249] usb 5-1: Manufacturer: syz
[  148.562493][ T5249] usb 5-1: SerialNumber: syz
[  148.586791][ T5249] usb 5-1: config 0 descriptor??
[  148.621897][ T6124] BTRFS info (device loop3): enabling ssd optimizations
[  148.631643][ T5249] gspca_main: se401-2.14.0 probing 047d:5003
[  148.638850][ T6124] BTRFS info (device loop3): clearing free space tree
[  148.647616][ T6124] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  148.658779][ T6124] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  148.723679][ T4570] kernel write not supported for file bpf-prog (pid: 4570 comm: kworker/1:9)
[  148.732894][ T6124] BTRFS info (device loop3): doing ref verification
[  148.745605][ T6124] BTRFS info (device loop3): use no compression
[  148.758959][ T6124] BTRFS info (device loop3): force clearing of disk cache
[  148.774042][ T6124] BTRFS info (device loop3): turning on sync discard
[  148.807863][ T6124] BTRFS info (device loop3): disabling disk space caching
[  148.838992][ T6130] udc-core: couldn't find an available UDC or it's busy
[  148.855729][ T6130] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  148.857575][ T6124] BTRFS info (device loop3): cleaning free space cache v1
[  148.891137][ T6124] BTRFS error (device loop3): trying to do action 2 to bytenr 5242880 num_bytes 4096 but there is no existing entry!
[  148.904785][ T6124] BTRFS error (device loop3):   Ref action 2, root 1, ref_root 1, parent 0, owner 0, offset 0, num_refs 18446744073709551615
[  148.917834][ T6124]    btrfs_force_cow_block+0xe39/0x1af0
[  148.923513][ T6124]    btrfs_cow_block+0x369/0x810
[  148.928486][ T6124]    commit_cowonly_roots+0x16b/0x9d0
[  148.933991][ T6124]    btrfs_commit_transaction+0x13af/0x3800
[  148.939987][ T6124]    btrfs_set_free_space_cache_v1_active+0x6d/0x220
[  148.946705][ T6124]    btrfs_remount+0x1168/0x1640
[  148.951750][ T6124]    reconfigure_super+0x43a/0x870
[  148.956960][ T6124]    path_mount+0xceb/0x10a0
[  148.961646][ T6124]    __se_sys_mount+0x2d5/0x3c0
[  148.966658][ T6124]    do_syscall_64+0x3b/0xb0
[  148.971538][ T6124]    entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  149.119611][ T5249] gspca_se401: ExtraFeatures: 85
[  149.124847][ T5249] gspca_se401: Frame size: 0x0 1/16th janggu
[  149.153835][ T5249] gspca_se401: Frame size: 256x521 bayer
[  149.175852][ T5249] gspca_se401: Frame size: 36x1 bayer
[  149.195734][ T5249] gspca_se401: Frame size: 0x2304 bayer
[  149.336790][ T5249] input: se401 as /devices/platform/dummy_hcd.4/usb5/5-1/input/input9
[  149.689583][ T4187] usb 5-1: USB disconnect, device number 9
[  149.937949][ T6210] loop3: detected capacity change from 0 to 512
[  149.965158][ T6214] netlink: 20 bytes leftover after parsing attributes in process `syz.1.642'.
[  150.036184][ T6210] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  150.065379][ T6210] EXT4-fs (loop3): invalid journal inode
[  150.078801][ T6210] EXT4-fs (loop3): can't get journal size
[  150.113489][ T6210] EXT4-fs (loop3): 1 truncate cleaned up
[  150.140127][ T6210] EXT4-fs (loop3): mounted filesystem without journal. Opts: norecovery,max_batch_time=0x0000000000000003,,errors=continue. Quota mode: none.
[  150.177554][ T6210] EXT4-fs warning (device loop3): verify_group_input:147: Cannot add at group 1919252079 (only 1 groups)
[  150.523427][ T6223] loop4: detected capacity change from 0 to 32768
[  150.599738][ T6223] /dev/loop4: Can't open blockdev
[  151.318772][ T6221] loop2: detected capacity change from 0 to 40427
[  151.399777][ T4570] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  151.409258][ T6221] F2FS-fs (loop2): invalid crc value
[  151.422319][ T6221] F2FS-fs (loop2): Found nat_bits in checkpoint
[  151.486851][ T6221] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  151.529047][ T4183] attempt to access beyond end of device
[  151.529047][ T4183] loop2: rw=2049, want=45104, limit=40427
[  151.669520][ T4722] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  151.759637][ T4570] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  151.795515][ T4570] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  151.879702][ T4570] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  151.899509][ T4570] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  151.907588][ T4570] usb 4-1: SerialNumber: syz
[  152.079467][ T5254] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  152.079573][ T4722] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  152.099917][ T6257] loop2: detected capacity change from 0 to 32768
[  152.105002][ T4722] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  152.128528][ T6257] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.657 (6257)
[  152.184201][ T6242] loop3: detected capacity change from 0 to 512
[  152.207671][ T6259] loop4: detected capacity change from 0 to 1024
[  152.219899][ T4722] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  152.229214][ T4722] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  152.230127][ T6257] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  152.259270][ T4722] usb 2-1: SerialNumber: syz
[  152.269720][ T6257] BTRFS info (device loop2): force clearing of disk cache
[  152.277188][ T6257] BTRFS info (device loop2): force zlib compression, level 3
[  152.299478][ T6242] EXT4-fs (loop3): Unrecognized mount option "fowner<00000000000000000000" or missing value
[  152.319757][ T6257] BTRFS info (device loop2): enabling auto defrag
[  152.326273][ T6257] BTRFS info (device loop2): max_inline at 0
[  152.345888][ T6257] BTRFS info (device loop2): enabling disk space caching
[  152.354726][ T6257] BTRFS info (device loop2): disk space caching is enabled
[  152.372277][ T6257] BTRFS info (device loop2): has skinny extents
[  152.521757][ T6257] BTRFS info (device loop2): enabling ssd optimizations
[  152.535224][ T6257] BTRFS info (device loop2): clearing free space tree
[  152.543769][ T6257] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  152.554410][ T4187] usb 4-1: USB disconnect, device number 8
[  152.560945][ T6257] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  152.564213][ T4722] usb 2-1: 0:2 : does not exist
[  152.599597][ T5254] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  152.615533][ T5254] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  152.639458][ T4722] usb 2-1: unit 5 not found!
[  152.641257][ T5254] usb 6-1: Product: syz
[  152.651957][ T5254] usb 6-1: Manufacturer: syz
[  152.657464][ T5254] usb 6-1: SerialNumber: syz
[  152.689231][ T4722] usb 2-1: USB disconnect, device number 8
[  152.720831][ T5254] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  152.885845][  T155] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared)
[  153.051707][ T4290] udevd[4290]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  153.239989][ T6290] sctp: [Deprecated]: syz.1.663 (pid 6290) Use of struct sctp_assoc_value in delayed_ack socket option.
[  153.239989][ T6290] Use struct sctp_sack_info instead
[  153.431126][ T4570] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  154.107419][ T4722] usb 6-1: USB disconnect, device number 2
[  154.158473][ T6322] netlink: 'syz.1.670': attribute type 7 has an invalid length.
[  154.199725][ T6322] netlink: 'syz.1.670': attribute type 8 has an invalid length.
[  154.256795][ T6322] netlink: 16 bytes leftover after parsing attributes in process `syz.1.670'.
[  154.509481][ T4570] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[  154.529223][ T4570] ath9k_htc: Failed to initialize the device
[  154.573078][ T4722] usb 6-1: ath9k_htc: USB layer deinitialized
[  154.790572][ T6344] netlink: 20 bytes leftover after parsing attributes in process `syz.5.678'.
[  154.855392][ T6350] loop2: detected capacity change from 0 to 256
[  154.990843][ T6350] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d)
[  155.008741][ T6355] netlink: 'syz.1.681': attribute type 1 has an invalid length.
[  155.049772][ T6355] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.681'.
[  155.063084][ T6358] netlink: 'syz.1.681': attribute type 3 has an invalid length.
[  155.152903][ T6358] netlink: 'syz.1.681': attribute type 1 has an invalid length.
[  155.186805][ T6358] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.681'.
[  155.607652][ T4722] kernel write not supported for file /uinput (pid: 4722 comm: kworker/0:14)
[  156.239503][ T4187] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  156.296007][ T6432] loop2: detected capacity change from 0 to 512
[  156.339441][ T4570] usb 4-1: new full-speed USB device number 9 using dummy_hcd
[  156.441003][ T6432] EXT4-fs (loop2): mounted filesystem without journal. Opts: sb=0x0000000000000001,errors=remount-ro,. Quota mode: writeback.
[  156.456172][ T6432] ext4 filesystem being mounted at /127/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  156.505472][ T6432] EXT4-fs (loop2): shut down requested (2)
[  156.639940][ T4187] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  156.671373][ T4187] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  156.716850][ T4187] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  156.719690][ T4570] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  156.731893][ T4187] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.779420][ T4570] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0
[  156.789209][ T4570] usb 4-1: config 0 interface 0 has no altsetting 0
[  156.800498][ T6408] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  156.830161][ T4570] usb 4-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00
[  156.875109][ T4570] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.909088][ T4570] usb 4-1: config 0 descriptor??
[  156.963915][ T6454] loop2: detected capacity change from 0 to 8192
[  157.044164][ T4575] usb 5-1: USB disconnect, device number 10
[  157.401897][ T4570] saitek 0003:06A3:0621.0008: unbalanced collection at end of report description
[  157.436754][ T4570] saitek 0003:06A3:0621.0008: parse failed
[  157.483805][ T4570] saitek: probe of 0003:06A3:0621.0008 failed with error -22
[  157.607898][ T4574] usb 4-1: USB disconnect, device number 9
[  158.221944][ T6514] loop3: detected capacity change from 0 to 1024
[  158.231991][ T6513] input: syz0 as /devices/virtual/input/input11
[  158.256702][ T6513] input: failed to attach handler leds to device input11, error: -6
[  158.379521][ T4574] usb 6-1: new full-speed USB device number 3 using dummy_hcd
[  158.610438][ T6524] netlink: 4 bytes leftover after parsing attributes in process `syz.3.729'.
[  158.655110][ T6524] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  158.664338][ T6524] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  158.673222][ T6524] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  158.682232][ T6524] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  158.789689][ T4574] usb 6-1: unable to get BOS descriptor or descriptor too short
[  158.839777][ T4574] usb 6-1: not running at top speed; connect to a high speed hub
[  158.869268][ T6524] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  158.878485][ T6524] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  158.887511][ T6524] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  158.896746][ T6524] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  158.930102][ T4574] usb 6-1: config 2 has an invalid interface number: 212 but max is 1
[  158.938502][ T4574] usb 6-1: config 2 has an invalid interface number: 226 but max is 1
[  158.985669][ T4574] usb 6-1: config 2 has no interface number 0
[  159.004775][ T4574] usb 6-1: config 2 has no interface number 1
[  159.043237][ T4574] usb 6-1: config 2 interface 212 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64
[  159.105224][ T4574] usb 6-1: config 2 interface 226 altsetting 0 has a duplicate endpoint with address 0x1, skipping
[  159.313116][ T6543] loop3: detected capacity change from 0 to 128
[  159.402294][ T6543] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  159.485082][ T6543] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  159.602367][ T6539] loop4: detected capacity change from 0 to 65536
[  159.619160][ T4574] usb 6-1: config 2 interface 226 altsetting 0 endpoint 0x85 has invalid maxpacket 37745, setting to 64
[  159.639393][ T4574] usb 6-1: config 2 interface 226 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 10
[  159.684317][ T4574] usb 6-1: config 2 interface 226 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  159.709460][ T4574] usb 6-1: config 2 interface 226 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  159.728374][    T9] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  159.757980][ T4574] usb 6-1: config 2 interface 212 has no altsetting 0
[  159.789604][ T6539] /dev/loop4: Can't open blockdev
[  159.939645][ T4574] usb 6-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce
[  159.958712][ T6554] loop3: detected capacity change from 0 to 512
[  159.966365][ T4574] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  160.013817][ T4574] usb 6-1: Product: syz
[  160.019983][ T4574] usb 6-1: Manufacturer: syz
[  160.024670][ T4574] usb 6-1: SerialNumber: syz
[  160.134571][ T6554] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled
[  160.289677][ T6554] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,jqfmt=vfsold,noquota,norecovery,bsddf,,errors=continue. Quota mode: writeback.
[  160.389269][ T6554] ext4 filesystem being mounted at /151/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  160.432520][ T4574] input: Mad Catz Beat Pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:2.226/input/input12
[  160.525685][ T4574] usb 6-1: USB disconnect, device number 3
[  160.529369][    C0] xpad 6-1:2.226: xpad_irq_in - usb_submit_urb failed with result -19
[  160.664109][ T6575] loop4: detected capacity change from 0 to 2048
[  161.289463][ T4187] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  161.459421][ T4722] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  161.719706][ T4187] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  161.737448][ T4187] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  161.771399][ T4187] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  161.795432][ T4187] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  161.827880][ T4187] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  161.880401][ T4722] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  161.922220][ T4722] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  161.953541][ T4722] usb 5-1: config 1 has no interface number 1
[  161.996566][ T4722] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  162.010438][ T4187] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  162.039564][ T4187] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  162.058631][ T4722] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x6 has an invalid bInterval 0, changing to 7
[  162.079102][ T4187] usb 4-1: Product: syz
[  162.089356][ T4187] usb 4-1: Manufacturer: syz
[  162.170620][ T4187] cdc_wdm 4-1:1.0: skipping garbage
[  162.175966][ T4187] cdc_wdm 4-1:1.0: skipping garbage
[  162.227835][ T4187] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[  162.250342][ T4187] cdc_wdm 4-1:1.0: Unknown control protocol
[  162.326394][ T4722] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  162.345951][ T4722] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  162.364523][ T4722] usb 5-1: Product: syz
[  162.369021][ T4722] usb 5-1: Manufacturer: syz
[  162.395327][ T4722] usb 5-1: SerialNumber: syz
[  162.449781][ T6593] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  162.578812][ T6591] loop2: detected capacity change from 0 to 32768
[  162.745827][ T6591] XFS (loop2): Mounting V5 Filesystem
[  162.827868][ T4722] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor
[  162.853173][ T4722] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor
[  162.894152][ T6591] XFS (loop2): Ending clean mount
[  162.906893][ T6591] XFS (loop2): Quotacheck needed: Please wait.
[  163.109841][ T4722] usb 5-1: USB disconnect, device number 11
[  163.161844][ T1345] usb 4-1: USB disconnect, device number 10
[  163.286949][ T6591] XFS (loop2): Quotacheck: Done.
[  163.365791][   T26] audit: type=1800 audit(1743482980.697:11): pid=6591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.742" name="file1" dev="loop2" ino=6150 res=0 errno=0
[  163.732378][ T6675] vivid-001: disconnect
[  163.776353][ T6675] vivid-001: reconnect
[  163.916218][ T4183] XFS (loop2): Unmounting Filesystem
[  164.120883][ T4722] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  164.189671][ T4574] Bluetooth: hci5: command 0x1003 tx timeout
[  164.195885][ T4184] Bluetooth: hci5: sending frame failed (-49)
[  164.304635][ T6699] loop4: detected capacity change from 0 to 512
[  164.383560][ T6699] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=856c01c, mo2=0002]
[  164.392708][ T4722] usb 4-1: Using ep0 maxpacket: 8
[  164.401970][ T6699] EXT4-fs (loop4): write access unavailable, skipping orphan cleanup
[  164.423114][ T6699] EXT4-fs (loop4): mounted filesystem without journal. Opts: sysvgroups,noblock_validity,debug,grpquota,debug,noinit_itable,grpid,,errors=continue. Quota mode: writeback.
[  164.529559][ T4722] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  164.540901][ T4722] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[  164.551295][ T4722] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[  164.568260][ T4722] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[  164.590044][ T4722] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  164.607527][ T4722] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  164.671129][ T4722] hub 4-1:1.0: bad descriptor, ignoring hub
[  164.685614][ T4722] hub: probe of 4-1:1.0 failed with error -5
[  164.707816][ T4722] cdc_wdm 4-1:1.0: skipping garbage
[  164.713656][ T4722] cdc_wdm 4-1:1.0: skipping garbage
[  164.722756][ T4722] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[  164.729045][ T4722] cdc_wdm 4-1:1.0: Unknown control protocol
[  164.905532][   T26] audit: type=1326 audit(1743482982.237:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6715 comm="syz.4.759" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4617f0a169 code=0x0
[  165.411971][ T6683] usb 4-1: reset high-speed USB device number 11 using dummy_hcd
[  165.870982][ T6742] loop4: detected capacity change from 0 to 164
[  166.183267][ T6727] loop2: detected capacity change from 0 to 32768
[  166.269652][ T4574] Bluetooth: hci5: command 0x1001 tx timeout
[  166.275875][ T4184] Bluetooth: hci5: sending frame failed (-49)
[  166.297119][ T4722] usb 4-1: USB disconnect, device number 11
[  166.354023][ T6727] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.761 (6727)
[  166.413787][ T6727] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  166.429458][ T6727] BTRFS info (device loop2): setting nodatacow, compression disabled
[  166.448717][ T6727] BTRFS info (device loop2): enabling auto defrag
[  166.469100][ T6727] BTRFS info (device loop2): max_inline at 0
[  166.476023][ T6727] BTRFS info (device loop2): using free space tree
[  166.511861][ T6727] BTRFS info (device loop2): has skinny extents
[  166.655460][ T4574] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  166.909465][ T4574] usb 5-1: Using ep0 maxpacket: 16
[  167.030265][ T4574] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  167.044169][ T4574] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  167.074863][ T4574] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  167.267910][ T4574] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  167.281198][ T4574] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  167.289899][ T4574] usb 5-1: Product: syz
[  167.294183][ T4574] usb 5-1: Manufacturer: syz
[  167.298973][ T4574] usb 5-1: SerialNumber: syz
[  167.318179][ T6780] loop3: detected capacity change from 0 to 32768
[  167.441050][ T6780] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop3 scanned by syz.3.771 (6780)
[  167.514248][ T6780] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  167.529679][ T6780] BTRFS info (device loop3): setting nodatacow, compression disabled
[  167.546868][ T6780] BTRFS info (device loop3): turning on flush-on-commit
[  167.563537][ T6780] BTRFS info (device loop3): using free space tree
[  167.577737][ T6780] BTRFS info (device loop3): has skinny extents
[  167.738125][ T6780] BTRFS info (device loop3): enabling ssd optimizations
[  167.799698][ T4574] usb 5-1: 0:2 : does not exist
[  167.859511][ T4722] usb 2-1: new full-speed USB device number 9 using dummy_hcd
[  168.227103][ T6805] loop2: detected capacity change from 0 to 32768
[  168.302571][ T4722] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  168.323366][ T4722] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  168.360489][ T6805] non-latin1 character 0x3ff found in JFS file name
[  168.367845][ T6805] mount with iocharset=utf8 to access
[  168.373952][ T4219] Bluetooth: hci0: command 0x0411 tx timeout
[  168.382157][ T4722] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  168.383784][ T4219] Bluetooth: hci5: command 0x1009 tx timeout
[  168.398017][ T4722] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  168.699623][ T4722] usb 2-1: usb_control_msg returned -32
[  168.712237][ T4722] usbtmc 2-1:16.0: can't read capabilities
[  168.846685][ T4574] usb 5-1: USB disconnect, device number 12
[  169.068140][ T6831] netlink: 4 bytes leftover after parsing attributes in process `syz.4.784'.
[  169.083791][ T6829] loop3: detected capacity change from 0 to 32768
[  169.094425][ T4290] udevd[4290]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  169.160007][ T6832] usbtmc 2-1:16.0: usb_control_msg returned -32
[  169.173429][ T4219] usb 2-1: USB disconnect, device number 9
[  169.186805][ T6829] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.783 (6829)
[  169.256971][ T6829] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  169.266271][ T6829] BTRFS info (device loop3): force clearing of disk cache
[  169.273578][ T6829] BTRFS info (device loop3): force zlib compression, level 3
[  169.281146][ T6829] BTRFS info (device loop3): enabling auto defrag
[  169.287802][ T6829] BTRFS info (device loop3): max_inline at 0
[  169.293901][ T6829] BTRFS info (device loop3): enabling disk space caching
[  169.301339][ T6829] BTRFS info (device loop3): disk space caching is enabled
[  169.308703][ T6829] BTRFS info (device loop3): has skinny extents
[  169.423010][ T6829] BTRFS info (device loop3): enabling ssd optimizations
[  169.431603][ T6829] BTRFS info (device loop3): clearing free space tree
[  169.438709][ T6829] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  169.448722][ T6829] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  169.509970][ T6829] BTRFS info (device loop3): Snapshot src from another FS
[  169.745704][ T6834] loop4: detected capacity change from 0 to 32768
[  169.973805][ T6861] loop4: detected capacity change from 0 to 1024
[  170.121877][ T6865] loop6: detected capacity change from 0 to 524287999
[  170.145559][    C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  170.156932][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  170.186174][    C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  170.197560][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  170.275299][    C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  170.286499][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  170.310273][    C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  170.321423][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  170.369049][    C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  170.380215][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  170.409456][    C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  170.420532][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  170.430798][ T6876] device syzkaller1 entered promiscuous mode
[  170.491783][    C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  170.502967][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  170.511055][    C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  170.522281][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  170.530312][ T6865] ldm_validate_partition_table(): Disk read failed.
[  170.537586][    C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  170.548644][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  170.595105][    C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  170.606057][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  170.614768][ T6865] Dev loop6: unable to read RDB block 0
[  170.638067][ T6865]  loop6: unable to read partition table
[  170.651993][ T6865] loop_reread_partitions: partition scan of loop6 (3Ÿ¾x³˜CÖ

) failed (rc=-5)
[  170.687168][ T6871] ldm_validate_partition_table(): Disk read failed.
[  170.740458][ T6871] Dev loop6: unable to read RDB block 0
[  170.768243][ T6871]  loop6: unable to read partition table
[  170.785565][ T6871] loop_reread_partitions: partition scan of loop6 (3Ÿ¾x³˜CÖ

) failed (rc=-5)
[  170.994815][ T6896] loop3: detected capacity change from 0 to 512
[  171.027772][ T6897] loop4: detected capacity change from 0 to 2048
[  171.273010][ T6896] EXT4-fs (loop3): Test dummy encryption mode enabled
[  171.298033][ T6896] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  171.317252][ T6914] loop2: detected capacity change from 0 to 256
[  171.340259][ T6896] EXT4-fs error (device loop3): ext4_orphan_get:1427: comm syz.3.805: bad orphan inode 131083
[  171.362479][ T6910] loop4: detected capacity change from 0 to 4096
[  171.369024][ T6896] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none.
[  171.663664][ T6896] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  171.783457][ T6919] loop4: detected capacity change from 0 to 32768
[  171.935384][ T4290] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by udevd (4290)
[  171.980040][ T6925] loop3: detected capacity change from 0 to 2048
[  172.056388][ T6925] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  172.105562][ T6925] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  172.125976][ T6934] loop2: detected capacity change from 0 to 64
[  172.263255][ T4182] UDF-fs: error (device loop3): udf_read_inode: (ino 1345) failed !bh
[  172.291308][ T4182] UDF-fs: error (device loop3): udf_read_inode: (ino 1345) failed !bh
[  172.859236][ T4266] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  173.008210][ T4266] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  173.036481][ T6960] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  173.039395][ T4722] usb 6-1: new full-speed USB device number 4 using dummy_hcd
[  173.108084][ T4266] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  173.194441][ T4266] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  173.215583][ T6966] netlink: 16 bytes leftover after parsing attributes in process `syz.4.835'.
[  173.451671][ T4722] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  173.470892][ T4722] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  173.569007][ T4722] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0xD has an invalid bInterval 0, changing to 4
[  173.629560][ T4722] usb 6-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  173.879834][ T4722] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  173.889193][ T4722] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  173.908982][ T4722] usb 6-1: Product: syz
[  173.913916][ T4722] usb 6-1: Manufacturer: syz
[  173.918549][ T4722] usb 6-1: SerialNumber: syz
[  174.183594][ T6974] chnl_net:caif_netlink_parms(): no params data found
[  174.510743][ T6974] bridge0: port 1(bridge_slave_0) entered blocking state
[  174.538393][ T6974] bridge0: port 1(bridge_slave_0) entered disabled state
[  174.592447][ T6974] device bridge_slave_0 entered promiscuous mode
[  174.654096][ T6974] bridge0: port 2(bridge_slave_1) entered blocking state
[  174.670476][ T6974] bridge0: port 2(bridge_slave_1) entered disabled state
[  174.685956][ T6974] device bridge_slave_1 entered promiscuous mode
[  174.784375][ T6974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  174.801418][ T6974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  174.988868][ T6974] team0: Port device team_slave_0 added
[  175.008406][ T7040] autofs4:pid:7040:autofs_fill_super: called with bogus options
[  175.021191][ T6974] team0: Port device team_slave_1 added
[  175.059694][ T4722] cdc_ncm 6-1:1.0: bind() failure
[  175.088615][ T7043] device batadv_slave_1 entered promiscuous mode
[  175.099578][ T4722] cdc_ncm: probe of 6-1:1.1 failed with error -71
[  175.110293][ T7042] device batadv_slave_1 left promiscuous mode
[  175.119871][ T4722] cdc_mbim: probe of 6-1:1.1 failed with error -71
[  175.149598][ T4722] usbtest: probe of 6-1:1.1 failed with error -71
[  175.173657][ T6974] batman_adv: batadv0: Adding interface: batadv_slave_0
[  175.217716][ T4722] usb 6-1: USB disconnect, device number 4
[  175.224113][ T6974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  175.291240][ T7048] loop4: detected capacity change from 0 to 256
[  175.299880][ T6974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  175.335669][ T6974] batman_adv: batadv0: Adding interface: batadv_slave_1
[  175.349605][ T6974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  175.399591][ T7048] /dev/loop4: Can't open blockdev
[  175.418116][ T6974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  175.504624][ T4187] Bluetooth: hci3: command 0x0409 tx timeout
[  175.590987][ T4266] device hsr_slave_0 left promiscuous mode
[  175.597975][ T4266] device hsr_slave_1 left promiscuous mode
[  175.621392][ T4266] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  175.655409][ T4266] batman_adv: batadv0: Removing interface: batadv_slave_0
[  175.687843][ T4266] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  175.724736][ T4266] batman_adv: batadv0: Removing interface: batadv_slave_1
[  175.745722][ T4266] device bridge_slave_1 left promiscuous mode
[  175.757014][ T4266] bridge0: port 2(bridge_slave_1) entered disabled state
[  175.771966][ T4266] device bridge_slave_0 left promiscuous mode
[  175.778499][ T4266] bridge0: port 1(bridge_slave_0) entered disabled state
[  175.814820][ T4266] device veth1_macvtap left promiscuous mode
[  175.840878][    C1] vxcan1: j1939_tp_rxtimer: 0xffff88806103f000: rx timeout, send abort
[  175.853215][    C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88806103f000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session.
[  175.866881][ T4266] device veth0_macvtap left promiscuous mode
[  175.887031][ T4266] device veth1_vlan left promiscuous mode
[  175.933540][ T4266] device veth0_vlan left promiscuous mode
[  176.459493][ T5249] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  176.555787][ T4266] team0 (unregistering): Port device team_slave_1 removed
[  176.591274][ T7088] loop4: detected capacity change from 0 to 4096
[  176.598989][ T4266] team0 (unregistering): Port device team_slave_0 removed
[  176.614508][ T4266] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  176.634711][ T4266] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  176.712190][ T7088] /dev/loop4: Can't open blockdev
[  176.819375][ T4220] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  176.830460][ T5249] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  176.848694][ T5249] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  176.869204][ T5249] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  176.895227][ T4266] bond0 (unregistering): Released all slaves
[  177.016301][ T6974] device hsr_slave_0 entered promiscuous mode
[  177.041418][ T6974] device hsr_slave_1 entered promiscuous mode
[  177.059684][ T5249] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  177.076614][ T6974] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  177.079227][ T5249] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  177.097367][ T5249] usb 6-1: Product: syz
[  177.102411][ T5249] usb 6-1: Manufacturer: syz
[  177.107510][ T5249] usb 6-1: SerialNumber: syz
[  177.118938][ T6974] Cannot create hsr debugfs directory
[  177.179877][ T4220] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  177.202572][ T4220] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1c0d, bcdDevice= 0.00
[  177.218649][ T7103] loop4: detected capacity change from 0 to 64
[  177.225762][ T4220] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  177.245953][ T4220] usb 3-1: config 0 descriptor??
[  177.378042][ T5249] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  177.549526][ T4722] Bluetooth: hci3: command 0x041b tx timeout
[  177.578660][ T5249] usb 6-1: USB disconnect, device number 5
[  177.604746][ T6974] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  177.615601][ T5249] usblp0: removed
[  177.667583][ T6974] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  177.690802][ T6974] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  177.749238][ T6974] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  177.776456][ T4220] corsair-psu 0003:1B1C:1C0D.0009: hidraw0: USB HID v0.00 Device [HID 1b1c:1c0d] on usb-dummy_hcd.2-1/input0
[  177.859475][ T4220] corsair-psu 0003:1B1C:1C0D.0009: unable to initialize device (-38)
[  177.893828][ T4220] corsair-psu: probe of 0003:1B1C:1C0D.0009 failed with error -38
[  177.994220][ T4570] usb 3-1: USB disconnect, device number 7
[  178.015582][ T6974] 8021q: adding VLAN 0 to HW filter on device bond0
[  178.057833][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  178.090176][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  178.112414][ T6974] 8021q: adding VLAN 0 to HW filter on device team0
[  178.170524][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  178.201568][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  178.266471][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[  178.273683][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[  178.341478][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  178.370309][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  178.401233][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  178.434112][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  178.441279][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  178.479854][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  178.527965][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  178.608739][ T7112] loop4: detected capacity change from 0 to 32768
[  178.676095][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  178.709026][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  178.762495][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  178.868116][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  178.904626][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  178.960390][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  178.994655][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  179.040093][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  179.084865][ T6974] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  179.112224][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  179.265714][ T7153] IPv6: Can't replace route, no match found
[  179.493019][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  179.533465][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  179.563405][ T6974] 8021q: adding VLAN 0 to HW filter on device batadv0
[  179.657141][ T1332] Bluetooth: hci3: command 0x040f tx timeout
[  179.794128][ T7178] netlink: 4 bytes leftover after parsing attributes in process `syz.4.901'.
[  180.665238][   T26] audit: type=1326 audit(1743482997.997:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7211 comm="syz.1.909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ff2931169 code=0x7ffc0000
[  180.769166][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  180.778751][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  180.813073][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  180.830645][   T26] audit: type=1326 audit(1743482997.997:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7211 comm="syz.1.909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ff2931169 code=0x7ffc0000
[  180.860915][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  180.874794][ T6974] device veth0_vlan entered promiscuous mode
[  180.930792][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  180.965945][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  180.984276][   T26] audit: type=1326 audit(1743482997.997:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7211 comm="syz.1.909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7f2ff2931169 code=0x7ffc0000
[  180.992410][ T6974] device veth1_vlan entered promiscuous mode
[  181.080740][ T7225] netlink: 'syz.1.913': attribute type 3 has an invalid length.
[  181.149561][   T26] audit: type=1326 audit(1743482997.997:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7211 comm="syz.1.909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ff2931169 code=0x7ffc0000
[  181.171694][    C0] vkms_vblank_simulate: vblank timer overrun
[  181.187903][ T6974] device veth0_macvtap entered promiscuous mode
[  181.225110][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  181.235998][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  181.249444][   T26] audit: type=1326 audit(1743482997.997:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7211 comm="syz.1.909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7f2ff2931169 code=0x7ffc0000
[  181.271398][    C0] vkms_vblank_simulate: vblank timer overrun
[  181.315889][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  181.322345][ T7194] loop5: detected capacity change from 0 to 32768
[  181.336125][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  181.350255][   T26] audit: type=1326 audit(1743482997.997:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7211 comm="syz.1.909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ff2931169 code=0x7ffc0000
[  181.372492][    C0] vkms_vblank_simulate: vblank timer overrun
[  181.392632][ T6974] device veth1_macvtap entered promiscuous mode
[  181.415709][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  181.431568][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  181.471786][ T6974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  181.482951][   T26] audit: type=1326 audit(1743482998.027:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7211 comm="syz.1.909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ff2931169 code=0x7ffc0000
[  181.505408][    C0] vkms_vblank_simulate: vblank timer overrun
[  181.513077][ T6974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.550774][ T6974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  181.552083][ T7194] XFS (loop5): Mounting V5 Filesystem
[  181.619540][ T6974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.629972][ T4722] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  181.669929][ T6974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  181.725150][ T4261] Bluetooth: hci3: command 0x0419 tx timeout
[  181.745479][ T6974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.766372][ T7194] XFS (loop5): Ending clean mount
[  181.777396][ T7194] XFS (loop5): Quotacheck needed: Please wait.
[  181.800184][ T6974] batman_adv: batadv0: Interface activated: batadv_slave_0
[  181.855533][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  181.871867][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  181.915251][ T6974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  181.945519][ T6974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.963055][ T7194] XFS (loop5): Quotacheck: Done.
[  181.968198][ T6974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  182.019605][ T4722] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  182.045076][ T4722] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  182.075494][ T6974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  182.094442][ T6974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  182.107216][ T6974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  182.128914][ T6974] batman_adv: batadv0: Interface activated: batadv_slave_1
[  182.152843][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  182.172697][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  182.182073][ T4722] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  182.199761][ T4722] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  182.212350][ T6974] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  182.229005][ T6974] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  182.238811][ T4722] usb 2-1: SerialNumber: syz
[  182.259079][ T6974] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  182.278505][ T6974] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  182.303599][ T5618] XFS (loop5): Unmounting Filesystem
[  182.459595][ T7229] loop4: detected capacity change from 0 to 32768
[  182.556744][ T4722] usb 2-1: 0:2 : does not exist
[  182.570203][ T3076] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  182.578743][ T3076] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  182.581269][ T7229] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.915 (7229)
[  182.637058][ T4722] usb 2-1: USB disconnect, device number 10
[  182.661257][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  182.677373][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  182.758790][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  182.766395][ T7229] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  182.766492][ T7229] BTRFS info (device loop4): allowing degraded mounts
[  182.859434][ T7229] BTRFS info (device loop4): ignoring data csums
[  182.884964][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  182.908366][ T7229] BTRFS info (device loop4): turning on sync discard
[  182.935928][ T7229] BTRFS info (device loop4): enabling ssd optimizations
[  182.943944][ T4290] udevd[4290]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  182.980458][ T7229] BTRFS info (device loop4): allowing degraded mounts
[  183.016425][ T7229] BTRFS info (device loop4): allowing degraded mounts
[  183.049467][ T7229] BTRFS info (device loop4): metadata ratio 36085
[  183.109524][ T7229] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8)
[  183.199332][ T7229] BTRFS info (device loop4): force lzo compression, level 0
[  183.206943][ T7229] BTRFS info (device loop4): force clearing of disk cache
[  183.409564][ T7229] BTRFS info (device loop4): using spread ssd allocation scheme
[  183.425432][ T7229] BTRFS info (device loop4): using free space tree
[  183.534235][ T7229] BTRFS info (device loop4): has skinny extents
[  183.636521][ T7289] autofs4:pid:7289:autofs_fill_super: could not open pipe file descriptor
[  185.123228][ T7348] loop4: detected capacity change from 0 to 4096
[  185.339034][ T7340] loop2: detected capacity change from 0 to 32768
[  185.359803][ T7365] netlink: 165 bytes leftover after parsing attributes in process `syz.1.942'.
[  185.454507][ T7340] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.936 (7340)
[  185.506710][ T7340] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  185.533249][ T7340] BTRFS info (device loop2): setting nodatacow, compression disabled
[  185.595259][ T7340] BTRFS info (device loop2): max_inline at 0
[  185.629071][ T7340] BTRFS info (device loop2): enabling disk space caching
[  185.660119][ T7340] BTRFS info (device loop2): turning off barriers
[  185.687432][ T7340] BTRFS info (device loop2): turning on flush-on-commit
[  185.717969][ T7340] BTRFS info (device loop2): doing ref verification
[  185.743930][ T7340] BTRFS info (device loop2): force clearing of disk cache
[  185.769663][ T7340] BTRFS info (device loop2): enabling ssd optimizations
[  185.776702][ T7340] BTRFS info (device loop2): max_inline at 4096
[  185.805661][ T7340] BTRFS info (device loop2): disk space caching is enabled
[  185.828848][ T7340] BTRFS info (device loop2): has skinny extents
[  185.899483][ T4187] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  186.044348][ T7403] netlink: 'syz.4.950': attribute type 3 has an invalid length.
[  186.105626][ T7340] BTRFS info (device loop2): clearing free space tree
[  186.142321][ T7340] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  186.169405][ T7340] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  186.309649][ T4187] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  186.327023][ T4187] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  186.370519][ T4187] usb 6-1: config 0 descriptor??
[  186.949784][ T4187] [drm:udl_init] *ERROR* Selecting channel failed
[  187.120857][ T4187] [drm] Initialized udl 0.0.1 20120220 for 6-1:0.0 on minor 2
[  187.122623][ T7438] netlink: 8 bytes leftover after parsing attributes in process `syz.1.959'.
[  187.135151][ T7439] loop6: detected capacity change from 0 to 512
[  187.164065][ T4187] [drm] Initialized udl on minor 2
[  187.217409][ T7439] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option
[  187.227180][ T4187] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9
[  187.243221][ T7439] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended
[  187.265318][ T4187] udl 6-1:0.0: [drm] Cannot find any crtc or sizes
[  187.328520][ T4187] usb 6-1: USB disconnect, device number 6
[  187.331130][ T7448] tipc: Started in network mode
[  187.404018][ T7448] tipc: Node identity ac1414bb, cluster identity 4711
[  187.426047][ T7439] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 56 vs 41 free clusters
[  187.470030][ T7448] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  187.477287][ T7439] EXT4-fs (loop6): Remounting filesystem read-only
[  187.538357][ T7459] netlink: 5 bytes leftover after parsing attributes in process `syz.2.965'.
[  187.589864][ T7439] Quota error (device loop6): write_blk: dquota write failed
[  187.597354][ T7439] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota
[  187.668271][ T7439] EXT4-fs error (device loop6): ext4_acquire_dquot:6197: comm syz.6.958: Failed to acquire dquot type 0
[  187.683822][ T5252] kernel write not supported for file /vcs (pid: 5252 comm: kworker/1:19)
[  187.736149][ T7439] EXT4-fs (loop6): Remounting filesystem read-only
[  187.736318][ T7439] Quota error (device loop6): write_blk: dquota write failed
[  187.736758][ T7439] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota
[  187.736793][ T7439] EXT4-fs error (device loop6): ext4_acquire_dquot:6197: comm syz.6.958: Failed to acquire dquot type 0
[  187.737154][ T7439] EXT4-fs (loop6): Remounting filesystem read-only
[  187.751484][ T7439] Quota error (device loop6): write_blk: dquota write failed
[  187.805720][ T7468] sctp: [Deprecated]: syz.1.968 (pid 7468) Use of struct sctp_assoc_value in delayed_ack socket option.
[  187.805720][ T7468] Use struct sctp_sack_info instead
[  187.937366][ T7439] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota
[  187.966638][ T7439] EXT4-fs error (device loop6): ext4_acquire_dquot:6197: comm syz.6.958: Failed to acquire dquot type 0
[  188.004905][ T7478] loop2: detected capacity change from 0 to 256
[  188.035784][ T7439] EXT4-fs (loop6): Remounting filesystem read-only
[  188.050461][ T7439] EXT4-fs (loop6): 1 orphan inode deleted
[  188.060633][ T7439] EXT4-fs (loop6): mounted filesystem without journal. Opts: i_version,noblock_validity,nomblk_io_submit,noinit_itable,errors=remount-ro,init_itable,noauto_da_alloc,usrquota,resgid=0x000000000000ee002. Quota mode: writeback.
[  188.104610][ T7480] loop5: detected capacity change from 0 to 1024
[  188.166259][ T7478] FAT-fs (loop2): Directory bread(block 64) failed
[  188.184524][ T7478] FAT-fs (loop2): Directory bread(block 65) failed
[  188.229668][ T7478] FAT-fs (loop2): Directory bread(block 66) failed
[  188.249464][ T7478] FAT-fs (loop2): Directory bread(block 67) failed
[  188.287915][ T7478] FAT-fs (loop2): Directory bread(block 68) failed
[  188.297966][ T7478] FAT-fs (loop2): Directory bread(block 69) failed
[  188.309177][ T7478] FAT-fs (loop2): Directory bread(block 70) failed
[  188.323186][ T7478] FAT-fs (loop2): Directory bread(block 71) failed
[  188.337670][ T7439] EXT4-fs error (device loop6): ext4_remount:5855: comm syz.6.958: Abort forced by user
[  188.392519][ T7478] FAT-fs (loop2): Directory bread(block 72) failed
[  188.439633][ T7478] FAT-fs (loop2): Directory bread(block 73) failed
[  188.454353][ T7484] loop4: detected capacity change from 0 to 32768
[  188.459527][ T7439] EXT4-fs (loop6): Remounting filesystem read-only
[  188.888173][ T7497] loop4: detected capacity change from 0 to 2048
[  188.888301][ T7493] loop5: detected capacity change from 0 to 2048
[  188.895340][ T7496] 
[  188.903662][ T7496] =====================================================
[  188.910640][ T7496] WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected
[  188.912114][ T7499] loop2: detected capacity change from 0 to 128
[  188.918108][ T7496] 5.15.179-syzkaller #0 Not tainted
[  188.929887][ T7496] -----------------------------------------------------
[  188.936961][ T7496] syz.6.979/7496 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire:
[  188.944746][ T7496] ffffffff8c80a058 (tasklist_lock){.+.+}-{2:2}, at: send_sigurg+0xc8/0x380
[  188.953635][ T7496] 
[  188.953635][ T7496] and this task is already holding:
[  188.961269][ T7496] ffff88802774c638 (&f->f_owner.lock){....}-{2:2}, at: send_sigurg+0x25/0x380
[  188.970196][ T7496] which would create a new lock dependency:
[  188.976098][ T7496]  (&f->f_owner.lock){....}-{2:2} -> (tasklist_lock){.+.+}-{2:2}
[  188.983895][ T7496] 
[  188.983895][ T7496] but this new dependency connects a HARDIRQ-irq-safe lock:
[  188.993450][ T7496]  (&dev->event_lock#2){-...}-{2:2}
[  188.993497][ T7496] 
[  188.993497][ T7496] ... which became HARDIRQ-irq-safe at:
[  189.006591][ T7496]   lock_acquire+0x1db/0x4f0
[  189.011361][ T7496]   _raw_spin_lock_irqsave+0xd1/0x120
[  189.016871][ T7496]   input_event+0x8a/0xd0
[  189.021234][ T7496]   psmouse_report_standard_packet+0x50/0x200
[  189.027332][ T7496]   psmouse_process_byte+0x45b/0x640
[  189.032664][ T7496]   psmouse_handle_byte+0x46/0x4b0
[  189.037838][ T7496]   psmouse_interrupt+0x697/0x10a0
[  189.042975][ T7496]   serio_interrupt+0x88/0x130
[  189.047898][ T7496]   i8042_interrupt+0x355/0x750
[  189.052781][ T7496]   __handle_irq_event_percpu+0x292/0xa70
[  189.058633][ T7496]   handle_irq_event+0xff/0x2b0
[  189.063516][ T7496]   handle_edge_irq+0x245/0xbf0
[  189.068442][ T7496]   __common_interrupt+0xd7/0x1f0
[  189.073525][ T7496]   common_interrupt+0xae/0xd0
[  189.078322][ T7496]   asm_common_interrupt+0x22/0x40
[  189.083460][ T7496]   _raw_spin_unlock_irqrestore+0xd4/0x130
[  189.089301][ T7496]   i8042_aux_write+0x112/0x190
[  189.094190][ T7496]   ps2_do_sendbyte+0x20a/0x720
[  189.099073][ T7496]   ps2_sendbyte+0x5c/0x120
[  189.103788][ T7496]   cypress_send_ext_cmd+0x21d/0x900
[  189.109154][ T7496]   cypress_detect+0x8f/0x220
[  189.113873][ T7496]   psmouse_extensions+0xc2a/0x1550
[  189.119284][ T7496]   psmouse_switch_protocol+0x308/0x840
[  189.124990][ T7496]   psmouse_connect+0x94b/0x1430
[  189.130073][ T7496]   serio_driver_probe+0x74/0x90
[  189.135009][ T7496]   really_probe+0x24e/0xb60
[  189.139650][ T7496]   __driver_probe_device+0x1a2/0x3d0
[  189.145041][ T7496]   driver_probe_device+0x50/0x420
[  189.150255][ T7496]   __driver_attach+0x479/0x690
[  189.155269][ T7496]   bus_for_each_dev+0x17c/0x1f0
[  189.160217][ T7496]   serio_handle_event+0x56a/0x8f0
[  189.165351][ T7496]   process_one_work+0x8a1/0x10c0
[  189.170465][ T7496]   worker_thread+0xaca/0x1280
[  189.175362][ T7496]   kthread+0x3f6/0x4f0
[  189.179535][ T7496]   ret_from_fork+0x1f/0x30
[  189.184097][ T7496] 
[  189.184097][ T7496] to a HARDIRQ-irq-unsafe lock:
[  189.191112][ T7496]  (tasklist_lock){.+.+}-{2:2}
[  189.191140][ T7496] 
[  189.191140][ T7496] ... which became HARDIRQ-irq-unsafe at:
[  189.203809][ T7496] ...
[  189.203819][ T7496]   lock_acquire+0x1db/0x4f0
[  189.210984][ T7496]   _raw_read_lock+0x32/0x40
[  189.215602][ T7496]   do_wait+0x2a7/0xaf0
[  189.219768][ T7496]   kernel_wait+0xe5/0x230
[  189.224228][ T7496]   call_usermodehelper_exec_work+0xb5/0x220
[  189.230332][ T7496]   process_one_work+0x8a1/0x10c0
[  189.235379][ T7496]   worker_thread+0xaca/0x1280
[  189.240161][ T7496]   kthread+0x3f6/0x4f0
[  189.244338][ T7496]   ret_from_fork+0x1f/0x30
[  189.248932][ T7496] 
[  189.248932][ T7496] other info that might help us debug this:
[  189.248932][ T7496] 
[  189.259158][ T7496] Chain exists of:
[  189.259158][ T7496]   &dev->event_lock#2 --> &f->f_owner.lock --> tasklist_lock
[  189.259158][ T7496] 
[  189.272395][ T7496]  Possible interrupt unsafe locking scenario:
[  189.272395][ T7496] 
[  189.280719][ T7496]        CPU0                    CPU1
[  189.286109][ T7496]        ----                    ----
[  189.291517][ T7496]   lock(tasklist_lock);
[  189.295768][ T7496]                                local_irq_disable();
[  189.302723][ T7496]                                lock(&dev->event_lock#2);
[  189.309936][ T7496]                                lock(&f->f_owner.lock);
[  189.316975][ T7496]   <Interrupt>
[  189.320425][ T7496]     lock(&dev->event_lock#2);
[  189.325295][ T7496] 
[  189.325295][ T7496]  *** DEADLOCK ***
[  189.325295][ T7496] 
[  189.333433][ T7496] 2 locks held by syz.6.979/7496:
[  189.338452][ T7496]  #0: ffff888078000688 (&u->lock){+.+.}-{2:2}, at: queue_oob+0x4b9/0xad0
[  189.347009][ T7496]  #1: ffff88802774c638 (&f->f_owner.lock){....}-{2:2}, at: send_sigurg+0x25/0x380
[  189.359707][ T7496] 
[  189.359707][ T7496] the dependencies between HARDIRQ-irq-safe lock and the holding lock:
[  189.370136][ T7496]    -> (&dev->event_lock#2){-...}-{2:2} {
[  189.376165][ T7496]       IN-HARDIRQ-W at:
[  189.380414][ T7496]                           lock_acquire+0x1db/0x4f0
[  189.387134][ T7496]                           _raw_spin_lock_irqsave+0xd1/0x120
[  189.394593][ T7496]                           input_event+0x8a/0xd0
[  189.401016][ T7496]                           psmouse_report_standard_packet+0x50/0x200
[  189.409213][ T7496]                           psmouse_process_byte+0x45b/0x640
[  189.416601][ T7496]                           psmouse_handle_byte+0x46/0x4b0
[  189.424079][ T7496]                           psmouse_interrupt+0x697/0x10a0
[  189.431285][ T7496]                           serio_interrupt+0x88/0x130
[  189.438171][ T7496]                           i8042_interrupt+0x355/0x750
[  189.445138][ T7496]                           __handle_irq_event_percpu+0x292/0xa70
[  189.453037][ T7496]                           handle_irq_event+0xff/0x2b0
[  189.460092][ T7496]                           handle_edge_irq+0x245/0xbf0
[  189.467328][ T7496]                           __common_interrupt+0xd7/0x1f0
[  189.474467][ T7496]                           common_interrupt+0xae/0xd0
[  189.481451][ T7496]                           asm_common_interrupt+0x22/0x40
[  189.488790][ T7496]                           _raw_spin_unlock_irqrestore+0xd4/0x130
[  189.496729][ T7496]                           i8042_aux_write+0x112/0x190
[  189.503695][ T7496]                           ps2_do_sendbyte+0x20a/0x720
[  189.510816][ T7496]                           ps2_sendbyte+0x5c/0x120
[  189.517424][ T7496]                           cypress_send_ext_cmd+0x21d/0x900
[  189.524816][ T7496]                           cypress_detect+0x8f/0x220
[  189.531606][ T7496]                           psmouse_extensions+0xc2a/0x1550
[  189.538909][ T7496]                           psmouse_switch_protocol+0x308/0x840
[  189.546542][ T7496]                           psmouse_connect+0x94b/0x1430
[  189.553601][ T7496]                           serio_driver_probe+0x74/0x90
[  189.561030][ T7496]                           really_probe+0x24e/0xb60
[  189.568049][ T7496]                           __driver_probe_device+0x1a2/0x3d0
[  189.575514][ T7496]                           driver_probe_device+0x50/0x420
[  189.582890][ T7496]                           __driver_attach+0x479/0x690
[  189.589834][ T7496]                           bus_for_each_dev+0x17c/0x1f0
[  189.596892][ T7496]                           serio_handle_event+0x56a/0x8f0
[  189.604180][ T7496]                           process_one_work+0x8a1/0x10c0
[  189.611401][ T7496]                           worker_thread+0xaca/0x1280
[  189.618275][ T7496]                           kthread+0x3f6/0x4f0
[  189.624525][ T7496]                           ret_from_fork+0x1f/0x30
[  189.631246][ T7496]       INITIAL USE at:
[  189.635417][ T7496]                          lock_acquire+0x1db/0x4f0
[  189.642226][ T7496]                          _raw_spin_lock_irqsave+0xd1/0x120
[  189.649704][ T7496]                          input_inject_event+0xc0/0x300
[  189.656835][ T7496]                          led_trigger_event+0x109/0x1e0
[  189.663861][ T7496]                          kbd_led_trigger_activate+0xb9/0x100
[  189.671500][ T7496]                          led_trigger_set+0x55a/0x970
[  189.678389][ T7496]                          led_trigger_set_default+0x1c2/0x200
[  189.685946][ T7496]                          led_classdev_register_ext+0x6cf/0x8d0
[  189.693814][ T7496]                          input_leds_connect+0x503/0x740
[  189.700956][ T7496]                          input_register_device+0xdae/0x1150
[  189.708422][ T7496]                          atkbd_connect+0x7a7/0xa70
[  189.715107][ T7496]                          serio_driver_probe+0x74/0x90
[  189.722048][ T7496]                          really_probe+0x24e/0xb60
[  189.728644][ T7496]                          __driver_probe_device+0x1a2/0x3d0
[  189.736022][ T7496]                          driver_probe_device+0x50/0x420
[  189.743141][ T7496]                          __driver_attach+0x479/0x690
[  189.750007][ T7496]                          bus_for_each_dev+0x17c/0x1f0
[  189.756967][ T7496]                          serio_handle_event+0x56a/0x8f0
[  189.764084][ T7496]                          process_one_work+0x8a1/0x10c0
[  189.771114][ T7496]                          worker_thread+0xaca/0x1280
[  189.778109][ T7496]                          kthread+0x3f6/0x4f0
[  189.784450][ T7496]                          ret_from_fork+0x1f/0x30
[  189.790976][ T7496]     }
[  189.793776][ T7496]     ... key      at: [<ffffffff96df8c60>] input_allocate_device.__key.6+0x0/0x20
[  189.803181][ T7496]   -> (&client->buffer_lock){....}-{2:2} {
[  189.809106][ T7496]      INITIAL USE at:
[  189.813196][ T7496]                        lock_acquire+0x1db/0x4f0
[  189.819620][ T7496]                        _raw_spin_lock+0x2a/0x40
[  189.826107][ T7496]                        evdev_pass_values+0xe7/0xb60
[  189.832893][ T7496]                        evdev_events+0x198/0x2c0
[  189.839324][ T7496]                        input_pass_values+0x873/0x1200
[  189.846290][ T7496]                        input_handle_event+0xc9b/0x1600
[  189.853542][ T7496]                        input_inject_event+0x1fc/0x300
[  189.860862][ T7496]                        evdev_write+0x668/0x7c0
[  189.867197][ T7496]                        vfs_write+0x30c/0xe50
[  189.873355][ T7496]                        ksys_write+0x1a2/0x2c0
[  189.879715][ T7496]                        do_syscall_64+0x3b/0xb0
[  189.886176][ T7496]                        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  189.894002][ T7496]    }
[  189.896705][ T7496]    ... key      at: [<ffffffff96df8f20>] evdev_open.__key.23+0x0/0x20
[  189.905365][ T7496]    ... acquired at:
[  189.909489][ T7496]    lock_acquire+0x1db/0x4f0
[  189.914399][ T7496]    _raw_spin_lock+0x2a/0x40
[  189.919131][ T7496]    evdev_pass_values+0xe7/0xb60
[  189.924181][ T7496]    evdev_events+0x198/0x2c0
[  189.928880][ T7496]    input_pass_values+0x873/0x1200
[  189.934212][ T7496]    input_handle_event+0xc9b/0x1600
[  189.939506][ T7496]    input_inject_event+0x1fc/0x300
[  189.944821][ T7496]    evdev_write+0x668/0x7c0
[  189.949440][ T7496]    vfs_write+0x30c/0xe50
[  189.953888][ T7496]    ksys_write+0x1a2/0x2c0
[  189.958714][ T7496]    do_syscall_64+0x3b/0xb0
[  189.963316][ T7496]    entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  189.969514][ T7496] 
[  189.971868][ T7496]  -> (&new->fa_lock){....}-{2:2} {
[  189.977095][ T7496]     INITIAL USE at:
[  189.981071][ T7496]                      lock_acquire+0x1db/0x4f0
[  189.987510][ T7496]                      _raw_write_lock_irq+0xcf/0x110
[  189.994279][ T7496]                      fasync_remove_entry+0xfb/0x1d0
[  190.001044][ T7496]                      lease_modify+0x19c/0x380
[  190.007284][ T7496]                      locks_remove_file+0x5d3/0x1040
[  190.014152][ T7496]                      __fput+0x368/0x8e0
[  190.019880][ T7496]                      task_work_run+0x129/0x1a0
[  190.026235][ T7496]                      exit_to_user_mode_loop+0x106/0x130
[  190.033370][ T7496]                      exit_to_user_mode_prepare+0xb1/0x140
[  190.040672][ T7496]                      syscall_exit_to_user_mode+0x5d/0x240
[  190.047998][ T7496]                      do_syscall_64+0x47/0xb0
[  190.054532][ T7496]                      entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  190.062172][ T7496]     INITIAL READ USE at:
[  190.066586][ T7496]                           lock_acquire+0x1db/0x4f0
[  190.073274][ T7496]                           _raw_read_lock_irqsave+0xd9/0x120
[  190.080938][ T7496]                           kill_fasync+0x16a/0x490
[  190.087769][ T7496]                           evdev_pass_values+0x5ad/0xb60
[  190.095009][ T7496]                           evdev_events+0x198/0x2c0
[  190.101698][ T7496]                           input_pass_values+0x873/0x1200
[  190.109213][ T7496]                           input_handle_event+0xc9b/0x1600
[  190.116728][ T7496]                           input_inject_event+0x1fc/0x300
[  190.123938][ T7496]                           evdev_write+0x668/0x7c0
[  190.130538][ T7496]                           vfs_write+0x30c/0xe50
[  190.136965][ T7496]                           ksys_write+0x1a2/0x2c0
[  190.143677][ T7496]                           do_syscall_64+0x3b/0xb0
[  190.150283][ T7496]                           entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  190.158380][ T7496]   }
[  190.160962][ T7496]   ... key      at: [<ffffffff96afd940>] fasync_insert_entry.__key+0x0/0x20
[  190.169818][ T7496]   ... acquired at:
[  190.173725][ T7496]    lock_acquire+0x1db/0x4f0
[  190.178402][ T7496]    _raw_read_lock_irqsave+0xd9/0x120
[  190.183861][ T7496]    kill_fasync+0x16a/0x490
[  190.188575][ T7496]    evdev_pass_values+0x5ad/0xb60
[  190.193854][ T7496]    evdev_events+0x198/0x2c0
[  190.198635][ T7496]    input_pass_values+0x873/0x1200
[  190.203955][ T7496]    input_handle_event+0xc9b/0x1600
[  190.209293][ T7496]    input_inject_event+0x1fc/0x300
[  190.214602][ T7496]    evdev_write+0x668/0x7c0
[  190.219205][ T7496]    vfs_write+0x30c/0xe50
[  190.223939][ T7496]    ksys_write+0x1a2/0x2c0
[  190.228451][ T7496]    do_syscall_64+0x3b/0xb0
[  190.233157][ T7496]    entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  190.239238][ T7496] 
[  190.241604][ T7496] -> (&f->f_owner.lock){....}-{2:2} {
[  190.246992][ T7496]    INITIAL USE at:
[  190.250935][ T7496]                    lock_acquire+0x1db/0x4f0
[  190.257005][ T7496]                    _raw_write_lock_irq+0xcf/0x110
[  190.263711][ T7496]                    __f_setown+0x38/0x350
[  190.269525][ T7496]                    generic_setlease+0xf12/0x1390
[  190.276154][ T7496]                    fcntl_setlease+0x341/0x3f0
[  190.282441][ T7496]                    do_fcntl+0x10a/0x1600
[  190.288273][ T7496]                    __se_sys_fcntl+0xd8/0x1b0
[  190.294426][ T7496]                    do_syscall_64+0x3b/0xb0
[  190.300712][ T7496]                    entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  190.308199][ T7496]    INITIAL READ USE at:
[  190.312618][ T7496]                         lock_acquire+0x1db/0x4f0
[  190.319140][ T7496]                         _raw_read_lock_irqsave+0xd9/0x120
[  190.326448][ T7496]                         send_sigurg+0x25/0x380
[  190.332808][ T7496]                         sk_send_sigurg+0x6a/0xb0
[  190.339316][ T7496]                         queue_oob+0x7fe/0xad0
[  190.345568][ T7496]                         unix_stream_sendmsg+0xe0a/0x1070
[  190.352811][ T7496]                         ____sys_sendmsg+0x59e/0x8f0
[  190.359777][ T7496]                         ___sys_sendmsg+0x252/0x2e0
[  190.366576][ T7496]                         __se_sys_sendmsg+0x19a/0x260
[  190.373887][ T7496]                         do_syscall_64+0x3b/0xb0
[  190.380659][ T7496]                         entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  190.388715][ T7496]  }
[  190.391211][ T7496]  ... key      at: [<ffffffff96afccc0>] __alloc_file.__key+0x0/0x10
[  190.399286][ T7496]  ... acquired at:
[  190.403129][ T7496]    lock_acquire+0x1db/0x4f0
[  190.407807][ T7496]    _raw_read_lock_irqsave+0xd9/0x120
[  190.413352][ T7496]    send_sigio+0x2f/0x330
[  190.417871][ T7496]    kill_fasync+0x20c/0x490
[  190.422469][ T7496]    evdev_pass_values+0x5ad/0xb60
[  190.427822][ T7496]    evdev_events+0x198/0x2c0
[  190.432708][ T7496]    input_pass_values+0x873/0x1200
[  190.437908][ T7496]    input_handle_event+0xc9b/0x1600
[  190.443277][ T7496]    input_inject_event+0x1fc/0x300
[  190.448473][ T7496]    evdev_write+0x668/0x7c0
[  190.453069][ T7496]    vfs_write+0x30c/0xe50
[  190.457514][ T7496]    ksys_write+0x1a2/0x2c0
[  190.462031][ T7496]    do_syscall_64+0x3b/0xb0
[  190.466886][ T7496]    entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  190.473058][ T7496] 
[  190.475463][ T7496] 
[  190.475463][ T7496] the dependencies between the lock to be acquired
[  190.475470][ T7496]  and HARDIRQ-irq-unsafe lock:
[  190.488985][ T7496] -> (tasklist_lock){.+.+}-{2:2} {
[  190.494112][ T7496]    HARDIRQ-ON-R at:
[  190.498122][ T7496]                     lock_acquire+0x1db/0x4f0
[  190.504297][ T7496]                     _raw_read_lock+0x32/0x40
[  190.510478][ T7496]                     do_wait+0x2a7/0xaf0
[  190.516210][ T7496]                     kernel_wait+0xe5/0x230
[  190.522206][ T7496]                     call_usermodehelper_exec_work+0xb5/0x220
[  190.529838][ T7496]                     process_one_work+0x8a1/0x10c0
[  190.536448][ T7496]                     worker_thread+0xaca/0x1280
[  190.542798][ T7496]                     kthread+0x3f6/0x4f0
[  190.548616][ T7496]                     ret_from_fork+0x1f/0x30
[  190.554807][ T7496]    SOFTIRQ-ON-R at:
[  190.558780][ T7496]                     lock_acquire+0x1db/0x4f0
[  190.564938][ T7496]                     _raw_read_lock+0x32/0x40
[  190.571535][ T7496]                     do_wait+0x2a7/0xaf0
[  190.577453][ T7496]                     kernel_wait+0xe5/0x230
[  190.583434][ T7496]                     call_usermodehelper_exec_work+0xb5/0x220
[  190.590982][ T7496]                     process_one_work+0x8a1/0x10c0
[  190.597770][ T7496]                     worker_thread+0xaca/0x1280
[  190.604114][ T7496]                     kthread+0x3f6/0x4f0
[  190.609836][ T7496]                     ret_from_fork+0x1f/0x30
[  190.615920][ T7496]    INITIAL USE at:
[  190.619808][ T7496]                    lock_acquire+0x1db/0x4f0
[  190.625923][ T7496]                    _raw_write_lock_irq+0xcf/0x110
[  190.632715][ T7496]                    copy_process+0x22be/0x3ef0
[  190.639378][ T7496]                    kernel_clone+0x210/0x960
[  190.645598][ T7496]                    kernel_thread+0x12e/0x1a0
[  190.651765][ T7496]                    rest_init+0x21/0x330
[  190.657941][ T7496]                    start_kernel+0x48c/0x540
[  190.664165][ T7496]                    secondary_startup_64_no_verify+0xb1/0xbb
[  190.671633][ T7496]    INITIAL READ USE at:
[  190.675962][ T7496]                         lock_acquire+0x1db/0x4f0
[  190.682467][ T7496]                         _raw_read_lock+0x32/0x40
[  190.688996][ T7496]                         do_wait+0x2a7/0xaf0
[  190.695411][ T7496]                         kernel_wait+0xe5/0x230
[  190.701738][ T7496]                         call_usermodehelper_exec_work+0xb5/0x220
[  190.709649][ T7496]                         process_one_work+0x8a1/0x10c0
[  190.716626][ T7496]                         worker_thread+0xaca/0x1280
[  190.723356][ T7496]                         kthread+0x3f6/0x4f0
[  190.729438][ T7496]                         ret_from_fork+0x1f/0x30
[  190.735900][ T7496]  }
[  190.738422][ T7496]  ... key      at: [<ffffffff8c80a058>] tasklist_lock+0x18/0x40
[  190.746154][ T7496]  ... acquired at:
[  190.749973][ T7496]    lock_acquire+0x1db/0x4f0
[  190.754715][ T7496]    _raw_read_lock+0x32/0x40
[  190.759606][ T7496]    send_sigurg+0xc8/0x380
[  190.764132][ T7496]    sk_send_sigurg+0x6a/0xb0
[  190.768810][ T7496]    queue_oob+0x7fe/0xad0
[  190.773317][ T7496]    unix_stream_sendmsg+0xe0a/0x1070
[  190.778717][ T7496]    ____sys_sendmsg+0x59e/0x8f0
[  190.783666][ T7496]    ___sys_sendmsg+0x252/0x2e0
[  190.788631][ T7496]    __se_sys_sendmsg+0x19a/0x260
[  190.793670][ T7496]    do_syscall_64+0x3b/0xb0
[  190.798291][ T7496]    entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  190.804361][ T7496] 
[  190.806675][ T7496] 
[  190.806675][ T7496] stack backtrace:
[  190.812581][ T7496] CPU: 0 PID: 7496 Comm: syz.6.979 Not tainted 5.15.179-syzkaller #0
[  190.820748][ T7496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  190.830971][ T7496] Call Trace:
[  190.834262][ T7496]  <TASK>
[  190.837211][ T7496]  dump_stack_lvl+0x1e3/0x2d0
[  190.841905][ T7496]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  190.847538][ T7496]  ? panic+0x860/0x860
[  190.851608][ T7496]  ? print_shortest_lock_dependencies+0xee/0x150
[  190.857981][ T7496]  validate_chain+0x4d01/0x5930
[  190.862864][ T7496]  ? reacquire_held_locks+0x660/0x660
[  190.868248][ T7496]  ? reacquire_held_locks+0x660/0x660
[  190.873761][ T7496]  ? __lock_acquire+0x1295/0x1ff0
[  190.878795][ T7496]  ? mark_lock+0x98/0x340
[  190.883213][ T7496]  __lock_acquire+0x1295/0x1ff0
[  190.888088][ T7496]  lock_acquire+0x1db/0x4f0
[  190.892719][ T7496]  ? send_sigurg+0xc8/0x380
[  190.897227][ T7496]  ? read_lock_is_recursive+0x10/0x10
[  190.902600][ T7496]  ? _raw_read_lock_irqsave+0xac/0x120
[  190.908142][ T7496]  ? lockdep_hardirqs_off+0x70/0x100
[  190.913429][ T7496]  ? do_raw_read_lock+0x38/0x80
[  190.918299][ T7496]  ? _raw_read_lock_irqsave+0xe5/0x120
[  190.923962][ T7496]  ? _raw_read_lock+0x40/0x40
[  190.928918][ T7496]  ? do_raw_spin_lock+0x14a/0x370
[  190.933965][ T7496]  _raw_read_lock+0x32/0x40
[  190.938637][ T7496]  ? send_sigurg+0xc8/0x380
[  190.943252][ T7496]  send_sigurg+0xc8/0x380
[  190.947605][ T7496]  sk_send_sigurg+0x6a/0xb0
[  190.952155][ T7496]  queue_oob+0x7fe/0xad0
[  190.956419][ T7496]  ? scm_stat_add+0xb0/0xb0
[  190.960929][ T7496]  ? apparmor_socket_getpeersec_dgram+0x5/0x10
[  190.967232][ T7496]  ? security_socket_getpeersec_dgram+0x99/0xb0
[  190.973565][ T7496]  unix_stream_sendmsg+0xe0a/0x1070
[  190.978770][ T7496]  ? unix_show_fdinfo+0xa0/0xa0
[  190.983617][ T7496]  ? validate_chain+0x112/0x5930
[  190.988554][ T7496]  ? aa_sock_msg_perm+0x91/0x150
[  190.993488][ T7496]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  190.998780][ T7496]  ? security_socket_sendmsg+0x7d/0xa0
[  191.004241][ T7496]  ? unix_show_fdinfo+0xa0/0xa0
[  191.009101][ T7496]  ____sys_sendmsg+0x59e/0x8f0
[  191.013888][ T7496]  ? iovec_from_user+0x300/0x390
[  191.018848][ T7496]  ? __sys_sendmsg_sock+0x30/0x30
[  191.023878][ T7496]  ___sys_sendmsg+0x252/0x2e0
[  191.028562][ T7496]  ? __sys_sendmsg+0x260/0x260
[  191.033338][ T7496]  ? __fdget+0x191/0x220
[  191.037583][ T7496]  __se_sys_sendmsg+0x19a/0x260
[  191.042488][ T7496]  ? __x64_sys_sendmsg+0x80/0x80
[  191.047435][ T7496]  ? syscall_enter_from_user_mode+0x2e/0x240
[  191.053422][ T7496]  ? lockdep_hardirqs_on+0x94/0x130
[  191.058665][ T7496]  ? syscall_enter_from_user_mode+0x2e/0x240
[  191.064643][ T7496]  do_syscall_64+0x3b/0xb0
[  191.069062][ T7496]  ? clear_bhb_loop+0x15/0x70
[  191.073764][ T7496]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  191.079684][ T7496] RIP: 0033:0x7f6862e7e169
[  191.084123][ T7496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  191.104219][ T7496] RSP: 002b:00007f6860ce7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  191.112666][ T7496] RAX: ffffffffffffffda RBX: 00007f6863096fa0 RCX: 00007f6862e7e169
[  191.120835][ T7496] RDX: 0000000000004041 RSI: 00002000000001c0 RDI: 0000000000000003
[  191.128832][ T7496] RBP: 00007f6862eff2a0 R08: 0000000000000000 R09: 0000000000000000
[  191.136814][ T7496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  191.144778][ T7496] R13: 0000000000000000 R14: 00007f6863096fa0 R15: 00007ffe53acad38
[  191.152755][ T7496]  </TASK>
[  191.155831][    C0] vkms_vblank_simulate: vblank timer overrun
[  191.214675][ T7499] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000002,nouid32,,errors=continue. Quota mode: none.
[  191.231150][ T7493] EXT4-fs (loop5): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none.
[  191.245217][ T7499] ext4 filesystem being mounted at /196/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  191.266645][ T7493] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  191.309446][ T7493] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 1 with error 28
[  191.352188][ T7493] EXT4-fs (loop5): This should not happen!! Data will be lost
[  191.352188][ T7493] 
[  191.354820][ T7511] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  191.362195][ T7493] EXT4-fs (loop5): Total free blocks count 0
[  191.381694][ T7493] EXT4-fs (loop5): Free/Dirty block details
[  191.388095][ T7493] EXT4-fs (loop5): free_blocks=2415919104
[  191.394177][ T7493] EXT4-fs (loop5): dirty_blocks=32
[  191.400572][ T7493] EXT4-fs (loop5): Block reservation details
[  191.406775][ T7493] EXT4-fs (loop5): i_reserved_data_blocks=2
[  191.427803][ T7511] EXT4-fs (loop5): This should not happen!! Data will be lost
[  191.427803][ T7511]