last executing test programs:

4m53.741296435s ago: executing program 2 (id=612):
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x40)
unshare(0x40200)
r0 = semget(0x1, 0x4, 0x39c)
semop(r0, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1)
semop(r0, &(0x7f0000000000)=[{0x3, 0xbbdd, 0x1000}, {0x2, 0x100, 0x800}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff])
unshare(0x40400)

4m52.841207147s ago: executing program 2 (id=621):
r0 = getpid()
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'bridge0\x00'})
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
getgroups(0x0, &(0x7f0000001080))
keyctl$chown(0x4, r3, 0xee01, 0x0)
keyctl$setperm(0x5, r3, 0x20925)
keyctl$KEYCTL_MOVE(0x3, r3, 0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x7, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x80)

4m51.879264991s ago: executing program 2 (id=624):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)={0x1a8, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x168, 0x8, 0x0, 0x1, [{0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0xfffffffffffffc5c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0xfffffffffffffffa}, @NLBL_CIPSOV4_A_MLSLVLREM]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x18, 0x4, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}]}]}, 0x1a8}}, 0x0)

4m51.800874832s ago: executing program 2 (id=625):
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262)

4m51.750411775s ago: executing program 2 (id=626):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x3)
ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000040))

4m51.497032228s ago: executing program 2 (id=627):
setfsgid(0xee00)
r0 = syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r1)
mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0)
r2 = syz_open_procfs(r0, &(0x7f0000000300)='map_files\x00')
fchdir(r2)
rt_sigtimedwait(&(0x7f0000000000)={[0xe]}, 0x0, 0x0, 0x8)
r3 = open(&(0x7f0000000480)='.\x00', 0x68800, 0x101)
getdents(r3, 0x0, 0x0)

4m51.285721864s ago: executing program 32 (id=627):
setfsgid(0xee00)
r0 = syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r1)
mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0)
r2 = syz_open_procfs(r0, &(0x7f0000000300)='map_files\x00')
fchdir(r2)
rt_sigtimedwait(&(0x7f0000000000)={[0xe]}, 0x0, 0x0, 0x8)
r3 = open(&(0x7f0000000480)='.\x00', 0x68800, 0x101)
getdents(r3, 0x0, 0x0)

4m37.630111801s ago: executing program 1 (id=778):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r0)
sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x14, r1, 0x3d810686a7d95765, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x24004052)

4m37.555687906s ago: executing program 1 (id=780):
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
io_setup(0x1, &(0x7f0000000040)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x1, r0, 0x0, 0x0, 0x8000}])

4m37.420307377s ago: executing program 1 (id=783):
syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000040)={[{@test_dummy_encryption}, {@grpquota}]}, 0x2, 0xbbf, &(0x7f0000000440)="$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")
r0 = creat(&(0x7f0000001340)='./mnt\x00', 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x8000, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x20052f9, 0xfffffff8, 0x100802, 0x2, 0x8})

4m37.278525177s ago: executing program 1 (id=786):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x204092, &(0x7f0000000200), 0x6, 0x515, &(0x7f0000000c00)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
getdents64(r0, &(0x7f0000000400)=""/4096, 0x1000)

4m36.977290198s ago: executing program 1 (id=789):
syz_mount_image$msdos(&(0x7f0000000200), &(0x7f00000002c0)='./file2\x00', 0x1800880, &(0x7f00000059c0)=ANY=[], 0x1, 0x214, &(0x7f0000000840)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
ftruncate(r0, 0x403)
fadvise64(r0, 0x1f, 0x403, 0x4)

4m36.590541948s ago: executing program 1 (id=790):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
r1 = socket(0xa, 0x3, 0xff)
sendmsg$inet6(r1, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0xa, 0x7, @mcast2}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000180)="671723d7c6012b", 0x7}, {&(0x7f0000000280)="9e91d91a92dc7c8fff658bb539e2ffb332c99223a7dfe52c1f51218206f5abfd2a33a3", 0x23}], 0x2}, 0x20008b88)

4m36.47392133s ago: executing program 33 (id=790):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
r1 = socket(0xa, 0x3, 0xff)
sendmsg$inet6(r1, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0xa, 0x7, @mcast2}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000180)="671723d7c6012b", 0x7}, {&(0x7f0000000280)="9e91d91a92dc7c8fff658bb539e2ffb332c99223a7dfe52c1f51218206f5abfd2a33a3", 0x23}], 0x2}, 0x20008b88)

3m36.957692254s ago: executing program 0 (id=1410):
r0 = socket(0x2, 0x80805, 0x0)
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, 0x0, &(0x7f0000000180))

3m36.900596103s ago: executing program 0 (id=1411):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0)
ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000140)={0x1, 0x1, 0xffffffff, 0xfffffffe})

3m36.900420692s ago: executing program 0 (id=1412):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000400)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="051a2cbd7000fbdbdf2502000000140001800500020007000000060005004e200000bf9394ec715253"], 0x28}, 0x1, 0x0, 0x0, 0x40850}, 0x40090)

3m36.829958873s ago: executing program 0 (id=1413):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x800000, &(0x7f0000000040)={[{@huge_advise}]})
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x8, 0x12, r0, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe)
ftruncate(r0, 0x472e)
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4)
syz_clone3(&(0x7f00000003c0)={0xad023080, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, 0x0}, 0x58)

3m36.826391525s ago: executing program 0 (id=1414):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x85)
mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8011, &(0x7f0000000200)={[{@gid}, {@huge_always}, {@mode={'mode', 0x3d, 0x5}}, {}]})

3m36.569413174s ago: executing program 0 (id=1416):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x4e24, @loopback}, {0x4, 0x0, @private=0xa0100ff}, {0x2, 0x4e24, @broadcast}, 0x61, 0x0, 0x0, 0xfdffffffffffffff, 0x3, &(0x7f0000000280)='veth1_to_bridge\x00', 0x8, 0x0, 0xfffe})

3m36.478837503s ago: executing program 34 (id=1416):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x4e24, @loopback}, {0x4, 0x0, @private=0xa0100ff}, {0x2, 0x4e24, @broadcast}, 0x61, 0x0, 0x0, 0xfdffffffffffffff, 0x3, &(0x7f0000000280)='veth1_to_bridge\x00', 0x8, 0x0, 0xfffe})

2m34.990523235s ago: executing program 5 (id=2072):
io_setup(0x3, &(0x7f0000000140)=<r0=>0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x480)
io_submit(r0, 0x1, &(0x7f0000000a40)=[&(0x7f0000000840)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])

2m34.850809375s ago: executing program 5 (id=2073):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10)
sendto$inet(r0, &(0x7f0000001400)="e3", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
recvfrom(r0, 0x0, 0xfffffe7d, 0x41, 0x0, 0x0)

2m34.799896187s ago: executing program 5 (id=2074):
r0 = socket(0x15, 0x5, 0x0)
getsockopt(r0, 0x200000000114, 0x271f, 0x0, &(0x7f0000000000))

2m34.799502516s ago: executing program 5 (id=2075):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00404, &(0x7f0000000080)={[{@grpquota}, {@noblock_validity}]}, 0x1, 0xbb6, &(0x7f0000000c00)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtIxk5nEZDLHpr8fvDnve96TeZ4nJ5nzHpiTAJ5ak9mXNOJIRJxPIsbr+9OIGKj2hiLWa8c9vH91NmtJVCpv/5ZEEhEP7l+dbbxWUt+O1gdDEXH7tST+/VFr3OXVtcWZcrm0VB8fX7l45fjy6torCxdnLpQulC6dmn711PTp6eku1nr3yntfPPPDG89fv/nx1JufH/ouibMxVp9rrqNbJmNy42fSrBARM90OlpO+ej3NdSaFHBMCAKCjtGkN998Yj754vHgbj29/zDU5AAAAoCsqfREVAAAA4IBL3P8DAADAAdf4HMCD+1dnGy3fTyT01r1zETFRq7/xfHNtphDr1e1Q9EfEyO9JND/WmtS+bc8ms0hff1/KWmz3HPJwFwJusn4tIv6/1flPqvVPVJ/ibq0/jYipLsSf3DTu9e/fXuo/24X4edcPwNPp1rnahaz1+pfW1j+DtdHm619hi2vXbuR9/Wus/x62rP/SjfVfX5v131s7jHH00Uu32801r//e/eTnuSx+tt1TUX/DvWsRRwtb1Z9s1J+0qf/8DmOMzt690W4uqz+rt9F6XX/lZsSx6mqutf6GpNP/Jzo+v1AuTdW+bvH6q6c7x28+/1nL4jfuBXohO/8jsbvzf2WHMSb+9+uRdnPb15/+MpC8U+0N1Pd8OLOysnQiYiB5vXX/yc65NI5pvEZW/4vPdf7736r+7D1hvf5zyH57rtW32fj6ppijx05+tfv691dW/9wuz/+nO4zx5Tc33m83l3f9AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwZ0ogYiyQtbvTTtFiMGI2I/8RIWr68vPLy/OUPLs1lcxET0Z/OL5RLUxExXhsn2fhEtf94fHLTeDoiDkfEZ+PD1XFx9nJ5Lu/iAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2DAaEWORpMWISCPij/E0LRbzzgoAAADouom8EwAAAAD2nft/AAAAOPha7v8LfxkN9TIXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADqTDz966k0TE+pnhassM1Of6c80M2G/pzg4b2e88gN7ryzsBIDeFpn6lUqnkmArQY+7xgWSb+aG2M4NdzwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAf64Xjty6k0TE+pnhassM1Of6c80M2G9p3gkAuenrNJlsuwN4ghXyTgDIjXt8oLayf1SpaZ0favudg3uOCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCTY6zakrQYEWm1n6bFYsS/ImIi+pP5hXJpKiIORcRP4/2D2fhE3kkDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQdcura4sz5XJpSUdHp4ud4ehZrOH6H3ObYwbbT3Xo5PzGBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABALpZX1xZnyuXS0nLemQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB5W15dW5wpl0tL+9jJu0YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPLzZwAAAP//0L4Jug==")
syz_mount_image$fuse(0x0, &(0x7f0000000540)='./bus\x00', 0x155424, 0x0, 0x1, 0x0, 0x0)
lsetxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x1)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

2m34.554866146s ago: executing program 5 (id=2080):
io_uring_setup(0x6403, 0x0)
ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0)
preadv2(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
syz_open_dev$radio(0x0, 0x1, 0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0xce)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
r3 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43)
mknodat$loop(r3, &(0x7f00000002c0)='./file1\x00', 0x6000, 0x0)
chdir(&(0x7f00000003c0)='./bus\x00')
linkat(r3, &(0x7f0000000100)='./file1\x00', r3, &(0x7f0000000240)='./file0\x00', 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2)

2m33.980226006s ago: executing program 5 (id=2088):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$FUSE_DEV_IOC_BACKING_OPEN(r0, 0x4010e501, 0x0)

2m33.722407804s ago: executing program 35 (id=2088):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$FUSE_DEV_IOC_BACKING_OPEN(r0, 0x4010e501, 0x0)

1m24.580234259s ago: executing program 6 (id=2812):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
ftruncate(r0, 0x5)
r1 = syz_open_dev$media(&(0x7f0000000040), 0x2, 0x0)
ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000180)={0x80000000, 0x0, &(0x7f0000001580)})

1m24.380421032s ago: executing program 6 (id=2815):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7200000000003900000008000300", @ANYRES32=r2, @ANYBLOB="1c005a800c000380050001000c0000000c00008e"], 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x810)

1m24.380150194s ago: executing program 6 (id=2816):
futex_waitv(&(0x7f0000001b00)=[{0xffb, &(0x7f0000000240)=0x800200000006, 0x6}], 0x1, 0x0, 0x0, 0x1)

1m24.140245473s ago: executing program 6 (id=2817):
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0)
poll(&(0x7f0000000580)=[{r0, 0x80}], 0x1, 0x0)
read$FUSE(r0, &(0x7f0000000cc0)={0x2020}, 0x2020)

1m24.090140122s ago: executing program 6 (id=2818):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000005980)=ANY=[@ANYBLOB="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"], 0x3, 0x5505, &(0x7f0000000340)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x42, 0x0)
symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')

1m23.780550579s ago: executing program 6 (id=2819):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000100), 0xfffffd9d)
r1 = socket(0x1e, 0x4, 0x0)
connect$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10)
sendfile(r1, r0, 0x0, 0x8010002b)

1m8.804143621s ago: executing program 36 (id=2819):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000100), 0xfffffd9d)
r1 = socket(0x1e, 0x4, 0x0)
connect$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10)
sendfile(r1, r0, 0x0, 0x8010002b)

1m6.040455158s ago: executing program 4 (id=2978):
unshare(0x6020400)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@ifindex, 0x7, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)

1m5.990311678s ago: executing program 4 (id=2979):
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
pipe(&(0x7f0000000300)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
sendto$inet6(r4, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0)
splice(r4, 0x0, r3, 0x0, 0x406f413, 0x0)

1m5.062419048s ago: executing program 4 (id=2983):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000000200)={[], [{@flag='mand'}]}, 0x0, 0x559e, &(0x7f000000ac40)="$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")
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000240)='./file2\x00', 0x145142, 0x0)
sendfile(r0, r0, 0x0, 0x2)

1m4.840174721s ago: executing program 4 (id=2986):
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000080)='configfs\x00', 0x200, 0x0)
mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0)
move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x152)

1m4.789473468s ago: executing program 4 (id=2988):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000069c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5531, &(0x7f0000000b00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183042, 0x8)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c)
r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x94)
sendfile(r1, r1, 0x0, 0x100000000)

1m4.496152168s ago: executing program 4 (id=2992):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
exit(0x0)

1m4.383124475s ago: executing program 37 (id=2992):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
exit(0x0)

3.569640207s ago: executing program 7 (id=3610):
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001d000103000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00968d"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

3.452603078s ago: executing program 7 (id=3613):
syz_usb_connect(0x6, 0x36, 0x0, 0x0)
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)=0x9)

739.989091ms ago: executing program 8 (id=3626):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xfd}}, 0x14)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000003e00250304000000000000000a"], 0x14}, 0x1, 0x0, 0x0, 0x2000c001}, 0x80084)

689.942414ms ago: executing program 8 (id=3627):
r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x8)
ioctl$SIOCAX25GETINFOOLD(r0, 0x891b, 0x0)

689.407977ms ago: executing program 8 (id=3628):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@updsa={0x148, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x0, 0x5c}, {@in=@remote, 0x0, 0x33}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffd, 0x1900000000000000}, {}, 0x0, 0x0, 0xa, 0x2, 0x80}, [@algo_auth_trunc={0x4c, 0x14, {{'sm3\x00'}}}, @mark={0xc, 0x15, {0x350759, 0x9}}]}, 0x148}, 0x1, 0x0, 0x0, 0x20004001}, 0x0)

489.842721ms ago: executing program 8 (id=3631):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000001c0)=0x7, 0x4)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x6, 0x4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{0x6, 0x4, 0x8, 0xa}]}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10)

452.473767ms ago: executing program 8 (id=3633):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0, 0x0, <r2=>0x0}, 0x2020)
acct(&(0x7f00000005c0)='./file0/file0\x00')
write$FUSE_INIT(r0, &(0x7f00000002c0)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x5090880b, 0x0, 0x10, 0xd, 0x40, 0x0, 0x0, 0x2f, 0x1}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f0000008400)="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", 0x2000, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x80, {0x1fffffffffffffc, 0x2, 0x5, 0xfffffffffffffffe, 0xa003, 0x1ff, {0x8, 0x9, 0x6, 0x7d, 0x2, 0x3f45, 0xc05, 0x6, 0xd, 0x2000, 0x0, 0x0, r2, 0xe6f, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0})

400.234737ms ago: executing program 3 (id=3634):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0)
preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0xffe00}], 0x2, 0x0, 0x0, 0x0)

349.975755ms ago: executing program 7 (id=3635):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0)
r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
sendfile(r1, r0, 0x0, 0x7ffff000)

349.804012ms ago: executing program 3 (id=3636):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0xffff7ffc, 0x80000000, 0x0, 0xd20a, 0xd, "10120dfe0ef7f0200000ff490a0080002a00"})
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x4)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000080)=0xa)

249.668502ms ago: executing program 7 (id=3637):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha512)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4$alg(r0, 0x0, 0x0, 0x80800)
sendmsg(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000500)='/8', 0x2}], 0x1}, 0x1)

249.339492ms ago: executing program 3 (id=3638):
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x6, 0x1, 0x4, "d30580c9042b727d077bafe641000000dc6800000100", 0x50565559})

119.971682ms ago: executing program 7 (id=3639):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = dup(r0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e23, 0xdb, @empty}}, 0xffb, 0x203, 0xffff18b6, 0x6, 0x330, 0x80000001, 0xdb}, 0x9c)
sendmsg$inet6(r1, &(0x7f0000000540)={&(0x7f0000000000)={0xa, 0x4e24, 0x7fff, @loopback, 0x6}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000040)="f0", 0x1}], 0x1}, 0x54)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e24, 0x800, @loopback, 0x3}}, 0xe, 0x2b, 0xa4f, 0xc4, 0x28, 0xffffff85, 0xa9}, 0x9c)

119.706979ms ago: executing program 3 (id=3640):
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74)
sendmmsg$unix(r0, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000480)=[{0x0}, {&(0x7f0000001e00)="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", 0x201}], 0x2}}], 0x2, 0x4000000)

60.529071ms ago: executing program 8 (id=3641):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x800700, &(0x7f00000000c0)={[{@data_err_ignore}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@sysvgroups}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$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")

60.277504ms ago: executing program 7 (id=3642):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000080)={[{@errors_remount}, {@mblk_io_submit}, {@inlinecrypt}, {@test_dummy_encryption_v1}, {@barrier}, {@mblk_io_submit}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
fdatasync(r0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x200c8000)

322.99µs ago: executing program 3 (id=3643):
r0 = syz_io_uring_setup(0x238, &(0x7f00000003c0)={0x0, 0x20c26, 0x10100, 0x0, 0x2d0}, &(0x7f0000000180)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000640)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000840)={0xa082, 0x100, 0x8}, 0x0, 0x18, 0x0, 0x12345})
io_uring_enter(r0, 0x2ded, 0x4000, 0x0, 0x0, 0x0)

0s ago: executing program 3 (id=3644):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000800)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x30}}, 0x4004)

kernel console output (not intermixed with test programs):

bio+0x256/0x650
[  323.503662][  T178]  __submit_merged_write_cond+0x269/0x530
[  323.503683][  T178]  f2fs_write_data_pages+0x2806/0x3360
[  323.503725][  T178]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  323.503754][  T178]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  323.503790][  T178]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  323.503806][  T178]  ? __lock_acquire+0x6b5/0x2cf0
[  323.503828][  T178]  ? __lock_acquire+0x6b5/0x2cf0
[  323.503854][  T178]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  323.503872][  T178]  do_writepages+0x32e/0x550
[  323.503895][  T178]  ? reacquire_held_locks+0x104/0x190
[  323.503910][  T178]  ? writeback_sb_inodes+0x41f/0x1820
[  323.504016][  T178]  __writeback_single_inode+0x133/0x1230
[  323.504033][  T178]  ? do_raw_spin_unlock+0x4d/0x210
[  323.504053][  T178]  writeback_sb_inodes+0x92c/0x1820
[  323.504106][  T178]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  323.504121][  T178]  ? do_raw_spin_lock+0x12b/0x2f0
[  323.504166][  T178]  ? rcu_is_watching+0x15/0xb0
[  323.504189][  T178]  wb_writeback+0x445/0xad0
[  323.504206][  T178]  ? queue_io+0x221/0x450
[  323.504227][  T178]  ? __pfx_wb_writeback+0x10/0x10
[  323.504240][  T178]  ? do_raw_spin_lock+0x12b/0x2f0
[  323.504270][  T178]  wb_workfn+0x3f8/0xef0
[  323.504282][  T178]  ? __lock_acquire+0x6b5/0x2cf0
[  323.504292][  T178]  ? look_up_lock_class+0x57/0x110
[  323.504323][  T178]  ? __pfx_wb_workfn+0x10/0x10
[  323.504334][  T178]  ? finish_task_switch+0x161/0x920
[  323.504353][  T178]  ? do_raw_spin_lock+0x12b/0x2f0
[  323.504367][  T178]  ? lock_acquire+0x106/0x330
[  323.504380][  T178]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  323.504397][  T178]  ? process_scheduled_works+0xa0f/0x17a0
[  323.504412][  T178]  ? process_scheduled_works+0xa0f/0x17a0
[  323.504431][  T178]  ? process_scheduled_works+0xa0f/0x17a0
[  323.504445][  T178]  ? process_scheduled_works+0xa0f/0x17a0
[  323.504459][  T178]  process_scheduled_works+0xaec/0x17a0
[  323.504494][  T178]  ? __pfx_process_scheduled_works+0x10/0x10
[  323.504506][  T178]  ? do_raw_spin_lock+0x12b/0x2f0
[  323.504526][  T178]  ? assign_work+0x3d3/0x440
[  323.504543][  T178]  worker_thread+0x89f/0xd90
[  323.504575][  T178]  kthread+0x726/0x8b0
[  323.504593][  T178]  ? __pfx_worker_thread+0x10/0x10
[  323.504607][  T178]  ? __pfx_kthread+0x10/0x10
[  323.504626][  T178]  ? _raw_spin_unlock_irq+0x23/0x50
[  323.504644][  T178]  ? __pfx_kthread+0x10/0x10
[  323.504660][  T178]  ret_from_fork+0x51b/0xa40
[  323.504676][  T178]  ? __pfx_ret_from_fork+0x10/0x10
[  323.504686][  T178]  ? __switch_to+0xc82/0x1410
[  323.504706][  T178]  ? __pfx_kthread+0x10/0x10
[  323.504722][  T178]  ret_from_fork_asm+0x1a/0x30
[  323.504748][  T178]  </TASK>
[  323.505600][  T178] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  323.748969][T13095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  323.754483][T13095] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  323.917417][T13098] loop3: detected capacity change from 0 to 32768
[  323.928162][T13098] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2713 (13098)
[  323.961105][T13098] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  323.967415][T13098] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  324.001942][T13098] BTRFS info (device loop3): enabling ssd optimizations
[  324.004441][T13098] BTRFS info (device loop3): turning on async discard
[  324.006587][T13098] BTRFS info (device loop3): enabling free space tree
[  324.049896][ T7532] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  324.251069][T13126] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  324.499282][ T5904] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[  324.556790][T13137] loop6: detected capacity change from 0 to 256
[  324.560572][T13137] exfat: Deprecated parameter 'namecase'
[  324.568005][T13137] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d)
[  324.633515][T13141] netlink: 80 bytes leftover after parsing attributes in process `syz.6.2726'.
[  324.651269][ T5904] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  324.656421][ T5904] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  324.661118][ T5904] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  324.665101][ T5904] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  324.672074][ T5904] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  324.679698][ T5904] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  324.689616][ T5904] usb 4-1: config 0 descriptor??
[  325.109725][ T5904] plantronics 0003:047F:FFFF.0024: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  325.205698][T13160] loop6: detected capacity change from 0 to 128
[  325.355160][T13173] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  325.377400][ T5904] usb 4-1: USB disconnect, device number 49
[  325.889233][ T5881] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[  326.032245][T13196] loop3: detected capacity change from 0 to 4096
[  326.035988][T13196] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512).
[  326.047309][T13196] ntfs3(loop3): ino=3, mi_enum_attr
[  326.059237][ T5881] usb 5-1: Using ep0 maxpacket: 8
[  326.067091][ T5881] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  326.077485][ T5881] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  326.088785][ T5881] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  326.096843][ T5881] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  326.101551][ T5881] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  326.104757][ T5881] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  326.313177][ T5881] usb 5-1: GET_CAPABILITIES returned 0
[  326.315428][ T5881] usbtmc 5-1:16.0: can't read capabilities
[  326.437837][T13200] loop3: detected capacity change from 0 to 1764
[  326.445581][T13200] iso9660: Unknown parameter 'de'
[  326.657999][ T5881] usb 5-1: USB disconnect, device number 42
[  326.756631][T13205] loop6: detected capacity change from 0 to 128
[  326.790369][T13205] hpfs: Unknown parameter 'id_'
[  326.918129][T13209] loop6: detected capacity change from 0 to 4096
[  326.922429][T13209] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512).
[  326.953107][   T34] kauditd_printk_skb: 1 callbacks suppressed
[  326.953118][   T34] audit: type=1800 audit(1769820497.156:107): pid=13209 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2757" name="file1" dev="loop6" ino=33 res=0 errno=0
[  327.336885][T13227] usb usb1: usbfs: interface 0 claimed by hub while 'syz.6.2766' sets config #2147483646
[  327.497214][T13236] trusted_key: encrypted_key: insufficient parameters specified
[  328.925068][T13251] can0: slcan on ttyS3.
[  328.992399][T13250] can0 (unregistered): slcan off ttyS3.
[  329.188424][T13271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  329.192828][T13271] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  329.559151][ T5902] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[  329.719174][ T5902] usb 5-1: Using ep0 maxpacket: 8
[  329.726130][ T5902] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  329.736494][ T5902] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  329.744197][ T5902] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  329.748037][ T5902] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  329.753872][ T5902] usb 5-1: config 0 descriptor??
[  329.765405][T13281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  329.770421][T13281] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  329.912698][T13283] loop3: detected capacity change from 0 to 16
[  329.934327][T13283] erofs (device loop3): unsupported chunk format ffff of nid 36
[  329.980205][ T5902] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  330.030921][T13285] loop3: detected capacity change from 0 to 2048
[  330.055412][T13285] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  330.082591][ T7532] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  330.163309][T13290] loop3: detected capacity change from 0 to 8192
[  330.177077][T13279] iowarrior 5-1:0.0: Error -90 while submitting URB
[  330.181921][  T848] usb 5-1: USB disconnect, device number 43
[  330.200842][ T5836]  loop3: p1 < > p2 < > p3 p4 < >
[  330.202703][ T5836] loop3: partition table partially beyond EOD, truncated
[  330.205590][ T5836] loop3: p1 start 67108864 is beyond EOD, truncated
[  330.208813][ T5836] loop3: p3 start 100859904 is beyond EOD, truncated
[  330.221374][T13290]  loop3: p1 < > p2 < > p3 p4 < >
[  330.223017][T13290] loop3: partition table partially beyond EOD, truncated
[  330.225799][T13290] loop3: p1 start 67108864 is beyond EOD, truncated
[  330.231245][T13290] loop3: p3 start 100859904 is beyond EOD, truncated
[  330.284457][ T5836] udevd[5836]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[  330.290839][ T5845] udevd[5845]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  330.336142][ T5845] udevd[5845]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  330.341941][ T5836] udevd[5836]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[  330.351762][T13296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  330.363744][T13296] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  330.606482][T13302] delete_channel: no stack
[  330.640571][T13302] loop3: detected capacity change from 0 to 1024
[  330.646072][T13302] EXT4-fs: mb_optimize_scan should be set to 0 or 1.
[  331.809748][T13340] loop6: detected capacity change from 0 to 40427
[  331.812410][T13340] F2FS-fs: heap/no_heap options were deprecated
[  331.820832][T13340] F2FS-fs (loop6): build fault injection rate: 19
[  331.823607][T13340] F2FS-fs (loop6): build fault injection type: 0x3bfe8c
[  331.827239][T13340] F2FS-fs (loop6): invalid crc value
[  331.836202][T13340] F2FS-fs (loop6): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x659/0xa00
[  331.868557][T13340] F2FS-fs (loop6): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x221/0x410
[  331.874715][T13340] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  331.878107][T13340] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  331.884806][T13340] F2FS-fs (loop6): inject no more block in inc_valid_node_count of f2fs_new_node_folio+0x18b/0xa40
[  331.892086][T13340] F2FS-fs (loop6): inject inconsistent footer in sanity_check_node_footer of f2fs_write_begin+0xb91/0x26b0
[  331.897808][T13340] F2FS-fs (loop6): inconsistent node block, node_type:1, nid:14, node_footer[nid:14,ino:14,ofs:0,cpver:0,blkaddr:0]
[  332.223155][T13348] netlink: 'syz.3.2822': attribute type 3 has an invalid length.
[  332.225675][T13348] netlink: 'syz.3.2822': attribute type 3 has an invalid length.
[  332.539226][  T848] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[  332.578852][T13364] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  332.689266][  T848] usb 4-1: Using ep0 maxpacket: 32
[  332.695295][  T848] usb 4-1: config 32 has an invalid interface number: 85 but max is 0
[  332.698635][  T848] usb 4-1: config 32 has no interface number 0
[  332.721486][  T848] usb 4-1: config 32 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  332.725963][  T848] usb 4-1: config 32 interface 85 has no altsetting 0
[  332.747856][  T848] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  332.751757][  T848] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  332.754792][  T848] usb 4-1: Product: syz
[  332.769256][  T848] usb 4-1: Manufacturer: syz
[  332.771544][  T848] usb 4-1: SerialNumber: syz
[  333.543806][  T848] appletouch 4-1:32.85: Geyser mode initialized.
[  333.546819][  T848] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:32.85/input/input31
[  333.554575][    C1] appletouch 4-1:32.85: appletouch: OVERFLOW with data length 64, actual length is 64
[  333.756357][ T5904] usb 4-1: USB disconnect, device number 50
[  333.766496][ T5904] appletouch 4-1:32.85: input: appletouch disconnected
[  334.421269][T13429] loop3: detected capacity change from 0 to 128
[  334.441324][T13429] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  334.456121][T13429] hpfs: filesystem error: improperly stopped
[  334.458538][T13429] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  334.466960][T13429] hpfs: You really don't want any checks? You are crazy...
[  334.475305][T13429] hpfs: hpfs_map_sector(): read error
[  334.477143][T13429] hpfs: code page support is disabled
[  334.487407][T13429] hpfs: hpfs_map_4sectors(): unaligned read
[  334.489958][T13429] hpfs: hpfs_map_4sectors(): unaligned read
[  334.492254][T13429] hpfs: filesystem error: unable to find root dir
[  334.873135][T13435] loop3: detected capacity change from 0 to 32768
[  334.880620][T13435] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2863 (13435)
[  335.109255][ T5843] Bluetooth: hci0: Opcode 0x206a failed: -110
[  335.119343][ T5843] Bluetooth: hci0: command 0x0405 tx timeout
[  335.765268][T13435] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  335.801057][T13435] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm
[  336.053785][T13435] BTRFS info (device loop3): enabling ssd optimizations
[  336.056622][T13435] BTRFS info (device loop3): turning on flush-on-commit
[  336.071025][T13435] BTRFS info (device loop3): enabling free space tree
[  336.073640][T13435] BTRFS info (device loop3): enabling auto defrag
[  336.076718][T13435] BTRFS info (device loop3): use lzo compression, level 1
[  336.086932][T13435] BTRFS info (device loop3): max_inline set to 4096
[  336.271341][ T7532] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  337.779259][ T5300] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[  337.868860][T13465] loop3: detected capacity change from 0 to 262144
[  337.872014][T13465] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2869 (13465)
[  337.877377][T13465] BTRFS info (device loop3): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[  337.880635][T13465] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm
[  337.933592][ T5300] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  337.937432][ T5300] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  337.943909][T13465] BTRFS info (device loop3): setting nodatasum
[  337.946065][T13465] BTRFS info (device loop3): enabling free space tree
[  337.952402][ T5300] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  337.969147][ T5300] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  337.971632][ T5300] usb 5-1: SerialNumber: syz
[  338.004415][T13465] BTRFS info (device loop3): balance: start -m -s
[  338.014402][T13465] BTRFS info (device loop3): relocating block group 30408704 flags metadata|dup
[  338.049325][T13465] BTRFS info (device loop3): found 3 extents, stage: move data extents
[  338.068163][T13465] BTRFS info (device loop3): relocating block group 22020096 flags system|dup
[  338.084624][T13465] BTRFS info (device loop3): found 1 extents, stage: move data extents
[  338.097481][T13465] BTRFS info (device loop3): balance: ended with status: 0
[  338.185706][ T5300] usb 5-1: 0:2 : does not exist
[  338.219279][ T5300] usb 5-1: USB disconnect, device number 44
[  338.226834][ T7532] BTRFS info (device loop3): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[  338.284592][ T5845] udevd[5845]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  338.433381][T13496] loop3: detected capacity change from 0 to 256
[  338.436329][T13496] exfat: Deprecated parameter 'utf8'
[  338.469018][T13496] exfat: Deprecated parameter 'namecase'
[  338.482719][T13496] exFAT-fs (loop3): error, The cluster chain has a loop
[  338.484905][T13496] exFAT-fs (loop3): Filesystem has been set read-only
[  338.486971][T13496] exFAT-fs (loop3): failed to count the number of clusters in root
[  338.525059][T13496] exFAT-fs (loop3): failed to recognize exfat type
[  339.376783][T13514] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2881'.
[  339.938963][   T34] audit: type=1326 audit(1769820510.136:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13526 comm="syz.3.2886" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8b5fd9acb9 code=0x0
[  340.779246][ T5976] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[  340.929189][ T5976] usb 5-1: Using ep0 maxpacket: 8
[  340.932623][ T5976] usb 5-1: config 15 has an invalid interface number: 18 but max is 2
[  340.935370][ T5976] usb 5-1: config 15 has an invalid descriptor of length 0, skipping remainder of the config
[  340.945443][ T5976] usb 5-1: config 15 has 1 interface, different from the descriptor's value: 3
[  340.948724][ T5976] usb 5-1: config 15 has no interface number 0
[  340.965231][ T5976] usb 5-1: config 15 interface 18 altsetting 71 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[  340.970487][ T5976] usb 5-1: config 15 interface 18 has no altsetting 0
[  340.975173][ T5976] usb 5-1: New USB device found, idVendor=0421, idProduct=046e, bcdDevice=4c.16
[  340.978429][ T5976] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  340.984195][ T5976] usb 5-1: Product: syz
[  340.985602][ T5976] usb 5-1: Manufacturer: syz
[  340.987116][ T5976] usb 5-1: SerialNumber: syz
[  341.094890][T13549] loop3: detected capacity change from 0 to 256
[  341.099628][T13549] exfat: Deprecated parameter 'namecase'
[  341.101754][T13549] exfat: Deprecated parameter 'utf8'
[  341.115633][T13549] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  341.222825][ T5976] usb 5-1: bad CDC descriptors
[  341.241830][ T5976] usb 5-1: USB disconnect, device number 45
[  341.401186][T13559] loop3: detected capacity change from 0 to 128
[  341.437364][T13559] ADFS-fs (loop3): error: can't find an ADFS filesystem on dev loop3.
[  342.140788][T13583] loop3: detected capacity change from 0 to 4096
[  342.337795][T13595] CIFS mount error: No usable UNC path provided in device string!
[  342.337795][T13595] 
[  342.342489][T13595] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  342.588750][T13599] loop3: detected capacity change from 0 to 32768
[  342.629266][ T5903] usb 5-1: new full-speed USB device number 46 using dummy_hcd
[  342.646696][T13599] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  342.671625][T13599] XFS (loop3): Ending clean mount
[  342.676338][T13599] XFS (loop3): Quotacheck needed: Please wait.
[  342.718795][T13599] XFS (loop3): Quotacheck: Done.
[  342.740601][ T7532] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  342.797407][ T5903] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  342.821786][ T5903] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  342.825079][ T5903] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  342.827745][ T5903] usb 5-1: Product: syz
[  342.839637][ T5903] usb 5-1: Manufacturer: syz
[  342.849542][ T5903] usb 5-1: SerialNumber: syz
[  342.853065][ T5903] usb 5-1: config 0 descriptor??
[  343.161887][ T5903] usb 5-1: USB disconnect, device number 46
[  344.872092][ T5843] Bluetooth: hci0: command 0x0405 tx timeout
[  345.186482][T13639] loop3: detected capacity change from 0 to 4096
[  345.205379][T13639] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512).
[  345.734448][T13647] loop3: detected capacity change from 0 to 32768
[  345.774892][T13647] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  345.798385][T13647] XFS (loop3): Ending clean mount
[  345.811811][T13647] XFS (loop3): Quotacheck needed: Please wait.
[  345.862832][T13647] XFS (loop3): Quotacheck: Done.
[  345.915625][ T7532] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  346.732288][T13683] loop3: detected capacity change from 0 to 40427
[  346.745267][T13683] F2FS-fs (loop3): Invalid log blocks per segment (4278190089)
[  346.748401][T13683] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  346.754467][T13683] F2FS-fs (loop3): invalid crc value
[  346.831563][T13683] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  346.836530][T13683] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  346.840363][T13683] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  346.868536][T13683] F2FS-fs (loop3): Corrupted max_depth of 3: 255
[  346.880303][T13683] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  347.208402][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  347.215416][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  347.219738][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  347.223481][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  347.226889][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  347.463649][T13699] chnl_net:caif_netlink_parms(): no params data found
[  347.579497][    T9] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[  347.632301][T13699] bridge0: port 1(bridge_slave_0) entered blocking state
[  347.639749][T13699] bridge0: port 1(bridge_slave_0) entered disabled state
[  347.643137][T13699] bridge_slave_0: entered allmulticast mode
[  347.656020][T13699] bridge_slave_0: entered promiscuous mode
[  347.667337][T13699] bridge0: port 2(bridge_slave_1) entered blocking state
[  347.675875][T13699] bridge0: port 2(bridge_slave_1) entered disabled state
[  347.682661][T13699] bridge_slave_1: entered allmulticast mode
[  347.692928][T13699] bridge_slave_1: entered promiscuous mode
[  347.734416][    T9] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e
[  347.738005][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  347.756556][    T9] usb 4-1: config 0 descriptor??
[  347.786547][T13699] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  347.805438][T13699] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  347.898854][T13699] team0: Port device team_slave_0 added
[  347.906936][T13699] team0: Port device team_slave_1 added
[  347.967441][T13699] batman_adv: batadv0: Adding interface: batadv_slave_0
[  347.970148][T13699] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  347.980933][T13699] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  347.987418][T13699] batman_adv: batadv0: Adding interface: batadv_slave_1
[  347.991039][T13699] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  347.999005][T13699] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  348.048507][T13699] hsr_slave_0: entered promiscuous mode
[  348.054187][T13699] hsr_slave_1: entered promiscuous mode
[  348.056810][T13699] debugfs: 'hsr0' already exists in 'hsr'
[  348.058646][T13699] Cannot create hsr debugfs directory
[  348.166766][    T9] ath6kl: Failed to read usb control message: -71
[  348.170346][    T9] ath6kl: Unable to read the bmi data from the device: -71
[  348.173285][    T9] ath6kl: Unable to recv target info: -71
[  348.177581][    T9] ath6kl: Failed to init ath6kl core: -71
[  348.187005][    T9] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71
[  348.202688][    T9] usb 4-1: USB disconnect, device number 51
[  348.346298][T13699] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  348.354994][T13699] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  348.360440][T13699] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  348.366427][T13699] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  348.397031][T13699] bridge0: port 2(bridge_slave_1) entered blocking state
[  348.399418][T13699] bridge0: port 2(bridge_slave_1) entered forwarding state
[  348.402280][T13699] bridge0: port 1(bridge_slave_0) entered blocking state
[  348.404560][T13699] bridge0: port 1(bridge_slave_0) entered forwarding state
[  348.445241][T13699] 8021q: adding VLAN 0 to HW filter on device bond0
[  348.453312][ T1009] bridge0: port 1(bridge_slave_0) entered disabled state
[  348.471714][ T1009] bridge0: port 2(bridge_slave_1) entered disabled state
[  348.497055][T13699] 8021q: adding VLAN 0 to HW filter on device team0
[  348.513369][ T1009] bridge0: port 1(bridge_slave_0) entered blocking state
[  348.516341][ T1009] bridge0: port 1(bridge_slave_0) entered forwarding state
[  348.532754][ T1009] bridge0: port 2(bridge_slave_1) entered blocking state
[  348.535781][ T1009] bridge0: port 2(bridge_slave_1) entered forwarding state
[  348.707684][T13699] 8021q: adding VLAN 0 to HW filter on device batadv0
[  348.954821][T13699] veth0_vlan: entered promiscuous mode
[  348.967708][T13699] veth1_vlan: entered promiscuous mode
[  349.001140][T13699] veth0_macvtap: entered promiscuous mode
[  349.007497][T13699] veth1_macvtap: entered promiscuous mode
[  349.017566][T13699] batman_adv: batadv0: Interface activated: batadv_slave_0
[  349.027371][T13699] batman_adv: batadv0: Interface activated: batadv_slave_1
[  349.038487][ T5852] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  349.047175][ T5852] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  349.062619][ T5852] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  349.065368][ T5852] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  349.129578][T11939] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  349.132100][T11939] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  349.155657][ T1009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  349.158422][ T1009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  349.169197][    T9] usb 4-1: new high-speed USB device number 52 using dummy_hcd
[  349.270888][   T56] Bluetooth: hci3: command tx timeout
[  349.319360][    T9] usb 4-1: Using ep0 maxpacket: 16
[  349.323133][    T9] usb 4-1: config 5 has an invalid interface number: 168 but max is 0
[  349.325769][    T9] usb 4-1: config 5 has no interface number 0
[  349.327961][    T9] usb 4-1: config 5 interface 168 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B
[  349.339268][    T9] usb 4-1: config 5 interface 168 altsetting 7 bulk endpoint 0x8B has invalid maxpacket 1024
[  349.350431][    T9] usb 4-1: config 5 interface 168 altsetting 7 has an endpoint descriptor with address 0x23, changing to 0x3
[  349.360544][    T9] usb 4-1: config 5 interface 168 altsetting 7 endpoint 0x3 has invalid wMaxPacketSize 0
[  349.364502][    T9] usb 4-1: config 5 interface 168 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 0
[  349.378763][    T9] usb 4-1: config 5 interface 168 has no altsetting 0
[  349.390783][    T9] usb 4-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=fc.58
[  349.394339][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  349.397430][    T9] usb 4-1: Product: syz
[  349.409446][    T9] usb 4-1: Manufacturer: syz
[  349.411034][    T9] usb 4-1: SerialNumber: syz
[  349.422355][T13752] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  349.550429][ T5902] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  349.634529][    T9] usb 4-1: NFC: Unable to get FW version
[  349.640242][    T9] pn533_usb 4-1:5.168: probe with driver pn533_usb failed with error -90
[  349.661358][    T9] usb 4-1: USB disconnect, device number 52
[  349.711023][ T5902] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  349.714405][ T5902] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[  349.720451][ T5902] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  349.723431][ T5902] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  349.725966][ T5902] usb 8-1: SerialNumber: syz
[  350.171036][ T5902] usb 8-1: 0:2 : does not exist
[  350.196995][ T5902] usb 8-1: USB disconnect, device number 2
[  350.222780][T13776] sg_read: process 1602 (syz.3.2980) changed security contexts after opening file descriptor, this is not allowed.
[  350.236406][ T5836] udevd[5836]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  350.286570][T13778] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2981'.
[  350.430675][ T5852] nci: nci_rx_work: unknown MT 0x6
[  350.905078][T13792] PKCS7: Unknown OID: [4] (bad)
[  350.907110][T13792] PKCS7: Only support pkcs7_signedData type
[  351.115568][ T9863] syz_tun (unregistering): left promiscuous mode
[  351.349258][   T56] Bluetooth: hci3: command tx timeout
[  351.439331][    T9] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  351.491034][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  351.496316][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  351.500299][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  351.509356][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  351.513950][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  351.599188][    T9] usb 8-1: Using ep0 maxpacket: 32
[  351.603004][    T9] usb 8-1: config 2 has an invalid interface number: 15 but max is 0
[  351.605449][    T9] usb 8-1: config 2 has 2 interfaces, different from the descriptor's value: 1
[  351.609131][    T9] usb 8-1: config 2 has no interface number 1
[  351.611058][    T9] usb 8-1: config 2 interface 15 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  351.627516][    T9] usb 8-1: New USB device found, idVendor=0471, idProduct=0307, bcdDevice=94.69
[  351.630662][    T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  351.633224][    T9] usb 8-1: Product: syz
[  351.634675][    T9] usb 8-1: Manufacturer: syz
[  351.646940][    T9] usb 8-1: SerialNumber: syz
[  351.657145][    T9] pwc: Philips PCVC675K (Vesta) USB webcam detected.
[  351.736052][T13806] chnl_net:caif_netlink_parms(): no params data found
[  351.795615][T13806] bridge0: port 1(bridge_slave_0) entered blocking state
[  351.798075][T13806] bridge0: port 1(bridge_slave_0) entered disabled state
[  351.801175][T13806] bridge_slave_0: entered allmulticast mode
[  351.804024][T13806] bridge_slave_0: entered promiscuous mode
[  351.807593][T13806] bridge0: port 2(bridge_slave_1) entered blocking state
[  351.810691][T13806] bridge0: port 2(bridge_slave_1) entered disabled state
[  351.812305][T13805] loop3: detected capacity change from 0 to 32768
[  351.813255][T13806] bridge_slave_1: entered allmulticast mode
[  351.820852][T13806] bridge_slave_1: entered promiscuous mode
[  351.851769][T13805] jfs_mount: Failed to read AGGREGATE_I
[  351.854719][T13806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  351.859580][T13805] Mount JFS Failure: -5
[  351.868054][    T9] pwc: send_video_command error -71
[  351.872544][    T9] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  351.875698][    T9] Philips webcam 8-1:2.0: probe with driver Philips webcam failed with error -71
[  351.890463][    T9] usb 8-1: USB disconnect, device number 3
[  351.893947][T13806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  351.962218][T13806] team0: Port device team_slave_0 added
[  351.970085][T13806] team0: Port device team_slave_1 added
[  352.015454][T13806] batman_adv: batadv0: Adding interface: batadv_slave_0
[  352.017791][T13806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  352.039163][T13806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  352.048422][T13806] batman_adv: batadv0: Adding interface: batadv_slave_1
[  352.057257][T13806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  352.076955][T13806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  352.232551][T13823] loop3: detected capacity change from 0 to 512
[  352.237300][T13806] hsr_slave_0: entered promiscuous mode
[  352.242060][T13823] EXT4-fs: Ignoring removed oldalloc option
[  352.256476][T13806] hsr_slave_1: entered promiscuous mode
[  352.259789][T13806] debugfs: 'hsr0' already exists in 'hsr'
[  352.266256][T13806] Cannot create hsr debugfs directory
[  352.294474][T13823] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  352.309796][T13823] ext4 filesystem being mounted at /736/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  352.339549][T13823] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2999: bg 0: block 217: padding at end of block bitmap is not set
[  352.368699][T13823] EXT4-fs (loop3): Remounting filesystem read-only
[  352.420618][ T7532] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  352.458044][ T1120] Quota error (device loop3): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync!
[  352.464737][ T1120] Quota error (device loop3): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync!
[  352.546700][T13830] netlink: 168 bytes leftover after parsing attributes in process `syz.7.3001'.
[  352.623344][T13806] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  352.643087][T13806] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  352.653368][T13806] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  352.668941][T13806] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  352.759442][ T7589] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[  352.776219][T13806] 8021q: adding VLAN 0 to HW filter on device bond0
[  352.789620][T13840] loop7: detected capacity change from 0 to 128
[  352.817387][T13806] 8021q: adding VLAN 0 to HW filter on device team0
[  352.827265][T11939] bridge0: port 1(bridge_slave_0) entered blocking state
[  352.830135][T11939] bridge0: port 1(bridge_slave_0) entered forwarding state
[  352.846249][T11939] bridge0: port 2(bridge_slave_1) entered blocking state
[  352.849149][T11939] bridge0: port 2(bridge_slave_1) entered forwarding state
[  352.868005][   T34] audit: type=1800 audit(1769820523.066:109): pid=13840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3003" name="file1" dev="loop7" ino=1048684 res=0 errno=0
[  352.909231][ T7589] usb 4-1: Using ep0 maxpacket: 32
[  352.914358][ T7589] usb 4-1: config 0 has an invalid interface number: 96 but max is 0
[  352.917569][ T7589] usb 4-1: config 0 has no interface number 0
[  352.930386][ T7589] usb 4-1: config 0 interface 96 has no altsetting 0
[  352.935771][ T7589] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=b2.44
[  352.939904][ T7589] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  352.942981][ T7589] usb 4-1: Product: syz
[  352.944780][ T7589] usb 4-1: Manufacturer: syz
[  352.946520][ T7589] usb 4-1: SerialNumber: syz
[  352.957536][ T7589] usb 4-1: config 0 descriptor??
[  352.967691][ T7589] legousbtower 4-1:0.96: interrupt endpoints not found
[  353.091225][T13846] loop7: detected capacity change from 0 to 8
[  353.125976][T13806] 8021q: adding VLAN 0 to HW filter on device batadv0
[  353.276945][ T5902] usb 4-1: USB disconnect, device number 53
[  353.421910][T13806] veth0_vlan: entered promiscuous mode
[  353.429918][   T56] Bluetooth: hci3: command tx timeout
[  353.438200][T13806] veth1_vlan: entered promiscuous mode
[  353.490625][T13806] veth0_macvtap: entered promiscuous mode
[  353.503349][T13806] veth1_macvtap: entered promiscuous mode
[  353.533992][T13806] batman_adv: batadv0: Interface activated: batadv_slave_0
[  353.541087][T13806] batman_adv: batadv0: Interface activated: batadv_slave_1
[  353.567088][ T5852] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  353.573371][ T5852] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  353.576638][ T5852] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  353.589274][   T56] Bluetooth: hci0: command tx timeout
[  353.595077][ T5852] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  353.702763][T13850] loop7: detected capacity change from 0 to 40427
[  353.703125][T11939] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  353.718468][T11939] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  353.745963][T13850] F2FS-fs (loop7): invalid crc value
[  353.754921][ T1120] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  353.757986][ T1120] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  353.868608][T13850] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  353.894236][T13850] F2FS-fs (loop7): Start checkpoint disabled!
[  353.919769][T13850] F2FS-fs (loop7): f2fs_disable_checkpoint() finish, err:0
[  353.930270][T13850] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6
[  354.151041][T13864] loop8: detected capacity change from 0 to 16
[  354.198913][T13864] erofs (device loop8): mounted with root inode @ nid 36.
[  354.231760][T13864] erofs (device loop8): failed to decompress (lz4) -117 @ pa 4096 size 4096 => 2639
[  354.240994][T13864] erofs (device loop8): read error -117 @ 39 of nid 36
[  354.795203][ T5300] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[  354.973713][T13877] loop7: detected capacity change from 0 to 512
[  354.978176][T13877] EXT4-fs: Ignoring removed i_version option
[  355.056536][T13877] EXT4-fs (loop7): orphan cleanup on readonly fs
[  355.060536][T13877] EXT4-fs warning (device loop7): ext4_xattr_inode_get:560: inode #11: comm syz.7.3009: EA inode hash validation failed
[  355.064996][T13877] EXT4-fs warning (device loop7): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  355.069339][T13877] EXT4-fs error (device loop7): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.7.3009: EA inode 11 ref wraparound: ref_count=0 ref_change=-1
[  355.077784][T13877] EXT4-fs (loop7): Remounting filesystem read-only
[  355.080540][T13877] EXT4-fs warning (device loop7): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.7.3009: ea_inode dec ref err=-117
[  355.084531][T13877] EXT4-fs warning (device loop7): ext4_evict_inode:273: xattr delete (err -30)
[  355.087224][T13877] EXT4-fs (loop7): 1 orphan inode deleted
[  355.089753][T13877] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  355.121570][ T5300] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  355.125958][ T5300] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  355.135095][ T5300] usb 4-1: config 0 descriptor??
[  355.145143][ T5300] cp210x 4-1:0.0: cp210x converter detected
[  355.227478][ T5902] IPVS: starting estimator thread 0...
[  355.308300][T13883] loop8: detected capacity change from 0 to 128
[  355.351027][T13881] IPVS: using max 84 ests per chain, 201600 per kthread
[  355.574522][   T56] Bluetooth: hci3: command tx timeout
[  355.609962][ T5300] usb 4-1: cp210x converter now attached to ttyUSB0
[  355.621417][ T5300] usb 4-1: USB disconnect, device number 54
[  355.624858][ T5300] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  355.627496][ T5300] cp210x 4-1:0.0: device disconnected
[  355.656140][T13699] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  355.677169][   T56] Bluetooth: hci0: command tx timeout
[  355.817079][T13896] binder: 13895:13896 ioctl c0306201 200000000480 returned -14
[  356.636903][T13930] syzkaller0: entered promiscuous mode
[  356.647529][T13930] syzkaller0: entered allmulticast mode
[  356.825439][T13937] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3037'.
[  357.654702][T13950] loop3: detected capacity change from 0 to 256
[  357.750281][   T56] Bluetooth: hci0: command tx timeout
[  358.204512][T13966] sock: sock_timestamping_bind_phc: sock not bind to device
[  358.343477][ T5300] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0
[  358.366228][ T5300] hid-generic 0000:0000:0000.0025: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  358.382788][    T9] IPVS: starting estimator thread 0...
[  358.479227][T13975] IPVS: using max 83 ests per chain, 199200 per kthread
[  358.599205][ T5300] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  358.652523][T13988] netlink: 'syz.3.3061': attribute type 1 has an invalid length.
[  358.655773][T13988] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3061'.
[  358.761142][ T5300] usb 9-1: config 0 has no interfaces?
[  358.774315][ T5300] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  358.777181][ T5300] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  358.794521][ T5300] usb 9-1: SerialNumber: syz
[  358.799690][ T5300] usb 9-1: config 0 descriptor??
[  358.953883][T14000] loop7: detected capacity change from 0 to 2048
[  359.021473][T14000] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  359.035783][T14000] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  359.055157][T14000] EXT4-fs error (device loop7): ext4_ext_check_inode:523: inode #16: comm syz.7.3066: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0)
[  359.088474][T13699] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  359.719948][T14025] loop3: detected capacity change from 0 to 40427
[  359.728983][T14025] F2FS-fs (loop3): Image doesn't support compression
[  359.737154][T14025] F2FS-fs (loop3): build fault injection rate: 16
[  359.742751][T14025] F2FS-fs (loop3): build fault injection type: 0x2
[  359.745972][T14025] F2FS-fs (loop3): invalid crc value
[  359.748928][T14025] F2FS-fs (loop3): inject kvmalloc in f2fs_kvmalloc of f2fs_build_segment_manager+0x324a/0x4a10
[  359.754088][T14025] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-12)
[  359.940669][T14034] loop3: detected capacity change from 0 to 1024
[  359.945069][T14034] EXT4-fs: Ignoring removed orlov option
[  359.975882][T14034] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  360.001574][T14034] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  360.042565][ T7532] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  360.179333][T14042] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3083'.
[  360.244408][T14044] bridge1: port 1(veth0_to_bond) entered blocking state
[  360.247372][T14044] bridge1: port 1(veth0_to_bond) entered disabled state
[  360.261338][T14044] veth0_to_bond: entered allmulticast mode
[  360.271642][T14044] veth0_to_bond: entered promiscuous mode
[  360.394039][T14053] netlink: 268 bytes leftover after parsing attributes in process `syz.7.3088'.
[  360.788527][T14064] loop7: detected capacity change from 0 to 32768
[  360.796137][T14064] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.3093 (14064)
[  360.822643][T14064] BTRFS info (device loop7 state S): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  360.827324][T14064] BTRFS info (device loop7 state S): using crc32c (crc32c-lib) checksum algorithm
[  360.889468][ T5881] usb 4-1: new full-speed USB device number 55 using dummy_hcd
[  360.973006][   T89] BTRFS warning (device loop7 state S): checksum verify failed on logical 1052672 mirror 1 wanted 0x37e030f7 found 0xf6479a7e level 0, ignored
[  360.992910][ T1009] BTRFS warning (device loop7 state S): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0x13388982 level 0, ignored
[  360.998196][ T1202] BTRFS warning (device loop7 state S): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0x28b693f7 level 0, ignored
[  361.010563][T14064] BTRFS error (device loop7 state S): failed to load root free space
[  361.022740][ T2185] BTRFS warning (device loop7 state S): checksum verify failed on logical 5267456 mirror 1 wanted 0x22fa3277 found 0x0d9b21b0 level 0, ignored
[  361.028671][T14064] BTRFS info (device loop7 state S): enabling ssd optimizations
[  361.033301][T14064] BTRFS info (device loop7 state S): enabling free space tree
[  361.036292][T14064] BTRFS info (device loop7 state S): ignoring bad roots
[  361.039934][T14064] BTRFS info (device loop7 state S): ignoring meta csums
[  361.040504][ T5881] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  361.042892][T14064] BTRFS info (device loop7 state S): force zlib compression, level 3
[  361.049487][ T5881] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  361.058287][ T5881] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  361.069176][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  361.071696][ T5881] usb 4-1: Product: syz
[  361.072973][ T5881] usb 4-1: Manufacturer: syz
[  361.074707][ T5881] usb 4-1: SerialNumber: syz
[  361.124611][T13699] BTRFS info (device loop7 state S): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  361.353590][T14083] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3095'.
[  361.360750][T14083] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3095'.
[  361.372372][ T5904] usb 9-1: USB disconnect, device number 2
[  361.496434][ T5881] usb 4-1: 0:2 : does not exist
[  361.524627][T14087] loop7: detected capacity change from 0 to 4096
[  361.531337][T14087] ntfs3(loop7): Different NTFS sector size (1024) and media sector size (512).
[  361.554193][T14087] ntfs3(loop7): ino=1a, mi_enum_attr
[  361.556252][T14087] ntfs3(loop7): Mark volume as dirty due to NTFS errors
[  361.601143][T14087] ntfs3(loop7): ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" ntfs_sync_inode failed, -22.
[  361.926679][ T5881] usb 4-1: USB disconnect, device number 55
[  362.160671][T14110] loop7: detected capacity change from 0 to 512
[  362.167926][T14110] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  362.191436][T14110] EXT4-fs (loop7): 1 truncate cleaned up
[  362.194938][T14110] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  362.287929][T13699] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  362.364914][T14114] loop7: detected capacity change from 0 to 4096
[  362.396996][T14115] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  362.414029][   T34] audit: type=1800 audit(1769820532.616:110): pid=14114 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3109" name="bus" dev="loop7" ino=18 res=0 errno=0
[  362.667311][T14122] loop8: detected capacity change from 0 to 512
[  362.742965][T14122] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  362.787661][   T34] audit: type=1800 audit(1769820532.986:111): pid=14122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3112" name="file2" dev="loop8" ino=16 res=0 errno=0
[  362.986718][T13806] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  363.189485][ T5976] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  363.351208][ T5976] usb 8-1: config 2 has an invalid interface number: 174 but max is 0
[  363.354724][ T5976] usb 8-1: config 2 has no interface number 0
[  363.357247][ T5976] usb 8-1: config 2 interface 174 altsetting 0 has an endpoint descriptor with address 0x9E, changing to 0x8E
[  363.379539][ T5976] usb 8-1: config 2 interface 174 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 1023
[  363.390176][ T5976] usb 8-1: config 2 interface 174 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  363.404873][ T5976] usb 8-1: config 2 interface 174 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  363.419954][ T5976] usb 8-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e
[  363.423529][ T5976] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  363.449627][ T5976] usb 8-1: Product: syz
[  363.455432][ T5976] usb 8-1: Manufacturer: syz
[  363.457394][ T5976] usb 8-1: SerialNumber: syz
[  363.472463][T14135] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[  363.692406][ T5976] usb 8-1: probing VID:PID(0424:012C)   
[  363.711684][ T5976] usb 8-1: vub300 testing BULK IN EndPoint(0) 8E
[  363.722075][ T5976] usb 8-1: vub300 testing BULK IN EndPoint(1) 82
[  363.732801][ T5976] usb 8-1: Could not find two sets of bulk-in/out endpoint pairs
[  363.735906][ T5976] vub300 8-1:2.174: probe with driver vub300 failed with error -22
[  363.762465][ T5976] usb 8-1: USB disconnect, device number 4
[  363.942585][T14154] loop3: detected capacity change from 0 to 128
[  364.172587][T14158] loop8: detected capacity change from 0 to 4096
[  364.421840][T14170] loop8: detected capacity change from 0 to 1024
[  364.425655][T14170] EXT4-fs: Ignoring removed nomblk_io_submit option
[  364.449903][T14170] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  364.826171][T13806] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  365.177646][T14187] netlink: 'syz.8.3140': attribute type 6 has an invalid length.
[  365.182127][T14187] netlink: 'syz.8.3140': attribute type 6 has an invalid length.
[  365.310941][T14191] No such timeout policy "syz1"
[  365.663619][T14194] loop3: detected capacity change from 0 to 32768
[  365.695749][T14195] loop8: detected capacity change from 0 to 32768
[  365.699690][ T5902] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  365.869300][ T5902] usb 8-1: Using ep0 maxpacket: 32
[  365.875502][ T5902] usb 8-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[  365.878370][ T5902] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  365.884188][ T5902] usb 8-1: Product: syz
[  365.885568][ T5902] usb 8-1: Manufacturer: syz
[  365.887027][ T5902] usb 8-1: SerialNumber: syz
[  365.894470][ T5902] usb 8-1: config 0 descriptor??
[  365.899744][ T5902] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[  365.902878][ T5902] dvb-usb: bulk message failed: -22 (4/0)
[  365.907226][ T5902] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  365.919199][ T5902] dvb-usb: bulk message failed: -22 (5/0)
[  365.921042][ T5902] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  365.925867][ T5902] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  365.944140][ T5902] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[  365.946842][ T5902] usb 8-1: media controller created
[  365.954086][T14201] loop8: detected capacity change from 0 to 4096
[  365.964117][ T5902] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  366.011178][ T5902] usb 8-1: selecting invalid altsetting 3
[  366.012841][ T5902] ttusb2: set interface to alts=3 failed
[  366.030681][T14205] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  366.047390][ T5902] DVB: Unable to find symbol tda10086_attach()
[  366.050422][ T5902] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[  366.054189][ T5902] dvb-usb: bulk message failed: -22 (4/0)
[  366.056737][ T5902] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  366.067100][ T5902] dvb-usb: bulk message failed: -22 (5/0)
[  366.076152][ T5902] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  366.081436][ T5902] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[  366.127919][ T5902] usb 8-1: USB disconnect, device number 5
[  366.171208][ T5902] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[  366.832633][T14218] loop8: detected capacity change from 0 to 4096
[  366.839463][T14218] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found
[  366.842826][T14218] UDF-fs: Scanning with blocksize 512 failed
[  366.868984][T14218] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  366.975857][T14222] loop8: detected capacity change from 0 to 128
[  366.978474][T14224] loop7: detected capacity change from 0 to 128
[  366.983486][T14222] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  366.999896][T14222] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  367.366194][T14236] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  367.570120][T14244] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  367.572927][T14242] NILFS error (device loop7): nilfs_check_folio: size of directory #2 is not a multiple of chunk size
[  367.588610][T14242] Remounting filesystem read-only
[  367.671765][T14245] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found
[  367.674707][T14245] UDF-fs: Scanning with blocksize 512 failed
[  367.696185][T14245] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  367.706810][T14245] UDF-fs: error (device loop8): udf_fiiter_advance_blk: extent after position 0 not allocated in directory (ino 1328)
[  367.933940][T14247] set_capacity_and_notify: 2 callbacks suppressed
[  367.933954][T14247] loop7: detected capacity change from 0 to 32768
[  368.523462][T14255] loop8: detected capacity change from 0 to 32768
[  368.566005][T14266] bridge: RTM_NEWNEIGH with invalid state 0x4
[  368.572213][T14255] JBD2: Ignoring recovery information on journal
[  368.606561][T14255] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode.
[  368.710527][T13806] ocfs2: Unmounting device (7,8) on (node local)
[  369.419550][T14287] loop7: detected capacity change from 0 to 32768
[  369.528990][T14301] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3184'.
[  369.537100][T14301] netlink: 'syz.8.3184': attribute type 1 has an invalid length.
[  369.546844][T14301] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3184'.
[  369.649022][T14307] netlink: 'syz.3.3188': attribute type 1 has an invalid length.
[  369.652284][T14307] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3188'.
[  369.658440][T14306] loop8: detected capacity change from 0 to 1024
[  369.750908][ T4351] hfsplus: b-tree write err: -5, ino 3
[  370.079630][ T5904] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  370.249218][ T5904] usb 9-1: Using ep0 maxpacket: 16
[  370.265932][ T5904] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  370.277617][ T5904] usb 9-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00
[  370.287608][ T5904] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  370.299560][ T5904] usb 9-1: config 0 descriptor??
[  370.409915][T14318] loop7: detected capacity change from 0 to 2048
[  370.764609][ T5904] kye 0003:0458:5016.0026: control desc unexpectedly large
[  370.777630][T14327] loop7: detected capacity change from 0 to 64
[  370.785516][ T5904] input: HID 0458:5016 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0458:5016.0026/input/input32
[  370.895821][ T5904] input: HID 0458:5016 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0458:5016.0026/input/input33
[  370.981041][ T5904] kye 0003:0458:5016.0026: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.8-1/input0
[  371.073876][T14341] Option 'TXƮ' to dns_resolver key: bad/missing value
[  371.340034][T14355] loop7: detected capacity change from 0 to 2048
[  371.352596][T14355] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  371.455017][T14357] hugetlbfs: Bad value 'g' for mount option 'nr_inodes'
[  371.455017][T14357] 
[  371.504286][ T5901] usb 9-1: USB disconnect, device number 3
[  371.577404][T14359] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3208'.
[  371.988317][T14369] loop3: detected capacity change from 0 to 1024
[  372.005016][   T34] audit: type=1800 audit(1769820542.209:112): pid=14369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3213" name="file1" dev="loop3" ino=2 res=0 errno=0
[  372.020618][ T5901] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  372.076534][   T89] hfsplus: bad catalog file entry
[  372.098090][   T89] hfsplus: b-tree write err: -5, ino 3
[  372.179336][ T5901] usb 8-1: Using ep0 maxpacket: 8
[  372.183666][ T5901] usb 8-1: config index 0 descriptor too short (expected 301, got 45)
[  372.187116][ T5901] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  372.191814][ T5901] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  372.195812][ T5901] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  372.200297][ T5901] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  372.205953][ T5901] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  372.211688][ T5901] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  372.349128][ T5976] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  372.425863][ T5901] usb 8-1: GET_CAPABILITIES returned 0
[  372.428211][ T5901] usbtmc 8-1:16.0: can't read capabilities
[  372.499318][ T5976] usb 9-1: Using ep0 maxpacket: 32
[  372.507604][ T5976] usb 9-1: config 0 has an invalid interface number: 247 but max is 0
[  372.519126][ T5976] usb 9-1: config 0 has no interface number 0
[  372.523150][ T5976] usb 9-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b
[  372.526030][ T5976] usb 9-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0
[  372.528490][ T5976] usb 9-1: Product: syz
[  372.539123][ T5976] usb 9-1: Manufacturer: syz
[  372.541917][ T5976] usb 9-1: config 0 descriptor??
[  372.641633][ T5901] usb 8-1: USB disconnect, device number 6
[  372.756068][ T5867] usb 9-1: USB disconnect, device number 4
[  373.015918][T14377] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3216'.
[  373.321807][T14385] loop7: detected capacity change from 0 to 32768
[  373.324997][T14385] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.3220 (14385)
[  373.341740][T14385] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  373.344925][T14385] BTRFS info (device loop7): using sha256 (sha256-lib) checksum algorithm
[  373.350413][ T5867] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[  373.409847][T14385] BTRFS info (device loop7): enabling ssd optimizations
[  373.412589][T14385] BTRFS info (device loop7): turning on async discard
[  373.415220][T14385] BTRFS info (device loop7): enabling free space tree
[  373.524880][ T5867] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  373.528069][ T5867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  373.537291][ T5867] usb 4-1: Product: syz
[  373.542588][ T5867] usb 4-1: Manufacturer: syz
[  373.550413][ T5867] usb 4-1: SerialNumber: syz
[  373.572690][ T5867] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  373.618987][ T7589] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  374.073980][ T5867] usb 4-1: USB disconnect, device number 56
[  374.120399][T13699] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  374.438420][T14408] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3222'.
[  374.454911][T14408] openvswitch: netlink: nsh attr 16383 is out of range max 3
[  374.510461][T14413] loop8: detected capacity change from 0 to 4096
[  374.539227][T14414] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  374.596900][T14416] loop7: detected capacity change from 0 to 512
[  374.660158][T14413] NILFS error (device loop8): nilfs_bmap_lookup_contig: broken bmap (inode number=12)
[  374.693256][T14413] Remounting filesystem read-only
[  374.722515][ T7589] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[  374.722994][T14416] EXT4-fs (loop7): 1 orphan inode deleted
[  374.725524][ T7589] ath9k_htc: Failed to initialize the device
[  374.731951][ T5867] usb 4-1: ath9k_htc: USB layer deinitialized
[  374.760251][T14416] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  374.770255][T14416] ext4 filesystem being mounted at /106/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  374.916248][T13699] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  375.037126][T14428] loop3: detected capacity change from 0 to 256
[  375.050210][T14428] exfat: Deprecated parameter 'utf8'
[  375.056065][T14428] exfat: Deprecated parameter 'utf8'
[  375.061847][T14428] exfat: Deprecated parameter 'utf8'
[  375.073577][T14428] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d)
[  375.250096][T14441] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3237'.
[  375.253524][T14441] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3237'.
[  375.395957][T14451] loop7: detected capacity change from 0 to 8
[  375.430323][ T5904] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  375.599239][ T5904] usb 9-1: Using ep0 maxpacket: 8
[  375.608236][ T5904] usb 9-1: unable to get BOS descriptor or descriptor too short
[  375.616766][ T5904] usb 9-1: config 11 has an invalid interface number: 189 but max is 0
[  375.621784][ T5904] usb 9-1: config 11 has no interface number 0
[  375.624709][ T5904] usb 9-1: config 11 interface 189 altsetting 120 endpoint 0x4 has invalid maxpacket 1023, setting to 64
[  375.632433][ T5904] usb 9-1: config 11 interface 189 altsetting 120 endpoint 0x7 has an invalid bInterval 161, changing to 11
[  375.636913][ T5904] usb 9-1: config 11 interface 189 altsetting 120 endpoint 0x7 has invalid maxpacket 25343, setting to 1024
[  375.641168][ T5904] usb 9-1: config 11 interface 189 altsetting 120 has 5 endpoint descriptors, different from the interface descriptor's value: 4
[  375.646668][ T5904] usb 9-1: config 11 interface 189 has no altsetting 0
[  375.653194][ T5904] usb 9-1: New USB device found, idVendor=0cf3, idProduct=7010, bcdDevice=33.84
[  375.656859][ T5904] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  375.661198][ T5904] usb 9-1: Product: syz
[  375.662881][ T5904] usb 9-1: Manufacturer: syz
[  375.664769][ T5904] usb 9-1: SerialNumber: syz
[  375.820520][T14456] loop7: detected capacity change from 0 to 32768
[  375.867530][T14456] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  375.878086][ T5904] usb 9-1: ath9k_htc: Device endpoint numbers are not the expected ones
[  375.897536][ T5904] usb 9-1: USB disconnect, device number 5
[  375.927179][T14456] XFS (loop7): Ending clean mount
[  375.975116][T13699] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  376.425324][ T5867] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  376.519446][ T5903] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[  376.579251][ T5867] usb 8-1: Using ep0 maxpacket: 8
[  376.599958][ T5867] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  376.604098][ T5867] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  376.607777][ T5867] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  376.622460][ T5867] usb 8-1: config 0 descriptor??
[  376.672870][ T5903] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  376.676936][ T5903] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  376.689572][ T5903] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  376.692764][ T5903] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  376.695963][ T5903] usb 4-1: Manufacturer: syz
[  376.703189][ T5903] usb 4-1: config 0 descriptor??
[  376.834808][ T5867] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  376.869886][ T7589] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  377.019259][ T7589] usb 9-1: Using ep0 maxpacket: 32
[  377.023796][ T7589] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  377.030140][ T7589] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  377.037452][ T7589] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  377.046624][ T7589] usb 9-1: Product: syz
[  377.050832][ T7589] usb 9-1: Manufacturer: syz
[  377.052431][ T7589] usb 9-1: SerialNumber: syz
[  377.059592][ T7589] usb 9-1: config 0 descriptor??
[  377.072948][T14481] raw-gadget.3 gadget.8: fail, usb_ep_enable returned -22
[  377.076611][    C0] iowarrior 8-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19
[  377.080318][ T5867] usb 8-1: USB disconnect, device number 7
[  377.084315][ T7589] hub 9-1:0.0: bad descriptor, ignoring hub
[  377.086388][ T7589] hub 9-1:0.0: probe with driver hub failed with error -5
[  377.125019][ T5903] pyra 0003:1E7D:2CF6.0027: unknown main item tag 0x0
[  377.131044][ T5903] pyra 0003:1E7D:2CF6.0027: unknown main item tag 0x0
[  377.133289][ T5903] pyra 0003:1E7D:2CF6.0027: unknown main item tag 0x0
[  377.141307][ T5903] pyra 0003:1E7D:2CF6.0027: unknown main item tag 0x0
[  377.143596][ T5903] pyra 0003:1E7D:2CF6.0027: unknown main item tag 0x0
[  377.145722][ T5903] pyra 0003:1E7D:2CF6.0027: unknown main item tag 0x0
[  377.148056][ T5903] pyra 0003:1E7D:2CF6.0027: unknown main item tag 0x0
[  377.155649][ T5903] pyra 0003:1E7D:2CF6.0027: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0
[  377.400697][ T5867] usb 9-1: USB disconnect, device number 6
[  377.691884][T14484] loop7: detected capacity change from 0 to 4096
[  377.907707][T14486] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  378.338657][T14504] loop7: detected capacity change from 0 to 2048
[  378.357682][T14504] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  378.390103][   T34] audit: type=1800 audit(1769820548.589:113): pid=14504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3261" name="bus" dev="loop7" ino=1438 res=0 errno=0
[  378.471967][T14506] loop8: detected capacity change from 0 to 1024
[  378.480426][T14506] EXT4-fs: Ignoring removed bh option
[  378.530114][T14506] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  378.552245][   T34] audit: type=1800 audit(1769820548.759:114): pid=14506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3262" name="file1" dev="loop8" ino=15 res=0 errno=0
[  378.611115][T13806] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  378.722317][ T5903] pyra 0003:1E7D:2CF6.0027: couldn't init struct pyra_device
[  378.728260][ T5903] pyra 0003:1E7D:2CF6.0027: couldn't install mouse
[  378.740438][ T5903] pyra 0003:1E7D:2CF6.0027: probe with driver pyra failed with error -71
[  378.764946][ T5903] usb 4-1: USB disconnect, device number 57
[  378.894813][T14521] loop8: detected capacity change from 0 to 1024
[  378.939911][T14521] hfsplus: failed to load root directory
[  379.114864][T14529] dvmrp1: tun_chr_ioctl cmd 37729
[  379.116528][T14529] dvmrp1: tun_chr_ioctl cmd 2147767521
[  379.130545][T14531] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  379.566589][T14540] loop8: detected capacity change from 0 to 40427
[  379.620341][T14540] F2FS-fs (loop8): invalid crc value
[  379.703543][T14540] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  379.708665][T14540] F2FS-fs (loop8): Start checkpoint disabled!
[  379.719917][T14540] F2FS-fs (loop8): f2fs_disable_checkpoint() finish, err:0
[  379.736277][T14540] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6
[  379.790609][ T2185] kworker/u10:8: attempt to access beyond end of device
[  379.790609][ T2185] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  379.794990][ T2185] CPU: 1 UID: 0 PID: 2185 Comm: kworker/u10:8 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  379.795005][ T2185] Tainted: [L]=SOFTLOCKUP
[  379.795008][ T2185] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  379.795014][ T2185] Workqueue: writeback wb_workfn (flush-7:8)
[  379.795029][ T2185] Call Trace:
[  379.795033][ T2185]  <TASK>
[  379.795037][ T2185]  dump_stack_lvl+0xe8/0x150
[  379.795050][ T2185]  f2fs_handle_critical_error+0x37c/0x540
[  379.795064][ T2185]  f2fs_write_end_io+0x886/0xb60
[  379.795082][ T2185]  __submit_merged_bio+0x256/0x650
[  379.795095][ T2185]  __submit_merged_write_cond+0x269/0x530
[  379.795107][ T2185]  f2fs_write_data_pages+0x2806/0x3360
[  379.795148][ T2185]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  379.795166][ T2185]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  379.795188][ T2185]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  379.795198][ T2185]  ? __lock_acquire+0x6b5/0x2cf0
[  379.795214][ T2185]  ? __lock_acquire+0x6b5/0x2cf0
[  379.795230][ T2185]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  379.795241][ T2185]  do_writepages+0x32e/0x550
[  379.795255][ T2185]  ? reacquire_held_locks+0x104/0x190
[  379.795264][ T2185]  ? writeback_sb_inodes+0x41f/0x1820
[  379.795276][ T2185]  __writeback_single_inode+0x133/0x1230
[  379.795286][ T2185]  ? do_raw_spin_unlock+0x4d/0x210
[  379.795298][ T2185]  writeback_sb_inodes+0x92c/0x1820
[  379.795318][ T2185]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  379.795326][ T2185]  ? do_raw_spin_lock+0x12b/0x2f0
[  379.795352][ T2185]  ? rcu_is_watching+0x15/0xb0
[  379.795367][ T2185]  wb_writeback+0x445/0xad0
[  379.795378][ T2185]  ? queue_io+0x221/0x450
[  379.795390][ T2185]  ? __pfx_wb_writeback+0x10/0x10
[  379.795397][ T2185]  ? do_raw_spin_lock+0x12b/0x2f0
[  379.795414][ T2185]  wb_workfn+0x3f8/0xef0
[  379.795421][ T2185]  ? __lock_acquire+0x6b5/0x2cf0
[  379.795427][ T2185]  ? look_up_lock_class+0x57/0x110
[  379.795447][ T2185]  ? __pfx_wb_workfn+0x10/0x10
[  379.795454][ T2185]  ? finish_task_switch+0x161/0x920
[  379.795467][ T2185]  ? do_raw_spin_lock+0x12b/0x2f0
[  379.795475][ T2185]  ? lock_acquire+0x106/0x330
[  379.795484][ T2185]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  379.795495][ T2185]  ? process_scheduled_works+0xa0f/0x17a0
[  379.795504][ T2185]  ? process_scheduled_works+0xa0f/0x17a0
[  379.795515][ T2185]  ? process_scheduled_works+0xa0f/0x17a0
[  379.795522][ T2185]  ? process_scheduled_works+0xa0f/0x17a0
[  379.795530][ T2185]  process_scheduled_works+0xaec/0x17a0
[  379.795550][ T2185]  ? __pfx_process_scheduled_works+0x10/0x10
[  379.795557][ T2185]  ? do_raw_spin_lock+0x12b/0x2f0
[  379.795569][ T2185]  ? assign_work+0x3d3/0x440
[  379.795580][ T2185]  worker_thread+0x89f/0xd90
[  379.795593][ T2185]  ? __kthread_parkme+0x7a/0x1f0
[  379.795606][ T2185]  kthread+0x726/0x8b0
[  379.795617][ T2185]  ? __pfx_worker_thread+0x10/0x10
[  379.795625][ T2185]  ? __pfx_kthread+0x10/0x10
[  379.795636][ T2185]  ? _raw_spin_unlock_irq+0x23/0x50
[  379.795646][ T2185]  ? __pfx_kthread+0x10/0x10
[  379.795656][ T2185]  ret_from_fork+0x51b/0xa40
[  379.795666][ T2185]  ? __pfx_ret_from_fork+0x10/0x10
[  379.795673][ T2185]  ? __switch_to+0xc82/0x1410
[  379.795685][ T2185]  ? __pfx_kthread+0x10/0x10
[  379.795696][ T2185]  ret_from_fork_asm+0x1a/0x30
[  379.795713][ T2185]  </TASK>
[  379.796228][ T2185] F2FS-fs (loop8): Stopped filesystem due to reason: 3
[  380.489231][ T5976] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[  380.562985][ T5867] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[  380.640807][ T5976] usb 9-1: config 0 has an invalid interface number: 63 but max is 0
[  380.643947][ T5976] usb 9-1: config 0 has no interface number 0
[  380.648656][ T5976] usb 9-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=b2.a1
[  380.656453][ T5976] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  380.663132][ T5976] usb 9-1: config 0 descriptor??
[  380.709573][ T5867] usb 4-1: Using ep0 maxpacket: 32
[  380.715832][ T5867] usb 4-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c
[  380.719237][ T5867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  380.729537][ T5867] usb 4-1: Product: syz
[  380.731215][ T5867] usb 4-1: Manufacturer: syz
[  380.732972][ T5867] usb 4-1: SerialNumber: syz
[  380.741369][ T5867] usb 4-1: config 0 descriptor??
[  380.751211][ T5867] gspca_main: gspca_topro-2.14.0 probing 06a2:0003
[  380.912356][ T5881] usb 9-1: USB disconnect, device number 7
[  380.953111][ T5867] gspca_topro: reg_w err -71
[  380.979589][ T5867] gspca_topro: Sensor soi763a
[  380.989855][ T5867] usb 4-1: USB disconnect, device number 58
[  381.139129][ T5976] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  381.289155][ T5976] usb 8-1: Using ep0 maxpacket: 32
[  381.292290][ T5976] usb 8-1: config 0 has an invalid interface number: 12 but max is 0
[  381.294923][ T5976] usb 8-1: config 0 has no interface number 0
[  381.296963][ T5976] usb 8-1: config 0 interface 12 has no altsetting 0
[  381.309160][ T5976] usb 8-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  381.312078][ T5976] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  381.317387][ T5976] usb 8-1: Product: syz
[  381.318817][ T5976] usb 8-1: Manufacturer: syz
[  381.320391][ T5976] usb 8-1: SerialNumber: syz
[  381.323750][ T5976] usb 8-1: config 0 descriptor??
[  381.936682][ T5976] f81534 8-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  381.944828][ T5976] f81534 8-1:0.12: f81534_find_config_idx: read failed: -71
[  381.947224][ T5976] f81534 8-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  381.948297][T14596] loop8: detected capacity change from 0 to 32768
[  381.954991][ T5976] f81534 8-1:0.12: probe with driver f81534 failed with error -71
[  381.965340][T14596] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.3300 (14596)
[  381.987401][ T5976] usb 8-1: USB disconnect, device number 8
[  382.007125][T14596] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  382.026553][T14596] BTRFS info (device loop8): using crc32c (crc32c-lib) checksum algorithm
[  382.049265][T14596] BTRFS warning (device loop8): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  382.092417][T14608] loop3: detected capacity change from 0 to 1024
[  382.122824][T14608] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  382.178564][ T7532] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  382.240406][   T89] BTRFS warning (device loop8): checksum verify failed on logical 5267456 mirror 1 wanted 0x22fa3277 found 0xdd6779d4 level 0
[  382.246479][T14596] BTRFS warning (device loop8): failed to read fs tree: -5
[  382.289450][T14596] BTRFS error (device loop8): open_ctree failed: -5
[  382.322313][T14623] loop3: detected capacity change from 0 to 128
[  382.673170][T14627] loop7: detected capacity change from 0 to 4096
[  382.678055][T14631] sctp: [Deprecated]: syz.3.3308 (pid 14631) Use of struct sctp_assoc_value in delayed_ack socket option.
[  382.678055][T14631] Use struct sctp_sack_info instead
[  382.751248][T14627] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  382.772676][T14634] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  382.845333][T14627] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  382.933513][T13699] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  383.081192][T14646] netlink: 'syz.3.3315': attribute type 3 has an invalid length.
[  383.084161][T14646] netlink: 'syz.3.3315': attribute type 3 has an invalid length.
[  383.098794][T14646] netlink: 'syz.3.3315': attribute type 10 has an invalid length.
[  383.155284][T14649] loop3: detected capacity change from 0 to 16
[  383.180183][T14649] erofs (device loop3): mounted with root inode @ nid 36.
[  383.211002][T14649] erofs (device loop3): per-inode big pcluster without sb feature for nid 36
[  383.214014][T14649] erofs (device loop3): per-inode big pcluster without sb feature for nid 36
[  383.217228][T14649] erofs (device loop3): read error -117 @ 123 of nid 36
[  383.269639][ T5881] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  383.419307][ T5881] usb 8-1: Using ep0 maxpacket: 8
[  383.423353][ T5881] usb 8-1: config 6 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  383.427292][ T5881] usb 8-1: config 6 interface 0 altsetting 0 has an endpoint descriptor with address 0xEC, changing to 0x8C
[  383.456025][ T5881] usb 8-1: config 6 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 8547, setting to 1024
[  383.467937][ T5881] usb 8-1: config 6 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1024
[  383.482309][ T5881] usb 8-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[  383.485875][ T5881] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  383.499829][ T5881] usb 8-1: Product: syz
[  383.501752][ T5881] usb 8-1: Manufacturer: syz
[  383.503503][ T5881] usb 8-1: SerialNumber: syz
[  383.512873][T14642] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[  383.518265][ T5881] hso 8-1:6.0: Can't find BULK OUT endpoint
[  383.771128][ T5903] usb 8-1: USB disconnect, device number 9
[  383.820212][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  383.822669][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  383.828504][T14676] loop3: detected capacity change from 0 to 512
[  383.852764][T14676] EXT4-fs: Ignoring removed i_version option
[  383.854904][T14676] EXT4-fs: Ignoring removed nobh option
[  383.857332][T14674] loop8: detected capacity change from 0 to 65536
[  383.879292][T14676] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  383.910031][T14676] EXT4-fs (loop3): 1 truncate cleaned up
[  383.912814][T14676] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  383.920226][T14674] XFS (loop8): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  383.943231][ T7532] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  383.952924][T14674] XFS (loop8): Ending clean mount
[  383.964856][T14674] XFS (loop8): Quotacheck needed: Please wait.
[  383.987132][T14674] XFS (loop8): Quotacheck: Done.
[  384.447487][T14693] loop3: detected capacity change from 0 to 512
[  384.480697][T14697] loop7: detected capacity change from 0 to 2048
[  384.497408][T14693] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  384.557300][ T5836]  loop7: p1 p2 p3
[  384.557300][ T5836]  p1: <netbsd:bad subpartition - ignored
[  384.557300][ T5836]  p5 (ignored 752 more) >
[  384.564511][T13806] XFS (loop8): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  384.570195][ T5836] loop7: p3 start 65280 is beyond EOD, truncated
[  384.582208][T14697]  loop7: p1 p2 p3
[  384.582208][T14697]  p1: <netbsd:bad subpartition - ignored
[  384.582208][T14697]  p5 (ignored 752 more) >
[  384.611351][T14697] loop7: p3 start 65280 is beyond EOD, truncated
[  384.626015][ T7532] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  384.633689][ T5283]  loop7: p1 p2 p3
[  384.633689][ T5283]  p1: <netbsd:bad subpartition - ignored
[  384.633689][ T5283]  p5 (ignored 752 more) >
[  384.650679][ T5283] loop7: p3 start 65280 is beyond EOD, truncated
[  384.758753][ T5845] udevd[5845]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory
[  384.792653][ T5836] udevd[5836]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory
[  384.840694][ T5977] udevd[5977]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory
[  384.848073][ T5836] udevd[5836]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory
[  384.908028][ T5845] udevd[5845]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory
[  384.918556][ T5836] udevd[5836]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory
[  385.015096][T14706] loop7: detected capacity change from 0 to 1764
[  385.087340][T14706] iso9660: Corrupted directory entry in block 14 of inode 1920
[  385.116886][T14706] iso9660: Corrupted directory entry in block 14 of inode 1920
[  385.697735][T14721] nbd: must specify a device to reconfigure
[  385.816217][ T5300] usb 4-1: new high-speed USB device number 59 using dummy_hcd
[  385.912685][   T56] Bluetooth: hci1: command 0x0406 tx timeout
[  385.986672][ T5300] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  386.005909][ T5300] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  386.008800][ T5300] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  386.013299][ T5300] usb 4-1: SerialNumber: syz
[  386.034947][T14732] netlink: 'syz.8.3348': attribute type 83 has an invalid length.
[  386.333899][ T5976] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[  386.469300][ T5904] usb 8-1: new full-speed USB device number 10 using dummy_hcd
[  386.494019][ T5976] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  386.497032][ T5976] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  386.499885][ T5976] usb 9-1: Product: syz
[  386.501298][ T5976] usb 9-1: Manufacturer: syz
[  386.502928][ T5976] usb 9-1: SerialNumber: syz
[  386.634322][ T5300] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71
[  386.639369][ T5904] usb 8-1: unable to get BOS descriptor or descriptor too short
[  386.647097][ T5904] usb 8-1: not running at top speed; connect to a high speed hub
[  386.655055][ T5300] usb 4-1: USB disconnect, device number 59
[  386.660887][ T5904] usb 8-1: config 1 has an invalid descriptor of length 157, skipping remainder of the config
[  386.667627][ T5904] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2
[  386.678954][ T5904] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  386.694297][ T5904] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  386.697313][ T5904] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  386.702984][ T5904] usb 8-1: SerialNumber: syz
[  386.917637][ T5976] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO
[  386.928315][ T5904] cdc_ncm 8-1:1.0: invalid descriptor buffer length
[  386.935125][ T5976] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO
[  386.938528][ T5904] cdc_ncm 8-1:1.0: CDC Union missing and no IAD found
[  386.941020][ T5904] cdc_ncm 8-1:1.0: bind() failure
[  386.944157][ T5976] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO
[  386.950595][ T5904] usb 8-1: USB disconnect, device number 10
[  386.953259][ T5976] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  386.960004][ T5976] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  386.970053][ T5976] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -71
[  386.977053][ T5976] usb 9-1: USB disconnect, device number 8
[  387.509304][ T5976] usb 4-1: new high-speed USB device number 60 using dummy_hcd
[  387.616827][T14755] loop7: detected capacity change from 0 to 256
[  387.646395][T14755] FAT-fs (loop7): Directory bread(block 64) failed
[  387.648871][T14755] FAT-fs (loop7): Directory bread(block 65) failed
[  387.659291][T14755] FAT-fs (loop7): Directory bread(block 66) failed
[  387.662235][T14755] FAT-fs (loop7): Directory bread(block 67) failed
[  387.664343][T14755] FAT-fs (loop7): Directory bread(block 68) failed
[  387.667008][T14755] FAT-fs (loop7): Directory bread(block 69) failed
[  387.670362][ T5976] usb 4-1: Using ep0 maxpacket: 8
[  387.674405][ T5976] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  387.677752][ T5976] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  387.682785][ T5976] usb 4-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice= 0.00
[  387.686104][T14755] FAT-fs (loop7): Directory bread(block 70) failed
[  387.688160][T14755] FAT-fs (loop7): Directory bread(block 71) failed
[  387.690574][ T5976] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  387.693978][T14755] FAT-fs (loop7): Directory bread(block 72) failed
[  387.696519][ T5976] usb 4-1: config 0 descriptor??
[  387.705339][T14755] FAT-fs (loop7): Directory bread(block 73) failed
[  387.819331][ T5904] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[  387.846961][T14759] loop7: detected capacity change from 0 to 8
[  387.858385][T14759] MTD: Attempt to mount non-MTD device "/dev/loop7"
[  387.872657][T14759] cramfs: Error -3 while decompressing!
[  387.874447][T14759] cramfs: ffffffff99ee3fe8(26)->ffff88811ea45000(4096)
[  387.876633][T14759] cramfs: Error -3 while decompressing!
[  387.878427][T14759] cramfs: ffffffff99ee4002(26)->ffff88811a7e3000(4096)
[  387.909735][T14759] cramfs: Error -3 while decompressing!
[  387.911470][T14759] cramfs: ffffffff99ee401c(16)->ffff88811a7e4000(4096)
[  387.913651][T14759] cramfs: Error -3 while decompressing!
[  387.924019][T14759] cramfs: ffffffff99ee3fe8(26)->ffff88811ea45000(4096)
[  387.987015][ T5904] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  387.996978][ T5904] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  388.010615][ T5904] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  388.014030][ T5904] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  388.038025][ T5904] usb 9-1: Product: syz
[  388.040153][ T5904] usb 9-1: Manufacturer: syz
[  388.042272][ T5904] usb 9-1: SerialNumber: syz
[  388.051814][ T5904] usb 9-1: config 0 descriptor??
[  388.071882][ T5904] usb 9-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 00
[  388.106607][ T5976] apple 0003:05AC:0274.0028: unbalanced delimiter at end of report description
[  388.113185][ T5976] apple 0003:05AC:0274.0028: parse failed
[  388.115181][ T5976] apple 0003:05AC:0274.0028: probe with driver apple failed with error -22
[  388.293873][ T5904] usb 9-1: USB disconnect, device number 9
[  388.324571][ T5976] usb 4-1: USB disconnect, device number 60
[  388.903867][T14772] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0
[  389.886920][T14795] comedi comedi0: Minor 47 could not be opened
[  389.956758][T14789] loop8: detected capacity change from 0 to 32768
[  389.964633][T14798] syz.3.3377 (14798): drop_caches: 4
[  389.989389][ T5843] Bluetooth: hci3: command 0x0405 tx timeout
[  389.990037][T14789] XFS (loop8): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  390.047118][T14789] XFS (loop8): Ending clean mount
[  390.053259][T14789] XFS (loop8): Quotacheck needed: Please wait.
[  390.086616][T14812] usb usb1: usbfs: process 14812 (syz.3.3380) did not claim interface 0 before use
[  390.111763][T14789] XFS (loop8): Quotacheck: Done.
[  390.172827][T13806] XFS (loop8): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  390.766960][T14820] loop7: detected capacity change from 0 to 32768
[  390.788271][T14820] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  390.837905][T14820] XFS (loop7): Ending clean mount
[  390.848411][T14820] XFS (loop7): Quotacheck needed: Please wait.
[  390.900472][T14820] XFS (loop7): Quotacheck: Done.
[  390.952953][T13699] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  390.969183][ T7589] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[  391.119235][ T7589] usb 9-1: Using ep0 maxpacket: 16
[  391.131075][ T7589] usb 9-1: config 0 has an invalid interface number: 214 but max is 0
[  391.139828][ T7589] usb 9-1: config 0 has no interface number 0
[  391.142036][ T7589] usb 9-1: config 0 interface 214 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  391.146074][ T7589] usb 9-1: config 0 interface 214 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  391.169281][ T7589] usb 9-1: config 0 interface 214 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  391.191597][ T7589] usb 9-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[  391.196508][ T7589] usb 9-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3
[  391.209369][ T7589] usb 9-1: Manufacturer: syz
[  391.211221][ T7589] usb 9-1: SerialNumber: syz
[  391.241750][ T7589] usb 9-1: config 0 descriptor??
[  391.244510][T14822] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[  391.764684][T14835] loop7: detected capacity change from 0 to 131072
[  391.769166][T14835] F2FS-fs (loop7): invalid crc value
[  391.771465][ T7589] usbtouchscreen 9-1:0.214: Failed to read FW rev: -71
[  391.774221][ T7589] usbtouchscreen 9-1:0.214: probe with driver usbtouchscreen failed with error -71
[  391.782738][ T7589] usb 9-1: USB disconnect, device number 10
[  391.815160][T14835] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  391.820102][T14835] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  391.871850][T14835] F2FS-fs (loop7): Can't enable fs-verity on inode 8: the verity feature is not enabled on this filesystem
[  392.253882][T14847] loop8: detected capacity change from 0 to 8
[  392.318832][T14849] loop7: detected capacity change from 0 to 8
[  392.590064][T14857] SQUASHFS error: lzo decompression failed, data probably corrupt
[  392.593001][T14857] SQUASHFS error: Failed to read block 0x0: -5
[  392.595639][T14857] SQUASHFS error: Failed to read block 0xff: -5
[  392.600147][T14857] SQUASHFS error: lzo decompression failed, data probably corrupt
[  392.603304][T14857] SQUASHFS error: Failed to read block 0x0: -5
[  392.611569][T14857] SQUASHFS error: lzo decompression failed, data probably corrupt
[  392.614313][T14857] SQUASHFS error: Failed to read block 0x0: -5
[  392.629950][T14857] SQUASHFS error: Failed to read block 0x6a4: -5
[  392.632285][T14857] SQUASHFS error: Unable to read metadata cache entry [6a2]
[  392.634748][T14857] SQUASHFS error: read_indexes: reading block [6a2:0]
[  392.637452][T14857] SQUASHFS error: Failed to read block 0x0: -5
[  392.640108][T14857] SQUASHFS error: Unable to read metadata cache entry [6a2]
[  392.642638][T14857] SQUASHFS error: read_indexes: reading block [6a2:0]
[  392.645107][T14857] SQUASHFS error: Failed to read block 0x0: -5
[  392.659924][   T34] audit: type=1800 audit(1769820562.809:115): pid=14857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3387" name="file2" dev="loop7" ino=3 res=0 errno=0
[  392.671249][   T34] audit: type=1800 audit(1769820562.819:116): pid=14857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3387" name="file2" dev="loop7" ino=3 res=0 errno=0
[  392.722768][T14860] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  392.766027][T14862] loop8: detected capacity change from 0 to 2048
[  392.785481][ T5836]  loop8: p4 < >
[  392.800159][T14862]  loop8: p4 < >
[  392.874757][ T5836] udevd[5836]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory
[  393.568030][T14876] netlink: 'syz.7.3400': attribute type 1 has an invalid length.
[  393.908723][T14885] loop9: detected capacity change from 0 to 7
[  393.921809][T14885]  loop9: [POWERTEC] p1 p2
[  393.926531][T14885] loop9: p1 size 262144 extends beyond EOD, truncated
[  393.946607][T14885] loop9: p2 size 8 extends beyond EOD, truncated
[  394.047387][ T5845] udevd[5845]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory
[  394.068398][ T5836] udevd[5836]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory
[  394.105540][T14891] loop7: detected capacity change from 0 to 1024
[  394.190370][T14891] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  394.302565][T13699] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  394.315933][T14897] loop3: detected capacity change from 0 to 1024
[  394.380460][T14897] hfsplus: detected inconsistent attributes file, running fsck.hfsplus is recommended.
[  394.577453][T14900] loop7: detected capacity change from 0 to 4096
[  394.590899][T14900] ntfs3(loop7): Different NTFS sector size (2048) and media sector size (512).
[  394.598588][T14900] ntfs3(loop7): Mark volume as dirty due to NTFS errors
[  394.631124][T14900] ntfs3(loop7): volume is dirty and "force" flag is not set!
[  394.785274][T14912] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  395.021755][T14924] loop3: detected capacity change from 0 to 512
[  395.032591][T14924] EXT4-fs: Ignoring removed nobh option
[  395.080355][T14924] EXT4-fs (loop3): orphan cleanup on readonly fs
[  395.094045][T14924] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  395.109454][T14924] EXT4-fs error (device loop3): ext4_do_update_inode:5616: inode #15: comm syz.3.3422: corrupted inode contents
[  395.139291][T14924] EXT4-fs error (device loop3): ext4_dirty_inode:6501: inode #15: comm syz.3.3422: mark_inode_dirty error
[  395.144440][T14924] EXT4-fs error (device loop3): ext4_do_update_inode:5616: inode #15: comm syz.3.3422: corrupted inode contents
[  395.170348][T14924] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3001: inode #15: comm syz.3.3422: mark_inode_dirty error
[  395.197936][T14924] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3004: inode #15: comm syz.3.3422: mark inode dirty (error -117)
[  395.208109][T14924] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -117)
[  395.214161][T14924] EXT4-fs (loop3): 1 orphan inode deleted
[  395.248935][T14924] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  395.271526][ T7532] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  397.210603][T14957] loop8: detected capacity change from 0 to 4096
[  397.219241][  T848] usb 4-1: new full-speed USB device number 61 using dummy_hcd
[  397.226873][T14960] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  397.372438][  T848] usb 4-1: unable to get BOS descriptor or descriptor too short
[  397.375347][  T848] usb 4-1: not running at top speed; connect to a high speed hub
[  397.380536][  T848] usb 4-1: config 0 has an invalid interface number: 88 but max is 0
[  397.383367][  T848] usb 4-1: config 0 has no interface number 0
[  397.391698][  T848] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 10
[  397.395254][  T848] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0
[  397.417269][  T848] usb 4-1: config 0 interface 88 has no altsetting 0
[  397.441883][  T848] usb 4-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31
[  397.444763][  T848] usb 4-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3
[  397.447234][  T848] usb 4-1: Product: syz
[  397.448542][  T848] usb 4-1: Manufacturer: syz
[  397.455522][  T848] usb 4-1: SerialNumber: syz
[  397.458566][  T848] usb 4-1: config 0 descriptor??
[  398.311233][ T5904] usb 8-1: new full-speed USB device number 11 using dummy_hcd
[  398.492830][ T5904] usb 8-1: unable to get BOS descriptor or descriptor too short
[  398.496619][ T5904] usb 8-1: not running at top speed; connect to a high speed hub
[  398.505642][ T5904] usb 8-1: config 12 has an invalid interface number: 184 but max is 0
[  398.513466][ T5904] usb 8-1: config 12 has no interface number 0
[  398.520846][ T5904] usb 8-1: config 12 interface 184 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10
[  398.535974][ T5904] usb 8-1: New USB device found, idVendor=0499, idProduct=100d, bcdDevice=84.a2
[  398.545108][  T848] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.88/input/input35
[  398.552826][ T5904] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  398.578042][ T5904] usb 8-1: Product: syz
[  398.582437][  T848] usb 4-1: USB disconnect, device number 61
[  398.585555][ T5904] usb 8-1: Manufacturer: syz
[  398.611959][ T5904] usb 8-1: SerialNumber: syz
[  398.840431][T14997] loop3: detected capacity change from 0 to 764
[  398.857558][T14997] rock: directory entry would overflow storage
[  398.861491][T14997] rock: sig=0x5245, size=8, remaining=5
[  399.003903][ T5904] usb 8-1: Quirk or no altset; falling back to MIDI 1.0
[  399.249929][ T5904] usb 8-1: USB disconnect, device number 11
[  399.377464][T15003] loop3: detected capacity change from 0 to 8192
[  399.416606][ T5847] udevd[5847]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:12.184/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  399.924719][T15012] loop8: detected capacity change from 0 to 16
[  399.932333][T15012] erofs (device loop8): mounted with root inode @ nid 36.
[  400.102128][T15018] loop7: detected capacity change from 0 to 512
[  400.110317][T15018] EXT4-fs: Ignoring removed i_version option
[  400.123498][T15018] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #15: comm syz.7.3462: inode has both inline data and extents flags
[  400.133790][T15018] EXT4-fs (loop7): Remounting filesystem read-only
[  400.138808][T15018] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  400.175839][T13699] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  400.331848][T15029] loop7: detected capacity change from 0 to 128
[  400.349800][T15029] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only
[  400.356059][T15029] hpfs: filesystem error: improperly stopped
[  400.358807][T15029] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  400.386682][T15029] hpfs: Proceeding, but your filesystem could be corrupted if you delete files or directories
[  400.412997][T15029] hpfs: filesystem error: dir band size mismatch: dir_band_start==7b318cc2, dir_band_end==7b318cc3, n_dir_band==7ffffffe
[  400.602707][T15043] loop3: detected capacity change from 0 to 764
[  400.650749][T15043] Symlink component flag not implemented
[  400.652964][T15043] Symlink component flag not implemented
[  400.655473][T15043] Symlink component flag not implemented (129)
[  400.657857][T15043] Symlink component flag not implemented (6)
[  400.756566][T15041] loop8: detected capacity change from 0 to 32768
[  400.778329][T15041] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.3472 (15041)
[  400.810713][T15041] BTRFS info (device loop8): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  400.814504][T15041] BTRFS info (device loop8): using blake2b (blake2b-256-lib) checksum algorithm
[  401.015646][T15041] BTRFS info (device loop8): enabling ssd optimizations
[  401.017821][T15041] BTRFS info (device loop8): turning on async discard
[  401.023884][T15074] loop7: detected capacity change from 0 to 512
[  401.040695][T15041] BTRFS info (device loop8): enabling free space tree
[  401.104872][T15074] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  401.133926][T15074] ext4 filesystem being mounted at /197/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  401.149903][T13806] BTRFS info (device loop8): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  401.315236][T13699] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  401.420793][T15085] netlink: 'syz.8.3483': attribute type 21 has an invalid length.
[  401.423241][T15085] netlink: 'syz.8.3483': attribute type 22 has an invalid length.
[  401.442997][T15085] netlink: 'syz.8.3483': attribute type 23 has an invalid length.
[  401.445508][T15085] netlink: 'syz.8.3483': attribute type 25 has an invalid length.
[  401.447850][T15085] netlink: 'syz.8.3483': attribute type 26 has an invalid length.
[  401.451241][T15085] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3483'.
[  402.229641][  T848] usb 4-1: new high-speed USB device number 62 using dummy_hcd
[  402.300103][T15127] loop7: detected capacity change from 0 to 512
[  402.331701][T15127] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  402.351635][T15127] ext4 filesystem being mounted at /209/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  402.390442][  T848] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  402.393697][  T848] usb 4-1: config 0 has no interface number 0
[  402.396995][T13699] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  402.412128][  T848] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  402.416886][  T848] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  402.435562][  T848] usb 4-1: Product: syz
[  402.437126][  T848] usb 4-1: Manufacturer: syz
[  402.438812][  T848] usb 4-1: SerialNumber: syz
[  402.438964][T15133] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3509'.
[  402.481982][  T848] usb 4-1: config 0 descriptor??
[  402.561602][T15135] netlink: 84 bytes leftover after parsing attributes in process `syz.8.3510'.
[  402.633865][T15139] virtiofs: Bad value for 'dax'
[  402.696505][  T848] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  402.718245][  T848] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  402.725047][  T848] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  402.728218][  T848] usb 4-1: media controller created
[  402.756414][  T848] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  402.856532][T15147] loop7: detected capacity change from 0 to 8
[  402.862677][T15147] MTD: Attempt to mount non-MTD device "/dev/loop7"
[  402.897576][  T848] usb 4-1: DVB: registering adapter 1 frontend 0 (E3C EC100 DVB-T)...
[  402.900147][T15147] cramfs: Error -3 while decompressing!
[  402.902481][T15147] cramfs: ffffffff99ee7fe8(26)->ffff8881a45c1000(4096)
[  402.903010][  T848] dvbdev: dvb_create_media_entity: media entity 'E3C EC100 DVB-T' registered.
[  402.922396][T15147] cramfs: Error -3 while decompressing!
[  402.924436][T15147] cramfs: ffffffff99ee8002(26)->ffff8881a45c2000(4096)
[  402.930155][  T848] DVB: Unable to find symbol mxl5005s_attach()
[  402.948619][T15147] cramfs: Error -3 while decompressing!
[  402.951461][T15147] cramfs: ffffffff99ee801c(16)->ffff8881a45c3000(4096)
[  402.955527][T15147] cramfs: Error -3 while decompressing!
[  402.964738][T15147] cramfs: ffffffff99ee7fe8(26)->ffff8881a45c1000(4096)
[  402.995353][T15150] loop8: detected capacity change from 0 to 4096
[  403.014069][   T34] audit: type=1800 audit(1769820573.219:117): pid=15150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3516" name="file1" dev="loop8" ino=30 res=0 errno=0
[  403.118558][ T5976] usb 4-1: USB disconnect, device number 62
[  403.811970][T15180] loop3: detected capacity change from 0 to 512
[  403.831398][T15180] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[  403.845191][T15180] EXT4-fs (loop3): orphan cleanup on readonly fs
[  403.849901][T15180] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.3530: Block bitmap for bg 0 marked uninitialized
[  403.865423][T15180] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6689: Corrupt filesystem
[  403.872186][T15180] EXT4-fs (loop3): 1 orphan inode deleted
[  403.885534][T15180] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  403.931308][ T7532] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  404.256876][T15190] loop3: detected capacity change from 0 to 40427
[  404.268709][T15190] F2FS-fs (loop3): invalid crc value
[  404.291014][T15188] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.3533 (15188)
[  404.342390][T15188] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  404.345604][T15188] BTRFS info (device loop7): using crc32c (crc32c-lib) checksum algorithm
[  404.371998][T15190] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  404.382596][T15190] F2FS-fs (loop3): Start checkpoint disabled!
[  404.387717][T15190] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0
[  404.400133][T15190] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  404.417744][   T34] audit: type=1800 audit(1769820574.619:118): pid=15190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3534" name="file1" dev="loop3" ino=10 res=0 errno=0
[  404.424883][T15190] syz.3.3534: attempt to access beyond end of device
[  404.424883][T15190] loop3: rw=2049, sector=77824, nr_sectors = 136 limit=40427
[  404.461362][T15190] syz.3.3534: attempt to access beyond end of device
[  404.461362][T15190] loop3: rw=2049, sector=45096, nr_sectors = 128 limit=40427
[  404.478334][T15190] syz.3.3534: attempt to access beyond end of device
[  404.478334][T15190] loop3: rw=2049, sector=45224, nr_sectors = 128 limit=40427
[  404.504407][T15188] BTRFS info (device loop7): turning off barriers
[  404.507102][T15190] syz.3.3534: attempt to access beyond end of device
[  404.507102][T15190] loop3: rw=2049, sector=45352, nr_sectors = 128 limit=40427
[  404.510118][T15188] BTRFS info (device loop7): enabling free space tree
[  404.514420][T15188] BTRFS info (device loop7): use zstd compression, level 3
[  404.523750][T15190] syz.3.3534: attempt to access beyond end of device
[  404.523750][T15190] loop3: rw=2049, sector=45480, nr_sectors = 128 limit=40427
[  404.535872][T15190] syz.3.3534: attempt to access beyond end of device
[  404.535872][T15190] loop3: rw=2049, sector=45608, nr_sectors = 128 limit=40427
[  404.561296][T15190] syz.3.3534: attempt to access beyond end of device
[  404.561296][T15190] loop3: rw=2049, sector=45736, nr_sectors = 128 limit=40427
[  404.581602][T15190] syz.3.3534: attempt to access beyond end of device
[  404.581602][T15190] loop3: rw=2049, sector=45864, nr_sectors = 128 limit=40427
[  404.632761][T15190] syz.3.3534: attempt to access beyond end of device
[  404.632761][T15190] loop3: rw=2049, sector=45992, nr_sectors = 128 limit=40427
[  404.633179][T13699] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  404.648689][T15190] syz.3.3534: attempt to access beyond end of device
[  404.648689][T15190] loop3: rw=2049, sector=46120, nr_sectors = 128 limit=40427
[  405.065315][ T1120] CPU: 0 UID: 0 PID: 1120 Comm: kworker/u9:9 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  405.065343][ T1120] Tainted: [L]=SOFTLOCKUP
[  405.065348][ T1120] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  405.065357][ T1120] Workqueue: writeback wb_workfn (flush-7:3)
[  405.065384][ T1120] Call Trace:
[  405.065390][ T1120]  <TASK>
[  405.065397][ T1120]  dump_stack_lvl+0xe8/0x150
[  405.065418][ T1120]  f2fs_handle_critical_error+0x37c/0x540
[  405.065440][ T1120]  f2fs_write_end_io+0x886/0xb60
[  405.065472][ T1120]  __submit_merged_bio+0x256/0x650
[  405.065493][ T1120]  __submit_merged_write_cond+0x269/0x530
[  405.065513][ T1120]  f2fs_write_data_pages+0x2806/0x3360
[  405.065561][ T1120]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  405.065629][ T1120]  ? __lock_acquire+0x6b5/0x2cf0
[  405.065683][ T1120]  ? f2fs_write_meta_pages+0x357/0x450
[  405.065704][ T1120]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  405.065722][ T1120]  do_writepages+0x32e/0x550
[  405.065744][ T1120]  ? reacquire_held_locks+0x104/0x190
[  405.065757][ T1120]  ? writeback_sb_inodes+0x41f/0x1820
[  405.065777][ T1120]  __writeback_single_inode+0x133/0x1230
[  405.065793][ T1120]  ? do_raw_spin_unlock+0x4d/0x210
[  405.065813][ T1120]  writeback_sb_inodes+0x92c/0x1820
[  405.065846][ T1120]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  405.065860][ T1120]  ? do_raw_spin_lock+0x12b/0x2f0
[  405.065904][ T1120]  ? rcu_is_watching+0x15/0xb0
[  405.065926][ T1120]  wb_writeback+0x445/0xad0
[  405.065943][ T1120]  ? queue_io+0x221/0x450
[  405.065962][ T1120]  ? __pfx_wb_writeback+0x10/0x10
[  405.065976][ T1120]  ? do_raw_spin_lock+0x12b/0x2f0
[  405.066003][ T1120]  wb_workfn+0x3f8/0xef0
[  405.066013][ T1120]  ? __lock_acquire+0x6b5/0x2cf0
[  405.066024][ T1120]  ? look_up_lock_class+0x57/0x110
[  405.066056][ T1120]  ? __pfx_wb_workfn+0x10/0x10
[  405.066067][ T1120]  ? finish_task_switch+0x161/0x920
[  405.066088][ T1120]  ? do_raw_spin_lock+0x12b/0x2f0
[  405.066101][ T1120]  ? lock_acquire+0x106/0x330
[  405.066115][ T1120]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  405.066132][ T1120]  ? process_scheduled_works+0xa0f/0x17a0
[  405.066147][ T1120]  ? process_scheduled_works+0xa0f/0x17a0
[  405.066164][ T1120]  ? process_scheduled_works+0xa0f/0x17a0
[  405.066176][ T1120]  ? process_scheduled_works+0xa0f/0x17a0
[  405.066189][ T1120]  process_scheduled_works+0xaec/0x17a0
[  405.066224][ T1120]  ? __pfx_process_scheduled_works+0x10/0x10
[  405.066234][ T1120]  ? do_raw_spin_lock+0x12b/0x2f0
[  405.066256][ T1120]  ? assign_work+0x3d3/0x440
[  405.066273][ T1120]  worker_thread+0x89f/0xd90
[  405.066296][ T1120]  ? __kthread_parkme+0x7a/0x1f0
[  405.066318][ T1120]  kthread+0x726/0x8b0
[  405.066336][ T1120]  ? __pfx_worker_thread+0x10/0x10
[  405.066348][ T1120]  ? __pfx_kthread+0x10/0x10
[  405.066366][ T1120]  ? _raw_spin_unlock_irq+0x23/0x50
[  405.066383][ T1120]  ? __pfx_kthread+0x10/0x10
[  405.066399][ T1120]  ret_from_fork+0x51b/0xa40
[  405.066414][ T1120]  ? __pfx_ret_from_fork+0x10/0x10
[  405.066426][ T1120]  ? __switch_to+0xc82/0x1410
[  405.066445][ T1120]  ? __pfx_kthread+0x10/0x10
[  405.066461][ T1120]  ret_from_fork_asm+0x1a/0x30
[  405.066489][ T1120]  </TASK>
[  405.066496][ T1120] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  405.086313][T15218] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  405.334498][T15222] set_capacity_and_notify: 2 callbacks suppressed
[  405.334518][T15222] loop7: detected capacity change from 0 to 1024
[  405.637674][T15232] loop7: detected capacity change from 0 to 512
[  405.648265][T15232] EXT4-fs: Ignoring removed mblk_io_submit option
[  405.701487][T15232] EXT4-fs (loop7): revision level too high, forcing read-only mode
[  405.704687][T15232] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042e018, mo2=0002]
[  405.707932][T15232] System zones: 0-1, 15-15, 18-18, 34-34
[  405.743764][T15232] EXT4-fs (loop7): orphan cleanup on readonly fs
[  405.751816][T15235] netlink: 'syz.3.3540': attribute type 1 has an invalid length.
[  405.756975][T15232] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.3546: bg 0: block 15: invalid block bitmap
[  405.762182][T15232] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6689: Corrupt filesystem
[  405.767739][T15232] EXT4-fs (loop7): 1 truncate cleaned up
[  405.770875][T15232] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  405.798475][T13699] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  407.114745][T15276] netlink: 'syz.7.3563': attribute type 3 has an invalid length.
[  407.118308][T15276] netlink: 152 bytes leftover after parsing attributes in process `syz.7.3563'.
[  407.433768][T15290] loop7: detected capacity change from 0 to 4096
[  407.478171][T15290] ntfs3(loop7): ino=b, mi_enum_attr
[  407.485099][T15290] ntfs3(loop7): Mark volume as dirty due to NTFS errors
[  407.487734][T15290] ntfs3(loop7): Failed to load $Extend (-22).
[  407.490286][T15290] ntfs3(loop7): Failed to initialize $Extend.
[  407.495695][T15292] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  407.508083][T15290] ntfs3(loop7): ino=1e, "file1" attr_set_size
[  407.517689][T15289] ntfs3(loop7): ino=1e, "file1" attr_set_size
[  408.070058][ T5904] usb 8-1: new high-speed USB device number 12 using dummy_hcd
[  408.245975][ T5904] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  408.264952][ T5904] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  408.270158][ T5904] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  408.275729][ T5904] usb 8-1: New USB device found, idVendor=5543, idProduct=3031, bcdDevice= 0.00
[  408.284585][ T5904] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  408.322109][ T5904] usb 8-1: config 0 descriptor??
[  408.514100][T15326] sctp: [Deprecated]: syz.8.3583 (pid 15326) Use of struct sctp_assoc_value in delayed_ack socket option.
[  408.514100][T15326] Use struct sctp_sack_info instead
[  409.004011][ T5904] usb 8-1: string descriptor 0 read error: -71
[  409.015882][ T5904] uclogic 0003:5543:3031.0029: failed retrieving string descriptor #200: -71
[  409.021756][ T5904] uclogic 0003:5543:3031.0029: failed retrieving pen parameters: -71
[  409.025962][ T5904] uclogic 0003:5543:3031.0029: failed probing pen v2 parameters: -71
[  409.031117][ T5904] uclogic 0003:5543:3031.0029: failed probing parameters: -71
[  409.035896][ T5904] uclogic 0003:5543:3031.0029: probe with driver uclogic failed with error -71
[  409.054213][ T5904] usb 8-1: USB disconnect, device number 12
[  409.369925][ T5904] usb 9-1: new high-speed USB device number 11 using dummy_hcd
[  409.529212][ T5904] usb 9-1: Using ep0 maxpacket: 8
[  409.539717][ T5904] usb 9-1: config 179 has an invalid interface number: 65 but max is 0
[  409.548362][ T5904] usb 9-1: config 179 has no interface number 0
[  409.563682][ T5904] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  409.567837][ T5904] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  409.592410][ T5904] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  409.596754][ T5904] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  409.619187][ T5904] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  409.624434][ T5904] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  409.627997][ T5904] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  409.647673][T15334] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[  409.881156][T15345] loop3: detected capacity change from 0 to 64
[  409.931462][ T5904] input: Generic X-Box pad as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:179.65/input/input36
[  410.117745][    C1] xpad 9-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  410.120757][    C1] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  410.124771][ T5904] usb 9-1: USB disconnect, device number 11
[  410.154751][T15355] loop3: detected capacity change from 0 to 256
[  410.157785][T15355] exfat: Deprecated parameter 'namecase'
[  410.188465][T15355] exfat: Deprecated parameter 'utf8'
[  410.204941][T15355] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d)
[  410.438925][T15362] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  411.267477][T15367] loop7: detected capacity change from 0 to 131072
[  411.274998][T15367] F2FS-fs (loop7): Invalid log sectors per block(570425347) log sectorsize(9)
[  411.278501][T15367] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock
[  411.282685][T15367] F2FS-fs (loop7): invalid crc value
[  411.331387][T15367] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  411.335530][T15367] F2FS-fs (loop7): Try to recover 2th superblock, ret: -30
[  411.338493][T15367] F2FS-fs (loop7): Mounted with checkpoint version = 753bd00b
[  412.025299][T15385] loop7: detected capacity change from 0 to 4096
[  412.059514][T15385] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512).
[  412.410057][T15399] 9pnet_virtio: no channels available for device syz
[  412.420929][   T34] audit: type=1326 audit(1769820582.629:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15391 comm="syz.8.3612" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f635b79acb9 code=0x7ffc0000
[  412.427893][   T34] audit: type=1326 audit(1769820582.629:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15391 comm="syz.8.3612" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f635b79acb9 code=0x7ffc0000
[  412.737601][T15393] loop3: detected capacity change from 0 to 32768
[  412.767782][T15393] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  412.815826][T15393] XFS (loop3): Ending clean mount
[  412.823989][T15393] XFS (loop3): Quotacheck needed: Please wait.
[  412.864915][T15393] XFS (loop3): Quotacheck: Done.
[  412.934321][ T7532] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  413.062004][   T34] audit: type=1326 audit(1769820582.629:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15391 comm="syz.8.3612" exe="/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f635b79acb9 code=0x7ffc0000
[  413.069016][   T34] audit: type=1326 audit(1769820582.629:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15391 comm="syz.8.3612" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f635b79acb9 code=0x7ffc0000
[  413.076195][   T34] audit: type=1326 audit(1769820582.629:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15391 comm="syz.8.3612" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f635b79acb9 code=0x7ffc0000
[  413.083133][   T34] audit: type=1326 audit(1769820582.629:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15391 comm="syz.8.3612" exe="/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7f635b79acb9 code=0x7ffc0000
[  413.090007][   T34] audit: type=1326 audit(1769820582.629:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15391 comm="syz.8.3612" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f635b79acb9 code=0x7ffc0000
[  413.097332][   T34] audit: type=1326 audit(1769820582.629:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15391 comm="syz.8.3612" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f635b79acb9 code=0x7ffc0000
[  413.105677][   T34] audit: type=1326 audit(1769820582.629:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15391 comm="syz.8.3612" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f635b79acb9 code=0x7ffc0000
[  413.113578][   T34] audit: type=1326 audit(1769820582.629:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15391 comm="syz.8.3612" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f635b79acb9 code=0x7ffc0000
[  413.261145][ T5881] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0
[  413.264725][ T5881] hid-generic 0000:0000:0000.002A: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  413.599409][ T5902] usb 9-1: new high-speed USB device number 12 using dummy_hcd
[  413.651206][T15421] loop3: detected capacity change from 0 to 128
[  413.672049][T15421] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  413.676766][T15421] ext4 filesystem being mounted at /911/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  413.695161][ T7532] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  413.737783][T15425] loop3: detected capacity change from 0 to 8
[  413.746448][T15425] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  413.749458][ T5902] usb 9-1: Using ep0 maxpacket: 32
[  413.753651][ T5902] usb 9-1: config 3 has an invalid interface number: 171 but max is 29
[  413.762896][ T5902] usb 9-1: config 3 has 1 interface, different from the descriptor's value: 30
[  413.769872][ T5902] usb 9-1: config 3 has no interface number 0
[  413.777271][ T5902] usb 9-1: config 3 interface 171 altsetting 108 endpoint 0x1 has invalid wMaxPacketSize 0
[  413.788449][ T5902] usb 9-1: config 3 interface 171 has no altsetting 0
[  413.795510][ T5902] usb 9-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice= c.e5
[  413.807743][ T5902] usb 9-1: New USB device strings: Mfr=1, Product=10, SerialNumber=3
[  413.813508][ T5902] usb 9-1: Product: syz
[  413.814906][ T5902] usb 9-1: Manufacturer: syz
[  413.816338][ T5902] usb 9-1: SerialNumber: syz
[  414.045339][ T5902] as10x_usb: device has been detected
[  414.047412][ T5902] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led))
[  414.055974][ T5902] usb 9-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))...
[  414.072474][ T5902] as10x_usb: error during firmware upload part1
[  414.075191][ T5902] Registered device Sky IT Digital Key (green led)
[  414.084206][ T5902] usb 9-1: USB disconnect, device number 12
[  414.108132][ T5902] Unregistered device Sky IT Digital Key (green led)
[  414.110450][ T5902] as10x_usb: device has been disconnected
[  414.119296][ T5881] usb 4-1: new high-speed USB device number 63 using dummy_hcd
[  414.280962][ T5881] usb 4-1: unable to get BOS descriptor or descriptor too short
[  414.284941][ T5881] usb 4-1: config 14 has an invalid interface number: 21 but max is 0
[  414.299148][ T5881] usb 4-1: config 14 has no interface number 0
[  414.301729][ T5881] usb 4-1: config 14 interface 21 altsetting 251 bulk endpoint 0xA has invalid maxpacket 32
[  414.304882][ T5881] usb 4-1: config 14 interface 21 has no altsetting 0
[  414.310847][ T5881] usb 4-1: New USB device found, idVendor=c880, idProduct=760e, bcdDevice=35.fc
[  414.313928][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  414.316759][ T5881] usb 4-1: Product: syz
[  414.328786][ T5881] usb 4-1: Manufacturer: syz
[  414.330471][ T5881] usb 4-1: SerialNumber: syz
[  414.334939][T15431] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  414.562922][ T5881] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  414.565094][ T5881] usb 4-1: MIDIStreaming interface descriptor not found
[  414.618819][ T5881] usb 4-1: USB disconnect, device number 63
[  414.652329][ T5847] udevd[5847]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:14.21/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  414.755063][T15437] loop8: detected capacity change from 0 to 128
[  414.775725][T15437] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  414.787543][T15437] ext4 filesystem being mounted at /205/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  414.857875][T13806] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  415.191333][T15456] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3630'.
[  415.202904][T15456] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3630'.
[  415.686334][T15483] loop8: detected capacity change from 0 to 512
[  415.751603][T15488] loop7: detected capacity change from 0 to 512
[  415.766389][T15483] 
[  415.767385][T15483] ======================================================
[  415.770026][T15483] WARNING: possible circular locking dependency detected
[  415.772670][T15483] syzkaller #0 Tainted: G             L     
[  415.775085][T15483] ------------------------------------------------------
[  415.777482][T15483] syz.8.3641/15483 is trying to acquire lock:
[  415.779705][T15483] ffff8881a9abcb98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x205/0x3b0
[  415.782784][T15483] 
[  415.782784][T15483] but task is already holding lock:
[  415.785092][T15483] ffff8881b66e00c8 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x3db/0x6e0
[  415.787947][T15483] 
[  415.787947][T15483] which lock already depends on the new lock.
[  415.787947][T15483] 
[  415.791159][T15483] 
[  415.791159][T15483] the existing dependency chain (in reverse order) is:
[  415.794040][T15483] 
[  415.794040][T15483] -> #1 (&ei->xattr_sem){++++}-{4:4}:
[  415.796413][T15483]        down_write+0x96/0x200
[  415.797933][T15483]        ext4_destroy_inline_data+0x28/0xe0
[  415.799782][T15483]        ext4_do_writepages+0x51e/0x4600
[  415.801530][T15483]        ext4_writepages+0x241/0x3b0
[  415.803183][T15483]        do_writepages+0x32e/0x550
[  415.804781][T15483]        file_write_and_wait_range+0x36e/0x440
[  415.806773][T15483]        generic_buffers_fsync_noflush+0x70/0x1d0
[  415.808730][T15483]        ext4_sync_file+0x321/0xad0
[  415.810529][T15483]        ext4_buffered_write_iter+0x2ca/0x3a0
[  415.812713][T15483]        ext4_file_write_iter+0x298/0x1c10
[  415.814432][T15483]        vfs_write+0x61d/0xb90
[  415.815935][T15483]        __x64_sys_pwrite64+0x199/0x230
[  415.817794][T15483]        do_syscall_64+0xe2/0xf80
[  415.819648][T15483]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  415.821908][T15483] 
[  415.821908][T15483] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}:
[  415.824802][T15483]        __lock_acquire+0x15a5/0x2cf0
[  415.826575][T15483]        lock_acquire+0x106/0x330
[  415.828104][T15483]        percpu_down_read_internal+0x48/0x1c0
[  415.830139][T15483]        ext4_writepages+0x205/0x3b0
[  415.832248][T15483]        do_writepages+0x32e/0x550
[  415.834214][T15483]        __writeback_single_inode+0x133/0x1230
[  415.836593][T15483]        writeback_single_inode+0x493/0xc70
[  415.838961][T15483]        write_inode_now+0x1c2/0x290
[  415.841116][T15483]        iput+0xa73/0x1020
[  415.842936][T15483]        ext4_xattr_block_set+0x1fd4/0x2ad0
[  415.845066][T15483]        ext4_expand_extra_isize_ea+0x12cf/0x1ea0
[  415.847069][T15483]        __ext4_expand_extra_isize+0x30d/0x400
[  415.849082][T15483]        __ext4_mark_inode_dirty+0x45c/0x6e0
[  415.851398][T15483]        ext4_evict_inode+0x7a1/0xe60
[  415.853497][T15483]        evict+0x61e/0xb10
[  415.855298][T15483]        ext4_orphan_cleanup+0xc38/0x1470
[  415.857636][T15483]        ext4_fill_super+0x5932/0x61f0
[  415.859823][T15483]        get_tree_bdev_flags+0x431/0x4f0
[  415.862091][T15483]        vfs_get_tree+0x92/0x2a0
[  415.864038][T15483]        do_new_mount+0x329/0xa50
[  415.866084][T15483]        __se_sys_mount+0x31d/0x420
[  415.868211][T15483]        do_syscall_64+0xe2/0xf80
[  415.870239][T15483]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  415.872781][T15483] 
[  415.872781][T15483] other info that might help us debug this:
[  415.872781][T15483] 
[  415.876819][T15483]  Possible unsafe locking scenario:
[  415.876819][T15483] 
[  415.879704][T15483]        CPU0                    CPU1
[  415.881805][T15483]        ----                    ----
[  415.883848][T15483]   lock(&ei->xattr_sem);
[  415.885485][T15483]                                lock(&sbi->s_writepages_rwsem);
[  415.888432][T15483]                                lock(&ei->xattr_sem);
[  415.891003][T15483]   rlock(&sbi->s_writepages_rwsem);
[  415.893088][T15483] 
[  415.893088][T15483]  *** DEADLOCK ***
[  415.893088][T15483] 
[  415.896162][T15483] 3 locks held by syz.8.3641/15483:
[  415.898190][T15483]  #0: ffff8881a9aba0e0 (&type->s_umount_key#27/1){+.+.}-{4:4}, at: alloc_super+0x28c/0xaa0
[  415.902211][T15483]  #1: ffff8881a9aba610 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x274/0xe60
[  415.905901][T15483]  #2: ffff8881b66e00c8 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x3db/0x6e0
[  415.909854][T15483] 
[  415.909854][T15483] stack backtrace:
[  415.912090][T15483] CPU: 1 UID: 0 PID: 15483 Comm: syz.8.3641 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  415.912112][T15483] Tainted: [L]=SOFTLOCKUP
[  415.912119][T15483] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  415.912129][T15483] Call Trace:
[  415.912137][T15483]  <TASK>
[  415.912145][T15483]  dump_stack_lvl+0xe8/0x150
[  415.912167][T15483]  print_circular_bug+0x2e1/0x300
[  415.912186][T15483]  check_noncircular+0x12e/0x150
[  415.912205][T15483]  __lock_acquire+0x15a5/0x2cf0
[  415.912221][T15483]  ? __lock_acquire+0x6b5/0x2cf0
[  415.912236][T15483]  ? __lock_acquire+0x6b5/0x2cf0
[  415.912252][T15483]  ? ext4_writepages+0x205/0x3b0
[  415.912266][T15483]  lock_acquire+0x106/0x330
[  415.912277][T15483]  ? ext4_writepages+0x205/0x3b0
[  415.912295][T15483]  percpu_down_read_internal+0x48/0x1c0
[  415.912309][T15483]  ? ext4_writepages+0x205/0x3b0
[  415.912323][T15483]  ext4_writepages+0x205/0x3b0
[  415.912335][T15483]  ? is_bpf_text_address+0x26/0x2b0
[  415.912355][T15483]  ? __pfx_ext4_writepages+0x10/0x10
[  415.912373][T15483]  ? do_raw_spin_lock+0x12b/0x2f0
[  415.912389][T15483]  ? __pfx_ext4_writepages+0x10/0x10
[  415.912404][T15483]  do_writepages+0x32e/0x550
[  415.912423][T15483]  __writeback_single_inode+0x133/0x1230
[  415.912440][T15483]  ? do_raw_spin_unlock+0x4d/0x210
[  415.912459][T15483]  writeback_single_inode+0x493/0xc70
[  415.912474][T15483]  write_inode_now+0x1c2/0x290
[  415.912487][T15483]  ? __pfx_write_inode_now+0x10/0x10
[  415.912511][T15483]  ? do_raw_spin_unlock+0x4d/0x210
[  415.912529][T15483]  iput+0xa73/0x1020
[  415.912549][T15483]  ext4_xattr_block_set+0x1fd4/0x2ad0
[  415.912568][T15483]  ? __pfx_check_xattrs+0x10/0x10
[  415.912582][T15483]  ? __pfx_ext4_xattr_block_set+0x10/0x10
[  415.912595][T15483]  ? ext4_xattr_block_find+0x2d4/0x350
[  415.912635][T15483]  ext4_expand_extra_isize_ea+0x12cf/0x1ea0
[  415.912661][T15483]  __ext4_expand_extra_isize+0x30d/0x400
[  415.912678][T15483]  __ext4_mark_inode_dirty+0x45c/0x6e0
[  415.912699][T15483]  ext4_evict_inode+0x7a1/0xe60
[  415.912720][T15483]  ? __pfx_ext4_evict_inode+0x10/0x10
[  415.912735][T15483]  ? do_raw_spin_unlock+0x4d/0x210
[  415.912749][T15483]  ? __pfx_ext4_evict_inode+0x10/0x10
[  415.912766][T15483]  evict+0x61e/0xb10
[  415.912780][T15483]  ? __pfx_evict+0x10/0x10
[  415.912794][T15483]  ? _raw_spin_unlock+0x28/0x50
[  415.912811][T15483]  ? iput+0xcc2/0x1020
[  415.912829][T15483]  ext4_orphan_cleanup+0xc38/0x1470
[  415.912850][T15483]  ? __pfx_ext4_orphan_cleanup+0x10/0x10
[  415.912869][T15483]  ? ext4_register_li_request+0x259/0x720
[  415.912884][T15483]  ? errseq_check_and_advance+0x66/0x120
[  415.912900][T15483]  ext4_fill_super+0x5932/0x61f0
[  415.912926][T15483]  ? __pfx_ext4_fill_super+0x10/0x10
[  415.912941][T15483]  ? snprintf+0xe8/0x140
[  415.912959][T15483]  ? set_blocksize+0x20b/0x4b0
[  415.912980][T15483]  ? sb_set_blocksize+0x155/0x240
[  415.912997][T15483]  ? setup_bdev_super+0x4c1/0x5b0
[  415.913011][T15483]  get_tree_bdev_flags+0x431/0x4f0
[  415.913026][T15483]  ? __pfx_ext4_fill_super+0x10/0x10
[  415.913040][T15483]  ? __pfx_get_tree_bdev_flags+0x10/0x10
[  415.913057][T15483]  vfs_get_tree+0x92/0x2a0
[  415.913071][T15483]  do_new_mount+0x329/0xa50
[  415.913087][T15483]  ? apparmor_capable+0x137/0x1a0
[  415.913102][T15483]  ? __pfx_do_new_mount+0x10/0x10
[  415.913118][T15483]  ? ns_capable+0x89/0xe0
[  415.913131][T15483]  ? kmem_cache_free+0x195/0x610
[  415.913148][T15483]  __se_sys_mount+0x31d/0x420
[  415.913169][T15483]  ? __pfx___se_sys_mount+0x10/0x10
[  415.913188][T15483]  ? __x64_sys_mount+0x20/0xc0
[  415.913205][T15483]  do_syscall_64+0xe2/0xf80
[  415.913216][T15483]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  415.913228][T15483]  ? trace_irq_disable+0x37/0x100
[  415.913247][T15483]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  415.913261][T15483] RIP: 0033:0x7f635b79bf4a
[  415.913275][T15483] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  415.913287][T15483] RSP: 002b:00007f635c5e4e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  415.913301][T15483] RAX: ffffffffffffffda RBX: 00007f635c5e4ee0 RCX: 00007f635b79bf4a
[  415.913310][T15483] RDX: 0000200000000180 RSI: 0000200000000080 RDI: 00007f635c5e4ea0
[  415.913320][T15483] RBP: 0000200000000180 R08: 00007f635c5e4ee0 R09: 0000000000800700
[  415.913329][T15483] R10: 0000000000800700 R11: 0000000000000246 R12: 0000200000000080
[  415.913338][T15483] R13: 00007f635c5e4ea0 R14: 000000000000046f R15: 00002000000000c0
[  415.913353][T15483]  </TASK>
[  415.924811][T15488] EXT4-fs: Ignoring removed mblk_io_submit option
[  415.939508][T15483] EXT4-fs error (device loop8): ext4_xattr_inode_iget:441: inode #11: comm syz.8.3641: iget: bad extra_isize 90 (inode size 256)
[  415.970927][T15488] EXT4-fs: inline encryption not supported
[  415.973043][T15483] EXT4-fs error (device loop8): ext4_xattr_inode_iget:446: comm syz.8.3641: error while reading EA inode 11 err=-117
[  415.977491][T15488] EXT4-fs: Ignoring removed mblk_io_submit option
[  415.979033][T15483] EXT4-fs warning (device loop8): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  415.983910][T15488] EXT4-fs (loop7): Test dummy encryption mode enabled
[  415.985336][T15483] EXT4-fs error (device loop8): ext4_xattr_inode_iget:441: inode #11: comm syz.8.3641: iget: bad extra_isize 90 (inode size 256)
[  415.991761][T15488] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  415.994654][T15483] EXT4-fs error (device loop8): ext4_xattr_inode_iget:446: comm syz.8.3641: error while reading EA inode 11 err=-117
[  416.001905][T15488] EXT4-fs (loop7): 1 truncate cleaned up
[  416.003703][T15483] EXT4-fs error (device loop8): ext4_xattr_inode_iget:441: inode #18: comm syz.8.3641: iget: bad extra_isize 90 (inode size 256)
[  416.006275][T15488] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  416.007575][T15483] EXT4-fs error (device loop8): ext4_xattr_inode_iget:446: comm syz.8.3641: error while reading EA inode 18 err=-117
[  416.155909][T15483] EXT4-fs error (device loop8): ext4_xattr_inode_iget:441: inode #18: comm syz.8.3641: iget: bad extra_isize 90 (inode size 256)
[  416.161689][T15483] EXT4-fs error (device loop8): ext4_xattr_inode_iget:446: comm syz.8.3641: error while reading EA inode 18 err=-117
[  416.167047][T15483] EXT4-fs (loop8): 1 orphan inode deleted
[  416.170244][T15483] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  416.190674][T13806] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  416.250507][T13699] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
