last executing test programs:

3m12.525039137s ago: executing program 2 (id=1582):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv4_newrule={0x28, 0x20, 0xf4db158ec847dc8d, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1f}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x81}, 0x44004)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x40, 0x0}}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0)

3m12.454903882s ago: executing program 2 (id=1584):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000280)={'batadv0\x00', <r3=>0x0})
sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x24, r2, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x800)

3m12.393441159s ago: executing program 2 (id=1586):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000003c40)=@ipv6_newroute={0x2c, 0x18, 0x186e0ea4341572c1, 0x70ad2b, 0x25dfdbfe, {0xa, 0x14, 0x19fbc67d06a2282, 0x0, 0xfe, 0x0, 0x0, 0x7, 0x3300}, [@RTA_EXPIRES={0x8, 0x17, 0xffffffff}, @RTA_PRIORITY={0x8, 0x6, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040844}, 0x80)

3m12.287927351s ago: executing program 2 (id=1587):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000004, &(0x7f0000000c00)={[{@block_validity}, {@minixdf}, {@noblock_validity}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@debug}, {@usrjquota}, {@nolazytime}, {@norecovery}]}, 0xfe, 0x477, &(0x7f0000000780)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

3m12.154477398s ago: executing program 2 (id=1592):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0xa, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$eJzs3cFvG1kZAPBvnLhJs+mmC3sABGxZFgqq6iTubrTqhfYCQlUlRMWJQxsSN4pi11Hsiib0kB65V6ISJ+A/4MYBqScO3LjBjUs5IBWoQA0SB6MZT1I3sZNAnbiJfz9pMvPeTP29F/e953mR5wUwtC5ExGZEnImIOxExlecn+RbX2lt63csXDxe2XjxcSKLVuvX3JDuf5kXHv0m9k7/meER8/zsRP0r2xm2sb6zMV6uVtTw93aytTjfWNy4vF/Kc8tzs3MynVz4p962uH9R+/fzbyzd+8NvffOnZHza/+ZO0WJM/PZed66xHP7WrXozJjrzRiLhxFMEGZDT//8PJk7a2z0TEh1n7n4qR7N0EAE6zVmsqWlOdaQDgtEvv/ycjKZTyuYDJKBRKpfYc3vsxUajWG81LU/X79xYjm8M6H8XC3eVqZSafKzwfxSRNz2bHr9Ll19KPK1ci4r2IeDx2NjtfWqhXFwf5wQcAhtg7u8b/f421x/9OxUEVDgA4OuODLgAAcOyM/wAwfIz/ADB8/ofx37cDAeCUcP8PAMPH+A8Aw+fA8f/R8ZQDADgW37t5M91aW+3nX28/qfvyYqWxUqrdXygt1NdWS0v1+lK1UlpotQ56vWq9vjr78U6ysb5xu1a/f695e7k2v1S5XfEsAQAYvPc+ePqndNDfvHo226JjLQdjNZxuhUEXABiYkUEXABgY3+eB4XWIe3zTAHDKdVmity2fIEh6XfDE4q9wUl38vPl/GFZvMv9v7gBOtv9v/v9bfS8HcPyM4TC8Wq3Emv8AMGTM8QM9//6f6/mIkCf9LwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcFJPZlhRK2Vrgm+nPQqkUcS4izkcxubtcrcxExLsR8cex4lianh10oQGAN1T4a5Kv/3Vx6qPJ3WfPJP8ey/YR8eOf3/rZg/lmc202zf/HTn7zSZp/trlWPjOICgAAna7tzcrG73K+77iRf/ni4cL2dpxFfH69vbhoGncr39pnRmM0249HMSIm/pnk6bb088pIH+JvPoqIz23XfzwedESYzOZA2iuf7o6fxj7X9/idv//d8Quv1beQnUv3xex38dnYVTjgQE+vt/vJvO2lTTxvf4W4kO27t//xrId6c2n/lzbXrT39X2Gn/xvZEz/J2vyFnfT+JXn+8e++uyezNdU+9yjiC6Pd4ic78ZPu/W/xo0PW8c9f/PKHvc61fhFxsWv9t1ekrmXd7HSztjrdWN+4vFybX6osVe6Vy3OzczOfXvmkPJ3NUbd//r5bjL9dvfRur/hp/Sd6xB/fv/7xtUPW/5f/ufPDr+wT/xtf7f7+v79P/HRM/Poh489PXOu5fHcaf7FH/Q94/+PSIeM/+8vG4iEvBQCOQWN9Y2W+Wq2sHXCQftY86BoHhz9I7+3fgmJkB7EZ0a8XzCYlIqLrNekn6rejykd1kAws+q/6/YKD7pmAo/aq0Q+6JAAAAAAAAAAAAAAAQC+N9Y2Vse7f1urbwaDrCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOn13wAAAP//KHnENg==")
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f00000005c0)='\"', 0x1, 0x4fed0)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1, 0x0)
pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c)

3m10.973241137s ago: executing program 2 (id=1602):
r0 = syz_open_dev$I2C(&(0x7f0000000040), 0xfffffffffffffffa, 0x2003)
ioctl$I2C_FUNCS(r0, 0x705, 0x0)

3m10.870267167s ago: executing program 32 (id=1602):
r0 = syz_open_dev$I2C(&(0x7f0000000040), 0xfffffffffffffffa, 0x2003)
ioctl$I2C_FUNCS(r0, 0x705, 0x0)

2m59.124348337s ago: executing program 1 (id=1739):
r0 = eventfd2(0x0, 0x0)
io_setup(0x3ff, &(0x7f0000000500)=<r1=>0x0)
io_submit(r1, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x1, r0, 0x0, 0x0, 0x4, 0x0, 0x1, r0}])

2m58.981375971s ago: executing program 1 (id=1743):
r0 = socket$nl_generic(0x11, 0x3, 0x10)
syz_emit_ethernet(0x2b, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x11, 0x0, 0x0, @multicast1, '\x00'}}}}}, 0x0)
sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0)

2m58.914566645s ago: executing program 1 (id=1746):
syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x200000, &(0x7f0000000440)=ANY=[@ANYRES16=0x0, @ANYRES8=0x0, @ANYRESHEX, @ANYRES8, @ANYRESOCT, @ANYRES16, @ANYRES16, @ANYRESDEC, @ANYBLOB="48bdb0a10f32dcd5fdbfa532c164f4179256752b2122532551cd97b3bae22e012c39572a16bd3fbeeead717134851c249aa3fa8c446270ef0d055d733070c8447b23e34fe2c7d08088411097f670540e51c5b089386bac3b708aef00ad4d9b654acd5e0b20a266dcac6bcb13a3d4922d1851f7d82d24acc2d8f4ab02ef553f0885dc464506212505cbf180b9", @ANYRES8, @ANYRESDEC, @ANYBLOB="301dde0bc6c2c3c9d2a31fe01cd1ba009254c95d7ab478d067e8"], 0x1, 0x1e7, &(0x7f00000001c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
lseek(r0, 0x80000000, 0x0)
getdents64(r0, 0x0, 0x0)

2m58.844462036s ago: executing program 1 (id=1747):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x8bf81a, 0x0)
mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0)
umount2(&(0x7f0000000280)='./file0/file0/file0\x00', 0xa)

2m58.76424002s ago: executing program 1 (id=1749):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x40d, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5019}}, 0x20}, 0x1, 0x0, 0x0, 0x48844}, 0x40)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$cgroup_devices(r0, &(0x7f0000000140)='devices.deny\x00', 0x2, 0x0)
ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427)
shutdown(0xffffffffffffffff, 0x0)
close(0x3)
readv(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0)
read$msr(r1, &(0x7f000001aa40)=""/102392, 0x18ff8)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r3, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r3, 0x0, <r4=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f00000000c0)={0x48, 0x7, r4, 0x0, 0x10000, 0x0, 0x4, 0x29a13e, 0xe73d3})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)

2m58.493009608s ago: executing program 1 (id=1751):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x38, 0x2, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x4, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast1}}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40840}, 0x4010)

2m58.309107117s ago: executing program 33 (id=1751):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x38, 0x2, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x4, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast1}}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40840}, 0x4010)

1m43.273359233s ago: executing program 4 (id=2632):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r1=>0x0})
getpid()
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x58, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xc15}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1c, 0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x58}, 0x1, 0x0, 0x0, 0x28001}, 0x8000)

1m43.191638753s ago: executing program 4 (id=2633):
r0 = socket(0x840000000002, 0x3, 0xff)
setuid(0xee01)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x891c, &(0x7f0000000000)={r0})

1m43.094451538s ago: executing program 4 (id=2634):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x400000000, 0xe, 0xfffc, 0xffff, 0x0, 0x0, 0xffffffff, 0x120, 0x2000, 0xa8, r2, r3, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50)
write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x1086cce0, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1)
ioctl$BLKPG(r4, 0x1269, &(0x7f0000000040)={0x1, 0x0, 0x98, &(0x7f00000004c0)={0x200, 0x6b06, 0x13}})

1m42.912253946s ago: executing program 4 (id=2636):
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000640), 0x1, 0x5d7, &(0x7f0000000e40)="$eJzs3W2IHGcdAPD/7t6l5hJNK7Waapur1Tb2ZS93V4KpBclHbVNqXz4ZiUeyuYTby8a7DfauFq4UoYKRUP2knxQEFT9EBAXxQ0Gs+Enwm1IqWEQJhGIpikY9mdmZuOft3fZ6L6M7vx/M3TPPzOZ5Zv/8Z2eePDsXQGmNJj8qEXsj4uWI2NdZXbnDaOfXpcnLZ5KlEsvLT7xeSfd7dvLymXzX/HV7kh/ViPclv34esWd4dbvzC4szU81mYy5bH2vPnh+bX1i8/+zs1HRjunFuYnL88KGJw+OHj2zZsX73mRc/+eozj1y7eHXk26/sP/DXpL97s23dx7FVRmM0e0+G44PdGyoRH9/qxgpSi4ihiHhP0R1hw47/+stP5fEbTvN/X9TStYiRyeNv7IuLD3XvXy2qo8C2WE6ttbW2DAyyShTdA6AY+Sd9cv+bLzt17TEzKDfB/8euHu3cAD6bje1cuh7/oev3e8PbdH9/4E8Ro9G+5/In7vhissQ2jcOwtqXnIh2oW53/lXRs7MZsvzsj4mBEfCgiPhwRd0XE3Zts+8nPJPH/3Ve768R/Z73V+H8kIuoRcU9E3BsR90XE/Zts+5ZjSfz3fLa7TvzL49ZPFd0DivSrF4ruAen5/9DQUK/z/2bH++/os305/X/Fpde66/L2f7nJtvnf9/gTRfeAIj16uOgesLNqK9a+8XphHSHz0tHOzdzqz/9q3NK1X1J+b+dWMfYn1+4R8f6I+EBE3BYRt0fEgXw+0Vv0hYeT/euN7rrV93/VK5s5PtZ39WjEQ11zuy51xT9zYy1be2c6HjBcOX222TgUEe9Kx4SGb0jWx9dp40tLP3u4V/33b0vi/7FH8/G/ZEnaz8cCs35cGbph5etOTbWnNnvcdFx9LuLWoV7xr2QzgTrz+pYjYuxttvH8wR/8olf9Rx9P4n/XfevHn+20/M3OOG6v+Ocq68/PHEvPB2P5WWG15+Pmi73qH7uWxP+134p/cZL8H1k//un5//p83fmNtzF06cpXetbPJvH/w0/fzvl/V+XJtIO7srqnp9rtufGIXZVHKtmUxv/UT2y8z4Mqfz/y9yuJ/8E7e3/+vzt7TfKGJpn9z4j4V0T8LSL+HhHXIuIfEfHniHhjnTZ/8uKDP+5VP/lUEv8/viz/i5PE/1Sf/K+syP/Vhd2x5qa08PXbj3y+V9vf+VYS/5F6//x/IO3MwazG9V9/64RjRaHofgIAAAAAAACwNarpM/Aq1fr1crVar3ee4XdzjFSbrfn2vadbF86diuz7oMPVfKbXvq75oOPZd0Xz9Yn/Wp+MiJsi4oXa7nS9frLVPFX0wUNJ7Y149YefO7lrzxr5n3ilFrG76I4CWy7J/9Nfqy0l5TdrRfcG2ElJ/n/vzdn0e1nyH8pF/sPgGNrg/vIfykv+Q3nJfygv+Q/lJf+hvOQ/lJf8h/Lqzn+gnB47dixZlvPnfp5rTZ+dOXP+yMSh+uyFk/WTrbnz9elWazr9xs5s/3+v2WqdH38gLjw91m7Mt8fmFxZPzLYunGufSJ8bfaIxvAPHBPT3l99/+kc3HXjpN5WIWHpwd7pE1zO15SoMNrf+UF4bnTcMDA7X+EClz/Z3rLXh+Nb3BdgZ/f7Gv/sDGFx37zf+D2Vl/B/Ky/U9lJdrfMD4P5RPv/F/YHA15uYXFmemms1VhaJ7BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQTvMLizNTzWZjTkFBoXSFfwcAAP//nMdHRQ==")
creat(&(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1)
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140))
sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x4040180)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0)

1m42.794081021s ago: executing program 4 (id=2637):
unshare(0x6020480)
r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8)
fcntl$setown(r0, 0x40a, 0x0)

1m41.929208376s ago: executing program 4 (id=2643):
r0 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000040)="02", 0x1}, {&(0x7f0000000800)="347302a9030ce4047446787103b50e", 0xf}], 0x2}, 0x4000800)

1m41.883994251s ago: executing program 34 (id=2643):
r0 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000040)="02", 0x1}, {&(0x7f0000000800)="347302a9030ce4047446787103b50e", 0xf}], 0x2}, 0x4000800)

1m17.672681033s ago: executing program 5 (id=2878):
r0 = fanotify_init(0x18, 0x1)
fanotify_mark(r0, 0x71, 0x40000009, 0xffffffffffffffff, 0x0)

1m17.330232729s ago: executing program 5 (id=2881):
syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000200)={[{@uid={'uid', 0x3d, 0xee01}}, {@time_offset={'time_offset', 0x3d, 0x4}}, {@dmask={'dmask', 0x3d, 0x400005}}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@errors_remount}, {@discard}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}, {@dmask={'dmask', 0x3d, 0x1}}, {@namecase}, {@gid}]}, 0x1, 0x153b, &(0x7f0000001f80)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90)
getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000)

1m17.149155924s ago: executing program 5 (id=2883):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000)
futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)

1m17.074632161s ago: executing program 5 (id=2884):
syz_mount_image$iso9660(&(0x7f00000002c0), &(0x7f00000000c0)='./file0\x00', 0x8010, &(0x7f0000000040)={[{@map_acorn}, {@showassoc}, {@session={'session', 0x3d, 0x8}}]}, 0x1, 0x584, &(0x7f0000000300)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000100)='./file0\x00')
newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x100)

1m16.956320855s ago: executing program 5 (id=2885):
prlimit64(0x0, 0xe, 0x0, 0x0)
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0xa5, 0x55bc, &(0x7f0000006a80)="$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")

1m16.668840003s ago: executing program 5 (id=2888):
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map, 0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)

1m16.520336203s ago: executing program 35 (id=2888):
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map, 0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)

2.896276538s ago: executing program 6 (id=3768):
syz_usb_connect(0x5, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100390455a2004233f02f29e01020301090224000100ff500d0904fb8002080662ff09050500080003100209"], &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0})
fadvise64(0xffffffffffffffff, 0x8001, 0x289a, 0x0)

1.48638955s ago: executing program 6 (id=3790):
r0 = epoll_create1(0x80000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x17a, 0x0)
epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014})
epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400)
socket$nl_generic(0x10, 0x3, 0x10)
pselect6(0x40, &(0x7f0000000000)={0xa, 0x7ffffffe, 0x2, 0x10000000000006, 0xf, 0x8, 0x80000002, 0x8}, 0x0, 0x0, 0x0, 0x0)

811.785273ms ago: executing program 0 (id=3793):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x80, 0x700, 0x4, 0x8001, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x65, 0x0, 0x0, 0x4, 0x0, @remote, @empty}}}})

738.487388ms ago: executing program 0 (id=3794):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/meminfo\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f00000022c0)={0x2020}, 0x2020)

738.185574ms ago: executing program 3 (id=3795):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8)

607.891809ms ago: executing program 3 (id=3796):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)={0x3c, r1, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r0}}]}, 0x3c}}, 0x20000000)

522.407148ms ago: executing program 3 (id=3797):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noblock_validity}, {}, {@nobh}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH")
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), &(0x7f0000001d00)=ANY=[], 0x381, 0x0)

522.277467ms ago: executing program 0 (id=3798):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000001200)=ANY=[@ANYBLOB="180300000000000000000000000000008510000006000000180000000000000000000000000000006600000000000000180000000000000000000000000000009500000000000000970300000100000095"], &(0x7f0000000000)='GPL\x00'}, 0x90)

395.592199ms ago: executing program 3 (id=3799):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000002e00090027bd700000000000040000000c001700020000000000000008000900", @ANYRES32], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0)

275.700605ms ago: executing program 6 (id=3800):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0, <r2=>0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)=r1}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f00000000c0), &(0x7f00000001c0)=r1}, 0x20)

275.530999ms ago: executing program 0 (id=3801):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190)
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e001"], 0x190)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000001080)={0x2, {{0x2, 0x4e21, @multicast1}}, {{0x2, 0x4e1f, @dev={0xac, 0x14, 0x14, 0x43}}}}, 0x108)
setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f00000000c0)=ANY=[@ANYBLOB="020000000000000002004e21e0000001"], 0x90)

275.447551ms ago: executing program 3 (id=3802):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000c3aff8ff1001000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x96, &(0x7f00000015c0)=""/150, 0x0, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)

193.265198ms ago: executing program 6 (id=3803):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'wlan1\x00', {0x2, 0x4e23, @broadcast}})

192.981208ms ago: executing program 3 (id=3804):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x9, 0x1100, 0x40, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x0, 0x1, {0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x22801, 0x10)

108.699083ms ago: executing program 6 (id=3805):
syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x2000c12, &(0x7f0000000680)={[{@check_relaxed}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@map_off}, {@hide}, {@session={'session', 0x3d, 0x2a}}, {@overriderock}, {@check_strict}, {@iocharset={'iocharset', 0x3d, 'cp861'}}, {@map_off}, {@unhide}, {@uid}, {@check_relaxed}, {@dmode={'dmode', 0x3d, 0xe565}}, {@map_off}, {@map_acorn}]}, 0x3, 0xa06, &(0x7f0000002700)="$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")
open$dir(&(0x7f0000000080)='./file0\x00', 0x60440, 0x40)

108.505948ms ago: executing program 0 (id=3806):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000040)={0x7ff, 0x9, 0xffffff00, 0x80000000, 0x9, "77a0664b00", 0x2, 0x201c680})

161.48µs ago: executing program 0 (id=3807):
preadv(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x3)

0s ago: executing program 6 (id=3808):
r0 = timerfd_create(0x9, 0x800)
timerfd_settime(r0, 0x1, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0)
timerfd_gettime(r0, &(0x7f0000000000))

kernel console output (not intermixed with test programs):

ing (device loop3): ext4_enable_quotas:7261: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  264.361586][T11900] EXT4-fs (loop3): Cannot turn on quotas: error -117
[  264.364961][T11900] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #14: comm syz.3.2401: invalid orphan symlink nlink 1
[  264.368648][T11900] loop3: lost file I/O error report for ino 14 type 5 pos 0x0 len 0x0 error -117
[  264.369038][T11900] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.2401: couldn't read orphan inode 14 (err -117)
[  264.375211][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  264.375224][    C1] EXT4-fs (loop3): last error at time 1775722232: ext4_orphan_get:1397: inode 14
[  264.382074][T11900] loop3: lost filesystem error report for type 5 error -117
[  264.384158][ T5874] microsoft 0003:045E:07DA.0008: ignoring exceeding usage max
[  264.389273][ T5874] microsoft 0003:045E:07DA.0008: ignoring exceeding usage max
[  264.391708][T11900] EXT4-fs (loop3): 1 truncate cleaned up
[  264.395645][T11900] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  264.411890][ T5874] microsoft 0003:045E:07DA.0008: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[  264.416612][ T5874] microsoft 0003:045E:07DA.0008: no inputs found
[  264.417992][ T9892] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  264.418779][ T5874] microsoft 0003:045E:07DA.0008: could not initialize ff, continuing anyway
[  264.552488][T11905] loop3: detected capacity change from 0 to 4096
[  264.569542][T11906] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  264.602337][ T5874] usb 5-1: USB disconnect, device number 11
[  264.923102][   T34] audit: type=1326 audit(1775722233.106:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11921 comm="syz.0.2411" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb4e659c819 code=0x0
[  265.306152][T11946] loop4: detected capacity change from 0 to 128
[  265.333449][T11946] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  265.338975][T11946] hpfs: filesystem error: improperly stopped
[  265.341264][T11946] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  265.344159][T11946] hpfs: You really don't want any checks? You are crazy...
[  265.348304][T11946] hpfs: hpfs_map_sector(): read error
[  265.350456][T11946] hpfs: code page support is disabled
[  265.352556][T11946] hpfs: hpfs_map_4sectors(): unaligned read
[  265.354917][T11946] hpfs: hpfs_map_4sectors(): unaligned read
[  265.360336][T11946] hpfs: filesystem error: unable to find root dir
[  265.434242][T11948] loop4: detected capacity change from 0 to 764
[  265.688292][ T5959] libceph: connect (1)[c::]:6789 error -101
[  265.694077][ T5959] libceph: mon0 (1)[c::]:6789 connect error
[  265.708710][ T5959] libceph: connect (1)[c::]:6789 error -101
[  265.711049][ T5959] libceph: mon0 (1)[c::]:6789 connect error
[  265.990037][ T5874] libceph: connect (1)[c::]:6789 error -101
[  265.992438][ T5874] libceph: mon0 (1)[c::]:6789 connect error
[  266.483871][T11953] ceph: No mds server is up or the cluster is laggy
[  266.533726][ T5874] libceph: connect (1)[c::]:6789 error -101
[  266.539168][ T5874] libceph: mon0 (1)[c::]:6789 connect error
[  266.662048][T11962] loop4: detected capacity change from 0 to 512
[  266.673378][T11962] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  266.709143][T11962] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.2427: bad orphan inode 131083
[  266.714736][T11962] loop4: lost filesystem error report for type 5 error -117
[  266.715891][T11962] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  266.724509][T11962] EXT4-fs error (device loop4): ext4_inlinedir_to_tree:1332: inode #12: block 7: comm syz.4.2427: path /189/bus/file0: bad entry in directory: directory entry overrun - offset=80, inode=1560281102, rec_len=1024, size=60 fake=0
[  266.771240][T10256] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  266.946133][T11974] comedi comedi0: Minor -1 is invalid!
[  267.472616][ T5818] Bluetooth: hci1: unexpected event for opcode 0x2003
[  267.980523][T11995] loop4: detected capacity change from 0 to 512
[  267.999735][T11995] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102]
[  268.009338][T11995] System zones: 1-12
[  268.018114][T11995] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.2440: error while reading EA inode 32 err=-116
[  268.029891][T11995] loop4: lost filesystem error report for type 5 error -117
[  268.037014][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  268.041552][    C0] EXT4-fs (loop4): initial error at time 1775722236: ext4_xattr_inode_iget:446
[  268.044166][    C0] EXT4-fs (loop4): last error at time 1775722236: ext4_xattr_inode_iget:446
[  268.048677][T11995] EXT4-fs (loop4): Remounting filesystem read-only
[  268.051207][T11995] EXT4-fs warning (device loop4): ext4_evict_inode:268: couldn't mark inode dirty (err -30)
[  268.057251][T11995] EXT4-fs (loop4): 1 orphan inode deleted
[  268.071207][T11995] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  268.100242][T10256] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  268.207624][T12002] loop3: detected capacity change from 0 to 512
[  268.245374][T12002] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  268.255193][T12002] ext4 filesystem being mounted at /247/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  268.322585][T12008] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2445'.
[  268.384015][T12011] sit0: entered promiscuous mode
[  268.391998][T12011] netlink: 'syz.4.2446': attribute type 1 has an invalid length.
[  268.395732][T12011] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2446'.
[  268.456811][ T9892] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  268.666077][T12023] loop3: detected capacity change from 0 to 1024
[  268.699008][T12021] loop4: detected capacity change from 0 to 4096
[  268.725793][T12021] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  268.765750][T12021] ntfs3(loop4): ino=19, mi_enum_attr
[  268.767752][T12021] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  268.833156][T12027] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2454'.
[  268.873975][T12029] loop4: detected capacity change from 0 to 256
[  268.882562][T12029] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x1d73664b, utbl_chksum : 0xe619d30d)
[  268.996021][T12035] exFAT-fs (loop4): start_clu is invalid cluster(0xffffffff)
[  269.623779][T12051] IPv6: Can't replace route, no match found
[  269.722175][T12053] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2465'.
[  269.787018][T12055] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2466'.
[  269.789840][T12055] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2466'.
[  270.430694][   T34] audit: type=1326 audit(1775722238.225:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12077 comm="syz.3.2476" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6f979c819 code=0x7ffc0000
[  270.460941][   T34] audit: type=1326 audit(1775722238.225:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12077 comm="syz.3.2476" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6f979c819 code=0x7ffc0000
[  270.485752][   T34] audit: type=1326 audit(1775722238.225:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12077 comm="syz.3.2476" exe="/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7fe6f979c819 code=0x7ffc0000
[  270.504701][   T34] audit: type=1326 audit(1775722238.225:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12077 comm="syz.3.2476" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6f979c819 code=0x7ffc0000
[  271.092462][T12101] loop3: detected capacity change from 0 to 2048
[  271.105263][T12101] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  271.119419][ T5958] udevd[5958]: incorrect nilfs2 checksum on /dev/loop3
[  271.134680][T12102] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  271.157328][   T34] audit: type=1800 audit(1775722238.937:89): pid=12101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2487" name="file1" dev="loop3" ino=15 res=0 errno=0
[  271.235969][T12103] NILFS error (device loop3): __nilfs_read_inode: invalid file type bits in mode 0177777 for inode 12
[  271.253237][T12103] Remounting filesystem read-only
[  271.264058][T12105] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2488'.
[  271.517959][ T9892] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer
[  271.717422][T12124] loop4: detected capacity change from 0 to 512
[  271.720726][T12124] EXT4-fs: Ignoring removed mblk_io_submit option
[  271.724966][T12124] EXT4-fs: inline encryption not supported
[  271.727455][T12124] EXT4-fs: Ignoring removed mblk_io_submit option
[  271.730573][T12124] EXT4-fs (loop4): Test dummy encryption mode enabled
[  271.737285][T12124] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  271.744205][T12124] EXT4-fs (loop4): 1 truncate cleaned up
[  272.036412][T12124] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  272.156762][T12130] overlayfs: failed to clone upperpath
[  272.163313][T10256] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  272.355121][T12133] loop4: detected capacity change from 0 to 32768
[  272.358578][T12133] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2498 (12133)
[  272.383567][T12133] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  272.386627][T12133] BTRFS info (device loop4): using crc32c checksum algorithm
[  272.425587][T12133] BTRFS info (device loop4): enabling ssd optimizations
[  272.427669][T12133] BTRFS info (device loop4): turning on async discard
[  272.431899][T12133] BTRFS info (device loop4): enabling free space tree
[  272.734643][T12157] loop3: detected capacity change from 0 to 8192
[  273.598993][T10256] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  273.922196][T12193] ntfs3(nullb0): Primary boot signature is not NTFS.
[  273.924723][T12193] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00
[  274.234984][ T5959] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  274.273272][T12219] loop3: detected capacity change from 0 to 1024
[  274.275927][T12219] EXT4-fs: Ignoring removed bh option
[  274.313643][T12219] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  274.344954][ T9892] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  274.405860][ T5959] usb 5-1: Using ep0 maxpacket: 8
[  274.411183][ T5959] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  274.414105][ T5959] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  274.452319][ T5959] pvrusb2: Hardware description: Terratec Grabster AV400
[  274.454821][ T5959] pvrusb2: **********
[  274.456107][ T5959] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  274.461886][ T5959] pvrusb2: Important functionality might not be entirely working.
[  274.464323][ T5959] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  274.467625][ T5959] pvrusb2: **********
[  275.040732][T12225] random: crng reseeded on system resumption
[  275.059611][ T2399] pvrusb2: Invalid write control endpoint
[  275.098309][ T2399] pvrusb2: Invalid write control endpoint
[  275.100802][ T2399] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  275.104283][ T2399] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  275.107324][ T2399] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  275.116532][ T2399] pvrusb2: Device being rendered inoperable
[  275.119060][ T2399] cx25840 2-0044: Unable to detect h/w, assuming cx23887
[  275.122088][ T2399] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b)
[  275.126764][ T2399] pvrusb2: Attached sub-driver cx25840
[  275.128950][ T2399] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  275.133051][ T2399] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  275.272002][  T929] usb 5-1: USB disconnect, device number 12
[  275.678014][T12238] loop3: detected capacity change from 0 to 32768
[  275.689619][T12238] XFS (loop3): DAX unsupported by block device. Turning off DAX.
[  275.697141][T12238] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  275.720755][T12238] XFS (loop3): Ending clean mount
[  275.730864][T12238] XFS (loop3): Quotacheck needed: Please wait.
[  275.756965][T12238] XFS (loop3): Quotacheck: Done.
[  275.762585][   T34] audit: type=1800 audit(1775722243.251:90): pid=12238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2528" name="file2" dev="loop3" ino=4423 res=0 errno=0
[  275.920249][T12267] : renamed from vlan0
[  275.957144][T12270] sock: sock_timestamping_bind_phc: sock not bind to device
[  276.111164][T12278] netlink: 'syz.0.2542': attribute type 2 has an invalid length.
[  276.352873][ T9892] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  276.652735][T12287] bond1: entered allmulticast mode
[  276.654510][T12287] 8021q: adding VLAN 0 to HW filter on device bond1
[  277.221605][T12298] netlink: 'syz.4.2550': attribute type 1 has an invalid length.
[  277.267404][T12302] loop4: detected capacity change from 0 to 256
[  277.302274][T12302] FAT-fs (loop4): Directory bread(block 64) failed
[  277.304882][T12302] FAT-fs (loop4): Directory bread(block 65) failed
[  277.308025][T12302] FAT-fs (loop4): Directory bread(block 66) failed
[  277.310502][T12302] FAT-fs (loop4): Directory bread(block 67) failed
[  277.313651][T12302] FAT-fs (loop4): Directory bread(block 68) failed
[  277.316168][T12302] FAT-fs (loop4): Directory bread(block 69) failed
[  277.318672][T12302] FAT-fs (loop4): Directory bread(block 70) failed
[  277.320454][T12304] xt_connbytes: Forcing CT accounting to be enabled
[  277.320840][T12302] FAT-fs (loop4): Directory bread(block 71) failed
[  277.325853][T12302] FAT-fs (loop4): Directory bread(block 72) failed
[  277.327872][T12302] FAT-fs (loop4): Directory bread(block 73) failed
[  277.509201][T12317] loop4: detected capacity change from 0 to 128
[  278.652245][T12347] loop3: detected capacity change from 0 to 8
[  278.806345][T12342] loop4: detected capacity change from 0 to 32768
[  278.823625][T12342] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  278.846571][T12342] XFS (loop4): Ending clean mount
[  278.928979][T10256] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  279.132355][T12371] loop4: detected capacity change from 0 to 2048
[  279.297273][T12377] loop3: detected capacity change from 0 to 4096
[  279.306528][T12377] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  279.314549][T12377] ntfs3(loop3): Failed to load $Extend (-22).
[  279.316718][T12377] ntfs3(loop3): Failed to initialize $Extend.
[  279.490626][T12388] loop3: detected capacity change from 0 to 16
[  279.501796][T12388] erofs (device loop3): mounted with root inode @ nid 36.
[  280.002170][T12427] loop4: detected capacity change from 0 to 256
[  280.049119][T12429] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2607'.
[  280.059430][T12427] FAT-fs (loop4): Directory bread(block 64) failed
[  280.061348][T12427] FAT-fs (loop4): Directory bread(block 65) failed
[  280.063198][T12427] FAT-fs (loop4): Directory bread(block 66) failed
[  280.076377][T12427] FAT-fs (loop4): Directory bread(block 67) failed
[  280.078825][T12427] FAT-fs (loop4): Directory bread(block 68) failed
[  280.080633][T12427] FAT-fs (loop4): Directory bread(block 69) failed
[  280.082600][T12427] FAT-fs (loop4): Directory bread(block 70) failed
[  280.084466][T12427] FAT-fs (loop4): Directory bread(block 71) failed
[  280.086403][T12427] FAT-fs (loop4): Directory bread(block 72) failed
[  280.088407][T12427] FAT-fs (loop4): Directory bread(block 73) failed
[  280.204028][T12439] loop3: detected capacity change from 0 to 128
[  280.346721][   T34] audit: type=1326 audit(1775722247.538:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12446 comm="syz.3.2617" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe6f979c819 code=0x0
[  280.603923][   T33] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  280.762318][   T33] usb 5-1: Using ep0 maxpacket: 32
[  280.766660][   T33] usb 5-1: unable to get BOS descriptor or descriptor too short
[  280.770593][   T33] usb 5-1: config 6 has an invalid interface number: 113 but max is 0
[  280.774084][   T33] usb 5-1: config 6 has no interface number 0
[  280.776374][   T33] usb 5-1: config 6 interface 113 altsetting 7 bulk endpoint 0x2 has invalid maxpacket 8
[  280.780138][   T33] usb 5-1: config 6 interface 113 has no altsetting 0
[  280.785355][   T33] usb 5-1: New USB device found, idVendor=0403, idProduct=da73, bcdDevice=90.21
[  280.789260][   T33] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  280.792701][   T33] usb 5-1: Product: syz
[  280.794406][   T33] usb 5-1: Manufacturer: syz
[  280.796130][   T33] usb 5-1: SerialNumber: syz
[  280.810203][T12449] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  281.039132][   T33] ftdi_sio 5-1:6.113: FTDI USB Serial Device converter detected
[  281.043900][   T33] ftdi_sio ttyUSB0: unknown device type: 0x9021
[  281.050483][   T33] usb 5-1: USB disconnect, device number 13
[  281.053945][   T33] ftdi_sio 5-1:6.113: device disconnected
[  281.265687][T12460] netlink: 'syz.3.2621': attribute type 21 has an invalid length.
[  281.267937][T12460] netlink: 'syz.3.2621': attribute type 6 has an invalid length.
[  281.270190][T12460] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2621'.
[  281.582576][T12466] loop3: detected capacity change from 0 to 32768
[  281.597374][T12466] (syz.3.2624,12466,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  281.616378][T12466] (syz.3.2624,12466,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  281.696574][T12466] JBD2: Ignoring recovery information on journal
[  281.740133][T12466] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  281.802692][ T9892] ocfs2: Unmounting device (7,3) on (node local)
[  282.353977][T12487] bridge0: port 3(vlan2) entered blocking state
[  282.358977][T12487] bridge0: port 3(vlan2) entered disabled state
[  282.361602][T12487] vlan2: entered allmulticast mode
[  282.363529][T12487] bridge0: entered allmulticast mode
[  282.368209][T12487] vlan2: left allmulticast mode
[  282.370060][T12487] bridge0: left allmulticast mode
[  282.548280][T12493] 0x000000000200-0x000000006d06 : ""
[  282.593773][T12493] ftl_cs: FTL header corrupt!
[  282.689357][T12500] loop4: detected capacity change from 0 to 512
[  282.722249][T12500] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  282.755231][T12500] EXT4-fs error (device loop4): ext4_lookup:1785: inode #15: comm syz.4.2636: iget: checksum invalid
[  282.792723][T10256] EXT4-fs error (device loop4): ext4_readdir:225: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 0
[  282.799710][T10256] EXT4-fs error (device loop4): ext4_readdir:225: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 3072
[  282.811393][T10256] EXT4-fs error (device loop4): ext4_empty_dir:3078: inode #11: comm syz-executor: Directory block failed checksum
[  282.818217][T10256] EXT4-fs error (device loop4): ext4_readdir:225: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 0
[  282.822972][T10256] EXT4-fs error (device loop4): ext4_readdir:225: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 3072
[  282.832022][T10256] EXT4-fs error (device loop4): ext4_empty_dir:3078: inode #11: comm syz-executor: Directory block failed checksum
[  282.837404][T10256] EXT4-fs error (device loop4): ext4_readdir:225: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 0
[  282.842303][T10256] EXT4-fs error (device loop4): ext4_readdir:225: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 3072
[  282.848848][T10256] EXT4-fs error (device loop4): ext4_empty_dir:3078: inode #11: comm syz-executor: Directory block failed checksum
[  283.618920][T10256] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  283.682390][ T5872] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  283.733120][  T929] usb 4-1: new full-speed USB device number 13 using dummy_hcd
[  283.784290][ T5872] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  283.824564][   T56] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  283.828904][   T56] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  283.832793][   T56] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  283.837809][   T56] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  283.854080][T12522] xt_TPROXY: Can be used only with -p tcp or -p udp
[  283.857344][   T56] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  283.857884][ T5872] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  283.907809][  T929] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  283.911025][  T929] usb 4-1: config 0 has no interface number 0
[  283.913299][  T929] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  283.925032][  T929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  283.942958][  T929] usb 4-1: config 0 descriptor??
[  283.949807][  T929] usb 4-1: selecting invalid altsetting 1
[  283.962647][  T929] dvb_ttusb_budget: ttusb_init_controller: error
[  283.964605][  T929] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  283.972231][ T5872] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  283.999387][  T929] DVB: Unable to find symbol cx22700_attach()
[  284.028270][  T929] DVB: Unable to find symbol tda10046_attach()
[  284.030181][  T929] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[  284.169338][T12519] chnl_net:caif_netlink_parms(): no params data found
[  284.181952][  T929] usb 4-1: USB disconnect, device number 13
[  284.256456][ T5872] bridge_slave_1: left allmulticast mode
[  284.258133][ T5872] bridge_slave_1: left promiscuous mode
[  284.267228][ T5872] bridge0: port 2(bridge_slave_1) entered disabled state
[  284.271102][ T5872] bridge_slave_0: left allmulticast mode
[  284.272829][ T5872] bridge_slave_0: left promiscuous mode
[  284.274643][ T5872] bridge0: port 1(bridge_slave_0) entered disabled state
[  284.678137][ T5872] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  284.682071][ T5872] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  284.688096][ T5872] bond0 (unregistering): Released all slaves
[  284.722694][T12519] bridge0: port 1(bridge_slave_0) entered blocking state
[  284.724841][T12519] bridge0: port 1(bridge_slave_0) entered disabled state
[  284.730074][T12519] bridge_slave_0: entered allmulticast mode
[  284.732733][T12519] bridge_slave_0: entered promiscuous mode
[  284.759328][T12519] bridge0: port 2(bridge_slave_1) entered blocking state
[  284.762325][T12519] bridge0: port 2(bridge_slave_1) entered disabled state
[  284.765262][T12519] bridge_slave_1: entered allmulticast mode
[  284.769953][T12519] bridge_slave_1: entered promiscuous mode
[  284.827000][T12519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  284.863299][T12519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  284.945035][T12519] team0: Port device team_slave_0 added
[  284.948179][T12519] team0: Port device team_slave_1 added
[  285.023079][T12519] batman_adv: batadv0: Adding interface: batadv_slave_0
[  285.025152][T12519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  285.035168][T12519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  285.046349][T12519] batman_adv: batadv0: Adding interface: batadv_slave_1
[  285.048825][T12519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  285.056524][T12519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  285.093927][ T5872] hsr_slave_0: left promiscuous mode
[  285.096620][ T5872] hsr_slave_1: left promiscuous mode
[  285.098721][ T5872] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  285.101581][ T5872] batman_adv: batadv0: Removing interface: batadv_slave_0
[  285.104877][ T5872] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  285.107933][ T5872] batman_adv: batadv0: Removing interface: batadv_slave_1
[  285.153087][ T5872] veth1_macvtap: left promiscuous mode
[  285.155560][ T5872] veth0_macvtap: left promiscuous mode
[  285.157524][ T5872] veth1_vlan: left promiscuous mode
[  285.159043][ T5872] veth0_vlan: left promiscuous mode
[  285.223062][T12568] loop3: detected capacity change from 0 to 64
[  285.253738][T12568] Trying to free block not in datazone
[  285.257714][T12568] syz.3.2658: attempt to access beyond end of device
[  285.257714][T12568] loop3: rw=8390657, sector=412, nr_sectors = 2 limit=64
[  285.264232][T12568] Buffer I/O error on dev loop3, logical block 206, lost async page write
[  285.329029][T12572] loop3: detected capacity change from 0 to 2048
[  285.341172][T12572] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found!
[  285.354034][T12572] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  285.916991][ T5872] team0 (unregistering): Port device team_slave_1 removed
[  285.925933][T12575] loop3: detected capacity change from 0 to 32768
[  285.929286][T12575] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2660 (12575)
[  285.937680][T12575] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  285.938735][ T5872] team0 (unregistering): Port device team_slave_0 removed
[  285.940954][T12575] BTRFS info (device loop3): using sha256 checksum algorithm
[  286.062459][T12575] BTRFS info (device loop3): enabling ssd optimizations
[  286.065091][T12575] BTRFS info (device loop3): turning on async discard
[  286.067522][T12575] BTRFS info (device loop3): enabling free space tree
[  286.072681][   T56] Bluetooth: hci0: command tx timeout
[  286.465188][T12519] hsr_slave_0: entered promiscuous mode
[  286.468470][T12519] hsr_slave_1: entered promiscuous mode
[  286.473501][T12519] debugfs: 'hsr0' already exists in 'hsr'
[  286.475839][T12519] Cannot create hsr debugfs directory
[  287.021935][T12519] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  287.066510][T12519] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  287.075507][T12519] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  287.101261][T12519] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  287.325712][T12519] 8021q: adding VLAN 0 to HW filter on device bond0
[  287.350848][T12519] 8021q: adding VLAN 0 to HW filter on device team0
[  287.362029][ T7887] bridge0: port 1(bridge_slave_0) entered blocking state
[  287.364194][ T7887] bridge0: port 1(bridge_slave_0) entered forwarding state
[  287.385686][ T7887] bridge0: port 2(bridge_slave_1) entered blocking state
[  287.388082][ T7887] bridge0: port 2(bridge_slave_1) entered forwarding state
[  287.538364][ T9892] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  287.585100][T12519] 8021q: adding VLAN 0 to HW filter on device batadv0
[  287.993438][T12519] veth0_vlan: entered promiscuous mode
[  288.011899][T12519] veth1_vlan: entered promiscuous mode
[  288.055914][T12519] veth0_macvtap: entered promiscuous mode
[  288.072740][T12519] veth1_macvtap: entered promiscuous mode
[  288.103086][T12519] batman_adv: batadv0: Interface activated: batadv_slave_0
[  288.116960][T12519] batman_adv: batadv0: Interface activated: batadv_slave_1
[  288.136806][   T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  288.141768][   T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  288.157115][   T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  288.160571][   T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  288.248763][  T748] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  288.255689][  T748] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  288.283720][   T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  288.288390][   T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  288.295065][   T56] Bluetooth: hci0: command tx timeout
[  288.578831][T12649] x_tables: duplicate underflow at hook 3
[  288.707254][T12654] netlink: 480 bytes leftover after parsing attributes in process `syz.3.2671'.
[  288.709836][T12654] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.2671'.
[  288.912961][T12667] loop3: detected capacity change from 0 to 1024
[  288.949758][  T748] hfsplus: b-tree write err: -5, ino 25
[  288.951991][  T748] hfsplus: b-tree write err: -5, ino 4
[  288.955350][  T748] hfsplus: b-tree write err: -5, ino 2
[  289.016197][T12669] loop3: detected capacity change from 0 to 4096
[  289.075059][   T33] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  289.128604][T12671] loop3: detected capacity change from 0 to 4096
[  289.186051][T12671] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  289.193231][T12671] ntfs3(loop3): ino=b, mi_enum_attr
[  289.195089][T12671] ntfs3(loop3): Failed to load $Extend (-22).
[  289.197204][T12671] ntfs3(loop3): Failed to initialize $Extend.
[  289.256625][   T33] usb 6-1: Using ep0 maxpacket: 8
[  289.264066][   T33] usb 6-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77
[  289.267863][   T33] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239
[  289.271169][   T33] usb 6-1: Product: syz
[  289.272860][   T33] usb 6-1: Manufacturer: syz
[  289.274948][   T33] usb 6-1: SerialNumber: syz
[  289.281819][   T33] usb 6-1: config 0 descriptor??
[  289.286166][   T33] gspca_main: sq905-2.14.0 probing 2770:9120
[  289.936345][   T33] gspca_sq905: sq905_command: usb_control_msg failed (-71)
[  289.938838][   T33] sq905 6-1:0.0: probe with driver sq905 failed with error -71
[  289.952329][   T33] usb 6-1: USB disconnect, device number 2
[  290.422798][T12698] overlayfs: failed to resolve './cgroup': -2
[  290.517621][   T56] Bluetooth: hci0: command tx timeout
[  290.870298][   T33] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  291.030817][   T33] usb 6-1: Using ep0 maxpacket: 32
[  291.044122][   T33] usb 6-1: config 0 has an invalid interface number: 184 but max is 0
[  291.047937][   T33] usb 6-1: config 0 has no interface number 0
[  291.050512][   T33] usb 6-1: config 0 interface 184 has no altsetting 0
[  291.425255][   T33] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  291.433877][   T33] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  291.438772][   T33] usb 6-1: Product: syz
[  291.440535][   T33] usb 6-1: Manufacturer: syz
[  291.442529][   T33] usb 6-1: SerialNumber: syz
[  291.457246][   T33] usb 6-1: config 0 descriptor??
[  291.827286][T12718] loop3: detected capacity change from 0 to 1024
[  291.847049][T12718] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  291.851136][T12718] ext4 filesystem being mounted at /350/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  291.895491][ T9892] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  291.990996][T12727] loop3: detected capacity change from 0 to 2048
[  292.006827][T12727] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  292.010541][T12727] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  292.014393][T12727] UDF-fs: Scanning with blocksize 512 failed
[  292.020559][T12727] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  292.186855][   T33] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  292.190667][   T33] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  292.254352][T12733] loop3: detected capacity change from 0 to 32768
[  292.264794][T12733] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2702 (12733)
[  292.297111][T12733] BTRFS info (device loop3): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  292.311957][T12733] BTRFS info (device loop3): using crc32c checksum algorithm
[  292.372627][T12733] BTRFS info (device loop3): setting nodatasum
[  292.380999][T12733] BTRFS info (device loop3): setting nodatacow
[  292.383391][T12733] BTRFS info (device loop3): enabling ssd optimizations
[  292.385968][T12733] BTRFS info (device loop3): turning on flush-on-commit
[  292.398041][T12733] BTRFS info (device loop3): turning on async discard
[  292.401064][T12733] BTRFS info (device loop3): enabling free space tree
[  292.475076][ T9892] BTRFS info (device loop3): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  292.740496][   T56] Bluetooth: hci0: command tx timeout
[  292.942452][   T34] audit: type=1326 audit(1775722259.321:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12770 comm="syz.3.2712" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6f979c819 code=0x7ffc0000
[  292.952076][   T34] audit: type=1326 audit(1775722259.330:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12770 comm="syz.3.2712" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6f979c819 code=0x7ffc0000
[  292.964188][T12771] syz.3.2712 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  292.970722][   T34] audit: type=1326 audit(1775722259.340:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12770 comm="syz.3.2712" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6f979c819 code=0x7ffc0000
[  292.985722][   T34] audit: type=1326 audit(1775722259.340:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12770 comm="syz.3.2712" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6f979c819 code=0x7ffc0000
[  292.993934][   T34] audit: type=1326 audit(1775722259.340:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12770 comm="syz.3.2712" exe="/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7fe6f979c819 code=0x7ffc0000
[  293.005038][   T34] audit: type=1326 audit(1775722259.349:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12770 comm="syz.3.2712" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6f979c819 code=0x7ffc0000
[  293.027826][   T34] audit: type=1326 audit(1775722259.349:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12770 comm="syz.3.2712" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6f979c819 code=0x7ffc0000
[  293.036556][   T34] audit: type=1326 audit(1775722259.349:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12770 comm="syz.3.2712" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe6f979c819 code=0x7ffc0000
[  293.046775][   T34] audit: type=1326 audit(1775722259.349:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12770 comm="syz.3.2712" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe6f979c819 code=0x7ffc0000
[  293.273641][   T33] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  293.274462][T12773] loop3: detected capacity change from 0 to 40427
[  293.280588][   T33] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to write PMT_CTL: -71
[  293.284410][T12773] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  293.290393][T12773] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  293.294701][   T33] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  293.298980][   T33] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71
[  293.310357][   T33] usb 6-1: USB disconnect, device number 3
[  293.337132][T12773] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  293.341197][T12773] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  293.343352][T12773] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  294.297443][T12801] loop5: detected capacity change from 0 to 128
[  294.369903][   T34] audit: type=1326 audit(1775722260.650:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12802 comm="syz.5.2723" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6079b9c819 code=0x7ffc0000
[  294.748618][  T929] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  294.920617][  T929] usb 6-1: Using ep0 maxpacket: 32
[  294.924082][  T929] usb 6-1: config 0 has an invalid interface number: 188 but max is 0
[  294.930220][  T929] usb 6-1: config 0 has no interface number 0
[  294.933791][  T929] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  294.943256][  T929] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  294.945987][  T929] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  294.948169][  T929] usb 6-1: Product: syz
[  294.949584][  T929] usb 6-1: Manufacturer: syz
[  294.951343][  T929] usb 6-1: SerialNumber: syz
[  294.968085][  T929] usb 6-1: config 0 descriptor??
[  294.970567][T12807] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  295.150828][T12825] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2732'.
[  295.200198][T12807] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  296.370004][T12846] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  296.533636][T12848] loop3: detected capacity change from 0 to 32768
[  296.539999][T12848] OCFS2: ERROR (device loop3): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode 69: 1 clusters
[  296.548893][T12848] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  296.551852][T12848] OCFS2: File system is now read-only.
[  296.553879][T12848] (syz.3.2743,12848,1):ocfs2_read_locked_inode:599 ERROR: status = -30
[  296.562622][T12848] (syz.3.2743,12848,1):_ocfs2_get_system_file_inode:144 ERROR: status = -30
[  296.566297][T12848] (syz.3.2743,12848,1):ocfs2_init_global_system_inodes:465 ERROR: status = -30
[  296.568796][T12848] (syz.3.2743,12848,1):ocfs2_init_global_system_inodes:467 ERROR: Unable to load system inode 2, possibly corrupt fs?
[  296.568812][T12848] (syz.3.2743,12848,1):ocfs2_init_global_system_inodes:476 ERROR: status = -30
[  296.579507][T12848] (syz.3.2743,12848,1):ocfs2_initialize_super:2198 ERROR: status = -30
[  296.582501][T12848] (syz.3.2743,12848,1):ocfs2_fill_super:1177 ERROR: status = -30
[  296.865169][  T929] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  296.868266][  T929] asix 6-1:0.188: probe with driver asix failed with error -71
[  296.883622][  T929] usb 6-1: USB disconnect, device number 4
[  297.502765][T12880] veth1_to_batadv: mtu greater than device maximum
[  297.752355][T12888] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2757'.
[  298.040181][T12903] loop5: detected capacity change from 0 to 764
[  298.877885][ T5839] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  299.086577][ T5839] usb 6-1: Using ep0 maxpacket: 8
[  299.113802][ T5839] usb 6-1: unable to get BOS descriptor or descriptor too short
[  299.142459][ T5839] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  299.146340][ T5839] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  299.149552][ T5839] usb 6-1: config 1 interface 1 has no altsetting 0
[  299.189797][ T5839] usb 6-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice= 0.40
[  299.193820][ T5839] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  299.200443][ T5839] usb 6-1: Product: syz
[  299.202134][ T5839] usb 6-1: Manufacturer: syz
[  299.204302][ T5839] usb 6-1: SerialNumber: syz
[  299.515470][ T5839] usb 6-1: interface 2 not found
[  299.520647][ T5839] usb 6-1: selecting invalid altsetting 0
[  299.528028][ T5839] usb 6-1: selecting invalid altsetting 0
[  299.529869][ T5839] usbtest 6-1:1.1: probe with driver usbtest failed with error -22
[  299.532791][ T5839] usb 6-1: selecting invalid altsetting 0
[  299.534482][ T5839] snd-usb-audio 6-1:1.1: probe with driver snd-usb-audio failed with error -22
[  299.537634][ T5839] usb 6-1: selecting invalid altsetting 0
[  299.539376][ T5839] snd-ua101 6-1:1.1: probe with driver snd-ua101 failed with error -22
[  299.543690][ T5839] usb 6-1: USB disconnect, device number 5
[  299.876971][T12947] loop3: detected capacity change from 0 to 131072
[  299.881040][T12947] F2FS-fs (loop3): Test dummy encryption mode enabled
[  299.884553][T12947] F2FS-fs (loop3): invalid crc value
[  299.944411][T12947] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  299.951322][T12947] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  300.564462][T12989] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2788'.
[  300.574201][T12989] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2788'.
[  300.683762][T12991] loop3: detected capacity change from 0 to 164
[  300.749633][T12991] iso9660: Corrupted directory entry in block 2 of inode 1920
[  301.049503][T13001] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2793'.
[  301.591586][T13005] loop3: detected capacity change from 0 to 32768
[  301.608376][T13005] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  301.635568][T13005] XFS (loop3): Ending clean mount
[  301.680340][ T9892] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  301.868398][T13029] sock: sock_timestamping_bind_phc: sock not bind to device
[  301.898334][   T33] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  302.143939][T13047] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2807'.
[  302.277436][   T33] usb 6-1: Using ep0 maxpacket: 8
[  302.282465][   T33] usb 6-1: config 135 has an invalid interface number: 230 but max is 0
[  302.285570][   T33] usb 6-1: config 135 contains an unexpected descriptor of type 0x2, skipping
[  302.288118][   T33] usb 6-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config
[  302.291402][   T33] usb 6-1: config 135 has no interface number 0
[  302.299242][   T33] usb 6-1: too many endpoints for config 135 interface 230 altsetting 126: 53, using maximum allowed: 30
[  302.303621][   T33] usb 6-1: config 135 interface 230 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 53
[  302.307903][   T33] usb 6-1: config 135 interface 230 has no altsetting 0
[  302.318004][   T33] usb 6-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a
[  302.320564][   T33] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  302.322886][   T33] usb 6-1: Product: syz
[  302.324498][   T33] usb 6-1: Manufacturer: syz
[  302.326089][   T33] usb 6-1: SerialNumber: syz
[  302.339383][   T33] uvcvideo 6-1:135.230: Found UVC 0.00 device syz (18ec:3288)
[  302.342963][   T33] uvcvideo 6-1:135.230: No valid video chain found.
[  302.554538][   T33] usb 6-1: USB disconnect, device number 6
[  303.136253][ T5839] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  303.221143][T13067] loop5: detected capacity change from 0 to 256
[  303.238315][T13067] FAT-fs (loop5): Directory bread(block 64) failed
[  303.240382][T13067] FAT-fs (loop5): Directory bread(block 65) failed
[  303.242361][T13067] FAT-fs (loop5): Directory bread(block 66) failed
[  303.247747][T13067] FAT-fs (loop5): Directory bread(block 67) failed
[  303.249722][T13067] FAT-fs (loop5): Directory bread(block 68) failed
[  303.251758][T13067] FAT-fs (loop5): Directory bread(block 69) failed
[  303.254225][T13067] FAT-fs (loop5): Directory bread(block 70) failed
[  303.256474][T13067] FAT-fs (loop5): Directory bread(block 71) failed
[  303.258872][T13067] FAT-fs (loop5): Directory bread(block 72) failed
[  303.260732][T13067] FAT-fs (loop5): Directory bread(block 73) failed
[  303.321501][ T5839] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  303.325510][ T5839] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  303.334911][ T5839] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  303.337744][ T5839] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  303.341625][ T5839] usb 4-1: Product: syz
[  303.342894][ T5839] usb 4-1: Manufacturer: syz
[  303.344298][ T5839] usb 4-1: SerialNumber: syz
[  303.354782][ T5839] cdc_mbim 4-1:1.0: skipping garbage
[  303.568889][T13060] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  303.595472][   T33] usb 6-1: new full-speed USB device number 7 using dummy_hcd
[  303.767674][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  303.780821][   T33] usb 6-1: config 0 has an invalid interface number: 35 but max is 0
[  303.783949][   T33] usb 6-1: config 0 has no interface number 0
[  303.786369][   T33] usb 6-1: config 0 interface 35 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 10
[  303.791358][   T33] usb 6-1: config 0 interface 35 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[  303.796408][   T33] usb 6-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c
[  303.800487][   T33] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  303.803186][   T33] usb 6-1: Product: syz
[  303.804419][   T33] usb 6-1: Manufacturer: syz
[  303.806103][   T33] usb 6-1: SerialNumber: syz
[  303.809712][   T33] usb 6-1: config 0 descriptor??
[  303.815390][   T33] cypress_m8 6-1:0.35: Nokia CA-42 V2 Adapter converter detected
[  304.032658][   T33] usb 6-1: Nokia CA-42 V2 Adapter converter now attached to ttyUSB0
[  304.288579][T13060] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  304.296166][ T5839] cdc_mbim 4-1:1.0: setting tx_max = 184
[  304.299257][  T929] usb 6-1: USB disconnect, device number 7
[  304.308126][ T5839] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device
[  304.313925][  T929] nokiaca42v2 ttyUSB0: Nokia CA-42 V2 Adapter converter now disconnected from ttyUSB0
[  304.329867][  T929] cypress_m8 6-1:0.35: device disconnected
[  304.343520][ T5839] wwan wwan0: port wwan0mbim0 attached
[  304.356819][ T5839] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, 7a:64:fe:38:49:a9
[  304.509771][   T33] usb 4-1: USB disconnect, device number 14
[  304.512223][   T33] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM
[  304.570440][   T33] wwan wwan0: port wwan0mbim0 disconnected
[  304.927225][T13106] comedi comedi0: dt2815: I/O port conflict (0x3,2)
[  304.989403][T13112] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2833'.
[  304.997052][T13112] sch_tbf: burst 6 is lower than device team_slave_0 mtu (1514) !
[  305.282485][T13120] loop3: detected capacity change from 0 to 32768
[  305.290430][T13120] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[  305.295166][T13120] JBD2: Ignoring recovery information on journal
[  305.319768][T13120] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  305.368800][ T9892] ocfs2: Unmounting device (7,3) on (node local)
[  305.455017][  T929] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  305.629763][  T929] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  305.632421][  T929] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  305.634711][  T929] usb 6-1: Product: syz
[  305.635971][  T929] usb 6-1: Manufacturer: syz
[  305.637348][  T929] usb 6-1: SerialNumber: syz
[  305.642032][  T929] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  305.655292][  T929] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  305.735805][ T5839] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  305.906902][ T5839] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  305.911230][ T5839] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  305.914972][ T5839] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  305.918723][ T5839] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  305.927832][T13134] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  305.939004][ T5839] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  306.104090][   T33] usb 6-1: USB disconnect, device number 8
[  306.156400][ T5839] usb 4-1: USB disconnect, device number 15
[  306.507665][T13155] 9p: Bad value for 'rfdno'
[  306.794894][T13171] loop5: detected capacity change from 0 to 128
[  306.800415][T13171] EXT4-fs: Ignoring removed nobh option
[  306.810942][  T929] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[  306.813199][T13171] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  306.814347][  T929] ath9k_htc: Failed to initialize the device
[  306.833742][T13171] ext4 filesystem being mounted at /38/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  306.841921][   T33] usb 6-1: ath9k_htc: USB layer deinitialized
[  306.852593][T13171] fscrypt (loop5, inode 12): Unsupported log2_data_unit_size in encryption policy: 8
[  306.882103][T12519] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  307.325426][T13177] loop3: detected capacity change from 0 to 4096
[  307.330109][T13177] EXT4-fs: Ignoring removed bh option
[  307.345183][T13177] EXT4-fs (loop3): stripe (138) is not aligned with cluster size (16), stripe is disabled
[  307.361603][T13177] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  307.373239][T13177] EXT4-fs error (device loop3): ext4_find_dest_de:2050: inode #2: block 16: comm syz.3.2861: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=2, rec_len=4, size=4096 fake=1
[  307.387246][T13177] EXT4-fs (loop3): Remounting filesystem read-only
[  307.410878][ T9892] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  307.523628][T13188] Bluetooth: MGMT ver 1.23
[  307.527631][T13188] Bluetooth: hci0: unsupported parameter 28787
[  307.530908][T13188] Bluetooth: hci0: invalid length 0, exp 2 for type 1
[  307.760911][T13199] loop5: detected capacity change from 0 to 512
[  307.767501][T13199] EXT4-fs: Ignoring removed mblk_io_submit option
[  307.770513][T13199] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  307.795038][T13199] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002]
[  307.798184][T13199] System zones: 1-12
[  307.811587][T13199] EXT4-fs error (device loop5): ext4_iget_extra_inode:5040: inode #15: comm syz.5.2871: corrupted in-inode xattr: e_value size too large
[  307.828604][T13199] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  307.837226][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  307.842873][    C1] EXT4-fs (loop5): initial error at time 1775722273: ext4_iget_extra_inode:5040: inode 15
[  307.846610][    C1] EXT4-fs (loop5): last error at time 1775722273: ext4_iget_extra_inode:5040: inode 15
[  307.858372][T13199] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.2871: couldn't read orphan inode 15 (err -117)
[  307.863879][T13199] loop5: lost filesystem error report for type 5 error -117
[  307.865870][T13199] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  307.893927][T13207] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2874'.
[  307.980340][T12519] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  308.396829][T13223] loop5: detected capacity change from 0 to 256
[  308.405051][T13223] exfat: Deprecated parameter 'namecase'
[  308.407235][T13223] exFAT-fs (loop5): Medium has reported failures. Some data may be lost.
[  308.415043][T13223] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d)
[  308.525227][T13230] loop5: detected capacity change from 0 to 736
[  308.561116][T13228] loop3: detected capacity change from 0 to 256
[  308.628600][T13228] FAT-fs (loop3): Directory bread(block 64) failed
[  308.632977][T13228] FAT-fs (loop3): Directory bread(block 65) failed
[  308.639087][T13228] FAT-fs (loop3): Directory bread(block 66) failed
[  308.643863][T13228] FAT-fs (loop3): Directory bread(block 67) failed
[  308.646431][T13228] FAT-fs (loop3): Directory bread(block 68) failed
[  308.652315][T13228] FAT-fs (loop3): Directory bread(block 69) failed
[  308.657120][T13228] FAT-fs (loop3): Directory bread(block 70) failed
[  308.659413][T13228] FAT-fs (loop3): Directory bread(block 71) failed
[  308.667297][T13228] FAT-fs (loop3): Directory bread(block 72) failed
[  308.669532][T13228] FAT-fs (loop3): Directory bread(block 73) failed
[  309.052299][   T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  309.169756][   T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  309.226409][ T5818] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  309.231341][ T5818] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  309.244597][ T5818] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  309.275027][   T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  309.295753][ T5818] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  309.306119][ T5818] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  309.405827][   T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  309.545120][T13249] loop3: detected capacity change from 0 to 4096
[  309.625238][   T13] bridge_slave_1: left allmulticast mode
[  309.627562][   T13] bridge_slave_1: left promiscuous mode
[  309.629384][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  309.640689][   T13] bridge_slave_0: left allmulticast mode
[  309.642425][   T13] bridge_slave_0: left promiscuous mode
[  309.654395][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  309.765617][T13259] loop3: detected capacity change from 0 to 512
[  309.806618][T13259] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  309.812318][T13259] ext4 filesystem being mounted at /413/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  309.826343][   T34] kauditd_printk_skb: 16 callbacks suppressed
[  309.826356][   T34] audit: type=1800 audit(1775722275.138:118): pid=13259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2898" name="file1" dev="loop3" ino=15 res=0 errno=0
[  309.864006][ T9892] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  309.940231][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  309.946599][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  309.957217][   T13] bond0 (unregistering): Released all slaves
[  309.982338][T13236] chnl_net:caif_netlink_parms(): no params data found
[  310.166702][ T5874] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  310.170101][T13236] bridge0: port 1(bridge_slave_0) entered blocking state
[  310.172805][T13236] bridge0: port 1(bridge_slave_0) entered disabled state
[  310.175602][T13236] bridge_slave_0: entered allmulticast mode
[  310.192770][T13236] bridge_slave_0: entered promiscuous mode
[  310.196382][T13236] bridge0: port 2(bridge_slave_1) entered blocking state
[  310.198701][T13236] bridge0: port 2(bridge_slave_1) entered disabled state
[  310.200819][T13236] bridge_slave_1: entered allmulticast mode
[  310.203474][T13236] bridge_slave_1: entered promiscuous mode
[  310.247220][T13236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  310.251529][T13236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  310.285637][T13236] team0: Port device team_slave_0 added
[  310.288777][T13236] team0: Port device team_slave_1 added
[  310.310979][   T13] hsr_slave_0: left promiscuous mode
[  310.313922][   T13] hsr_slave_1: left promiscuous mode
[  310.316888][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  310.319082][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  310.322169][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  310.324855][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  310.334451][   T13] veth1_macvtap: left promiscuous mode
[  310.336409][   T13] veth0_macvtap: left promiscuous mode
[  310.338658][ T5874] usb 4-1: Using ep0 maxpacket: 8
[  310.341109][   T13] veth1_vlan: left promiscuous mode
[  310.344174][   T13] veth0_vlan: left promiscuous mode
[  310.346490][ T5874] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  310.351709][ T5874] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  310.355323][ T5874] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  310.361697][ T5874] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  310.366541][ T5874] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  310.370214][ T5874] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  310.533094][   T13] team0 (unregistering): Port device team_slave_1 removed
[  310.541044][   T13] team0 (unregistering): Port device team_slave_0 removed
[  310.626709][T13236] batman_adv: batadv0: Adding interface: batadv_slave_0
[  310.629340][T13236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  310.643374][T13236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  310.643531][ T5874] usb 4-1: GET_CAPABILITIES returned 0
[  310.648610][ T5874] usbtmc 4-1:16.0: can't read capabilities
[  310.650288][T13236] batman_adv: batadv0: Adding interface: batadv_slave_1
[  310.653011][T13236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  310.690105][T13236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  311.038125][ T5874] usb 4-1: USB disconnect, device number 16
[  311.074262][T13236] hsr_slave_0: entered promiscuous mode
[  311.085010][T13236] hsr_slave_1: entered promiscuous mode
[  311.094156][T13236] debugfs: 'hsr0' already exists in 'hsr'
[  311.097244][T13236] Cannot create hsr debugfs directory
[  311.474487][T13236] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  311.481402][T13236] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  311.504171][T13236] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  311.516943][T13236] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  311.545192][ T5818] Bluetooth: hci0: command tx timeout
[  311.629104][T13236] 8021q: adding VLAN 0 to HW filter on device bond0
[  311.643831][T13236] 8021q: adding VLAN 0 to HW filter on device team0
[  311.658849][   T54] bridge0: port 1(bridge_slave_0) entered blocking state
[  311.661617][   T54] bridge0: port 1(bridge_slave_0) entered forwarding state
[  311.675843][   T54] bridge0: port 2(bridge_slave_1) entered blocking state
[  311.678504][   T54] bridge0: port 2(bridge_slave_1) entered forwarding state
[  311.928111][T13236] 8021q: adding VLAN 0 to HW filter on device batadv0
[  312.104543][T13328] Bluetooth: MGMT ver 1.23
[  312.202996][T13236] veth0_vlan: entered promiscuous mode
[  312.211602][T13236] veth1_vlan: entered promiscuous mode
[  312.244195][T13236] veth0_macvtap: entered promiscuous mode
[  312.293932][T13236] veth1_macvtap: entered promiscuous mode
[  312.308269][T13236] batman_adv: batadv0: Interface activated: batadv_slave_0
[  312.325177][T13236] batman_adv: batadv0: Interface activated: batadv_slave_1
[  312.333879][ T5872] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  312.345416][ T5825] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  312.350495][ T5825] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  312.375204][ T5825] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  312.454822][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  312.464408][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  312.489757][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  312.492079][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  312.644122][T13344] syz.6.2914 (13344): /proc/13343/oom_adj is deprecated, please use /proc/13343/oom_score_adj instead.
[  312.692564][T13338] loop3: detected capacity change from 0 to 131072
[  312.696320][T13338] F2FS-fs (loop3): Test dummy encryption mode enabled
[  312.699677][T13338] F2FS-fs (loop3): invalid crc value
[  312.752608][T13338] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  312.758292][T13338] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  312.929478][T13366] loop6: detected capacity change from 0 to 2048
[  312.972038][T13366] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  312.982293][   T34] audit: type=1800 audit(1775722278.086:119): pid=13366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2921" name=02 dev="loop6" ino=18 res=0 errno=0
[  313.006359][T13236] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  313.022007][T13372] macsec1: entered promiscuous mode
[  313.024088][T13372] macsec1: entered allmulticast mode
[  313.070545][T13374] loop6: detected capacity change from 0 to 1024
[  313.207251][T13380] netlink: 'syz.6.2926': attribute type 1 has an invalid length.
[  313.224498][T13380] vxlan0: entered promiscuous mode
[  313.226226][T13380] bridge0: port 3(vxlan0) entered blocking state
[  313.228525][T13380] bridge0: port 3(vxlan0) entered disabled state
[  313.231213][T13380] vxlan0: entered allmulticast mode
[  313.386214][T13392] mkiss: ax0: crc mode is auto.
[  313.496946][T13398] loop6: detected capacity change from 0 to 4096
[  313.500264][T13398] EXT4-fs (loop6): Test dummy encryption mode enabled
[  313.516800][T13398] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  313.529757][T13398] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-lib)))"
[  313.555210][T13398] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000.
[  313.587593][T13236] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  313.831179][T13415] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2942'.
[  313.908215][T13422] loop3: detected capacity change from 0 to 512
[  313.928094][T13422] EXT4-fs: Ignoring removed orlov option
[  313.944874][T13422] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13
[  313.949894][T13422] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.2944: invalid indirect mapped block 2683928664 (level 1)
[  313.955307][T13422] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  313.955992][T13422] EXT4-fs (loop3): 1 truncate cleaned up
[  313.959542][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  313.959558][    C0] EXT4-fs (loop3): initial error at time 1775722278: ext4_free_branches:1023: inode 13
[  313.959581][    C0] EXT4-fs (loop3): last error at time 1775722278: ext4_free_branches:1023: inode 13
[  313.976219][T13422] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  313.986068][T13409] loop6: detected capacity change from 0 to 32768
[  314.030502][ T9892] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  314.114138][T13428] loop3: detected capacity change from 0 to 4096
[  314.123424][T13428] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512).
[  314.837631][T13447] loop6: detected capacity change from 0 to 40427
[  314.844732][T13447] F2FS-fs (loop6): Invalid SB checksum offset: 0
[  314.855147][T13447] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock
[  314.860428][T13447] F2FS-fs (loop6): invalid crc value
[  315.198330][T13428] ntfs3(loop3): ino=1a, mi_enum_attr
[  315.202670][T13428] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  315.354703][T13447] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  315.365300][T13447] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0
[  315.367510][T13447] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  315.448101][T13447] syz.6.2953: attempt to access beyond end of device
[  315.448101][T13447] loop6: rw=2049, sector=53248, nr_sectors = 8 limit=40427
[  315.464371][T13447] syz.6.2953: attempt to access beyond end of device
[  315.464371][T13447] loop6: rw=2049, sector=53256, nr_sectors = 136 limit=40427
[  315.555820][T13236] syz-executor: attempt to access beyond end of device
[  315.555820][T13236] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  315.560952][T13236] CPU: 1 UID: 0 PID: 13236 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  315.560983][T13236] Tainted: [L]=SOFTLOCKUP
[  315.560986][T13236] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  315.560992][T13236] Call Trace:
[  315.560996][T13236]  <TASK>
[  315.561001][T13236]  dump_stack_lvl+0xe8/0x150
[  315.561019][T13236]  f2fs_handle_critical_error+0x37c/0x540
[  315.561035][T13236]  f2fs_write_end_io+0xcdb/0xff0
[  315.561053][T13236]  __submit_merged_bio+0x256/0x700
[  315.561068][T13236]  __submit_merged_write_cond+0x3c9/0x4e0
[  315.561083][T13236]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  315.561106][T13236]  f2fs_write_data_pages+0x2975/0x35e0
[  315.561135][T13236]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  315.561147][T13236]  ? __bfs+0x153/0x290
[  315.561183][T13236]  ? lockdep_hardirqs_on+0x7a/0x110
[  315.561203][T13236]  ? __lock_acquire+0x6b5/0x2cf0
[  315.561224][T13236]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  315.561263][T13236]  do_writepages+0x32e/0x550
[  315.561281][T13236]  ? do_raw_spin_unlock+0x4d/0x210
[  315.561292][T13236]  filemap_fdatawrite+0x1e9/0x2f0
[  315.561307][T13236]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  315.561340][T13236]  ? do_raw_spin_unlock+0x4d/0x210
[  315.561351][T13236]  f2fs_sync_dirty_inodes+0x30e/0x860
[  315.561367][T13236]  f2fs_write_checkpoint+0x9df/0x26a0
[  315.561391][T13236]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  315.561424][T13236]  kill_f2fs_super+0x314/0x720
[  315.561436][T13236]  ? __pfx_kill_f2fs_super+0x10/0x10
[  315.561450][T13236]  ? lockdep_hardirqs_on+0x7a/0x110
[  315.561467][T13236]  deactivate_locked_super+0xbc/0x130
[  315.561477][T13236]  cleanup_mnt+0x437/0x4d0
[  315.561486][T13236]  ? _raw_spin_unlock_irq+0x23/0x50
[  315.561498][T13236]  task_work_run+0x1d9/0x270
[  315.561509][T13236]  ? __pfx_task_work_run+0x10/0x10
[  315.561523][T13236]  exit_to_user_mode_loop+0xed/0x480
[  315.561532][T13236]  ? rcu_is_watching+0x15/0xb0
[  315.561546][T13236]  do_syscall_64+0x32d/0xf80
[  315.561557][T13236]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  315.561568][T13236]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  315.561576][T13236] RIP: 0033:0x7fc46ed9da57
[  315.561586][T13236] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  315.561593][T13236] RSP: 002b:00007ffc7d301d38 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  315.561603][T13236] RAX: 0000000000000000 RBX: 00007fc46ee32048 RCX: 00007fc46ed9da57
[  315.561609][T13236] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc7d301df0
[  315.561613][T13236] RBP: 00007ffc7d301df0 R08: 00007ffc7d302df0 R09: 00000000ffffffff
[  315.561619][T13236] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc7d302e80
[  315.561624][T13236] R13: 00007fc46ee32048 R14: 000000000004c741 R15: 00007ffc7d302ec0
[  315.561638][T13236]  </TASK>
[  315.566678][T13236] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  316.379544][T13465] loop6: detected capacity change from 0 to 1024
[  316.495777][T13465] hfsplus: inconsistency in B*Tree (9,1,255,1,0)
[  316.547787][T13465] hfsplus: inconsistency in B*Tree (9,1,255,1,0)
[  316.613373][ T7887] hfsplus: b-tree write err: -5, ino 25
[  316.616002][ T7887] hfsplus: b-tree write err: -5, ino 4
[  316.618400][ T7887] hfsplus: b-tree write err: -5, ino 2
[  316.997461][T13480] tmpfs: Bad value for 'mpol'
[  317.547292][T13481] loop6: detected capacity change from 0 to 131072
[  317.553148][T13481] F2FS-fs (loop6): invalid crc value
[  317.620579][T13481] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  317.624825][T13481] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  318.003862][T13504] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2977 (13504)
[  318.020270][T13504] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  318.023766][T13504] BTRFS info (device loop3): using crc32c checksum algorithm
[  318.107638][T13504] BTRFS info (device loop3): enabling ssd optimizations
[  318.109951][T13504] BTRFS info (device loop3): turning on flush-on-commit
[  318.116095][T13504] BTRFS info (device loop3): enabling free space tree
[  318.118298][T13504] BTRFS info (device loop3): enabling auto defrag
[  318.120223][T13504] BTRFS info (device loop3): use lzo compression, level 1
[  318.122436][T13504] BTRFS info (device loop3): max_inline set to 4096
[  318.133936][ T5818] Bluetooth: hci2: link tx timeout
[  318.138396][ T5818] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  318.146168][ T5818] Bluetooth: hci2: link tx timeout
[  318.148329][ T5818] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  318.281682][ T9892] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  319.144615][T13541] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2984'.
[  319.560904][T13558] set_capacity_and_notify: 1 callbacks suppressed
[  319.560919][T13558] loop6: detected capacity change from 0 to 256
[  319.588725][T13558] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d)
[  319.727640][T13569] ufs: You didn't specify the type of your ufs filesystem
[  319.727640][T13569] 
[  319.727640][T13569] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[  319.727640][T13569] 
[  319.727640][T13569] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[  319.749521][T13569] ufs: ufstype=old is supported read-only
[  319.756790][T13569] ufs: ufs_fill_super(): bad magic number
[  320.032505][T13574] loop3: detected capacity change from 0 to 32768
[  320.040756][T13574] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2997 (13574)
[  320.192449][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  320.391823][   T56] Bluetooth: hci2: command 0x0406 tx timeout
[  320.522609][T13576] loop6: detected capacity change from 0 to 131072
[  320.526112][T13576] F2FS-fs (loop6): Invalid log sectorsize (67108873)
[  320.528563][T13574] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  320.528647][T13576] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  320.536363][T13576] F2FS-fs (loop6): invalid crc value
[  320.539415][T13574] BTRFS info (device loop3): using sha256 checksum algorithm
[  320.593131][T13576] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  320.599290][T13576] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  320.601944][T13576] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4
[  320.675115][T13574] BTRFS info (device loop3): enabling ssd optimizations
[  320.677766][T13574] BTRFS info (device loop3): turning on async discard
[  320.681946][T13574] BTRFS info (device loop3): enabling free space tree
[  320.943369][ T9892] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  322.382135][T13645] futex_wake_op: syz.0.3019 tries to shift op by -1; fix this program
[  322.572205][ T5818] Bluetooth: hci2: command 0x0406 tx timeout
[  322.660966][T13652] loop3: detected capacity change from 0 to 2048
[  322.733496][T13656] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  322.846197][T13660] NILFS error (device loop3): nilfs_check_folio: bad entry in directory #12: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0
[  322.867617][T13660] Remounting filesystem read-only
[  322.961837][T13663] loop3: detected capacity change from 0 to 512
[  322.971519][T13663] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  322.984011][T13663] EXT4-fs (loop3): orphan cleanup on readonly fs
[  322.994682][T13663] EXT4-fs error (device loop3): mb_free_blocks:2049: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt.
[  323.030790][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  323.033142][    C1] EXT4-fs (loop3): initial error at time 1775722287: mb_free_blocks:2049: inode 11: block 64
[  323.036687][    C1] EXT4-fs (loop3): last error at time 1775722287: mb_free_blocks:2049: inode 11: block 64
[  323.045121][T13663] EXT4-fs (loop3): Remounting filesystem read-only
[  323.049973][T13663] EXT4-fs (loop3): 1 truncate cleaned up
[  323.055725][T13663] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  323.111365][ T9892] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  323.786575][T13686] loop3: detected capacity change from 0 to 40427
[  323.795528][T13686] F2FS-fs (loop3): invalid crc value
[  323.798546][T13686] F2FS-fs (loop3): Wrong journal entry on segno 262144
[  323.811387][T13686] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-117)
[  323.909376][T13692] loop3: detected capacity change from 0 to 4096
[  323.916497][T13692] ntfs3(loop3): ino=3, mi_enum_attr
[  323.923072][T13692] ntfs3(loop3): ino=1, mi_enum_attr
[  323.927521][T13692] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  323.934317][T13692] ntfs3(loop3): Failed to load $MFTMirr (-22).
[  324.121669][T13696] loop6: detected capacity change from 0 to 8
[  325.316185][T13718] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3044'.
[  325.323516][T13718] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3044'.
[  325.501970][T13730] loop6: detected capacity change from 0 to 2048
[  325.512583][T13730] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found!
[  325.525359][T13730] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found!
[  325.532663][T13730] UDF-fs: Scanning with blocksize 512 failed
[  325.550804][T13730] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found
[  325.558999][T13730] UDF-fs: Scanning with blocksize 1024 failed
[  325.567118][T13730] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512
[  325.572728][T13730] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found
[  325.580357][T13730] UDF-fs: Scanning with blocksize 2048 failed
[  325.593447][T13730] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[  325.600490][T13730] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512
[  325.607330][T13730] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found
[  325.616362][T13730] UDF-fs: Scanning with blocksize 4096 failed
[  325.618762][T13730] UDF-fs: warning (device loop6): udf_fill_super: No partition found (1)
[  325.653594][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  325.656649][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  325.863013][T13745] overlayfs: failed to clone upperpath
[  326.357634][T13763] loop3: detected capacity change from 0 to 2048
[  326.408497][T13763] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  326.436902][ T9892] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  326.995880][T13782] loop6: detected capacity change from 0 to 32768
[  327.004154][T13782] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.3064 (13782)
[  327.022442][T13782] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  327.029635][T13782] BTRFS info (device loop6): using sha256 checksum algorithm
[  327.096214][T13782] BTRFS info (device loop6): enabling ssd optimizations
[  327.101653][T13782] BTRFS info (device loop6): turning on async discard
[  327.109938][T13782] BTRFS info (device loop6): enabling free space tree
[  327.149981][T13236] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  327.496659][T13823] loop3: detected capacity change from 0 to 128
[  327.521976][T13823] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  327.532132][T13823] ext4 filesystem being mounted at /474/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  327.594700][ T9892] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  327.913548][T13845] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3085'.
[  328.246927][T13852] netlink: 332 bytes leftover after parsing attributes in process `syz.6.3088'.
[  328.249675][T13852] netlink: 'syz.6.3088': attribute type 9 has an invalid length.
[  328.252025][T13852] netlink: 108 bytes leftover after parsing attributes in process `syz.6.3088'.
[  328.254729][T13852] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3088'.
[  328.762115][   T34] audit: type=1800 audit(1775722292.855:120): pid=13856 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.6.3089" name="/" dev="tmpfs" ino=1368 res=0 errno=0
[  329.666133][ T5873] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  329.847782][ T5873] usb 7-1: Using ep0 maxpacket: 8
[  329.853324][ T5873] usb 7-1: unable to get BOS descriptor or descriptor too short
[  329.860581][ T5873] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8
[  329.866547][ T5873] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  329.870456][ T5873] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  329.873362][ T5873] usb 7-1: Product: syz
[  329.874910][ T5873] usb 7-1: Manufacturer: ุ祻メ輭쮉䔢좖㘘쵕בּ쵶浱㏙䭗Ꜧ庵헭方둢り윮魁骵𭉪
[  329.878855][ T5873] usb 7-1: SerialNumber: syz
[  330.030978][T13888] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3101'.
[  330.034580][T13888] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3101'.
[  330.159847][T13892] loop3: detected capacity change from 0 to 256
[  330.171568][T13892] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  330.189156][ T5873] cdc_ncm 7-1:1.0: bind() failure
[  330.197972][ T5873] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found
[  330.199953][ T5873] cdc_ncm 7-1:1.1: bind() failure
[  330.209077][ T5873] usb 7-1: USB disconnect, device number 2
[  330.463015][T13906] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma?
[  330.568687][T13912] pimreg3: entered allmulticast mode
[  330.793538][T13924] can: request_module (can-proto-3) failed.
[  330.894331][T13931] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3121'.
[  331.370822][T13946] loop6: detected capacity change from 0 to 64
[  331.383915][T13947] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3128'.
[  331.391068][T13947] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3128'.
[  332.036976][T13963] loop3: detected capacity change from 0 to 2048
[  332.067629][T13963] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  332.074031][T13963] ext4 filesystem being mounted at /500/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  332.122744][T13963] Quota error (device loop3): do_check_range: Getting block 260 out of range 1-5
[  332.125904][T13963] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0
[  332.129741][T13963] EXT4-fs error (device loop3): ext4_acquire_dquot:7026: comm syz.3.3137: Failed to acquire dquot type 1
[  332.183948][ T9892] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  332.937654][T13990] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3149'.
[  332.940614][T13990] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3149'.
[  333.046922][T13991] loop3: detected capacity change from 0 to 16
[  333.059633][T13991] erofs (device loop3): mounted with root inode @ nid 36.
[  333.256304][ T5275] usb 7-1: new low-speed USB device number 3 using dummy_hcd
[  333.432440][ T5275] usb 7-1: config 0 has an invalid interface number: 210 but max is 0
[  333.435574][ T5275] usb 7-1: config 0 has no interface number 0
[  333.448723][ T5275] usb 7-1: config 0 interface 210 altsetting 227 endpoint 0xD is Bulk; changing to Interrupt
[  333.452772][ T5275] usb 7-1: config 0 interface 210 altsetting 227 endpoint 0xF is Bulk; changing to Interrupt
[  333.456547][ T5275] usb 7-1: config 0 interface 210 has no altsetting 0
[  333.473077][ T5275] usb 7-1: string descriptor 0 read error: -22
[  333.475672][ T5275] usb 7-1: New USB device found, idVendor=05ac, idProduct=921c, bcdDevice=99.e1
[  333.478980][ T5275] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  333.492439][ T5275] usb 7-1: config 0 descriptor??
[  333.508449][T13986] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  333.511178][T13986] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  333.520735][ T5275] appledisplay 7-1:0.210: Could not find int-in endpoint
[  333.530630][ T5275] usbhid 7-1:0.210: couldn't find an input interrupt endpoint
[  333.636859][T13997] loop3: detected capacity change from 0 to 32768
[  333.660349][T13997] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  333.675528][T13997] XFS (loop3): Ending clean mount
[  333.679131][T13997] XFS (loop3): Quotacheck needed: Please wait.
[  333.708890][T13997] XFS (loop3): Quotacheck: Done.
[  333.758594][ T5959] usb 7-1: USB disconnect, device number 3
[  334.105063][ T9892] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  334.355385][T14015] loop3: detected capacity change from 0 to 512
[  334.370129][T14015] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  334.388715][T14015] EXT4-fs (loop3): 1 truncate cleaned up
[  334.393311][T14015] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  334.416279][   T34] audit: type=1800 audit(1775722298.143:121): pid=14015 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3156" name="file1" dev="loop3" ino=15 res=0 errno=0
[  334.528324][   T34] audit: type=1800 audit(1775722298.143:122): pid=14015 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3156" name="file1" dev="loop3" ino=15 res=0 errno=0
[  335.029089][ T9892] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  335.574105][T14039] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3164'.
[  335.933091][T14050] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  336.229288][T14068] loop3: detected capacity change from 0 to 2048
[  336.242896][T14068] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  336.246078][T14068] NILFS (loop3): mounting unchecked fs
[  336.257093][ T5958] udevd[5958]: incorrect nilfs2 checksum on /dev/loop3
[  336.278393][T14068] NILFS (loop3): recovery complete
[  336.282677][T14070] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  336.670468][T14084] loop3: detected capacity change from 0 to 1764
[  336.780881][T14088] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3188'.
[  336.861503][T14092] loop3: detected capacity change from 0 to 1024
[  336.875806][T14092] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback.
[  336.880760][T14092] ext4 filesystem being mounted at /532/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  336.917755][ T7895] EXT4-fs error (device loop3): ext4_map_blocks:828: inode #15: comm kworker/u9:9: lblock 0 mapped to illegal pblock 0 (length 1)
[  336.927833][ T7895] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  336.953040][ T7895] EXT4-fs (loop3): This should not happen!! Data will be lost
[  336.953040][ T7895] 
[  336.963812][ T9892] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[  336.971265][ T9892] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  337.141560][T14107] overlayfs: failed to clone upperpath
[  337.369758][ T5959] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  337.532080][ T5959] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  337.535292][ T5959] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  337.538192][ T5959] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  337.542491][ T5959] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  337.545822][ T5959] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  337.554011][ T5959] usb 4-1: config 0 descriptor??
[  337.801527][T14115] netlink: 'syz.0.3199': attribute type 4 has an invalid length.
[  337.804403][T14115] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3199'.
[  337.882312][T14119] trusted_key: encrypted_key: insufficient parameters specified
[  337.988807][ T5959] hid_parser_main: 194 callbacks suppressed
[  337.988821][ T5959] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x4
[  338.015320][ T5959] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  339.261154][ T5959] usb 7-1: new full-speed USB device number 4 using dummy_hcd
[  339.423703][ T5959] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  339.427322][ T5959] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  339.430980][ T5959] usb 7-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[  339.435617][ T5959] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  339.439856][ T5959] usb 7-1: config 0 descriptor??
[  339.882752][ T5959] isku 0003:1E7D:319C.000A: item fetching failed at offset 3/7
[  339.885296][ T5959] isku 0003:1E7D:319C.000A: parse failed
[  339.886939][ T5959] isku 0003:1E7D:319C.000A: probe with driver isku failed with error -22
[  340.104046][ T5859] usb 7-1: USB disconnect, device number 4
[  340.530667][ T5873] usb 4-1: USB disconnect, device number 17
[  340.739796][T14169] loop6: detected capacity change from 0 to 1024
[  340.762995][T14169] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  340.777661][T14169] EXT4-fs warning (device loop6): ext4_rmdir:3185: inode #11: comm syz.6.3223: empty directory 'file1' has too many links (111)
[  340.810021][T13236] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  341.229993][T14192] loop6: detected capacity change from 0 to 2048
[  341.237198][T14192] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  341.759871][T14208] loop6: detected capacity change from 0 to 512
[  341.777617][T14208] EXT4-fs error (device loop6): ext4_orphan_get:1397: inode #15: comm syz.6.3240: inode has both inline data and extents flags
[  341.782560][T14208] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  341.782785][T14208] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.3240: couldn't read orphan inode 15 (err -117)
[  341.790039][T14208] loop6: lost filesystem error report for type 5 error -117
[  341.791813][T14208] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  341.833502][T13236] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  342.071550][T14217] overlay: Unknown parameter '/'
[  342.282464][T14219] loop3: detected capacity change from 0 to 1024
[  342.366463][T13629] hfsplus: b-tree write err: -5, ino 25
[  342.368626][T13629] hfsplus: b-tree write err: -5, ino 4
[  342.371189][T13629] hfsplus: b-tree write err: -5, ino 2
[  342.455949][T14214] loop6: detected capacity change from 0 to 131072
[  342.460136][T14214] F2FS-fs (loop6): invalid crc value
[  342.510630][T14214] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  342.514528][T14214] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4
[  342.530702][   T34] audit: type=1800 audit(1775722305.733:123): pid=14214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3242" name="file1" dev="loop6" ino=7 res=0 errno=0
[  344.268650][T14256] loop6: detected capacity change from 0 to 32768
[  344.322867][T14256] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  344.349037][T14256] XFS (loop6): Ending clean mount
[  344.353964][T14256] XFS (loop6): Quotacheck needed: Please wait.
[  344.397727][T14256] XFS (loop6): Quotacheck: Done.
[  344.521180][T13236] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  344.645001][T14263] loop3: detected capacity change from 0 to 131072
[  344.648913][T14263] F2FS-fs (loop3): invalid crc value
[  344.746261][T14263] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  344.771960][T14263] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  345.856013][T14304] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3270'.
[  345.933400][T14306] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3271'.
[  345.936665][T14306] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3271'.
[  345.944886][T14306] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3271'.
[  345.948178][T14306] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3271'.
[  346.319136][T14324] pim6reg1: entered promiscuous mode
[  346.321238][T14324] pim6reg1: entered allmulticast mode
[  346.620968][T14334] netlink: 'syz.6.3284': attribute type 8 has an invalid length.
[  346.641608][T14334] syzkaller0: entered promiscuous mode
[  346.643787][T14334] syzkaller0: entered allmulticast mode
[  347.774790][T14345] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3289'.
[  347.865780][T14352] loop6: detected capacity change from 0 to 512
[  347.886244][T14352] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002]
[  347.889378][T14352] System zones: 1-12
[  347.900026][T14352] EXT4-fs error (device loop6): ext4_iget_extra_inode:5040: inode #15: comm syz.6.3292: corrupted in-inode xattr: e_value size too large
[  347.906510][T14352] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  347.906721][T14354] vxcan2: entered allmulticast mode
[  347.906951][T14352] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.3292: couldn't read orphan inode 15 (err -117)
[  347.916758][    C1] EXT4-fs (loop6): error count since last fsck: 1
[  347.916779][    C1] EXT4-fs (loop6): initial error at time 1775722310: ext4_iget_extra_inode:5040: inode 15
[  347.916803][    C1] EXT4-fs (loop6): last error at time 1775722310: ext4_iget_extra_inode:5040: inode 15
[  347.931771][T14352] loop6: lost filesystem error report for type 5 error -117
[  347.933560][T14352] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  347.976068][T13236] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  348.512018][T14371] loop3: detected capacity change from 0 to 24
[  348.517931][T14371] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  348.531501][T14371] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  348.675410][T14373] new mount options do not match the existing superblock, will be ignored
[  349.207939][T14392] erspan0: entered promiscuous mode
[  349.232044][T14392] erspan0: left promiscuous mode
[  349.514929][T14395] loop6: detected capacity change from 0 to 512
[  349.525768][T14395] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.3311: invalid indirect mapped block 32768 (level 0)
[  349.537399][T14395] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  349.537926][T14395] EXT4-fs (loop6): Remounting filesystem read-only
[  349.541006][    C1] EXT4-fs (loop6): error count since last fsck: 1
[  349.541018][    C1] EXT4-fs (loop6): initial error at time 1775722312: ext4_free_branches:1023: inode 13
[  349.541033][    C1] EXT4-fs (loop6): last error at time 1775722312: ext4_free_branches:1023: inode 13
[  349.554173][T14395] EXT4-fs (loop6): 1 truncate cleaned up
[  349.558031][T14395] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  349.583887][T13236] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  350.671234][T14419] loop3: detected capacity change from 0 to 40427
[  350.683167][T14419] F2FS-fs (loop3): Fix alignment : done, start(4096) end(16896) block(12288)
[  350.691054][T14419] F2FS-fs (loop3): build fault injection rate: 5
[  350.693135][T14419] F2FS-fs (loop3): build fault injection type: 0x3bfe8c
[  350.722450][    C1] F2FS-fs (loop3): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  350.731775][T14419] F2FS-fs (loop3): invalid crc value
[  350.734111][T14419] F2FS-fs (loop3): Failed to get valid F2FS checkpoint
[  351.601776][ T5959] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  351.766293][ T5959] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  351.769666][ T5959] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  351.773443][ T5959] usb 4-1: Product: syz
[  351.775020][ T5959] usb 4-1: Manufacturer: syz
[  351.776731][ T5959] usb 4-1: SerialNumber: syz
[  351.781312][ T5959] usb 4-1: config 0 descriptor??
[  351.784046][ T5859] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  351.785077][ T5959] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  351.792057][ T5959] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  351.795702][ T5959] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[  351.799287][ T5959] usb 4-1: media controller created
[  351.808819][ T5959] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  351.831020][ T5959] DVB: Unable to find symbol mt352_attach()
[  351.847167][ T5959] DVB: Unable to find symbol nxt6000_attach()
[  351.849522][ T5959] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[  351.856497][ T5959] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input9
[  351.862569][ T5959] dvb-usb: schedule remote query interval to 1000 msecs.
[  351.865277][ T5959] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[  351.868538][ T5959] dvb-usb: bulk message failed: -22 (7/0)
[  351.876767][ T5959] dvb-usb: bulk message failed: -22 (7/0)
[  351.968127][ T5859] usb 7-1: config 1 has an invalid interface number: 7 but max is 0
[  351.971467][ T5859] usb 7-1: config 1 has no interface number 0
[  351.973432][ T5859] usb 7-1: config 1 interface 7 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64
[  351.976632][ T5859] usb 7-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0x24, changing to 0x4
[  351.979824][ T5859] usb 7-1: config 1 interface 7 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 608
[  351.982782][ T5859] usb 7-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  351.991780][ T5859] usb 7-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  351.994482][ T5859] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  351.997301][ T5859] usb 7-1: Product: syz
[  351.998770][ T5859] usb 7-1: Manufacturer: syz
[  352.000595][ T5859] usb 7-1: SerialNumber: syz
[  352.004766][T14449] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  352.007457][T14449] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  352.011745][ T5859] usb 7-1: Error in usbnet_get_endpoints (-22)
[  352.022025][ T5959] usb 4-1: USB disconnect, device number 18
[  352.069377][ T5959] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[  352.246297][ T5874] usb 7-1: USB disconnect, device number 5
[  352.668517][T14481] loop3: detected capacity change from 0 to 256
[  352.675102][T14481] exfat: Deprecated parameter 'namecase'
[  352.700622][T14481] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe5cb490d, utbl_chksum : 0xe619d30d)
[  353.005657][T14483] loop3: detected capacity change from 0 to 32768
[  353.348639][T14498] loop3: detected capacity change from 0 to 2048
[  353.381946][T14498] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  353.388681][T14498] ext4 filesystem being mounted at /591/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  353.390989][T14495] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3356'.
[  353.416272][ T9892] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  353.678730][T14514] loop3: detected capacity change from 0 to 164
[  354.781020][T14547] loop6: detected capacity change from 0 to 1024
[  354.804100][T14547] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  354.809171][T14547] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  354.817052][   T34] audit: type=1800 audit(1775722317.236:124): pid=14547 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3378" name="file1" dev="loop6" ino=15 res=0 errno=0
[  354.831823][T14547] EXT4-fs error (device loop6): ext4_map_blocks:828: inode #15: comm syz.6.3378: lblock 0 mapped to illegal pblock 0 (length 1)
[  354.850522][T14547] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  354.855158][T14547] EXT4-fs (loop6): This should not happen!! Data will be lost
[  354.855158][T14547] 
[  354.927779][T14547] EXT4-fs error (device loop6): ext4_map_blocks:828: inode #15: comm syz.6.3378: lblock 0 mapped to illegal pblock 0 (length 1)
[  354.936470][T14547] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  354.940091][T14547] EXT4-fs (loop6): This should not happen!! Data will be lost
[  354.940091][T14547] 
[  354.944089][T14547] EXT4-fs error (device loop6): ext4_map_blocks:828: inode #15: comm syz.6.3378: lblock 0 mapped to illegal pblock 0 (length 1)
[  354.951948][T14547] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  354.955461][T14547] EXT4-fs (loop6): This should not happen!! Data will be lost
[  354.955461][T14547] 
[  355.447328][T14577] loop3: detected capacity change from 0 to 256
[  355.476854][T14577] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  355.531138][   T32] EXT4-fs error (device loop6): ext4_map_blocks:828: inode #15: block 4: comm kworker/u9:1: lblock 4 mapped to illegal pblock 4 (length 2)
[  355.540113][   T32] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 117
[  355.549717][   T32] EXT4-fs (loop6): This should not happen!! Data will be lost
[  355.549717][   T32] 
[  355.558170][   T32] EXT4-fs error (device loop6): ext4_map_blocks:828: inode #15: block 8: comm kworker/u9:1: lblock 8 mapped to illegal pblock 8 (length 8)
[  355.566269][   T32] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  355.572381][T13236] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[  355.676975][T14581] loop3: detected capacity change from 0 to 32768
[  355.719428][T14581] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  355.756570][T14581] XFS (loop3): Ending clean mount
[  355.764286][T14581] XFS (loop3): Quotacheck needed: Please wait.
[  355.810045][T14581] XFS (loop3): Quotacheck: Done.
[  355.903154][T14602] netlink: 256 bytes leftover after parsing attributes in process `syz.6.3398'.
[  355.906312][T14602] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3398'.
[  356.413365][ T5873] usb 7-1: new full-speed USB device number 6 using dummy_hcd
[  356.507982][ T9892] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  356.583776][ T5873] usb 7-1: not running at top speed; connect to a high speed hub
[  356.617257][ T5873] usb 7-1: config 14 has an invalid interface number: 53 but max is 0
[  356.620389][ T5873] usb 7-1: config 14 has no interface number 0
[  356.622787][ T5873] usb 7-1: config 14 interface 53 has no altsetting 0
[  356.668045][ T5873] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=56.23
[  356.671471][ T5873] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  356.674431][ T5873] usb 7-1: Product: syz
[  356.675995][ T5873] usb 7-1: Manufacturer: syz
[  356.687583][ T5873] usb 7-1: SerialNumber: syz
[  356.921121][ T5873] iowarrior 7-1:14.53: no interrupt-in endpoint found
[  356.930835][ T5873] usb 7-1: USB disconnect, device number 6
[  357.866883][T14640] Invalid argument reading file caps for ./file0
[  358.236691][T14656] loop6: detected capacity change from 0 to 1024
[  358.385674][T14663] loop3: detected capacity change from 0 to 2048
[  358.392143][T14663] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  358.401444][T14663] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  358.404201][T14663] UDF-fs: Scanning with blocksize 512 failed
[  358.422343][T14663] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  358.650685][T14668] loop3: detected capacity change from 0 to 16
[  358.915220][T14661] loop6: detected capacity change from 0 to 32768
[  359.010147][T14670] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3430'.
[  359.697019][T14690] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3439'.
[  359.745164][T14696] loop6: detected capacity change from 0 to 1024
[  359.783779][T14696] EXT4-fs error (device loop6): ext4_quota_enable:7217: inode #3: comm syz.6.3443: iget: bad i_size value: -123145302304768
[  359.789663][T14696] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  359.789957][T14696] EXT4-fs error (device loop6): ext4_quota_enable:7220: comm syz.6.3443: Bad quota inode: 3, type: 0
[  359.797022][    C1] EXT4-fs (loop6): error count since last fsck: 1
[  359.797041][    C1] EXT4-fs (loop6): initial error at time 1775722321: ext4_quota_enable:7217: inode 3
[  359.797093][    C1] EXT4-fs (loop6): last error at time 1775722321: ext4_quota_enable:7217: inode 3
[  359.808088][T14696] loop6: lost filesystem error report for type 5 error -117
[  359.808325][T14696] EXT4-fs warning (device loop6): ext4_enable_quotas:7261: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  359.817776][T14696] EXT4-fs (loop6): mount failed
[  359.861385][T14703] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3446'.
[  359.864883][T14703] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3446'.
[  359.868830][T14703] netlink: 'syz.3.3446': attribute type 1 has an invalid length.
[  360.193910][T14715] loop6: detected capacity change from 0 to 32768
[  360.213131][T14715] ocfs2: Slot 0 on device (7,6) was already allocated to this node!
[  360.227170][T14715] JBD2: Ignoring recovery information on journal
[  360.247493][T14715] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  360.308859][T13236] ocfs2: Unmounting device (7,6) on (node local)
[  360.594025][T14739] loop6: detected capacity change from 0 to 32768
[  360.869077][T14745] loop6: detected capacity change from 0 to 32768
[  360.876025][T14745] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.3461 (14745)
[  360.891997][T14745] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  360.895638][T14745] BTRFS info (device loop6): using crc32c checksum algorithm
[  361.019176][T14745] BTRFS info (device loop6): enabling ssd optimizations
[  361.021169][T14745] BTRFS info (device loop6): turning on flush-on-commit
[  361.023057][T14745] BTRFS info (device loop6): enabling free space tree
[  361.024976][T14745] BTRFS info (device loop6): enabling auto defrag
[  361.036277][T14745] BTRFS info (device loop6): use lzo compression, level 1
[  361.038496][T14745] BTRFS info (device loop6): max_inline set to 4096
[  361.069928][T13236] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  361.193552][T14765] sctp: [Deprecated]: syz.6.3463 (pid 14765) Use of int in maxseg socket option.
[  361.193552][T14765] Use struct sctp_assoc_value instead
[  361.533807][T14781] loop3: detected capacity change from 0 to 512
[  361.541065][T14781] EXT4-fs: Ignoring removed bh option
[  361.544972][T14781] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended
[  361.548624][T14781] EXT4-fs (loop3): 1 truncate cleaned up
[  361.552808][T14781] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  361.572804][ T9892] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  361.635332][T14787] loop3: detected capacity change from 0 to 256
[  361.638631][T14787] exfat: Deprecated parameter 'utf8'
[  361.650815][T14787] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d)
[  361.845351][T14802] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  361.853179][T14802] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  362.082935][T14818] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3487'.
[  362.801109][T14842] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3497'.
[  362.804149][T14842] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3497'.
[  362.806925][T14842] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3497'.
[  363.211251][T14856] veth0_vlan: left promiscuous mode
[  363.369678][T14860] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3507'.
[  363.513772][T14868] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3510'.
[  363.529532][T14868] netlink: 'syz.3.3510': attribute type 6 has an invalid length.
[  363.533051][T14868] netlink: 'syz.3.3510': attribute type 5 has an invalid length.
[  363.536119][T14868] netlink: 'syz.3.3510': attribute type 4 has an invalid length.
[  364.761609][T14898] loop6: detected capacity change from 0 to 2048
[  364.907005][T14898] loop6: detected capacity change from 0 to 128
[  365.278955][ T5874] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  365.461822][ T5874] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  365.468203][ T5874] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  365.473090][ T5874] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  365.476074][ T5874] usb 7-1: Product: syz
[  365.482248][ T5874] usb 7-1: Manufacturer: syz
[  365.484040][ T5874] usb 7-1: SerialNumber: syz
[  365.493695][ T5874] usb 7-1: config 0 descriptor??
[  365.501333][ T5874] yurex 7-1:0.0: Could not find endpoints
[  365.732947][ T5859] usb 7-1: USB disconnect, device number 7
[  366.326351][ T5873] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  366.359755][   T34] audit: type=1326 audit(1775722328.046:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14947 comm="syz.6.3545" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46ed9c819 code=0x7ffc0000
[  366.369995][   T34] audit: type=1326 audit(1775722328.046:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14947 comm="syz.6.3545" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46ed9c819 code=0x7ffc0000
[  366.379708][   T34] audit: type=1326 audit(1775722328.055:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14947 comm="syz.6.3545" exe="/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7fc46ed9c819 code=0x7ffc0000
[  366.388641][   T34] audit: type=1326 audit(1775722328.055:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14947 comm="syz.6.3545" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46ed9c819 code=0x7ffc0000
[  366.396081][   T34] audit: type=1326 audit(1775722328.055:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14947 comm="syz.6.3545" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46ed9c819 code=0x7ffc0000
[  366.403185][   T34] audit: type=1326 audit(1775722328.064:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14947 comm="syz.6.3545" exe="/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7fc46ed9c819 code=0x7ffc0000
[  366.411922][   T34] audit: type=1326 audit(1775722328.064:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14947 comm="syz.6.3545" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46ed9c819 code=0x7ffc0000
[  366.428799][   T34] audit: type=1326 audit(1775722328.064:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14947 comm="syz.6.3545" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46ed9c819 code=0x7ffc0000
[  366.613684][ T5873] usb 4-1: Using ep0 maxpacket: 8
[  366.617937][ T5873] usb 4-1: config index 0 descriptor too short (expected 30, got 18)
[  366.623442][ T5873] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  366.627289][ T5873] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  366.630349][ T5873] usb 4-1: Product: syz
[  366.632007][ T5873] usb 4-1: Manufacturer: syz
[  366.633853][ T5873] usb 4-1: SerialNumber: syz
[  366.641951][ T5873] usb 4-1: config 0 descriptor??
[  366.748432][ T5873] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  366.753237][ T5873] usb 4-1: setting power ON
[  366.755300][ T5873] dvb-usb: bulk message failed: -22 (2/0)
[  366.827947][ T5873] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  366.832162][ T5873] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  366.835688][ T5873] usb 4-1: media controller created
[  366.854641][ T5873] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  366.875467][ T5873] usb 4-1: selecting invalid altsetting 6
[  366.885192][ T5873] usb 4-1: digital interface selection failed (-22)
[  366.887850][ T5873] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  366.894004][ T5873] usb 4-1: setting power OFF
[  366.898777][ T5873] dvb-usb: bulk message failed: -22 (2/0)
[  366.902859][ T5873] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  366.906469][ T5873] (NULL device *): no alternate interface
[  366.944254][ T5873] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  366.956792][ T5873] usb 4-1: USB disconnect, device number 19
[  367.013563][T14964] netlink: 'syz.0.3551': attribute type 1 has an invalid length.
[  367.226998][T14976] x_tables: duplicate underflow at hook 2
[  367.314609][T14980] overlayfs: failed to clone upperpath
[  367.539923][T14992] loop3: detected capacity change from 0 to 128
[  367.779975][T15005] __nla_validate_parse: 1 callbacks suppressed
[  367.779995][T15005] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3572'.
[  367.883797][T15009] trusted_key: syz.3.3567 sent an empty control message without MSG_MORE.
[  369.347432][   T34] audit: type=1326 audit(1775722330.835:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15043 comm="syz.6.3586" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46ed9c819 code=0x7ffc0000
[  369.355006][   T34] audit: type=1326 audit(1775722330.844:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15043 comm="syz.6.3586" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46ed9c819 code=0x7ffc0000
[  371.226713][T15099] overlayfs: workdir and upperdir must be separate subtrees
[  371.294313][T15100] futex_wake_op: syz.6.3607 tries to shift op by 144; fix this program
[  373.843490][T15153] pimreg: entered allmulticast mode
[  373.852321][T15153] pimreg: left allmulticast mode
[  374.485707][T15173] x_tables: ip_tables: osf match: only valid for protocol 6
[  374.829070][T15191] smc: net device wlan0 applied user defined pnetid SYZ0
[  374.877869][   T34] kauditd_printk_skb: 12 callbacks suppressed
[  374.877881][   T34] audit: type=1326 audit(1775722336.010:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15194 comm="syz.3.3650" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6f979c819 code=0x7ffc0000
[  374.901643][   T34] audit: type=1326 audit(1775722336.010:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15194 comm="syz.3.3650" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6f979c819 code=0x7ffc0000
[  374.915987][   T34] audit: type=1326 audit(1775722336.029:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15194 comm="syz.3.3650" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6f979c819 code=0x7ffc0000
[  374.924061][   T34] audit: type=1326 audit(1775722336.029:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15194 comm="syz.3.3650" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6f979c819 code=0x7ffc0000
[  374.932597][   T34] audit: type=1326 audit(1775722336.029:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15194 comm="syz.3.3650" exe="/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7fe6f979c819 code=0x7ffc0000
[  374.941703][   T34] audit: type=1326 audit(1775722336.029:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15194 comm="syz.3.3650" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6f979c819 code=0x7ffc0000
[  374.950454][   T34] audit: type=1326 audit(1775722336.029:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15194 comm="syz.3.3650" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6f979c819 code=0x7ffc0000
[  374.957646][   T34] audit: type=1326 audit(1775722336.029:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15194 comm="syz.3.3650" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6f979c819 code=0x7ffc0000
[  374.965273][   T34] audit: type=1326 audit(1775722336.029:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15194 comm="syz.3.3650" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6f979c819 code=0x7ffc0000
[  374.976947][   T34] audit: type=1326 audit(1775722336.029:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15194 comm="syz.3.3650" exe="/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fe6f979c819 code=0x7ffc0000
[  375.575337][T15236] loop3: detected capacity change from 0 to 2048
[  375.580597][T15236] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 129: 0x32 != 0x7d
[  375.584550][T15236] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  376.041632][T15268] IPv6: NLM_F_REPLACE set, but no existing node found!
[  376.457697][T15278] devpts: Bad value for 'max'
[  377.320452][ T5859] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  377.460139][T15316] loop3: detected capacity change from 0 to 64
[  377.466950][T15316] MINIX-fs: mounting unchecked file system, running fsck is recommended
[  377.487226][ T5859] usb 7-1: Using ep0 maxpacket: 8
[  377.508279][ T5859] usb 7-1: config 0 has too many interfaces: 65, using maximum allowed: 32
[  377.510975][ T5859] usb 7-1: config 0 has an invalid interface number: 150 but max is 64
[  377.513824][T15316] MINIX-fs warning: remounting unchecked fs, running fsck is recommended
[  377.523291][ T5859] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  377.535021][ T5859] usb 7-1: config 0 has 2 interfaces, different from the descriptor's value: 65
[  377.544083][ T5859] usb 7-1: config 0 has no interface number 0
[  377.546463][ T5859] usb 7-1: config 0 interface 150 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  377.551125][ T5859] usb 7-1: config 0 interface 150 has no altsetting 0
[  377.553734][ T5859] usb 7-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75
[  377.574145][ T5859] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  377.581346][ T5859] usb 7-1: config 0 descriptor??
[  378.016395][   T24] usb 7-1: USB disconnect, device number 8
[  378.061397][ T5818] Bluetooth: hci2: SCO packet for unknown connection handle 201
[  378.099456][T15341] netlink: 280 bytes leftover after parsing attributes in process `syz.3.3708'.
[  378.227617][T15351] loop3: detected capacity change from 0 to 128
[  378.374943][T15357] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3716'.
[  378.674890][T15363] loop3: detected capacity change from 0 to 32768
[  378.742012][T15363] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  378.763055][T15363] XFS (loop3): Ending clean mount
[  378.766593][T15363] XFS (loop3): Quotacheck needed: Please wait.
[  378.822021][T15363] XFS (loop3): Quotacheck: Done.
[  379.460492][ T9892] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  380.226466][   T34] kauditd_printk_skb: 89 callbacks suppressed
[  380.226483][   T34] audit: type=1326 audit(1775722341.027:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15430 comm="syz.3.3745" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe6f975d04e code=0x7ffc0000
[  380.237961][   T34] audit: type=1326 audit(1775722341.036:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15430 comm="syz.3.3745" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe6f975d04e code=0x7ffc0000
[  380.247755][   T34] audit: type=1326 audit(1775722341.036:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15430 comm="syz.3.3745" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe6f975d04e code=0x7ffc0000
[  380.256983][   T34] audit: type=1326 audit(1775722341.036:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15430 comm="syz.3.3745" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe6f975d04e code=0x7ffc0000
[  380.266388][   T34] audit: type=1326 audit(1775722341.036:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15430 comm="syz.3.3745" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe6f975d04e code=0x7ffc0000
[  380.276702][   T34] audit: type=1326 audit(1775722341.036:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15430 comm="syz.3.3745" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe6f975d04e code=0x7ffc0000
[  380.285465][   T34] audit: type=1326 audit(1775722341.036:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15430 comm="syz.3.3745" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe6f975d04e code=0x7ffc0000
[  380.294498][   T34] audit: type=1326 audit(1775722341.036:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15430 comm="syz.3.3745" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe6f975d04e code=0x7ffc0000
[  380.303046][   T34] audit: type=1326 audit(1775722341.046:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15430 comm="syz.3.3745" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe6f975d04e code=0x7ffc0000
[  380.311220][   T34] audit: type=1326 audit(1775722341.046:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15430 comm="syz.3.3745" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe6f975d04e code=0x7ffc0000
[  380.857669][T15438] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3747'.
[  380.861737][T15438] geneve1: entered promiscuous mode
[  381.246871][ T5859] kernel read not supported for file /vcs (pid: 5859 comm: kworker/0:5)
[  382.355613][T15469] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0
[  382.545110][T15471] loop6: detected capacity change from 0 to 2048
[  382.558863][T15471] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  382.678128][T15479] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.3765'.
[  383.015074][   T24] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  383.217698][   T24] usb 7-1: Using ep0 maxpacket: 32
[  383.223535][   T24] usb 7-1: unable to get BOS descriptor or descriptor too short
[  383.227792][   T24] usb 7-1: config 0 has an invalid interface number: 251 but max is 0
[  383.231347][   T24] usb 7-1: config 0 has no interface number 0
[  383.233674][   T24] usb 7-1: config 0 interface 251 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  383.238482][   T24] usb 7-1: config 0 interface 251 has no altsetting 0
[  383.244218][   T24] usb 7-1: New USB device found, idVendor=2304, idProduct=023f, bcdDevice=9e.f2
[  383.247492][   T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  383.250930][   T24] usb 7-1: Product: syz
[  383.252545][   T24] usb 7-1: Manufacturer: syz
[  383.254294][   T24] usb 7-1: SerialNumber: syz
[  383.263073][   T24] usb 7-1: config 0 descriptor??
[  383.503837][   T24] usb 7-1: USB disconnect, device number 9
[  383.728067][T15522] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3785'.
[  384.071519][T15530] loop3: detected capacity change from 0 to 32768
[  384.079858][T15530] btrfs: Unknown parameter 'check_int_print_mask'
[  385.092837][T15553] loop3: detected capacity change from 0 to 1024
[  385.102514][T15553] EXT4-fs: Ignoring removed nobh option
[  385.105256][T15553] EXT4-fs: Ignoring removed nomblk_io_submit option
[  385.136527][T15553] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  385.212782][ T9892] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  385.265155][T15560] netlink: 'syz.3.3799': attribute type 23 has an invalid length.
[  385.511302][T15572] loop6: detected capacity change from 0 to 1764
[  385.676675][T15581] 
[  385.677667][T15581] =====================================================
[  385.680258][T15581] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected
[  385.682892][T15581] syzkaller #0 Tainted: G             L     
[  385.685222][T15581] -----------------------------------------------------
[  385.687732][T15581] syz.6.3809/15581 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire:
[  385.690523][T15581] ffff88810b252408 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0
[  385.693827][T15581] 
[  385.693827][T15581] and this task is already holding:
[  385.696523][T15581] ffff88810528b028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0
[  385.700040][T15581] which would create a new lock dependency:
[  385.702119][T15581]  (&client->buffer_lock){....}-{3:3} -> (&new->fa_lock){....}-{3:3}
[  385.705179][T15581] 
[  385.705179][T15581] but this new dependency connects a SOFTIRQ-irq-safe lock:
[  385.708627][T15581]  (&dev->event_lock#2){..-.}-{3:3}
[  385.708656][T15581] 
[  385.708656][T15581] ... which became SOFTIRQ-irq-safe at:
[  385.713300][T15581]   lock_acquire+0xf0/0x2e0
[  385.714939][T15581]   _raw_spin_lock_irqsave+0x40/0x60
[  385.716923][T15581]   input_inject_event+0xa5/0x340
[  385.718832][T15581]   led_trigger_event+0x138/0x210
[  385.720688][T15581]   kbd_bh+0x1f3/0x300
[  385.722156][T15581]   tasklet_action_common+0x2da/0x4b0
[  385.724073][T15581]   handle_softirqs+0x22a/0x870
[  385.725849][T15581]   run_ksoftirqd+0x36/0x60
[  385.727615][T15581]   smpboot_thread_fn+0x541/0xa50
[  385.729601][T15581]   kthread+0x388/0x470
[  385.731242][T15581]   ret_from_fork+0x51e/0xb90
[  385.733084][T15581]   ret_from_fork_asm+0x1a/0x30
[  385.734988][T15581] 
[  385.734988][T15581] to a SOFTIRQ-irq-unsafe lock:
[  385.737649][T15581]  (tasklist_lock){.+.+}-{3:3}
[  385.737675][T15581] 
[  385.737675][T15581] ... which became SOFTIRQ-irq-unsafe at:
[  385.742387][T15581] ...
[  385.742394][T15581]   lock_acquire+0xf0/0x2e0
[  385.745034][T15581]   _raw_read_lock+0x36/0x50
[  385.746847][T15581]   __do_wait+0xde/0x740
[  385.748506][T15581]   do_wait+0x1e7/0x540
[  385.750044][T15581]   kernel_wait+0xd6/0x1c0
[  385.751717][T15581]   call_usermodehelper_exec_work+0xbe/0x230
[  385.754065][T15581]   process_scheduled_works+0xb6e/0x18c0
[  385.756253][T15581]   worker_thread+0xa53/0xfc0
[  385.758073][T15581]   kthread+0x388/0x470
[  385.759697][T15581]   ret_from_fork+0x51e/0xb90
[  385.761542][T15581]   ret_from_fork_asm+0x1a/0x30
[  385.763459][T15581] 
[  385.763459][T15581] other info that might help us debug this:
[  385.763459][T15581] 
[  385.767337][T15581] Chain exists of:
[  385.767337][T15581]   &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock
[  385.767337][T15581] 
[  385.772385][T15581]  Possible interrupt unsafe locking scenario:
[  385.772385][T15581] 
[  385.775403][T15581]        CPU0                    CPU1
[  385.777438][T15581]        ----                    ----
[  385.779523][T15581]   lock(tasklist_lock);
[  385.781122][T15581]                                local_irq_disable();
[  385.783635][T15581]                                lock(&dev->event_lock#2);
[  385.786323][T15581]                                lock(&client->buffer_lock);
[  385.789131][T15581]   <Interrupt>
[  385.790500][T15581]     lock(&dev->event_lock#2);
[  385.792344][T15581] 
[  385.792344][T15581]  *** DEADLOCK ***
[  385.792344][T15581] 
[  385.795358][T15581] 7 locks held by syz.6.3809/15581:
[  385.797309][T15581]  #0: ffff88810ace7118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1ae/0x4c0
[  385.800701][T15581]  #1: ffff8881037f6230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa5/0x340
[  385.804554][T15581]  #2: ffffffff8e75e5a0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb6/0x340
[  385.808167][T15581]  #3: ffffffff8e75e5a0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890
[  385.811725][T15581]  #4: ffffffff8e75e5a0 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340
[  385.815073][T15581]  #5: ffff88810528b028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0
[  385.818732][T15581]  #6: ffffffff8e75e5a0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0
[  385.822066][T15581] 
[  385.822066][T15581] the dependencies between SOFTIRQ-irq-safe lock and the holding lock:
[  385.825714][T15581]  -> (&dev->event_lock#2){..-.}-{3:3} {
[  385.827827][T15581]     IN-SOFTIRQ-W at:
[  385.829372][T15581]                       lock_acquire+0xf0/0x2e0
[  385.831643][T15581]                       _raw_spin_lock_irqsave+0x40/0x60
[  385.834160][T15581]                       input_inject_event+0xa5/0x340
[  385.836689][T15581]                       led_trigger_event+0x138/0x210
[  385.839163][T15581]                       kbd_bh+0x1f3/0x300
[  385.841322][T15581]                       tasklet_action_common+0x2da/0x4b0
[  385.843816][T15581]                       handle_softirqs+0x22a/0x870
[  385.846261][T15581]                       run_ksoftirqd+0x36/0x60
[  385.848595][T15581]                       smpboot_thread_fn+0x541/0xa50
[  385.851132][T15581]                       kthread+0x388/0x470
[  385.853303][T15581]                       ret_from_fork+0x51e/0xb90
[  385.855669][T15581]                       ret_from_fork_asm+0x1a/0x30
[  385.858093][T15581]     INITIAL USE at:
[  385.859553][T15581]                      lock_acquire+0xf0/0x2e0
[  385.861868][T15581]                      _raw_spin_lock_irqsave+0x40/0x60
[  385.864362][T15581]                      input_inject_event+0xa5/0x340
[  385.866767][T15581]                      kbd_led_trigger_activate+0xbc/0x100
[  385.869343][T15581]                      led_trigger_set+0x535/0x960
[  385.871692][T15581]                      led_trigger_set_default+0x260/0x2a0
[  385.874272][T15581]                      led_classdev_register_ext+0x787/0x9c0
[  385.876881][T15581]                      input_leds_connect+0x517/0x790
[  385.879315][T15581]                      input_register_device+0xd00/0x1160
[  385.881833][T15581]                      atkbd_connect+0x731/0xa50
[  385.884202][T15581]                      serio_driver_probe+0x82/0xd0
[  385.886647][T15581]                      really_probe+0x267/0xaf0
[  385.888990][T15581]                      __driver_probe_device+0x18c/0x320
[  385.891592][T15581]                      driver_probe_device+0x4f/0x240
[  385.894085][T15581]                      __driver_attach+0x34c/0x640
[  385.896525][T15581]                      bus_for_each_dev+0x23b/0x2c0
[  385.898974][T15581]                      serio_handle_event+0x20a/0xdd0
[  385.901469][T15581]                      process_scheduled_works+0xb6e/0x18c0
[  385.904129][T15581]                      worker_thread+0xa53/0xfc0
[  385.906503][T15581]                      kthread+0x388/0x470
[  385.908708][T15581]                      ret_from_fork+0x51e/0xb90
[  385.910985][T15581]                      ret_from_fork_asm+0x1a/0x30
[  385.913315][T15581]   }
[  385.914321][T15581]   ... key      at: [<ffffffff9a617c60>] input_allocate_device.__key.7+0x0/0x20
[  385.917704][T15581] -> (&client->buffer_lock){....}-{3:3} {
[  385.919874][T15581]    INITIAL USE at:
[  385.921301][T15581]                    lock_acquire+0xf0/0x2e0
[  385.923488][T15581]                    _raw_spin_lock_irq+0x3d/0x50
[  385.925876][T15581]                    evdev_read+0x37d/0xcb0
[  385.928087][T15581]                    vfs_readv+0x587/0x840
[  385.930270][T15581]                    do_readv+0x154/0x2e0
[  385.932371][T15581]                    do_syscall_64+0x14d/0xf80
[  385.934652][T15581]                    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  385.937491][T15581]  }
[  385.938494][T15581]  ... key      at: [<ffffffff9a617f00>] evdev_open.__key.27+0x0/0x20
[  385.941494][T15581]  ... acquired at:
[  385.942912][T15581]    _raw_spin_lock+0x2e/0x40
[  385.944655][T15581]    evdev_pass_values+0xb9/0xbd0
[  385.946545][T15581]    evdev_events+0x1e6/0x340
[  385.948313][T15581]    input_pass_values+0x288/0x890
[  385.950184][T15581]    input_event_dispose+0x330/0x6b0
[  385.952140][T15581]    input_inject_event+0x1dd/0x340
[  385.954104][T15581]    evdev_write+0x325/0x4c0
[  385.955848][T15581]    vfs_write+0x29a/0xb90
[  385.957478][T15581]    ksys_write+0x150/0x270
[  385.959162][T15581]    do_syscall_64+0x14d/0xf80
[  385.960970][T15581]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  385.963197][T15581] 
[  385.964084][T15581] 
[  385.964084][T15581] the dependencies between the lock to be acquired
[  385.964094][T15581]  and SOFTIRQ-irq-unsafe lock:
[  385.969083][T15581]   -> (tasklist_lock){.+.+}-{3:3} {
[  385.971080][T15581]      HARDIRQ-ON-R at:
[  385.972619][T15581]                         lock_acquire+0xf0/0x2e0
[  385.974986][T15581]                         _raw_read_lock+0x36/0x50
[  385.977399][T15581]                         __do_wait+0xde/0x740
[  385.979685][T15581]                         do_wait+0x1e7/0x540
[  385.981935][T15581]                         kernel_wait+0xd6/0x1c0
[  385.984291][T15581]                         call_usermodehelper_exec_work+0xbe/0x230
[  385.987186][T15581]                         process_scheduled_works+0xb6e/0x18c0
[  385.989964][T15581]                         worker_thread+0xa53/0xfc0
[  385.992392][T15581]                         kthread+0x388/0x470
[  385.994590][T15581]                         ret_from_fork+0x51e/0xb90
[  385.997013][T15581]                         ret_from_fork_asm+0x1a/0x30
[  385.999520][T15581]      SOFTIRQ-ON-R at:
[  386.001059][T15581]                         lock_acquire+0xf0/0x2e0
[  386.003346][T15581]                         _raw_read_lock+0x36/0x50
[  386.005692][T15581]                         __do_wait+0xde/0x740
[  386.008064][T15581]                         do_wait+0x1e7/0x540
[  386.010249][T15581]                         kernel_wait+0xd6/0x1c0
[  386.012569][T15581]                         call_usermodehelper_exec_work+0xbe/0x230
[  386.015466][T15581]                         process_scheduled_works+0xb6e/0x18c0
[  386.018299][T15581]                         worker_thread+0xa53/0xfc0
[  386.020766][T15581]                         kthread+0x388/0x470
[  386.023019][T15581]                         ret_from_fork+0x51e/0xb90
[  386.025434][T15581]                         ret_from_fork_asm+0x1a/0x30
[  386.027952][T15581]      INITIAL USE at:
[  386.029569][T15581]                        lock_acquire+0xf0/0x2e0
[  386.031885][T15581]                        _raw_write_lock_irq+0x3d/0x50
[  386.034408][T15581]                        copy_process+0x247a/0x3cd0
[  386.036831][T15581]                        kernel_clone+0x248/0x8e0
[  386.039253][T15581]                        user_mode_thread+0x110/0x180
[  386.041747][T15581]                        rest_init+0x23/0x300
[  386.044017][T15581]                        start_kernel+0x385/0x3d0
[  386.046395][T15581]                        x86_64_start_reservations+0x24/0x30
[  386.049118][T15581]                        x86_64_start_kernel+0x143/0x1c0
[  386.051700][T15581]                        common_startup_64+0x13e/0x147
[  386.054232][T15581]      INITIAL READ USE at:
[  386.055924][T15581]                             lock_acquire+0xf0/0x2e0
[  386.058421][T15581]                             _raw_read_lock+0x36/0x50
[  386.060942][T15581]                             __do_wait+0xde/0x740
[  386.063344][T15581]                             do_wait+0x1e7/0x540
[  386.065692][T15581]                             kernel_wait+0xd6/0x1c0
[  386.068215][T15581]                             call_usermodehelper_exec_work+0xbe/0x230
[  386.071225][T15581]                             process_scheduled_works+0xb6e/0x18c0
[  386.074096][T15581]                             worker_thread+0xa53/0xfc0
[  386.076624][T15581]                             kthread+0x388/0x470
[  386.078940][T15581]                             ret_from_fork+0x51e/0xb90
[  386.081426][T15581]                             ret_from_fork_asm+0x1a/0x30
[  386.084023][T15581]    }
[  386.085042][T15581]    ... key      at: [<ffffffff8e40c058>] tasklist_lock+0x18/0x40
[  386.087929][T15581]    ... acquired at:
[  386.089406][T15581]    _raw_read_lock+0x36/0x50
[  386.091180][T15581]    send_sigurg+0x12b/0x420
[  386.092900][T15581]    sk_send_sigurg+0x6c/0x2e0
[  386.094675][T15581]    queue_oob+0x42c/0x4f0
[  386.096334][T15581]    unix_stream_sendmsg+0xcb1/0xe80
[  386.098309][T15581]    ____sys_sendmsg+0x972/0x9f0
[  386.100129][T15581]    ___sys_sendmsg+0x2a5/0x360
[  386.101947][T15581]    __x64_sys_sendmsg+0x1bd/0x2a0
[  386.103836][T15581]    do_syscall_64+0x14d/0xf80
[  386.105657][T15581]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  386.107886][T15581] 
[  386.108785][T15581]  -> (&f_owner->lock){....}-{3:3} {
[  386.110709][T15581]     INITIAL USE at:
[  386.112186][T15581]                      lock_acquire+0xf0/0x2e0
[  386.114508][T15581]                      _raw_write_lock_irq+0x3d/0x50
[  386.116889][T15581]                      __f_setown+0x67/0x370
[  386.119321][T15581]                      do_fcntl+0x171c/0x1a20
[  386.121590][T15581]                      __se_sys_fcntl+0xc8/0x150
[  386.124085][T15581]                      do_syscall_64+0x14d/0xf80
[  386.126502][T15581]                      entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  386.129420][T15581]     INITIAL READ USE at:
[  386.131099][T15581]                           lock_acquire+0xf0/0x2e0
[  386.133617][T15581]                           _raw_read_lock_irqsave+0x48/0x60
[  386.136391][T15581]                           send_sigurg+0x55/0x420
[  386.138871][T15581]                           sk_send_sigurg+0x6c/0x2e0
[  386.141364][T15581]                           queue_oob+0x42c/0x4f0
[  386.143730][T15581]                           unix_stream_sendmsg+0xcb1/0xe80
[  386.146413][T15581]                           ____sys_sendmsg+0x972/0x9f0
[  386.148959][T15581]                           ___sys_sendmsg+0x2a5/0x360
[  386.151514][T15581]                           __x64_sys_sendmsg+0x1bd/0x2a0
[  386.154124][T15581]                           do_syscall_64+0x14d/0xf80
[  386.156525][T15581]                           entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  386.159498][T15581]   }
[  386.160499][T15581]   ... key      at: [<ffffffff9a2f86e0>] file_f_owner_allocate.__key+0x0/0x20
[  386.163723][T15581]   ... acquired at:
[  386.165204][T15581]    _raw_read_lock_irqsave+0x48/0x60
[  386.167209][T15581]    send_sigio+0x38/0x370
[  386.168888][T15581]    kill_fasync+0x24d/0x4d0
[  386.170577][T15581]    lease_break_callback+0x26/0x30
[  386.172519][T15581]    __break_lease+0x81c/0x1e80
[  386.174315][T15581]    do_dentry_open+0x1010/0x14e0
[  386.176177][T15581]    vfs_open+0x3b/0x340
[  386.177753][T15581]    path_openat+0x2e08/0x3860
[  386.179453][T15581]    do_file_open+0x23e/0x4a0
[  386.181121][T15581]    do_sys_openat2+0x113/0x200
[  386.182917][T15581]    __x64_sys_openat+0x138/0x170
[  386.184750][T15581]    do_syscall_64+0x14d/0xf80
[  386.186459][T15581]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  386.188666][T15581] 
[  386.189576][T15581] -> (&new->fa_lock){....}-{3:3} {
[  386.191485][T15581]    INITIAL USE at:
[  386.192908][T15581]                    lock_acquire+0xf0/0x2e0
[  386.194975][T15581]                    _raw_write_lock_irq+0x3d/0x50
[  386.197300][T15581]                    fasync_insert_entry+0xc3/0x270
[  386.199567][T15581]                    lease_setup+0x86/0x110
[  386.201765][T15581]                    generic_setlease+0xacf/0xff0
[  386.204098][T15581]                    do_fcntl_add_lease+0x35e/0x470
[  386.206579][T15581]                    fcntl_setlease+0x123/0x180
[  386.208889][T15581]                    do_fcntl+0x8b3/0x1a20
[  386.211050][T15581]                    __se_sys_fcntl+0xc8/0x150
[  386.213338][T15581]                    do_syscall_64+0x14d/0xf80
[  386.215614][T15581]                    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  386.218374][T15581]    INITIAL READ USE at:
[  386.219981][T15581]                         lock_acquire+0xf0/0x2e0
[  386.222300][T15581]                         _raw_read_lock_irqsave+0x48/0x60
[  386.224913][T15581]                         kill_fasync+0x199/0x4d0
[  386.227314][T15581]                         lease_break_callback+0x26/0x30
[  386.229895][T15581]                         __break_lease+0x81c/0x1e80
[  386.232517][T15581]                         do_dentry_open+0x1010/0x14e0
[  386.235018][T15581]                         vfs_open+0x3b/0x340
[  386.237293][T15581]                         path_openat+0x2e08/0x3860
[  386.239697][T15581]                         do_file_open+0x23e/0x4a0
[  386.241847][T15581]                         do_sys_openat2+0x113/0x200
[  386.244390][T15581]                         __x64_sys_openat+0x138/0x170
[  386.246950][T15581]                         do_syscall_64+0x14d/0xf80
[  386.248958][T15581]                         entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  386.251291][T15581]  }
[  386.252176][T15581]  ... key      at: [<ffffffff9a2f8700>] fasync_insert_entry.__key+0x0/0x20
[  386.254773][T15581]  ... acquired at:
[  386.255921][T15581]    _raw_read_lock_irqsave+0x48/0x60
[  386.257548][T15581]    kill_fasync+0x199/0x4d0
[  386.259075][T15581]    evdev_pass_values+0x627/0xbd0
[  386.260973][T15581]    evdev_events+0x1e6/0x340
[  386.262710][T15581]    input_pass_values+0x288/0x890
[  386.264592][T15581]    input_event_dispose+0x330/0x6b0
[  386.266477][T15581]    input_inject_event+0x1dd/0x340
[  386.268364][T15581]    evdev_write+0x325/0x4c0
[  386.269769][T15581]    vfs_write+0x29a/0xb90
[  386.271042][T15581]    ksys_write+0x150/0x270
[  386.272357][T15581]    do_syscall_64+0x14d/0xf80
[  386.273742][T15581]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  386.275507][T15581] 
[  386.276215][T15581] 
[  386.276215][T15581] stack backtrace:
[  386.277942][T15581] CPU: 0 UID: 0 PID: 15581 Comm: syz.6.3809 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  386.277957][T15581] Tainted: [L]=SOFTLOCKUP
[  386.277960][T15581] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  386.277972][T15581] Call Trace:
[  386.277978][T15581]  <TASK>
[  386.277983][T15581]  dump_stack_lvl+0xe8/0x150
[  386.277997][T15581]  __lock_acquire+0x2a94/0x2cf0
[  386.278013][T15581]  lock_acquire+0xf0/0x2e0
[  386.278022][T15581]  ? kill_fasync+0x199/0x4d0
[  386.278035][T15581]  _raw_read_lock_irqsave+0x48/0x60
[  386.278045][T15581]  ? kill_fasync+0x199/0x4d0
[  386.278054][T15581]  kill_fasync+0x199/0x4d0
[  386.278063][T15581]  ? kill_fasync+0x53/0x4d0
[  386.278072][T15581]  evdev_pass_values+0x627/0xbd0
[  386.278082][T15581]  ? evdev_pass_values+0x5a1/0xbd0
[  386.278091][T15581]  evdev_events+0x1e6/0x340
[  386.278099][T15581]  ? evdev_events+0x79/0x340
[  386.278107][T15581]  ? input_pass_values+0x8d/0x890
[  386.278114][T15581]  input_pass_values+0x288/0x890
[  386.278123][T15581]  ? input_handle_event+0x70c/0xf30
[  386.278134][T15581]  input_event_dispose+0x330/0x6b0
[  386.278175][T15581]  input_inject_event+0x1dd/0x340
[  386.278188][T15581]  ? input_inject_event+0xb6/0x340
[  386.278199][T15581]  evdev_write+0x325/0x4c0
[  386.278209][T15581]  ? __pfx_evdev_write+0x10/0x10
[  386.278217][T15581]  ? bpf_lsm_file_permission+0x9/0x20
[  386.278228][T15581]  ? security_file_permission+0x75/0x260
[  386.278239][T15581]  ? rw_verify_area+0x255/0x4d0
[  386.278248][T15581]  ? __pfx_evdev_write+0x10/0x10
[  386.278256][T15581]  vfs_write+0x29a/0xb90
[  386.278266][T15581]  ? __pfx_vfs_write+0x10/0x10
[  386.278275][T15581]  ? __fget_files+0x2a/0x420
[  386.278282][T15581]  ? __fget_files+0x2a/0x420
[  386.278289][T15581]  ? __fget_files+0x3a0/0x420
[  386.278295][T15581]  ? __fget_files+0x2a/0x420
[  386.278303][T15581]  ksys_write+0x150/0x270
[  386.278311][T15581]  ? __pfx_ksys_write+0x10/0x10
[  386.278321][T15581]  do_syscall_64+0x14d/0xf80
[  386.278331][T15581]  ? trace_irq_disable+0x3b/0x150
[  386.278338][T15581]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  386.278347][T15581]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  386.278355][T15581] RIP: 0033:0x7fc46ed9c819
[  386.278365][T15581] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  386.278373][T15581] RSP: 002b:00007fc46fc19028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  386.278383][T15581] RAX: ffffffffffffffda RBX: 00007fc46f015fa0 RCX: 00007fc46ed9c819
[  386.278390][T15581] RDX: 0000000000000037 RSI: 0000200000000040 RDI: 0000000000000003
[  386.278395][T15581] RBP: 00007fc46ee32c91 R08: 0000000000000000 R09: 0000000000000000
[  386.278401][T15581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  386.278406][T15581] R13: 00007fc46f016038 R14: 00007fc46f015fa0 R15: 00007ffc7d302ac8
[  386.278415][T15581]  </TASK>
[  391.297462][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  391.299907][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
