last executing test programs:

3m13.606446589s ago: executing program 2 (id=342):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0])
mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040))
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x8)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2440, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'})

3m13.384770186s ago: executing program 2 (id=344):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="84f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e0000ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d", 0x84}], 0x2}}], 0x1, 0x2090)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

3m13.185136859s ago: executing program 2 (id=346):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = getpgrp(0xffffffffffffffff)
r2 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
setregid(0xffffffffffffffff, r3)
sendmsg$netlink(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f000001fe00)={0x10, 0x17, 0x100, 0x70bd27, 0x25dfdbfc}, 0x10}], 0x1, &(0x7f0000001000)=[@cred={{0x1c, 0x1, 0x2, {r1, 0xee01, r3}}}], 0x20, 0x10000}, 0x4000810)

3m13.082121256s ago: executing program 2 (id=347):
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)

3m12.166163379s ago: executing program 2 (id=351):
openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0xad41, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040), 0x10000, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
write$FUSE_INIT(r1, 0x0, 0x0)
open_by_handle_at(r1, &(0x7f0000000280)=@FILEID_BTRFS_WITHOUT_PARENT={0x28, 0x4e, {0xa29, 0x7, 0x9, 0x1000, 0x499f, 0x6}}, 0x10081)

3m11.44576505s ago: executing program 2 (id=356):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', <r1=>0x0})
ioctl$KVM_HAS_DEVICE_ATTR_vm(0xffffffffffffffff, 0x4018aee3, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020752f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f8ffffff850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, r1, 0x25, 0x0, @val=@netkit}, 0x1c)
syz_emit_ethernet(0x1086, &(0x7f0000000640)=ANY=[], 0x0)

3m11.186571703s ago: executing program 32 (id=356):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', <r1=>0x0})
ioctl$KVM_HAS_DEVICE_ATTR_vm(0xffffffffffffffff, 0x4018aee3, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020752f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f8ffffff850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, r1, 0x25, 0x0, @val=@netkit}, 0x1c)
syz_emit_ethernet(0x1086, &(0x7f0000000640)=ANY=[], 0x0)

3m0.543439112s ago: executing program 4 (id=419):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
r1 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r1, &(0x7f00000006c0)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0xfffffffc}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="24c28c8377c1f0ae1469ee52594d0901986ec0a8db4304da11dfb7bd43359182a392c5b8139307ff97b41b8901266ce38b6fe269f771fe3b3413d783ee9f1d655aaa1bf17834be72011f8c0bbca8ddcea41d57c3c85a626b4fb3727de761c94deed7b2607799714096dd53d8355999021f7ba9f0dc6145682e7b494d7182e9cd159cb9f8fe6fcf58", 0x88}], 0x1}}], 0x2, 0x2000c8c0)
sendmmsg$inet6(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000280)="93", 0x53}], 0x1}}], 0x1, 0x40)
recvmmsg(r0, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000004c0)=""/151, 0x97}, {&(0x7f0000000600)=""/68, 0x44}], 0x2}, 0x1ff}], 0x1, 0x40, 0x0)

3m0.284760245s ago: executing program 4 (id=421):
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x2, 0xc31, &(0x7f0000001ec0)="$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")
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0xfffffffffffffffd, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.log\x00', 0x1c10c1, 0x9c37611dc13d0db7)
fchown(r1, 0x0, 0xee01)

3m0.01686727s ago: executing program 4 (id=423):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2280, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000200)="66b9a00d00000f32dbd567f0879f00a00000670f4fa1ea000000660f388080062e0f01c5baf80c66b8d789868866efbafc0cec0f0666b9800000c00f320f304466b8010000000f23d80f21f86635800000300f23f866350a00000044360f01d1", 0x60}], 0x1, 0x54, 0x0, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2m59.577127813s ago: executing program 4 (id=428):
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x80000, 0x0)

2m59.41264771s ago: executing program 4 (id=429):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x89}, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)="180c4552", 0x4)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c55080021000c547d03d8a0f4bd00", [0x0, 0x6]}})

2m58.861065113s ago: executing program 4 (id=433):
syz_clone(0x4400, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x5f9a3000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x845c5000)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
futex(&(0x7f0000000000), 0x8c, 0x1, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

2m58.245675606s ago: executing program 33 (id=433):
syz_clone(0x4400, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x5f9a3000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x845c5000)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
futex(&(0x7f0000000000), 0x8c, 0x1, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

2m50.345193106s ago: executing program 1 (id=474):
socket$inet6_sctp(0xa, 0x5, 0x84)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10)
sendto$inet(r0, &(0x7f0000001400)="e3", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
shutdown(r0, 0x1)
pselect6(0x900, 0x0, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)

2m50.075377971s ago: executing program 1 (id=475):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10)
sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
shutdown(r0, 0x0)
recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffffffffffe9a, 0x734, 0x0, 0xfffffffffffffecb)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x40)

2m48.925020413s ago: executing program 1 (id=480):
syz_mount_image$exfat(&(0x7f0000000440), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, &(0x7f0000000180)=ANY=[@ANYBLOB='allow_utime=00000000000000000000000,gid=', @ANYRESHEX=0xee01, @ANYBLOB=',errors=continue,dmask=00000000000000000100001,iocharset=cp857,discard,umask=00000000000037777777777,errors=continue,umask=00000000000000000000002,allow_utime=00000000000000000000001,errors=remount-ro,discard,sys_tz,gid=', @ANYRESHEX, @ANYBLOB="69653d303030383030303030303030307030303030304d6e616d3b2d99d6551d6de459901c9c76c79e000000"], 0x1, 0x152d, &(0x7f0000001f80)="$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")
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_setup(0x3, &(0x7f0000000600)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000000)=[&(0x7f0000000080)={0x0, 0x0, 0x10, 0x7, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2}])

2m48.446589853s ago: executing program 1 (id=482):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000000)={[{@test_dummy_encryption}, {@init_itable}, {@norecovery}]}, 0x3, 0x470, &(0x7f0000000dc0)="$eJzs3M1vG0UbAPBn13H65k0hoZSvlo9AQVQIkqYt0AMHQCBxKBISHOBoJaEqTQtqgkSrSKQcygkhJO6II/8CJ7ggxAmJK9xRpQr1QsvJaL27iZ3YTtPYcYt/P8ntM/vhmce7Y8/u2AlgaE1l/yQReyPi94iYyIutG0zl/12/tjJ349rKXBL1+tt/JY3t/r62MlduWu433lyIJA62qXfpwsUztcXFhfNFeWb57EczSxcuPnf6bO3UwqmFc0dPnDh+bPbFF44+35M8xyMtojfe++rNk1+05L8hjx6Z6rbyqXq9x9UN1l1N8cgA28H2VIrjVW30/4moNB29iXj9s7XCpwNqINA39Xq9Pt559Wod+A9LorWsy8OwKD/oy+vfdtfBL/dt9DF4V1/JL4CyvK8Xj3zNyNodg+qG69temoqId1f/+SZ7RH/uQwAAtPghG/88m412Vuayscf6+CON+5u2u7uYG5qMiHsiYl9E3BvnYn9E3BfR2PaBiHhwm/U3TZI0hpmbxz/plVtO7iZk47+Xirmt1vFfOfqLyUqjdCEvRDV5//TiwpHiNTkc1T1ZebZLHT++9tuXndY1j/+yR1Z/ORYs2nFlZE/rPvO15dqtZ9zq6qWIAyPt8k/WZgKSiHgoIg60e4J06zpOP/Pdw53WbZ1/Fz2YaKp/G/F0fvxXY0P+paT7/OTM/2Jx4chMeVZs9suvl9/qVP+O8u+B7Pj/v+35v5b/ZNI8X7u0/Tou//F5x2uaqWoRbOP8X60t10aTdxrxaLHsk9ry8vnZiNHkZN7o5uVH1/cty+X2Wf6HD7Xv//ti/ZU4GBHZSfxIRDwaEY8Vx+7xiHgiIg51yf/nV5/8YOOysTL/2+D4z2/r+K8Ho9G6JG2zTRZUzvz0fUulk+thkf+N7u9/xxvR4WLJzbz/bW5F+2Cnrx8AAADcCdKI2BtJOr0Wp+n0dP4d/v351Hfm43Pz+W8EJqOalne6Jpruh84Wl/V5+VJE5F8tKNcfi7Rx3/jrylijPD334eL8QDMHxjv0/8yflUG3Dug7P9iC4aX/w/Dq2v+ru9cOYPdt6v9d+/yevrYF2F1tPv/HBtEOYPe1G//7ez8wHDb0f9N+METc/4fhpf/D8NL/YSgtjcXWP5LvGpTPdIu7bxVMROy0hYMJonpbNKNvQaR9r2K0v6dW34LkDmzzpmBw70kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC99G8AAAD//1KFzjw=")
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0x1f81ca7, 0x0, 0x83, 0x0, &(0x7f0000000080))
chdir(&(0x7f0000000140)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x108)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x181)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})

2m47.428207383s ago: executing program 1 (id=487):
ioctl$BTRFS_IOC_ENCODED_READ(0xffffffffffffffff, 0x80809440, &(0x7f00000005c0)={&(0x7f0000000580)=[{&(0x7f0000000040)="8a750744fe6c808796f1bad62f058faa", 0x10}], 0x1, 0xb8, 0x0, 0x6, 0x8, 0xc14b, 0x4, 0x3})
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e21, @local}], 0x10)
sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x0)
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4)
setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x9, 0x9, 0xff}, 0x10)

2m46.392615926s ago: executing program 1 (id=491):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=ANY=[@ANYBLOB="4c00000010001fff26bd70000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010067656e6576650000140002800500040001000000050008000100000008000a00", @ANYRES32=r2], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

2m45.901313718s ago: executing program 34 (id=491):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=ANY=[@ANYBLOB="4c00000010001fff26bd70000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010067656e6576650000140002800500040001000000050008000100000008000a00", @ANYRES32=r2], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

6.805334073s ago: executing program 6 (id=1327):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0)
ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000100)={&(0x7f00000000c0), 0x0})
r2 = dup3(r0, r1, 0x0)
ioctl$MON_IOCX_GETX(r2, 0x4018920a, &(0x7f0000000000)={&(0x7f0000000180), &(0x7f0000001300)=""/4098, 0x1002})

6.163575901s ago: executing program 0 (id=1331):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x48, 0x2c, 0xd27, 0x170bd3b, 0x2, {0x0, 0x0, 0x0, r2, {0xa, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'hsr0\x00'}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008014}, 0x2)

5.915749602s ago: executing program 0 (id=1332):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
writev(r0, &(0x7f00000008c0)=[{&(0x7f0000000100)="2e1221b23bb601c477d3df163e75963d86ddf06712e9000d2f8db0049d90491c3248040000dbb8a10000", 0x2a}, {&(0x7f0000000200)="242dfcb354b3", 0x6}, {&(0x7f0000000240)="a43b2eaab4000000000080006558", 0xe}, {&(0x7f0000000180)="9c433532", 0x4}], 0x4)

5.380406201s ago: executing program 0 (id=1337):
syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x7, 0xee6, &(0x7f0000001ec0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x0)
truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd)
sendfile(r0, r0, 0x0, 0xe3aa6ea)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000080)={0x0, 0x8000, 0x58})

4.861236198s ago: executing program 6 (id=1338):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x756, &(0x7f00000002c0)="$eJzs3M1rXOUaAPDnnGaafuTeyYUL9+pChBZaKD1Jmk27aty4KxQKbmtITkLISSZkJrUTC7auhdpsFARR1y7dCqX+Ae6koOBeEK1xIW5GzuSjNGam0ybpSPr7wcl53vP1vE/m8GYO5D0BvLReL38kEUMRcTUiqpvb04g42o6ORdzeOG790a2pckmi1br2S1KeFuut6va1ks31yWifEv+PiAeViHPv/z1vvbk6P1kU+fJme6SxsDRSb66en1uYnM1n88Wx8UujF8fHL46OP7WG//VY6+m3Lh2/9+2ba2vffdW4+9rA+SQm2nXHZm09XuaZbPxOKjGxY/viQSTro6TfHQAAoCfl9/wjETHQ/pZajSPtCAAAADhMWoMtAAAA4NBLot89AAAAAA7W1v8BbM3tPah5sJ38/EZEDO+Wf6A9hzjiWFQi4sR68sTMhGTjNNiT23ci4v7Ezvvvi/IOu73Ha4/uaD85R/roHq/Ofrhfjj8Tu40/6fb4E7uMPwNb707Yo87j3+P8RzqMf1d7zPH1p69UOua/E/HqwG75k+38SYf8b/eY/+7aB/c67Wt9HnFm178/yRO5urwfYmJmruj6+oEHf5592K3+E53yJ93rX+qx/nfXf5vvNJaU+c+e6v7575a/vCc+3OxHGhH3Ntdle21HjlML33/Trf7piNbzfP6f9Vj/j18O3uzxUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGhLI2IokjTbjtM0yyJORsR/40Ra1OqNczO1lcXpcl/EcFTSmbkiH42I6kY7Kdtj7fhx+8KO9nhE/OeH4xtJ54o8m6oV0/0uHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG0nI2IokjSLiDQifq+maZZFDPRw7uAL6B8AAACwT4b73QEAAADgwHn+BwAAgMPveZ//k33uBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCoXb1ypVxa649uTZXt6RvNlfnajfPTeX0+W1iZyqZqy0vZbK02W+TZVG3hadcrarWlsUuxcnOkkdcbI/Xm6vWF2spi4/rcwuRsfj2vvJCqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFZD7SVJs4hI23GaZlnEvyJiOCrJzFyRj0bEvyPiYbUyWLbH+t1pAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9l29uTo/WRT5skAgeGHBexHxD+hGl6DfIxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP1Qb67OTxZFvlzvd08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADor/SnJCLK5Uz19NDOvUeTP6rtdUS888m1j25ONhrLY+X2X7e3Nz7e3H6hH/0HAACAl8LlZzl46zl96zkeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgV/Xm6vxkUeTLewsuR3O1lXQ4pt81AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAz+evAAAA//8KQsc4")
mount$fuse(0x0, 0x0, 0x0, 0x80, &(0x7f0000000340)=ANY=[@ANYBLOB="66643d652c7104d831da30cdb577985642ae7a917df3b43d9d6f249cf76df662066704c49ccedd8ce467f6", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id'])
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000280)=ANY=[@ANYBLOB="88020000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x48040)

4.412873933s ago: executing program 0 (id=1339):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x8200, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", <r1=>0xffffffffffffffff})
r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000140)={0x101000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf421922de974a27", <r3=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f00000001c0)={"3c24139ed44aec57f2e2ad238e7b448ed886923c31d4b8affbf514fd00", r1, <r4=>0xffffffffffffffff})
close_range(r0, r4, 0x0)

4.350563473s ago: executing program 6 (id=1343):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000005000d0a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a3100000000080003"], 0x64}, 0x1, 0x0, 0x0, 0x4008870}, 0x24000010)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff8}, {0xc614b99757ef0e63, 0x7}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x20040000)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

4.059739582s ago: executing program 0 (id=1344):
r0 = syz_usb_connect(0x2, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f00000005c0)={0x1c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0})

4.059592152s ago: executing program 3 (id=1345):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000100)=0x10)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x43}, 0x8)

3.972322767s ago: executing program 6 (id=1346):
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000d, 0x32, 0xffffffffffffffff, 0x261c5000)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1})
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000002400)={[{0xc, 0xce, 0xfa, 0x25, 0x1, 0x96, 0x9, 0x6, 0x75, 0x0, 0x2, 0x6, 0xffffffff}, {0x15, 0x6, 0x7, 0xe7, 0x1, 0x6, 0x2, 0x6, 0xb, 0x5, 0x4, 0x9, 0x1}, {0x2, 0x1000, 0x8, 0x2, 0x1, 0x2a, 0x7f, 0x8, 0xb, 0x40, 0xf4, 0x4, 0x200}], 0x9})

3.395619233s ago: executing program 6 (id=1355):
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_mount_image$btrfs(&(0x7f0000000080), &(0x7f00000015c0)='./file0\x00', 0x4000, &(0x7f0000003a40), 0x0, 0x559e, &(0x7f000000ac40)="$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")
ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f00000001c0)={0x1})
ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000002600)={{r0}, "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"})
ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000100)={0x0, 0xb, 0x7})

2.189094765s ago: executing program 6 (id=1348):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_BLANKSCREEN(r1, 0x560e, &(0x7f0000000000))

2.188592425s ago: executing program 3 (id=1350):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = fcntl$dupfd(r1, 0x406, r1)
setresuid(0x0, 0xee01, 0x0)
utimensat(r2, 0x0, &(0x7f0000000180)={{}, {0x0, 0xea60}}, 0x0)

1.97827671s ago: executing program 3 (id=1352):
write$binfmt_register(0xffffffffffffffff, &(0x7f0000000300)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x8000011000000009, 0x3a, 'B\xd4GGI\x82\\4\xbb\xbb\xbb\xb3\xd4)\xed\x8f\xaa\xf4\xd2{\xc5\t\xa9\xed\xf8e\xaa\xb9\xf5\r\xe3T\x0e\x8a\xd6\x9a_?G\x05\x00\x00\x00\x00\x00\x00\x00\x1e\x9a\xce\xac&x3\x15\x14y\xbf\xc6)\xa8\b/\x01\x00\x00\f\x8e1\xc4\xa1\xb2]I\xa5\x13}9\x1b<B\xc3k\xcd\x01\xe4\x05\n!\x02Y\xc7`ooveu`z\xb9\xf5r\xc0c\x95\xcbQbj5\xb1\x8f\xb9J\xa9#\x13\x92\x05H\x91\xa5\xdfxM\nD\xc70\xa11B\xf1\xab\xccw\x17\xbf\xc8W\xec\xb88\xc9\x1b*h\xc3c\x89n\x89ic\xfd\x9c\xfa~\xb5$VG\x85\xc2\x86\x89}*\x99\xda\x94\xba)\xb9b\xeb\xe9\x0f{V%TD\xbc\xee\x96C\x89No\xc9\n\x91\xe0\xfcqE4\x8c', 0x3a, '\x8c\xf0<\x06\xd3=(\xa0\x96k\xd8cf\x92\xd1\xed\xf5\x00\x00\xb5\xff\xd9o\x1c.\xecU \xc8\x12\xacf\x15I)S\xa5\xdb\x8f!\x8aA\xee$\x0e\x16\xf7wL\x9c~8\x10\xd2\nJ,D;Z \x92\xccY\xd7', 0x3a, './cgroup.cpu/cpuset.cpus/file0'}, 0x147)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e00004c"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x84)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f00000002c0)="05031682d3fc140000334788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14)

1.49735688s ago: executing program 5 (id=1353):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x80002, {0x0, 0x0, 0x0, 0x0, {0xd, 0x1}, {}, {0xd, 0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_EMATCHES={0x8, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008081}, 0x20000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="8c0000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000006c0012800e00010069703665727370616e000000580002801400060020010000000000000000000000000002050016000100000014000700fc0200000000000000000000000000000400120005000800", @ANYRES32, @ANYBLOB="080004"], 0x8c}}, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r1=>0x0})
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400000013002901800000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800028004000500080000003e"], 0x44}}, 0x0)

1.338956087s ago: executing program 5 (id=1354):
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x85098878a61b3e8b, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40cf82223eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f725616b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633b72fad6265a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329dffafc3612e325c1eb4a3ab2e156a97444800", "0615e456c196e819a321fdb3690bfab19538829a732a01781564ef7738cb5b82a704b3952f81c68bb4ceeaad63206f88201638e87c4981cbf9332cbc1c4d69e392bd33237ece7ad91e44edac0da8dacad81adf2e08c21ad6b44ce1f90bd618c255ca40cdb411485fb48a51d329c816b3488c7d032ef69c502c6e1236bd381efd410165988847c1dcb98a18ca2b853910e52044fa3b3026cb88de269537c8f26ffc3b15cbf279832bfc90bd95939043182e88050dfd2a4784a5d1453610fb1f1c2bac36c3ecd3e6fb756ef8880debeef3636afd981d8af4ab119928448f90351aec113335eacf52a18c87738d9679d3acc032a16fbefc64776f36c410a15b37bcd36e6a7cba931151b9c9ba5779d550e9ab21603a43a25f3b4895d8dc4f3ce0e7d5e964e888169ea79a0848e9338b3d34d62e963fbf98834f4455419907f0ffdb76373af77a34edee7789f56e7f01bdab9614a0d460f791a06e6cf5243bf2b3a1624a80ec7e1116f1c81f5ef4b895be74bf67eea9193428b58a8b62b7976d3d2e59796c46ec918c83cd49c3f43dbd2967586966c19ace7b0bef5f94eb333b362649f1bfa114f8b1f126e97ec672cff77e2130823fa7a1df6760c6a8917815e9f0a409ed32b133df7dc9afceffcd472b35145c83c9167764d25ce214133c6170adeb6653b30b226a3b6ff1363ac862a540c7fab584cd051ce7ee951e0f121d43cff75afbdec6bc6f6e8f7db58c8086751320d22ee8582e915cabc536e3767e9a9230c9ae8b92398f0ca2a7141ea4588af7afde10e5ec2a6fe85ba5712e126629d4e3998fc4721cb638f2ef8356049e3448466e2c400d5e8baf843fa399907cb526b791c5350ce29204cb6f0000000000000000cc28f032a745738faa12c2a34222942fef0ec0511da5fe0b565ceac429da7cc25cfe0320b40a514723e2392a6a251032343edb79fd83cd0a354837153542fd61b3156b54c566036e493250c3a3214738e3cacc24a50d5dfd17d5008b4ca629c3062f3417cb69c48b8b888ae51256bb4e6c68e95a71a00383ad9df263f6a775ded64fef20ed5cb5f31c33cb86f839d00a12e40cd31219113619c4e0585454cb1776278bfd7f5c4275792afb790e83ff0fc6925355c7aee7a070477d9ec2292366e39b9dc66f7adcf449a1a718e5217183faf0f679efc5cef20bcdcf2d12ea0684084ec0d693256e280025b23b5a08b7b1ebe7d41fb045793f971d6ee066604818cb09d86c1eda99a44c35476a113fd5d1a7543f8f99424ebb78dd9e00d719502a6eafa743a061fa3fa55e4deaa0a011b6b9d633f10e0c9446b5a2e3f6d6014ab00695366c1a6bf0c32f703aebb7988c7d4d322681458e85626302c70f37628835e1fcfff1da3099c0b4af433eb9a51f9609f2c0c09a98b18880c846b34d6ac0210f073765666100976ee1d928893f983580ea47a012144633b98e02c3e81869534ab985eb3a73e0bac892dac949f85db949285a6a7a490b1075467226af23df82d8dd09b7282490fbb3ada9ed4cae8f761aefbe0701de6b132f12044c58ac1c2607c8f51361de5bed021dea13fd0a440263cf0b304522a324b581ab274e7bdae5994316657b5c0ab0220d9b08739729f7a35d436878c182aec4f08dd161c11ee5b7937fae7835e8bfe98a44c8d4bbb2e0eee0cb5d7c93517e96a9fc8132e60f3ef7c735bea1934b37df451f981c8d9210e61278c871e6dad6ceb89aa4d7245658a63e65cec7b81d307426a60a31cc917844a14e1d9ad83bef1c9f736d1836687c950d1275caece0d46ab9f3b0e95d9cf560eb8134e8346b35e0a6f60e6a87a14c4aeb3e0d06158390660a52a6e44b524c1e16de2bf99870f78fc81d267072bc63e97d3f26d23fd59799ff2c847f6a724cebc2377a582ba73d99a610a095c28d66c60910ac64b7d18847fa98fd8528b72e0a149b082c731575b2e2763e67c821ba29eecd8b8c87981c4fb1fbbaaa4e8aa077ec98de1362fc7af7a0ac5e3297fd0d924124b2e255b5cc4f6b0873f3d34418d5ae0d6f734628f38cb9b856b2db3fbb2fafb76983eabc51a348e55789e997fa25cbe6e5031bd2e33d4e2686f964a65d1abf7f96a20a8b270b1522ace4adf6fdade5cd3f101574960d13267e2382f70027ebe5ef7f9418e14e6a8a130d2aec2253c8fe21825e3295774db0c9b1340ea28a96589ba0d9f79aa61b92aea6f704ef7f716d849b8c77e6922e198a086d8133491d0bb85b925825a6d307d7cc8f09c655aa3edabf84c75560dfb279ee3e8b825323279edc58c3161e72cf9ae02ef80d500da922c0abeb8b164abd9c17ef7c02e89000d67b0c2ddd078cacbf37c4826be3845948d598980d63c1d7aaf90cc20d17fc514926914e68e5de54b861200ffa4ce1cbc16e4ecf342a1176cdb561f7dea38b3ae0fd81260f72d34e6f33d364cf313d3b3161410dcbf5f0f0579a1d235b49bb5d27f85825b94f1899e7846d0292ad912d934574f9d55d2152dbfb39d662e6e0f2496182d012af8b4bebbdfa1d68e3e98c869fb5cd9612db97e6cc574444f4b5025ec9827bafc55341bf6ad3fd4fab2ee43f343cb9bcec0c38384b5699e5c6d5973ba591978275c51a40200d340b9ed3681f08c69f58320f538f9cd78a34eb6ed55710d2478ea4bd15813921817b42f88f1bb038033b519668f0a2e8693b9a19c7bcf96eec04bda625b31c32f4286be922ab2c87aa30310c8f46551450d5bc26b5fbfdedaae0f756384023bb9a28d3200cfeaedd63d6afe076513e8ad73d16607cd4ede16344e60d8707357e82b1089258c56d851a435e23ce0919825e04471dd61a44c43e87c2959d4e89311a30ee8be010094d0ef109bb210dda58b21b685b9e9c078c9ded6117d9a88dd7799291969851cd4c3f22b5f870a275a692188dafcf6e89ba87b0eb61011de031fda25fb3349901d40da2bbdb76eda41ec9fafd90fb23504ab150ca0033ea1d00000000000086ba3aaa79d0df4f2e4e4afa565e66d28aa167f835d080bf1d41d0e52dbf81c671f8eacae234bf4fc328302671fab46613b73daf2ace80aff2f80f6a9d84b82480178cc612aa90adfc80ab3bba7d1527fc6ab04f009011bf093494a0d329df4e53d855b1c0ff6a25d22052b3a778e1ca2fbe59c9eeedf99e13682d06da2695605200ee958ceba09a051e27a620fb78e7a352c182c8c2981ce822eeaf6323965b4b3f322d40d406a158b6f3cf5d74822de952fefc341d0dead6c1c8fed8e48e0a85b51c1dcc7796d3f45bb1f50467a475da76c356c9e031b096867da1dbb89c3a038d475dbcdb2df1278d5dba55c2fb5ba6a9778c2a244198491f0f7118db2ef0332f347afffb1b098b4c59041ccb0c286bb2dd40e7ec713f6ffe0b1067678c748615dae3c1e090f3739a9035767fb9972580d19fdef49a5071f99c3706b8fa4991f430721cf3ca11af0e3bd7c4d0cd0ab5b7d98ee66730c20a098110e4a15ce0bfc88c41fe375f261fe3557e14eb5ff4a2cdf6a008fd7b6702951b8456e940fbd269a0f3ed515ac03cfecce67027d579e1226bd7b7381827453550343566508d38790ee838c3bf85c6c91a45e7a44752f57313533a3e82e4042e65d346afb20c0527575f79080aef4e1aa8d5868d190c8d37bdae7592e41bed37b9d4c30d8126d3debde02dff25f5ef1e48133e2a41cd55347bd23dcce57a00189619db629c530dc112d22ac72bce353681264b5175be40b3ba84408d0f56762cc720e96c128447be7128748e185be2640115556bac64d060207e629b0144e501c1c49c6abd15c7982b01e22da2ad04bb28df1a27f31e18040c16406071d798bb40d901d001e22cc5ed870d08702f49f0021814cdd814901a13c7ab061bb4b8172c639b3449e24f656fee58186e69e6874ea95d946da781b49ca080ffb4a3c87746c661f43e9be52d0ba2ee368b9c143687c8846abac599069decf41e69fddcadf31c5f715917df12df4eedbfcc5805fe8e661b8fcd7b130d7bcc4a9a152de93a15dddacf3cf52479956185a3c5000d18ddce0236d5858c0d8761bca7446e3d30f3e8f48d5e8f86a60cbe46f038b1028ffd35590bdacfeebb86e28d42a923bdc3f9a307b919341a2a7dda096d41070db245c2c424aedd4a4bb9863169454d09f25fd0aa2da7bfc97ad7aca886dd998e041133e07899ad48f7cda600de48ac3951152dfbe6331b8acae24cfd2dd2b14696c75040685c756942a0d049ee9863a2e480388f93876f3910ecb3a59fa16c25b2b3636a542f92744495e10a4ce37f19f5c2256e2d61775d388e2a86b52f76add2f956aa02501f5badb94da12595b2bbf88b05dc70caae6766fd3df4f299d0ff71c8787249b255ea49b3d33b3f1a8c9403cb75d64264465c3578538382b23d721f8a49134020ca2d9e887d9949624ac6d63322b6507e277a0020db9bfa2928736b96c72fa3406a95adfe6b374ffa27001d37d3bbe725e75c257834572026c511f57dce67153a4008f9e75e07ed9237f600005800ee667c137fc78bc4fd4ebf4d228979ab0ccafbcd8b8daad76fb2abcfc585377ea6e19f170db898b950a7b0f4e75466a2ba26e7d60e0a6f5c54a3fe78677f3362c5b01ae791b62ee8a5d0fd65b739ece4f3b758d05a8e4e4ea7e4866ee67750ce2769f72a9f45780eadfae73b42d4dd4c614c797c694ece8af88cc732edabfa26ace57de54835c7551154dfa3be11a0d3b584c0887b2da84410a652e72cd563acbb2b02bb59370cebaaa80014e3ad280944eae6fbf8d5f85237257bb5b8e5ec3e52dc06f8394176b325a577804e9eb78d7015172d17ed15f905f705d56687f53988bb207c74fbeb2b03a700258e835362886239f4d8f1c2cf6d4d10ff26d2579ea40a5fb99e5b6d01cdeda050d3faa78ed674f2899be08332086c8bf0410a7d06099c50a2d949d49a0f21b43bcdfbdf435875cf5a9def46db63746574ee8a5b1fbcef411154e914dd9e5bb1b1bd2944581083fb66a017e7972df3daefc487e4198cb281d3a80637d52b41738b7f1a57c867d5b2ee5d72465657593339506fd0c3807cd6445eb54cfb5ca9d35ef93eec6383224ebf85197eb6ed75f6c324f6a0345a25be6bb52ed347e57ccb059b903fb7db4e9f46513a4158ce29c1f5d6081b556bbc471e89225cad81aed34dae0f90ee8e7237b3b286e29b49d7a1700c537b28571f7d7e2a55e10792d6f7779ddefa3febdea5693048372a45903c04f1035a96c6cfbe6f6c2b754581aac02f8a70e698be6e37fd411cf4b76317b47683f6b0f80dfdeef3a9767c7e5c30dff786093a21477431fea0458023953700"})
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4)
rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x6}, 0x20, 0x0, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15)
seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000000)=0x96)

1.338793267s ago: executing program 3 (id=1356):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x6, 0x8}, 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4)
sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4800)

1.092037148s ago: executing program 5 (id=1357):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f00000005c0), 0x10)
recvmmsg(r0, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x4251}, {{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0x1000}], 0x1}, 0x8000}], 0x3fffffffffffdfc, 0x10002, 0x0)
sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000180)=0x2, 0x4)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x989680}}, 0x0)

1.091895838s ago: executing program 3 (id=1358):
r0 = signalfd(0xffffffffffffffff, &(0x7f00000006c0)={[0xffffffffffffff37]}, 0x8)
ppoll(&(0x7f00000004c0)=[{r0, 0x128}], 0x1, 0x0, 0x0, 0x0)
rt_sigprocmask(0x0, &(0x7f0000000480)={[0xfffffffffffffffd]}, 0x0, 0x8)
r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
truncate(&(0x7f0000000040)='./file0\x00', 0x800000003)
fcntl$setlease(r1, 0x400, 0x2)

898.03321ms ago: executing program 0 (id=1359):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000380)='./bus\x00', 0x8, &(0x7f0000005880)={[{@barrier}, {@autodefrag}, {@noacl}, {@compress_algo={'compress', 0x3d, 'no'}}, {@max_inline={'max_inline', 0x3d, [0x30, 0x30, 0x32, 0x74, 0x74, 0x0]}}, {@noautodefrag}, {@max_inline={'max_inline', 0x3d, [0x30, 0x37, 0x34, 0x6d]}}, {@barrier}, {@nospace_cache}]}, 0x1, 0x55ae, &(0x7f000000ac40)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
rename(&(0x7f0000006200)='./file1\x00', &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2b33455, 0x0, 0xfc, 0x0, &(0x7f00000000c0))
fdatasync(r0)

630.329795ms ago: executing program 5 (id=1360):
set_mempolicy(0x4005, &(0x7f0000000180)=0x1004, 0x4)
r0 = userfaultfd(0x80801)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000})

286.875633ms ago: executing program 5 (id=1361):
syz_mount_image$bfs(&(0x7f00000001c0), &(0x7f0000000400)='./file0\x00', 0x4, &(0x7f0000000600)=ANY=[], 0x8, 0xad, &(0x7f0000000040)="$eJzs0btpA0EUBdC7H/xJ7ALcg3tw6twVbOjQkY3BjlSGOlArKmE7ULCpkhHLrkChEAhJcA7MzA3mwYW33q5e8pSUv6SUUu6SPGbKX98/nx/v490kyTJt7jPZv9y4ej4P486fp7x5y+L/4E8//HZ9la4fyuyChQEAgJPVeZ1TdfxQm6Q5VyMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA67ILAAD//1vZIlc=")
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
r1 = fspick(r0, &(0x7f00000000c0)='.\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x40)

122.47µs ago: executing program 5 (id=1362):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000780)={0xfc78, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x1, 0x1, 0x1}, 0x0})
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000500)={0xc264d3c8351d000, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r1, 0x5b03, 0x0)

0s ago: executing program 3 (id=1363):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002)
ioctl$FE_GET_EVENT(r1, 0x80286f4e, &(0x7f00000000c0))
ioctl$FE_SET_FRONTEND(r1, 0x40246f4c, &(0x7f0000000080)={0x30a32c0, 0x2, @qam={0x3, 0x2, 0x6}})

kernel console output (not intermixed with test programs):

l28xxu: probe of 1-1:0.0 failed with error -32
[  219.199827][    T9] usb 1-1: USB disconnect, device number 11
[  219.292262][ T8150] FAT-fs (loop6): error, clusters badly computed (2 != 1)
[  219.333879][ T8150] FAT-fs (loop6): Filesystem has been set read-only
[  219.800466][ T8144] loop5: detected capacity change from 0 to 32768
[  219.833407][    T9] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  219.975027][ T8144] XFS (loop5): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  220.045586][    T9] usb 7-1: config index 0 descriptor too short (expected 45, got 36)
[  220.072047][    T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  220.100193][    T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  220.130688][    T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  220.155810][    T9] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  220.165443][    T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  220.176979][    T9] usb 7-1: config 0 descriptor??
[  220.179813][ T8144] XFS (loop5): Ending clean mount
[  220.347244][ T8179] syzkaller1: entered promiscuous mode
[  220.353068][ T8179] syzkaller1: entered allmulticast mode
[  220.517694][ T7285] XFS (loop5): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  220.595338][    T9] plantronics 0003:047F:FFFF.000A: unknown main item tag 0xd
[  220.638449][    T9] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving
[  220.706021][    T9] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0
[  220.900483][    T9] usb 7-1: USB disconnect, device number 4
[  220.948895][ T8163] loop3: detected capacity change from 0 to 32768
[  221.013547][ T8163] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.635 (8163)
[  221.092499][ T8184] fido_id[8184]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory
[  221.099112][ T8163] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  221.173575][ T8163] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  221.201975][ T8163] BTRFS info (device loop3): max_inline at 6
[  221.254655][ T8163] BTRFS info (device loop3): enabling disk space caching
[  221.261914][ T8163] BTRFS info (device loop3): turning off barriers
[  221.304317][ T8163] BTRFS info (device loop3): disabling tree log
[  221.310798][ T8163] BTRFS info (device loop3): force clearing of disk cache
[  221.344634][ T8163] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8)
[  221.363404][ T8193] 9pnet: p9_errstr2errno: server reported unknown error �@c0x0000000000000006
[  221.385252][ T8163] BTRFS info (device loop3): force lzo compression, level 0
[  221.392838][ T8163] BTRFS info (device loop3): enabling tree log
[  221.453675][ T8163] BTRFS info (device loop3): max_inline at 0
[  221.459970][ T8163] BTRFS info (device loop3): disk space caching is enabled
[  221.619187][ T8205] netlink: 8 bytes leftover after parsing attributes in process `syz.5.642'.
[  221.628867][ T8205] netlink: 'syz.5.642': attribute type 18 has an invalid length.
[  221.638051][ T8205] netlink: 4 bytes leftover after parsing attributes in process `syz.5.642'.
[  221.657864][ T8205] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  221.667188][ T8205] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  221.676836][ T8205] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  221.686332][ T8205] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  221.747768][ T8205] netlink: 8 bytes leftover after parsing attributes in process `syz.5.642'.
[  221.764111][ T8205] netlink: 'syz.5.642': attribute type 18 has an invalid length.
[  221.815613][ T8163] BTRFS info (device loop3): enabling ssd optimizations
[  221.825641][ T8205] netlink: 4 bytes leftover after parsing attributes in process `syz.5.642'.
[  221.877957][ T8163] BTRFS info (device loop3): rebuilding free space tree
[  221.984681][ T8163] BTRFS info (device loop3): disabling free space tree
[  222.012305][ T8163] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  222.023728][ T8217] netlink: 'syz.6.643': attribute type 12 has an invalid length.
[  222.060861][ T8217] netlink: 4 bytes leftover after parsing attributes in process `syz.6.643'.
[  222.065273][ T8163] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  222.124242][ T8217] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  222.133209][ T8217] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  222.142375][ T8217] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  222.151664][ T8217] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  222.272161][ T8217] netlink: 'syz.6.643': attribute type 12 has an invalid length.
[  222.280319][ T8217] netlink: 4 bytes leftover after parsing attributes in process `syz.6.643'.
[  222.507743][ T5769] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  222.539825][ T8190] loop0: detected capacity change from 0 to 32768
[  222.621166][ T8190] (syz.0.640,8190,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  222.675030][ T8190] (syz.0.640,8190,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  222.891007][ T8190] JBD2: Ignoring recovery information on journal
[  223.081759][ T8190] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  223.958775][ T5771] ocfs2: Unmounting device (7,0) on (node local)
[  224.240642][ T8263] loop3: detected capacity change from 0 to 128
[  224.247605][ T8228] loop6: detected capacity change from 0 to 32768
[  224.309280][ T8263] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  224.342925][ T8228] JBD2: Ignoring recovery information on journal
[  224.354404][ T8263] hpfs: filesystem error: improperly stopped
[  224.360597][ T8263] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  224.374291][ T8263] hpfs: You really don't want any checks? You are crazy...
[  224.465596][ T8263] hpfs: Code page index out of array
[  224.471358][ T8263] hpfs: code page support is disabled
[  224.477937][ T8228] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  224.537152][ T8263] hpfs: hpfs_map_4sectors(): unaligned read
[  224.583648][ T8263] hpfs: hpfs_map_4sectors(): unaligned read
[  224.589742][ T8263] hpfs: filesystem error: unable to find root dir
[  225.129854][ T8283] loop0: detected capacity change from 0 to 128
[  225.270314][ T7511] ocfs2: Unmounting device (7,6) on (node local)
[  225.505187][ T8270] loop5: detected capacity change from 0 to 32768
[  225.539934][ T8270] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.658 (8270)
[  225.600356][ T8270] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  225.638713][ T8270] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  225.668808][ T8270] BTRFS info (device loop5): force clearing of disk cache
[  225.694022][ T8270] BTRFS info (device loop5): metadata ratio 0
[  225.710960][ T8270] BTRFS info (device loop5): enabling ssd optimizations
[  225.734044][ T8270] BTRFS info (device loop5): using spread ssd allocation scheme
[  225.772816][ T8270] BTRFS info (device loop5): using free space tree
[  225.982183][ T8270] BTRFS info (device loop5): auto enabling async discard
[  226.054623][ T8270] BTRFS info (device loop5): rebuilding free space tree
[  226.433751][ T7285] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  226.726710][ T8291] loop0: detected capacity change from 0 to 40427
[  226.781289][ T8291] F2FS-fs (loop0): build fault injection attr: rate: 684, type: 0x7ffff
[  226.791192][ T8291] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x35f7
[  226.804508][ T8291] F2FS-fs (loop0): Image doesn't support compression
[  226.830417][ T5785] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop5 scanned by udevd (5785)
[  226.842995][ T8291] F2FS-fs (loop0): invalid crc value
[  226.891724][ T8291] F2FS-fs (loop0): Found nat_bits in checkpoint
[  227.013531][ T7138] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  227.046864][ T8291] F2FS-fs (loop0): Start checkpoint disabled!
[  227.060073][ T8291] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  227.181557][ T8291] F2FS-fs (loop0): inject no more block in inc_valid_block_count of f2fs_reserve_new_blocks+0x127/0xb50
[  227.223521][ T7138] usb 4-1: Using ep0 maxpacket: 8
[  227.231201][ T7138] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  227.243405][ T7138] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  227.262911][ T8291] syz.0.662: attempt to access beyond end of device
[  227.262911][ T8291] loop0: rw=2049, sector=77824, nr_sectors = 624 limit=40427
[  227.277594][ T7138] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  227.294955][ T7138] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  227.308911][ T7138] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  227.328058][ T7138] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  227.338038][ T7138] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  227.564450][ T7138] usb 4-1: usb_control_msg returned -32
[  227.580909][ T7138] usbtmc 4-1:16.0: can't read capabilities
[  227.870423][ T5933] kworker/u4:20: attempt to access beyond end of device
[  227.870423][ T5933] loop0: rw=1, sector=45096, nr_sectors = 8 limit=40427
[  227.926023][ T5933] kworker/u4:20: attempt to access beyond end of device
[  227.926023][ T5933] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  227.976205][ T5933] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  228.018611][ T5933] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  228.278538][ T8355] usbtmc 4-1:16.0: usb_control_msg returned -71
[  228.480280][  T969] usb 4-1: USB disconnect, device number 8
[  229.057612][ T8369] loop6: detected capacity change from 0 to 512
[  229.129425][ T8369] EXT4-fs error (device loop6): ext4_iget_extra_inode:4739: inode #15: comm syz.6.676: corrupted in-inode xattr: invalid ea_ino
[  229.226613][ T8369] EXT4-fs error (device loop6): ext4_orphan_get:1409: comm syz.6.676: couldn't read orphan inode 15 (err -117)
[  229.246989][ T8369] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  229.354309][ T8353] loop5: detected capacity change from 0 to 40427
[  229.406201][ T8353] F2FS-fs (loop5): invalid crc value
[  229.441019][ T7511] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  229.458341][ T8353] F2FS-fs (loop5): Found nat_bits in checkpoint
[  229.692630][ T8387] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input14
[  229.708037][ T8353] F2FS-fs (loop5): Start checkpoint disabled!
[  229.757947][ T8353] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  229.803703][   T28] audit: type=1800 audit(1776270359.594:75): pid=8353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.673" name="file1" dev="loop5" ino=10 res=0 errno=0
[  230.191787][ T8404] loop0: detected capacity change from 0 to 128
[  230.243200][   T59] kworker/u4:4: attempt to access beyond end of device
[  230.243200][   T59] loop5: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  230.248748][ T8404] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985
[  230.307438][   T59] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  230.337099][ T8404] ; already mounted read-only
[  230.342192][ T8404] hpfs: filesystem error: improperly stopped
[  230.349473][ T8404] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  230.358799][ T8404] hpfs: You really don't want any checks? You are crazy...
[  230.367771][ T8404] hpfs: hpfs_map_sector(): read error
[  230.374283][ T8404] hpfs: code page support is disabled
[  230.380709][ T8404] hpfs: hpfs_map_4sectors(): unaligned read
[  230.387733][ T8404] hpfs: hpfs_map_4sectors(): unaligned read
[  230.394404][ T8404] hpfs: filesystem error: unable to find root dir
[  230.433111][   T59] kworker/u4:4: attempt to access beyond end of device
[  230.433111][   T59] loop5: rw=2049, sector=41000, nr_sectors = 8 limit=40427
[  230.468936][   T59] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  230.501345][ T8404] hpfs: hpfs_map_4sectors(): unaligned read
[  230.535218][ T8404] hpfs: hpfs_map_sector(): read error
[  230.594962][ T8404] hpfs: hpfs_map_4sectors(): unaligned read
[  230.623609][ T8404] hpfs: hpfs_map_sector(): read error
[  230.983747][ T8417] loop6: detected capacity change from 0 to 2048
[  231.102305][ T8420] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  231.193756][  T969] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  231.218933][   T28] audit: type=1800 audit(1776270361.014:76): pid=8417 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.689" name="file1" dev="loop6" ino=15 res=0 errno=0
[  231.396643][  T969] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  231.448698][  T969] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  231.485334][  T969] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  231.527352][  T969] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  231.548809][  T969] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  231.597990][  T969] usb 1-1: config 0 descriptor??
[  231.803685][ T5812] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  232.006532][ T5812] usb 6-1: config 0 has too many interfaces: 129, using maximum allowed: 32
[  232.018371][ T5812] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 129
[  232.034391][  T969] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving
[  232.043628][ T5812] usb 6-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e
[  232.054800][ T5812] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  232.070564][  T969] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  232.078125][ T5812] usb 6-1: Product: syz
[  232.089529][ T5812] usb 6-1: Manufacturer: syz
[  232.094985][ T5812] usb 6-1: SerialNumber: syz
[  232.118353][ T5812] usb 6-1: config 0 descriptor??
[  232.213562][    T8] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  232.316200][ T7138] usb 1-1: USB disconnect, device number 12
[  232.415132][    T8] usb 7-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  232.424721][    T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  232.441590][    T8] usb 7-1: config 0 descriptor??
[  232.752823][ T5812] mos7840 6-1:0.0: required endpoints missing
[  232.778239][ T5812] usb 6-1: USB disconnect, device number 3
[  233.683614][    T8] usb 7-1: Cannot set autoneg
[  233.684015][   T27] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  233.689118][    T8] MOSCHIP usb-ethernet driver: probe of 7-1:0.0 failed with error -71
[  233.757668][    T8] usb 7-1: USB disconnect, device number 5
[  233.906100][   T27] usb 6-1: too many endpoints for config 1 interface 0 altsetting 13: 253, using maximum allowed: 30
[  233.941049][   T27] usb 6-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  233.993529][   T27] usb 6-1: config 1 interface 0 has no altsetting 0
[  234.019770][   T27] usb 6-1: string descriptor 0 read error: -22
[  234.030369][   T27] usb 6-1: New USB device found, idVendor=04d9, idProduct=a04a, bcdDevice= 0.40
[  234.060764][   T27] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  234.520076][   T27] holtek_mouse 0003:04D9:A04A.000C: unknown main item tag 0x4
[  234.547395][   T27] holtek_mouse 0003:04D9:A04A.000C: invalid report_size 11124
[  234.575411][   T27] holtek_mouse 0003:04D9:A04A.000C: item 0 2 1 7 parsing failed
[  234.614377][   T27] holtek_mouse 0003:04D9:A04A.000C: hid parse failed: -22
[  234.621767][   T27] holtek_mouse: probe of 0003:04D9:A04A.000C failed with error -22
[  234.718736][   T27] usb 6-1: USB disconnect, device number 4
[  234.742241][ T8490] loop6: detected capacity change from 0 to 128
[  234.782434][ T8490] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  234.833938][ T8490] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  235.174566][ T8499] bond0: (slave bond_slave_0): Error -28 calling ndo_bpf
[  235.529264][ T8486] loop0: detected capacity change from 0 to 32768
[  235.570255][ T8486] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.704 (8486)
[  235.632195][ T8486] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  235.682231][ T8486] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  235.712746][ T8486] BTRFS info (device loop0): setting nodatasum
[  235.753436][ T8486] BTRFS info (device loop0): force zlib compression, level 3
[  235.761467][ T8486] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8)
[  235.826796][ T8515] netlink: 20 bytes leftover after parsing attributes in process `syz.5.713'.
[  235.836626][ T8486] BTRFS info (device loop0): use lzo compression, level 0
[  235.872982][ T8486] BTRFS info (device loop0): turning on flush-on-commit
[  235.919757][ T8486] BTRFS info (device loop0): enabling auto defrag
[  235.940200][ T8486] BTRFS info (device loop0): max_inline at 4096
[  235.960511][ T8486] BTRFS info (device loop0): using free space tree
[  236.177389][ T8486] BTRFS info (device loop0): enabling ssd optimizations
[  236.487683][ T8554] loop3: detected capacity change from 0 to 512
[  236.534015][ T8554] EXT4-fs: Ignoring removed mblk_io_submit option
[  236.946318][ T8554] EXT4-fs (loop3): failed to open journal device unknown-block(0,0) -6
[  237.010815][ T5771] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  237.106094][ T8554] loop3: detected capacity change from 0 to 256
[  238.432716][ T8601] netlink: 12 bytes leftover after parsing attributes in process `syz.5.730'.
[  238.676587][ T8610] netlink: 4 bytes leftover after parsing attributes in process `syz.5.732'.
[  239.238105][ T8625] sctp: [Deprecated]: syz.3.734 (pid 8625) Use of struct sctp_assoc_value in delayed_ack socket option.
[  239.238105][ T8625] Use struct sctp_sack_info instead
[  240.072585][ T8646] loop5: detected capacity change from 0 to 16
[  240.142161][ T8646] erofs: (device loop5): mounted with root inode @ nid 36.
[  240.464491][ T8654] 8021q: adding VLAN 0 to HW filter on device bond0
[  240.512608][ T8654] bond0: entered allmulticast mode
[  240.528476][ T8654] bond_slave_0: entered allmulticast mode
[  240.562588][ T8654] bond_slave_1: entered allmulticast mode
[  240.579174][ T8654] team0: Port device bond0 added
[  240.629009][ T8658] bridge0: port 3(team0) entered blocking state
[  240.655259][ T8658] bridge0: port 3(team0) entered disabled state
[  240.703221][ T8658] team0: entered promiscuous mode
[  240.719517][ T8667] loop0: detected capacity change from 0 to 512
[  240.733463][ T8658] team_slave_0: entered promiscuous mode
[  240.756452][ T8667] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  240.773884][ T8658] team_slave_1: entered promiscuous mode
[  240.781351][ T8658] bond0: entered promiscuous mode
[  240.804719][ T8658] bond_slave_0: entered promiscuous mode
[  240.811010][ T8658] bond_slave_1: entered promiscuous mode
[  240.827666][ T8658] bridge0: port 3(team0) entered blocking state
[  240.835073][ T8658] bridge0: port 3(team0) entered forwarding state
[  241.087124][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  241.532651][ T8687] loop6: detected capacity change from 0 to 2048
[  241.732177][ T8687] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  241.752814][ T8700] loop3: detected capacity change from 0 to 512
[  241.793544][ T8700] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  241.896582][ T8700] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  241.964670][ T8700] EXT4-fs (loop3): 1 truncate cleaned up
[  242.065491][ T8700] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  242.117078][ T7511] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  242.381655][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  242.768523][ T8723] loop6: detected capacity change from 0 to 512
[  242.832795][ T8723] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  242.940189][ T8698] loop0: detected capacity change from 0 to 40427
[  242.974246][ T8698] F2FS-fs (loop0): invalid crc value
[  243.125170][ T7511] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  243.326389][ T8698] F2FS-fs (loop0): Start checkpoint disabled!
[  243.366599][ T8698] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  243.419729][ T8698] F2FS-fs (loop0): Stopped filesystem due to reason: 0
[  243.437185][ T8707] loop5: detected capacity change from 0 to 32768
[  243.597326][ T8707] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  243.746500][ T8707] XFS (loop5): Ending clean mount
[  243.938282][ T8748] loop6: detected capacity change from 0 to 4096
[  244.051162][ T8753] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  244.253917][ T8748] NILFS (loop6): nilfs_sufile_do_free: segment 9 is already clean
[  244.399187][ T7285] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  245.848962][ T8803] loop0: detected capacity change from 0 to 128
[  245.994507][ T8803] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  245.999345][ T8807] loop5: detected capacity change from 0 to 512
[  246.030866][ T8807] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  246.049846][ T8807] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  246.111673][ T8803] ext4 filesystem being mounted at /188/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  246.122653][ T8807] EXT4-fs (loop5): 1 truncate cleaned up
[  246.164097][ T8807] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  246.525037][ T7285] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  246.617559][ T8803] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-avx2)"
[  246.637171][   T27] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  246.708466][ T5771] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  246.859061][   T27] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  246.900711][   T27] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  246.915935][   T27] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  246.926723][   T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  246.961628][ T8817] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  246.992838][   T27] usb 4-1: Quirk or no altest; falling back to MIDI 1.0
[  247.343755][    T8] usb 4-1: USB disconnect, device number 9
[  247.916864][ T8834] loop0: detected capacity change from 0 to 32768
[  247.987969][ T8834] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  248.088003][ T8834] XFS (loop0): Ending clean mount
[  248.514791][ T5771] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  249.441432][ T8897] loop6: detected capacity change from 0 to 512
[  249.496159][ T8897] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  249.555175][ T8897] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  249.626294][ T8897] EXT4-fs (loop6): 1 truncate cleaned up
[  249.635776][ T8897] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  249.960321][ T7511] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  250.524140][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  250.823120][   T27] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  250.839635][ T8930] loop0: detected capacity change from 0 to 4096
[  250.919140][ T8930] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  250.974392][ T8930] ntfs3: loop0: Failed to initialize $Extend/$Reparse.
[  251.025473][   T27] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  251.048798][   T27] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  251.080313][   T27] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  251.111801][   T27] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  251.137877][ T8927] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  251.162793][   T27] usb 7-1: Quirk or no altest; falling back to MIDI 1.0
[  251.433061][ T8925] loop3: detected capacity change from 0 to 32768
[  251.576145][ T7138] usb 7-1: USB disconnect, device number 6
[  251.611336][ T8925] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  251.657991][ T8952] loop5: detected capacity change from 0 to 64
[  251.745926][ T8925] XFS (loop3): Ending clean mount
[  252.126028][ T5769] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  252.274675][ T8965] loop0: detected capacity change from 0 to 512
[  252.309315][ T8965] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  252.393487][ T8965] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  252.523517][ T8965] EXT4-fs (loop0): 1 truncate cleaned up
[  252.530668][ T8965] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  252.833232][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  253.724212][  T789] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  253.936836][  T789] usb 4-1: Using ep0 maxpacket: 32
[  253.974138][  T789] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  253.994941][  T789] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  254.006392][  T789] usb 4-1: config 0 descriptor??
[  254.018014][  T789] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  255.255095][  T789] gspca_vc032x: reg_w err -71
[  255.260087][  T789] gspca_vc032x: I2c Bus Busy Wait 00
[  255.277957][  T789] gspca_vc032x: I2c Bus Busy Wait 00
[  255.301649][  T789] gspca_vc032x: I2c Bus Busy Wait 00
[  255.309455][  T789] gspca_vc032x: I2c Bus Busy Wait 00
[  255.320008][  T789] gspca_vc032x: I2c Bus Busy Wait 00
[  255.337760][  T789] gspca_vc032x: I2c Bus Busy Wait 00
[  255.359029][  T789] gspca_vc032x: I2c Bus Busy Wait 00
[  255.369577][  T789] gspca_vc032x: I2c Bus Busy Wait 00
[  255.383223][  T789] gspca_vc032x: I2c Bus Busy Wait 00
[  255.389091][  T789] gspca_vc032x: I2c Bus Busy Wait 00
[  255.398977][  T789] gspca_vc032x: I2c Bus Busy Wait 00
[  255.424186][  T789] gspca_vc032x: I2c Bus Busy Wait 00
[  255.455916][  T789] gspca_vc032x: I2c Bus Busy Wait 00
[  255.462105][  T789] gspca_vc032x: I2c Bus Busy Wait 00
[  255.472531][  T789] gspca_vc032x: I2c Bus Busy Wait 00
[  255.482062][  T789] gspca_vc032x: I2c Bus Busy Wait 00
[  255.496778][  T789] gspca_vc032x: I2c Bus Busy Wait 00
[  255.502394][  T789] gspca_vc032x: I2c Bus Busy Wait 00
[  255.539193][  T789] gspca_vc032x: Unknown sensor...
[  255.552255][  T789] vc032x: probe of 4-1:0.0 failed with error -22
[  255.588530][  T789] usb 4-1: USB disconnect, device number 10
[  255.804207][ T9037] ip6tnl1: entered allmulticast mode
[  256.300600][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  256.307831][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  256.323421][ T7138] usb 4-1: new full-speed USB device number 11 using dummy_hcd
[  256.469959][ T9039] loop6: detected capacity change from 0 to 32768
[  256.506670][ T9039] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 scanned by syz.6.829 (9039)
[  256.525838][ T9039] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  256.538228][ T7138] usb 4-1: config 0 has no interfaces?
[  256.539143][ T9039] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm
[  256.553587][ T9039] BTRFS info (device loop6): enabling auto defrag
[  256.556137][ T7138] usb 4-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47
[  256.560299][ T9039] BTRFS info (device loop6): use no compression
[  256.560435][ T9039] BTRFS info (device loop6): max_inline at 4096
[  256.585330][ T7138] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  256.597330][ T9039] BTRFS info (device loop6): using free space tree
[  256.610545][ T7138] usb 4-1: config 0 descriptor??
[  256.709637][ T9039] BTRFS info (device loop6): enabling ssd optimizations
[  256.727966][ T9039] BTRFS info (device loop6): auto enabling async discard
[  256.799301][   T28] audit: type=1800 audit(1776270386.594:77): pid=9039 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.829" name="file1" dev="loop6" ino=263 res=0 errno=0
[  256.915890][   T27] usb 4-1: USB disconnect, device number 11
[  257.017396][ T7511] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  257.824187][ T9080] loop6: detected capacity change from 0 to 512
[  257.842487][ T9076] loop3: detected capacity change from 0 to 4096
[  257.855760][ T9080] EXT4-fs (loop6): Test dummy encryption mode enabled
[  257.864019][ T9080] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  257.896215][ T9076] ntfs3: loop3: ino=3, ntfs_set_state failed, -22.
[  257.905782][ T9076] ntfs3: loop3: Failed to initialize $Extend/$ObjId.
[  257.912742][ T9080] EXT4-fs error (device loop6): ext4_orphan_get:1430: comm syz.6.836: bad orphan inode 131083
[  257.952776][ T9080] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  258.534703][ T7511] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  258.829109][ T5937] ntfs3: loop3: ino=3, ntfs3_write_inode failed, -22.
[  258.849156][ T5769] ntfs3: loop3: ino=3, ntfs_set_state failed, -22.
[  258.893680][ T5769] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  258.901014][ T5769] ntfs3: loop3: ino=3, ntfs_set_state failed, -22.
[  258.936861][ T5937] ntfs3: loop3: ino=3, ntfs3_write_inode failed, -22.
[  259.237975][   T59] Bluetooth: hci4: Frame reassembly failed (-84)
[  259.309696][   T28] audit: type=1326 audit(1776270389.104:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9106 comm="syz.0.856" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f86edb9c819 code=0x0
[  259.713219][ T9115] loop3: detected capacity change from 0 to 512
[  259.738277][ T9115] EXT4-fs (loop3): Test dummy encryption mode enabled
[  259.752415][ T9115] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  259.771949][ T9115] EXT4-fs error (device loop3): ext4_orphan_get:1430: comm syz.3.849: bad orphan inode 131083
[  259.786835][ T9115] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  259.940890][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  260.307706][ T9132] loop6: detected capacity change from 0 to 256
[  260.364232][ T9132] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  260.635494][ T9134] netlink: 12 bytes leftover after parsing attributes in process `syz.6.854'.
[  260.737955][ T9136] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address
[  260.783058][ T9131] loop0: detected capacity change from 0 to 32768
[  260.796451][ T9136] bond1: (slave ip6gre1): Error -95 calling set_mac_address
[  260.954402][   T28] audit: type=1800 audit(1776270390.744:79): pid=9131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.863" name="file1" dev="loop0" ino=4 res=0 errno=0
[  261.121594][ T9131] syz.0.863: attempt to access beyond end of device
[  261.121594][ T9131] loop0: rw=2049, sector=4680032, nr_sectors = 8 limit=32768
[  261.244917][ T5773] Bluetooth: hci4: command 0x1003 tx timeout
[  261.255283][ T5777] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  261.323483][ T5777] Bluetooth: hci0: command 0x0406 tx timeout
[  261.324642][ T9105] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  261.357563][  T114] blkno = 8ed2c, nblocks = 1
[  261.362798][  T114] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map
[  261.362798][  T114] 
[  261.391901][  T114] ERROR: (device loop0): remounting filesystem as read-only
[  262.068036][ T9161] loop0: detected capacity change from 0 to 128
[  262.146384][ T9161] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  262.704356][   T11] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  262.994688][ T9196] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  263.173957][ T5835] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  263.383668][ T5835] usb 7-1: Using ep0 maxpacket: 8
[  263.421001][ T5835] usb 7-1: config 179 has an invalid interface number: 65 but max is 0
[  263.433356][ T5835] usb 7-1: config 179 has no interface number 0
[  263.440648][ T5835] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  263.511385][ T5835] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  263.543860][ T5835] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  263.555945][ T5835] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  263.567889][ T5835] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  263.639050][ T5835] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  263.662138][ T5835] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  263.693387][ T9194] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  264.073815][  T789] input: Generic X-Box pad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input16
[  264.173727][ T5835] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  264.367803][ T7138] usb 7-1: USB disconnect, device number 7
[  264.367980][    C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  264.383376][    C1] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  264.394901][ T7138] xpad 7-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  264.433209][ T5835] usb 1-1: Using ep0 maxpacket: 32
[  264.445112][ T5835] usb 1-1: config 0 has an invalid interface number: 12 but max is 0
[  264.471607][ T5835] usb 1-1: config 0 has no interface number 0
[  264.499210][ T5835] usb 1-1: config 0 interface 12 has no altsetting 0
[  264.537429][ T5835] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  264.576104][ T5835] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  264.605866][ T5835] usb 1-1: Product: syz
[  264.611176][ T5835] usb 1-1: Manufacturer: syz
[  264.643388][ T5835] usb 1-1: SerialNumber: syz
[  264.662597][ T5835] usb 1-1: config 0 descriptor??
[  265.193727][ T7138] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  265.392720][ T7138] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  265.419966][ T7138] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  265.444237][ T7138] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  265.486436][ T7138] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  265.524465][ T9237] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  265.562770][ T7138] usb 6-1: Quirk or no altest; falling back to MIDI 1.0
[  265.649284][   T28] audit: type=1326 audit(1776270395.434:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9247 comm="syz.3.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f1a59c819 code=0x7ffc0000
[  265.713793][   T28] audit: type=1326 audit(1776270395.474:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9247 comm="syz.3.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f1a59c819 code=0x7ffc0000
[  265.759932][   T28] audit: type=1326 audit(1776270395.474:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9247 comm="syz.3.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f3f1a59c819 code=0x7ffc0000
[  265.797227][   T28] audit: type=1326 audit(1776270395.474:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9247 comm="syz.3.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f1a59c819 code=0x7ffc0000
[  265.827414][   T28] audit: type=1326 audit(1776270395.474:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9247 comm="syz.3.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f1a59c819 code=0x7ffc0000
[  265.885058][   T28] audit: type=1326 audit(1776270395.504:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9247 comm="syz.3.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f3f1a59c819 code=0x7ffc0000
[  265.930308][   T28] audit: type=1326 audit(1776270395.504:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9247 comm="syz.3.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f1a59c819 code=0x7ffc0000
[  265.971008][ T5835] f81534 1-1:0.12: f81534_set_register: reg: 1003 data: f8 failed: -71
[  266.001140][ T5835] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71
[  266.023768][ T5835] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  266.042581][ T5835] f81534: probe of 1-1:0.12 failed with error -71
[  266.062177][   T28] audit: type=1326 audit(1776270395.504:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9247 comm="syz.3.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f1a59c819 code=0x7ffc0000
[  266.086783][    C1] vkms_vblank_simulate: vblank timer overrun
[  266.105369][ T5835] usb 1-1: USB disconnect, device number 13
[  266.193843][   T28] audit: type=1326 audit(1776270395.504:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9247 comm="syz.3.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f3f1a59c819 code=0x7ffc0000
[  266.213921][    C1] hrtimer: interrupt took 540929 ns
[  266.260241][   T28] audit: type=1326 audit(1776270395.504:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9247 comm="syz.3.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f1a59c819 code=0x7ffc0000
[  266.472057][ T7138] usb 6-1: USB disconnect, device number 5
[  266.927756][ T9254] syz.6.889: vmalloc error: size 16777216, failed to allocated page array size 32768, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz6,mems_allowed=0-1
[  266.948112][    C1] vkms_vblank_simulate: vblank timer overrun
[  266.965262][ T9254] CPU: 1 PID: 9254 Comm: syz.6.889 Not tainted syzkaller #0
[  266.974710][ T9254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  266.985367][ T9254] Call Trace:
[  266.988892][ T9254]  <TASK>
[  266.992252][ T9254]  dump_stack_lvl+0x18c/0x250
[  266.997204][ T9254]  ? show_regs_print_info+0x20/0x20
[  267.003193][ T9254]  ? load_image+0x420/0x420
[  267.007979][ T9254]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  267.015535][ T9254]  ? cpuset_print_current_mems_allowed+0x2e7/0x360
[  267.022916][ T9254]  warn_alloc+0x246/0x340
[  267.028658][ T9254]  ? zone_watermark_ok_safe+0x230/0x230
[  267.034757][ T9254]  ? _raw_spin_unlock+0x28/0x40
[  267.040363][ T9254]  __vmalloc_node_range+0x662/0x1330
[  267.046322][ T9254]  ? __alloc_pages+0xae/0x460
[  267.051234][ T9254]  ? free_vm_area+0x50/0x50
[  267.056132][ T9254]  ? packet_set_ring+0x720/0x23f0
[  267.061791][ T9254]  vzalloc+0x79/0x90
[  267.066048][ T9254]  ? packet_set_ring+0x720/0x23f0
[  267.072985][ T9254]  packet_set_ring+0x720/0x23f0
[  267.078046][ T9254]  ? packet_mmap+0x510/0x510
[  267.083282][ T9254]  ? __lock_acquire+0x7d40/0x7d40
[  267.088757][ T9254]  ? __local_bh_enable_ip+0x13a/0x1c0
[  267.094572][ T9254]  ? lockdep_hardirqs_on+0x98/0x150
[  267.100114][ T9254]  ? __might_fault+0xaa/0x120
[  267.106549][ T9254]  ? __might_fault+0xc6/0x120
[  267.112446][ T9254]  ? __might_fault+0xaa/0x120
[  267.118266][ T9254]  ? _copy_from_user+0xa5/0xe0
[  267.123633][ T9254]  packet_setsockopt+0xdb0/0x1500
[  267.129117][ T9254]  ? packet_ioctl+0x340/0x340
[  267.135417][ T9254]  ? aa_sk_perm+0x83c/0x970
[  267.140431][ T9254]  ? __fget_files+0x28/0x4b0
[  267.146433][ T9254]  ? aa_af_perm+0x330/0x330
[  267.153576][ T9254]  ? __fget_files+0x28/0x4b0
[  267.160585][ T9254]  ? __fget_files+0x28/0x4b0
[  267.166723][ T9254]  ? aa_sock_opt_perm+0x74/0x100
[  267.173492][ T9254]  ? bpf_lsm_socket_setsockopt+0x9/0x10
[  267.181215][ T9254]  ? security_socket_setsockopt+0x7e/0xa0
[  267.188802][ T9254]  ? packet_ioctl+0x340/0x340
[  267.195878][ T9254]  do_sock_setsockopt+0x175/0x1a0
[  267.201257][ T9254]  ? __fdget+0x180/0x210
[  267.206555][ T9254]  __x64_sys_setsockopt+0x182/0x200
[  267.212269][ T9254]  do_syscall_64+0x55/0xa0
[  267.218086][ T9254]  ? clear_bhb_loop+0x40/0x90
[  267.223963][ T9254]  ? clear_bhb_loop+0x40/0x90
[  267.232676][ T9254]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  267.239881][ T9254] RIP: 0033:0x7f954479c819
[  267.244477][ T9254] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  267.267958][ T9254] RSP: 002b:00007f9545685028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  267.278288][ T9254] RAX: ffffffffffffffda RBX: 00007f9544a15fa0 RCX: 00007f954479c819
[  267.286963][ T9254] RDX: 0000000000000005 RSI: 0000000000000107 RDI: 0000000000000003
[  267.295919][ T9254] RBP: 00007f9544832c91 R08: 000000000000001c R09: 0000000000000000
[  267.304751][ T9254] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000
[  267.313173][ T9254] R13: 00007f9544a16038 R14: 00007f9544a15fa0 R15: 00007ffd139aad38
[  267.327065][ T9254]  </TASK>
[  267.331103][    C1] vkms_vblank_simulate: vblank timer overrun
[  267.358565][ T9254] Mem-Info:
[  267.368536][ T9254] active_anon:8105 inactive_anon:0 isolated_anon:0
[  267.368536][ T9254]  active_file:1524 inactive_file:40132 isolated_file:0
[  267.368536][ T9254]  unevictable:0 dirty:225 writeback:0
[  267.368536][ T9254]  slab_reclaimable:10967 slab_unreclaimable:97622
[  267.368536][ T9254]  mapped:25124 shmem:1390 pagetables:816
[  267.368536][ T9254]  sec_pagetables:0 bounce:0
[  267.368536][ T9254]  kernel_misc_reclaimable:0
[  267.368536][ T9254]  free:1336405 free_pcp:13104 free_cma:0
[  267.433394][    C1] vkms_vblank_simulate: vblank timer overrun
[  267.457598][ T9254] Node 0 active_anon:30856kB inactive_anon:0kB active_file:6096kB inactive_file:160324kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:100460kB dirty:932kB writeback:0kB shmem:4020kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12208kB pagetables:3348kB sec_pagetables:0kB all_unreclaimable? no
[  267.495245][    C1] vkms_vblank_simulate: vblank timer overrun
[  267.541750][ T9254] Node 1 active_anon:1536kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  267.573982][    C1] vkms_vblank_simulate: vblank timer overrun
[  267.611407][ T9254] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  267.643774][    C1] vkms_vblank_simulate: vblank timer overrun
[  267.684657][ T9254] lowmem_reserve[]: 0
[  267.696674][ T9266] loop0: detected capacity change from 0 to 512
[  267.708827][ T9254]  2521 2522 2522 2522
[  267.713606][ T9254] Node 0 DMA32 free:1444236kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:30908kB inactive_anon:0kB active_file:6096kB inactive_file:159500kB unevictable:0kB writepending:976kB present:3129332kB managed:2586952kB mlocked:0kB bounce:0kB free_pcp:30404kB local_pcp:9572kB free_cma:0kB
[  267.748341][ T9266] EXT4-fs: Ignoring removed oldalloc option
[  267.764891][ T9254] lowmem_reserve[]: 0 0 0 0 0
[  267.816584][ T9266] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  267.826650][ T9254] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB
[  267.864300][ T9254] lowmem_reserve[]: 0 0 0 0 0
[  267.869445][ T9254] Node 1 Normal free:3886280kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:1536kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:22208kB local_pcp:10240kB free_cma:0kB
[  267.934080][ T9254] lowmem_reserve[]: 0 0 0 0 0
[  267.939388][ T9266] EXT4-fs error (device loop0): ext4_iget_extra_inode:4739: inode #11: comm syz.0.893: corrupted in-inode xattr: invalid ea_ino
[  267.944807][ T9266] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.893: couldn't read orphan inode 11 (err -117)
[  267.954841][ T9254] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  267.980410][ T9254] Node 0 DMA32: 449*4kB (UM) 141*8kB (UME) 62*16kB (ME) 264*32kB (UM) 109*64kB (ME) 62*128kB (UME) 71*256kB (ME) 52*512kB (UM) 32*1024kB (UM) 6*2048kB (UM) 324*4096kB (UM) = 1444236kB
[  267.999600][ T9254] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  268.013172][ T9254] Node 1 Normal: 280*4kB (UME) 57*8kB (UME) 42*16kB (UME) 80*32kB (UME) 26*64kB (UE) 9*128kB (UME) 1*256kB (E) 3*512kB (UME) 0*1024kB 1*2048kB (E) 946*4096kB (M) = 3886280kB
[  268.032441][ T9254] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  268.048013][ T9254] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  268.058027][ T9254] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  268.068732][ T9254] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  268.079373][ T9254] 42985 total pagecache pages
[  268.084614][ T9254] 5 pages in swap cache
[  268.089676][ T9254] Free swap  = 124472kB
[  268.095576][ T9254] Total swap = 124996kB
[  268.100891][ T9254] 2097051 pages RAM
[  268.106556][ T9254] 0 pages HighMem/MovableOnly
[  268.123007][ T9254] 416927 pages reserved
[  268.134985][ T9266] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  268.151294][ T9254] 0 pages cma reserved
[  268.559374][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  268.909878][ T9283] loop0: detected capacity change from 0 to 2048
[  269.030673][ T9283] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  269.142996][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  269.164567][ T9289] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  269.655003][ T9302] loop3: detected capacity change from 0 to 512
[  269.732918][ T9302] EXT4-fs (loop3): 1 truncate cleaned up
[  269.771074][ T9302] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  269.892058][ T9281] loop5: detected capacity change from 0 to 40427
[  269.959029][ T9281] F2FS-fs (loop5): build fault injection attr: rate: 771, type: 0x7ffff
[  270.022873][ T9281] F2FS-fs (loop5): invalid crc value
[  270.039534][ T9281] F2FS-fs (loop5): Found nat_bits in checkpoint
[  270.086813][ T9302] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.904: invalid indirect mapped block 4294901760 (level 0)
[  270.169639][ T9281] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  270.185112][ T9302] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.904: invalid indirect mapped block 4294967295 (level 1)
[  270.368896][ T9311] f2fs_ckpt-7:5: attempt to access beyond end of device
[  270.368896][ T9311] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  270.424082][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  270.445760][ T9311] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  271.043129][ T9332] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  271.287779][ T9336] loop3: detected capacity change from 0 to 1024
[  271.352207][ T9336] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  271.416905][ T9336] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  271.493887][ T9336] EXT4-fs (loop3): orphan cleanup on readonly fs
[  271.533609][ T9336] __quota_error: 1 callbacks suppressed
[  271.533624][ T9336] Quota error (device loop3): v2_read_file_info: Number of blocks too big for quota file size (6144 > 1024).
[  271.601280][ T9309] loop6: detected capacity change from 0 to 40427
[  271.625201][ T9336] EXT4-fs warning (device loop3): ext4_enable_quotas:7188: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  271.653902][ T9309] F2FS-fs (loop6): build fault injection attr: rate: 690, type: 0x7ffff
[  271.662363][ T9309] F2FS-fs (loop6): Image doesn't support compression
[  271.683363][ T9336] EXT4-fs (loop3): Cannot turn on quotas: error -117
[  271.703613][ T9309] F2FS-fs (loop6): Image doesn't support compression
[  271.711363][ T9309] F2FS-fs (loop6): build fault injection attr: rate: 0, type: 0x4
[  271.743812][ T9336] EXT4-fs (loop3): 1 truncate cleaned up
[  271.759220][ T9336] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  271.818663][ T9309] F2FS-fs (loop6): invalid crc value
[  271.854966][ T9309] F2FS-fs (loop6): Found nat_bits in checkpoint
[  271.874946][ T9336] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 16: comm syz.3.912: path /253/file0: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0
[  272.054932][ T9309] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  272.072794][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  272.254278][   T28] audit: type=1800 audit(1776270402.044:91): pid=9309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.906" name="bus" dev="loop6" ino=14 res=0 errno=0
[  272.383960][ T7511] syz-executor: attempt to access beyond end of device
[  272.383960][ T7511] loop6: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  272.478254][ T7511] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  272.494497][ T7511] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  273.042225][ T9363] loop3: detected capacity change from 0 to 512
[  273.118568][ T9363] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  273.190326][ T9363] ext4 filesystem being mounted at /256/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  273.281783][ T9363] EXT4-fs (loop3): shut down requested (0)
[  273.397298][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  274.068443][ T9369] loop3: detected capacity change from 0 to 32768
[  274.108042][ T9369] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10
[  274.251269][ T5785] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10
[  274.665490][ T9377] loop5: detected capacity change from 0 to 32768
[  274.717474][ T9377] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  274.737872][ T9377] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  274.763599][ T9377] BTRFS info (device loop5): force clearing of disk cache
[  274.790341][ T9377] BTRFS info (device loop5): metadata ratio 0
[  274.817793][ T9377] BTRFS info (device loop5): enabling ssd optimizations
[  274.853592][ T9377] BTRFS info (device loop5): using spread ssd allocation scheme
[  274.875362][ T9377] BTRFS info (device loop5): using free space tree
[  274.984539][ T9377] BTRFS info (device loop5): auto enabling async discard
[  275.028583][ T9377] BTRFS info (device loop5): rebuilding free space tree
[  275.111225][ T9399] loop3: detected capacity change from 0 to 4096
[  275.360390][ T9409] binder: 9408:9409 ioctl c0306201 200000000080 returned -14
[  275.418004][ T9399] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  275.465090][ T7285] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  276.418145][ T9419] loop5: detected capacity change from 0 to 256
[  276.525374][ T9419] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  276.662011][ T9425] Bluetooth: hci0: load_link_keys: too big key_count value 11008
[  276.751695][ T9415] loop6: detected capacity change from 0 to 32768
[  276.812218][ T9415] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  277.005163][   T28] audit: type=1326 audit(1776270406.804:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9437 comm="syz.5.943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb66739c819 code=0x7ffc0000
[  277.084976][ T9415] XFS (loop6): Ending clean mount
[  277.122949][   T28] audit: type=1326 audit(1776270406.844:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9437 comm="syz.5.943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb66739c819 code=0x7ffc0000
[  277.138798][ T9415] XFS (loop6): Quotacheck needed: Please wait.
[  277.223036][   T28] audit: type=1326 audit(1776270406.854:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9437 comm="syz.5.943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb66739c819 code=0x7ffc0000
[  277.328766][ T9415] XFS (loop6): Quotacheck: Done.
[  277.353130][   T28] audit: type=1326 audit(1776270406.854:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9437 comm="syz.5.943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb66739c819 code=0x7ffc0000
[  277.464622][   T28] audit: type=1326 audit(1776270406.854:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9437 comm="syz.5.943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fb66739c819 code=0x7ffc0000
[  277.606376][   T28] audit: type=1326 audit(1776270406.854:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9437 comm="syz.5.943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb66739c819 code=0x7ffc0000
[  277.688606][   T28] audit: type=1326 audit(1776270406.854:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9437 comm="syz.5.943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb66739c819 code=0x7ffc0000
[  277.721876][   T28] audit: type=1326 audit(1776270406.864:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9437 comm="syz.5.943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb66739c819 code=0x7ffc0000
[  277.755107][   T28] audit: type=1326 audit(1776270406.864:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9437 comm="syz.5.943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb66739c819 code=0x7ffc0000
[  277.868885][   T28] audit: type=1326 audit(1776270406.864:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9437 comm="syz.5.943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fb66739c819 code=0x7ffc0000
[  277.927220][ T7511] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  278.505037][ T9436] loop0: detected capacity change from 0 to 40427
[  278.582600][ T9436] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x7ffff
[  278.634554][ T9436] F2FS-fs (loop0): Image doesn't support compression
[  278.713538][ T9436] F2FS-fs (loop0): Image doesn't support compression
[  278.783914][ T9436] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x4
[  278.842834][ T9436] F2FS-fs (loop0): invalid crc value
[  278.911619][ T9436] F2FS-fs (loop0): Found nat_bits in checkpoint
[  278.920525][ T9461] netlink: 'syz.6.953': attribute type 1 has an invalid length.
[  278.940381][ T9449] loop5: detected capacity change from 0 to 32768
[  278.995611][ T9449] XFS: attr2 mount option is deprecated.
[  279.045816][ T9461] 8021q: adding VLAN 0 to HW filter on device bond2
[  279.087323][ T9464] bond2: (slave geneve2): making interface the new active one
[  279.122172][ T9449] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  279.137449][ T9464] bond2: (slave geneve2): Enslaving as an active interface with an up link
[  279.153504][ T9436] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  279.416715][ T9436] syz.0.944: attempt to access beyond end of device
[  279.416715][ T9436] loop0: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  279.439928][ T9449] XFS (loop5): Ending clean mount
[  279.493785][ T9449] XFS (loop5): Quotacheck needed: Please wait.
[  279.557094][ T5771] syz-executor: attempt to access beyond end of device
[  279.557094][ T5771] loop0: rw=2049, sector=45104, nr_sectors = 16 limit=40427
[  279.592926][ T5771] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  279.609734][ T5771] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  279.668863][ T9449] XFS (loop5): Quotacheck: Done.
[  280.070514][ T7285] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  280.860163][ T9498] loop0: detected capacity change from 0 to 256
[  280.875520][ T9498] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  280.904399][ T9496] loop6: detected capacity change from 0 to 128
[  280.924804][ T9498] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  280.965263][ T9496] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  280.992940][ T9498] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x5817f139, utbl_chksum : 0xe619d30d)
[  281.010241][ T9496] hpfs: filesystem error: improperly stopped
[  281.039008][ T9496] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  281.104554][ T9496] hpfs: You really don't want any checks? You are crazy...
[  281.112222][ T9496] hpfs: Code page index out of array
[  281.163513][ T9496] hpfs: code page support is disabled
[  281.170316][ T9496] hpfs: hpfs_map_4sectors(): unaligned read
[  281.230411][ T9496] hpfs: hpfs_map_4sectors(): unaligned read
[  281.287209][ T9496] hpfs: filesystem error: unable to find root dir
[  281.633012][ T9508] loop6: detected capacity change from 0 to 128
[  282.265411][ T9510] loop0: detected capacity change from 0 to 32768
[  282.279436][ T9510] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.969 (9510)
[  282.320175][ T9510] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  282.351600][ T9510] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  282.362330][ T9510] BTRFS info (device loop0): turning on sync discard
[  282.379122][ T9510] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  282.408098][ T9510] BTRFS info (device loop0): use zstd compression, level 3
[  282.433851][ T9510] BTRFS info (device loop0): turning on async discard
[  282.465540][ T9513] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  282.505298][ T9510] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  282.526213][ T9510] BTRFS info (device loop0): trying to use backup root at mount time
[  282.550958][ T9510] BTRFS info (device loop0): force zlib compression, level 3
[  282.559510][ T9510] BTRFS info (device loop0): using free space tree
[  282.720382][ T5943] BTRFS warning (device loop0): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  282.784082][ T9510] BTRFS error (device loop0): failed to load root extent
[  282.795268][ T9510] BTRFS warning (device loop0): try to load backup roots slot 1
[  282.805787][ T5927] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  282.836904][ T7138] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  282.852253][ T7138] hid-generic 0000:0000:0000.000D: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  282.873629][ T9510] BTRFS warning (device loop0): couldn't read tree root
[  282.881274][ T9510] BTRFS warning (device loop0): try to load backup roots slot 2
[  282.933908][ T5927] BTRFS error (device loop0): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  282.967371][ T9510] BTRFS warning (device loop0): couldn't read tree root
[  283.002851][ T9510] BTRFS warning (device loop0): try to load backup roots slot 3
[  283.072811][ T9510] BTRFS info (device loop0): enabling ssd optimizations
[  283.103989][ T9510] BTRFS info (device loop0): rebuilding free space tree
[  283.113665][    T8] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  283.171957][ T9510] BTRFS info (device loop0): checking UUID tree
[  283.328532][    T8] usb 4-1: config 0 has no interfaces?
[  283.351663][   T28] kauditd_printk_skb: 18 callbacks suppressed
[  283.351681][   T28] audit: type=1800 audit(1776270413.144:120): pid=9510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.969" name="file1" dev="loop0" ino=257 res=0 errno=0
[  283.394203][    T8] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  283.450109][    T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  283.481288][    T8] usb 4-1: SerialNumber: syz
[  283.490586][    T8] usb 4-1: config 0 descriptor??
[  283.636008][ T5771] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  283.967602][ T9546] netlink: 27 bytes leftover after parsing attributes in process `syz.0.976'.
[  284.702346][ T9559] netlink: 'syz.6.981': attribute type 15 has an invalid length.
[  284.735415][ T9559] netlink: 4 bytes leftover after parsing attributes in process `syz.6.981'.
[  284.808793][ T9559] netlink: 'syz.6.981': attribute type 15 has an invalid length.
[  284.830142][ T9559] netlink: 4 bytes leftover after parsing attributes in process `syz.6.981'.
[  285.589179][ T9556] loop5: detected capacity change from 0 to 131072
[  285.610629][ T9568] sp0: Synchronizing with TNC
[  285.619773][ T9556] F2FS-fs (loop5): invalid crc value
[  285.678652][ T9556] F2FS-fs (loop5): Found nat_bits in checkpoint
[  285.740806][ T9556] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[  285.866788][    T8] usb 4-1: USB disconnect, device number 12
[  287.527601][ T9607] loop6: detected capacity change from 0 to 512
[  287.558168][ T9607] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  287.583445][  T789] usb 4-1: new full-speed USB device number 13 using dummy_hcd
[  287.651112][ T9607] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  287.683532][ T9607] ext4 filesystem being mounted at /131/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  287.769658][   T28] audit: type=1800 audit(1776270417.564:121): pid=9607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1000" name="file2" dev="loop6" ino=16 res=0 errno=0
[  287.826790][  T789] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  287.840727][  T789] usb 4-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[  287.858694][  T789] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  287.874931][  T789] usb 4-1: Product: syz
[  287.879201][  T789] usb 4-1: Manufacturer: syz
[  287.894173][  T789] usb 4-1: SerialNumber: syz
[  287.915503][ T7511] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  287.934194][  T789] usb 4-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[  288.333878][ T5835] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  288.352735][ T9606] loop5: detected capacity change from 0 to 40427
[  288.362796][ T9606] F2FS-fs (loop5): invalid crc value
[  288.391301][ T9606] F2FS-fs (loop5): Found nat_bits in checkpoint
[  288.450921][ T9606] F2FS-fs (loop5): Start checkpoint disabled!
[  288.471155][ T9606] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  288.533408][ T5835] usb 7-1: Using ep0 maxpacket: 16
[  288.544875][ T5835] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  288.567424][ T5835] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  288.581851][ T5835] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  288.635097][ T5835] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  288.651436][ T5835] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  288.661200][ T5835] usb 7-1: Product: syz
[  288.666262][ T5835] usb 7-1: Manufacturer: syz
[  288.679520][ T5835] usb 7-1: SerialNumber: syz
[  288.956179][  T789] usb 4-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter)
[  289.133590][   T27] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  289.142658][ T5835] usb 7-1: 0:2 : does not exist
[  289.185167][  T789] usb 4-1: USB disconnect, device number 13
[  289.367068][   T27] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  289.385972][   T27] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  289.399127][   T27] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  289.418483][   T27] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  289.429281][   T27] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  289.449901][   T27] usb 6-1: config 0 descriptor??
[  289.881185][   T27] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving
[  289.917538][   T27] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  290.035536][    T8] usb 7-1: USB disconnect, device number 8
[  290.806045][ T9640] loop6: detected capacity change from 0 to 512
[  290.828118][ T9640] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  290.878983][ T9640] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.1012: invalid indirect mapped block 256 (level 2)
[  290.932621][ T9640] EXT4-fs (loop6): 2 truncates cleaned up
[  290.978765][ T9640] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  291.139387][ T9640] EXT4-fs error (device loop6): ext4_validate_block_bitmap:430: comm syz.6.1012: bg 0: block 5: invalid block bitmap
[  291.212808][ T9640] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 2 with max blocks 17 with error 28
[  291.243668][ T9646] loop3: detected capacity change from 0 to 512
[  291.254220][ T9640] EXT4-fs (loop6): This should not happen!! Data will be lost
[  291.254220][ T9640] 
[  291.280644][ T9640] EXT4-fs (loop6): Total free blocks count 0
[  291.307279][ T5785] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  291.322085][ T9640] EXT4-fs (loop6): Free/Dirty block details
[  291.333915][ T9640] EXT4-fs (loop6): free_blocks=0
[  291.340770][ T9646] tipc: Started in network mode
[  291.346837][ T9646] tipc: Node identity ac1414aa, cluster identity 4711
[  291.356522][ T9640] EXT4-fs (loop6): dirty_blocks=17
[  291.365752][ T9646] tipc: Enabling of bearer <udp:�> rejected, failed to enable media
[  291.377258][ T9640] EXT4-fs (loop6): Block reservation details
[  291.385210][ T9640] EXT4-fs (loop6): i_reserved_data_blocks=17
[  291.577564][ T7511] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  291.771792][ T9637] loop0: detected capacity change from 0 to 40427
[  291.827633][ T9637] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x35f7
[  291.853453][ T9637] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x7ffff
[  291.885826][ T9637] F2FS-fs (loop0): inline encryption not supported
[  291.893020][ T9637] F2FS-fs (loop0): Image doesn't support compression
[  291.928825][ T9637] F2FS-fs (loop0): invalid crc value
[  291.969364][ T9637] F2FS-fs (loop0): Found nat_bits in checkpoint
[  292.095075][ T9637] F2FS-fs (loop0): Start checkpoint disabled!
[  292.106600][  T789] usb 6-1: USB disconnect, device number 6
[  292.131171][ T9637] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  292.340146][ T9657] loop5: detected capacity change from 0 to 4096
[  292.401099][ T9637] F2FS-fs (loop0): inject kmalloc in f2fs_kmalloc of f2fs_getxattr+0xf3a/0x12f0
[  292.421161][ T9657] ntfs: (device loop5): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  292.466920][ T9660] syz.0.1011: attempt to access beyond end of device
[  292.466920][ T9660] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  292.530192][ T9657] ntfs: volume version 3.1.
[  292.770099][ T5927] kworker/u4:17: attempt to access beyond end of device
[  292.770099][ T5927] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  292.818042][ T5927] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  292.841959][ T5927] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  292.842143][ T5924] ntfs: (device loop5): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry.
[  293.673569][   T27] usb 7-1: new full-speed USB device number 9 using dummy_hcd
[  293.872716][ T9668] loop5: detected capacity change from 0 to 32768
[  293.885522][   T27] usb 7-1: unable to get BOS descriptor or descriptor too short
[  293.896649][   T27] usb 7-1: not running at top speed; connect to a high speed hub
[  293.924971][   T27] usb 7-1: config 1 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  293.971655][ T9668] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  293.993369][   T27] usb 7-1: config 1 interface 0 has no altsetting 0
[  294.011998][   T27] usb 7-1: string descriptor 0 read error: -22
[  294.023727][   T27] usb 7-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.40
[  294.035600][   T27] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  294.050808][ T9670] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  294.195660][ T9668] XFS (loop5): Ending clean mount
[  294.350531][   T28] audit: type=1804 audit(1776270424.144:122): pid=9668 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.1022" name="/newroot/125/file1/file1" dev="loop5" ino=6150 res=1 errno=0
[  294.514754][   T27] aureal 0003:0755:2626.000F: invalid report_size -1149171161
[  294.522853][   T27] aureal 0003:0755:2626.000F: item 0 4 1 7 parsing failed
[  294.574251][   T27] aureal: probe of 0003:0755:2626.000F failed with error -22
[  294.630003][ T7285] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  294.900261][   T27] usb 7-1: USB disconnect, device number 9
[  295.765432][ T9693] loop3: detected capacity change from 0 to 32768
[  295.954073][ T9693] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  296.079479][ T9693] XFS (loop3): Ending clean mount
[  296.226354][ T9718] loop0: detected capacity change from 0 to 512
[  296.304378][ T9718] EXT4-fs: Ignoring removed nobh option
[  296.361557][ T9718] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  296.416450][ T5769] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  296.430897][ T9718] EXT4-fs (loop0): 1 truncate cleaned up
[  296.462071][ T9718] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  296.704971][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  296.942109][ T9730] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1038'.
[  296.975413][ T9730] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1038'.
[  297.020551][ T9730] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1038'.
[  297.295424][ T9735] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  297.838913][ T9739] loop3: detected capacity change from 0 to 512
[  297.916633][ T9739] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  298.039454][ T9726] loop5: detected capacity change from 0 to 32768
[  298.050367][ T9739] EXT4-fs (loop3): shut down requested (2)
[  298.154283][ T9726] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  298.169704][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  298.515142][ T9726] XFS (loop5): Ending clean mount
[  298.532871][ T9726] XFS (loop5): Quotacheck needed: Please wait.
[  298.634031][ T9726] XFS (loop5): Quotacheck: Done.
[  298.791124][    T8] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  298.825999][ T7285] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  299.073760][    T8] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  299.107386][    T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  299.153721][    T8] usb 4-1: Product: syz
[  299.159851][    T8] usb 4-1: Manufacturer: syz
[  299.193351][    T8] usb 4-1: SerialNumber: syz
[  299.244590][    T8] usb 4-1: config 0 descriptor??
[  299.341952][ T5777] Bluetooth: hci2: command 0x0406 tx timeout
[  299.889983][ T9766] loop5: detected capacity change from 0 to 32768
[  299.938094][ T9766] JBD2: Ignoring recovery information on journal
[  300.020565][ T9758] loop6: detected capacity change from 0 to 40427
[  300.031030][ T9766] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode.
[  300.053710][ T9758] F2FS-fs (loop6): Insane cp_payload (553648128 >= 504)
[  300.073529][ T9758] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  300.142520][ T9758] F2FS-fs (loop6): invalid crc value
[  300.193852][ T9758] F2FS-fs (loop6): Found nat_bits in checkpoint
[  300.322975][ T9766] OCFS2: ERROR (device loop5): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 23 has 4294967295 used bits but only 16777215 total
[  300.348208][ T9766] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  300.359672][ T9766] OCFS2: File system is now read-only.
[  300.365592][ T9766] (syz.5.1046,9766,1):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30
[  300.375148][ T9766] (syz.5.1046,9766,1):__ocfs2_claim_clusters:2365 ERROR: status = -30
[  300.384115][ T9766] (syz.5.1046,9766,1):__ocfs2_claim_clusters:2373 ERROR: status = -30
[  300.393077][ T9766] (syz.5.1046,9766,1):ocfs2_add_clusters_in_btree:4830 ERROR: status = -30
[  300.402811][ T9766] (syz.5.1046,9766,1):ocfs2_write_cluster:1153 ERROR: status = -30
[  300.411926][ T9766] (syz.5.1046,9766,1):ocfs2_write_cluster_by_desc:1248 ERROR: status = -30
[  300.419192][    T8] usb 4-1: Firmware version (0.0) predates our first public release.
[  300.421479][ T9766] (syz.5.1046,9766,1):ocfs2_write_begin_nolock:1820 ERROR: status = -30
[  300.441461][ T9766] (syz.5.1046,9766,1):ocfs2_write_begin:1907 ERROR: status = -30
[  300.484268][    T8] usb 4-1: Please update to version 0.2 or newer
[  300.597624][ T9758] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  300.655869][ T9758] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  300.684465][    T8] usb 4-1: USB disconnect, device number 14
[  300.779704][ T9784] binder: 9783:9784 ioctl c0306201 0 returned -14
[  300.801601][ T9784] binder: 9783:9784 ioctl c0306201 2000000001c0 returned -14
[  300.821097][ T7285] ocfs2: Unmounting device (7,5) on (node local)
[  300.895160][ T9758] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1044'.
[  301.639917][ T9799] loop5: detected capacity change from 0 to 512
[  301.657792][ T9800] syzkaller1: entered promiscuous mode
[  301.664109][ T9800] syzkaller1: entered allmulticast mode
[  301.686896][ T9799] EXT4-fs (loop5): Test dummy encryption mode enabled
[  301.707094][ T9799] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  301.822327][ T9799] EXT4-fs error (device loop5): ext4_orphan_get:1430: comm syz.5.1057: bad orphan inode 131083
[  301.843166][ T9799] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  302.075245][ T7285] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  302.195739][ T9812] loop3: detected capacity change from 0 to 128
[  302.249627][ T9812] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  302.288939][ T9812] hpfs: filesystem error: improperly stopped
[  302.296738][ T9812] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  302.318070][ T9812] hpfs: You really don't want any checks? You are crazy...
[  302.330092][ T9812] hpfs: Code page index out of array
[  302.336350][ T9812] hpfs: code page support is disabled
[  302.344646][ T9816] input: syz1 as /devices/virtual/input/input17
[  302.379694][ T9812] hpfs: hpfs_map_4sectors(): unaligned read
[  302.386119][ T9812] hpfs: hpfs_map_4sectors(): unaligned read
[  302.392223][ T9812] hpfs: filesystem error: unable to find root dir
[  302.523378][ T5835] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  302.554681][ T9818] loop0: detected capacity change from 0 to 512
[  302.726963][ T9822] bond0: (slave bond_slave_0): Error -28 calling ndo_bpf
[  302.751182][ T5835] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  302.787037][ T5835] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  302.823885][ T5835] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  302.851681][ T5835] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  302.896172][ T5835] usb 6-1: config 0 descriptor??
[  303.169680][ T9830] loop0: detected capacity change from 0 to 512
[  303.201271][ T9830] EXT4-fs (loop0): Test dummy encryption mode enabled
[  303.242749][ T9830] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  303.300744][ T9830] EXT4-fs error (device loop0): ext4_orphan_get:1430: comm syz.0.1073: bad orphan inode 131083
[  303.337136][ T5835] cp2112 0003:10C4:EA90.0010: unknown main item tag 0x0
[  303.401315][ T9830] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  303.408016][ T5835] cp2112 0003:10C4:EA90.0010: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0
[  303.591279][ T5835] cp2112 0003:10C4:EA90.0010: error requesting version
[  303.625776][ T5835] cp2112: probe of 0003:10C4:EA90.0010 failed with error -71
[  303.639225][ T9840] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only
[  303.655764][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  303.679654][ T5835] usb 6-1: USB disconnect, device number 7
[  304.541676][ T9864] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  304.552284][ T9864] overlayfs: failed to set xattr on upper
[  304.562822][ T9864] overlayfs: ...falling back to redirect_dir=nofollow.
[  304.576953][ T9864] overlayfs: ...falling back to index=off.
[  304.600887][ T9864] overlayfs: ...falling back to uuid=null.
[  304.615087][ T9864] overlayfs: maximum fs stacking depth exceeded
[  304.760037][ T9871] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96
[  304.835459][ T9876] loop5: detected capacity change from 0 to 256
[  304.935900][ T9876] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  305.078588][   T28] audit: type=1800 audit(1776270434.884:123): pid=9876 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1094" name="file1" dev="loop5" ino=1048635 res=0 errno=0
[  306.255181][ T9905] loop0: detected capacity change from 0 to 512
[  306.410747][ T9899] loop5: detected capacity change from 0 to 32768
[  306.450414][ T9905] EXT4-fs error (device loop0): ext4_do_update_inode:5255: inode #16: comm syz.0.1105: corrupted inode contents
[  306.499981][ T9899] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  306.530317][ T9905] EXT4-fs error (device loop0): ext4_dirty_inode:6143: inode #16: comm syz.0.1105: mark_inode_dirty error
[  306.600160][ T9905] EXT4-fs error (device loop0): ext4_do_update_inode:5255: inode #16: comm syz.0.1105: corrupted inode contents
[  306.618614][ T9899] XFS (loop5): Ending clean mount
[  306.648080][ T9905] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.1105: mark_inode_dirty error
[  306.684272][ T9923] loop6: detected capacity change from 0 to 1024
[  306.705130][ T9905] EXT4-fs error (device loop0): ext4_do_update_inode:5255: inode #16: comm syz.0.1105: corrupted inode contents
[  306.731741][ T9923] EXT4-fs: inline encryption not supported
[  306.766581][ T9923] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  306.792025][ T9905] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem
[  306.823111][ T9905] EXT4-fs error (device loop0): ext4_do_update_inode:5255: inode #16: comm syz.0.1105: corrupted inode contents
[  306.844717][ T9923] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  306.860209][ T7285] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  306.865198][ T9905] EXT4-fs error (device loop0): ext4_truncate:4301: inode #16: comm syz.0.1105: mark_inode_dirty error
[  306.898295][ T9905] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem
[  306.908951][ T9923] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e854c01c, mo2=0003]
[  306.918841][ T9923] System zones: 0-1, 3-36
[  306.940664][ T9905] EXT4-fs (loop0): 1 truncate cleaned up
[  306.949395][ T9905] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  306.964484][ T9905] ext4 filesystem being mounted at /267/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  306.977251][ T5927] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  307.003353][ T9923] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  307.035212][ T5927] EXT4-fs error (device loop0): ext4_release_dquot:6989: comm kworker/u4:17: Failed to release dquot type 1
[  307.107551][   T28] audit: type=1800 audit(1776270436.904:124): pid=9905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1105" name="file2" dev="loop0" ino=16 res=0 errno=0
[  307.295549][ T7511] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  307.505716][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  307.803638][    T9] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  307.963813][    T8] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  307.995231][    T9] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  308.007397][    T9] usb 4-1: config 0 has no interface number 0
[  308.014132][    T9] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  308.025695][    T9] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  308.043474][    T9] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18
[  308.063091][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  308.080508][    T9] usb 4-1: config 0 descriptor??
[  308.177442][    T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  308.202065][    T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  308.220634][ T9946] loop6: detected capacity change from 0 to 4096
[  308.228506][    T8] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  308.244784][    T8] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  308.255777][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  308.275812][    T8] usb 1-1: config 0 descriptor??
[  308.336267][ T9946] ntfs3: loop6: Mark volume as dirty due to NTFS errors
[  308.382659][ T9946] ntfs3: loop6: Failed to initialize $Extend/$Reparse.
[  308.596089][    T9] input: HID 04d9:a055 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:04D9:A055.0011/input/input18
[  308.741881][    T8] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving
[  308.799130][    T8] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  308.836210][    T9] holtek_kbd 0003:04D9:A055.0011: input,hidraw1: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.3-1/input1
[  308.915512][    T9] usb 4-1: USB disconnect, device number 15
[  309.082312][ T9957] fido_id[9957]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  309.597655][ T9963] 8021q: adding VLAN 0 to HW filter on device bond0
[  309.645287][ T9963] team0: Port device bond0 added
[  309.660375][ T9964] bridge0: port 1(team0) entered blocking state
[  309.668412][ T9964] bridge0: port 1(team0) entered disabled state
[  309.676942][ T9964] team0: entered allmulticast mode
[  309.682383][ T9964] bond0: entered allmulticast mode
[  309.711857][ T9964] team0: entered promiscuous mode
[  309.740199][ T9964] bond0: entered promiscuous mode
[  310.028843][ T9973] loop5: detected capacity change from 0 to 128
[  310.080291][ T9973] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  310.105295][ T9973] ext4 filesystem being mounted at /144/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  310.237023][ T7285] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  310.866117][    T9] usb 1-1: USB disconnect, device number 14
[  312.493515][  T969] usb 6-1: new full-speed USB device number 8 using dummy_hcd
[  312.695849][  T969] usb 6-1: config 0 has no interfaces?
[  312.702906][  T969] usb 6-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47
[  312.729178][  T969] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  312.741473][  T969] usb 6-1: config 0 descriptor??
[  312.750337][T10046] loop3: detected capacity change from 0 to 64
[  313.016307][ T5835] usb 6-1: USB disconnect, device number 8
[  314.534678][ T5835] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  314.740951][ T5835] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  314.763709][ T5835] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  314.793465][ T5835] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  314.808034][ T5835] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  314.826740][T10080] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  314.850213][ T5835] usb 1-1: Quirk or no altest; falling back to MIDI 1.0
[  315.337429][ T5835] usb 1-1: USB disconnect, device number 15
[  315.737971][T10103] loop6: detected capacity change from 0 to 128
[  315.748084][T10103] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  315.951338][ T5927] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  315.970250][T10109] sctp: [Deprecated]: syz.5.1174 (pid 10109) Use of struct sctp_assoc_value in delayed_ack socket option.
[  315.970250][T10109] Use struct sctp_sack_info instead
[  316.208868][T10118] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1178'.
[  316.309484][T10118] bond4: (slave ip6gre1): The slave device specified does not support setting the MAC address
[  316.322417][T10118] bond4: (slave ip6gre1): Error -95 calling set_mac_address
[  316.754133][T10121] loop6: detected capacity change from 0 to 32768
[  316.859672][   T28] audit: type=1800 audit(1776270446.654:125): pid=10121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1179" name="file1" dev="loop6" ino=4 res=0 errno=0
[  316.974334][T10121] syz.6.1179: attempt to access beyond end of device
[  316.974334][T10121] loop6: rw=2049, sector=4680032, nr_sectors = 8 limit=32768
[  317.097159][T10130] loop5: detected capacity change from 0 to 2048
[  317.197581][T10136] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  317.215924][  T113] blkno = 8ed2c, nblocks = 1
[  317.221071][  T113] ERROR: (device loop6): dbUpdatePMap: blocks are outside the map
[  317.221071][  T113] 
[  317.310233][  T113] ERROR: (device loop6): remounting filesystem as read-only
[  317.321722][   T28] audit: type=1800 audit(1776270447.114:126): pid=10130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1183" name="file1" dev="loop5" ino=15 res=0 errno=0
[  317.414409][T10130] NILFS (loop5): nilfs_palloc_commit_free_entry (ino=3): entry number 7168 already freed
[  317.480554][T10136] NILFS (loop5): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  317.492285][T10136] NILFS error (device loop5): nilfs_bmap_propagate: broken bmap (inode number=4)
[  317.512882][T10136] Remounting filesystem read-only
[  317.518740][   T49] NILFS (loop5): discard dirty page: offset=0, ino=3
[  317.525571][   T49] NILFS (loop5): discard dirty block: blocknr=42, size=1024
[  317.533024][   T49] NILFS (loop5): discard dirty block: blocknr=43, size=1024
[  317.553392][   T49] NILFS (loop5): discard dirty block: blocknr=44, size=1024
[  317.561313][   T49] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  317.574137][   T49] NILFS (loop5): discard dirty page: offset=229376, ino=3
[  317.581445][   T49] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  317.590629][   T49] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  317.600616][   T49] NILFS (loop5): discard dirty block: blocknr=50, size=1024
[  317.614798][   T49] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  317.626835][   T49] NILFS (loop5): discard dirty page: offset=0, ino=5
[  317.637966][   T49] NILFS (loop5): discard dirty block: blocknr=41, size=1024
[  317.646053][   T49] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  317.662000][   T49] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  317.672418][   T49] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  317.688929][   T49] NILFS (loop5): discard dirty page: offset=0, ino=4
[  317.697163][   T49] NILFS (loop5): discard dirty block: blocknr=40, size=1024
[  317.727364][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  317.740437][   T49] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  317.748504][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  317.760445][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  317.768995][   T49] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  317.782283][   T49] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  317.799449][ T7285] NILFS (loop5): disposed unprocessed dirty file(s) when stopping log writer
[  317.822746][T10140] loop3: detected capacity change from 0 to 16
[  317.840139][ T7285] NILFS (loop5): discard dirty page: offset=0, ino=6
[  317.852958][T10140] erofs: (device loop3): mounted with root inode @ nid 36.
[  317.860923][ T7285] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  317.884121][ T7285] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  317.912435][T10140] overlayfs: failed to clone upperpath
[  317.919809][ T7285] NILFS (loop5): discard dirty block: blocknr=37, size=1024
[  317.943401][ T7285] NILFS (loop5): discard dirty block: blocknr=38, size=1024
[  318.394763][T10150] loop0: detected capacity change from 0 to 64
[  318.824286][T10160] loop6: detected capacity change from 0 to 512
[  318.868153][T10160] EXT4-fs: Mount option(s) incompatible with ext2
[  319.111183][T10143] loop3: detected capacity change from 0 to 32768
[  319.164230][T10143] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.1190 (10143)
[  319.239974][T10143] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  319.283010][T10170] loop6: detected capacity change from 0 to 2048
[  319.295214][T10143] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  319.323374][T10143] BTRFS info (device loop3): using free space tree
[  319.374603][T10175] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  319.448170][   T28] audit: type=1800 audit(1776270449.224:127): pid=10170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1198" name="file1" dev="loop6" ino=15 res=0 errno=0
[  319.529946][T10170] NILFS (loop6): nilfs_palloc_commit_free_entry (ino=3): entry number 7168 already freed
[  319.588571][T10143] BTRFS info (device loop3): enabling ssd optimizations
[  319.617375][T10143] BTRFS info (device loop3): auto enabling async discard
[  319.744045][T10175] NILFS (loop6): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  319.778016][T10175] NILFS error (device loop6): nilfs_bmap_propagate: broken bmap (inode number=4)
[  319.800705][T10175] Remounting filesystem read-only
[  319.847635][ T5933] NILFS (loop6): discard dirty page: offset=0, ino=3
[  319.879047][ T5933] NILFS (loop6): discard dirty block: blocknr=42, size=1024
[  319.904087][ T5933] NILFS (loop6): discard dirty block: blocknr=43, size=1024
[  319.922109][ T5933] NILFS (loop6): discard dirty block: blocknr=44, size=1024
[  319.963485][ T5933] NILFS (loop6): discard dirty block: blocknr=18446744073709551615, size=1024
[  319.972944][ T5933] NILFS (loop6): discard dirty page: offset=229376, ino=3
[  320.033435][ T5933] NILFS (loop6): discard dirty block: blocknr=18446744073709551615, size=1024
[  320.073699][ T5933] NILFS (loop6): discard dirty block: blocknr=18446744073709551615, size=1024
[  320.083146][ T5933] NILFS (loop6): discard dirty block: blocknr=50, size=1024
[  320.117703][ T5933] NILFS (loop6): discard dirty block: blocknr=18446744073709551615, size=1024
[  320.130042][ T7511] NILFS (loop6): disposed unprocessed dirty file(s) when stopping log writer
[  320.145170][ T5769] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  320.167070][ T7511] NILFS (loop6): discard dirty page: offset=0, ino=6
[  320.179526][ T7511] NILFS (loop6): discard dirty block: blocknr=18446744073709551615, size=1024
[  320.206645][ T7511] NILFS (loop6): discard dirty block: blocknr=18446744073709551615, size=1024
[  320.265131][ T7511] NILFS (loop6): discard dirty block: blocknr=37, size=1024
[  320.313343][ T7511] NILFS (loop6): discard dirty block: blocknr=38, size=1024
[  320.322303][ T7511] NILFS (loop6): discard dirty page: offset=0, ino=5
[  320.336932][ T7511] NILFS (loop6): discard dirty block: blocknr=41, size=1024
[  320.344513][ T7511] NILFS (loop6): discard dirty block: blocknr=18446744073709551615, size=1024
[  320.370890][ T7511] NILFS (loop6): discard dirty block: blocknr=18446744073709551615, size=1024
[  320.381978][ T7511] NILFS (loop6): discard dirty block: blocknr=18446744073709551615, size=1024
[  320.391718][ T7511] NILFS (loop6): discard dirty page: offset=0, ino=4
[  320.440749][ T7511] NILFS (loop6): discard dirty block: blocknr=40, size=1024
[  320.471024][ T7511] NILFS (loop6): discard dirty block: blocknr=18446744073709551615, size=1024
[  320.515608][ T7511] NILFS (loop6): discard dirty block: blocknr=18446744073709551615, size=1024
[  320.529805][T10195] netlink: 51 bytes leftover after parsing attributes in process `syz.5.1204'.
[  320.539289][ T7511] NILFS (loop6): discard dirty block: blocknr=18446744073709551615, size=1024
[  320.759229][T10186] loop0: detected capacity change from 0 to 32768
[  320.927313][T10186] XFS (loop0): DAX unsupported by block device. Turning off DAX.
[  320.971490][T10186] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  321.288185][T10186] XFS (loop0): Ending clean mount
[  321.387230][T10186] XFS (loop0): Quotacheck needed: Please wait.
[  321.521134][T10186] XFS (loop0): Quotacheck: Done.
[  321.705240][   T49] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  321.729472][T10227] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  321.789986][ T5771] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  322.024601][T10229] loop6: detected capacity change from 0 to 4096
[  322.173017][T10229] ntfs3: loop6: Mark volume as dirty due to NTFS errors
[  322.222010][T10229] ntfs3: loop6: Failed to load $Extend (-22).
[  322.253449][ T7138] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  322.261948][T10229] ntfs3: loop6: Failed to initialize $Extend.
[  322.386432][T10233] loop0: detected capacity change from 0 to 256
[  322.404059][    C0] vkms_vblank_simulate: vblank timer overrun
[  322.449088][T10233] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x9b1b127f, utbl_chksum : 0xe619d30d)
[  322.525614][ T7138] usb 4-1: Using ep0 maxpacket: 8
[  322.534129][ T7138] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  322.553599][ T7138] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  322.577172][ T7138] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  322.588032][ T7138] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  322.612259][ T7138] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  322.649280][T10237] netlink: 'syz.5.1218': attribute type 4 has an invalid length.
[  322.693512][ T7138] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  322.713719][ T7138] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  322.713766][T10238] netlink: 'syz.5.1218': attribute type 4 has an invalid length.
[  322.983918][ T7138] usb 4-1: usb_control_msg returned -32
[  322.990736][ T7138] usbtmc 4-1:16.0: can't read capabilities
[  323.036911][T10246] loop5: detected capacity change from 0 to 2048
[  323.077722][ T7138] libceph: connect (1)[c::]:6789 error -101
[  323.087702][T10246] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  323.123042][   T27] libceph: connect (1)[c::]:6789 error -101
[  323.139874][   T27] libceph: mon0 (1)[c::]:6789 connect error
[  323.142408][ T7138] libceph: mon0 (1)[c::]:6789 connect error
[  323.209873][ T7138] libceph: connect (1)[c::]:6789 error -101
[  323.253580][ T7138] libceph: mon0 (1)[c::]:6789 connect error
[  323.417918][   T27] libceph: connect (1)[c::]:6789 error -101
[  323.426843][   T27] libceph: mon0 (1)[c::]:6789 connect error
[  323.560298][ T7138] libceph: connect (1)[c::]:6789 error -101
[  323.571943][ T7138] libceph: mon0 (1)[c::]:6789 connect error
[  323.642376][T10254] syz.6.1223 (10254) used greatest stack depth: 16872 bytes left
[  323.752400][T10240] ceph: No mds server is up or the cluster is laggy
[  323.755460][T10247] ceph: No mds server is up or the cluster is laggy
[  323.982392][   T27] usb 4-1: USB disconnect, device number 16
[  324.121002][T10256] loop5: detected capacity change from 0 to 32768
[  324.136335][T10256] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop5 scanned by syz.5.1224 (10256)
[  324.239688][T10256] BTRFS info (device loop5): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  324.279024][T10256] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm
[  324.308232][T10256] BTRFS info (device loop5): using free space tree
[  324.401755][T10256] BTRFS info (device loop5): enabling ssd optimizations
[  324.418163][T10256] BTRFS info (device loop5): auto enabling async discard
[  324.722246][T10290] loop3: detected capacity change from 0 to 1024
[  324.773565][ T7285] BTRFS info (device loop5): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  325.154675][ T5943] hfsplus: b-tree write err: -5, ino 25
[  325.223974][ T5943] hfsplus: b-tree write err: -5, ino 4
[  325.229835][ T5943] hfsplus: b-tree write err: -5, ino 2
[  325.265013][ T5943] hfsplus: b-tree write err: -5, ino 20
[  325.418715][T10293] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1233'.
[  325.442390][    C0] vkms_vblank_simulate: vblank timer overrun
[  325.483695][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  325.592499][T10288] loop0: detected capacity change from 0 to 32768
[  325.779462][T10288] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  326.026906][T10288] XFS (loop0): Ending clean mount
[  326.075554][T10288] XFS (loop0): Quotacheck needed: Please wait.
[  326.248693][T10288] XFS (loop0): Quotacheck: Done.
[  326.402152][T10321] loop6: detected capacity change from 0 to 1024
[  326.660584][ T5771] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  326.705454][T10321] hfsplus: b-tree write err: -5, ino 20
[  327.000474][   T49] hfsplus: b-tree write err: -5, ino 25
[  327.013562][   T49] hfsplus: b-tree write err: -5, ino 4
[  327.019575][   T49] hfsplus: b-tree write err: -5, ino 2
[  327.048027][T10314] loop3: detected capacity change from 0 to 32768
[  327.094326][T10314] (syz.3.1238,10314,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  327.144668][T10314] (syz.3.1238,10314,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  327.270334][T10314] JBD2: Ignoring recovery information on journal
[  327.471733][T10314] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  328.039090][T10331] loop0: detected capacity change from 0 to 32768
[  328.055640][T10331] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.1241 (10331)
[  328.102943][T10331] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  328.120370][T10331] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  328.131225][T10331] BTRFS info (device loop0): using free space tree
[  328.216757][ T5769] ocfs2: Unmounting device (7,3) on (node local)
[  328.364620][T10331] BTRFS info (device loop0): enabling ssd optimizations
[  328.390519][T10331] BTRFS info (device loop0): auto enabling async discard
[  328.825074][ T5771] BTRFS info (device loop0): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  329.168478][T10367] loop6: detected capacity change from 0 to 256
[  329.297224][T10367] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  329.436112][T10370] loop3: detected capacity change from 0 to 512
[  329.526580][T10370] EXT4-fs: Mount option(s) incompatible with ext2
[  329.539586][   T28] audit: type=1800 audit(1776270459.334:128): pid=10367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1250" name="file1" dev="loop6" ino=1048639 res=0 errno=0
[  329.564090][    C1] vkms_vblank_simulate: vblank timer overrun
[  329.909951][    C1] vkms_vblank_simulate: vblank timer overrun
[  330.438196][T10364] loop5: detected capacity change from 0 to 32768
[  330.580581][T10364] XFS (loop5): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  330.691409][T10402] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1260'.
[  330.827378][T10364] XFS (loop5): Ending clean mount
[  331.070769][ T7285] XFS (loop5): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  331.425612][    C1] vkms_vblank_simulate: vblank timer overrun
[  331.658922][T10431] loop3: detected capacity change from 0 to 256
[  331.779356][    C1] vkms_vblank_simulate: vblank timer overrun
[  331.844447][T10431] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  331.880986][    C1] vkms_vblank_simulate: vblank timer overrun
[  331.953517][   T27] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  332.006906][   T28] audit: type=1800 audit(1776270461.804:129): pid=10431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1267" name="file1" dev="loop3" ino=1048640 res=0 errno=0
[  332.035125][    C1] vkms_vblank_simulate: vblank timer overrun
[  332.163339][   T27] usb 7-1: Using ep0 maxpacket: 32
[  332.191841][   T27] usb 7-1: config 0 has an invalid interface number: 184 but max is 0
[  332.233107][   T27] usb 7-1: config 0 has no interface number 0
[  332.257841][   T27] usb 7-1: config 0 interface 184 has no altsetting 0
[  332.291850][   T27] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  332.335723][   T27] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  332.370568][   T27] usb 7-1: Product: syz
[  332.387294][   T27] usb 7-1: Manufacturer: syz
[  332.405206][   T27] usb 7-1: SerialNumber: syz
[  332.444098][   T27] usb 7-1: config 0 descriptor??
[  332.467577][   T27] smsc75xx v1.0.0
[  333.301585][T10459] loop3: detected capacity change from 0 to 512
[  333.329732][T10459] EXT4-fs: Ignoring removed bh option
[  333.404902][T10459] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended
[  333.576383][T10459] EXT4-fs (loop3): 1 truncate cleaned up
[  333.656420][T10459] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  333.720032][   T27] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71
[  333.732840][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  333.814029][   T27] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  333.846505][   T27] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  333.860268][T10459] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.1271: bg 0: block 465: padding at end of block bitmap is not set
[  333.893715][   T27] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  333.933060][T10459] EXT4-fs (loop3): Delayed block allocation failed for inode 13 at logical offset 3 with max blocks 9 with error 28
[  333.953750][   T27] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[  333.993361][   T27] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  334.029043][T10459] EXT4-fs (loop3): This should not happen!! Data will be lost
[  334.029043][T10459] 
[  334.044098][   T27] smsc75xx: probe of 7-1:0.184 failed with error -71
[  334.071150][   T27] usb 7-1: USB disconnect, device number 10
[  334.083424][T10459] EXT4-fs (loop3): Total free blocks count 0
[  334.090822][T10459] EXT4-fs (loop3): Free/Dirty block details
[  334.142670][T10459] EXT4-fs (loop3): free_blocks=0
[  334.175070][   T28] audit: type=1800 audit(1776270463.974:130): pid=10472 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1271" name="file1" dev="loop3" ino=13 res=0 errno=0
[  334.196348][T10459] EXT4-fs (loop3): dirty_blocks=9
[  334.203344][    C1] vkms_vblank_simulate: vblank timer overrun
[  334.251583][T10459] EXT4-fs (loop3): Block reservation details
[  334.258036][T10459] EXT4-fs (loop3): i_reserved_data_blocks=9
[  334.378137][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  334.654906][T10482] tls_set_device_offload_rx: netdev not found
[  334.694097][T10483] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  334.714275][T10483] overlayfs: failed to set xattr on upper
[  334.738055][T10483] overlayfs: ...falling back to redirect_dir=nofollow.
[  334.763719][T10483] overlayfs: ...falling back to index=off.
[  334.792235][T10483] overlayfs: ...falling back to xino=off.
[  334.811173][T10483] overlayfs: maximum fs stacking depth exceeded
[  335.593456][   T27] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  335.768016][T10508] pim6reg1: entered promiscuous mode
[  335.774616][T10508] pim6reg1: entered allmulticast mode
[  335.783588][   T27] usb 4-1: Using ep0 maxpacket: 32
[  335.792337][   T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  335.806184][ T5835] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  335.823707][   T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  335.836786][   T27] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  335.847613][   T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  335.864883][   T27] usb 4-1: config 0 descriptor??
[  335.894362][   T27] hub 4-1:0.0: USB hub found
[  336.033793][ T5835] usb 7-1: Using ep0 maxpacket: 16
[  336.057710][ T5835] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  336.096700][ T5835] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  336.111784][ T5835] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  336.123872][ T5835] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  336.138542][   T27] hub 4-1:0.0: 1 port detected
[  336.147948][ T5835] usb 7-1: config 0 descriptor??
[  336.578570][ T5835] HID 045e:07da: Invalid code 65791 type 1
[  336.599716][ T5835] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.0013/input/input19
[  336.635111][ T5835] microsoft 0003:045E:07DA.0013: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0
[  336.797762][   T27] hub 4-1:0.0: activate --> -90
[  337.218991][ T5835] usb 4-1: USB disconnect, device number 17
[  337.231233][T10519] loop5: detected capacity change from 0 to 256
[  337.458460][   T27] usb 7-1: USB disconnect, device number 11
[  337.763586][ T5835] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  337.963562][ T5835] usb 1-1: Using ep0 maxpacket: 32
[  337.970007][ T5835] usb 1-1: too many configurations: 17, using maximum allowed: 8
[  337.990434][ T5835] usb 1-1: config 0 has an invalid interface number: 2 but max is 0
[  338.002349][ T5835] usb 1-1: config 0 has no interface number 0
[  338.009793][ T5835] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  338.026452][ T5835] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  338.044219][ T5835] usb 1-1: config 0 has an invalid interface number: 2 but max is 0
[  338.070806][ T5835] usb 1-1: config 0 has no interface number 0
[  338.092934][ T5835] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  338.106815][ T5835] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  338.128202][ T5835] usb 1-1: config 0 has an invalid interface number: 2 but max is 0
[  338.142219][ T5835] usb 1-1: config 0 has no interface number 0
[  338.149210][ T5835] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  338.161171][ T5835] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  338.223561][ T5835] usb 1-1: config 0 has an invalid interface number: 2 but max is 0
[  338.233687][ T5835] usb 1-1: config 0 has no interface number 0
[  338.240118][ T5835] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  338.255991][ T5835] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  338.269821][ T5835] usb 1-1: config 0 has an invalid interface number: 2 but max is 0
[  338.282132][ T5835] usb 1-1: config 0 has no interface number 0
[  338.297588][ T5835] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  338.309082][ T5835] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  338.320643][ T5835] usb 1-1: config 0 has an invalid interface number: 2 but max is 0
[  338.330631][ T5835] usb 1-1: config 0 has no interface number 0
[  338.337146][ T5835] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  338.347391][ T5835] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  338.360897][ T5835] usb 1-1: config 0 has an invalid interface number: 2 but max is 0
[  338.369373][ T5835] usb 1-1: config 0 has no interface number 0
[  338.388886][ T5835] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  338.413306][ T5835] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  338.436066][ T5835] usb 1-1: config 0 has an invalid interface number: 2 but max is 0
[  338.444366][    T8] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  338.458784][ T5835] usb 1-1: config 0 has no interface number 0
[  338.468264][ T5835] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  338.485889][ T5835] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  338.515799][ T5835] usb 1-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2
[  338.526864][ T5835] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  338.546316][ T5835] usb 1-1: Product: syz
[  338.555170][ T5835] usb 1-1: Manufacturer: syz
[  338.565787][ T5835] usb 1-1: SerialNumber: syz
[  338.589548][ T5835] usb 1-1: config 0 descriptor??
[  338.606139][ T5835] etas_es58x 1-1:0.2: Starting syz syz (Serial Number syz)
[  338.623633][    T8] usb 6-1: Using ep0 maxpacket: 8
[  338.635774][    T8] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  338.663356][    T8] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  338.693337][    T8] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  338.732205][    T8] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  338.769166][    T8] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  338.803416][    T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  338.891846][ T5835] etas_es58x 1-1:0.2: could not parse product info: '424242424242'
[  339.046805][    T8] usb 6-1: GET_CAPABILITIES returned 0
[  339.052502][    T8] usbtmc 6-1:16.0: can't read capabilities
[  339.064549][T10530] loop3: detected capacity change from 0 to 32768
[  339.129004][T10530] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1302 (10530)
[  339.156386][T10530] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  339.193452][T10530] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  339.202718][T10530] BTRFS info (device loop3): setting nodatasum
[  339.223481][T10530] BTRFS info (device loop3): force zlib compression, level 3
[  339.231772][T10530] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8)
[  339.259866][T10530] BTRFS info (device loop3): use lzo compression, level 0
[  339.284853][T10530] BTRFS info (device loop3): turning on flush-on-commit
[  339.292508][T10530] BTRFS info (device loop3): enabling auto defrag
[  339.313504][T10530] BTRFS info (device loop3): max_inline at 4096
[  339.323874][T10530] BTRFS info (device loop3): using free space tree
[  339.358582][    T8] usb 1-1: USB disconnect, device number 16
[  339.383600][    T8] etas_es58x 1-1:0.2: Disconnecting syz syz
[  339.396213][  T969] usb 6-1: USB disconnect, device number 9
[  339.527874][T10530] BTRFS info (device loop3): enabling ssd optimizations
[  339.998493][ T5769] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  340.297152][T10571] loop5: detected capacity change from 0 to 2048
[  340.506831][T10571] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  340.718960][   T28] audit: type=1804 audit(1776270470.484:131): pid=10571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1306" name="/newroot/189/file1/file1" dev="loop5" ino=15 res=1 errno=0
[  340.865798][ T7285] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  341.043721][T10592] netlink: 'syz.3.1321': attribute type 1 has an invalid length.
[  341.054205][ T7138] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  341.253593][ T7138] usb 1-1: Using ep0 maxpacket: 16
[  341.275707][ T7138] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  341.304792][ T7138] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  341.327879][ T7138] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  341.362328][ T7138] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  341.381921][ T7138] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  341.393431][ T7138] usb 1-1: Product: syz
[  341.397907][ T7138] usb 1-1: Manufacturer: syz
[  341.414586][ T7138] usb 1-1: SerialNumber: syz
[  341.553748][T10603] syzkaller1: tun_chr_ioctl cmd 1074025677
[  341.574530][T10603] syzkaller1: Refused to change device type
[  341.893540][ T7138] usb 1-1: 0:2 : does not exist
[  342.774009][ T5812] usb 1-1: USB disconnect, device number 17
[  342.846463][T10617] loop6: detected capacity change from 0 to 32768
[  342.911064][T10613] loop3: detected capacity change from 0 to 40427
[  342.942621][T10617] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  342.967893][T10613] F2FS-fs (loop3): invalid crc value
[  343.016451][T10613] F2FS-fs (loop3): Found nat_bits in checkpoint
[  343.055496][T10617] XFS (loop6): Ending clean mount
[  343.193587][T10613] F2FS-fs (loop3): Start checkpoint disabled!
[  343.209390][   T28] audit: type=1804 audit(1776270473.004:132): pid=10617 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.1320" name="/newroot/221/file1/file1" dev="loop6" ino=6150 res=1 errno=0
[  343.249962][T10613] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  343.514522][ T7511] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  343.799886][ T5941] kworker/u4:24: attempt to access beyond end of device
[  343.799886][ T5941] loop3: rw=1, sector=45096, nr_sectors = 8 limit=40427
[  343.852249][ T5941] kworker/u4:24: attempt to access beyond end of device
[  343.852249][ T5941] loop3: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[  343.903683][ T5941] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  343.912747][ T5941] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  343.943184][ T5941] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  345.215496][T10666] loop0: detected capacity change from 0 to 4096
[  345.259579][T10671] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  345.296992][   T28] audit: type=1800 audit(1776270475.094:133): pid=10666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1337" name="file1" dev="loop0" ino=15 res=0 errno=0
[  345.395660][T10654] comedi comedi2: reset error (fatal)
[  345.675798][T10675] loop6: detected capacity change from 0 to 2048
[  345.750449][T10675] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  345.771460][T10675] ext4 filesystem being mounted at /223/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  345.853703][T10675] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1338'.
[  345.961386][ T7511] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  346.210172][T10686] netlink: 'syz.6.1343': attribute type 5 has an invalid length.
[  346.593480][ T5813] usb 1-1: new full-speed USB device number 18 using dummy_hcd
[  346.629284][T10682] loop5: detected capacity change from 0 to 40427
[  346.651337][T10682] F2FS-fs (loop5): invalid crc value
[  346.665301][T10682] F2FS-fs (loop5): Found nat_bits in checkpoint
[  346.733706][T10682] F2FS-fs (loop5): Start checkpoint disabled!
[  346.742624][T10682] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  346.805878][ T5813] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  346.840618][ T5813] usb 1-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[  346.862540][ T5813] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  346.893461][ T5813] usb 1-1: Product: syz
[  346.908033][ T5813] usb 1-1: Manufacturer: syz
[  346.913171][ T5813] usb 1-1: SerialNumber: syz
[  346.950283][ T5813] usb 1-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[  347.028294][ T5924] kworker/u4:16: attempt to access beyond end of device
[  347.028294][ T5924] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  347.049447][ T5924] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  347.057978][ T5924] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  347.388816][ T5813] usb 1-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter)
[  347.576379][T10699] loop6: detected capacity change from 0 to 32768
[  347.606332][T10699] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.1355 (10699)
[  347.664988][T10699] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  347.677998][T10699] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm
[  347.687543][T10699] BTRFS info (device loop6): using free space tree
[  347.738073][T10699] BTRFS info (device loop6): enabling ssd optimizations
[  347.747862][T10699] BTRFS info (device loop6): auto enabling async discard
[  347.929286][ T5927] BTRFS info (device loop6): qgroup scan completed (inconsistency flag cleared)
[  348.079978][ T7511] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  348.462785][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  349.376601][    T8] usb 1-1: USB disconnect, device number 18
[  350.097323][T10752] loop5: detected capacity change from 0 to 64
[  350.304744][T10748] loop0: detected capacity change from 0 to 32768
[  350.326793][T10748] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.1359 (10748)
[  350.367967][T10748] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  350.401065][T10754] ==================================================================
[  350.409402][T10754] BUG: KFENCE: use-after-free read in dvb_device_open+0xca/0x370
[  350.409402][T10754] 
[  350.419828][T10754] Use-after-free read at 0xffff88823bd0af18 (in kfence-#132):
[  350.427454][T10754]  dvb_device_open+0xca/0x370
[  350.432201][T10754]  chrdev_open+0x5cc/0x6a0
[  350.436765][T10754]  do_dentry_open+0x8c6/0x1500
[  350.441683][T10754]  path_openat+0x27f1/0x3230
[  350.446429][T10754]  do_filp_open+0x1f5/0x430
[  350.451242][T10754]  do_sys_openat2+0x134/0x1d0
[  350.455419][T10748] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  350.456053][T10754]  __x64_sys_openat+0x139/0x160
[  350.470385][T10754]  do_syscall_64+0x55/0xa0
[  350.474946][T10754]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  350.481250][T10754] 
[  350.483703][T10754] kfence-#132: 0xffff88823bd0a000-0xffff88823bd0a0ef, size=240, cache=skbuff_head_cache
[  350.483703][T10754] 
[  350.495987][T10754] allocated by task 5924 on cpu 0 at 349.325113s:
[  350.502539][T10754]  __alloc_skb+0x103/0x2c0
[  350.507204][T10754]  nsim_dev_trap_report_work+0x293/0xb00
[  350.513041][T10754]  process_scheduled_works+0xa5d/0x15d0
[  350.518626][T10754]  worker_thread+0xa55/0xfc0
[  350.523253][T10754]  kthread+0x2fa/0x390
[  350.527472][T10754]  ret_from_fork+0x48/0x80
[  350.532048][T10754]  ret_from_fork_asm+0x11/0x20
[  350.536948][T10754] 
[  350.539315][T10754] freed by task 5924 on cpu 0 at 349.325188s:
[  350.545452][T10754]  nsim_dev_trap_report_work+0x76f/0xb00
[  350.551151][T10754]  process_scheduled_works+0xa5d/0x15d0
[  350.556730][T10754]  worker_thread+0xa55/0xfc0
[  350.561472][T10754]  kthread+0x2fa/0x390
[  350.565682][T10754]  ret_from_fork+0x48/0x80
[  350.570308][T10754]  ret_from_fork_asm+0x11/0x20
[  350.575301][T10754] 
[  350.577656][T10754] CPU: 1 PID: 10754 Comm: syz.3.1363 Not tainted syzkaller #0
[  350.585270][T10754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  350.595453][T10754] RIP: 0010:dvb_device_open+0xca/0x370
[  350.601410][T10754] Code: 8b 3f 4d 85 ff 0f 84 83 01 00 00 4c 89 64 24 08 4d 8d 67 18 4c 89 e5 48 c1 ed 03 80 7c 1d 00 00 74 08 4c 89 e7 e8 36 bc dc fa <4d> 8b 2c 24 4d 85 ed 0f 84 5e 01 00 00 4c 89 e8 48 c1 e8 03 80 3c
[  350.621709][T10754] RSP: 0018:ffffc9000be877f0 EFLAGS: 00010246
[  350.627902][T10754] RAX: 1ffffffff2ec65ef RBX: dffffc0000000000 RCX: 0000000000000000
[  350.636092][T10754] RDX: 0000000000000001 RSI: 0000000000000008 RDI: 00000000ffffffff
[  350.644179][T10754] RBP: 1ffff110477a15e3 R08: ffffffff8df00c4f R09: 1ffffffff1be0189
[  350.652267][T10754] R10: dffffc0000000000 R11: fffffbfff1be018a R12: ffff88823bd0af18
[  350.660969][T10754] R13: 1ffff920017d0f0c R14: ffff888026255248 R15: ffff88823bd0af00
[  350.669408][T10754] FS:  00007f3f1b3bc6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  350.678463][T10754] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  350.685537][T10754] CR2: ffff88823bd0af18 CR3: 000000006505d000 CR4: 00000000003506e0
[  350.693654][T10754] Call Trace:
[  350.697258][T10754]  <TASK>
[  350.700503][T10754]  ? do_raw_spin_unlock+0x121/0x230
[  350.705924][T10754]  chrdev_open+0x5cc/0x6a0
[  350.710728][T10754]  ? cd_forget+0x160/0x160
[  350.715296][T10754]  ? fsnotify_perm+0x3ed/0x5e0
[  350.720286][T10754]  ? cd_forget+0x160/0x160
[  350.725108][T10754]  do_dentry_open+0x8c6/0x1500
[  350.730294][T10754]  path_openat+0x27f1/0x3230
[  350.735677][T10754]  ? do_sys_openat2+0xda/0x1d0
[  350.740618][T10754]  ? verify_lock_unused+0x140/0x140
[  350.746057][T10754]  ? do_filp_open+0x430/0x430
[  350.750887][T10754]  ? __virt_addr_valid+0x18c/0x540
[  350.756135][T10754]  do_filp_open+0x1f5/0x430
[  350.760909][T10754]  ? vfs_tmpfile+0x490/0x490
[  350.765647][T10754]  ? _raw_spin_unlock+0x28/0x40
[  350.770542][T10754]  ? alloc_fd+0x58f/0x630
[  350.775498][T10754]  do_sys_openat2+0x134/0x1d0
[  350.780335][T10754]  ? do_sys_open+0xe0/0xe0
[  350.784837][T10754]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  350.791206][T10754]  ? lock_chain_count+0x20/0x20
[  350.796114][T10754]  ? lock_chain_count+0x20/0x20
[  350.801111][T10754]  __x64_sys_openat+0x139/0x160
[  350.806113][T10754]  do_syscall_64+0x55/0xa0
[  350.810745][T10754]  ? clear_bhb_loop+0x40/0x90
[  350.815785][T10754]  ? clear_bhb_loop+0x40/0x90
[  350.820845][T10754]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  350.826952][T10754] RIP: 0033:0x7f3f1a55d04e
[  350.831487][T10754] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  350.851679][T10754] RSP: 002b:00007f3f1b3bbb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  350.860478][T10754] RAX: ffffffffffffffda RBX: 00007f3f1b3bc6c0 RCX: 00007f3f1a55d04e
[  350.868589][T10754] RDX: 0000000000040002 RSI: 00007f3f1b3bbc00 RDI: ffffffffffffff9c
[  350.876913][T10754] RBP: 00007f3f1b3bbc00 R08: 0000000000000000 R09: 0000000000000000
[  350.885319][T10754] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[  350.893572][T10754] R13: 00007f3f1a816038 R14: 00007f3f1a815fa0 R15: 00007ffe04b6d188
[  350.901690][T10754]  </TASK>
[  350.904833][T10754] ==================================================================
[  350.913346][T10754] Kernel panic - not syncing: KFENCE: panic_on_warn set ...
[  350.921947][T10754] CPU: 1 PID: 10754 Comm: syz.3.1363 Not tainted syzkaller #0
[  350.929474][T10754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  350.939669][T10754] Call Trace:
[  350.943027][T10754]  <TASK>
[  350.946171][T10754]  dump_stack_lvl+0x18c/0x250
[  350.951198][T10754]  ? show_regs_print_info+0x20/0x20
[  350.956451][T10754]  ? load_image+0x420/0x420
[  350.961650][T10754]  panic+0x2dc/0x730
[  350.965595][T10754]  ? bpf_jit_dump+0xd0/0xd0
[  350.970148][T10754]  check_panic_on_warn+0x84/0xa0
[  350.975311][T10754]  kfence_report_error+0x77b/0xa50
[  350.980839][T10754]  ? kfence_print_stack+0x2c0/0x2c0
[  350.986178][T10754]  ? dvb_device_open+0xca/0x370
[  350.991604][T10754]  ? chrdev_open+0x5cc/0x6a0
[  350.996634][T10754]  ? do_dentry_open+0x8c6/0x1500
[  351.001724][T10754]  ? path_openat+0x27f1/0x3230
[  351.006996][T10754]  ? do_filp_open+0x1f5/0x430
[  351.011889][T10754]  ? do_sys_openat2+0x134/0x1d0
[  351.016926][T10754]  ? __x64_sys_openat+0x139/0x160
[  351.022019][T10754]  ? do_syscall_64+0x55/0xa0
[  351.026838][T10754]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  351.033958][T10754]  ? _raw_spin_lock+0x40/0x40
[  351.038785][T10754]  kfence_handle_page_fault+0x52c/0x700
[  351.044388][T10754]  ? trim_init_extable+0x6f0/0x6f0
[  351.049539][T10754]  ? rcu_guarded_free+0x50/0x50
[  351.054611][T10754]  ? search_bpf_extables+0x36b/0x3c0
[  351.060091][T10754]  ? search_bpf_extables+0x26/0x3c0
[  351.065638][T10754]  page_fault_oops+0x1a3/0x930
[  351.070499][T10754]  ? __mutex_trylock_common+0x159/0x260
[  351.076169][T10754]  ? ex_get_fixup_type+0x70/0x70
[  351.081928][T10754]  ? kernelmode_fixup_or_oops+0xf0/0xf0
[  351.087531][T10754]  ? is_prefetch+0x451/0x690
[  351.092619][T10754]  ? page_fault_oops+0x930/0x930
[  351.097780][T10754]  ? __bad_area_nosemaphore+0xaa/0x690
[  351.103557][T10754]  exc_page_fault+0xac/0x100
[  351.108371][T10754]  ? mutex_lock_nested+0x20/0x20
[  351.114329][T10754]  asm_exc_page_fault+0x26/0x30
[  351.119268][T10754] RIP: 0010:dvb_device_open+0xca/0x370
[  351.125151][T10754] Code: 8b 3f 4d 85 ff 0f 84 83 01 00 00 4c 89 64 24 08 4d 8d 67 18 4c 89 e5 48 c1 ed 03 80 7c 1d 00 00 74 08 4c 89 e7 e8 36 bc dc fa <4d> 8b 2c 24 4d 85 ed 0f 84 5e 01 00 00 4c 89 e8 48 c1 e8 03 80 3c
[  351.146239][T10754] RSP: 0018:ffffc9000be877f0 EFLAGS: 00010246
[  351.152445][T10754] RAX: 1ffffffff2ec65ef RBX: dffffc0000000000 RCX: 0000000000000000
[  351.161002][T10754] RDX: 0000000000000001 RSI: 0000000000000008 RDI: 00000000ffffffff
[  351.169088][T10754] RBP: 1ffff110477a15e3 R08: ffffffff8df00c4f R09: 1ffffffff1be0189
[  351.177356][T10754] R10: dffffc0000000000 R11: fffffbfff1be018a R12: ffff88823bd0af18
[  351.185624][T10754] R13: 1ffff920017d0f0c R14: ffff888026255248 R15: ffff88823bd0af00
[  351.193661][T10754]  ? do_raw_spin_unlock+0x121/0x230
[  351.199123][T10754]  chrdev_open+0x5cc/0x6a0
[  351.203863][T10754]  ? cd_forget+0x160/0x160
[  351.208818][T10754]  ? fsnotify_perm+0x3ed/0x5e0
[  351.214166][T10754]  ? cd_forget+0x160/0x160
[  351.218734][T10754]  do_dentry_open+0x8c6/0x1500
[  351.223954][T10754]  path_openat+0x27f1/0x3230
[  351.228624][T10754]  ? do_sys_openat2+0xda/0x1d0
[  351.233465][T10754]  ? verify_lock_unused+0x140/0x140
[  351.238858][T10754]  ? do_filp_open+0x430/0x430
[  351.243574][T10754]  ? __virt_addr_valid+0x18c/0x540
[  351.248947][T10754]  do_filp_open+0x1f5/0x430
[  351.253772][T10754]  ? vfs_tmpfile+0x490/0x490
[  351.259496][T10754]  ? _raw_spin_unlock+0x28/0x40
[  351.265227][T10754]  ? alloc_fd+0x58f/0x630
[  351.269628][T10754]  do_sys_openat2+0x134/0x1d0
[  351.274732][T10754]  ? do_sys_open+0xe0/0xe0
[  351.279620][T10754]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  351.285747][T10754]  ? lock_chain_count+0x20/0x20
[  351.291273][T10754]  ? lock_chain_count+0x20/0x20
[  351.296357][T10754]  __x64_sys_openat+0x139/0x160
[  351.301603][T10754]  do_syscall_64+0x55/0xa0
[  351.306145][T10754]  ? clear_bhb_loop+0x40/0x90
[  351.310966][T10754]  ? clear_bhb_loop+0x40/0x90
[  351.315868][T10754]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  351.322588][T10754] RIP: 0033:0x7f3f1a55d04e
[  351.327139][T10754] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  351.346975][T10754] RSP: 002b:00007f3f1b3bbb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  351.355542][T10754] RAX: ffffffffffffffda RBX: 00007f3f1b3bc6c0 RCX: 00007f3f1a55d04e
[  351.363645][T10754] RDX: 0000000000040002 RSI: 00007f3f1b3bbc00 RDI: ffffffffffffff9c
[  351.371849][T10754] RBP: 00007f3f1b3bbc00 R08: 0000000000000000 R09: 0000000000000000
[  351.380117][T10754] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[  351.388387][T10754] R13: 00007f3f1a816038 R14: 00007f3f1a815fa0 R15: 00007ffe04b6d188
[  351.397444][T10754]  </TASK>
[  351.401110][T10754] Kernel Offset: disabled
[  351.406408][T10754] Rebooting in 86400 seconds..