last executing test programs:

1m37.304915844s ago: executing program 3 (id=51):
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs/dynamic_events\x00', 0x2, 0x0)
write(r0, &(0x7f0000000100)='e:__group/myevent sched.sched_switch', 0x24)

1m37.199733097s ago: executing program 3 (id=52):
syz_emit_ethernet(0x62, 0x0, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc262, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x18, {[@global=@item_4={0x3, 0x1, 0x6, "1c33267f"}, @global=@item_012={0x1, 0x1, 0x1, '\x00'}, @global=@item_4={0x3, 0x1, 0xa, "86c2e8ce"}, @local=@item_012={0x1, 0x2, 0x0, "04"}, @main=@item_012={0x1, 0x0, 0xa, "01"}, @local=@item_012={0x1, 0x2, 0x0, "01"}, @main=@item_4={0x3, 0x0, 0xa, "ad31ec07"}, @global=@item_012={0x0, 0x1, 0x7}]}}, 0x0}, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44400)

1m35.022537959s ago: executing program 3 (id=75):
syz_open_dev$evdev(&(0x7f0000002640), 0x1bbc, 0x801)
mkdirat(0xffffffffffffff9c, &(0x7f0000002680)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f00000026c0)='./debug\x00', &(0x7f0000002700)='debugfs\x00', 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000002740)='./debug/tracing/trace_pipe\x00', 0x20480, 0x4)
pselect6(0x40, &(0x7f0000002780)={0x0, 0x3, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x7}, &(0x7f00000027c0)={0x1f, 0x0, 0x8, 0x5, 0xfffffffffffffff8, 0x0, 0x4000000000}, 0x0, 0x0, 0x0)

1m34.912549693s ago: executing program 3 (id=79):
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20846, 0x12)
pwritev(r0, &(0x7f00000027c0)=[{&(0x7f00000003c0)="9162dbcf223fc3d5d700a7be1eccbb9d089aa42be5a26ebda2325c6400515cd0c4995523bafd98b9cb3da0dcddabf516b2aaeb3ac010d3f9af970bfc35460e14cb92cdc7812308d93f3dc4ad9f4dd32acf31ac960941073e894e728a7b052716b6ebbff42d00a54a90a7ea0594d7c7183d9833808eec84a1f049d88258c98973bb9ec33942b3d44024a673394e80159defc1b465db9498e6688f3ca805ea5cdb1cf52f2f0a539a7f07b215eadc62bad07496dfac9c9a5f69a42c7703d049068622d32c4e6e2940ac58ee02a4352f442156826a22e2751a35cc07193228677712b61c12762035f5aaed520491ae9a98b518e2", 0xf2}, {&(0x7f0000000500)="f7cfb4563c723ca46b24f1a609d882341bf2a3cb423f20509ba664a7340600db0d2707a230793d6694de50e8832056e418444a4eb6095e32193a8f444fb632f47b8992b7023ecc5e", 0x48}, {&(0x7f0000000580)="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", 0xd1b}], 0x3, 0x5dac, 0xdb1)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
pwrite64(r1, &(0x7f0000000280)='+', 0x1, 0x0)

1m34.585618801s ago: executing program 3 (id=82):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./proc/sys/net/ipv4/conf/syz_tun/rp_filter\x00', 0x1, 0x0)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
write$cgroup_pid(r0, &(0x7f0000000040)=r1, 0x12)

1m34.363312336s ago: executing program 3 (id=83):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000000880)=[{{&(0x7f0000000140)={0xa, 0x4e23, 0xf, @private0={0xfc, 0x0, '\x00', 0x1}, 0x405}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000280)="b7", 0x1}], 0x1}}], 0x1, 0x20004881)
shutdown(r0, 0x1)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3b}}}, 0xffff, 0xffc0}, 0x90)

1m19.283590594s ago: executing program 32 (id=83):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000000880)=[{{&(0x7f0000000140)={0xa, 0x4e23, 0xf, @private0={0xfc, 0x0, '\x00', 0x1}, 0x405}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000280)="b7", 0x1}], 0x1}}], 0x1, 0x20004881)
shutdown(r0, 0x1)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3b}}}, 0xffff, 0xffc0}, 0x90)

34.43044183s ago: executing program 5 (id=810):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x80)
set_mempolicy(0x8006, &(0x7f0000000480)=0xfff, 0x5)
r1 = memfd_create(&(0x7f0000000680)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\aD\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000900)={0x0, 0x0, 0x940a, 0x1000007})
write(r0, &(0x7f0000000940)='4', 0x1)

33.831895604s ago: executing program 5 (id=825):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00')
preadv(r1, &(0x7f00000048c0)=[{&(0x7f0000000340)=""/169, 0xa9}], 0x1, 0x9b90, 0x1)

33.787989645s ago: executing program 5 (id=826):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000500)={[{@init_itable}]}, 0x1, 0x79f, &(0x7f0000000f80)="$eJzs3c1rHOUfAPDvbJKmSfv7JYKg9RQQNFC6MTVtFTxUPIhgoaBn27DZhppNtmQ3pQkBW0TwIqh4EPTSsy/15tWXq/4XHqSlalqseJDI7Eu7aXabbM3uhubzgck+z8xsnue7z8wzz+wMOwHsWWPpn0zEoYj4MIkYqc1PImKgkuqPOFld787aai6dklhff+P3pLLO7bXVXDS8J3WglnkyIn54L+JwZnO5peWVuelCIb9Yy0+U5y9MlJZXjpyfn57Nz+YXjk9OTR09cezE8Z2L9c+fVw7e+OjVZ78++fe7T1z74MckTsbB2rLGOHbKWIzVPpOB9CPc4JWdLqzHko3Zfb2qB+1Jd82+6l4eh2Ik+iqpFoa6WTMAoFPWAYC9651eVwAA6Jb69wC311Zz9am330h0182XI2J/Nf769c3qkv7aNbv9leugw7eTDVdGkogY3YHyxyLi82/f+jKdotYOyQ78X4CtXL4SEWdHxzb3/8mmexba9dyDFq4PVl7G7pu9144/0EvfpeOfF5qN/zJ3xz/RZPwz2GTffRhb7/+Z67VE3w4Ut0k6/nup4d62Ow3x14z21XL/q4z5BpJz5wv5tG/7f0SMx8Bgmp+srNp85DZ+659brcpvHP/98fHbX6Tlp6/31shc7x/c+J6Z6fL0f4277uaViKf6m8Wf3G3/pMX49/Q2y3jtxfc/a7UsjT+Ntz5tjr+z1q9GPNO0/e+1ZdLy/sT+YyeOT1Q2h4n6RtHEN798Otyq/Mb2T6e0/Pq5QDek7T/84PhHk8b7NUvtl/HT1ZHvWy3bOv7m2/++5M1Kun6j4aXpcnlxMmJf8vrm+Ufvvbeer6+fxj/+dPP9v1ps8+0/PSc8u834+2/89tXDx99ZafwzbbV/+4lrd+Za9t3ba/+pSmq8Nmc7/d8W9bocD701AwAAAAAAAAAAAAAAAAAAAAAAAED7MhFxMJJM9m46k8lmq8/wfjyGM4ViqXz4XHFpYSYqz8oejYFM/acuRxp+D3Wy9nv49fzR+/LPR8RjEfHJ4FAln80VCzO9Dh4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAag60eP5/6tfBXtcOAOiY/b2uAADQdY7/ALD3tHf8H+pYPQCA7nH+DwB7z7aP/2c7Ww8AoHvaPf/v61A9AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeGSdPnUqndb/WlvNpfmZi8tLc8WLR2bypbns/FIumysuXsjOFouzhXw2V5xv+Y8uV18KxeKFqVhYujRRzpfKE6XllTPzxaWF8pnz89Oz+TP5ga5FBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADbV1pemZsuFPKLEg9MDO2OauyaRH/simo8Com+2BXVuD/R2EsM9a6DAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjl/g0AAP//3BEuHw==")
truncate(&(0x7f0000000c40)='./file1\x00', 0x2fffffd)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000c80)='./file1\x00', 0x101042, 0x0)
pwrite64(r0, &(0x7f0000000cc0)='E', 0x1, 0x4fed3)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000d00)={0x17c04, 0xffffffffffffffff, 0x4f003, 0x100000001, 0x3})

33.401430854s ago: executing program 5 (id=829):
syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000380)='./file1\x00', 0x210000, &(0x7f00000003c0)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000000480)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000a00)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80), 0x4008, &(0x7f0000000ac0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f0000000b00)='./file0\x00')
mknodat(0xffffffffffffff9c, &(0x7f0000000b40)='./file5\x00', 0x61c0, 0x700)

32.995021424s ago: executing program 5 (id=832):
setuid(0xee01)
r0 = semget$private(0x0, 0x4, 0x29b)
semop(r0, &(0x7f0000000180)=[{0x0, 0x203}, {}], 0x2)
setresgid(0xee00, 0xee01, 0x0)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000))

31.614129978s ago: executing program 5 (id=839):
syz_mount_image$reiserfs(&(0x7f0000000100), &(0x7f00000000c0)='./file1\x00', 0x8488, &(0x7f0000000000), 0xfc, 0x10fd, &(0x7f0000004800)="$eJzs2T9rFEEYBvBnds8/3cqmXwQtLCQknF8ghcK1ttqIpDJVrlL8OH4cTWUf0msRsF9Zb/dO5UTwTm1+PzjmvYd9Z2fKmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMZsmnkhxUSTtlVZKSdN3F4ipJN+V33tdVSp6eLpaPz+dPlknqb4+XZ0kZuoa2tMf3brfzdt4et48OTu5/WL5+8+rF2dnp+ThNSZfL6/1vpYzrAQAAAH7U76z5z+8HAAAAfmdvFwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6hvNnU7FVWSknTdxeIqSbel78Y/Wh8AAACwu5Iqz5tt+eoaYONhPjZlnQ/jlzLUR3m3pR8AAAD4pf7WWHz/fb3c3JzHH2S2PpcP2d3Mcni4+j8O+XyS1EmOfpr88vrty+lX+vpv7wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAAAAAPYKAAD///F61s8=")
syz_mount_image$fuse(0x0, &(0x7f00000025c0)='./file0\x00', 0x2000000, 0x0, 0x1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e)
renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)

31.489225251s ago: executing program 33 (id=839):
syz_mount_image$reiserfs(&(0x7f0000000100), &(0x7f00000000c0)='./file1\x00', 0x8488, &(0x7f0000000000), 0xfc, 0x10fd, &(0x7f0000004800)="$eJzs2T9rFEEYBvBnds8/3cqmXwQtLCQknF8ghcK1ttqIpDJVrlL8OH4cTWUf0msRsF9Zb/dO5UTwTm1+PzjmvYd9Z2fKmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMZsmnkhxUSTtlVZKSdN3F4ipJN+V33tdVSp6eLpaPz+dPlknqb4+XZ0kZuoa2tMf3brfzdt4et48OTu5/WL5+8+rF2dnp+ThNSZfL6/1vpYzrAQAAAH7U76z5z+8HAAAAfmdvFwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6hvNnU7FVWSknTdxeIqSbel78Y/Wh8AAACwu5Iqz5tt+eoaYONhPjZlnQ/jlzLUR3m3pR8AAAD4pf7WWHz/fb3c3JzHH2S2PpcP2d3Mcni4+j8O+XyS1EmOfpr88vrty+lX+vpv7wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAAAAAPYKAAD///F61s8=")
syz_mount_image$fuse(0x0, &(0x7f00000025c0)='./file0\x00', 0x2000000, 0x0, 0x1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e)
renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)

5.205945893s ago: executing program 4 (id=1100):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/net/bonding_masters\x00', 0x1, 0x20)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff)

5.098785935s ago: executing program 4 (id=1101):
io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0xe, &(0x7f0000000240)={0x3, 0x0, &(0x7f00000000c0), 0x0}, 0x20)
r0 = syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0)
ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000100)={0x80000000, 0x0, &(0x7f0000000200)=[{{}, {0x80000000, <r1=>0x0}}, {{}, {<r2=>0x80000000, <r3=>0x0}}]})
ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000300)={r2, 0x0, &(0x7f0000000280)=[{{}, {<r4=>0x80000000}}]})
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f00000001c0)={{r4, r1, 0x1, [0x0, 0xf7df]}, {r2, r3, 0x4, [0x6]}, 0x0, [0x8, 0x3df]})

4.986317568s ago: executing program 4 (id=1102):
r0 = syz_create_resource$futex(&(0x7f0000000200)=0x1)
r1 = syz_create_resource$futex(&(0x7f0000000240)=0x1)
futex(r1, 0xb, 0x1, 0x0, r0, 0x403)
r2 = syz_create_resource$futex(&(0x7f00000002c0))
futex(r1, 0x3, 0x2, 0x0, r2, 0x0)

4.269502776s ago: executing program 0 (id=1108):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610040000109022d0101100000000904000003fe03010009cd8d1f0039830000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000980)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x20, 0x3, 0x1, 0x81}})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r1, 0x5b04, 0x0)

4.10333298s ago: executing program 4 (id=1111):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f00000008c0)={[{@journal_dev={'journal_dev', 0x3d, 0x3}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@quota}, {@noload}, {@user_xattr}, {@mblk_io_submit}, {@noinit_itable}, {@noblock_validity}, {@nogrpid}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}]}, 0xfa, 0x47f, &(0x7f0000000300)="$eJzs3M1vFOUfAPDvTF94/7U/xBcQpIpG4ktLy4scvGg04aCJiR4wnmpbSKVQQ2sihGj1gEdD4t34XxhOejHqRROvejckxHAB9bJmdmZgWXbbLd12affzSab7PDNP93m+M/PsPjPP7gbQtYayP0nE9oj4PSIG8uzdBYbyh1s3Lk38fePSRBKVytt/JdVyN29cmiiLlv+3Lc9UKkV+U4N6L78XMT4zM3W+yI/Mn/1wZO7CxRenz46fnjo9dW7s+PEjh/f1Hxs72pY4s7hu7vlkdu/uE+9eeXPi5JX3f0rSyOOOujjaZSjfuw090+7KOmxHTTrprd2y/5c76UZnAp3UExHZ4eqr9v+B6Iktt7cNxOufd7RxwKqqVCqVRV6VFyrABpZEp1sAdEb5Rp9d/5bLGg09HgjXX8kvgLK4bxVLvqU30jyxv6/u+nZ7G+sfioiTC/98nS2xSvchAABqfZeNf15oNP5L45E80Z/9+V8xhzIYEf+PiJ0R8VBE7IqIhyOqZR+NiMeWWX/9DMm945/02n0H14Js/PdyMbd19/gvLYsM9hS5HdX4+5JT0zNTh4p9cjD6Np2aTqZGF6nj+9d++7LZttrxX7Zk9ZdjwaId13rrbtBNjs+PryTmWtc/i9jT2yj+JMppnCQidkfEnvusY/q53qbblo5/Ec2ftmWVbyKezY//QtTFX0qazk+OvnRs7OjI5piZOjRSnhX3+vnXy281q39F8bdBdvy3Njz/b8c/mGyOmLtw8Ux1vnZuWU+fdZ24/McXTa9piviz7tXK+X9iR3H+9yfvVFf0Fxs+Hp+fPz8a0Z+8ce/6sTvPVubL8ln8Bw807v87486eeDwi9kbEvoh4IrsoLNr+ZEQ8FREHFtkJP7769AdLxN/g+K/NXGkW/+RSxz9qj//yEz1nfri6dPybI6LZ8T9STR0s1rTy+tdqA1ey7wAAAGC9yD8Dn6TDt9NpOjycf4Z/V2xNZ2bn5p8/NfvRucl83nsw+tLyTtdAzf3Q0eLecJkfq8sfLu4bf9WzpZofnpidmex08NDltjXp/5k/ezrdOmDVtWEeDVin9H/oXvo/dKdE/4eupv9D92rU/z9tWnr421VtDLCmWn//v7rY95yAdaiF/r+QPzQfFQDrk+t/6F76P3Slpt+NT1f0lf81T/xb/J7hg9KejZ+I9IFoxsZP9Lb8YxbLSFQG8v6frdnUsEynX5kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADa478AAAD///u35Ec=")
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x2000008, &(0x7f0000001440)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file2\x00', 0x20402, 0xb6)

3.67224403s ago: executing program 4 (id=1112):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000340)='./proc/fs/nfsd\x00', &(0x7f0000000380)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc/fs/nfsd/threads\x00', 0x1, 0x0)
write(r0, &(0x7f0000000900)="2a20000000df", 0x6)

3.297318s ago: executing program 2 (id=1115):
r0 = creat(&(0x7f0000000000)='./file0\x00', 0xc9a9c042ad77c5e5)
ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r0, 0xc008aec1, &(0x7f0000000180)={0x1, 0x0, [{0x40000000, 0x8, 0x0, 0x5, 0x3, 0x36cb, 0x10201}]})
write$binfmt_elf32(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c460502028d04000000000000000300060004400000b8010000380000005e02000005000000040020001400"], 0xff46)
close(r0)
execve(&(0x7f00000006c0)='./file0\x00', 0x0, 0x0)

3.136759523s ago: executing program 2 (id=1120):
syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0x0, &(0x7f0000009780), 0x1, 0x9716, &(0x7f0000012ec0)="$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")
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0)
setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), &(0x7f0000000880)=ANY=[], 0xbfe, 0x0)
setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000180), 0x0, 0x0, 0x2)

2.893220129s ago: executing program 6 (id=1123):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="3c1204"], 0x98)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000340)=ANY=[@ANYBLOB="2f00d92b50"], 0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000300)=[@in6={0xa, 0x4e20, 0x44, @dev={0xfe, 0x80, '\x00', 0x42}, 0x5}]}, &(0x7f0000000140)=0x10)

2.751943453s ago: executing program 6 (id=1124):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160-generic\x00'}, 0x67)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000017c0)={0x14, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc}, 0xfffffef2}, 0x1, 0x0, 0x0, 0x4040}, 0x4c840)

2.126331338s ago: executing program 2 (id=1125):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8)
ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000240)=0xac7a627bf2033e4f)
pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000300)="00214500002c00000000400600000a0000010a000002", 0x16}], 0x1, 0x0, 0x0)

1.505995513s ago: executing program 2 (id=1126):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1, 0x4, 0x4, 0xff, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x9, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1, 0x14, &(0x7f0000000840)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x15, 0x1, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r3, 0x0, 0xe, 0x0, &(0x7f00000009c0)='\x00'/14, 0x0, 0x80000004, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.505792073s ago: executing program 6 (id=1127):
mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000004200)='./mnt/trace_marker\x00', 0x1, 0x1a)
r1 = openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x1ff)

1.504542803s ago: executing program 0 (id=1136):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x6, 0x0, 0x1, 0x0, 0x3, 0x8, 0x80, 0x0, 0x8}, 0xe)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000180)={r1}, &(0x7f0000000200)=0x8)

1.503670513s ago: executing program 1 (id=1128):
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff})
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
unshare(0x400)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
splice(r0, &(0x7f0000000180)=0x8000000000000001, r1, 0x0, 0x1, 0x4)

1.442518264s ago: executing program 1 (id=1129):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0)
ftruncate(r0, 0x8800000)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendfile(r1, r0, 0x0, 0x578410eb)
shutdown(r2, 0x0)

1.426716585s ago: executing program 0 (id=1130):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000600)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nodioread_nolock}, {@nojournal_checksum}, {@lazytime}, {@errors_remount}, {@mblk_io_submit}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0)
copy_file_range(r0, 0x0, r0, &(0x7f00000000c0)=0xae8, 0x863, 0x0)

1.377293826s ago: executing program 6 (id=1131):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4)
r1 = socket$inet6(0xa, 0x3, 0x88)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x3f, 0x0}, @in=@local, 0xee24, 0x0, 0x10, 0x3, 0x2}, {0x81000, 0x200000004, 0x40000000007, 0xffffffff, 0x100000000, 0x0, 0x200000003, 0x9}, {0x2, 0x0, 0x0, 0x7}, 0x5, 0x0, 0x1, 0x0, 0x4, 0x3}, {{@in=@loopback, 0x4d5, 0x6c}, 0xa, @in6=@loopback, 0x34fe, 0x4, 0x8, 0x0, 0x9075, 0xef, 0x10000}}, 0xe8)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x8}}, 0x7}, 0x1c)

1.304309528s ago: executing program 1 (id=1132):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000080)={[{@errors_remount}, {@usrquota}, {@minixdf}, {@nomblk_io_submit}]}, 0x1, 0x527, &(0x7f00000027c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x8)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
read$FUSE(r1, &(0x7f0000000480)={0x2020, 0x0, 0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
fchown(r0, r2, r3)

1.278045379s ago: executing program 0 (id=1133):
syz_mount_image$ext4(&(0x7f0000003400)='ext2\x00', &(0x7f0000003440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000000, &(0x7f0000000000)={[{@orlov}, {@errors_remount}]}, 0xfe, 0x2a4, &(0x7f0000003580)="$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")
syz_mount_image$vfat(&(0x7f0000003840), &(0x7f0000003880)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000003980))
mkdir(&(0x7f00000039c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
creat(&(0x7f0000003b00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x185)
syz_mount_image$vfat(&(0x7f0000003c00), &(0x7f0000003c40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x820051, 0x0, 0x1, 0x0, &(0x7f0000003d40))

1.158669892s ago: executing program 0 (id=1134):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032})
r1 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'syzkaller0\x00', 0x1})
writev(r0, &(0x7f0000000880)=[{&(0x7f0000000200)="010000000000220010000900000000010000000000020800450000740001400040063c817f0000017f00000104d204d2", 0x30}, {&(0x7f00000000c0)='\x00'/13, 0xd}, {&(0x7f0000000180)="409f2effd7664d17539ffac24b2e16c4a04d73cb80339582fa20951d20cf3e5e68dabd9152", 0x25}, {&(0x7f0000000240)="49fa747dae037914bc82ff160754d6b3122ce1bca41be5ad258cad25b507a51a05fe42eca35627a5c351ec", 0x2b}], 0x4)

1.019940055s ago: executing program 1 (id=1135):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz0\x00', {0x6, 0x7, 0x5, 0x7}, 0x3f, [0x6, 0x10000002, 0x18, 0x2, 0x8, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x40000001, 0x7, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xffffffeb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x8000007, 0x3, 0xc, 0x3, 0xba55, 0x8da8, 0x2a, 0x200, 0x2, 0x5, 0x2000000e, 0x6, 0x2, 0x8000006f, 0x8, 0x405, 0x80000000, 0x199d, 0x6, 0x7, 0xffffffff, 0xffffffff, 0x4, 0xa, 0x1000, 0x5, 0x3d, 0x8, 0x9, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x2, 0x4, 0xa, 0xfffffffc, 0x8, 0x7fff, 0x729, 0x1c32, 0x3, 0x1, 0x10000, 0x400, 0x7ffd, 0x5, 0x3, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x9, 0x14, 0xd, 0xfffffffd, 0x7, 0x9, 0xffffffff, 0x6, 0x4, 0x800, 0x0, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x37a, 0x9, 0xe, 0x5, 0x7, 0x6, 0x6, 0x8, 0x1, 0xe, 0x20007, 0x200, 0x3], [0x1, 0x8000c584, 0xffff, 0xcd3, 0xb, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0x1e88, 0x5, 0x80000003, 0xffff0000, 0x3f92, 0x1000, 0x0, 0x6611, 0x6, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x8, 0x6, 0x200003, 0x1, 0x5, 0x80, 0x8, 0x8001, 0x10000, 0x4, 0x4, 0x400004, 0x3, 0x7, 0x3, 0x8, 0xb3c, 0xbf23, 0x6, 0x5, 0x956, 0x0, 0x3ff, 0x80000e, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0x1000, 0x9, 0x7fffffff, 0x3, 0x80, 0x0, 0x7d, 0x401, 0x5], [0x80108e, 0xffff, 0x3, 0x3, 0x88, 0x80000002, 0x4000000, 0x4, 0x50, 0x2, 0x10000763, 0xb, 0x2402, 0x1, 0x5, 0x1000, 0x7f, 0x5, 0x8, 0x4, 0x0, 0x5, 0x3, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x6, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4004, 0x20008, 0x8a5, 0x7fff, 0x44, 0x409, 0x6, 0x4, 0x4, 0xe, 0x4, 0xfffffff7, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xffffffff, 0xd, 0x5, 0x101, 0xf, 0xf, 0x136, 0x6]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
readv(r0, &(0x7f0000000080)=[{&(0x7f0000000300)=""/63, 0x18}], 0x1)
write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f)

502.372827ms ago: executing program 4 (id=1137):
r0 = socket$netlink(0x10, 0x3, 0xf)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000014000000090a0500000000000000000002000007140000001100010000"], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x4004004)
read(r0, &(0x7f0000000200)=""/217, 0xd9)

330.817122ms ago: executing program 34 (id=1137):
r0 = socket$netlink(0x10, 0x3, 0xf)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000014000000090a0500000000000000000002000007140000001100010000"], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x4004004)
read(r0, &(0x7f0000000200)=""/217, 0xd9)

318.767492ms ago: executing program 2 (id=1139):
syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2)
r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082)
write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x100)
r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000200)='.\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

311.968143ms ago: executing program 6 (id=1140):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"/3002], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x3f)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000540)={r2, r1, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000100)={@broadcast, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5, 0xe}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "088200", 0x0, 0x2c, 0x0, @remote, @local}}}}, 0x0)

220.533154ms ago: executing program 1 (id=1141):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000800), 0x802, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000840)={'syz0\x00', {0x0, 0x0, 0x0, 0x2}, 0x0, [0x39, 0x3, 0x4000401, 0x8, 0xe, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2a, 0xfffffffd, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xfffffffd, 0x10000000, 0x99, 0x8, 0x0, 0x0, 0xfffffffd, 0x0, 0x7fffffff, 0xfffffffc, 0x5, 0xfffffff6, 0x0, 0x8, 0x800000, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x1], [0x3, 0x80, 0x0, 0x0, 0x4, 0x20000, 0x2000000, 0xedc0, 0x0, 0x5ee, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x2, 0x5, 0x0, 0x9, 0x1, 0x0, 0xfffffff8, 0x2, 0x0, 0x5, 0x400, 0x0, 0x0, 0x8, 0x40000, 0x0, 0xc0804000, 0x100, 0x0, 0xfffffffd, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x5, 0x4, 0x7, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0xfffffffe, 0xfffff986], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x80, 0xc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0xfffffffd, 0x2, 0xffffffff, 0x0, 0x8000, 0x0, 0x20, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x200, 0x2, 0xe, 0x80000000, 0x2, 0x47fff, 0x0, 0x0, 0x0, 0x3, 0xfffffffd, 0xf, 0x3, 0xffffff85, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0xf88, 0x0, 0x0, 0x0, 0x7ff], [0xfffffffe, 0x0, 0x4, 0x0, 0xfffefffe, 0x0, 0x2, 0x4, 0xfffffffc, 0xffffffff, 0x0, 0x2, 0xfffffffc, 0x4, 0x803, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10, 0x5, 0xfffffffe, 0xfff, 0x8, 0x4, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xea, 0x0, 0x1, 0xfffffffd, 0x8000000, 0x4, 0xffffffff, 0x0, 0x0, 0xffffe]}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_CREATE(r0, 0x5501)

115.889007ms ago: executing program 0 (id=1142):
r0 = syz_usb_connect$uac2(0x2, 0xa8, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x582, 0x4c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x96, 0x3, 0x1, 0x5, 0x30, 0x9, {0x8, 0xb, 0x0, 0x1, 0x1, 0x7, 0x20, 0x8c}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4000, 0x4, 0x1d, 0x7}, [@source_unit={0x8, 0x24, 0xa, 0x0, 0x1, 0xff, 0x23}, @output_terminal={0xc, 0x24, 0x3, 0x2, 0x307, 0x0, 0x4, 0x0, 0x7, 0x81}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0xb, 0x4, {0x8, 0x25, 0x1, 0x0, 0x0, 0x40, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x4, 0x1ccc, 0x5}, @as_header={0x10, 0x24, 0x1, 0x2, 0x1, 0x0, 0x4, 0x8, 0xb8, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x40, 0x6, 0x3, {0x8, 0x25, 0x1, 0x82, 0x3, 0xf3, 0x6}}}}}}}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, &(0x7f0000000700)={0x2c, 0x0, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac2(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000e40)={0x44, &(0x7f0000000b40)={0x0, 0xc, 0x3, "88960f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000400)={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

66.449069ms ago: executing program 6 (id=1151):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00')
preadv(r1, &(0x7f00000048c0)=[{&(0x7f0000000340)=""/169, 0xa9}], 0x1, 0x9b90, 0x1)

66.143169ms ago: executing program 2 (id=1143):
mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000004200)='./mnt/trace_marker\x00', 0x1, 0x1a)
r1 = openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x1ff)

0s ago: executing program 1 (id=1144):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
syz_usb_disconnect(r0)
syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000040)=ANY=[], 0x0)
ioctl$EVIOCRMFF(r0, 0x40085503, &(0x7f0000002380)=0x9c)

kernel console output (not intermixed with test programs):

p_enable returned -22
[  104.932929][ T4304] pl2303 6-1:1.0: pl2303 converter detected
[  104.943537][ T4304] usb 6-1: pl2303 converter now attached to ttyUSB0
[  105.001733][ T1108] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  105.183265][ T3093] tipc: Subscription rejected, illegal request
[  105.211743][    T7] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  105.261797][ T1108] usb 1-1: Using ep0 maxpacket: 8
[  105.281866][ T5524] pl2303 6-1:1.0: pl2303_vendor_write - failed to write [0007]: -110
[  105.303878][ T5524] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32
[  105.321854][ T5524] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32
[  105.341847][ T5524] pl2303 6-1:1.0: pl2303_vendor_read - failed to read [000a]: -32
[  105.382060][ T5524] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32
[  105.391976][ T1108] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  105.409798][ T1108] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  105.457229][ T1108] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  105.461866][    T7] usb 3-1: Using ep0 maxpacket: 8
[  105.487241][ T1108] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  105.516979][ T1108] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  105.540535][ T5564] mmap: syz.1.397 (5564) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[  105.561918][ T1108] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  105.581722][ T1108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  105.591961][    T7] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  105.607271][    T7] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[  105.634064][    T7] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[  105.656437][    T7] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[  105.671894][ T5522] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32
[  105.686396][    T7] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  105.698648][    T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  105.761827][ T5522] pl2303 ttyUSB0: error sending break = -32
[  105.763100][    T7] hub 3-1:1.0: bad descriptor, ignoring hub
[  105.772393][ T3519] usb 6-1: USB disconnect, device number 3
[  105.797701][ T3519] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0
[  105.811573][    T7] hub: probe of 3-1:1.0 failed with error -5
[  105.828745][    T7] cdc_wdm 3-1:1.0: skipping garbage
[  105.833592][ T3519] pl2303 6-1:1.0: device disconnected
[  105.838454][    T7] cdc_wdm 3-1:1.0: skipping garbage
[  105.872071][ T1108] usb 1-1: usb_control_msg returned -32
[  105.877676][ T1108] usbtmc 1-1:16.0: can't read capabilities
[  105.886079][    T7] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  105.919282][    T7] cdc_wdm 3-1:1.0: Unknown control protocol
[  106.003293][    T7] usb 3-1: USB disconnect, device number 7
[  106.090281][ T5555] loop4: detected capacity change from 0 to 32768
[  106.188255][ T5555] XFS (loop4): Mounting V5 Filesystem
[  106.281073][ T5589] netlink: 4 bytes leftover after parsing attributes in process `syz.1.404'.
[  106.319896][ T5555] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  106.371482][ T5555] XFS (loop4): Starting recovery (logdev: internal)
[  106.403920][ T5555] XFS (loop4): Ending recovery (logdev: internal)
[  106.421525][ T5555] XFS (loop4): AG 0: Corrupt btree 5 pointer at level 1 index 0.
[  106.441925][ T5555] XFS (loop4): Failed to initialize disk quotas.
[  106.492404][ T4189] XFS (loop4): Unmounting Filesystem
[  106.552164][ T5597] block nbd5: NBD_DISCONNECT
[  106.557091][ T5602] loop2: detected capacity change from 0 to 256
[  106.581232][ T5596] block nbd5: Disconnected due to user request.
[  106.613480][ T5602] exfat: Deprecated parameter 'utf8'
[  106.619032][ T5596] block nbd5: shutting down sockets
[  106.648402][ T5602] exfat: Deprecated parameter 'namecase'
[  106.664145][ T5602] exfat: Deprecated parameter 'utf8'
[  106.744077][ T5602] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[  106.760180][ T5612] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  107.180311][ T5635] loop1: detected capacity change from 0 to 16
[  107.241367][ T5635] erofs: (device loop1): erofs_superblock_csum_verify: invalid checksum 0x7cda66ab, 0x7bbbea8c expected
[  107.260462][ T4207] udevd[4207]: incorrect erofs checksum on /dev/loop1
[  107.286641][ T5644] raw_sendmsg: syz.5.428 forgot to set AF_INET. Fix it!
[  107.542460][ T5661] sctp: [Deprecated]: syz.5.434 (pid 5661) Use of struct sctp_assoc_value in delayed_ack socket option.
[  107.542460][ T5661] Use struct sctp_sack_info instead
[  107.550580][ T5665] loop4: detected capacity change from 0 to 128
[  107.630430][ T5665] EXT4-fs (loop4): Ignoring removed bh option
[  107.660142][ T5665] EXT4-fs (loop4): mounted filesystem without journal. Opts: bh,,errors=continue. Quota mode: none.
[  107.702794][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  107.724651][ T5665] ext4 filesystem being mounted at /90/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  107.743089][ T4397] usb 1-1: USB disconnect, device number 6
[  107.834533][ T5679] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  108.068236][ T5692] loop4: detected capacity change from 0 to 4096
[  108.089217][ T5697] netlink: 236 bytes leftover after parsing attributes in process `syz.0.448'.
[  108.101709][ T3519] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  108.140442][ T5692] NILFS (loop4): invalid segment: Checksum error in segment payload
[  108.160568][ T5692] NILFS (loop4): trying rollback from an earlier position
[  108.205392][ T5692] NILFS (loop4): recovery complete
[  108.213911][ T5698] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  108.351738][ T3519] usb 6-1: Using ep0 maxpacket: 32
[  108.384468][ T5704] loop4: detected capacity change from 0 to 512
[  108.427300][ T5702] rxe_eth0 speed is unknown, defaulting to 1000
[  108.468599][ T5704] EXT4-fs error (device loop4): ext4_orphan_get:1410: inode #15: comm syz.4.451: iget: bad extended attribute block 134217728
[  108.502386][ T5704] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm syz.4.451: couldn't read orphan inode 15 (err -117)
[  108.515041][ T3519] usb 6-1: config 0 has an invalid interface number: 184 but max is 0
[  108.531716][ T3519] usb 6-1: config 0 has no interface number 0
[  108.538316][ T5704] EXT4-fs (loop4): mounted filesystem without journal. Opts: prjquota,,errors=continue. Quota mode: writeback.
[  108.562985][ T5695] loop1: detected capacity change from 0 to 32768
[  108.565187][ T3519] usb 6-1: config 0 interface 184 has no altsetting 0
[  108.632642][   T25] audit: type=1800 audit(1792158303.133:7): pid=5704 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.451" name="file0" dev="loop4" ino=13 res=0 errno=0
[  108.661207][ T5704] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.451: invalid indirect mapped block 768 (level 1)
[  108.751525][ T5695] XFS (loop1): Mounting V5 Filesystem
[  108.757082][    T7] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  108.816416][ T3519] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  108.843092][ T3519] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.907883][ T3519] usb 6-1: Product: syz
[  108.949266][ T3519] usb 6-1: Manufacturer: syz
[  108.959824][ T3519] usb 6-1: SerialNumber: syz
[  109.012450][ T3519] usb 6-1: config 0 descriptor??
[  109.031785][    T7] usb 3-1: Using ep0 maxpacket: 8
[  109.034229][ T5695] XFS (loop1): Ending clean mount
[  109.057359][ T3519] smsc75xx v1.0.0
[  109.085284][ T5695] XFS (loop1): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair.
[  109.123340][   T25] audit: type=1804 audit(1792158303.613:8): pid=5695 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.446" name="/newroot/108/file1/file1" dev="loop1" ino=6150 res=1 errno=0
[  109.151962][    T7] usb 3-1: config index 0 descriptor too short (expected 74, got 45)
[  109.167003][    T7] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  109.212056][    T7] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  109.257301][    T7] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[  109.275452][ T3519] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71
[  109.295779][    T7] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  109.296282][ T3519] smsc75xx: probe of 6-1:0.184 failed with error -71
[  109.316453][    T7] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  109.350153][    T7] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  109.352983][ T3519] usb 6-1: USB disconnect, device number 4
[  109.385046][    T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  109.406892][ T4187] XFS (loop1): Unmounting Filesystem
[  109.683073][    T7] usb 3-1: GET_CAPABILITIES returned 0
[  109.688606][    T7] usbtmc 3-1:16.0: can't read capabilities
[  109.932983][ T5768] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  110.092214][ T5781] netlink: 8 bytes leftover after parsing attributes in process `syz.1.472'.
[  110.136945][ T5781] Dropped outbound packet type=1c
[  110.297547][ T5790] loop0: detected capacity change from 0 to 2048
[  110.349541][ T5790] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  110.358496][ T3519] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  110.423517][ T4304] usb 3-1: USB disconnect, device number 8
[  110.512338][   T25] audit: type=1800 audit(1792158305.013:9): pid=5760 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.463" name="bus" dev="loop0" ino=1367 res=0 errno=0
[  110.752024][ T3519] usb 5-1: config 1 has an invalid interface number: 3 but max is 0
[  110.779218][ T3519] usb 5-1: config 1 has no interface number 0
[  110.829743][ T5812] CIFS: Attempting to mount \\127.0.0.1\test
[  110.832279][ T5816] syz.1.484 sent an empty control message without MSG_MORE.
[  110.909164][ T5822] loop1: detected capacity change from 0 to 256
[  110.992240][ T3519] usb 5-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00
[  111.019965][ T3519] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.060752][ T3519] usb 5-1: Product: syz
[  111.078655][ T3519] usb 5-1: Manufacturer: syz
[  111.100151][ T3519] usb 5-1: SerialNumber: syz
[  111.374127][ T5850] netlink: 12 bytes leftover after parsing attributes in process `syz.5.493'.
[  111.432003][ T3519] usb 5-1: 3:0 : does not exist
[  111.437068][ T3519] usb 5-1: 3:0 : does not exist
[  111.439232][ T5856] FAULT_INJECTION: forcing a failure.
[  111.439232][ T5856] name failslab, interval 1, probability 0, space 0, times 0
[  111.461250][ T5856] CPU: 0 PID: 5856 Comm: syz.5.495 Not tainted syzkaller #0
[  111.468583][ T5856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  111.478650][ T5856] Call Trace:
[  111.481943][ T5856]  <TASK>
[  111.484885][ T5856]  dump_stack_lvl+0x188/0x250
[  111.489678][ T5856]  ? show_regs_print_info+0x20/0x20
[  111.494897][ T5856]  ? load_image+0x410/0x410
[  111.496074][ T3519] usb 5-1: USB disconnect, device number 5
[  111.499422][ T5856]  ? __might_sleep+0xf0/0xf0
[  111.499452][ T5856]  ? __lock_acquire+0x7d40/0x7d40
[  111.499476][ T5856]  should_fail+0x383/0x4b0
[  111.511976][ T4395] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  111.514885][ T5856]  should_failslab+0x5/0x20
[  111.514914][ T5856]  slab_pre_alloc_hook+0x51/0xc0
[  111.536325][ T5856]  __kmalloc+0x6b/0x340
[  111.540504][ T5856]  ? security_prepare_creds+0x47/0x130
[  111.545987][ T5856]  ? prepare_creds+0x3c/0x610
[  111.550685][ T5856]  security_prepare_creds+0x47/0x130
[  111.556172][ T5856]  prepare_creds+0x450/0x610
[  111.560793][ T5856]  __sys_setfsgid+0xc9/0x370
[  111.565866][ T5856]  ? lockdep_hardirqs_on+0x94/0x140
[  111.571174][ T5856]  do_syscall_64+0x4c/0xa0
[  111.575863][ T5856]  ? clear_bhb_loop+0x30/0x80
[  111.580594][ T5856]  ? clear_bhb_loop+0x30/0x80
[  111.585352][ T5856]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  111.591280][ T5856] RIP: 0033:0x7f8a2312e559
[  111.595707][ T5856] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  111.615409][ T5856] RSP: 002b:00007f8a21386028 EFLAGS: 00000246 ORIG_RAX: 000000000000007b
[  111.623844][ T5856] RAX: ffffffffffffffda RBX: 00007f8a233b5fa0 RCX: 00007f8a2312e559
[  111.632015][ T5856] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee00
[  111.640004][ T5856] RBP: 00007f8a231c58b0 R08: 0000000000000000 R09: 0000000000000000
[  111.648017][ T5856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  111.656094][ T5856] R13: 00007f8a233b6038 R14: 00007f8a233b5fa0 R15: 00007fffd3c2fe18
[  111.664627][ T5856]  </TASK>
[  111.667739][    C0] vkms_vblank_simulate: vblank timer overrun
[  111.685860][ T5812] CIFS: VFS: cifs_mount failed w/return code = -112
[  111.837558][ T4207] udevd[4207]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  111.841927][    T7] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  111.972094][ T4395] usb 2-1: too many endpoints for config 0 interface 0 altsetting 5: 66, using maximum allowed: 30
[  111.976875][ T5874] input: syz0 as /devices/virtual/input/input11
[  111.998494][ T4395] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  112.030206][ T4395] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  112.072230][ T4395] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 66
[  112.114860][ T4395] usb 2-1: config 0 interface 0 has no altsetting 0
[  112.137313][ T4395] usb 2-1: New USB device found, idVendor=0738, idProduct=1709, bcdDevice= 0.00
[  112.167185][ T4395] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  112.200486][ T4395] usb 2-1: config 0 descriptor??
[  112.322007][    T7] usb 1-1: unable to get BOS descriptor or descriptor too short
[  112.373016][ T1108] usb 6-1: new full-speed USB device number 5 using dummy_hcd
[  112.417184][    T7] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  112.417213][    T7] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  112.576364][    T7] usb 1-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40
[  112.576394][    T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  112.576413][    T7] usb 1-1: Product: syz
[  112.576427][    T7] usb 1-1: Manufacturer: syz
[  112.576441][    T7] usb 1-1: SerialNumber: syz
[  112.709351][ T4395] input: HID 0738:1709 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0738:1709.0006/input/input12
[  112.762837][ T5911] device batadv_slave_1 entered promiscuous mode
[  112.783258][ T5910] device batadv_slave_1 left promiscuous mode
[  112.806886][ T1108] usb 6-1: unable to get BOS descriptor or descriptor too short
[  112.873272][ T4395] saitek 0003:0738:1709.0006: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0738:1709] on usb-dummy_hcd.1-1/input0
[  112.940256][ T4395] usb 2-1: USB disconnect, device number 6
[  112.942065][    T7] usb 1-1: unit 4 not found!
[  112.970559][    T7] usb 1-1: Focusrite Scarlett Gen 2/3 Mixer Driver disabled; use options snd_usb_audio vid=0x1235 pid=0x8212 device_setup=1 to enable and report any issues to g@b4.vu
[  112.994833][ T1108] usb 6-1: unable to read config index 0 descriptor/start: -71
[  113.012052][ T1108] usb 6-1: can't read configurations, error -71
[  113.034511][ T5926] device syzkaller1 entered promiscuous mode
[  113.060153][ T5923] fido_id[5923]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory
[  113.141969][    T7] usb 1-1: USB disconnect, device number 7
[  113.425521][ T5939] loop5: detected capacity change from 0 to 512
[  113.437303][ T4177] udevd[4177]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  113.467310][ T5941] loop2: detected capacity change from 0 to 16
[  113.528972][ T5939] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF
[  113.589489][ T5946] loop1: detected capacity change from 0 to 256
[  113.592606][ T5943] device ip6gre1 entered promiscuous mode
[  113.602784][ T5939] FAT-fs (loop5): Filesystem has been set read-only
[  113.620016][ T5941] erofs: (device loop2): mounted with root inode @ nid 36.
[  113.646243][ T5941] erofs: (device loop2): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 36
[  113.680878][ T5922] loop4: detected capacity change from 0 to 32768
[  113.681526][ T5946] FAT-fs (loop1): bogus number of FAT sectors
[  113.700766][ T5946] FAT-fs (loop1): Can't find a valid FAT filesystem
[  113.702002][ T5941] erofs: (device loop2): z_erofs_readahead: readahead error at page 3600 @ nid 36
[  113.749786][ T5950] erofs: (device loop2): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 36
[  113.775727][ T5950] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117]
[  113.776156][ T5941] erofs: (device loop2): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 36
[  113.806410][    T7] kernel write not supported for file /sequencer2 (pid: 7 comm: kworker/0:0)
[  113.827479][ T5941] erofs: (device loop2): z_erofs_readahead: readahead error at page 3599 @ nid 36
[  113.854092][ T5946] netlink: 104 bytes leftover after parsing attributes in process `syz.1.519'.
[  113.941111][ T5922] JBD2: Ignoring recovery information on journal
[  113.989719][ T5964] loop0: detected capacity change from 0 to 512
[  114.073110][ T5964] EXT4-fs (loop0): Ignoring removed nobh option
[  114.159486][ T5964] fscrypt (loop0, inode 2): Error -61 getting encryption context
[  114.176440][ T5922] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  114.201761][    T7] usb 2-1: new full-speed USB device number 7 using dummy_hcd
[  114.210665][ T5964] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -61
[  114.298161][ T5964] EXT4-fs error (device loop0): ext4_orphan_get:1410: inode #13: comm syz.0.524: inode has both inline data and extents flags
[  114.359994][ T5964] EXT4-fs error (device loop0): ext4_orphan_get:1415: comm syz.0.524: couldn't read orphan inode 13 (err -117)
[  114.373243][ T5964] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,nouid32,nobh,stripe=0x000000000000ffff,block_validity,grpjquota=",errors=continue. Quota mode: writeback.
[  114.429025][ T5964] EXT4-fs (loop0): shut down requested (2)
[  114.522410][    T7] usb 2-1: not running at top speed; connect to a high speed hub
[  114.533032][ T4189] ocfs2: Unmounting device (7,4) on (node local)
[  114.624116][    T7] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  114.654982][    T7] usb 2-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[  114.685427][    T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  114.761240][ T6005] loop0: detected capacity change from 0 to 512
[  114.776679][    T7] usb 2-1: Found UVC 1.00 device <unnamed> (046d:0825)
[  114.807498][    T7] usb 2-1: No streaming interface found for terminal 2.
[  114.977982][ T3830] usb 2-1: USB disconnect, device number 7
[  115.098321][ T6024] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied.
[  115.211875][ T4268] usb 3-1: new full-speed USB device number 9 using dummy_hcd
[  115.257632][ T6037] rxe_eth0 speed is unknown, defaulting to 1000
[  115.597435][ T6039] loop4: detected capacity change from 0 to 32768
[  115.626919][ T4268] usb 3-1: unable to get BOS descriptor or descriptor too short
[  115.673959][ T6039] ERROR: (device loop4): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 3
[  115.673959][ T6039] 
[  115.681933][ T4268] usb 3-1: not running at top speed; connect to a high speed hub
[  115.702155][ T6039] ERROR: (device loop4): remounting filesystem as read-only
[  115.720763][ T6039] ERROR: (device loop4): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 3
[  115.720763][ T6039] 
[  115.812224][ T4268] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 4
[  115.827185][ T6057] loop1: detected capacity change from 0 to 1024
[  116.032021][ T4268] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[  116.051822][ T4268] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.078941][ T4268] usb 3-1: Product: syz
[  116.092023][ T4268] usb 3-1: Manufacturer: syz
[  116.096980][ T4268] usb 3-1: SerialNumber: syz
[  116.327062][ T6082] loop0: detected capacity change from 0 to 512
[  116.387450][ T4268] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  116.417657][ T6082] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  116.488742][ T6073] loop4: detected capacity change from 0 to 32768
[  116.504969][ T6082] ext4 filesystem being mounted at /138/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  116.538360][ T6088] netlink: 60 bytes leftover after parsing attributes in process `syz.1.566'.
[  116.612214][ T4268] usb 3-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[  116.625510][ T4268] usb 3-1: found format II with max.bitrate = 4, frame size=7372
[  116.729636][ T6100] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  116.744336][ T6073] XFS (loop4): Mounting V5 Filesystem
[  116.832691][ T6073] XFS (loop4): Ending clean mount
[  116.836852][ T6107] netlink: 'syz.0.570': attribute type 10 has an invalid length.
[  116.857189][ T6107] netlink: 40 bytes leftover after parsing attributes in process `syz.0.570'.
[  116.857672][ T4189] XFS (loop4): Unmounting Filesystem
[  116.882417][ T6107] device caif0 entered promiscuous mode
[  116.889049][ T6107] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  117.047307][ T4268] usb 3-1: invalid uac2 rates
[  117.061325][ T4268] usb 3-1: invalid uac2 rates
[  117.082607][ T4268] usb 3-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[  117.101765][ T4268] usb 3-1: found format II with max.bitrate = 4, frame size=7372
[  117.169400][ T6114] EXT4-fs error (device loop5): ext4_orphan_get:1410: inode #15: comm syz.5.575: iget: bad i_size value: 38620345925642
[  117.241871][ T6114] EXT4-fs error (device loop5): ext4_orphan_get:1415: comm syz.5.575: couldn't read orphan inode 15 (err -117)
[  117.261860][ T4268] usb 3-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0)
[  117.304623][ T6114] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  117.365648][ T4268] usb 3-1: USB disconnect, device number 9
[  117.626455][ T4207] udevd[4207]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  117.667253][ T6124] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  117.836493][ T6136] FAULT_INJECTION: forcing a failure.
[  117.836493][ T6136] name failslab, interval 1, probability 0, space 0, times 0
[  117.859569][ T6124] EXT4-fs (loop1): re-mounted. Opts: (null). Quota mode: none.
[  117.899710][ T6124] EXT4-fs (loop1): re-mounted. Opts: . Quota mode: none.
[  117.931387][ T6136] CPU: 0 PID: 6136 Comm: syz.5.583 Not tainted syzkaller #0
[  117.938718][ T6136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  117.950053][ T6136] Call Trace:
[  117.953999][ T6136]  <TASK>
[  117.956948][ T6136]  dump_stack_lvl+0x188/0x250
[  117.961667][ T6136]  ? show_regs_print_info+0x20/0x20
[  117.966897][ T6136]  ? load_image+0x410/0x410
[  117.971467][ T6136]  ? __might_sleep+0xf0/0xf0
[  117.976084][ T6136]  ? __lock_acquire+0x7d40/0x7d40
[  117.981139][ T6136]  should_fail+0x383/0x4b0
[  117.986290][ T6136]  should_failslab+0x5/0x20
[  117.990815][ T6136]  slab_pre_alloc_hook+0x51/0xc0
[  117.995772][ T6136]  __kmalloc+0x6b/0x340
[  117.999941][ T6136]  ? posix_acl_from_xattr+0xde/0x5a0
[  118.005247][ T6136]  posix_acl_from_xattr+0xde/0x5a0
[  118.010371][ T6136]  ? posix_xattr_acl+0x98/0xb0
[  118.015131][ T6136]  posix_acl_xattr_set+0x38/0x390
[  118.020143][ T6136]  ? ima_inode_post_setattr+0x320/0x320
[  118.025679][ T6136]  ? posix_acl_xattr_get+0x540/0x540
[  118.031077][ T6136]  __vfs_setxattr+0x3d8/0x410
[  118.035757][ T6136]  __vfs_setxattr_noperm+0x126/0x5e0
[  118.041048][ T6136]  vfs_setxattr+0x167/0x2e0
[  118.045548][ T6136]  ? xattr_permission+0x510/0x510
[  118.050655][ T6136]  ? _copy_from_user+0x111/0x170
[  118.055587][ T6136]  ? posix_acl_fix_xattr_from_user+0xcf/0x110
[  118.061723][ T6136]  setxattr+0x2cb/0x360
[  118.065922][ T6136]  ? path_setxattr+0x290/0x290
[  118.070721][ T6136]  ? __mnt_want_write+0x1e2/0x260
[  118.075770][ T6136]  path_setxattr+0x147/0x290
[  118.080352][ T6136]  ? simple_xattr_list_add+0xf0/0xf0
[  118.085804][ T6136]  ? lock_chain_count+0x20/0x20
[  118.090679][ T6136]  __x64_sys_setxattr+0xb7/0xd0
[  118.095546][ T6136]  do_syscall_64+0x4c/0xa0
[  118.099958][ T6136]  ? clear_bhb_loop+0x30/0x80
[  118.104629][ T6136]  ? clear_bhb_loop+0x30/0x80
[  118.109942][ T6136]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  118.116022][ T6136] RIP: 0033:0x7f8a2312e559
[  118.120431][ T6136] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  118.140061][ T6136] RSP: 002b:00007f8a21386028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc
[  118.148921][ T6136] RAX: ffffffffffffffda RBX: 00007f8a233b5fa0 RCX: 00007f8a2312e559
[  118.156884][ T6136] RDX: 00002000000018c0 RSI: 0000200000001800 RDI: 00002000000017c0
[  118.164844][ T6136] RBP: 00007f8a231c58b0 R08: 0000000000000003 R09: 0000000000000000
[  118.172804][ T6136] R10: 0000000000000024 R11: 0000000000000246 R12: 0000000000000000
[  118.180769][ T6136] R13: 00007f8a233b6038 R14: 00007f8a233b5fa0 R15: 00007fffd3c2fe18
[  118.188740][ T6136]  </TASK>
[  118.341132][ T6120] JBD2: Ignoring recovery information on journal
[  118.351751][ T4268] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  118.506706][ T6120] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  118.591761][ T4268] usb 5-1: Using ep0 maxpacket: 8
[  118.711917][ T4268] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  118.767576][ T4268] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  118.784700][ T4268] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  118.795584][ T4268] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  118.818615][ T4268] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  118.828619][ T4268] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.830107][ T6120] syz.0.578 (6120) used greatest stack depth: 20384 bytes left
[  118.933188][ T4188] ocfs2: Unmounting device (7,0) on (node local)
[  119.079653][ T6174] rxe_eth0 speed is unknown, defaulting to 1000
[  119.132078][ T4268] usb 5-1: GET_CAPABILITIES returned 0
[  119.138058][ T4268] usbtmc 5-1:16.0: can't read capabilities
[  119.151722][ T3830] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  119.354650][ T3519] usb 5-1: USB disconnect, device number 6
[  119.391783][    T7] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  119.406018][ T3830] usb 6-1: Using ep0 maxpacket: 8
[  119.551878][ T3830] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  119.582004][ T3830] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  119.644310][ T3830] pvrusb2: Hardware description: Terratec Grabster AV400
[  119.661778][ T3830] pvrusb2: **********
[  119.677232][ T3830] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  119.735507][ T3830] pvrusb2: Important functionality might not be entirely working.
[  119.759771][ T3830] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  119.786867][ T3830] pvrusb2: **********
[  119.830924][ T6192] netlink: 20 bytes leftover after parsing attributes in process `syz.0.605'.
[  119.869911][ T2423] pvrusb2: Invalid write control endpoint
[  119.982052][    T7] usb 3-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01
[  120.009724][    T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.033203][    T7] usb 3-1: Product: syz
[  120.037748][    T7] usb 3-1: Manufacturer: syz
[  120.048286][    T7] usb 3-1: SerialNumber: syz
[  120.087798][ T4268] usb 6-1: USB disconnect, device number 7
[  120.112872][    T7] ums-karma 3-1:1.0: USB Mass Storage device detected
[  120.177144][    T7] ums-karma 3-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller)
[  120.177144][    T7]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[  120.213724][ T2423] pvrusb2: Invalid write control endpoint
[  120.219858][ T2423] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  120.230068][ T2423] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  120.238744][ T2423] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  120.257693][ T2423] pvrusb2: Device being rendered inoperable
[  120.282186][ T2423] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  120.286642][ T6207] netlink: 'syz.0.612': attribute type 4 has an invalid length.
[  120.289636][ T2423] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  120.344966][ T2423] pvrusb2: Attached sub-driver cx25840
[  120.351257][ T2423] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  120.364427][ T2423] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  120.461908][ T3519] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  120.623923][    T7] ums-karma: probe of 3-1:1.0 failed with error -5
[  120.652386][    T7] usb 3-1: USB disconnect, device number 10
[  120.701818][ T3830] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  120.716792][ T3519] usb 2-1: Using ep0 maxpacket: 16
[  120.867069][ T3519] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  120.883942][ T3519] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  120.914321][ T3519] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  120.941490][ T3519] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  120.951177][ T3519] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  120.975953][ T3519] usb 2-1: config 0 descriptor??
[  121.081956][ T3830] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  121.101733][ T3830] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  121.110639][ T3830] usb 5-1: config 1 has no interface number 0
[  121.134306][ T6228] netlink: 4 bytes leftover after parsing attributes in process `syz.5.620'.
[  121.151764][ T3830] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[  121.204826][ T6226] netlink: 'syz.2.621': attribute type 21 has an invalid length.
[  121.228961][ T6226] netlink: 'syz.2.621': attribute type 3 has an invalid length.
[  121.255905][ T6226] netlink: 144 bytes leftover after parsing attributes in process `syz.2.621'.
[  121.312078][ T3830] usb 5-1: New USB device found, idVendor=0e41, idProduct=3020, bcdDevice= 0.40
[  121.331435][ T3830] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  121.350137][ T3830] usb 5-1: Product: syz
[  121.362126][ T3830] usb 5-1: Manufacturer: syz
[  121.366984][ T6234] set_capacity_and_notify: 5 callbacks suppressed
[  121.366998][ T6234] loop2: detected capacity change from 0 to 512
[  121.372294][ T3830] usb 5-1: SerialNumber: syz
[  121.464030][ T6234] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  121.478033][ T3519] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0
[  121.510393][ T3519] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0007/input/input13
[  121.556936][ T6234] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #16: comm syz.2.624: invalid indirect mapped block 4294967295 (level 0)
[  121.614550][ T6234] EXT4-fs (loop2): Remounting filesystem read-only
[  121.654786][ T6234] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #16: comm syz.2.624: invalid indirect mapped block 4294967295 (level 1)
[  121.674105][ T3519] microsoft 0003:045E:07DA.0007: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0
[  121.714184][ T6246] loop0: detected capacity change from 0 to 256
[  121.732563][ T3519] usb 2-1: USB disconnect, device number 8
[  121.743019][ T6246] exfat: Deprecated parameter 'utf8'
[  121.748533][ T6246] exfat: Deprecated parameter 'utf8'
[  121.762360][ T3830] usb 5-1: 1:0 : does not exist
[  121.762760][ T6234] EXT4-fs (loop2): Remounting filesystem read-only
[  121.767607][ T3830] usb 5-1: BAAD HEADSET c_chmask mismatch
[  121.815376][ T6234] EXT4-fs (loop2): 1 orphan inode deleted
[  121.817978][ T3830] snd-usb-audio: probe of 5-1:1.1 failed with error -22
[  121.837080][ T6246] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  121.843411][ T6234] EXT4-fs (loop2): 1 truncate cleaned up
[  121.894930][ T6234] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,lazytime,block_validity,block_validity,block_validity,quota,jqfmt=vfsv0,. Quota mode: writeback.
[  121.909255][ T3830] usb 5-1: USB disconnect, device number 7
[  121.940901][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  121.950774][ T6249] fido_id[6249]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  122.084267][ T6234] EXT4-fs (loop2): shut down requested (2)
[  122.382319][ T6261] loop4: detected capacity change from 0 to 128
[  122.478416][ T6261] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  122.562482][ T6261] FAT-fs (loop4): error, clusters badly computed (3 != 1)
[  122.581688][ T6261] FAT-fs (loop4): Filesystem has been set read-only
[  122.598228][ T6248] loop5: detected capacity change from 0 to 32768
[  122.704931][ T6248] ERROR: (device loop5): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt
[  122.704931][ T6248] 
[  122.724181][ T4189] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  122.768183][ T6248] ERROR: (device loop5): remounting filesystem as read-only
[  122.837706][ T6248] ERROR: (device loop5): jfs_unlink: 
[  122.837706][ T6248] 
[  123.194411][ T6248] ERROR: (device loop5): xtTruncate: XT_GETPAGE: xtree page corrupt
[  123.194411][ T6248] 
[  123.218335][ T6248] ERROR: (device loop5): diAllocBit: iag inconsistent
[  123.218335][ T6248] 
[  123.230243][ T6248] ERROR: (device loop5): remounting filesystem as read-only
[  123.238398][ T6248] ialloc: diAlloc returned -5!
[  123.506668][ T6295] loop0: detected capacity change from 0 to 2048
[  123.507227][ T6277] loop4: detected capacity change from 0 to 32768
[  123.528452][ T6299] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  123.613374][ T6295] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  123.622149][   T25] audit: type=1800 audit(1792158318.113:10): pid=6277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.638" name="file1" dev="loop4" ino=4 res=0 errno=0
[  123.864894][   T25] audit: type=1800 audit(1792158318.363:11): pid=6305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.638" name="file1" dev="loop4" ino=4 res=0 errno=0
[  124.191177][ T6320] loop5: detected capacity change from 0 to 8
[  124.351700][   T25] audit: type=1800 audit(1792158318.843:12): pid=6320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.659" name="file1" dev="loop5" ino=5 res=0 errno=0
[  124.668398][ T6322] loop2: detected capacity change from 0 to 32768
[  124.711862][ T1108] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  124.773840][ T6309] loop0: detected capacity change from 0 to 40427
[  124.793663][ T6322] XFS (loop2): Mounting V5 Filesystem
[  124.799971][ T6309] F2FS-fs (loop0): Invalid SB checksum offset: 0
[  124.830222][ T6309] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[  124.876457][ T6309] F2FS-fs (loop0): invalid crc value
[  124.930270][ T6322] XFS (loop2): Ending clean mount
[  124.938712][ T6309] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  124.955733][ T6355] loop5: detected capacity change from 0 to 512
[  124.986339][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  125.004574][ T6355] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  125.010888][ T1108] usb 2-1: Using ep0 maxpacket: 8
[  125.079160][ T4190] XFS (loop2): Unmounting Filesystem
[  125.080631][ T6355] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_nolock,resuid=0x0000000000000000,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback.
[  125.104497][ T6355] ext4 filesystem being mounted at /89/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  125.119298][ T6309] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0
[  125.127244][ T6309] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  125.182039][ T1108] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  125.190312][   T25] audit: type=1800 audit(1792158319.683:13): pid=6355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.669" name="file2" dev="loop5" ino=16 res=0 errno=0
[  125.215359][ T1108] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  125.228223][ T1108] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  125.238817][ T1108] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  125.249481][ T1108] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  125.346266][ T4188] attempt to access beyond end of device
[  125.346266][ T4188] loop0: rw=2049, want=45104, limit=40427
[  125.359854][ T1108] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  125.369308][ T1108] usb 2-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0
[  125.378321][ T1108] usb 2-1: Product: syz
[  125.448003][ T6365] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  125.681896][ T1108] usb 2-1: usb_control_msg returned -32
[  125.687513][ T1108] usbtmc 2-1:16.0: can't read capabilities
[  125.729716][ T6374] device syzkaller1 entered promiscuous mode
[  125.879232][ T6384] netlink: 'syz.2.681': attribute type 3 has an invalid length.
[  125.906804][ T6384] netlink: 92 bytes leftover after parsing attributes in process `syz.2.681'.
[  126.262045][ T3086] hfsplus: b-tree write err: -5, ino 25
[  126.268954][ T3086] hfsplus: b-tree write err: -5, ino 4
[  126.304073][ T3830] usb 2-1: USB disconnect, device number 9
[  126.310699][ T3086] hfsplus: b-tree write err: -5, ino 2
[  126.341441][ T6387] JBD2: Ignoring recovery information on journal
[  126.357717][ T3086] hfsplus: b-tree write err: -5, ino 26
[  126.461160][ T6387] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  126.703573][ T4189] ocfs2: Unmounting device (7,4) on (node local)
[  126.972713][ T6419] set_capacity_and_notify: 3 callbacks suppressed
[  126.972729][ T6419] loop6: detected capacity change from 0 to 1
[  127.004967][ T6420] FAULT_INJECTION: forcing a failure.
[  127.004967][ T6420] name failslab, interval 1, probability 0, space 0, times 0
[  127.019245][ T6419] Dev loop6: unable to read RDB block 1
[  127.035809][ T6419]  loop6: unable to read partition table
[  127.043882][ T6420] CPU: 0 PID: 6420 Comm: syz.0.692 Not tainted syzkaller #0
[  127.051290][ T6419] loop6: partition table beyond EOD, 
[  127.051293][ T6420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  127.056693][ T6420] Call Trace:
[  127.056707][ T6420]  <TASK>
[  127.056717][ T6420]  dump_stack_lvl+0x188/0x250
[  127.056745][ T6420]  ? show_regs_print_info+0x20/0x20
[  127.056762][ T6420]  ? load_image+0x410/0x410
[  127.056781][ T6420]  ? __might_sleep+0xf0/0xf0
[  127.056800][ T6420]  ? __lock_acquire+0x7d40/0x7d40
[  127.056829][ T6420]  should_fail+0x383/0x4b0
[  127.056853][ T6420]  should_failslab+0x5/0x20
[  127.056870][ T6420]  slab_pre_alloc_hook+0x51/0xc0
[  127.056887][ T6420]  ? getname_flags+0xb7/0x4f0
[  127.069240][ T6419] truncated
[  127.070496][ T6420]  kmem_cache_alloc+0x3d/0x280
[  127.073770][ T6419] loop_reread_partitions: partition scan of loop6 (�被x������ ) failed (rc=-5)
[  127.078189][ T6420]  getname_flags+0xb7/0x4f0
[  127.138347][ T6420]  __x64_sys_mknodat+0x94/0xc0
[  127.143133][ T6420]  do_syscall_64+0x4c/0xa0
[  127.147575][ T6420]  ? clear_bhb_loop+0x30/0x80
[  127.152274][ T6420]  ? clear_bhb_loop+0x30/0x80
[  127.156977][ T6420]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  127.162885][ T6420] RIP: 0033:0x7f01f63d6559
[  127.167338][ T6420] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  127.186956][ T6420] RSP: 002b:00007f01f462e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000103
[  127.195570][ T6420] RAX: ffffffffffffffda RBX: 00007f01f665dfa0 RCX: 00007f01f63d6559
[  127.203555][ T6420] RDX: 0000000000001000 RSI: 0000000000000000 RDI: ffffffffffffff9c
[  127.211553][ T6420] RBP: 00007f01f646d8b0 R08: 0000000000000000 R09: 0000000000000000
[  127.219647][ T6420] R10: 0000000000000700 R11: 0000000000000246 R12: 0000000000000000
[  127.227636][ T6420] R13: 00007f01f665e038 R14: 00007f01f665dfa0 R15: 00007fffd67d6e38
[  127.235642][ T6420]  </TASK>
[  127.404571][ T6437] jffs2: notice: (6437) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  127.572223][ T6453] netlink: 104 bytes leftover after parsing attributes in process `syz.5.700'.
[  127.768939][ T6477] loop4: detected capacity change from 0 to 512
[  127.805082][ T6480] loop5: detected capacity change from 0 to 128
[  127.819223][ T6477] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled
[  127.856805][ T6477] EXT4-fs (loop4): inline encryption not supported
[  127.872033][ T6480] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  127.892787][ T6477] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  127.917033][ T6480] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  127.967008][ T6489] loop0: detected capacity change from 0 to 16
[  128.010511][ T6477] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  128.074797][ T6495] loop1: detected capacity change from 0 to 8
[  128.094499][ T6489] erofs: (device loop0): mounted with root inode @ nid 36.
[  128.099291][ T6477] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.702: bg 0: block 248: padding at end of block bitmap is not set
[  128.154156][ T6477] Quota error (device loop4): write_blk: dquota write failed
[  128.168679][ T6497] kernel read not supported for file /eth0 (pid: 6497 comm: syz.5.710)
[  128.177992][ T6477] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota
[  128.238760][   T25] audit: type=1800 audit(1792158322.733:14): pid=6495 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.711" name="file1" dev="loop1" ino=5 res=0 errno=0
[  128.242198][ T6477] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.702: Failed to acquire dquot type 1
[  128.269402][ T6500] loop2: detected capacity change from 0 to 512
[  128.299858][   T25] audit: type=1800 audit(1792158322.733:15): pid=6497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.710" name="eth0" dev="mqueue" ino=41051 res=0 errno=0
[  128.399374][ T6500] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,nogrpid,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback.
[  128.407179][ T6503] loop5: detected capacity change from 0 to 2048
[  128.436467][ T6500] ext4 filesystem being mounted at /136/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  128.476396][ T6477] EXT4-fs (loop4): 1 truncate cleaned up
[  128.486250][ T6477] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,inlinecrypt,nombcache,,errors=continue. Quota mode: writeback.
[  128.536331][ T6503] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  128.581267][ T6503] ext4 filesystem being mounted at /102/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  128.637261][ T6477] EXT4-fs error (device loop4): ext4_lookup:1864: inode #2: comm syz.4.702: deleted inode referenced: 12
[  128.689690][ T6503] fs-verity: sha512 using implementation "sha512-avx2"
[  128.699967][ T6522] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  128.869515][ T6522] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  128.999281][ T6537] loop1: detected capacity change from 0 to 128
[  129.000050][ T6538] loop0: detected capacity change from 0 to 128
[  129.077878][ T6537] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  129.099710][ T6538] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  129.172606][ T6538] FAT-fs (loop0): error, clusters badly computed (3 != 1)
[  129.173380][ T6537] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  129.179816][ T6538] FAT-fs (loop0): Filesystem has been set read-only
[  129.236240][ T6546] loop4: detected capacity change from 0 to 256
[  129.252932][   T25] audit: type=1800 audit(1792158323.753:16): pid=6537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.724" name="file1" dev="loop1" ino=94 res=0 errno=0
[  129.320556][ T4188] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  129.337056][ T6546] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d)
[  129.351989][ T3830] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  129.558803][ T6555] X.509: Couldn't decode AuthKeyIdentifier
[  129.606852][ T3830] usb 6-1: Using ep0 maxpacket: 16
[  129.771967][ T3830] usb 6-1: unable to get BOS descriptor or descriptor too short
[  129.863228][ T3830] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7
[  129.941930][ T4268] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  130.016143][ T6566] (syz.2.735,6566,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  130.041934][ T3830] usb 6-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40
[  130.043585][ T6566] (syz.2.735,6566,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  130.055141][ T3830] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  130.073490][ T3830] usb 6-1: Product: syz
[  130.077670][ T3830] usb 6-1: Manufacturer: syz
[  130.083010][ T3830] usb 6-1: SerialNumber: syz
[  130.098315][ T6566] (syz.2.735,6566,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x656d756e, computed 0x8514aa1d. Applying ECC.
[  130.133398][ T6566] JBD2: Ignoring recovery information on journal
[  130.166798][ T6566] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  130.191855][ T4268] usb 2-1: Using ep0 maxpacket: 16
[  130.311872][ T4268] usb 2-1: config 0 has an invalid interface number: 34 but max is 0
[  130.320352][ T4268] usb 2-1: config 0 has no interface number 0
[  130.341081][ T4268] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  130.362144][ T3830] usb 6-1: Audio class v2/v3 interfaces need an interface association
[  130.368481][ T4190] ocfs2: Unmounting device (7,2) on (node local)
[  130.381890][ T3830] snd-usb-audio: probe of 6-1:1.0 failed with error -22
[  130.391176][ T4268] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  130.562096][ T4268] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  130.575606][ T4268] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  130.584229][ T4268] usb 2-1: Product: syz
[  130.588581][ T4268] usb 2-1: Manufacturer: syz
[  130.593429][ T4268] usb 2-1: SerialNumber: syz
[  130.600803][ T4268] usb 2-1: config 0 descriptor??
[  130.622029][ T6565] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  130.630450][ T6565] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  130.798032][ T3830] usb 6-1: USB disconnect, device number 8
[  130.843134][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  130.866307][ T6565] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  130.892676][ T6565] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  130.901164][ T6599] F2FS-fs (loop2): Invalid SB checksum offset: 0
[  130.908244][ T6599] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[  130.942359][ T6599] F2FS-fs (loop2): invalid crc value
[  130.964037][ T6599] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  131.038484][ T6599] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0
[  131.045817][ T6599] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  131.063045][ T6604] EXT4-fs (loop4): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none.
[  131.103213][ T4190] attempt to access beyond end of device
[  131.103213][ T4190] loop2: rw=2049, want=45104, limit=40427
[  131.131905][ T4268] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  131.173914][ T6604] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  131.466309][ T6626] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  131.466309][ T6626] The task syz.5.755 (6626) triggered the difference, watch for misbehavior.
[  131.804132][ T4268] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  131.835522][ T4268] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9
[  131.871805][ T4268] asix: probe of 2-1:0.34 failed with error -71
[  131.889717][ T4268] usb 2-1: USB disconnect, device number 10
[  132.231818][ T3830] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  132.337831][ T3519] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  132.581891][ T4268] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  132.596990][ T3830] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  132.622060][ T3830] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  132.631823][ T3519] usb 5-1: Using ep0 maxpacket: 16
[  132.656253][ T3830] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  132.669228][ T3830] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.675263][ T1419] ieee802154 phy0 wpan0: encryption failed: -22
[  132.683582][ T1419] ieee802154 phy1 wpan1: encryption failed: -22
[  132.686565][ T3830] usb 1-1: config 0 descriptor??
[  132.718724][ T6670] set_capacity_and_notify: 6 callbacks suppressed
[  132.718738][ T6670] loop1: detected capacity change from 0 to 128
[  132.779056][ T6670] EXT4-fs (loop1): Ignoring removed orlov option
[  132.788224][ T6670] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[  132.849834][ T6670] EXT4-fs (loop1): mounted filesystem without journal. Opts: orlov,errors=remount-ro,. Quota mode: none.
[  132.861732][ T4268] usb 6-1: Using ep0 maxpacket: 8
[  132.862694][ T6670] ext2 filesystem being mounted at /169/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  132.931019][ T6676] loop2: detected capacity change from 0 to 512
[  132.955397][ T6670] EXT4-fs error (device loop1): dx_make_map:1328: inode #2: block 33: comm syz.1.777: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1
[  132.979341][ T6670] EXT4-fs (loop1): Remounting filesystem read-only
[  132.992663][ T3519] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  132.997463][ T4268] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  133.003033][ T6676] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option
[  133.010880][ T4268] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  133.022126][ T3519] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  133.028820][ T6670] EXT4-fs error (device loop1) in do_split:2097: Corrupt filesystem
[  133.044611][ T4268] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  133.044670][ T3519] usb 5-1: Product: syz
[  133.055362][ T4268] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  133.069694][ T6676] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,usrquota,minixdf,nomblk_io_submit,. Quota mode: writeback.
[  133.070334][ T6670] EXT4-fs (loop1): Remounting filesystem read-only
[  133.084490][ T3519] usb 5-1: Manufacturer: syz
[  133.095902][ T6676] ext4 filesystem being mounted at /146/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  133.106794][ T3519] usb 5-1: SerialNumber: syz
[  133.109538][ T4268] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  133.132632][ T3519] usb 5-1: config 0 descriptor??
[  133.143164][ T4268] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  133.164766][ T3830] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0
[  133.176846][ T4268] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  133.188246][ T3830] cp2112 0003:10C4:EA90.0008: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0
[  133.373420][ T3830] cp2112 0003:10C4:EA90.0008: Part Number: 0x82 Device Version: 0xFE
[  133.461961][ T4268] usb 6-1: usb_control_msg returned -32
[  133.467608][ T4268] usbtmc 6-1:16.0: can't read capabilities
[  133.632089][ T3519] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  133.662352][ T3519] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  133.702428][ T3519] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  133.710869][ T3519] usb 5-1: media controller created
[  133.729033][ T6694] loop2: detected capacity change from 0 to 256
[  133.731428][ T3519] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  133.772717][ T6694] exfat: Deprecated parameter 'utf8'
[  133.788490][ T6694] exfat: Deprecated parameter 'namecase'
[  133.808753][ T3830] cp2112 0003:10C4:EA90.0008: error setting SMBus config
[  133.817093][ T6694] exfat: Deprecated parameter 'namecase'
[  133.830410][ T3830] cp2112: probe of 0003:10C4:EA90.0008 failed with error -71
[  133.846317][ T6694] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  133.855936][ T3830] usb 1-1: USB disconnect, device number 8
[  133.951843][ T6699] usbtmc 6-1:16.0: INITIATE_CLEAR returned 0
[  133.968959][ T6700] fido_id[6700]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  134.155572][ T4397] usb 6-1: USB disconnect, device number 9
[  134.338500][ T3519] zl10353_read_register: readreg error (reg=127, ret==0)
[  134.343852][ T6646] dtv5100: wlen = 0, aborting.
[  134.352580][ T3519] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  134.378322][ T3519] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  134.403678][ T3519] usb 5-1: USB disconnect, device number 8
[  134.461120][ T6717] device batadv_slave_1 entered promiscuous mode
[  134.465519][ T3519] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[  134.469613][ T6716] device batadv_slave_1 left promiscuous mode
[  134.591427][ T6723] bridge0: port 1(bridge_slave_0) entered disabled state
[  134.606706][ T6723] Zero length message leads to an empty skb
[  134.710861][ T6736] loop5: detected capacity change from 0 to 1024
[  134.838756][ T4537] hfsplus: b-tree write err: -5, ino 25
[  134.853512][ T4537] hfsplus: b-tree write err: -5, ino 4
[  134.859217][ T4537] hfsplus: b-tree write err: -5, ino 2
[  134.865187][ T4537] hfsplus: b-tree write err: -5, ino 26
[  134.911831][ T4268] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  134.912104][ T4397] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  135.233258][ T4537] tipc: Subscription rejected, illegal request
[  135.347360][ T4397] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  135.370782][ T4397] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  135.432184][ T4268] usb 2-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01
[  135.463322][ T4268] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  135.471489][ T4268] usb 2-1: Product: syz
[  135.478884][ T4268] usb 2-1: Manufacturer: syz
[  135.483893][ T4268] usb 2-1: SerialNumber: syz
[  135.537030][ T6772] loop4: detected capacity change from 0 to 128
[  135.542845][ T4268] ums-karma 2-1:1.0: USB Mass Storage device detected
[  135.570992][ T4268] ums-karma 2-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller)
[  135.570992][ T4268]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[  135.601994][ T4397] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  135.619720][ T4397] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  135.667721][ T6772] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002]
[  135.686664][ T6781] loop5: detected capacity change from 0 to 2048
[  135.705694][ T6772] System zones: 1-3, 19-19, 35-36
[  135.716440][ T6772] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000004,debug,,errors=continue. Quota mode: none.
[  135.719813][ T4397] usb 3-1: Product: syz
[  135.735825][ T6772] ext4 filesystem being mounted at /162/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  135.790018][ T6781] EXT4-fs (loop5): mounted filesystem without journal. Opts: init_itable,,errors=continue. Quota mode: none.
[  135.821772][ T4397] usb 3-1: Manufacturer: syz
[  135.837264][ T4397] usb 3-1: SerialNumber: syz
[  135.880096][ T6781] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  135.902733][ T4397] cdc_ncm 3-1:1.0: skipping garbage
[  135.921352][ T6781] EXT4-fs error (device loop5) in ext4_setattr:5645: error 28
[  135.945919][ T6781] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28
[  135.967130][ T6781] EXT4-fs (loop5): This should not happen!! Data will be lost
[  135.967130][ T6781] 
[  135.979260][ T6781] EXT4-fs (loop5): Total free blocks count 0
[  135.985888][ T6781] EXT4-fs (loop5): Free/Dirty block details
[  135.992478][ T6781] EXT4-fs (loop5): free_blocks=2415919504
[  136.009211][ T6781] EXT4-fs (loop5): dirty_blocks=32
[  136.014595][ T6781] EXT4-fs (loop5): Block reservation details
[  136.020614][ T6781] EXT4-fs (loop5): i_reserved_data_blocks=2
[  136.050493][ T4537] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  136.068954][ T4537] EXT4-fs (loop5): This should not happen!! Data will be lost
[  136.068954][ T4537] 
[  136.079931][ T4268] ums-karma: probe of 2-1:1.0 failed with error -5
[  136.106469][ T4268] usb 2-1: USB disconnect, device number 11
[  136.114775][ T6792] loop4: detected capacity change from 0 to 256
[  136.218180][ T6794] loop5: detected capacity change from 0 to 1024
[  136.256428][ T6794] EXT4-fs (loop5): Ignoring removed bh option
[  136.293338][ T6794] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none.
[  136.388059][ T6794] EXT4-fs error (device loop5): ext4_find_dest_de:2117: inode #12: block 7: comm syz.5.829: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0
[  136.413289][ T6794] EXT4-fs (loop5): Remounting filesystem read-only
[  136.422727][ T6794] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2812: Unable to expand inode 12. Delete some EAs or run e2fsck.
[  136.475735][ T5054] EXT4-fs error (device loop5): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /114/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0
[  136.504281][ T5054] EXT4-fs (loop5): Remounting filesystem read-only
[  136.515183][ T5054] EXT4-fs error (device loop5): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /114/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0
[  136.540656][ T5054] EXT4-fs (loop5): Remounting filesystem read-only
[  136.553325][ T5054] EXT4-fs error (device loop5): empty_inline_dir:1890: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[  136.585160][ T5054] EXT4-fs (loop5): Remounting filesystem read-only
[  136.594019][ T5054] EXT4-fs warning (device loop5): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  136.612445][ T5054] EXT4-fs error (device loop5): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /114/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0
[  136.638871][ T5054] EXT4-fs (loop5): Remounting filesystem read-only
[  136.649110][ T5054] EXT4-fs error (device loop5): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /114/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0
[  136.675136][ T5054] EXT4-fs (loop5): Remounting filesystem read-only
[  136.687644][ T5054] EXT4-fs error (device loop5): empty_inline_dir:1890: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[  136.714034][ T5054] EXT4-fs (loop5): Remounting filesystem read-only
[  136.720740][ T5054] EXT4-fs warning (device loop5): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  136.741894][ T5054] EXT4-fs error (device loop5): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /114/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0
[  136.773876][ T5054] EXT4-fs (loop5): Remounting filesystem read-only
[  136.780942][ T5054] EXT4-fs error (device loop5): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /114/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0
[  136.805408][ T5054] EXT4-fs (loop5): Remounting filesystem read-only
[  136.816848][ T5054] EXT4-fs error (device loop5): empty_inline_dir:1890: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[  136.846743][ T5054] EXT4-fs (loop5): Remounting filesystem read-only
[  136.856961][ T5054] EXT4-fs warning (device loop5): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  136.880276][ T5054] EXT4-fs warning (device loop5): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  136.913307][ T5054] EXT4-fs warning (device loop5): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  136.938224][ T5054] EXT4-fs warning (device loop5): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  136.955880][ T5054] EXT4-fs warning (device loop5): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  137.001913][ T4397] cdc_ncm 3-1:1.0: bind() failure
[  137.007366][ T5054] EXT4-fs warning (device loop5): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  137.012053][ T4395] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  137.034032][ T5054] EXT4-fs warning (device loop5): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  137.035835][ T4397] cdc_ncm: probe of 3-1:1.1 failed with error -71
[  137.086232][ T4397] cdc_mbim: probe of 3-1:1.1 failed with error -71
[  137.116864][ T4397] usbtest: probe of 3-1:1.1 failed with error -71
[  137.161891][   T25] audit: type=1326 audit(1792158331.653:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6797 comm="syz.4.831" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b32fa8559 code=0x7fc00000
[  137.207994][ T4397] usb 3-1: USB disconnect, device number 11
[  137.248501][   T25] audit: type=1326 audit(1792158331.663:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6797 comm="syz.4.831" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2b32fa8559 code=0x7fc00000
[  137.279657][   T25] audit: type=1326 audit(1792158331.663:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6797 comm="syz.4.831" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b32fa8559 code=0x7fc00000
[  137.311441][   T25] audit: type=1326 audit(1792158331.663:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6797 comm="syz.4.831" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b32fa8559 code=0x7fc00000
[  137.336145][ T4395] usb 2-1: Using ep0 maxpacket: 8
[  137.341390][   T25] audit: type=1326 audit(1792158331.663:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6797 comm="syz.4.831" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b32fa8559 code=0x7fc00000
[  137.397278][   T25] audit: type=1326 audit(1792158331.663:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6797 comm="syz.4.831" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b32fa8559 code=0x7fc00000
[  137.427976][   T25] audit: type=1326 audit(1792158331.663:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6797 comm="syz.4.831" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b32fa8559 code=0x7fc00000
[  137.463378][   T25] audit: type=1326 audit(1792158331.663:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6797 comm="syz.4.831" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b32fa8559 code=0x7fc00000
[  137.496425][   T25] audit: type=1326 audit(1792158331.663:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6797 comm="syz.4.831" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b32fa8559 code=0x7fc00000
[  137.527513][ T4395] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  137.539842][ T4395] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  137.555700][ T4395] usb 2-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00
[  137.566155][   T25] audit: type=1326 audit(1792158331.663:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6797 comm="syz.4.831" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b32fa8559 code=0x7fc00000
[  137.592675][ T4395] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.643106][ T4395] kobil_sct 2-1:1.0: KOBIL USB smart card terminal converter detected
[  137.657216][ T4395] usb 2-1: KOBIL USB smart card terminal converter now attached to ttyUSB0
[  137.807681][ T6461] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.841983][ T3830] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  137.969477][ T6461] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.049575][ T6461] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.141069][ T6461] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.170077][ T6820] rxe_eth0 speed is unknown, defaulting to 1000
[  138.251992][ T3830] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  138.263837][ T3830] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  138.373018][ T3830] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  138.393251][ T3830] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  138.401285][ T3830] usb 3-1: SerialNumber: syz
[  138.421973][    T7] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  138.496932][ T3519] usb 2-1: USB disconnect, device number 12
[  138.531031][ T3519] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0
[  138.579628][ T6820] chnl_net:caif_netlink_parms(): no params data found
[  138.582975][ T3519] kobil_sct 2-1:1.0: device disconnected
[  138.682009][    T7] usb 1-1: Using ep0 maxpacket: 8
[  138.698360][ T6820] bridge0: port 1(bridge_slave_0) entered blocking state
[  138.706039][ T6820] bridge0: port 1(bridge_slave_0) entered disabled state
[  138.714905][ T6820] device bridge_slave_0 entered promiscuous mode
[  138.724272][ T6820] bridge0: port 2(bridge_slave_1) entered blocking state
[  138.736438][ T3830] usb 3-1: 0:2 : does not exist
[  138.753499][ T6820] bridge0: port 2(bridge_slave_1) entered disabled state
[  138.767856][ T3830] usb 3-1: USB disconnect, device number 12
[  138.773354][ T6820] device bridge_slave_1 entered promiscuous mode
[  138.833745][ T6820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  138.846091][    T7] usb 1-1: config index 0 descriptor too short (expected 74, got 45)
[  138.856504][    T7] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  138.861041][ T6820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  138.881938][    T7] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  138.901684][    T7] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[  138.906751][ T4397] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  138.918005][    T7] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  138.937982][ T6820] team0: Port device team_slave_0 added
[  138.940310][    T7] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  138.964291][    T7] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  138.976825][    T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  138.986650][ T6820] team0: Port device team_slave_1 added
[  139.017811][ T6820] batman_adv: batadv0: Adding interface: batadv_slave_0
[  139.026751][ T6820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  139.077473][ T6820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  139.088961][ T4207] udevd[4207]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  139.160935][ T6820] batman_adv: batadv0: Adding interface: batadv_slave_1
[  139.171052][ T6820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  139.197366][ T4397] usb 5-1: Using ep0 maxpacket: 16
[  139.227078][ T6820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  139.285648][    T7] usb 1-1: usb_control_msg returned -32
[  139.291399][    T7] usbtmc 1-1:16.0: can't read capabilities
[  139.321956][ T4397] usb 5-1: config 0 has an invalid interface number: 98 but max is 0
[  139.331319][ T6861] netlink: 12 bytes leftover after parsing attributes in process `syz.2.847'.
[  139.342230][ T6861] netlink: 12 bytes leftover after parsing attributes in process `syz.2.847'.
[  139.360845][ T4397] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  139.374930][ T4397] usb 5-1: config 0 has no interface number 0
[  139.387702][ T4397] usb 5-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16
[  139.421746][ T4397] usb 5-1: config 0 interface 98 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  139.451753][ T4397] usb 5-1: config 0 interface 98 has no altsetting 0
[  139.477116][ T6820] device hsr_slave_0 entered promiscuous mode
[  139.487263][ T6866] input: syz0 as /devices/virtual/input/input14
[  139.497604][ T6820] device hsr_slave_1 entered promiscuous mode
[  139.517728][ T6820] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  139.531520][ T6820] Cannot create hsr debugfs directory
[  139.569457][ T6854] loop1: detected capacity change from 0 to 32768
[  139.631944][ T4397] usb 5-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9
[  139.651312][ T4397] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  139.682277][ T4397] usb 5-1: Product: syz
[  139.686563][ T4397] usb 5-1: Manufacturer: syz
[  139.694554][ T4397] usb 5-1: SerialNumber: syz
[  139.718787][ T4397] usb 5-1: config 0 descriptor??
[  139.762267][ T6837] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  139.799419][ T6837] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  140.036299][ T6837] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  140.068888][ T6837] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  140.096315][ T6820] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  140.106626][   T26] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  140.138366][ T6820] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  140.160924][ T6820] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  140.182073][ T4268] Bluetooth: hci4: command 0x0409 tx timeout
[  140.202382][ T6820] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  140.236888][ T6461] device hsr_slave_0 left promiscuous mode
[  140.244362][ T6461] device hsr_slave_1 left promiscuous mode
[  140.250939][ T6461] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  140.258927][ T6461] batman_adv: batadv0: Removing interface: batadv_slave_0
[  140.268119][ T6461] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  140.277186][ T6461] batman_adv: batadv0: Removing interface: batadv_slave_1
[  140.285150][ T6461] device bridge_slave_1 left promiscuous mode
[  140.291458][ T6461] bridge0: port 2(bridge_slave_1) entered disabled state
[  140.302092][ T6461] device bridge_slave_0 left promiscuous mode
[  140.308382][ T6461] bridge0: port 1(bridge_slave_0) entered disabled state
[  140.329981][ T6461] device veth1_macvtap left promiscuous mode
[  140.339631][ T6461] device veth0_macvtap left promiscuous mode
[  140.350829][ T6461] device veth1_vlan left promiscuous mode
[  140.358702][ T6461] device veth0_vlan left promiscuous mode
[  140.471995][   T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  140.483217][   T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  140.493106][   T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  140.504554][   T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  140.531859][ T4397] asix 5-1:0.98 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  140.542503][ T4397] asix: probe of 5-1:0.98 failed with error -71
[  140.555445][ T4397] usb 5-1: USB disconnect, device number 9
[  140.588227][ T6461] team0 (unregistering): Port device team_slave_1 removed
[  140.605971][ T6461] team0 (unregistering): Port device team_slave_0 removed
[  140.617849][ T6461] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  140.653861][ T6461] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  140.672065][   T26] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[  140.681367][   T26] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.689814][   T26] usb 3-1: Product: syz
[  140.700562][   T26] usb 3-1: Manufacturer: syz
[  140.705985][   T26] usb 3-1: SerialNumber: syz
[  140.720583][   T26] usb 3-1: config 0 descriptor??
[  140.749381][ T6461] bond0 (unregistering): Released all slaves
[  140.893570][ T6820] 8021q: adding VLAN 0 to HW filter on device bond0
[  140.915168][ T1462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  140.923600][ T1462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  140.936367][ T6820] 8021q: adding VLAN 0 to HW filter on device team0
[  140.948827][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  140.960812][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  140.973273][ T4537] bridge0: port 1(bridge_slave_0) entered blocking state
[  140.980397][ T4537] bridge0: port 1(bridge_slave_0) entered forwarding state
[  140.991238][   T26] adutux 3-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux1
[  141.048680][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  141.059095][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  141.078584][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  141.090343][ T4537] bridge0: port 2(bridge_slave_1) entered blocking state
[  141.097486][ T4537] bridge0: port 2(bridge_slave_1) entered forwarding state
[  141.106339][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  141.133712][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  141.159233][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  141.180206][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  141.182843][ T4268] usb 1-1: USB disconnect, device number 9
[  141.227895][ T4397] usb 3-1: USB disconnect, device number 13
[  141.238685][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  141.259873][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  141.288681][ T6820] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  141.307951][ T6820] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  141.328186][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  141.337352][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  141.350475][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  141.359673][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  141.369142][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  141.379461][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  141.600472][  T549] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  141.614378][  T549] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  141.634803][ T6820] 8021q: adding VLAN 0 to HW filter on device batadv0
[  141.909070][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  141.928270][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  141.960676][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  141.983053][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  141.994240][ T6820] device veth0_vlan entered promiscuous mode
[  142.003303][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  142.012421][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  142.025396][ T6820] device veth1_vlan entered promiscuous mode
[  142.067253][ T3086] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  142.079744][ T3086] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  142.090318][ T3086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  142.103695][ T3086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  142.120014][ T6820] device veth0_macvtap entered promiscuous mode
[  142.133186][ T6820] device veth1_macvtap entered promiscuous mode
[  142.155219][ T6820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  142.176631][ T6820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  142.195169][ T6820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  142.211009][ T6820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  142.237319][ T6820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  142.248068][ T6820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  142.265829][ T6820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  142.276697][ T4268] Bluetooth: hci4: command 0x041b tx timeout
[  142.301798][ T6820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  142.333160][ T6820] batman_adv: batadv0: Interface activated: batadv_slave_0
[  142.351730][  T549] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  142.360049][  T549] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  142.372468][  T549] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  142.400769][  T549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  142.424279][ T6820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  142.450995][ T6820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  142.473104][ T6820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  142.489145][ T6820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  142.510491][ T6820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  142.528065][ T6820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  142.538174][ T6820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  142.554599][ T6820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  142.568066][ T6820] batman_adv: batadv0: Interface activated: batadv_slave_1
[  142.589105][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  142.598295][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  142.609980][ T6820] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  142.633158][ T6820] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  142.651705][ T6820] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  142.660432][ T6820] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  142.773104][ T1462] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  142.780943][ T1462] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  142.826142][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  142.846035][ T3086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  142.868478][ T3086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  142.882957][  T549] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  143.144901][ T6950] loop1: detected capacity change from 0 to 4096
[  143.201718][ T6950] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512)
[  143.693687][ T6987] loop4: detected capacity change from 0 to 256
[  143.779248][ T6987] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001207b, chksum : 0x1e861e4d, utbl_chksum : 0xe619d30d)
[  144.221435][ T7014] loop2: detected capacity change from 0 to 256
[  144.258258][ T7016] ip_tables: iptables: counters copy to user failed while replacing table
[  144.352650][ T7014] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205a7fec, utbl_chksum : 0xe619d30d)
[  144.371936][ T4304] Bluetooth: hci4: command 0x040f tx timeout
[  144.389688][ T7023] nfnetlink_queue: nf_queue: full at 0 entries, dropping packets(s)
[  144.400647][ T4397] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  144.649922][ T7035] netlink: 8 bytes leftover after parsing attributes in process `syz.2.883'.
[  144.659013][ T4397] usb 5-1: Using ep0 maxpacket: 16
[  144.680907][ T7035] netlink: 8 bytes leftover after parsing attributes in process `syz.2.883'.
[  144.781929][ T4397] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  144.809400][ T4397] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  144.847209][ T4397] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  144.873832][ T4397] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  144.898620][ T4397] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  144.926597][ T4397] usb 5-1: config 0 descriptor??
[  145.191757][ T7071] loop1: detected capacity change from 0 to 16
[  145.260386][ T7071] erofs: (device loop1): mounted with root inode @ nid 36.
[  145.310515][   T25] kauditd_printk_skb: 94 callbacks suppressed
[  145.310530][   T25] audit: type=1800 audit(1792158339.803:121): pid=7071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.895" name="file1" dev="loop1" ino=86 res=0 errno=0
[  145.414719][ T4397] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0
[  145.423616][ T7060] overlayfs: filesystem on './file0' not supported as upperdir
[  145.433059][ T4397] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0
[  145.440507][ T4397] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0
[  145.455392][ T4397] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0
[  145.470573][ T4397] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0
[  145.486051][ T4397] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0
[  145.501724][ T4397] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0
[  145.510843][ T4397] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0
[  145.520408][ T4397] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0
[  145.528758][ T4397] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0
[  145.536970][ T4397] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0
[  145.557007][ T4397] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0
[  145.596005][ T4397] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0009/input/input15
[  145.619099][ T4397] microsoft 0003:045E:07DA.0009: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[  145.656175][ T4397] usb 5-1: USB disconnect, device number 10
[  145.789371][ T7083] fido_id[7083]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory
[  145.840422][ T7089] device syzkaller1 entered promiscuous mode
[  146.237061][ T7114] loop2: detected capacity change from 0 to 2048
[  146.298250][ T7114] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  146.398267][ T7125] loop6: detected capacity change from 0 to 1024
[  146.445348][ T4304] Bluetooth: hci4: command 0x0419 tx timeout
[  146.488855][ T7125] EXT4-fs (loop6): Ignoring removed oldalloc option
[  146.521792][ T7125] EXT4-fs (loop6): Ignoring removed orlov option
[  146.601843][ T7125] EXT4-fs (loop6): mounted filesystem without journal. Opts: nobarrier,oldalloc,orlov,dioread_lock,,errors=continue. Quota mode: none.
[  146.657747][ T7125] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  146.729098][ T7145] sctp: [Deprecated]: syz.1.923 (pid 7145) Use of int in maxseg socket option.
[  146.729098][ T7145] Use struct sctp_assoc_value instead
[  146.784835][ T7144] sctp: [Deprecated]: syz.1.923 (pid 7144) Use of int in max_burst socket option deprecated.
[  146.784835][ T7144] Use struct sctp_assoc_value instead
[  146.978952][ T7150] smpboot: CPU 1 is now offline
[  147.129376][ T7158] loop2: detected capacity change from 0 to 512
[  147.215934][ T7158] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  147.297984][ T7158] ext4 filesystem being mounted at /181/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  147.350322][ T7171] netlink: 8 bytes leftover after parsing attributes in process `syz.1.932'.
[  147.476180][ T7158] Quota error (device loop2): do_check_range: Getting dqdh_next_free 2741 out of range 0-6
[  147.563249][ T7158] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  147.600039][ T7181] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input16
[  147.639325][ T7158] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.928: Failed to acquire dquot type 0
[  147.935036][ T7189] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  148.286403][ T7177] loop1: detected capacity change from 0 to 32768
[  148.369654][ T7177] XFS (loop1): Mounting V5 Filesystem
[  148.489932][ T7177] XFS (loop1): Ending clean mount
[  148.607578][ T7177] XFS (loop1): User initiated shutdown received.
[  148.635207][ T7177] XFS (loop1): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495).  Shutting down filesystem.
[  148.700771][ T7177] XFS (loop1): Please unmount the filesystem and rectify the problem(s)
[  148.779992][ T4187] XFS (loop1): Unmounting Filesystem
[  148.837841][ T7197] loop2: detected capacity change from 0 to 40427
[  148.888498][ T7197] F2FS-fs (loop2): Invalid SB checksum offset: 0
[  148.916614][ T7197] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[  149.007866][ T7197] F2FS-fs (loop2): invalid crc value
[  149.070480][ T7197] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  149.236764][ T7223] loop4: detected capacity change from 0 to 512
[  149.263478][ T7197] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0
[  149.308880][ T7223] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  149.333337][ T7197] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  149.387238][ T7223] EXT4-fs (loop4): 1 truncate cleaned up
[  149.416680][ T7223] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000008,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,errors=remount-ro,nombcache,. Quota mode: none.
[  149.469135][ T4190] attempt to access beyond end of device
[  149.469135][ T4190] loop2: rw=2049, want=45104, limit=40427
[  149.517673][ T7231] loop6: detected capacity change from 0 to 2048
[  149.530698][ T7233] loop1: detected capacity change from 0 to 2048
[  149.618333][ T7233] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  149.634480][ T7231] EXT4-fs (loop6): mounted filesystem without journal. Opts: delalloc,lazytime,errors=remount-ro,mb_optimize_scan=0x0000000000000001,. Quota mode: none.
[  149.729640][ T7233] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  149.778699][ T7233] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28
[  149.840504][ T7231] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  149.889670][ T7233] EXT4-fs (loop1): This should not happen!! Data will be lost
[  149.889670][ T7233] 
[  149.948470][ T7233] EXT4-fs (loop1): Total free blocks count 0
[  150.009200][ T7231] EXT4-fs (loop6): Remounting filesystem read-only
[  150.031155][ T7233] EXT4-fs (loop1): Free/Dirty block details
[  150.064560][ T7233] EXT4-fs (loop1): free_blocks=4096
[  150.064601][ T7233] EXT4-fs (loop1): dirty_blocks=48
[  150.064609][ T7233] EXT4-fs (loop1): Block reservation details
[  150.064616][ T7233] EXT4-fs (loop1): i_reserved_data_blocks=3
[  150.276269][ T7254] loop1: detected capacity change from 0 to 8
[  150.319042][ T7256] loop4: detected capacity change from 0 to 1024
[  150.338422][ T7254] SQUASHFS error: lzo decompression failed, data probably corrupt
[  150.359713][ T7254] SQUASHFS error: Failed to read block 0x91: -5
[  150.396955][ T7254] SQUASHFS error: Unable to read metadata cache entry [8f]
[  150.417324][ T7256] EXT4-fs (loop4): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,bsddf,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,block_validity,nogrpid,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback.
[  150.484353][ T7254] SQUASHFS error: Unable to read inode 0x11f
[  150.712686][ T7256] EXT4-fs (loop4): Online defrag not supported with bigalloc
[  151.431729][    T7] usb 7-1: new full-speed USB device number 2 using dummy_hcd
[  152.235701][ T7278] loop2: detected capacity change from 0 to 40427
[  152.280708][ T7278] F2FS-fs (loop2): build fault injection attr: rate: 14, type: 0x1ffff
[  152.291773][ T4304] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  152.344996][ T7278] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0xe4
[  152.353769][    T7] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4
[  152.412255][ T7278] F2FS-fs (loop2): invalid crc value
[  152.439244][ T7278] F2FS-fs (loop2): Found nat_bits in checkpoint
[  152.507490][ T7278] F2FS-fs (loop2) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x44e/0xaa0
[  152.547307][ T7320] netlink: 'syz.0.981': attribute type 11 has an invalid length.
[  152.556639][    T7] usb 7-1: New USB device found, idVendor=041e, idProduct=323b, bcdDevice= 0.40
[  152.588123][    T7] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  152.597311][ T7278] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  152.612021][ T7320] netlink: 184116 bytes leftover after parsing attributes in process `syz.0.981'.
[  152.629273][    T7] usb 7-1: Product: syz
[  152.651965][ T4304] usb 2-1: New USB device found, idVendor=05c6, idProduct=1000, bcdDevice= 0.00
[  152.664428][    T7] usb 7-1: Manufacturer: syz
[  152.669021][    T7] usb 7-1: SerialNumber: syz
[  152.680677][ T7278] F2FS-fs (loop2) : inject no more block in inc_valid_node_count of f2fs_new_node_page+0x180/0x8e0
[  152.708243][ T4304] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.768800][ T7278] F2FS-fs (loop2) : inject page alloc in f2fs_grab_cache_page of f2fs_get_read_data_page+0xf7/0x580
[  152.793840][ T4304] usb-storage 2-1:1.0: USB Mass Storage device detected
[  152.867458][ T4190] attempt to access beyond end of device
[  152.867458][ T4190] loop2: rw=2049, want=45104, limit=40427
[  153.349988][ T7349] loop2: detected capacity change from 0 to 2048
[  153.393863][ T7349] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  153.444795][    T7] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  153.527099][ T4262] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  153.661926][    T7] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  153.676779][ T7368] loop7: detected capacity change from 0 to 4
[  153.699658][    C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  153.710635][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  153.750398][    C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  153.761367][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  153.769239][    C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  153.782385][ T4263] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  153.811507][    C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  153.822458][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  153.840464][    C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  153.851429][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  153.861850][    T7] usb 7-1: USB disconnect, device number 2
[  153.890906][    C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  153.901985][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  153.914140][ T4262] usb 1-1: Using ep0 maxpacket: 8
[  153.919363][ T4179] ldm_validate_partition_table(): Disk read failed.
[  153.947927][    C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  153.958897][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  153.984043][    C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  153.995011][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  154.008115][    C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  154.019092][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  154.027787][    C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  154.038740][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  154.050306][ T4179] Dev loop7: unable to read RDB block 0
[  154.056462][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  154.068410][ T4179]  loop7: unable to read partition table
[  154.078118][ T4179] loop7: partition table beyond EOD, truncated
[  154.093297][ T7368] ldm_validate_partition_table(): Disk read failed.
[  154.100474][ T7368] Dev loop7: unable to read RDB block 0
[  154.109216][ T4262] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  154.125800][ T7368]  loop7: unable to read partition table
[  154.132207][ T7368] loop7: partition table beyond EOD, truncated
[  154.138464][ T4262] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  154.156032][ T7368] loop_reread_partitions: partition scan of loop7 (���������C�j̖�P=ý?�}X���	���%��`�4FLQk݊5) failed (rc=-5)
[  154.171342][ T4262] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  154.192733][ T4207] udevd[4207]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  154.212247][ T4304] usb-storage: probe of 2-1:1.0 failed with error -5
[  154.230572][ T4262] usb 1-1: config 0 descriptor??
[  154.254053][ T4304] usb 2-1: USB disconnect, device number 13
[  154.302426][ T4263] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  154.328025][ T4263] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  154.346327][ T7379] netlink: 256 bytes leftover after parsing attributes in process `syz.6.999'.
[  154.357697][ T4263] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01
[  154.368176][ T4263] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  154.379836][ T4263] usb 5-1: config 0 descriptor??
[  154.388788][ T3559] ldm_validate_partition_table(): Disk read failed.
[  154.400150][ T3559] Dev loop7: unable to read RDB block 0
[  154.407517][ T3559]  loop7: unable to read partition table
[  154.421361][ T3559] loop7: partition table beyond EOD, truncated
[  154.512953][ T4262] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  154.535819][ T7383] FAULT_INJECTION: forcing a failure.
[  154.535819][ T7383] name failslab, interval 1, probability 0, space 0, times 0
[  154.593477][ T7383] CPU: 0 PID: 7383 Comm: syz.2.1001 Not tainted syzkaller #0
[  154.600881][ T7383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  154.610923][ T7383] Call Trace:
[  154.614186][ T7383]  <TASK>
[  154.617110][ T7383]  dump_stack_lvl+0x188/0x250
[  154.621783][ T7383]  ? show_regs_print_info+0x20/0x20
[  154.626990][ T7383]  ? load_image+0x410/0x410
[  154.631489][ T7383]  ? __might_sleep+0xf0/0xf0
[  154.636066][ T7383]  ? __lock_acquire+0x7d40/0x7d40
[  154.641079][ T7383]  should_fail+0x383/0x4b0
[  154.645485][ T7383]  should_failslab+0x5/0x20
[  154.649964][ T7383]  slab_pre_alloc_hook+0x51/0xc0
[  154.654878][ T7383]  ? __d_alloc+0x27/0x6d0
[  154.659183][ T7383]  kmem_cache_alloc+0x3d/0x280
[  154.663927][ T7383]  __d_alloc+0x27/0x6d0
[  154.668062][ T7383]  ? d_alloc_pseudo+0xe/0x70
[  154.672649][ T7383]  d_alloc_pseudo+0x19/0x70
[  154.677134][ T7383]  alloc_file_pseudo+0xe0/0x200
[  154.681963][ T7383]  ? alloc_empty_file_noaccount+0x80/0x80
[  154.687665][ T7383]  ? alloc_fd+0x59e/0x650
[  154.691977][ T7383]  sock_alloc_file+0xb3/0x240
[  154.696639][ T7383]  __sys_socket+0x11d/0x170
[  154.701122][ T7383]  __x64_sys_socket+0x76/0x80
[  154.705789][ T7383]  do_syscall_64+0x4c/0xa0
[  154.710198][ T7383]  ? clear_bhb_loop+0x30/0x80
[  154.714854][ T7383]  ? clear_bhb_loop+0x30/0x80
[  154.719510][ T7383]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  154.725385][ T7383] RIP: 0033:0x7f18ba8ac559
[  154.729783][ T7383] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  154.749431][ T7383] RSP: 002b:00007f18b8b04028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  154.757852][ T7383] RAX: ffffffffffffffda RBX: 00007f18bab33fa0 RCX: 00007f18ba8ac559
[  154.765860][ T7383] RDX: 0010000000000002 RSI: 0000000000000002 RDI: 2000000000000021
[  154.773854][ T7383] RBP: 00007f18ba9438b0 R08: 0000000000000000 R09: 0000000000000000
[  154.781815][ T7383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  154.789788][ T7383] R13: 00007f18bab34038 R14: 00007f18bab33fa0 R15: 00007ffd7d9ecae8
[  154.797766][ T7383]  </TASK>
[  154.800829][    C0] vkms_vblank_simulate: vblank timer overrun
[  154.866170][ T4262] usb 1-1: USB disconnect, device number 10
[  155.070573][ T7401] loop6: detected capacity change from 0 to 1024
[  155.107753][ T7401] EXT4-fs (loop6): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,bsddf,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,block_validity,nogrpid,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback.
[  155.133386][    C0] vkms_vblank_simulate: vblank timer overrun
[  155.212888][ T7401] EXT4-fs (loop6): Online defrag not supported with bigalloc
[  155.272898][ T4263] arvo 0003:1E7D:30D4.000A: unknown main item tag 0x0
[  155.291153][ T4263] arvo 0003:1E7D:30D4.000A: unknown main item tag 0x0
[  155.298804][ T4304] usb 3-1: new full-speed USB device number 14 using dummy_hcd
[  155.316934][ T4263] arvo 0003:1E7D:30D4.000A: unknown main item tag 0x0
[  155.356213][ T4263] arvo 0003:1E7D:30D4.000A: unknown main item tag 0x0
[  155.398779][ T4263] arvo 0003:1E7D:30D4.000A: unknown main item tag 0x0
[  155.398803][ T4263] arvo 0003:1E7D:30D4.000A: unknown main item tag 0x0
[  155.398818][ T4263] arvo 0003:1E7D:30D4.000A: unknown main item tag 0x0
[  155.399980][ T4263] arvo 0003:1E7D:30D4.000A: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.4-1/input0
[  155.492089][ T4263] arvo 0003:1E7D:30D4.000A: couldn't init struct arvo_device
[  155.492112][ T4263] arvo 0003:1E7D:30D4.000A: couldn't install keyboard
[  155.493240][ T4263] arvo: probe of 0003:1E7D:30D4.000A failed with error -71
[  155.502909][ T4263] usb 5-1: USB disconnect, device number 11
[  155.620813][ T7418] fido_id[7418]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  155.714557][ T4304] usb 3-1: unable to get BOS descriptor or descriptor too short
[  155.751871][ T4304] usb 3-1: not running at top speed; connect to a high speed hub
[  155.803639][ T7411] loop1: detected capacity change from 0 to 32768
[  155.871879][ T4304] usb 3-1: language id specifier not provided by device, defaulting to English
[  156.191972][ T4304] usb 3-1: New USB device found, idVendor=0a4e, idProduct=4040, bcdDevice= 0.40
[  156.251692][ T4304] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  156.320805][ T4304] usb 3-1: Manufacturer: 뒿ꪩ쬐ꝸݟ쎔堧ၞ痐秶죓힉祘ፙ鐮퇿둢쩼똥屹䛮淛
[  156.351098][ T7443] loop1: detected capacity change from 0 to 512
[  156.389753][ T7447] bridge0: port 3(veth0) entered blocking state
[  156.401682][ T4304] usb 3-1: SerialNumber: syz
[  156.469643][ T7443] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback.
[  156.486420][ T7447] bridge0: port 3(veth0) entered disabled state
[  156.549698][ T7447] device veth0 entered promiscuous mode
[  156.568787][ T7456] netlink: 'syz.0.1025': attribute type 6 has an invalid length.
[  156.584730][ T7443] ext4 filesystem being mounted at /224/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  156.606853][ T7447] bridge0: port 3(veth0) entered blocking state
[  156.613192][ T7447] bridge0: port 3(veth0) entered forwarding state
[  156.730562][ T7443] EXT4-fs (loop1): shut down requested (1)
[  156.802866][ T4304] usb 3-1: Audio class v2/v3 interfaces need an interface association
[  156.843540][ T7467] netlink: 'syz.0.1030': attribute type 39 has an invalid length.
[  156.876143][ T4304] snd-usb-audio: probe of 3-1:1.0 failed with error -22
[  156.929144][ T4207] udevd[4207]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  156.949956][ T4304] usb 3-1: USB disconnect, device number 14
[  157.003645][ T4537] Quota error (device loop1): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync!
[  157.358664][ T7489] loop4: detected capacity change from 0 to 512
[  157.393060][ T7491] loop1: detected capacity change from 0 to 128
[  157.534020][ T7493] loop2: detected capacity change from 0 to 512
[  157.544474][ T7489] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,nogrpid,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback.
[  157.666998][ T7493] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  157.719531][ T7489] ext4 filesystem being mounted at /202/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  157.790030][ T7493] ext4 filesystem being mounted at /197/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  157.811375][ T7506] loop7: detected capacity change from 0 to 4
[  157.851444][ T4207] ldm_validate_partition_table(): Disk read failed.
[  157.895797][ T4207] Dev loop7: unable to read RDB block 0
[  157.938780][ T4207]  loop7: unable to read partition table
[  157.995714][ T4207] loop7: partition table beyond EOD, truncated
[  158.050389][ T7506] ldm_validate_partition_table(): Disk read failed.
[  158.072614][ T7506] Dev loop7: unable to read RDB block 0
[  158.095065][ T7506]  loop7: unable to read partition table
[  158.116339][ T7506] loop7: partition table beyond EOD, truncated
[  158.147190][ T7506] loop_reread_partitions: partition scan of loop7 (���������C�j̖�P=ý?�}X���	���%��`�4FLQk݊5) failed (rc=-5)
[  158.205624][ T3559] ldm_validate_partition_table(): Disk read failed.
[  158.218124][ T3559] Dev loop7: unable to read RDB block 0
[  158.232721][ T3559]  loop7: unable to read partition table
[  158.245660][ T3559] loop7: partition table beyond EOD, truncated
[  159.377388][ T7551] capability: warning: `syz.0.1054' uses 32-bit capabilities (legacy support in use)
[  159.624127][ T7560] netlink: 'syz.6.1053': attribute type 11 has an invalid length.
[  159.688777][ T7560] netlink: 184116 bytes leftover after parsing attributes in process `syz.6.1053'.
[  159.779686][ T7560] debugfs: Directory '!!�' with parent 'ieee80211' already present!
[  159.866526][ T7569] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1058'.
[  159.887814][ T7523] loop4: detected capacity change from 0 to 40427
[  159.910999][ T7541] loop2: detected capacity change from 0 to 32768
[  159.933435][ T7569] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1058'.
[  159.954325][ T7523] F2FS-fs (loop4): Invalid SB checksum offset: 0
[  160.035663][ T7523] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  160.054066][ T7569] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1058'.
[  160.145616][ T7523] F2FS-fs (loop4): invalid crc value
[  160.151242][ T7569] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1058'.
[  160.199201][ T7523] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  160.329569][ T7584] netlink: 'syz.1.1062': attribute type 39 has an invalid length.
[  160.522405][ T7523] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[  160.529476][ T7523] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  160.726902][ T7606] loop6: detected capacity change from 0 to 1024
[  160.774524][ T7607] loop2: detected capacity change from 0 to 8
[  160.885821][ T7607] SQUASHFS error: lzo decompression failed, data probably corrupt
[  160.964357][ T7607] SQUASHFS error: Failed to read block 0x91: -5
[  161.040727][ T7607] SQUASHFS error: Unable to read metadata cache entry [8f]
[  161.099466][ T7607] SQUASHFS error: Unable to read inode 0x11f
[  161.454573][ T7637] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1079'.
[  161.573421][   T13] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  161.588507][ T7644] netlink: 'syz.2.1080': attribute type 39 has an invalid length.
[  161.842822][   T13] usb 7-1: Using ep0 maxpacket: 8
[  161.973511][   T13] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[  162.002476][ T7654] loop2: detected capacity change from 0 to 128
[  162.029509][   T13] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  162.091860][ T7654] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  162.114288][   T13] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  162.144795][ T7654] ext4 filesystem being mounted at /205/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  162.167735][   T13] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  162.229496][   T13] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  162.254403][ T7654] syz.2.1081 (pid 7654) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  162.396414][   T13] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  162.464327][   T13] usb 7-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0
[  162.497449][ T7671] FAULT_INJECTION: forcing a failure.
[  162.497449][ T7671] name failslab, interval 1, probability 0, space 0, times 0
[  162.530759][   T13] usb 7-1: Product: syz
[  162.595979][ T7671] CPU: 0 PID: 7671 Comm: syz.2.1083 Not tainted syzkaller #0
[  162.603462][ T7671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  162.613509][ T7671] Call Trace:
[  162.616771][ T7671]  <TASK>
[  162.619715][ T7671]  dump_stack_lvl+0x188/0x250
[  162.624392][ T7671]  ? show_regs_print_info+0x20/0x20
[  162.629574][ T7671]  ? load_image+0x410/0x410
[  162.634082][ T7671]  ? __might_sleep+0xf0/0xf0
[  162.638653][ T7671]  ? __lock_acquire+0x7d40/0x7d40
[  162.643676][ T7671]  should_fail+0x383/0x4b0
[  162.648092][ T7671]  should_failslab+0x5/0x20
[  162.652593][ T7671]  slab_pre_alloc_hook+0x51/0xc0
[  162.657525][ T7671]  __kmalloc+0x6b/0x340
[  162.661665][ T7671]  ? security_sk_alloc+0x47/0x130
[  162.666668][ T7671]  ? sk_prot_alloc+0x57/0x210
[  162.671344][ T7671]  security_sk_alloc+0x47/0x130
[  162.676188][ T7671]  sk_prot_alloc+0x101/0x210
[  162.681320][ T7671]  sk_alloc+0x2f/0x310
[  162.685371][ T7671]  ? inet_create+0x702/0xee0
[  162.689947][ T7671]  inet_create+0x71e/0xee0
[  162.694344][ T7671]  __sock_create+0x473/0x910
[  162.698938][ T7671]  smc_create+0x133/0x360
[  162.703251][ T7671]  __sock_create+0x473/0x910
[  162.707834][ T7671]  __sys_socket+0xe2/0x170
[  162.712230][ T7671]  __x64_sys_socket+0x76/0x80
[  162.716887][ T7671]  do_syscall_64+0x4c/0xa0
[  162.721291][ T7671]  ? clear_bhb_loop+0x30/0x80
[  162.725948][ T7671]  ? clear_bhb_loop+0x30/0x80
[  162.730606][ T7671]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  162.736512][ T7671] RIP: 0033:0x7f18ba8ac559
[  162.740923][ T7671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  162.760514][ T7671] RSP: 002b:00007f18b8b04028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  162.768918][ T7671] RAX: ffffffffffffffda RBX: 00007f18bab33fa0 RCX: 00007f18ba8ac559
[  162.776905][ T7671] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000002b
[  162.784889][ T7671] RBP: 00007f18ba9438b0 R08: 0000000000000000 R09: 0000000000000000
[  162.792880][ T7671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  162.800936][ T7671] R13: 00007f18bab34038 R14: 00007f18bab33fa0 R15: 00007ffd7d9ecae8
[  162.808922][ T7671]  </TASK>
[  162.833426][   T13] usb 7-1: usb_control_msg returned -32
[  162.839003][   T13] usbtmc 7-1:16.0: can't read capabilities
[  162.989990][ T7681] overlayfs: failed to set xattr on upper
[  163.015245][ T7681] overlayfs: ...falling back to index=off,metacopy=off.
[  163.233289][   T13] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  163.496365][ T4304] usb 7-1: USB disconnect, device number 3
[  163.622923][   T13] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  163.683057][   T13] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  163.744198][   T13] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  163.785240][   T13] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  163.833318][   T13] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  164.005169][   T13] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  164.069255][   T13] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  164.107217][   T13] usb 2-1: Product: syz
[  164.131893][   T13] usb 2-1: Manufacturer: syz
[  164.204704][   T13] cdc_wdm 2-1:1.0: skipping garbage
[  164.221751][   T13] cdc_wdm 2-1:1.0: skipping garbage
[  164.260984][   T13] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  164.288203][   T13] cdc_wdm 2-1:1.0: Unknown control protocol
[  164.387983][ T7734] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  164.419535][ T4262] usb 2-1: USB disconnect, device number 14
[  164.431892][    C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  164.438689][    C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  164.444741][    C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  164.462688][ T7734] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  164.471905][ T4304] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  164.833428][ T4304] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  164.973428][ T4304] usb 3-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 2.00
[  164.989239][ T4304] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  165.007095][ T4304] usb 3-1: Product: syz
[  165.016750][ T4304] usb 3-1: Manufacturer: syz
[  165.063907][ T4304] ldusb 3-1:1.0: Interrupt in endpoint not found
[  165.287667][   T13] usb 3-1: USB disconnect, device number 15
[  165.370860][ T7763] loop4: detected capacity change from 0 to 512
[  165.405097][ T7763] EXT4-fs (loop4): Ignoring removed mblk_io_submit option
[  165.441403][ T7763] EXT4-fs error (device loop4): ext4_iget_extra_inode:4573: inode #15: comm syz.4.1111: corrupted in-inode xattr
[  165.470501][ T7763] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm syz.4.1111: couldn't read orphan inode 15 (err -117)
[  165.488437][ T4262] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  165.514551][ T7763] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_dev=0x0000000000000003,inode_readahead_blks=0x0000000008000000,quota,noload,user_xattr,mblk_io_submit,noinit_itable,noblock_validity,nogrpid,init_itable=0x0000000000000fff,,errors=continue. Quota mode: writeback.
[  165.608492][ T7763] overlayfs: upper fs needs to support d_type.
[  165.751719][ T4262] usb 1-1: Using ep0 maxpacket: 8
[  165.871819][ T4262] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  165.890647][ T4262] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  165.912858][ T4262] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  165.935790][ T4262] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  165.958745][ T4262] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  166.062129][ T4262] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  166.101781][ T4262] usb 1-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0
[  166.136328][ T7771] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  166.146455][ T4262] usb 1-1: Product: syz
[  166.248195][ T4189] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0
[  166.360067][ T4189] EXT4-fs error (device loop4): ext4_empty_dir:3179: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0
[  166.412892][ T4262] usb 1-1: usb_control_msg returned -32
[  166.432792][ T4262] usbtmc 1-1:16.0: can't read capabilities
[  166.523588][ T4189] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0
[  166.624793][ T4189] EXT4-fs error (device loop4): ext4_empty_dir:3179: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0
[  166.725306][ T4189] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0
[  166.837819][ T4189] EXT4-fs error (device loop4): ext4_empty_dir:3179: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0
[  166.901386][ T7782] loop2: detected capacity change from 0 to 32768
[  166.936238][ T7786] loop1: detected capacity change from 0 to 32768
[  166.954088][ T4189] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0
[  167.004922][ T7782] XFS (loop2): Mounting V5 Filesystem
[  167.028352][   T13] usb 1-1: USB disconnect, device number 11
[  167.076467][ T7786] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  167.123804][ T7782] XFS (loop2): Ending clean mount
[  167.174139][ T4189] EXT4-fs error (device loop4): ext4_empty_dir:3179: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0
[  167.285339][ T4189] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0
[  167.315921][ T4190] XFS (loop2): Unmounting Filesystem
[  167.425642][ T4189] EXT4-fs error (device loop4): ext4_empty_dir:3179: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0
[  167.458264][ T7786] syz.1.1121 (7786) used greatest stack depth: 18240 bytes left
[  167.509596][ T4187] ocfs2: Unmounting device (7,1) on (node local)
[  168.178642][ T7822] loop1: detected capacity change from 0 to 512
[  168.245885][ T7822] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option
[  168.293296][ T7822] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,usrquota,minixdf,nomblk_io_submit,. Quota mode: writeback.
[  168.340393][ T7822] ext4 filesystem being mounted at /247/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  169.020703][ T7835] input: syz0 as /devices/virtual/input/input17
[  169.087528][ T3086] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.197777][ T3086] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.210172][    T7] kernel write not supported for file /input/mice (pid: 7 comm: kworker/0:0)
[  169.296573][ T3086] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.312412][ T7844] input: syz0 as /devices/virtual/input/input18
[  169.543591][ T3086] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.590553][   T13] 
[  169.592896][   T13] ======================================================
[  169.599891][   T13] WARNING: possible circular locking dependency detected
[  169.607046][   T13] syzkaller #0 Not tainted
[  169.611441][   T13] ------------------------------------------------------
[  169.618437][   T13] kworker/0:1/13 is trying to acquire lock:
[  169.624306][   T13] ffff888023515028 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210
[  169.635318][   T13] 
[  169.635318][   T13] but task is already holding lock:
[  169.642654][   T13] ffffffff8e4d7308 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x43/0x170
[  169.652016][   T13] 
[  169.652016][   T13] which lock already depends on the new lock.
[  169.652016][   T13] 
[  169.662410][   T13] 
[  169.662410][   T13] the existing dependency chain (in reverse order) is:
[  169.671415][   T13] 
[  169.671415][   T13] -> #4 (rfkill_global_mutex){+.+.}-{3:3}:
[  169.679410][   T13]        __mutex_lock_common+0x1e5/0x2400
[  169.685109][   T13]        mutex_lock_nested+0x17/0x20
[  169.690387][   T13]        rfkill_register+0x2f/0x970
[  169.695749][   T13]        hci_register_dev+0x459/0x980
[  169.701331][   T13]        vhci_create_device+0x32e/0x5c0
[  169.707046][   T13]        vhci_write+0x389/0x440
[  169.711914][   T13]        vfs_write+0x748/0xd70
[  169.716656][   T13]        ksys_write+0x153/0x260
[  169.721489][   T13]        do_syscall_64+0x4c/0xa0
[  169.726425][   T13]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  169.732825][   T13] 
[  169.732825][   T13] -> #3 (&data->open_mutex){+.+.}-{3:3}:
[  169.740609][   T13]        __mutex_lock_common+0x1e5/0x2400
[  169.746327][   T13]        mutex_lock_nested+0x17/0x20
[  169.751586][   T13]        vhci_send_frame+0x88/0x100
[  169.756771][   T13]        hci_send_frame+0x1a9/0x2e0
[  169.761956][   T13]        hci_tx_work+0x9b5/0x16d0
[  169.766951][   T13]        process_one_work+0x867/0xff0
[  169.772295][   T13]        worker_thread+0xad7/0x12a0
[  169.777469][   T13]        kthread+0x42e/0x520
[  169.782029][   T13]        ret_from_fork+0x1f/0x30
[  169.787066][   T13] 
[  169.787066][   T13] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}:
[  169.796277][   T13]        __flush_work+0x116/0x210
[  169.801304][   T13]        hci_dev_do_close+0x201/0x1020
[  169.806741][   T13]        hci_unregister_dev+0x2eb/0x590
[  169.812263][   T13]        vhci_release+0x73/0xc0
[  169.817099][   T13]        __fput+0x212/0x8c0
[  169.821596][   T13]        task_work_run+0x125/0x1a0
[  169.826688][   T13]        do_exit+0x635/0x2110
[  169.831345][   T13]        do_group_exit+0x12c/0x2f0
[  169.836442][   T13]        get_signal+0x7eb/0x12e0
[  169.841355][   T13]        arch_do_signal_or_restart+0xe6/0x12a0
[  169.847489][   T13]        exit_to_user_mode_loop+0x9e/0x130
[  169.853269][   T13]        exit_to_user_mode_prepare+0xee/0x180
[  169.859309][   T13]        syscall_exit_to_user_mode+0x16/0x40
[  169.865447][   T13]        do_syscall_64+0x58/0xa0
[  169.870437][   T13]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  169.876854][   T13] 
[  169.876854][   T13] -> #1 (&hdev->req_lock){+.+.}-{3:3}:
[  169.884477][   T13]        __mutex_lock_common+0x1e5/0x2400
[  169.890176][   T13]        mutex_lock_nested+0x17/0x20
[  169.895447][   T13]        bg_scan_update+0x44/0x3b0
[  169.900534][   T13]        process_one_work+0x867/0xff0
[  169.905880][   T13]        worker_thread+0xad7/0x12a0
[  169.911050][   T13]        kthread+0x42e/0x520
[  169.915614][   T13]        ret_from_fork+0x1f/0x30
[  169.920533][   T13] 
[  169.920533][   T13] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}:
[  169.930329][   T13]        __lock_acquire+0x38f7/0x7d40
[  169.936092][   T13]        lock_acquire+0x19f/0x400
[  169.941103][   T13]        __flush_work+0x116/0x210
[  169.946119][   T13]        __cancel_work_timer+0x3f4/0x560
[  169.951732][   T13]        hci_request_cancel_all+0xcc/0x300
[  169.957530][   T13]        hci_dev_do_close+0x4e/0x1020
[  169.962886][   T13]        hci_rfkill_set_block+0x101/0x180
[  169.968665][   T13]        rfkill_set_block+0x1c1/0x3c0
[  169.974040][   T13]        rfkill_epo+0x75/0x170
[  169.978784][   T13]        rfkill_op_handler+0x76/0x220
[  169.984128][   T13]        process_one_work+0x867/0xff0
[  169.989479][   T13]        worker_thread+0xad7/0x12a0
[  169.994846][   T13]        kthread+0x42e/0x520
[  169.999419][   T13]        ret_from_fork+0x1f/0x30
[  170.004334][   T13] 
[  170.004334][   T13] other info that might help us debug this:
[  170.004334][   T13] 
[  170.014552][   T13] Chain exists of:
[  170.014552][   T13]   (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex
[  170.014552][   T13] 
[  170.030242][   T13]  Possible unsafe locking scenario:
[  170.030242][   T13] 
[  170.037666][   T13]        CPU0                    CPU1
[  170.043012][   T13]        ----                    ----
[  170.048351][   T13]   lock(rfkill_global_mutex);
[  170.053094][   T13]                                lock(&data->open_mutex);
[  170.060196][   T13]                                lock(rfkill_global_mutex);
[  170.067456][   T13]   lock((work_completion)(&hdev->bg_scan_update));
[  170.074015][   T13] 
[  170.074015][   T13]  *** DEADLOCK ***
[  170.074015][   T13] 
[  170.082217][   T13] 3 locks held by kworker/0:1/13:
[  170.087235][   T13]  #0: ffff888017870938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0
[  170.097589][   T13]  #1: ffffc90000d27d00 ((rfkill_op_work).work){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0
[  170.107848][   T13]  #2: ffffffff8e4d7308 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x43/0x170
[  170.117303][   T13] 
[  170.117303][   T13] stack backtrace:
[  170.123163][   T13] CPU: 0 PID: 13 Comm: kworker/0:1 Not tainted syzkaller #0
[  170.130441][   T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  170.140481][   T13] Workqueue: events rfkill_op_handler
[  170.145849][   T13] Call Trace:
[  170.149145][   T13]  <TASK>
[  170.152071][   T13]  dump_stack_lvl+0x188/0x250
[  170.156732][   T13]  ? load_image+0x410/0x410
[  170.161210][   T13]  ? show_regs_print_info+0x20/0x20
[  170.166397][   T13]  ? print_circular_bug+0x12b/0x1a0
[  170.171574][   T13]  check_noncircular+0x2f8/0x400
[  170.176487][   T13]  ? look_up_lock_class+0x71/0x110
[  170.181574][   T13]  ? print_deadlock_bug+0x5d0/0x5d0
[  170.186752][   T13]  ? lockdep_lock+0xf1/0x1f0
[  170.191324][   T13]  ? __lock_acquire+0x12df/0x7d40
[  170.196324][   T13]  ? mark_lock+0x94/0x320
[  170.200763][   T13]  ? _find_first_zero_bit+0xd1/0xf0
[  170.205952][   T13]  __lock_acquire+0x38f7/0x7d40
[  170.210790][   T13]  ? verify_lock_unused+0x140/0x140
[  170.215971][   T13]  ? mark_lock+0x94/0x320
[  170.220316][   T13]  ? verify_lock_unused+0x140/0x140
[  170.225490][   T13]  ? mark_lock+0x94/0x320
[  170.229812][   T13]  lock_acquire+0x19f/0x400
[  170.234307][   T13]  ? __flush_work+0xfa/0x210
[  170.238875][   T13]  ? __lock_acquire+0x7d40/0x7d40
[  170.243997][   T13]  ? read_lock_is_recursive+0x10/0x10
[  170.249358][   T13]  ? start_flush_work+0x784/0x830
[  170.254365][   T13]  __flush_work+0x116/0x210
[  170.258849][   T13]  ? __flush_work+0xfa/0x210
[  170.263426][   T13]  ? flush_work+0x20/0x20
[  170.267733][   T13]  ? try_to_grab_pending+0xfb/0x820
[  170.272922][   T13]  ? mark_lock+0x94/0x320
[  170.277250][   T13]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  170.283221][   T13]  ? lock_chain_count+0x20/0x20
[  170.288069][   T13]  ? mark_lock+0x94/0x320
[  170.292507][   T13]  ? __cancel_work_timer+0x36a/0x560
[  170.297787][   T13]  __cancel_work_timer+0x3f4/0x560
[  170.302886][   T13]  ? cancel_work_sync+0x20/0x20
[  170.307715][   T13]  ? __cancel_work+0x1f9/0x2e0
[  170.312455][   T13]  ? lockdep_hardirqs_on+0x94/0x140
[  170.317652][   T13]  ? __cancel_work+0x27b/0x2e0
[  170.322393][   T13]  ? cancel_work+0x20/0x20
[  170.326787][   T13]  ? __rwlock_init+0x140/0x140
[  170.331637][   T13]  hci_request_cancel_all+0xcc/0x300
[  170.336900][   T13]  hci_dev_do_close+0x4e/0x1020
[  170.341738][   T13]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  170.347757][   T13]  ? _raw_spin_unlock+0x40/0x40
[  170.352609][   T13]  hci_rfkill_set_block+0x101/0x180
[  170.357882][   T13]  ? rcu_lock_release+0x20/0x20
[  170.362719][   T13]  rfkill_set_block+0x1c1/0x3c0
[  170.367570][   T13]  rfkill_epo+0x75/0x170
[  170.371819][   T13]  rfkill_op_handler+0x76/0x220
[  170.376652][   T13]  process_one_work+0x867/0xff0
[  170.381483][   T13]  ? worker_detach_from_pool+0x240/0x240
[  170.387104][   T13]  ? lockdep_hardirqs_off+0x70/0x100
[  170.392372][   T13]  ? _raw_spin_lock_irq+0xb7/0xf0
[  170.397374][   T13]  ? _raw_spin_lock_irqsave+0x100/0x100
[  170.402928][   T13]  ? wq_worker_running+0x97/0x170
[  170.408455][   T13]  worker_thread+0xad7/0x12a0
[  170.413117][   T13]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  170.418994][   T13]  kthread+0x42e/0x520
[  170.423036][   T13]  ? rcu_lock_release+0x20/0x20
[  170.427877][   T13]  ? kthread_blkcg+0xd0/0xd0
[  170.432443][   T13]  ret_from_fork+0x1f/0x30
[  170.436854][   T13]  </TASK>
[  170.446695][ T4262] usb 1-1: new full-speed USB device number 12 using dummy_hcd
[  170.872653][ T4262] usb 1-1: unable to get BOS descriptor or descriptor too short
[  170.921813][ T4262] usb 1-1: not running at top speed; connect to a high speed hub
[  171.012686][ T4262] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 4
[  171.192164][ T4262] usb 1-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[  171.202695][ T4262] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  171.212936][ T4262] usb 1-1: Product: syz
[  171.217146][ T4262] usb 1-1: Manufacturer: syz
[  171.223212][ T4262] usb 1-1: SerialNumber: syz
[  171.428893][ T7857] rxe_eth0 speed is unknown, defaulting to 1000
[  171.497414][ T4262] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  171.639061][ T7857] chnl_net:caif_netlink_parms(): no params data found
[  171.711960][ T4262] usb 1-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[  171.727529][ T4262] usb 1-1: found format II with max.bitrate = 4, frame size=7372
[  171.748263][ T7857] bridge0: port 1(bridge_slave_0) entered blocking state
[  171.764210][ T7857] bridge0: port 1(bridge_slave_0) entered disabled state
[  171.780137][ T7857] device bridge_slave_0 entered promiscuous mode
[  171.814572][ T7857] bridge0: port 2(bridge_slave_1) entered blocking state
[  171.840703][ T7857] bridge0: port 2(bridge_slave_1) entered disabled state
[  171.870637][ T7857] device bridge_slave_1 entered promiscuous mode
[  171.890866][ T3086] device hsr_slave_0 left promiscuous mode
[  171.903951][ T3086] device hsr_slave_1 left promiscuous mode
[  171.918820][ T3086] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  171.935311][ T3086] batman_adv: batadv0: Removing interface: batadv_slave_0
[  171.950449][ T3086] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  171.958422][ T3086] batman_adv: batadv0: Removing interface: batadv_slave_1
[  171.966921][ T3086] device veth0 left promiscuous mode
[  171.972851][ T3086] bridge0: port 3(veth0) entered disabled state
[  171.979703][ T3086] device bridge_slave_1 left promiscuous mode
[  171.987184][ T3086] bridge0: port 2(bridge_slave_1) entered disabled state
[  171.995302][ T3086] device bridge_slave_0 left promiscuous mode
[  172.001502][ T3086] bridge0: port 1(bridge_slave_0) entered disabled state
[  172.012210][ T3086] device veth1_macvtap left promiscuous mode
[  172.018287][ T3086] device veth0_macvtap left promiscuous mode
[  172.026171][ T3086] device veth1_vlan left promiscuous mode
[  172.032226][ T3086] device veth0_vlan left promiscuous mode
[  172.115694][ T3086] team0 (unregistering): Port device team_slave_1 removed
[  172.127814][ T3086] team0 (unregistering): Port device team_slave_0 removed
[  172.139285][ T3086] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  172.149090][ T4262] usb 1-1: invalid uac2 rates
[  172.154207][ T4262] usb 1-1: invalid uac2 rates
[  172.159227][ T4262] usb 1-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[  172.169249][ T4262] usb 1-1: found format II with max.bitrate = 4, frame size=7372
[  172.185461][ T3086] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  172.230858][ T3086] bond0 (unregistering): Released all slaves
[  172.273812][ T7857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  172.309881][ T7857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  172.352675][ T4262] usb 1-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0)
[  172.380533][ T7857] team0: Port device team_slave_0 added
[  172.408129][ T4262] usb 1-1: USB disconnect, device number 12
[  172.423580][ T7857] team0: Port device team_slave_1 added
[  172.489153][ T7857] batman_adv: batadv0: Adding interface: batadv_slave_0
[  172.532565][ T7857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  172.598320][ T7857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  172.636149][ T7857] batman_adv: batadv0: Adding interface: batadv_slave_1
[  172.678582][ T7857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  172.721485][ T7857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  172.791298][ T7857] device hsr_slave_0 entered promiscuous mode
[  172.814853][ T7857] device hsr_slave_1 entered promiscuous mode
[  172.838049][ T7857] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  172.861247][ T7857] Cannot create hsr debugfs directory
[  173.047814][ T7857] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  173.076284][ T7857] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  173.103617][ T7857] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  173.129497][ T7857] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  173.264421][ T7857] 8021q: adding VLAN 0 to HW filter on device bond0
[  173.286591][ T6461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  173.300897][ T6461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  173.319358][ T7857] 8021q: adding VLAN 0 to HW filter on device team0
[  173.336803][ T6461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  173.352741][ T6461] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  173.370046][ T6461] bridge0: port 1(bridge_slave_0) entered blocking state
[  173.377136][ T6461] bridge0: port 1(bridge_slave_0) entered forwarding state
[  173.422541][ T6461] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  173.437825][ T6461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  173.458576][ T6461] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  173.466976][    T7] Bluetooth: hci3: command 0x0409 tx timeout
[  173.484225][ T6461] bridge0: port 2(bridge_slave_1) entered blocking state
[  173.491592][ T6461] bridge0: port 2(bridge_slave_1) entered forwarding state
[  173.516911][ T6461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  173.525505][ T6461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  173.535762][ T6461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  173.545130][ T6461] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  173.554916][ T6461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  173.563698][ T6461] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  173.573165][ T6461] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  173.581424][ T6461] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  173.591124][ T7857] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  173.600720][ T6461] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  173.700439][ T3086] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  173.711013][ T3086] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  173.734125][ T7857] 8021q: adding VLAN 0 to HW filter on device batadv0
[  173.871183][ T3086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  173.888464][ T3086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  173.909726][ T3086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  173.924614][ T3086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  173.946063][ T7857] device veth0_vlan entered promiscuous mode
[  173.958010][ T3086] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  173.970743][ T3086] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  173.988436][ T7857] device veth1_vlan entered promiscuous mode
[  174.017179][ T3086] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  174.034977][ T3086] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  174.050142][ T3086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  174.070334][ T3086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  174.087921][ T7857] device veth0_macvtap entered promiscuous mode
[  174.106005][ T7857] device veth1_macvtap entered promiscuous mode
[  174.131128][ T7857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  174.155245][ T7857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.176877][ T7857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  174.193114][ T7857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.204044][ T7857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  174.214921][ T7857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.225747][ T7857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  174.236350][ T7857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.247953][ T7857] batman_adv: batadv0: Interface activated: batadv_slave_0
[  174.257108][ T3086] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  174.271201][ T3086] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  174.279527][ T3086] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  174.289146][ T3086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  174.300955][ T7857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  174.312682][ T7857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.323788][ T7857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  174.335322][ T7857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.345777][ T7857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  174.357240][ T7857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.367227][ T7857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  174.380480][ T7857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.393256][ T7857] batman_adv: batadv0: Interface activated: batadv_slave_1
[  174.402488][ T3086] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  174.413526][ T3086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  174.424174][ T7857] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  174.435064][ T7857] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  174.444154][ T7857] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  174.454240][ T7857] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  174.499218][ T7857] ieee80211 phy19: Selected rate control algorithm 'minstrel_ht'
[  174.532914][ T3086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  174.544885][ T7857] ieee80211 phy20: Selected rate control algorithm 'minstrel_ht'
[  174.558197][ T3086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  174.580355][ T1462] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  174.599519][ T3086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  174.614814][ T3086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  174.636146][ T1462] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  175.542533][ T3830] Bluetooth: hci3: command 0x041b tx timeout
[  177.621870][ T3830] Bluetooth: hci3: command 0x040f tx timeout