last executing test programs:

1m30.825208892s ago: executing program 2 (id=227):
r0 = socket$inet6(0xa, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)

1m30.673438876s ago: executing program 2 (id=229):
newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x4000)
setresuid(r0, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000039c0), r1)
sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000003ac0)={0x0, 0x0, &(0x7f0000003a80)={&(0x7f0000003a00)={0x68, r2, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {0x0, 0x4108}, {0x4c, 0x18, {0x4, @media='udp\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0xc0}, 0x800)

1m30.583783818s ago: executing program 2 (id=231):
memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x409d132, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VM(r0, 0x2275, 0x1f)

1m30.49904523s ago: executing program 2 (id=234):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x14f)
mount$bind(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x111091, 0x0)
chroot(&(0x7f0000000580)='./file0/../file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0)
pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00')

1m30.391891263s ago: executing program 2 (id=238):
openat(0xffffffffffffffff, 0x0, 0x452802, 0x120)
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a)
bind$inet6(r0, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e1f, 0x2200005, @empty, 0x4009}, 0x1c)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0x2, 0x4}}}}}}, 0x0)

1m29.946603994s ago: executing program 2 (id=243):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x2b, 0x0, 0x0)
ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000580)={0x1, 0x0, [{0x487}]})

1m29.69871396s ago: executing program 32 (id=243):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x2b, 0x0, 0x0)
ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000580)={0x1, 0x0, [{0x487}]})

6.392286183s ago: executing program 0 (id=1291):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x7101})
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000040))

4.49516536s ago: executing program 3 (id=1318):
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000000c0)={&(0x7f0000000380)=[{0x41, 0x10, 0x0, 0x0}, {0x41, 0x800, 0x0, 0x0}], 0x2})

4.339360774s ago: executing program 0 (id=1320):
timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000000440)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000000)={{0x0, 0x3938700}, {0x77359400}}, 0x0)
timer_settime(r1, 0x0, &(0x7f000006b000)={{0x77359400}, {0x0, 0x9}}, 0x0)

4.273273995s ago: executing program 0 (id=1321):
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
syz_usb_connect(0x5, 0x27, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b75c7f40470501026411010203010902120001000000000904"], 0x0)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000380)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x1f, 0x80000, 0x10400, 0x0, 0x0, 0x0, 0x7f8, 0x0, 0x0, 0x4}}, 0x50)
r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003)
ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000140)={0x1, 0x8, 0x5, &(0x7f0000000340)={0x22, "732a5473c2bf273690bb713bd646baab088d08b240d1e9ee96e13c49e155462c86"}})

3.082909475s ago: executing program 1 (id=1341):
r0 = socket(0x21, 0x2, 0xa)
r1 = io_uring_setup(0x177f, &(0x7f0000000140)={0x0, 0xfffffffe, 0x10, 0x0, 0x108})
syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000009968810524711004f320102030109021b0001000000000904000001ff01320009050d0353"], 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0)
close_range(r0, r1, 0x0)

2.618664806s ago: executing program 3 (id=1344):
unshare(0x22020600)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x40202, 0x0)
ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)=0x400001)

2.500051839s ago: executing program 0 (id=1346):
syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa00010, &(0x7f00000011c0)=ANY=[@ANYBLOB='iocharset=iso8859-1,nostrict,uid=forget,anchor=0000000000000145,gid=', @ANYRESDEC=0x0, @ANYBLOB=',dmode=00000000000000000002004,undelete,partition=00000000000000000001,unhide,\x00'], 0x1, 0xc43, &(0x7f00000001c0)="$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")
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x1c8, 0x2f8, 0x0, 0x98, 0x130, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r1, &(0x7f0000000100)={0x2, 0x4d2, @local}, 0x10)

2.197115586s ago: executing program 0 (id=1347):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x15, 0x0, &(0x7f0000001880))

2.049912s ago: executing program 0 (id=1348):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022220000009603000700000000070c00000016b8ef0a1a7083000000000b0000170083"], 0x0}, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2)
ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f00000000c0)=[0x170000, 0x5a])

2.04013082s ago: executing program 3 (id=1349):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000600)={0xbe, 0x0, 0x3})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x12, 0x0, 0x7}]})

1.919171653s ago: executing program 3 (id=1350):
syz_mount_image$xfs(&(0x7f0000000280), &(0x7f0000009740)='./file1\x00', 0x8, &(0x7f0000009780), 0x1, 0x9798, &(0x7f0000016540)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58)
copy_file_range(r0, 0x0, r0, &(0x7f00000000c0)=0xf000, 0x863, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xc41, 0x20)
fallocate(r1, 0x20, 0x4000, 0x3000000)

1.615804921s ago: executing program 4 (id=1353):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000600)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nodioread_nolock}, {@nojournal_checksum}, {@lazytime}, {@errors_remount}, {@mblk_io_submit}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0)
copy_file_range(r0, 0x0, r0, &(0x7f00000000c0)=0xae8, 0x863, 0x0)

1.218315761s ago: executing program 4 (id=1359):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x1c}, @void, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@void}, {@ipv6={0x86dd, @generic={0x5, 0x6, "864a04", 0x0, 0x29, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1={0xfc, 0x1, '\x00', 0x1}}}}}}, 0x3e)

967.365567ms ago: executing program 3 (id=1363):
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x2368810, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x50041, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x1)
open_by_handle_at(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="15000000"], 0x59b300)

960.765687ms ago: executing program 1 (id=1364):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x42)

902.714358ms ago: executing program 4 (id=1365):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000000c00)="$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")
chdir(&(0x7f0000000240)='./file0\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0)
lseek(r0, 0x6, 0x0)
getdents(r0, 0x0, 0x58)

883.725269ms ago: executing program 5 (id=1366):
r0 = socket(0xa, 0x3, 0xff)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=0x2, @ANYBLOB="0600150008000000200016801c00010000020101"], 0x60}}, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x10000002, @ipv4={'\x00', '\xff\xff', @empty}, 0x800100}, 0x1c)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="f00000001a00070000000000fcdbdf25ff020000000000000000000000000000000000ffff"], 0xf0}}, 0x0)

806.423461ms ago: executing program 5 (id=1367):
syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0x401, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x60, 0x4000}, [@IFLA_MASTER={0x8, 0x3, r2}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x40}, 0x1, 0xd, 0x0, 0x480c5}, 0x0)

659.556554ms ago: executing program 4 (id=1368):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @broadcast}, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x3, @loopback={0x100000}, 0x6}, 0x1c)

361.699862ms ago: executing program 4 (id=1369):
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000180)={0x8, {"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", 0x1000}}, 0xffffff05)
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0)
ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x8})
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106401, &(0x7f0000000400)={0x0, 0x0})

360.409442ms ago: executing program 5 (id=1370):
io_uring_setup(0x51b1, &(0x7f0000000400)={0x0, 0x3bc1, 0x40, 0x2, 0x13c})
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000, 0xfffffff7)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101240, 0x10a)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r0, 0xffffffffffffffff, 0x0)

332.952902ms ago: executing program 3 (id=1371):
syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000540)='./file1\x00', 0x1810002, &(0x7f000000c680)=ANY=[], 0x1, 0x1e2, &(0x7f0000000580)="$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")
chdir(0x0)
rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000140)='./file1\x00')
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x4a438, &(0x7f0000000280)=ANY=[], 0x1, 0x0, &(0x7f00000000c0))
rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00')

306.560333ms ago: executing program 4 (id=1372):
r0 = syz_open_dev$video(&(0x7f0000000900), 0x9, 0x2)
ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000940)={0x1, 0xd, 0x1})
ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000980)=0xd)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f00000002c0)='.\x00', &(0x7f0000000040), 0x8000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}})

305.024543ms ago: executing program 1 (id=1373):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl(r2, 0x4048aecb, &(0x7f0000000100))

206.614995ms ago: executing program 1 (id=1374):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000240)='I', 0x1}], 0x1}}], 0x1, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
shutdown(r0, 0x1)
setsockopt(r0, 0x84, 0x83, &(0x7f00000002c0)="1a00000002000000", 0x8)

167.002496ms ago: executing program 1 (id=1375):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0)
write$uinput_user_dev(r0, &(0x7f00000020c0)={'syz0\x00', {0x0, 0x0, 0x0, 0x2}, 0x0, [0x39, 0x3, 0x4000401, 0x8, 0xe, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2a, 0xfffffffd, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xfffffffd, 0x10000000, 0x99, 0x8, 0x0, 0x0, 0xfffffffd, 0x0, 0x7fffffff, 0xfffffffc, 0x5, 0xfffffff6, 0x0, 0x8, 0x800000, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x1], [0x3, 0xfffff41a, 0xfffffffd, 0x0, 0x4, 0x20000, 0x2000000, 0xedc0, 0x0, 0x5ee, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x5, 0x0, 0x9, 0x1, 0x0, 0xfffffff8, 0x2, 0x0, 0x5, 0x400, 0x0, 0x0, 0x8, 0x40000, 0x0, 0xc0804000, 0x100, 0x0, 0xfffffffd, 0x4, 0x0, 0x10000, 0x0, 0x7, 0x5, 0x4, 0x7, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0xfffffffe, 0xfffff986], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x80, 0xc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0xfffffffd, 0x2, 0xffffffff, 0x0, 0x8000, 0x0, 0x20, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x200, 0x2, 0xe, 0x80000000, 0x2, 0x47fff, 0x0, 0x0, 0x0, 0x3, 0xfffffffd, 0xf, 0x3, 0xffffff85, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0xf88, 0x0, 0x0, 0x0, 0x7ff], [0xfffffffe, 0x0, 0x4, 0x0, 0xfffefffe, 0x0, 0x2, 0x4, 0xfffffffc, 0xffffffff, 0xc76, 0x2, 0xfffffffc, 0x4, 0x803, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10, 0x5, 0xfffffffe, 0xfff, 0x8, 0x4, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xea, 0x0, 0x1, 0xfffffffd, 0x8000000, 0x4, 0xffffffff, 0x0, 0x0, 0xffffe]}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_CREATE(r0, 0x5501)

165.676696ms ago: executing program 5 (id=1376):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)
syz_emit_ethernet(0x9a, &(0x7f0000000200)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8137", 0x64, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x19, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x2, 0x98ca}, @sack_perm={0x4, 0x2}, @window={0x3, 0x3, 0xd7}, @fastopen={0x22, 0xe, "0900c7e2f68e08ddf7b27874"}, @sack={0x5, 0x1e, [0xabc, 0xffffffff, 0x220, 0x6, 0x616, 0x7b7713ea, 0xd]}, @md5sig={0x13, 0x12, "907f9e0d00130b0000000079bcfdfea9"}]}}}}}}}}, 0x0)

50.605449ms ago: executing program 5 (id=1377):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10)
sendto$inet(r0, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10)
setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f00000021c0)=0x6, 0x4)
recvmmsg(r0, &(0x7f0000001d40)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x22, 0x0)

31.57163ms ago: executing program 5 (id=1378):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x1c02, 0x0)
r1 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0))
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)
close(r1)

0s ago: executing program 1 (id=1379):
openat$userio(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00')
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240)={0x80000011})
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)={0x1a})

kernel console output (not intermixed with test programs):

om 0 to 512
[  116.122937][ T6292] loop1: detected capacity change from 0 to 131072
[  116.146950][ T6300] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[  116.158007][ T1346] pcwd_usb: initialized. heartbeat=5 sec (nowayout=0)
[  116.167462][ T6300] REISERFS (device loop3): using ordered data mode
[  116.188688][ T6292] F2FS-fs (loop1): Wrong secs_per_zone / total_sections (512, 24)
[  116.196874][ T6292] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[  116.205508][ T6292] F2FS-fs (loop1): Test dummy encryption mode enabled
[  116.215974][ T6292] F2FS-fs (loop1): invalid crc value
[  116.231206][ T6300] reiserfs: using flush barriers
[  116.233113][ T1346] usb 5-1: USB disconnect, device number 6
[  116.245780][ T6300] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  116.264970][ T6292] F2FS-fs (loop1): Found nat_bits in checkpoint
[  116.297325][ T6292] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix.
[  116.310796][ T6292] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0
[  116.321236][ T6292] F2FS-fs (loop1): Start checkpoint disabled!
[  116.334632][ T6300] REISERFS (device loop3): checking transaction log (loop3)
[  116.344309][ T6300] REISERFS (device loop3): Using r5 hash to sort names
[  116.353141][ T6300] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  116.364237][ T6292] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0
[  116.371670][ T6292] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  116.681813][ T1346] pcwd_usb: Card did not acknowledge disable attempt
[  116.695531][ T1346] pcwd_usb: USB PC Watchdog disconnected
[  116.882732][ T6315] loop0: detected capacity change from 0 to 512
[  116.946457][ T6315] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  117.020964][ T6315] EXT4-fs (loop0): 1 truncate cleaned up
[  117.027570][ T6315] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,dioread_nolock,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,nojournal_checksum,grpjquota=,,errors=continue. Quota mode: none.
[  117.669500][ T6309] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  117.701117][ T6314] loop5: detected capacity change from 0 to 40427
[  117.722794][ T6314] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  117.746711][ T6314] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  117.771564][ T6343] loop1: detected capacity change from 0 to 4096
[  117.814298][ T6314] F2FS-fs (loop5): Found nat_bits in checkpoint
[  117.825806][ T6335] loop3: detected capacity change from 0 to 32768
[  117.868603][ T6343] NILFS (loop1): invalid segment: Checksum error in segment payload
[  117.882454][ T6343] NILFS (loop1): trying rollback from an earlier position
[  117.884978][ T6314] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  117.897877][ T6335] XFS: noikeep mount option is deprecated.
[  117.919586][ T6309] usb 1-1: Using ep0 maxpacket: 8
[  117.940250][ T6314] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  117.978330][ T6335] XFS (loop3): Mounting V5 Filesystem
[  117.996310][ T6343] NILFS (loop1): recovery complete
[  118.068232][ T6359] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  118.079345][ T6309] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  118.091898][ T6309] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  118.101814][ T6309] usb 1-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00
[  118.116868][ T6309] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.150955][ T6335] XFS (loop3): Ending clean mount
[  118.170792][ T6309] kobil_sct 1-1:1.0: KOBIL USB smart card terminal converter detected
[  118.185414][ T6309] usb 1-1: KOBIL USB smart card terminal converter now attached to ttyUSB0
[  118.410336][ T4191] XFS (loop3): Unmounting Filesystem
[  118.618707][ T6368] loop1: detected capacity change from 0 to 8192
[  118.646651][ T6368] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal
[  118.673578][ T6372] blk_update_request: I/O error, dev loop9, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  118.700925][ T6368] REISERFS (device loop1): using ordered data mode
[  118.707666][ T6372] isofs_fill_super: bread failed, dev=loop9, iso_blknum=16, block=32
[  118.708227][ T6368] reiserfs: using flush barriers
[  118.732019][ T6368] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  118.760430][ T6368] REISERFS (device loop1): checking transaction log (loop1)
[  118.844583][ T6368] REISERFS (device loop1): Using r5 hash to sort names
[  118.860182][ T6368] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  118.881876][ T6379] loop3: detected capacity change from 0 to 16
[  118.926228][ T6377] 9p: Unknown Cache mode readahead
[  118.980236][ T6379] erofs: (device loop3): mounted with root inode @ nid 36.
[  119.015994][ T4231] usb 1-1: USB disconnect, device number 5
[  119.062902][ T4231] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0
[  119.074433][ T6386] loop5: detected capacity change from 0 to 64
[  119.096572][ T4231] kobil_sct 1-1:1.0: device disconnected
[  119.185063][ T6385] EXT4-fs (loop3): Ignoring removed nobh option
[  119.220253][   T25] audit: type=1800 audit(1791253541.795:30): pid=6386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.621" name="file1" dev="loop5" ino=21 res=0 errno=0
[  119.255554][ T6385] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nobh,quota,,errors=continue. Quota mode: writeback.
[  119.302941][ T6385] ext4 filesystem being mounted at /134/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  119.324643][ T6388] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback.
[  119.359395][ T6392] device-mapper: ioctl: invalid device name
[  119.758154][ T6402] input: syz0 as /devices/virtual/input/input11
[  119.816226][ T6407] device ip6_vti0 entered promiscuous mode
[  120.647143][ T6437] vcan0: tx drop: invalid sa for name 0x00000000000000f0
[  120.739088][ T6416] F2FS-fs (loop5): Invalid SB checksum offset: 0
[  120.749313][ T6416] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[  120.775020][ T6416] F2FS-fs (loop5): invalid crc value
[  120.835818][ T6416] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  120.946394][ T6422] F2FS-fs (loop4): Invalid log blocks per segment (4278190089)
[  120.975984][ T6422] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  121.008389][ T6416] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0
[  121.020184][ T6416] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  121.024368][ T6422] F2FS-fs (loop4): invalid crc value
[  121.050584][ T4231] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  121.095761][   T25] audit: type=1800 audit(1791253543.665:31): pid=6416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.640" name="file1" dev="loop5" ino=10 res=0 errno=0
[  121.119572][ T6422] F2FS-fs (loop4): Found nat_bits in checkpoint
[  121.193920][ T6434] set_capacity_and_notify: 5 callbacks suppressed
[  121.194189][ T6434] loop0: detected capacity change from 0 to 32768
[  121.259381][ T6422] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  121.262147][   T25] audit: type=1800 audit(1791253543.835:32): pid=6434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.648" name="file1" dev="loop0" ino=4 res=0 errno=0
[  121.275194][ T6422] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  121.330722][   T25] audit: type=1800 audit(1791253543.895:33): pid=6434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.648" name="file1" dev="loop0" ino=4 res=0 errno=0
[  121.351321][ T4231] usb 4-1: Using ep0 maxpacket: 32
[  121.402434][ T1346] hid-generic 0005:0008:0009.0005: unknown main item tag 0x0
[  121.471551][ T1346] hid-generic 0005:0008:0009.0005: unknown main item tag 0xd
[  121.499616][ T4231] usb 4-1: config 0 has an invalid interface number: 51 but max is 0
[  121.507723][ T4231] usb 4-1: config 0 has no interface number 0
[  121.539291][ T1346] hid-generic 0005:0008:0009.0005: unknown main item tag 0x0
[  121.567364][ T1346] hid-generic 0005:0008:0009.0005: unknown main item tag 0x0
[  121.576799][ T1346] hid-generic 0005:0008:0009.0005: unknown main item tag 0x0
[  121.588200][ T1346] hid-generic 0005:0008:0009.0005: unknown main item tag 0x0
[  121.598328][ T1346] hid-generic 0005:0008:0009.0005: unknown main item tag 0x0
[  121.617855][ T1346] hid-generic 0005:0008:0009.0005: unknown main item tag 0x0
[  121.628018][ T1346] hid-generic 0005:0008:0009.0005: unknown main item tag 0x0
[  121.639897][ T1346] hid-generic 0005:0008:0009.0005: unknown main item tag 0x0
[  121.647281][ T1346] hid-generic 0005:0008:0009.0005: unknown main item tag 0x1
[  121.659676][ T1346] hid-generic 0005:0008:0009.0005: item fetching failed at offset 25/78
[  121.668455][ T1346] hid-generic: probe of 0005:0008:0009.0005 failed with error -22
[  121.684514][ T4938] attempt to access beyond end of device
[  121.684514][ T4938] loop5: rw=2049, want=45104, limit=40427
[  121.706335][ T4185] attempt to access beyond end of device
[  121.706335][ T4185] loop4: rw=2049, want=45104, limit=40427
[  121.759978][ T4231] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  121.769030][ T4231] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  121.824921][ T4231] usb 4-1: Product: syz
[  121.829107][ T4231] usb 4-1: Manufacturer: syz
[  121.854820][ T4231] usb 4-1: SerialNumber: syz
[  121.885719][ T4231] usb 4-1: config 0 descriptor??
[  121.950973][ T4231] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  122.016866][ T6465] loop1: detected capacity change from 0 to 4096
[  122.042287][ T6467] loop0: detected capacity change from 0 to 1024
[  122.136602][ T6470] ima: rule for LSM 'unconfined_t' is undefined
[  122.148017][ T6467] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  122.176102][ T4231] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  122.227116][   T25] audit: type=1807 audit(1791253544.705:34): action=measure func=FILE_CHECK obj_type=unconfined_t res=0
[  122.235618][ T4231] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  122.252438][ T6468] ima: policy update failed
[  122.253544][   T25] audit: type=1802 audit(1791253544.795:35): pid=6470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.5.656" res=0 errno=0
[  122.280380][   T25] audit: type=1802 audit(1791253544.855:36): pid=6468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.656" res=0 errno=0
[  122.297391][ T6467] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters
[  122.329618][ T6467] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28
[  122.403467][ T6465] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  122.430139][ T6467] EXT4-fs (loop0): This should not happen!! Data will be lost
[  122.430139][ T6467] 
[  122.489334][ T6467] EXT4-fs (loop0): Total free blocks count 0
[  122.495354][ T6467] EXT4-fs (loop0): Free/Dirty block details
[  122.511115][ T6482] FAULT_INJECTION: forcing a failure.
[  122.511115][ T6482] name failslab, interval 1, probability 0, space 0, times 1
[  122.548950][ T6482] CPU: 0 PID: 6482 Comm: syz.5.664 Not tainted syzkaller #0
[  122.556185][ T6467] EXT4-fs (loop0): free_blocks=20480
[  122.556252][ T6482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  122.556265][ T6482] Call Trace:
[  122.574830][ T6482]  <TASK>
[  122.577767][ T6482]  dump_stack_lvl+0x188/0x250
[  122.582469][ T6482]  ? show_regs_print_info+0x20/0x20
[  122.587671][ T6482]  ? load_image+0x410/0x410
[  122.592186][ T6482]  ? __might_sleep+0xf0/0xf0
[  122.596784][ T6482]  ? __lock_acquire+0x7d40/0x7d40
[  122.601821][ T6482]  should_fail+0x383/0x4b0
[  122.603225][ T6467] EXT4-fs (loop0): dirty_blocks=96
[  122.606246][ T6482]  should_failslab+0x5/0x20
[  122.615825][ T6482]  slab_pre_alloc_hook+0x51/0xc0
[  122.620768][ T6482]  ? getname_flags+0xb7/0x4f0
[  122.625452][ T6482]  kmem_cache_alloc+0x3d/0x280
[  122.630232][ T6482]  getname_flags+0xb7/0x4f0
[  122.634745][ T6482]  __x64_sys_mkdirat+0x78/0x90
[  122.635340][ T6467] EXT4-fs (loop0): Block reservation details
[  122.639511][ T6482]  do_syscall_64+0x4c/0xa0
[  122.639533][ T6482]  ? clear_bhb_loop+0x30/0x80
[  122.639551][ T6482]  ? clear_bhb_loop+0x30/0x80
[  122.639572][ T6482]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  122.639590][ T6482] RIP: 0033:0x7f53a6e89199
[  122.639608][ T6482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  122.639624][ T6482] RSP: 002b:00007f53a50e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  122.639651][ T6482] RAX: ffffffffffffffda RBX: 00007f53a7110fa0 RCX: 00007f53a6e89199
[  122.639665][ T6482] RDX: 00000000000001ff RSI: 0000000000000000 RDI: ffffffffffffff9c
[  122.639678][ T6482] RBP: 00007f53a6f208e0 R08: 0000000000000000 R09: 0000000000000000
[  122.639689][ T6482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  122.639700][ T6482] R13: 00007f53a7111038 R14: 00007f53a7110fa0 R15: 00007fffebee5958
[  122.639724][ T6482]  </TASK>
[  122.694216][ T6309] usb 4-1: USB disconnect, device number 6
[  122.703041][ T6467] EXT4-fs (loop0): i_reserved_data_blocks=6
[  122.706292][    C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71
[  122.778401][ T6309] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  122.798524][ T6309] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  122.813733][ T6309] quatech2 4-1:0.51: device disconnected
[  122.838213][  T368] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  122.852074][ T4190] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22.
[  122.861066][  T368] EXT4-fs (loop0): This should not happen!! Data will be lost
[  122.861066][  T368] 
[  123.355826][ T6529] loop1: detected capacity change from 0 to 8
[  123.430892][ T6529] process 'syz.1.684' launched './file1' with NULL argv: empty string added
[  123.686681][ T6552] loop0: detected capacity change from 0 to 4096
[  123.802028][ T6552] EXT4-fs (loop0): Test dummy encryption mode enabled
[  123.809430][ T6552] EXT4-fs (loop0): bad block size 16384
[  123.983370][ T6557] loop0: detected capacity change from 0 to 256
[  124.043577][ T6557] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011bf5, chksum : 0x8604b368, utbl_chksum : 0xe619d30d)
[  124.056249][ T6557] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  124.080126][ T6557] attempt to access beyond end of device
[  124.080126][ T6557] loop0: rw=524288, want=408, limit=256
[  124.093623][ T6557] attempt to access beyond end of device
[  124.093623][ T6557] loop0: rw=524288, want=664, limit=256
[  124.107519][ T6557] attempt to access beyond end of device
[  124.107519][ T6557] loop0: rw=0, want=288, limit=256
[  124.124281][   T25] audit: type=1800 audit(1791253546.685:37): pid=6557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.697" name="file1" dev="loop0" ino=1048690 res=0 errno=0
[  124.154681][ T6557] attempt to access beyond end of device
[  124.154681][ T6557] loop0: rw=0, want=288, limit=256
[  124.158974][ T6562] syz.4.699: vmalloc error: size 4503599627370496, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0-1
[  124.183214][   T25] audit: type=1800 audit(1791253546.745:38): pid=6557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.697" name="file1" dev="loop0" ino=1048690 res=0 errno=0
[  124.199798][ T6562] CPU: 1 PID: 6562 Comm: syz.4.699 Not tainted syzkaller #0
[  124.210276][ T6562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  124.220331][ T6562] Call Trace:
[  124.223599][ T6562]  <TASK>
[  124.226529][ T6562]  dump_stack_lvl+0x188/0x250
[  124.231191][ T6562]  ? rcu_lock_release+0x5/0x20
[  124.235936][ T6562]  ? show_regs_print_info+0x20/0x20
[  124.241121][ T6562]  ? load_image+0x410/0x410
[  124.245640][ T6562]  warn_alloc+0x245/0x320
[  124.249982][ T6562]  ? zone_watermark_ok_safe+0x250/0x250
[  124.255545][ T6562]  __vmalloc_node_range+0x2b1/0x8b0
[  124.260737][ T6562]  ? rwsem_write_trylock+0x135/0x1c0
[  124.266023][ T6562]  ? clear_nonspinnable+0x60/0x60
[  124.271028][ T6562]  ? memparse+0x1dd/0x240
[  124.275360][ T6562]  ? get_options+0x4c0/0x4c0
[  124.279949][ T6562]  ? disksize_store+0xf5/0x320
[  124.284716][ T6562]  vzalloc+0x75/0x80
[  124.288613][ T6562]  ? disksize_store+0xf5/0x320
[  124.293369][ T6562]  disksize_store+0xf5/0x320
[  124.297976][ T6562]  ? sysfs_kf_write+0x183/0x2a0
[  124.302845][ T6562]  ? sysfs_kf_read+0x350/0x350
[  124.307610][ T6562]  kernfs_fop_write_iter+0x3a8/0x500
[  124.312913][ T6562]  vfs_write+0x748/0xd70
[  124.317181][ T6562]  ? file_end_write+0x250/0x250
[  124.322055][ T6562]  ? mutex_lock_nested+0x17/0x20
[  124.326998][ T6562]  ? __fdget_pos+0x2bf/0x370
[  124.331578][ T6562]  ? ksys_write+0x70/0x260
[  124.336005][ T6562]  ksys_write+0x153/0x260
[  124.340339][ T6562]  ? __ia32_sys_read+0x80/0x80
[  124.345214][ T6562]  ? lockdep_hardirqs_on+0x94/0x140
[  124.350427][ T6562]  do_syscall_64+0x4c/0xa0
[  124.354845][ T6562]  ? clear_bhb_loop+0x30/0x80
[  124.359525][ T6562]  ? clear_bhb_loop+0x30/0x80
[  124.364208][ T6562]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  124.370108][ T6562] RIP: 0033:0x7fd55dee4199
[  124.374527][ T6562] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  124.394133][ T6562] RSP: 002b:00007fd55c13c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  124.402552][ T6562] RAX: ffffffffffffffda RBX: 00007fd55e16bfa0 RCX: 00007fd55dee4199
[  124.410527][ T6562] RDX: 0000000000000002 RSI: 0000200000000140 RDI: 0000000000000003
[  124.418502][ T6562] RBP: 00007fd55df7b8e0 R08: 0000000000000000 R09: 0000000000000000
[  124.426463][ T6562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  124.434420][ T6562] R13: 00007fd55e16c038 R14: 00007fd55e16bfa0 R15: 00007ffebd6cb8f8
[  124.442403][ T6562]  </TASK>
[  124.450392][ T6562] Mem-Info:
[  124.453812][ T6562] active_anon:322 inactive_anon:6283 isolated_anon:0
[  124.453812][ T6562]  active_file:5063 inactive_file:36639 isolated_file:0
[  124.453812][ T6562]  unevictable:768 dirty:351 writeback:0
[  124.453812][ T6562]  slab_reclaimable:21378 slab_unreclaimable:95672
[  124.453812][ T6562]  mapped:30168 shmem:1670 pagetables:696 bounce:0
[  124.453812][ T6562]  kernel_misc_reclaimable:0
[  124.453812][ T6562]  free:1381644 free_pcp:12632 free_cma:0
[  124.504443][ T6562] Node 0 active_anon:1256kB inactive_anon:24620kB active_file:20052kB inactive_file:146256kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120672kB dirty:1404kB writeback:0kB shmem:4600kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10724kB pagetables:2684kB all_unreclaimable? no
[  124.598101][ T6562] Node 1 active_anon:32kB inactive_anon:512kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no
[  124.631407][   T25] audit: type=1800 audit(1791253547.205:39): pid=6573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.704" name="trans_delay_msecs" dev="configfs" ino=41011 res=0 errno=0
[  124.676839][ T6562] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  124.728295][ T6562] lowmem_reserve[]: 0 2539 2540 2540 2540
[  124.739446][ T6562] Node 0 DMA32 free:1607168kB min:34784kB low:43480kB high:52176kB reserved_highatomic:0KB active_anon:1260kB inactive_anon:25692kB active_file:20052kB inactive_file:146356kB unevictable:1536kB writepending:1592kB present:3129332kB managed:2606500kB mlocked:0kB bounce:0kB free_pcp:37416kB local_pcp:15980kB free_cma:0kB
[  124.800762][ T6582] loop5: detected capacity change from 0 to 4096
[  124.825497][ T6562] lowmem_reserve[]: 0 0 0 0 0
[  124.838603][ T6562] Node 0 Normal free:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:660kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  124.898570][ T6562] lowmem_reserve[]: 0 0 0 0 0
[  124.903561][ T6562] Node 1 Normal free:3902768kB min:55108kB low:68884kB high:82660kB reserved_highatomic:0KB active_anon:32kB inactive_anon:512kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:14868kB local_pcp:5616kB free_cma:0kB
[  124.939458][ T6562] lowmem_reserve[]: 0 0 0 0 0
[  124.946758][ T6562] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  124.963727][ T6562] Node 0 DMA32: 2405*4kB (UME) 1133*8kB (UME) 395*16kB (UM) 298*32kB (UM) 100*64kB (UME) 65*128kB (UME) 46*256kB (UME) 15*512kB (UM) 6*1024kB (ME) 2*2048kB (U) 373*4096kB (M) = 1606764kB
[  124.998829][ T6562] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  125.011014][ T4231] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  125.025144][ T6562] Node 1 Normal: 84*4kB (UME) 32*8kB (UE) 28*16kB (UME) 63*32kB (UE) 37*64kB (UME) 16*128kB (UME) 10*256kB (UME) 3*512kB (UE) 2*1024kB (UE) 1*2048kB (M) 949*4096kB (M) = 3902768kB
[  125.054275][ T6562] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  125.067727][ T6562] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  125.079934][ T6562] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  125.100702][ T6562] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  125.120462][ T6562] 43883 total pagecache pages
[  125.125156][ T6562] 0 pages in swap cache
[  125.162730][ T6562] Swap cache stats: add 2120, delete 2120, find 12/30
[  125.183038][ T6562] Free swap  = 124692kB
[  125.187203][ T6562] Total swap = 124996kB
[  125.221507][ T6562] 2097051 pages RAM
[  125.236360][ T6562] 0 pages HighMem/MovableOnly
[  125.248576][ T6562] 411503 pages reserved
[  125.267760][ T6562] 0 pages cma reserved
[  125.440006][ T4231] usb 1-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice= 1.00
[  125.453229][ T4231] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.497139][ T6606] netlink: 'syz.4.718': attribute type 39 has an invalid length.
[  125.500674][ T6582] ntfs3: loop5: mft corrupted
[  125.571546][ T6609] loop3: detected capacity change from 0 to 128
[  125.637657][ T6609] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  125.649925][ T6309] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  125.656739][ T6611] loop5: detected capacity change from 0 to 512
[  125.801497][ T6611] EXT4-fs error (device loop5): ext4_orphan_get:1410: inode #15: comm syz.5.720: iget: bad i_size value: 38620345925642
[  125.845867][ T6611] EXT4-fs error (device loop5): ext4_orphan_get:1415: comm syz.5.720: couldn't read orphan inode 15 (err -117)
[  125.865573][ T6611] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=continue,delalloc,data_err=ignore,journal_ioprio=0x0000000000000002,data_err=ignore,nojournal_checksum,,errors=continue. Quota mode: writeback.
[  125.944479][ T1275] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm kworker/u4:4: bg 0: block 5: invalid block bitmap
[  125.962707][ T1275] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 66 with error 28
[  125.978971][ T1275] EXT4-fs (loop5): This should not happen!! Data will be lost
[  125.978971][ T1275] 
[  125.994177][ T1275] EXT4-fs (loop5): Total free blocks count 0
[  126.001229][ T1275] EXT4-fs (loop5): Free/Dirty block details
[  126.007237][ T1275] EXT4-fs (loop5): free_blocks=0
[  126.018275][ T1275] EXT4-fs (loop5): dirty_blocks=66
[  126.023571][ T1275] EXT4-fs (loop5): Block reservation details
[  126.036820][ T1275] EXT4-fs (loop5): i_reserved_data_blocks=66
[  126.066351][ T6309] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  126.078237][ T6309] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  126.089106][ T6615] loop4: detected capacity change from 0 to 32768
[  126.090405][ T6309] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  126.105072][ T6309] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  126.114421][ T6309] usb 2-1: config 0 descriptor??
[  126.199335][    C0] usb 1-1: NFC: Received an invalid frame
[  126.206836][ T4231] usb 1-1: NFC: Unable to get FW version
[  126.214964][ T4231] pn533_usb: probe of 1-1:1.0 failed with error -5
[  126.274629][ T6621] loop5: detected capacity change from 0 to 512
[  126.335395][ T5376] Process accounting resumed
[  126.398244][ T6623] netlink: 'syz.5.728': attribute type 29 has an invalid length.
[  126.403219][ T5376] usb 1-1: USB disconnect, device number 6
[  126.406513][ T6623] netlink: 'syz.5.728': attribute type 29 has an invalid length.
[  126.456691][ T6623] netlink: 'syz.5.728': attribute type 29 has an invalid length.
[  126.465573][ T6623] netlink: 'syz.5.728': attribute type 29 has an invalid length.
[  126.475090][ T6623] netlink: 'syz.5.728': attribute type 29 has an invalid length.
[  126.527987][ T6627] netlink: 'syz.5.730': attribute type 22 has an invalid length.
[  126.535868][ T6627] netlink: 16 bytes leftover after parsing attributes in process `syz.5.730'.
[  126.552945][ T6627] netlink: 'syz.5.730': attribute type 22 has an invalid length.
[  126.561052][ T6627] netlink: 16 bytes leftover after parsing attributes in process `syz.5.730'.
[  126.583140][ T6309] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0
[  126.599354][ T6309] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0
[  126.609617][ T6309] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0
[  126.636967][ T6309] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0
[  126.645548][ T6629] loop5: detected capacity change from 0 to 1024
[  126.653187][ T6309] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0
[  126.666139][ T6309] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0
[  126.675959][ T6309] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0
[  126.698831][ T6309] pyra 0003:1E7D:2CF6.0006: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0
[  126.738477][ T6629] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  126.795572][ T6629] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters
[  126.820128][ T6629] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28
[  126.826875][ T6640] loop3: detected capacity change from 0 to 512
[  126.833116][ T6629] EXT4-fs (loop5): This should not happen!! Data will be lost
[  126.833116][ T6629] 
[  126.861070][ T6629] EXT4-fs (loop5): Total free blocks count 0
[  126.867083][ T6629] EXT4-fs (loop5): Free/Dirty block details
[  126.879006][ T6629] EXT4-fs (loop5): free_blocks=20480
[  126.905749][ T6640] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  126.929877][ T6629] EXT4-fs (loop5): dirty_blocks=96
[  126.939381][ T6629] EXT4-fs (loop5): Block reservation details
[  126.956907][ T6640] EXT4-fs (loop3): 1 truncate cleaned up
[  126.960166][ T6629] EXT4-fs (loop5): i_reserved_data_blocks=6
[  126.974473][ T6640] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable,resuid=0x0000000000000000,stripe=0x0000000000000040,,errors=continue. Quota mode: none.
[  127.026064][ T6640] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.734: bg 0: block 320: padding at end of block bitmap is not set
[  127.184274][  T144] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  127.199898][ T6643] loop4: detected capacity change from 0 to 40427
[  127.206557][  T144] EXT4-fs (loop5): This should not happen!! Data will be lost
[  127.206557][  T144] 
[  127.228624][ T6309] pyra 0003:1E7D:2CF6.0006: couldn't init struct pyra_device
[  127.238698][ T6309] pyra 0003:1E7D:2CF6.0006: couldn't install mouse
[  127.260410][ T6643] F2FS-fs (loop4): Invalid SB checksum offset: 0
[  127.267442][ T6643] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  127.294971][ T6309] pyra: probe of 0003:1E7D:2CF6.0006 failed with error -71
[  127.311132][ T6643] F2FS-fs (loop4): invalid crc value
[  127.351052][ T6643] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  127.364826][ T6657] loop3: detected capacity change from 0 to 512
[  127.371475][ T6309] usb 2-1: USB disconnect, device number 6
[  127.396988][ T6661] loop5: detected capacity change from 0 to 256
[  127.535040][ T6659] fido_id[6659]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  127.583374][ T6657] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_dev=0x000000000000000e,,errors=continue. Quota mode: writeback.
[  127.627842][ T6643] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[  127.644140][ T6643] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  127.672590][ T6666] loop5: detected capacity change from 0 to 256
[  127.698221][ T6657] EXT4-fs warning (device loop3): verify_group_input:147: Cannot add at group 1601862003 (only 1 groups)
[  127.701550][ T6666] exfat: Deprecated parameter 'namecase'
[  127.730186][ T6670] loop0: detected capacity change from 0 to 1024
[  127.748853][ T6666] exfat: Deprecated parameter 'namecase'
[  127.762562][ T6666] exfat: Deprecated parameter 'namecase'
[  127.769829][   T25] audit: type=1800 audit(1791253550.345:40): pid=6643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.735" name="file1" dev="loop4" ino=10 res=0 errno=0
[  127.881899][ T6666] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  127.929355][ T6673] input: syz1 as /devices/virtual/input/input12
[  128.115226][ T6682] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  128.157939][ T4185] attempt to access beyond end of device
[  128.157939][ T4185] loop4: rw=2049, want=45104, limit=40427
[  128.201612][ T6688] netlink: 4 bytes leftover after parsing attributes in process `syz.5.751'.
[  128.219833][ T5379] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  128.330824][ T6688] team0: Port device team_slave_0 removed
[  128.422990][ T6697] loop3: detected capacity change from 0 to 256
[  128.479524][ T5379] usb 2-1: Using ep0 maxpacket: 8
[  128.494902][ T6697] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  128.537808][ T6699] device syzkaller1 entered promiscuous mode
[  128.599723][ T5379] usb 2-1: config 0 descriptor has 1 excess byte, ignoring
[  128.760797][ T5379] usb 2-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c
[  128.782229][ T5379] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.798897][ T5379] usb 2-1: Product: syz
[  128.807067][ T5379] usb 2-1: Manufacturer: syz
[  128.821689][ T5379] usb 2-1: SerialNumber: syz
[  128.845357][ T5379] usb 2-1: config 0 descriptor??
[  128.901335][ T5379] cdc_ether 2-1:0.0: skipping garbage
[  128.917441][ T5379] usb 2-1: bad CDC descriptors
[  128.927920][ T5379] usb 2-1: unsupported MDLM descriptors
[  128.944435][ T5379] cdc_acm 2-1:0.0: skipping garbage
[  129.069927][ T6706] loop4: detected capacity change from 0 to 32768
[  129.145997][ T6706] JBD2: Ignoring recovery information on journal
[  129.154633][ T5379] usb 2-1: USB disconnect, device number 7
[  129.232893][ T6706] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  129.353152][ T6715] F2FS-fs (loop0): Invalid SB checksum offset: 0
[  129.385679][ T6715] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[  129.422832][ T6715] F2FS-fs (loop0): invalid crc value
[  129.436012][ T6706] syz.4.752 (6706) used greatest stack depth: 18784 bytes left
[  129.453159][ T6715] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  129.531640][ T4185] ocfs2: Unmounting device (7,4) on (node local)
[  129.619491][ T6715] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0
[  129.629543][ T6715] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  129.706235][   T25] audit: type=1800 audit(1791253552.275:41): pid=6715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.763" name="file1" dev="loop0" ino=10 res=0 errno=0
[  129.826609][ T6728] EXT4-fs (loop5): 1 truncate cleaned up
[  129.839836][ T6735] device macvtap1 entered promiscuous mode
[  129.845286][ T6728] EXT4-fs (loop5): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none.
[  129.907843][ T6728] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.767: bg 0: block 465: padding at end of block bitmap is not set
[  130.010771][ T6728] EXT4-fs (loop5): Delayed block allocation failed for inode 13 at logical offset 3 with max blocks 9 with error 28
[  130.064612][ T6728] EXT4-fs (loop5): This should not happen!! Data will be lost
[  130.064612][ T6728] 
[  130.105618][ T6728] EXT4-fs (loop5): Total free blocks count 0
[  130.128354][ T6728] EXT4-fs (loop5): Free/Dirty block details
[  130.136602][ T6741] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  130.141321][ T6728] EXT4-fs (loop5): free_blocks=0
[  130.170969][  T154] tipc: Subscription rejected, illegal request
[  130.177083][ T4188] attempt to access beyond end of device
[  130.177083][ T4188] loop0: rw=2049, want=45104, limit=40427
[  130.207389][ T6728] EXT4-fs (loop5): dirty_blocks=9
[  130.217155][ T6728] EXT4-fs (loop5): Block reservation details
[  130.224137][ T6728] EXT4-fs (loop5): i_reserved_data_blocks=9
[  130.261550][   T25] audit: type=1800 audit(1791253552.835:42): pid=6739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.767" name="file1" dev="loop5" ino=13 res=0 errno=0
[  130.261937][ T6739] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.767: invalid indirect mapped block 234881024 (level 0)
[  130.508114][ T6730] F2FS-fs (loop1): invalid crc value
[  130.562115][ T6730] F2FS-fs (loop1): Found nat_bits in checkpoint
[  130.735113][ T6730] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  130.814661][ T6761] device erspan0 entered promiscuous mode
[  130.856905][ T6761] device vlan2 entered promiscuous mode
[  130.867877][ T6759]  loop4: p1 p2 p3 < > p4 < p5 p6 >
[  130.875318][ T6759] loop4: partition table partially beyond EOD, truncated
[  130.895856][ T6759] loop4: p1 start 3405774849 is beyond EOD, truncated
[  130.903186][ T6759] loop4: p2 start 53543428 is beyond EOD, truncated
[  130.912105][ T6759] loop4: p3 start 4284289 is beyond EOD, truncated
[  130.936869][ T6759] loop4: p5 start 3405774849 is beyond EOD, truncated
[  130.946671][ T6759] loop4: p6 start 53543428 is beyond EOD, truncated
[  130.958952][ T4190] attempt to access beyond end of device
[  130.958952][ T4190] loop1: rw=2049, want=45104, limit=40427
[  131.139498][ T5379] usb 1-1: new full-speed USB device number 7 using dummy_hcd
[  131.255353][ T6309] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  131.280110][ T5376] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  131.499502][ T5379] usb 1-1: config 150 has an invalid interface number: 204 but max is 2
[  131.507953][ T5379] usb 1-1: config 150 has 2 interfaces, different from the descriptor's value: 3
[  131.522812][ T5379] usb 1-1: config 150 has no interface number 0
[  131.530639][ T5379] usb 1-1: config 150 interface 204 has no altsetting 0
[  131.539892][ T6309] usb 5-1: Using ep0 maxpacket: 32
[  131.545401][ T1108] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  131.639457][ T5376] usb 6-1: config 0 has an invalid interface number: 50 but max is 0
[  131.648058][ T5376] usb 6-1: config 0 has no interface number 0
[  131.654426][ T5376] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  131.669511][ T6309] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 88, changing to 10
[  131.681804][ T6309] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9056, setting to 1024
[  131.693612][ T6309] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  131.702832][ T6309] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  131.709650][ T5379] usb 1-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb
[  131.713400][ T6309] usb 5-1: config 0 descriptor??
[  131.729531][ T5379] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  131.737504][ T5379] usb 1-1: Product: syz
[  131.743461][ T5379] usb 1-1: Manufacturer: syz
[  131.748089][ T5379] usb 1-1: SerialNumber: syz
[  131.760504][ T6309] hub 5-1:0.0: USB hub found
[  131.799476][ T1108] usb 2-1: Using ep0 maxpacket: 32
[  131.819464][ T5376] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  131.828608][ T5376] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  131.840968][ T5376] usb 6-1: Product: syz
[  131.845133][ T5376] usb 6-1: Manufacturer: syz
[  131.849932][ T5376] usb 6-1: SerialNumber: syz
[  131.856207][ T5376] usb 6-1: config 0 descriptor??
[  131.903216][ T5376] yurex 6-1:0.50: USB YUREX device now attached to Yurex #0
[  131.919922][ T1108] usb 2-1: config 0 has an invalid interface number: 184 but max is 0
[  131.932840][ T1108] usb 2-1: config 0 has no interface number 0
[  131.938973][ T1108] usb 2-1: config 0 interface 184 has no altsetting 0
[  131.979818][ T6309] hub 5-1:0.0: 26 ports detected
[  131.999494][ T6309] hub 5-1:0.0: insufficient power available to use all downstream ports
[  132.010718][ T5379] xr_serial 1-1:150.204: skipping garbage
[  132.016576][ T5379] xr_serial 1-1:150.204: xr_serial converter detected
[  132.099466][ T1108] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  132.108890][ T1108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.117386][ T1108] usb 2-1: Product: syz
[  132.121985][ T1108] usb 2-1: Manufacturer: syz
[  132.126580][ T1108] usb 2-1: SerialNumber: syz
[  132.133583][ T1108] usb 2-1: config 0 descriptor??
[  132.170298][ T1108] smsc75xx v1.0.0
[  132.190850][ T6309] hub 5-1:0.0: hub_hub_status failed (err = -71)
[  132.197346][ T6309] hub 5-1:0.0: config failed, can't get hub status (err -71)
[  132.312112][ T6309] usbhid 5-1:0.0: can't add hid device: -71
[  132.318086][ T6309] usbhid: probe of 5-1:0.0 failed with error -71
[  132.361856][ T6309] usb 5-1: USB disconnect, device number 7
[  132.572031][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  132.578460][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  132.659524][ T5379] xr_serial ttyUSB0: Failed to set reg 0x0d: -71
[  132.665967][ T5379] xr_serial: probe of ttyUSB0 failed with error -71
[  132.675274][ T5379] usb 1-1: USB disconnect, device number 7
[  132.691407][ T5379] xr_serial 1-1:150.204: device disconnected
[  132.701061][ T6309] usb 6-1: USB disconnect, device number 2
[  132.719267][    C1] usb 6-1: yurex_control_callback - control failed: -71
[  132.732149][ T6309] yurex 6-1:0.50: USB YUREX #0 now disconnected
[  133.019289][ T5376] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  133.049375][ T1108] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71
[  133.060613][ T1108] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  133.089627][ T1108] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  133.100674][ T1108] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  133.111075][ T1108] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[  133.121473][ T1108] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  133.132864][ T1108] smsc75xx: probe of 2-1:0.184 failed with error -71
[  133.142693][ T1108] usb 2-1: USB disconnect, device number 8
[  133.254706][ T6804] set_capacity_and_notify: 6 callbacks suppressed
[  133.254716][ T6804] loop0: detected capacity change from 0 to 2048
[  133.308632][ T6804] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  133.539501][ T5376] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  133.553002][ T5376] usb 4-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3
[  133.561976][ T5376] usb 4-1: Product: syz
[  133.566159][ T5376] usb 4-1: Manufacturer: syz
[  133.588781][ T5376] usb 4-1: SerialNumber: syz
[  133.601387][ T5376] usb 4-1: config 0 descriptor??
[  133.640548][ T5376] ch341 4-1:0.0: ch341-uart converter detected
[  133.802327][ T6830] netlink: 28 bytes leftover after parsing attributes in process `syz.1.806'.
[  133.904218][   T25] audit: type=1326 audit(1791253556.475:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6835 comm="syz.0.811" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff9306d7199 code=0x0
[  133.978514][ T6846] loop4: detected capacity change from 0 to 256
[  134.203434][ T6857] loop5: detected capacity change from 0 to 256
[  134.249067][ T6857] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  134.271715][ T6857] exFAT-fs (loop5): Medium has reported failures. Some data may be lost.
[  134.290631][ T6857] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  134.462308][ T6870] loop4: detected capacity change from 0 to 512
[  134.487479][ T6872] loop5: detected capacity change from 0 to 128
[  134.530057][ T6870] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  134.551671][ T6872] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  134.725511][ T5376] ch341-uart ttyUSB0: failed to read break control: -71
[  134.744341][ T5376] ch341-uart: probe of ttyUSB0 failed with error -71
[  134.774781][ T5376] usb 4-1: USB disconnect, device number 7
[  134.792234][ T5376] ch341 4-1:0.0: device disconnected
[  134.857381][ T6883] loop4: detected capacity change from 0 to 256
[  134.943863][ T6883] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d)
[  135.235880][ T6897] loop4: detected capacity change from 0 to 512
[  135.242166][ T6893] loop0: detected capacity change from 0 to 8192
[  135.293839][ T6893] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[  135.298099][ T6879] loop5: detected capacity change from 0 to 32768
[  135.333821][ T6893] REISERFS (device loop0): using ordered data mode
[  135.355626][ T6897] EXT4-fs (loop4): Ignoring removed bh option
[  135.369387][ T6879] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.828 (6879)
[  135.399759][ T6893] reiserfs: using flush barriers
[  135.420042][ T6879] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  135.428933][ T6897] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  135.447239][ T6889] loop1: detected capacity change from 0 to 32768
[  135.458514][ T6893] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  135.476325][ T6879] BTRFS info (device loop5): setting nodatacow, compression disabled
[  135.495102][ T6879] BTRFS info (device loop5): setting datasum, datacow enabled
[  135.509403][ T6879] BTRFS info (device loop5): force clearing of disk cache
[  135.519102][ T6897] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier=0x0000000000000081,minixdf,bh,delalloc,dioread_nolock,noquota,,errors=continue. Quota mode: writeback.
[  135.554160][ T6879] BTRFS info (device loop5): turning on sync discard
[  135.588114][ T6879] BTRFS warning (device loop5): excessive commit interval 43283
[  135.609006][ T6889] find_entry called with index >= next_index
[  135.615445][ T6889] find_entry called with index >= next_index
[  135.621742][ T6889] find_entry called with index >= next_index
[  135.625738][ T6893] REISERFS (device loop0): checking transaction log (loop0)
[  135.627714][ T6889] find_entry called with index >= next_index
[  135.641536][ T6889] find_entry called with index >= next_index
[  135.647516][ T6889] add_index: next_index = 0.  Resetting!
[  135.654833][ T6889] find_entry called with index >= next_index
[  135.656016][ T6879] BTRFS info (device loop5): enabling ssd optimizations
[  135.660874][ T6889] find_entry called with index >= next_index
[  135.660884][ T6889] find_entry called with index >= next_index
[  135.677524][ T6889] non-latin1 character 0x3ff found in JFS file name
[  135.689299][ T6897] ext4 filesystem being mounted at /186/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  135.700935][ T6889] mount with iocharset=utf8 to access
[  135.787436][ T6879] BTRFS info (device loop5): using spread ssd allocation scheme
[  135.823746][ T6909] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option
[  135.854751][ T6909] EXT4-fs (loop3): Ignoring removed orlov option
[  135.859680][ T6879] BTRFS info (device loop5): not using ssd optimizations
[  135.889052][ T6909] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  135.898856][ T6879] BTRFS info (device loop5): not using spread ssd allocation scheme
[  135.898878][ T6879] BTRFS info (device loop5): using free space tree
[  135.898892][ T6879] BTRFS info (device loop5): has skinny extents
[  135.975453][ T6909] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002]
[  135.990479][ T6909] System zones: 1-12
[  136.025487][ T6909] EXT4-fs (loop3): 1 truncate cleaned up
[  136.072719][ T6909] EXT4-fs (loop3): mounted filesystem without journal. Opts: nomblk_io_submit,max_batch_time=0x0000000000000002,orlov,mb_optimize_scan=0x0000000000000001,debug,data=journal,,errors=continue. Quota mode: none.
[  136.099774][ T6893] REISERFS (device loop0): Using tea hash to sort names
[  136.127639][ T6893] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  136.234741][ T6909] EXT4-fs warning (device loop3): ext4_group_add:1696: No reserved GDT blocks, can't resize
[  136.248056][ T6879] BTRFS info (device loop5): clearing free space tree
[  136.270850][ T6879] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  136.294376][ T6879] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  136.380757][ T6879] BTRFS info (device loop5): creating free space tree
[  136.391331][ T6879] BTRFS info (device loop5): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  136.421336][ T6879] BTRFS info (device loop5): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  136.559514][ T5376] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  136.644146][ T6952] netlink: 16 bytes leftover after parsing attributes in process `syz.3.851'.
[  136.675243][ T6879] BTRFS info (device loop5): disk added /dev/nullb0
[  136.749044][ T6956] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option
[  136.795066][ T6956] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e002c028, mo2=0102]
[  136.809489][ T5376] usb 5-1: Using ep0 maxpacket: 16
[  136.845339][ T6956] System zones: 0-1, 3-12
[  136.858746][ T6956] EXT4-fs (loop3): mounted filesystem without journal. Opts: resgid=0x0000000000000000,abort,resuid=0x0000000000000000,user_xattr,discard,errors=remount-ro,debug,nodelalloc,nomblk_io_submit,nodelalloc,inode_readahead_blks=0x0000000000040000,. Quota mode: none.
[  136.930182][ T5376] usb 5-1: config 0 has an invalid interface number: 2 but max is 0
[  136.938208][ T5376] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  136.960872][ T5376] usb 5-1: config 0 has no interface number 0
[  136.966973][ T5376] usb 5-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  136.990627][ T4231] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  136.997798][ T6945] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  137.020501][ T6945] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  137.042683][ T5376] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  137.053540][ T6945] F2FS-fs (loop1): invalid crc value
[  137.059184][ T5376] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.080685][ T5376] usb 5-1: config 0 descriptor??
[  137.096911][ T6945] F2FS-fs (loop1): Found nat_bits in checkpoint
[  137.200601][ T6945] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  137.208329][ T6945] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  137.271352][ T4231] usb 1-1: Using ep0 maxpacket: 8
[  137.334019][ T4195] usb 5-1: USB disconnect, device number 8
[  137.372527][ T6968] ip_tables: iptables: counters copy to user failed while replacing table
[  137.404041][ T4231] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  137.414719][ T4231] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  137.444462][ T4231] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  137.467079][ T4231] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  137.487581][ T4231] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  137.506610][ T4231] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  137.527455][ T4231] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.586013][ T6979] ip_tables: iptables: counters copy to user failed while replacing table
[  137.600536][ T6979] tipc: Started in network mode
[  137.605650][ T6979] tipc: Node identity ac141441, cluster identity 4711
[  137.615251][ T6979] tipc: Enabled bearer <udp:syz2>, priority 10
[  137.702637][ T6981] isofs: Unable to find the ".." directory for NFS.
[  138.409439][ T6997] usbtmc 1-1:16.0: simple usb_control_msg returned 0
[  138.611927][ T4195] tipc: Node number set to 2886997057
[  138.629575][ T4195] usb 1-1: USB disconnect, device number 8
[  138.745023][ T7006] set_capacity_and_notify: 4 callbacks suppressed
[  138.745037][ T7006] loop3: detected capacity change from 0 to 8192
[  138.877035][ T7006] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  139.007911][ T7022] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  139.319363][ T5374] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  139.416512][ T7048] loop5: detected capacity change from 0 to 64
[  139.467293][ T7048] hfs: unable to load iocharset "koi8-rucodepage=maciceland"
[  139.492851][ T7048] hfs: unable to parse mount options
[  139.650893][ T7053] loop0: detected capacity change from 0 to 512
[  139.735658][ T5374] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  139.769868][ T5374] usb 4-1: config 0 has no interfaces?
[  139.897049][ T7059] loop0: detected capacity change from 0 to 512
[  139.903430][ T5374] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  139.912784][ T5374] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  139.932532][ T7059] EXT4-fs (loop0): Test dummy encryption mode enabled
[  139.939575][ T5374] usb 4-1: Manufacturer: syz
[  139.953451][ T5374] usb 4-1: config 0 descriptor??
[  139.958595][ T7059] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  139.996245][ T7059] EXT4-fs error (device loop0): ext4_orphan_get:1436: comm syz.0.895: bad orphan inode 131083
[  140.098115][   T25] audit: type=1326 audit(1791253562.665:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7064 comm="syz.4.899" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd55dee4199 code=0x7ffc0000
[  140.122868][   T25] audit: type=1326 audit(1791253562.665:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7064 comm="syz.4.899" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd55dee4199 code=0x7ffc0000
[  140.148256][   T25] audit: type=1326 audit(1791253562.665:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7064 comm="syz.4.899" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fd55dee4199 code=0x7ffc0000
[  140.149489][ T7059] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,init_itable,dioread_lock,,errors=continue. Quota mode: none.
[  140.173334][   T25] audit: type=1326 audit(1791253562.665:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7064 comm="syz.4.899" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd55dee4199 code=0x7ffc0000
[  140.228306][ T4195] usb 4-1: USB disconnect, device number 8
[  140.244998][   T25] audit: type=1326 audit(1791253562.665:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7064 comm="syz.4.899" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd55dee4199 code=0x7ffc0000
[  140.273248][   T25] audit: type=1326 audit(1791253562.695:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7064 comm="syz.4.899" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fd55dee4199 code=0x7ffc0000
[  140.304063][   T25] audit: type=1326 audit(1791253562.695:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7064 comm="syz.4.899" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd55dee4199 code=0x7ffc0000
[  140.342430][   T25] audit: type=1326 audit(1791253562.695:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7064 comm="syz.4.899" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd55dee4199 code=0x7ffc0000
[  140.399336][ T5374] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  140.683864][ T7068] loop4: detected capacity change from 0 to 40427
[  140.709683][ T7068] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  140.727873][ T7068] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  140.757108][ T7068] F2FS-fs (loop4): invalid crc value
[  140.797520][ T7068] F2FS-fs (loop4): Found nat_bits in checkpoint
[  140.804418][ T5374] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  140.829618][ T5374] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  140.915329][ T7068] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  140.929540][ T7068] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  140.949590][ T5374] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  140.979146][ T5374] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  140.997544][ T5374] usb 6-1: Manufacturer: syz
[  141.020869][ T5374] usb 6-1: config 0 descriptor??
[  141.038007][ T7077] loop0: detected capacity change from 0 to 32768
[  141.111786][ T7077] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  141.248821][ T7077] syz.0.903 (7077) used greatest stack depth: 18240 bytes left
[  141.265603][ T7084] loop3: detected capacity change from 0 to 40427
[  141.288191][ T4188] ocfs2: Unmounting device (7,0) on (node local)
[  141.339967][ T7084] F2FS-fs (loop3): Invalid SB checksum offset: 0
[  141.369660][ T7084] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[  141.423978][ T7084] F2FS-fs (loop3): invalid crc value
[  141.490612][ T7084] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  141.664625][ T7084] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0
[  141.682502][ T7084] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  141.834566][   T25] audit: type=1800 audit(1791253564.405:52): pid=7084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.906" name="file1" dev="loop3" ino=10 res=0 errno=0
[  141.982525][ T7116] loop1: detected capacity change from 0 to 512
[  142.005598][ T7116] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  142.129106][ T7123] loop4: detected capacity change from 0 to 512
[  142.159953][ T5374] uclogic 0003:256C:006D.0007: failed retrieving string descriptor #100: -71
[  142.168797][ T5374] uclogic 0003:256C:006D.0007: failed retrieving pen parameters: -71
[  142.192435][ T7124] loop0: detected capacity change from 0 to 2048
[  142.209915][ T7123] EXT4-fs (loop4): Ignoring removed bh option
[  142.217592][ T4191] attempt to access beyond end of device
[  142.217592][ T4191] loop3: rw=2049, want=45104, limit=40427
[  142.234354][ T5374] uclogic 0003:256C:006D.0007: failed probing pen v1 parameters: -71
[  142.248287][ T7123] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  142.267057][ T5374] uclogic 0003:256C:006D.0007: failed probing parameters: -71
[  142.306396][ T5374] uclogic: probe of 0003:256C:006D.0007 failed with error -71
[  142.313780][ T7124] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  142.323522][ T5374] usb 6-1: USB disconnect, device number 3
[  142.381547][ T7123] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier=0x0000000000000081,minixdf,bh,delalloc,dioread_nolock,noquota,,errors=continue. Quota mode: writeback.
[  142.415610][ T7123] ext4 filesystem being mounted at /203/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  142.584199][ T7135] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[  142.612108][ T7135] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  142.816076][ T7147] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  143.018719][ T7159] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  143.055224][ T7158] EXT4-fs error (device loop1): ext4_orphan_get:1410: inode #15: comm syz.1.934: iget: bad i_size value: 38620345925642
[  143.160983][ T7158] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.934: couldn't read orphan inode 15 (err -117)
[  143.281179][ T7158] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  143.497324][ T7181] FAULT_INJECTION: forcing a failure.
[  143.497324][ T7181] name failslab, interval 1, probability 0, space 0, times 0
[  143.571580][ T7181] CPU: 0 PID: 7181 Comm: syz.0.945 Not tainted syzkaller #0
[  143.578898][ T7181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  143.588955][ T7181] Call Trace:
[  143.592237][ T7181]  <TASK>
[  143.595176][ T7181]  dump_stack_lvl+0x188/0x250
[  143.599869][ T7181]  ? show_regs_print_info+0x20/0x20
[  143.605076][ T7181]  ? load_image+0x410/0x410
[  143.609591][ T7181]  ? __might_sleep+0xf0/0xf0
[  143.614225][ T7181]  ? __lock_acquire+0x7d40/0x7d40
[  143.619265][ T7181]  should_fail+0x383/0x4b0
[  143.623680][ T7181]  should_failslab+0x5/0x20
[  143.628182][ T7181]  slab_pre_alloc_hook+0x51/0xc0
[  143.633116][ T7181]  __kmalloc+0x6b/0x340
[  143.637260][ T7181]  ? tomoyo_realpath_from_path+0xed/0x5e0
[  143.642976][ T7181]  tomoyo_realpath_from_path+0xed/0x5e0
[  143.648521][ T7181]  tomoyo_path_perm+0x23f/0x5d0
[  143.653364][ T7181]  ? tomoyo_path_permission+0x3a0/0x3a0
[  143.658917][ T7181]  ? do_futex+0xdc2/0x12b0
[  143.663326][ T7181]  ? __fget_files+0x402/0x470
[  143.667992][ T7181]  security_inode_getattr+0xcf/0x120
[  143.673268][ T7181]  vfs_getattr+0x26/0x3a0
[  143.677587][ T7181]  __x64_sys_newfstat+0x137/0x210
[  143.682603][ T7181]  ? __context_tracking_exit+0x4c/0x80
[  143.688047][ T7181]  ? __ia32_sys_newfstatat+0x200/0x200
[  143.693500][ T7181]  ? lock_chain_count+0x20/0x20
[  143.698346][ T7181]  ? lockdep_hardirqs_on+0x94/0x140
[  143.703538][ T7181]  do_syscall_64+0x4c/0xa0
[  143.707941][ T7181]  ? clear_bhb_loop+0x30/0x80
[  143.712603][ T7181]  ? clear_bhb_loop+0x30/0x80
[  143.717266][ T7181]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  143.723146][ T7181] RIP: 0033:0x7ff9306d7199
[  143.727567][ T7181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  143.747156][ T7181] RSP: 002b:00007ff92e92f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000005
[  143.755558][ T7181] RAX: ffffffffffffffda RBX: 00007ff93095efa0 RCX: 00007ff9306d7199
[  143.763518][ T7181] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  143.771478][ T7181] RBP: 00007ff93076e8e0 R08: 0000000000000000 R09: 0000000000000000
[  143.779432][ T7181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  143.787383][ T7181] R13: 00007ff93095f038 R14: 00007ff93095efa0 R15: 00007ffc929e9d88
[  143.795355][ T7181]  </TASK>
[  143.907461][ T7181] ERROR: Out of memory at tomoyo_realpath_from_path.
[  144.258396][ T7213] set_capacity_and_notify: 1 callbacks suppressed
[  144.258409][ T7213] loop3: detected capacity change from 0 to 16
[  144.293509][ T7213] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  144.378494][ T7218] loop5: detected capacity change from 0 to 512
[  144.461379][ T7218] EXT4-fs (loop5): Ignoring removed bh option
[  144.479725][ T7218] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  144.546116][ T7218] EXT4-fs (loop5): mounted filesystem without journal. Opts: barrier=0x0000000000000081,minixdf,bh,delalloc,dioread_nolock,noquota,,errors=continue. Quota mode: writeback.
[  144.569922][ T7218] ext4 filesystem being mounted at /129/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  144.659558][ T7195] loop1: detected capacity change from 0 to 40427
[  144.701240][ T7195] F2FS-fs (loop1): invalid crc value
[  144.803868][   T25] audit: type=1326 audit(1791253567.375:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7228 comm="syz.3.964" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f43a2956199 code=0x0
[  144.839820][ T7195] F2FS-fs (loop1): Found nat_bits in checkpoint
[  145.030952][ T7195] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0
[  145.063927][ T7195] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  145.089585][ T7242] loop5: detected capacity change from 0 to 256
[  145.141781][ T7244] device-mapper: table: 248:0: target type multipath must appear alone in table
[  145.207055][ T7244] device-mapper: ioctl: error adding target to table
[  145.318800][ T7247] input: syz0 as /devices/virtual/input/input13
[  145.337300][ T4190] attempt to access beyond end of device
[  145.337300][ T4190] loop1: rw=2049, want=45104, limit=40427
[  145.635596][ T7239] loop4: detected capacity change from 0 to 32768
[  145.764865][ T7239] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  145.785134][ T7239] BTRFS info (device loop4): setting nodatacow, compression disabled
[  145.817687][ T7239] BTRFS info (device loop4): setting datasum, datacow enabled
[  145.841896][ T7239] BTRFS info (device loop4): force clearing of disk cache
[  145.865610][ T7239] BTRFS info (device loop4): turning on sync discard
[  145.894559][ T7239] BTRFS warning (device loop4): excessive commit interval 43283
[  145.914692][ T7239] BTRFS info (device loop4): enabling ssd optimizations
[  145.935827][ T7239] BTRFS info (device loop4): using spread ssd allocation scheme
[  145.951856][ T7239] BTRFS info (device loop4): not using ssd optimizations
[  145.968766][ T7239] BTRFS info (device loop4): not using spread ssd allocation scheme
[  145.985804][ T7239] BTRFS info (device loop4): using free space tree
[  146.002689][ T7239] BTRFS info (device loop4): has skinny extents
[  146.038022][ T7269] loop5: detected capacity change from 0 to 8192
[  146.118865][ T7269] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal
[  146.140232][ T7269] REISERFS (device loop5): using ordered data mode
[  146.146842][ T7269] reiserfs: using flush barriers
[  146.161614][ T7239] BTRFS info (device loop4): clearing free space tree
[  146.165683][ T7269] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  146.176205][ T7239] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  146.185232][ T7269] REISERFS (device loop5): checking transaction log (loop5)
[  146.217657][ T7239] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  146.251294][ T7239] BTRFS info (device loop4): creating free space tree
[  146.258876][ T7239] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  146.268711][ T7239] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  146.419019][ T7302] netlink: 'syz.3.987': attribute type 2 has an invalid length.
[  146.458601][ T7269] REISERFS (device loop5): Using tea hash to sort names
[  146.470251][ T7239] BTRFS info (device loop4): disk added /dev/nullb0
[  146.477630][ T7269] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2)
[  146.497157][ T7269] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage.
[  146.546385][ T7306] loop3: detected capacity change from 0 to 512
[  146.586017][   T25] audit: type=1800 audit(1791253569.155:54): pid=7269 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.982" name="file1" dev="loop5" ino=4 res=0 errno=0
[  146.606176][    C1] vkms_vblank_simulate: vblank timer overrun
[  146.787368][ T7306] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,usrquota,minixdf,noinit_itable,. Quota mode: writeback.
[  146.818209][ T7306] ext4 filesystem being mounted at /218/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  146.908138][ T7315] loop1: detected capacity change from 0 to 2048
[  146.935962][ T7312] device tunl0 entered promiscuous mode
[  146.981058][ T7312] netlink: 'syz.0.992': attribute type 4 has an invalid length.
[  146.988960][ T7312] netlink: 9 bytes leftover after parsing attributes in process `syz.0.992'.
[  147.144450][ T7315] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  147.209489][ T7315] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.994: bg 0: block 240: padding at end of block bitmap is not set
[  147.230499][ T7315] EXT4-fs error (device loop1) in ext4_setattr:5645: error 28
[  147.390991][ T7338] loop0: detected capacity change from 0 to 256
[  147.412942][ T7338] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  147.426948][ T7338] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  147.442848][ T7338] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc4d1c548, utbl_chksum : 0xe619d30d)
[  147.547369][   T25] audit: type=1800 audit(1791253570.115:55): pid=7338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.999" name="file1" dev="loop0" ino=1048707 res=0 errno=0
[  147.671430][ T7328] loop4: detected capacity change from 0 to 32768
[  147.752950][ T7328] ERROR: (device loop4): diAllocAG: ipimap->i_size is wrong
[  147.752950][ T7328] 
[  147.804837][ T7328] ERROR: (device loop4): remounting filesystem as read-only
[  147.836683][ T7328] ialloc: diAlloc returned -5!
[  147.878782][ T7328] ERROR: (device loop4): diAllocAG: ipimap->i_size is wrong
[  147.878782][ T7328] 
[  147.919698][ T7328] ERROR: (device loop4): remounting filesystem as read-only
[  147.940004][ T7328] ialloc: diAlloc returned -5!
[  148.159670][ T4231] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  148.214760][ T7357] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[  148.236241][ T7357] JBD2: Ignoring recovery information on journal
[  148.268698][ T7357] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  148.388107][ T4190] ocfs2: Unmounting device (7,1) on (node local)
[  148.420739][ T4231] usb 1-1: Using ep0 maxpacket: 8
[  148.438664][ T7373] erofs: (device loop4): mounted with root inode @ nid 36.
[  148.674559][ T7381] erofs: (device loop5): mounted with root inode @ nid 36.
[  148.699647][ T4231] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  148.716449][ T4231] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  148.723231][ T7381] erofs: (device loop5): z_erofs_readahead: readahead error at page 1 @ nid 89
[  148.728526][ T4231] usb 1-1: Product: syz
[  148.738192][ T4231] usb 1-1: Manufacturer: syz
[  148.743174][ T4231] usb 1-1: SerialNumber: syz
[  148.744390][ T7381] erofs: (device loop5): z_erofs_readahead: readahead error at page 0 @ nid 89
[  148.763255][ T4231] usb 1-1: config 0 descriptor??
[  148.796586][ T7384] erofs: (device loop4): mounted with root inode @ nid 36.
[  148.808939][ T4231] gspca_main: sonixj-2.14.0 probing 0c45:613a
[  149.075085][ T7393] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  149.121920][ T7393] ext4 filesystem being mounted at /189/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  149.375726][ T7412] set_capacity_and_notify: 7 callbacks suppressed
[  149.375740][ T7412] loop1: detected capacity change from 0 to 512
[  149.468320][ T7412] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  149.499581][ T7412] ext4 filesystem being mounted at /190/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  149.507813][ T7415] device-mapper: table: 248:0: target type multipath must appear alone in table
[  149.530860][ T7415] device-mapper: ioctl: error adding target to table
[  149.556585][ T7317] usb 4-1: new full-speed USB device number 9 using dummy_hcd
[  149.890351][ T4231] usb 1-1: USB disconnect, device number 9
[  149.909426][ T7317] usb 4-1: not running at top speed; connect to a high speed hub
[  149.989435][ T7317] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  149.999669][ T7317] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  150.009822][ T7317] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6
[  150.023005][ T7317] usb 4-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[  150.032087][ T7317] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  150.080979][ T7317] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected
[  150.089169][ T7317] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 2
[  150.097608][ T7317] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  150.106730][ T7317] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 88
[  150.114696][ T7317] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6
[  150.123480][ T7317] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  150.419276][   T13] usb 4-1: USB disconnect, device number 9
[  150.465151][   T13] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  150.509954][   T13] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  150.537856][   T13] keyspan 4-1:1.0: device disconnected
[  150.698849][ T7439] loop1: detected capacity change from 0 to 1024
[  150.789700][ T7446] input: syz0 as /devices/virtual/input/input14
[  150.893412][ T1346] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  150.966379][ T7460] loop5: detected capacity change from 0 to 1024
[  151.039740][ T7460] EXT4-fs error (device loop5): ext4_map_blocks:631: inode #3: block 2: comm syz.5.1050: lblock 2 mapped to illegal pblock 2 (length 1)
[  151.060837][ T7460] Quota error (device loop5): qtree_write_dquot: dquota write failed
[  151.069549][ T7460] EXT4-fs error (device loop5): ext4_map_blocks:631: inode #3: block 48: comm syz.5.1050: lblock 0 mapped to illegal pblock 48 (length 1)
[  151.095022][ T7464] loop3: detected capacity change from 0 to 4096
[  151.106070][ T7470] loop1: detected capacity change from 0 to 512
[  151.107701][ T7460] Quota error (device loop5): v2_write_file_info: Can't write info structure
[  151.125647][ T7460] EXT4-fs error (device loop5): ext4_acquire_dquot:6236: comm syz.5.1050: Failed to acquire dquot type 0
[  151.157491][ T7472] loop0: detected capacity change from 0 to 1024
[  151.174861][ T7460] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5873: Corrupt filesystem
[  151.189424][ T1346] usb 5-1: Using ep0 maxpacket: 16
[  151.250123][ T7460] EXT4-fs error (device loop5): ext4_evict_inode:284: inode #11: comm syz.5.1050: mark_inode_dirty error
[  151.285635][ T7460] EXT4-fs warning (device loop5): ext4_evict_inode:287: couldn't mark inode dirty (err -117)
[  151.292286][ T7470] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  151.314613][ T7460] EXT4-fs (loop5): 1 orphan inode deleted
[  151.320426][ T7470] ext4 filesystem being mounted at /196/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  151.340172][ T1346] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  151.358772][ T1346] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  151.369766][ T1346] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  151.379609][ T1346] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  151.389988][ T7470] Quota error (device loop1): do_check_range: Getting dqdh_next_free 2741 out of range 0-6
[  151.392454][ T1346] usb 5-1: config 0 interface 0 has no altsetting 0
[  151.392490][ T1346] usb 5-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00
[  151.419290][ T1346] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  151.446085][ T7460] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x0000000000000007,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none.
[  151.448509][ T1346] usb 5-1: config 0 descriptor??
[  151.474014][ T7470] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  151.484735][ T7478] loop3: detected capacity change from 0 to 1024
[  151.489072][ T7470] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.1054: Failed to acquire dquot type 0
[  151.491402][ T4282] EXT4-fs error (device loop5): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:6: lblock 1 mapped to illegal pblock 1 (length 1)
[  151.539000][ T4282] Quota error (device loop5): remove_tree: Can't read quota data block 1
[  151.550270][ T4282] EXT4-fs error (device loop5): ext4_release_dquot:6272: comm kworker/u4:6: Failed to release dquot type 0
[  151.657292][ T7460] EXT4-fs (loop5): Remounting file system with no journal so ignoring journalled data option
[  151.668277][ T7460] EXT4-fs (loop5): changing journal_checksum during remount not supported; ignoring
[  151.679434][ T7460] EXT4-fs error (device loop5): ext4_map_blocks:631: inode #3: block 48: comm syz.5.1050: lblock 0 mapped to illegal pblock 48 (length 1)
[  151.708945][ T7460] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=-117
[  151.775118][ T7485] EXT4-fs (loop5): re-mounted. Opts: (null). Quota mode: none.
[  151.841417][ T7492] loop3: detected capacity change from 0 to 256
[  151.975943][ T7497] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1065'.
[  152.009364][ T1346] logitech-djreceiver 0003:046D:C53A.0008: hiddev0,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.4-1/input0
[  152.062518][ T7506] binder: 7505:7506 ioctl c0306201 200000000080 returned -14
[  152.215976][ T1346] usb 5-1: USB disconnect, device number 9
[  152.355629][ T7526] Invalid argument reading file caps for ./file0
[  152.447371][ T7538] loop1: detected capacity change from 0 to 128
[  152.507702][ T7540] loop5: detected capacity change from 0 to 2048
[  152.581095][ T7540] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4
[  152.609023][ T7540] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  152.663989][   T25] audit: type=1800 audit(1791253575.235:56): pid=7540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1082" name=35F3CF45917B71A46B6B3273C91849AE57CB0E dev="loop5" ino=1367 res=0 errno=0
[  152.869569][ T7524] ocfs2: Slot 0 on device (7,0) was already allocated to this node!
[  152.962101][ T7524] JBD2: Ignoring recovery information on journal
[  153.097318][ T7524] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  153.208200][ T7558] hfsplus: invalid length 32517 has been corrected to 255
[  153.237445][ T7556] EXT4-fs (loop3): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,sb=0x0000000000000001,,errors=continue. Quota mode: writeback.
[  153.289794][ T7556] ext4 filesystem being mounted at /234/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  153.354830][   T25] audit: type=1800 audit(1791253575.925:57): pid=7558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1090" name="file1" dev="loop1" ino=20 res=0 errno=0
[  153.364989][ T4188] ocfs2: Unmounting device (7,0) on (node local)
[  153.539266][ T7319] usb 6-1: new full-speed USB device number 4 using dummy_hcd
[  153.569463][ T7577] EXT4-fs error (device loop3): ext4_orphan_get:1410: inode #15: comm syz.3.1097: iget: bad i_size value: 38620345925642
[  153.594090][  T154] hfsplus: b-tree write err: -5, ino 20
[  153.634940][ T7577] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.1097: couldn't read orphan inode 15 (err -117)
[  153.667721][ T7577] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  153.790987][ T7584] erofs: (device loop0): mounted with root inode @ nid 36.
[  153.815846][ T7588] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  153.868271][ T7584] erofs: (device loop0): z_erofs_readahead: readahead error at page 1 @ nid 89
[  153.895587][ T7584] erofs: (device loop0): z_erofs_readahead: readahead error at page 0 @ nid 89
[  154.002146][ T7319] usb 6-1: unable to get BOS descriptor or descriptor too short
[  154.065559][ T7319] usb 6-1: not running at top speed; connect to a high speed hub
[  154.174768][ T7319] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  154.195164][ T7319] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  154.359314][   T13] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  154.369684][ T7319] usb 6-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice= 0.40
[  154.388731][ T7319] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  154.397858][ T7319] usb 6-1: Product: syz
[  154.408006][ T7319] usb 6-1: Manufacturer: syz
[  154.415955][ T7319] usb 6-1: SerialNumber: syz
[  154.474809][ T7319] usb 6-1: interface 2 not found
[  154.749531][   T13] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  154.779338][   T13] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  154.820157][ T7645] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1128'.
[  154.973388][ T7634] set_capacity_and_notify: 7 callbacks suppressed
[  154.973403][ T7634] loop1: detected capacity change from 0 to 32768
[  154.989522][   T13] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  155.002195][   T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  155.010602][   T13] usb 1-1: Product: syz
[  155.014872][   T13] usb 1-1: Manufacturer: syz
[  155.025960][   T13] usb 1-1: SerialNumber: syz
[  155.048617][ T7634] JBD2: Ignoring recovery information on journal
[  155.090389][   T13] cdc_mbim 1-1:1.0: skipping garbage
[  155.143472][ T7634] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  155.216815][ T7634] (syz.1.1124,7634,1):ocfs2_remove_inode_range:1797 ERROR: status = -22
[  155.233868][ T7634] (syz.1.1124,7634,1):__ocfs2_change_file_space:2048 ERROR: status = -22
[  155.284434][ T4190] ocfs2: Unmounting device (7,1) on (node local)
[  155.298843][ T7599] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  155.815730][ T7667] loop4: detected capacity change from 0 to 1024
[  155.827475][ T7669] loop3: detected capacity change from 0 to 1024
[  155.877580][ T7667] EXT4-fs (loop4): Test dummy encryption mode enabled
[  155.893737][ T7669] EXT4-fs (loop3): Test dummy encryption mode enabled
[  155.895941][ T7667] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended
[  155.907604][ T7669] EXT4-fs (loop3): inline encryption not supported
[  155.917828][ T7669] EXT4-fs (loop3): Ignoring removed oldalloc option
[  155.926458][ T7667] EXT4-fs (loop4): Errors on filesystem, clearing orphan list.
[  155.940456][ T7669] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,journal_dev=0x0000000000000009,oldalloc,noblock_validity,lazytime,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback.
[  155.950394][ T7667] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,quota,,errors=continue. Quota mode: writeback.
[  155.991797][ T7599] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  156.012766][   T13] cdc_mbim 1-1:1.0: setting rx_max = 16384
[  156.065329][ T7319] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  156.231566][   T13] cdc_mbim 1-1:1.0: cdc-wdm0: USB WDM device
[  156.293859][   T13] cdc_mbim 1-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, 62:98:12:0a:46:f8
[  156.309286][ T7319] usb 2-1: Using ep0 maxpacket: 32
[  156.328435][ T7675] loop4: detected capacity change from 0 to 32768
[  156.342819][   T13] usb 1-1: USB disconnect, device number 10
[  156.350521][   T13] cdc_mbim 1-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM
[  156.429449][ T7319] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  156.441772][ T7319] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  156.478600][ T7675] XFS (loop4): Mounting V5 Filesystem
[  156.497740][ T7319] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.518045][ T7319] usb 2-1: config 0 descriptor??
[  156.561579][ T7319] hub 2-1:0.0: USB hub found
[  156.585377][ T7675] XFS (loop4): Ending clean mount
[  156.603003][ T7675] XFS (loop4): Quotacheck needed: Please wait.
[  156.668027][ T7675] XFS (loop4): Quotacheck: Done.
[  156.752704][ T4185] XFS (loop4): Unmounting Filesystem
[  156.781519][ T7319] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19)
[  157.252081][ T7319] hid-generic 0003:046D:C31C.0009: item fetching failed at offset 0/1
[  157.269813][ T7319] hid-generic: probe of 0003:046D:C31C.0009 failed with error -22
[  157.429418][   T13] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  157.594974][ T1346] usb 2-1: USB disconnect, device number 9
[  157.782006][ T7743] loop3: detected capacity change from 0 to 512
[  157.819501][   T13] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  157.833094][   T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  157.847631][   T13] usb 5-1: config 0 descriptor??
[  157.898825][ T7743] EXT4-fs (loop3): Test dummy encryption mode enabled
[  157.901179][   T13] gspca_main: cpia1-2.14.0 probing 0813:0001
[  157.957975][ T7743] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,acl,usrquota,nodioread_nolock,,errors=continue. Quota mode: writeback.
[  158.014621][ T7748] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1156'.
[  158.078639][ T7743] jffs2: notice: (7743) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  158.225928][ T7758] loop0: detected capacity change from 0 to 256
[  158.276533][   T25] audit: type=1800 audit(1791253580.845:58): pid=7758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1160" name="bus" dev="loop0" ino=1048713 res=0 errno=0
[  158.339531][   T13] cpia1 5-1:0.0: unexpected state after lo power cmd: 00
[  158.439456][ T7320] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  158.679319][ T7320] usb 2-1: Using ep0 maxpacket: 16
[  158.791881][   T13] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0)
[  158.861702][ T7319] usb 6-1: USB disconnect, device number 4
[  158.919733][ T7784] loop5: detected capacity change from 0 to 64
[  158.962544][ T7320] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  159.002658][ T7320] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  159.030717][ T7320] usb 2-1: Product: syz
[  159.038761][ T7320] usb 2-1: Manufacturer: syz
[  159.042566][   T13] usb 5-1: USB disconnect, device number 10
[  159.045300][ T7320] usb 2-1: SerialNumber: syz
[  159.078971][ T7320] usb 2-1: config 0 descriptor??
[  159.136414][ T7779] loop3: detected capacity change from 0 to 32768
[  159.573227][ T7320] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  159.635340][ T7320] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  159.679785][ T7320] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  159.697159][ T7320] usb 2-1: media controller created
[  159.730129][ T7320] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  159.774748][ T7755] dtv5100: wlen = 119, aborting.
[  159.849397][ T7320] zl10353_read_register: readreg error (reg=127, ret==0)
[  159.856792][ T7320] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  159.865234][ T7320] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  159.888894][ T7819] loop4: detected capacity change from 0 to 1024
[  159.894744][ T7320] usb 2-1: USB disconnect, device number 10
[  159.915902][ T7819] EXT4-fs (loop4): Test dummy encryption mode enabled
[  159.931966][ T7819] EXT4-fs (loop4): inline encryption not supported
[  159.951740][ T7819] EXT4-fs (loop4): Ignoring removed oldalloc option
[  159.959441][ T1346] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  159.983537][ T7320] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[  159.999822][ T7819] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,journal_dev=0x0000000000000009,oldalloc,noblock_validity,lazytime,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback.
[  160.079458][   T13] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  160.379450][ T1346] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  160.389789][ T1346] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  160.401260][ T1346] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  160.417681][ T1346] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  160.432879][ T1346] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  160.475724][   T13] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  160.537575][ T7832] loop0: detected capacity change from 0 to 2048
[  160.599920][   T13] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00
[  160.621996][   T13] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  160.635640][   T13] usb 6-1: Product: syz
[  160.640410][ T1346] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  160.649955][   T13] usb 6-1: Manufacturer: syz
[  160.655126][ T1346] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  160.664818][ T1346] usb 4-1: Product: syz
[  160.677245][ T1346] usb 4-1: Manufacturer: syz
[  160.682156][ T1346] usb 4-1: SerialNumber: syz
[  160.713734][   T13] usb 6-1: selecting invalid altsetting 1
[  160.737970][ T1346] cdc_mbim 4-1:1.0: skipping garbage
[  160.756200][   T13] dvb_ttusb_budget: ttusb_init_controller: error
[  160.763371][ T7840] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1191'.
[  160.767903][   T13] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  160.782705][ T7840] vxlan: RTM_NEWNEIGH with invalid state 0x9
[  160.854886][   T13] DVB: Unable to find symbol cx22700_attach()
[  160.867977][   T13] DVB: Unable to find symbol tda10046_attach()
[  160.877267][   T13] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[  160.912449][ T7815] dvb_ttusb_budget: failed urb submission (0: err = -2)!
[  160.948655][   T13] usb 6-1: USB disconnect, device number 5
[  161.173710][ T7871] ieee802154 phy0 wpan0: encryption failed: -22
[  161.461605][ T7894] loop4: detected capacity change from 0 to 512
[  161.676885][ T7908] loop0: detected capacity change from 0 to 4096
[  161.756085][ T7908] ntfs: volume version 3.1.
[  161.844099][ T1346] cdc_mbim 4-1:1.0: bind() failure
[  161.849560][   T13] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  161.892303][ T1346] cdc_ncm: probe of 4-1:1.1 failed with error -71
[  161.909388][ T1346] cdc_mbim: probe of 4-1:1.1 failed with error -71
[  161.929329][ T1346] usbtest: probe of 4-1:1.1 failed with error -71
[  161.950473][ T1346] usb 4-1: USB disconnect, device number 10
[  162.099293][   T13] usb 6-1: Using ep0 maxpacket: 16
[  162.105074][ T7924] loop0: detected capacity change from 0 to 2048
[  162.168038][ T7924] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  162.183642][ T7917] loop1: detected capacity change from 0 to 32768
[  162.225387][   T13] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  162.236367][   T13] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  162.247563][   T13] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 33767, setting to 1024
[  162.258844][   T13] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  162.272488][   T13] usb 6-1: config 0 interface 0 has no altsetting 0
[  162.282185][   T13] usb 6-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00
[  162.291637][   T13] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  162.301839][   T13] usb 6-1: config 0 descriptor??
[  162.307786][ T7917] XFS (loop1): Mounting V5 Filesystem
[  162.357369][ T7917] XFS (loop1): Ending clean mount
[  162.527588][ T4190] XFS (loop1): Unmounting Filesystem
[  162.551340][ T7956] input: syz0 as /devices/virtual/input/input15
[  162.646545][ T7958] loop3: detected capacity change from 0 to 8192
[  162.730027][ T7958] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[  162.751701][ T7958] REISERFS (device loop3): using ordered data mode
[  162.758221][ T7958] reiserfs: using flush barriers
[  162.774249][ T7958] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  162.807107][   T13] logitech-djreceiver 0003:046D:C53A.000A: hiddev0,hidraw0: USB HID vff.14 Device [HID 046d:c53a] on usb-dummy_hcd.5-1/input0
[  162.851922][ T7958] REISERFS (device loop3): checking transaction log (loop3)
[  162.863329][ T7958] REISERFS (device loop3): Using r5 hash to sort names
[  162.873905][ T7958] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  162.888306][ T7958] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  163.061149][   T13] usb 6-1: USB disconnect, device number 6
[  163.115084][ T7968] fido_id[7968]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  163.143830][ T7972] input: syz1 as /devices/virtual/input/input16
[  163.165945][ T7972] input: failed to attach handler leds to device input16, error: -6
[  163.336705][ T7967] loop0: detected capacity change from 0 to 32768
[  163.387942][ T7319] kernel write not supported for file /tomoyo/domain_policy (pid: 7319 comm: kworker/1:17)
[  163.443622][ T7967] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  163.462229][ T7967] BTRFS info (device loop0): setting nodatacow, compression disabled
[  163.489562][ T7967] BTRFS info (device loop0): setting datasum, datacow enabled
[  163.498386][ T7983] loop4: detected capacity change from 0 to 16
[  163.515132][ T7967] BTRFS info (device loop0): force clearing of disk cache
[  163.541580][ T7983] erofs: (device loop4): mounted with root inode @ nid 36.
[  163.562940][ T7967] BTRFS info (device loop0): turning on sync discard
[  163.572664][ T7983] overlayfs: failed to get redirect (-117)
[  163.591466][ T7967] BTRFS warning (device loop0): excessive commit interval 43283
[  163.631343][ T7967] BTRFS info (device loop0): enabling ssd optimizations
[  163.643014][ T7970] loop3: detected capacity change from 0 to 32768
[  163.689455][ T7967] BTRFS info (device loop0): using spread ssd allocation scheme
[  163.707094][ T7970] JBD2: Ignoring recovery information on journal
[  163.719666][ T7967] BTRFS info (device loop0): not using ssd optimizations
[  163.757244][ T7967] BTRFS info (device loop0): not using spread ssd allocation scheme
[  163.763162][ T7992] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1241'.
[  163.770902][ T7967] BTRFS info (device loop0): using free space tree
[  163.782090][ T7967] BTRFS info (device loop0): has skinny extents
[  163.794575][ T7970] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  163.854428][ T7992] netlink: 'syz.4.1241': attribute type 12 has an invalid length.
[  163.875516][ T7970] (syz.3.1234,7970,1):ocfs2_remove_inode_range:1797 ERROR: status = -22
[  163.893581][ T7992] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1241'.
[  163.904655][ T7970] (syz.3.1234,7970,0):__ocfs2_change_file_space:2048 ERROR: status = -22
[  163.972516][ T4191] ocfs2: Unmounting device (7,3) on (node local)
[  164.021502][ T7967] BTRFS info (device loop0): clearing free space tree
[  164.029125][ T8018] FAULT_INJECTION: forcing a failure.
[  164.029125][ T8018] name failslab, interval 1, probability 0, space 0, times 0
[  164.041803][ T7967] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  164.045831][ T8018] CPU: 0 PID: 8018 Comm: syz.4.1245 Not tainted syzkaller #0
[  164.059337][ T8018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  164.068510][ T7967] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  164.069388][ T8018] Call Trace:
[  164.069398][ T8018]  <TASK>
[  164.069406][ T8018]  dump_stack_lvl+0x188/0x250
[  164.090409][ T8018]  ? show_regs_print_info+0x20/0x20
[  164.095622][ T8018]  ? load_image+0x410/0x410
[  164.100136][ T8018]  ? __might_sleep+0xf0/0xf0
[  164.104731][ T8018]  ? __lock_acquire+0x7d40/0x7d40
[  164.109767][ T8018]  should_fail+0x383/0x4b0
[  164.110538][ T7967] BTRFS info (device loop0): creating free space tree
[  164.114190][ T8018]  should_failslab+0x5/0x20
[  164.114212][ T8018]  slab_pre_alloc_hook+0x51/0xc0
[  164.130361][ T8018]  __kmalloc+0x6b/0x340
[  164.134175][ T7967] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  164.134536][ T8018]  ? ops_init+0x8a/0x5f0
[  164.134564][ T8018]  ops_init+0x8a/0x5f0
[  164.134588][ T8018]  setup_net+0x39e/0xa10
[  164.156587][ T8018]  ? copy_net_ns+0x5b0/0x5b0
[  164.161187][ T8018]  ? copy_net_ns+0x324/0x5b0
[  164.162047][ T7967] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  164.165777][ T8018]  ? down_read_killable+0x1ce/0x340
[  164.165804][ T8018]  copy_net_ns+0x33e/0x5b0
[  164.165827][ T8018]  create_new_namespaces+0x3ce/0x700
[  164.165859][ T8018]  unshare_nsproxy_namespaces+0x116/0x160
[  164.196423][ T8018]  ksys_unshare+0x4f6/0x8e0
[  164.200932][ T8018]  ? __lock_acquire+0x7d40/0x7d40
[  164.205973][ T8018]  ? sighand_ctor+0x40/0x40
[  164.210479][ T8018]  ? lock_chain_count+0x20/0x20
[  164.215335][ T8018]  ? syscall_enter_from_user_mode+0x21/0x70
[  164.221216][ T8018]  __x64_sys_unshare+0x34/0x40
[  164.225963][ T8018]  do_syscall_64+0x4c/0xa0
[  164.230360][ T8018]  ? clear_bhb_loop+0x30/0x80
[  164.235030][ T8018]  ? clear_bhb_loop+0x30/0x80
[  164.239690][ T8018]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  164.245562][ T8018] RIP: 0033:0x7fd55dee4199
[  164.249964][ T8018] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  164.269563][ T8018] RSP: 002b:00007fd55c13c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  164.277957][ T8018] RAX: ffffffffffffffda RBX: 00007fd55e16bfa0 RCX: 00007fd55dee4199
[  164.285911][ T8018] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
[  164.293875][ T8018] RBP: 00007fd55df7b8e0 R08: 0000000000000000 R09: 0000000000000000
[  164.301831][ T8018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  164.309801][ T8018] R13: 00007fd55e16c038 R14: 00007fd55e16bfa0 R15: 00007ffebd6cb8f8
[  164.317775][ T8018]  </TASK>
[  164.392097][ T7967] BTRFS info (device loop0): disk added /dev/nullb0
[  164.693390][ T8037] batman_adv: batadv0: Adding interface: ip6gretap1
[  164.700188][ T8037] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  164.731250][ T8037] batman_adv: batadv0: Interface activated: ip6gretap1
[  164.778208][ T8044] loop4: detected capacity change from 0 to 512
[  164.821585][ T8044] EXT4-fs (loop4): Test dummy encryption mode enabled
[  164.853924][ T5383] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  164.894733][ T8044] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,acl,usrquota,nodioread_nolock,,errors=continue. Quota mode: writeback.
[  164.974195][ T8044] jffs2: notice: (8044) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  165.149504][ T5383] usb 6-1: Using ep0 maxpacket: 8
[  165.242163][ T8076] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869)
[  165.253055][ T8076] EXT4-fs (loop3): invalid journal inode
[  165.258853][ T8076] EXT4-fs (loop3): can't get journal size
[  165.275974][ T8076] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,sysvgroups,norecovery,abort,nombcache,,errors=continue. Quota mode: writeback.
[  165.319422][ T5383] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  165.337599][ T5383] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  165.357789][ T5383] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  165.368372][ T7317] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  165.376536][ T5383] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  165.387644][ T5383] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  165.406346][ T5383] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  165.416837][ T5383] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  165.649349][ T7317] usb 1-1: Using ep0 maxpacket: 16
[  165.699563][ T5383] usb 6-1: GET_CAPABILITIES returned 0
[  165.705080][ T5383] usbtmc 6-1:16.0: can't read capabilities
[  165.789610][ T7319] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  165.819434][ T7317] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  165.830641][ T7317] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  165.841134][ T7317] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  165.856114][ T7317] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  165.869117][ T7317] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  165.879043][ T7317] usb 1-1: config 0 descriptor??
[  165.908689][ T8099] set_capacity_and_notify: 1 callbacks suppressed
[  165.908703][ T8099] loop1: detected capacity change from 0 to 512
[  165.916090][ T7320] usb 6-1: USB disconnect, device number 7
[  165.947809][ T8099] EXT4-fs (loop1): Ignoring removed bh option
[  165.972980][ T8099] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  165.992771][ T8101] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1276'.
[  166.028169][ T8099] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier=0x0000000000000081,minixdf,bh,delalloc,dioread_nolock,noquota,,errors=continue. Quota mode: writeback.
[  166.037256][ T5383] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  166.050446][ T8099] ext4 filesystem being mounted at /253/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  166.091987][   T25] audit: type=1804 audit(1791253588.665:59): pid=8099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1275" name="/newroot/253/file1/file1" dev="loop1" ino=15 res=1 errno=0
[  166.119494][ T5383] hid-generic 0000:0000:0000.000B: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  166.152227][   T25] audit: type=1804 audit(1791253588.685:60): pid=8099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1275" name="/newroot/253/file1/file1" dev="loop1" ino=15 res=1 errno=0
[  166.193338][ T7319] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  166.217704][ T7319] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  166.228328][ T7319] usb 4-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice= 1.00
[  166.237495][ T7319] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  166.305290][ T7319] metro_usb 4-1:1.0: Metrologic USB to Serial converter detected
[  166.331398][ T7319] usb 4-1: Metrologic USB to Serial converter now attached to ttyUSB0
[  166.397998][ T7317] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.000C/input/input17
[  166.500827][ T7317] microsoft 0003:045E:07DA.000C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[  166.539410][ T8087] metro-usb ttyUSB0: metrousb_open - failed submitting interrupt in urb, error code=-90
[  166.575286][ T8120] device batadv_slave_1 entered promiscuous mode
[  166.585829][ T8042] usb 4-1: USB disconnect, device number 11
[  166.606047][ T8119] device batadv_slave_1 left promiscuous mode
[  166.612556][ T8042] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0
[  166.640179][ T8042] metro_usb 4-1:1.0: device disconnected
[  166.646675][ T7317] usb 1-1: USB disconnect, device number 11
[  166.698531][ T8121] fido_id[8121]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory
[  166.872397][ T8116] loop4: detected capacity change from 0 to 40427
[  166.897837][ T8116] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x1ffff
[  166.902120][ T8129] loop5: detected capacity change from 0 to 136
[  166.930278][ T8116] F2FS-fs (loop4): invalid crc value
[  166.942679][ T8116] F2FS-fs (loop4): Found nat_bits in checkpoint
[  166.949950][ T8041] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  167.030564][ T8116] F2FS-fs (loop4): Start checkpoint disabled!
[  167.048984][ T8116] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  167.107618][  T154] attempt to access beyond end of device
[  167.107618][  T154] loop4: rw=2049, want=40976, limit=40427
[  167.175832][ T8135] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  167.199404][ T8041] usb 2-1: Using ep0 maxpacket: 16
[  167.319480][ T8041] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  167.349341][ T8041] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  167.372458][ T8041] usb 2-1: config 0 interface 0 has no altsetting 0
[  167.389386][ T8041] usb 2-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00
[  167.408698][ T8041] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  167.432836][ T8041] usb 2-1: config 0 descriptor??
[  167.507429][ T8133] loop3: detected capacity change from 0 to 32768
[  167.543311][ T8133] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  167.552178][ T8150] loop4: detected capacity change from 0 to 1024
[  167.559034][ T8133] BTRFS info (device loop3): setting nodatacow, compression disabled
[  167.579292][ T8042] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  167.593958][ T8133] BTRFS info (device loop3): setting datasum, datacow enabled
[  167.607730][ T8150] EXT4-fs (loop4): inline encryption not supported
[  167.625105][ T8150] EXT4-fs (loop4): Ignoring removed bh option
[  167.637626][ T8133] BTRFS info (device loop3): force clearing of disk cache
[  167.654500][ T8133] BTRFS info (device loop3): turning on sync discard
[  167.662495][ T8133] BTRFS info (device loop3): enabling ssd optimizations
[  167.672913][ T8133] BTRFS info (device loop3): using spread ssd allocation scheme
[  167.694236][ T8133] BTRFS info (device loop3): not using ssd optimizations
[  167.702003][ T8133] BTRFS info (device loop3): not using spread ssd allocation scheme
[  167.710984][ T8133] BTRFS info (device loop3): using free space tree
[  167.714394][ T8150] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,noblock_validity,noauto_da_alloc,nolazytime,errors=continue,lazytime,inlinecrypt,stripe=0x0000000000000005,bh,nombcache,resuid=0x0000000000000000,,errors=continue. Quota mode: none.
[  167.717656][ T8133] BTRFS info (device loop3): has skinny extents
[  167.819348][ T8042] usb 1-1: Using ep0 maxpacket: 8
[  167.848618][ T8133] BTRFS info (device loop3): clearing free space tree
[  167.855529][ T8133] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  167.865412][ T8133] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  167.907679][ T8133] BTRFS info (device loop3): creating free space tree
[  167.915618][ T8133] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  167.925534][ T8133] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  167.933539][ T8041] input: HID 04f3:074d as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:04F3:074D.000D/input/input18
[  167.953289][ T8042] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  167.967581][ T8042] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  167.983589][ T8042] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  168.000252][ T8180] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  168.010942][ T8042] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  168.027041][ T8041] elan 0003:04F3:074D.000D: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 04f3:074d] on usb-dummy_hcd.1-1/input0
[  168.044481][ T8042] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  168.068383][ T8042] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  168.135913][ T8041] usb 2-1: USB disconnect, device number 11
[  168.349480][ T8042] usb 1-1: GET_CAPABILITIES returned 0
[  168.355034][ T8042] usbtmc 1-1:16.0: can't read capabilities
[  168.569469][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  168.579079][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  168.588169][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  168.597233][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  168.606271][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  168.615327][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  168.624389][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  168.633439][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  168.642475][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  168.651509][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  168.660546][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  168.669595][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  168.678646][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  168.687692][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  168.696724][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  168.705754][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  168.716107][    C1] vkms_vblank_simulate: vblank timer overrun
[  168.719705][ T8041] usb 1-1: USB disconnect, device number 12
[  168.798186][ T8204] loop1: detected capacity change from 0 to 512
[  168.887538][ T8204] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,noload,init_itable,,errors=continue. Quota mode: writeback.
[  168.932742][ T8204] ext4 filesystem being mounted at /260/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  169.124148][ T8218] netlink: 'syz.4.1317': attribute type 12 has an invalid length.
[  169.182558][ T8218] netlink: 'syz.4.1317': attribute type 29 has an invalid length.
[  169.199438][ T8218] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1317'.
[  169.218943][ T8218] netlink: 'syz.4.1317': attribute type 1 has an invalid length.
[  169.239175][ T8218] netlink: 'syz.4.1317': attribute type 1 has an invalid length.
[  169.257158][ T8218] netlink: 'syz.4.1317': attribute type 2 has an invalid length.
[  169.281240][ T8223] loop1: detected capacity change from 0 to 512
[  169.307608][ T8223] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  169.357693][ T8223] EXT4-fs (loop1): 1 truncate cleaned up
[  169.363764][ T8223] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000008,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,resuid=0x0000000000000000,bsdgroups,nombcache,nojournal_checksum,dax=never,grpid,,errors=continue. Quota mode: none.
[  169.415771][ T8222] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2812: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  169.479378][ T6963] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  169.508935][ T8234] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  169.609317][ T4272] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  169.617870][ T8246] loop1: detected capacity change from 0 to 136
[  169.626938][ T8247] loop5: detected capacity change from 0 to 512
[  169.668497][ T8247] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled
[  169.680802][ T8247] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  169.714451][ T8247] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_nolock,barrier=0x000000000000000d,minixdf,stripe=0x0000000000000b74,resuid=0x0000000000000000,jqfmt=vfsv1,grpjquota=,i_version,,errors=continue. Quota mode: writeback.
[  169.738135][ T8247] ext4 filesystem being mounted at /196/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  169.776368][ T6963] usb 4-1: Using ep0 maxpacket: 8
[  169.896453][ T8253] input: syz0 as /devices/virtual/input/input19
[  169.909536][ T6963] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  169.927662][ T6963] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  169.971847][ T6963] pvrusb2: Hardware description: Terratec Grabster AV400
[  169.978877][ T6963] pvrusb2: **********
[  169.983699][ T6963] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  170.006067][ T6963] pvrusb2: Important functionality might not be entirely working.
[  170.016190][ T6963] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  170.027893][ T6963] pvrusb2: **********
[  170.050408][ T7317] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  170.090218][ T8262] loop5: detected capacity change from 0 to 1764
[  170.143147][ T8262] iso9660: Corrupted directory entry in block 14 of inode 1920
[  170.151528][ T4272] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  170.166813][ T4272] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  170.177933][ T8260] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  170.189716][ T2425] pvrusb2: Invalid write control endpoint
[  170.212564][ T4272] usb 1-1: Product: syz
[  170.220017][ T8260] EXT4-fs (loop1): re-mounted. Opts: (null). Quota mode: writeback.
[  170.229119][ T4272] usb 1-1: Manufacturer: syz
[  170.234128][ T4272] usb 1-1: SerialNumber: syz
[  170.245400][ T2425] pvrusb2: Invalid write control endpoint
[  170.260182][ T4272] usb 1-1: config 0 descriptor??
[  170.274634][ T2425] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  170.289103][ T2425] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  170.301002][ T4272] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  170.314776][ T2425] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  170.327044][ T2425] pvrusb2: Device being rendered inoperable
[  170.333983][ T7317] usb 5-1: Using ep0 maxpacket: 32
[  170.335848][ T4272] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  170.359588][ T4272] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[  170.377120][ T2425] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  170.385089][ T4272] usb 1-1: media controller created
[  170.396541][ T2425] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  170.400041][ T6963] usb 4-1: USB disconnect, device number 12
[  170.425604][ T4272] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  170.445309][ T2425] pvrusb2: Attached sub-driver cx25840
[  170.456357][ T2425] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  170.468024][ T2425] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  170.477714][ T7317] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32
[  170.482041][   T25] audit: type=1800 audit(1791253849.055:61): pid=8274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1340" name="protocol" dev="configfs" ino=46116 res=0 errno=0
[  170.568144][ T8272] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  170.587476][ T8272] ext4 filesystem being mounted at /200/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  170.598422][ T4272] DVB: Unable to find symbol mt352_attach()
[  170.612612][ T4272] DVB: Unable to find symbol nxt6000_attach()
[  170.618854][ T4272] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[  170.673334][ T4272] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input20
[  170.679681][ T7317] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  170.694147][ T7317] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  170.697024][ T4272] dvb-usb: schedule remote query interval to 1000 msecs.
[  170.713914][ T7317] usb 5-1: Product: syz
[  170.718550][ T4272] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[  170.729499][ T7317] usb 5-1: Manufacturer: syz
[  170.735351][ T4272] dvb-usb: bulk message failed: -22 (7/0)
[  170.735546][ T7317] usb 5-1: SerialNumber: syz
[  170.742706][ T7317] usb 5-1: config 0 descriptor??
[  170.764131][ T4272] dvb-usb: bulk message failed: -22 (7/0)
[  170.780427][ T4272] usb 1-1: USB disconnect, device number 13
[  170.784549][ T8251] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  170.816153][ T7317] hub 5-1:0.0: bad descriptor, ignoring hub
[  170.822553][ T7320] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  170.834276][ T7317] hub: probe of 5-1:0.0 failed with error -5
[  170.845752][ T7317] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input21
[  170.889957][ T8284] EXT4-fs (loop5): Ignoring removed mblk_io_submit option
[  170.919007][ T8284] EXT4-fs error (device loop5): ext4_iget_extra_inode:4573: inode #15: comm syz.5.1343: corrupted in-inode xattr
[  170.962583][ T4272] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[  170.983654][ T8284] EXT4-fs error (device loop5): ext4_orphan_get:1415: comm syz.5.1343: couldn't read orphan inode 15 (err -117)
[  171.002960][ T8284] EXT4-fs (loop5): mounted filesystem without journal. Opts: journal_dev=0x0000000000000003,inode_readahead_blks=0x0000000008000000,quota,noload,user_xattr,mblk_io_submit,noinit_itable,noblock_validity,max_dir_size_kb=0x0000000000000009,init_itable=0x0000000000000fff,,errors=continue. Quota mode: writeback.
[  171.065108][ T8041] usb 5-1: USB disconnect, device number 11
[  171.069276][    C1] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19
[  171.110612][ T7320] usb 2-1: Using ep0 maxpacket: 16
[  171.140753][ T8289] set_capacity_and_notify: 3 callbacks suppressed
[  171.140766][ T8289] loop0: detected capacity change from 0 to 2048
[  171.198196][ T8289] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  171.248361][ T8292] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3)
[  171.249360][ T7320] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7
[  171.255230][ T8292] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  171.299945][ T8292] vhci_hcd vhci_hcd.0: Device attached
[  171.307199][ T8295] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(6)
[  171.313722][ T8295] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  171.315720][ T8289] ip_tables: iptables: counters copy to user failed while replacing table
[  171.321936][ T8295] vhci_hcd vhci_hcd.0: Device attached
[  171.387038][ T8292] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(5)
[  171.393576][ T8292] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  171.406264][ T8292] vhci_hcd vhci_hcd.0: Device attached
[  171.417834][ T8292] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(9)
[  171.424353][ T8292] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  171.442459][ T8292] vhci_hcd vhci_hcd.0: Device attached
[  171.459761][ T8299] vhci_hcd: connection closed
[  171.473486][ T8301] vhci_hcd: connection closed
[  171.486353][  T368] vhci_hcd: stop threads
[  171.486459][ T8296] vhci_hcd: connection closed
[  171.491978][  T368] vhci_hcd: release socket
[  171.495445][ T8293] vhci_hcd: connection closed
[  171.517480][  T368] vhci_hcd: disconnect device
[  171.527725][ T7320] usb 2-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f
[  171.547244][ T7320] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  171.557466][  T368] vhci_hcd: stop threads
[  171.567585][ T7320] usb 2-1: Product: syz
[  171.572168][  T368] vhci_hcd: release socket
[  171.579292][ T7320] usb 2-1: Manufacturer: syz
[  171.584457][ T8042] usb 43-1: new high-speed USB device number 2 using vhci_hcd
[  171.591416][  T368] vhci_hcd: disconnect device
[  171.594681][ T8294] vhci_hcd: sendmsg failed!, ret=-32 for 48
[  171.599927][ T7320] usb 2-1: SerialNumber: syz
[  171.612477][ T7320] usb 2-1: config 0 descriptor??
[  171.618703][  T368] vhci_hcd: stop threads
[  171.623096][  T368] vhci_hcd: release socket
[  171.628999][  T368] vhci_hcd: disconnect device
[  171.637424][  T368] vhci_hcd: stop threads
[  171.642692][  T368] vhci_hcd: release socket
[  171.647162][  T368] vhci_hcd: disconnect device
[  171.652711][ T7320] hub 2-1:0.0: bad descriptor, ignoring hub
[  171.658868][ T7320] hub: probe of 2-1:0.0 failed with error -5
[  171.844897][ T8041] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  171.879893][ T8313] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1351'.
[  171.993932][ T8311] loop3: detected capacity change from 0 to 32768
[  172.037949][ T4272] usb 2-1: USB disconnect, device number 12
[  172.045875][ T8320] loop4: detected capacity change from 0 to 1024
[  172.096059][ T8041] usb 1-1: Using ep0 maxpacket: 16
[  172.101542][ T8320] EXT4-fs (loop4): Ignoring removed mblk_io_submit option
[  172.168139][ T8320] EXT4-fs (loop4): Ignoring removed bh option
[  172.196478][ T8311] XFS (loop3): Mounting V5 Filesystem
[  172.229689][ T8041] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  172.249300][ T8041] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  172.256282][ T8320] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nodioread_nolock,nojournal_checksum,lazytime,errors=remount-ro,mblk_io_submit,bh,init_itable,. Quota mode: none.
[  172.259969][ T8041] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  172.294530][ T8041] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  172.320478][   T25] audit: type=1800 audit(1791253850.885:62): pid=8336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1357" name="c_ssize" dev="configfs" ino=46233 res=0 errno=0
[  172.324101][ T8041] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  172.387668][ T8041] usb 1-1: config 0 descriptor??
[  172.492170][ T8311] XFS (loop3): Ending clean mount
[  172.667675][ T4191] XFS (loop3): Unmounting Filesystem
[  172.739573][ T8353] loop4: detected capacity change from 0 to 2048
[  172.835906][ T8353] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  172.903504][ T8041] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.000E/input/input22
[  173.027629][ T8041] microsoft 0003:045E:07DA.000E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[  173.190011][ T8366] overlayfs: failed to decode file handle (len=5, type=0, flags=0, err=-22)
[  173.249242][ T7320] usb 1-1: USB disconnect, device number 14
[  173.325898][ T8373] loop3: detected capacity change from 0 to 64
[  173.474185][ T8382] input: syz0 as /devices/virtual/input/input23
[  173.481963][ T8384] TCP: tcp_parse_options: Illegal window scaling value 215 > 14 received
[  173.657151][ T4272] 
[  173.659500][ T4272] ======================================================
[  173.666503][ T4272] WARNING: possible circular locking dependency detected
[  173.673525][ T4272] syzkaller #0 Not tainted
[  173.677934][ T4272] ------------------------------------------------------
[  173.684942][ T4272] kworker/0:7/4272 is trying to acquire lock:
[  173.690990][ T4272] ffff88802567d028 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210
[  173.702031][ T4272] 
[  173.702031][ T4272] but task is already holding lock:
[  173.709374][ T4272] ffffffff8d6d76c8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x43/0x170
[  173.718431][ T4272] 
[  173.718431][ T4272] which lock already depends on the new lock.
[  173.718431][ T4272] 
[  173.728805][ T4272] 
[  173.728805][ T4272] the existing dependency chain (in reverse order) is:
[  173.737793][ T4272] 
[  173.737793][ T4272] -> #4 (rfkill_global_mutex){+.+.}-{3:3}:
[  173.745762][ T4272]        __mutex_lock_common+0x1e5/0x2400
[  173.751460][ T4272]        mutex_lock_nested+0x17/0x20
[  173.756728][ T4272]        rfkill_register+0x2f/0x970
[  173.761920][ T4272]        hci_register_dev+0x459/0x980
[  173.767289][ T4272]        vhci_create_device+0x32e/0x5c0
[  173.772822][ T4272]        vhci_write+0x389/0x440
[  173.777664][ T4272]        vfs_write+0x748/0xd70
[  173.782408][ T4272]        ksys_write+0x153/0x260
[  173.787237][ T4272]        do_syscall_64+0x4c/0xa0
[  173.792153][ T4272]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  173.798562][ T4272] 
[  173.798562][ T4272] -> #3 (&data->open_mutex){+.+.}-{3:3}:
[  173.806348][ T4272]        __mutex_lock_common+0x1e5/0x2400
[  173.812059][ T4272]        mutex_lock_nested+0x17/0x20
[  173.817324][ T4272]        vhci_send_frame+0x88/0x100
[  173.822527][ T4272]        hci_send_frame+0x1a9/0x2e0
[  173.827704][ T4272]        hci_tx_work+0x9b5/0x16d0
[  173.832702][ T4272]        process_one_work+0x867/0xff0
[  173.838054][ T4272]        worker_thread+0xad7/0x12a0
[  173.843235][ T4272]        kthread+0x42e/0x520
[  173.847799][ T4272]        ret_from_fork+0x1f/0x30
[  173.852717][ T4272] 
[  173.852717][ T4272] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}:
[  173.861897][ T4272]        __flush_work+0x116/0x210
[  173.866900][ T4272]        hci_dev_do_close+0x201/0x1020
[  173.872339][ T4272]        hci_unregister_dev+0x2eb/0x590
[  173.877861][ T4272]        vhci_release+0x73/0xc0
[  173.882689][ T4272]        __fput+0x212/0x8c0
[  173.887170][ T4272]        task_work_run+0x125/0x1a0
[  173.892271][ T4272]        do_exit+0x635/0x2110
[  173.896921][ T4272]        do_group_exit+0x12c/0x2f0
[  173.902004][ T4272]        __x64_sys_exit_group+0x3b/0x40
[  173.907523][ T4272]        do_syscall_64+0x4c/0xa0
[  173.912438][ T4272]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  173.918832][ T4272] 
[  173.918832][ T4272] -> #1 (&hdev->req_lock){+.+.}-{3:3}:
[  173.926444][ T4272]        __mutex_lock_common+0x1e5/0x2400
[  173.932142][ T4272]        mutex_lock_nested+0x17/0x20
[  173.937400][ T4272]        bg_scan_update+0x44/0x3b0
[  173.942487][ T4272]        process_one_work+0x867/0xff0
[  173.947834][ T4272]        worker_thread+0xad7/0x12a0
[  173.953019][ T4272]        kthread+0x42e/0x520
[  173.957582][ T4272]        ret_from_fork+0x1f/0x30
[  173.962518][ T4272] 
[  173.962518][ T4272] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}:
[  173.972328][ T4272]        __lock_acquire+0x38f7/0x7d40
[  173.977693][ T4272]        lock_acquire+0x19f/0x400
[  173.982715][ T4272]        __flush_work+0x116/0x210
[  173.987717][ T4272]        __cancel_work_timer+0x3f4/0x560
[  173.993326][ T4272]        hci_request_cancel_all+0xcc/0x300
[  173.999146][ T4272]        hci_dev_do_close+0x4e/0x1020
[  174.004495][ T4272]        hci_rfkill_set_block+0x101/0x180
[  174.010194][ T4272]        rfkill_set_block+0x1c1/0x3c0
[  174.015567][ T4272]        rfkill_epo+0x75/0x170
[  174.020311][ T4272]        rfkill_op_handler+0x76/0x220
[  174.025658][ T4272]        process_one_work+0x867/0xff0
[  174.031003][ T4272]        worker_thread+0xad7/0x12a0
[  174.036173][ T4272]        kthread+0x42e/0x520
[  174.040736][ T4272]        ret_from_fork+0x1f/0x30
[  174.045650][ T4272] 
[  174.045650][ T4272] other info that might help us debug this:
[  174.045650][ T4272] 
[  174.055850][ T4272] Chain exists of:
[  174.055850][ T4272]   (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex
[  174.055850][ T4272] 
[  174.071576][ T4272]  Possible unsafe locking scenario:
[  174.071576][ T4272] 
[  174.079001][ T4272]        CPU0                    CPU1
[  174.084346][ T4272]        ----                    ----
[  174.089683][ T4272]   lock(rfkill_global_mutex);
[  174.094422][ T4272]                                lock(&data->open_mutex);
[  174.101500][ T4272]                                lock(rfkill_global_mutex);
[  174.108755][ T4272]   lock((work_completion)(&hdev->bg_scan_update));
[  174.115316][ T4272] 
[  174.115316][ T4272]  *** DEADLOCK ***
[  174.115316][ T4272] 
[  174.123437][ T4272] 3 locks held by kworker/0:7/4272:
[  174.128605][ T4272]  #0: ffff888016c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0
[  174.138838][ T4272]  #1: ffffc900036cfd00 ((rfkill_op_work).work){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0
[  174.149064][ T4272]  #2: ffffffff8d6d76c8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x43/0x170
[  174.158519][ T4272] 
[  174.158519][ T4272] stack backtrace:
[  174.164400][ T4272] CPU: 0 PID: 4272 Comm: kworker/0:7 Not tainted syzkaller #0
[  174.171856][ T4272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  174.181887][ T4272] Workqueue: events rfkill_op_handler
[  174.187242][ T4272] Call Trace:
[  174.190497][ T4272]  <TASK>
[  174.193407][ T4272]  dump_stack_lvl+0x188/0x250
[  174.198066][ T4272]  ? load_image+0x410/0x410
[  174.202543][ T4272]  ? show_regs_print_info+0x20/0x20
[  174.207719][ T4272]  ? print_circular_bug+0x12b/0x1a0
[  174.212896][ T4272]  check_noncircular+0x2f8/0x400
[  174.217812][ T4272]  ? print_deadlock_bug+0x5d0/0x5d0
[  174.222987][ T4272]  ? lockdep_lock+0xf1/0x1f0
[  174.227556][ T4272]  ? __lock_acquire+0x12df/0x7d40
[  174.232566][ T4272]  ? mark_lock+0x94/0x320
[  174.236866][ T4272]  ? _find_first_zero_bit+0xd1/0xf0
[  174.242041][ T4272]  __lock_acquire+0x38f7/0x7d40
[  174.246875][ T4272]  ? verify_lock_unused+0x140/0x140
[  174.252057][ T4272]  ? mark_lock+0x94/0x320
[  174.256358][ T4272]  ? verify_lock_unused+0x140/0x140
[  174.261533][ T4272]  ? mark_lock+0x94/0x320
[  174.265842][ T4272]  lock_acquire+0x19f/0x400
[  174.270323][ T4272]  ? __flush_work+0xfa/0x210
[  174.274893][ T4272]  ? __lock_acquire+0x7d40/0x7d40
[  174.279901][ T4272]  ? read_lock_is_recursive+0x10/0x10
[  174.285249][ T4272]  ? start_flush_work+0x784/0x830
[  174.290255][ T4272]  __flush_work+0x116/0x210
[  174.294746][ T4272]  ? __flush_work+0xfa/0x210
[  174.299307][ T4272]  ? flush_work+0x20/0x20
[  174.303610][ T4272]  ? try_to_grab_pending+0xfb/0x820
[  174.308781][ T4272]  ? mark_lock+0x94/0x320
[  174.313093][ T4272]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  174.319048][ T4272]  ? lock_chain_count+0x20/0x20
[  174.323874][ T4272]  ? mark_lock+0x94/0x320
[  174.328181][ T4272]  ? __cancel_work_timer+0x36a/0x560
[  174.333444][ T4272]  __cancel_work_timer+0x3f4/0x560
[  174.338533][ T4272]  ? cancel_work_sync+0x20/0x20
[  174.343357][ T4272]  ? __cancel_work+0x1f9/0x2e0
[  174.348096][ T4272]  ? lockdep_hardirqs_on+0x94/0x140
[  174.353286][ T4272]  ? __cancel_work+0x27b/0x2e0
[  174.358023][ T4272]  ? cancel_work+0x20/0x20
[  174.362414][ T4272]  ? __rwlock_init+0x140/0x140
[  174.367156][ T4272]  hci_request_cancel_all+0xcc/0x300
[  174.372423][ T4272]  hci_dev_do_close+0x4e/0x1020
[  174.377251][ T4272]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  174.383123][ T4272]  ? _raw_spin_unlock+0x40/0x40
[  174.387967][ T4272]  hci_rfkill_set_block+0x101/0x180
[  174.393162][ T4272]  ? rcu_lock_release+0x20/0x20
[  174.397990][ T4272]  rfkill_set_block+0x1c1/0x3c0
[  174.402820][ T4272]  rfkill_epo+0x75/0x170
[  174.407039][ T4272]  rfkill_op_handler+0x76/0x220
[  174.411866][ T4272]  process_one_work+0x867/0xff0
[  174.416707][ T4272]  ? worker_detach_from_pool+0x240/0x240
[  174.422322][ T4272]  ? lockdep_hardirqs_off+0x70/0x100
[  174.427582][ T4272]  ? _raw_spin_lock_irq+0xb7/0xf0
[  174.432599][ T4272]  ? _raw_spin_lock_irqsave+0x100/0x100
[  174.438117][ T4272]  ? wq_worker_running+0x97/0x170
[  174.443117][ T4272]  worker_thread+0xad7/0x12a0
[  174.447771][ T4272]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  174.453639][ T4272]  kthread+0x42e/0x520
[  174.457681][ T4272]  ? rcu_lock_release+0x20/0x20
[  174.462509][ T4272]  ? kthread_blkcg+0xd0/0xd0
[  174.467075][ T4272]  ret_from_fork+0x1f/0x30
[  174.471487][ T4272]  </TASK>
[  176.719827][ T8042] vhci_hcd: vhci_device speed not set