last executing test programs:

1m10.086025075s ago: executing program 2 (id=297):
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f725616b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633b72fad6265a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329dffafc3612e325c1eb4a3ab2e156a97444800", "0615e456c196e819a321fdb3690bfab19538829a732a01781564ef7738cb5b82a704b3952f81c68bb4ceeaad63206f88201638e87c4981cbf9332cbc9c4d69e392bd33237ece7ad91e44edac0da8dacad81adf2e08c21ad6b44ce1f90bd618c255ca40cdb411485fb48a51d329c816b3488c7d032ef69c502c6e1236bd381efd410165988847c1dcb98a18ca2b853910e52044fa3b3026cb88de269537c8f26ffc3b15cbf279832bfc90bd95939043182e88050dfd2a4784a5d1453610fb1f1c2bac36c3ecd3e6fb756ef8880debeef3636afd981d8af4ab119928448f90351aec113335eacf52a18c87738d9679d3acc032a16fbefc64776f363610a15b37bcd36e6a7cba931151b9c9ba5779d550e9ab21603a43a25f3b4895d8dc4f3ce0e7d5e964e888169ea79a0848e9338b3d34d62e963fbf98834f4455419907f0ffdb76373af77a34edee7789f56e7f01bdab9614a0d460f791a06e6cf5243bf2b3a1624a80ec7e1116f1c81f5ef4b895be74bf67eea9193428b58a8b62b7976d3d2e59796c46ec918c83cd49c3f43dbd2967586966c19ace7b0bef5f94eb333b362649f1bfa114f8b1f126e97ec672cff77e2130823fa7a1df6760c6a8917815e9f0a409ed32b133df7dc9afceffcd472b35145c83c9167764d25ce214133c6170adeb6653b30b226a3b6ff1363ac862a540c7fab584cd051ce7ee951e0f121d43cff75afbdec6bc6f6e8f7db58c8086751320d22ee8582e915cabc536e3767e9a9230c9ae8b92398f0ca2a7141ea4588af7afde10e5ec2a6fe85ba5712e126629d4e3998fc4721cb638f2ef8356049e3448466e2c400d5e8baf843fa399907cb526b791c5350ce29204cb6fe50b892a69ec6dbecc28f032a745738faa12c2a34222942fef0ec0511da5fe0b565ceac429da7cc25cfe0320b40a514723e2392a6a361032343edb79fd83cd0a354837153542fd61b3156b54c566036e493250c3a3214738e3cacc24a50d5dfd17d5008b4ca629c3062f3417cb69c48b8b888ae51256bb4e6c68e95a71a00383ad9df263f6a775ded64fef20ed5cb5f31c33cb86f839d00a12e40cd31219113619c4e0585454cb1776278bfd7f5c4275792afb790e83ff0fc6925355c7aee7a070477d9ec2292366e39b9dc66f7adcf449a1a718e5217183faf0f679efc5cef20bcdcf2d12ea0684084ec0d693256e280025b23b5a08b7b1ebe7d41fb045793f971d6ee066604818cb09d86c1eda99a44c35476a113fd5d1a7543f8f99424ebb78dd9e00d719502a6eafa743a061fa3fa55e4deaa0a011b6b9d633f10e0c9446b5a2e3f6d6014ab00695366c1a6bf0c32f703aebb7988c7d4d322681458e85626302c70f37628835e1fcfff1da3099c0b4af433eb9a51f9609f2c0c09a98b18880c846b34d6ac0210f073765666100976ee1d928893f983580ea47a012144633b98e02c3e81869534ab985eb3a73e0bac892dac949f85db949285a6a7a490b1075467226af23df82d8dd09b7282490fbb3ada9ed4cae8f761aefbe0701de6b132f12044c58ac1c2607c8f51361de5bed021dea13fd0a440263cf0b304522a324b581ab274e7bdae5994316657b5c0ab0220d9b08739729f7a35d436878c182aec4f08dd161c11ee5b7937fae7835e8bfe98a44c8d4bbb2e0eee0cb5d7c93517e96a9fc8132e60f3ef7c735bea1934b37df451f981c8d9210e61278c871e6dad6ceb89aa4d7245658a63e65cec7b81d307426a60a31cc917844a14e1d9ad83bef1c9f736d1836687c950d1275caece0d46ab9f3b0e95d9cf560eb8134e8346b35e0a6f60e6a87a14c4aeb3e0d06158390660a52a6e44b524c1e16de2bf99870f78fc81d267072bc63e97d3f26d23fd59799ff2c847d6a724cebc2377a582ba73d99a610a095c28d66c60910ac64b7d18847fa98fd8528b72e0a149b082c731575b2e2763e67c821ba29eecd8b8c87981c4fb1fbbaaa4e8aa077ec98de1362fc7af7a0ac5e3297fd0d924124b2e255b5cc4f6b0873f3d34418d5ae0d6f734628f38cb9b856b2db3fbb2fafb76983eabc51a348e55789e997fa25cbe6e5031bd2e33d4e2686f964a65d1abf7f96a20a8b270b1522ace4adf6fdade5cd3f101574960d13267e2382f70027ebe5ef7f9418e14e6a8a130d2aec2253c8fe21825e3295774db0c9b1340ea28a96589ba0d9f79aa61b92aea6f704ef7f716d849b8c77e6922e198a086d8133491d0bb85b925825a6d307d7cc8f09c655aa3edabf84c75560dfb279ee3e8b825323279edc58c3161e72cf9ae02ef80d500da922c0abeb8b164abd9c17ef7c02e89000d67b0c2ddd078cacbf37c4826be3845948d598980d63c1d7aade89d0637d80a4c102a35eb027a08ef90cc20d17fc514926914e68e5de54b861200ffa4ce1cbc16e4ecf342a1176cdb561f7dea38b3ae0fd81260f72d34e6f33d364cf313d3b3161410dcbf5f0f0579a1d235b49bb5d27f85825b94f1899e7846d0292ad912d934574f9d55d2152dbfb39d662e6e0f2496182d012af8b4bebbdfa1d68e3e988869fb5cd9612db97e6cc574444f4b5025ec9827bafc55341bf6ad3fd4fab2ee43f343cb9bcec0c38384b5699e5c6d5973ba591978275c51a40200d340b9ed3681f08c69f58320f538f9cd78a34eb6ed55710d2478ea4bd15813921817b42f88f1bb038033b519668f0a2e8693b9a19c7bcf96eec04bda625b31c32f4286be922ab2c87aa30310c8f46551450d5bc26b5fbfdedaae0f756384023bb9a28d3200cfeaedd63d6afe076513e8ad73d16607cd4ede16344e60d8707357e82b1089258c56d851a435e23ce0919825e04471dd61a44c43e87c2959d4e89311a30ee8be010094d0ef109bb210dda58b21b685b9e9c078c9ded6117d9a88dd7799291969851cd4c3f22b5f870a275a692188dafcf6e89ba87b0eb61011de031fda25fb3349901d40da2bbdb76eda417c9fafd90fb23504ab150ca0033ea1d00000000000086ba3aaa79d0df4f2e4e4afa565e66d28aa167f835d080bf1d41d0e52dbf81c671f8eacae234bf4fc328302671fab46613b73daf2ace80aff2f80f6a9d84b82480178cc612aa90adfc80ab3bba7d1527fc6ab04f009011bf093494a0d329df4e53d855b1c0ff6a25d22052b3a778e1ca2fbe59c9eeedf99e13682d06da269560524ffa0f404b73b946edf900ee958ceba09a051e27a620fb78e7a352c182c8c2981ce822eeaf6323965b4b3f322d40d406a158b6f3cf5d74822de952fefc341d0dead6c1c8fed8e48e0a85b51c1dcc7796d3f45bb1f50467a475da76c356c9e031b096867da1dbb89c3a038d475dbcdb2df1278d5dba55c2fb5ba6a9778c2a244198491f0f711cdb2ef0332f347afffb1b098b4c59041ccb0c286bb2dd40e7ec713f6ffe0b1067678c748615dae3c1e090f3739a9035767fb9972580d19fdef49a5071f99c3706b8fa4991f430721cf3ca11af0e3bd7c4d0cd0ab5b7d98ee66730c20a098110e4a15ce0bfc88c41fe375f261fe3557e14eb5ff4a2cdf6a008fd7b6702951b8456e940fbd269a0f3ed515ac03cfecce67027d579e1226bd7b7381827453550343566508d38790ee838c3bf85c6c91a45e7a44752f57313533a3e82e4042e65d346afb20c0527575f79080aef4e1aa8d5868d190c8d37bdae7592e41bed37b9d4c30d8126d3debde02dff25f5ef1e48133e2a41cd55347bd23dcce57a00189619db629c530dc112d22ac72bce353681264b5175be40b3ba84408d0f56762cc720e96c128447be7128748e185be2640115556bac64d060207e629b0144e501c1c49c6abd15c7982b01e22da2ad04bb28df1a27f31e18040c16406071d798bb40d901d001e22cc5ed870d08702f49f0021814cdd814901a13c7ab061bb4b8172c639b3449e24f656fee58186e69e6874ea95d946da781b49ca080ffb4a3c87746c661f43e9be52d0ba2ee368b9c143687c8846abac599069decf41e69fddcadf31c5f715917df12df4eedbfcc5805fe8e661b8fcd7b130d7bcc4a9a152de93a15dddacf3cf52479956185a3c5000d18ddce0236d5858c0d8761bca7446e3d30f3e8f48d5e8f86a60cbe46f038b1028ffd35590bdacfeebb86e28d42a923bdc3f9a307b919341a2a7dda096d41070db245c2c424aedd4a4bb9863169454d09f25fd0aa2da7bfc97ad7aca886dd998e041133e07899ad48f7cda600de48ac3951152dfbe6331b8acae24cfd2dd2b14696c75040685c756942a0d049ee9863a2e480388f93876f3910ecb3a59fa16c25b2b3636a542f92744495e10a4ce37f19f5c2256e2d61775d388e2a86b52f76add2f956aa02501f5badb94da12595b2bbf88b05dc70caae6766fd3df4f299d0ff71c8787249b255ea49b3d33b3f1a8c9403cb75d64264465c3578538382b23d721f8a49134020ca2d9e887d9949624ac6d63322b6507e277a0020db9bfa2928736b96c72fa3406a95adfe6b374ffa27001d37d3bbe725e75c257834572026c511f57dce67153a4008f9e75e07ed9237f600005800ee667c137fc78bc4fd4ebf4d228979ab0ccafbcd8b8daad76fb2abcfc585377ea6e19f170db898b950a7b0f4e75466a2ba26e7d60e0a6f5c54a3fe78677f3362c5b01ae791b62ee8a5d0fd65b739ece4f3b758d05a8e4e4ea7e4866ee67750ce2769f72a9f45780eadfae73b42d4dd4c614c797c694ece8af88cc732edabfa26ace57de54835c7551154dfa3be11a0d3b5845ac97b2da84410a652e72cd563acbb2b02bb59370cebaaa80014e3ad280944eae6fbf8d5f85237257bb5b8e5ec3e52dc06f8394176b325a577804e9eb78d7015172d17ed15f905f705d56687f53988bb207c74fbeb2b03a700258e835362886239f4d8f1c2cf6d4d10ff26d2579ea40a5fb99e5b6d01cdeda050d3faa78ed674f2899be08332086c8bf0410a7d06099c50a2d949d49a0f21b43bcdfbdf435875cf5a9def46db63746574ee8a5b1fbcef411154e914dd9e5bb1b1bd2944581083fb66a017e7972df3daefc487e4198cb281d3a80637d52b41738b7f1a57c867d5b2ee5d72465657593339506fd0c3807cd6445eb54cfb5ca9d35ef93eec6383224ebf85197eb6ed75f6c324f6a0345a25be6bb52ed347e57ccb059b903fb7db4e9f46513a4158ce29c1f5d6081b556bbc471e89225cad81aed34dae0f90ee8e7237b3b286e29b49d7a1700c537b28571f7d7e2a55e10792d6f7779ddefa3febdea5693048372a45903c04f1035a96c6cfbe6f6c2b754581aac02f8a70e698be6e37fd411cf4b76317b47683f6b0f80dfdeef3a9767c7e5c30dff786093a21477431fea0458023953700"})
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4)
rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15)
timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f00000001c0), 0x0)

1m9.79736421s ago: executing program 2 (id=300):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0xb, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x400}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x3800, 0x0, 0x1, 0x0, 0x6}}, 0xb8}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001002dbd700000000000ff010000000000000000000000000001fe8000000000000000000000000000aa00000000000000000a001030"], 0xb8}}, 0x0)
r2 = socket$kcm(0xa, 0x922000000003, 0x11)
sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x7, 0x4}, 0x80, 0x0}, 0x0)

1m9.670771646s ago: executing program 2 (id=302):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x756, &(0x7f00000002c0)="$eJzs3M1rXOUaAPDnnGaafuTeyYUL9+pChBZaKD1Jmk27aty4KxQKbmtITkLISSZkJrUTC7auhdpsFARR1y7dCqX+Ae6koOBeEK1xIW5GzuSjNGam0ybpSPr7wcl53vP1vE/m8GYO5D0BvLReL38kEUMRcTUiqpvb04g42o6ORdzeOG790a2pckmi1br2S1KeFuut6va1ks31yWifEv+PiAeViHPv/z1vvbk6P1kU+fJme6SxsDRSb66en1uYnM1n88Wx8UujF8fHL46OP7WG//VY6+m3Lh2/9+2ba2vffdW4+9rA+SQm2nXHZm09XuaZbPxOKjGxY/viQSTro6TfHQAAoCfl9/wjETHQ/pZajSPtCAAAADhMWoMtAAAA4NBLot89AAAAAA7W1v8BbM3tPah5sJ38/EZEDO+Wf6A9hzjiWFQi4sR68sTMhGTjNNiT23ci4v7Ezvvvi/IOu73Ha4/uaD85R/roHq/Ofrhfjj8Tu40/6fb4E7uMPwNb707Yo87j3+P8RzqMf1d7zPH1p69UOua/E/HqwG75k+38SYf8b/eY/+7aB/c67Wt9HnFm178/yRO5urwfYmJmruj6+oEHf5592K3+E53yJ93rX+qx/nfXf5vvNJaU+c+e6v7575a/vCc+3OxHGhH3Ntdle21HjlML33/Trf7piNbzfP6f9Vj/j18O3uzxUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGhLI2IokjTbjtM0yyJORsR/40Ra1OqNczO1lcXpcl/EcFTSmbkiH42I6kY7Kdtj7fhx+8KO9nhE/OeH4xtJ54o8m6oV0/0uHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG0nI2IokjSLiDQifq+maZZFDPRw7uAL6B8AAACwT4b73QEAAADgwHn+BwAAgMPveZ//k33uBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCoXb1ypVxa649uTZXt6RvNlfnajfPTeX0+W1iZyqZqy0vZbK02W+TZVG3hadcrarWlsUuxcnOkkdcbI/Xm6vWF2spi4/rcwuRsfj2vvJCqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFZD7SVJs4hI23GaZlnEvyJiOCrJzFyRj0bEvyPiYbUyWLbH+t1pAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9l29uTo/WRT5skAgeGHBexHxD+hGl6DfIxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP1Qb67OTxZFvlzvd08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADor/SnJCLK5Uz19NDOvUeTP6rtdUS888m1j25ONhrLY+X2X7e3Nz7e3H6hH/0HAACAl8LlZzl46zl96zkeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgV/Xm6vxkUeTLewsuR3O1lXQ4pt81AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAz+evAAAA//8KQsc4")
r0 = inotify_init1(0x0)
inotify_add_watch(r0, &(0x7f00000006c0)='.\x00', 0xaa)
chdir(&(0x7f0000000240)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000180)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})

1m9.100202826s ago: executing program 2 (id=307):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000004c0)={[{@resuid}, {@init_itable}, {@minixdf}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
setxattr$security_capability(&(0x7f0000000280)='./file1\x00', &(0x7f00000002c0), 0x0, 0x0, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x3f, 0x0)

1m8.525201347s ago: executing program 2 (id=313):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001c00)={0x2c, &(0x7f0000001a00)={0x20, 0xe, 0x4, "64199637"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)={0x0, 0xb, 0x4, "ea61770d"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000040)={0x0, 0x7, 0x4, "01000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1m8.057864221s ago: executing program 2 (id=317):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r0, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0xfffffffc, @dev={0xfe, 0x80, '\x00', 0x3}, 0x3}, 0x1c)
sendmsg$inet6(r0, &(0x7f0000001280)={&(0x7f0000000240)={0xa, 0x4e23, 0x2, @private0, 0x6}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000500)="ee", 0x1}], 0x1}, 0x80)
shutdown(r0, 0x1)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000002c0)={0x0, 0x81, 0x5, 0x1000, 0x1, 0x9c}, 0x14)

1m7.740968998s ago: executing program 32 (id=317):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r0, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0xfffffffc, @dev={0xfe, 0x80, '\x00', 0x3}, 0x3}, 0x1c)
sendmsg$inet6(r0, &(0x7f0000001280)={&(0x7f0000000240)={0xa, 0x4e23, 0x2, @private0, 0x6}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000500)="ee", 0x1}], 0x1}, 0x80)
shutdown(r0, 0x1)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000002c0)={0x0, 0x81, 0x5, 0x1000, 0x1, 0x9c}, 0x14)

33.614192568s ago: executing program 3 (id=544):
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x7)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0)
r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000080)={0x1, 0xfffffffe, 0x0, 0x8, 0x8000, 0x0, 0x1, 0x100000000, 0x0, 0x1, 0xfffffffe, 0x1})

32.538422854s ago: executing program 3 (id=552):
socket$packet(0x11, 0x2, 0x300)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="19000000040000000800000001"], 0x50)
unshare(0x20400)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, 0x94)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r0, &(0x7f0000000280), &(0x7f0000000000)=""/10, 0x2}, 0x20)

32.321258905s ago: executing program 3 (id=555):
unshare(0x2a020400)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x101400, 0x0)
fsync(r0)

32.056259009s ago: executing program 3 (id=558):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000000)={[{@test_dummy_encryption}, {@init_itable}, {@norecovery}]}, 0x3, 0x470, &(0x7f0000000dc0)="$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")
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0x1f81ca7, 0x0, 0x83, 0x0, &(0x7f0000000080))
chdir(&(0x7f0000000140)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x108)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x181)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})

31.391588764s ago: executing program 3 (id=563):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\tw'], 0xa)
r2 = openat$cgroup_devices(r0, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r2, &(0x7f0000000280)={'b', ' *:* ', 'rm\x00'}, 0x9)

30.941490498s ago: executing program 3 (id=565):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000080)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b800000100265d7aeabbc900bbc9000f30300f272d9d53bf0000c4b9e16dc30101220f01c3", 0xfffffffffffffdab}], 0x1, 0x14, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

30.51585868s ago: executing program 33 (id=565):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000080)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b800000100265d7aeabbc900bbc9000f30300f272d9d53bf0000c4b9e16dc30101220f01c3", 0xfffffffffffffdab}], 0x1, 0x14, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

7.733484375s ago: executing program 1 (id=649):
pipe2$9p(&(0x7f00000001c0)={<r0=>0xffffffffffffffff}, 0x0)
close(0x3)
mkdir(&(0x7f00000020c0)='./file0\x00', 0xce)
syz_io_uring_setup(0x512b, &(0x7f0000000040)={0x0, 0xcc19, 0x130c8, 0x6, 0x30e}, 0x0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

6.562417396s ago: executing program 1 (id=653):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000280)={[{@errors_remount}, {@usrquota}, {@minixdf}, {@nombcache}]}, 0x1, 0x51a, &(0x7f0000000f00)="$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")
mknod(&(0x7f0000000000)='./bus\x00', 0x1000, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0)
r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x1c5442, 0xb2)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x0, 0x0, 0x2, 0xfffffffffdffffff})

5.53292624s ago: executing program 1 (id=661):
syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1213, &(0x7f0000000600)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x145042, 0x2c)
mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000b, 0x2013, r0, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[], 0x32600)

3.867278257s ago: executing program 0 (id=671):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f00000000c0), 0x12)
pread64(r2, &(0x7f0000001840)=""/4096, 0x1000, 0x1)

3.465469719s ago: executing program 1 (id=672):
socket(0x10, 0x803, 0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

3.465114409s ago: executing program 5 (id=674):
r0 = inotify_init1(0x800)
inotify_add_watch(r0, &(0x7f00000006c0)='.\x00', 0xaa)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
dup3(r0, r1, 0x0)
ioctl$sock_TIOCINQ(r1, 0x541b, 0x0)

3.329566216s ago: executing program 0 (id=675):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r1, 0x4)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000200)={0x0, 0xfd1c, 0x4, 0x400, 0xed, 0x1}, 0x14)
sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="f6", 0x1}], 0x1}}], 0x3ffffffffffffd1, 0x0)

3.093426159s ago: executing program 5 (id=677):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file2\x00', 0x808080, &(0x7f0000000000), 0x2c, 0x525, &(0x7f0000000100)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x51)
ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8})
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0)
sendfile(r0, r2, 0x0, 0x20fffe82)

2.441517993s ago: executing program 5 (id=680):
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x400)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000080))
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x0, 0x6}}, 0x20)
ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r2, 0xc06c4124, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11})

2.247815863s ago: executing program 0 (id=681):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40901, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
bind$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0xf5, 0x0, 0x1, 0x5, 0x6, @local}, 0x14)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)=ANY=[], 0xfdef)

2.029995544s ago: executing program 4 (id=682):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
close(r0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c)
sendto$inet6(r1, &(0x7f00000004c0)="b0", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @loopback, 0x4}, 0x1c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0)

1.861344753s ago: executing program 1 (id=683):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x5000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
write$binfmt_aout(r1, 0x0, 0xffffffdb)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)

1.642450805s ago: executing program 0 (id=684):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x8, 0x7fff0000}]})
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000380)={{0x0, 0x400, 0x4b, 0x9}, 'syz0\x00', 0x11})
ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0)
syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffe, 0x2)
close_range(r0, 0xffffffffffffffff, 0x0)

1.54383094s ago: executing program 5 (id=685):
socket$inet_sctp(0x2, 0x1, 0x84)
r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

1.277546174s ago: executing program 4 (id=686):
pipe2(&(0x7f0000000340)={<r0=>0x0, <r1=>0x0}, 0x0)
pipe2(&(0x7f0000000000)={<r2=>0x0, <r3=>0x0}, 0x0)
tee(r2, r1, 0xff, 0x8)
r4 = fanotify_init(0x2, 0x0)
fanotify_mark(r4, 0x1, 0x800100a, r0, 0x0)
vmsplice(r3, &(0x7f0000000300)=[{&(0x7f0000000a40)="8b", 0x1}], 0x1, 0x0)

1.270757344s ago: executing program 0 (id=687):
r0 = socket(0xa, 0x5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c)
setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x265}, 0x8)
sendto$inet6(r0, &(0x7f0000000040)="00d8", 0x20a00, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r1, 0xffffffffffffffff, 0x0)

1.211375307s ago: executing program 5 (id=688):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10)
sendto$inet(r0, &(0x7f00000004c0)="3ce2de4d8d957a8de4e490b6cd03b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe102e7f726263f28aef1bc12a069063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cdecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae93b2361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b830fa03e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c7e982472e6aac70e5d52ca2c1bab47b1f6d00f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd155cae87", 0x109e8, 0x805, 0x0, 0x6)
recvmmsg(r0, &(0x7f00000031c0)=[{{0x0, 0x1802, &(0x7f0000000a40)=[{&(0x7f00000008c0)=""/135, 0x87}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000980)=""/146, 0x92}, {&(0x7f0000000080)=""/43, 0x2b}, {&(0x7f0000000a80)=""/242, 0xf2}, {&(0x7f0000000b80)=""/143, 0x8f}], 0x4}, 0x2}], 0x400000000000300, 0x22, 0x0)

965.45272ms ago: executing program 4 (id=689):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80000002, 0x4)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000000)=0x80000002, 0x4)
sendto$inet(r1, &(0x7f00000003c0)='@', 0x1, 0x20040940, &(0x7f0000000400)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
listen(r0, 0x14)

779.81778ms ago: executing program 4 (id=690):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xe08, 0x0, 0x2, 0x1, 0x80000000}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x8000)
io_uring_setup(0x24, &(0x7f0000000040)={0x0, 0x73e5, 0x1c410, 0x4, 0x19c})
r1 = socket$inet6(0x10, 0x3, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0)
sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)

595.74763ms ago: executing program 4 (id=691):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {0x3, 0x0, 0x0, 0x1}, 0x0, [0x1, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x1db, 0x0, 0x10000000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1000000, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xfffffffd, 0x7, 0x2, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x2, 0x0, 0xfffffffe, 0x5d1d8547]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
read$FUSE(r0, &(0x7f0000002600)={0x2020}, 0x2020)
write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00', {0x7, 0x6, 0x1ff, 0xfac}, 0x16, [0x7, 0x3, 0x8108, 0x7, 0x101, 0x2c94cded, 0x4, 0x6, 0x2, 0x9, 0x4, 0x80000000, 0x4, 0xe1, 0x3ff, 0x8, 0x9, 0x9, 0x4, 0x40, 0xffffff01, 0xb, 0xa, 0x6, 0x7fffffff, 0x2, 0x1, 0xfffffffb, 0x4, 0x10, 0x9, 0x101, 0x7, 0x9, 0xfffffffe, 0x3, 0x400000, 0x8, 0x1, 0x0, 0xc0000, 0x2, 0x4, 0x7, 0x1, 0x9, 0xf, 0x6, 0x1, 0x200, 0x40ba, 0x3, 0xbd6, 0x7, 0x4, 0x80000000, 0x54fc3549, 0x101, 0x6, 0x6, 0xd53, 0x71, 0x5, 0xe1d], [0x8, 0x1, 0xe2d, 0x8, 0x0, 0xfff, 0xfffff2d2, 0x4, 0x0, 0x8, 0x2, 0x5, 0x10001, 0x7bf, 0xa, 0x7ff, 0x3, 0xd6f, 0x5, 0xa, 0xc, 0x8, 0x1, 0x1, 0x3, 0x5, 0x2, 0xf, 0x0, 0x3b, 0x3, 0x475, 0x7, 0x10001, 0x5, 0x39, 0xff, 0x6, 0xedd7, 0x2, 0x5421, 0xaf, 0xffffffff, 0x1ff, 0x10001, 0x1, 0x5, 0x2, 0x2, 0x6, 0xe, 0x9, 0x5, 0x0, 0x7, 0x7fff, 0xeb1a, 0x0, 0x7, 0x4, 0x5, 0x8001, 0x10001, 0x5], [0xd, 0x4, 0x52c, 0xfb44, 0x7f, 0xe, 0x1ff, 0xfffffffa, 0x800, 0x9, 0x1ff, 0x401, 0xfffffff8, 0x7, 0x7, 0x3b, 0xffffffff, 0x8, 0x800, 0x10001, 0x2, 0x18b, 0x8000, 0x508, 0x7, 0x10, 0x6, 0x6, 0x6, 0x9b0, 0x7, 0x1, 0x9, 0x60000000, 0x8001, 0x200, 0x7, 0x3, 0x9, 0x3f, 0x1, 0x4, 0x4, 0x6, 0x5, 0x10000, 0xfffffff8, 0xc, 0xffffffff, 0x7ff, 0x5, 0x4, 0x8, 0x6, 0x7fff, 0x8001, 0x0, 0x80, 0xd0b, 0x800, 0x9, 0x1b, 0x5, 0xfffff432], [0x4, 0x9, 0x8, 0x2, 0x6, 0xfffff5c9, 0x0, 0x1000, 0x0, 0x4, 0x6, 0x8, 0x6, 0x0, 0x2, 0x1000081, 0x100, 0xfffffff7, 0x5, 0x3, 0x10, 0x7c1f, 0x8, 0x8, 0x2, 0x7, 0x7, 0x0, 0x1d, 0x80000000, 0x3, 0xfb0, 0xa, 0x3, 0x3d9, 0xc27, 0x1, 0x2, 0x8, 0x81, 0x7, 0x7, 0x3, 0x2, 0x1ff, 0x7, 0x6c56, 0x4, 0x29, 0x0, 0x3, 0x8001, 0x5, 0x149, 0x2, 0x3, 0x4, 0x4, 0xfff, 0x8, 0xa91, 0x101, 0x5, 0x4]}, 0x45c)

161.407472ms ago: executing program 0 (id=692):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x8001)
r2 = getpgid(0x0)
fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x2, r2})
fcntl$setsig(r1, 0xa, 0x1c)
sendmmsg$unix(r0, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="11", 0x1}], 0x1}}], 0x1, 0x40015)

161.043892ms ago: executing program 5 (id=693):
mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
r1 = socket(0x28, 0x801, 0x0)
connect$vsock_stream(r1, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10)
shutdown(r1, 0x1)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000780), 0x0, &(0x7f00000008c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

153.739203ms ago: executing program 4 (id=694):
syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000000040)={[{@clear_cache}, {@metadata_ratio}, {@ssd_spread}]}, 0x0, 0x559e, &(0x7f0000005680)="$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")
chdir(&(0x7f0000000240)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x105042, 0xc4)
ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000140)={0x7fffffffffffffff, 0x7, 0x0, 0xa045, 0x0, [0x1046, 0x6, 0x4, 0x5]})

0s ago: executing program 1 (id=695):
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f0000000200)={[{@nouser_xattr}, {@four_active_logs}, {@four_active_logs}, {@nobarrier}, {@fastboot}, {@fastboot}, {@prjjquota={'prjjquota', 0x3d, '-{'}}, {@jqfmt_vfsv1}, {@background_gc_off}, {@fastboot}]}, 0x1, 0x54f9, &(0x7f000000ab40)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40)
truncate(&(0x7f0000000900)='./file1\x00', 0x3000000)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x52)
pwrite64(r0, &(0x7f00000000c0)='B', 0x1, 0x4)
truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.9' (ED25519) to the list of known hosts.
[   70.394375][ T5758] cgroup: Unknown subsys name 'net'
[   70.528489][ T5758] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   71.757569][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[   71.764246][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[   72.254210][ T5758] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   74.250991][   T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   74.275240][ T5778] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   74.284829][ T5778] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   74.292338][ T5783] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   74.293134][ T5778] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   74.307557][ T5778] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   74.317774][ T5778] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   74.319242][ T5779] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   74.327705][ T5778] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   74.335719][ T5787] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   74.341073][ T5778] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   74.348334][ T5787] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   74.361406][ T5778] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   74.370520][ T5778] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   74.378648][ T5778] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   74.391926][ T5778] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   74.399710][ T5778] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   74.399759][ T5785] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   74.410575][ T5778] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   74.414635][ T5785] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   74.422361][ T5778] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   74.429009][ T5785] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   74.445928][ T5778] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   74.465409][ T5785] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   74.884640][ T5772] chnl_net:caif_netlink_parms(): no params data found
[   74.977795][ T5770] chnl_net:caif_netlink_parms(): no params data found
[   75.062238][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.071908][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.079198][ T5772] bridge_slave_0: entered allmulticast mode
[   75.086430][ T5772] bridge_slave_0: entered promiscuous mode
[   75.113960][ T5769] chnl_net:caif_netlink_parms(): no params data found
[   75.125745][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.133155][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.140760][ T5772] bridge_slave_1: entered allmulticast mode
[   75.147498][ T5772] bridge_slave_1: entered promiscuous mode
[   75.165877][ T5771] chnl_net:caif_netlink_parms(): no params data found
[   75.268743][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   75.292777][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.299979][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.308170][ T5770] bridge_slave_0: entered allmulticast mode
[   75.315832][ T5770] bridge_slave_0: entered promiscuous mode
[   75.325255][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.332484][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.339722][ T5770] bridge_slave_1: entered allmulticast mode
[   75.347233][ T5770] bridge_slave_1: entered promiscuous mode
[   75.357778][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   75.460670][ T5772] team0: Port device team_slave_0 added
[   75.466803][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.474217][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.481584][ T5769] bridge_slave_0: entered allmulticast mode
[   75.488479][ T5769] bridge_slave_0: entered promiscuous mode
[   75.505789][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.513190][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.520474][ T5769] bridge_slave_1: entered allmulticast mode
[   75.527774][ T5769] bridge_slave_1: entered promiscuous mode
[   75.542321][ T5772] team0: Port device team_slave_1 added
[   75.558541][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   75.615722][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   75.636318][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   75.649571][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0
[   75.656650][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   75.683003][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   75.706170][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.713434][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.720791][ T5771] bridge_slave_0: entered allmulticast mode
[   75.727636][ T5771] bridge_slave_0: entered promiscuous mode
[   75.737546][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   75.756874][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1
[   75.764165][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   75.790297][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   75.818442][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.827002][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.834584][ T5771] bridge_slave_1: entered allmulticast mode
[   75.842387][ T5771] bridge_slave_1: entered promiscuous mode
[   75.869033][ T5769] team0: Port device team_slave_0 added
[   75.879602][ T5769] team0: Port device team_slave_1 added
[   75.888879][ T5770] team0: Port device team_slave_0 added
[   75.914967][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   75.945893][ T5770] team0: Port device team_slave_1 added
[   75.963239][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   76.009019][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0
[   76.016212][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   76.042652][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   76.056610][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0
[   76.064183][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   76.091137][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   76.119270][ T5772] hsr_slave_0: entered promiscuous mode
[   76.125690][ T5772] hsr_slave_1: entered promiscuous mode
[   76.133274][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1
[   76.142939][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   76.170307][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   76.188202][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1
[   76.195632][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   76.221738][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   76.256956][ T5771] team0: Port device team_slave_0 added
[   76.295025][ T5771] team0: Port device team_slave_1 added
[   76.360930][ T5770] hsr_slave_0: entered promiscuous mode
[   76.369200][ T5770] hsr_slave_1: entered promiscuous mode
[   76.375725][ T5770] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   76.383976][ T5770] Cannot create hsr debugfs directory
[   76.400785][ T5769] hsr_slave_0: entered promiscuous mode
[   76.409272][ T5769] hsr_slave_1: entered promiscuous mode
[   76.416381][ T5769] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   76.424586][ T5769] Cannot create hsr debugfs directory
[   76.432911][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0
[   76.439973][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   76.466409][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   76.477414][ T5785] Bluetooth: hci3: command tx timeout
[   76.477431][   T51] Bluetooth: hci1: command tx timeout
[   76.483539][ T5785] Bluetooth: hci0: command tx timeout
[   76.485882][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1
[   76.502400][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   76.529121][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   76.550337][   T51] Bluetooth: hci2: command tx timeout
[   76.758732][ T5771] hsr_slave_0: entered promiscuous mode
[   76.765530][ T5771] hsr_slave_1: entered promiscuous mode
[   76.772091][ T5771] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   76.779683][ T5771] Cannot create hsr debugfs directory
[   76.995504][ T5772] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   77.015538][ T5772] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   77.025564][ T5772] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   77.063168][ T5772] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   77.110025][ T5769] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   77.135325][ T5769] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   77.146366][ T5769] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   77.157863][ T5769] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   77.279155][ T5770] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   77.289800][ T5770] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   77.299670][ T5770] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   77.312661][ T5770] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   77.389942][ T5771] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   77.399647][ T5771] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   77.413020][ T5771] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   77.424852][ T5771] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   77.450620][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0
[   77.512911][ T5772] 8021q: adding VLAN 0 to HW filter on device team0
[   77.533086][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0
[   77.556259][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.563661][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   77.575472][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.582635][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   77.639328][ T5769] 8021q: adding VLAN 0 to HW filter on device team0
[   77.686676][ T2963] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.693884][ T2963] bridge0: port 1(bridge_slave_0) entered forwarding state
[   77.705287][ T2963] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.712476][ T2963] bridge0: port 2(bridge_slave_1) entered forwarding state
[   77.757403][ T5772] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   77.868810][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0
[   77.944514][ T5770] 8021q: adding VLAN 0 to HW filter on device team0
[   77.968993][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0
[   77.987003][ T1131] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.994240][ T1131] bridge0: port 1(bridge_slave_0) entered forwarding state
[   78.041999][ T5771] 8021q: adding VLAN 0 to HW filter on device team0
[   78.055135][ T1131] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.062464][ T1131] bridge0: port 2(bridge_slave_1) entered forwarding state
[   78.111672][ T2963] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.118854][ T2963] bridge0: port 1(bridge_slave_0) entered forwarding state
[   78.145790][ T2963] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.153058][ T2963] bridge0: port 2(bridge_slave_1) entered forwarding state
[   78.179994][ T5770] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   78.193336][ T5770] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   78.323604][ T5771] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   78.398156][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0
[   78.443908][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0
[   78.518311][ T5772] veth0_vlan: entered promiscuous mode
[   78.551058][ T5778] Bluetooth: hci1: command tx timeout
[   78.551311][ T5785] Bluetooth: hci3: command tx timeout
[   78.556582][   T51] Bluetooth: hci0: command tx timeout
[   78.564683][ T5772] veth1_vlan: entered promiscuous mode
[   78.627988][ T5769] veth0_vlan: entered promiscuous mode
[   78.641491][   T51] Bluetooth: hci2: command tx timeout
[   78.658878][ T5769] veth1_vlan: entered promiscuous mode
[   78.741689][ T5772] veth0_macvtap: entered promiscuous mode
[   78.780942][ T5769] veth0_macvtap: entered promiscuous mode
[   78.798829][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0
[   78.812029][ T5772] veth1_macvtap: entered promiscuous mode
[   78.826913][ T5769] veth1_macvtap: entered promiscuous mode
[   78.844955][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0
[   78.886726][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0
[   78.902362][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   78.915156][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.927031][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0
[   78.947210][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1
[   78.984305][ T5769] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   78.994060][ T5769] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   79.003511][ T5769] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   79.012320][ T5769] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   79.023401][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   79.034647][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.046482][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1
[   79.061920][ T5772] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   79.070921][ T5772] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   79.079733][ T5772] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   79.089163][ T5772] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   79.125467][ T5770] veth0_vlan: entered promiscuous mode
[   79.199893][ T5770] veth1_vlan: entered promiscuous mode
[   79.211737][ T5771] veth0_vlan: entered promiscuous mode
[   79.271371][ T1131] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.287366][ T5771] veth1_vlan: entered promiscuous mode
[   79.293490][ T1131] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.363050][ T1000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.374186][ T1000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.421004][ T1131] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.442614][ T1131] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.465207][ T5770] veth0_macvtap: entered promiscuous mode
[   79.487453][ T5771] veth0_macvtap: entered promiscuous mode
[   79.504386][ T5771] veth1_macvtap: entered promiscuous mode
[   79.537978][ T1000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.538604][ T5770] veth1_macvtap: entered promiscuous mode
[   79.564426][ T1000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.621120][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   79.643309][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.651117][ T5836] syz.1.2[5836]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[   79.659131][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   79.674704][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.687423][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0
[   79.703669][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   79.715158][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.725672][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   79.741715][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.753091][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   79.764701][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.776686][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0
[   79.802974][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   79.816275][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.829270][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   79.840537][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.876307][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1
[   79.906651][ T5770] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   79.916675][ T5770] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   79.925982][ T5770] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   79.936697][ T5770] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   79.955324][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   80.007016][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.040537][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   80.049274][ T5838] loop0: detected capacity change from 0 to 512
[   80.061547][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.078816][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   80.081981][ T5838] EXT4-fs: Mount option(s) incompatible with ext2
[   80.109842][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.131307][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1
[   80.236572][ T5771] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   80.256187][ T5836] loop1: detected capacity change from 0 to 32768
[   80.273248][ T5771] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   80.290441][ T5771] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   80.301910][ T5836] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 scanned by syz.1.2 (5836)
[   80.316009][ T5771] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   80.368315][ T5836] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[   80.424024][ T5836] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[   80.447016][ T5836] BTRFS info (device loop1): using free space tree
[   80.541414][ T1000] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.566717][ T1000] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.612945][ T5836] BTRFS info (device loop1): enabling ssd optimizations
[   80.620079][ T5836] BTRFS info (device loop1): auto enabling async discard
[   80.640374][   T51] Bluetooth: hci3: command tx timeout
[   80.641010][ T5785] Bluetooth: hci0: command tx timeout
[   80.645891][ T5778] Bluetooth: hci1: command tx timeout
[   80.724116][ T5778] Bluetooth: hci2: command tx timeout
[   80.801586][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.809669][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.864483][ T5858] iommufd_mock iommufd_mock1: Adding to iommu group 0
[   80.904520][ T5858] iommufd_mock iommufd_mock2: Adding to iommu group 1
[   80.907513][ T1000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.949282][ T1000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.991271][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.999292][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.116519][ T5769] BTRFS info (device loop1): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[   81.891857][ T5871] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   82.519510][ T5862] loop2: detected capacity change from 0 to 32768
[   82.567922][ T5866] loop3: detected capacity change from 0 to 32768
[   82.711330][ T5778] Bluetooth: hci1: command tx timeout
[   82.717110][   T51] Bluetooth: hci3: command tx timeout
[   82.717162][ T5785] Bluetooth: hci0: command tx timeout
[   82.749574][ T5862] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   82.790713][ T5785] Bluetooth: hci2: command tx timeout
[   82.950557][ T5862] XFS (loop2): Ending clean mount
[   83.141604][ T5862] XFS (loop2): Quotacheck needed: Please wait.
[   83.224822][ T5893] loop1: detected capacity change from 0 to 4096
[   83.297331][ T5862] XFS (loop2): Quotacheck: Done.
[   83.462952][ T5893] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[   83.593706][ T5893] ntfs3: loop1: Failed to load $Extend (-22).
[   83.652395][ T5893] ntfs3: loop1: Failed to initialize $Extend.
[   83.998856][ T5770] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   84.116799][ T5897] loop0: detected capacity change from 0 to 32768
[   84.139440][ T5897] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.14 (5897)
[   84.289608][ T5897] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   84.350448][ T5897] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[   84.374353][ T5897] BTRFS info (device loop0): using free space tree
[   84.600927][ T5915] loop2: detected capacity change from 0 to 2048
[   84.634716][ T5915] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[   84.653603][ T5897] BTRFS info (device loop0): enabling ssd optimizations
[   84.701355][ T5897] BTRFS info (device loop0): auto enabling async discard
[   84.740336][ T5920] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   84.778400][ T5780] udevd[5780]: incorrect nilfs2 checksum on /dev/loop2
[   85.817757][ T5899] loop1: detected capacity change from 0 to 32768
[   85.895310][ T5899] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[   86.044453][ T5899] XFS (loop1): Ending clean mount
[   86.417504][ T5769] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[   86.646149][ T5772] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   86.713572][ T5931] loop3: detected capacity change from 0 to 32768
[   86.765478][ T5931] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 scanned by syz.3.22 (5931)
[   86.837155][ T5931] BTRFS info (device loop3): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[   86.868476][ T5931] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[   86.890372][ T5931] BTRFS info (device loop3): using free space tree
[   87.123036][    T9] cfg80211: failed to load regulatory.db
[   87.140573][ T5931] BTRFS info (device loop3): enabling ssd optimizations
[   87.147607][ T5931] BTRFS info (device loop3): auto enabling async discard
[   87.528200][ T5771] BTRFS info (device loop3): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[   87.589313][ T5945] loop2: detected capacity change from 0 to 32768
[   88.132580][ T5957] loop1: detected capacity change from 0 to 32768
[   88.192820][ T5957] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   88.292001][ T5957] XFS (loop1): Ending clean mount
[   88.362874][ T5957] XFS (loop1): Quotacheck needed: Please wait.
[   88.459141][ T5957] XFS (loop1): Quotacheck: Done.
[   88.951667][ T5769] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   89.570389][ T6001] process 'syz.3.36' launched '/dev/fd/4' with NULL argv: empty string added
[   89.933262][ T6007] netlink: 4 bytes leftover after parsing attributes in process `syz.2.37'.
[   90.230166][    C1] sched: RT throttling activated
[   90.910081][ T6017] bond0: (slave bond_slave_0): Releasing backup interface
[   91.566269][ T5995] loop0: detected capacity change from 0 to 262144
[   91.582390][ T5995] F2FS-fs (loop0): invalid crc value
[   91.597896][ T5995] F2FS-fs (loop0): Found nat_bits in checkpoint
[   91.657427][ T5995] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[   92.171727][ T6035] netlink: 20 bytes leftover after parsing attributes in process `syz.1.48'.
[   93.289695][ T6052] netlink: 51 bytes leftover after parsing attributes in process `syz.2.56'.
[   93.499719][ T6046] loop1: detected capacity change from 0 to 40427
[   93.526000][ T6046] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x7ffff
[   93.571027][ T6046] F2FS-fs (loop1): Image doesn't support compression
[   93.586664][ T6046] F2FS-fs (loop1): Image doesn't support compression
[   93.594491][ T6046] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x4
[   93.640461][ T6046] F2FS-fs (loop1): invalid crc value
[   93.679331][ T6046] F2FS-fs (loop1): Found nat_bits in checkpoint
[   93.877450][ T6046] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   93.881212][ T6063] veth0: entered promiscuous mode
[   93.917323][ T6063] netlink: 4 bytes leftover after parsing attributes in process `syz.3.61'.
[   93.974162][ T6066] loop2: detected capacity change from 0 to 1024
[   93.983231][   T28] audit: type=1800 audit(1776493268.553:2): pid=6046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.53" name="file1" dev="loop1" ino=14 res=0 errno=0
[   93.987561][ T6046] syz.1.53: attempt to access beyond end of device
[   93.987561][ T6046] loop1: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[   94.021686][ T6066] EXT4-fs: Ignoring removed i_version option
[   94.027780][ T6066] EXT4-fs: Ignoring removed bh option
[   94.061011][ T6066] ext4: Unknown parameter 'nouser_xattr'
[   94.187153][ T6063] veth0 (unregistering): left promiscuous mode
[   94.346860][ T5769] syz-executor: attempt to access beyond end of device
[   94.346860][ T5769] loop1: rw=2049, sector=45104, nr_sectors = 16 limit=40427
[   94.410296][ T5769] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[   94.421116][ T5769] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[   94.761593][ T6079] =======================================================
[   94.761593][ T6079] WARNING: The mand mount option has been deprecated and
[   94.761593][ T6079]          and is ignored by this kernel. Remove the mand
[   94.761593][ T6079]          option from the mount to silence this warning.
[   94.761593][ T6079] =======================================================
[   94.797150][    C1] vkms_vblank_simulate: vblank timer overrun
[   95.337792][ T6085] loop1: detected capacity change from 0 to 512
[   95.357619][ T6085] EXT4-fs: Ignoring removed nobh option
[   95.379309][ T6076] loop0: detected capacity change from 0 to 32768
[   95.406404][ T6085] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   95.462620][ T6085] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   95.503440][ T6076] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   95.585837][ T6085] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   95.667521][ T6076] XFS (loop0): Ending clean mount
[   95.683913][ T6085] EXT4-fs (loop1): 1 truncate cleaned up
[   95.702896][ T6076] XFS (loop0): Quotacheck needed: Please wait.
[   95.723848][ T6085] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   95.748551][ T6101] loop2: detected capacity change from 0 to 512
[   95.806496][ T6076] XFS (loop0): Quotacheck: Done.
[   95.892624][ T6101] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #16: comm syz.2.71: invalid indirect mapped block 4294967295 (level 0)
[   95.913555][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   95.959670][ T6101] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #16: comm syz.2.71: invalid indirect mapped block 4294967295 (level 1)
[   96.047263][ T6101] EXT4-fs (loop2): 1 orphan inode deleted
[   96.100535][ T6101] EXT4-fs (loop2): 1 truncate cleaned up
[   96.108583][ T6101] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   96.301715][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   96.428585][ T5772] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   97.364855][ T6132] loop0: detected capacity change from 0 to 16
[   97.409628][ T6132] erofs: (device loop0): mounted with root inode @ nid 36.
[   97.471300][ T6132] overlayfs: "xino" feature enabled using 3 upper inode bits.
[   97.488596][ T6134] netlink: 20 bytes leftover after parsing attributes in process `syz.1.85'.
[   98.059660][ T6152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.92'.
[   98.084826][ T6151] syzkaller1: entered promiscuous mode
[   98.092555][ T6151] syzkaller1: entered allmulticast mode
[   98.285731][ T6160] loop2: detected capacity change from 0 to 128
[   98.330775][ T6160] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[   98.375553][ T6160] hpfs: filesystem error: improperly stopped
[   98.403209][ T6160] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[   98.413844][ T6160] hpfs: You really don't want any checks? You are crazy...
[   98.457649][ T6160] hpfs: Code page index out of array
[   98.472295][ T6160] hpfs: code page support is disabled
[   98.512816][ T6160] hpfs: hpfs_map_4sectors(): unaligned read
[   98.525396][ T6160] hpfs: hpfs_map_4sectors(): unaligned read
[   98.533130][ T6160] hpfs: filesystem error: unable to find root dir
[   98.751394][ T6172] Driver unsupported XDP return value 0 on prog  (id 11) dev N/A, expect packet loss!
[   99.095944][ T6190] loop1: detected capacity change from 0 to 64
[   99.227674][   T28] audit: type=1800 audit(1776493273.803:3): pid=6190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.104" name="file1" dev="loop1" ino=21 res=0 errno=0
[   99.297623][ T6190] hfs: request for non-existent node -16318464 in B*Tree
[   99.323917][ T6190] hfs: request for non-existent node -16318464 in B*Tree
[   99.365108][ T6188] hfs: request for non-existent node -16318464 in B*Tree
[   99.376097][ T6188] hfs: request for non-existent node -16318464 in B*Tree
[   99.440267][ T1131] hfs: request for non-existent node -16318464 in B*Tree
[   99.463732][ T1131] hfs: request for non-existent node -16318464 in B*Tree
[   99.577943][ T6200] loop1: detected capacity change from 0 to 1024
[   99.637864][ T6200] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   99.792381][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.991371][  T788] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  100.194304][  T788] usb 4-1: unable to get BOS descriptor or descriptor too short
[  100.212792][  T788] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  100.224044][  T788] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  100.233726][  T788] usb 4-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30
[  100.246417][  T788] usb 4-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188
[  100.260621][  T788] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  100.279844][  T788] usb 4-1: config 1 interface 1 has no altsetting 0
[  100.291302][  T788] usb 4-1: string descriptor 0 read error: -22
[  100.297825][  T788] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  100.308478][  T788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  100.615074][ T6214] loop2: detected capacity change from 0 to 32768
[  100.655135][ T6214] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  100.744938][ T6214] XFS (loop2): Ending clean mount
[  100.776666][ T6214] XFS (loop2): Quotacheck needed: Please wait.
[  100.880457][ T6214] XFS (loop2): Quotacheck: Done.
[  101.108517][ T5770] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  101.393117][  T788] usb 4-1: 2:0: failed to get current value for ch 1 (-71)
[  101.600817][  T788] usb 4-1: USB disconnect, device number 2
[  101.935822][ T6252] block nbd2: NBD_DISCONNECT
[  101.942216][ T6252] block nbd2: Disconnected due to user request.
[  101.948687][ T6252] block nbd2: shutting down sockets
[  102.903721][ T6260] loop3: detected capacity change from 0 to 40427
[  102.940908][ T6260] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  102.951628][ T6260] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  102.961751][ T5814] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  103.007007][ T6260] F2FS-fs (loop3): Found nat_bits in checkpoint
[  103.170018][ T5814] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  103.197860][ T6260] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  103.206286][ T5814] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  103.208007][ T6260] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  103.237481][ T5814] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.40
[  103.269381][ T5814] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  103.290855][ T5814] usb 2-1: Product: syz
[  103.295111][ T5814] usb 2-1: SerialNumber: syz
[  103.450295][ T5813] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  103.534255][ T6278] loop2: detected capacity change from 0 to 32768
[  103.553066][ T5814] usb 2-1: USB disconnect, device number 2
[  103.619125][ T6278] JBD2: Ignoring recovery information on journal
[  103.650733][ T5813] usb 1-1: Using ep0 maxpacket: 16
[  103.658213][ T5813] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  103.670743][ T5813] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  103.690397][ T5813] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  103.704331][ T5813] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  103.714137][ T5813] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  103.730961][ T5813] usb 1-1: Product: syz
[  103.735197][ T5813] usb 1-1: Manufacturer: syz
[  103.740906][ T5813] usb 1-1: SerialNumber: syz
[  103.779214][ T6278] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  104.003145][ T6278] syz.2.136 (6278) used greatest stack depth: 18768 bytes left
[  104.079923][ T5770] ocfs2: Unmounting device (7,2) on (node local)
[  104.181393][ T5813] usb 1-1: 0:2 : does not exist
[  105.009320][ T5813] usb 1-1: USB disconnect, device number 2
[  105.472991][ T5813] libceph: connect (1)[c::]:6789 error -101
[  105.479840][ T5813] libceph: mon0 (1)[c::]:6789 connect error
[  105.508540][ T5813] libceph: connect (1)[c::]:6789 error -101
[  105.530399][ T5813] libceph: mon0 (1)[c::]:6789 connect error
[  105.614819][ T6334] syz.1.154 uses obsolete (PF_INET,SOCK_PACKET)
[  105.627437][ T6334] syzkaller1: tun_chr_ioctl cmd 1074025677
[  105.633953][ T6334] syzkaller1: Linktype set failed because interface is up
[  105.733189][ T6338] kvm: user requested TSC rate below hardware speed
[  105.746433][   T23] libceph: connect (1)[c::]:6789 error -101
[  105.764258][   T23] libceph: mon0 (1)[c::]:6789 connect error
[  105.812002][   T23] libceph: connect (1)[c::]:6789 error -101
[  105.824737][   T23] libceph: mon0 (1)[c::]:6789 connect error
[  105.993774][ T6343] loop2: detected capacity change from 0 to 512
[  106.290687][ T5813] libceph: connect (1)[c::]:6789 error -101
[  106.293919][ T6327] ceph: No mds server is up or the cluster is laggy
[  106.296723][ T6330] ceph: No mds server is up or the cluster is laggy
[  106.320420][ T5813] libceph: mon0 (1)[c::]:6789 connect error
[  106.341022][ T5813] libceph: connect (1)[c::]:6789 error -101
[  106.360820][ T5813] libceph: mon0 (1)[c::]:6789 connect error
[  107.225809][ T6347] loop0: detected capacity change from 0 to 32768
[  107.269382][ T6347] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  107.335820][ T6347] XFS (loop0): Ending clean mount
[  107.370253][ T5813] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  107.560817][ T5813] usb 2-1: Using ep0 maxpacket: 32
[  107.577584][ T5772] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  107.602105][ T5813] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  107.630431][ T5813] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  107.651347][ T5813] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  107.678308][ T5813] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  107.708999][ T5813] usb 2-1: config 0 descriptor??
[  107.729010][ T5813] hub 2-1:0.0: USB hub found
[  107.954246][ T5813] hub 2-1:0.0: 1 port detected
[  108.000916][ T6371] loop3: detected capacity change from 0 to 40427
[  108.015804][ T6371] F2FS-fs (loop3): Invalid SB checksum offset: 0
[  108.042109][ T6371] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[  108.056108][ T6371] F2FS-fs (loop3): invalid crc value
[  108.119806][ T6390] loop0: detected capacity change from 0 to 128
[  108.157125][ T6390] EXT4-fs (loop0): Test dummy encryption mode enabled
[  108.224222][ T6390] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  108.298360][ T6390] ext4 filesystem being mounted at /40/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  108.457174][ T6371] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0
[  108.480299][ T6371] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  108.585036][ T5813] hub 2-1:0.0: activate --> -90
[  108.609139][ T6385] loop2: detected capacity change from 0 to 32768
[  108.632314][ T5771] syz-executor: attempt to access beyond end of device
[  108.632314][ T5771] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  108.647775][ T6385] JBD2: Ignoring recovery information on journal
[  108.683913][ T5771] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  108.699273][ T6385] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  108.924082][ T6390] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  108.970330][   T28] audit: type=1804 audit(1776493283.543:4): pid=6385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.175" name="/newroot/49/file1/file1" dev="loop2" ino=17058 res=1 errno=0
[  109.013700][  T788] usb 2-1: USB disconnect, device number 3
[  109.063229][   T28] audit: type=1804 audit(1776493283.593:5): pid=6385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.175" name="/newroot/49/file1/file1" dev="loop2" ino=17058 res=1 errno=0
[  109.112911][ T5772] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  109.234220][ T5770] ocfs2: Unmounting device (7,2) on (node local)
[  109.912696][   T27] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  110.119841][   T27] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  110.140911][   T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.149005][   T27] usb 3-1: Product: syz
[  110.158972][   T27] usb 3-1: Manufacturer: syz
[  110.173864][   T27] usb 3-1: SerialNumber: syz
[  110.187321][   T27] usb 3-1: config 0 descriptor??
[  110.614275][ T6432] loop1: detected capacity change from 0 to 32768
[  110.616933][   T27] usb 3-1: Firmware: major: 50, minor: 195, hardware type: UNKNOWN (85)
[  110.649450][ T6432] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  110.734155][ T6432] XFS (loop1): Ending clean mount
[  110.757204][ T6432] XFS (loop1): Quotacheck needed: Please wait.
[  110.818793][   T27] usb 3-1: Read permanent extended address 14:54:79:c7:db:7f:b1:50 from device
[  110.835721][   T27] usb 3-1: atusb_probe: initialization failed, error = -524
[  110.845615][ T6432] XFS (loop1): Quotacheck: Done.
[  110.849925][   T27] atusb: probe of 3-1:0.0 failed with error -524
[  111.030939][ T5769] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  111.050733][   T27] usb 3-1: USB disconnect, device number 2
[  111.373312][ T6453] team0: entered allmulticast mode
[  111.378632][ T6453] team_slave_0: entered allmulticast mode
[  111.395332][ T6453] team_slave_1: entered allmulticast mode
[  111.408060][ T6453] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  111.964298][ T6472] input: syz0 as /devices/virtual/input/input5
[  112.535717][ T6459] loop3: detected capacity change from 0 to 32768
[  112.538145][ T6489] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  112.900579][ T5813] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  113.015711][ T6459] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  113.240550][ T5813] usb 2-1: Using ep0 maxpacket: 32
[  113.265188][ T5813] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  113.296524][ T5813] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  113.349085][ T5813] usb 2-1: config 0 descriptor??
[  113.361486][ T6459] XFS (loop3): Ending clean mount
[  113.370932][ T5813] gspca_main: sunplus-2.14.0 probing 041e:400b
[  113.507142][ T6557] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  113.629012][ T6562] loop2: detected capacity change from 0 to 128
[  113.742344][ T5771] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  113.810775][ T6562] syz.2.209: attempt to access beyond end of device
[  113.810775][ T6562] loop2: rw=2049, sector=145, nr_sectors = 5 limit=128
[  113.880095][ T6562] syz.2.209: attempt to access beyond end of device
[  113.880095][ T6562] loop2: rw=34817, sector=102, nr_sectors = 27 limit=128
[  113.910637][ T6562] syz.2.209: attempt to access beyond end of device
[  113.910637][ T6562] loop2: rw=34817, sector=145, nr_sectors = 5 limit=128
[  114.611960][ T5813] gspca_sunplus: reg_w_riv err -71
[  114.624740][ T5813] sunplus: probe of 2-1:0.0 failed with error -71
[  114.638425][ T5813] usb 2-1: USB disconnect, device number 4
[  114.752193][ T6582] veth1_to_bridge: entered allmulticast mode
[  114.758953][ T6582] veth1_to_bridge: left allmulticast mode
[  114.974881][ T6590] bridge0: port 2(bridge_slave_1) entered disabled state
[  115.023331][ T6593] Invalid ELF header magic: != ELF
[  115.263589][ T6599] loop3: detected capacity change from 0 to 2048
[  115.297138][ T6599] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  115.735895][ T6613] loop2: detected capacity change from 0 to 128
[  115.794714][ T6613] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  115.849814][ T6613] hpfs: filesystem error: improperly stopped
[  115.874819][ T6613] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  115.893333][ T6613] hpfs: You really don't want any checks? You are crazy...
[  115.924874][ T6613] hpfs: Code page index out of array
[  115.947005][ T6619] capability: warning: `syz.3.231' uses deprecated v2 capabilities in a way that may be insecure
[  115.950862][ T6613] hpfs: code page support is disabled
[  115.978502][ T6613] hpfs: hpfs_map_4sectors(): unaligned read
[  115.988749][ T6613] hpfs: hpfs_map_4sectors(): unaligned read
[  115.995880][ T6613] hpfs: filesystem error: unable to find root dir
[  116.512092][ T6610] loop1: detected capacity change from 0 to 32768
[  116.524733][ T6610] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.227 (6610)
[  116.557575][ T6610] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  116.577594][ T6610] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  116.591793][ T6610] BTRFS info (device loop1): using free space tree
[  116.706899][ T6610] BTRFS info (device loop1): enabling ssd optimizations
[  116.759434][ T6610] BTRFS info (device loop1): auto enabling async discard
[  117.012514][ T5769] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  117.130268][   T27] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  117.223697][ T5780] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 10 /dev/loop1 scanned by udevd (5780)
[  117.331175][   T27] usb 4-1: Using ep0 maxpacket: 8
[  117.339916][   T27] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[  117.358139][   T27] usb 4-1: config 179 has no interface number 0
[  117.381092][   T27] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  117.411689][   T27] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  117.447991][   T27] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  117.480287][   T27] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  117.500264][   T27] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  117.529151][   T27] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  117.553248][   T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  117.584049][ T6656] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  117.895976][   T27] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input6
[  118.240062][   T27] usb 4-1: USB disconnect, device number 3
[  118.240155][    C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  118.240261][    C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  118.311165][   T27] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  118.435217][ T6676] loop0: detected capacity change from 0 to 8192
[  118.456746][ T6676] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  118.509425][ T6676] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[  118.520478][ T5833] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  118.532317][ T6676] REISERFS (device loop0): using ordered data mode
[  118.539007][ T6676] reiserfs: using flush barriers
[  118.582493][ T6676] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  118.609528][ T6669] loop2: detected capacity change from 0 to 40427
[  118.622833][ T6669] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  118.640260][ T6669] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  118.652603][ T6669] F2FS-fs (loop2): invalid crc value
[  118.655654][ T6676] REISERFS (device loop0): checking transaction log (loop0)
[  118.683761][ T6669] F2FS-fs (loop2): Found nat_bits in checkpoint
[  118.710435][ T5833] usb 2-1: Using ep0 maxpacket: 8
[  118.732072][ T5833] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13
[  118.754901][ T5833] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[  118.792197][ T5833] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  118.801091][ T6669] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  118.823394][ T6669] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  118.831709][ T5833] usb 2-1: Product: syz
[  118.838085][ T5833] usb 2-1: Manufacturer: syz
[  118.849803][ T5833] usb 2-1: SerialNumber: syz
[  118.871049][ T5833] usb 2-1: config 0 descriptor??
[  118.916077][ T6676] REISERFS (device loop0): Using tea hash to sort names
[  118.924608][ T5833] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae
[  118.927116][ T6676] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  119.774226][ T6694] bridge0: port 1(bridge_slave_0) entered disabled state
[  119.922234][ T5833] gspca_zc3xx: reg_w_i err -71
[  119.950044][ T6696] netlink: 4 bytes leftover after parsing attributes in process `syz.2.254'.
[  120.156074][ T6700] loop3: detected capacity change from 0 to 136
[  120.370540][ T5813] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  120.536590][ T6704] netlink: 'syz.3.258': attribute type 15 has an invalid length.
[  120.550206][ T6704] netlink: 4 bytes leftover after parsing attributes in process `syz.3.258'.
[  120.560303][ T5833] gspca_zc3xx: Unknown sensor - set to TAS5130C
[  120.562974][ T5813] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 959
[  120.566640][ T5833] gspca_zc3xx: probe of 2-1:0.0 failed with error -71
[  120.590972][ T5813] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  120.596131][ T5833] usb 2-1: USB disconnect, device number 5
[  120.616617][ T6704] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0
[  120.620663][ T5813] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  120.626103][ T6704] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0
[  120.644850][ T6704] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0
[  120.653641][ T6704] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0
[  120.684508][ T6704] netlink: 'syz.3.258': attribute type 15 has an invalid length.
[  120.694548][ T5813] usb 3-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38
[  120.695980][ T6704] netlink: 4 bytes leftover after parsing attributes in process `syz.3.258'.
[  120.717088][ T5813] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.727078][ T6704] Zero length message leads to an empty skb
[  120.747501][ T5813] usb 3-1: Product: syz
[  120.759143][ T5813] usb 3-1: Manufacturer: syz
[  120.777973][ T5813] usb 3-1: SerialNumber: syz
[  120.815330][ T5813] usb 3-1: config 0 descriptor??
[  120.841795][ T6698] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  121.087190][  T788] usb 3-1: USB disconnect, device number 3
[  121.116621][ T6711] binder: 6710:6711 ioctl c0306201 2000000001c0 returned -14
[  121.237301][ T6714] netlink: 8 bytes leftover after parsing attributes in process `syz.0.262'.
[  121.272874][ T6714] ip6gre1: entered promiscuous mode
[  121.288717][ T6714] ip6gre1: entered allmulticast mode
[  121.440898][  T788] libceph: connect (1)[c::]:6789 error -101
[  121.454601][  T788] libceph: mon0 (1)[c::]:6789 connect error
[  121.470055][ T6723] loop0: detected capacity change from 0 to 512
[  121.507994][ T5813] libceph: connect (1)[c::]:6789 error -101
[  121.524010][ T6723] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #15: comm syz.0.266: inode has both inline data and extents flags
[  121.539271][ T5813] libceph: mon0 (1)[c::]:6789 connect error
[  121.543561][ T6723] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.266: couldn't read orphan inode 15 (err -117)
[  121.559498][ T6723] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  121.741010][ T5833] libceph: connect (1)[c::]:6789 error -101
[  121.756469][ T5833] libceph: mon0 (1)[c::]:6789 connect error
[  121.840713][ T5813] libceph: connect (1)[c::]:6789 error -101
[  121.855181][ T5813] libceph: mon0 (1)[c::]:6789 connect error
[  121.879717][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  122.254446][ T6719] ceph: No mds server is up or the cluster is laggy
[  122.261445][ T6724] ceph: No mds server is up or the cluster is laggy
[  122.270695][    T8] libceph: connect (1)[c::]:6789 error -101
[  122.276785][    T8] libceph: mon0 (1)[c::]:6789 connect error
[  122.353151][ T6730] loop3: detected capacity change from 0 to 40427
[  122.375217][ T6730] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504)
[  122.402376][ T6730] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  122.448871][ T6730] F2FS-fs (loop3): invalid crc value
[  122.500049][ T6730] F2FS-fs (loop3): Found nat_bits in checkpoint
[  122.668284][ T6730] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  122.696226][ T6730] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  122.791465][ T6730] netlink: 8 bytes leftover after parsing attributes in process `syz.3.267'.
[  123.898885][ T6783] loop3: detected capacity change from 0 to 4096
[  123.907426][ T6787] loop1: detected capacity change from 0 to 2048
[  123.986378][ T6787] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  124.377460][ T6796] loop1: detected capacity change from 0 to 512
[  124.491140][ T6796] EXT4-fs (loop1): 1 truncate cleaned up
[  124.541803][ T6796] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  124.708621][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  125.189578][ T6817] loop2: detected capacity change from 0 to 2048
[  125.269461][ T6817] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  125.329595][ T6817] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  125.411455][ T6817] fs-verity: sha256 using implementation "sha256-avx2"
[  125.578383][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  125.763649][ T6831] loop2: detected capacity change from 0 to 512
[  125.798599][ T6831] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  125.828497][ T6831] EXT4-fs (loop2): 1 truncate cleaned up
[  125.852051][ T6831] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  126.558380][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  126.900241][    T8] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  127.090400][    T8] usb 4-1: Using ep0 maxpacket: 8
[  127.106929][    T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  127.128933][    T8] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  127.148553][    T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  127.170867][    T8] usb 4-1: config 0 descriptor??
[  127.411395][ T5778] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  127.454833][ T5778] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  127.464357][ T5778] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  127.472522][    T8] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  127.487964][ T5778] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  127.500630][ T5778] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  127.509036][ T5778] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  127.518329][ T6860] sit0: entered promiscuous mode
[  127.552839][ T6860] netlink: 'syz.0.319': attribute type 1 has an invalid length.
[  127.580505][ T6860] netlink: 9 bytes leftover after parsing attributes in process `syz.0.319'.
[  127.860362][   T23] usb 4-1: USB disconnect, device number 4
[  128.126393][ T6857] chnl_net:caif_netlink_parms(): no params data found
[  128.135851][ T6527] Bluetooth: hci4: Frame reassembly failed (-84)
[  128.308716][ T6857] bridge0: port 1(bridge_slave_0) entered blocking state
[  128.318555][ T6857] bridge0: port 1(bridge_slave_0) entered disabled state
[  128.326095][ T6857] bridge_slave_0: entered allmulticast mode
[  128.340539][ T6857] bridge_slave_0: entered promiscuous mode
[  128.356407][ T6857] bridge0: port 2(bridge_slave_1) entered blocking state
[  128.364032][ T6857] bridge0: port 2(bridge_slave_1) entered disabled state
[  128.374197][ T6857] bridge_slave_1: entered allmulticast mode
[  128.413695][ T6857] bridge_slave_1: entered promiscuous mode
[  128.539899][ T6857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  128.556965][ T6857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  128.607186][ T6857] team0: Port device team_slave_0 added
[  128.617383][ T6857] team0: Port device team_slave_1 added
[  128.697257][ T6857] batman_adv: batadv0: Adding interface: batadv_slave_0
[  128.706323][ T6857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  128.739146][ T6857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  128.756931][ T6857] batman_adv: batadv0: Adding interface: batadv_slave_1
[  128.764293][ T6857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  128.790708][ T6857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  128.866675][ T6857] hsr_slave_0: entered promiscuous mode
[  128.877785][ T6857] hsr_slave_1: entered promiscuous mode
[  128.885113][ T6857] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  128.893233][ T6857] Cannot create hsr debugfs directory
[  129.418788][ T6857] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  129.437983][ T6857] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  129.458819][ T6857] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  129.486643][ T6857] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  129.553618][ T6884] loop1: detected capacity change from 0 to 512
[  129.590765][ T5778] Bluetooth: hci0: command tx timeout
[  129.635835][ T6857] 8021q: adding VLAN 0 to HW filter on device bond0
[  129.688956][ T6884] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  129.737632][ T6857] 8021q: adding VLAN 0 to HW filter on device team0
[  129.748241][ T6884] ext4 filesystem being mounted at /72/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  129.779020][ T6537] bridge0: port 1(bridge_slave_0) entered blocking state
[  129.786188][ T6537] bridge0: port 1(bridge_slave_0) entered forwarding state
[  129.845403][ T6531] bridge0: port 2(bridge_slave_1) entered blocking state
[  129.852743][ T6531] bridge0: port 2(bridge_slave_1) entered forwarding state
[  129.989261][ T6857] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  130.007364][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.150628][ T6870] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  130.151644][ T5778] Bluetooth: hci4: command 0x1003 tx timeout
[  130.160407][ T5785] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  130.556533][ T6857] 8021q: adding VLAN 0 to HW filter on device batadv0
[  130.593295][ T6902] input: syz0 as /devices/virtual/input/input7
[  130.824018][ T6893] loop3: detected capacity change from 0 to 32768
[  130.904221][   T28] audit: type=1800 audit(1776493305.483:6): pid=6893 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.330" name="file1" dev="loop3" ino=4 res=0 errno=0
[  130.975047][ T6910] capability: warning: `syz.0.335' uses 32-bit capabilities (legacy support in use)
[  130.982613][ T6893] syz.3.330: attempt to access beyond end of device
[  130.982613][ T6893] loop3: rw=2049, sector=4680032, nr_sectors = 8 limit=32768
[  131.071320][  T112] blkno = 8ed2c, nblocks = 1
[  131.075991][  T112] ERROR: (device loop3): dbUpdatePMap: blocks are outside the map
[  131.075991][  T112] 
[  131.131517][  T112] ERROR: (device loop3): remounting filesystem as read-only
[  131.361590][   T27] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  131.366028][ T6857] veth0_vlan: entered promiscuous mode
[  131.401510][ T6857] veth1_vlan: entered promiscuous mode
[  131.458407][ T6857] veth0_macvtap: entered promiscuous mode
[  131.485846][ T6857] veth1_macvtap: entered promiscuous mode
[  131.537710][ T6857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  131.552659][   T27] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  131.567275][ T6857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.573895][   T27] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  131.578399][ T6857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  131.589092][   T27] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  131.606949][ T6857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.617379][ T6857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  131.628432][ T6857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.640519][   T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  131.648676][   T27] usb 2-1: SerialNumber: syz
[  131.659192][   T28] audit: type=1800 audit(1776493306.243:7): pid=6921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.340" name="bus" dev="overlay" ino=501 res=0 errno=0
[  131.666648][ T6857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  131.690390][ T5785] Bluetooth: hci0: command 0x041b tx timeout
[  131.727362][ T6857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.762803][ T6857] batman_adv: batadv0: Interface activated: batadv_slave_0
[  131.783692][ T6857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  131.860248][ T6857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.890877][ T6857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  131.913253][ T6857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.938285][   T27] usb 2-1: 0:2 : does not exist
[  131.953756][ T6857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  131.978716][ T6857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  132.005015][   T27] usb 2-1: USB disconnect, device number 6
[  132.015657][ T6857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  132.036158][ T6857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  132.064968][ T6857] batman_adv: batadv0: Interface activated: batadv_slave_1
[  132.112479][ T5780] udevd[5780]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  132.143036][ T6857] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  132.154488][ T6857] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  132.169205][ T6857] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  132.184604][ T6857] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  132.327439][ T6521] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  132.345327][ T6521] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  132.404952][ T6521] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  132.420096][ T6521] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  133.098081][ T6937] loop1: detected capacity change from 0 to 256
[  133.152877][ T6940] loop0: detected capacity change from 0 to 512
[  133.204131][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  133.211477][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  133.249884][ T6940] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  133.281261][ T6937] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x395e47cf, utbl_chksum : 0xe619d30d)
[  133.311411][ T6940] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  133.528537][ T6950] netlink: 12 bytes leftover after parsing attributes in process `syz.4.349'.
[  133.708941][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  133.719491][ T6952] loop1: detected capacity change from 0 to 1024
[  133.751504][ T5785] Bluetooth: hci0: command 0x041b tx timeout
[  133.758249][    T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  133.803488][ T6952] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c018, mo2=0002]
[  133.852708][ T6952] System zones: 0-1, 3-12
[  133.859995][ T6952] EXT4-fs (loop1): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  133.910940][ T6960] loop0: detected capacity change from 0 to 256
[  134.020809][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  134.034793][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0500-0000-0000-000000000000.
[  134.047322][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  134.110441][    T9] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  134.120229][ T5813] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  134.133477][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  134.172927][    T9] usb 4-1: config 0 descriptor??
[  134.229402][ T6967] loop1: detected capacity change from 0 to 64
[  134.328307][ T5813] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  134.353210][ T5813] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  134.384032][ T5813] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  134.413736][ T5813] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  134.431309][ T5813] usb 5-1: SerialNumber: syz
[  134.608489][    T9] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor
[  134.628652][    T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0001/input/input8
[  134.663873][ T5813] usb 5-1: 0:2 : does not exist
[  134.696880][ T5813] usb 5-1: USB disconnect, device number 2
[  134.835010][    T9] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0
[  134.971740][    T8] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  135.164151][    T8] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  135.184839][    T8] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  135.197087][    T8] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  135.216800][    T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  135.236917][    T8] usb 2-1: SerialNumber: syz
[  135.466789][    T8] usb 2-1: 0:2 : does not exist
[  135.520585][    T8] usb 2-1: USB disconnect, device number 7
[  135.556272][ T5780] udevd[5780]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  135.823944][ T5833] usb 4-1: reset high-speed USB device number 5 using dummy_hcd
[  135.840232][ T5785] Bluetooth: hci0: command 0x041b tx timeout
[  136.240921][ T7011] loop1: detected capacity change from 0 to 128
[  136.576353][ T7022] warning: `syz.3.375' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  136.708481][ T5775] usb 4-1: USB disconnect, device number 5
[  137.844595][ T7053] 8021q: adding VLAN 0 to HW filter on device bond1
[  137.888648][ T7056] netlink: 'syz.3.390': attribute type 12 has an invalid length.
[  137.900319][ T7056] netlink: 'syz.3.390': attribute type 29 has an invalid length.
[  137.910666][ T5785] Bluetooth: hci0: command 0x041b tx timeout
[  137.938698][ T7056] netlink: 148 bytes leftover after parsing attributes in process `syz.3.390'.
[  137.977040][ T7056] netlink: 'syz.3.390': attribute type 1 has an invalid length.
[  138.022333][ T7056] netlink: 15 bytes leftover after parsing attributes in process `syz.3.390'.
[  138.364450][ T7044] loop1: detected capacity change from 0 to 32768
[  138.395846][ T7044] (syz.1.385,7044,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  138.446080][ T7044] (syz.1.385,7044,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  138.527480][ T7044] JBD2: Ignoring recovery information on journal
[  138.776876][ T7044] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  139.248911][ T5769] ocfs2: Unmounting device (7,1) on (node local)
[  139.959964][ T7083] loop4: detected capacity change from 0 to 32768
[  140.048521][ T7103] netlink: 32 bytes leftover after parsing attributes in process `syz.0.407'.
[  140.279799][ T7083] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  140.396794][ T7102] loop3: detected capacity change from 0 to 40427
[  140.414871][ T7102] F2FS-fs (loop3): Invalid SB checksum offset: 0
[  140.421326][ T7102] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[  140.431636][ T7102] F2FS-fs (loop3): invalid crc value
[  140.452435][ T7083] XFS (loop4): Ending clean mount
[  140.557765][ T7102] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0
[  140.565100][ T7102] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  140.810726][ T5771] syz-executor: attempt to access beyond end of device
[  140.810726][ T5771] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  140.845520][ T6857] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  140.854616][ T5771] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  141.331915][ T7096] loop1: detected capacity change from 0 to 32768
[  141.385467][ T7096] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  141.679972][ T7112] loop0: detected capacity change from 0 to 32768
[  141.764620][ T7112] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.409 (7112)
[  141.789052][ T7096] XFS (loop1): Ending clean mount
[  141.798576][ T7112] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  141.820558][ T7112] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  141.827409][ T7096] XFS (loop1): Quotacheck needed: Please wait.
[  141.829272][ T7112] BTRFS info (device loop0): using free space tree
[  142.020268][ T7112] BTRFS info (device loop0): enabling ssd optimizations
[  142.027310][ T7112] BTRFS info (device loop0): auto enabling async discard
[  142.034847][ T7096] XFS (loop1): Quotacheck: Done.
[  142.363481][ T5769] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  142.786784][ T6531] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared)
[  142.985055][ T5772] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  143.157382][ T7171] loop4: detected capacity change from 0 to 128
[  143.292361][   T23] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  143.327427][ T7171] syz.4.421: attempt to access beyond end of device
[  143.327427][ T7171] loop4: rw=2049, sector=138, nr_sectors = 112 limit=128
[  143.508303][   T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  143.540302][   T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  143.570542][   T23] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  143.620252][   T23] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  143.643539][   T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  143.681706][   T23] usb 2-1: config 0 descriptor??
[  143.975469][ T7179] overlayfs: failed to create directory ./bus/work (errno: 17); mounting read-only
[  144.001822][ T7179] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off.
[  144.108112][   T23] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving
[  144.160776][   T23] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  144.810039][ T7177] loop4: detected capacity change from 0 to 40427
[  144.833364][ T7177] F2FS-fs (loop4): Found nat_bits in checkpoint
[  144.912576][ T7177] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  144.965937][ T7177] F2FS-fs (loop4): Stopped filesystem due to reason: 0
[  145.353422][ T7197] loop3: detected capacity change from 0 to 256
[  145.693978][ T7202] Bluetooth: MGMT ver 1.22
[  145.721478][ T5785] Bluetooth: hci0: Opcode 0x0401 failed: -112
[  146.115273][ T7208] netlink: 4 bytes leftover after parsing attributes in process `syz.1.433'.
[  146.243114][ T5833] usb 2-1: USB disconnect, device number 8
[  146.320577][ T7200] loop3: detected capacity change from 0 to 40427
[  146.330078][ T7200] F2FS-fs (loop3): invalid crc value
[  146.386781][ T7200] F2FS-fs (loop3): Found nat_bits in checkpoint
[  146.471805][ T7208] hsr_slave_1 (unregistering): left promiscuous mode
[  146.525035][ T7200] F2FS-fs (loop3): Start checkpoint disabled!
[  146.563650][ T7200] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  146.663274][ T7200] syz.3.430: attempt to access beyond end of device
[  146.663274][ T7200] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  146.868434][ T7226] netlink: 'syz.4.438': attribute type 7 has an invalid length.
[  146.918639][ T7226] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  146.927946][ T7226] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  146.938061][ T7226] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  146.947125][ T7226] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  146.965962][ T7226] netlink: 'syz.4.438': attribute type 7 has an invalid length.
[  147.021557][ T6527] kworker/u4:15: attempt to access beyond end of device
[  147.021557][ T6527] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  147.066059][ T6527] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  147.082580][ T6527] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  147.320372][ T5833] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  147.525024][ T5833] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[  147.534847][    T8] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  147.557882][ T5833] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  147.570308][ T5833] usb 1-1: Product: syz
[  147.574756][ T5833] usb 1-1: Manufacturer: syz
[  147.583869][ T5833] usb 1-1: SerialNumber: syz
[  147.591916][ T5833] usb 1-1: config 0 descriptor??
[  147.602185][ T5833] gspca_main: sunplus-2.14.0 probing 04fc:504a
[  147.766094][ T5778] Bluetooth: hci0: command 0x041b tx timeout
[  147.772463][ T5785] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  147.799580][    T8] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  147.811696][    T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  147.819927][    T8] usb 2-1: Product: syz
[  147.825826][    T8] usb 2-1: Manufacturer: syz
[  147.831262][    T8] usb 2-1: SerialNumber: syz
[  147.854554][    T8] usb 2-1: config 0 descriptor??
[  148.973170][ T5833] gspca_sunplus: reg_w_riv err -71
[  148.980982][ T5833] sunplus: probe of 1-1:0.0 failed with error -71
[  148.999190][ T5833] usb 1-1: USB disconnect, device number 3
[  149.179684][    T8] usb 2-1: Firmware version (0.0) predates our first public release.
[  149.205864][    T8] usb 2-1: Please update to version 0.2 or newer
[  149.313423][    T8] usb 2-1: USB disconnect, device number 9
[  149.458781][ T7276] loop4: detected capacity change from 0 to 4096
[  149.518319][ T7277] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  149.725564][ T7279] loop3: detected capacity change from 0 to 512
[  149.840279][ T5785] Bluetooth: hci0: command 0x041b tx timeout
[  150.601384][ T7304] syzkaller1: entered promiscuous mode
[  150.607002][ T7304] syzkaller1: entered allmulticast mode
[  150.912027][ T7313] loop4: detected capacity change from 0 to 8192
[  150.936301][ T7313] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  150.980328][   T28] audit: type=1800 audit(1776493325.533:8): pid=7313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.473" name="file1" dev="loop4" ino=1048599 res=0 errno=0
[  151.074215][    T8] kernel write not supported for file bpf-prog (pid: 8 comm: kworker/0:0)
[  152.418722][ T7343] syzkaller1: entered promiscuous mode
[  152.424714][ T7343] syzkaller1: entered allmulticast mode
[  152.457327][ T7345] netlink: 'syz.4.478': attribute type 29 has an invalid length.
[  152.470487][ T5833] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  152.486662][ T7345] netlink: 'syz.4.478': attribute type 29 has an invalid length.
[  152.673426][ T5833] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  152.697165][ T5833] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  152.718393][ T5833] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  152.729231][ T5833] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.750043][ T5833] usb 2-1: config 0 descriptor??
[  152.998644][ T5775] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  153.054908][ T7360] netlink: 12 bytes leftover after parsing attributes in process `syz.4.493'.
[  153.197653][ T5833] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0
[  153.209745][ T5775] usb 4-1: Using ep0 maxpacket: 32
[  153.217146][ T7362] loop4: detected capacity change from 0 to 256
[  153.229158][ T5833] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0
[  153.244049][ T5775] usb 4-1: config 0 has an invalid descriptor of length 111, skipping remainder of the config
[  153.259387][ T5775] usb 4-1: config 0 interface 0 altsetting 16 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[  153.265627][ T7362] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  153.281485][ T5833] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0
[  153.301313][ T7362] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[  153.315468][ T5833] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0
[  153.330560][ T5775] usb 4-1: config 0 interface 0 has no altsetting 0
[  153.337414][ T5833] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0
[  153.350262][ T5775] usb 4-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00
[  153.361948][ T7362] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  153.363640][ T5833] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0
[  153.390210][ T5775] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  153.414773][ T5833] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0
[  153.425088][ T5775] usb 4-1: config 0 descriptor??
[  153.456242][ T5833] cp2112 0003:10C4:EA90.0003: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0
[  153.489764][ T7366] hsr0: entered promiscuous mode
[  153.520513][ T7366] netlink: 4 bytes leftover after parsing attributes in process `syz.0.496'.
[  153.569686][ T5833] cp2112 0003:10C4:EA90.0003: Part Number: 0x00 Device Version: 0x00
[  153.860557][ T5775] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  153.903848][ T5775] usb 4-1: USB disconnect, device number 6
[  154.162275][ T5833] cp2112 0003:10C4:EA90.0003: error reading lock byte: -71
[  154.208155][ T5833] usb 2-1: USB disconnect, device number 10
[  154.503161][ T7381] loop0: detected capacity change from 0 to 8192
[  154.550675][ T7381] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  154.568931][ T7381] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[  154.578491][ T7381] REISERFS (device loop0): using ordered data mode
[  154.585352][ T7381] reiserfs: using flush barriers
[  154.593021][ T7381] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  154.610651][ T7381] REISERFS (device loop0): checking transaction log (loop0)
[  154.632451][ T7381] REISERFS (device loop0): Using r5 hash to sort names
[  154.639680][ T7381] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  154.778365][ T7381] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "˙˙˙˙0x0000000000000000˙˙˙˙0xffffffffffffffff˙”5¨Żq+˘-°Š­ażRw­í‘ǔšÍńŚ&őhӉ8řě4÷"
[  154.977513][ T7390] loop3: detected capacity change from 0 to 512
[  155.071378][ T7390] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.505: invalid indirect mapped block 256 (level 2)
[  155.109687][ T7390] EXT4-fs (loop3): 2 truncates cleaned up
[  155.169665][ T7390] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  155.291737][ T7390] EXT4-fs error (device loop3): ext4_validate_block_bitmap:430: comm syz.3.505: bg 0: block 5: invalid block bitmap
[  155.313288][ T7399] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  155.343350][ T7390] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  155.348140][ T7399] overlayfs: failed to set xattr on upper
[  155.384793][ T7390] EXT4-fs (loop3): This should not happen!! Data will be lost
[  155.384793][ T7390] 
[  155.392309][ T7399] overlayfs: ...falling back to redirect_dir=nofollow.
[  155.417968][ T7390] EXT4-fs (loop3): Total free blocks count 0
[  155.420563][ T7399] overlayfs: ...falling back to index=off.
[  155.425238][ T7402] netlink: 52 bytes leftover after parsing attributes in process `syz.0.507'.
[  155.437724][ T7399] overlayfs: ...falling back to xino=off.
[  155.446581][ T7390] EXT4-fs (loop3): Free/Dirty block details
[  155.450788][ T7399] overlayfs: maximum fs stacking depth exceeded
[  155.462623][ T7390] EXT4-fs (loop3): free_blocks=0
[  155.479964][ T7390] EXT4-fs (loop3): dirty_blocks=2
[  155.494539][ T7402] netlink: 12 bytes leftover after parsing attributes in process `syz.0.507'.
[  155.509369][ T7390] EXT4-fs (loop3): Block reservation details
[  155.517975][ T7390] EXT4-fs (loop3): i_reserved_data_blocks=2
[  155.658946][   T48] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 28
[  155.669805][ T7407] loop4: detected capacity change from 0 to 2048
[  155.812625][ T7407] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  155.891393][   T28] audit: type=1800 audit(1776493330.463:9): pid=7407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.512" name="file2" dev="loop4" ino=16 res=0 errno=0
[  156.014022][ T7416] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size
[  156.059948][ T6857] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  156.676541][ T7431] loop0: detected capacity change from 0 to 2048
[  156.750089][ T7431] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  156.840995][ T7431] ext4 filesystem being mounted at /142/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  156.870880][ T5814] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  157.049814][ T7431] overlayfs: failed to set uuid (/file0, err=-28); falling back to uuid=null.
[  157.065041][ T7431] overlayfs: failed to verify origin (/, ino=2, err=-28)
[  157.080792][ T5814] usb 2-1: Using ep0 maxpacket: 32
[  157.089032][ T7442] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  157.107220][ T7431] overlayfs: failed to verify upper root origin
[  157.116067][ T5814] usb 2-1: config 0 has an invalid interface number: 132 but max is 0
[  157.125158][ T5814] usb 2-1: config 0 has no interface number 0
[  157.133737][ T5814] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  157.163366][ T5814] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  157.174120][ T5814] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  157.191661][ T5814] usb 2-1: Product: syz
[  157.204388][ T5814] usb 2-1: Manufacturer: syz
[  157.209144][ T5814] usb 2-1: SerialNumber: syz
[  157.228336][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  157.229438][ T5814] usb 2-1: config 0 descriptor??
[  157.310917][ T5814] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  157.350213][ T5814] em28xx 2-1:0.132: Video interface 132 found:
[  157.619272][ T7437] loop4: detected capacity change from 0 to 32768
[  157.656747][ T7437] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  157.766045][ T7437] XFS (loop4): Ending clean mount
[  157.783071][ T5814] em28xx 2-1:0.132: unknown em28xx chip ID (0)
[  157.867415][ T7458] loop0: detected capacity change from 0 to 64
[  157.896869][ T6857] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  158.089651][ T7446] loop3: detected capacity change from 0 to 32768
[  158.154854][ T7446] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.526 (7446)
[  158.185349][ T7446] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  158.203484][ T7446] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  158.225889][ T7446] BTRFS info (device loop3): allowing degraded mounts
[  158.241523][ T7446] BTRFS info (device loop3): enabling auto defrag
[  158.248129][ T7446] BTRFS info (device loop3): using free space tree
[  158.329645][ T7463] netlink: 4 bytes leftover after parsing attributes in process `syz.0.530'.
[  158.506293][ T7446] BTRFS info (device loop3): enabling ssd optimizations
[  158.519235][ T7479] loop4: detected capacity change from 0 to 128
[  158.534030][ T7479] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  158.549785][ T7446] BTRFS info (device loop3): auto enabling async discard
[  158.552869][ T7479] hpfs: filesystem error: improperly stopped
[  158.573090][ T7479] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  158.595091][ T7479] hpfs: You really don't want any checks? You are crazy...
[  158.617341][ T7479] hpfs: Code page index out of array
[  158.626489][ T7479] hpfs: code page support is disabled
[  158.641464][ T7479] hpfs: hpfs_map_4sectors(): unaligned read
[  158.652422][ T7479] hpfs: hpfs_map_4sectors(): unaligned read
[  158.662414][ T7479] hpfs: filesystem error: unable to find root dir
[  158.776062][ T7446] BTRFS error (device loop3: state M): unrecognized mount option '˙˙˙˙˙˙˙˙˙˙˙˙˙˙18446744073709551615˙˙˙˙š@­LqE:†‹ á艞Őt}˛0ü$‰'
[  158.946681][ T5771] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  159.005258][ T7484] tipc: Started in network mode
[  159.011157][ T7484] tipc: Node identity ac1414aa, cluster identity 4711
[  159.039532][ T5814] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[  159.053487][ T7435] em28xx 2-1:0.132: failed to trigger write to i2c address 0x0 (error=-5)
[  159.054826][ T7484] tipc: Enabled bearer <udp:s>, priority 10
[  159.066060][ T5814] em28xx 2-1:0.132: board has no eeprom
[  159.092051][    C1] raw-gadget.0 gadget.1: ignoring, device is not running
[  159.221054][ T5814] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  159.229172][ T5814] em28xx 2-1:0.132: analog set to bulk mode.
[  159.249935][   T23] em28xx 2-1:0.132: Registering V4L2 extension
[  159.265938][ T7487] loop4: detected capacity change from 0 to 128
[  159.385431][ T5814] usb 2-1: USB disconnect, device number 11
[  159.421209][ T5814] em28xx 2-1:0.132: Disconnecting em28xx
[  159.541466][ T7487] ERROR: Domain '<kernel> /sbin/init /etc/init.d/rcS /etc/init.d/S50sshd /sbin/start-stop-daemon /usr/sbin/sshd /usr/libexec/sshd-session /bin/sh /root/syz-executor /root/syz-executor /newroot/58/file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  159.700497][   T27] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  159.840335][   T23] em28xx 2-1:0.132: Config register raw data: 0xffffffed
[  159.849715][   T23] em28xx 2-1:0.132: AC97 chip type couldn't be determined
[  159.873023][   T23] em28xx 2-1:0.132: No AC97 audio processor
[  159.899186][   T23] usb 2-1: Decoder not found
[  159.904153][   T23] em28xx 2-1:0.132: failed to create media graph
[  159.916194][ T7499] loop0: detected capacity change from 0 to 512
[  159.950477][   T23] em28xx 2-1:0.132: V4L2 device video103 deregistered
[  159.972645][ T7499] EXT4-fs: Ignoring removed bh option
[  159.974747][   T23] em28xx 2-1:0.132: Remote control support is not available for this card.
[  159.993842][ T7499] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  160.019528][ T5814] em28xx 2-1:0.132: Closing input extension
[  160.061052][ T7499] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[  160.093898][ T5814] em28xx 2-1:0.132: Freeing device
[  160.099483][ T7499] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended
[  160.123455][ T7499] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  160.134289][ T7499] System zones: 0-2, 18-18, 34-35
[  160.145667][   T27] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  160.156580][   T27] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  160.173844][   T27] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  160.183253][   T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  160.188808][ T7499] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  160.192427][   T27] usb 4-1: SerialNumber: syz
[  160.211871][ T5833] tipc: Node number set to 2886997162
[  160.445735][   T27] usb 4-1: 0:2 : does not exist
[  160.496383][   T27] usb 4-1: USB disconnect, device number 7
[  160.589941][ T5780] udevd[5780]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  160.653260][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  162.728701][ T7557] loop3: detected capacity change from 0 to 512
[  162.777152][ T7557] EXT4-fs (loop3): Test dummy encryption mode enabled
[  162.806400][ T7557] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  162.849763][ T7557] EXT4-fs error (device loop3): ext4_orphan_get:1430: comm syz.3.558: bad orphan inode 131083
[  162.893296][ T7557] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  163.074636][ T7557] overlayfs: upper fs needs to support d_type.
[  163.116725][ T7557] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[  163.288152][ T5771] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 13: comm syz-executor: path /137/bus: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  163.607233][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  163.716922][ T6540] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0
[  163.769433][ T6540] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.780374][ T5813] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  163.988450][ T5813] usb 1-1: Using ep0 maxpacket: 32
[  164.019607][ T6540] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0
[  164.034544][ T5813] usb 1-1: config 0 has an invalid interface number: 188 but max is 0
[  164.050711][ T5813] usb 1-1: config 0 has no interface number 0
[  164.056915][ T5813] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  164.067327][ T6540] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  164.096610][ T5813] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  164.106276][ T5813] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  164.114497][ T5813] usb 1-1: Product: syz
[  164.118837][ T5813] usb 1-1: Manufacturer: syz
[  164.123584][ T5813] usb 1-1: SerialNumber: syz
[  164.131178][ T5813] usb 1-1: config 0 descriptor??
[  164.139785][ T7570] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  164.225128][ T6540] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0
[  164.253355][ T7574] netlink: 4 bytes leftover after parsing attributes in process `syz.1.567'.
[  164.270188][ T6540] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  164.380759][ T7570] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  164.439588][ T6540] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0
[  164.465416][ T6540] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.078761][ T5778] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  165.094539][ T5778] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  165.113162][ T5778] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  165.150254][ T5778] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  165.183187][ T5778] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  165.190915][ T5778] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  165.210222][ T5833] usb 2-1: new full-speed USB device number 12 using dummy_hcd
[  165.218509][ T5813] asix 1-1:0.188 (unnamed net_device) (uninitialized): invalid PHY address: 124
[  165.394702][ T5833] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  165.420349][ T5833] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  165.429447][ T5813] usb 1-1: USB disconnect, device number 4
[  165.467210][ T5833] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  165.498525][ T5833] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64
[  165.537188][ T5833] usb 2-1: New USB device found, idVendor=0525, idProduct=bfa1, bcdDevice= 0.40
[  165.549424][ T7601] loop4: detected capacity change from 0 to 16
[  165.561387][ T5833] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  165.591038][ T7601] erofs: (device loop4): mounted with root inode @ nid 36.
[  165.598498][ T5833] usb 2-1: Product: syz
[  165.607592][ T5833] usb 2-1: Manufacturer: syz
[  165.638028][ T5833] usb 2-1: SerialNumber: syz
[  165.646651][ T7601] erofs: (device loop4): erofs_read_inode: bogus i_mode (0) @ nid 281474976710655
[  165.670556][ T7588] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  165.930637][ T7588] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  165.938171][ T7588] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  166.306027][ T7589] chnl_net:caif_netlink_parms(): no params data found
[  166.531361][ T7589] bridge0: port 1(bridge_slave_0) entered blocking state
[  166.538732][ T7589] bridge0: port 1(bridge_slave_0) entered disabled state
[  166.546286][ T7589] bridge_slave_0: entered allmulticast mode
[  166.555369][ T7589] bridge_slave_0: entered promiscuous mode
[  166.574227][ T7588] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  166.600425][ T7588] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  166.684124][ T7589] bridge0: port 2(bridge_slave_1) entered blocking state
[  166.691720][ T7589] bridge0: port 2(bridge_slave_1) entered disabled state
[  166.699565][ T7589] bridge_slave_1: entered allmulticast mode
[  166.708281][ T7589] bridge_slave_1: entered promiscuous mode
[  166.822087][ T5833] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42
[  166.828789][ T5833] cdc_ncm 2-1:1.0: setting rx_max = 16384
[  166.896841][ T7589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  166.928001][ T7589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  166.995612][ T6540] hsr_slave_0: left promiscuous mode
[  167.003239][ T6540] hsr_slave_1: left promiscuous mode
[  167.012754][ T6540] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  167.020458][ T6540] batman_adv: batadv0: Removing interface: batadv_slave_0
[  167.029327][ T5833] cdc_ncm 2-1:1.0: setting tx_max = 88
[  167.048455][ T6540] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  167.056908][ T6540] batman_adv: batadv0: Removing interface: batadv_slave_1
[  167.065366][ T6540] bridge_slave_1: left allmulticast mode
[  167.072430][ T6540] bridge_slave_1: left promiscuous mode
[  167.081996][ T6540] bridge0: port 2(bridge_slave_1) entered disabled state
[  167.095851][ T6540] bridge_slave_0: left allmulticast mode
[  167.104135][ T6540] bridge_slave_0: left promiscuous mode
[  167.120618][ T6540] bridge0: port 1(bridge_slave_0) entered disabled state
[  167.154072][ T6540] veth1_macvtap: left promiscuous mode
[  167.159972][ T6540] veth0_macvtap: left promiscuous mode
[  167.166935][ T6540] veth1_vlan: left promiscuous mode
[  167.173471][ T6540] veth0_vlan: left promiscuous mode
[  167.350885][ T5785] Bluetooth: hci3: command tx timeout
[  168.025801][ T6540] team0 (unregistering): Port device team_slave_1 removed
[  168.099846][ T6540] team0 (unregistering): Port device team_slave_0 removed
[  168.161788][ T6540] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  168.218736][ T6540] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  168.652366][ T6540] bond0 (unregistering): Released all slaves
[  168.798481][ T5833] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[  168.847518][ T7589] team0: Port device team_slave_0 added
[  168.859198][ T5833] usb 2-1: USB disconnect, device number 12
[  168.871651][ T5833] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP)
[  168.881047][ T7589] team0: Port device team_slave_1 added
[  168.966955][ T7589] batman_adv: batadv0: Adding interface: batadv_slave_0
[  168.979003][ T7589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  169.013096][ T7589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  169.028672][ T7589] batman_adv: batadv0: Adding interface: batadv_slave_1
[  169.038789][ T7589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  169.065648][ T7589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  169.205326][ T7589] hsr_slave_0: entered promiscuous mode
[  169.254442][ T7589] hsr_slave_1: entered promiscuous mode
[  169.431036][ T5785] Bluetooth: hci3: command tx timeout
[  169.586208][ T7589] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  169.597661][ T7589] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  169.612664][ T7589] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  169.634851][ T7589] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  169.748399][ T7589] 8021q: adding VLAN 0 to HW filter on device bond0
[  169.791140][ T7589] 8021q: adding VLAN 0 to HW filter on device team0
[  169.809694][ T6525] bridge0: port 1(bridge_slave_0) entered blocking state
[  169.816974][ T6525] bridge0: port 1(bridge_slave_0) entered forwarding state
[  169.846958][ T6531] bridge0: port 2(bridge_slave_1) entered blocking state
[  169.854174][ T6531] bridge0: port 2(bridge_slave_1) entered forwarding state
[  170.256862][ T7589] 8021q: adding VLAN 0 to HW filter on device batadv0
[  170.639106][ T7589] veth0_vlan: entered promiscuous mode
[  170.678991][ T7589] veth1_vlan: entered promiscuous mode
[  170.717303][ T7589] veth0_macvtap: entered promiscuous mode
[  170.731912][ T7589] veth1_macvtap: entered promiscuous mode
[  170.759111][ T7589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  170.771972][ T7589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  170.782169][ T7589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  170.797046][ T7589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  170.807041][ T7589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  170.817713][ T7589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  170.827767][ T7589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  170.838336][ T7589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  170.851523][ T7589] batman_adv: batadv0: Interface activated: batadv_slave_0
[  170.862360][ T7589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  170.874333][ T7589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  170.884462][ T7589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  170.896538][ T7589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  170.906727][ T7589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  170.917382][ T7589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  170.927585][ T7589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  170.938132][ T7589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  170.949313][ T7589] batman_adv: batadv0: Interface activated: batadv_slave_1
[  170.965395][ T7589] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  170.975031][ T7589] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  170.984158][ T7589] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  170.993051][ T7589] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  171.135452][   T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  171.155751][   T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  171.223874][ T6525] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  171.236260][ T6525] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  171.510416][ T5785] Bluetooth: hci3: command tx timeout
[  171.607055][ T7680] loop1: detected capacity change from 0 to 8192
[  171.650456][ T7680] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  171.674287][ T7680] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[  171.696191][ T7680] REISERFS (device loop1): using ordered data mode
[  171.704542][ T7680] reiserfs: using flush barriers
[  171.716298][ T7680] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  171.733489][ T7680] REISERFS (device loop1): checking transaction log (loop1)
[  171.906006][ T7680] REISERFS (device loop1): Using tea hash to sort names
[  171.920576][ T7680] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  171.988846][ T7680] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2)
[  173.590327][ T5785] Bluetooth: hci3: command tx timeout
[  174.925344][ T7758] Bluetooth: hci0: load_link_keys: too big key_count value 11008
[  175.535904][ T7773] bridge0: port 3(gretap0) entered blocking state
[  175.543985][ T7773] bridge0: port 3(gretap0) entered disabled state
[  175.552342][ T7773] gretap0: entered allmulticast mode
[  175.562539][ T7773] gretap0: entered promiscuous mode
[  175.579818][ T7773] bridge0: port 3(gretap0) entered blocking state
[  175.586992][ T7773] bridge0: port 3(gretap0) entered forwarding state
[  175.648088][ T7774] gretap0: left allmulticast mode
[  175.660336][ T7774] gretap0: left promiscuous mode
[  175.668159][ T7774] bridge0: port 3(gretap0) entered disabled state
[  177.027550][ T7782] loop1: detected capacity change from 0 to 32768
[  177.120904][ T7782] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  177.431257][ T7800] loop4: detected capacity change from 0 to 32768
[  177.513261][ T7800] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  177.521969][ T7782] XFS (loop1): Ending clean mount
[  177.525672][ T7782] XFS (loop1): Quotacheck needed: Please wait.
[  177.705944][ T7782] XFS (loop1): Quotacheck: Done.
[  177.721412][ T7800] XFS (loop4): Ending clean mount
[  177.771361][    T9] XFS (loop4): Metadata CRC error detected at xfs_inobt_read_verify+0x42/0xd0, xfs_finobt block 0x10 
[  177.822005][    T9] XFS (loop4): Unmount and run xfs_repair
[  177.827858][    T9] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[  177.913226][    T9] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff  FIB3............
[  177.941495][    T9] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10  ................
[  177.983542][    T9] 00000020: d7 dc 42 4e 79 90 42 cb 9f 91 9c b7 20 0a 10 1d  ..BNy.B..... ...
[  177.983576][ T5769] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  178.020461][    T9] 00000030: 00 00 00 00 0f 8d d2 a2 00 00 18 00 00 00 40 37  ..............@7
[  178.029392][    T9] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00  ................
[  178.115801][    T9] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  178.128536][    T9] 00000060: 00 00 00 00 00 f0 00 00 00 00 00 00 00 00 00 00  ................
[  178.157897][    T9] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  178.177226][ T7800] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x10 len 4 error 74
[  178.208734][ T7800] XFS (loop4): Failed to initialize disk quotas.
[  178.236692][ T7833] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  178.310503][   T28] audit: type=1800 audit(1776493352.873:10): pid=7800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.600" name="file1" dev="loop4" ino=6150 res=0 errno=0
[  178.635463][ T6857] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  179.502315][ T7860] loop1: detected capacity change from 0 to 128
[  179.561233][ T7860] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  179.596426][ T7837] loop0: detected capacity change from 0 to 32768
[  179.628990][ T7860] ext4 filesystem being mounted at /126/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  179.651575][ T7837] JBD2: Ignoring recovery information on journal
[  179.722838][ T7837] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  179.735579][ T7860] syz.1.614 (pid 7860) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  179.859319][ T7869] loop4: detected capacity change from 0 to 256
[  179.871347][ T7837] OCFS2: ERROR (device loop0): int ocfs2_change_extent_flag(handle_t *, struct ocfs2_extent_tree *, u32, u32, u32, struct ocfs2_alloc_context *, struct ocfs2_cached_dealloc_ctxt *, int, int): Owner 17058 has an extent at cpos 0 which can no longer be found
[  179.896788][ T7837] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  179.908026][ T7837] OCFS2: File system is now read-only.
[  179.914246][ T7837] (syz.0.607,7837,1):ocfs2_mark_extent_refcounted:2359 ERROR: status = -30
[  179.923203][ T7837] (syz.0.607,7837,1):ocfs2_add_refcount_flag:3706 ERROR: status = -30
[  179.929135][ T7869] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  179.933760][ T7837] (syz.0.607,7837,1):ocfs2_reflink_remap_extent:4570 ERROR: status = -30
[  179.949527][ T7869] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[  179.951293][ T7837] (syz.0.607,7837,1):ocfs2_reflink_remap_blocks:4694 ERROR: status = -30
[  179.968893][ T7837] (syz.0.607,7837,1):ocfs2_remap_file_range:2746 ERROR: status = -30
[  180.002910][ T7869] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  180.168516][ T7860] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-avx2)"
[  180.207626][ T5772] ocfs2: Unmounting device (7,0) on (node local)
[  180.264575][ T7869] exFAT-fs (loop4): error, invalid access to FAT (entry 0xffffffff)
[  180.298238][ T7869] exFAT-fs (loop4): Filesystem has been set read-only
[  180.364190][ T5769] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  181.262821][ T7877] loop5: detected capacity change from 0 to 32768
[  181.296296][ T7877] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.617 (7877)
[  181.356778][ T7877] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  181.387467][ T7877] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[  181.408473][ T7877] BTRFS info (device loop5): use no compression
[  181.408501][ T7877] BTRFS info (device loop5): force zlib compression, level 3
[  181.408526][ T7877] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_LZO (0x8)
[  181.408658][ T7877] BTRFS info (device loop5): use lzo compression, level 0
[  181.408681][ T7877] BTRFS info (device loop5): turning on flush-on-commit
[  181.408699][ T7877] BTRFS info (device loop5): enabling auto defrag
[  181.408717][ T7877] BTRFS info (device loop5): using free space tree
[  181.527696][ T7877] BTRFS info (device loop5): enabling ssd optimizations
[  181.699595][   T28] audit: type=1800 audit(1776493356.273:11): pid=7877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.617" name="file1" dev="loop5" ino=260 res=0 errno=0
[  182.061855][ T7589] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  182.078485][ T7889] loop0: detected capacity change from 0 to 32768
[  182.175920][ T7889] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  182.428351][ T7889] XFS (loop0): Ending clean mount
[  182.775819][ T5772] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  183.359268][ T7943] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  184.017642][ T7938] loop5: detected capacity change from 0 to 32768
[  184.141480][ T7938] XFS (loop5): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  184.258050][ T7938] XFS (loop5): Ending clean mount
[  184.514812][ T7589] XFS (loop5): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  184.541443][ T7947] loop0: detected capacity change from 0 to 40427
[  184.595120][ T7947] F2FS-fs (loop0): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288)
[  184.659880][ T7947] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  184.709962][ T7947] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x35f7
[  184.750920][ T7947] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x7ffff
[  184.788829][ T7947] F2FS-fs (loop0): Image doesn't support compression
[  184.814705][ T7947] F2FS-fs (loop0): invalid crc value
[  184.882112][ T7947] F2FS-fs (loop0): Found nat_bits in checkpoint
[  185.100460][ T7947] F2FS-fs (loop0): Start checkpoint disabled!
[  185.206357][ T7947] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  185.230329][ T7947] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  185.315330][ T7947] syz.0.629: attempt to access beyond end of device
[  185.315330][ T7947] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  185.401459][ T7992] F2FS-fs (loop0): inject kvmalloc in f2fs_kvmalloc of f2fs_insert_range+0x3ab/0x470
[  185.767889][ T6525] kworker/u4:14: attempt to access beyond end of device
[  185.767889][ T6525] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  185.809485][ T6525] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  185.837277][ T6525] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  186.314917][ T8012] netlink: 32 bytes leftover after parsing attributes in process `syz.4.646'.
[  186.768235][ T8025] loop0: detected capacity change from 0 to 256
[  187.719986][ T8019] loop4: detected capacity change from 0 to 40427
[  187.760285][ T8019] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  187.800663][ T8019] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  187.856899][ T8019] F2FS-fs (loop4): invalid crc value
[  187.886952][ T8019] F2FS-fs (loop4): Found nat_bits in checkpoint
[  188.211480][ T8019] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  188.224484][ T8019] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  188.378878][ T8067] loop1: detected capacity change from 0 to 512
[  188.381424][   T28] audit: type=1800 audit(1776493362.953:12): pid=8019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.647" name="bus" dev="loop4" ino=10 res=0 errno=0
[  188.698947][ T8067] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  188.810454][ T8067] ext4 filesystem being mounted at /134/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  188.855316][ T8081] syzkaller1: entered promiscuous mode
[  188.890266][ T8081] syzkaller1: entered allmulticast mode
[  189.001994][   T28] audit: type=1800 audit(1776493363.583:13): pid=8067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.653" name="file1" dev="loop1" ino=15 res=0 errno=0
[  189.150220][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  190.163638][ T8101] loop1: detected capacity change from 0 to 8192
[  190.314231][ T8101] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  190.417111][   T28] audit: type=1800 audit(1776493364.993:14): pid=8101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.661" name="file2" dev="loop1" ino=1048610 res=0 errno=0
[  190.420589][ T8101] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  190.448068][ T8101] FAT-fs (loop1): Filesystem has been set read-only
[  190.457698][ T8101] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  190.466844][ T8101] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  190.476156][ T8101] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  190.485159][ T8101] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  190.494102][ T8101] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  190.502996][ T8101] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  190.512063][ T8101] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  190.520988][ T8101] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  190.529902][ T8101] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  191.715670][ T8152] loop5: detected capacity change from 0 to 512
[  191.747782][ T8152] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  191.786023][ T8152] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended
[  191.799350][ T8145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  191.848026][ T8152] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  191.889436][ T8152] System zones: 0-2, 18-18, 34-35
[  191.919263][ T8152] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  191.933159][ T8145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  192.026854][ T8145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  192.041251][   T28] audit: type=1800 audit(1776493366.623:15): pid=8152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.677" name="file1" dev="loop5" ino=15 res=0 errno=0
[  192.137611][   T28] audit: type=1804 audit(1776493366.653:16): pid=8152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.677" name="/newroot/24/file2/file1" dev="loop5" ino=15 res=1 errno=0
[  192.175268][ T8145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  192.207705][ T8145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  192.218578][ T8145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  192.235333][ T8145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  192.256959][ T8145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  192.297002][ T8145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  192.314367][ T7589] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  192.338140][ T8145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  192.365042][ T8145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  192.416723][ T8145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  192.437258][ T8145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  192.458123][ T8145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  192.510253][ T8145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  192.540167][ T8145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  193.211928][ T8190] input: syz0 as /devices/virtual/input/input9
[  193.995420][ T8212] netlink: 11 bytes leftover after parsing attributes in process `syz.4.690'.
[  194.018142][ T8212] netlink: 24 bytes leftover after parsing attributes in process `syz.4.690'.
[  194.032225][ T8212] netlink: 24 bytes leftover after parsing attributes in process `syz.4.690'.
[  194.273271][ T8216] input: syz0 as /devices/virtual/input/input10
[  194.651280][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  194.657657][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  194.697728][ T8230] 
[  194.700132][ T8230] =====================================================
[  194.707092][ T8230] WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected
[  194.714841][ T8230] syzkaller #0 Not tainted
[  194.719286][ T8230] -----------------------------------------------------
[  194.726247][ T8230] syz.0.692/8230 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire:
[  194.733891][ T8230] ffffffff8ce0a058 (tasklist_lock){.+.+}-{2:2}, at: send_sigurg+0xf0/0x3c0
[  194.742575][ T8230] 
[  194.742575][ T8230] and this task is already holding:
[  194.750201][ T8230] ffff88802f8ca618 (&f->f_owner.lock){...-}-{2:2}, at: send_sigurg+0x29/0x3c0
[  194.759397][ T8230] which would create a new lock dependency:
[  194.765300][ T8230]  (&f->f_owner.lock){...-}-{2:2} -> (tasklist_lock){.+.+}-{2:2}
[  194.773113][ T8230] 
[  194.773113][ T8230] but this new dependency connects a HARDIRQ-irq-safe lock:
[  194.782580][ T8230]  (&dev->event_lock#2){-...}-{2:2}
[  194.782611][ T8230] 
[  194.782611][ T8230] ... which became HARDIRQ-irq-safe at:
[  194.795535][ T8230]   lock_acquire+0x19e/0x420
[  194.800177][ T8230]   _raw_spin_lock_irqsave+0xb4/0x100
[  194.805664][ T8230]   input_event+0x7a/0xc0
[  194.810012][ T8230]   psmouse_report_standard_packet+0x53/0x200
[  194.816123][ T8230]   psmouse_process_byte+0x478/0x670
[  194.821440][ T8230]   psmouse_handle_byte+0x43/0x490
[  194.826580][ T8230]   ps2_interrupt+0x164/0x980
[  194.831276][ T8230]   serio_interrupt+0x8b/0x130
[  194.836048][ T8230]   i8042_interrupt+0x385/0x710
[  194.840912][ T8230]   __handle_irq_event_percpu+0x271/0x940
[  194.846652][ T8230]   handle_irq_event+0x8b/0x1e0
[  194.851514][ T8230]   handle_edge_irq+0x247/0xb30
[  194.856375][ T8230]   __common_interrupt+0x13b/0x230
[  194.861648][ T8230]   common_interrupt+0xb4/0xd0
[  194.866444][ T8230]   asm_common_interrupt+0x26/0x40
[  194.871567][ T8230]   pv_native_safe_halt+0xf/0x10
[  194.876525][ T8230]   default_idle+0x13/0x20
[  194.880966][ T8230]   default_idle_call+0x6c/0xa0
[  194.885866][ T8230]   do_idle+0x33d/0x590
[  194.890034][ T8230]   cpu_startup_entry+0x43/0x60
[  194.894983][ T8230]   start_secondary+0xee/0xf0
[  194.899763][ T8230]   secondary_startup_64_no_verify+0x179/0x17b
[  194.905927][ T8230] 
[  194.905927][ T8230] to a HARDIRQ-irq-unsafe lock:
[  194.912999][ T8230]  (tasklist_lock){.+.+}-{2:2}
[  194.913031][ T8230] 
[  194.913031][ T8230] ... which became HARDIRQ-irq-unsafe at:
[  194.925876][ T8230] ...
[  194.925886][ T8230]   lock_acquire+0x19e/0x420
[  194.933087][ T8230]   _raw_read_lock+0x36/0x50
[  194.937757][ T8230]   do_wait+0x294/0xae0
[  194.942277][ T8230]   kernel_wait+0xd7/0x1c0
[  194.946795][ T8230]   call_usermodehelper_exec_work+0xb9/0x220
[  194.952873][ T8230]   process_scheduled_works+0xa5d/0x15d0
[  194.958522][ T8230]   worker_thread+0xa55/0xfc0
[  194.963304][ T8230]   kthread+0x2fa/0x390
[  194.967504][ T8230]   ret_from_fork+0x48/0x80
[  194.972051][ T8230]   ret_from_fork_asm+0x11/0x20
[  194.976928][ T8230] 
[  194.976928][ T8230] other info that might help us debug this:
[  194.976928][ T8230] 
[  194.987168][ T8230] Chain exists of:
[  194.987168][ T8230]   &dev->event_lock#2 --> &f->f_owner.lock --> tasklist_lock
[  194.987168][ T8230] 
[  195.000572][ T8230]  Possible interrupt unsafe locking scenario:
[  195.000572][ T8230] 
[  195.008900][ T8230]        CPU0                    CPU1
[  195.014294][ T8230]        ----                    ----
[  195.019848][ T8230]   lock(tasklist_lock);
[  195.024206][ T8230]                                local_irq_disable();
[  195.030978][ T8230]                                lock(&dev->event_lock#2);
[  195.038327][ T8230]                                lock(&f->f_owner.lock);
[  195.045387][ T8230]   <Interrupt>
[  195.048867][ T8230]     lock(&dev->event_lock#2);
[  195.053836][ T8230] 
[  195.053836][ T8230]  *** DEADLOCK ***
[  195.053836][ T8230] 
[  195.061990][ T8230] 2 locks held by syz.0.692/8230:
[  195.067024][ T8230]  #0: ffff888077fc6680 (&u->lock){+.+.}-{2:2}, at: queue_oob+0x1e2/0x4f0
[  195.075755][ T8230]  #1: ffff88802f8ca618 (&f->f_owner.lock){...-}-{2:2}, at: send_sigurg+0x29/0x3c0
[  195.085094][ T8230] 
[  195.085094][ T8230] the dependencies between HARDIRQ-irq-safe lock and the holding lock:
[  195.095547][ T8230]   -> (&dev->event_lock#2){-...}-{2:2} {
[  195.101408][ T8230]      IN-HARDIRQ-W at:
[  195.105583][ T8230]                         lock_acquire+0x19e/0x420
[  195.112137][ T8230]                         _raw_spin_lock_irqsave+0xb4/0x100
[  195.119448][ T8230]                         input_event+0x7a/0xc0
[  195.125770][ T8230]                         psmouse_report_standard_packet+0x53/0x200
[  195.133942][ T8230]                         psmouse_process_byte+0x478/0x670
[  195.141247][ T8230]                         psmouse_handle_byte+0x43/0x490
[  195.148300][ T8230]                         ps2_interrupt+0x164/0x980
[  195.154931][ T8230]                         serio_interrupt+0x8b/0x130
[  195.161646][ T8230]                         i8042_interrupt+0x385/0x710
[  195.168442][ T8230]                         __handle_irq_event_percpu+0x271/0x940
[  195.176122][ T8230]                         handle_irq_event+0x8b/0x1e0
[  195.183013][ T8230]                         handle_edge_irq+0x247/0xb30
[  195.189921][ T8230]                         __common_interrupt+0x13b/0x230
[  195.196980][ T8230]                         common_interrupt+0xb4/0xd0
[  195.203722][ T8230]                         asm_common_interrupt+0x26/0x40
[  195.210779][ T8230]                         pv_native_safe_halt+0xf/0x10
[  195.217655][ T8230]                         default_idle+0x13/0x20
[  195.223999][ T8230]                         default_idle_call+0x6c/0xa0
[  195.230773][ T8230]                         do_idle+0x33d/0x590
[  195.237045][ T8230]                         cpu_startup_entry+0x43/0x60
[  195.244031][ T8230]                         start_secondary+0xee/0xf0
[  195.250735][ T8230]                         secondary_startup_64_no_verify+0x179/0x17b
[  195.258851][ T8230]      INITIAL USE at:
[  195.262989][ T8230]                        lock_acquire+0x19e/0x420
[  195.269450][ T8230]                        _raw_spin_lock_irqsave+0xb4/0x100
[  195.276740][ T8230]                        input_inject_event+0xab/0x320
[  195.283693][ T8230]                        led_trigger_event+0x133/0x210
[  195.290572][ T8230]                        kbd_led_trigger_activate+0xbd/0x100
[  195.297979][ T8230]                        led_trigger_set+0x52c/0x950
[  195.304770][ T8230]                        led_trigger_set_default+0x1a0/0x1e0
[  195.312168][ T8230]                        led_classdev_register_ext+0x733/0x9b0
[  195.319734][ T8230]                        input_leds_connect+0x4eb/0x6b0
[  195.326692][ T8230]                        input_register_device+0xcdc/0x1070
[  195.333990][ T8230]                        atkbd_connect+0x70a/0x9b0
[  195.340500][ T8230]                        serio_driver_probe+0x7a/0xa0
[  195.347279][ T8230]                        really_probe+0x25b/0xb20
[  195.353795][ T8230]                        __driver_probe_device+0x18c/0x330
[  195.361261][ T8230]                        driver_probe_device+0x4f/0x420
[  195.368242][ T8230]                        __driver_attach+0x44e/0x6e0
[  195.374960][ T8230]                        bus_for_each_dev+0x235/0x2b0
[  195.381808][ T8230]                        serio_handle_event+0x1a2/0x860
[  195.388848][ T8230]                        process_scheduled_works+0xa5d/0x15d0
[  195.396325][ T8230]                        worker_thread+0xa55/0xfc0
[  195.402859][ T8230]                        kthread+0x2fa/0x390
[  195.408974][ T8230]                        ret_from_fork+0x48/0x80
[  195.415346][ T8230]                        ret_from_fork_asm+0x11/0x20
[  195.422046][ T8230]    }
[  195.424727][ T8230]    ... key      at: [<ffffffff97630ac0>] input_allocate_device.__key.5+0x0/0x20
[  195.433944][ T8230]  -> (&new->fa_lock){...-}-{2:2} {
[  195.439170][ T8230]     IN-SOFTIRQ-R at:
[  195.443246][ T8230]                       lock_acquire+0x19e/0x420
[  195.449677][ T8230]                       _raw_read_lock_irqsave+0xbc/0x100
[  195.456795][ T8230]                       kill_fasync+0x192/0x4b0
[  195.463044][ T8230]                       sock_wake_async+0x137/0x160
[  195.469655][ T8230]                       sk_wake_async+0x184/0x280
[  195.476110][ T8230]                       sock_def_error_report+0x1ad/0x280
[  195.483231][ T8230]                       sk_error_report+0x41/0x250
[  195.489737][ T8230]                       tcp_validate_incoming+0x13db/0x2250
[  195.497114][ T8230]                       tcp_rcv_established+0x7de/0x1d20
[  195.504157][ T8230]                       tcp_v4_do_rcv+0x4ed/0xb80
[  195.510612][ T8230]                       tcp_v4_rcv+0x23bf/0x2af0
[  195.517057][ T8230]                       ip_protocol_deliver_rcu+0x20e/0x3f0
[  195.524435][ T8230]                       ip_local_deliver_finish+0x2ca/0x510
[  195.531760][ T8230]                       NF_HOOK+0x32d/0x3b0
[  195.537780][ T8230]                       NF_HOOK+0x32d/0x3b0
[  195.543693][ T8230]                       __netif_receive_skb+0xcc/0x290
[  195.550560][ T8230]                       process_backlog+0x391/0x6f0
[  195.557161][ T8230]                       __napi_poll+0xc0/0x460
[  195.563431][ T8230]                       net_rx_action+0x616/0xc40
[  195.569958][ T8230]                       handle_softirqs+0x280/0x820
[  195.576690][ T8230]                       do_softirq+0xfa/0x1a0
[  195.582773][ T8230]                       __local_bh_enable_ip+0x184/0x1c0
[  195.589820][ T8230]                       inet_csk_listen_stop+0x799/0xab0
[  195.596859][ T8230]                       __tcp_close+0x9b/0xe40
[  195.603307][ T8230]                       tcp_close+0x28/0x110
[  195.609320][ T8230]                       inet_release+0x13d/0x180
[  195.615675][ T8230]                       sock_close+0xbd/0x230
[  195.621760][ T8230]                       __fput+0x234/0x970
[  195.627585][ T8230]                       task_work_run+0x1d4/0x260
[  195.634013][ T8230]                       exit_to_user_mode_loop+0xe6/0x110
[  195.641257][ T8230]                       exit_to_user_mode_prepare+0xee/0x180
[  195.648658][ T8230]                       syscall_exit_to_user_mode+0x1a/0x50
[  195.655983][ T8230]                       do_syscall_64+0x61/0xa0
[  195.662251][ T8230]                       entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  195.670009][ T8230]     INITIAL USE at:
[  195.674013][ T8230]                      lock_acquire+0x19e/0x420
[  195.680283][ T8230]                      _raw_write_lock_irq+0xaf/0xf0
[  195.687104][ T8230]                      fasync_remove_entry+0xf4/0x1c0
[  195.693908][ T8230]                      lease_modify+0x1a6/0x390
[  195.700358][ T8230]                      locks_remove_file+0x548/0xee0
[  195.707233][ T8230]                      __fput+0x18f/0x970
[  195.712967][ T8230]                      task_work_run+0x1d4/0x260
[  195.719310][ T8230]                      exit_to_user_mode_loop+0xe6/0x110
[  195.726348][ T8230]                      exit_to_user_mode_prepare+0xee/0x180
[  195.733649][ T8230]                      syscall_exit_to_user_mode+0x1a/0x50
[  195.740861][ T8230]                      do_syscall_64+0x61/0xa0
[  195.747104][ T8230]                      entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  195.754835][ T8230]     INITIAL READ USE at:
[  195.759265][ T8230]                           lock_acquire+0x19e/0x420
[  195.765954][ T8230]                           _raw_read_lock_irqsave+0xbc/0x100
[  195.773593][ T8230]                           kill_fasync+0x192/0x4b0
[  195.780196][ T8230]                           lease_break_callback+0x26/0x30
[  195.787423][ T8230]                           __break_lease+0x4a5/0x12b0
[  195.794285][ T8230]                           do_dentry_open+0x823/0x1500
[  195.801411][ T8230]                           path_openat+0x27f1/0x3230
[  195.808180][ T8230]                           do_filp_open+0x1f5/0x430
[  195.814870][ T8230]                           do_sys_openat2+0x134/0x1d0
[  195.821740][ T8230]                           __x64_sys_openat+0x139/0x160
[  195.828781][ T8230]                           do_syscall_64+0x55/0xa0
[  195.835372][ T8230]                           entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  195.843448][ T8230]   }
[  195.846041][ T8230]   ... key      at: [<ffffffff97337b20>] fasync_insert_entry.__key+0x0/0x20
[  195.854900][ T8230]   ... acquired at:
[  195.858795][ T8230]    _raw_read_lock_irqsave+0xbc/0x100
[  195.864265][ T8230]    kill_fasync+0x192/0x4b0
[  195.868887][ T8230]    mousedev_notify_readers+0x6eb/0xc00
[  195.874543][ T8230]    mousedev_event+0x5f0/0x1310
[  195.879492][ T8230]    input_pass_values+0x9c7/0x12f0
[  195.884816][ T8230]    input_event_dispose+0x346/0x6c0
[  195.890236][ T8230]    input_inject_event+0x1f9/0x320
[  195.895452][ T8230]    evdev_write+0x35f/0x490
[  195.900062][ T8230]    vfs_write+0x296/0x990
[  195.904511][ T8230]    ksys_write+0x150/0x260
[  195.909038][ T8230]    do_syscall_64+0x55/0xa0
[  195.913643][ T8230]    entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  195.919996][ T8230] 
[  195.922328][ T8230] -> (&f->f_owner.lock){...-}-{2:2} {
[  195.927733][ T8230]    IN-SOFTIRQ-R at:
[  195.931725][ T8230]                     lock_acquire+0x19e/0x420
[  195.937899][ T8230]                     _raw_read_lock_irqsave+0xbc/0x100
[  195.944844][ T8230]                     send_sigurg+0x29/0x3c0
[  195.950851][ T8230]                     sk_send_sigurg+0x6f/0xc0
[  195.957023][ T8230]                     tcp_check_urg+0x200/0x750
[  195.963278][ T8230]                     tcp_urg+0x164/0x410
[  195.969006][ T8230]                     tcp_rcv_established+0xa34/0x1d20
[  195.976399][ T8230]                     tcp_v4_do_rcv+0x4ed/0xb80
[  195.982657][ T8230]                     tcp_v4_rcv+0x23bf/0x2af0
[  195.988821][ T8230]                     ip_protocol_deliver_rcu+0x20e/0x3f0
[  195.996037][ T8230]                     ip_local_deliver_finish+0x2ca/0x510
[  196.003160][ T8230]                     NF_HOOK+0x32d/0x3b0
[  196.008989][ T8230]                     NF_HOOK+0x32d/0x3b0
[  196.014724][ T8230]                     __netif_receive_skb+0xcc/0x290
[  196.021407][ T8230]                     process_backlog+0x391/0x6f0
[  196.027869][ T8230]                     __napi_poll+0xc0/0x460
[  196.033865][ T8230]                     net_rx_action+0x616/0xc40
[  196.040118][ T8230]                     handle_softirqs+0x280/0x820
[  196.046763][ T8230]                     do_softirq+0xfa/0x1a0
[  196.052661][ T8230]                     __local_bh_enable_ip+0x184/0x1c0
[  196.059627][ T8230]                     sk_stream_wait_memory+0x6e3/0xee0
[  196.066577][ T8230]                     tcp_sendmsg_locked+0x15cd/0x4bd0
[  196.073717][ T8230]                     tcp_sendmsg+0x2f/0x50
[  196.079640][ T8230]                     __sys_sendto+0x4a9/0x6b0
[  196.085818][ T8230]                     __x64_sys_sendto+0xde/0xf0
[  196.092162][ T8230]                     do_syscall_64+0x55/0xa0
[  196.098236][ T8230]                     entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  196.106068][ T8230]    INITIAL USE at:
[  196.109998][ T8230]                    lock_acquire+0x19e/0x420
[  196.116168][ T8230]                    _raw_write_lock_irq+0xaf/0xf0
[  196.122682][ T8230]                    __f_setown+0x3b/0x330
[  196.128762][ T8230]                    fcntl_dirnotify+0x6e2/0x8d0
[  196.135186][ T8230]                    do_fcntl+0x390/0x1490
[  196.141100][ T8230]                    __se_sys_fcntl+0xc9/0x1a0
[  196.147360][ T8230]                    do_syscall_64+0x55/0xa0
[  196.153441][ T8230]                    entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  196.161173][ T8230]    INITIAL READ USE at:
[  196.165511][ T8230]                         lock_acquire+0x19e/0x420
[  196.172023][ T8230]                         _raw_read_lock_irqsave+0xbc/0x100
[  196.179314][ T8230]                         send_sigurg+0x29/0x3c0
[  196.185649][ T8230]                         sk_send_sigurg+0x6f/0xc0
[  196.192257][ T8230]                         tcp_check_urg+0x200/0x750
[  196.198854][ T8230]                         tcp_urg+0x164/0x410
[  196.205015][ T8230]                         tcp_rcv_established+0xa34/0x1d20
[  196.212229][ T8230]                         tcp_v4_do_rcv+0x4ed/0xb80
[  196.218833][ T8230]                         __release_sock+0x1e5/0x460
[  196.225524][ T8230]                         release_sock+0x5f/0x1c0
[  196.231951][ T8230]                         sk_stream_wait_memory+0x6e3/0xee0
[  196.239244][ T8230]                         tcp_sendmsg_locked+0x15cd/0x4bd0
[  196.246479][ T8230]                         tcp_sendmsg+0x2f/0x50
[  196.252748][ T8230]                         __sys_sendto+0x4a9/0x6b0
[  196.259257][ T8230]                         __x64_sys_sendto+0xde/0xf0
[  196.265966][ T8230]                         do_syscall_64+0x55/0xa0
[  196.272392][ T8230]                         entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  196.280380][ T8230]  }
[  196.282886][ T8230]  ... key      at: [<ffffffff97336ea0>] init_file.__key+0x0/0x20
[  196.290729][ T8230]  ... acquired at:
[  196.294540][ T8230]    _raw_read_lock_irqsave+0xbc/0x100
[  196.300037][ T8230]    send_sigio+0x33/0x360
[  196.304477][ T8230]    kill_fasync+0x228/0x4b0
[  196.309085][ T8230]    lease_break_callback+0x26/0x30
[  196.314295][ T8230]    __break_lease+0x4a5/0x12b0
[  196.319239][ T8230]    do_dentry_open+0x823/0x1500
[  196.324233][ T8230]    path_openat+0x27f1/0x3230
[  196.329004][ T8230]    do_filp_open+0x1f5/0x430
[  196.333757][ T8230]    do_sys_openat2+0x134/0x1d0
[  196.338621][ T8230]    __x64_sys_openat+0x139/0x160
[  196.343651][ T8230]    do_syscall_64+0x55/0xa0
[  196.348333][ T8230]    entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  196.354496][ T8230] 
[  196.356842][ T8230] 
[  196.356842][ T8230] the dependencies between the lock to be acquired
[  196.356854][ T8230]  and HARDIRQ-irq-unsafe lock:
[  196.370406][ T8230] -> (tasklist_lock){.+.+}-{2:2} {
[  196.375646][ T8230]    HARDIRQ-ON-R at:
[  196.379637][ T8230]                     lock_acquire+0x19e/0x420
[  196.385892][ T8230]                     _raw_read_lock+0x36/0x50
[  196.392062][ T8230]                     do_wait+0x294/0xae0
[  196.397795][ T8230]                     kernel_wait+0xd7/0x1c0
[  196.403796][ T8230]                     call_usermodehelper_exec_work+0xb9/0x220
[  196.411352][ T8230]                     process_scheduled_works+0xa5d/0x15d0
[  196.418563][ T8230]                     worker_thread+0xa55/0xfc0
[  196.424816][ T8230]                     kthread+0x2fa/0x390
[  196.430543][ T8230]                     ret_from_fork+0x48/0x80
[  196.436617][ T8230]                     ret_from_fork_asm+0x11/0x20
[  196.443048][ T8230]    SOFTIRQ-ON-R at:
[  196.447036][ T8230]                     lock_acquire+0x19e/0x420
[  196.453202][ T8230]                     _raw_read_lock+0x36/0x50
[  196.459367][ T8230]                     do_wait+0x294/0xae0
[  196.465190][ T8230]                     kernel_wait+0xd7/0x1c0
[  196.471186][ T8230]                     call_usermodehelper_exec_work+0xb9/0x220
[  196.478738][ T8230]                     process_scheduled_works+0xa5d/0x15d0
[  196.486053][ T8230]                     worker_thread+0xa55/0xfc0
[  196.492395][ T8230]                     kthread+0x2fa/0x390
[  196.498134][ T8230]                     ret_from_fork+0x48/0x80
[  196.504384][ T8230]                     ret_from_fork_asm+0x11/0x20
[  196.510817][ T8230]    INITIAL USE at:
[  196.514724][ T8230]                    lock_acquire+0x19e/0x420
[  196.520802][ T8230]                    _raw_write_lock_irq+0xaf/0xf0
[  196.527335][ T8230]                    copy_process+0x2275/0x3d80
[  196.533588][ T8230]                    kernel_clone+0x24b/0x8a0
[  196.539660][ T8230]                    user_mode_thread+0x111/0x180
[  196.546088][ T8230]                    rest_init+0x27/0x300
[  196.551908][ T8230]                    arch_call_rest_init+0xe/0x10
[  196.558337][ T8230]                    start_kernel+0x459/0x4e0
[  196.564421][ T8230]                    x86_64_start_reservations+0x2a/0x30
[  196.571453][ T8230]                    copy_bootdata+0x0/0xe0
[  196.577364][ T8230]                    secondary_startup_64_no_verify+0x179/0x17b
[  196.585008][ T8230]    INITIAL READ USE at:
[  196.589443][ T8230]                         lock_acquire+0x19e/0x420
[  196.596058][ T8230]                         _raw_read_lock+0x36/0x50
[  196.602640][ T8230]                         do_wait+0x294/0xae0
[  196.608729][ T8230]                         kernel_wait+0xd7/0x1c0
[  196.615068][ T8230]                         call_usermodehelper_exec_work+0xb9/0x220
[  196.623054][ T8230]                         process_scheduled_works+0xa5d/0x15d0
[  196.630613][ T8230]                         worker_thread+0xa55/0xfc0
[  196.637215][ T8230]                         kthread+0x2fa/0x390
[  196.643295][ T8230]                         ret_from_fork+0x48/0x80
[  196.649765][ T8230]                         ret_from_fork_asm+0x11/0x20
[  196.656555][ T8230]  }
[  196.659066][ T8230]  ... key      at: [<ffffffff8ce0a058>] tasklist_lock+0x18/0x40
[  196.666896][ T8230]  ... acquired at:
[  196.670719][ T8230]    _raw_read_lock+0x36/0x50
[  196.675418][ T8230]    send_sigurg+0xf0/0x3c0
[  196.679932][ T8230]    sk_send_sigurg+0x6f/0xc0
[  196.684720][ T8230]    queue_oob+0x3f1/0x4f0
[  196.689146][ T8230]    unix_stream_sendmsg+0xaf0/0xbf0
[  196.694438][ T8230]    ____sys_sendmsg+0x5ba/0x960
[  196.699416][ T8230]    ___sys_sendmsg+0x2a6/0x360
[  196.704279][ T8230]    __sys_sendmmsg+0x2ca/0x510
[  196.709140][ T8230]    __x64_sys_sendmmsg+0xa0/0xb0
[  196.714172][ T8230]    do_syscall_64+0x55/0xa0
[  196.718773][ T8230]    entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  196.724857][ T8230] 
[  196.727213][ T8230] 
[  196.727213][ T8230] stack backtrace:
[  196.733104][ T8230] CPU: 0 PID: 8230 Comm: syz.0.692 Not tainted syzkaller #0
[  196.740396][ T8230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  196.750460][ T8230] Call Trace:
[  196.753753][ T8230]  <TASK>
[  196.756693][ T8230]  dump_stack_lvl+0x18c/0x250
[  196.761396][ T8230]  ? load_image+0x420/0x420
[  196.765919][ T8230]  ? show_regs_print_info+0x20/0x20
[  196.771139][ T8230]  ? load_image+0x420/0x420
[  196.775751][ T8230]  ? print_shortest_lock_dependencies+0xf4/0x160
[  196.782119][ T8230]  __lock_acquire+0x6851/0x7d40
[  196.787079][ T8230]  ? verify_lock_unused+0x140/0x140
[  196.792297][ T8230]  ? verify_lock_unused+0x140/0x140
[  196.797512][ T8230]  lock_acquire+0x19e/0x420
[  196.802115][ T8230]  ? send_sigurg+0xf0/0x3c0
[  196.806639][ T8230]  ? read_lock_is_recursive+0x20/0x20
[  196.812024][ T8230]  ? do_raw_read_lock+0x3d/0x90
[  196.816887][ T8230]  ? _raw_read_lock_irqsave+0xc8/0x100
[  196.822356][ T8230]  ? _raw_read_lock+0x50/0x50
[  196.827044][ T8230]  ? __lock_acquire+0x7d40/0x7d40
[  196.832509][ T8230]  ? do_raw_spin_lock+0x11f/0x2c0
[  196.837549][ T8230]  _raw_read_lock+0x36/0x50
[  196.842061][ T8230]  ? send_sigurg+0xf0/0x3c0
[  196.846572][ T8230]  send_sigurg+0xf0/0x3c0
[  196.850913][ T8230]  sk_send_sigurg+0x6f/0xc0
[  196.855431][ T8230]  queue_oob+0x3f1/0x4f0
[  196.859686][ T8230]  ? scm_stat_add+0xc0/0xc0
[  196.864219][ T8230]  ? bpf_lsm_socket_getpeersec_dgram+0x9/0x10
[  196.870329][ T8230]  ? security_socket_getpeersec_dgram+0x83/0xa0
[  196.876585][ T8230]  unix_stream_sendmsg+0xaf0/0xbf0
[  196.881778][ T8230]  ? aa_sk_perm+0x83c/0x970
[  196.886822][ T8230]  ? unix_show_fdinfo+0x270/0x270
[  196.891855][ T8230]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[  196.898461][ T8230]  ? aa_sock_msg_perm+0x94/0x150
[  196.903533][ T8230]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  196.908915][ T8230]  ? security_socket_sendmsg+0x80/0xa0
[  196.914383][ T8230]  ? unix_show_fdinfo+0x270/0x270
[  196.919414][ T8230]  ____sys_sendmsg+0x5ba/0x960
[  196.924199][ T8230]  ? __asan_memset+0x22/0x40
[  196.928806][ T8230]  ? __sys_sendmsg_sock+0x30/0x30
[  196.933837][ T8230]  ? __import_iovec+0x5f2/0x850
[  196.938704][ T8230]  ? import_iovec+0x73/0xa0
[  196.943229][ T8230]  ___sys_sendmsg+0x2a6/0x360
[  196.947937][ T8230]  ? __sys_sendmsg+0x2a0/0x2a0
[  196.952736][ T8230]  __sys_sendmmsg+0x2ca/0x510
[  196.957429][ T8230]  ? __ia32_sys_sendmsg+0x90/0x90
[  196.962464][ T8230]  ? __ia32_sys_get_robust_list+0x110/0x110
[  196.968373][ T8230]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  196.974384][ T8230]  ? lock_chain_count+0x20/0x20
[  196.979266][ T8230]  __x64_sys_sendmmsg+0xa0/0xb0
[  196.984155][ T8230]  do_syscall_64+0x55/0xa0
[  196.988660][ T8230]  ? clear_bhb_loop+0x40/0x90
[  196.993410][ T8230]  ? clear_bhb_loop+0x40/0x90
[  196.998108][ T8230]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  197.004032][ T8230] RIP: 0033:0x7fa9a239c819
[  197.008463][ T8230] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  197.028261][ T8230] RSP: 002b:00007fa9a31a3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  197.036775][ T8230] RAX: ffffffffffffffda RBX: 00007fa9a2615fa0 RCX: 00007fa9a239c819
[  197.044842][ T8230] RDX: 0000000000000001 RSI: 0000200000006c40 RDI: 0000000000000003
[  197.052824][ T8230] RBP: 00007fa9a2432c91 R08: 0000000000000000 R09: 0000000000000000
[  197.062805][ T8230] R10: 0000000000040015 R11: 0000000000000246 R12: 0000000000000000
[  197.070799][ T8230] R13: 00007fa9a2616038 R14: 00007fa9a2615fa0 R15: 00007ffe19287468
[  197.078789][ T8230]  </TASK>
[  197.114233][   T51] Bluetooth: hci2: command 0x0406 tx timeout
[  197.120393][   T51] Bluetooth: hci1: command 0x0406 tx timeout
[  197.360475][ T8227] loop4: detected capacity change from 0 to 32768
[  197.380250][ T8227] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.694 (8227)
[  197.434644][ T8227] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  197.444908][ T8227] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  197.460269][ T8227] BTRFS info (device loop4): force clearing of disk cache
[  197.467467][ T8227] BTRFS info (device loop4): metadata ratio 0
[  197.500166][ T8227] BTRFS info (device loop4): enabling ssd optimizations
[  197.507276][ T8227] BTRFS info (device loop4): using spread ssd allocation scheme
[  197.550481][ T8227] BTRFS info (device loop4): using free space tree
[  197.599189][ T8227] BTRFS info (device loop4): auto enabling async discard
[  197.614047][ T8227] BTRFS info (device loop4): rebuilding free space tree
[  197.680552][ T6857] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  197.969576][ T8233] loop1: detected capacity change from 0 to 40427
[  197.988627][ T8233] F2FS-fs (loop1): Found nat_bits in checkpoint
[  198.053630][ T8233] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  198.083387][ T8233] syz.1.695: attempt to access beyond end of device
[  198.083387][ T8233] loop1: rw=2049, sector=53248, nr_sectors = 8 limit=40427
[  198.117269][ T5769] syz-executor: attempt to access beyond end of device
[  198.117269][ T5769] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  198.131637][ T5769] F2FS-fs (loop1): Stopped filesystem due to reason: 3