last executing test programs:

7m44.785812083s ago: executing program 2 (id=125):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000040)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000080))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000300)={{0x3, 0xcb}, 'port1\x00', 0x0, 0x10001, 0x8, 0x9, 0x2, 0x60b, 0xffff, 0x0, 0x4, 0xe})
getsockname(r1, &(0x7f0000000280)=@tipc, &(0x7f00000001c0)=0x80)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
r3 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
ftruncate(r3, 0x2007ffc)
sendfile(r3, r3, 0x0, 0x800000009)
sendfile(r0, r0, 0x0, 0x800000009)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

7m41.57698285s ago: executing program 2 (id=130):
prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x13, 0x0, &(0x7f0000000540))
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_BT_VOICE(r4, 0x112, 0xb, 0x0, 0x0)
keyctl$invalidate(0x15, 0x0)
keyctl$set_timeout(0xf, 0x0, 0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x7738f2b6e2b2e59, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r5 = getpgid(r0)
r6 = syz_pidfd_open(r5, 0x0)
r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
read$FUSE(r7, &(0x7f0000003980)={0x2020}, 0x2020)
write$FUSE_ATTR(r7, 0x0, 0x0)
r8 = pidfd_getfd(r6, 0xffffffffffffffff, 0x0)
readlinkat(r8, &(0x7f0000000100)='\x00', &(0x7f0000000140)=""/189, 0xbd)
syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2)

7m39.589931779s ago: executing program 2 (id=135):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0xcf5)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"})
r1 = syz_open_pts(r0, 0x121500)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000280)=0x3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000600), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}})
r3 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001d000100000000000000000007000000", @ANYBLOB="000096000a00020001"], 0x30}}, 0x0)
semtimedop(0x0, 0x0, 0x0, 0x0)
read$FUSE(r2, &(0x7f00000077c0)={0x2020, 0x0, <r4=>0x0}, 0x2020)
write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, r4, {0x7, 0x1f}}, 0x50)
syz_fuse_handle_req(r2, &(0x7f0000009800)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000015000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000093160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f400000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fff30000000000007f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff0000000000000000000000000000002000", 0x2000, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101000, 0x0)
close(0x3)
unshare(0x22020600)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, 0x0, &(0x7f0000000040))
fdatasync(r5)
rseq(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x0, 0x0)
io_setup(0x2, &(0x7f0000001700)=<r7=>0x0)
eventfd2(0x0, 0x0)
io_getevents(r7, 0x4, 0x3, &(0x7f0000000100)=[{}, {}, {}], 0x0)
io_submit(r7, 0x0, &(0x7f00000028c0))

7m31.183372311s ago: executing program 2 (id=147):
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f0000000040)={0x1, 0xff, 0x1f})
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket(0x1, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15)
r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0)
ioctl$IMADDTIMER(r5, 0x80044940, &(0x7f00000001c0)=0xf4254)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
read$midi(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDCTL_SEQ_PANIC(r0, 0x5111)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000840}, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x4000, 0x0)
syz_usb_connect$uac1(0x2, 0x71, &(0x7f0000000080)={{0x12, 0x1, 0x510, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x10, 0xe0, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0xa, 0x7f, 0x8, {0x7, 0x25, 0x1, 0x80, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x3, 0x1, 0x3, {0x7, 0x25, 0x1, 0x80, 0x2, 0xb4}}}}}}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0})

7m27.911651608s ago: executing program 2 (id=144):
r0 = socket(0x10, 0x3, 0x0)
iopl(0x3)
rt_sigsuspend(0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000002c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xf, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0x8, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x20)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000000)=0x7fffffff)
ioctl$FS_IOC_GETFSMAP(r4, 0x40305839, &(0x7f0000000080)=ANY=[])
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x4, 0x0, 0x0)
r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401)
ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000040)={'\x00', 0x7ff, 0x200006, 0x2, 0x4964, 0x9})
ioctl$SG_BLKTRACETEARDOWN(r6, 0x1276, 0x0)
socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r0)

7m26.38725544s ago: executing program 2 (id=145):
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESOCT=r0], 0x66)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, 0x0, 0x4)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r6}, 0x38)
r7 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r7, &(0x7f0000000280)="96", 0x1, 0x1, &(0x7f0000000240)={0xa, 0x0, 0x3, @private0}, 0x1c)
setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r7, 0x84, 0x1e, &(0x7f0000000000)=0x6, 0x4)

7m10.922955815s ago: executing program 32 (id=145):
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESOCT=r0], 0x66)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, 0x0, 0x4)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r6}, 0x38)
r7 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r7, &(0x7f0000000280)="96", 0x1, 0x1, &(0x7f0000000240)={0xa, 0x0, 0x3, @private0}, 0x1c)
setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r7, 0x84, 0x1e, &(0x7f0000000000)=0x6, 0x4)

6m14.187254538s ago: executing program 4 (id=160):
mknodat$loop(0xffffffffffffff9c, 0x0, 0x6004, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00"], 0xb8}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000015"], 0xb8}}, 0x24000010)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000040)={0x0, <r7=>0x0}, &(0x7f0000000080)=0xc)
sendmsg$netlink(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="3430bc46ca9b3a3db8e5320000002e0001000000f88496dd2ce29f56ac3a0838676568dd799718378ecbbe38081437eea6d6a4807783df6957b08f8822ad33812d4f19d48b89e16019adf32143efd2a7dd9d40497dc8d32a5213afd915b884b32aabb09b7889abb969c7bd083f1b5f24cd92149b239d302b58803bf892cae5ec619ee9a55ce622f6f2b05005f896b67f088745207e88534cc7a89cd2313539b3acf9cdfc7ce2", @ANYRES32=r7, @ANYBLOB="0700008095a6c80012000180991a54fc28d627d80740ede1a4720000"], 0x34}], 0x1}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00')
preadv(r8, &(0x7f0000004380)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x7, 0x16)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r9}, &(0x7f00000005c0), &(0x7f0000000580)}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffff8}, 0xffffffffffffffe8)

6m10.540637091s ago: executing program 4 (id=215):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x18)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2000000, 0x0)
chdir(&(0x7f0000000280)='./file0\x00')
creat(0x0, 0x11d)
r4 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0)
r5 = open(&(0x7f0000000000)='./file0\x00', 0x143042, 0xfe)
ftruncate(r5, 0x2008002)
sendfile(r4, r5, 0x0, 0x80000001)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="002207000000188b09e7abb7241602000000b1070c31cb8d53e0bc25947a6de6fc83f6"], 0x0}, 0x0)

6m8.018642908s ago: executing program 4 (id=217):
syz_open_dev$usbmon(&(0x7f0000001980), 0x1, 0x10280)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xc2354000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r4, 0xfffffffd, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x40000007, @loopback}, @ib={0x1b, 0x0, 0x0, {"7d0300"}, 0x0, 0x0, 0x2}}}, 0x118)
write$RDMA_USER_CM_CMD_LISTEN(r3, 0x0, 0x0)
close(r3)
setregid(0xffffffffffffffff, 0x0)
setuid(0xee01)
syz_io_uring_setup(0x109, 0x0, 0x0, &(0x7f0000000080))
clock_nanosleep(0x9, 0x0, &(0x7f0000000680)={0x0, 0x989680}, 0x0)
chdir(0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r5, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4)
listen(r5, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)

6m6.294212053s ago: executing program 4 (id=219):
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x50)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
close(0x3)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$can_j1939(0xffffffffffffffff, 0x0, 0xee)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg$xdp(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000480)="fe", 0x1a000}], 0x1, 0x0, 0x0, 0x41}, 0x0)
setrlimit(0x6, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffff, 0x2}, 0x6)
recvmmsg(0xffffffffffffffff, &(0x7f0000000580), 0x0, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
capset(0x0, &(0x7f0000000280)={0x3, 0xf, 0x1, 0x6, 0x9, 0x3})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r4, 0x0, 0x61, 0x0, 0x0)

5m50.251457326s ago: executing program 33 (id=219):
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x50)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
close(0x3)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$can_j1939(0xffffffffffffffff, 0x0, 0xee)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg$xdp(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000480)="fe", 0x1a000}], 0x1, 0x0, 0x0, 0x41}, 0x0)
setrlimit(0x6, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffff, 0x2}, 0x6)
recvmmsg(0xffffffffffffffff, &(0x7f0000000580), 0x0, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
capset(0x0, &(0x7f0000000280)={0x3, 0xf, 0x1, 0x6, 0x9, 0x3})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r4, 0x0, 0x61, 0x0, 0x0)

10.686256085s ago: executing program 5 (id=815):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000404355030000000000000109022400010000800009040086890300000009210000000122050009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, &(0x7f00000005c0)={0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="02001f"], 0x0}, 0x0)

10.471080498s ago: executing program 1 (id=816):
r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802)
ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000080)=0x2e9aa845)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1)

10.254327822s ago: executing program 1 (id=818):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x42, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x20, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x7, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x6, 0x80}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="002205000000a90f66"], 0x0}, 0x0)

8.706459305s ago: executing program 5 (id=821):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b021b00000000000109022400010000400009040000010300400009210000000122050009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000006c0)={0x2c, &(0x7f00000003c0)={0x20, 0x23, 0x96, {0x96, 0x31, "68cc14701b13ba9098a605f80b24315a8d982db2b8a86f30dfa3231fe5ce977fa23b3667ddeaf44ee97f1f4f57fb074bf3386672edc07c6f6d75ed25e7862c7b6c4ac3aba51a3241896914b84665cb05ab25a0f505813fbe3cf223713caf2015a8df190870d776a51ac63dce9e6b9a69d9665b44888dc7e61a5dea1d1f3f7a4c3c77ae09a9282f78ca63729090fe9cdcbaf0f9e4"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

8.353232799s ago: executing program 1 (id=822):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000040ac05624200000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0xff8d, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002205000000a9ce56"], 0x0}, 0x0)

8.30105557s ago: executing program 0 (id=823):
syz_mount_image$hfs(&(0x7f0000000140), &(0x7f0000000200)='./bus\x00', 0x2810880, &(0x7f0000000300)=ANY=[], 0x8b, 0x28e, &(0x7f0000000680)="$eJzs3U1r1EAcx/HfJNt1a2tNbUUQD1IteJK2XsRLQYqvwZOo3RWKSwWtoF4snsUX4N2LL8AX4UkEz3ry5AvoLTKzSXeiedi2dsel3w/sGpN5+E+STeYfKBGAE+v2xvcPN37aj5FixZJuSZHddFktSed1ofN8e2drp9/r1jUUSx25j5FcTfNXmc3tXllVW8/VyCT2fy3N+utwPNI0TX+EDgIhdbJ/47KNkXQq+3XGfuFJtxs6gMDMnvb0QnOh4wAAhGUG9/cou8/PZvP3KJKWs9u+f///diZwvEe1FzqAwLz7v8uyUmOP71m3aZjvuRTObo/yLPGg/djJY1uDM6swwTRNWaWLJZp+tNXvXd980u9GeqP1jFdsUdK6ulnOmmmIdqkkNy1qa/TWasy4MUzZMaxVxL9Q1unhe2xmPpsv5p5J9F7d/flfKzW2exdBsn+k7kwN41+pbtGNMhmUqhjlvOvkYnHH1o4yrspIlO+peRUfECTFONultdr6o9ZgdKvVo3PtLJTWWmuotWhrffRqDc/m6prHzbwzd82SfumTNrz5f2T39rJG+WXaMq5kdmbk4ynNDVuuZOKv2r1U2mZ0uPHgUN7qoW5q7tnLV48f9Pu9pyycoIX8JPhf4vl3C63x9NU+8q7r6ECFpboy+aVzhAbzi3Rjp2EuSxiv4UGvLvN6nAFh3OzFwwzyPy9fWXEpkv1KaubpadO0zWtxtSI3OOe+T3stmez5fHUGNFOdwY2ac125Jl31VjbkXImNc7p2rJPEbOir7vP8HwAAAAAAAAAAAAAAAAAAYNKM428zQo8RAAAAAAAAAAAAAAAAAAAAAIBJV/3+346O8f2/hZfp8P5fIIzfAQAA///stXSM")
r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0)
pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="df", 0xf4240}], 0x1, 0x800001, 0x0, 0x0)

8.166770922s ago: executing program 0 (id=824):
r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x73, 0x9e, 0x61, 0x8, 0xfd9, 0x2c, 0x66b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0xd4, 0x40, 0x0, [{{0x9, 0x4, 0x65, 0x0, 0x0, 0xbe, 0x86, 0x6d, 0x1}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)

6.87786955s ago: executing program 5 (id=826):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x18)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
connect$unix(r2, &(0x7f0000001080)=@file={0x0, './file0\x00'}, 0x6e)
mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2000000, 0x0)
chdir(&(0x7f0000000280)='./file0\x00')
creat(0x0, 0x11d)
r4 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0)
r5 = open(&(0x7f0000000000)='./file0\x00', 0x143042, 0xfe)
ftruncate(r5, 0x2008002)
sendfile(r4, r5, 0x0, 0x80000001)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="002207000000188b09e7abb7241602000000b1070c31cb8d53e0bc25947a6de6fc83f6"], 0x0}, 0x0)

6.666041994s ago: executing program 0 (id=827):
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000200)='./file0\x00', 0x2000000, &(0x7f0000000340)=ANY=[], 0x6, 0x55a, &(0x7f0000001300)="$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")
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
read(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x1)
ioctl$SIOCAX25ADDUID(r4, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xee01})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000040), 0x6)
ioctl$sock_bt_hci(r5, 0x400448e6, &(0x7f0000000080)="ce")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x4e26, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0xffffffffffffff10)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, 0x0, 0x0, 0xa, 0x0, 0x0, 0x41100, 0xb, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)

6.502211756s ago: executing program 1 (id=828):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000104355220500000000000109022400010000400009040803010300010009210000000122050009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f0000000500)=ANY=[@ANYBLOB="401105"], 0x0, 0x0, 0x0, 0x0}, 0x0)

5.918792954s ago: executing program 3 (id=829):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000280)={0x1f, @fixed}, 0x8)
setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000), 0x4)

5.859716305s ago: executing program 3 (id=830):
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000200)='./file0\x00', 0x2000000, &(0x7f0000000340)=ANY=[], 0x6, 0x55a, &(0x7f0000001300)="$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")
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
read(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x1)
ioctl$SIOCAX25ADDUID(r4, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xee01})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000040), 0x6)
ioctl$sock_bt_hci(r5, 0x400448e6, &(0x7f0000000080)="ce")
ioctl$sock_bt_hci(r5, 0x400448e7, 0x0)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x87)
connect$inet6(r6, &(0x7f0000000500)={0xa, 0x4e26, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0xffffffffffffff10)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x100000, &(0x7f00000000c0), 0x9e, 0x4a3, &(0x7f0000000980)="$eJzs3U1sFFUcAPD/bLulfNmK+AGCVtGIXy0tH3IwRowmHjQx0QPGUy2FIIUaWhMhRNED3lQS78ajiXcTTnox4sFovOrJiyEhhgtoYjJm9qvbZXfZtttdYH+/ZLbvzbzte/++edPXebvbAHrWSPaQRGyIiN8jYqiYXVxgpPjl2pUzU/9cOZOPSNPX/04K5a5eOTNVLlp+3vpiJk0j1mTJNXXqPfdWxOTMzPTJUn5s/vi7Y3OnTj999Pjkkekj0ycm9u/fs3v7wL6JvSuKL1f6msV1desHs9u2vPzm+VenDp5/++I3WXs3lI5Xx7EsWbQ1Roo/3VoPZg+Prqiym8rP2cPGqh1Jf+PCox1oEK3ri4isu/KF8T8UfbG2cmwoXvq4q40DVlWapmm9388lZ1PgNpbEDQrE8x1qCdBZ5V/02d+/5a2VecNge6YfXTd3sfgHUBb3tdJWPNJfuXeQX7iN0HYjEXHw7L9fZlu0dB/i8z8vPL5arQEAesF3ByLiqXrzv1zcUy60o7hKMvTcr5XnbYqIuyJic0TcHVEoe29E3LfE+mtXSK6f/+QuLTWmpbh8IOLZ0trW4vlfZco33FfKbcwykU8OH52Z3hURd0TEzsivyfLji7/tohWQ71/87bNyunbeXD3/y7as/vJcsNSOS/01N+gOTc5PtiP2zOWPIrb214s/qQSRRMSWiNi6zDqOPvH1tkbHbhx/E03WmVqVfhXxWLH/z8ai+Be6Kmm4Pjn+zL6JvWODMTO9a6x8Vlzvp1/Ovdao/hXF3wZZ/6+re/5XVoGHk8GIuVOnjxXWa+eWXse5Pz6pGtOLVpez+HPfRiz5/B9I3shX73t/cn7+5HjEQPJKIT9QvX+iptzEQvks/p076o//TVUtvj8ispN4e0Q8UFrEzfruoYh4OLtENon/xxceeafRscb93+SufBuVh1DT/v+vuv+Xnug79sOFRvW3dv3bU0jtLO1p5frXagOX+3MDAACAW0mu8Br4JDdaSedyo6PF1/BvjnW5mdm5+ScPz7534lDxtfLDkc+V73QNVd0PHS+kF/ITNfndEXFnRHzRt7aQH52anTnU7eChx61vMP4zf/V1u3XAqmvDOhpwizL+oXcZ/9C7jH/oXcY/9K564//DLrQD6Lik5j0ZTbkuwO3F/B96l/EPvcv4h57U8L3xuaZv+U+X/2kAnUiUPzvhZmlPlxJrV7OKyHU/wFVMfJpEtOkbpmlElhhc3tP7V/c0jqT0nzhqDjW8ZAx37OIEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQBv8HAAD//8iN4dA=")
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, 0x0, 0x0, 0xa, 0x0, 0x0, 0x41100, 0xb, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0x6000, 0x2000, &(0x7f0000fa2000/0x2000)=nil})

5.698980018s ago: executing program 0 (id=831):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000002f80)={[{@umask}, {}, {@nls={'nls', 0x3d, 'cp1251'}}, {@uid={'uid', 0x3d, 0xee01}}, {@nobarrier}, {@uid}]}, 0x20, 0x6de, &(0x7f0000000840)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0)
pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0)

5.454612082s ago: executing program 5 (id=832):
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$unix(0x1, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="020000000400"})

4.534431925s ago: executing program 3 (id=833):
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000200)='./file0\x00', 0x2000000, &(0x7f0000000340)=ANY=[], 0x6, 0x55a, &(0x7f0000001300)="$eJzs2s9qE1EUB+CTP02LCGYtLgbcuCrVJzBICsWAEMlCceFA4yYjwmQzyaoP4hP4PD5JVt1F6oSkURGknUxtvg9CDvlNMucykHsX5+OTz5PzL9NPH75/jaOXSbQjonkZ0Y1mtKLUiI1GdOK6iwAA/jfDYdqruweqlee99OoMd/hbMvpWS0MAAAAAAAAAAADc2L/M/zfN/wPAvVDO/3fqboMK5Xkv7azOb9vM/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD1uVwuHy3/8qq7PwDg9tn/AWD/2P8BYP/Y/wFg/7x99/51bzDoD5PkKGJxUYyKUfle5qdng/5J8lN3861FUYxa6/x5mSfb+UE8WOUv/ph34tnTMr/KXr0Z/JIfxnn1ywcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACuOU7Wuo31p4uiGLXKfHNBN7bysjo9G/RPVhds5+143N7dOgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICbm87mkzTLxrmiiqIdETu41/HD8mkerJ7q7d8iolHRLyvuZlHffxIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFCv6Ww+SbNsnE/r7gQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuCums/kkzbJxXmFR9xoBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYvR8BAAD//2/WhiY=")
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
read(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x1)
ioctl$SIOCAX25ADDUID(r4, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xee01})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000040), 0x6)
ioctl$sock_bt_hci(r5, 0x400448e6, &(0x7f0000000080)="ce")
ioctl$sock_bt_hci(r5, 0x400448e7, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x4e26, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0xffffffffffffff10)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x100000, &(0x7f00000000c0), 0x9e, 0x4a3, &(0x7f0000000980)="$eJzs3U1sFFUcAPD/bLulfNmK+AGCVtGIXy0tH3IwRowmHjQx0QPGUy2FIIUaWhMhRNED3lQS78ajiXcTTnox4sFovOrJiyEhhgtoYjJm9qvbZXfZtttdYH+/ZLbvzbzte/++edPXebvbAHrWSPaQRGyIiN8jYqiYXVxgpPjl2pUzU/9cOZOPSNPX/04K5a5eOTNVLlp+3vpiJk0j1mTJNXXqPfdWxOTMzPTJUn5s/vi7Y3OnTj999Pjkkekj0ycm9u/fs3v7wL6JvSuKL1f6msV1desHs9u2vPzm+VenDp5/++I3WXs3lI5Xx7EsWbQ1Roo/3VoPZg+Prqiym8rP2cPGqh1Jf+PCox1oEK3ri4isu/KF8T8UfbG2cmwoXvq4q40DVlWapmm9388lZ1PgNpbEDQrE8x1qCdBZ5V/02d+/5a2VecNge6YfXTd3sfgHUBb3tdJWPNJfuXeQX7iN0HYjEXHw7L9fZlu0dB/i8z8vPL5arQEAesF3ByLiqXrzv1zcUy60o7hKMvTcr5XnbYqIuyJic0TcHVEoe29E3LfE+mtXSK6f/+QuLTWmpbh8IOLZ0trW4vlfZco33FfKbcwykU8OH52Z3hURd0TEzsivyfLji7/tohWQ71/87bNyunbeXD3/y7as/vJcsNSOS/01N+gOTc5PtiP2zOWPIrb214s/qQSRRMSWiNi6zDqOPvH1tkbHbhx/E03WmVqVfhXxWLH/z8ai+Be6Kmm4Pjn+zL6JvWODMTO9a6x8Vlzvp1/Ovdao/hXF3wZZ/6+re/5XVoGHk8GIuVOnjxXWa+eWXse5Pz6pGtOLVpez+HPfRiz5/B9I3shX73t/cn7+5HjEQPJKIT9QvX+iptzEQvks/p076o//TVUtvj8ispN4e0Q8UFrEzfruoYh4OLtENon/xxceeafRscb93+SufBuVh1DT/v+vuv+Xnug79sOFRvW3dv3bU0jtLO1p5frXagOX+3MDAACAW0mu8Br4JDdaSedyo6PF1/BvjnW5mdm5+ScPz7534lDxtfLDkc+V73QNVd0PHS+kF/ITNfndEXFnRHzRt7aQH52anTnU7eChx61vMP4zf/V1u3XAqmvDOhpwizL+oXcZ/9C7jH/oXcY/9K564//DLrQD6Lik5j0ZTbkuwO3F/B96l/EPvcv4h57U8L3xuaZv+U+X/2kAnUiUPzvhZmlPlxJrV7OKyHU/wFVMfJpEtOkbpmlElhhc3tP7V/c0jqT0nzhqDjW8ZAx37OIEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQBv8HAAD//8iN4dA=")
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, 0x0, 0x0, 0xa, 0x0, 0x0, 0x41100, 0xb, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0x6000, 0x2000, &(0x7f0000fa2000/0x2000)=nil})

4.516642895s ago: executing program 0 (id=834):
syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x4b, 0x41, 0x46, 0x8, 0x1660, 0x932, 0x80ea, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x5, 0x10, 0xf}}]}}]}}, 0x0)
r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000040)={&(0x7f0000001800)=[{0x63, 0x5010, 0x0, 0x0}], 0x1})

2.869218419s ago: executing program 3 (id=835):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x2)
r1 = dup(r0)
write$UHID_INPUT(r1, &(0x7f0000002080)={0x8, {"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", 0x1000}}, 0x1006)

2.186443419s ago: executing program 1 (id=836):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x700, 0x0, [@sadb_key={0x2, 0x9, 0x10, 0x0, "01d7"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x60}, 0x1, 0x7}, 0x0)

2.042269251s ago: executing program 3 (id=837):
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000200)='./file0\x00', 0x2000000, &(0x7f0000000340)=ANY=[], 0x6, 0x55a, &(0x7f0000001300)="$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")
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
read(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x1)
ioctl$SIOCAX25ADDUID(r2, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xee01})

1.677840426s ago: executing program 0 (id=838):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442d, &(0x7f0000004480)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)
pwrite64(r0, &(0x7f00000000c0)='2', 0x1, 0x4ded0)

1.179625324s ago: executing program 5 (id=839):
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000200)='./file0\x00', 0x2000000, &(0x7f0000000340)=ANY=[], 0x6, 0x55a, &(0x7f0000001300)="$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")
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
read(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x1)
ioctl$SIOCAX25ADDUID(r4, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xee01})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000040), 0x6)
ioctl$sock_bt_hci(r5, 0x400448e6, &(0x7f0000000080)="ce")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x4e26, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0xffffffffffffff10)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, 0x0, 0x0, 0xa, 0x0, 0x0, 0x41100, 0xb, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)

1.147241404s ago: executing program 1 (id=840):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x18)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
connect$unix(r2, &(0x7f0000001080)=@file={0x0, './file0\x00'}, 0x6e)
mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2000000, 0x0)
chdir(&(0x7f0000000280)='./file0\x00')
creat(0x0, 0x11d)
r4 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0)
r5 = open(&(0x7f0000000000)='./file0\x00', 0x143042, 0xfe)
ftruncate(r5, 0x2008002)
sendfile(r4, r5, 0x0, 0x80000001)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="002207000000188b09e7abb7241602000000b1070c31cb8d53e0bc25947a6de6fc83f6"], 0x0}, 0x0)

692.658711ms ago: executing program 3 (id=841):
syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000002c0)={[{@journal_async_commit}, {@heartbeat_none}, {@usrquota}, {@barrier={'barrier', 0x3d, 0x7}}, {@heartbeat_none}, {@inode64}]}, 0x1, 0x4703, &(0x7f0000004800)="$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")
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00')
read$FUSE(r0, &(0x7f0000000c40)={0x2020}, 0x2020)

0s ago: executing program 5 (id=842):
syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000000)='./file1\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x1, 0x35d, &(0x7f0000000f00)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48241, 0x0)
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000})
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$kcm(0x29, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94)
r6 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r6, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x20000811)
sendmsg$kcm(r2, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0)
r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x24, r7, 0x1, 0x70bd2d, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048091}, 0x4000)

kernel console output (not intermixed with test programs):

0.561308][ T6980] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  290.625530][ T6677] veth1_vlan: entered promiscuous mode
[  290.637230][ T6980] vivid-007: =================  START STATUS  =================
[  291.588849][ T6989] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  291.624505][   T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  291.658701][ T6980] vivid-007: Generate PTS: true
[  291.676171][ T6980] vivid-007: Generate SCR: true
[  291.686311][ T6980] tpg source WxH: 640x360 (Y'CbCr)
[  291.691657][ T6980] tpg field: 1
[  291.695540][ T6980] tpg crop: 640x360@0x0
[  291.704965][ T6980] tpg compose: 640x360@0x0
[  291.709869][ T6980] tpg colorspace: 8
[  291.714123][ T6980] tpg transfer function: 0/0
[  291.723847][ T6980] tpg Y'CbCr encoding: 0/0
[  291.729775][ T6980] tpg quantization: 0/0
[  291.733989][ T6980] tpg RGB range: 0/2
[  291.742853][ T6980] vivid-007: ==================  END STATUS  ==================
[  291.833955][ T6677] veth0_macvtap: entered promiscuous mode
[  291.897656][ T6677] veth1_macvtap: entered promiscuous mode
[  291.968314][ T6677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  291.986029][ T6677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  292.009051][ T6677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  292.034745][ T6677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  292.084812][ T6677] batman_adv: batadv0: Interface activated: batadv_slave_0
[  292.440319][ T6677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  292.454688][ T6677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  292.480638][ T6677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  292.526095][ T6677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  292.547923][ T6677] batman_adv: batadv0: Interface activated: batadv_slave_1
[  292.562171][ T6677] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  292.603779][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  292.616364][ T6677] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  292.625293][ T6677] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  292.684802][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  292.722412][ T6677] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  292.846607][ T5861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  294.310219][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  294.460188][ T7011] warning: `syz.3.208' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  295.317460][ T5808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  295.444543][ T1101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  295.453304][ T1101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  296.285475][ T1190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  296.376053][ T5816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  296.398522][   T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  296.429347][   T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  298.079750][ T7029] ucma_write: process 252 (syz.0.211) changed security contexts after opening file descriptor, this is not allowed.
[  298.235645][ T7025] netlink: 12 bytes leftover after parsing attributes in process `syz.1.210'.
[  298.245736][ T7025] netlink: 48 bytes leftover after parsing attributes in process `syz.1.210'.
[  298.684946][ T7037] netlink: 104 bytes leftover after parsing attributes in process `syz.4.160'.
[  300.344547][ T1190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  300.774120][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  301.815265][ T7059] netlink: 40 bytes leftover after parsing attributes in process `syz.0.214'.
[  302.695008][ T7058] netlink: 'syz.3.216': attribute type 1 has an invalid length.
[  302.702832][ T7058] netlink: 224 bytes leftover after parsing attributes in process `syz.3.216'.
[  302.733348][ T7058] 9pnet_fd: Insufficient options for proto=fd
[  302.792954][ T5856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  302.834196][ T6635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  304.097348][ T1190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  304.460098][ T6635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  305.943609][ T6635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  306.868693][ T7086] bridge_slave_0: left allmulticast mode
[  306.874655][ T7086] bridge_slave_0: left promiscuous mode
[  306.883035][ T7086] bridge0: port 1(bridge_slave_0) entered disabled state
[  307.061244][ T7086] bridge_slave_1: left allmulticast mode
[  307.159119][ T5856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  307.177856][ T7086] bridge_slave_1: left promiscuous mode
[  307.353149][ T5808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  307.368423][ T7086] bridge0: port 2(bridge_slave_1) entered disabled state
[  308.375722][ T7086] 
: (slave bond_slave_0): Releasing backup interface
[  308.384948][ T5808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  308.434286][ T7086] 
: (slave bond_slave_1): Releasing backup interface
[  308.507035][ T7086] team0: Port device team_slave_0 removed
[  308.529755][ T7086] team0: Port device team_slave_1 removed
[  308.545597][ T7086] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  308.553351][ T7086] batman_adv: batadv0: Removing interface: batadv_slave_0
[  308.565213][ T7086] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  308.573410][ T7086] batman_adv: batadv0: Removing interface: batadv_slave_1
[  308.598764][ T7086] macsec0: left allmulticast mode
[  308.614433][ T7086] veth1_macvtap: left allmulticast mode
[  308.629233][ T7086] macsec0: left promiscuous mode
[  308.643546][ T7086] bridge0: port 3(macsec0) entered disabled state
[  309.187237][ T7109] loop0: detected capacity change from 0 to 16
[  311.223095][ T1190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  311.241789][ T5808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  311.253735][ T7104] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10)
[  311.260822][ T7104] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  311.274100][ T7104] vhci_hcd vhci_hcd.0: Device attached
[  311.410020][ T7109] erofs: (device loop0): mounted with root inode @ nid 36.
[  311.546613][ T5808] usb 39-1: new low-speed USB device number 2 using vhci_hcd
[  311.854958][ T7111] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(13)
[  311.861913][ T7111] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  311.922867][ T5861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  311.928113][ T7116] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  312.166043][ T7104] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(16)
[  312.166090][ T7111] vhci_hcd vhci_hcd.0: Device attached
[  312.172887][ T7104] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  312.276752][ T6635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  312.290793][ T7104] vhci_hcd vhci_hcd.0: Device attached
[  312.371838][ T7104] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(18)
[  312.378537][ T7104] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  312.396163][ T7104] vhci_hcd vhci_hcd.0: Device attached
[  312.516038][ T1190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  312.822812][ T7111] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(21)
[  312.829518][ T7111] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  313.334839][ T5816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  313.648003][ T7131] netlink: 12 bytes leftover after parsing attributes in process `syz.0.226'.
[  313.658284][ T7131] netlink: zone id is out of range
[  313.663946][ T7131] netlink: set zone limit has 4 unknown bytes
[  314.091165][ T7111] vhci_hcd vhci_hcd.0: Device attached
[  314.313777][ T7115] vhci_hcd: connection closed
[  314.314970][ T7113] vhci_hcd: connection closed
[  314.320886][ T7108] vhci_hcd: connection reset by peer
[  314.335261][ T7125] vhci_hcd: connection closed
[  314.360998][   T11] vhci_hcd: stop threads
[  314.383351][ T5816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  315.434628][ T7121] vhci_hcd: connection closed
[  315.454018][   T11] vhci_hcd: release socket
[  315.484694][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  315.495639][   T11] vhci_hcd: disconnect device
[  315.656398][   T11] vhci_hcd: stop threads
[  315.660737][   T11] vhci_hcd: release socket
[  315.701934][   T11] vhci_hcd: disconnect device
[  315.717570][   T11] vhci_hcd: stop threads
[  315.734869][   T11] vhci_hcd: release socket
[  315.749934][   T11] vhci_hcd: disconnect device
[  315.783763][   T11] vhci_hcd: stop threads
[  315.795169][   T11] vhci_hcd: release socket
[  315.821283][   T11] vhci_hcd: disconnect device
[  315.845404][   T11] vhci_hcd: stop threads
[  315.851779][   T11] vhci_hcd: release socket
[  315.897226][   T11] vhci_hcd: disconnect device
[  316.207167][ T7154] loop3: detected capacity change from 0 to 2048
[  317.846942][ T1282] ieee802154 phy0 wpan0: encryption failed: -22
[  317.853556][   T23] net_ratelimit: 4 callbacks suppressed
[  317.853570][   T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  317.856483][ T1282] ieee802154 phy1 wpan1: encryption failed: -22
[  317.909253][ T5808] vhci_hcd: vhci_device speed not set
[  317.920788][ T7152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  317.946006][ T7151] binder: 7150:7151 ioctl c0046209 0 returned -22
[  318.049609][ T7152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  320.360406][ T5861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  320.376015][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  320.393522][ T5141]  loop3: p1 < > p4
[  320.546437][ T5141] loop3: p4 size 8388608 extends beyond EOD, truncated
[  320.563719][ T7152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  321.326880][ T6588] udevd[6588]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  321.358230][ T5760] udevd[5760]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  321.400893][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  321.418882][  T786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  321.587796][ T6635] usb usb40-port1: attempt power cycle
[  322.696207][  T786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  322.718752][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  323.724297][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  323.770184][ T7178] tmpfs: Unknown parameter 'hugelways'
[  323.881746][ T6635] usb usb40-port1: unable to enumerate USB device
[  324.181955][ T7185] netlink: 'syz.1.237': attribute type 1 has an invalid length.
[  324.293883][ T7186] 9pnet_fd: Insufficient options for proto=fd
[  324.301700][ T7185] netlink: 224 bytes leftover after parsing attributes in process `syz.1.237'.
[  325.326363][ T6635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  325.587441][ T5776] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  325.599921][ T5776] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  325.608675][ T5776] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  325.617878][ T5776] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  325.626011][ T5776] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  325.633464][ T5776] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  326.342277][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  326.365133][ T6635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  326.376375][   T40] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  328.371815][ T6635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  328.387442][ T5856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  328.436086][ T5776] Bluetooth: hci0: command tx timeout
[  328.568998][   T40] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  329.396797][ T5861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  329.589904][   T40] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  330.516027][ T5776] Bluetooth: hci0: command tx timeout
[  330.830089][   T40] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  330.843730][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  331.965619][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  332.547407][ T5856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  332.596153][ T5776] Bluetooth: hci0: command tx timeout
[  332.703024][ T7239] netlink: 'syz.0.247': attribute type 1 has an invalid length.
[  332.710890][ T7239] netlink: 224 bytes leftover after parsing attributes in process `syz.0.247'.
[  332.739415][ T7239] 9pnet_fd: Insufficient options for proto=fd
[  333.396219][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  333.492593][ T7243] loop0: detected capacity change from 0 to 128
[  334.676016][ T5776] Bluetooth: hci0: command tx timeout
[  334.900664][  T786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  335.656327][ T5856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  335.828709][ T7189] chnl_net:caif_netlink_parms(): no params data found
[  335.913528][ T7259] ax25_connect(): syz.1.251 uses autobind, please contact jreuter@yaina.de
[  336.017861][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  336.366612][ T7259] 8021q: adding VLAN 0 to HW filter on device bond0
[  336.426711][ T7259] bond0: (slave rose0): Enslaving as an active interface with an up link
[  337.041277][ T7189] bridge0: port 1(bridge_slave_0) entered blocking state
[  337.056447][ T7189] bridge0: port 1(bridge_slave_0) entered disabled state
[  337.063738][ T7189] bridge_slave_0: entered allmulticast mode
[  337.097698][ T7189] bridge_slave_0: entered promiscuous mode
[  337.120975][ T6635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  337.166577][ T7189] bridge0: port 2(bridge_slave_1) entered blocking state
[  337.191836][ T7189] bridge0: port 2(bridge_slave_1) entered disabled state
[  337.206311][ T7189] bridge_slave_1: entered allmulticast mode
[  337.213923][ T7189] bridge_slave_1: entered promiscuous mode
[  337.406629][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  337.469191][ T7189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  337.534200][ T7189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  337.882913][ T7189] team0: Port device team_slave_0 added
[  337.910698][ T7189] team0: Port device team_slave_1 added
[  338.118272][ T7189] batman_adv: batadv0: Adding interface: batadv_slave_0
[  338.125422][ T7189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  338.154654][ T7189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  338.204451][ T6635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  338.210684][ T7189] batman_adv: batadv0: Adding interface: batadv_slave_1
[  338.226313][ T7189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  338.253229][ T7189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  338.382930][ T7189] hsr_slave_0: entered promiscuous mode
[  338.409723][ T7189] hsr_slave_1: entered promiscuous mode
[  338.431222][ T7189] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  338.439010][ T7189] Cannot create hsr debugfs directory
[  338.558946][   T40] hsr_slave_0: left promiscuous mode
[  338.590332][   T40] hsr_slave_1: left promiscuous mode
[  338.629650][   T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  338.646250][   T40] batman_adv: batadv0: Removing interface: batadv_slave_0
[  338.686408][ T5861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  338.697291][   T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  338.704790][   T40] batman_adv: batadv0: Removing interface: batadv_slave_1
[  338.712195][ T5856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  338.721671][   T40] bridge_slave_1: left allmulticast mode
[  338.728885][   T40] bridge_slave_1: left promiscuous mode
[  338.734682][   T40] bridge0: port 2(bridge_slave_1) entered disabled state
[  338.744211][   T40] bridge_slave_0: left allmulticast mode
[  338.750114][   T40] bridge_slave_0: left promiscuous mode
[  338.756375][   T40] bridge0: port 1(bridge_slave_0) entered disabled state
[  338.790769][   T40] veth1_macvtap: left promiscuous mode
[  338.796432][   T40] veth0_macvtap: left promiscuous mode
[  338.802043][   T40] veth1_vlan: left promiscuous mode
[  338.807584][   T40] veth0_vlan: left promiscuous mode
[  339.249135][ T6635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  339.454779][   T40] team0 (unregistering): Port device team_slave_1 removed
[  339.508752][   T40] team0 (unregistering): Port device team_slave_0 removed
[  339.562052][   T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  339.611557][   T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  340.176385][   T40] bond0 (unregistering): Released all slaves
[  340.279593][ T6635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  340.915071][ T7189] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  340.930118][ T7189] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  340.962103][ T7189] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  341.030991][ T7189] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  341.328775][ T6635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  341.435553][ T7189] 8021q: adding VLAN 0 to HW filter on device bond0
[  341.479647][ T7189] 8021q: adding VLAN 0 to HW filter on device team0
[  341.509654][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  341.517028][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  341.532598][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  341.539874][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  341.718342][ T5861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  341.872762][ T7189] 8021q: adding VLAN 0 to HW filter on device batadv0
[  342.242790][ T7189] veth0_vlan: entered promiscuous mode
[  342.259681][ T7189] veth1_vlan: entered promiscuous mode
[  342.322608][ T7189] veth0_macvtap: entered promiscuous mode
[  342.334326][ T7189] veth1_macvtap: entered promiscuous mode
[  342.356956][  T786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  342.361859][ T7189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  342.379731][ T7189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  342.394235][ T7189] batman_adv: batadv0: Interface activated: batadv_slave_0
[  342.413550][ T7189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  342.424376][ T7189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  342.435815][ T7189] batman_adv: batadv0: Interface activated: batadv_slave_1
[  342.452868][ T7189] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  342.462042][ T7189] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  342.471134][ T7189] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  342.481210][ T7189] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  342.589387][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  342.606146][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  342.650337][   T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  342.658464][   T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  343.111587][ T7329] bridge_slave_0: left allmulticast mode
[  343.128018][ T7329] bridge_slave_0: left promiscuous mode
[  343.571437][ T7329] bridge0: port 1(bridge_slave_0) entered disabled state
[  344.035941][ T5861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  344.059585][  T786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  344.109271][ T7329] bridge_slave_1: left allmulticast mode
[  344.114956][ T7329] bridge_slave_1: left promiscuous mode
[  344.801630][ T5861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  344.846581][ T7329] bridge0: port 2(bridge_slave_1) entered disabled state
[  345.003397][ T7329] bond0: (slave bond_slave_0): Releasing backup interface
[  345.064950][ T7329] bond0: (slave bond_slave_1): Releasing backup interface
[  345.094246][ T5816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  345.153034][ T7329] team0: Port device team_slave_0 removed
[  345.182726][ T7329] team0: Port device team_slave_1 removed
[  345.204802][ T7329] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  345.213057][ T7329] batman_adv: batadv0: Removing interface: batadv_slave_0
[  345.222406][ T7329] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  345.230536][ T7329] batman_adv: batadv0: Removing interface: batadv_slave_1
[  346.502375][ T7355] netlink: 4 bytes leftover after parsing attributes in process `syz.3.253'.
[  346.511403][ T7355] netlink: zone id is out of range
[  346.517122][ T7355] netlink: set zone limit has 4 unknown bytes
[  346.667435][ T7370] netlink: 12 bytes leftover after parsing attributes in process `syz.5.252'.
[  346.678179][ T7370] netlink: 48 bytes leftover after parsing attributes in process `syz.5.252'.
[  346.811393][ T7373] loop5: detected capacity change from 0 to 8
[  346.822227][ T7373] squashfs: Unknown parameter '00000000000000000000005'
[  346.827183][ T5808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  347.945838][ T5861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  347.957669][ T5808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  348.278660][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  349.467365][ T5816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  350.996637][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  351.642493][ T5808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  351.960538][ T7397] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  351.973563][ T7397] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  352.932157][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  352.941447][ T5808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  352.953439][ T5816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  353.166953][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  353.187772][ T7415] netlink: 'syz.1.264': attribute type 4 has an invalid length.
[  353.460271][ T7397] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  353.467381][ T7397] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  353.681016][ T7420] netlink: set zone limit has 8 unknown bytes
[  353.797799][ T5776] Bluetooth: hci1: command 0x0406 tx timeout
[  354.054777][ T7397] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  354.081784][ T7422] tmpfs: Unknown parameter 'hugelways'
[  355.066998][ T7397] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  355.106948][ T7397] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  355.476760][ T5776] Bluetooth: hci3: command 0x0406 tx timeout
[  355.512576][ T7429] loop3: detected capacity change from 0 to 512
[  355.557108][ T7429] EXT4-fs: Ignoring removed nobh option
[  355.599983][ T7429] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  355.776139][ T5816] usb 2-1: new full-speed USB device number 2 using dummy_hcd
[  356.167120][ T5776] Bluetooth: hci1: command 0x0406 tx timeout
[  356.173346][ T5776] Bluetooth: hci0: command 0x0c1a tx timeout
[  357.320548][ T5816] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  357.336118][ T5816] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  357.985492][ T5776] Bluetooth: hci3: command 0x0406 tx timeout
[  358.398457][ T5776] Bluetooth: hci0: command 0x0c1a tx timeout
[  358.415643][ T5816] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  358.429331][ T5816] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  358.473818][ T5816] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  358.505506][ T5816] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  358.571307][ T5816] usb 2-1: Product: syz
[  358.575583][ T5816] usb 2-1: Manufacturer: syz
[  358.648676][ T7452] loop0: detected capacity change from 0 to 512
[  358.682145][ T5816] usb 2-1: SerialNumber: syz
[  358.688182][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  358.763008][ T5816] usb 2-1: can't set config #1, error -71
[  358.796793][ T7452] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.271: casefold flag without casefold feature
[  358.825509][ T5816] usb 2-1: USB disconnect, device number 2
[  358.845230][ T7452] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.271: couldn't read orphan inode 15 (err -117)
[  360.836794][ T5776] Bluetooth: hci0: command 0x0c1a tx timeout
[  361.272096][ T7452] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  361.651295][ T7473] binder: 7472:7473 ioctl c0046209 0 returned -22
[  361.766129][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  362.271268][ T7482] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[  362.281620][ T7482] ubi31: attaching mtd0
[  362.289194][ T7482] ubi31: scanning is finished
[  362.294061][ T7482] ubi31: empty MTD device detected
[  363.265457][ T7482] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4
[  363.602543][ T7489] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(14)
[  363.609224][ T7489] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  363.846128][ T7491] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(17)
[  363.852840][ T7491] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  364.070588][ T7489] vhci_hcd vhci_hcd.0: Device attached
[  364.191239][ T7491] vhci_hcd vhci_hcd.0: Device attached
[  364.585519][ T5861] usb 33-1: new low-speed USB device number 2 using vhci_hcd
[  364.592892][ T7502] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  364.672017][ T7499] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(20)
[  364.678701][ T7499] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  365.609623][ T7499] vhci_hcd vhci_hcd.0: Device attached
[  365.968249][ T7489] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(23)
[  365.974933][ T7489] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  366.423662][ T7489] vhci_hcd vhci_hcd.0: Device attached
[  366.441131][ T7491] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(26)
[  366.447824][ T7491] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  366.459958][ T7491] vhci_hcd vhci_hcd.0: Device attached
[  366.465610][ T7499] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(29)
[  366.472266][ T7499] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  366.503549][ T7489] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  366.718769][ T7499] vhci_hcd vhci_hcd.0: Device attached
[  366.753900][ T7491] vhci_hcd vhci_hcd.0: pdev(0) rhport(7) sockfd(34)
[  366.760591][ T7491] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  366.789226][ T7491] vhci_hcd vhci_hcd.0: Device attached
[  367.226186][ T7516] vhci_hcd: connection closed
[  367.228949][ T7511] vhci_hcd: connection closed
[  367.234411][ T7500] vhci_hcd: connection closed
[  367.237950][ T7522] vhci_hcd: connection closed
[  367.253752][   T40] vhci_hcd: stop threads
[  367.472089][ T7493] vhci_hcd: connection closed
[  367.490000][ T7492] vhci_hcd: connection reset by peer
[  367.502583][   T40] vhci_hcd: release socket
[  367.542843][   T40] vhci_hcd: disconnect device
[  367.694097][   T40] vhci_hcd: stop threads
[  367.716283][   T40] vhci_hcd: release socket
[  367.731507][   T40] vhci_hcd: disconnect device
[  367.783532][   T40] vhci_hcd: stop threads
[  367.806813][   T40] vhci_hcd: release socket
[  367.831408][   T40] vhci_hcd: disconnect device
[  367.874061][   T40] vhci_hcd: stop threads
[  367.883784][   T40] vhci_hcd: release socket
[  367.934335][   T40] vhci_hcd: disconnect device
[  367.993864][   T40] vhci_hcd: stop threads
[  368.017047][   T40] vhci_hcd: release socket
[  368.046072][   T40] vhci_hcd: disconnect device
[  368.221053][ T7528] vhci_hcd: connection closed
[  368.249246][   T40] vhci_hcd: stop threads
[  368.282391][   T40] vhci_hcd: release socket
[  368.299819][   T40] vhci_hcd: disconnect device
[  368.516435][   T40] vhci_hcd: stop threads
[  368.944271][   T40] vhci_hcd: release socket
[  369.451984][   T40] vhci_hcd: disconnect device
[  369.757758][   T27] audit: type=1326 audit(1751402105.760:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7532 comm="syz.1.284" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd4158e929 code=0x0
[  369.936980][ T5861] vhci_hcd: vhci_device speed not set
[  372.574644][ T7567] netlink: set zone limit has 8 unknown bytes
[  373.018432][    T9] usb usb34-port1: attempt power cycle
[  374.541265][ T7586] loop5: detected capacity change from 0 to 512
[  374.687152][    T9] usb usb34-port1: unable to enumerate USB device
[  379.002575][ T1282] ieee802154 phy0 wpan0: encryption failed: -22
[  379.009997][ T1282] ieee802154 phy1 wpan1: encryption failed: -22
[  380.471671][  T786] libceph: connect (1)[c::]:6789 error -101
[  380.513625][  T786] libceph: mon0 (1)[c::]:6789 connect error
[  380.939493][   T23] libceph: connect (1)[c::]:6789 error -101
[  381.348618][ T7617] ceph: No mds server is up or the cluster is laggy
[  382.152145][   T23] libceph: mon0 (1)[c::]:6789 connect error
[  382.596090][ T5086] Bluetooth: hci0: command 0x0c1a tx timeout
[  382.692497][ T7641] program syz.0.302 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  384.515309][    T9] libceph: connect (1)[c::]:6789 error -101
[  384.534785][    T9] libceph: mon0 (1)[c::]:6789 connect error
[  384.552493][ T7652] ceph: No mds server is up or the cluster is laggy
[  386.057561][ T7666] netlink: 36 bytes leftover after parsing attributes in process `syz.0.302'.
[  386.321656][ T7672] loop5: detected capacity change from 0 to 64
[  389.347486][ T7672] netlink: 8 bytes leftover after parsing attributes in process `syz.5.307'.
[  389.425086][ T7681] sp0: Synchronizing with TNC
[  390.967853][ T7690] loop3: detected capacity change from 0 to 64
[  392.088238][ T7693] binfmt_misc: register: failed to install interpreter file ./file2
[  393.657840][ T7707] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  394.066079][ T5861] usb 6-1: new full-speed USB device number 2 using dummy_hcd
[  394.272873][ T5861] usb 6-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=cb.d7
[  394.304214][ T5861] usb 6-1: New USB device strings: Mfr=1, Product=18, SerialNumber=3
[  395.105941][ T5861] usb 6-1: Product: syz
[  395.110196][ T5861] usb 6-1: Manufacturer: syz
[  395.114837][ T5861] usb 6-1: SerialNumber: syz
[  395.147533][ T5861] usb 6-1: config 0 descriptor??
[  395.209677][ T5861] dvb-usb: found a 'Pinnacle PCTV 310e' in cold state, will try to load a firmware
[  395.267133][ T5861] dvb-usb: did not find the firmware file '(null)' (status -22). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[  397.061612][ T7744] loop3: detected capacity change from 0 to 512
[  397.107122][ T7744] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  397.165720][ T7744] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002]
[  397.174323][ T7744] System zones: 1-12
[  397.600614][ T7744] EXT4-fs (loop3): 1 truncate cleaned up
[  397.607833][ T7744] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  398.241504][ T7754] netlink: 36 bytes leftover after parsing attributes in process `syz.0.318'.
[  398.805942][  T786] usb 6-1: USB disconnect, device number 2
[  398.908536][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  399.056069][ T7761] netlink: 88 bytes leftover after parsing attributes in process `syz.5.321'.
[  400.922673][ T7778] netlink: 16 bytes leftover after parsing attributes in process `syz.0.323'.
[  401.126295][ T7783] netlink: 16 bytes leftover after parsing attributes in process `syz.0.323'.
[  401.714569][   T27] audit: type=1326 audit(1751402393.717:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7768 comm="syz.3.324" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f608478e929 code=0x0
[  403.592614][ T7795] tmpfs: Unknown parameter 'hugelways'
[  404.584528][ T7805] hugetlbfs: syz.5.328 (7805): Using mlock ulimits for SHM_HUGETLB is obsolete
[  406.376179][ T7812] lo speed is unknown, defaulting to 1000
[  406.381989][ T7812] lo speed is unknown, defaulting to 1000
[  406.388570][ T7812] lo speed is unknown, defaulting to 1000
[  406.403878][ T7812] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  406.589630][ T7812] lo speed is unknown, defaulting to 1000
[  406.599365][ T7812] lo speed is unknown, defaulting to 1000
[  406.606375][ T7812] lo speed is unknown, defaulting to 1000
[  406.613771][ T7812] lo speed is unknown, defaulting to 1000
[  410.545342][    T9] libceph: connect (1)[c::]:6789 error -101
[  410.551727][    T9] libceph: mon0 (1)[c::]:6789 connect error
[  411.427640][ T7830] ceph: No mds server is up or the cluster is laggy
[  412.714456][ T7844] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  415.532416][ T7873] netlink: 'syz.1.340': attribute type 10 has an invalid length.
[  415.745151][ T7873] 8021q: adding VLAN 0 to HW filter on device batadv0
[  417.155918][ T7873] 
: (slave batadv0): Enslaving as an active interface with an up link
[  417.624899][ T5808] libceph: connect (1)[c::]:6789 error -101
[  417.636555][ T5808] libceph: mon0 (1)[c::]:6789 connect error
[  417.770159][ T7884] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  417.995961][ T7895] ceph: No mds server is up or the cluster is laggy
[  418.730599][ T5816] libceph: connect (1)[c::]:6789 error -101
[  418.794874][ T5816] libceph: mon0 (1)[c::]:6789 connect error
[  419.235752][ T7904] loop3: detected capacity change from 0 to 16
[  419.254645][ T7904] erofs: Unknown parameter 'GPL'
[  419.498391][ T5808] libceph: connect (1)[c::]:6789 error -101
[  419.505324][ T5808] libceph: mon0 (1)[c::]:6789 connect error
[  420.177721][ T7922] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  420.412299][ T7884] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  420.441881][ T7919] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  421.246056][ T7925] netlink: 76 bytes leftover after parsing attributes in process `syz.3.347'.
[  422.351404][ T7926] loop3: detected capacity change from 0 to 32768
[  422.697675][ T7926] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.347 (7926)
[  422.724811][ T7926] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  422.735030][ T7926] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  422.743889][ T7926] BTRFS info (device loop3): using free space tree
[  422.903954][ T7926] BTRFS info (device loop3): enabling ssd optimizations
[  422.911294][ T7926] BTRFS info (device loop3): auto enabling async discard
[  423.913115][ T7884] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  423.923736][ T5777] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  424.042255][ T7884] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  424.173518][ T7954] netlink: 40 bytes leftover after parsing attributes in process `syz.1.351'.
[  424.455338][ T7884] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  424.591261][ T7884] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  424.682583][ T7884] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  424.701692][ T5861] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  424.796067][ T7884] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  425.005113][ T5861] usb 4-1: config 0 has no interfaces?
[  425.071132][ T5861] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  425.121836][ T5861] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  425.164149][ T5861] usb 4-1: Product: syz
[  425.713980][ T7974] loop5: detected capacity change from 0 to 32768
[  425.721525][ T7974] XFS: ikeep mount option is deprecated.
[  425.859870][ T5861] usb 4-1: Manufacturer: syz
[  425.864617][ T5861] usb 4-1: SerialNumber: syz
[  426.192097][ T7974] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  426.975216][ T7974] XFS (loop5): Ending clean mount
[  426.980882][ T5861] usb 4-1: config 0 descriptor??
[  426.997869][ T7974] XFS (loop5): Quotacheck needed: Please wait.
[  427.205210][ T7974] XFS (loop5): Quotacheck: Done.
[  427.377360][ T7989] loop0: detected capacity change from 0 to 512
[  427.447997][ T7989] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities
[  429.937886][ T7189] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  432.926987][ T5856] usb 4-1: USB disconnect, device number 4
[  434.607768][ T8031] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  434.940518][ T8022] ptrace attach of "./syz-executor exec"[5777] was attempted by "./syz-executor exec"[8022]
[  434.966224][ T8037] loop0: detected capacity change from 0 to 128
[  435.001430][ T8022] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  435.008975][ T8022] overlayfs: failed to set xattr on upper
[  435.014790][ T8022] overlayfs: ...falling back to redirect_dir=nofollow.
[  435.021856][ T8022] overlayfs: ...falling back to index=off.
[  435.033277][ T8022] overlayfs: ...falling back to uuid=null.
[  435.039371][ T8022] overlayfs: maximum fs stacking depth exceeded
[  438.068627][ T8055] loop0: detected capacity change from 0 to 32768
[  438.076199][ T8055] XFS: ikeep mount option is deprecated.
[  438.132814][ T8055] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  439.456033][ T8055] XFS (loop0): Ending clean mount
[  439.474646][ T8055] XFS (loop0): Quotacheck needed: Please wait.
[  439.553030][ T8055] XFS (loop0): Quotacheck: Done.
[  440.864937][ T8084] siw: device registration error -23
[  441.066638][ T1282] ieee802154 phy0 wpan0: encryption failed: -22
[  442.221682][ T5773] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  447.504819][ T5776] Bluetooth: hci0: ACL packet for unknown connection handle 201
[  447.522826][ T8128] loop5: detected capacity change from 0 to 128
[  447.756174][ T8128] EXT4-fs (loop5): Test dummy encryption mode enabled
[  448.431947][ T8128] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  448.582590][ T8128] ext4 filesystem being mounted at /29/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  448.608479][ T8138] loop0: detected capacity change from 0 to 512
[  449.406723][ T8138] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found
[  449.414305][ T8138] UDF-fs: Scanning with blocksize 512 failed
[  449.580718][ T8138] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found
[  449.626303][ T8138] UDF-fs: Scanning with blocksize 1024 failed
[  449.669470][ T8138] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found
[  449.679773][ T7189] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  449.681212][ T8154] tmpfs: Unknown parameter 'hugelways'
[  449.696069][ T8138] UDF-fs: Scanning with blocksize 2048 failed
[  449.798955][ T8138] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  450.076177][ T8138] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  451.901210][ T8168] loop5: detected capacity change from 0 to 128
[  453.967607][ T8182] loop0: detected capacity change from 0 to 1024
[  454.251392][   T27] audit: type=1326 audit(1751402446.258:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8185 comm="syz.5.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e4d8e929 code=0x7ffc0000
[  455.066088][   T27] audit: type=1326 audit(1751402446.288:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8185 comm="syz.5.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e4d8e929 code=0x7ffc0000
[  455.088856][   T27] audit: type=1326 audit(1751402446.288:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8185 comm="syz.5.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb3e4d8e929 code=0x7ffc0000
[  455.116258][   T27] audit: type=1326 audit(1751402446.288:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8185 comm="syz.5.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e4d8e929 code=0x7ffc0000
[  455.139119][   T27] audit: type=1326 audit(1751402446.298:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8185 comm="syz.5.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e4d8e929 code=0x7ffc0000
[  455.197482][   T27] audit: type=1326 audit(1751402446.298:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8185 comm="syz.5.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb3e4d8e929 code=0x7ffc0000
[  455.226134][   T27] audit: type=1326 audit(1751402446.298:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8185 comm="syz.5.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e4d8e929 code=0x7ffc0000
[  455.248798][   T27] audit: type=1326 audit(1751402446.298:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8185 comm="syz.5.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fb3e4d8e929 code=0x7ffc0000
[  455.271804][   T27] audit: type=1326 audit(1751402446.298:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8185 comm="syz.5.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e4d8e929 code=0x7ffc0000
[  455.295764][   T27] audit: type=1326 audit(1751402446.298:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8185 comm="syz.5.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e4d8e929 code=0x7ffc0000
[  457.354836][ T8206] loop3: detected capacity change from 0 to 8
[  459.623564][ T8229] ALSA: mixer_oss: invalid index 40000
[  460.069441][ T8236] loop3: detected capacity change from 0 to 128
[  460.229375][ T8240] loop5: detected capacity change from 0 to 128
[  462.838292][ T8271] loop5: detected capacity change from 0 to 4096
[  463.382506][ T8271] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512).
[  463.459920][ T8273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  463.635367][ T8271] ntfs3: loop5: Failed to initialize $Extend/$Reparse.
[  463.720266][   T27] kauditd_printk_skb: 13 callbacks suppressed
[  463.720280][   T27] audit: type=1800 audit(1751402455.728:33): pid=8269 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.396" name="file1" dev="loop5" ino=24 res=0 errno=0
[  464.105534][ T7189] ntfs3: loop5: ino=1a, ntfs_sync_fs failed, -22.
[  466.264494][ T5086] Bluetooth: hci4: command 0x1003 tx timeout
[  466.266778][ T5776] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  467.186811][ T8286] loop9: detected capacity change from 0 to 7
[  467.486044][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  467.495632][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  467.804377][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  467.813671][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  468.561107][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  468.570391][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  468.579176][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  468.588400][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  468.599064][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  468.608357][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  468.635863][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  468.645130][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  468.681741][ T8286] ldm_validate_partition_table(): Disk read failed.
[  468.688556][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  468.697779][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  468.710365][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  468.719660][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  468.728460][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  468.737683][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  468.756461][ T8303] loop0: detected capacity change from 0 to 128
[  468.764871][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  468.774119][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  468.790389][ T8286] Dev loop9: unable to read RDB block 0
[  468.797426][ T8286]  loop9: unable to read partition table
[  469.122090][ T8286] loop9: partition table beyond EOD, truncated
[  469.161975][ T8286] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5)
[  471.930830][ T8329] blktrace: Concurrent blktraces are not allowed on nbd0
[  474.672042][ T8338] lo speed is unknown, defaulting to 1000
[  475.857204][ T8339] loop5: detected capacity change from 0 to 16
[  476.049828][ T8339] erofs: (device loop5): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 16700)
[  480.729716][ T8369] netlink: 40 bytes leftover after parsing attributes in process `syz.0.413'.
[  483.106341][ T8401] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  483.132618][    C1] vkms_vblank_simulate: vblank timer overrun
[  483.139391][ T8401] CIFS mount error: No usable UNC path provided in device string!
[  483.139391][ T8401] 
[  483.150361][ T8401] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  490.011875][ T8433] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  490.029875][ T6739] Bluetooth: hci4: Frame reassembly failed (-84)
[  492.036124][ T5776] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  494.566244][ T8449] ptrace attach of "./syz-executor exec"[5778] was attempted by "./syz-executor exec"[8449]
[  494.956596][ T8449] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  494.967256][ T8449] overlayfs: failed to set xattr on upper
[  494.978169][ T8449] overlayfs: ...falling back to redirect_dir=nofollow.
[  494.988554][ T8449] overlayfs: ...falling back to index=off.
[  494.994994][ T8449] overlayfs: ...falling back to uuid=null.
[  495.004967][ T8449] overlayfs: maximum fs stacking depth exceeded
[  496.397807][ T8461] loop5: detected capacity change from 0 to 128
[  498.442191][ T8474] loop3: detected capacity change from 0 to 1024
[  499.349661][ T6431] hfsplus: b-tree write err: -5, ino 4
[  500.426777][ T8494] loop3: detected capacity change from 0 to 32768
[  500.434361][ T8494] XFS: ikeep mount option is deprecated.
[  500.535253][ T8494] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  500.773812][ T8494] XFS (loop3): Ending clean mount
[  500.783526][ T8494] XFS (loop3): Quotacheck needed: Please wait.
[  500.921755][ T8494] XFS (loop3): Quotacheck: Done.
[  501.945450][ T8508] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  501.986908][ T1282] ieee802154 phy0 wpan0: encryption failed: -22
[  503.433251][ T5777] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  503.529480][ T8526] xt_limit: Overflow, try lower: 687865856/40
[  503.633470][ T8526] tty tty21: ldisc open failed (-12), clearing slot 20
[  504.155958][ T5880] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  504.399580][ T5880] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  504.444304][ T5880] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  504.475213][ T5880] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  504.503980][ T5880] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  504.545951][ T8521] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  504.571219][ T5880] usb 6-1: Quirk or no altest; falling back to MIDI 1.0
[  506.138175][ T8558] loop0: detected capacity change from 0 to 128
[  507.146036][ T5880] usb 6-1: USB disconnect, device number 3
[  509.036410][ T8576] block device autoloading is deprecated and will be removed.
[  510.753043][ T8588] loop5: detected capacity change from 0 to 1024
[  511.285918][ T8591] loop0: detected capacity change from 0 to 16
[  511.627380][ T8578] dummy0: entered promiscuous mode
[  511.642247][ T8591] erofs: (device loop0): check_layout_compatibility: unidentified incompatible feature d45400, please upgrade kernel
[  515.981359][ T8611] netlink: 4 bytes leftover after parsing attributes in process `syz.0.450'.
[  519.179536][ T8618] loop3: detected capacity change from 0 to 256
[  519.203343][ T8618] FAT-fs (loop3): Unrecognized mount option ";;zÈTC" or missing value
[  520.271277][ T8625] fuse: Unknown parameter 'ÌÀB8#yÂäìâkÕ]Ù"ºÌòÅ;w'
[  520.316211][    T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  520.515916][    T9] usb 4-1: device descriptor read/64, error -71
[  520.557094][ T5823] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  520.644256][ T8632] loop5: detected capacity change from 0 to 128
[  520.918392][ T5856] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  520.955874][ T5823] usb 1-1: Using ep0 maxpacket: 32
[  520.963142][ T5823] usb 1-1: config 0 has an invalid interface number: 67 but max is 0
[  520.972317][ T5823] usb 1-1: config 0 has no interface number 0
[  521.712688][    T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  521.724556][ T5823] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  521.741585][ T5823] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  521.755846][ T5823] usb 1-1: Product: syz
[  521.760062][ T5823] usb 1-1: Manufacturer: syz
[  521.764691][ T5823] usb 1-1: SerialNumber: syz
[  521.816239][ T5856] usb 2-1: Using ep0 maxpacket: 16
[  521.824014][ T5823] usb 1-1: config 0 descriptor??
[  521.846486][ T5856] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  521.872136][ T5823] smsc95xx v2.0.0
[  521.897307][ T5856] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  521.936761][ T5856] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  521.990712][ T5856] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  522.025610][ T5856] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  522.065532][ T5856] usb 2-1: config 0 descriptor??
[  522.754618][ T8652] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  522.773919][ T8652] ubi31: attaching mtd0
[  522.793768][ T8652] ubi31: scanning is finished
[  523.780647][ T8653] loop0: detected capacity change from 0 to 16
[  524.285146][ T8653] erofs: (device loop0): erofs_read_superblock: dirblkbits 2 isn't supported
[  524.300585][ T8653] netlink: 4 bytes leftover after parsing attributes in process `syz.0.452'.
[  524.377345][ T8652] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4
[  524.949550][ T5856] usbhid 2-1:0.0: can't add hid device: -71
[  525.118687][ T5856] usbhid: probe of 2-1:0.0 failed with error -71
[  525.156385][ T5856] usb 2-1: USB disconnect, device number 3
[  525.272487][ T5823] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71
[  525.285586][ T5823] smsc95xx: probe of 1-1:0.67 failed with error -71
[  525.340714][ T5823] usb 1-1: USB disconnect, device number 4
[  525.487428][ T8661] vivid-001: =================  START STATUS  =================
[  525.495234][ T8661] vivid-001: Radio HW Seek Mode: Bounded
[  525.527482][ T8661] vivid-001: Radio Programmable HW Seek: false
[  525.569783][ T8661] vivid-001: RDS Rx I/O Mode: Block I/O
[  525.769791][ T8661] vivid-001: Generate RBDS Instead of RDS: false
[  525.777374][ T8661] vivid-001: RDS Reception: true
[  526.745929][ T8675] netlink: 4 bytes leftover after parsing attributes in process `syz.1.459'.
[  527.915843][ T8661] vivid-001: RDS Program Type: 
[  528.708729][ T8681] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  528.721679][ T8661] 0 inactive
[  528.843326][ T8661] vivid-001: RDS PS Name:  inactive
[  528.854134][ T8661] vivid-001: RDS Radio Text:  inactive
[  528.859934][ T8661] vivid-001: RDS Traffic Announcement: false inactive
[  528.898481][ T8661] vivid-001: RDS Traffic Program: false inactive
[  529.007070][ T8661] vivid-001: RDS Music: false inactive
[  529.020524][ T8661] vivid-001: ==================  END STATUS  ==================
[  529.422923][ T8702] netlink: 20 bytes leftover after parsing attributes in process `syz.0.462'.
[  529.443170][ T8696] futex_wake_op: syz.1.461 tries to shift op by -33; fix this program
[  530.737978][ T8714] loop3: detected capacity change from 0 to 128
[  538.512408][ T8771] netlink: 'syz.5.472': attribute type 4 has an invalid length.
[  538.673138][ T8772] loop0: detected capacity change from 0 to 128
[  541.283870][ T8784] syz.5.475 (8784): drop_caches: 2
[  543.586206][ T5861] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  543.975513][ T5861] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  544.016343][ T5861] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  544.059539][ T5861] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  544.089178][ T5861] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  544.359368][ T5861] usb 1-1: config 0 descriptor??
[  546.392683][ T5861] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0
[  546.459871][ T8835] netlink: 20 bytes leftover after parsing attributes in process `syz.1.480'.
[  546.491729][ T5861] cp2112 0003:10C4:EA90.0002: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0
[  546.621635][ T5861] cp2112 0003:10C4:EA90.0002: error requesting version
[  546.945646][ T5861] cp2112: probe of 0003:10C4:EA90.0002 failed with error -32
[  548.002935][    T9] usb 1-1: USB disconnect, device number 5
[  549.136332][ T8856] loop6: detected capacity change from 0 to 524287999
[  552.641954][ T8868] loop3: detected capacity change from 0 to 128
[  552.769305][ T8869] netlink: 8 bytes leftover after parsing attributes in process `syz.1.486'.
[  554.357256][ T8882] xt_limit: Overflow, try lower: 687865856/40
[  555.076371][ T8882] tty tty31: ldisc open failed (-12), clearing slot 30
[  556.820366][ T5861] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  557.009166][ T5861] usb 4-1: unable to get BOS descriptor or descriptor too short
[  557.078044][ T5861] usb 4-1: config 4 has an invalid interface number: 92 but max is 0
[  557.090050][ T5861] usb 4-1: config 4 has no interface number 0
[  557.106326][ T5861] usb 4-1: config 4 interface 92 has no altsetting 0
[  557.135509][ T5861] usb 4-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01
[  557.144886][ T5861] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  557.163887][ T5861] usb 4-1: Product: syz
[  557.168425][ T5861] usb 4-1: Manufacturer: syz
[  557.173196][ T5861] usb 4-1: SerialNumber: syz
[  557.884574][ T8898] netlink: 44 bytes leftover after parsing attributes in process `syz.5.491'.
[  558.081176][ T5861] radioshark 4-1:4.92: Invalid radioSHARK device
[  558.105937][ T5861] radioshark: probe of 4-1:4.92 failed with error -22
[  558.113166][ T5861] usbhid 4-1:4.92: couldn't find an input interrupt endpoint
[  558.129112][ T5861] usb 4-1: USB disconnect, device number 7
[  558.285143][ T8910] loop0: detected capacity change from 0 to 128
[  558.686258][ T5816] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  559.011203][ T5816] usb 6-1: Using ep0 maxpacket: 16
[  559.088522][ T5816] usb 6-1: config 10 has an invalid interface number: 131 but max is 0
[  559.109675][ T5816] usb 6-1: config 10 has no interface number 0
[  559.120893][ T5816] usb 6-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=3f.c4
[  559.139692][ T5816] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  559.168533][ T5816] usb 6-1: Product: syz
[  559.173221][ T5816] usb 6-1: Manufacturer: syz
[  559.193279][ T5816] usb 6-1: SerialNumber: syz
[  559.463684][ T5816] usb 6-1: USB disconnect, device number 4
[  563.366640][ T1282] ieee802154 phy0 wpan0: encryption failed: -22
[  563.426735][ T8941] loop5: detected capacity change from 0 to 2048
[  563.454586][ T8943] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  565.497175][ T8967] loop3: detected capacity change from 0 to 128
[  565.684034][ T8962] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  568.300499][ T8982] loop5: detected capacity change from 0 to 4096
[  569.792688][ T5816] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  570.010901][ T5816] usb 1-1: config 0 has an invalid interface number: 91 but max is 0
[  570.040821][ T5816] usb 1-1: config 0 has no interface number 0
[  570.153527][ T5816] usb 1-1: config 0 interface 91 has no altsetting 0
[  570.266623][ T5816] usb 1-1: New USB device found, idVendor=174f, idProduct=5212, bcdDevice=60.41
[  570.597186][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  570.606430][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  570.614836][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  570.623322][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  570.653336][ T5816] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  570.846978][ T5816] usb 1-1: config 0 descriptor??
[  571.112226][ T5816] usb 1-1: string descriptor 0 read error: -71
[  571.173240][ T5816] usb 1-1: Found UVC 0.00 device <unnamed> (174f:5212)
[  571.212608][ T5816] usb 1-1: No valid video chain found.
[  571.296902][ T5816] usb 1-1: USB disconnect, device number 6
[  571.933102][ T9040] loop0: detected capacity change from 0 to 128
[  573.991330][ T9066] loop0: detected capacity change from 0 to 32768
[  574.152690][ T9066] overlay: Unknown parameter 'smackfsdef'
[  574.337516][ T5880] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  574.634647][ T5880] usb 6-1: unable to get BOS descriptor or descriptor too short
[  574.651608][ T5880] usb 6-1: config 3 has an invalid interface number: 212 but max is 0
[  574.660232][ T5880] usb 6-1: config 3 has no interface number 0
[  574.667730][ T5880] usb 6-1: config 3 interface 212 has no altsetting 0
[  574.709859][ T5880] usb 6-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=2a.65
[  574.732801][ T5880] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  574.759332][ T5880] usb 6-1: Product: syz
[  574.776426][ T5880] usb 6-1: Manufacturer: syz
[  574.782144][ T5880] usb 6-1: SerialNumber: syz
[  575.024348][ T1101] JFS: metapage_get_blocks failed
[  575.064265][  T111] blkno = 5002c, nblocks = 4
[  575.072688][ T5773] JFS: metapage_get_blocks failed
[  575.096030][  T111] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map
[  575.096030][  T111] 
[  575.121673][ T1101] JFS: metapage_get_blocks failed
[  575.142644][  T111] ERROR: (device loop0): remounting filesystem as read-only
[  575.192549][ T9080] loop3: detected capacity change from 0 to 128
[  575.221947][ T9080] FAT-fs (loop3): Unrecognized mount option "ut" or missing value
[  575.312787][ T5880] usb 6-1: USB disconnect, device number 5
[  575.889789][ T5773] JFS: metapage_get_blocks failed
[  576.036214][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  576.044674][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  576.053282][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  576.795967][ T5816] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  577.153295][ T5823] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  577.155994][ T5816] usb 4-1: config 1 has an invalid interface number: 27 but max is 0
[  577.195814][ T5816] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  577.225416][ T5816] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 1
[  577.234552][ T5816] usb 4-1: config 1 has no interface number 1
[  577.240976][ T5816] usb 4-1: config 1 interface 27 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18
[  577.296455][ T5816] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  577.305578][ T5816] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  577.313738][ T5816] usb 4-1: SerialNumber: syz
[  577.324340][ T5816] usb 4-1: bad CDC descriptors
[  577.382607][ T5823] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[  577.542359][ T5816] usb 4-1: USB disconnect, device number 8
[  577.555015][ T5823] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  577.618273][ T5823] usb 6-1: Product: syz
[  577.622478][ T5823] usb 6-1: SerialNumber: syz
[  577.984989][ T5823] usb 6-1: config 0 descriptor??
[  578.646316][ T5823] usb 6-1: USB disconnect, device number 6
[  579.316216][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  579.325584][ T9142] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  579.334852][ T9141] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  580.991147][ T9160] loop3: detected capacity change from 0 to 2048
[  581.494877][ T9147] loop5: detected capacity change from 0 to 32768
[  581.543353][ T9147] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.542 (9147)
[  581.664222][ T9147] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  581.696237][ T9147] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  581.720924][ T9147] BTRFS info (device loop5): using free space tree
[  582.436104][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  582.617842][ T9147] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR
[  582.728784][ T9147] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR
[  582.788137][ T9147] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR
[  582.836432][ T9147] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR
[  582.873039][ T9147] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR
[  582.909881][ T9147] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR
[  582.949880][ T9147] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR
[  582.970387][ T9147] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR
[  583.005491][ T9147] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR
[  583.019374][ T9147] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[  583.428614][ T9147] BTRFS error (device loop5): open_ctree failed: -12
[  583.572993][ T9216] loop3: detected capacity change from 0 to 2048
[  584.749772][ T9224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  586.076204][ T9243] loop5: detected capacity change from 0 to 512
[  586.086499][ T5823] usb 4-1: new full-speed USB device number 9 using dummy_hcd
[  586.102888][ T9243] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  586.177271][ T9243] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.556: iget: bad i_size value: 360287970189639690
[  586.214190][ T9243] EXT4-fs (loop5): Remounting filesystem read-only
[  586.224847][ T9243] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  586.280073][ T5823] usb 4-1: unable to get BOS descriptor or descriptor too short
[  586.292464][ T5823] usb 4-1: not running at top speed; connect to a high speed hub
[  586.305841][ T5880] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  586.312395][ T7189] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  586.343249][ T5823] usb 4-1: config 56 has an invalid interface number: 129 but max is 0
[  586.364123][ T5823] usb 4-1: config 56 has no interface number 0
[  586.384027][ T5823] usb 4-1: config 56 interface 129 altsetting 224 endpoint 0x86 has invalid maxpacket 512, setting to 64
[  586.403828][ T5823] usb 4-1: config 56 interface 129 has no altsetting 0
[  586.454590][ T5823] usb 4-1: New USB device found, idVendor=1410, idProduct=9011, bcdDevice=e5.d2
[  586.506647][ T5880] usb 2-1: Using ep0 maxpacket: 8
[  586.532019][ T5880] usb 2-1: config 1 interface 0 has no altsetting 0
[  586.541166][ T5823] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  586.544414][ T5880] usb 2-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice= 0.40
[  586.625080][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  586.652331][ T5823] usb 4-1: Product: syz
[  586.680345][ T5880] usb 2-1: Product: syz
[  586.685331][ T5880] usb 2-1: Manufacturer: syz
[  586.690650][ T5823] usb 4-1: Manufacturer: syz
[  586.712614][ T5880] usb 2-1: SerialNumber: syz
[  586.851838][ T5823] usb 4-1: SerialNumber: syz
[  586.942457][ T9233] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  587.636016][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  587.644698][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  587.653149][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  587.956211][ T5880] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input8
[  587.977852][ T9260] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  588.004468][    C1] appletouch 2-1:1.0: atp_complete: usb_submit_urb failed with result -1
[  588.006153][ T5823] option 4-1:56.129: GSM modem (1-port) converter detected
[  588.099005][ T5880] usb 2-1: USB disconnect, device number 4
[  588.104964][    C1] appletouch 2-1:1.0: atp_complete: usb_submit_urb failed with result -19
[  588.249940][ T5823] usb 4-1: USB disconnect, device number 9
[  588.311687][ T5823] option 4-1:56.129: device disconnected
[  588.334433][ T5880] appletouch 2-1:1.0: input: appletouch disconnected
[  588.568920][ T9274] loop5: detected capacity change from 0 to 2048
[  590.926049][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  590.935967][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  590.944370][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  590.952845][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  591.218432][ T9310] loop5: detected capacity change from 0 to 64
[  591.344277][   T27] audit: type=1800 audit(1751402583.348:34): pid=9310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.571" name="file1" dev="loop5" ino=21 res=0 errno=0
[  592.595643][ T9327] loop5: detected capacity change from 0 to 32768
[  592.731747][ T9327] overlay: Unknown parameter 'smackfsdef'
[  593.536029][ T9323] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  593.718019][   T40] JFS: metapage_get_blocks failed
[  593.728360][   T40] JFS: metapage_get_blocks failed
[  593.745140][ T7189] JFS: metapage_get_blocks failed
[  593.754010][  T112] blkno = 5002c, nblocks = 4
[  593.764138][  T112] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map
[  593.764138][  T112] 
[  593.866802][  T112] ERROR: (device loop5): remounting filesystem as read-only
[  594.027028][ T7189] JFS: metapage_get_blocks failed
[  594.463722][ T9344] loop0: detected capacity change from 0 to 4096
[  594.600476][ T9344] ntfs: volume version 3.1.
[  596.035948][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  596.044363][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  596.052799][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  601.779615][ T9406] netlink: 'syz.1.601': attribute type 1 has an invalid length.
[  601.818595][ T9394] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  601.845949][ T9406] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.601'.
[  601.964211][ T9405] loop3: detected capacity change from 0 to 4096
[  602.197389][ T9405] ntfs: volume version 3.1.
[  602.983044][ T9431] loop5: detected capacity change from 0 to 256
[  603.019110][ T9431] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  603.116270][ T5823] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  603.160970][ T9436] Illegal XDP return value 4294967274 on prog  (id 147) dev N/A, expect packet loss!
[  603.226379][ T5856] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  603.325982][ T5823] usb 4-1: Using ep0 maxpacket: 8
[  603.349507][ T5823] usb 4-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config
[  603.367657][ T5823] usb 4-1: config 3 has 1 interface, different from the descriptor's value: 3
[  603.383788][ T9440] loop5: detected capacity change from 0 to 4096
[  603.397777][ T5823] usb 4-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=f4.40
[  603.424235][ T5823] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  603.449131][ T5856] usb 1-1: config 0 has no interfaces?
[  603.459579][ T5823] usb 4-1: Product: syz
[  603.467493][ T5856] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  603.481070][ T5823] usb 4-1: Manufacturer: syz
[  603.493804][ T5823] usb 4-1: SerialNumber: syz
[  603.499590][ T5856] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  603.510191][ T5856] usb 1-1: Product: syz
[  603.521507][ T5856] usb 1-1: Manufacturer: syz
[  603.528238][ T5856] usb 1-1: SerialNumber: syz
[  603.549559][ T5856] usb 1-1: config 0 descriptor??
[  603.564124][ T9440] ntfs: volume version 3.1.
[  603.606185][  T786] usb 2-1: new full-speed USB device number 5 using dummy_hcd
[  603.716483][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  603.725015][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  603.733536][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  603.742051][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  603.782922][ T5823] usb 4-1: interface 1 not found
[  603.814861][  T786] usb 2-1: unable to get BOS descriptor or descriptor too short
[  603.824072][ T5823] usb 4-1: USB disconnect, device number 10
[  603.844628][ T9426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  603.866886][  T786] usb 2-1: not running at top speed; connect to a high speed hub
[  603.877001][  T786] usb 2-1: config 56 has an invalid interface number: 129 but max is 0
[  603.885332][  T786] usb 2-1: config 56 has no interface number 0
[  603.899832][ T9426] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  603.923605][ T5808] usb 1-1: USB disconnect, device number 7
[  603.939094][  T786] usb 2-1: config 56 interface 129 altsetting 224 endpoint 0x86 has invalid maxpacket 512, setting to 64
[  603.972339][  T786] usb 2-1: config 56 interface 129 has no altsetting 0
[  603.992130][  T786] usb 2-1: New USB device found, idVendor=1410, idProduct=9011, bcdDevice=e5.d2
[  604.006806][  T786] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  604.009342][ T9452] loop5: detected capacity change from 0 to 64
[  604.018467][  T786] usb 2-1: Product: syz
[  604.028172][  T786] usb 2-1: Manufacturer: syz
[  604.032851][  T786] usb 2-1: SerialNumber: syz
[  604.062237][ T9442] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  604.338560][  T786] option 2-1:56.129: GSM modem (1-port) converter detected
[  604.386616][  T786] usb 2-1: USB disconnect, device number 5
[  604.414045][  T786] option 2-1:56.129: device disconnected
[  604.522103][ T9466] loop5: detected capacity change from 0 to 2048
[  605.476011][ T5808] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  605.721855][ T5808] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[  605.765921][ T5808] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  605.774004][ T5808] usb 4-1: Product: syz
[  605.795831][ T5808] usb 4-1: SerialNumber: syz
[  605.822252][ T5808] usb 4-1: config 0 descriptor??
[  605.862085][ T9485] loop5: detected capacity change from 0 to 512
[  605.884676][ T9485] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  605.989468][ T9485] EXT4-fs (loop5): 1 truncate cleaned up
[  606.007844][ T9485] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  606.023664][ T9469] loop0: detected capacity change from 0 to 32768
[  606.147725][ T7189] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  606.322423][ T5808] usb 4-1: USB disconnect, device number 11
[  606.676631][ T9506] loop0: detected capacity change from 0 to 16
[  606.691729][ T9506] erofs: (device loop0): mounted with root inode @ nid 36.
[  606.830285][ T9508] loop0: detected capacity change from 0 to 2048
[  606.865980][ T5823] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  607.103807][ T5823] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  607.136941][ T5823] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  607.145026][ T5823] usb 6-1: Product: syz
[  607.544987][ T5823] usb 6-1: Manufacturer: syz
[  607.710386][ T5823] usb 6-1: SerialNumber: syz
[  607.843158][ T5823] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  608.123363][ T5856] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  608.251875][ T9522] loop3: detected capacity change from 0 to 2048
[  608.756004][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  608.764486][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  608.773021][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  608.781483][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  609.319989][ T5856] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[  609.371979][  T786] usb 6-1: USB disconnect, device number 7
[  609.500776][ T5856] ath9k_htc: Failed to initialize the device
[  609.555220][  T786] usb 6-1: ath9k_htc: USB layer deinitialized
[  609.768553][ T9540] loop0: detected capacity change from 0 to 64
[  609.799646][ T9542] loop3: detected capacity change from 0 to 2048
[  611.013454][ T9553] loop0: detected capacity change from 0 to 8192
[  611.385543][ T9553] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  611.389499][ T9553] FAT-fs (loop0): Filesystem has been set read-only
[  612.781037][ T9580] loop5: detected capacity change from 0 to 2048
[  612.806522][ T5880] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  613.025975][ T5880] usb 4-1: Using ep0 maxpacket: 32
[  613.062155][ T5880] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[  613.092130][ T5880] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  613.151556][ T5880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  613.206829][  T786] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  613.271762][ T5880] usb 4-1: Product: syz
[  613.337376][ T5880] usb 4-1: Manufacturer: syz
[  613.403646][ T5880] usb 4-1: SerialNumber: syz
[  613.476532][  T786] usb 1-1: Using ep0 maxpacket: 32
[  613.539124][  T786] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  613.618598][  T786] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  613.649802][ T5880] imon:imon_find_endpoints: no valid input (IR) endpoint found
[  613.663378][  T786] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  613.708246][  T786] usb 1-1: Product: syz
[  613.715874][ T5880] imon 4-1:155.0: unable to initialize intf0, err -19
[  613.732413][  T786] usb 1-1: Manufacturer: syz
[  613.750399][ T5880] imon:imon_probe: failed to initialize context!
[  613.760580][  T786] usb 1-1: SerialNumber: syz
[  613.785760][ T5880] imon 4-1:155.0: unable to register, err -19
[  613.797194][  T786] usb 1-1: config 0 descriptor??
[  613.864892][  T786] usb 1-1: bad CDC descriptors
[  613.895230][  T786] usb 1-1: unsupported MDLM descriptors
[  613.984142][ T9595] ..
@ÿ: renamed from bond_slave_0 (while UP)
[  614.111024][ T5856] usb 1-1: USB disconnect, device number 8
[  614.436094][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  614.444618][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  614.453273][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  615.222193][ T9612] loop0: detected capacity change from 0 to 32768
[  615.234541][ T9612] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.657 (9612)
[  615.252629][ T9612] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  615.263551][ T9612] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  615.272911][ T9612] BTRFS info (device loop0): max_inline at 0
[  615.281630][ T9612] BTRFS info (device loop0): max_inline at 4096
[  615.288935][ T9612] BTRFS info (device loop0): using free space tree
[  615.357827][ T9612] BTRFS info (device loop0): enabling ssd optimizations
[  615.365037][ T9612] BTRFS info (device loop0): auto enabling async discard
[  615.625615][ T5773] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  615.646246][ T5880] usb 4-1: USB disconnect, device number 12
[  615.943559][ T8523] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop0 scanned by udevd (8523)
[  616.123649][ T9636] loop5: detected capacity change from 0 to 4096
[  616.196007][ T9636] ntfs3: loop5: Different NTFS sector size (2048) and media sector size (512).
[  616.264218][ T9636] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  616.286784][ T9644] loop3: detected capacity change from 0 to 512
[  616.320341][ T9636] ntfs3: loop5: Failed to load $Extend (-22).
[  616.326842][ T9636] ntfs3: loop5: Failed to initialize $Extend.
[  616.356838][ T9644] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  616.395418][ T9644] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  616.453947][   T27] audit: type=1800 audit(1751402608.458:35): pid=9636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.662" name="file1" dev="loop5" ino=30 res=0 errno=0
[  616.503075][ T9644] EXT4-fs (loop3): orphan cleanup on readonly fs
[  616.566035][ T9644] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.664: bad orphan inode 15
[  616.830252][ T9644] ext4_test_bit(bit=14, block=18) = 1
[  616.843378][ T9644] is_bad_inode(inode)=0
[  616.849285][ T9644] NEXT_ORPHAN(inode)=1023
[  616.854734][ T9644] max_ino=32
[  616.858964][ T9644] i_nlink=0
[  621.115554][ T9644] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2983: inode #15: comm syz.3.664: corrupted xattr block 19: e_value size too large
[  621.528336][ T9644] EXT4-fs warning (device loop3): ext4_evict_inode:272: xattr delete (err -117)
[  621.588428][ T9644] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  621.848397][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  622.623194][ T9670] loop5: detected capacity change from 0 to 256
[  623.149144][ T9687] loop5: detected capacity change from 0 to 1024
[  623.284354][ T9674] loop0: detected capacity change from 0 to 32768
[  623.358187][ T9674] jfs_strtoUCS: char2uni returned -22.
[  623.365844][ T9674] charset = cp932, char = 0xf1
[  623.387229][ T5856] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  623.453662][ T9693] loop5: detected capacity change from 0 to 2048
[  623.795858][ T5856] usb 4-1: Using ep0 maxpacket: 8
[  623.803552][ T5856] usb 4-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config
[  623.817739][ T5856] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7
[  623.827402][ T5856] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  623.845939][  T786] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  623.846334][ T5856] hub 4-1:32.0: bad descriptor, ignoring hub
[  623.875499][ T5856] hub: probe of 4-1:32.0 failed with error -5
[  624.035852][  T786] usb 1-1: Using ep0 maxpacket: 8
[  624.042926][  T786] usb 1-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config
[  624.053886][  T786] usb 1-1: config 3 has 1 interface, different from the descriptor's value: 3
[  624.067998][  T786] usb 1-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=f4.40
[  624.077799][  T786] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  624.086020][  T786] usb 1-1: Product: syz
[  624.090496][  T786] usb 1-1: Manufacturer: syz
[  624.095231][  T786] usb 1-1: SerialNumber: syz
[  624.196065][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  624.204780][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  624.213740][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  624.222961][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  624.233347][ T5856] usb 4-1: USB disconnect, device number 13
[  624.277650][ T5880] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  624.393431][  T786] usb 1-1: interface 1 not found
[  624.441487][  T786] usb 1-1: USB disconnect, device number 9
[  624.492155][ T5880] usb 2-1: Using ep0 maxpacket: 32
[  624.513292][ T5880] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64
[  624.538155][ T5880] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  624.574430][ T5880] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[  624.590901][ T5880] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  624.601931][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  624.613365][ T5880] usb 2-1: Product: syz
[  624.620440][ T5880] usb 2-1: Manufacturer: syz
[  624.625814][ T5880] usb 2-1: SerialNumber: syz
[  624.763372][ T1282] ieee802154 phy0 wpan0: encryption failed: -22
[  624.867784][ T5880] cdc_ncm 2-1:1.0: bind() failure
[  624.884289][ T5880] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[  624.892459][ T5880] cdc_ncm 2-1:1.1: bind() failure
[  624.907160][ T5880] usb 2-1: USB disconnect, device number 6
[  624.924712][ T9712] loop3: detected capacity change from 0 to 128
[  624.959546][ T9713] loop5: detected capacity change from 0 to 2048
[  624.981977][ T9712] FAT-fs (loop3): Directory bread(block 32) failed
[  624.993573][ T9712] FAT-fs (loop3): Directory bread(block 33) failed
[  625.004622][ T9712] FAT-fs (loop3): Directory bread(block 34) failed
[  625.020556][ T9712] FAT-fs (loop3): Directory bread(block 35) failed
[  625.040595][ T9712] FAT-fs (loop3): Directory bread(block 36) failed
[  625.047848][ T9712] FAT-fs (loop3): Directory bread(block 37) failed
[  625.054652][ T9712] FAT-fs (loop3): Directory bread(block 38) failed
[  625.062202][ T9712] FAT-fs (loop3): Directory bread(block 39) failed
[  625.069548][ T9712] FAT-fs (loop3): Directory bread(block 40) failed
[  625.076674][ T9712] FAT-fs (loop3): Directory bread(block 41) failed
[  626.241213][ T9727] loop0: detected capacity change from 0 to 1024
[  626.323479][ T9727] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  626.592207][ T9727] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:478: comm syz.0.695: Invalid block bitmap block 0 in block_group 0
[  626.766547][ T1190] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  626.808814][ T9727] Quota error (device loop0): write_blk: dquota write failed
[  626.849473][ T9727] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  626.876435][ T9727] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.695: Failed to acquire dquot type 0
[  626.911321][ T9727] EXT4-fs error (device loop0): ext4_free_blocks:6681: comm syz.0.695: Freeing blocks not in datazone - block = 0, count = 4096
[  626.959417][ T9727] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.695: Invalid inode bitmap blk 0 in block_group 0
[  626.973795][   T40] Quota error (device loop0): do_check_range: Getting block 0 out of range 1-8
[  626.988027][   T40] EXT4-fs error (device loop0): ext4_release_dquot:6974: comm kworker/u4:2: Failed to release dquot type 0
[  627.004435][ T9727] EXT4-fs error (device loop0) in ext4_free_inode:363: Corrupt filesystem
[  627.018846][ T9727] EXT4-fs (loop0): 1 orphan inode deleted
[  627.031913][ T1190] usb 6-1: config 0 has an invalid interface number: 64 but max is 0
[  627.041822][ T1190] usb 6-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config
[  627.054025][ T9727] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  627.073111][ T1190] usb 6-1: config 0 has no interface number 0
[  627.082407][ T1190] usb 6-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48
[  627.105837][ T1190] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  627.126205][ T1190] usb 6-1: Product: syz
[  627.130467][ T1190] usb 6-1: Manufacturer: syz
[  627.135106][ T1190] usb 6-1: SerialNumber: syz
[  627.148006][ T1190] usb 6-1: config 0 descriptor??
[  627.227778][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  627.602652][ T1190] usb 6-1: Found UVC 0.00 device syz (046d:0823)
[  627.814317][ T1190] usb 6-1: No valid video chain found.
[  627.959918][ T1190] usb 6-1: USB disconnect, device number 8
[  628.047546][ T9746] loop0: detected capacity change from 0 to 16
[  628.105499][ T9746] erofs: (device loop0): mounted with root inode @ nid 36.
[  628.158300][ T9745] loop3: detected capacity change from 0 to 4096
[  628.172473][ T9745] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512).
[  629.251966][ T9756] loop3: detected capacity change from 0 to 2048
[  629.315950][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  629.324475][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  629.332904][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  629.341335][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  629.365950][  T786] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  630.868101][  T786] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac
[  630.877739][  T786] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  630.896147][  T786] usb 1-1: Product: syz
[  630.900367][  T786] usb 1-1: Manufacturer: syz
[  630.905149][  T786] usb 1-1: SerialNumber: syz
[  630.950515][  T786] usb 1-1: config 0 descriptor??
[  630.961924][  T786] gspca_main: sunplus-2.14.0 probing 055f:c230
[  631.366623][  T786] gspca_sunplus: reg_r err -71
[  631.371538][  T786] sunplus: probe of 1-1:0.0 failed with error -71
[  631.407041][  T786] usb 1-1: USB disconnect, device number 10
[  631.645884][ T1190] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  631.734050][ T9769] loop3: detected capacity change from 0 to 32768
[  631.810162][ T9769] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[  631.846111][ T1190] usb 6-1: Using ep0 maxpacket: 8
[  631.854119][ T1190] usb 6-1: config 0 has an invalid interface number: 31 but max is 0
[  631.876334][ T1190] usb 6-1: config 0 has no interface number 0
[  631.889026][ T9769] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  631.900607][ T1190] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  631.910324][ T1190] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  631.918497][ T1190] usb 6-1: Product: syz
[  631.922754][ T1190] usb 6-1: Manufacturer: syz
[  631.935766][ T1190] usb 6-1: SerialNumber: syz
[  631.942967][ T1190] usb 6-1: config 0 descriptor??
[  632.188070][ T1190] usb 6-1: Found UVC 0.04 device syz (046d:08c3)
[  632.227600][ T1190] usb 6-1: No valid video chain found.
[  632.259754][ T1190] usb 6-1: USB disconnect, device number 9
[  632.311032][ T9783] loop0: detected capacity change from 0 to 22
[  632.330411][ T9783] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  632.352259][ T9783] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  632.397969][ T5777] ocfs2: Unmounting device (7,3) on (node local)
[  632.642644][ T9785] loop0: detected capacity change from 0 to 2048
[  634.836609][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  634.845948][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  634.855140][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  634.864314][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  635.067814][ T9801] loop3: detected capacity change from 0 to 2048
[  636.611888][ T9816] ip6erspan0: entered allmulticast mode
[  636.822240][ T9819] loop5: detected capacity change from 0 to 2048
[  637.098628][ T9823] netlink: 12 bytes leftover after parsing attributes in process `syz.3.727'.
[  637.738413][ T9823] netlink: 'syz.3.727': attribute type 1 has an invalid length.
[  638.072509][ T9832] loop5: detected capacity change from 0 to 2048
[  639.511411][ T9848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  639.904301][ T9846] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  640.386322][ T9836] loop0: detected capacity change from 0 to 40427
[  640.410417][ T9836] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x7ffff
[  640.426248][ T9836] F2FS-fs (loop0): Image doesn't support compression
[  640.443695][ T9836] F2FS-fs (loop0): Image doesn't support compression
[  640.474562][ T9836] F2FS-fs (loop0): invalid crc value
[  640.506947][ T9836] F2FS-fs (loop0): Found nat_bits in checkpoint
[  640.550859][ T9854] loop3: detected capacity change from 0 to 32768
[  640.590800][ T9854] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.735 (9854)
[  640.644277][ T9836] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  640.655113][ T9854] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  640.681575][ T9852] loop5: detected capacity change from 0 to 32768
[  640.698289][ T9854] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm
[  640.734298][ T9836] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x7ffff
[  640.742877][ T9854] BTRFS info (device loop3): force clearing of disk cache
[  640.756946][ T9852] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz.5.734 (9852)
[  640.768798][ T9854] BTRFS info (device loop3): setting nodatasum
[  640.816639][ T9836] F2FS-fs (loop0): Image doesn't support compression
[  640.823451][ T9836] F2FS-fs (loop0): Image doesn't support compression
[  640.836092][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  640.844592][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  640.853055][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  640.861478][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  640.869261][ T9854] BTRFS info (device loop3): allowing degraded mounts
[  640.926908][ T9854] BTRFS info (device loop3): use zlib compression, level 3
[  640.944833][ T9854] BTRFS info (device loop3): using free space tree
[  641.233188][ T8550] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by udevd (8550)
[  641.976234][ T9854] BTRFS info (device loop3): enabling ssd optimizations
[  642.003763][ T9854] BTRFS info (device loop3): auto enabling async discard
[  642.467417][ T5777] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  643.531954][ T9884] loop5: detected capacity change from 0 to 32768
[  643.606506][ T9884] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 10
[  643.874236][ T8523] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 10
[  644.185857][  T786] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  644.995919][  T786] usb 4-1: Using ep0 maxpacket: 32
[  645.014518][  T786] usb 4-1: config index 0 descriptor too short (expected 35577, got 27)
[  645.057135][  T786] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  645.070272][  T786] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92
[  645.081279][  T786] usb 4-1: config 1 has no interface number 0
[  645.092481][  T786] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  645.120472][  T786] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  645.134449][  T786] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  645.150217][  T786] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  645.171738][  T786] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  645.245451][  T786] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found
[  645.447258][  T786] snd_usb_pod 4-1:1.1: cannot start listening: -90
[  645.454441][  T786] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected
[  645.494029][  T786] snd_usb_pod: probe of 4-1:1.1 failed with error -90
[  645.617628][ T9916] netlink: 'syz.0.754': attribute type 1 has an invalid length.
[  645.625767][ T9916] netlink: 216 bytes leftover after parsing attributes in process `syz.0.754'.
[  645.652953][  T786] usb 4-1: USB disconnect, device number 14
[  645.875927][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  645.884471][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  645.892969][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  645.901725][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  646.026359][ T9925] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  646.087367][ T9926] loop5: detected capacity change from 0 to 2048
[  647.716907][ T9952] loop0: detected capacity change from 0 to 4096
[  647.793697][ T9952] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  647.808967][ T9952] ntfs3: loop0: Failed to initialize $Extend/$ObjId.
[  648.446803][ T9963] loop5: detected capacity change from 0 to 512
[  648.469637][ T9963] EXT4-fs: Ignoring removed nobh option
[  648.589556][ T9963] EXT4-fs error (device loop5): ext4_do_update_inode:5230: inode #3: comm syz.5.771: corrupted inode contents
[  648.685595][ T9971] loop0: detected capacity change from 0 to 2048
[  648.694089][ T9963] EXT4-fs (loop5): Remounting filesystem read-only
[  648.910819][ T9963] Quota error (device loop5): write_blk: dquota write failed
[  649.596638][ T9963] Quota error (device loop5): qtree_write_dquot: Error -5 occurred while creating quota
[  649.611320][ T9963] EXT4-fs (loop5): 1 truncate cleaned up
[  649.619932][ T9978] loop3: detected capacity change from 0 to 512
[  649.652407][ T9963] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  649.667412][ T9978] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  649.695970][ T9963] ext4 filesystem being mounted at /131/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  649.746718][ T9978] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  649.868796][ T9978] ext4 filesystem being mounted at /191/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  650.114726][ T7189] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  650.129794][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  650.735183][ T9995] loop0: detected capacity change from 0 to 512
[  650.793648][ T9995] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  650.808713][ T9995] ext4 filesystem being mounted at /191/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  650.883151][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  651.010121][ T5823] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  651.196250][ T5823] usb 6-1: Using ep0 maxpacket: 16
[  651.204013][ T5823] usb 6-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 238, changing to 11
[  651.226078][ T5823] usb 6-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0
[  651.259552][ T5823] usb 6-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  651.286051][ T5823] usb 6-1: config 0 interface 0 has no altsetting 0
[  651.292770][ T5823] usb 6-1: New USB device found, idVendor=05ac, idProduct=026c, bcdDevice= 0.00
[  651.316173][ T5823] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  651.337123][ T5823] usb 6-1: config 0 descriptor??
[  651.492736][T10001] loop0: detected capacity change from 0 to 32768
[  651.555932][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  651.564504][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  651.573068][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  651.583113][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  651.630430][T10001] ocfs2: Slot 0 on device (7,0) was already allocated to this node!
[  651.706251][T10001] (syz.0.781,10001,0):ocfs2_clear_journal_error:1147 ERROR: File system error -318767104 recorded in journal 0.
[  651.725959][T10001] (syz.0.781,10001,0):ocfs2_clear_journal_error:1149 ERROR: File system on device loop0 needs checking.
[  651.742150][T10006] loop3: detected capacity change from 0 to 32768
[  651.775308][T10001] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  651.843075][ T5823] apple 0003:05AC:026C.0003: item fetching failed at offset 0/3
[  651.866642][ T5823] apple 0003:05AC:026C.0003: parse failed
[  651.872557][ T5823] apple: probe of 0003:05AC:026C.0003 failed with error -22
[  652.052888][ T5856] usb 6-1: USB disconnect, device number 10
[  652.149562][ T5773] ocfs2: Unmounting device (7,0) on (node local)
[  653.006033][  T786] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  653.077434][T10025] loop5: detected capacity change from 0 to 2048
[  653.208036][  T786] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  653.358045][  T786] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00
[  653.407354][  T786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  653.448619][  T786] usb 1-1: config 0 descriptor??
[  653.635983][ T5823] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  653.849993][ T5823] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  653.872940][ T5823] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  653.893415][ T5823] usb 2-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00
[  653.898055][  T786] koneplus 0003:1E7D:2E22.0004: hidraw0: USB HID vff.fe Device [HID 1e7d:2e22] on usb-dummy_hcd.0-1/input0
[  653.916705][ T5823] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  653.953412][ T5823] usb 2-1: config 0 descriptor??
[  653.996126][ T5816] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  654.078284][  T786] koneplus 0003:1E7D:2E22.0004: couldn't init struct koneplus_device
[  654.093433][  T786] koneplus 0003:1E7D:2E22.0004: couldn't install mouse
[  654.123550][  T786] koneplus: probe of 0003:1E7D:2E22.0004 failed with error -71
[  654.155114][  T786] usb 1-1: USB disconnect, device number 11
[  654.188262][ T5816] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  654.203627][ T5816] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  654.214355][ T5816] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  654.225763][ T5816] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  654.266184][ T5816] usb 6-1: config 0 descriptor??
[  654.479417][T10034] loop3: detected capacity change from 0 to 4096
[  654.565225][T10034] ntfs3: loop3: ino=21, "cpuacct.stat" mmap(write) compressed not supported
[  654.602029][ T5823] hid-led: probe of 0003:1D34:000A.0005 failed with error -71
[  654.640602][ T5823] usb 2-1: USB disconnect, device number 7
[  654.729375][ T5816] playstation 0003:054C:0DF2.0006: unbalanced delimiter at end of report description
[  654.764890][ T5816] playstation 0003:054C:0DF2.0006: Parse failed
[  654.789301][ T5816] playstation: probe of 0003:054C:0DF2.0006 failed with error -22
[  654.989142][  T786] usb 6-1: USB disconnect, device number 11
[  655.265514][T10045] loop0: detected capacity change from 0 to 64
[  655.546552][T10051] loop0: detected capacity change from 0 to 2048
[  656.595899][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  656.604366][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  656.612865][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  656.621311][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  657.016148][T10055] loop5: detected capacity change from 0 to 32768
[  657.035409][T10055] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.799 (10055)
[  657.072959][T10055] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  657.101606][T10055] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  657.125810][T10055] BTRFS info (device loop5): enabling disk space caching
[  657.145905][T10055] BTRFS info (device loop5): enabling auto defrag
[  657.165834][ T5856] usb 1-1: new full-speed USB device number 12 using dummy_hcd
[  657.165970][T10055] BTRFS info (device loop5): doing ref verification
[  657.214512][T10055] BTRFS info (device loop5): use no compression
[  657.231880][T10055] BTRFS info (device loop5): force clearing of disk cache
[  657.255769][T10055] BTRFS info (device loop5): disabling disk space caching
[  657.324094][T10065] loop3: detected capacity change from 0 to 32768
[  657.365491][ T5856] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  657.413896][ T5856] usb 1-1: New USB device found, idVendor=056a, idProduct=0059, bcdDevice= 0.00
[  657.436298][T10055] BTRFS info (device loop5): enabling ssd optimizations
[  657.451444][T10055] BTRFS info (device loop5): auto enabling async discard
[  657.460233][ T5856] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  657.490662][ T5856] usb 1-1: config 0 descriptor??
[  657.500558][T10065] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  657.537616][T10055] BTRFS info (device loop5): rebuilding free space tree
[  657.625491][T10055] BTRFS info (device loop5): disabling free space tree
[  657.669384][T10055] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  657.709525][T10055] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  657.813139][ T5777] ocfs2: Unmounting device (7,3) on (node local)
[  657.870529][T10087] mmap: syz.1.806 (10087) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  657.982845][ T5856] wacom 0003:056A:0059.0007: hidraw0: USB HID v10.00 Device [HID 056a:0059] on usb-dummy_hcd.0-1/input0
[  658.070726][T10090] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4)
[  658.077328][T10090] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  658.106022][T10090] vhci_hcd vhci_hcd.0: Device attached
[  658.145444][T10093] vhci_hcd: connection closed
[  658.166061][ T1079] vhci_hcd: stop threads
[  658.204708][ T7189] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  658.206637][ T1079] vhci_hcd: release socket
[  658.244009][ T5856] usb 1-1: USB disconnect, device number 12
[  658.250490][ T1079] vhci_hcd: disconnect device
[  658.306229][ T5880] vhci_hcd: vhci_device speed not set
[  658.466162][ T5823] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  658.472259][T10098] loop5: detected capacity change from 0 to 256
[  658.550867][T10098] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d)
[  658.637399][T10098] exFAT-fs (loop5): error, invalid size(size(61440) > aligned(9223372036854777344)
[  658.637399][T10098] 
[  658.663509][T10098] exFAT-fs (loop5): Filesystem has been set read-only
[  658.692485][ T5823] usb 2-1: Using ep0 maxpacket: 32
[  658.710321][ T5823] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[  658.739567][ T5823] usb 2-1: config 0 has no interface number 0
[  658.751071][ T5823] usb 2-1: config 0 interface 2 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  658.805749][ T5823] usb 2-1: config 0 interface 2 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0
[  658.855825][ T5823] usb 2-1: config 0 interface 2 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  658.898408][ T5823] usb 2-1: config 0 interface 2 has no altsetting 0
[  658.926179][ T5823] usb 2-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00
[  658.935318][ T5823] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  659.002098][ T5823] usb 2-1: config 0 descriptor??
[  659.554569][ T5823] uclogic 0003:5543:0781.0008: unknown main item tag 0x0
[  659.568103][ T5823] uclogic 0003:5543:0781.0008: unknown main item tag 0x0
[  659.575764][ T5823] uclogic 0003:5543:0781.0008: unknown main item tag 0x0
[  659.583170][ T5823] uclogic 0003:5543:0781.0008: unknown main item tag 0x0
[  659.591291][ T5823] uclogic 0003:5543:0781.0008: unknown main item tag 0x0
[  659.600934][ T5823] uclogic 0003:5543:0781.0008: unknown main item tag 0x0
[  659.610380][ T5823] uclogic 0003:5543:0781.0008: unknown main item tag 0x0
[  659.632013][ T5823] uclogic 0003:5543:0781.0008: No inputs registered, leaving
[  659.643791][ T5823] uclogic 0003:5543:0781.0008: hidraw0: USB HID v0.07 Device [HID 5543:0781] on usb-dummy_hcd.1-1/input2
[  659.767881][ T5823] usb 2-1: USB disconnect, device number 8
[  659.822658][T10111] fido_id[10111]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  659.970035][T10102] loop5: detected capacity change from 0 to 32768
[  660.026453][T10102] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  660.149062][ T7189] ocfs2: Unmounting device (7,5) on (node local)
[  660.519996][T10115] loop3: detected capacity change from 0 to 32768
[  660.545867][  T786] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  660.557143][T10115] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.814 (10115)
[  660.616399][T10115] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  660.643361][T10115] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  660.658762][T10115] BTRFS info (device loop3): enabling disk space caching
[  660.670024][T10115] BTRFS info (device loop3): enabling auto defrag
[  660.677095][T10115] BTRFS info (device loop3): doing ref verification
[  660.684557][T10115] BTRFS info (device loop3): use no compression
[  660.691431][T10115] BTRFS info (device loop3): force clearing of disk cache
[  660.699964][T10115] BTRFS info (device loop3): setting nodatacow, compression disabled
[  660.721424][T10115] BTRFS info (device loop3): turning on sync discard
[  660.729269][T10115] BTRFS warning (device loop3): the 'inode_cache' option is deprecated and has no effect since 5.11
[  660.747377][T10115] BTRFS info (device loop3): disk space caching is enabled
[  660.757919][  T786] usb 6-1: too many endpoints for config 0 interface 0 altsetting 134: 137, using maximum allowed: 30
[  660.771269][  T786] usb 6-1: config 0 interface 0 altsetting 134 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  660.788574][  T786] usb 6-1: config 0 interface 0 altsetting 134 endpoint 0x81 has invalid wMaxPacketSize 0
[  660.799977][  T786] usb 6-1: config 0 interface 0 altsetting 134 has 1 endpoint descriptor, different from the interface descriptor's value: 137
[  660.814577][  T786] usb 6-1: config 0 interface 0 has no altsetting 0
[  660.822534][  T786] usb 6-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00
[  660.833040][  T786] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  660.849090][  T786] usb 6-1: config 0 descriptor??
[  660.857454][ T5823] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  660.884711][T10115] BTRFS info (device loop3): enabling ssd optimizations
[  660.942324][T10115] BTRFS info (device loop3: state M): doing ref verification
[  660.950479][T10115] BTRFS info (device loop3: state M): use no compression
[  660.957927][T10115] BTRFS info (device loop3: state M): force clearing of disk cache
[  660.966618][T10115] BTRFS error (device loop3: state M): unrecognized mount option 'nodhdr_len not found'
[  661.006271][ T5856] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  661.056298][ T5777] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  661.086728][ T5823] usb 2-1: Using ep0 maxpacket: 8
[  661.103292][ T5823] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  661.117293][ T5823] usb 2-1: config 0 interface 0 has no altsetting 0
[  661.125429][ T5823] usb 2-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00
[  661.150800][ T5823] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  661.196468][ T5856] usb 1-1: Using ep0 maxpacket: 32
[  661.204160][ T5823] usb 2-1: config 0 descriptor??
[  661.217813][ T5856] usb 1-1: New USB device found, idVendor=28bd, idProduct=1903, bcdDevice= 0.00
[  661.247106][ T5856] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  661.269709][ T8523] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 9 /dev/loop3 scanned by udevd (8523)
[  661.299797][ T5856] usb 1-1: config 0 descriptor??
[  661.301415][  T786] uclogic 0003:5543:0003.0009: unknown main item tag 0x0
[  661.335581][  T786] uclogic 0003:5543:0003.0009: unknown main item tag 0x0
[  661.380660][  T786] uclogic 0003:5543:0003.0009: unknown main item tag 0x0
[  661.388487][  T786] uclogic 0003:5543:0003.0009: unknown main item tag 0x0
[  661.395606][  T786] uclogic 0003:5543:0003.0009: unknown main item tag 0x0
[  661.408765][  T786] uclogic 0003:5543:0003.0009: No inputs registered, leaving
[  661.454373][  T786] uclogic 0003:5543:0003.0009: hidraw0: USB HID v0.00 Device [HID 5543:0003] on usb-dummy_hcd.5-1/input0
[  661.509538][  T786] usb 6-1: USB disconnect, device number 12
[  661.618389][T10148] fido_id[10148]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  661.633147][    T9] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  661.679669][ T5823] uclogic 0003:5543:0042.000A: unbalanced delimiter at end of report description
[  661.709537][ T5823] uclogic 0003:5543:0042.000A: parse failed
[  661.722986][ T5823] uclogic: probe of 0003:5543:0042.000A failed with error -22
[  661.760148][ T5856] input: HID 28bd:1903 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:28BD:1903.000B/input/input12
[  661.795916][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  661.804382][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  661.812869][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  661.821302][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  661.830888][    T9] usb 4-1: Using ep0 maxpacket: 16
[  661.838610][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  661.849743][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  661.864292][    T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00
[  661.879536][ T5823] usb 2-1: USB disconnect, device number 9
[  661.909708][ T5856] uclogic 0003:28BD:1903.000B: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:1903] on usb-dummy_hcd.0-1/input0
[  661.933314][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  661.989632][    T9] usb 4-1: config 0 descriptor??
[  661.998270][ T5856] usb 1-1: USB disconnect, device number 13
[  662.099060][T10149] fido_id[10149]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory
[  662.419792][    T9] apple 0003:05AC:024B.000C: unknown main item tag 0x6
[  662.427013][    T9] apple 0003:05AC:024B.000C: ignoring exceeding usage max
[  662.435529][    T9] apple 0003:05AC:024B.000C: invalid report_size 18680
[  662.442838][ T5880] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  662.451706][    T9] apple 0003:05AC:024B.000C: item 0 2 1 7 parsing failed
[  662.460431][    T9] apple 0003:05AC:024B.000C: parse failed
[  662.468861][    T9] apple: probe of 0003:05AC:024B.000C failed with error -22
[  662.558369][T10155] loop0: detected capacity change from 0 to 64
[  662.616829][ T5880] usb 6-1: Using ep0 maxpacket: 16
[  662.631357][ T5880] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  662.654645][ T5880] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  662.674997][ T5880] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00
[  662.699685][  T786] usb 4-1: USB disconnect, device number 15
[  662.708110][ T5880] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  662.728620][ T5880] usb 6-1: config 0 descriptor??
[  662.795953][    T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  662.979290][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  662.990724][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  663.004521][    T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=4262, bcdDevice= 0.00
[  663.013930][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  663.019670][ T5816] usb 1-1: new full-speed USB device number 14 using dummy_hcd
[  663.025920][    T9] usb 2-1: config 0 descriptor??
[  663.153394][ T5880] corsair 0003:1B1C:1B02.000D: invalid report_count 26673
[  663.168068][ T5880] corsair 0003:1B1C:1B02.000D: item 0 2 1 9 parsing failed
[  663.176206][ T5880] corsair 0003:1B1C:1B02.000D: parse failed
[  663.182301][ T5880] corsair: probe of 0003:1B1C:1B02.000D failed with error -22
[  663.217916][ T5816] usb 1-1: config 7 has an invalid interface number: 101 but max is 0
[  663.235370][ T5816] usb 1-1: config 7 has no interface number 0
[  663.248744][ T5816] usb 1-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b
[  663.268503][ T5816] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  663.285804][ T5816] usb 1-1: Product: syz
[  663.295896][ T5816] usb 1-1: Manufacturer: syz
[  663.305787][ T5816] usb 1-1: SerialNumber: syz
[  663.380334][ T5880] usb 6-1: USB disconnect, device number 13
[  663.476904][    T9] hid-generic 0003:05AC:4262.000E: unbalanced delimiter at end of report description
[  663.487563][    T9] hid-generic: probe of 0003:05AC:4262.000E failed with error -22
[  663.549221][ T5816] as10x_usb: device has been detected
[  663.555462][ T5816] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe)
[  663.582610][ T5816] usb 1-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)...
[  663.586191][ T5856] usb 4-1: new full-speed USB device number 16 using dummy_hcd
[  663.632963][ T5816] as10x_usb: error during firmware upload part1
[  663.640253][ T5816] Registered device Elgato EyeTV DTT Deluxe
[  663.643711][ T5816] usb 1-1: USB disconnect, device number 14
[  663.704442][ T5880] usb 2-1: USB disconnect, device number 10
[  663.724935][ T5816] Unregistered device Elgato EyeTV DTT Deluxe
[  663.736844][ T5816] as10x_usb: device has been disconnected
[  663.800968][ T5856] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  663.811807][ T5856] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[  663.820925][ T5856] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  663.831793][ T5856] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  663.842040][ T5856] usb 4-1: config 0 descriptor??
[  663.853869][ T5856] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  663.861767][ T5856] dvb-usb: bulk message failed: -22 (3/0)
[  663.877156][ T5856] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  663.887700][ T5856] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  663.894813][ T5856] usb 4-1: media controller created
[  663.902569][ T5856] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  663.934026][ T5856] dvb-usb: bulk message failed: -22 (6/0)
[  663.954009][ T5856] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  663.979787][ T5856] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input13
[  663.994107][ T5856] dvb-usb: schedule remote query interval to 150 msecs.
[  664.001972][ T5856] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  664.059867][ T5856] usb 4-1: USB disconnect, device number 16
[  664.144094][ T5856] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  664.186976][T10164] loop0: detected capacity change from 0 to 2048
[  665.047679][T10173] loop3: detected capacity change from 0 to 2048
[  665.106857][ T5823] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  665.303119][T10175] loop0: detected capacity change from 0 to 1024
[  665.310487][ T5823] usb 2-1: Using ep0 maxpacket: 16
[  665.333042][ T5823] usb 2-1: config 0 has an invalid interface number: 8 but max is 0
[  665.373445][ T5823] usb 2-1: config 0 has no interface number 0
[  666.109245][ T5823] usb 2-1: config 0 interface 8 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  666.144056][ T5823] usb 2-1: config 0 interface 8 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0
[  666.179676][ T5823] usb 2-1: config 0 interface 8 has no altsetting 0
[  666.224219][ T5823] usb 2-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00
[  666.270241][ T5823] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  666.324685][ T1079] hfsplus: b-tree write err: -5, ino 4
[  666.360920][ T5823] usb 2-1: config 0 descriptor??
[  666.511145][T10185] loop3: detected capacity change from 0 to 2048
[  666.915931][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  666.924806][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  666.933404][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  666.941882][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  667.749237][ T5823] uclogic 0003:5543:0522.000F: unknown main item tag 0x0
[  667.824661][ T5823] uclogic 0003:5543:0522.000F: unknown main item tag 0x0
[  667.865266][ T5823] uclogic 0003:5543:0522.000F: unknown main item tag 0x0
[  667.951532][ T5856] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  667.977234][ T5823] uclogic 0003:5543:0522.000F: unknown main item tag 0x0
[  668.014819][ T5823] uclogic 0003:5543:0522.000F: unknown main item tag 0x0
[  668.049112][ T5823] uclogic 0003:5543:0522.000F: No inputs registered, leaving
[  668.077335][ T5823] uclogic 0003:5543:0522.000F: hidraw0: USB HID v0.00 Device [HID 5543:0522] on usb-dummy_hcd.1-1/input8
[  668.134335][ T5823] usb 2-1: USB disconnect, device number 11
[  668.195913][ T5856] usb 1-1: Using ep0 maxpacket: 8
[  668.206858][ T5856] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  668.234320][ T5856] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  668.246547][ T5856] usb 1-1: Product: syz
[  668.246578][ T5856] usb 1-1: Manufacturer: syz
[  668.246596][ T5856] usb 1-1: SerialNumber: syz
[  668.249404][ T5856] usb 1-1: config 0 descriptor??
[  668.252424][ T5856] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  668.252465][ T5856] usb 1-1: setting power ON
[  668.253013][ T5856] dvb-usb: bulk message failed: -22 (2/0)
[  668.257079][ T5856] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  668.259870][ T5856] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  668.259975][ T5856] usb 1-1: media controller created
[  668.318103][ T5856] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  668.332086][T10192] fido_id[10192]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  668.369578][ T5856] usb 1-1: selecting invalid altsetting 6
[  668.437648][ T5856] usb 1-1: digital interface selection failed (-22)
[  668.437673][ T5856] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  668.440695][ T5856] usb 1-1: setting power OFF
[  668.440983][ T5856] dvb-usb: bulk message failed: -22 (2/0)
[  668.441089][ T5856] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  668.441104][ T5856] (NULL device *): no alternate interface
[  668.497513][T10188] dvb-usb: bulk message failed: -22 (3/0)
[  668.588784][ T5856] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  668.599894][ T5856] usb 1-1: USB disconnect, device number 15
[  669.004830][T10201] loop3: detected capacity change from 0 to 2048
[  669.840634][T10212] loop5: detected capacity change from 0 to 2048
[  670.645449][T10206] loop0: detected capacity change from 0 to 32768
[  670.758746][T10206] JBD2: Ignoring recovery information on journal
[  670.949701][T10206] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  671.031050][T10206] 
[  671.033455][T10206] ======================================================
[  671.040692][T10206] WARNING: possible circular locking dependency detected
[  671.047705][T10227] loop5: detected capacity change from 0 to 128
[  671.054021][T10206] 6.6.95-syzkaller #0 Not tainted
[  671.059089][T10206] ------------------------------------------------------
[  671.066243][T10206] syz.0.838/10206 is trying to acquire lock:
[  671.072247][T10206] ffff8880563a3498 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}, at: ocfs2_reserve_local_alloc_bits+0x126/0x24b0
[  671.085805][T10206] 
[  671.085805][T10206] but task is already holding lock:
[  671.093203][T10206] ffff888076f9bf60 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_write_begin+0x199/0x310
[  671.103798][T10206] 
[  671.103798][T10206] which lock already depends on the new lock.
[  671.103798][T10206] 
[  671.114331][T10206] 
[  671.114331][T10206] the existing dependency chain (in reverse order) is:
[  671.123398][T10206] 
[  671.123398][T10206] -> #5 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}:
[  671.132247][T10206]        down_write+0x97/0x1f0
[  671.137075][T10206]        ocfs2_try_remove_refcount_tree+0xb7/0x320
[  671.143657][T10206]        ocfs2_xattr_set+0x596/0x11f0
[  671.149087][T10206]        ocfs2_set_acl+0x4e1/0x590
[  671.154239][T10206]        ocfs2_iop_set_acl+0x1ab/0x2a0
[  671.159738][T10206]        vfs_set_acl+0x803/0xa60
[  671.164724][T10206]        __se_sys_fsetxattr+0x450/0x4b0
[  671.170337][T10206]        do_syscall_64+0x55/0xb0
[  671.175331][T10206]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  671.181823][T10206] 
[  671.181823][T10206] -> #4 (&oi->ip_xattr_sem){++++}-{3:3}:
[  671.189800][T10206]        down_read+0x46/0x2e0
[  671.194540][T10206]        ocfs2_init_acl+0x2fa/0x720
[  671.199796][T10206]        ocfs2_mknod+0x12e5/0x20f0
[  671.204960][T10206]        ocfs2_create+0x196/0x410
[  671.210223][T10206]        path_openat+0x1277/0x3190
[  671.215387][T10206]        do_filp_open+0x1c5/0x3d0
[  671.220556][T10206]        do_sys_openat2+0x12c/0x1c0
[  671.225993][T10206]        __x64_sys_open+0x11f/0x140
[  671.231378][T10206]        do_syscall_64+0x55/0xb0
[  671.236403][T10206]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  671.242902][T10206] 
[  671.242902][T10206] -> #3 (jbd2_handle){++++}-{0:0}:
[  671.250363][T10206]        start_this_handle+0x1e9d/0x20c0
[  671.256054][T10206]        jbd2__journal_start+0x2bb/0x5b0
[  671.261743][T10206]        jbd2_journal_start+0x2a/0x40
[  671.267192][T10206]        ocfs2_start_trans+0x376/0x6c0
[  671.272739][T10206]        ocfs2_shutdown_local_alloc+0x201/0xa10
[  671.276734][T10224] loop3: detected capacity change from 0 to 32768
[  671.279025][T10206]        ocfs2_dismount_volume+0x1e2/0x890
[  671.291330][T10206]        generic_shutdown_super+0x134/0x2b0
[  671.297360][T10206]        kill_block_super+0x44/0x90
[  671.302621][T10206]        deactivate_locked_super+0x97/0x100
[  671.308575][T10206]        cleanup_mnt+0x429/0x4c0
[  671.313562][T10206]        task_work_run+0x1ce/0x250
[  671.318703][T10206]        exit_to_user_mode_loop+0xe6/0x110
[  671.324627][T10206]        exit_to_user_mode_prepare+0xb1/0x140
[  671.330737][T10206]        syscall_exit_to_user_mode+0x1a/0x50
[  671.336745][T10206]        do_syscall_64+0x61/0xb0
[  671.341752][T10206]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  671.348301][T10206] 
[  671.348301][T10206] -> #2 (&journal->j_trans_barrier){.+.+}-{3:3}:
[  671.357016][T10206]        down_read+0x46/0x2e0
[  671.361723][T10206]        ocfs2_start_trans+0x36a/0x6c0
[  671.367229][T10206]        ocfs2_shutdown_local_alloc+0x201/0xa10
[  671.373488][T10206]        ocfs2_dismount_volume+0x1e2/0x890
[  671.379313][T10206]        generic_shutdown_super+0x134/0x2b0
[  671.385223][T10206]        kill_block_super+0x44/0x90
[  671.390460][T10206]        deactivate_locked_super+0x97/0x100
[  671.396373][T10206]        cleanup_mnt+0x429/0x4c0
[  671.401397][T10206]        task_work_run+0x1ce/0x250
[  671.406530][T10206]        exit_to_user_mode_loop+0xe6/0x110
[  671.412360][T10206]        exit_to_user_mode_prepare+0xb1/0x140
[  671.418448][T10206]        syscall_exit_to_user_mode+0x1a/0x50
[  671.424443][T10206]        do_syscall_64+0x61/0xb0
[  671.429406][T10206]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  671.435853][T10206] 
[  671.435853][T10206] -> #1 (sb_internal#5){.+.+}-{0:0}:
[  671.443537][T10206]        ocfs2_start_trans+0x26b/0x6c0
[  671.449022][T10206]        ocfs2_mknod+0xe47/0x20f0
[  671.454069][T10206]        ocfs2_create+0x196/0x410
[  671.459127][T10206]        path_openat+0x1277/0x3190
[  671.464255][T10206]        do_filp_open+0x1c5/0x3d0
[  671.469394][T10206]        do_sys_openat2+0x12c/0x1c0
[  671.474629][T10206]        __x64_sys_open+0x11f/0x140
[  671.479850][T10206]        do_syscall_64+0x55/0xb0
[  671.484896][T10206]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  671.491330][T10206] 
[  671.491330][T10206] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}:
[  671.501864][T10206]        __lock_acquire+0x2ddb/0x7c80
[  671.507256][T10206]        lock_acquire+0x197/0x410
[  671.512296][T10206]        down_write+0x97/0x1f0
[  671.517077][T10206]        ocfs2_reserve_local_alloc_bits+0x126/0x24b0
[  671.523766][T10206]        ocfs2_reserve_clusters_with_limit+0x1bf/0xba0
[  671.530628][T10206]        ocfs2_lock_allocators+0x2fb/0x5b0
[  671.536447][T10206]        ocfs2_write_begin_nolock+0x225a/0x4190
[  671.542700][T10206]        ocfs2_write_begin+0x1bc/0x310
[  671.548173][T10206]        generic_perform_write+0x2fb/0x5b0
[  671.554023][T10206]        ocfs2_file_write_iter+0x1582/0x1d00
[  671.560053][T10206]        vfs_write+0x43b/0x940
[  671.564925][T10206]        __x64_sys_pwrite64+0x195/0x220
[  671.570480][T10206]        do_syscall_64+0x55/0xb0
[  671.575439][T10206]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  671.581879][T10206] 
[  671.581879][T10206] other info that might help us debug this:
[  671.581879][T10206] 
[  671.592900][T10206] Chain exists of:
[  671.592900][T10206]   &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6 --> &oi->ip_xattr_sem --> &ocfs2_file_ip_alloc_sem_key
[  671.592900][T10206] 
[  671.610158][T10206]  Possible unsafe locking scenario:
[  671.610158][T10206] 
[  671.617617][T10206]        CPU0                    CPU1
[  671.622994][T10206]        ----                    ----
[  671.628459][T10206]   lock(&ocfs2_file_ip_alloc_sem_key);
[  671.634024][T10206]                                lock(&oi->ip_xattr_sem);
[  671.641148][T10206]                                lock(&ocfs2_file_ip_alloc_sem_key);
[  671.649232][T10206]   lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6);
[  671.656556][T10206] 
[  671.656556][T10206]  *** DEADLOCK ***
[  671.656556][T10206] 
[  671.664723][T10206] 3 locks held by syz.0.838/10206:
[  671.669849][T10206]  #0: ffff8880766b6418 (sb_writers#32){.+.+}-{0:0}, at: vfs_write+0x20e/0x940
[  671.678880][T10206]  #1: ffff888076f9c2d8 (&sb->s_type->i_mutex_key#40){+.+.}-{3:3}, at: ocfs2_file_write_iter+0x40b/0x1d00
[  671.690220][T10206]  #2: ffff888076f9bf60 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_write_begin+0x199/0x310
[  671.701215][T10206] 
[  671.701215][T10206] stack backtrace:
[  671.707142][T10206] CPU: 1 PID: 10206 Comm: syz.0.838 Not tainted 6.6.95-syzkaller #0
[  671.715139][T10206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  671.725244][T10206] Call Trace:
[  671.728540][T10206]  <TASK>
[  671.731513][T10206]  dump_stack_lvl+0x16c/0x230
[  671.736220][T10206]  ? load_image+0x3b0/0x3b0
[  671.740766][T10206]  ? show_regs_print_info+0x20/0x20
[  671.746000][T10206]  ? print_circular_bug+0x12b/0x1a0
[  671.751227][T10206]  check_noncircular+0x2bd/0x3c0
[  671.756223][T10206]  ? print_deadlock_bug+0x5d0/0x5d0
[  671.761441][T10206]  ? lockdep_lock+0xe0/0x220
[  671.766253][T10206]  ? _find_first_zero_bit+0xd3/0x100
[  671.771557][T10206]  __lock_acquire+0x2ddb/0x7c80
[  671.776436][T10206]  ? ocfs2_get_system_file_inode+0x1e3/0x7b0
[  671.782443][T10206]  ? __lock_acquire+0x7c80/0x7c80
[  671.787490][T10206]  ? verify_lock_unused+0x140/0x140
[  671.792718][T10206]  ? __mutex_unlock_slowpath+0x1a2/0x6a0
[  671.798376][T10206]  ? do_raw_spin_lock+0x121/0x2c0
[  671.803511][T10206]  ? mutex_unlock+0x10/0x10
[  671.808067][T10206]  lock_acquire+0x197/0x410
[  671.812589][T10206]  ? ocfs2_reserve_local_alloc_bits+0x126/0x24b0
[  671.819116][T10206]  ? ocfs2_get_system_file_inode+0x1f1/0x7b0
[  671.825116][T10206]  ? __might_sleep+0xe0/0xe0
[  671.829723][T10206]  ? read_lock_is_recursive+0x20/0x20
[  671.835228][T10206]  ? ocfs2_fast_symlink_read_folio+0x530/0x530
[  671.841405][T10206]  ? lockdep_unlock+0x137/0x2d0
[  671.846273][T10206]  ? lockdep_lock+0x220/0x220
[  671.850987][T10206]  down_write+0x97/0x1f0
[  671.855254][T10206]  ? ocfs2_reserve_local_alloc_bits+0x126/0x24b0
[  671.861692][T10206]  ? down_read_killable+0x340/0x340
[  671.866909][T10206]  ? __lock_acquire+0x2b6b/0x7c80
[  671.871961][T10206]  ocfs2_reserve_local_alloc_bits+0x126/0x24b0
[  671.878269][T10206]  ? stack_trace_save+0x9c/0xe0
[  671.883169][T10206]  ? verify_lock_unused+0x140/0x140
[  671.888482][T10206]  ? ocfs2_complete_local_alloc_recovery+0x540/0x540
[  671.895180][T10206]  ? kasan_set_track+0x5f/0x70
[  671.899961][T10206]  ? ocfs2_file_write_iter+0x1582/0x1d00
[  671.905636][T10206]  ? vfs_write+0x43b/0x940
[  671.910103][T10206]  ? __x64_sys_pwrite64+0x195/0x220
[  671.915344][T10206]  ? do_syscall_64+0x55/0xb0
[  671.919972][T10206]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  671.926267][T10206]  ? ocfs2_alloc_should_use_local+0x13e/0x2d0
[  671.932368][T10206]  ? __lock_acquire+0x7c80/0x7c80
[  671.937415][T10206]  ? do_raw_spin_lock+0x121/0x2c0
[  671.942458][T10206]  ? __rwlock_init+0x150/0x150
[  671.947260][T10206]  ? do_raw_spin_unlock+0x121/0x230
[  671.952587][T10206]  ? _raw_spin_unlock+0x28/0x40
[  671.957473][T10206]  ? ocfs2_alloc_should_use_local+0x13e/0x2d0
[  671.963563][T10206]  ? ocfs2_reserve_clusters_with_limit+0x16c/0xba0
[  671.970077][T10206]  ocfs2_reserve_clusters_with_limit+0x1bf/0xba0
[  671.976424][T10206]  ? ocfs2_reserve_clusters+0x30/0x30
[  671.981807][T10206]  ? ocfs2_read_inode_block+0x11e/0x180
[  671.987457][T10206]  ? rcu_is_watching+0x15/0xb0
[  671.992242][T10206]  ? ocfs2_num_free_extents+0x2e2/0x5a0
[  671.997814][T10206]  ? ocfs2_validate_extent_block+0x550/0x550
[  672.003815][T10206]  ? ocfs2_get_clusters+0x2b4/0xa70
[  672.009145][T10206]  ocfs2_lock_allocators+0x2fb/0x5b0
[  672.014540][T10206]  ? _ocfs2_clear_bit+0x40/0x40
[  672.019407][T10206]  ? do_raw_spin_lock+0x121/0x2c0
[  672.024459][T10206]  ? __rwlock_init+0x150/0x150
[  672.029240][T10206]  ? ocfs2_write_begin_nolock+0xf3a/0x4190
[  672.035063][T10206]  ocfs2_write_begin_nolock+0x225a/0x4190
[  672.040820][T10206]  ? ocfs2_size_fits_inline_data+0x90/0x90
[  672.046663][T10206]  ? verify_lock_unused+0x140/0x140
[  672.051918][T10206]  ? ocfs2_initialize_journal_triggers+0x540/0x540
[  672.058465][T10206]  ? __might_sleep+0xe0/0xe0
[  672.063084][T10206]  ? read_lock_is_recursive+0x20/0x20
[  672.068475][T10206]  ? __mod_timer+0x984/0xdb0
[  672.073114][T10206]  ? __lock_acquire+0x7c80/0x7c80
[  672.078200][T10206]  ? down_write+0x162/0x1f0
[  672.082743][T10206]  ? down_read_killable+0x340/0x340
[  672.087984][T10206]  ocfs2_write_begin+0x1bc/0x310
[  672.093034][T10206]  ? enqueue_timer+0x225/0x530
[  672.098685][T10206]  ? ocfs2_readahead+0x1a0/0x1a0
[  672.103645][T10206]  ? fault_in_readable+0x11c/0x160
[  672.108784][T10206]  ? fault_in_iov_iter_readable+0xbf/0x2e0
[  672.114618][T10206]  generic_perform_write+0x2fb/0x5b0
[  672.119937][T10206]  ? generic_file_direct_write+0x3e0/0x3e0
[  672.125852][T10206]  ? __mnt_drop_write_file+0xc3/0x100
[  672.131266][T10206]  ? __generic_file_write_iter+0xf7/0x230
[  672.137005][T10206]  ? ocfs2_file_write_iter+0x1559/0x1d00
[  672.142688][T10206]  ocfs2_file_write_iter+0x1582/0x1d00
[  672.148272][T10206]  ? ocfs2_file_read_iter+0xa30/0xa30
[  672.153716][T10206]  ? rcu_read_lock_any_held+0xb4/0x120
[  672.159221][T10206]  ? rcu_read_lock_bh_held+0xe0/0xe0
[  672.164527][T10206]  vfs_write+0x43b/0x940
[  672.168800][T10206]  ? file_end_write+0x250/0x250
[  672.173677][T10206]  ? __fget_files+0x44a/0x4d0
[  672.178392][T10206]  ? __fdget+0x180/0x210
[  672.182657][T10206]  ? __x64_sys_pwrite64+0xf0/0x220
[  672.187785][T10206]  __x64_sys_pwrite64+0x195/0x220
[  672.192828][T10206]  ? ksys_pwrite64+0x1c0/0x1c0
[  672.197717][T10206]  ? lockdep_hardirqs_on+0x98/0x150
[  672.202947][T10206]  do_syscall_64+0x55/0xb0
[  672.207392][T10206]  ? clear_bhb_loop+0x40/0x90
[  672.212082][T10206]  ? clear_bhb_loop+0x40/0x90
[  672.217034][T10206]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  672.222957][T10206] RIP: 0033:0x7f378c58e929
[  672.227390][T10206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  672.247025][T10206] RSP: 002b:00007f378d499038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012
[  672.255451][T10206] RAX: ffffffffffffffda RBX: 00007f378c7b5fa0 RCX: 00007f378c58e929
[  672.263435][T10206] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000004
[  672.271436][T10206] RBP: 00007f378c610b39 R08: 0000000000000000 R09: 0000000000000000
[  672.279421][T10206] R10: 000000000004ded0 R11: 0000000000000246 R12: 0000000000000000
[  672.287407][T10206] R13: 0000000000000000 R14: 00007f378c7b5fa0 R15: 00007ffc25de72b8
[  672.295404][T10206]  </TASK>
[  672.299709][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  672.324689][T10224] (syz.3.841,10224,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  672.344484][T10224] (syz.3.841,10224,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  672.373817][T10224] JBD2: Ignoring recovery information on journal
[  672.413097][T10224] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  672.427055][ T5773] ocfs2: Unmounting device (7,0) on (node local)
[  672.727920][ T5777] ocfs2: Unmounting device (7,3) on (node local)
[  675.396037][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  679.715965][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  679.724905][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  679.733263][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog