last executing test programs:

20.769132945s ago: executing program 1 (id=1430):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@perf_event={0x4}}, 0x18)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
r3 = eventfd(0xc)
ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3)
ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3})
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000c40)={0x1, 0x0, [{0x0, 0xf3, &(0x7f00000008c0)=""/243}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0xffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x45a}, 0x94)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)

16.411429088s ago: executing program 4 (id=1441):
socket(0x23, 0x5, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
close(r0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00a8bc", 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0xa}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)
ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$PPPIOCSMRU1(r2, 0x4020744f, &(0x7f0000000000)=0x10000)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400), 0x1a01, 0x0)
ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246)
write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0xfce1)

14.661012521s ago: executing program 4 (id=1445):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'veth0_to_team\x00', <r5=>0x0})
sendto$packet(r4, &(0x7f0000000180)="0b041400e0ffe2ff02004788001ca13bb100000208007f604803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14)

14.482407555s ago: executing program 1 (id=1447):
socket(0xa, 0x3, 0x3a)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_mount_image$erofs(&(0x7f00000003c0), &(0x7f00000002c0)='./file0\x00', 0x88, &(0x7f0000000240)=ANY=[], 0x0, 0x17d, &(0x7f0000001ac0)="$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")
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
socket(0x40000000015, 0x5, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = syz_open_dev$cec(&(0x7f00000000c0), 0xffffffffffffffff, 0x8802)
ioctl$CEC_DQEVENT(r1, 0xc0506107, 0x0)
timer_create(0x0, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r2, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x200000000009, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0)

13.009290218s ago: executing program 1 (id=1450):
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e9"], 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x3, "1e9eaaf2"}]}}, 0x0}, 0x0)

12.982272399s ago: executing program 4 (id=1451):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x3}}]}, 0x38}}, 0x4008000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

11.164641648s ago: executing program 2 (id=1457):
r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000100)={0x20, 0x17, 0x1, "a6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000005c0)={0x1c, &(0x7f00000004c0)=ANY=[], 0x0, 0x0})

9.573089939s ago: executing program 1 (id=1459):
io_uring_setup(0x2624, 0x0)
syz_open_procfs(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000002100)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
semop(0x0, &(0x7f0000001240)=[{0x4, 0xa, 0x800}], 0x1)
semctl$SETVAL(0x0, 0x4, 0x10, 0x0)
eventfd(0x4)
bind$isdn_base(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_open_dev$dri(0x0, 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[<r2=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000003c0)={r2, <r3=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23c, 0x0, 0x0, "000071849800000000deff00000000e6ffffff00"}})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x41)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x4044000)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, &(0x7f0000002100)=ANY=[])
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
lstat(&(0x7f0000000300)='./file0\x00', 0x0)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006300)="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", 0x2000, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
utime(&(0x7f0000000100)='./file0\x00', 0x0)
sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, 0x0, 0x8840)

9.559823971s ago: executing program 4 (id=1460):
r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0)
read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$netlink(0x10, 0x3, 0x0)
shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
lseek(r3, 0x1000000, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file0\x00', 0x4a300, 0xcd)

9.096614336s ago: executing program 4 (id=1462):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r0 = userfaultfd(0x1)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000))
read(r0, &(0x7f0000000300)=""/239, 0xef)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
close(r0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x12, r1, 0x8000000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000)
socket$netlink(0x10, 0x3, 0x15)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000280)=0x3, 0x200000, 0x4)

8.818898087s ago: executing program 3 (id=1463):
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d3120900"], 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x3, "1e9eaaf2"}]}}, 0x0}, 0x0)

7.838979662s ago: executing program 3 (id=1465):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f00000002c0), 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn'])
chdir(&(0x7f0000000340)='./file0\x00')
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
r3 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f00000001200"], 0xf0}}, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
get_mempolicy(0x0, &(0x7f0000000300), 0x400, &(0x7f0000ffb000/0x4000)=nil, 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x80800, 0x12d)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000340)={0x2000, r4}, 0x0)
landlock_restrict_self(0xffffffffffffffff, 0x0)

6.520299632s ago: executing program 3 (id=1468):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
syz_open_dev$dri(0x0, 0x1ff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40)

6.41865671s ago: executing program 2 (id=1470):
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e9"], 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x3, "1e9eaaf2"}]}}, 0x0}, 0x0)

5.347634252s ago: executing program 3 (id=1472):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
epoll_create(0x281)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6)
add_key(&(0x7f0000000140)='encrypted\x00', 0x0, 0x0, 0x0, 0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

4.393075554s ago: executing program 0 (id=1474):
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20040000)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
timer_create(0x0, 0x0, 0x0)
r1 = socket$kcm(0x29, 0x2, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef42d430f6296b72a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed40000000022278d00031e5388ee5c867ddd58211d6ece3ccb0cd2b6d3cffd962867a3a2f624f992daa94a6a556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409e011f1264d43f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7000026a4e739c60f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf3f704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eedd9068ca1457870eb30d219e23ccc8e06dddeb61799257ab5000013c86ba99523d61a00000000c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb8629aeec90e6d1857da822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae200f279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f34a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be10ba7dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2db484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b00ffffff7f000000000801f71d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cf0d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67856ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e2b8e7370baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b09000000d31df213c802d74797056fd3bca8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221fff0f0000705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f14fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008f3a20b49fe7636806867283e35cff8d00e7b251bab3cf6377a24f8e8d4bda7503674bc94bf7f4d2fa6f25944bf0a186436d9f6831995976328a1fdc78492c65c1434855dc35c3cf7cf9610c5387794443c99b304799114132362849c3fa85d6379729ff9094933db0cfbe8887c50b87e1469fdf454cef4cbc5f7bf384000000000000a4e8c1a25f47c440144a9776be6cb40aafdb9d3cc8f6a6050974e1c4000000000000008b753f4e1bef9556efcc087a99dbf231167013a4b2eaf6338a0b100c98a331dffc09"], &(0x7f0000000140)='GPL\x00'}, 0x48)
r3 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r3, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x20000811)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r3, r2})
timer_settime(0x0, 0x1, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20044080)

4.374747326s ago: executing program 3 (id=1475):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18)
prlimit64(0x0, 0xe, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80000)
fcntl$setpipe(r2, 0x407, 0x0)
write$FUSE_INIT(r2, &(0x7f0000000340)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x28, 0xd19e, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10}}, 0x50)
vmsplice(r2, &(0x7f0000000140)=[{0x0}], 0x1, 0x0)
fcntl$setpipe(r2, 0x407, 0x2000000)
sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x2d0}, 0x1, 0x0, 0x0, 0x40408c1}, 0x40)
r3 = syz_open_dev$evdev(0x0, 0x2, 0x8a2b81)
write$char_usb(r3, 0x0, 0x0)
mkdir(0x0, 0x0)
syz_mount_image$erofs(&(0x7f0000000440), &(0x7f0000000200)='./file0\x00', 0x810410, &(0x7f0000000480)=ANY=[], 0x1, 0x1e6, &(0x7f00000006c0)="$eJzsmbGLE0EUxr+ZzW3uDhFsbC0MeKK32d1TuCZIBHshKtoZzCrRjZFkhSQgGGxsLC0EW/8BC4tUFnZ2tlqoIFiY0k4YmdnJ7rCblSyJNr4f3Lsvb2bem3mZfYEEBEH8t3z98vPzs4uHV84COIIaqtr/3UrncGP+pxcPzzxvXHr5+uOrd/ePPppl41VL5pdp3jYtRNjRHiHM8ZqyrCJ3UdO+q+A4vSTWTXBc0zoAww2t7xq6v0gTBs6tfti53Q0DVxpPGl+aAzNmBcB8ytABsK12JwQzxofjyb12GAaDrNgSizy5obLiT/VT+2tyNJLqCSHfr+tPn0zZ43Sea9TPA4en9QEYWlofogrHcdKSGOfnLI1vrXL+jQlLChtA+eXH9svluqCEvGx/7zhriJ1NXCYSAct65N1OPMfns/f5Vd/Wz87+2SOTEapxAcgNfdiVgi0bWknY+kTL5thpf5IP1CmjP1WUN6Ye9R7Uh+PJfrfXvhMsvOdc97xfV40otrm+9yvpf9uqP+0a8bcKeqXNbIzaUTTwRkA08JLXfmyNjtt60/+h1nDV/zj2TsYxZLHU0Qo+6Jj+4+q/VHtWwXYIgiAIgiAIgiAIgiAIgiBKcgJMfQuqf6gSBfiX1ezfAQAA///GNllf")
open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), 0xffffffffffffffff)

4.239031746s ago: executing program 0 (id=1476):
socket$inet_sctp(0x2, 0x1, 0x84)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r3=>0x0})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000080)={0x24, r2, 0x1, 0x70bd27, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0)

3.372531923s ago: executing program 2 (id=1477):
io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x1, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$inet(0x2, 0x4000000805, 0x0)
setsockopt$MRT_DEL_VIF(r1, 0x0, 0xcb, 0x0, 0x0)
r2 = getpid()
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000340)={0xfffe, 0x6}, 0x4)
setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x0, &(0x7f0000000180)}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r4 = syz_pidfd_open(r2, 0x0)
setns(r4, 0x24020000)
syz_clone3(&(0x7f00000006c0)={0x192142100, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, 0x0}, 0x58)

3.280011379s ago: executing program 0 (id=1478):
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$UHID_INPUT(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
r6 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341)
ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)

3.029151708s ago: executing program 1 (id=1479):
remap_file_pages(&(0x7f0000d63000/0x1000)=nil, 0x1000, 0x0, 0xfffffffffffffffd, 0x10000)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r1}, 0x18)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8)
write$cgroup_int(r3, &(0x7f00000001c0), 0xfffffdef)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
unshare(0x2000400)
r4 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_opts(r4, 0x0, 0x4, 0x0, 0x0)
unshare(0x10000)
socket$nl_generic(0x10, 0x3, 0x10)
fchownat(0xffffffffffffffff, 0x0, 0xee00, 0x0, 0x1000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
socket$nl_route(0x10, 0x3, 0x0)

2.016736706s ago: executing program 2 (id=1480):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0xfdef)
inotify_init()
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$binfmt_script(r5, 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x28, r7, 0xc4fc9e906872338b, 0x20, 0x200, {{0x15}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004080}, 0x0)

2.016070376s ago: executing program 0 (id=1481):
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
r1 = open(&(0x7f0000000100)='./file0\x00', 0x119000, 0x3c)
mknodat$loop(r1, &(0x7f0000001600)='./file1\x00', 0xc000, 0x0)
chdir(&(0x7f00000003c0)='./bus\x00')
link(&(0x7f0000000140)='./file1\x00', &(0x7f0000000280)='./bus\x00')
linkat(r1, &(0x7f0000000200)='./file1\x00', r1, &(0x7f0000000240)='./file0\x00', 0x0)
rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus\x00')
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(r2, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000240))

2.015414766s ago: executing program 3 (id=1482):
prlimit64(0x0, 0xe, 0x0, 0x0)
syz_open_dev$dri(0x0, 0x1ff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40)

1.068528428s ago: executing program 2 (id=1483):
socket$nl_route(0x10, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x24040832}, 0xc094)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r5 = dup2(r4, r4)
ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10})
ioctl$BLKTRACESTART(r4, 0x1274, 0x0)
ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0)

1.020183242s ago: executing program 0 (id=1484):
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e9"], 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x3, "1e9eaaf2"}]}}, 0x0}, 0x0)

753.082512ms ago: executing program 1 (id=1485):
syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0)
syz_io_uring_setup(0x238, 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x656a, 0x100, 0x2, 0xbfdffffc}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r0, 0x75fa, 0xe475, 0x0, 0x0, 0x0)
r3 = socket(0x10, 0x803, 0x0)
r4 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0)
r5 = userfaultfd(0x1)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1})
syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f0000000000)="1c681411f7a496c0dacc6a3c24465b016f64b4c00b5f7c691cb24cb8000000001a0000200000000000201500", 0x0, 0x48)
readv(r5, 0x0, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f0000000140)="e403402e6d69aa1cef9ef9a6a8a811114a73730561f86ec24fbd20a031516af10645443ba1ea91a31e618c729fb36241fc852cf7795cc3c0d78ae4de1e5110eafba42f764d048680", 0x0, 0x48)
ioctl$UFFDIO_WAKE(r5, 0x8010aa02, &(0x7f00000002c0)={&(0x7f0000ffa000/0x4000)=nil, 0x4000})
getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$nl_route(r3, 0x0, 0x24008050)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x1e4011, 0x0)

554.923118ms ago: executing program 2 (id=1486):
syz_mount_image$hfs(&(0x7f0000000300), &(0x7f0000000880)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc10, &(0x7f0000000c80)=ANY=[@ANYRES8=0x0, @ANYRESOCT, @ANYRES8, @ANYBLOB="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", @ANYRES32, @ANYRES64, @ANYRES8], 0x3, 0x300, &(0x7f0000000980)="$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")
open(&(0x7f00000000c0)='./bus\x00', 0x68042, 0x62)
syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1200800, &(0x7f00000008c0)=ANY=[@ANYBLOB="706172743d3078303030303030303030303030303031302c6e6c733d69736f383835392d332c747970653d78fa42012c666f7263652c6769643d", @ANYRESHEX=0x0, @ANYBLOB="00000000f5", @ANYRESHEX=0x0, @ANYBLOB], 0x3, 0x6ae, &(0x7f0000000e40)="$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")
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
socket$igmp(0x2, 0x3, 0x2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0)
ftruncate(r3, 0x2007ffb)

367.020402ms ago: executing program 4 (id=1487):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_mount_image$xfs(&(0x7f0000000500), &(0x7f0000009640)='./file0\x00', 0x208800, &(0x7f00000006c0)={[{@nogrpid}, {@prjquota}, {@ikeep}, {@inode32}]}, 0x4, 0x9606, &(0x7f0000012cc0)="$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")
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
rename(0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0xb, 0x0, {{0x3, 0x3, 0x7ffc, 0x2, 0x5, 0x40, {0x800000001, 0x180, 0x20ff, 0x9, 0x89, 0xd614, 0x5, 0x80000041, 0xfffffffe, 0x6000, 0x2, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x1a}}}, 0xa0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000480), 0x7f03)
r1 = open(&(0x7f00000000c0)='./bus\x00', 0x68042, 0x62)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0)
r3 = add_key$keyring(0x0, &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd)
add_key$keyring(&(0x7f00000000c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r3)
ftruncate(r2, 0x2007ffb)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r1, r2, 0x0, 0x1000000201005)

0s ago: executing program 0 (id=1488):
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r2, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x3, "1e9eaaf2"}]}}, 0x0}, 0x0)

kernel console output (not intermixed with test programs):

[  257.994951][ T6022] EXT4-fs: Ignoring removed i_version option
[  258.092689][ T6022] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:477: comm syz.3.387: Invalid block bitmap block 0 in block_group 0
[  258.890954][ T6022] __quota_error: 20 callbacks suppressed
[  258.891112][ T6022] Quota error (device loop3): write_blk: dquota write failed
[  259.042934][ T6022] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  259.193705][ T6022] EXT4-fs error (device loop3): ext4_acquire_dquot:6814: comm syz.3.387: Failed to acquire dquot type 0
[  259.206160][ T6022] EXT4-fs error (device loop3): ext4_free_blocks:6210: comm syz.3.387: Freeing blocks not in datazone - block = 0, count = 4096
[  259.233501][ T6022] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.387: Invalid inode bitmap blk 0 in block_group 0
[  259.259334][ T6034] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  259.305088][ T4443] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-8
[  259.334292][ T6022] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem
[  259.343380][ T6022] EXT4-fs (loop3): 1 orphan inode deleted
[  259.349857][ T4443] EXT4-fs error (device loop3): ext4_release_dquot:6850: comm kworker/u4:11: Failed to release dquot type 0
[  259.355066][ T6022] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  259.522502][ T4275] EXT4-fs (loop3): unmounting filesystem.
[  259.615883][ T6044] loop4: detected capacity change from 0 to 16
[  259.707213][ T6044] erofs: (device loop4): mounted with root inode @ nid 36.
[  260.626280][ T1274] ieee802154 phy0 wpan0: encryption failed: -22
[  260.632755][ T1274] ieee802154 phy1 wpan1: encryption failed: -22
[  261.234841][   T26] audit: type=1800 audit(1754640482.792:43): pid=6056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.393" name="file1" dev="loop4" ino=86 res=0 errno=0
[  264.998332][ T6080] mmap: syz.1.399 (6080) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  265.701855][ T6081] xt_CT: No such helper "pptp"
[  266.097807][ T6086] lo speed is unknown, defaulting to 1000
[  266.103774][ T6086] lo speed is unknown, defaulting to 1000
[  266.110072][ T6086] lo speed is unknown, defaulting to 1000
[  266.127447][ T6086] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  266.146980][ T6086] lo speed is unknown, defaulting to 1000
[  266.154003][ T6086] lo speed is unknown, defaulting to 1000
[  266.161041][ T6086] lo speed is unknown, defaulting to 1000
[  266.167496][ T6086] lo speed is unknown, defaulting to 1000
[  266.173663][ T6086] lo speed is unknown, defaulting to 1000
[  266.493112][ T6092] loop4: detected capacity change from 0 to 8
[  266.537324][ T6092] SQUASHFS error: xz decompression failed, data probably corrupt
[  266.546210][ T6092] SQUASHFS error: Failed to read block 0x108: -5
[  266.553239][ T6092] SQUASHFS error: Unable to read metadata cache entry [106]
[  266.561253][ T6092] SQUASHFS error: Unable to read inode 0x11f
[  270.532734][ T6121] lo speed is unknown, defaulting to 1000
[  271.384726][ T6126] smc: net device bond0 applied user defined pnetid SYZ2
[  271.543559][ T6126] bridge0: port 2(bridge_slave_1) entered disabled state
[  271.552981][ T6126] bridge0: port 1(bridge_slave_0) entered disabled state
[  272.113032][ T6132] netlink: 76 bytes leftover after parsing attributes in process `syz.1.411'.
[  272.280175][ T6133] sctp_transport_update_pmtu: 54 callbacks suppressed
[  272.280201][ T6133] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  272.298691][ T6133] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  272.309778][ T6133] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  272.320896][ T6133] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  272.360071][ T6133] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  272.371679][ T6133] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  272.383182][ T6133] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  272.395158][ T6133] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  272.407104][ T6133] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  272.418455][ T6133] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  273.072778][   T26] audit: type=1326 audit(2000000007.820:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6112 comm="syz.0.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f7d8ebe9 code=0x7fc00000
[  273.273757][ T6147] loop1: detected capacity change from 0 to 256
[  273.551591][ T6147] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d)
[  273.747954][ T6147] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  275.971698][ T6166] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  277.427154][ T6175] overlayfs: failed to get index nlink (file1/bus, err=-61)
[  280.047749][ T6192] loop2: detected capacity change from 0 to 256
[  280.114751][ T6192] FAT-fs (loop2): Unrecognized mount option "ÿÿÿÿÿÿÿÿ0x0000000000000000" or missing value
[  280.891019][ T6196] netlink: 244 bytes leftover after parsing attributes in process `syz.0.427'.
[  281.532709][ T6198] bridge0: port 3(vlan2) entered blocking state
[  281.539356][ T6198] bridge0: port 3(vlan2) entered disabled state
[  281.551435][ T6198] device vlan2 entered promiscuous mode
[  283.112145][ T6202] netlink: 16 bytes leftover after parsing attributes in process `syz.0.428'.
[  287.121845][ T6251] loop1: detected capacity change from 0 to 512
[  287.325206][ T6251] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  287.346806][ T6251] ext4 filesystem being mounted at /83/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  288.372976][ T6274] EXT4-fs error (device loop1): ext4_do_update_inode:5254: inode #2: comm syz.1.440: corrupted inode contents
[  291.437557][ T6274] EXT4-fs error (device loop1): ext4_dirty_inode:6119: inode #2: comm syz.1.440: mark_inode_dirty error
[  291.457919][ T6274] EXT4-fs error (device loop1): ext4_do_update_inode:5254: inode #2: comm syz.1.440: corrupted inode contents
[  291.476139][ T6274] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz.1.440: mark_inode_dirty error
[  291.962473][ T4263] EXT4-fs (loop1): unmounting filesystem.
[  292.067527][ T6293] overlayfs: failed to get index nlink (file1/bus, err=-61)
[  292.374594][ T4265] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  292.383512][ T4265] Bluetooth: hci3: Injecting HCI hardware error event
[  292.396839][ T4265] Bluetooth: hci3: hardware error 0x00
[  293.560114][ T6302] overlayfs: failed to clone upperpath
[  293.576012][ T6312] loop1: detected capacity change from 0 to 16
[  293.597367][ T6312] erofs: (device loop1): mounted with root inode @ nid 36.
[  294.454603][ T4265] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  296.278481][ T6342] kAFS: No cell specified
[  299.580664][ T6358] overlayfs: failed to get index nlink (file1/bus, err=-61)
[  301.827519][ T6366] siw: device registration error -23
[  305.389299][   T26] audit: type=1326 audit(2000000038.930:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6381 comm="syz.0.481" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f94f7d8ebe9 code=0x0
[  306.821966][ T6401] loop2: detected capacity change from 0 to 32768
[  308.344823][ T6418] xt_CT: No such helper "pptp"
[  308.538754][ T6424] overlayfs: failed to get index nlink (file1/bus, err=-61)
[  309.612296][ T6429] loop1: detected capacity change from 0 to 1024
[  309.656515][ T6429] hfsplus: unable to parse mount options
[  310.303872][ T6433] loop4: detected capacity change from 0 to 256
[  310.347513][ T6433] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d)
[  310.356642][ T5331] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  310.423539][ T6433] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  312.718877][ T6454] loop1: detected capacity change from 0 to 1024
[  312.734119][ T6454] hfsplus: unable to parse mount options
[  313.258227][ T5363] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  313.649660][ T6466] Device name cannot be null; rc = [-22]
[  315.064423][ T6467] process 'syz.1.490' launched '/dev/fd/-1' with NULL argv: empty string added
[  315.591489][ T6470] netlink: 8 bytes leftover after parsing attributes in process `syz.4.492'.
[  315.632211][ T6470] netlink: 12 bytes leftover after parsing attributes in process `syz.4.492'.
[  317.360962][   T26] audit: type=1326 audit(2000000009.220:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6479 comm="syz.0.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f7d8ebe9 code=0x7fc00000
[  317.403685][ T6488] loop2: detected capacity change from 0 to 128
[  317.503144][ T6488] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  317.523110][ T6488] ext4 filesystem being mounted at /96/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  318.222117][ T6503] loop1: detected capacity change from 0 to 64
[  318.368860][ T4264] EXT4-fs (loop2): unmounting filesystem.
[  319.136209][ T6506] netlink: 'syz.3.494': attribute type 8 has an invalid length.
[  319.152187][ T6506] netlink: 'syz.3.494': attribute type 10 has an invalid length.
[  319.160545][ T6506] netlink: 40 bytes leftover after parsing attributes in process `syz.3.494'.
[  319.193415][ T6506] batman_adv: batadv0: Adding interface: vlan1
[  321.421485][ T6506] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  321.492395][ T6506] batman_adv: batadv0: Interface activated: vlan1
[  321.711857][ T6522] device ipvlan2 entered promiscuous mode
[  321.749622][ T6522] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan2: link becomes ready
[  322.066903][ T1274] ieee802154 phy0 wpan0: encryption failed: -22
[  322.074038][ T1274] ieee802154 phy1 wpan1: encryption failed: -22
[  322.360620][ T6534] lo speed is unknown, defaulting to 1000
[  324.179053][   T26] audit: type=1326 audit(2000000016.030:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6542 comm="syz.0.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f7d8ebe9 code=0x7fc00000
[  324.250638][   T26] audit: type=1326 audit(2000000016.030:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6542 comm="syz.0.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f94f7d8ebe9 code=0x7fc00000
[  324.328773][   T26] audit: type=1326 audit(2000000016.030:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6542 comm="syz.0.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f7d8ebe9 code=0x7fc00000
[  324.640449][   T26] audit: type=1326 audit(2000000016.030:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6542 comm="syz.0.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f7d8ebe9 code=0x7fc00000
[  324.846934][   T26] audit: type=1326 audit(2000000016.030:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6542 comm="syz.0.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f7d8ebe9 code=0x7fc00000
[  324.846970][   T26] audit: type=1326 audit(2000000016.030:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6542 comm="syz.0.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f7d8ebe9 code=0x7fc00000
[  324.846997][   T26] audit: type=1326 audit(2000000016.030:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6542 comm="syz.0.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f7d8ebe9 code=0x7fc00000
[  324.847023][   T26] audit: type=1326 audit(2000000016.030:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6542 comm="syz.0.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f7d8ebe9 code=0x7fc00000
[  324.847050][   T26] audit: type=1326 audit(2000000016.030:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6542 comm="syz.0.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f7d8ebe9 code=0x7fc00000
[  324.847077][   T26] audit: type=1326 audit(2000000016.030:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6542 comm="syz.0.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f7d8ebe9 code=0x7fc00000
[  325.927278][ T6557] tty tty23: ldisc open failed (-12), clearing slot 22
[  327.131797][ T6573] overlayfs: failed to clone upperpath
[  327.564768][ T6575] netlink: 8 bytes leftover after parsing attributes in process `syz.0.526'.
[  330.689979][ T6610] netlink: 24 bytes leftover after parsing attributes in process `syz.0.525'.
[  330.766409][ T6613] loop2: detected capacity change from 0 to 8
[  330.810509][ T6613] squashfs image failed sanity check
[  330.871223][ T6614] netlink: 'syz.1.528': attribute type 29 has an invalid length.
[  330.879563][ T6614] netlink: 8 bytes leftover after parsing attributes in process `syz.1.528'.
[  330.890030][ T6614] netlink: 'syz.1.528': attribute type 29 has an invalid length.
[  330.898316][ T6614] netlink: 8 bytes leftover after parsing attributes in process `syz.1.528'.
[  332.418208][ T6606] fuse: Unknown parameter 'subj_type'
[  337.404120][   T14] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  337.557124][ T6645] loop1: detected capacity change from 0 to 128
[  337.605702][   T14] usb 3-1: config 0 has an invalid interface number: 238 but max is 0
[  337.613894][   T14] usb 3-1: config 0 has no interface number 0
[  337.694594][   T14] usb 3-1: config 0 interface 238 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  337.740281][   T14] usb 3-1: config 0 interface 238 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0
[  337.774567][   T14] usb 3-1: config 0 interface 238 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  337.964188][   T14] usb 3-1: config 0 interface 238 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0
[  337.966720][   T14] usb 3-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=76.6a
[  337.966747][   T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  337.966766][   T14] usb 3-1: Product: syz
[  337.966779][   T14] usb 3-1: Manufacturer: syz
[  337.966792][   T14] usb 3-1: SerialNumber: syz
[  338.124107][ T6651] binder: BINDER_SET_CONTEXT_MGR already set
[  338.124154][ T6651] binder: 6647:6651 ioctl 4018620d 200000000040 returned -16
[  338.164344][   T14] usb 3-1: config 0 descriptor??
[  338.304359][ T6655] netlink: 100 bytes leftover after parsing attributes in process `syz.3.541'.
[  338.314401][   T14] ni6501 3-1:0.238: driver 'ni6501' failed to auto-configure device.
[  339.662823][   T14] usb 3-1: USB disconnect, device number 5
[  339.760041][ T6650] tty tty29: ldisc open failed (-12), clearing slot 28
[  339.986913][ T6667] loop1: detected capacity change from 0 to 8192
[  340.465273][ T6674] loop4: detected capacity change from 0 to 32768
[  340.482612][ T6667] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  340.512170][ T6667] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal
[  340.522911][ T6667] REISERFS (device loop1): using ordered data mode
[  340.530222][ T6667] reiserfs: using flush barriers
[  340.554667][ T6667] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  340.572509][ T6674] JBD2: Ignoring recovery information on journal
[  340.574554][ T6667] REISERFS (device loop1): checking transaction log (loop1)
[  340.614926][   T14] usb 3-1: new full-speed USB device number 6 using dummy_hcd
[  340.616722][ T6677] loop3: detected capacity change from 0 to 64
[  340.643650][ T6674] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  340.731971][ T6667] REISERFS warning (device loop1): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore
[  340.750291][ T6677] hfs: get root inode failed
[  340.832184][   T14] usb 3-1: config 0 has an invalid interface number: 6 but max is 0
[  340.846260][   T14] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  340.868877][   T14] usb 3-1: config 0 has no interface number 0
[  340.889175][   T14] usb 3-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  340.920770][   T14] usb 3-1: config 0 interface 6 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  340.974821][   T14] usb 3-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12
[  340.987773][   T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  341.020452][   T14] usb 3-1: Product: syz
[  341.030582][   T14] usb 3-1: Manufacturer: syz
[  341.044096][   T14] usb 3-1: SerialNumber: syz
[  341.062305][   T14] usb 3-1: config 0 descriptor??
[  341.084389][ T6668] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  341.103224][ T6668] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  341.122203][ T6688] loop1: detected capacity change from 0 to 512
[  341.136801][ T6688] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[  341.145257][   T14] comedi comedi5: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'.
[  341.168930][ T6688] EXT4-fs (loop1): orphan cleanup on readonly fs
[  341.177982][ T6688] EXT4-fs error (device loop1): mb_free_blocks:1815: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt.
[  341.205407][ T6688] EXT4-fs error (device loop1): ext4_do_update_inode:5254: inode #11: comm syz.1.552: corrupted inode contents
[  341.225570][ T6688] EXT4-fs error (device loop1): ext4_dirty_inode:6119: inode #11: comm syz.1.552: mark_inode_dirty error
[  341.261167][ T4261] ocfs2: Unmounting device (7,4) on (node local)
[  341.264587][  T127] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  341.308708][ T6688] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.552: invalid indirect mapped block 327680 (level 0)
[  341.343525][ T6688] EXT4-fs error (device loop1): ext4_do_update_inode:5254: inode #11: comm syz.1.552: corrupted inode contents
[  341.363705][ T4581] usb 3-1: USB disconnect, device number 6
[  341.424234][ T6688] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem
[  341.453685][ T6688] EXT4-fs error (device loop1): ext4_do_update_inode:5254: inode #11: comm syz.1.552: corrupted inode contents
[  341.464513][  T127] usb 4-1: Using ep0 maxpacket: 8
[  341.474571][ T6688] EXT4-fs error (device loop1): ext4_truncate:4312: inode #11: comm syz.1.552: mark_inode_dirty error
[  341.477371][  T127] usb 4-1: config 162 has an invalid interface number: 97 but max is 0
[  341.498312][ T6688] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem
[  341.513418][  T127] usb 4-1: config 162 has no interface number 0
[  341.520724][  T127] usb 4-1: config 162 interface 97 has no altsetting 0
[  341.529773][ T6688] EXT4-fs (loop1): 1 truncate cleaned up
[  341.537823][ T6688] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  341.548153][  T127] usb 4-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=e1.3b
[  341.584514][  T127] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  341.592640][  T127] usb 4-1: Product: syz
[  341.622309][  T127] usb 4-1: Manufacturer: syz
[  341.658325][  T127] usb 4-1: SerialNumber: syz
[  341.703237][ T4263] EXT4-fs (loop1): unmounting filesystem.
[  342.141855][ T6700] loop4: detected capacity change from 0 to 1024
[  342.149208][ T6700] hfsplus: unable to parse mount options
[  342.250055][  T127] metro_usb 4-1:162.97: interrupt-out endpoint missing
[  342.311927][  T127] usb 4-1: USB disconnect, device number 8
[  342.493323][ T6703] binder: BINDER_SET_CONTEXT_MGR already set
[  342.500682][ T6703] binder: 6701:6703 ioctl 4018620d 200000000040 returned -16
[  343.045660][ T6708] loop2: detected capacity change from 0 to 512
[  343.112494][ T6713] loop3: detected capacity change from 0 to 256
[  343.119625][ T6710] loop4: detected capacity change from 0 to 128
[  343.172093][ T6710] hpfs: Bad magic ... probably not HPFS
[  343.303620][ T6715] loop2: detected capacity change from 0 to 8
[  343.467632][ T6715] SQUASHFS error: xz decompression failed, data probably corrupt
[  343.488996][ T6715] SQUASHFS error: Failed to read block 0x108: -5
[  343.520873][ T6715] SQUASHFS error: Unable to read metadata cache entry [106]
[  343.588505][ T6715] SQUASHFS error: Unable to read inode 0x11f
[  344.483700][ T4265] Bluetooth: hci2: Malformed HCI Event: 0x22
[  345.253302][ T6733] loop4: detected capacity change from 0 to 4096
[  345.503646][ T6733] ntfs: volume version 3.1.
[  345.686043][ T6739] netlink: 8 bytes leftover after parsing attributes in process `syz.2.570'.
[  345.731982][ T6739] netlink: 12 bytes leftover after parsing attributes in process `syz.2.570'.
[  345.955570][ T6744] loop1: detected capacity change from 0 to 4096
[  345.983695][ T6744] __ntfs_error: 56 callbacks suppressed
[  345.983711][ T6744] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match.  Run ntfsfix or chkdsk.
[  346.014709][ T6744] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  346.029595][ T6744] ntfs: (device loop1): ntfs_attr_find(): Inode is corrupt.  Run chkdsk.
[  346.042587][ T6744] ntfs: (device loop1): ntfs_read_locked_attr_inode(): Failed with error code -5 while reading attribute inode (mft_no 0x0, type 0xb0, name_len 0).  Marking corrupt inode and base inode 0x0 as bad.  Run chkdsk.
[  346.064259][ T6744] ntfs: (device loop1): load_system_files(): Failed to load $MFT/$BITMAP attribute.
[  346.075587][ T6744] ntfs: (device loop1): ntfs_fill_super(): Failed to load system files.
[  346.147980][   T14] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  346.229726][ T6754] loop2: detected capacity change from 0 to 4096
[  346.300037][ T6754] ntfs3: loop2: try to read out of volume at offset 0x3fffffc0c00
[  346.368958][   T14] usb 5-1: Using ep0 maxpacket: 16
[  346.374508][ T6754] ntfs3: loop2: try to read out of volume at offset 0x3fffffc0c00
[  346.382365][ T6754] ntfs3: loop2: try to read out of volume at offset 0x3fffffc0c00
[  346.402813][   T14] usb 5-1: New USB device found, idVendor=05ac, idProduct=0246, bcdDevice=a1.1d
[  346.441644][   T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  346.457368][ T6754] ntfs3: loop2: try to read out of volume at offset 0x3fffffc0c00
[  346.477500][ T6741] loop3: detected capacity change from 0 to 32768
[  346.489860][ T6754] ntfs3: loop2: try to read out of volume at offset 0x3fffffc1c00
[  346.500123][ T6754] ntfs3: loop2: try to read out of volume at offset 0x3fffffc2c00
[  346.510688][ T6741] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 0 transid 8 /dev/loop3 scanned by syz.3.571 (6741)
[  346.531610][   T14] usb 5-1: Product: syz
[  346.898248][ T6759] lo speed is unknown, defaulting to 1000
[  347.121172][ T6754] ntfs3: loop2: try to read out of volume at offset 0x3fffffc4c00
[  347.168697][   T14] usb 5-1: Manufacturer: syz
[  347.173408][   T14] usb 5-1: SerialNumber: syz
[  347.176922][ T6754] ntfs3: loop2: try to read out of volume at offset 0x3fffffc8c00
[  347.187096][   T14] usb 5-1: config 0 descriptor??
[  347.204248][ T6754] ntfs3: loop2: try to read out of volume at offset 0x3fffffd0c00
[  347.233908][   T14] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input13
[  347.262349][ T6754] ntfs3: loop2: try to read out of volume at offset 0x3fffffe0c00
[  347.321311][ T5331] udevd[5331]: incorrect btrfs checksum on /dev/loop3
[  348.297038][ T3622] bcm5974 5-1:0.0: could not read from device
[  349.132496][  T127] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  349.232884][ T6770] overlayfs: failed to get index nlink (file1/bus, err=-61)
[  350.054200][   T14] usb 5-1: USB disconnect, device number 2
[  350.234372][  T127] usb 4-1: device descriptor read/64, error -71
[  350.408343][   T26] audit: type=1326 audit(2000000042.270:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6763 comm="syz.3.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f208fb8ebe9 code=0x7fc00000
[  350.504925][  T127] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  350.644425][   T14] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  351.184264][  T127] usb 4-1: device descriptor read/64, error -71
[  352.337485][  T127] usb usb4-port1: attempt power cycle
[  352.370821][   T14] usb 5-1: Using ep0 maxpacket: 32
[  352.607044][   T14] usb 5-1: config 0 has an invalid interface number: 67 but max is 0
[  352.745588][ T6780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.582'.
[  352.761961][   T14] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  352.773436][   T14] usb 5-1: config 0 has no interface number 0
[  352.780725][   T14] usb 5-1: config 0 interface 67 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  352.860861][   T14] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  352.872552][   T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  352.892844][   T14] usb 5-1: Product: syz
[  352.926352][   T14] usb 5-1: Manufacturer: syz
[  352.930988][   T14] usb 5-1: SerialNumber: syz
[  352.941210][   T14] usb 5-1: config 0 descriptor??
[  352.953471][   T14] smsc95xx v2.0.0
[  352.960295][   T14] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  352.984472][  T127] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  352.984857][   T14] smsc95xx: probe of 5-1:0.67 failed with error -22
[  353.028093][  T127] usb 4-1: device descriptor read/8, error -71
[  353.152771][ T4612] usb 5-1: USB disconnect, device number 3
[  353.253456][ T6811] loop2: detected capacity change from 0 to 128
[  353.314826][  T127] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  353.323317][ T6811] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  353.341047][ T6811] ext4 filesystem being mounted at /114/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  353.479638][  T127] usb 4-1: device descriptor read/8, error -71
[  353.610385][  T127] usb usb4-port1: unable to enumerate USB device
[  354.228024][   T26] audit: type=1326 audit(2000000046.080:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6787 comm="syz.3.587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f208fb8ebe9 code=0x7fc00000
[  354.458733][ T6821] CIFS: Unable to determine destination address
[  354.467240][ T6821] xt_nat: multiple ranges no longer supported
[  354.631190][ T6811] fscrypt: Error allocating hmac(sha512): -2
[  354.889160][ T6828] overlayfs: failed to resolve './file1': -2
[  355.709014][ T4264] EXT4-fs (loop2): unmounting filesystem.
[  355.847132][ T6836] loop2: detected capacity change from 0 to 764
[  355.892249][   T26] audit: type=1326 audit(2000000047.750:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6803 comm="syz.0.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f7d8ebe9 code=0x7fc00000
[  355.893525][ T6836] rock: directory entry would overflow storage
[  355.922404][  T127] usb 4-1: new low-speed USB device number 13 using dummy_hcd
[  355.980206][ T6836] rock: sig=0x4654, size=5, remaining=4
[  356.122583][  T127] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  356.162294][  T127] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt
[  356.218929][ T6844] Device name cannot be null; rc = [-22]
[  357.652132][  T127] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  357.680265][  T127] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  357.853428][  T127] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  358.618895][ T6853] loop4: detected capacity change from 0 to 32768
[  358.634592][  T127] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt
[  358.648086][  T127] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  358.658533][  T127] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  358.682254][  T127] usb 4-1: unable to read config index 2 descriptor/start: -71
[  358.695609][  T127] usb 4-1: can't read configurations, error -71
[  358.714937][ T5331] I/O error, dev loop4, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  359.039381][   T26] audit: type=1326 audit(2000000050.900:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6838 comm="syz.0.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f7d8ebe9 code=0x7fc00000
[  359.347880][ T6865] loop3: detected capacity change from 0 to 8192
[  359.409936][ T6865] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  359.454585][ T6865] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[  359.464445][ T6865] REISERFS (device loop3): using journaled data mode
[  359.471222][ T6865] reiserfs: using flush barriers
[  359.493897][ T6865] REISERFS warning (device loop3): sh-457 journal_init_dev: journal_init_dev: Cannot open './busacl': -2
[  359.505555][ T6865] REISERFS warning (device loop3): sh-462 journal_init: unable to initialize journal device
[  359.623326][ T6865] REISERFS warning (device loop3): sh-2022 reiserfs_fill_super: unable to initialize journal space
[  361.243110][ T6879] loop1: detected capacity change from 0 to 512
[  361.261388][ T6879] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  361.333199][ T6879] EXT4-fs (loop1): 1 truncate cleaned up
[  361.346901][ T6879] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  361.355997][  T952] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  361.389365][ T6879] EXT4-fs error (device loop1): ext4_get_verity_descriptor_location:300: inode #15: comm syz.1.608: verity file has no extents
[  361.620107][ T6879] fs-verity (loop1, inode 15): Error -117 getting verity descriptor size
[  361.866698][  T952] usb 5-1: device descriptor read/64, error -71
[  361.938780][ T4263] EXT4-fs (loop1): unmounting filesystem.
[  362.121169][   T26] audit: type=1326 audit(2000000053.980:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6862 comm="syz.0.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f7d8ebe9 code=0x7fc00000
[  362.164189][  T952] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  362.364042][  T952] usb 5-1: device descriptor read/64, error -71
[  362.416710][ T6899] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.613'.
[  362.447480][   T26] audit: type=1326 audit(2000000054.310:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6872 comm="syz.4.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd02cf8ebe9 code=0x7fc00000
[  362.473791][ T6899] netlink: set zone limit has 8 unknown bytes
[  362.484301][  T952] usb usb5-port1: attempt power cycle
[  362.914339][  T952] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  362.974369][   T14] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  364.292757][ T6910] loop4: detected capacity change from 0 to 512
[  364.310026][ T6910] EXT4-fs (loop4): invalid inodes per group: 65530
[  364.310026][ T6910] 
[  364.324230][  T952] usb 5-1: device not accepting address 6, error -71
[  364.368043][ T5331] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  364.384062][   T14] usb 4-1: device descriptor read/64, error -71
[  364.488464][ T6917] loop4: detected capacity change from 0 to 1024
[  364.554661][  T127] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  364.645116][ T6919] loop4: detected capacity change from 0 to 4096
[  364.664087][   T14] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  364.703597][ T6919] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  364.723228][ T6919] ntfs3: loop4: Failed to load $AttrDef -> 0
[  364.762682][  T127] usb 3-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da
[  364.782507][  T127] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  364.809017][  T127] usb 3-1: config 0 descriptor??
[  364.824094][   T14] usb 4-1: device descriptor read/64, error -71
[  364.829754][  T127] pwc: Philips SPC 900NC USB webcam detected.
[  364.954645][   T14] usb usb4-port1: attempt power cycle
[  365.242856][  T127] pwc: send_video_command error -71
[  365.257671][  T127] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  365.364236][   T14] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  365.379218][  T127] Philips webcam: probe of 3-1:0.0 failed with error -71
[  365.489868][   T26] audit: type=1326 audit(2000000057.350:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6900 comm="syz.3.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f208fb8ebe9 code=0x7fc00000
[  366.711079][  T127] usb 3-1: USB disconnect, device number 7
[  366.755113][   T14] usb 4-1: device descriptor read/8, error -71
[  366.874538][ T4308] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  366.966461][ T6940] loop3: detected capacity change from 0 to 128
[  366.991354][ T6940] VFS: Found a Xenix FS (block size = 1024) on device loop3
[  367.044498][ T4308] usb 2-1: device descriptor read/64, error -71
[  367.207621][ T6950] loop3: detected capacity change from 0 to 512
[  367.245423][ T6950] EXT4-fs: Ignoring removed nomblk_io_submit option
[  367.258555][ T6950] EXT4-fs: Ignoring removed bh option
[  367.310558][ T6950] EXT4-fs error (device loop3): mb_free_blocks:1815: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt.
[  367.330344][ T4308] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  367.389647][ T6950] EXT4-fs error (device loop3): ext4_do_update_inode:5254: inode #11: comm syz.3.633: corrupted inode contents
[  367.411125][ T6950] EXT4-fs error (device loop3): ext4_dirty_inode:6119: inode #11: comm syz.3.633: mark_inode_dirty error
[  367.429469][ T6950] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.633: invalid indirect mapped block 1 (level 1)
[  367.453484][ T6950] EXT4-fs error (device loop3): ext4_do_update_inode:5254: inode #11: comm syz.3.633: corrupted inode contents
[  367.472633][ T6950] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem
[  367.488164][ T6950] EXT4-fs error (device loop3): ext4_do_update_inode:5254: inode #11: comm syz.3.633: corrupted inode contents
[  367.494535][ T4308] usb 2-1: device descriptor read/64, error -71
[  367.509714][ T6950] EXT4-fs error (device loop3): ext4_truncate:4312: inode #11: comm syz.3.633: mark_inode_dirty error
[  367.531670][ T6950] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem
[  367.551480][ T6950] EXT4-fs (loop3): 1 truncate cleaned up
[  367.553915][ T6961] loop4: detected capacity change from 0 to 256
[  367.564399][ T6950] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  367.648134][ T4308] usb usb2-port1: attempt power cycle
[  367.651301][ T6950] EXT4-fs error (device loop3): ext4_find_dest_de:2115: inode #2: block 13: comm syz.3.633: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0
[  367.773343][ T4275] EXT4-fs (loop3): unmounting filesystem.
[  367.894574][ T4612] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  367.971430][   T26] audit: type=1326 audit(2000000059.830:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6922 comm="syz.1.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609358ebe9 code=0x7fc00000
[  368.054450][ T4308] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  368.084462][ T4612] usb 5-1: Using ep0 maxpacket: 32
[  368.091356][ T4612] usb 5-1: config 4 has an invalid interface number: 228 but max is 0
[  368.100422][ T4308] usb 2-1: device descriptor read/8, error -71
[  368.112801][ T4612] usb 5-1: config 4 has no interface number 0
[  368.125047][ T4612] usb 5-1: config 4 interface 228 altsetting 68 endpoint 0x7 has an invalid bInterval 147, changing to 11
[  368.158319][ T4612] usb 5-1: config 4 interface 228 altsetting 68 endpoint 0x7 has invalid maxpacket 41529, setting to 1024
[  368.408478][ T4612] usb 5-1: config 4 interface 228 has no altsetting 0
[  368.525047][ T4612] usb 5-1: New USB device found, idVendor=0499, idProduct=a9a2, bcdDevice=c4.e8
[  368.609495][ T4612] usb 5-1: New USB device strings: Mfr=1, Product=25, SerialNumber=3
[  368.682563][ T4612] usb 5-1: Product: syz
[  368.722099][ T4612] usb 5-1: Manufacturer: syz
[  368.769171][ T4612] usb 5-1: SerialNumber: syz
[  368.925105][ T4308] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  368.998659][ T4308] usb 2-1: device descriptor read/8, error -71
[  369.135843][ T4308] usb usb2-port1: unable to enumerate USB device
[  369.266109][ T4612] usb 5-1: invalid MIDI in EP 0
[  369.799299][   T26] audit: type=1326 audit(2000000061.660:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6932 comm="syz.0.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f7d8ebe9 code=0x7fc00000
[  369.894658][ T4265] Bluetooth: hci4: command 0x2021 tx timeout
[  370.469147][ T4612] snd-usb-audio: probe of 5-1:4.228 failed with error -22
[  370.762883][ T4612] usb 5-1: USB disconnect, device number 8
[  371.169243][   T26] audit: type=1326 audit(2000000063.030:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6968 comm="syz.1.639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609358ebe9 code=0x7fc00000
[  371.250573][ T6975] loop3: detected capacity change from 0 to 512
[  371.295332][ T6786] udevd[6786]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:4.228/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  371.342639][ T6981] loop4: detected capacity change from 0 to 8
[  371.400875][ T6975] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  371.553368][ T4275] EXT4-fs (loop3): unmounting filesystem.
[  371.587089][ T6984] netlink: 44 bytes leftover after parsing attributes in process `syz.1.645'.
[  371.656036][ T6981] SQUASHFS error: xz decompression failed, data probably corrupt
[  371.693688][ T6981] SQUASHFS error: Failed to read block 0x60: -5
[  371.795469][ T6981] SQUASHFS error: xz decompression failed, data probably corrupt
[  371.803264][ T6981] SQUASHFS error: Failed to read block 0x60: -5
[  371.817466][ T6992] loop1: detected capacity change from 0 to 64
[  371.831620][   T26] audit: type=1800 audit(2000000063.690:123): pid=6981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.644" name="file1" dev="loop4" ino=1 res=0 errno=0
[  371.865569][ T6990] loop2: detected capacity change from 0 to 2048
[  371.898807][ T6990] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  372.724678][ T4612] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  372.914723][ T4612] usb 3-1: device descriptor read/64, error -71
[  373.184686][ T4612] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  373.364575][ T4612] usb 3-1: device descriptor read/64, error -71
[  373.486705][ T4612] usb usb3-port1: attempt power cycle
[  373.733655][ T7003] loop4: detected capacity change from 0 to 1024
[  373.887022][ T7003] EXT4-fs: Ignoring removed oldalloc option
[  373.914767][ T4612] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  373.975356][ T4612] usb 3-1: device descriptor read/8, error -71
[  374.039082][ T7003] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  374.290220][ T7003] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended
[  374.344570][ T4612] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  374.404730][ T4612] usb 3-1: device descriptor read/8, error -71
[  374.556206][ T7003] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  374.595146][ T4612] usb usb3-port1: unable to enumerate USB device
[  374.963109][ T7003] fscrypt (loop4, inode 15): Error -61 getting encryption context
[  375.178678][   T26] audit: type=1326 audit(2000000067.040:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6996 comm="syz.2.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f784f78ebe9 code=0x7fc00000
[  375.235649][ T4261] EXT4-fs (loop4): unmounting filesystem.
[  375.904893][ T4308] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  376.214861][ T4308] usb 5-1: device descriptor read/64, error -71
[  376.494648][ T4308] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  376.694597][ T4308] usb 5-1: device descriptor read/64, error -71
[  376.815084][ T4308] usb usb5-port1: attempt power cycle
[  377.224584][ T4308] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  377.285527][ T4308] usb 5-1: device descriptor read/8, error -71
[  377.327307][ T7022] loop1: detected capacity change from 0 to 4096
[  377.624638][ T4308] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  377.678329][ T4308] usb 5-1: device descriptor read/8, error -71
[  377.896179][ T4308] usb usb5-port1: unable to enumerate USB device
[  378.281498][ T7022] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  378.370144][   T26] audit: type=1326 audit(2000000070.230:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7013 comm="syz.4.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd02cf8ebe9 code=0x7fc00000
[  378.389807][ T7019] loop2: detected capacity change from 0 to 32768
[  378.444598][ T7022] ntfs3: loop1: Failed to load $Extend.
[  378.477542][ T7019] (syz.2.655,7019,0):ocfs2_initialize_super:2286 ERROR: status = -12
[  378.503388][ T7019] (syz.2.655,7019,0):ocfs2_fill_super:1176 ERROR: status = -12
[  379.894556][ T4612] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  379.912830][ T7038] loop3: detected capacity change from 0 to 8192
[  380.084522][ T4612] usb 5-1: Using ep0 maxpacket: 16
[  380.264457][  T952] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  380.454598][  T952] usb 3-1: device descriptor read/64, error -71
[  380.755550][  T952] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  380.964328][  T952] usb 3-1: device descriptor read/64, error -71
[  381.095202][  T952] usb usb3-port1: attempt power cycle
[  381.289384][ T4612] usb 5-1: config 0 has an invalid interface number: 126 but max is 0
[  381.554720][  T952] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  381.645441][  T952] usb 3-1: device descriptor read/8, error -71
[  382.004202][  T952] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  382.065033][  T952] usb 3-1: device descriptor read/8, error -71
[  382.244365][  T952] usb usb3-port1: unable to enumerate USB device
[  382.648964][   T26] audit: type=1326 audit(2000000074.510:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7042 comm="syz.2.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f784f78ebe9 code=0x7fc00000
[  382.651924][ T4612] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  382.684618][ T4612] usb 5-1: config 0 has no interface number 0
[  382.690947][ T4612] usb 5-1: config 0 interface 126 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4
[  382.704560][ T4612] usb 5-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88
[  382.713644][ T4612] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  382.725955][ T4612] usb 5-1: config 0 descriptor??
[  382.760423][ T4612] usb 5-1: can't set config #0, error -71
[  382.769518][ T4612] usb 5-1: USB disconnect, device number 13
[  382.932151][ T7059] loop4: detected capacity change from 0 to 1764
[  383.019103][ T7065] loop2: detected capacity change from 0 to 64
[  383.496975][ T1274] ieee802154 phy0 wpan0: encryption failed: -22
[  383.517489][ T1274] ieee802154 phy1 wpan1: encryption failed: -22
[  383.574549][ T4612] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  383.764682][ T4612] usb 4-1: device descriptor read/64, error -71
[  384.190802][ T4612] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  384.878016][ T7073] can0: slcan on ptm0.
[  384.904548][ T4612] usb 4-1: device descriptor read/64, error -71
[  385.125071][ T4612] usb usb4-port1: attempt power cycle
[  385.445169][ T7069] can0 (unregistered): slcan off ptm0.
[  385.584665][ T4612] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  385.729772][ T7076] loop4: detected capacity change from 0 to 1024
[  385.755077][ T4612] usb 4-1: device descriptor read/8, error -71
[  385.912118][ T7085] loop2: detected capacity change from 0 to 164
[  385.978697][ T4397] hfsplus: b-tree write err: -5, ino 4
[  386.024663][ T4612] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  386.069802][ T4612] usb 4-1: device descriptor read/8, error -71
[  386.096916][ T7085] rock: directory entry would overflow storage
[  386.103181][ T7085] rock: sig=0x4f50, size=4, remaining=3
[  386.144941][ T7085] isofs: Unable to find the ".." directory for NFS.
[  386.342791][ T4612] usb usb4-port1: unable to enumerate USB device
[  387.792290][ T7107] loop4: detected capacity change from 0 to 512
[  387.865613][ T7107] EXT4-fs: Ignoring removed nomblk_io_submit option
[  387.891644][ T7107] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  387.918157][ T7107] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01d, mo2=0102]
[  387.949079][ T7107] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80)
[  387.975469][ T7107] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features
[  387.984607][ T7107] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  388.038322][   T26] audit: type=1326 audit(2000000079.900:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7066 comm="syz.3.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f208fb8ebe9 code=0x7fc00000
[  388.249317][ T4261] EXT4-fs (loop4): unmounting filesystem.
[  389.151071][ T7112] loop1: detected capacity change from 0 to 32768
[  389.258693][ T7135] CUSE: unknown device info "€"
[  389.266377][ T7135] CUSE: unknown device info "À"
[  389.271248][ T7135] CUSE: unknown device info ""
[  389.278707][ T7135] CUSE: DEVNAME unspecified
[  389.306996][ T7112] XFS (loop1): Mounting V5 Filesystem
[  389.346783][ T7133] loop4: detected capacity change from 0 to 2048
[  389.356683][ T7133] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  389.449737][ T7112] XFS (loop1): Ending clean mount
[  389.455331][ T7133] syz.4.694: attempt to access beyond end of device
[  389.455331][ T7133] loop4: rw=524288, sector=33554430, nr_sectors = 2 limit=2048
[  389.470539][ T7141] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  389.570420][ T7133] syz.4.694: attempt to access beyond end of device
[  389.570420][ T7133] loop4: rw=0, sector=9437254, nr_sectors = 2 limit=2048
[  389.594458][ T7133] NILFS (loop4): I/O error reading meta-data file (ino=6, block-offset=0)
[  389.709809][ T4263] XFS (loop1): Unmounting Filesystem
[  389.883813][ T7114] loop2: detected capacity change from 0 to 40427
[  389.932298][ T7114] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x3ffff
[  389.977261][ T7114] F2FS-fs (loop2): invalid crc value
[  390.027003][ T7114] F2FS-fs (loop2): Found nat_bits in checkpoint
[  390.129685][ T7153] loop4: detected capacity change from 0 to 128
[  390.263104][ T7114] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  390.395765][ T7114] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x3ffff
[  390.774627][ T4308] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  390.954197][ T4308] usb 4-1: device descriptor read/64, error -71
[  391.234233][ T4308] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  391.414755][ T4308] usb 4-1: device descriptor read/64, error -71
[  391.534634][ T4308] usb usb4-port1: attempt power cycle
[  391.944388][ T4308] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  392.069563][ T4308] usb 4-1: device descriptor read/8, error -71
[  392.494535][ T4308] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  392.587530][ T4308] usb 4-1: device descriptor read/8, error -71
[  392.786716][ T4308] usb usb4-port1: unable to enumerate USB device
[  393.334768][   T26] audit: type=1326 audit(2000000085.200:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7150 comm="syz.3.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f208fb8ebe9 code=0x7fc00000
[  393.817635][ T7181] loop2: detected capacity change from 0 to 4096
[  393.851569][ T7181] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  393.924711][ T7181] ntfs: (device loop2): read_ntfs_boot_sector(): Primary boot sector is invalid.
[  393.944571][ T7181] ntfs: (device loop2): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy.
[  393.993433][ T7181] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  394.033060][ T7181] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[  394.074508][ T7181] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  394.124279][ T7181] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5).
[  394.333284][ T7181] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  394.406890][ T7181] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[  394.753262][ T7181] ntfs: volume version 3.1.
[  395.071199][ T7185] loop3: detected capacity change from 0 to 32768
[  395.190833][ T7185] XFS (loop3): Mounting V5 Filesystem
[  395.278651][ T7185] XFS (loop3): Ending clean mount
[  395.409128][ T7218] loop2: detected capacity change from 0 to 1024
[  395.422465][ T4275] XFS (loop3): Unmounting Filesystem
[  395.539155][ T7218] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  395.630170][ T7191] loop1: detected capacity change from 0 to 32768
[  395.639167][ T4264] EXT4-fs (loop2): unmounting filesystem.
[  395.755876][ T7204] loop4: detected capacity change from 0 to 32768
[  395.758664][ T7191] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  395.768867][ T7225] loop2: detected capacity change from 0 to 512
[  395.826536][ T7191] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  395.848662][ T7225] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  395.911706][ T7225] EXT4-fs (loop2): 1 truncate cleaned up
[  395.958110][ T7225] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  395.963535][ T7191] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms
[  396.060161][ T4308] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  396.076627][ T4308] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  396.355412][ T4308] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 278ms
[  396.368756][ T4308] gfs2: fsid=syz:syz.0: jid=0: Done
[  396.381152][ T7191] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  396.819190][ T4264] EXT4-fs (loop2): unmounting filesystem.
[  397.498038][ T7244] loop2: detected capacity change from 0 to 2048
[  397.532822][ T7244] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  398.163542][ T7254] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  398.186837][ T7254] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  398.209594][ T7254] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  398.229821][ T7254] Bluetooth: hci2: Suspend notifier action (1) failed: -4
[  398.240118][ T7254] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  398.435905][ T7246] loop1: detected capacity change from 0 to 40427
[  398.470411][ T7246] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x3ffff
[  398.489237][ T7250] loop3: detected capacity change from 0 to 32768
[  398.571601][ T7246] F2FS-fs (loop1): invalid crc value
[  398.588653][ T7250] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  398.920956][ T7250] OCFS2: ERROR (device loop3): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 65 has invalid tree depth 263 in extent list
[  399.014412][ T7250] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  399.028293][ T7246] F2FS-fs (loop1): Found nat_bits in checkpoint
[  399.071998][ T7250] OCFS2: Returning error to the calling process.
[  399.115287][ T7250] (syz.3.730,7250,0):ocfs2_find_leaf:1941 ERROR: status = -30
[  399.122799][ T7250] (syz.3.730,7250,0):ocfs2_get_clusters_nocache:421 ERROR: status = -30
[  399.191195][ T7281] loop4: detected capacity change from 0 to 512
[  399.204335][ T7250] (syz.3.730,7250,0):ocfs2_get_clusters:624 ERROR: status = -30
[  399.219447][ T7246] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  399.227194][ T7250] (syz.3.730,7250,0):ocfs2_extent_map_get_blocks:671 ERROR: status = -30
[  399.249028][ T7250] (syz.3.730,7250,0):ocfs2_read_virt_blocks:981 ERROR: status = -30
[  399.404052][ T7250] (syz.3.730,7250,0):ocfs2_read_dir_block:511 ERROR: status = -30
[  399.437620][ T7281] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  399.474317][ T7281] ext4 filesystem being mounted at /151/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  399.501274][ T7250] (syz.3.730,7250,1):ocfs2_find_dir_space_el:3504 ERROR: status = -5
[  399.519748][ T7250] (syz.3.730,7250,1):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -5
[  399.578008][ T7250] (syz.3.730,7250,1):ocfs2_symlink:1864 ERROR: status = -5
[  399.599145][ T7250] (syz.3.730,7250,1):ocfs2_symlink:2065 ERROR: status = -5
[  399.675102][ T4261] EXT4-fs (loop4): unmounting filesystem.
[  399.749408][ T7291] loop2: detected capacity change from 0 to 1024
[  399.774411][ T4263] syz-executor: attempt to access beyond end of device
[  399.774411][ T4263] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  399.789855][ T7291] EXT4-fs: Ignoring removed nomblk_io_submit option
[  399.807100][ T4275] ocfs2: Unmounting device (7,3) on (node local)
[  399.894455][ T7291] EXT4-fs: Ignoring removed nomblk_io_submit option
[  399.934916][ T7291] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  399.965729][ T7291] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  400.019033][ T7291] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  400.054508][ T4265] Bluetooth: hci1: command 0x0c1a tx timeout
[  400.214517][ T4265] Bluetooth: hci2: command 0x0c1a tx timeout
[  400.294459][ T4265] Bluetooth: hci4: command 0x0c1a tx timeout
[  400.327774][ T7291] EXT4-fs error (device loop2): ext4_xattr_ibody_list:748: inode #2: comm syz.2.742: corrupted in-inode xattr
[  400.451802][ T4264] EXT4-fs (loop2): unmounting filesystem.
[  400.764311][ T4342] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  400.965759][ T4342] usb 4-1: device descriptor read/64, error -71
[  401.254028][ T4342] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  401.434428][ T4342] usb 4-1: device descriptor read/64, error -71
[  401.574402][ T4342] usb usb4-port1: attempt power cycle
[  401.995439][ T4342] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  402.108921][ T4342] usb 4-1: device descriptor read/8, error -71
[  402.294571][ T4277] Bluetooth: hci2: command 0x0406 tx timeout
[  402.494272][ T4342] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  402.564842][ T4342] usb 4-1: device descriptor read/8, error -71
[  402.855701][ T4342] usb usb4-port1: unable to enumerate USB device
[  403.051217][   T26] kauditd_printk_skb: 14 callbacks suppressed
[  403.051717][   T26] audit: type=1326 audit(2000000094.910:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7299 comm="syz.3.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f208fb8ebe9 code=0x7fc00000
[  403.337209][ T7321] loop2: detected capacity change from 0 to 64
[  403.532678][ T7324] smc: net device bond0 erased user defined pnetid SYZ2
[  403.653502][ T7329] loop2: detected capacity change from 0 to 1024
[  403.855512][ T7329] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  404.693454][ T7317] loop1: detected capacity change from 0 to 32768
[  404.716525][ T4264] EXT4-fs (loop2): unmounting filesystem.
[  404.821997][ T7347] syz.4.761[7347] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  404.822096][ T7347] syz.4.761[7347] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  404.840095][ T7347] loop4: detected capacity change from 0 to 128
[  404.870567][ T7347] EXT4-fs (loop4): Test dummy encryption mode enabled
[  404.945255][ T7347] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  404.959926][ T7347] ext4 filesystem being mounted at /156/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  404.971311][ T7317] XFS (loop1): Mounting V5 Filesystem
[  405.400482][ T7317] XFS (loop1): Ending clean mount
[  405.547865][ T4261] EXT4-fs (loop4): unmounting filesystem.
[  405.549114][ T7317] XFS (loop1): Quotacheck needed: Please wait.
[  405.670958][ T7317] XFS (loop1): Quotacheck: Done.
[  405.876641][ T4263] XFS (loop1): Unmounting Filesystem
[  406.190442][ T7368] loop3: detected capacity change from 0 to 32768
[  406.257404][ T7368] XFS (loop3): Mounting V5 Filesystem
[  406.287550][ T7386] loop1: detected capacity change from 0 to 4096
[  406.329891][ T7392] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  406.383897][ T7368] XFS (loop3): Ending clean mount
[  406.400218][ T7368] XFS (loop3): Quotacheck needed: Please wait.
[  406.447888][ T7368] XFS (loop3): Quotacheck: Done.
[  406.691128][ T4275] XFS (loop3): Unmounting Filesystem
[  407.562043][ T7399] loop1: detected capacity change from 0 to 16
[  407.588858][ T7399] erofs: (device loop1): mounted with root inode @ nid 36.
[  408.041815][ T4277] Bluetooth: hci4: command 0x0405 tx timeout
[  408.070217][ T7399] erofs: (device loop1): erofs_readdir: invalid de[0].nameoff 0 @ nid 36
[  408.868022][   T26] audit: type=1326 audit(2000000100.730:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7365 comm="syz.0.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f7d8ebe9 code=0x7fc00000
[  409.342346][ T4342] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  409.584172][ T4342] usb 2-1: Using ep0 maxpacket: 32
[  409.598506][ T4342] usb 2-1: config 0 has an invalid interface number: 85 but max is 0
[  409.669458][ T4342] usb 2-1: config 0 has no interface number 0
[  409.688515][ T4342] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  409.719950][ T4342] usb 2-1: config 0 interface 85 has no altsetting 0
[  409.750049][ T4342] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  409.789939][ T4342] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  409.829974][ T4342] usb 2-1: Product: syz
[  409.869051][ T4342] usb 2-1: Manufacturer: syz
[  409.873703][ T4342] usb 2-1: SerialNumber: syz
[  409.915416][ T4342] usb 2-1: config 0 descriptor??
[  410.964761][ T4342] appletouch 2-1:0.85: Geyser mode initialized.
[  410.972307][ T4342] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input14
[  411.025103][    C0] appletouch 2-1:0.85: appletouch: OVERFLOW with data length 64, actual length is 64
[  411.304062][ T4320] usb 2-1: USB disconnect, device number 7
[  411.620845][ T4320] appletouch 2-1:0.85: input: appletouch disconnected
[  411.728437][ T7451] loop4: detected capacity change from 0 to 64
[  411.846901][   T26] audit: type=1800 audit(2000000103.710:132): pid=7453 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.792" name="file1" dev="loop4" ino=5 res=0 errno=0
[  411.865203][ T7455] loop2: detected capacity change from 0 to 256
[  411.974385][ T7455] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001034b, chksum : 0x6322ccb6, utbl_chksum : 0xe619d30d)
[  413.100139][ T7471] netlink: 'syz.1.798': attribute type 11 has an invalid length.
[  413.289311][ T7481] loop3: detected capacity change from 0 to 128
[  413.299708][ T7481] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  414.634558][ T4334] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  414.830037][ T4334] usb 2-1: Using ep0 maxpacket: 32
[  414.837332][ T4334] usb 2-1: config 0 has an invalid interface number: 12 but max is 0
[  414.864039][ T4334] usb 2-1: config 0 has no interface number 0
[  414.880843][ T4334] usb 2-1: config 0 interface 12 has no altsetting 0
[  414.903229][ T4334] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  414.943696][ T7501] loop4: detected capacity change from 0 to 512
[  414.950531][ T4334] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  414.968386][ T4334] usb 2-1: Product: syz
[  414.993285][ T4334] usb 2-1: Manufacturer: syz
[  414.998670][ T7501] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  415.009577][ T4334] usb 2-1: SerialNumber: syz
[  415.030397][ T4334] usb 2-1: config 0 descriptor??
[  415.088831][ T7501] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  415.128972][ T7507] loop2: detected capacity change from 0 to 512
[  415.150861][ T7510] overlayfs: failed to clone upperpath
[  415.166011][ T7501] EXT4-fs (loop4): 1 truncate cleaned up
[  415.172246][ T7501] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  415.359680][ T4261] EXT4-fs (loop4): unmounting filesystem.
[  415.656850][ T7507] EXT4-fs (loop2): Test dummy encryption mode enabled
[  415.663816][ T7507] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  415.899319][ T4334] f81534 2-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71
[  415.908291][ T4334] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71
[  415.908985][ T7507] EXT4-fs (loop2): 1 truncate cleaned up
[  415.916213][ T4334] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  415.929704][ T4334] f81534: probe of 2-1:0.12 failed with error -71
[  415.958613][ T4334] usb 2-1: USB disconnect, device number 8
[  416.383222][ T7507] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  416.700376][ T7507] fscrypt (loop2): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))")
[  416.707801][ T7543] loop1: detected capacity change from 0 to 1024
[  416.782950][ T7542] loop4: detected capacity change from 0 to 4096
[  416.809068][ T7543] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  416.864783][ T7542] ext4: Unknown parameter 'obj_user'
[  416.895304][ T4264] EXT4-fs (loop2): unmounting filesystem.
[  416.905541][ T6783] I/O error, dev loop4, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  417.252629][ T7543] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000)
[  418.185570][ T4263] EXT4-fs (loop1): unmounting filesystem.
[  419.300077][ T7599] device syzkaller1 entered promiscuous mode
[  422.268268][ T7651] loop4: detected capacity change from 0 to 1024
[  422.283553][ T7647] kvm [7644]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x4000
[  422.303603][ T7651] EXT4-fs: Ignoring removed orlov option
[  422.335834][ T7647] kvm [7644]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x4000
[  422.411872][ T7651] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  422.457244][   T26] audit: type=1800 audit(2000000114.320:133): pid=7651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.853" name="bus" dev="loop4" ino=18 res=0 errno=0
[  423.089680][ T4261] EXT4-fs (loop4): unmounting filesystem.
[  425.527045][ T7686] loop4: detected capacity change from 0 to 512
[  425.534496][ T7690] loop3: detected capacity change from 0 to 128
[  425.649160][ T7690] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  425.688679][ T7673] loop2: detected capacity change from 0 to 32768
[  425.770289][ T4612] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  425.798832][ T7690] ext4 filesystem being mounted at /153/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  425.857917][ T7673] XFS (loop2): Mounting V5 Filesystem
[  425.966066][ T4612] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  425.982511][ T4612] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  426.043525][ T7673] XFS (loop2): Ending clean mount
[  426.061018][ T4612] usb 2-1: config 0 descriptor??
[  426.086502][   T26] audit: type=1804 audit(2000000117.950:134): pid=7673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.860" name="/newroot/172/file0/file1" dev="loop2" ino=9286 res=1 errno=0
[  426.126812][ T4612] gspca_main: cpia1-2.14.0 probing 0813:0001
[  426.139203][ T4264] XFS (loop2): Unmounting Filesystem
[  426.215574][ T4275] EXT4-fs (loop3): unmounting filesystem.
[  426.510577][ T4612] cpia1 2-1:0.0: unexpected state after lo power cmd: 00
[  426.930698][ T4612] gspca_cpia1: usb_control_msg 02, error -32
[  426.981534][ T4612] gspca_cpia1: usb_control_msg 02, error -71
[  427.067939][ T4612] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0)
[  427.192297][ T4612] usb 2-1: USB disconnect, device number 9
[  427.270734][ T7714] capability: warning: `syz.2.868' uses deprecated v2 capabilities in a way that may be insecure
[  431.834416][ T4334] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  432.134946][ T4334] usb 4-1: Using ep0 maxpacket: 16
[  432.142698][ T4334] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  432.164408][ T4334] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  432.213432][ T4334] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  432.242359][ T4334] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  432.252278][ T4334] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  432.308670][ T4334] usb 4-1: config 0 descriptor??
[  432.783301][ T4334] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0
[  432.794391][ T4334] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0
[  432.802095][ T4334] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0
[  432.832291][ T4334] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0
[  432.860041][ T4334] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0
[  433.019502][ T4334] microsoft 0003:045E:07DA.0001: unknown main item tag 0xd
[  433.708252][ T4334] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0
[  433.724441][ T4334] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0
[  433.738959][ T4334] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0
[  433.783192][ T4334] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0
[  433.812279][ T4334] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0
[  433.830031][ T4334] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0
[  433.859233][ T4334] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0
[  433.881808][ T4334] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0
[  433.891189][ T4334] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0
[  433.910900][ T4334] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0
[  433.938315][ T4334] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0
[  433.947108][ T4334] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0
[  433.958511][ T4334] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0
[  433.978785][ T4334] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0
[  433.998240][ T4334] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0
[  434.021557][ T4334] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0
[  434.041789][ T4334] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0
[  434.051613][ T4334] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0
[  434.099613][ T4334] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0
[  434.123536][ T4334] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0
[  434.160956][ T4334] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0
[  434.189347][ T4334] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0
[  434.223528][ T4334] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0
[  434.267507][ T4334] microsoft 0003:045E:07DA.0001: No inputs registered, leaving
[  435.817585][ T4334] microsoft 0003:045E:07DA.0001: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0
[  435.833669][ T4334] microsoft 0003:045E:07DA.0001: no inputs found
[  435.841165][ T4334] microsoft 0003:045E:07DA.0001: could not initialize ff, continuing anyway
[  435.874461][ T4334] usb 4-1: USB disconnect, device number 31
[  436.096363][ T7801] loop2: detected capacity change from 0 to 64
[  436.263735][ T7799] fido_id[7799]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  436.359448][ T7799] fido_id (7799) used greatest stack depth: 20616 bytes left
[  437.929335][ T7830] netlink: 'syz.0.910': attribute type 1 has an invalid length.
[  437.934585][ T7828] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  437.954740][ T7832] loop4: detected capacity change from 0 to 1024
[  437.967971][ T7830] device bond1 entered promiscuous mode
[  437.974492][ T7830] 8021q: adding VLAN 0 to HW filter on device bond1
[  438.837621][ T7839] bond1: (slave bridge1): making interface the new active one
[  438.845710][ T7839] device bridge1 entered promiscuous mode
[  438.984429][ T7839] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  439.079475][ T7832] hfsplus: xattr searching failed
[  439.146494][ T6123] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  439.325020][ T7842] hfsplus: xattr searching failed
[  439.518419][ T5940] hfsplus: b-tree write err: -5, ino 3
[  439.859555][ T7851] kvm [7850]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x4000
[  439.887840][ T7851] kvm [7850]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x4000
[  439.929725][ T7851] kvm [7850]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x4000
[  439.997936][ T7851] kvm [7850]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x4000
[  440.027433][ T7851] kvm [7850]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x4000
[  440.587369][ T7851] kvm [7850]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x4000
[  440.620560][ T7851] kvm [7850]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x4000
[  440.670552][ T7851] kvm [7850]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x4000
[  440.749034][ T7851] kvm [7850]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x4000
[  440.803805][ T7851] kvm [7850]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x4000
[  440.886479][ T7885] loop4: detected capacity change from 0 to 2048
[  440.925128][ T7885] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  441.023638][ T7888] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready
[  442.824885][ T7934] loop2: detected capacity change from 0 to 7
[  442.859284][ T5331]  loop2: p1
[  442.863308][ T5331] loop2: partition table partially beyond EOD, truncated
[  442.886021][ T5331] loop2: p1 size 1919251295 extends beyond EOD, truncated
[  442.907977][ T7934]  loop2: p1
[  442.916845][ T7934] loop2: partition table partially beyond EOD, truncated
[  442.934682][ T7934] loop2: p1 size 1919251295 extends beyond EOD, truncated
[  443.021994][ T5331] udevd[5331]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  443.083042][ T5331] udevd[5331]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  443.454541][ T4308] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  443.656057][ T4308] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  443.670773][ T4308] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  443.699410][ T4308] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  443.739044][ T7954] overlayfs: failed to resolve './file1': -2
[  443.888581][ T4308] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  444.021823][ T4308] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  444.190165][ T4308] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  444.319653][ T4308] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  444.440212][ T4308] usb 3-1: Product: syz
[  444.505707][ T4308] usb 3-1: Manufacturer: syz
[  444.592842][ T4308] cdc_wdm 3-1:1.0: skipping garbage
[  444.622459][ T4308] cdc_wdm 3-1:1.0: skipping garbage
[  444.688092][ T4308] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  444.719475][ T4308] cdc_wdm 3-1:1.0: Unknown control protocol
[  444.936303][ T1274] ieee802154 phy0 wpan0: encryption failed: -22
[  444.943514][ T1274] ieee802154 phy1 wpan1: encryption failed: -22
[  445.269989][ T7978] netlink: 'syz.4.958': attribute type 1 has an invalid length.
[  445.489938][  T952] usb 3-1: USB disconnect, device number 16
[  445.521023][ T7983] netlink: 'syz.4.958': attribute type 1 has an invalid length.
[  446.327926][ T7995] overlayfs: failed to clone upperpath
[  446.834112][  T952] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  446.901250][ T8004] overlayfs: failed to resolve './file1': -2
[  447.046266][ T8009] netlink: 4 bytes leftover after parsing attributes in process `syz.0.967'.
[  447.094747][  T952] usb 3-1: too many configurations: 9, using maximum allowed: 8
[  447.111586][  T952] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  447.125100][  T952] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  447.136393][  T952] usb 3-1: config 0 interface 0 has no altsetting 0
[  447.154574][  T952] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  447.166878][  T952] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  447.178385][  T952] usb 3-1: config 0 interface 0 has no altsetting 0
[  447.198203][  T952] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  447.210216][  T952] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  447.221221][ T8006] kvm_set_msr_common: 80 callbacks suppressed
[  447.221238][ T8006] kvm [8005]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x4000
[  447.222727][ T8006] kvm [8005]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x4000
[  447.228200][  T952] usb 3-1: config 0 interface 0 has no altsetting 0
[  447.246227][ T8006] kvm [8005]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x4000
[  447.255267][  T952] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  447.270845][  T952] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  447.275805][ T8006] kvm [8005]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x4000
[  447.282359][  T952] usb 3-1: config 0 interface 0 has no altsetting 0
[  447.303690][ T8006] kvm [8005]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x4000
[  447.309512][  T952] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  447.332349][  T952] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  447.349329][ T8006] kvm [8005]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x4000
[  447.354054][  T952] usb 3-1: config 0 interface 0 has no altsetting 0
[  447.375190][  T952] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  447.385700][ T8006] kvm [8005]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x4000
[  447.392770][  T952] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  447.408149][  T952] usb 3-1: config 0 interface 0 has no altsetting 0
[  447.417944][  T952] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  447.442904][ T8006] kvm [8005]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x4000
[  447.446241][  T952] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  447.483289][  T952] usb 3-1: config 0 interface 0 has no altsetting 0
[  447.507455][ T8006] kvm [8005]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x4000
[  447.525231][ T8006] kvm [8005]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x4000
[  447.525549][  T952] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  447.584048][  T952] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  447.607834][  T952] usb 3-1: config 0 interface 0 has no altsetting 0
[  447.640986][  T952] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  447.664167][  T952] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  447.672768][  T952] usb 3-1: Product: syz
[  447.677323][  T952] usb 3-1: Manufacturer: syz
[  447.679347][ T8021] block nbd4: shutting down sockets
[  447.687923][  T952] usb 3-1: SerialNumber: syz
[  447.702436][  T952] usb 3-1: config 0 descriptor??
[  447.724962][  T952] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0
[  448.583678][  T952] usb 3-1: USB disconnect, device number 17
[  448.606842][  T952] yurex 3-1:0.0: USB YUREX #0 now disconnected
[  448.728974][ T8037] overlayfs: failed to resolve './file1': -2
[  449.349075][ T8036] block device autoloading is deprecated and will be removed.
[  450.674439][ T4320] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  450.854643][ T4320] usb 2-1: device descriptor read/64, error -71
[  451.154496][ T4320] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  453.514958][ T4320] usb 2-1: device descriptor read/64, error -71
[  453.656234][ T4320] usb usb2-port1: attempt power cycle
[  454.181657][ T4320] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  454.245256][ T4320] usb 2-1: device descriptor read/8, error -71
[  454.573686][   T26] audit: type=1326 audit(2000000146.430:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8040 comm="syz.1.978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609358ebe9 code=0x7fc00000
[  454.613997][ T4320] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  455.618087][ T4320] usb 2-1: device descriptor read/8, error -71
[  455.699711][ T8079] netlink: 48 bytes leftover after parsing attributes in process `syz.1.990'.
[  455.711453][ T8079] netlink: 92 bytes leftover after parsing attributes in process `syz.1.990'.
[  455.754196][ T4320] usb usb2-port1: unable to enumerate USB device
[  455.953454][ T8085] overlayfs: failed to resolve './file0': -2
[  456.925913][ T8099] loop4: detected capacity change from 0 to 128
[  457.151517][ T8099] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  458.865237][ T8099] ext4 filesystem being mounted at /204/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  459.558400][ T4261] EXT4-fs (loop4): unmounting filesystem.
[  459.812624][ T8122] overlayfs: failed to clone upperpath
[  459.868168][ T8126] netlink: 'syz.4.1007': attribute type 1 has an invalid length.
[  460.147921][ T8120] kvm_set_msr_common: 13 callbacks suppressed
[  460.147934][ T8120] kvm [8119]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x4000
[  460.209375][ T8120] kvm [8119]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x4000
[  460.245477][ T8126] device bond2 entered promiscuous mode
[  460.251199][ T8126] 8021q: adding VLAN 0 to HW filter on device bond2
[  460.266576][ T8120] kvm [8119]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x4000
[  460.282843][ T8120] kvm [8119]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x4000
[  460.296437][ T8120] kvm [8119]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x4000
[  460.367334][ T8130] bond2: (slave bridge1): making interface the new active one
[  460.369391][ T8120] kvm [8119]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x4000
[  460.375625][ T8130] device bridge1 entered promiscuous mode
[  460.391191][ T8130] bond2: (slave bridge1): Enslaving as an active interface with an up link
[  460.425006][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready
[  460.627008][ T8120] kvm [8119]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x4000
[  460.689833][ T8120] kvm [8119]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x4000
[  460.750443][ T8120] kvm [8119]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x4000
[  460.812039][ T8120] kvm [8119]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x4000
[  461.558523][ T8153] netlink: 'syz.0.1014': attribute type 1 has an invalid length.
[  461.777878][ T8153] 8021q: adding VLAN 0 to HW filter on device bond2
[  461.910557][ T8163] loop3: detected capacity change from 0 to 128
[  461.923783][ T8157] bond2: (slave gretap1): making interface the new active one
[  461.937918][ T8157] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  461.948828][ T8161] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1016'.
[  461.962028][ T8163] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  461.978255][ T8163] ext4 filesystem being mounted at /180/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  462.043737][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready
[  462.070492][ T8157] syz.0.1014 (8157) used greatest stack depth: 18272 bytes left
[  462.218074][ T8173] overlayfs: failed to resolve './file0': -2
[  463.089452][ T4275] EXT4-fs (loop3): unmounting filesystem.
[  463.644600][ T4334] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  463.854472][ T4334] usb 2-1: Using ep0 maxpacket: 32
[  463.866256][ T4334] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  463.941738][ T4334] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  464.125031][ T4334] usb 2-1: config 0 descriptor??
[  464.497704][ T4334] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware
[  464.565165][ T4334] usb 2-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2
[  464.641583][ T4334] usb 2-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw
[  464.671479][ T8214] overlayfs: failed to get index nlink (file1/bus, err=-61)
[  464.818414][ T8220] loop2: detected capacity change from 0 to 128
[  464.875515][ T8220] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  464.918635][ T8220] ext4 filesystem being mounted at /206/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  465.599849][ T8241] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1042'.
[  465.755089][ T8241] bond0: (slave bond_slave_1): Releasing backup interface
[  465.770316][ T4264] EXT4-fs (loop2): unmounting filesystem.
[  466.065921][ T8250] overlayfs: failed to get index nlink (file1/bus, err=-61)
[  466.186660][ T8256] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1048'.
[  467.169446][ T8252] loop4: detected capacity change from 0 to 32768
[  467.407431][ T8252] XFS (loop4): Mounting V5 Filesystem
[  467.472751][ T8252] XFS (loop4): Ending clean mount
[  467.484557][ T8252] XFS (loop4): Quotacheck needed: Please wait.
[  467.519504][ T8252] XFS (loop4): Quotacheck: Done.
[  467.692071][ T4261] XFS (loop4): Unmounting Filesystem
[  467.898635][ T8302] overlayfs: failed to get index nlink (file1/bus, err=-61)
[  468.415108][ T8321] smc: net device bond0 applied user defined pnetid SYZ2
[  468.449148][ T8321] smc: net device bond0 erased user defined pnetid SYZ2
[  469.497421][ T8343] overlayfs: failed to get index nlink (file1/bus, err=-61)
[  469.739767][ T8351] loop2: detected capacity change from 0 to 7
[  469.748277][ T6783]  loop2:
[  469.756743][ T6783] loop2: partition table partially beyond EOD, truncated
[  469.785607][ T8351]  loop2:
[  469.788729][ T8351] loop2: partition table partially beyond EOD, truncated
[  469.820266][ T8326] loop4: detected capacity change from 0 to 40427
[  469.897697][ T8326] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x3ffff
[  469.938154][ T8326] F2FS-fs (loop4): invalid crc value
[  470.029880][ T8326] F2FS-fs (loop4): Found nat_bits in checkpoint
[  470.131986][ T8364] loop3: detected capacity change from 0 to 128
[  470.157072][ T8326] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  470.233416][ T4261] syz-executor: attempt to access beyond end of device
[  470.233416][ T4261] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  471.984828][ T8380] kvm [8379]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x4000
[  472.000013][ T8380] kvm [8379]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x4000
[  472.019127][ T8380] kvm [8379]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x4000
[  472.044739][ T8380] kvm [8379]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x4000
[  472.060781][ T8380] kvm [8379]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x4000
[  472.155317][ T8380] kvm [8379]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x4000
[  472.175107][ T8380] kvm [8379]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x4000
[  472.194939][ T8380] kvm [8379]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x4000
[  472.211837][ T8380] kvm [8379]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x4000
[  472.232820][ T8380] kvm [8379]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x4000
[  472.632093][ T8392] loop3: detected capacity change from 0 to 1024
[  472.746051][ T8392] EXT4-fs: Ignoring removed nomblk_io_submit option
[  472.764478][ T8392] EXT4-fs: Ignoring removed nomblk_io_submit option
[  472.784036][ T8392] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  472.971147][ T8392] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  473.001922][ T8392] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  473.062483][ T8392] EXT4-fs error (device loop3): ext4_xattr_ibody_list:748: inode #2: comm syz.3.1090: corrupted in-inode xattr
[  473.122770][ T4275] EXT4-fs (loop3): unmounting filesystem.
[  473.288106][   T26] audit: type=1326 audit(2000000165.150:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8366 comm="syz.0.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f7d8ebe9 code=0x7fc00000
[  473.504127][ T4306] usb 4-1: new full-speed USB device number 32 using dummy_hcd
[  473.698326][ T4306] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  473.711348][ T4306] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  473.720256][ T4306] usb 4-1: Product: syz
[  473.725147][ T4306] usb 4-1: Manufacturer: syz
[  473.732361][ T4306] usb 4-1: SerialNumber: syz
[  473.756134][ T4306] usb 4-1: config 0 descriptor??
[  473.968327][ T4306] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  475.551025][ T4306] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71
[  475.561267][ T4306] usb 4-1: USB disconnect, device number 32
[  476.419786][ T8460] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  477.040770][ T8471] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1129'.
[  477.171643][ T8474] loop2: detected capacity change from 0 to 256
[  477.287842][ T8474] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d)
[  477.754374][ T4581] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  477.945992][ T4581] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  477.987815][ T4581] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  478.037757][ T4581] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  478.068082][ T4581] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  478.084734][ T4581] usb 5-1: Product: syz
[  478.089059][ T4581] usb 5-1: Manufacturer: syz
[  478.100221][ T4581] usb 5-1: SerialNumber: syz
[  478.364226][ T8483] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  478.894504][  T952] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  479.059472][ T8483] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  479.124316][  T952] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[  479.216792][  T952] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  479.276162][  T952] usb 3-1: Product: syz
[  479.318977][  T952] usb 3-1: Manufacturer: syz
[  479.330912][ T4581] cdc_mbim 5-1:1.0: MAC-Address: 42:42:42:42:42:42
[  479.364928][  T952] usb 3-1: SerialNumber: syz
[  479.486120][  T952] usb 3-1: config 0 descriptor??
[  479.765143][ T8511] device bpq0 entered promiscuous mode
[  479.799913][ T8511] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready
[  479.886935][ T4581] cdc_mbim 5-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048
[  479.895988][  T952] usb-storage 3-1:0.0: USB Mass Storage device detected
[  479.896060][ T4581] cdc_mbim 5-1:1.0: setting rx_max = 2048
[  479.911759][ T4581] cdc_mbim 5-1:1.0: setting tx_max = 184
[  479.928047][ T4581] cdc_mbim 5-1:1.0: cdc-wdm0: USB WDM device
[  479.958286][ T4581] cdc_mbim 5-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.4-1, CDC MBIM, 42:42:42:42:42:42
[  480.044896][  T952] usb 3-1: USB disconnect, device number 18
[  480.165630][ T8531] kvm: pic: non byte read
[  480.170490][ T8531] kvm: pic: level sensitive irq not supported
[  480.170603][ T8531] kvm: pic: non byte read
[  480.201887][ T8531] kvm: pic: level sensitive irq not supported
[  480.201944][ T8531] kvm: pic: non byte read
[  480.677447][ T8543] kvm_set_msr_common: 30 callbacks suppressed
[  480.677465][ T8543] kvm [8541]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0xc0
[  480.736434][ T8543] kvm [8541]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x40c0
[  480.757195][ T8543] kvm [8541]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x40
[  480.787605][ T8543] kvm [8541]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x4040
[  481.392668][ T4581] usb 5-1: USB disconnect, device number 14
[  481.410811][ T4581] cdc_mbim 5-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.4-1, CDC MBIM
[  483.085001][  T952] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  483.274452][  T952] usb 4-1: device descriptor read/64, error -71
[  483.574684][  T952] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  483.774010][  T952] usb 4-1: device descriptor read/64, error -71
[  483.904830][  T952] usb usb4-port1: attempt power cycle
[  484.334156][  T952] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  484.404985][  T952] usb 4-1: device descriptor read/8, error -71
[  484.814016][  T952] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  484.886709][  T952] usb 4-1: device descriptor read/8, error -71
[  485.079206][  T952] usb usb4-port1: unable to enumerate USB device
[  485.494456][   T26] audit: type=1326 audit(2000000177.350:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8584 comm="syz.3.1154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f208fb8ebe9 code=0x7fc00000
[  485.705685][ T8608] fuse: Bad value for 'fd'
[  486.021853][ T8623] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1161'.
[  486.039663][ T8604] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  486.054360][ T8604] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  486.061807][ T8604] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  486.090778][ T8604] Bluetooth: hci2: Suspend notifier action (1) failed: -4
[  486.100828][ T8604] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  486.772302][ T8635] overlayfs: failed to get index nlink (file1/bus, err=-61)
[  486.833771][ T8641] loop4: detected capacity change from 0 to 128
[  486.841074][ T8640] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  487.258683][ T8645] kvm [8643]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x4000
[  487.302549][ T8645] kvm [8643]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x4000
[  487.734071][ T4277] Bluetooth: hci1: command 0x0c1a tx timeout
[  488.064009][ T4277] Bluetooth: hci2: command 0x0c1a tx timeout
[  488.134079][ T4277] Bluetooth: hci4: command 0x0c1a tx timeout
[  488.870319][ T8645] kvm [8643]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x4000
[  490.144288][ T4277] Bluetooth: hci2: command 0x0406 tx timeout
[  490.190777][ T8694] input: syz1 as /devices/virtual/input/input17
[  490.252508][   T26] audit: type=1326 audit(2000000182.110:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8654 comm="syz.1.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609358ebe9 code=0x7fc00000
[  492.884307][ T4306] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  494.064018][ T4306] usb 5-1: device descriptor read/64, error -71
[  494.119896][ T8740] overlayfs: failed to clone upperpath
[  494.354078][ T4306] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  494.553960][ T4306] usb 5-1: device descriptor read/64, error -71
[  494.674200][ T4306] usb usb5-port1: attempt power cycle
[  494.790664][ T8730] loop3: detected capacity change from 0 to 32768
[  495.103990][ T4306] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  495.164894][ T4306] usb 5-1: device descriptor read/8, error -71
[  495.174513][ T8748] loop1: detected capacity change from 0 to 32768
[  495.225511][   T26] audit: type=1326 audit(2000000187.090:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8733 comm="syz.4.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd02cf8ebe9 code=0x7fc00000
[  495.317393][ T8748] XFS (loop1): Mounting V5 Filesystem
[  495.518237][ T8748] XFS (loop1): Ending clean mount
[  495.558930][ T8748] XFS (loop1): Quotacheck needed: Please wait.
[  495.679606][ T8748] XFS (loop1): Quotacheck: Done.
[  496.013758][ T4263] XFS (loop1): Unmounting Filesystem
[  497.314004][ T4581] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  497.505883][ T4581] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  497.540064][ T4581] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  497.551333][ T4581] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  497.571934][ T4581] usb 5-1: config 0 descriptor??
[  497.587893][ T4581] pwc: Askey VC010 type 2 USB webcam detected.
[  498.055074][ T4581] pwc: recv_control_msg error -32 req 02 val 2b00
[  498.068656][ T4581] pwc: recv_control_msg error -32 req 02 val 2700
[  498.078643][ T4581] pwc: recv_control_msg error -32 req 02 val 2c00
[  498.086067][ T4581] pwc: recv_control_msg error -32 req 04 val 1000
[  498.093034][ T4581] pwc: recv_control_msg error -32 req 04 val 1300
[  498.100518][ T4581] pwc: recv_control_msg error -32 req 04 val 1400
[  498.108327][ T4581] pwc: recv_control_msg error -32 req 02 val 2000
[  498.687401][ T4581] pwc: recv_control_msg error -71 req 04 val 1500
[  498.695590][ T4581] pwc: recv_control_msg error -71 req 02 val 2500
[  498.703676][ T4581] pwc: recv_control_msg error -71 req 02 val 2400
[  498.712033][ T4581] pwc: recv_control_msg error -71 req 02 val 2600
[  498.727717][ T4581] pwc: recv_control_msg error -71 req 02 val 2900
[  498.739551][ T4581] pwc: recv_control_msg error -71 req 02 val 2800
[  498.845568][ T4581] pwc: recv_control_msg error -71 req 04 val 1100
[  498.904518][ T4581] pwc: recv_control_msg error -71 req 04 val 1200
[  498.918724][ T8815] loop2: detected capacity change from 0 to 64
[  498.983464][ T4581] pwc: Registered as video103.
[  499.023521][ T4581] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input18
[  499.055122][ T8807] loop3: detected capacity change from 0 to 32768
[  499.131564][ T4581] usb 5-1: USB disconnect, device number 19
[  499.176436][ T8807] XFS (loop3): Mounting V5 Filesystem
[  499.360176][ T8807] XFS (loop3): Ending clean mount
[  499.375401][ T8807] XFS (loop3): Quotacheck needed: Please wait.
[  499.439794][ T8807] XFS (loop3): Quotacheck: Done.
[  500.065881][ T4275] XFS (loop3): Unmounting Filesystem
[  500.230932][ T8839] loop4: detected capacity change from 0 to 512
[  500.282905][ T8839] EXT4-fs: inline encryption not supported
[  500.324847][ T8839] EXT4-fs: Ignoring removed mblk_io_submit option
[  500.367271][ T8839] EXT4-fs (loop4): Test dummy encryption mode enabled
[  500.448186][ T8839] EXT4-fs (loop4): orphan cleanup on readonly fs
[  500.448676][   T26] audit: type=1326 audit(2000000192.310:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8797 comm="syz.0.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f7d8ebe9 code=0x7fc00000
[  500.480860][ T8839] EXT4-fs error (device loop4): ext4_orphan_get:1400: comm syz.4.1227: inode #13: comm syz.4.1227: iget: illegal inode #
[  500.596072][ T8839] EXT4-fs (loop4): Remounting filesystem read-only
[  500.602609][ T8839] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1227: couldn't read orphan inode 13 (err -117)
[  500.634368][ T8839] EXT4-fs (loop4): Remounting filesystem read-only
[  500.644219][ T8839] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  500.658994][ T8839] EXT4-fs error (device loop4): ext4_resize_begin:62: comm syz.4.1227: resize_inode disabled but reserved GDT blocks non-zero
[  500.855168][ T4261] EXT4-fs (loop4): unmounting filesystem.
[  501.871059][ T8856] lo speed is unknown, defaulting to 1000
[  502.243366][ T8843] loop3: detected capacity change from 0 to 40427
[  502.284144][ T8843] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  502.295223][ T8843] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  502.434523][ T4581] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  502.581666][ T8843] F2FS-fs (loop3): Found nat_bits in checkpoint
[  502.652808][ T4581] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  502.676351][ T4581] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  502.693443][ T4581] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[  502.706096][ T4581] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  502.758136][ T4581] usb 5-1: config 0 descriptor??
[  502.986369][ T4581] usbhid 5-1:0.0: can't add hid device: -71
[  503.011706][ T4581] usbhid: probe of 5-1:0.0 failed with error -71
[  503.033349][ T8843] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  503.064832][ T4581] usb 5-1: USB disconnect, device number 20
[  503.074006][ T8843] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  503.270677][ T8843] F2FS-fs (loop3): do_checkpoint failed err:-5, stop checkpoint
[  503.626456][ T8889] loop4: detected capacity change from 0 to 256
[  503.750982][ T8889] loop4: detected capacity change from 0 to 512
[  503.785737][ T8889] ext2: Unknown parameter 'smackfsroot'
[  503.852104][ T8893] loop3: detected capacity change from 0 to 2048
[  503.906546][ T8893]  loop3: p1 < > p3
[  503.913420][ T8893] loop3: p3 size 134217728 extends beyond EOD, truncated
[  504.681339][ T8904] netlink: 'syz.2.1247': attribute type 10 has an invalid length.
[  504.698780][ T8904] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1247'.
[  504.891154][ T8908] overlayfs: failed to get index nlink (file1/bus, err=-61)
[  505.619520][ T8915] loop2: detected capacity change from 0 to 2048
[  505.678193][ T8915] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  505.706858][ T8915] UDF-fs: Scanning with blocksize 512 failed
[  505.751261][ T8915] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  506.233528][   T26] audit: type=1326 audit(2000000198.090:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8881 comm="syz.0.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f7d8ebe9 code=0x7fc00000
[  506.287499][ T8922] kvm [8921]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0x2040
[  506.324130][ T8922] kvm [8921]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0x186 data 0x6040
[  506.386734][ T1274] ieee802154 phy0 wpan0: encryption failed: -22
[  506.393068][ T1274] ieee802154 phy1 wpan1: encryption failed: -22
[  508.304643][ T4308] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  509.014218][ T4308] usb 3-1: device descriptor read/64, error -71
[  509.294377][ T4308] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  509.369825][   T26] audit: type=1326 audit(2000000201.230:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8926 comm="syz.2.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f784f78ebe9 code=0x7fc00000
[  509.464522][ T4308] usb 3-1: device descriptor read/64, error -71
[  509.592476][ T4308] usb usb3-port1: attempt power cycle
[  509.630341][ T8954] blktrace: Concurrent blktraces are not allowed on loop4
[  509.924401][   T41] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  510.118845][   T41] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  510.226876][   T41] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  510.449927][   T41] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  510.566284][   T41] usb 5-1: config 0 descriptor??
[  510.798460][   T41] pwc: Askey VC010 type 2 USB webcam detected.
[  511.202433][ T8952] loop3: detected capacity change from 0 to 32768
[  511.239464][   T41] pwc: recv_control_msg error -32 req 02 val 2b00
[  511.262643][   T41] pwc: recv_control_msg error -32 req 02 val 2700
[  511.373542][   T41] pwc: recv_control_msg error -32 req 02 val 2c00
[  511.462449][ T8952] XFS (loop3): Mounting V5 Filesystem
[  511.474862][   T41] pwc: recv_control_msg error -32 req 04 val 1000
[  511.559966][   T41] pwc: recv_control_msg error -32 req 04 val 1300
[  511.768675][   T41] pwc: recv_control_msg error -32 req 04 val 1400
[  511.876665][   T41] pwc: recv_control_msg error -32 req 02 val 2000
[  511.987647][   T41] pwc: recv_control_msg error -32 req 02 val 2100
[  512.144173][ T8952] XFS (loop3): Ending clean mount
[  512.294576][   T41] pwc: recv_control_msg error -71 req 02 val 2500
[  512.349149][   T41] pwc: recv_control_msg error -71 req 02 val 2400
[  512.459501][   T41] pwc: recv_control_msg error -71 req 02 val 2600
[  512.571178][   T41] pwc: recv_control_msg error -71 req 02 val 2900
[  512.715403][   T41] pwc: recv_control_msg error -71 req 02 val 2800
[  512.852126][   T41] pwc: recv_control_msg error -71 req 04 val 1100
[  513.103096][   T41] pwc: recv_control_msg error -71 req 04 val 1200
[  513.277382][   T41] pwc: Registered as video103.
[  513.417021][   T41] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input19
[  513.561022][   T26] audit: type=1326 audit(2000000205.420:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8963 comm="syz.1.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609358ebe9 code=0x7fc00000
[  513.642740][   T41] usb 5-1: USB disconnect, device number 21
[  513.689327][ T4275] XFS (loop3): Unmounting Filesystem
[  513.770388][ T8988] lo speed is unknown, defaulting to 1000
[  516.747905][   T26] audit: type=1326 audit(2000000208.610:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8990 comm="syz.1.1274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609358ebe9 code=0x7fc00000
[  517.008847][   T26] audit: type=1326 audit(2000000208.870:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9013 comm="syz.2.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f784f78ebe9 code=0x7ffc0000
[  517.084444][   T26] audit: type=1326 audit(2000000208.900:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9013 comm="syz.2.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f784f78ebe9 code=0x7ffc0000
[  517.618979][   T26] audit: type=1326 audit(2000000208.900:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9013 comm="syz.2.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f784f78ebe9 code=0x7ffc0000
[  517.748783][   T26] audit: type=1326 audit(2000000208.900:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9013 comm="syz.2.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f784f78ebe9 code=0x7ffc0000
[  517.771317][   T26] audit: type=1326 audit(2000000208.900:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9013 comm="syz.2.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f784f78ebe9 code=0x7ffc0000
[  517.876481][   T26] audit: type=1326 audit(2000000208.900:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9013 comm="syz.2.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f784f78ebe9 code=0x7ffc0000
[  517.898850][   T26] audit: type=1326 audit(2000000208.900:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9013 comm="syz.2.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7f784f78ebe9 code=0x7ffc0000
[  517.921349][   T26] audit: type=1326 audit(2000000208.930:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9013 comm="syz.2.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f784f78ebe9 code=0x7ffc0000
[  518.347730][ T9004] loop4: detected capacity change from 0 to 32768
[  518.674454][   T41] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  518.844581][   T41] usb 3-1: device descriptor read/64, error -71
[  519.114570][   T41] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  519.294444][   T41] usb 3-1: device descriptor read/64, error -71
[  519.415033][   T41] usb usb3-port1: attempt power cycle
[  519.844242][   T41] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  519.907808][   T41] usb 3-1: device descriptor read/8, error -71
[  520.274572][   T41] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  520.334983][   T41] usb 3-1: device descriptor read/8, error -71
[  520.539112][   T41] usb usb3-port1: unable to enumerate USB device
[  520.961027][ T9039] device bridge0 entered promiscuous mode
[  521.053101][ T9039] device vlan3 entered promiscuous mode
[  521.150599][   T26] audit: type=1326 audit(2000000213.010:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9029 comm="syz.2.1284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f784f78ebe9 code=0x7fc00000
[  523.754936][ T4308] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  524.001435][   T26] audit: type=1326 audit(2000000215.860:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9060 comm="syz.0.1290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f7d8ebe9 code=0x7ffc0000
[  524.225301][ T4308] usb 4-1: device descriptor read/64, error -71
[  524.335205][   T26] audit: type=1326 audit(2000000215.860:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9060 comm="syz.0.1290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f7d8ebe9 code=0x7ffc0000
[  524.393014][   T26] audit: type=1326 audit(2000000215.890:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9060 comm="syz.0.1290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f94f7d8ebe9 code=0x7ffc0000
[  524.417470][   T26] audit: type=1326 audit(2000000215.890:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9060 comm="syz.0.1290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f7d8ebe9 code=0x7ffc0000
[  524.441514][   T26] audit: type=1326 audit(2000000215.890:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9060 comm="syz.0.1290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f7d8ebe9 code=0x7ffc0000
[  524.463774][    C0] vkms_vblank_simulate: vblank timer overrun
[  524.470395][   T26] audit: type=1326 audit(2000000215.890:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9060 comm="syz.0.1290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7f94f7d8ebe9 code=0x7ffc0000
[  524.490842][ T9076] loop2: detected capacity change from 0 to 512
[  524.492697][    C0] vkms_vblank_simulate: vblank timer overrun
[  524.505859][   T26] audit: type=1326 audit(2000000215.890:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9060 comm="syz.0.1290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f7d8ebe9 code=0x7ffc0000
[  524.514536][ T4308] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[  524.528121][    C0] vkms_vblank_simulate: vblank timer overrun
[  524.528786][   T26] audit: type=1326 audit(2000000215.890:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9060 comm="syz.0.1290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f7d8ebe9 code=0x7ffc0000
[  524.564112][    C0] vkms_vblank_simulate: vblank timer overrun
[  524.579691][ T9076] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  524.699441][ T9076] EXT4-fs (loop2): 1 truncate cleaned up
[  524.774533][ T4308] usb 4-1: device descriptor read/64, error -71
[  524.817404][ T9076] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  524.895189][ T4308] usb usb4-port1: attempt power cycle
[  525.257766][   T26] audit: type=1326 audit(2000000216.860:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9051 comm="syz.3.1289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f208fb8ebe9 code=0x7fc00000
[  525.355615][ T4264] EXT4-fs (loop2): unmounting filesystem.
[  525.729314][ T9095] device bridge0 entered promiscuous mode
[  525.735322][ T9095] device vlan3 entered promiscuous mode
[  526.399829][ T9100] loop2: detected capacity change from 0 to 256
[  526.444528][ T9100] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  526.857030][ T4334] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[  528.016233][ T4308] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  528.554480][ T4334] dvb_usb_az6027: probe of 2-1:0.0 failed with error -110
[  528.572261][ T4334] usb 2-1: USB disconnect, device number 14
[  528.612441][ T9106] overlayfs: failed to clone upperpath
[  528.934587][ T4308] usb 4-1: device descriptor read/64, error -71
[  529.586036][ T4308] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  529.767458][ T4308] usb 4-1: device descriptor read/64, error -71
[  529.800536][   T26] audit: type=1326 audit(2000000221.660:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9101 comm="syz.3.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f208fb8ebe9 code=0x7fc00000
[  529.894521][ T4308] usb usb4-port1: attempt power cycle
[  530.564609][ T4342] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  531.771422][ T9145] loop1: detected capacity change from 0 to 16
[  531.781337][ T9145] erofs: (device loop1): mounted with root inode @ nid 36.
[  531.853972][ T4342] usb 5-1: device descriptor read/64, error -71
[  532.201820][ T9158] erofs: (device loop1): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 36
[  532.212818][ T9158] syz.1.1315: attempt to access beyond end of device
[  532.212818][ T9158] loop1: rw=524288, sector=34359738360, nr_sectors = 1976 limit=16
[  532.733947][ T4342] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  532.904052][ T4342] usb 5-1: device descriptor read/64, error -71
[  533.022965][   T26] audit: type=1326 audit(2000000224.880:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9131 comm="syz.4.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd02cf8ebe9 code=0x7fc00000
[  533.048044][ T4342] usb usb5-port1: attempt power cycle
[  534.690198][ T9186] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  534.698264][ T9186] device syzkaller0 entered promiscuous mode
[  534.720735][ T9186] tipc: Resetting bearer <eth:syzkaller0>
[  534.749577][ T9185] tipc: Resetting bearer <eth:syzkaller0>
[  535.128817][ T9185] tipc: Disabling bearer <eth:syzkaller0>
[  537.117147][ T9195] overlayfs: failed to get index nlink (file1/bus, err=-61)
[  538.190595][ T9212] loop3: detected capacity change from 0 to 512
[  538.207613][ T9212] EXT4-fs: Ignoring removed nobh option
[  538.247815][ T9212] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.1333: iget: bad i_size value: 38620345925642
[  538.278187][ T9212] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.1333: couldn't read orphan inode 15 (err -117)
[  538.349820][ T9212] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  538.714236][ T9219] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  540.780134][ T4275] EXT4-fs (loop3): unmounting filesystem.
[  540.893479][ T9241] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  544.723275][ T9293] loop4: detected capacity change from 0 to 128
[  544.971749][ T9293] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  545.323442][ T9293] ext4 filesystem being mounted at /270/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  546.133103][ T4261] EXT4-fs (loop4): unmounting filesystem.
[  547.980634][ T9340] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  548.163951][ T4342] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  548.353969][ T4342] usb 5-1: Using ep0 maxpacket: 32
[  548.363176][ T4342] usb 5-1: config 0 has an invalid interface number: 67 but max is 0
[  548.372012][ T4342] usb 5-1: config 0 has no interface number 0
[  548.388419][ T4342] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  548.401870][ T4342] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  548.411810][ T4342] usb 5-1: Product: syz
[  548.420184][ T4342] usb 5-1: Manufacturer: syz
[  548.426695][ T4342] usb 5-1: SerialNumber: syz
[  548.445856][ T4342] usb 5-1: config 0 descriptor??
[  548.460145][ T4342] smsc95xx v2.0.0
[  548.958928][ T4342] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  548.984916][ T4342] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  551.646063][ T9367] sctp_transport_update_pmtu: 48 callbacks suppressed
[  551.646082][ T9367] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  552.244681][   T26] audit: type=1326 audit(2000000244.060:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9364 comm="syz.3.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f208fb8ebe9 code=0x7fc00000
[  552.379171][   T26] audit: type=1326 audit(2000000244.060:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9364 comm="syz.3.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f208fb8ebe9 code=0x7fc00000
[  552.652157][   T26] audit: type=1326 audit(2000000244.060:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9364 comm="syz.3.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f208fb8ebe9 code=0x7fc00000
[  552.679181][   T26] audit: type=1326 audit(2000000244.060:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9364 comm="syz.3.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f208fb8ebe9 code=0x7fc00000
[  552.701786][   T26] audit: type=1326 audit(2000000244.060:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9364 comm="syz.3.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f208fb8ebe9 code=0x7fc00000
[  552.745246][   T26] audit: type=1326 audit(2000000244.060:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9364 comm="syz.3.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f208fb8ebe9 code=0x7fc00000
[  552.792269][   T26] audit: type=1326 audit(2000000244.060:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9364 comm="syz.3.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f208fb8ebe9 code=0x7fc00000
[  552.815244][   T26] audit: type=1326 audit(2000000244.070:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9364 comm="syz.3.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f208fb8ebe9 code=0x7fc00000
[  552.838373][   T26] audit: type=1326 audit(2000000244.070:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9364 comm="syz.3.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f208fb8ebe9 code=0x7fc00000
[  552.892784][ T4342] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  552.927952][ T4342] smsc95xx: probe of 5-1:0.67 failed with error -71
[  552.933158][   T26] audit: type=1326 audit(2000000244.070:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9364 comm="syz.3.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f208fb8ebe9 code=0x7fc00000
[  552.988959][ T4342] usb 5-1: USB disconnect, device number 25
[  553.284058][ T4320] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[  553.535681][ T4320] usb 4-1: New USB device found, idVendor=041e, idProduct=4051, bcdDevice=dd.57
[  553.574675][ T4320] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  553.644633][ T4320] usb 4-1: Product: syz
[  553.677162][ T4320] usb 4-1: Manufacturer: syz
[  553.717278][ T4320] usb 4-1: SerialNumber: syz
[  553.867013][ T4320] usb 4-1: config 0 descriptor??
[  553.951863][ T4320] gspca_main: gspca_zc3xx-2.14.0 probing 041e:4051
[  554.147920][ T4320] gspca_zc3xx: reg_w_i err -71
[  554.152982][ T4320] gspca_zc3xx: probe of 4-1:0.0 failed with error -71
[  554.251633][ T4320] usb 4-1: USB disconnect, device number 43
[  555.404630][ T9406] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  557.271802][ T9436] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  557.279347][ T9436] device syzkaller0 entered promiscuous mode
[  558.530748][ T9441] tipc: Resetting bearer <eth:syzkaller0>
[  558.600352][ T9433] tipc: Resetting bearer <eth:syzkaller0>
[  559.222726][ T9444] loop1: detected capacity change from 0 to 8192
[  559.373025][ T9444] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  559.388751][ T9444] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal
[  559.398325][ T9444] REISERFS (device loop1): using ordered data mode
[  559.405191][ T9444] reiserfs: using flush barriers
[  559.416525][ T9444] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  559.434256][ T9444] REISERFS (device loop1): checking transaction log (loop1)
[  559.457376][ T9444] REISERFS (device loop1): Using r5 hash to sort names
[  559.498282][ T9444] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  559.511257][ T9433] tipc: Disabling bearer <eth:syzkaller0>
[  561.100462][ T9471] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  561.249635][ T9473] device syzkaller0 entered promiscuous mode
[  561.474933][ T9471] tipc: Resetting bearer <eth:syzkaller0>
[  561.487603][ T9469] tipc: Resetting bearer <eth:syzkaller0>
[  561.624268][ T9469] tipc: Disabling bearer <eth:syzkaller0>
[  563.485468][ T9491] Unsupported ieee802154 address type: 0
[  564.900871][ T9506] CIFS mount error: No usable UNC path provided in device string!
[  564.900871][ T9506] 
[  564.911743][ T9506] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  567.824229][ T1274] ieee802154 phy0 wpan0: encryption failed: -22
[  567.830589][ T1274] ieee802154 phy1 wpan1: encryption failed: -22
[  572.815002][ T9607] Invalid ELF header magic: != ELF
[  573.375067][ T9607] netlink: 'syz.4.1434': attribute type 12 has an invalid length.
[  573.383006][ T9607] netlink: 'syz.4.1434': attribute type 29 has an invalid length.
[  573.392685][ T9607] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1434'.
[  573.402785][ T9607] netlink: 'syz.4.1434': attribute type 1 has an invalid length.
[  573.411648][ T9607] netlink: 'syz.4.1434': attribute type 2 has an invalid length.
[  573.420593][ T9607] netlink: 39 bytes leftover after parsing attributes in process `syz.4.1434'.
[  577.964222][ T9644] loop1: detected capacity change from 0 to 16
[  577.994764][ T9644] erofs: (device loop1): mounted with root inode @ nid 36.
[  578.730162][ T9660] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  580.077426][ T9660] device syzkaller0 entered promiscuous mode
[  580.195396][ T9660] tipc: Resetting bearer <eth:syzkaller0>
[  580.205706][ T9657] tipc: Resetting bearer <eth:syzkaller0>
[  580.986219][ T9657] tipc: Disabling bearer <eth:syzkaller0>
[  581.864432][  T952] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  582.095281][  T952] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  582.120643][  T952] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  582.140250][  T952] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  582.190506][  T952] usb 3-1: config 0 descriptor??
[  582.217669][  T952] pwc: Askey VC010 type 2 USB webcam detected.
[  582.628373][  T952] pwc: recv_control_msg error -32 req 02 val 2b00
[  582.657442][  T952] pwc: recv_control_msg error -32 req 02 val 2700
[  582.702687][  T952] pwc: recv_control_msg error -32 req 02 val 2c00
[  582.745455][  T952] pwc: recv_control_msg error -32 req 04 val 1000
[  582.771261][  T952] pwc: recv_control_msg error -32 req 04 val 1300
[  582.798450][  T952] pwc: recv_control_msg error -32 req 04 val 1400
[  582.819506][  T952] pwc: recv_control_msg error -32 req 02 val 2000
[  582.845180][  T952] pwc: recv_control_msg error -32 req 02 val 2100
[  582.881093][  T952] pwc: recv_control_msg error -32 req 04 val 1500
[  582.945041][  T952] pwc: recv_control_msg error -32 req 02 val 2500
[  582.962116][  T952] pwc: recv_control_msg error -32 req 02 val 2400
[  582.977828][  T952] pwc: recv_control_msg error -32 req 02 val 2600
[  583.002943][  T952] pwc: recv_control_msg error -32 req 02 val 2900
[  583.425169][  T952] pwc: recv_control_msg error -71 req 04 val 1200
[  583.450125][  T952] pwc: Registered as video103.
[  583.478314][  T952] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input20
[  583.518968][  T952] usb 3-1: USB disconnect, device number 26
[  585.283743][ T9736] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  587.269712][ T9749] loop3: detected capacity change from 0 to 16
[  587.355191][ T9749] erofs: (device loop3): mounted with root inode @ nid 36.
[  587.445512][ T9749] erofs: (device loop3): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36
[  588.095402][ T9749] erofs: (device loop3): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36
[  588.125514][ T9749] erofs: (device loop3): z_erofs_read_folio: failed to read, err [-117]
[  589.671657][ T9773] overlayfs: failed to clone upperpath
[  590.600499][ T9779] blktrace: Concurrent blktraces are not allowed on loop4
[  590.610687][ T9779] relay: one or more items not logged [item size (56) > sub-buffer size (10)]
[  591.048614][ T9789] loop2: detected capacity change from 0 to 64
[  591.421628][ T9792] loop4: detected capacity change from 0 to 32768
[  591.428932][ T9792] XFS: ikeep mount option is deprecated.
[  591.495914][ T9796] 
[  591.498281][ T9796] ======================================================
[  591.505301][ T9796] WARNING: possible circular locking dependency detected
[  591.512335][ T9796] 6.1.147-syzkaller #0 Not tainted
[  591.517449][ T9796] ------------------------------------------------------
[  591.524483][ T9796] syz.2.1486/9796 is trying to acquire lock:
[  591.530486][ T9796] ffff8880756fb4f8 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xd7/0x1280
[  591.541379][ T9796] 
[  591.541379][ T9796] but task is already holding lock:
[  591.548749][ T9796] ffff888029d5e0b0 (&tree->tree_lock#2/1){+.+.}-{3:3}, at: hfs_find_init+0x15b/0x1d0
[  591.558263][ T9796] 
[  591.558263][ T9796] which lock already depends on the new lock.
[  591.558263][ T9796] 
[  591.568664][ T9796] 
[  591.568664][ T9796] the existing dependency chain (in reverse order) is:
[  591.577665][ T9796] 
[  591.577665][ T9796] -> #1 (&tree->tree_lock#2/1){+.+.}-{3:3}:
[  591.585740][ T9796]        __mutex_lock+0x120/0xaf0
[  591.590754][ T9796]        hfs_find_init+0x15b/0x1d0
[  591.595850][ T9796]        hfs_extend_file+0x2eb/0x1280
[  591.601207][ T9796]        hfs_bmap_reserve+0x103/0x420
[  591.606573][ T9796]        hfs_cat_create+0x1c0/0x8d0
[  591.611758][ T9796]        hfs_create+0x62/0xd0
[  591.616420][ T9796]        path_openat+0x1187/0x2e70
[  591.621516][ T9796]        do_filp_open+0x1c1/0x3c0
[  591.626522][ T9796]        do_sys_openat2+0x142/0x490
[  591.631704][ T9796]        __x64_sys_openat+0x135/0x160
[  591.637062][ T9796]        do_syscall_64+0x4c/0xa0
[  591.641981][ T9796]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  591.648385][ T9796] 
[  591.648385][ T9796] -> #0 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}:
[  591.657573][ T9796]        __lock_acquire+0x2cf8/0x7c50
[  591.662931][ T9796]        lock_acquire+0x1b4/0x490
[  591.667954][ T9796]        __mutex_lock+0x120/0xaf0
[  591.672962][ T9796]        hfs_extend_file+0xd7/0x1280
[  591.678234][ T9796]        hfs_bmap_reserve+0x103/0x420
[  591.683593][ T9796]        __hfs_ext_write_extent+0x1fa/0x470
[  591.689470][ T9796]        __hfs_ext_cache_extent+0x6b/0x9b0
[  591.695261][ T9796]        hfs_extend_file+0x313/0x1280
[  591.700642][ T9796]        hfs_get_block+0x3d4/0xbd0
[  591.705740][ T9796]        __block_write_begin_int+0x54b/0x1a70
[  591.711793][ T9796]        block_write_begin+0x96/0x1e0
[  591.717148][ T9796]        cont_write_begin+0x5c4/0x7d0
[  591.722504][ T9796]        hfs_write_begin+0x87/0xd0
[  591.727601][ T9796]        cont_write_begin+0x2a9/0x7d0
[  591.732960][ T9796]        hfs_write_begin+0x87/0xd0
[  591.738057][ T9796]        hfs_file_truncate+0x18d/0x9b0
[  591.743530][ T9796]        hfs_inode_setattr+0x4ab/0x6f0
[  591.749037][ T9796]        notify_change+0xc74/0xf40
[  591.754134][ T9796]        do_truncate+0x197/0x220
[  591.759054][ T9796]        do_sys_ftruncate+0x312/0x3c0
[  591.764412][ T9796]        do_syscall_64+0x4c/0xa0
[  591.769339][ T9796]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  591.775768][ T9796] 
[  591.775768][ T9796] other info that might help us debug this:
[  591.775768][ T9796] 
[  591.785978][ T9796]  Possible unsafe locking scenario:
[  591.785978][ T9796] 
[  591.793407][ T9796]        CPU0                    CPU1
[  591.798750][ T9796]        ----                    ----
[  591.804094][ T9796]   lock(&tree->tree_lock#2/1);
[  591.808939][ T9796]                                lock(&HFS_I(tree->inode)->extents_lock);
[  591.817421][ T9796]                                lock(&tree->tree_lock#2/1);
[  591.824789][ T9796]   lock(&HFS_I(tree->inode)->extents_lock);
[  591.830753][ T9796] 
[  591.830753][ T9796]  *** DEADLOCK ***
[  591.830753][ T9796] 
[  591.838879][ T9796] 4 locks held by syz.2.1486/9796:
[  591.843970][ T9796]  #0: ffff888079fb8460 (sb_writers#26){.+.+}-{0:0}, at: do_sys_ftruncate+0x27b/0x3c0
[  591.853529][ T9796]  #1: ffff8880756fca28 (&sb->s_type->i_mutex_key#30){+.+.}-{3:3}, at: do_truncate+0x183/0x220
[  591.863877][ T9796]  #2: ffff8880756fc878 (&HFS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xd7/0x1280
[  591.874570][ T9796]  #3: ffff888029d5e0b0 (&tree->tree_lock#2/1){+.+.}-{3:3}, at: hfs_find_init+0x15b/0x1d0
[  591.884484][ T9796] 
[  591.884484][ T9796] stack backtrace:
[  591.890372][ T9796] CPU: 0 PID: 9796 Comm: syz.2.1486 Not tainted 6.1.147-syzkaller #0
[  591.898433][ T9796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  591.908490][ T9796] Call Trace:
[  591.911758][ T9796]  <TASK>
[  591.914677][ T9796]  dump_stack_lvl+0x168/0x22e
[  591.919343][ T9796]  ? load_image+0x3b0/0x3b0
[  591.923839][ T9796]  ? show_regs_print_info+0x12/0x12
[  591.929025][ T9796]  ? print_circular_bug+0x12b/0x1a0
[  591.934212][ T9796]  check_noncircular+0x274/0x310
[  591.939139][ T9796]  ? add_chain_block+0x940/0x940
[  591.944062][ T9796]  ? lockdep_lock+0xdc/0x1e0
[  591.948641][ T9796]  ? _find_first_zero_bit+0xcf/0x100
[  591.954087][ T9796]  __lock_acquire+0x2cf8/0x7c50
[  591.958930][ T9796]  ? kernel_text_address+0x9c/0xd0
[  591.964029][ T9796]  ? unwind_get_return_address+0x49/0x80
[  591.969646][ T9796]  ? arch_stack_walk+0xf2/0x140
[  591.974485][ T9796]  ? verify_lock_unused+0x140/0x140
[  591.979673][ T9796]  ? stack_trace_save+0x98/0xe0
[  591.984509][ T9796]  ? stack_trace_snprint+0xf0/0xf0
[  591.989605][ T9796]  ? check_noncircular+0x16f/0x310
[  591.994706][ T9796]  lock_acquire+0x1b4/0x490
[  591.999203][ T9796]  ? hfs_extend_file+0xd7/0x1280
[  592.004132][ T9796]  ? __might_sleep+0xd0/0xd0
[  592.008708][ T9796]  ? __lock_acquire+0x28b5/0x7c50
[  592.013716][ T9796]  ? read_lock_is_recursive+0x10/0x10
[  592.019079][ T9796]  __mutex_lock+0x120/0xaf0
[  592.023566][ T9796]  ? hfs_extend_file+0xd7/0x1280
[  592.028498][ T9796]  ? hfs_extend_file+0xd7/0x1280
[  592.033420][ T9796]  ? verify_lock_unused+0x140/0x140
[  592.038610][ T9796]  ? mutex_lock_nested+0x10/0x10
[  592.043538][ T9796]  hfs_extend_file+0xd7/0x1280
[  592.048291][ T9796]  ? hfs_get_block+0xbd0/0xbd0
[  592.053040][ T9796]  ? hfs_write_begin+0x87/0xd0
[  592.057788][ T9796]  ? __mutex_trylock_common+0x14f/0x250
[  592.063318][ T9796]  ? trace_raw_output_contention_end+0xd0/0xd0
[  592.069462][ T9796]  ? rcu_is_watching+0x11/0xa0
[  592.074232][ T9796]  ? trace_contention_end+0x5f/0x170
[  592.079499][ T9796]  ? hfs_brec_find+0x18b/0x500
[  592.084247][ T9796]  ? __mutex_lock+0x19e/0xaf0
[  592.088910][ T9796]  hfs_bmap_reserve+0x103/0x420
[  592.093753][ T9796]  __hfs_ext_write_extent+0x1fa/0x470
[  592.099115][ T9796]  __hfs_ext_cache_extent+0x6b/0x9b0
[  592.104387][ T9796]  ? hfs_find_init+0x15b/0x1d0
[  592.109141][ T9796]  hfs_extend_file+0x313/0x1280
[  592.113979][ T9796]  ? hfs_get_block+0xbd0/0xbd0
[  592.118731][ T9796]  ? memset+0x1e/0x40
[  592.122704][ T9796]  ? lockdep_init_map_type+0x9d/0x880
[  592.128067][ T9796]  hfs_get_block+0x3d4/0xbd0
[  592.132645][ T9796]  ? hfs_free_extents+0x430/0x430
[  592.137744][ T9796]  ? create_empty_buffers+0x59e/0x7a0
[  592.143101][ T9796]  ? do_raw_spin_unlock+0x11d/0x230
[  592.148295][ T9796]  ? create_page_buffers+0x24f/0x4a0
[  592.153573][ T9796]  __block_write_begin_int+0x54b/0x1a70
[  592.159104][ T9796]  ? filemap_add_folio+0x188/0x3c0
[  592.164202][ T9796]  ? xas_load+0x119/0x140
[  592.168522][ T9796]  ? hfs_free_extents+0x430/0x430
[  592.173531][ T9796]  ? page_zero_new_buffers+0x650/0x650
[  592.178979][ T9796]  ? PageHeadHuge+0x8f/0x1c0
[  592.183560][ T9796]  ? hfs_free_extents+0x430/0x430
[  592.188589][ T9796]  block_write_begin+0x96/0x1e0
[  592.193440][ T9796]  ? hfs_free_extents+0x430/0x430
[  592.198457][ T9796]  cont_write_begin+0x5c4/0x7d0
[  592.203306][ T9796]  ? generic_cont_expand_simple+0x1f0/0x1f0
[  592.209190][ T9796]  ? __block_commit_write+0x2d4/0x400
[  592.214554][ T9796]  ? put_page+0xea/0x270
[  592.218785][ T9796]  hfs_write_begin+0x87/0xd0
[  592.223362][ T9796]  ? hfs_free_extents+0x430/0x430
[  592.228377][ T9796]  cont_write_begin+0x2a9/0x7d0
[  592.233220][ T9796]  ? generic_cont_expand_simple+0x1f0/0x1f0
[  592.239101][ T9796]  ? mark_lock+0x94/0x320
[  592.243420][ T9796]  ? truncate_inode_pages_range+0x34d/0xff0
[  592.249300][ T9796]  hfs_write_begin+0x87/0xd0
[  592.253879][ T9796]  ? hfs_free_extents+0x430/0x430
[  592.258891][ T9796]  hfs_file_truncate+0x18d/0x9b0
[  592.263823][ T9796]  ? unmap_mapping_range+0x91/0x100
[  592.269017][ T9796]  ? __up_read+0x27c/0x660
[  592.273414][ T9796]  ? hfs_extend_file+0x1280/0x1280
[  592.278512][ T9796]  ? preempt_count_add+0x8d/0x190
[  592.283538][ T9796]  ? unmap_mapping_range+0x91/0x100
[  592.288746][ T9796]  hfs_inode_setattr+0x4ab/0x6f0
[  592.293688][ T9796]  ? security_inode_setattr+0xd8/0x140
[  592.299138][ T9796]  ? try_break_deleg+0x79/0x120
[  592.303976][ T9796]  ? hfs_evict_inode+0x100/0x100
[  592.308902][ T9796]  notify_change+0xc74/0xf40
[  592.313487][ T9796]  do_truncate+0x197/0x220
[  592.317893][ T9796]  ? put_page_bootmem+0x2c0/0x2c0
[  592.322919][ T9796]  ? rcu_read_lock_bh_held+0xe0/0xe0
[  592.328205][ T9796]  ? bpf_lsm_path_truncate+0x5/0x10
[  592.333401][ T9796]  do_sys_ftruncate+0x312/0x3c0
[  592.338242][ T9796]  do_syscall_64+0x4c/0xa0
[  592.342645][ T9796]  ? clear_bhb_loop+0x60/0xb0
[  592.347305][ T9796]  ? clear_bhb_loop+0x60/0xb0
[  592.351972][ T9796]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  592.357858][ T9796] RIP: 0033:0x7f784f78ebe9
[  592.362270][ T9796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  592.381870][ T9796] RSP: 002b:00007f78506ab038 EFLAGS: 00000246 ORIG_RAX: 000000000000004d
[  592.390275][ T9796] RAX: ffffffffffffffda RBX: 00007f784f9b6090 RCX: 00007f784f78ebe9
[  592.398233][ T9796] RDX: 0000000000000000 RSI: 0000000002007ffb RDI: 000000000000000a
[  592.406190][ T9796] RBP: 00007f784f811e19 R08: 0000000000000000 R09: 0000000000000000
[  592.414145][ T9796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  592.422100][ T9796] R13: 00007f784f9b6128 R14: 00007f784f9b6090 R15: 00007ffe7b963f88
[  592.430061][ T9796]  </TASK>
[  592.493034][ T9792] XFS (loop4): Mounting V5 Filesystem
[  592.572930][ T4264] hfs: node 4:3 still has 1 user(s)!
[  593.294932][ T9792] XFS (loop4): Ending clean mount
[  593.301000][ T9792] XFS (loop4): Quotacheck needed: Please wait.
[  593.311987][ T9792] XFS (loop4): Quotacheck: Done.
[  593.636311][ T4261] XFS (loop4): Unmounting Filesystem