last executing test programs:

13.702745023s ago: executing program 0 (id=1013):
syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab82)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, &(0x7f0000000040), 0x4)
syz_init_net_socket$ax25(0x3, 0x2, 0x7)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000)
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000100)={&(0x7f0000000180)=[<r2=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={r2, <r3=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000300)=[0x0, 0x0, <r4=>0x0], &(0x7f0000000040), 0x4000000000000045, r3, 0xcccccccc})
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000440)=[r3], &(0x7f0000000040), &(0x7f0000000600)=[r4], &(0x7f0000000200)})
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40048094)
r5 = socket$netlink(0x10, 0x3, 0x15)
writev(r5, &(0x7f0000000100)=[{&(0x7f0000000380)="5800000014000300000000000000679abeff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff5a60525808f91cb2cd3d8586dd77daf2f7a5512cd5f0c6", 0x6f}], 0x1)
prlimit64(0x0, 0x8, &(0x7f00000002c0)={0x2, 0x800000088}, 0x0)
sched_setscheduler(0x0, 0x5, 0x0)
getpid()
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r6, 0x29, 0x22, &(0x7f0000000000), 0x6b)

11.731238863s ago: executing program 0 (id=1023):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = socket$inet6(0x10, 0x3, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10)
sendto$inet6(r1, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0)

11.652071135s ago: executing program 0 (id=1024):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0xf6, 0x31c, &(0x7f0000000780)="$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")

11.602707633s ago: executing program 0 (id=1025):
syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x3, 0x1510, &(0x7f0000003640)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0)

11.552042193s ago: executing program 0 (id=1026):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x44280, 0xd164}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x5}, @IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x6}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @loopback}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x48084}, 0x4040800)

11.352801888s ago: executing program 0 (id=1027):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000001340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

11.233561716s ago: executing program 32 (id=1027):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000001340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.885459391s ago: executing program 1 (id=1104):
r0 = socket(0x10, 0x3, 0x0)
connect$netlink(r0, &(0x7f0000000500), 0x4)

2.821552309s ago: executing program 1 (id=1105):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "0100"}, @global=@item_012={0x2, 0x1, 0x0, "0100"}, @main=@item_012={0x0, 0x0, 0x9}, @local=@item_4={0x3, 0x2, 0x3, "7c6e2002"}, @global=@item_012={0x1, 0x1, 0x8, '8'}, @main=@item_4={0x3, 0x0, 0xb, "c93e2503"}, @local=@item_4={0x3, 0x2, 0x1, "dde84050"}, @global=@item_4={0x3, 0x1, 0x5, "ff16fa74"}, @main=@item_4={0x3, 0x0, 0x9, ')$Q)'}]}}, 0x0}, 0x0)

2.701704635s ago: executing program 3 (id=1106):
openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x41, 0x90)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1843, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040))
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, &(0x7f0000000900)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0)
bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x3, 0x3, &(0x7f0000000a80)=@framed, &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x3, 0x3, &(0x7f0000000bc0)=@framed, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000003000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0)

2.652813623s ago: executing program 3 (id=1108):
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
read$FUSE(r0, &(0x7f0000000140)={0x2020}, 0x2020)
pselect6(0x40, &(0x7f00000022c0)={0xc, 0xfffffffffffffff9, 0x9, 0x21a, 0x7, 0xc3, 0x3, 0x1b}, 0x0, 0x0, 0x0, 0x0)
write$FUSE_NOTIFY_RESEND(r0, &(0x7f0000000000)={0x14}, 0x14)

2.481604174s ago: executing program 3 (id=1110):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4)
ioctl$int_in(r0, 0x5452, &(0x7f0000000740)=0x4)
setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000880)=0x3, 0x4)
sendmmsg$inet6(r0, &(0x7f0000005380)=[{{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000001900)="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", 0x4c5}], 0x1}}], 0x1, 0x1)

2.280905502s ago: executing program 3 (id=1114):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1)

1.819407322s ago: executing program 2 (id=1119):
r0 = socket$netlink(0x10, 0x3, 0x4)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafc0d8c560a8447608004000000000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1)

1.610455958s ago: executing program 2 (id=1120):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x1010006, &(0x7f000001fa00)={[{@errors_continue}, {@discard_size={'discard', 0x3d, 0xaff9}}, {}, {@nodiscard}, {@gid}, {@nodiscard}, {@nointegrity}, {@usrquota}, {@nodiscard}, {@noquota}]}, 0x1, 0x62a1, &(0x7f0000006600)="$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")
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00')
read$FUSE(r0, &(0x7f000000c1c0)={0x2020}, 0x2020)

1.369149285s ago: executing program 2 (id=1121):
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x16, 0x0)
pivot_root(&(0x7f0000000580)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

1.368708541s ago: executing program 3 (id=1122):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000ec0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000408001d00", @ANYRES32, @ANYBLOB="080001"], 0x24}}, 0x0)

1.290298976s ago: executing program 2 (id=1123):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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")
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x9000)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12)
write(r1, &(0x7f0000004200)='t', 0x1)
sendfile(r1, r0, 0x0, 0x3ffff)
sendfile(r1, r0, 0x0, 0x7ffff000)
sched_setaffinity(0x0, 0x0, 0x0)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, 0x0, 0xa8c80)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, 0x0)
r3 = getpid()
kcmp(r3, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x814)

1.289756419s ago: executing program 3 (id=1124):
getpid()
getrlimit(0x4, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x4002)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4044004)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4004800)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2}, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100))

1.000848221s ago: executing program 1 (id=1125):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$FS_IOC_GETFLAGS(r0, 0x890d, 0x0)

880.342773ms ago: executing program 1 (id=1126):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x9c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4041}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x98, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x98}}, 0x0)

598.172721ms ago: executing program 1 (id=1127):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001100)=ANY=[@ANYBLOB="200000006a00010000000000fbdbdf350a0000000000000008"], 0x20}}, 0x0)

329.787601ms ago: executing program 1 (id=1128):
r0 = socket$netlink(0x10, 0x3, 0x0)
unshare(0x22020600)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00')
syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x90, &(0x7f0000000240)=ANY=[], 0x3, 0xd99, &(0x7f0000006900)="$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")
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r2, 0x0, 0x8000000000000000}, 0x18)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
setns(r1, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

329.286997ms ago: executing program 2 (id=1129):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/\x00et/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44\x8cm\xa0\x8dN\xd4\xa2\x88\x00\xd1l,'}, 0xe4)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
fchdir(r0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents(r1, &(0x7f00000004c0)=""/66, 0x42)
getdents(r1, 0xfffffffffffffffd, 0xbb)

0s ago: executing program 2 (id=1130):
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
pipe(&(0x7f0000000040))
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
umount2(&(0x7f0000000040)='.\x00', 0x2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)

kernel console output (not intermixed with test programs):

kipping remainder of the config
[   92.356769][  T972] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 32200, setting to 8
[   92.361253][ T8794] IPVS: using max 61 ests per chain, 146400 per kthread
[   92.361269][  T972] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 is Bulk; changing to Interrupt
[   92.367538][  T972] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   92.371438][  T972] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   92.376272][  T972] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8d.58
[   92.380284][  T972] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   92.385528][  T972] usb 2-1: config 0 descriptor??
[   92.388314][ T8785] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   92.558269][ T8798] loop2: detected capacity change from 0 to 8
[   92.569557][   T52] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   92.572907][ T8798] SQUASHFS error: lzo decompression failed, data probably corrupt
[   92.575672][ T8798] SQUASHFS error: Failed to read block 0x91: -5
[   92.577562][ T8798] SQUASHFS error: Unable to read metadata cache entry [8f]
[   92.582334][ T8798] SQUASHFS error: Unable to read inode 0x11f
[   92.601306][    T9] usb 2-1: USB disconnect, device number 4
[   92.704620][ T8800] loop2: detected capacity change from 0 to 512
[   92.711873][ T8800] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   92.722892][   T52] usb 1-1: config 0 has an invalid interface number: 41 but max is 0
[   92.726337][   T52] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   92.732789][ T8800] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   92.738616][   T52] usb 1-1: config 0 has no interface number 0
[   92.740074][ T8800] EXT4-fs (loop2): 1 truncate cleaned up
[   92.745384][ T8800] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   92.749356][   T52] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c
[   92.752706][   T52] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   92.756585][   T52] usb 1-1: Product: syz
[   92.758200][   T52] usb 1-1: Manufacturer: syz
[   92.760383][   T52] usb 1-1: SerialNumber: syz
[   92.764348][   T52] usb 1-1: config 0 descriptor??
[   92.774067][ T5930] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   92.778730][   T52] ims_pcu 1-1:0.41: Missing CDC union descriptor
[   92.781612][   T52] ims_pcu 1-1:0.41: probe with driver ims_pcu failed with error -22
[   92.978497][    T9] usb 1-1: USB disconnect, device number 4
[   93.049348][   T52] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   93.222737][   T52] usb 3-1: Using ep0 maxpacket: 16
[   93.226200][   T52] usb 3-1: config 0 has an invalid interface number: 142 but max is 0
[   93.228759][   T52] usb 3-1: config 0 has no interface number 0
[   93.234031][   T52] usb 3-1: New USB device found, idVendor=1bcf, idProduct=0b40, bcdDevice=a0.f1
[   93.244948][   T52] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   93.247584][   T52] usb 3-1: Product: syz
[   93.248945][   T52] usb 3-1: Manufacturer: syz
[   93.255802][   T33] audit: type=1400 audit(1755119717.478:10): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=8811 comm="syz.1.328"
[   93.262143][   T52] usb 3-1: SerialNumber: syz
[   93.275026][   T52] usb 3-1: config 0 descriptor??
[   93.436158][ T8818] loop1: detected capacity change from 0 to 4096
[   93.440754][ T8818] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[   93.466555][ T8818] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[   93.473230][ T8818] ntfs3(loop1): ino=19, mi_enum_attr
[   93.491445][   T52] usb 3-1: Found UVC 0.00 device syz (1bcf:0b40)
[   93.493537][ T8818] ntfs3(loop1): failed to convert "c46c" to cp857
[   93.496752][   T52] usb 3-1: Forcing UVC version to 1.0a
[   93.499015][   T52] usb 3-1: No valid video chain found.
[   93.504607][ T8818] ntfs3(loop1): ino=20, mi_enum_attr
[   93.508537][   T52] usb 3-1: USB disconnect, device number 6
[   93.604004][ T8822] loop1: detected capacity change from 0 to 256
[   93.608188][ T8822] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   93.613757][ T8822] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[   93.622228][ T8822] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d)
[   93.654406][ T8822] exFAT-fs (loop1): error, invalid access to FAT (entry 0xffffffff)
[   93.664239][ T8822] exFAT-fs (loop1): Filesystem has been set read-only
[   93.667498][ T8822] exFAT-fs (loop1): error, invalid access to FAT (entry 0xffffffff)
[   93.674881][ T8822] exFAT-fs (loop1): error, invalid access to FAT (entry 0xffffffff)
[   94.106933][ T8832] hfsplus: unable to find HFS+ superblock
[   95.181565][ T8836] loop2: detected capacity change from 0 to 4096
[   95.201016][ T8836] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512).
[   95.205081][ T8836] ntfs3(loop2): ino=3, mi_enum_attr
[   95.272152][ T8836] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[   95.275106][ T8836] ntfs3(loop2): ino=1f, "file2" failed to open parent directory r=5 to update
[   95.312492][   T26] ntfs3(loop2): ino=1f, failed to open parent directory r=5 to update
[   96.514994][ T8854] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.344'.
[   96.765083][ T8863] /dev/nullb0: Can't open blockdev
[   96.831871][ T8867] netlink: 8 bytes leftover after parsing attributes in process `syz.1.351'.
[   96.869230][    T9] usb 3-1: new low-speed USB device number 7 using dummy_hcd
[   96.875815][   T33] audit: type=1800 audit(1755119721.098:11): pid=8870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.352" name="file1" dev="tmpfs" ino=572 res=0 errno=0
[   96.919968][ T8872] loop1: detected capacity change from 0 to 1024
[   96.922889][ T8872] EXT4-fs: Ignoring removed nomblk_io_submit option
[   96.936433][ T8872] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   96.980149][ T5935] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.021148][    T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   97.025815][    T9] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[   97.032446][    T9] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[   97.036538][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.042963][    T9] usb 3-1: config 0 descriptor??
[   97.248988][   T52] usb 3-1: USB disconnect, device number 7
[   97.263255][ T8880] loop1: detected capacity change from 0 to 1024
[   97.280697][ T8880] EXT4-fs: Ignoring removed nobh option
[   97.283121][ T8880] EXT4-fs: Ignoring removed bh option
[   97.293306][ T8880] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   97.612486][ T8884] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.355: Allocating blocks 497-513 which overlap fs metadata
[   97.634321][ T8884] EXT4-fs (loop1): pa ffff888103572658: logic 256, phys. 385, len 8
[   97.636944][ T8884] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1
[   98.150838][  T972] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   98.198216][ T5935] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.221912][ T5981] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[   98.309192][  T972] usb 1-1: Using ep0 maxpacket: 8
[   98.314383][  T972] usb 1-1: New USB device found, idVendor=093b, idProduct=a102, bcdDevice= 0.01
[   98.317732][  T972] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   98.323613][  T972] usb 1-1: Product: syz
[   98.325296][  T972] usb 1-1: Manufacturer: syz
[   98.327080][  T972] usb 1-1: SerialNumber: syz
[   98.341835][  T972] usb 1-1: config 0 descriptor??
[   98.357293][  T972] go7007 1-1:0.0: probe with driver go7007 failed with error -12
[   98.379595][ T5981] usb 3-1: Using ep0 maxpacket: 32
[   98.382953][ T5981] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   98.387985][ T5981] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[   98.391893][ T5981] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   98.394330][ T5981] usb 3-1: Product: syz
[   98.395578][ T5981] usb 3-1: Manufacturer: syz
[   98.396968][ T5981] usb 3-1: SerialNumber: syz
[   98.400336][ T5981] usb 3-1: config 0 descriptor??
[   98.406417][ T5981] usb 3-1: bad CDC descriptors
[   98.409384][ T5981] usb 3-1: unsupported MDLM descriptors
[   98.558210][ T5981] usb 1-1: USB disconnect, device number 5
[   98.607001][  T972] usb 3-1: USB disconnect, device number 8
[   98.749409][ T1867] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   98.913522][ T1867] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   98.918236][ T1867] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   98.925169][ T1867] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[   98.930603][ T1867] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[   98.933733][ T1867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   98.938379][ T8898] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[   99.426286][ T8918] loop2: detected capacity change from 0 to 2048
[   99.441390][ T8918] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   99.689818][ T8923] loop0: detected capacity change from 0 to 64
[   99.725565][ T8921] loop2: detected capacity change from 0 to 40427
[   99.736290][ T8921] F2FS-fs (loop2): Image doesn't support compression
[   99.748551][ T8921] F2FS-fs (loop2): build fault injection rate: 690
[   99.767988][ T8921] F2FS-fs (loop2): invalid crc value
[   99.847868][ T8921] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   99.855947][ T8921] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  100.188124][ T8936] loop0: detected capacity change from 0 to 128
[  100.191688][ T8936] EXT4-fs: Ignoring removed oldalloc option
[  100.194039][ T8936] EXT4-fs: Ignoring removed nomblk_io_submit option
[  100.221194][ T8936] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  100.226850][ T8936] ext4 filesystem being mounted at /100/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  100.272631][ T5929] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  100.517304][ T1867] aiptek 2-1:17.0: Aiptek using 400 ms programming speed
[  100.521806][ T8952] loop2: detected capacity change from 0 to 64
[  100.527311][ T1867] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input6
[  100.592319][    C0] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[  100.596475][ T1867] usb 2-1: USB disconnect, device number 5
[  100.934612][ T8958] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  100.940054][ T8958] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  101.189403][ T1271] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  101.342958][ T1271] usb 3-1: config 102 has an invalid interface number: 120 but max is 0
[  101.346398][ T1271] usb 3-1: config 102 has no interface number 0
[  101.350757][ T1271] usb 3-1: config 102 interface 120 has no altsetting 0
[  101.358250][ T1271] usb 3-1: New USB device found, idVendor=10fd, idProduct=de00, bcdDevice= 0.01
[  101.364320][ T1271] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  101.367482][ T1271] usb 3-1: Product: syz
[  101.370462][ T1271] usb 3-1: Manufacturer: syz
[  101.372388][ T1271] usb 3-1: SerialNumber: syz
[  101.418453][ T8964] netlink: 28 bytes leftover after parsing attributes in process `syz.1.390'.
[  101.424770][ T8964] netlink: 'syz.1.390': attribute type 7 has an invalid length.
[  101.428089][ T8964] netlink: 'syz.1.390': attribute type 8 has an invalid length.
[  101.430600][ T8964] netlink: 4 bytes leftover after parsing attributes in process `syz.1.390'.
[  101.595716][ T1271] go7007 3-1:102.120: The Lifeview TV Walker Ultra is not supported. Sorry!
[  101.610727][ T1271] usb 3-1: USB disconnect, device number 9
[  101.660947][ T8972] Bluetooth: MGMT ver 1.23
[  101.834750][ T8975] loop0: detected capacity change from 0 to 32768
[  101.908069][ T8975] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[  101.908083][ T8975]   allowing incompatible features above 0.0: (unknown version)
[  101.908089][ T8975]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  101.922660][ T8975] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[  101.925133][ T8975] bcachefs (loop0): initializing new filesystem
[  101.946745][ T8975] bcachefs (loop0): going read-write
[  102.151712][ T8975] bcachefs (loop0): marking superblocks
[  102.196086][ T8975] bcachefs (loop0): initializing freespace
[  102.208138][ T8975] bcachefs (loop0): done initializing freespace
[  102.239487][ T8975] bcachefs (loop0): reading snapshots table
[  102.247098][ T8975] bcachefs (loop0): reading snapshots done
[  102.274966][ T8975] bcachefs (loop0): done starting filesystem
[  102.424618][ T8999] loop2: detected capacity change from 0 to 128
[  102.431788][ T8999] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  102.442025][ T8975] syz.0.395 (8975) used greatest stack depth: 17448 bytes left
[  102.459530][ T8999] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  102.562868][ T5929] bcachefs (loop0): shutting down
[  102.565914][ T5929] bcachefs (loop0): going read-only
[  102.568457][ T5929] bcachefs (loop0): finished waiting for writes to stop
[  102.575734][ T5929] bcachefs (loop0): flushing journal and stopping allocators, journal seq 5
[  102.603904][ T5929] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 5
[  102.622960][ T5929] bcachefs (loop0): clean shutdown complete, journal seq 6
[  102.626325][ T5929] bcachefs (loop0): marking filesystem clean
[  102.706994][ T9005] loop1: detected capacity change from 0 to 256
[  102.715107][ T5929] bcachefs (loop0): shutdown complete
[  102.746876][ T9005] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[  103.125991][ T9013] loop1: detected capacity change from 0 to 32768
[  103.171030][ T9013] ERROR: (device loop1): dbAllocAG: unable to allocate blocks
[  103.171030][ T9013] 
[  103.175346][ T9013] jfs_create: dtInsert returned -EIO
[  103.177837][ T9013] ERROR: (device loop1): jfs_create: 
[  103.177837][ T9013] 
[  103.288475][ T9017] loop2: detected capacity change from 0 to 32768
[  103.855129][ T9032] loop1: detected capacity change from 0 to 256
[  103.885033][ T9032] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x9aa2f194, utbl_chksum : 0xe619d30d)
[  104.226721][ T9042] input: syz0 as /devices/virtual/input/input7
[  104.259433][ T9045] process 'syz.0.420' launched './file0' with NULL argv: empty string added
[  104.286680][ T9047] loop1: detected capacity change from 0 to 736
[  104.539367][ T9057] loop1: detected capacity change from 0 to 4096
[  104.929207][  T972] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  104.969184][ T9075] loop0: detected capacity change from 0 to 32768
[  105.006387][ T9075] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  105.104076][  T972] usb 2-1: config 0 has an invalid interface number: 173 but max is 0
[  105.116717][  T972] usb 2-1: config 0 has no interface number 0
[  105.122880][ T5929] ocfs2: Unmounting device (7,0) on (node local)
[  105.128450][  T972] usb 2-1: New USB device found, idVendor=2040, idProduct=4982, bcdDevice=95.d3
[  105.131838][  T972] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  105.156311][  T972] usb 2-1: config 0 descriptor??
[  105.421359][  T972] hdpvr 2-1:0.173: unexpected answer of status request, len -71
[  105.425008][  T972] hdpvr 2-1:0.173: device init failed
[  105.427491][  T972] hdpvr 2-1:0.173: probe with driver hdpvr failed with error -12
[  105.446406][  T972] usb 2-1: USB disconnect, device number 6
[  105.639538][ T5995] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  105.828421][ T5995] usb 1-1: config 220 has an invalid interface number: 76 but max is 2
[  105.832823][ T5995] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  105.835674][ T5995] usb 1-1: config 220 has an invalid descriptor of length 13, skipping remainder of the config
[  105.840663][ T5995] usb 1-1: config 220 has no interface number 2
[  105.843508][ T5995] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  105.847569][ T5995] usb 1-1: config 220 interface 0 has no altsetting 0
[  105.850604][ T5995] usb 1-1: config 220 interface 76 has no altsetting 0
[  105.853025][ T5995] usb 1-1: config 220 interface 1 has no altsetting 0
[  105.863953][ T5995] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  105.866849][ T5995] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.871143][ T5995] usb 1-1: Product: syz
[  105.872549][ T5995] usb 1-1: Manufacturer: syz
[  105.874044][ T5995] usb 1-1: SerialNumber: syz
[  106.113100][ T5995] usb 1-1: selecting invalid altsetting 0
[  106.124252][ T5995] usb 1-1: Found UVC 7.01 device syz (8086:0b07)
[  106.126854][ T5995] usb 1-1: No valid video chain found.
[  106.141429][ T5995] usb 1-1: selecting invalid altsetting 0
[  106.143392][ T5995] usbtest 1-1:220.1: probe with driver usbtest failed with error -22
[  106.166110][ T5995] usb 1-1: USB disconnect, device number 6
[  106.336154][ T9089] loop1: detected capacity change from 0 to 8192
[  106.649801][ T9103] binder: 9102:9103 unknown command 0
[  106.651921][ T9103] binder: 9102:9103 ioctl c0306201 2000000003c0 returned -22
[  106.799325][ T5981] usb 3-1: new low-speed USB device number 10 using dummy_hcd
[  107.102313][ T5981] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  107.105970][ T5981] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  107.113494][ T5981] usb 3-1: config 0 descriptor??
[  107.354569][ T5981] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[  107.493044][ T9121] loop1: detected capacity change from 0 to 40427
[  107.501033][ T9121] F2FS-fs (loop1): Wrong SSA boundary, start(3584) end(4096) blocks(0)
[  107.512591][ T9121] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  107.516802][ T9121] F2FS-fs (loop1): build fault injection type: 0x6
[  107.525652][ T9121] F2FS-fs (loop1): invalid crc value
[  107.559840][ T5981] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  107.563771][ T5981] asix 3-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  107.567018][ T9121] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  107.572031][ T5981] asix 3-1:0.0: probe with driver asix failed with error -71
[  107.576490][ T9121] F2FS-fs (loop1): Start checkpoint disabled!
[  107.577775][ T5981] usb 3-1: USB disconnect, device number 10
[  107.590899][ T9121] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  107.596719][ T9121] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  108.442183][ T9141] warning: `syz.2.458' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  108.843533][ T1226] kworker/u10:8: attempt to access beyond end of device
[  108.843533][ T1226] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  108.848941][ T1226] CPU: 1 UID: 0 PID: 1226 Comm: kworker/u10:8 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  108.848956][ T1226] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  108.848962][ T1226] Workqueue: writeback wb_workfn (flush-7:1)
[  108.848978][ T1226] Call Trace:
[  108.848983][ T1226]  <TASK>
[  108.848988][ T1226]  dump_stack_lvl+0x189/0x250
[  108.849003][ T1226]  ? __pfx_dump_stack_lvl+0x10/0x10
[  108.849013][ T1226]  ? __pfx_queue_work_on+0x10/0x10
[  108.849021][ T1226]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  108.849055][ T1226]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  108.849070][ T1226]  f2fs_handle_critical_error+0x37c/0x540
[  108.849085][ T1226]  f2fs_write_end_io+0x886/0xb60
[  108.849106][ T1226]  __submit_merged_bio+0x27a/0x6a0
[  108.849120][ T1226]  __submit_merged_write_cond+0x255/0x530
[  108.849133][ T1226]  f2fs_write_data_pages+0x261d/0x3000
[  108.849162][ T1226]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  108.849180][ T1226]  ? rcu_is_watching+0x15/0xb0
[  108.849203][ T1226]  ? __pfx_rcu_read_lock_sched_held+0x10/0x10
[  108.849215][ T1226]  ? __switch_to+0xdae/0x1670
[  108.849238][ T1226]  ? rcu_read_lock_sched_held+0x89/0x100
[  108.849246][ T1226]  ? __pfx_rcu_read_lock_sched_held+0x10/0x10
[  108.849265][ T1226]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  108.849276][ T1226]  do_writepages+0x32e/0x550
[  108.849292][ T1226]  ? reacquire_held_locks+0x127/0x1d0
[  108.849300][ T1226]  ? writeback_sb_inodes+0x384/0x1010
[  108.849314][ T1226]  __writeback_single_inode+0x145/0xff0
[  108.849324][ T1226]  ? do_raw_spin_unlock+0x4d/0x240
[  108.849336][ T1226]  writeback_sb_inodes+0x6c7/0x1010
[  108.849360][ T1226]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  108.849392][ T1226]  ? rcu_is_watching+0x15/0xb0
[  108.849405][ T1226]  wb_writeback+0x43b/0xaf0
[  108.849419][ T1226]  ? queue_io+0x351/0x590
[  108.849430][ T1226]  ? __pfx_wb_writeback+0x10/0x10
[  108.849444][ T1226]  ? _raw_spin_unlock_irq+0x23/0x50
[  108.849455][ T1226]  wb_workfn+0x409/0xef0
[  108.849472][ T1226]  ? __pfx_wb_workfn+0x10/0x10
[  108.849483][ T1226]  ? __lock_acquire+0xab9/0xd20
[  108.849500][ T1226]  ? process_scheduled_works+0x9ef/0x17b0
[  108.849511][ T1226]  ? _raw_spin_unlock_irq+0x23/0x50
[  108.849519][ T1226]  ? process_scheduled_works+0x9ef/0x17b0
[  108.849526][ T1226]  ? process_scheduled_works+0x9ef/0x17b0
[  108.849534][ T1226]  process_scheduled_works+0xae1/0x17b0
[  108.849558][ T1226]  ? __pfx_process_scheduled_works+0x10/0x10
[  108.849580][ T1226]  worker_thread+0x8a0/0xda0
[  108.849590][ T1226]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  108.849602][ T1226]  ? __kthread_parkme+0x7b/0x200
[  108.849640][ T1226]  kthread+0x711/0x8a0
[  108.849654][ T1226]  ? __pfx_worker_thread+0x10/0x10
[  108.849662][ T1226]  ? __pfx_kthread+0x10/0x10
[  108.849672][ T1226]  ? _raw_spin_unlock_irq+0x23/0x50
[  108.849710][ T1226]  ? lockdep_hardirqs_on+0x9c/0x150
[  108.849718][ T1226]  ? __pfx_kthread+0x10/0x10
[  108.849728][ T1226]  ret_from_fork+0x3fc/0x770
[  108.849738][ T1226]  ? __pfx_ret_from_fork+0x10/0x10
[  108.849750][ T1226]  ? __switch_to_asm+0x39/0x70
[  108.849762][ T1226]  ? __switch_to_asm+0x33/0x70
[  108.849774][ T1226]  ? __pfx_kthread+0x10/0x10
[  108.849789][ T1226]  ret_from_fork_asm+0x1a/0x30
[  108.849817][ T1226]  </TASK>
[  108.985486][ T1226] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  109.728694][ T9165] loop1: detected capacity change from 0 to 32768
[  109.764457][ T9165] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  109.769566][ T9147] comedi comedi2: reset error (fatal)
[  109.793979][ T9165] XFS (loop1): Ending clean mount
[  109.838315][ T5935] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  110.172042][ T9186] loop2: detected capacity change from 0 to 1024
[  110.176211][ T9186] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  110.203227][ T9186] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  110.228136][ T9186] EXT4-fs (loop2): orphan cleanup on readonly fs
[  110.242513][ T9186] EXT4-fs error (device loop2): __ext4_get_inode_loc:4861: comm syz.2.474: Invalid inode table block 0 in block_group 0
[  110.258508][ T9186] EXT4-fs (loop2): Remounting filesystem read-only
[  110.261663][ T9186] Quota error (device loop2): write_blk: dquota write failed
[  110.264712][ T9186] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  110.268726][ T9186] EXT4-fs (loop2): 1 truncate cleaned up
[  110.273254][ T9186] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  110.306091][ T5930] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.451505][ T9196] mkiss: ax0: crc mode is auto.
[  111.429604][ T5995] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  111.623026][ T5995] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  111.628232][ T5995] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  111.633479][ T5995] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  111.636895][ T5995] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  111.664554][ T5995] usb 1-1: config 0 descriptor??
[  111.864116][ T9206] loop2: detected capacity change from 0 to 32768
[  111.963696][ T9206] ERROR: (device loop2): dbAdjCtl: the maximum free buddy is not the old root
[  111.963696][ T9206] 
[  111.967637][ T9206] ERROR: (device loop2): remounting filesystem as read-only
[  112.119276][ T5995] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0
[  112.122276][ T5995] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0
[  112.135620][ T5995] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0
[  112.138559][ T5995] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0
[  112.155644][ T5995] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0
[  112.177531][ T5995] playstation 0003:054C:0DF2.0002: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.0-1/input0
[  112.715662][ T5995] playstation 0003:054C:0DF2.0002: Failed to retrieve feature with reportID 5: -71
[  112.718483][ T5995] playstation 0003:054C:0DF2.0002: Failed to retrieve DualSense calibration info: -71
[  112.730594][ T5995] playstation 0003:054C:0DF2.0002: Failed to get calibration data from DualSense
[  112.734285][ T5995] playstation 0003:054C:0DF2.0002: Failed to create dualsense.
[  112.765178][ T5995] playstation 0003:054C:0DF2.0002: probe with driver playstation failed with error -71
[  112.776800][ T5995] usb 1-1: USB disconnect, device number 7
[  113.454212][   T33] audit: type=1804 audit(1755119737.678:12): pid=9231 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.492" name="/newroot/143/file0" dev="tmpfs" ino=766 res=1 errno=0
[  113.499222][   T24] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  113.652061][   T24] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 15
[  113.658354][   T24] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  113.662457][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  113.665474][   T24] usb 1-1: SerialNumber: syz
[  113.882524][   T24] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71
[  113.897652][ T9239] netlink: 12 bytes leftover after parsing attributes in process `syz.1.495'.
[  113.904701][   T24] usb 1-1: USB disconnect, device number 8
[  114.541941][ T9253] netlink: 'syz.2.501': attribute type 2 has an invalid length.
[  114.753817][ T9265] netlink: 'syz.0.507': attribute type 8 has an invalid length.
[  115.086627][ T9277] veth0_to_team: entered promiscuous mode
[  115.086734][ T9277] veth0_to_team: entered allmulticast mode
[  115.678199][ T9287] max out of range
[  115.910557][ T9293] loop2: detected capacity change from 0 to 4096
[  115.925540][ T9297] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  116.095537][ T9305] loop0: detected capacity change from 0 to 1024
[  116.119202][ T5995] usb 2-1: new low-speed USB device number 7 using dummy_hcd
[  116.127952][ T9305] hfsplus: bad catalog entry type
[  116.281929][ T5995] usb 2-1: unable to get BOS descriptor or descriptor too short
[  116.286817][ T5995] usb 2-1: config 7 has an invalid interface number: 67 but max is 0
[  116.290259][ T5995] usb 2-1: config 7 has no interface number 0
[  116.302322][ T5995] usb 2-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=6b.16
[  116.306057][ T5995] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.309506][ T5995] usb 2-1: Product: 㯑
[  116.509178][ T1867] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  116.530211][ T5995] usb 2-1: USB disconnect, device number 7
[  116.659455][ T1867] usb 1-1: Using ep0 maxpacket: 8
[  116.664259][ T1867] usb 1-1: unable to get BOS descriptor or descriptor too short
[  116.672133][ T1867] usb 1-1: config 17 has an invalid interface number: 8 but max is 1
[  116.675615][ T1867] usb 1-1: config 17 has 1 interface, different from the descriptor's value: 2
[  116.680627][ T1867] usb 1-1: config 17 has no interface number 0
[  116.683261][ T1867] usb 1-1: config 17 interface 8 altsetting 6 endpoint 0x3 has an invalid bInterval 170, changing to 7
[  116.705199][ T1867] usb 1-1: config 17 interface 8 altsetting 6 endpoint 0x3 has invalid maxpacket 33185, setting to 1024
[  116.732613][ T1867] usb 1-1: config 17 interface 8 has no altsetting 0
[  116.755086][ T1867] usb 1-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff
[  116.758904][ T1867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.764158][ T1867] usb 1-1: Product: syz
[  116.765901][ T1867] usb 1-1: Manufacturer: syz
[  116.767806][ T1867] usb 1-1: SerialNumber: syz
[  117.024698][ T1867] usb 1-1: selecting invalid altsetting 0
[  117.027099][ T1867] usb 1-1: 8:6 : no UAC_FORMAT_TYPE desc
[  117.031485][ T1867] usb 1-1: selecting invalid altsetting 0
[  117.220121][ T1867] usb 1-1: USB disconnect, device number 9
[  117.767669][ T9321] loop6: detected capacity change from 0 to 524287999
[  117.775205][ T9321] Buffer I/O error on dev loop6, logical block 0, async page read
[  117.781110][ T9321] Buffer I/O error on dev loop6, logical block 0, async page read
[  117.785219][ T9321] Buffer I/O error on dev loop6, logical block 0, async page read
[  117.788671][ T9321] Buffer I/O error on dev loop6, logical block 0, async page read
[  117.799696][ T9321] Buffer I/O error on dev loop6, logical block 0, async page read
[  117.812568][ T9321] Buffer I/O error on dev loop6, logical block 0, async page read
[  117.820042][ T9321] Buffer I/O error on dev loop6, logical block 0, async page read
[  117.828568][ T9321] Buffer I/O error on dev loop6, logical block 0, async page read
[  117.830461][ T9323] loop1: detected capacity change from 0 to 512
[  117.832563][ T9321] ldm_validate_partition_table(): Disk read failed.
[  117.856890][ T9323] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  117.880415][ T9321] Buffer I/O error on dev loop6, logical block 0, async page read
[  117.885063][ T9321] Buffer I/O error on dev loop6, logical block 0, async page read
[  117.888525][ T9321] Dev loop6: unable to read RDB block 0
[  117.893160][ T9321]  loop6: unable to read partition table
[  117.896435][ T9321] loop_reread_partitions: partition scan of loop6 ($) failed (rc=-5)
[  118.984399][ T9341] loop2: detected capacity change from 0 to 32768
[  119.004795][ T9341] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  119.026120][ T9341] XFS (loop2): Ending clean mount
[  119.067939][ T9341] XFS (loop2): Quotacheck needed: Please wait.
[  119.116387][ T9341] XFS (loop2): Quotacheck: Done.
[  119.187311][ T5930] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  119.247895][ T9357] loop1: detected capacity change from 0 to 32768
[  119.271711][ T9357] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.542 (9357)
[  119.354701][ T9357] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  119.362319][ T9359] loop0: detected capacity change from 0 to 16
[  119.370832][ T9357] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[  119.381366][ T9357] BTRFS info (device loop1): using free-space-tree
[  119.397853][ T9359] erofs (device loop0): mounted with root inode @ nid 36.
[  119.720717][  T972] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  119.753084][ T5935] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  120.149380][  T972] usb 1-1: Using ep0 maxpacket: 8
[  120.164308][  T972] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 15
[  120.167384][  T972] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  120.173387][  T972] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  120.176719][  T972] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  120.183112][  T972] usb 1-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8
[  120.186139][  T972] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.188630][  T972] usb 1-1: Product: syz
[  120.195236][  T972] usb 1-1: Manufacturer: syz
[  120.196719][  T972] usb 1-1: SerialNumber: syz
[  120.209956][  T972] usb 1-1: config 0 descriptor??
[  120.212948][ T9368] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  120.322353][ T9390] all: renamed from lo (while UP)
[  120.435851][  T972] powermate: Expected payload of 3--6 bytes, found 1024 bytes!
[  120.449012][  T972] input: Griffin SoundKnob as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input8
[  120.749454][ T5995] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  120.865362][    C1] powermate: config urb returned -71
[  120.867248][    C1] powermate: config urb returned -71
[  120.869115][    C1] powermate: config urb returned -71
[  120.869286][ T1867] usb 1-1: USB disconnect, device number 10
[  120.870802][    C1] powermate 1-1:0.0: powermate_irq - usb_submit_urb failed with result: -19
[  120.913241][ T5995] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  120.916429][ T5995] usb 2-1: config 0 has no interface number 0
[  120.918878][ T5995] usb 2-1: New USB device found, idVendor=5bd3, idProduct=317c, bcdDevice= 4.5e
[  120.923382][ T5995] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  120.928871][ T5995] usb 2-1: config 0 descriptor??
[  120.935803][ T5995] usb 2-1: bad CDC descriptors
[  120.959855][  T972] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  121.119160][  T972] usb 3-1: Using ep0 maxpacket: 16
[  121.125344][  T972] usb 3-1: config 0 interface 0 has no altsetting 0
[  121.127588][  T972] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  121.130613][  T972] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  121.135027][  T972] usb 3-1: config 0 descriptor??
[  121.145250][ T1867] usb 2-1: USB disconnect, device number 8
[  121.544463][  T972] hid (null): global environment stack underflow
[  121.547136][  T972] hid (null): global environment stack underflow
[  121.574157][  T972] hid (null): report_id 3899690137 is invalid
[  121.577560][  T972] hid (null): report_id 1862125167 is invalid
[  121.789571][ T1867] usb 3-1: USB disconnect, device number 11
[  121.993764][ T9424] gre1: entered promiscuous mode
[  122.077016][ T9426] loop0: detected capacity change from 0 to 4096
[  122.097839][ T9426] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  122.138102][ T5929] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  122.229422][   T24] usb 2-1: new full-speed USB device number 9 using dummy_hcd
[  122.246124][ T9432] loop0: detected capacity change from 0 to 2048
[  122.264211][ T9432] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  122.292032][ T9433] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  122.294761][ T9432] NILFS error (device loop0): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[  122.306364][ T9432] Remounting filesystem read-only
[  122.398910][ T9437] loop0: detected capacity change from 0 to 512
[  122.405726][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  122.414851][ T9437] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13
[  122.421536][   T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  122.428405][ T9437] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.570: attempt to clear invalid blocks 2 len 1
[  122.436207][   T24] usb 2-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00
[  122.444869][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  122.453068][ T9437] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  122.462434][   T24] usb 2-1: config 0 descriptor??
[  122.477896][ T9437] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.570: invalid indirect mapped block 1819239214 (level 0)
[  122.491961][ T9437] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.570: invalid indirect mapped block 1819239214 (level 1)
[  122.497827][ T9437] EXT4-fs (loop0): 1 truncate cleaned up
[  122.507522][ T9437] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  122.517255][ T9437] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  122.591186][ T9444] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  122.665399][ T9448] loop2: detected capacity change from 0 to 1024
[  122.697677][ T9448] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  122.714238][ T9448] ext4 filesystem being mounted at /165/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  122.729017][ T9448] EXT4-fs warning (device loop2): ext4_empty_dir:3103: inode #12: comm syz.2.575: directory missing '..'
[  122.753465][ T5930] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  122.887640][   T24] uclogic 0003:5543:0003.0004: unknown main item tag 0x0
[  122.897367][   T24] uclogic 0003:5543:0003.0004: unknown main item tag 0x0
[  122.900397][   T24] uclogic 0003:5543:0003.0004: unknown main item tag 0x0
[  122.902734][   T24] uclogic 0003:5543:0003.0004: unknown main item tag 0x0
[  122.905030][   T24] uclogic 0003:5543:0003.0004: unknown main item tag 0x0
[  122.917815][   T24] uclogic 0003:5543:0003.0004: hidraw0: USB HID v0.00 Device [HID 5543:0003] on usb-dummy_hcd.1-1/input0
[  122.978987][ T9454] loop0: detected capacity change from 0 to 32768
[  122.984505][ T9454] XFS: ikeep mount option is deprecated.
[  123.000909][ T9454] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  123.013860][ T9454] XFS (loop0): Ending clean mount
[  123.017037][ T9454] XFS (loop0): Quotacheck needed: Please wait.
[  123.065552][ T9454] XFS (loop0): Quotacheck: Done.
[  123.090844][    T9] usb 2-1: USB disconnect, device number 9
[  123.149027][ T5929] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  123.579393][   T24] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  123.729246][   T24] usb 1-1: Using ep0 maxpacket: 32
[  123.732510][   T24] usb 1-1: config index 0 descriptor too short (expected 29220, got 36)
[  123.735266][   T24] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  123.741270][   T24] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81
[  123.744217][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  123.747656][   T24] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  123.752601][   T24] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  123.756467][   T24] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  123.764031][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  123.769452][   T24] usb 1-1: config 0 descriptor??
[  123.855306][ T9481] loop1: detected capacity change from 0 to 32768
[  123.862083][ T9481] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.586 (9481)
[  123.878969][ T9481] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  123.893648][ T9481] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[  123.901920][ T9481] BTRFS info (device loop1): using free-space-tree
[  123.959312][   T33] audit: type=1800 audit(1755119748.178:13): pid=9481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.586" name="file1" dev="loop1" ino=260 res=0 errno=0
[  124.010788][   T24] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  124.076148][ T5935] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  124.206837][    T9] usb 1-1: USB disconnect, device number 11
[  124.218546][    T9] usblp0: removed
[  124.229966][ T9503] netlink: 156 bytes leftover after parsing attributes in process `syz.2.588'.
[  124.610355][ T9513] overlayfs: missing 'lowerdir'
[  124.617147][ T1867] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  124.780640][ T1867] usb 3-1: Using ep0 maxpacket: 16
[  124.788879][ T1867] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  124.792932][ T1867] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.795649][ T1867] usb 3-1: Product: syz
[  124.797049][ T1867] usb 3-1: Manufacturer: syz
[  124.798462][ T1867] usb 3-1: SerialNumber: syz
[  124.804378][ T1867] usb 3-1: config 0 descriptor??
[  125.046856][ T9522] loop0: detected capacity change from 0 to 1024
[  125.056670][ T9522] hfsplus: failed to load root directory
[  125.286122][ T1867] dvb_usb_dtv5100 3-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71
[  125.306395][ T1867] usb 3-1: USB disconnect, device number 12
[  125.316208][ T9530] loop0: detected capacity change from 0 to 128
[  125.323439][ T9530] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[  125.421122][ T9532] autofs: Unknown parameter 'no9 PG!8E	'
[  125.801694][ T9547] loop1: detected capacity change from 0 to 32768
[  125.817916][ T9547] (syz.1.607,9547,0):ocfs2_load_local_alloc:320 ERROR: Local alloc size is invalid (la_size = 0)
[  125.830111][ T9547] (syz.1.607,9547,1):ocfs2_load_local_alloc:356 ERROR: status = -22
[  125.833364][ T9547] (syz.1.607,9547,1):ocfs2_check_volume:2404 ERROR: status = -22
[  125.840916][ T9547] (syz.1.607,9547,1):ocfs2_check_volume:2432 ERROR: status = -22
[  125.843354][ T9547] (syz.1.607,9547,1):ocfs2_mount_volume:1764 ERROR: status = -22
[  125.897390][ T9547] (syz.1.607,9547,0):ocfs2_fill_super:1177 ERROR: status = -22
[  126.424696][ T9573] loop0: detected capacity change from 0 to 1024
[  126.475751][ T4380] hfsplus: b-tree write err: -5, ino 4
[  127.031451][ T9588] loop2: detected capacity change from 0 to 40427
[  127.088668][ T9588] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  127.096839][ T9588] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  127.138715][ T5930] syz-executor: attempt to access beyond end of device
[  127.138715][ T5930] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  127.146411][ T5930] CPU: 0 UID: 0 PID: 5930 Comm: syz-executor Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  127.146429][ T5930] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  127.146435][ T5930] Call Trace:
[  127.146439][ T5930]  <TASK>
[  127.146444][ T5930]  dump_stack_lvl+0x189/0x250
[  127.146462][ T5930]  ? __pfx_dump_stack_lvl+0x10/0x10
[  127.146472][ T5930]  ? __pfx_queue_work_on+0x10/0x10
[  127.146481][ T5930]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  127.146491][ T5930]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  127.146504][ T5930]  f2fs_handle_critical_error+0x37c/0x540
[  127.146520][ T5930]  f2fs_write_end_io+0x886/0xb60
[  127.146563][ T5930]  __submit_merged_bio+0x27a/0x6a0
[  127.146576][ T5930]  __submit_merged_write_cond+0x255/0x530
[  127.146589][ T5930]  f2fs_write_data_pages+0x261d/0x3000
[  127.146620][ T5930]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  127.146662][ T5930]  ? __lock_acquire+0xab9/0xd20
[  127.146679][ T5930]  ? do_raw_spin_lock+0x121/0x290
[  127.146693][ T5930]  ? do_raw_spin_unlock+0x4d/0x240
[  127.146702][ T5930]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  127.146713][ T5930]  do_writepages+0x32e/0x550
[  127.146731][ T5930]  ? do_raw_spin_unlock+0x4d/0x240
[  127.146742][ T5930]  filemap_fdatawrite+0x199/0x240
[  127.146753][ T5930]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  127.146785][ T5930]  ? do_raw_spin_unlock+0x4d/0x240
[  127.146796][ T5930]  f2fs_sync_dirty_inodes+0x31f/0x830
[  127.146815][ T5930]  f2fs_write_checkpoint+0x95a/0x1df0
[  127.146837][ T5930]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  127.146893][ T5930]  ? kill_f2fs_super+0x298/0x6c0
[  127.146910][ T5930]  kill_f2fs_super+0x2c3/0x6c0
[  127.146923][ T5930]  ? __pfx_kill_f2fs_super+0x10/0x10
[  127.146932][ T5930]  ? radix_tree_delete_item+0x2b6/0x400
[  127.146945][ T5930]  ? shrinker_free+0x2ce/0x3e0
[  127.146955][ T5930]  deactivate_locked_super+0xbc/0x130
[  127.146967][ T5930]  cleanup_mnt+0x425/0x4c0
[  127.146978][ T5930]  ? lockdep_hardirqs_on+0x9c/0x150
[  127.146989][ T5930]  task_work_run+0x1d4/0x260
[  127.147001][ T5930]  ? __pfx_task_work_run+0x10/0x10
[  127.147010][ T5930]  ? __x64_sys_umount+0x122/0x160
[  127.147023][ T5930]  ? exit_to_user_mode_loop+0x40/0x110
[  127.147037][ T5930]  exit_to_user_mode_loop+0xec/0x110
[  127.147048][ T5930]  do_syscall_64+0x2bd/0x3b0
[  127.147058][ T5930]  ? lockdep_hardirqs_on+0x9c/0x150
[  127.147067][ T5930]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  127.147075][ T5930]  ? exc_page_fault+0x9f/0xf0
[  127.147084][ T5930]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  127.147093][ T5930] RIP: 0033:0x7fd44bb8ff17
[  127.147102][ T5930] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  127.147109][ T5930] RSP: 002b:00007ffd0238c7e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  127.147118][ T5930] RAX: 0000000000000000 RBX: 00007fd44bc11c05 RCX: 00007fd44bb8ff17
[  127.147124][ T5930] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd0238c8a0
[  127.147129][ T5930] RBP: 00007ffd0238c8a0 R08: 0000000000000000 R09: 0000000000000000
[  127.147133][ T5930] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd0238d930
[  127.147138][ T5930] R13: 00007fd44bc11c05 R14: 000000000001f025 R15: 00007ffd0238d970
[  127.147152][ T5930]  </TASK>
[  127.147290][ T5930] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  128.139303][   T52] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  128.379182][   T52] usb 1-1: Using ep0 maxpacket: 32
[  128.409195][   T52] usb 1-1: config 5 has an invalid interface number: 222 but max is 1
[  128.412330][   T52] usb 1-1: config 5 has no interface number 1
[  128.414696][   T52] usb 1-1: config 5 interface 222 altsetting 11 endpoint 0xB has invalid maxpacket 1023, setting to 64
[  128.418829][   T52] usb 1-1: config 5 interface 222 altsetting 11 endpoint 0x9 has an invalid bInterval 100, changing to 10
[  128.439182][   T52] usb 1-1: config 5 interface 222 has no altsetting 0
[  128.441883][   T52] usb 1-1: config 5 interface 0 has no altsetting 0
[  128.456503][   T52] usb 1-1: New USB device found, idVendor=07b8, idProduct=401a, bcdDevice=f1.81
[  128.471503][   T52] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.475105][   T52] usb 1-1: Product: syz
[  128.476690][   T52] usb 1-1: Manufacturer: syz
[  128.478474][   T52] usb 1-1: SerialNumber: syz
[  128.599145][ T9629] dlm: non-version read from control device 29
[  128.690517][   T52] rtl8150 1-1:5.222: couldn't find required endpoints
[  128.694913][   T52] rtl8150 1-1:5.222: probe with driver rtl8150 failed with error -5
[  128.712259][   T52] rtl8150 1-1:5.0: couldn't find required endpoints
[  128.721489][   T52] rtl8150 1-1:5.0: probe with driver rtl8150 failed with error -5
[  128.729015][   T52] usb 1-1: USB disconnect, device number 12
[  128.941209][ T9646] loop1: detected capacity change from 0 to 2048
[  128.959296][ T9647] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  129.185043][ T9646] overlayfs: upper fs does not support tmpfile.
[  129.192723][ T9646] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  129.195698][ T9646] overlayfs: failed to set xattr on upper
[  129.197779][ T9646] overlayfs: ...falling back to redirect_dir=nofollow.
[  129.200070][ T9646] overlayfs: ...falling back to index=off.
[  129.202167][ T9646] overlayfs: ...falling back to uuid=null.
[  129.214910][ T9647] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  129.219382][ T9647] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4)
[  129.226176][ T9647] Remounting filesystem read-only
[  129.248827][ T5935] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer
[  129.310384][ T9650] netlink: 8 bytes leftover after parsing attributes in process `syz.1.650'.
[  129.331322][ T9652] loop0: detected capacity change from 0 to 164
[  129.341914][ T9652] Unable to read rock-ridge attributes
[  129.346898][ T9652] ISOFS: unable to read i-node block
[  129.659220][    T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  129.689292][ T1867] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  129.819299][    T9] usb 1-1: Using ep0 maxpacket: 16
[  129.829104][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  129.838124][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  129.842886][ T1867] usb 2-1: Using ep0 maxpacket: 32
[  129.862240][    T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  129.867406][    T9] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  129.875941][ T1867] usb 2-1: config 0 has no interfaces?
[  129.880209][ T1867] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  129.889469][ T1867] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  129.892409][ T1867] usb 2-1: Product: syz
[  129.893704][ T1867] usb 2-1: Manufacturer: syz
[  129.895053][ T1867] usb 2-1: SerialNumber: syz
[  129.897454][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  129.905566][    T9] usb 1-1: config 0 descriptor??
[  129.907848][ T1867] usb 2-1: config 0 descriptor??
[  130.182265][ T1867] usb 2-1: USB disconnect, device number 10
[  130.385961][    T9] HID 045e:07da: Invalid code 65791 type 1
[  130.404932][    T9] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0005/input/input9
[  130.435605][    T9] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[  130.574831][    T9] usb 1-1: USB disconnect, device number 13
[  130.891544][   T33] audit: type=1326 audit(1755119755.118:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9670 comm="syz.1.660" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4e0b8ebe9 code=0x7ffc0000
[  130.901365][   T33] audit: type=1326 audit(1755119755.118:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9670 comm="syz.1.660" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4e0b8ebe9 code=0x7ffc0000
[  130.912313][   T33] audit: type=1326 audit(1755119755.128:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9670 comm="syz.1.660" exe="/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7fc4e0b8ebe9 code=0x7ffc0000
[  130.920696][   T33] audit: type=1326 audit(1755119755.128:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9670 comm="syz.1.660" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4e0b8ebe9 code=0x7ffc0000
[  130.971620][ T9673] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  131.321971][ T9695] syz_tun: entered allmulticast mode
[  131.326323][ T9694] syz_tun: left allmulticast mode
[  131.613424][    T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  131.635275][ T9715] netlink: 36 bytes leftover after parsing attributes in process `syz.0.681'.
[  131.671050][ T9717] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.682'.
[  131.709373][ T9719] netlink: 104 bytes leftover after parsing attributes in process `syz.0.683'.
[  131.712660][ T9719] netlink: 'syz.0.683': attribute type 6 has an invalid length.
[  131.772288][ T9723] netlink: 4 bytes leftover after parsing attributes in process `syz.0.685'.
[  131.779329][    T9] usb 2-1: Using ep0 maxpacket: 32
[  131.786804][    T9] usb 2-1: config 0 has an invalid interface number: 89 but max is 0
[  131.793836][    T9] usb 2-1: config 0 has no interface number 0
[  131.799205][    T9] usb 2-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68
[  131.804515][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  131.809448][    T9] usb 2-1: Product: syz
[  131.811280][    T9] usb 2-1: Manufacturer: syz
[  131.818171][    T9] usb 2-1: SerialNumber: syz
[  131.823568][    T9] usb 2-1: config 0 descriptor??
[  131.830998][    T9] hub 2-1:0.89: bad descriptor, ignoring hub
[  131.835071][    T9] hub 2-1:0.89: probe with driver hub failed with error -5
[  131.839903][    T9] option 2-1:0.89: GSM modem (1-port) converter detected
[  131.844476][    T9] usb 2-1: GSM modem (1-port) converter now attached to ttyUSB0
[  132.161702][    T9] usb 2-1: USB disconnect, device number 11
[  132.175107][    T9] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0
[  132.204696][    T9] option 2-1:0.89: device disconnected
[  132.218620][ T9740] loop2: detected capacity change from 0 to 256
[  132.433758][ T9746] netlink: 'syz.0.696': attribute type 10 has an invalid length.
[  132.436929][ T9746] netlink: 40 bytes leftover after parsing attributes in process `syz.0.696'.
[  132.445409][ T9746] team0: entered promiscuous mode
[  132.447586][ T9746] team_slave_0: entered promiscuous mode
[  132.453417][ T9746] team_slave_1: entered promiscuous mode
[  132.455859][ T9746] team0: entered allmulticast mode
[  132.457988][ T9746] team_slave_0: entered allmulticast mode
[  132.460972][ T9746] team_slave_1: entered allmulticast mode
[  132.464898][ T9746] bridge0: port 3(team0) entered blocking state
[  132.467604][ T9746] bridge0: port 3(team0) entered disabled state
[  132.473624][ T9746] bridge0: port 3(team0) entered blocking state
[  132.476687][ T9746] bridge0: port 3(team0) entered forwarding state
[  132.549383][   T52] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  132.719286][   T52] usb 3-1: Using ep0 maxpacket: 16
[  132.723434][   T52] usb 3-1: unable to get BOS descriptor or descriptor too short
[  132.726780][   T52] usb 3-1: config 5 has an invalid interface number: 29 but max is 0
[  132.727300][ T9759] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  132.732475][   T52] usb 3-1: config 5 has no interface number 0
[  132.737470][   T52] usb 3-1: config 5 interface 29 has no altsetting 0
[  132.743432][ T9756] IPVS: ovf: UDP 224.0.0.2:20004 - no destination available
[  132.759449][ T9748] IPVS: starting estimator thread 0...
[  132.762847][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  132.764748][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  132.769183][   T52] usb 3-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=90.00
[  132.773752][   T52] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.778269][   T52] usb 3-1: Product: syz
[  132.785981][   T52] usb 3-1: Manufacturer: syz
[  132.787635][   T52] usb 3-1: SerialNumber: syz
[  132.849508][ T9761] IPVS: using max 61 ests per chain, 146400 per kthread
[  133.015797][   T52] usb 3-1: Found UVC 0.00 device syz (05ac:8501)
[  133.017732][   T52] usb 3-1: No valid video chain found.
[  133.022413][   T52] usb 3-1: USB disconnect, device number 13
[  133.242772][ T5995] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  133.749371][ T5995] usb 2-1: Using ep0 maxpacket: 16
[  133.753781][ T5995] usb 2-1: config 0 has an invalid interface number: 8 but max is 0
[  133.757175][ T5995] usb 2-1: config 0 has no interface number 0
[  133.762288][ T5995] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  133.766805][ T5995] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  133.774946][ T5995] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  133.778773][ T5995] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  133.785104][ T5995] usb 2-1: Product: syz
[  133.786884][ T5995] usb 2-1: SerialNumber: syz
[  133.792679][ T5995] usb 2-1: config 0 descriptor??
[  133.800765][ T5995] cm109 2-1:0.8: invalid payload size 0, expected 4
[  133.805630][ T5995] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input10
[  134.015117][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90
[  134.245338][ T9789] loop2: detected capacity change from 0 to 1024
[  134.256635][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  134.261430][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  134.264561][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  134.267377][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  134.270538][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  134.273677][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  134.276782][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  134.279985][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  134.285253][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  134.288295][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  134.314942][ T5995] usb 2-1: USB disconnect, device number 12
[  134.317657][    C0] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  134.329557][ T9789] EXT4-fs: Ignoring removed oldalloc option
[  134.331724][ T9789] EXT4-fs: Ignoring removed orlov option
[  134.334355][ T9789] EXT4-fs (loop2): stripe (1570) is not aligned with cluster size (16), stripe is disabled
[  134.375680][ T9789] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  134.400570][   T33] audit: type=1326 audit(1755119758.608:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9786 comm="syz.0.713" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe8fd98ebe9 code=0x0
[  134.416536][ T5995] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  134.423203][ T5930] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.556462][ T9797] loop2: detected capacity change from 0 to 128
[  134.585128][ T9797] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  134.605184][ T9797] ext4 filesystem being mounted at /202/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  134.642901][ T9797] EXT4-fs (loop2): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09 ro.
[  134.653771][ T9797] EXT4-fs (loop2): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w.
[  134.691307][ T5930] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  135.169603][    T9] usb 2-1: new full-speed USB device number 13 using dummy_hcd
[  135.342027][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  135.352856][    T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  135.358837][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64
[  135.373907][    T9] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  135.377485][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  135.381927][    T9] usb 2-1: Product: syz
[  135.383623][    T9] usb 2-1: Manufacturer: syz
[  135.385442][    T9] usb 2-1: SerialNumber: syz
[  135.389289][ T5995] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  135.393551][    T9] usb 2-1: config 0 descriptor??
[  135.396321][ T9804] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  135.399296][ T9804] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  135.403304][    T9] usb 2-1: ucan: probing device on interface #0
[  135.539202][ T5995] usb 1-1: Using ep0 maxpacket: 16
[  135.542982][ T5995] usb 1-1: config 8 has an invalid interface number: 206 but max is 0
[  135.545424][ T5995] usb 1-1: config 8 has no interface number 0
[  135.547311][ T5995] usb 1-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87
[  135.550837][ T5995] usb 1-1: config 8 interface 206 altsetting 1 endpoint 0x87 has invalid maxpacket 33058, setting to 1024
[  135.554257][ T5995] usb 1-1: config 8 interface 206 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 9
[  135.558332][ T5995] usb 1-1: config 8 interface 206 has no altsetting 0
[  135.563744][ T5995] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb
[  135.567134][ T5995] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  135.570129][ T5995] usb 1-1: Product: syz
[  135.571540][ T5995] usb 1-1: Manufacturer: syz
[  135.573075][ T5995] usb 1-1: SerialNumber: syz
[  135.800329][ T5995] garmin_gps 1-1:8.206: Garmin GPS usb/tty converter detected
[  135.808220][ T5995] usb 1-1: Garmin GPS usb/tty converter now attached to ttyUSB0
[  136.004823][   T52] usb 1-1: USB disconnect, device number 14
[  136.012633][    T9] ucan 2-1:0.0: probe with driver ucan failed with error -22
[  136.037549][   T52] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0
[  136.048685][   T52] garmin_gps 1-1:8.206: device disconnected
[  136.103180][ T9816] loop2: detected capacity change from 0 to 256
[  136.110754][ T9816] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  136.217539][    T9] usb 2-1: USB disconnect, device number 13
[  136.710450][ T9826] loop0: detected capacity change from 0 to 2048
[  136.736374][ T9826] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  136.745424][ T9826] ext4 filesystem being mounted at /226/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  136.756098][ T9826] EXT4-fs error (device loop0): __ext4_new_inode:1073: comm syz.0.727: reserved inode found cleared - inode=1
[  136.789886][ T5929] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  137.590622][ T9836] loop2: detected capacity change from 0 to 32768
[  137.593644][ T9836] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.730 (9836)
[  137.603021][ T9836] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  137.606346][ T9836] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  137.612890][ T9836] BTRFS info (device loop2): using free-space-tree
[  137.838245][ T5930] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  138.059897][   T52] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  138.216022][ T9865] block device autoloading is deprecated and will be removed.
[  138.250409][   T52] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  138.253621][   T52] usb 2-1: config 0 interface 0 has no altsetting 0
[  138.279031][   T52] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce
[  138.282786][   T52] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.285932][   T52] usb 2-1: Product: syz
[  138.290833][   T52] usb 2-1: Manufacturer: syz
[  138.292667][   T52] usb 2-1: SerialNumber: syz
[  138.308372][   T52] usb 2-1: config 0 descriptor??
[  138.333236][   T52] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state.
[  138.350754][   T52] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  138.355677][   T52] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0)
[  138.359913][   T52] usb 2-1: media controller created
[  138.383859][   T52] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  138.420279][   T52] DVB: Unable to find symbol tda10046_attach()
[  138.422298][   T52] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0'
[  138.425005][   T52] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected.
[  138.527900][ T9876] vivid-000: disconnect
[  138.531631][ T9875] vivid-000: reconnect
[  138.736568][   T52] dvb_usb_m920x 2-1:0.0: probe with driver dvb_usb_m920x failed with error -71
[  138.757780][   T52] usb 2-1: USB disconnect, device number 14
[  138.816980][ T9882] netlink: 'syz.2.742': attribute type 5 has an invalid length.
[  139.011564][ T9897] netlink: 24 bytes leftover after parsing attributes in process `syz.2.749'.
[  139.015279][ T9897] netlink: 24 bytes leftover after parsing attributes in process `syz.2.749'.
[  139.470951][ T9905] loop1: detected capacity change from 0 to 256
[  139.473593][ T9905] exfat: Deprecated parameter 'namecase'
[  139.475482][ T9905] exfat: Deprecated parameter 'utf8'
[  139.482605][ T9905] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001047b, chksum : 0x3ced02ab, utbl_chksum : 0xe619d30d)
[  139.715881][ T9907] loop1: detected capacity change from 0 to 32768
[  139.743147][ T9907] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  139.782710][ T5935] ocfs2: Unmounting device (7,1) on (node local)
[  141.025423][ T9931] netlink: 260 bytes leftover after parsing attributes in process `syz.0.763'.
[  141.028256][ T9931] netlink: 260 bytes leftover after parsing attributes in process `syz.0.763'.
[  141.359473][    T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  141.526593][    T9] usb 3-1: unable to get BOS descriptor or descriptor too short
[  141.537233][    T9] usb 3-1: config 249 has an invalid interface number: 177 but max is 0
[  141.540672][    T9] usb 3-1: config 249 has no interface number 0
[  141.542949][    T9] usb 3-1: config 249 interface 177 altsetting 0 has a duplicate endpoint with address 0xE, skipping
[  141.546572][    T9] usb 3-1: config 249 interface 177 altsetting 0 has an endpoint descriptor with address 0x53, changing to 0x3
[  141.553957][    T9] usb 3-1: config 249 interface 177 altsetting 0 endpoint 0x3 has invalid maxpacket 65199, setting to 1024
[  141.560057][    T9] usb 3-1: config 249 interface 177 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024
[  141.563928][    T9] usb 3-1: config 249 interface 177 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  141.575691][    T9] usb 3-1: New USB device found, idVendor=057c, idProduct=3800, bcdDevice=5a.9d
[  141.579555][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  141.582260][    T9] usb 3-1: Product: syz
[  141.605366][    T9] usb 3-1: Manufacturer: syz
[  141.607377][    T9] usb 3-1: SerialNumber: syz
[  141.613847][ T9934] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  141.677844][ T9938] netlink: 8 bytes leftover after parsing attributes in process `syz.0.766'.
[  141.808895][ T9940] loop0: detected capacity change from 0 to 136
[  141.852973][    T9] usb 3-1: USB disconnect, device number 14
[  142.419302][ T5998] usb 2-1: new low-speed USB device number 15 using dummy_hcd
[  142.652024][ T5998] usb 2-1: unable to get BOS descriptor or descriptor too short
[  142.656908][ T5998] usb 2-1: config 0 has an invalid interface number: 105 but max is 0
[  142.660707][ T5998] usb 2-1: config 0 has no interface number 0
[  142.663133][ T5998] usb 2-1: config 0 interface 105 altsetting 10 endpoint 0xE is Bulk; changing to Interrupt
[  142.667320][ T5998] usb 2-1: config 0 interface 105 has no altsetting 0
[  142.674286][ T5998] usb 2-1: string descriptor 0 read error: -22
[  142.676857][ T5998] usb 2-1: New USB device found, idVendor=1943, idProduct=2250, bcdDevice= 0.01
[  142.681090][ T5998] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.689946][ T5998] usb 2-1: config 0 descriptor??
[  142.693788][ T9944] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  142.883701][ T5998] usb 2-1: Found UVC 0.00 device <unnamed> (1943:2250)
[  142.972702][ T5998] usb 2-1: No valid video chain found.
[  142.974677][ T5998] go7007 2-1:0.105: Sensoray 2250 found
[  142.976435][ T5998] go7007 2-1:0.105: probe with driver go7007 failed with error -12
[  142.981419][ T5998] usb 2-1: USB disconnect, device number 15
[  143.138222][   T33] audit: type=1326 audit(1755119767.358:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9962 comm="syz.2.776" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd44bb8ebe9 code=0x7ffc0000
[  143.147641][   T33] audit: type=1326 audit(1755119767.358:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9962 comm="syz.2.776" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd44bb8ebe9 code=0x7ffc0000
[  143.156397][   T33] audit: type=1326 audit(1755119767.368:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9962 comm="syz.2.776" exe="/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7fd44bb8ebe9 code=0x7ffc0000
[  143.166077][   T33] audit: type=1326 audit(1755119767.368:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9962 comm="syz.2.776" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd44bb8ebe9 code=0x7ffc0000
[  143.173959][   T33] audit: type=1326 audit(1755119767.368:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9962 comm="syz.2.776" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd44bb8ebe9 code=0x7ffc0000
[  143.417191][ T9980] loop0: detected capacity change from 0 to 2048
[  143.489848][ T9980] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  143.521827][ T9980] NILFS (loop0): mounting unchecked fs
[  143.703863][ T9980] NILFS (loop0): recovery complete
[  143.709351][ T5941] udevd[5941]: incorrect nilfs2 checksum on /dev/loop0
[  143.714673][ T9982] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  143.724555][ T5941] udevd[5941]: incorrect nilfs2 checksum on /dev/loop0
[  143.804749][ T9986] Driver unsupported XDP return value 0 on prog  (id 74) dev N/A, expect packet loss!
[  144.045686][T10004] netlink: 132 bytes leftover after parsing attributes in process `syz.0.794'.
[  144.249854][ T1271] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  144.291658][T10008] loop2: detected capacity change from 0 to 32768
[  144.301878][T10008] bcachefs (/dev/loop2): error validating superblock: Invalid superblock section journal: journal bucket at sector 0
[  144.301878][T10008] journal (size 2912):
[  144.301878][T10008] Buckets:  0 10 21474902017 8 21474967553 0 21474836481 0 21491613697 0 21508390913 0 21525168129 0 25769803778 2816 65795 25769803778 0 65794 25769803778 16 65796 34359738401 0 0 0 83 0 0 25 6152 248 8 2048 0 11 2816 0 1 16 240 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 30064771074 0 0 30064771074 1 1280 4294967307 1179915 0 18446744069414584320 18446744073709551615 18446744073709551615 0 14322110933576210885 16 0 0 110593 4295032843 1179915 0 18446744069414584320 18446744073709551615 18446744073709551615 0 8469488994664696954 24 0 0 155649 4295098379 1179915 0 18446744069414584320 18446744073709551615 18446744073709551615 0 11142619451731364831 24 0 0 167937 4295163915 1179915 0 18446744069414584320 18446744073709551615 18446744073709551615 0 2487609100058934834 16 0 0 126977 4295229451 1179915 0 18446744069414584320 18446744073709551615 18446744073709551615 0 12421512847996478049 24 
[  144.302003][T10008] bcachefs: bch2_fs_get_tree() error: invalid_sb_journal
[  144.364171][T10012] loop2: detected capacity change from 0 to 128
[  144.371853][T10012] EXT4-fs warning (device loop2): ext4_init_metadata_csum:4622: metadata_csum and uninit_bg are redundant flags; please run fsck.
[  144.375985][T10012] EXT4-fs (loop2): VFS: Found ext4 filesystem with invalid superblock checksum.  Run e2fsck?
[  144.428154][ T1271] usb 2-1: Using ep0 maxpacket: 8
[  144.433475][ T1271] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  144.436829][ T1271] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  144.449282][ T1271] usb 2-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00
[  144.453324][ T1271] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  144.463096][ T1271] usb 2-1: config 0 descriptor??
[  144.479329][  T972] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  144.721695][   T33] audit: type=1326 audit(1755119768.818:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10011 comm="syz.2.798" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd44bb8ebe9 code=0x7ffc0000
[  144.728491][   T33] audit: type=1326 audit(1755119768.818:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10011 comm="syz.2.798" exe="/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7fd44bb8ebe9 code=0x7ffc0000
[  144.737749][   T33] audit: type=1326 audit(1755119768.818:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10011 comm="syz.2.798" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd44bb8ebe9 code=0x7ffc0000
[  144.744932][   T33] audit: type=1326 audit(1755119768.818:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10011 comm="syz.2.798" exe="/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fd44bb8ebe9 code=0x7ffc0000
[  144.752004][   T33] audit: type=1326 audit(1755119768.818:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10011 comm="syz.2.798" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd44bb8ebe9 code=0x7ffc0000
[  144.799263][  T972] usb 1-1: Using ep0 maxpacket: 32
[  144.804305][  T972] usb 1-1: config 14 has an invalid interface number: 137 but max is 3
[  144.807333][  T972] usb 1-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config
[  144.811338][  T972] usb 1-1: config 14 has 2 interfaces, different from the descriptor's value: 4
[  144.814248][  T972] usb 1-1: config 14 has no interface number 1
[  144.816435][  T972] usb 1-1: config 14 interface 137 has no altsetting 0
[  144.821301][  T972] usb 1-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=2a.8a
[  144.824867][  T972] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.827683][  T972] usb 1-1: Product: syz
[  144.833217][  T972] usb 1-1: Manufacturer: syz
[  144.835011][  T972] usb 1-1: SerialNumber: syz
[  144.890180][T10014] loop2: detected capacity change from 0 to 40427
[  144.894007][T10014] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  144.896843][T10014] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  144.909489][T10014] F2FS-fs (loop2): invalid crc value
[  144.959867][T10014] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  144.969470][T10014] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  144.971766][T10014] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  144.984555][ T1271] hid-rmi 0003:06CB:81A7.0006: unknown main item tag 0x0
[  144.987104][ T1271] hid-rmi 0003:06CB:81A7.0006: unknown main item tag 0x0
[  144.989701][ T1271] hid-rmi 0003:06CB:81A7.0006: unknown main item tag 0x0
[  144.991961][ T1271] hid-rmi 0003:06CB:81A7.0006: unknown main item tag 0x0
[  144.994134][ T1271] hid-rmi 0003:06CB:81A7.0006: unknown main item tag 0x7
[  144.996817][ T1271] hid-rmi 0003:06CB:81A7.0006: unknown main item tag 0x0
[  144.999424][ T1271] hid-rmi 0003:06CB:81A7.0006: unknown main item tag 0x0
[  145.003654][ T1271] hid-rmi 0003:06CB:81A7.0006: hidraw0: USB HID v0.00 Device [HID 06cb:81a7] on usb-dummy_hcd.1-1/input0
[  145.054520][  T972] ati_remote2 1-1:14.0: ati_remote2_probe(): interface 0 must have an endpoint
[  145.062653][  T972] usb 1-1: USB disconnect, device number 15
[  145.174966][ T1271] usb 2-1: USB disconnect, device number 16
[  145.768427][T10034] loop0: detected capacity change from 0 to 1024
[  145.798933][T10034] hfsplus: request for non-existent node 3 in B*Tree
[  145.799324][ T1271] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  145.809855][T10034] hfsplus: request for non-existent node 3 in B*Tree
[  145.962534][ T1271] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  145.966516][ T1271] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  145.973647][ T1271] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  145.991807][ T1271] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  145.994690][ T1271] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.013523][ T1271] usb 3-1: config 0 descriptor??
[  146.750471][T10042] loop0: detected capacity change from 0 to 32768
[  146.754683][T10042] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.808 (10042)
[  146.782203][ T1271] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  146.783576][T10042] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  146.803146][T10042] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[  146.806614][T10042] BTRFS info (device loop0): disk space caching is enabled
[  146.814519][T10042] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  146.877510][T10042] BTRFS info (device loop0): rebuilding free space tree
[  146.905000][T10042] BTRFS info (device loop0): disabling free space tree
[  146.908710][T10042] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  146.914080][T10042] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  146.951854][ T1271] usb 3-1: USB disconnect, device number 15
[  147.087113][ T5929] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  147.366055][T10070] loop0: detected capacity change from 0 to 1024
[  147.373132][T10070] EXT4-fs: Ignoring removed bh option
[  147.384695][T10070] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  147.425197][ T5929] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.449171][ T1271] usb 2-1: new full-speed USB device number 17 using dummy_hcd
[  147.457712][T10075] loop0: detected capacity change from 0 to 128
[  147.467727][T10075] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  147.472841][T10075] ext4 filesystem being mounted at /266/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  147.583518][T10080] loop2: detected capacity change from 0 to 128
[  147.591592][ T5929] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  147.601785][ T1271] usb 2-1: config 0 has an invalid interface number: 8 but max is 0
[  147.605307][ T1271] usb 2-1: config 0 has no interface number 0
[  147.620766][ T1271] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  147.624996][ T1271] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  147.628429][ T1271] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  147.631787][ T1271] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  147.653460][ T1271] usb 2-1: config 0 descriptor??
[  147.683708][T10082] loop0: detected capacity change from 0 to 512
[  147.911788][T10093] loop0: detected capacity change from 0 to 1024
[  147.950112][T10093] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  147.955299][T10093] ext4 filesystem being mounted at /270/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  148.018749][ T5929] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  148.067204][ T1271] uclogic 0003:256C:006D.0008: interface is invalid, ignoring
[  148.291303][  T972] usb 2-1: USB disconnect, device number 17
[  148.356296][T10114] loop2: detected capacity change from 0 to 1024
[  148.531931][T10123] autofs4:pid:10123:validate_dev_ioctl: path string terminator missing for cmd(0xc0189373)
[  148.592076][T10126] loop2: detected capacity change from 0 to 512
[  148.595522][T10126] EXT4-fs: Ignoring removed orlov option
[  148.603710][T10126] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  148.618973][T10126] EXT4-fs (loop2): orphan cleanup on readonly fs
[  148.627222][T10126] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.837: bg 0: block 248: padding at end of block bitmap is not set
[  148.636452][T10126] __quota_error: 39 callbacks suppressed
[  148.636472][T10126] Quota error (device loop2): write_blk: dquota write failed
[  148.646276][T10126] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  148.661220][T10126] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.837: Failed to acquire dquot type 1
[  148.673985][T10126] EXT4-fs (loop2): 1 truncate cleaned up
[  148.690488][T10126] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  148.704841][T10126] EXT4-fs: Ignoring removed orlov option
[  148.707258][T10126] EXT4-fs: can't change dax mount option while remounting
[  148.739663][T10133] loop0: detected capacity change from 0 to 8
[  148.743453][T10133] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  148.770531][ T5930] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  148.953516][T10141] loop0: detected capacity change from 0 to 512
[  148.960046][T10141] EXT4-fs: Ignoring removed bh option
[  148.976242][T10141] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  148.989242][T10141] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[  149.026064][T10141] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended
[  149.045680][T10141] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006]
[  149.057463][T10141] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  149.085644][T10141] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  149.165634][ T5929] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  149.219837][T10155] tmpfs: Bad value for 'mpol'
[  149.225335][T10154] loop2: detected capacity change from 0 to 256
[  149.243728][T10154] FAT-fs (loop2): Directory bread(block 1285) failed
[  149.261545][T10154] FAT-fs (loop2): Directory bread(block 1285) failed
[  149.529201][  T972] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  149.572211][T10159] loop2: detected capacity change from 0 to 32768
[  149.598826][T10159] find_entry called with index = 0
[  149.607226][T10159] read_mapping_page failed!
[  149.611151][T10159] ERROR: (device loop2): txCommit: 
[  149.611151][T10159] 
[  149.683437][  T972] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  149.687461][  T972] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  149.700234][  T972] usb 1-1: config 0 descriptor??
[  149.933718][T10167] loop2: detected capacity change from 0 to 256
[  149.977866][T10167] FAT-fs (loop2): Directory bread(block 64) failed
[  149.981738][T10167] FAT-fs (loop2): Directory bread(block 65) failed
[  149.984484][T10167] FAT-fs (loop2): Directory bread(block 66) failed
[  149.987220][T10167] FAT-fs (loop2): Directory bread(block 67) failed
[  149.997490][T10167] FAT-fs (loop2): Directory bread(block 68) failed
[  150.000381][T10167] FAT-fs (loop2): Directory bread(block 69) failed
[  150.002871][T10167] FAT-fs (loop2): Directory bread(block 70) failed
[  150.005375][T10167] FAT-fs (loop2): Directory bread(block 71) failed
[  150.008487][T10167] FAT-fs (loop2): Directory bread(block 72) failed
[  150.011066][T10167] FAT-fs (loop2): Directory bread(block 73) failed
[  150.064279][T10169] netlink: 8 bytes leftover after parsing attributes in process `syz.1.855'.
[  150.130487][  T972] ath6kl: Failed to submit usb control message: -71
[  150.139156][  T972] ath6kl: unable to send the bmi data to the device: -71
[  150.143703][  T972] ath6kl: Unable to send get target info: -71
[  150.155350][  T972] ath6kl: Failed to init ath6kl core: -71
[  150.181736][  T972] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71
[  150.191974][  T972] usb 1-1: USB disconnect, device number 16
[  150.218782][T10172] loop2: detected capacity change from 0 to 1024
[  150.267072][T10172] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  150.275893][T10178] loop1: detected capacity change from 0 to 512
[  150.283345][T10178] EXT4-fs (loop1): Test dummy encryption mode enabled
[  150.286096][T10178] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  150.314853][T10178] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.858: bad orphan inode 131083
[  150.326146][ T5930] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  150.333864][T10178] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  150.456137][T10178] fscrypt: AES-256-XTS using implementation "xts(ecb(aes-fixed-time))"
[  150.484586][ T5935] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  151.051049][T10211] loop0: detected capacity change from 0 to 256
[  151.320187][T10203] loop2: detected capacity change from 0 to 32768
[  151.325300][T10203] XFS: noikeep mount option is deprecated.
[  151.331175][T10203] XFS: noikeep mount option is deprecated.
[  151.365655][T10203] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  151.413939][T10203] XFS (loop2): Ending clean mount
[  151.425037][T10203] XFS (loop2): Quotacheck needed: Please wait.
[  151.467021][T10203] XFS (loop2): Quotacheck: Done.
[  151.505823][ T5930] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  151.754372][T10226] loop0: detected capacity change from 0 to 512
[  151.771481][T10226] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  151.778345][T10226] EXT4-fs (loop0): 1 orphan inode deleted
[  151.781937][T10226] EXT4-fs (loop0): 1 truncate cleaned up
[  151.784430][T10226] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  151.793591][T10226] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  151.821852][T10226] EXT4-fs (loop0): Remounting filesystem read-only
[  151.825485][T10226] EXT4-fs (loop0): error restoring inline_data for inode -- potential data loss! (inode 18, error -30)
[  151.854611][T10230] geneve2: entered promiscuous mode
[  151.856443][T10230] geneve2: entered allmulticast mode
[  151.857165][ T5929] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  151.970405][T10234] loop0: detected capacity change from 0 to 2048
[  151.980526][T10234] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  152.058660][T10239] input: syz0 as /devices/virtual/input/input13
[  152.184168][T10247] loop2: detected capacity change from 0 to 1024
[  152.221750][T10247] hfsplus: keylen 65060 too large
[  152.223579][T10247] hfsplus: xattr search failed
[  152.226497][T10248] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  152.226497][T10248] The task syz.1.881 (10248) triggered the difference, watch for misbehavior.
[  152.352290][T10254] loop2: detected capacity change from 0 to 16
[  152.355759][T10254] erofs (device loop2): mounted with root inode @ nid 36.
[  152.368043][T10254] erofs (device loop2): bogus dirent @ nid 36
[  152.503517][T10262] loop2: detected capacity change from 0 to 736
[  152.522463][T10262] rock: directory entry would overflow storage
[  152.524406][T10262] rock: sig=0x3b10, size=4, remaining=3
[  152.591204][T10264] loop2: detected capacity change from 0 to 1024
[  152.626589][T10264] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  152.653741][T10264] EXT4-fs error (device loop2): __ext4_remount:6736: comm syz.2.890: Abort forced by user
[  152.658318][T10264] EXT4-fs (loop2): Remounting filesystem read-only
[  152.660572][T10264] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000.
[  152.693802][ T5930] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  153.242267][T10290] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem
[  153.325826][   T33] audit: type=1326 audit(1755119777.548:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10259 comm="syz.0.888" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8fd98ebe9 code=0x7fc00000
[  153.859211][ T5995] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  154.021647][ T5995] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  154.026129][ T5995] usb 1-1: config 0 interface 0 has no altsetting 0
[  154.029199][ T5995] usb 1-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00
[  154.032954][ T5995] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  154.041965][ T5995] usb 1-1: config 0 descriptor??
[  154.096672][T10305] netlink: 36 bytes leftover after parsing attributes in process `syz.1.906'.
[  154.653081][ T5995] input: HID 054c:03d5 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:054C:03D5.0009/input/input15
[  154.741001][ T5995] sony 0003:054C:03D5.0009: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.0-1/input0
[  154.746288][T10319] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  154.763467][ T5995] usb 1-1: USB disconnect, device number 17
[  155.255228][T10344] loop1: detected capacity change from 0 to 1024
[  155.402324][T10349] netlink: 24 bytes leftover after parsing attributes in process `syz.0.923'.
[  155.616693][T10353] loop1: detected capacity change from 0 to 32768
[  155.692992][T10353] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  155.809010][T10353] XFS (loop1): Ending clean mount
[  155.863800][T10353] XFS (loop1): Quotacheck needed: Please wait.
[  156.161963][T10353] XFS (loop1): Quotacheck: Done.
[  156.211545][   T33] audit: type=1804 audit(1755119780.428:69): pid=10353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.925" name="/newroot/284/file0/bus" dev="loop1" ino=9290 res=1 errno=0
[  156.589841][   T33] audit: type=1804 audit(1755119780.638:70): pid=10375 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.925" name="/newroot/284/file0/bus" dev="loop1" ino=9290 res=1 errno=0
[  156.738783][ T5935] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  156.792513][T10383] pimreg3: entered allmulticast mode
[  157.193863][T10387] loop1: detected capacity change from 0 to 4096
[  157.596982][T10401] loop0: detected capacity change from 0 to 4096
[  157.602337][T10401] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[  157.604765][T10401] UDF-fs: Scanning with blocksize 512 failed
[  157.610011][T10401] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  157.620679][T10401] UDF-fs: error (device loop0): udf_fiiter_advance_blk: extent after position 0 not allocated in directory (ino 1328)
[  157.652914][T10403] mmap: syz.1.940 (10403) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  157.696673][T10405] loop1: detected capacity change from 0 to 2048
[  157.705256][T10405] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  157.862801][T10408] loop9: detected capacity change from 0 to 7
[  157.865987][T10408] buffer_io_error: 7 callbacks suppressed
[  157.866000][T10408] Buffer I/O error on dev loop9, logical block 0, async page read
[  157.873641][T10408] Buffer I/O error on dev loop9, logical block 0, async page read
[  157.876907][T10408] Buffer I/O error on dev loop9, logical block 0, async page read
[  157.880260][T10408] Buffer I/O error on dev loop9, logical block 0, async page read
[  157.883507][T10408] Buffer I/O error on dev loop9, logical block 0, async page read
[  157.886812][T10408] Buffer I/O error on dev loop9, logical block 0, async page read
[  157.890184][T10408] Buffer I/O error on dev loop9, logical block 0, async page read
[  157.893331][T10408] ldm_validate_partition_table(): Disk read failed.
[  157.896049][T10408] Buffer I/O error on dev loop9, logical block 0, async page read
[  157.900789][T10408] Buffer I/O error on dev loop9, logical block 0, async page read
[  157.904073][T10408] Buffer I/O error on dev loop9, logical block 0, async page read
[  157.907347][T10408] Dev loop9: unable to read RDB block 0
[  157.914177][T10408]  loop9: unable to read partition table
[  157.916657][T10408] loop9: partition table beyond EOD, truncated
[  157.925076][T10408] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ
[  157.925076][T10408] ) failed (rc=-5)
[  158.573241][T10428] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  158.578436][T10428] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  158.670913][T10433] loop0: detected capacity change from 0 to 128
[  158.826503][T10438] loop0: detected capacity change from 0 to 256
[  158.971676][T10448] loop2: detected capacity change from 0 to 8
[  159.379258][ T9748] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  159.419414][ T5995] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  159.529213][ T9748] usb 3-1: Using ep0 maxpacket: 8
[  159.533847][ T9748] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  159.537203][ T9748] usb 3-1: config 0 has no interface number 0
[  159.542334][ T9748] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  159.546793][ T9748] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  159.550645][ T9748] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  159.557226][ T9748] usb 3-1: config 0 descriptor??
[  159.566439][ T9748] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  159.579179][ T5995] usb 2-1: Using ep0 maxpacket: 32
[  159.583825][ T5995] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  159.588181][ T5995] usb 2-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00
[  159.591956][ T5995] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  159.597062][ T5995] usb 2-1: config 0 descriptor??
[  160.015398][ T5995] zydacron 0003:13EC:0006.000A: unknown main item tag 0x0
[  160.017796][ T5995] zydacron 0003:13EC:0006.000A: unknown main item tag 0x0
[  160.022276][ T5995] zydacron 0003:13EC:0006.000A: unknown main item tag 0x0
[  160.033775][ T5995] zydacron 0003:13EC:0006.000A: hidraw0: USB HID v0.00 Device [HID 13ec:0006] on usb-dummy_hcd.1-1/input0
[  160.108428][T10466] loop0: detected capacity change from 0 to 32768
[  160.210555][ T5998] usb 2-1: USB disconnect, device number 18
[  160.843823][ T5995] usb 3-1: USB disconnect, device number 16
[  162.013336][T10502] netlink: 'syz.0.983': attribute type 4 has an invalid length.
[  162.052141][T10504] loop0: detected capacity change from 0 to 512
[  162.075368][T10504] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  162.077803][T10504] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[  162.080991][T10504] System zones: 0-1, 15-15, 18-18, 34-34
[  162.082921][T10504] EXT4-fs (loop0): orphan cleanup on readonly fs
[  162.084857][T10504] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0
[  162.087615][T10504] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  162.093014][T10504] EXT4-fs (loop0): Cannot turn on quotas: error -22
[  162.095308][T10504] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.984: bad orphan inode 16
[  162.099494][T10504] ext4_test_bit(bit=15, block=18) = 1
[  162.101135][T10504] is_bad_inode(inode)=0
[  162.104255][T10504] NEXT_ORPHAN(inode)=0
[  162.105853][T10504] max_ino=32
[  162.106925][T10504] i_nlink=2
[  162.108887][T10504] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  162.120977][T10504] fscrypt (loop0, inode 16): Error -61 getting encryption context
[  162.150695][ T5929] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  162.323145][T10520] netlink: 788 bytes leftover after parsing attributes in process `syz.0.991'.
[  162.509303][ T5995] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  162.670742][ T5995] usb 2-1: Using ep0 maxpacket: 8
[  162.676039][ T5995] usb 2-1: New USB device found, idVendor=0545, idProduct=800c, bcdDevice= 3.0a
[  162.679291][ T5995] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  162.682366][ T5995] usb 2-1: Product: syz
[  162.683892][ T5995] usb 2-1: Manufacturer: syz
[  162.685730][ T5995] usb 2-1: SerialNumber: syz
[  162.688881][ T5995] usb 2-1: config 0 descriptor??
[  162.694605][ T5995] gspca_main: xirlink-cit-2.14.0 probing 0545:800c
[  162.698263][ T5995] input: xirlink-cit as /devices/platform/dummy_hcd.1/usb2/2-1/input/input16
[  162.966174][    T9] usb 2-1: USB disconnect, device number 19
[  163.054125][T10539] netlink: 4 bytes leftover after parsing attributes in process `syz.2.999'.
[  163.516562][T10551] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1005'.
[  163.524633][ T5998] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  163.605039][T10557] loop1: detected capacity change from 0 to 256
[  163.612473][T10557] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  163.621211][T10557] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[  163.636954][T10557] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  163.688816][ T5998] usb 3-1: config 0 has an invalid interface number: 95 but max is 0
[  163.697120][ T5998] usb 3-1: config 0 has no interface number 0
[  163.701914][ T5998] usb 3-1: config 0 interface 95 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8
[  163.715072][ T5998] usb 3-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46
[  163.727199][ T5998] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  163.730717][ T5998] usb 3-1: Product: syz
[  163.732758][ T5998] usb 3-1: Manufacturer: syz
[  163.734689][ T5998] usb 3-1: SerialNumber: syz
[  163.744093][ T5998] usb 3-1: config 0 descriptor??
[  163.752202][T10549] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  163.927132][T10569] syz.1.1014 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  163.969723][ T5998] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  163.976049][ T5998] usb 3-1: MIDIStreaming interface descriptor not found
[  164.027177][T10570] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1013'.
[  164.164804][T10575] loop1: detected capacity change from 0 to 1024
[  164.201670][ T5998] usb 3-1: USB disconnect, device number 17
[  164.378264][T10577] loop1: detected capacity change from 0 to 512
[  164.384338][T10577] EXT4-fs: Ignoring removed bh option
[  164.384486][ T5941] udevd[5941]: setting mode of /dev/snd/midiC3D0 to 020660 failed: No such file or directory
[  164.393035][T10577] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  164.399768][ T5941] udevd[5941]: setting owner of /dev/snd/midiC3D0 to uid=0, gid=29 failed: No such file or directory
[  164.419893][ T5937] udevd[5937]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.95/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  164.438015][T10577] EXT4-fs (loop1): 1 truncate cleaned up
[  164.580503][T10577] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  165.407255][ T5935] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  165.696884][T10595] netlink: 'syz.1.1020': attribute type 1 has an invalid length.
[  165.892573][T10597] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1023'.
[  165.910824][ T1867] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  165.922082][T10599] loop0: detected capacity change from 0 to 128
[  165.930051][T10599] FAT-fs (loop0): bogus number of reserved sectors
[  165.932211][T10599] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  165.935406][T10599] FAT-fs (loop0): Can't find a valid FAT filesystem
[  165.971761][T10601] loop0: detected capacity change from 0 to 256
[  165.979841][T10601] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  166.069685][ T1867] usb 3-1: Using ep0 maxpacket: 8
[  166.072750][ T1867] usb 3-1: config 0 has an invalid interface number: 143 but max is 0
[  166.075352][ T1867] usb 3-1: config 0 has no interface number 0
[  166.077273][ T1867] usb 3-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b
[  166.080934][ T1867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  166.085257][ T1867] usb 3-1: config 0 descriptor??
[  166.199882][ T1867] viperboard 3-1:0.143: version 0.00 found at bus 003 address 018
[  166.219156][ T1867] viperboard-i2c viperboard-i2c.3.auto: error -EIO: failure setting i2c_bus_freq to 100
[  166.229603][ T1867] viperboard-i2c viperboard-i2c.3.auto: probe with driver viperboard-i2c failed with error -5
[  166.390718][ T1867] usb 3-1: USB disconnect, device number 18
[  166.411903][T10604] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1029'.
[  166.535698][ T5939] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  166.542337][ T5939] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  166.546212][ T5939] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  166.551738][ T5939] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  166.554229][ T5939] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  166.790912][T10611] chnl_net:caif_netlink_parms(): no params data found
[  166.850131][T10611] bridge0: port 1(bridge_slave_0) entered blocking state
[  166.852468][T10611] bridge0: port 1(bridge_slave_0) entered disabled state
[  166.854949][T10611] bridge_slave_0: entered allmulticast mode
[  166.857928][T10611] bridge_slave_0: entered promiscuous mode
[  166.862934][T10611] bridge0: port 2(bridge_slave_1) entered blocking state
[  166.865174][T10611] bridge0: port 2(bridge_slave_1) entered disabled state
[  166.867659][T10611] bridge_slave_1: entered allmulticast mode
[  166.871343][T10611] bridge_slave_1: entered promiscuous mode
[  166.893777][T10611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  166.898515][T10611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  166.927249][T10611] team0: Port device team_slave_0 added
[  166.937735][T10611] team0: Port device team_slave_1 added
[  166.989341][ T9748] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  166.996503][T10611] batman_adv: batadv0: Adding interface: batadv_slave_0
[  166.998777][T10611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  167.008179][T10611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  167.016721][T10611] batman_adv: batadv0: Adding interface: batadv_slave_1
[  167.018986][T10611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  167.027222][T10611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  167.042974][T10635] IPVS: Scheduler module ip_vs_ not found
[  167.090071][T10611] hsr_slave_0: entered promiscuous mode
[  167.093215][T10611] hsr_slave_1: entered promiscuous mode
[  167.095950][T10611] debugfs: 'hsr0' already exists in 'hsr'
[  167.098222][T10611] Cannot create hsr debugfs directory
[  167.145882][ T9748] usb 2-1: Using ep0 maxpacket: 16
[  167.151159][ T9748] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  167.156927][ T9748] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  167.164456][ T9748] usb 2-1: config 1 has no interface number 1
[  167.167304][ T9748] usb 2-1: too many endpoints for config 1 interface 2 altsetting 252: 65, using maximum allowed: 30
[  167.172543][ T9748] usb 2-1: config 1 interface 2 altsetting 252 has 0 endpoint descriptors, different from the interface descriptor's value: 65
[  167.177759][ T9748] usb 2-1: config 1 interface 2 has no altsetting 0
[  167.186689][ T9748] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  167.190775][ T9748] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  167.193962][ T9748] usb 2-1: Product: syz
[  167.196136][ T9748] usb 2-1: Manufacturer: syz
[  167.201992][ T9748] usb 2-1: SerialNumber: syz
[  167.293302][T10611] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  167.298973][T10611] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  167.304721][T10611] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  167.322729][T10611] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  167.349429][T10649] loop2: detected capacity change from 0 to 512
[  167.398613][T10611] 8021q: adding VLAN 0 to HW filter on device bond0
[  167.403367][T10649] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  167.408991][T10611] 8021q: adding VLAN 0 to HW filter on device team0
[  167.431402][ T4380] bridge0: port 1(bridge_slave_0) entered blocking state
[  167.433563][ T4380] bridge0: port 1(bridge_slave_0) entered forwarding state
[  167.437255][ T4380] bridge0: port 2(bridge_slave_1) entered blocking state
[  167.439487][ T4380] bridge0: port 2(bridge_slave_1) entered forwarding state
[  167.446515][T10649] ext4 filesystem being mounted at /325/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  167.482170][T10649] EXT4-fs: Remounting file system with no journal so ignoring journalled data option
[  167.485202][ T9748] usb 2-1: USB disconnect, device number 20
[  167.493562][T10649] EXT4-fs: Cannot change journaled quota options when quota turned on
[  167.543438][ T5941] udevd[5941]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  167.596772][ T5930] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.637416][T10659] loop2: detected capacity change from 0 to 512
[  167.651633][T10611] 8021q: adding VLAN 0 to HW filter on device batadv0
[  167.670911][T10659] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  167.677011][T10611] veth0_vlan: entered promiscuous mode
[  167.685360][T10611] veth1_vlan: entered promiscuous mode
[  167.707990][T10611] veth0_macvtap: entered promiscuous mode
[  167.713824][T10611] veth1_macvtap: entered promiscuous mode
[  167.724173][T10611] batman_adv: batadv0: Interface activated: batadv_slave_0
[  167.730589][T10611] batman_adv: batadv0: Interface activated: batadv_slave_1
[  167.737141][ T5947] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  167.740272][ T5947] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  167.743005][ T5947] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  167.745627][ T5947] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  167.807556][ T4380] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  167.811043][ T4380] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  167.835175][ T4380] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  167.837983][ T4380] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  168.349267][ T9748] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  168.389229][  T972] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  168.498117][ T5930] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  168.499264][ T9748] usb 4-1: Using ep0 maxpacket: 32
[  168.507928][ T9748] usb 4-1: config 2 has an invalid interface number: 157 but max is 0
[  168.511405][ T9748] usb 4-1: config 2 has 2 interfaces, different from the descriptor's value: 1
[  168.514227][ T9748] usb 4-1: config 2 has no interface number 1
[  168.526466][ T9748] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=a4.1b
[  168.531949][ T9748] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  168.534496][ T9748] usb 4-1: Product: syz
[  168.536044][ T9748] usb 4-1: Manufacturer: syz
[  168.537924][ T9748] usb 4-1: SerialNumber: syz
[  168.542519][  T972] usb 2-1: Using ep0 maxpacket: 16
[  168.546991][  T972] usb 2-1: config 0 has an invalid interface number: 109 but max is 0
[  168.559251][  T972] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  168.563176][  T972] usb 2-1: config 0 has no interface number 0
[  168.567817][ T9748] imon 4-1:2.157: inconsistent driver matching
[  168.572220][ T9748] imon 4-1:2.157: unable to register, err -22
[  168.575803][ T9748] imon 4-1:2.157: probe with driver imon failed with error -22
[  168.580356][  T972] usb 2-1: New USB device found, idVendor=0421, idProduct=0094, bcdDevice=28.8e
[  168.583779][  T972] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  168.592161][ T9748] imon:imon_find_endpoints: no valid input (IR) endpoint found
[  168.594692][ T9748] imon 4-1:2.0: unable to initialize intf0, err -19
[  168.597276][ T9748] imon:imon_probe: failed to initialize context!
[  168.597523][T10682] loop2: detected capacity change from 0 to 512
[  168.601808][  T972] usb 2-1: Product: syz
[  168.603243][  T972] usb 2-1: Manufacturer: syz
[  168.604635][  T972] usb 2-1: SerialNumber: syz
[  168.606470][ T9748] imon 4-1:2.0: unable to register, err -19
[  168.608605][T10682] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  168.613810][ T5932] Bluetooth: hci0: command tx timeout
[  168.622603][  T972] usb 2-1: config 0 descriptor??
[  168.657281][T10682] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  168.661380][T10682] ext4 filesystem being mounted at /328/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  168.697578][ T5930] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  168.786814][ T5995] usb 4-1: USB disconnect, device number 2
[  168.833973][T10678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  168.838375][T10678] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  168.863084][  T972] rndis_host 2-1:0.109: More than one union descriptor, skipping ...
[  168.865584][  T972] usb 2-1: bad CDC descriptors
[  168.868299][  T972] cdc_acm 2-1:0.109: More than one union descriptor, skipping ...
[  168.878953][  T972] usb 2-1: USB disconnect, device number 21
[  169.117058][T10702] loop2: detected capacity change from 0 to 512
[  169.140258][T10702] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  169.145409][T10702] ext4 filesystem being mounted at /336/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  170.467109][ T5930] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  170.729278][ T5939] Bluetooth: hci0: command tx timeout
[  170.858224][  T972] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  171.234553][  T972] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  171.238327][  T972] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  171.252793][  T972] usb 3-1: config 0 descriptor??
[  171.262042][  T972] cp210x 3-1:0.0: cp210x converter detected
[  171.876089][  T972] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  171.916804][  T972] usb 3-1: cp210x converter now attached to ttyUSB0
[  172.107409][ T5995] usb 3-1: USB disconnect, device number 19
[  172.117234][ T5995] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  172.128285][ T5995] cp210x 3-1:0.0: device disconnected
[  172.179258][  T972] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  172.369383][  T972] usb 4-1: Using ep0 maxpacket: 16
[  172.376502][  T972] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  172.384725][  T972] usb 4-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc
[  172.387839][  T972] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  172.392394][  T972] usb 4-1: Product: syz
[  172.393804][  T972] usb 4-1: Manufacturer: syz
[  172.395229][  T972] usb 4-1: SerialNumber: syz
[  172.400129][  T972] usb 4-1: config 0 descriptor??
[  172.407494][  T972] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  172.486290][T10747] loop1: detected capacity change from 0 to 32768
[  172.493967][T10747] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1076 (10747)
[  172.508828][T10747] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  172.512345][T10747] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[  172.515020][T10747] BTRFS info (device loop1): using free-space-tree
[  172.566032][ T5935] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  172.618261][ T9748] usb 4-1: USB disconnect, device number 3
[  172.763097][ T5939] Bluetooth: hci0: command tx timeout
[  172.988062][T10777] loop1: detected capacity change from 0 to 4096
[  173.020708][T10778] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  173.025763][T10777] NILFS error (device loop1): nilfs_check_folio: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11
[  173.038112][T10777] NILFS error (device loop1): nilfs_check_folio: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11
[  173.228741][T10787] loop3: detected capacity change from 0 to 256
[  173.255385][T10790] loop1: detected capacity change from 0 to 8
[  173.285075][T10787] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF
[  173.288835][T10787] FAT-fs (loop3): Filesystem has been set read-only
[  173.632082][ T9748] hid-generic 0004:0006:0003.000B: unknown main item tag 0x1
[  173.656657][ T9748] hid-generic 0004:0006:0003.000B: hidraw0: <UNKNOWN> HID v0.09 Device [syz1] on syz1
[  173.730411][ T1867] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  173.879254][ T1867] usb 2-1: Using ep0 maxpacket: 8
[  173.882836][ T1867] usb 2-1: config 1 has an invalid interface number: 128 but max is 1
[  173.885497][ T1867] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  173.888625][ T1867] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  173.891548][ T1867] usb 2-1: config 1 has no interface number 0
[  173.893588][ T1867] usb 2-1: config 1 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  173.900158][ T1867] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  173.903248][ T1867] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  173.905879][ T1867] usb 2-1: Product: syz
[  173.907236][ T1867] usb 2-1: Manufacturer: syz
[  173.908740][ T1867] usb 2-1: SerialNumber: syz
[  173.916562][ T1867] cdc_wdm 2-1:1.128: skipping garbage
[  173.918422][ T1867] cdc_wdm 2-1:1.128: invalid descriptor buffer length
[  173.920826][ T1867] cdc_wdm 2-1:1.128: probe with driver cdc_wdm failed with error -22
[  173.959404][ T5995] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  174.109304][ T5995] usb 3-1: Using ep0 maxpacket: 8
[  174.112847][ T5995] usb 3-1: unable to get BOS descriptor or descriptor too short
[  174.116268][ T5995] usb 3-1: config 9 has an invalid interface number: 5 but max is 0
[  174.120164][ T5995] usb 3-1: config 9 has no interface number 0
[  174.122213][ T5995] usb 3-1: config 9 interface 5 altsetting 9 has an endpoint descriptor with address 0xD7, changing to 0x87
[  174.125768][ T5995] usb 3-1: config 9 interface 5 altsetting 9 endpoint 0x87 has invalid wMaxPacketSize 0
[  174.127030][ T9748] usb 2-1: USB disconnect, device number 22
[  174.128930][ T5995] usb 3-1: config 9 interface 5 has no altsetting 0
[  174.132058][ T5995] usb 3-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=5d.a8
[  174.137725][ T5995] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  174.144814][ T5995] usb 3-1: Product: syz
[  174.146518][ T5995] usb 3-1: Manufacturer: syz
[  174.148498][ T5995] usb 3-1: SerialNumber: syz
[  174.365554][ T5995] usb 3-1: USB disconnect, device number 20
[  174.530106][T10818] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1100'.
[  174.849425][ T5939] Bluetooth: hci0: command tx timeout
[  174.989838][ T5995] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  175.031828][T10836] loop2: detected capacity change from 0 to 4096
[  175.041834][T10836] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512).
[  175.076461][T10836] ntfs3(loop2): Failed to load root (-22).
[  175.141622][ T5995] usb 2-1: Using ep0 maxpacket: 16
[  175.150823][ T5995] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  175.154563][ T5995] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  175.157466][ T5995] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  175.162455][ T5995] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  175.165381][ T5995] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  175.171560][ T5995] usb 2-1: config 0 descriptor??
[  175.274657][T10845] loop2: detected capacity change from 0 to 512
[  175.278637][T10845] EXT4-fs (loop2): blocks per group (34) and clusters per group (32768) inconsistent
[  175.918409][ T5995] microsoft 0003:045E:07DA.000C: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0
[  175.928518][ T5995] microsoft 0003:045E:07DA.000C: no inputs found
[  175.935720][ T5995] microsoft 0003:045E:07DA.000C: could not initialize ff, continuing anyway
[  175.944431][ T5995] usb 2-1: USB disconnect, device number 23
[  176.155510][T10861] loop2: detected capacity change from 0 to 32768
[  176.306335][T10867] loop2: detected capacity change from 0 to 128
[  176.327673][   T33] audit: type=1804 audit(1755119800.548:71): pid=10867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1123" name="/newroot/362/file0/bus" dev="loop2" ino=1048680 res=1 errno=0
[  176.992137][T10875] syz.2.1123: attempt to access beyond end of device
[  176.992137][T10875] loop2: rw=2049, sector=129, nr_sectors = 8 limit=128
[  177.446730][T10882] loop1: detected capacity change from 0 to 4096
[  177.549479][T10885] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  178.203612][ T5962] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.313990][ T5962] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.400667][ T5962] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.483437][ T5962] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.580993][ T5962] bridge_slave_1: left allmulticast mode
[  178.583230][ T5962] bridge_slave_1: left promiscuous mode
[  178.586973][ T5962] bridge0: port 2(bridge_slave_1) entered disabled state
[  178.596692][ T5962] bridge_slave_0: left allmulticast mode
[  178.598859][ T5962] bridge_slave_0: left promiscuous mode
[  178.604762][ T5962] bridge0: port 1(bridge_slave_0) entered disabled state
[  179.067259][ T5962] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  179.075295][ T5962] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  179.089007][ T5962] bond0 (unregistering): Released all slaves
[  179.395631][ T5962] hsr_slave_0: left promiscuous mode
[  179.398771][ T5962] hsr_slave_1: left promiscuous mode
[  179.402022][ T5962] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  179.405064][ T5962] batman_adv: batadv0: Removing interface: batadv_slave_0
[  179.409387][ T5962] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  179.412413][ T5962] batman_adv: batadv0: Removing interface: batadv_slave_1
[  179.439953][ T5962] veth1_macvtap: left promiscuous mode
[  179.442615][ T5962] veth0_macvtap: left promiscuous mode
[  179.445546][ T5962] veth1_vlan: left promiscuous mode
[  179.449545][ T5962] veth0_vlan: left promiscuous mode
[  180.046733][ T5962] team0 (unregistering): Port device team_slave_1 removed
[  180.101543][ T5962] team0 (unregistering): Port device team_slave_0 removed
[  180.887163][ T5962] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  180.967559][ T5962] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  181.012365][ T5962] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  181.084070][ T5962] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  181.182732][ T5962] bridge_slave_1: left allmulticast mode
[  181.185532][ T5962] bridge_slave_1: left promiscuous mode
[  181.187566][ T5962] bridge0: port 2(bridge_slave_1) entered disabled state
[  181.192311][ T5962] bridge_slave_0: left allmulticast mode
[  181.194588][ T5962] bridge_slave_0: left promiscuous mode
[  181.197134][ T5962] bridge0: port 1(bridge_slave_0) entered disabled state
[  181.599166][ T5962] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  181.603120][ T5962] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  181.606790][ T5962] bond0 (unregistering): Released all slaves
[  181.853145][ T5962] hsr_slave_0: left promiscuous mode
[  181.856119][ T5962] hsr_slave_1: left promiscuous mode
[  181.858855][ T5962] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  181.863945][ T5962] batman_adv: batadv0: Removing interface: batadv_slave_0
[  181.867652][ T5962] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  181.870722][ T5962] batman_adv: batadv0: Removing interface: batadv_slave_1
[  181.895973][ T5962] veth1_macvtap: left promiscuous mode
[  181.898161][ T5962] veth0_macvtap: left promiscuous mode
[  181.902797][ T5962] veth1_vlan: left promiscuous mode
[  181.904905][ T5962] veth0_vlan: left promiscuous mode
[  182.347846][ T5962] team0 (unregistering): Port device team_slave_1 removed
[  182.396742][ T5962] team0 (unregistering): Port device team_slave_0 removed
[  183.143403][ T5962] ------------[ cut here ]------------
[  183.145198][ T5962] WARNING: CPU: 1 PID: 5962 at net/xfrm/xfrm_state.c:3303 xfrm_state_fini+0x270/0x2f0
[  183.147955][ T5962] Modules linked in:
[  183.149342][ T5962] CPU: 1 UID: 0 PID: 5962 Comm: kworker/u8:4 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  183.154061][ T5962] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  183.157647][ T5962] Workqueue: netns cleanup_net
[  183.159716][ T5962] RIP: 0010:xfrm_state_fini+0x270/0x2f0
[  183.161769][ T5962] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 68 dd 01 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 16 9b e2 f7 e8 b1 72 9e f7 90 <0f> 0b 90 e9 fd fd ff ff e8 a3 72 9e f7 90 0f 0b 90 e9 60 fe ff ff
[  183.168073][ T5962] RSP: 0018:ffffc9000325f898 EFLAGS: 00010293
[  183.170325][ T5962] RAX: ffffffff8a2138ff RBX: ffff88811e9ba440 RCX: ffff888107758000
[  183.173219][ T5962] RDX: 0000000000000000 RSI: ffffffff8dba33cb RDI: ffff888107758000
[  183.175775][ T5962] RBP: ffffc9000325f9b0 R08: ffffffff8fa34237 R09: 1ffffffff1f46846
[  183.178374][ T5962] R10: dffffc0000000000 R11: fffffbfff1f46847 R12: ffffffff8f62d2e0
[  183.180917][ T5962] R13: 1ffff9200064bf40 R14: ffff88811e9bb8c0 R15: dffffc0000000000
[  183.183228][ T5962] FS:  0000000000000000(0000) GS:ffff8881a3c23000(0000) knlGS:0000000000000000
[  183.186068][ T5962] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  183.188220][ T5962] CR2: 0000564faf703e10 CR3: 000000000df36000 CR4: 00000000000006f0
[  183.190723][ T5962] Call Trace:
[  183.191727][ T5962]  <TASK>
[  183.192635][ T5962]  xfrm_net_exit+0x2d/0x70
[  183.194184][ T5962]  ops_undo_list+0x49a/0x990
[  183.195614][ T5962]  ? __pfx_ops_undo_list+0x10/0x10
[  183.197200][ T5962]  ? do_raw_spin_unlock+0x4d/0x240
[  183.198726][ T5962]  cleanup_net+0x4c5/0x800
[  183.200251][ T5962]  ? __pfx_cleanup_net+0x10/0x10
[  183.201789][ T5962]  ? _raw_spin_unlock_irq+0x23/0x50
[  183.203753][ T5962]  ? process_scheduled_works+0x9ef/0x17b0
[  183.205640][ T5962]  ? process_scheduled_works+0x9ef/0x17b0
[  183.207708][ T5962]  process_scheduled_works+0xae1/0x17b0
[  183.209914][ T5962]  ? __pfx_process_scheduled_works+0x10/0x10
[  183.211866][ T5962]  worker_thread+0x8a0/0xda0
[  183.213589][ T5962]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  183.215797][ T5962]  ? __kthread_parkme+0x7b/0x200
[  183.217644][ T5962]  kthread+0x711/0x8a0
[  183.219250][ T5962]  ? __pfx_worker_thread+0x10/0x10
[  183.221852][ T5962]  ? __pfx_kthread+0x10/0x10
[  183.223525][ T5962]  ? _raw_spin_unlock_irq+0x23/0x50
[  183.225254][ T5962]  ? lockdep_hardirqs_on+0x9c/0x150
[  183.227058][ T5962]  ? __pfx_kthread+0x10/0x10
[  183.228455][ T5962]  ret_from_fork+0x3fc/0x770
[  183.230006][ T5962]  ? __pfx_ret_from_fork+0x10/0x10
[  183.231728][ T5962]  ? __switch_to_asm+0x39/0x70
[  183.233212][ T5962]  ? __switch_to_asm+0x33/0x70
[  183.234653][ T5962]  ? __pfx_kthread+0x10/0x10
[  183.236096][ T5962]  ret_from_fork_asm+0x1a/0x30
[  183.237550][ T5962]  </TASK>
[  183.238513][ T5962] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  183.240752][ T5962] CPU: 1 UID: 0 PID: 5962 Comm: kworker/u8:4 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  183.244546][ T5962] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  183.247520][ T5962] Workqueue: netns cleanup_net
[  183.248949][ T5962] Call Trace:
[  183.250016][ T5962]  <TASK>
[  183.250910][ T5962]  dump_stack_lvl+0x99/0x250
[  183.252306][ T5962]  ? __asan_memcpy+0x40/0x70
[  183.253696][ T5962]  ? __pfx_dump_stack_lvl+0x10/0x10
[  183.255222][ T5962]  ? __pfx__printk+0x10/0x10
[  183.256715][ T5962]  vpanic+0x281/0x750
[  183.257941][ T5962]  ? __pfx__printk+0x10/0x10
[  183.259311][ T5962]  ? __pfx_vpanic+0x10/0x10
[  183.260671][ T5962]  ? is_bpf_text_address+0x292/0x2b0
[  183.262685][ T5962]  panic+0xb9/0xc0
[  183.264198][ T5962]  ? __pfx_panic+0x10/0x10
[  183.265711][ T5962]  __warn+0x31b/0x4b0
[  183.267164][ T5962]  ? xfrm_state_fini+0x270/0x2f0
[  183.268849][ T5962]  ? xfrm_state_fini+0x270/0x2f0
[  183.270445][ T5962]  report_bug+0x2be/0x4f0
[  183.271814][ T5962]  ? xfrm_state_fini+0x270/0x2f0
[  183.273301][ T5962]  ? xfrm_state_fini+0x270/0x2f0
[  183.274798][ T5962]  ? xfrm_state_fini+0x272/0x2f0
[  183.276307][ T5962]  handle_bug+0x84/0x160
[  183.277582][ T5962]  exc_invalid_op+0x1a/0x50
[  183.278951][ T5962]  asm_exc_invalid_op+0x1a/0x20
[  183.280445][ T5962] RIP: 0010:xfrm_state_fini+0x270/0x2f0
[  183.282135][ T5962] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 68 dd 01 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 16 9b e2 f7 e8 b1 72 9e f7 90 <0f> 0b 90 e9 fd fd ff ff e8 a3 72 9e f7 90 0f 0b 90 e9 60 fe ff ff
[  183.288501][ T5962] RSP: 0018:ffffc9000325f898 EFLAGS: 00010293
[  183.290637][ T5962] RAX: ffffffff8a2138ff RBX: ffff88811e9ba440 RCX: ffff888107758000
[  183.292959][ T5962] RDX: 0000000000000000 RSI: ffffffff8dba33cb RDI: ffff888107758000
[  183.295668][ T5962] RBP: ffffc9000325f9b0 R08: ffffffff8fa34237 R09: 1ffffffff1f46846
[  183.298073][ T5962] R10: dffffc0000000000 R11: fffffbfff1f46847 R12: ffffffff8f62d2e0
[  183.300657][ T5962] R13: 1ffff9200064bf40 R14: ffff88811e9bb8c0 R15: dffffc0000000000
[  183.303590][ T5962]  ? xfrm_state_fini+0x26f/0x2f0
[  183.305322][ T5962]  ? xfrm_state_fini+0x26f/0x2f0
[  183.306784][ T5962]  xfrm_net_exit+0x2d/0x70
[  183.308263][ T5962]  ops_undo_list+0x49a/0x990
[  183.309954][ T5962]  ? __pfx_ops_undo_list+0x10/0x10
[  183.311832][ T5962]  ? do_raw_spin_unlock+0x4d/0x240
[  183.314163][ T5962]  cleanup_net+0x4c5/0x800
[  183.315720][ T5962]  ? __pfx_cleanup_net+0x10/0x10
[  183.317254][ T5962]  ? _raw_spin_unlock_irq+0x23/0x50
[  183.318859][ T5962]  ? process_scheduled_works+0x9ef/0x17b0
[  183.320608][ T5962]  ? process_scheduled_works+0x9ef/0x17b0
[  183.322392][ T5962]  process_scheduled_works+0xae1/0x17b0
[  183.324096][ T5962]  ? __pfx_process_scheduled_works+0x10/0x10
[  183.325883][ T5962]  worker_thread+0x8a0/0xda0
[  183.327290][ T5962]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  183.329184][ T5962]  ? __kthread_parkme+0x7b/0x200
[  183.330651][ T5962]  kthread+0x711/0x8a0
[  183.331870][ T5962]  ? __pfx_worker_thread+0x10/0x10
[  183.333451][ T5962]  ? __pfx_kthread+0x10/0x10
[  183.334916][ T5962]  ? _raw_spin_unlock_irq+0x23/0x50
[  183.336534][ T5962]  ? lockdep_hardirqs_on+0x9c/0x150
[  183.338133][ T5962]  ? __pfx_kthread+0x10/0x10
[  183.339572][ T5962]  ret_from_fork+0x3fc/0x770
[  183.341034][ T5962]  ? __pfx_ret_from_fork+0x10/0x10
[  183.342649][ T5962]  ? __switch_to_asm+0x39/0x70
[  183.344118][ T5962]  ? __switch_to_asm+0x33/0x70
[  183.345571][ T5962]  ? __pfx_kthread+0x10/0x10
[  183.346960][ T5962]  ret_from_fork_asm+0x1a/0x30
[  183.348379][ T5962]  </TASK>
[  183.349954][ T5962] Kernel Offset: disabled
[  183.351274][ T5962] Rebooting in 86400 seconds..

VM DIAGNOSIS:
21:16:46  Registers:
info registers vcpu 0

CPU#0
RAX=c1836a10b0e6f800 RBX=ffffffff81968308 RCX=c1836a10b0e6f800 RDX=0000000000000001
RSI=ffffffff8d9b4408 RDI=ffffffff8be32600 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa34230 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b7893f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8623000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005555858927d0 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000034c2fed7 0000000000000032 XMM01=0100000000000100 0000000000000000
XMM02=65626d6520002e74 736f686c61636f6c XMM03=0000000000000000 0000000000000000
XMM04=ffffffffffffff00 0000000000000000 XMM05=0100000000000000 00000000000002ff
XMM06=0100000000000000 00000000000002ff XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000054 RBX=0000000000000054 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000325f030
R8 =ffff888106d18237 R9 =1ffff11020da3046 R10=dffffc0000000000 R11=ffffffff854e75e0
R12=dffffc0000000000 R13=ffffffff99af2943 R14=ffffffff99de74e0 R15=0000000000000000
RIP=ffffffff854e765c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c23000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000564faf703e10 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=000000001d80b1c2 0000000000000035 XMM01=0100000000000100 0000000000000000
XMM02=65626d6520002e74 736f686c61636f6c XMM03=0000000000000000 0000000000000000
XMM04=ffffffffffffff00 0000000000000000 XMM05=0100000000000000 00000000000002ff
XMM06=0100000000000000 00000000000002ff XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
