last executing test programs:

5m16.532217209s ago: executing program 1 (id=222):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
recvmmsg(r0, &(0x7f0000001480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000001c0)=[{0xfffffffffffffffd}], 0x1}}], 0x2, 0x20, 0x0)
socket(0x10, 0x3, 0x0)
pselect6(0x9a, &(0x7f0000000100)={0x4, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x1}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)

5m16.391935325s ago: executing program 1 (id=224):
r0 = open(&(0x7f0000000280)='./file1\x00', 0x1cd142, 0x0)
truncate(&(0x7f0000000280)='./file1\x00', 0x1ff8)
read$FUSE(r0, &(0x7f0000002cc0)={0x2020}, 0x2020)

5m16.391745927s ago: executing program 1 (id=225):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000400)={{0x1, 0x0, 0xfffffffe}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x0, 0x6bca7d2de6929bc2})

5m16.341651785s ago: executing program 1 (id=226):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f00000002c0)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@test_dummy_encryption_v1}, {@noload}, {@test_dummy_encryption_v1}, {@nodiscard}, {@data_err_ignore}, {@usrquota}, {@journal_ioprio}, {@resuid}]}, 0x1, 0xbc1, &(0x7f00000043c0)="$eJzs3M9rXNUeAPDvvfnZNu9N+ng8Xt+meTweLTzeNO0j5bUItlJx40LQrdCQTkrI9AdJpCbNYqL/gKhrwY2gFqULu+5Gwa0brVuLC6FIbBRENHLnR5omM0nazuTG5POBM/ecOXfu+X7nMnPPgZkbwJ41lD2kEYci4nwSUag/n0ZEb7XWH1Gp7be0OD/20+L8WBLLyy9+n0QSEfcX58cax0rq2wP1Rn9EfPFMEn95ff2407Nzk6Plcmmq3j42c+nqsenZuf9OXBq9WLpYunz85P9HToycHD410rZcf/7mzK0f//nct5VfPvj1xg9vvZfEmRio963Oo571ExuKoZX3ZLXuiBhtw/F3gq56PqvzTLo3eVHa4aAAAGgpXTWH+1sUoiseTN4K8emXuQYHAAAAtMVyV8QyAAAAsMsl1v8AAACwyzV+B3B/cX6sUfL9RcL2unc2IgZr+S/VS62nOyrVbX/0RMT++0ms/ltrUnvZExuKiLtfn/o4K9Hkf8idVlmIiL83O/9JNf/B+j+h1+afRsRwG8YfWtP+I+V/pg3j550/AHvT7bO1C9n661+6Mv+JJte/7ibXrsex0fVv0/uItEFj/re0bv73IP+uFvO/F7Y4xvX337nWqi/L/6lbz37UKNn42faJknoE9xYi/tHdLP9kJf+kRf7ntzhG4bdrpVZ9eee//G7EkWief0Oy8f2Jjo1PlEvDtcemYyx8PvJhq/Hzzj87//tb5L/Z+b/60JFa39Tn5XPnbrbq2zz/9Lve5KVqrbf+zKujMzNTxyN6k+fXP39i43wb+zSOkeV/9F8bf/6b5Z99J1Tq70OW+UJ9m7VfWzPm0zeuf7JR/tnaL8/zf+Exz/8bWxzj35+9ebRV3+r1b1ay8e8mtbUwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADSkETEQSVqMiKRaT9NiMeJARPw19qflK9Mz/xm/8srlC1lfxGD0pOMT5dJwRBRq7SRrH6/WH7RPrGn/LyIORsTbhX3VdnHsSvlC3skDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACw4kBEDESSFiMijYilQpoWi3lHBQAAALTdYN4BAAAAAB1n/Q8AAAC7n/U/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHXbw8O07SURUTu+rlkxvva8n18iATkvzDgDITVfeAQC56d7abv2djgPYfo+4xjddgF0o2aS/9QSgr+2xAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALBzHTl0+04SEZXT+6ol01vv62n6isPbGB3QSWneAQC56dqos3v74gC2n4847F3N1/jAXpJs0t9f3yepROXhnr5OhgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADADjNQLUlajIi0Wk/TYjHiTxExGD3J+ES5NBwRf46Irwo9fVm7L++gAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaLvp2bnJ0XK5NKWiopJvJdkZYdQqeX8zAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQh+nZucnRcrk0NZ13JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDepmfnJkfL5dLUFio3H2XnVZW8cwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID+/BwAA//+99w6C")
mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x315901c, 0x0)
chroot(&(0x7f0000001140)='./file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00')

5m16.26235691s ago: executing program 1 (id=227):
sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x24040811}, 0x20040005)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4})
ioctl$sock_netdev_private(r0, 0x89f0, &(0x7f0000000000))

5m15.92124788s ago: executing program 1 (id=229):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000004, 0x38011, r0, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x200002, 0x0)

5m15.808675035s ago: executing program 32 (id=229):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000004, 0x38011, r0, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x200002, 0x0)

3m22.48049896s ago: executing program 2 (id=1302):
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000002c0))
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x10008, &(0x7f0000000140), 0x1, 0x4c0, &(0x7f0000000bc0)="$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")
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80)

3m22.395555817s ago: executing program 2 (id=1303):
renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0, 0x2)

3m22.322983242s ago: executing program 2 (id=1304):
ioctl$VIDIOC_S_AUDIO(0xffffffffffffffff, 0x40345622, &(0x7f0000000080)={0xe, "ede0dc5f5232c376f5de2f7758d5f37ac7dca44355c68a7f9b3ae8854a6bb744", 0x4})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000001800)={{r0}, &(0x7f0000001780)=0x4, &(0x7f00000017c0)='%-010d \x00'}, 0x20)

3m22.322741937s ago: executing program 2 (id=1305):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f0000000000), 0x1, 0x478, &(0x7f0000000300)="$eJzs3M9vVEUcAPDv2/7gt62IP0CUKhobjS0tqBw8gNHEgyYmesBjbQsiCzW0GiFEVw94NCTeiUcT/wJPejHqycSr3g0JMVxAvTzzdt8ru8vuupStC+znkyydefOWme/Om+2bmd0GMLAmsn+SiK0R8VtEjNWyjSdM1H5cu3Ju/q8r5+aTSNM3/0yq5129cm6+OLV43pYiU2k8Xm/5zNkTc+Xy4uk8P71y8v3p5TNnnz1+cu7Y4rHFU7MHDx7YP/PC87PP9STOrE1Xd328tHvnq29feH3+yIV3fvomKeJviOPD7v/TjR1LJ1ocGyoST3Zfyx1hW106Ge5jQ7gp70ZE1l0j1fE/FkNxvfPG4pXP+to4YF2laZpuaF9cSYG7WBL9bgHQH/nv+SSikk395+vn84Pg8uHaBCiL+1r+qJUMR6mWGL/YNL/tpWy2daTy98XsEU3rKQAA6+G7w7Wf2X1H8agdKTWs4h/K94bGI+LeiNgeEfdFxI6IuD8iHoiIByPiobrntNr3ada8SXLj/U/p0poC61J2//divrfVeP9XKk4ZH8pz26rxjyRHj5cX90XEPRExGSMbsvxMhzq+f/nXL9qVTdTd/2WPrP7iXjBvx6XhpgW6hbmVuVuJud7lTyN2DbeKP1ndCcj6cWdE7NqztjqOP/317nZl/x1/Bz3YZ0q/iniq1v+VaIq/kHTen5zeGOXFfdPFVXGjn385/0a7+m8p/h7I+n9zy+t/Nf7xpH6/dvnm6zj/++dt5zRdXv+j9c/Jrv/R5K1quij4aG5l5fRMxGjyWn78UH68sb7qebPXz8/in9zbevxvj+uvxMMRkV3Ej0TEoxGxJ2/7YxHxeETs7RD/jy898d7a419fWfwLN9X/bRPF3vYNRUMnfvi2WlJ01niH+JNo0f8HqqnJ/Eg3738dW3r6Vq5mAAAAuPOUImJrJKWp1XSpNDVV+7z8jthcKi8trzxzdOmDUwu17wiMx0ipWOkaW10PjcpMPq0v1kdnm/L783XjL4c2VfNT80vlhX4HDwNuS5vxn/ljqN+tA9ZXh0//A3e/te6jp2n6SY+bAvzPfF8bBpfxD4Orxfjf1JS3SgB3qVa//03sYTC4/4fBZfzD4DL+YXAZ/zCQ8m/CD3fzBf91S2TvP/2rvZtENLQwTfvUjNHb49WoJqLUt9pjjU+f7NMr9k/+xzZvj47rMtHvdyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDe+DcAAP//dZ3gaQ==")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x100, 0x0)
getdents64(r0, &(0x7f0000000400)=""/4096, 0xc00)

3m22.163154044s ago: executing program 2 (id=1306):
syz_usb_connect$uac1(0x3, 0x82, &(0x7f0000000240)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x70, 0x3, 0x1, 0x4, 0x0, 0x8, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x62c, 0x1a}, [@extension_unit={0x7, 0x24, 0x8, 0x1, 0xfff}, @output_terminal={0x9, 0x24, 0x3, 0x4, 0x0, 0x4, 0x1, 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x608, 0x93, 0x1, 0x3, {0x7, 0x25, 0x1, 0x0, 0x0, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x5, 0xf, 0x5f, {0x7, 0x25, 0x1, 0xc, 0x65, 0x8001}}}}}}}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0})

3m21.713066068s ago: executing program 2 (id=1307):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, 0x0)

3m21.638980541s ago: executing program 33 (id=1307):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, 0x0)

3m17.257663273s ago: executing program 0 (id=1330):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x20000406, &(0x7f0000001d40)={[{@dioread_lock}, {@noblock_validity}, {@commit}, {@jqfmt_vfsold}, {@nolazytime}, {@grpjquota, 0x2e}, {@nouid32}, {@resuid}, {@bh}, {@grpid}], [], 0x2c}, 0x84, 0x4f0, &(0x7f0000001e00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x8000, 0x93)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000380)=@v1={0x0, @adiantum, 0x10, @desc4})

3m17.172513s ago: executing program 0 (id=1331):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@call={0x85, 0x0, 0x0, 0x7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1}, 0xc)

3m17.055126413s ago: executing program 0 (id=1332):
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r2=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r2, <r3=>0x0, <r4=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000240)={0x0, 0x0, r3, r4, 0x3, 0x8, 0x2, 0x80000000, {0xac7d, 0x8, 0x37a, 0x69, 0xd, 0xfffe, 0x2, 0x45, 0x9, 0xe154, 0x21, 0x8005, 0x1, 0x1, "fe1d00003003000000000000d2a9ae000000090000000000000004b427180610"}})

3m16.948416199s ago: executing program 0 (id=1333):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)
mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0)

3m16.829950472s ago: executing program 0 (id=1334):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)

3m15.96354492s ago: executing program 0 (id=1342):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f0000000280)=0x81, 0x4)

3m15.849162032s ago: executing program 34 (id=1342):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f0000000280)=0x81, 0x4)

2m59.168764695s ago: executing program 5 (id=1480):
r0 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_STATUS64(r0, 0x40044103, 0x0)

2m59.094115285s ago: executing program 5 (id=1481):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xec, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x5}, @in=@dev={0xac, 0x14, 0x14, 0x2e}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2e}}, [@migrate={0x9c, 0x11, [{@in=@loopback=0xa010101, @in=@loopback, @in6=@rand_addr=' \x01\x00', @in=@rand_addr=0x64010102, 0x3c, 0x4, 0x0, 0x0, 0xa, 0x2}, {@in=@private=0xa010101, @in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x38}, @in=@dev={0xac, 0x14, 0x14, 0x2c}, 0x3c, 0x4, 0x0, 0x0, 0x8, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x6a8dd86ef567f079}, 0x4020800)

2m59.093922268s ago: executing program 5 (id=1482):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000010961b080000000000000109022400010000000109040000010300000009210000000122070009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000c80)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@local=@item_4={0x3, 0x2, 0xa, "3c8dde86"}, @local=@item_012={0x1, 0x2, 0xa, '['}]}}, 0x0}, 0x0)

2m57.425046661s ago: executing program 5 (id=1488):
syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000001080)='./bus\x00', 0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167], 0x1, 0x150, &(0x7f0000000300)="$eJzs27+KE1EUB+CTP2rUJrVYDNhYBfUJFIkgDihKCq0Uok0iAdOMVnkUX8c38CUWllTp7rI7S7KbTYotJrObfF8zB34MnFPMHO7AfH38czScTH9MPsyj02hE+2VksWhEN5rRitIsAIB9skgpjlNK6d4s7v+NlFLdHQEAVbP/AeDw2P8AcHiu7P9m3R0BAFX79PnLu1d53v+YZZ2Io1kxKAbltczfvM37z7Iz3dVd86IYtJb58zLPLud34sF5/mJjfjeePinz0+z1+3wtfxjD6scHAACAg9DLljae73u9bXlZXfg+sHZ+b8ej9s7GAACuYfr7z+jbePz9l0Jxi4r//yJuQBt7XNT9ZgKqtnro6+4EAAAAAAAAAAAAAADYZhe/E9U9IwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKw7CQAA//+ueFEp")
r0 = syz_clone(0x2808000, 0x0, 0x0, 0x0, 0x0, 0x0)
move_pages(r0, 0x1, &(0x7f00000001c0)=[&(0x7f0000001000/0x1000)=nil], &(0x7f0000000200)=[0x1], &(0x7f0000000240), 0x0)

2m57.274454408s ago: executing program 5 (id=1489):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000fc0)={0x16, 0x98, 0xfa00, {0x0, 0x2, 0xffffffffffffffff, 0x30, 0x8c2ef9f38faebbd2, @in6={0xa, 0x4e24, 0xde3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}}}, 0xa0)

2m56.893040402s ago: executing program 5 (id=1497):
syz_mount_image$jfs(&(0x7f0000000180), &(0x7f0000000140)='./file2\x00', 0x4, &(0x7f0000000000)=ANY=[], 0xfd, 0x61c4, &(0x7f00000064c0)="$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")
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x1, 0x0, &(0x7f0000000140))

2m56.788400303s ago: executing program 35 (id=1497):
syz_mount_image$jfs(&(0x7f0000000180), &(0x7f0000000140)='./file2\x00', 0x4, &(0x7f0000000000)=ANY=[], 0xfd, 0x61c4, &(0x7f00000064c0)="$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")
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x1, 0x0, &(0x7f0000000140))

2m40.278345092s ago: executing program 4 (id=1638):
r0 = socket(0x2b, 0x80801, 0x1)
listen(r0, 0x8)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x4, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x7, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x2, 0x9, 0x5, 0x2, 0x40000, 0x6, 0x5, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x7, 0xb, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xe, 0x0, 0x71, 0x2, 0x10001, 0x532, 0x2, 0x5, 0x6, 0x8f, 0x8000006, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x1, 0x0, 0x7, 0x6, 0x9, 0x6, 0x1, 0x40], [0x10000007, 0x7ff, 0x7, 0x9, 0xd, 0x4, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0xffe, 0xfffffffc, 0x334000, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x5, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x4, 0xffff, 0x5, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x2, 0x9, 0x4, 0x8009, 0x8, 0x9, 0x1006, 0xb, 0xa, 0x1, 0x9, 0x9, 0x10000006, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x10007, 0x3, 0x9, 0x48c93690, 0x42, 0xc400], [0x6, 0x6, 0x80000001, 0x2, 0x102, 0x100, 0x10008d0, 0x9, 0x5, 0x7ff7, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x4, 0x3, 0x2, 0x86, 0x1, 0xc, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x7fd, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800103, 0x200, 0x80, 0xc, 0xcc52, 0x950bfaf, 0x2001000, 0xfffffff6, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xb8d, 0xbf, 0x10002, 0x403, 0x13, 0x3, 0x0, 0x1, 0xfffffff0, 0x10, 0x400006, 0x1c, 0x120000, 0xffff, 0x6, 0xaaed, 0xfffffffd, 0xff], [0x9, 0xbb33, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe623, 0x0, 0x2, 0x7fff, 0x2, 0x14c, 0x60a5, 0x1, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0x10, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x95ff, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x1007d, 0x26, 0x55a4, 0x30b1d693, 0x5a2b, 0x8000000c, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x8, 0x200, 0xffff3441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

2m40.170361758s ago: executing program 4 (id=1639):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060300000000000000000000000000140007800800114000f50000050015000c00000005000100060000000500050002000000050004000000000011000300686173683a69702c706f727400000000090002"], 0x60}}, 0x804)

2m40.170041634s ago: executing program 4 (id=1640):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@initr0, @alu={0x7, 0x1, 0xb, 0x0, 0x0, 0x8}]}, &(0x7f0000000000)='GPL\x00', 0x8}, 0x94)

2m39.968462345s ago: executing program 4 (id=1642):
syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x2014000, &(0x7f0000000580)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000102,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYBLOB="d6d84c0df937ed4a0cd30000f2e9ea9568eab74a46c525dc386983eade0b0ce5f1dd911706cf7d32d7d508d1823b8871e001000000eb4ce0a008f5cdea622fc6675e5486860a752ed0298a948efa72b2c8d8525181644a3124f3544a50f192b98f055ad125fd4674534413c6044136ea5aefac5267e43739626ea9391d8f346c4694f70400000000000000cee1f628d1cec3462830606bb612bfed91181cdc107bb91a2e86de2ad5", @ANYBLOB="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"], 0x12, 0xc49, &(0x7f0000001cc0)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

2m39.596571117s ago: executing program 4 (id=1646):
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file1\x00', 0x0, &(0x7f00000000c0)={[{@nls={'nls', 0x3d, 'cp775'}}, {@uid}]}, 0xff, 0x5de, &(0x7f0000001340)="$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")
listxattr(&(0x7f00000000c0)='./file1\x00', 0x0, 0x20)

2m38.703359265s ago: executing program 4 (id=1652):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xb, 0x2}, {}, {0xc, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)

2m38.568981779s ago: executing program 36 (id=1652):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xb, 0x2}, {}, {0xc, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)

21.044959847s ago: executing program 6 (id=2795):
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000)
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}})

20.982633718s ago: executing program 6 (id=2797):
syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000000c0)='./bus\x00', 0x1c802, &(0x7f0000002740)=ANY=[@ANYBLOB="71756f74612c646973636172642c646973636172642c696f636861727365743d6b6f69382d72752c646973636172642c00f4193eb3ba2a0d5fd0cd7374288ff89ec513a53e007345decb720900f8312da2463eb0edf52fad1a00ebd41c14b3ce75d0cffefd379624b16f7260c835713b263352e03b5cb8fa0c042bd1225ed4ded2b62e12fea4d7e61b738e40781e58d5fff112364ac140f419e5dafecd283b3fab6b142ddbc893b35a81fe9265591ef35fa2928e095fee4c10b22e4212378de59bca0307cc644b9620b63f0000007bbbd422d87856b71348b8f45398b9660b6b3e8ee8a8c32f3234cb46e2cd827ec25c1ca4d046bc004f8df7b1ee690a5e50510700d80c7fa65fa724d0e1b4369f1b64fe249a0312010000004ac983de925f52d735b03fea941b1e948ad8d19cfda5b799325fd69d14fcf6cdde7700a63150eb3699e5314e0827750e244150ec19f3f3f1d8be542c084b5e40bfaa8ad206d2a33b0ddbd7f8e07dc7d17174a4549ffaf5976949cb6d658c42ec7cd9fe8ad82852cefb04646edb3a41eb514eb6a772b3ee9f21e25822b54ec33e592d5c040946721101d53aff21f90351c95aa0f73f1853d6afcbf9448b220e988466066fa5c09e6198fc4520d199b93bdedee87c4043815aa05668a06f8da96680ccc1a139ade90f5c79af46208f9762f54e7c29088d9de69bd2d51c6b9c42209ddc3880051303b855853407d959a5777dce25201c5ea1faa084c36e3e349915ebec53435eb2910c59394ee84ba3baf9c440ae5833c23f46b0eaac543ce0c80ba0603213e53ea59755070b18bc10b9224aa082d967206115b492d825751fcc00000000000000e63d51c5bffa4f712c2d7fafb9cf506c06e1ddad4fc19038407786fedb9afdfb11a5f182676dd84c919f71d5eee2f3b740b68ee7f6518eb9d8baa26f1c3871f863b134ee942eb3af92d19e70d8268839cd7b4637f0627299f99b1873ca165e410f8bd421e1a4859fd9bd6bb34d25c07e1a52b9668a530b10b8585d797124a6975a71aedbe557a17b06bbfe547aa553c3d08b8921a4b0d938c03687bd48a9a387b4c066c056f457fba5738775b900a1e82a89aae1494b05c4bb0fc8ed1a93688bf850a4f7b0942eda1f16ecf043efa6b8c1f9e0fba31f4a58ed0031180fb1b8a00e4a86826b030000002dd1272a3d1609bebb749daef202e0412a73d545b86ca7a6bf569ed35d0000ca23b0de742f6008fdf20928370d88f8c04bc3b97b9a9e0062e8fc5fd2337d85a66bd20730f3153db2459fb34c134c06c19364e9645e83040dd16ee08f18f0ba69ac9ca3e25e15442b07000000d30d38a64613b535fa808a9b3bae00bc371271d45db200a5cbf433e2f6dd03b7c7fcc040781e5151c9badb787e7e1e2f39d60998919aa8dbd156f31a5b7fa5f9e5ec01e8c799edc322703c7fc4a81ab9bc02dd96714ee9d7e75d28d040ff3566404fd6db547a4b553197c1f316d20ea54f9459cd81351a510d101e90eabe6dc6c6ac3ffa189c073a5fb3fc382df620bf5af9e638819c77a051e6875866a849f6f578c068c0e4c7cfbc15033997efa853c96297b3201dd30ea40dc94d010a0c33da9f63a10b8f813dc789b80be3bb3f00ee58b30d5c03a6ddbf418ac1b3d4a13839e4b273c4f914bed13f8806295495d41609478798396aeec06e8d342efd8ac6b422f6c23a011b1400000000000000bc2a02094e19a1ee8bb3c3c0c088ae8efaf68c85001faf7cf5426fb7c5c367ed93eb25c48a293549d15b91b59f1b574b3f6171f8e56a402ec56bdf51d90312b3ca5398f4050000007504be21456ec953bf06f12fff20c31e7c8b55fee5c49aa939830b09995ff149258118f9aae29206f9731288b56b10de51525665fdb4e289b1c177de97af3085f82045fbd012f1dde94ffecd90b7b63d8197d9c24a6fe5915ac7d7240847f6d0bf9099ee117c83e363f2ad36a4a9f4faa5734afe9770c38c565cae87a408d0acbb2db7db9174acab60a344814ee643fa82ba41706d2360269ed276e13dd83abbc258f07b0d58ab0b65200b18b7f9f871bcb43fec5a2e3789ecd0c1069d2da80b93c86dff8933e70c2108346003ddf6b60379eee63b66e7341cdd8f87ed9f11894c9ae040976321d87405b492f419ebfa77eb367ca6e360b8f8451102f54893d7d1695c24bcc184b1e7d19940a2b6931ade8638dd2b85a86dc511dbb97f50520f91fbf7201fc9621d0aee9735d07ca024076e8581db332b1c5f135fe6b2e9d2c18c9d5d5a524d3d5b2657e4b28f1a09696bd5b076a1471c8b2ab2ca3ba57843af1d03590f4e8985e1c463c781bb03ad7ec816ea70bbe06411aae001e0ca72ee7e828ad14bb7a092d883ad000554bf7f00000000000075cc01f8a2e1802192f09e77bc488b3bd3f08a9ce88ba2e2bcc23cf5d7372b339ce1f5003db0ad70fa6e93aa908a2ced81f5514e23e2f94ff03c1c02f5a9195f4735563efd0a1fc7dafcfb3dae043fe0c172ec3a12747d7abf4382bf7453c13df994641017a0f461add956ef8f834b762af30408af6a61f317fd3c7b0816236a768601b7c6606ba52ff126eb13d33c915c5da99d118db488da3f3d7783a608282a93fcbe0910f0389c3ef91de7c84e23daa6554c42b2b3e9f70a9f790f29011a0b5102003bfeba6e52877ed8a188958e39375dd203d434bef4dc82cc8a21fc40c6e6e6a2475f70bf1503beb9555036e63bdc937f8a4d61b21d06a9d3239d1df6f2e9ef16dee590b15ac028c6d873bb2965374b733d8e11ba763ab157ed91dd871b098c0543dcbba4cf67db8c83c84369dc67735fa4faa0fdcf34b1c6a862ccae9fe4fa28746504643b57f02623a2ef34ea90f2e7f7dd771f8f75217c799d978a3533fcfab6c6f5391b626d61b400f08172fc675e2a062d06c31b85452804f7b125c291f60a02a5d62271e96fe70d64bae36e28b42e197259169ebee8f64355544fbad8b83c1c8fad02cd1a2e56a6f6e82ec7719a48a1bea803546b8af7a89faf7cef94d8ada45fc0a98a79ba90c95262f0110725c6bf7c81237534dcd6a8a113bd8ac48b7db5526ab762cec103674742476cd6b92b8c7abcfb1f8e08f0a05c1b209187049f3206bd545e8c20f8db6d8a7cdd0c9ecbb9011b611a013cd581521dfcb028d59d5c69d286fb93e4c498b3aaff7e0cdcf1f41fec65ebdbe4c2bf453140251cdd94c32b87c4634d6500000000000000000000000000000000816e6c33f92dca3e03c40000005e538c77b2b14f63d253705363846bc4e9cd3284ff329330812d2211ae34106e0306376a2b1cfe60a09becae2b05ec9adcac47612af85f598a880fa97891a7a290b6e730800542aea761aeb463f5ff5bdf5099ae8ad4afe99db9e9c4e703cb900e9ae272742fe2ff81d1a4f15668392cdafd2e1757706f47f9f84e532f25e2737cb6f6e89378f8d79ab8507b109c7f1f3653a5bc9d54ccc633de6263526eac10519274"], 0x1, 0x5f16, &(0x7f0000009040)="$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")
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0x541b, 0x0)

20.693040383s ago: executing program 6 (id=2803):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40), 0xfc, 0x586, &(0x7f0000000900)="$eJzs3V1rHNUbAPBnNpv09f9vCqWoF1LohZXaTZP4UkGwXooWC3pfl2QbSjbdkt2UJhZsBXvjjRRBxIL4Abz3svgF/BQFLRQpQS9EWJnNbLpNdvO6dbfZ3w+mOWdnpmeenHkm5+zsMgEMrBPpP7mIFyPi6yTiSMu6fGQrT6xst/z45lS6JFGvf/xHEkn2WnP7JPt5KKu8EBG/fBlxOre+3eri0myxXC7NZ/Wx2ty1seri0pkrc8WZ0kzp6sTk5Lk3JifefuvNXUQ39FTt1Yt/fffR/ffPfXVy+dufHh69m8T5OJyta41jF261Vk4U/8lKw3F+zYbjXWisnyS9PgB2ZCjL8+FIrwFHYijLemDv+zwi6sCASuQ/DKjmOKA5t+/SPPi58ei9lQlQI/aR1vjzK++NxP7G3OjgcvLUzCid7452of20jZ9/v3c3XWLj9yEObFIH2JZbtyPibD6//vqfZNe/nTvbePN4Y2vbGLS/P9BL99Pxz2vtxn+51fFPtBn/HGqTuzuxef7nHnahmY7S8d87bce/q5eu0aGs9r/GmG84uXylXDobEf9vjAzrnW99fDHS+HFu+UG90yat4790SdtvjgWz43iY3/f0PtPFWjEiRnYTd9Oj2xEv5dvFn6z2f9Km/9Pfx8UttnG8dO/lTus2j//Zqv8Y8Urb/n/SrcnG9yfHGufDWPOsWO/PO8d/7dR+r+NP+//gxvGPJq33a6vbb+OH/X+XOq3b6fk/knzSKDeT4EaxVpsfjxhJPlz/+sSTfZv15vZp/KdObnz9a3f+p5OvT7cY/51jdzpu2g/9P92p/1dmmGv6f/uFBx989v3O40/7//VG6VT2Snb9ay87V7Z6gF34FQIAAAAAAEDfyEXE4UhyhdVyLlcorHy+41gczJUr1drpy5WFq9PR+K7saAznmne6j7R8HmI8+zxssz6xpj4ZEUcj4puhA416YapSnu518AAAAAAAAAAAAAAAAAAAANAnDnX4/n/qt6FeHx3wzDUebLCv10cB9MKmj/xf+5SmrT75B+h7m+Y/sGfJfxhc8h8Gl/yHwSX/YXDJfxhc8h8Gl/wHAAAAAAAAAAAAAAAAAAAAAAAAAACArrp44UK61Jcf35xK69PXFxdmK9fPTJeqs4W5hanCVGX+WmGmUpkplwpTlbnN/r9ypXJtfCIWbozVStXaWHVx6dJcZeFq7dKVueJM6VJp+D+JCgAAAAAAAAAAAAAAAAAAAJ4v1cWl2WK5XJpX6Fh4N/riMOrJswtwxY52z++q9VxE9Ecv793C7ax7t7dXDy9KAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDGvwEAAP//hkUw0Q==")
chdir(&(0x7f0000000040)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0)
lseek(r0, 0x200, 0x1)
getdents64(r0, 0x0, 0x0)

20.628872492s ago: executing program 6 (id=2804):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x16, &(0x7f0000000140)={[{@resuid}, {@noauto_da_alloc}, {@auto_da_alloc_val}, {@stripe={'stripe', 0x3d, 0x4}}, {@bsdgroups}, {@noblock_validity}, {@minixdf}, {@nouid32}, {@dioread_lock}, {@nolazytime}, {@oldalloc}, {@usrquota}]}, 0x0, 0x515, &(0x7f0000000c40)="$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")
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x208000, &(0x7f0000000640)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x3c, 0x0, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0)

19.67670501s ago: executing program 6 (id=2814):
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0506580c"], 0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)

19.431894489s ago: executing program 6 (id=2817):
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={0x0})
ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f00000002c0)={0x0, 0x0, 0x0})

19.260686323s ago: executing program 37 (id=2817):
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={0x0})
ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f00000002c0)={0x0, 0x0, 0x0})

2.996143007s ago: executing program 8 (id=2949):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000180)={'syz1\x00', {0x10, 0x0, 0xfffb}, 0x9, [0xb86, 0x7, 0x4, 0x7, 0x7ff, 0x3, 0x5, 0x100000, 0x5, 0x4, 0x2000008, 0x3, 0x20009, 0x1f, 0xc795, 0x6, 0x7fff, 0x10001, 0x4, 0x4, 0x1, 0x6, 0xa, 0x6, 0x1, 0x5, 0x0, 0xfb82, 0x10000003, 0x0, 0x0, 0x4, 0xd, 0x2, 0x0, 0x1, 0x0, 0xfffffffc, 0x400, 0x5, 0x9, 0x5, 0x2, 0x6, 0x0, 0x8, 0x7, 0x4, 0x1, 0xe8, 0x5, 0x7, 0x4, 0x2, 0x2f03132e, 0x0, 0x3, 0x9, 0x8003, 0x0, 0x0, 0x0, 0xdf, 0x287d], [0x101, 0x31, 0x6, 0x7, 0x23e, 0x80000001, 0x40a1, 0xe, 0x3, 0x8, 0x9, 0x7f, 0x75, 0x8, 0x7fff, 0x2, 0x7f, 0x5, 0x73, 0x8, 0xffffffff, 0x1, 0x7ff, 0x4, 0x2004d, 0x1, 0x9, 0x9, 0x0, 0x2, 0x8, 0xf, 0xd, 0x2, 0x20002a, 0x8, 0x7, 0x8, 0x1, 0x8, 0x2, 0xfffffff0, 0x6, 0x8, 0x7cd, 0x5, 0x7, 0x3, 0xc6, 0x7, 0x9, 0x7, 0x10000, 0x6, 0x5, 0x0, 0x3, 0x4, 0x8, 0x0, 0x2, 0x0, 0x6], [0x0, 0x2, 0x1, 0x3, 0x9, 0x8001, 0x3, 0x3ea7, 0x6, 0xffff7ff8, 0x5, 0x1, 0x700, 0xffffffff, 0xfffffffa, 0xd, 0x7ff, 0x6, 0x80000, 0x7fffffff, 0x9, 0x48, 0x9, 0x6, 0x1, 0x9, 0x3, 0x709, 0x9, 0x9, 0x2, 0x7, 0xff, 0x7fffffff, 0x5, 0x6, 0x43cd, 0x3, 0xd, 0x8000, 0x4, 0x1ef, 0x7, 0x5, 0x8, 0x10001, 0x4, 0xffff89a3, 0x1000, 0x19, 0x9, 0xa59, 0x3ff, 0x1, 0x3, 0xfffffff5, 0x9, 0x81, 0x10000, 0x1d, 0x3, 0x4, 0x1, 0x1], [0x7, 0x8, 0x213, 0x789c, 0x40, 0x6, 0x1000, 0x8000, 0x2, 0x3, 0x2, 0x5, 0x7fffffff, 0xd, 0x6, 0x7, 0x8, 0xd, 0x7fffffff, 0x2, 0xffff, 0x0, 0x6, 0x7, 0x0, 0xda43, 0x2, 0x5, 0x14ac3b3b, 0x2, 0xb, 0x0, 0x4, 0x1, 0x1, 0x40001000, 0x81, 0x7ffffffe, 0xb6, 0x3, 0xffff, 0x10, 0x6, 0x3, 0x6, 0x800, 0xffffff11, 0x40, 0xfffffffb, 0x4, 0x0, 0xfffffff3, 0x7, 0x800, 0x0, 0x4, 0x5, 0x3, 0x2, 0x6, 0xe, 0x9a6, 0x5, 0xffffffff]}, 0x45c)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000006a008313000000000000354f1b0800000000000008000e"], 0x20}}, 0x0)

2.90307782s ago: executing program 8 (id=2950):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBENT(r0, 0x560e, &(0x7f0000000080)={0x5, 0x7d, 0x20f})

2.902727312s ago: executing program 8 (id=2951):
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x200, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xd1ba1095880c105e, 0xfff2}, {0x1, 0x5}, {0x44e9f4f6f6d4d2eb, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000080}, 0x44042)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2})
r1 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r1, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c)
sendmmsg$unix(r1, &(0x7f0000007b80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2404c054}}], 0x1, 0x2000c080)
sendmsg(r1, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)

2.708306796s ago: executing program 8 (id=2952):
r0 = socket(0x8000000010, 0x2, 0x0)
write(r0, &(0x7f00000002c0)="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", 0xfc)

2.633160529s ago: executing program 8 (id=2953):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@ipv6_newrule={0x1c, 0x20, 0x2d2c6d60ea1da725, 0x70bd26, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}}, 0x1c}, 0x1, 0x0, 0x0, 0x20008081}, 0x80)
syz_usb_control_io$hid(r0, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="6400000002060103"], 0x64}, 0x1, 0x0, 0x0, 0x4000001}, 0x40)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"])

1.691543909s ago: executing program 7 (id=2965):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_linger(r0, 0x1, 0xd, 0x0, 0x0)

1.587789666s ago: executing program 7 (id=2967):
r0 = socket$qrtr(0x2a, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x110)
pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0x8080c61)
close_range(r0, 0xffffffffffffffff, 0x0)

1.44516776s ago: executing program 7 (id=2969):
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000640)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendfile(r1, r0, 0x0, 0x9)

1.331244489s ago: executing program 7 (id=2971):
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x56e, &(0x7f0000000640)="$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")
r0 = open(&(0x7f0000000280)='.\x00', 0x80, 0x122)
ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, 0x0)

1.117195384s ago: executing program 7 (id=2975):
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f00000002c0)="114dbf055e7d0ee3b655c97335b037eedb909beb2a2eb7e3fe32a30a02c12aa93cc1525b093e4f05493f4f5baba4b59eeb1c5ab89e14365add817435a2a6dc1f", 0x40}], 0x1)

1.081611554s ago: executing program 3 (id=2976):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3e6, &(0x7f00000004c0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]})

960.54461ms ago: executing program 7 (id=2977):
syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000780)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x80, 0x7f}}]}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
renameat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xffffffffffffffff, &(0x7f00000001c0)='\x00')
close(0xffffffffffffffff)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r3, 0x0)
r4 = socket$kcm(0x29, 0x5, 0x0)
getsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x1, 0xffffffffffffffff, 0xfffffffffffffe84)
r5 = accept4(r3, 0x0, 0x0, 0x0)
sendto(r5, &(0x7f0000000200)='9', 0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004400)=""/211, 0xd3}}, {{0x0, 0x0, &(0x7f0000004600)}}], 0x2, 0x0, &(0x7f0000005ec0)={0x0, 0x3938700})
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008dffff"})
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @remote})
syz_usb_connect(0x0, 0x3b, &(0x7f0000000080)=ANY=[], 0x0)

849.119111ms ago: executing program 8 (id=2978):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r1, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10)
recvmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/77, 0x4d}], 0x1}, 0x5}], 0x40000, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

763.934141ms ago: executing program 3 (id=2979):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@mcast2, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x1, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@private=0xa010101, 0x0, 0x3c}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xec, 0x21, 0x1, 0x0, 0x20, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x9c, 0x11, [{@in=@loopback=0xa010101, @in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@loopback, 0x3c, 0x4, 0x0, 0x0, 0xa, 0xa}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', @in=@private=0xa010102, @in6=@private2, 0x3c, 0x4, 0x0, 0x0, 0x8, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

594.828092ms ago: executing program 3 (id=2980):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x4c42bb4f92, 0x0)
shutdown(r0, 0x0)

466.889495ms ago: executing program 3 (id=2981):
syz_mount_image$vfat(&(0x7f0000000480), &(0x7f0000000180)='./bus\x00', 0x2000884, &(0x7f00000007c0)={[{@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@shortname_win95}, {@shortname_win95}, {@shortname_lower}, {@shortname_win95}, {@shortname_winnt}, {@uni_xlateno}, {@utf8}, {@fat=@codepage={'codepage', 0x3d, '852'}}, {@fat=@tz_utc}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp775'}}, {@utf8no}, {@fat=@check_strict}, {@utf8no}]}, 0x1, 0x289, &(0x7f00000001c0)="$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")
open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0)

389.960844ms ago: executing program 3 (id=2982):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @private1, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x3, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}], 0x2, 0x24000045)
r1 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x2000})
shutdown(r0, 0x1)

0s ago: executing program 3 (id=2983):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000005300)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000740)="91f8a9848519def38491", 0xa}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000000440)=[{0x0}, {&(0x7f00000009c0)="ac0a24fd1e2852a1fa622d676e2158494fe32976d363187e49d7f5135e0c9ca33fa75fa216a68aaa8b425fb406c64325e912a9c0aaf6c0839d72a2443bc53cc7a287fdf811bd5e8637c21471cf388ab35a69582c305a8e5d7855acf4ab", 0x5d}], 0x2}}, {{0x0, 0x0, &(0x7f0000005200)=[{&(0x7f0000000b40)="1e1e2c6cbd11b1c129425c5b5c1e0252456ff3b47a64b545baabdfc701ed5ec74e035140ea09519f280f3e06b81dbdab4ec42eb1a2b4d31e00560d8c6f94909ba6928da2f6f1e8d1ae53a25048d8e850e0ff786abcc688e529128dc5698fe74d88bc8a36978ccc99e8c705e31239", 0x6e}], 0x1}}], 0x3, 0x2090)

kernel console output (not intermixed with test programs):

onfig index 0 descriptor too short (expected 45, got 36)
[  327.886641][   T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  327.894751][   T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  327.903580][   T24] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  327.911080][   T24] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  327.919807][   T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  327.929107][   T24] usb 8-1: config 0 descriptor??
[  328.155635][T16787] loop3: detected capacity change from 0 to 32768
[  328.175265][T16787] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  328.208575][T16787] XFS (loop3): Ending clean mount
[  328.222948][T16787] XFS (loop3): Quotacheck needed: Please wait.
[  328.300662][T16787] XFS (loop3): Quotacheck: Done.
[  328.485653][ T5678] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[  328.485816][   T24] plantronics 0003:047F:FFFF.0017: reserved main item tag 0xd
[  328.515593][   T24] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0
[  328.677998][ T5678] usb 7-1: Using ep0 maxpacket: 16
[  328.721800][   T33] audit: type=1800 audit(1779795888.077:163): pid=16819 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2359" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=4429 res=0 errno=0
[  328.769240][ T5678] usb 7-1: config 0 has an invalid interface number: 105 but max is 0
[  328.791804][ T5678] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  328.814987][ T5678] usb 7-1: config 0 has no interface number 0
[  328.850693][ T5678] usb 7-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  328.863801][ T5678] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  328.868197][   T10] usb 8-1: USB disconnect, device number 16
[  328.878046][ T5678] usb 7-1: Product: syz
[  328.883072][ T5678] usb 7-1: Manufacturer: syz
[  328.889571][ T5678] usb 7-1: SerialNumber: syz
[  328.914185][ T6378] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  328.915955][ T5678] usb 7-1: config 0 descriptor??
[  329.155295][  T798] usb 7-1: USB disconnect, device number 16
[  329.661476][T16880] loop3: detected capacity change from 0 to 4096
[  329.683839][T16880] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  329.686859][T16880] ntfs3(loop3): Failed to load $BadClus (-22).
[  329.742374][T16886] loop3: detected capacity change from 0 to 8
[  329.754617][T16886] SQUASHFS error: xz decompression failed, data probably corrupt
[  329.759404][T16886] SQUASHFS error: Failed to read block 0x108: -5
[  329.761664][T16886] SQUASHFS error: Unable to read metadata cache entry [106]
[  329.764539][T16886] SQUASHFS error: Unable to read inode 0x11f
[  329.888337][T16899] loop3: detected capacity change from 0 to 256
[  329.898846][T16899] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  329.966471][T16894] loop6: detected capacity change from 0 to 40427
[  329.971487][T16894] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12
[  329.973928][T16894] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  330.011804][T16894] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  330.021040][T16894] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  330.023427][T16894] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  330.054698][T16894] syz.6.2376: attempt to access beyond end of device
[  330.054698][T16894] loop6: rw=2049, sector=45096, nr_sectors = 136 limit=40427
[  330.069084][T16894] syz.6.2376: attempt to access beyond end of device
[  330.069084][T16894] loop6: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  330.078289][T16894] CPU: 1 UID: 0 PID: 16894 Comm: syz.6.2376 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  330.078317][T16894] Tainted: [L]=SOFTLOCKUP
[  330.078322][T16894] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  330.078332][T16894] Call Trace:
[  330.078338][T16894]  <TASK>
[  330.078345][T16894]  dump_stack_lvl+0xe8/0x150
[  330.078369][T16894]  f2fs_stop_checkpoint+0x3c7/0x590
[  330.078395][T16894]  f2fs_write_end_io+0x1274/0x1740
[  330.078436][T16894]  __submit_merged_bio+0x256/0x6a0
[  330.078459][T16894]  f2fs_submit_merged_write+0x284/0x390
[  330.078479][T16894]  ? __pfx_f2fs_submit_merged_write+0x10/0x10
[  330.078508][T16894]  f2fs_sync_node_pages+0x11fe/0x13c0
[  330.078563][T16894]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  330.078619][T16894]  f2fs_write_checkpoint+0xeb8/0x26a0
[  330.078667][T16894]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  330.078712][T16894]  ? down_write+0x16d/0x200
[  330.078729][T16894]  ? __pfx_down_write+0x10/0x10
[  330.078743][T16894]  ? uplift_priority+0xdb/0x700
[  330.078761][T16894]  ? kasan_save_track+0x3e/0x80
[  330.078782][T16894]  ? kasan_save_free_info+0x46/0x50
[  330.078806][T16894]  f2fs_issue_checkpoint+0x456/0x790
[  330.078827][T16894]  ? __lock_acquire+0x6b5/0x2cf0
[  330.078847][T16894]  ? __pfx_f2fs_issue_checkpoint+0x10/0x10
[  330.078898][T16894]  ? f2fs_sync_fs+0x1f0/0x3c0
[  330.078914][T16894]  f2fs_create+0x519/0x6a0
[  330.078938][T16894]  ? __pfx_f2fs_create+0x10/0x10
[  330.078959][T16894]  ? security_inode_permission+0xb7/0x2e0
[  330.078977][T16894]  ? may_o_create+0x2d2/0x370
[  330.078997][T16894]  ? bpf_lsm_inode_create+0x9/0x20
[  330.079017][T16894]  ? __pfx_f2fs_create+0x10/0x10
[  330.079030][T16894]  path_openat+0x1395/0x3860
[  330.079078][T16894]  ? __pfx_path_openat+0x10/0x10
[  330.079098][T16894]  ? __x64_sys_openat+0x138/0x170
[  330.079134][T16894]  do_file_open+0x23e/0x4a0
[  330.079158][T16894]  ? __pfx_do_file_open+0x10/0x10
[  330.079196][T16894]  ? _raw_spin_unlock+0x28/0x50
[  330.079242][T16894]  ? alloc_fd+0x64b/0x6c0
[  330.079268][T16894]  do_sys_openat2+0x113/0x200
[  330.079288][T16894]  ? __se_sys_futex+0x3a8/0x450
[  330.079309][T16894]  ? __pfx_do_sys_openat2+0x10/0x10
[  330.079326][T16894]  ? __pfx___se_sys_futex+0x10/0x10
[  330.079339][T16894]  ? fd_install+0x306/0x3d0
[  330.079359][T16894]  __x64_sys_openat+0x138/0x170
[  330.079381][T16894]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  330.079397][T16894]  do_syscall_64+0x15f/0x560
[  330.079409][T16894]  ? trace_irq_disable+0x3b/0x140
[  330.079433][T16894]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  330.079446][T16894] RIP: 0033:0x7fe851d9ce59
[  330.079462][T16894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  330.079475][T16894] RSP: 002b:00007fe852bf1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  330.079490][T16894] RAX: ffffffffffffffda RBX: 00007fe852015fa0 RCX: 00007fe851d9ce59
[  330.079500][T16894] RDX: 000000000000275a RSI: 0000200000000040 RDI: ffffffffffffff9c
[  330.079508][T16894] RBP: 00007fe851e32d6f R08: 0000000000000000 R09: 0000000000000000
[  330.079518][T16894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  330.079535][T16894] R13: 00007fe852016038 R14: 00007fe852015fa0 R15: 00007ffe88115508
[  330.079563][T16894]  </TASK>
[  330.079571][T16894] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  330.441034][  T798] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[  330.550744][T16932] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2385'.
[  330.600886][  T798] usb 4-1: Using ep0 maxpacket: 16
[  330.611145][  T798] usb 4-1: unable to get BOS descriptor or descriptor too short
[  330.622726][  T798] usb 4-1: config 3 has an invalid interface number: 11 but max is 0
[  330.627303][  T798] usb 4-1: config 3 has no interface number 0
[  330.633922][  T798] usb 4-1: config 3 interface 11 has no altsetting 0
[  330.647405][  T798] usb 4-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice=d4.bb
[  330.651388][  T798] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  330.654628][  T798] usb 4-1: Product: syz
[  330.656501][  T798] usb 4-1: Manufacturer: syz
[  330.659676][  T798] usb 4-1: SerialNumber: syz
[  330.896894][  T798] appletouch 4-1:3.11: Could not find int-in endpoint
[  330.905572][  T798] appletouch 4-1:3.11: probe with driver appletouch failed with error -5
[  330.908896][  T798] usbhid 4-1:3.11: couldn't find an input interrupt endpoint
[  330.920493][  T798] usb 4-1: USB disconnect, device number 45
[  331.816873][T16972] loop3: detected capacity change from 0 to 32768
[  331.823657][T16972] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2394 (16972)
[  331.834033][T16972] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  331.837746][T16972] BTRFS info (device loop3): using sha256 checksum algorithm
[  332.085677][T16972] BTRFS info (device loop3): rebuilding free space tree
[  332.132325][T16972] BTRFS info (device loop3): enabling ssd optimizations
[  332.134881][T16972] BTRFS info (device loop3): using spread ssd allocation scheme
[  332.137544][T16972] BTRFS info (device loop3): turning on async discard
[  332.140286][T16972] BTRFS info (device loop3): enabling free space tree
[  332.142957][T16972] BTRFS info (device loop3): force clearing of disk cache
[  332.433122][ T6378] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  333.175781][   T24] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[  333.337058][ T5676] usb 8-1: new high-speed USB device number 17 using dummy_hcd
[  333.346926][   T24] usb 4-1: Using ep0 maxpacket: 8
[  333.351871][   T24] usb 4-1: unable to get BOS descriptor or descriptor too short
[  333.357183][   T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  333.362129][   T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  333.375409][   T24] usb 4-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40
[  333.381548][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  333.385144][   T24] usb 4-1: Product: syz
[  333.388390][   T24] usb 4-1: Manufacturer: syz
[  333.391448][   T24] usb 4-1: SerialNumber: syz
[  333.498723][ T5676] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x92, changing to 0x82
[  333.504994][ T5676] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  333.509856][ T5676] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  333.514218][ T5676] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  333.524416][ T5676] usb 8-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=9e.7f
[  333.528698][ T5676] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  333.532234][ T5676] usb 8-1: Product: syz
[  333.534209][ T5676] usb 8-1: Manufacturer: syz
[  333.536219][ T5676] usb 8-1: SerialNumber: syz
[  333.545981][ T5676] usb 8-1: config 0 descriptor??
[  333.558539][ T5676] redrat3 8-1:0.0: Couldn't find all endpoints
[  333.625169][   T24] usb 4-1: cannot find UAC_HEADER
[  333.670950][   T24] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22
[  333.692868][ T5619] udevd[5619]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  333.773668][ T5676] usb 8-1: USB disconnect, device number 17
[  333.854308][ T5678] usb 4-1: USB disconnect, device number 46
[  334.158717][   T24] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[  334.244210][  T798] usb 8-1: new full-speed USB device number 18 using dummy_hcd
[  334.340492][   T24] usb 7-1: Using ep0 maxpacket: 32
[  334.346794][   T24] usb 7-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  334.350599][   T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  334.371211][   T24] gspca_main: nw80x-2.14.0 probing 055f:d001
[  334.407068][  T798] usb 8-1: config 246 has an invalid interface number: 166 but max is 0
[  334.410334][  T798] usb 8-1: config 246 has no interface number 0
[  334.412658][  T798] usb 8-1: config 246 interface 166 altsetting 118 has an endpoint descriptor with address 0x92, changing to 0x82
[  334.416724][  T798] usb 8-1: config 246 interface 166 altsetting 118 endpoint 0x82 has invalid wMaxPacketSize 0
[  334.420430][  T798] usb 8-1: config 246 interface 166 altsetting 118 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  334.427308][  T798] usb 8-1: config 246 interface 166 has no altsetting 0
[  334.445624][  T798] usb 8-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 9.63
[  334.452317][  T798] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  334.456691][  T798] usb 8-1: Product: syz
[  334.458928][  T798] usb 8-1: Manufacturer: syz
[  334.460545][  T798] usb 8-1: SerialNumber: syz
[  334.462908][T17062] loop3: detected capacity change from 0 to 128
[  334.793906][   T24] gspca_nw80x: reg_r err -71
[  334.795547][   T24] nw80x 7-1:3.0: probe with driver nw80x failed with error -71
[  334.809453][   T24] usb 7-1: USB disconnect, device number 17
[  335.116602][  T798] usb 8-1: Limiting number of CPorts to U8_MAX
[  335.125468][  T798] usb 8-1: Not enough endpoints found in device, aborting!
[  335.335267][ T5691] usb 8-1: USB disconnect, device number 18
[  335.697191][ T5676] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[  335.872307][ T5676] usb 7-1: config 0 has too many interfaces: 253, using maximum allowed: 32
[  335.872895][T17122] loop3: detected capacity change from 0 to 764
[  335.875838][ T5676] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 253
[  335.882767][T17122] rock: directory entry would overflow storage
[  335.885311][T17122] rock: sig=0x5245, size=8, remaining=5
[  335.894303][ T5676] usb 7-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac
[  335.905389][ T5676] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  335.917510][ T5676] usb 7-1: Product: syz
[  335.922848][ T5676] usb 7-1: Manufacturer: syz
[  335.924431][ T5676] usb 7-1: SerialNumber: syz
[  335.957018][ T5676] usb 7-1: config 0 descriptor??
[  336.004207][ T5676] gspca_main: sunplus-2.14.0 probing 055f:c630
[  336.306217][ T5678] usb 8-1: new high-speed USB device number 19 using dummy_hcd
[  336.348963][  T798] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[  336.466453][ T5678] usb 8-1: Using ep0 maxpacket: 16
[  336.471330][ T5678] usb 8-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  336.476250][ T5678] usb 8-1: config 0 interface 0 has no altsetting 0
[  336.481416][ T5678] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  336.485439][ T5678] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  336.497285][ T5678] usb 8-1: config 0 descriptor??
[  336.509234][  T798] usb 4-1: Using ep0 maxpacket: 32
[  336.513437][  T798] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[  336.517099][  T798] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  336.521183][  T798] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 16384, setting to 1024
[  336.525384][  T798] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11
[  336.529641][  T798] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024
[  336.538805][  T798] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  336.543607][  T798] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  336.546896][  T798] usb 4-1: Product: syz
[  336.548734][  T798] usb 4-1: Manufacturer: syz
[  336.550667][  T798] usb 4-1: SerialNumber: syz
[  336.557130][  T798] usb 4-1: config 0 descriptor??
[  336.942541][ T5678] mcp2221 0003:04D8:00DD.0018: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.7-1/input0
[  336.994095][  T798] iforce 4-1:0.0: usb_submit_urb failed: -71
[  336.997984][  T798] input input24: Device does not respond to id packet M
[  337.002382][  T798] iforce 4-1:0.0: usb_submit_urb failed: -71
[  337.005580][  T798] input input24: Device does not respond to id packet P
[  337.008416][  T798] iforce 4-1:0.0: usb_submit_urb failed: -71
[  337.010469][  T798] input input24: Device does not respond to id packet B
[  337.013620][  T798] iforce 4-1:0.0: usb_submit_urb failed: -71
[  337.020459][  T798] input input24: Device does not respond to id packet N
[  337.028369][  T798] iforce 4-1:0.0: usb_submit_urb failed: -71
[  337.034754][  T798] iforce 4-1:0.0: usb_submit_urb failed: -71
[  337.040844][  T798] iforce 4-1:0.0: usb_submit_urb failed: -71
[  337.048642][  T798] iforce 4-1:0.0: usb_submit_urb failed: -71
[  337.064508][  T798] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input24
[  337.100993][  T798] usb 4-1: USB disconnect, device number 47
[  337.379314][  T798] usb 8-1: USB disconnect, device number 19
[  337.483153][   T24] usb 7-1: USB disconnect, device number 18
[  337.692948][T17205] loop3: detected capacity change from 0 to 256
[  337.710157][T17205] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x00949fb8, utbl_chksum : 0x7319d30d)
[  337.917254][ T1379] ieee802154 phy0 wpan0: encryption failed: -22
[  337.920019][ T1379] ieee802154 phy1 wpan1: encryption failed: -22
[  338.339221][T17262] loop6: detected capacity change from 0 to 512
[  338.368483][T17262] Set syz1 is full, maxelem 0 reached
[  338.443297][ T5691] usb 4-1: new full-speed USB device number 48 using dummy_hcd
[  338.601583][T17289] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2444'.
[  338.618035][ T5691] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  338.626048][ T5691] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  338.635568][ T5691] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[  338.639635][ T5691] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  338.649801][ T5691] usb 4-1: config 0 descriptor??
[  338.785043][ T5676] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[  338.949007][ T5676] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  338.953245][ T5676] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  338.957817][ T5676] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  338.961795][ T5676] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  338.969752][ T5676] usb 7-1: config 0 descriptor??
[  339.091288][ T5691] isku 0003:1E7D:319C.0019: item fetching failed at offset 4/7
[  339.095327][ T5691] isku 0003:1E7D:319C.0019: parse failed
[  339.097285][ T5691] isku 0003:1E7D:319C.0019: probe with driver isku failed with error -22
[  339.303545][T17303] loop7: detected capacity change from 0 to 2048
[  339.316001][  T798] usb 4-1: USB disconnect, device number 48
[  339.331397][T17303]  loop7: p1 p3 p4
[  339.331397][T17303]  p1: <solaris:  cannot handle version 769 vtoc>
[  339.351486][T17303] loop7: p4 size 589824 extends beyond EOD, truncated
[  339.418616][ T5676] cm6533_jd 0003:0D8C:0022.001A: item fetching failed at offset 3/5
[  339.430020][ T5676] cm6533_jd 0003:0D8C:0022.001A: parse failed
[  339.432688][ T5676] cm6533_jd 0003:0D8C:0022.001A: probe with driver cm6533_jd failed with error -22
[  339.636627][ T5691] usb 7-1: USB disconnect, device number 19
[  339.778209][T17332] loop7: detected capacity change from 0 to 32768
[  339.781679][T17332] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.2448 (17332)
[  339.787554][T17332] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  339.791093][T17332] BTRFS info (device loop7): using sha256 checksum algorithm
[  339.927301][T17332] BTRFS info (device loop7): rebuilding free space tree
[  339.966695][T17332] BTRFS info (device loop7): enabling ssd optimizations
[  339.969083][T17332] BTRFS info (device loop7): using spread ssd allocation scheme
[  339.971906][T17332] BTRFS info (device loop7): enabling free space tree
[  339.973947][T17332] BTRFS info (device loop7): force clearing of disk cache
[  339.976107][T17332] BTRFS info (device loop7): enabling auto defrag
[  339.978210][T17332] BTRFS info (device loop7): max_inline set to 0
[  340.288508][T12506] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  340.338576][   T12] BTRFS info (device loop7): qgroup scan completed (inconsistency flag cleared)
[  340.440994][ T5691] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[  340.603122][ T5691] usb 4-1: config 220 has an invalid interface number: 76 but max is 2
[  340.605742][ T5691] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  340.608421][ T5691] usb 4-1: config 220 has an invalid descriptor of length 9, skipping remainder of the config
[  340.613426][ T5691] usb 4-1: config 220 has no interface number 2
[  340.615471][ T5691] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  340.619376][ T5691] usb 4-1: config 220 interface 0 has no altsetting 0
[  340.621484][ T5691] usb 4-1: config 220 interface 76 has no altsetting 0
[  340.623695][ T5691] usb 4-1: config 220 interface 1 has no altsetting 0
[  340.628398][ T5691] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  340.631332][ T5691] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  340.636115][ T5691] usb 4-1: Product: syz
[  340.637565][ T5691] usb 4-1: Manufacturer: syz
[  340.639289][ T5691] usb 4-1: SerialNumber: syz
[  340.881647][ T5691] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  340.884518][ T5691] uvcvideo 4-1:220.0: No valid video chain found.
[  340.886610][ T5691] usb 4-1: selecting invalid altsetting 0
[  340.904346][ T5691] usb 4-1: selecting invalid altsetting 0
[  340.906383][ T5691] usbtest 4-1:220.1: probe with driver usbtest failed with error -22
[  340.916098][ T5691] usb 4-1: USB disconnect, device number 49
[  341.605555][ T5691] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[  341.691386][T17411] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 4, id = 0
[  341.787171][ T5691] usb 7-1: Using ep0 maxpacket: 16
[  341.792182][ T5691] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[  341.795035][ T5691] usb 7-1: config 0 has no interface number 0
[  341.801548][ T5691] usb 7-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  341.808582][ T5691] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  341.813372][ T5691] usb 7-1: Product: syz
[  341.814877][ T5691] usb 7-1: Manufacturer: syz
[  341.817617][T17404] loop3: detected capacity change from 0 to 32768
[  341.820467][ T5691] usb 7-1: SerialNumber: syz
[  341.825930][ T5691] usb 7-1: config 0 descriptor??
[  341.838347][ T5691] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  341.853247][T17404] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  341.869267][T17404] XFS (loop3): Ending clean mount
[  341.884232][   T33] audit: type=1800 audit(1779795900.469:164): pid=17404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2456" name="file1" dev="loop3" ino=4426 res=0 errno=0
[  341.936158][ T6378] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  342.015724][   T24] usb 8-1: new high-speed USB device number 20 using dummy_hcd
[  342.206187][   T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  342.210183][   T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  342.215055][   T24] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  342.219609][   T24] usb 8-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00
[  342.223201][   T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  342.232661][   T24] usb 8-1: config 0 descriptor??
[  342.678583][   T24] steelseries 0003:1038:1410.001B: global environment stack underflow
[  342.685187][   T24] steelseries 0003:1038:1410.001B: item 0 0 1 11 parsing failed
[  342.689166][   T24] steelseries 0003:1038:1410.001B: parse failed
[  342.692565][   T24] steelseries 0003:1038:1410.001B: probe with driver steelseries failed with error -22
[  342.887791][ T5676] usb 8-1: USB disconnect, device number 20
[  343.619556][ T5691] gspca_spca1528: reg_r err -71
[  343.632036][ T5691] spca1528 7-1:0.1: probe with driver spca1528 failed with error -71
[  343.673313][ T5691] usb 7-1: USB disconnect, device number 20
[  344.169761][   T24] usb 8-1: new high-speed USB device number 21 using dummy_hcd
[  344.341824][   T24] usb 8-1: Using ep0 maxpacket: 8
[  344.352265][   T24] usb 8-1: config 53 has an invalid interface number: 101 but max is 0
[  344.359547][   T24] usb 8-1: config 53 has an invalid descriptor of length 0, skipping remainder of the config
[  344.369131][   T24] usb 8-1: config 53 has no interface number 0
[  344.371795][   T24] usb 8-1: config 53 interface 101 altsetting 0 has an endpoint descriptor with address 0xC2, changing to 0x82
[  344.376746][   T24] usb 8-1: config 53 interface 101 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  344.380151][   T24] usb 8-1: config 53 interface 101 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  344.383890][   T24] usb 8-1: config 53 interface 101 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  344.391000][   T24] usb 8-1: New USB device found, idVendor=0bfd, idProduct=011b, bcdDevice=33.a1
[  344.394771][   T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  344.397518][   T24] usb 8-1: Product: syz
[  344.398815][   T24] usb 8-1: Manufacturer: syz
[  344.400242][   T24] usb 8-1: SerialNumber: syz
[  344.597211][ T5691] usb 7-1: new high-speed USB device number 21 using dummy_hcd
[  344.631306][   T24] kvaser_usb 8-1:53.101: error -ENODEV: Cannot get usb endpoint(s)
[  344.638991][   T24] usb 8-1: USB disconnect, device number 21
[  344.774119][ T5691] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  344.783171][ T5691] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  344.787043][ T5691] usb 7-1: New USB device found, idVendor=046d, idProduct=c53f, bcdDevice= 0.00
[  344.792008][ T5691] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  344.801161][ T5691] usb 7-1: config 0 descriptor??
[  344.909308][T17516] MINIX-fs: unable to read superblock
[  345.164575][T17525] loop3: detected capacity change from 0 to 32768
[  345.167869][T17525] btrfs: Deprecated parameter 'usebackuproot'
[  345.170284][T17525] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  345.177438][T17525] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2474 (17525)
[  345.191812][T17525] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  345.195421][T17525] BTRFS info (device loop3): using crc32c checksum algorithm
[  345.261086][   T70] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  345.289162][ T5691] logitech-djreceiver 0003:046D:C53F.001C: unknown main item tag 0x1
[  345.295326][T17525] BTRFS error (device loop3): failed to load root extent
[  345.298291][T17525] BTRFS warning (device loop3): try to load backup roots slot 1
[  345.306046][   T35] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  345.378710][T17525] BTRFS warning (device loop3): couldn't read tree root
[  345.381606][T17525] BTRFS warning (device loop3): try to load backup roots slot 2
[  345.385843][   T70] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  345.395385][T17525] BTRFS warning (device loop3): couldn't read tree root
[  345.398391][T17525] BTRFS warning (device loop3): try to load backup roots slot 3
[  345.418796][T17525] BTRFS info (device loop3): rebuilding free space tree
[  345.461620][T17525] BTRFS info (device loop3): checking UUID tree
[  345.464805][T17525] BTRFS info (device loop3): enabling ssd optimizations
[  345.467494][T17525] BTRFS info (device loop3): turning on async discard
[  345.469748][T17525] BTRFS info (device loop3): enabling free space tree
[  345.471838][T17525] BTRFS info (device loop3): force clearing of disk cache
[  345.474885][T17525] BTRFS info (device loop3): enabling auto defrag
[  345.477183][T17525] BTRFS info (device loop3): trying to use backup root at mount time
[  345.480088][T17525] BTRFS info (device loop3): use zstd compression, level 3
[  345.508180][  T798] usb 7-1: USB disconnect, device number 21
[  345.565398][T17563] loop7: detected capacity change from 0 to 512
[  345.578106][ T6378] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  345.583793][T17563] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  345.862591][T17578] loop7: detected capacity change from 0 to 512
[  345.884192][T17578] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  345.893185][T17578] EXT4-fs (loop7): 1 truncate cleaned up
[  345.906551][T17578] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  345.941518][T12506] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  346.353699][T17630] syz.6.2490: vmalloc error: size 9223372036854775807, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1
[  346.362782][T17630] CPU: 1 UID: 0 PID: 17630 Comm: syz.6.2490 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  346.362799][T17630] Tainted: [L]=SOFTLOCKUP
[  346.362802][T17630] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  346.362808][T17630] Call Trace:
[  346.362812][T17630]  <TASK>
[  346.362816][T17630]  dump_stack_lvl+0xe8/0x150
[  346.362833][T17630]  warn_alloc+0x249/0x340
[  346.362853][T17630]  ? __pfx_warn_alloc+0x10/0x10
[  346.362880][T17630]  ? __mutex_trylock_common+0x158/0x260
[  346.362902][T17630]  __vmalloc_node_range_noprof+0x132/0x1750
[  346.362927][T17630]  ? rcu_is_watching+0x15/0xb0
[  346.362945][T17630]  ? trace_contention_end+0x3d/0x140
[  346.362966][T17630]  ? __mutex_lock+0x319/0x1550
[  346.362984][T17630]  ? tomoyo_path_number_perm+0x219/0x630
[  346.362996][T17630]  ? tomoyo_path_number_perm+0x219/0x630
[  346.363006][T17630]  ? dvb_dvr_do_ioctl+0x76/0x220
[  346.363016][T17630]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  346.363027][T17630]  ? do_vfs_ioctl+0x1166/0x1530
[  346.363044][T17630]  ? dvb_dvr_do_ioctl+0x12b/0x220
[  346.363052][T17630]  vmalloc_noprof+0xb2/0xe0
[  346.363063][T17630]  ? dvb_dvr_do_ioctl+0x12b/0x220
[  346.363072][T17630]  dvb_dvr_do_ioctl+0x12b/0x220
[  346.363083][T17630]  dvb_usercopy+0x199/0x2e0
[  346.363095][T17630]  ? __pfx_dvb_dvr_do_ioctl+0x10/0x10
[  346.363110][T17630]  ? __pfx_dvb_usercopy+0x10/0x10
[  346.363125][T17630]  ? __fget_files+0x3a0/0x420
[  346.363139][T17630]  ? __fget_files+0x2a/0x420
[  346.363151][T17630]  ? __pfx_dvb_dvr_ioctl+0x10/0x10
[  346.363163][T17630]  dvb_dvr_ioctl+0x29/0x40
[  346.363176][T17630]  __se_sys_ioctl+0xfc/0x170
[  346.363188][T17630]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  346.363198][T17630]  do_syscall_64+0x15f/0x560
[  346.363206][T17630]  ? trace_irq_disable+0x3b/0x140
[  346.363224][T17630]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  346.363265][T17630] RIP: 0033:0x7fe851d9ce59
[  346.363275][T17630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  346.363284][T17630] RSP: 002b:00007fe852bf1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  346.363295][T17630] RAX: ffffffffffffffda RBX: 00007fe852015fa0 RCX: 00007fe851d9ce59
[  346.363302][T17630] RDX: 7fffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000003
[  346.363307][T17630] RBP: 00007fe851e32d6f R08: 0000000000000000 R09: 0000000000000000
[  346.363333][T17630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  346.363342][T17630] R13: 00007fe852016038 R14: 00007fe852015fa0 R15: 00007ffe88115508
[  346.363367][T17630]  </TASK>
[  346.364715][T17630] Mem-Info:
[  346.448174][T17630] active_anon:9402 inactive_anon:0 isolated_anon:0
[  346.448174][T17630]  active_file:20095 inactive_file:38900 isolated_file:0
[  346.448174][T17630]  unevictable:1768 dirty:240 writeback:0
[  346.448174][T17630]  slab_reclaimable:7634 slab_unreclaimable:86519
[  346.448174][T17630]  mapped:19463 shmem:3223 pagetables:1558
[  346.448174][T17630]  sec_pagetables:0 bounce:0
[  346.448174][T17630]  kernel_misc_reclaimable:0
[  346.448174][T17630]  free:1106431 free_pcp:23591 free_cma:0
[  346.463537][T17630] Node 0 active_anon:17980kB inactive_anon:0kB active_file:37628kB inactive_file:22200kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:39324kB dirty:60kB writeback:0kB shmem:6096kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:10424kB pagetables:2704kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  346.473889][T17630] Node 1 active_anon:19628kB inactive_anon:0kB active_file:42752kB inactive_file:133400kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:38528kB dirty:900kB writeback:0kB shmem:6796kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:3508kB pagetables:3528kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  346.484510][T17630] Node 0 DMA free:15360kB boost:0kB min:240kB low:300kB high:360kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  346.494685][T17630] lowmem_reserve[]: 0 1587 2117 2117 2117
[  346.496879][T17630] Node 0 DMA32 free:1528380kB boost:0kB min:25012kB low:31264kB high:37516kB reserved_highatomic:0KB free_highatomic:0KB active_anon:924kB inactive_anon:0kB active_file:18684kB inactive_file:4kB unevictable:0kB writepending:56kB zspages:0kB present:2080636kB managed:1625236kB mlocked:0kB bounce:0kB free_pcp:17628kB local_pcp:10976kB free_cma:0kB
[  346.508824][T17630] lowmem_reserve[]: 0 0 530 530 530
[  346.511020][T17630] Node 0 Normal free:31572kB boost:0kB min:8512kB low:10640kB high:12768kB reserved_highatomic:0KB free_highatomic:0KB active_anon:17124kB inactive_anon:0kB active_file:18944kB inactive_file:22196kB unevictable:3536kB writepending:4kB zspages:0kB present:1572868kB managed:543152kB mlocked:0kB bounce:0kB free_pcp:19600kB local_pcp:36kB free_cma:0kB
[  346.523380][T17630] lowmem_reserve[]: 0 0 0 0 0
[  346.525211][T17630] Node 1 Normal free:2850336kB boost:0kB min:56344kB low:70428kB high:84512kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19628kB inactive_anon:0kB active_file:42752kB inactive_file:133400kB unevictable:3536kB writepending:900kB zspages:0kB present:3670012kB managed:3594684kB mlocked:0kB bounce:0kB free_pcp:56868kB local_pcp:25660kB free_cma:0kB
[  346.538440][T17630] lowmem_reserve[]: 0 0 0 0 0
[  346.540317][T17630] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  346.545298][T17630] Node 0 DMA32: 25*4kB (UM) 25*8kB (UME) 27*16kB (UME) 13*32kB (UME) 37*64kB (UME) 23*128kB (UM) 11*256kB (UE) 15*512kB (UME) 18*1024kB (UME) 17*2048kB (UME) 356*4096kB (UM) = 1528380kB
[  346.552107][T17630] Node 0 Normal: 1014*4kB (UME) 604*8kB (UME) 352*16kB (UME) 75*32kB (UME) 67*64kB (UME) 40*128kB (UME) 6*256kB (ME) 3*512kB (E) 2*1024kB (E) 0*2048kB 0*4096kB = 31448kB
[  346.558559][T17630] Node 1 Normal: 1472*4kB (UM) 1838*8kB (UE) 1491*16kB (UME) 516*32kB (UME) 311*64kB (UME) 138*128kB (UME) 89*256kB (UME) 54*512kB (UME) 30*1024kB (UM) 14*2048kB (UME) 645*4096kB (UM) = 2850272kB
[  346.565997][T17630] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  346.569460][T17630] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  346.572992][T17630] 62163 total pagecache pages
[  346.574665][T17630] 0 pages in swap cache
[  346.576041][T17630] Free swap  = 124996kB
[  346.577497][T17630] Total swap = 124996kB
[  346.578966][T17630] 1834877 pages RAM
[  346.580381][T17630] 0 pages HighMem/MovableOnly
[  346.582150][T17630] 390269 pages reserved
[  346.583521][T17630] 0 pages cma reserved
[  346.739741][ T5618] Bluetooth: hci0: adv larger than maximum supported
[  347.515197][T17681] loop3: detected capacity change from 0 to 131072
[  347.522883][T17681] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0)
[  347.525902][T17681] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  347.529361][T17681] F2FS-fs (loop3): invalid crc value
[  347.585148][T17681] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  347.594688][T17681] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  347.597152][T17681] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  347.606413][T17681] F2FS-fs (loop3): access invalid blkaddr:81410
[  347.611016][T17681] CPU: 0 UID: 0 PID: 17681 Comm: syz.3.2496 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  347.611033][T17681] Tainted: [L]=SOFTLOCKUP
[  347.611037][T17681] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  347.611044][T17681] Call Trace:
[  347.611048][T17681]  <TASK>
[  347.611052][T17681]  dump_stack_lvl+0xe8/0x150
[  347.611070][T17681]  __f2fs_is_valid_blkaddr+0xe52/0x14f0
[  347.611089][T17681]  f2fs_get_node_info+0x605/0x1e20
[  347.611112][T17681]  read_node_folio+0x221/0x410
[  347.611124][T17681]  ? __pfx_read_node_folio+0x10/0x10
[  347.611139][T17681]  ? __filemap_get_folio_mpol+0x7a9/0xb00
[  347.611156][T17681]  __get_node_folio+0x3ca/0xdd0
[  347.611195][T17681]  ? __pfx___get_node_folio+0x10/0x10
[  347.611205][T17681]  ? do_raw_spin_unlock+0x4d/0x210
[  347.611221][T17681]  ? _raw_spin_unlock+0x28/0x50
[  347.611241][T17681]  f2fs_iget+0x814/0x5dc0
[  347.611261][T17681]  ? rcu_is_watching+0x15/0xb0
[  347.611273][T17681]  ? kfree+0x4d/0x640
[  347.611284][T17681]  ? d_alloc_parallel+0x14c7/0x1610
[  347.611304][T17681]  ? __lock_acquire+0x6b5/0x2cf0
[  347.611318][T17681]  f2fs_lookup+0x3ff/0x9c0
[  347.611346][T17681]  ? __pfx_f2fs_lookup+0x10/0x10
[  347.611354][T17681]  ? __pfx_d_alloc_parallel+0x10/0x10
[  347.611365][T17681]  ? do_raw_spin_lock+0x12b/0x2f0
[  347.611379][T17681]  ? __raw_spin_lock_init+0x45/0x100
[  347.611391][T17681]  ? __init_waitqueue_head+0xa9/0x150
[  347.611407][T17681]  __lookup_slow+0x2b7/0x410
[  347.611421][T17681]  ? __pfx___lookup_slow+0x10/0x10
[  347.611439][T17681]  ? down_read+0x270/0x2e0
[  347.611449][T17681]  lookup_slow+0x53/0x70
[  347.611461][T17681]  link_path_walk+0xd1e/0x18d0
[  347.611479][T17681]  __filename_parentat+0x27f/0x6f0
[  347.611492][T17681]  ? __pfx___filename_parentat+0x10/0x10
[  347.611519][T17681]  filename_renameat2+0x1ef/0x9c0
[  347.611534][T17681]  ? __pfx_filename_renameat2+0x10/0x10
[  347.611546][T17681]  ? kmem_cache_free+0x182/0x650
[  347.611560][T17681]  ? do_getname+0x206/0x250
[  347.611569][T17681]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  347.611579][T17681]  __se_sys_rename+0x55/0x2c0
[  347.611589][T17681]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  347.611598][T17681]  do_syscall_64+0x15f/0x560
[  347.611606][T17681]  ? trace_irq_disable+0x3b/0x140
[  347.611621][T17681]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  347.611629][T17681] RIP: 0033:0x7f4f0c19ce59
[  347.611639][T17681] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  347.611646][T17681] RSP: 002b:00007f4f0cfa6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000052
[  347.611655][T17681] RAX: ffffffffffffffda RBX: 00007f4f0c415fa0 RCX: 00007f4f0c19ce59
[  347.611661][T17681] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080
[  347.611666][T17681] RBP: 00007f4f0c232d6f R08: 0000000000000000 R09: 0000000000000000
[  347.611673][T17681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  347.611679][T17681] R13: 00007f4f0c416038 R14: 00007f4f0c415fa0 R15: 00007ffffad930b8
[  347.611693][T17681]  </TASK>
[  347.613928][T17681] F2FS-fs (loop3): f2fs_get_node_info of read_node_folio+0x221/0x410: inconsistent nat entry, ino:4, nid:4, blkaddr:81410, ver:0, flag:0
[  347.706596][ T5077] usb 8-1: new high-speed USB device number 22 using dummy_hcd
[  347.755262][T17697] F2FS-fs (loop3): access invalid blkaddr:81410
[  347.758503][T17697] CPU: 1 UID: 0 PID: 17697 Comm: syz.3.2496 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  347.758534][T17697] Tainted: [L]=SOFTLOCKUP
[  347.758539][T17697] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  347.758551][T17697] Call Trace:
[  347.758558][T17697]  <TASK>
[  347.758565][T17697]  dump_stack_lvl+0xe8/0x150
[  347.758590][T17697]  __f2fs_is_valid_blkaddr+0xe52/0x14f0
[  347.758622][T17697]  f2fs_get_node_info+0x605/0x1e20
[  347.758658][T17697]  read_node_folio+0x221/0x410
[  347.758680][T17697]  ? __pfx_read_node_folio+0x10/0x10
[  347.758703][T17697]  ? __filemap_get_folio_mpol+0x7a9/0xb00
[  347.758726][T17697]  ? trace_kmem_cache_alloc+0x29/0xe0
[  347.758754][T17697]  __get_node_folio+0x3ca/0xdd0
[  347.758780][T17697]  ? __pfx___get_node_folio+0x10/0x10
[  347.758824][T17697]  ? do_raw_spin_unlock+0x4d/0x210
[  347.758849][T17697]  ? _raw_spin_unlock+0x28/0x50
[  347.758877][T17697]  f2fs_iget+0x814/0x5dc0
[  347.758912][T17697]  ? rcu_is_watching+0x15/0xb0
[  347.758932][T17697]  ? kfree+0x4d/0x640
[  347.758948][T17697]  ? d_alloc_parallel+0x14c7/0x1610
[  347.758978][T17697]  f2fs_lookup+0x3ff/0x9c0
[  347.758997][T17697]  ? __pfx_f2fs_lookup+0x10/0x10
[  347.759012][T17697]  ? __pfx_d_alloc_parallel+0x10/0x10
[  347.759026][T17697]  ? do_raw_spin_lock+0x12b/0x2f0
[  347.759050][T17697]  ? __raw_spin_lock_init+0x45/0x100
[  347.759072][T17697]  ? __init_waitqueue_head+0xa9/0x150
[  347.759096][T17697]  __lookup_slow+0x2b7/0x410
[  347.759117][T17697]  ? __pfx___lookup_slow+0x10/0x10
[  347.759208][T17697]  ? down_read+0x270/0x2e0
[  347.759231][T17697]  lookup_slow+0x53/0x70
[  347.759253][T17697]  path_lookupat+0x3f5/0x8c0
[  347.759283][T17697]  filename_lookup+0x256/0x5d0
[  347.759323][T17697]  ? __pfx_filename_lookup+0x10/0x10
[  347.759366][T17697]  ? strncpy_from_user+0x150/0x2b0
[  347.759391][T17697]  ? do_getname+0x151/0x250
[  347.759410][T17697]  do_fchownat+0xfa/0x250
[  347.759431][T17697]  ? __pfx_do_fchownat+0x10/0x10
[  347.759448][T17697]  ? __pfx_kcov_ioctl+0x10/0x10
[  347.759475][T17697]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  347.759493][T17697]  __x64_sys_lchown+0x85/0xa0
[  347.759512][T17697]  do_syscall_64+0x15f/0x560
[  347.759527][T17697]  ? trace_irq_disable+0x3b/0x140
[  347.759555][T17697]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  347.759572][T17697] RIP: 0033:0x7f4f0c19ce59
[  347.759588][T17697] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  347.759603][T17697] RSP: 002b:00007f4f0cf85028 EFLAGS: 00000246 ORIG_RAX: 000000000000005e
[  347.759621][T17697] RAX: ffffffffffffffda RBX: 00007f4f0c416090 RCX: 00007f4f0c19ce59
[  347.759632][T17697] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000
[  347.759642][T17697] RBP: 00007f4f0c232d6f R08: 0000000000000000 R09: 0000000000000000
[  347.759653][T17697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  347.759662][T17697] R13: 00007f4f0c416128 R14: 00007f4f0c416090 R15: 00007ffffad930b8
[  347.759688][T17697]  </TASK>
[  347.908885][T17697] F2FS-fs (loop3): f2fs_get_node_info of read_node_folio+0x221/0x410: inconsistent nat entry, ino:4, nid:4, blkaddr:81410, ver:0, flag:0
[  347.961074][T17702] syz_tun: entered promiscuous mode
[  347.971507][T17702] macsec1: entered promiscuous mode
[  347.975707][T17702] macsec1: entered allmulticast mode
[  347.977798][T17702] syz_tun: entered allmulticast mode
[  348.006933][T17702] syz_tun: left allmulticast mode
[  348.009417][T17702] syz_tun: left promiscuous mode
[  348.059643][ T5077] usb 8-1: Using ep0 maxpacket: 8
[  348.067504][ T5077] usb 8-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[  348.072021][ T5077] usb 8-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[  348.075758][ T5077] usb 8-1: Product: syz
[  348.077509][ T5077] usb 8-1: Manufacturer: syz
[  348.080014][ T5077] usb 8-1: SerialNumber: syz
[  348.093007][ T5077] usb 8-1: config 0 descriptor??
[  348.130772][ T5077] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd
[  348.636712][T17715] loop6: detected capacity change from 0 to 32768
[  348.682279][T17715] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  348.734082][T17715] XFS (loop6): Ending clean mount
[  348.756617][ T5077] gspca_zc3xx: reg_w_i err -71
[  348.758451][ T5077] gspca_zc3xx 8-1:0.0: probe with driver gspca_zc3xx failed with error -71
[  348.762745][ T5077] usb 8-1: USB disconnect, device number 22
[  348.797554][T11310] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  349.099413][T17723] loop3: detected capacity change from 0 to 131072
[  349.119678][T17723] F2FS-fs (loop3): invalid crc value
[  349.193242][T17723] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  349.203923][T17723] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  349.615617][T17762] loop6: detected capacity change from 0 to 32768
[  349.652829][T17762] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  349.692491][T17762] XFS (loop6): Ending clean mount
[  349.704847][T17762] XFS (loop6): Quotacheck needed: Please wait.
[  349.813998][T17762] XFS (loop6): Quotacheck: Done.
[  349.852001][T17787] loop7: detected capacity change from 0 to 512
[  349.894919][T17787] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  349.899257][T17787] ext4 filesystem being mounted at /275/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  349.970398][T12506] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  350.750625][T17817] syzkaller1: entered promiscuous mode
[  350.753395][T17817] syzkaller1: entered allmulticast mode
[  350.908907][T17835] loop7: detected capacity change from 0 to 2048
[  350.925117][T17835] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  351.294602][T17852] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2525'.
[  351.651374][T11310] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  351.760324][T17864] gfs2: path_lookup on  returned error -2
[  352.410163][   T10] usb 7-1: new full-speed USB device number 22 using dummy_hcd
[  352.439951][T17883] loop7: detected capacity change from 0 to 8
[  352.447832][T17883] unable to read id index table
[  352.531007][T17893] tmpfs: Bad value for 'mpol'
[  352.571434][   T10] usb 7-1: unable to get BOS descriptor or descriptor too short
[  352.575604][   T10] usb 7-1: not running at top speed; connect to a high speed hub
[  352.581499][   T10] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  352.585542][   T10] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  352.600030][   T10] usb 7-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40
[  352.612142][   T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  352.617667][   T10] usb 7-1: Product: syz
[  352.621468][   T10] usb 7-1: Manufacturer: syz
[  352.623032][   T10] usb 7-1: SerialNumber: syz
[  352.809823][T17905] loop3: detected capacity change from 0 to 40427
[  352.819887][T17905] F2FS-fs (loop3): invalid crc value
[  352.867455][   T24] usb 8-1: new high-speed USB device number 23 using dummy_hcd
[  352.869025][   T10] usb 7-1: 3:0: failed to get current value for ch 0 (-71)
[  352.881290][   T10] usb 7-1: 3:0: cannot get min/max values for control 5 (id 3)
[  352.884194][   T10] usb 7-1: 3:0: failed to get current value for ch 0 (-71)
[  352.888965][   T10] usb 7-1: 3:0: cannot get min/max values for control 12 (id 3)
[  352.912137][T17905] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  352.932316][   T10] usb 7-1: 3:0: cannot get min/max values for control 5 (id 3)
[  352.946898][T17905] F2FS-fs (loop3): Start checkpoint disabled!
[  352.958930][   T10] usb 7-1: USB disconnect, device number 22
[  352.963445][T17905] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0
[  352.966377][T17905] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  353.049088][   T24] usb 8-1: Using ep0 maxpacket: 16
[  353.056197][   T24] usb 8-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  353.065697][   T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  353.073428][T17928] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  353.074777][T17905] overlayfs: conflicting lowerdir path
[  353.081597][   T24] usb 8-1: config 0 descriptor??
[  353.090777][   T24] gspca_main: sonixj-2.14.0 probing 0471:0327
[  353.114940][ T9077] kworker/u9:17: attempt to access beyond end of device
[  353.114940][ T9077] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  353.137156][ T9077] CPU: 0 UID: 0 PID: 9077 Comm: kworker/u9:17 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  353.137184][ T9077] Tainted: [L]=SOFTLOCKUP
[  353.137191][ T9077] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  353.137201][ T9077] Workqueue: writeback wb_workfn (flush-7:3)
[  353.137235][ T9077] Call Trace:
[  353.137242][ T9077]  <TASK>
[  353.137251][ T9077]  dump_stack_lvl+0xe8/0x150
[  353.137274][ T9077]  f2fs_stop_checkpoint+0x3c7/0x590
[  353.137298][ T9077]  f2fs_write_end_io+0x1274/0x1740
[  353.137353][ T9077]  __submit_merged_bio+0x256/0x6a0
[  353.137376][ T9077]  __submit_merged_write_cond+0x3c9/0x4e0
[  353.137401][ T9077]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  353.137436][ T9077]  f2fs_write_data_pages+0x287e/0x34f0
[  353.137453][ T9077]  ? f2fs_build_free_nids+0xdc/0x1810
[  353.137497][ T9077]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  353.137522][ T9077]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  353.137565][ T9077]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  353.137597][ T9077]  ? __lock_acquire+0x6b5/0x2cf0
[  353.137625][ T9077]  ? set_shrinker_bit+0x7c/0x350
[  353.137645][ T9077]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  353.137665][ T9077]  do_writepages+0x32e/0x550
[  353.137686][ T9077]  ? reacquire_held_locks+0x104/0x190
[  353.137704][ T9077]  ? writeback_sb_inodes+0x463/0x19d0
[  353.137725][ T9077]  __writeback_single_inode+0x133/0x10e0
[  353.137743][ T9077]  ? do_raw_spin_unlock+0x4d/0x210
[  353.137769][ T9077]  writeback_sb_inodes+0x979/0x19d0
[  353.137784][ T9077]  ? __lock_acquire+0x6b5/0x2cf0
[  353.137824][ T9077]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  353.137840][ T9077]  ? do_raw_spin_lock+0x12b/0x2f0
[  353.137932][ T9077]  ? rcu_is_watching+0x15/0xb0
[  353.137960][ T9077]  wb_writeback+0x445/0xb00
[  353.137981][ T9077]  ? queue_io+0x2a1/0x470
[  353.138004][ T9077]  ? __pfx_wb_writeback+0x10/0x10
[  353.138019][ T9077]  ? do_raw_spin_lock+0x12b/0x2f0
[  353.138052][ T9077]  wb_workfn+0x3f8/0xf10
[  353.138072][ T9077]  ? __lock_acquire+0x6b5/0x2cf0
[  353.138086][ T9077]  ? look_up_lock_class+0x57/0x110
[  353.138116][ T9077]  ? __pfx_wb_workfn+0x10/0x10
[  353.138141][ T9077]  ? do_raw_spin_lock+0x12b/0x2f0
[  353.138178][ T9077]  ? lock_acquire+0x106/0x350
[  353.138198][ T9077]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  353.138221][ T9077]  ? process_scheduled_works+0xa70/0x1860
[  353.138238][ T9077]  ? process_scheduled_works+0xa70/0x1860
[  353.138261][ T9077]  ? process_scheduled_works+0xa70/0x1860
[  353.138274][ T9077]  ? process_scheduled_works+0xa70/0x1860
[  353.138292][ T9077]  process_scheduled_works+0xb5d/0x1860
[  353.138334][ T9077]  ? __pfx_process_scheduled_works+0x10/0x10
[  353.138357][ T9077]  ? assign_work+0x3d5/0x5e0
[  353.138378][ T9077]  worker_thread+0xa53/0xfc0
[  353.138417][ T9077]  kthread+0x389/0x470
[  353.138436][ T9077]  ? __pfx_worker_thread+0x10/0x10
[  353.138449][ T9077]  ? __pfx_kthread+0x10/0x10
[  353.138468][ T9077]  ret_from_fork+0x514/0xb70
[  353.138503][ T9077]  ? __pfx_ret_from_fork+0x10/0x10
[  353.138520][ T9077]  ? __switch_to+0xc79/0x1410
[  353.138543][ T9077]  ? __pfx_kthread+0x10/0x10
[  353.138562][ T9077]  ret_from_fork_asm+0x1a/0x30
[  353.138596][ T9077]  </TASK>
[  353.139602][ T9077] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  353.268130][ T9077] CPU: 0 UID: 0 PID: 9077 Comm: kworker/u9:17 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  353.268154][ T9077] Tainted: [L]=SOFTLOCKUP
[  353.268160][ T9077] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  353.268171][ T9077] Workqueue: writeback wb_workfn (flush-7:3)
[  353.268201][ T9077] Call Trace:
[  353.268207][ T9077]  <TASK>
[  353.268214][ T9077]  dump_stack_lvl+0xe8/0x150
[  353.268233][ T9077]  f2fs_stop_checkpoint+0x3c7/0x590
[  353.268253][ T9077]  f2fs_write_end_io+0x1274/0x1740
[  353.268286][ T9077]  __submit_merged_bio+0x256/0x6a0
[  353.268306][ T9077]  __submit_merged_write_cond+0x3c9/0x4e0
[  353.268328][ T9077]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  353.268360][ T9077]  f2fs_write_data_pages+0x287e/0x34f0
[  353.268377][ T9077]  ? f2fs_build_free_nids+0xdc/0x1810
[  353.268419][ T9077]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  353.268447][ T9077]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  353.268500][ T9077]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  353.268527][ T9077]  ? __lock_acquire+0x6b5/0x2cf0
[  353.268557][ T9077]  ? set_shrinker_bit+0x7c/0x350
[  353.268576][ T9077]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  353.268596][ T9077]  do_writepages+0x32e/0x550
[  353.268618][ T9077]  ? reacquire_held_locks+0x104/0x190
[  353.268633][ T9077]  ? writeback_sb_inodes+0x463/0x19d0
[  353.268655][ T9077]  __writeback_single_inode+0x133/0x10e0
[  353.268672][ T9077]  ? do_raw_spin_unlock+0x4d/0x210
[  353.268696][ T9077]  writeback_sb_inodes+0x979/0x19d0
[  353.268712][ T9077]  ? __lock_acquire+0x6b5/0x2cf0
[  353.268773][ T9077]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  353.268791][ T9077]  ? do_raw_spin_lock+0x12b/0x2f0
[  353.268868][ T9077]  ? rcu_is_watching+0x15/0xb0
[  353.268892][ T9077]  wb_writeback+0x445/0xb00
[  353.268910][ T9077]  ? queue_io+0x2a1/0x470
[  353.268929][ T9077]  ? __pfx_wb_writeback+0x10/0x10
[  353.268941][ T9077]  ? do_raw_spin_lock+0x12b/0x2f0
[  353.268971][ T9077]  wb_workfn+0x3f8/0xf10
[  353.268989][ T9077]  ? __lock_acquire+0x6b5/0x2cf0
[  353.269001][ T9077]  ? look_up_lock_class+0x57/0x110
[  353.269027][ T9077]  ? __pfx_wb_workfn+0x10/0x10
[  353.269047][ T9077]  ? do_raw_spin_lock+0x12b/0x2f0
[  353.269063][ T9077]  ? lock_acquire+0x106/0x350
[  353.269077][ T9077]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  353.269097][ T9077]  ? process_scheduled_works+0xa70/0x1860
[  353.269112][ T9077]  ? process_scheduled_works+0xa70/0x1860
[  353.269131][ T9077]  ? process_scheduled_works+0xa70/0x1860
[  353.269143][ T9077]  ? process_scheduled_works+0xa70/0x1860
[  353.269157][ T9077]  process_scheduled_works+0xb5d/0x1860
[  353.269194][ T9077]  ? __pfx_process_scheduled_works+0x10/0x10
[  353.269213][ T9077]  ? assign_work+0x3d5/0x5e0
[  353.269230][ T9077]  worker_thread+0xa53/0xfc0
[  353.269264][ T9077]  kthread+0x389/0x470
[  353.269280][ T9077]  ? __pfx_worker_thread+0x10/0x10
[  353.269292][ T9077]  ? __pfx_kthread+0x10/0x10
[  353.269309][ T9077]  ret_from_fork+0x514/0xb70
[  353.269326][ T9077]  ? __pfx_ret_from_fork+0x10/0x10
[  353.269339][ T9077]  ? __switch_to+0xc79/0x1410
[  353.269360][ T9077]  ? __pfx_kthread+0x10/0x10
[  353.269376][ T9077]  ret_from_fork_asm+0x1a/0x30
[  353.269405][ T9077]  </TASK>
[  353.270276][ T9077] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  353.525118][T17933] loop6: detected capacity change from 0 to 4096
[  353.533847][T17933] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512).
[  353.542687][T17933] ntfs3(loop6): It is recommended to use chkdsk.
[  353.701830][T17946] netlink: 92 bytes leftover after parsing attributes in process `syz.6.2539'.
[  353.919672][T17969] loop3: detected capacity change from 0 to 512
[  353.927362][T17969] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  353.939624][T17969] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.2547: Invalid block bitmap block 0 in block_group 0
[  353.944839][T17969] loop3: lost filesystem error report for type 5 error -117
[  353.945342][T17969] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem
[  353.947809][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  353.947821][    C1] EXT4-fs (loop3): initial error at time 1779795911: ext4_read_block_bitmap_nowait:483
[  353.947834][    C1] EXT4-fs (loop3): last error at time 1779795911: ext4_read_block_bitmap_nowait:483
[  353.962079][T17969] loop3: lost filesystem error report for type 5 error -117
[  353.962510][T17969] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #11: comm syz.3.2547: attempt to clear invalid blocks 983261 len 1
[  353.975052][T17969] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  353.990823][T17969] EXT4-fs error (device loop3): __ext4_get_inode_loc:4885: comm syz.3.2547: Invalid inode table block 0 in block_group 0
[  353.998284][T17969] loop3: lost filesystem error report for type 5 error -117
[  353.998898][T17969] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6383: Corrupt filesystem
[  354.007562][T17969] loop3: lost filesystem error report for type 5 error -117
[  354.008179][T17969] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem
[  354.014131][T17969] loop3: lost filesystem error report for type 5 error -117
[  354.014525][T17969] EXT4-fs error (device loop3): __ext4_get_inode_loc:4885: comm syz.3.2547: Invalid inode table block 0 in block_group 0
[  354.025474][T17969] loop3: lost filesystem error report for type 5 error -117
[  354.026029][T17969] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6383: Corrupt filesystem
[  354.032231][T17969] loop3: lost filesystem error report for type 5 error -117
[  354.040153][T17969] EXT4-fs error (device loop3): ext4_truncate:4690: inode #11: comm syz.3.2547: mark_inode_dirty error
[  354.052038][T17969] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  354.053062][T17969] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem
[  354.058622][T17969] loop3: lost filesystem error report for type 5 error -117
[  354.059052][T17969] EXT4-fs error (device loop3): __ext4_get_inode_loc:4885: comm syz.3.2547: Invalid inode table block 0 in block_group 0
[  354.066435][T17969] loop3: lost filesystem error report for type 5 error -117
[  354.066856][T17969] EXT4-fs (loop3): 1 truncate cleaned up
[  354.073024][T17969] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  354.103856][ T6378] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  354.176087][   T24] gspca_sonixj: reg_w1 err -71
[  354.192065][   T24] sonixj 8-1:0.0: probe with driver sonixj failed with error -71
[  354.197828][   T24] usb 8-1: USB disconnect, device number 23
[  354.232109][T17983] hfs: can't find a HFS filesystem on dev nbd3
[  355.652577][T18045] loop6: detected capacity change from 0 to 512
[  355.663168][T18045] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  355.668949][T18045] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ce01c, mo2=0002]
[  355.671555][T18045] System zones: 1-12
[  355.672979][T18045] EXT4-fs (loop6): orphan cleanup on readonly fs
[  355.675496][T18045] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.2567: invalid indirect mapped block 12 (level 1)
[  355.680575][T18045] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  355.682608][T18045] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.2567: invalid indirect mapped block 2 (level 2)
[  355.691570][    C0] EXT4-fs (loop6): error count since last fsck: 1
[  355.691583][    C0] EXT4-fs (loop6): initial error at time 1779795913: ext4_free_branches:1023: inode 11
[  355.691598][    C0] EXT4-fs (loop6): last error at time 1779795913: ext4_free_branches:1023: inode 11
[  355.701576][T18045] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  355.706168][T18045] EXT4-fs (loop6): 1 truncate cleaned up
[  355.715242][T18045] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback.
[  355.745611][T11310] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  355.811109][T18055] loop6: detected capacity change from 0 to 128
[  355.825868][T18055] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  355.831449][T18055] ext4 filesystem being mounted at /310/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  355.889227][T11310] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  355.968480][T18067] loop7: detected capacity change from 0 to 2048
[  356.005746][T18067] UDF-fs: error (device loop7): udf_process_sequence: Primary Volume Descriptor not found!
[  356.012482][T18067] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  356.117090][T18079] loop7: detected capacity change from 0 to 128
[  356.139047][T18079] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  356.144335][T18079] ext4 filesystem being mounted at /292/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  356.182069][T12506] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  356.431370][T18105] loop6: detected capacity change from 0 to 4096
[  356.438755][T18105] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  356.450859][T18105] Quota error (device loop6): do_check_range: Getting block 1048579 out of range 1-5
[  356.456111][T18105] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0
[  356.460047][T18105] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.2580: Failed to acquire dquot type 1
[  356.988681][T18103] loop7: detected capacity change from 0 to 131072
[  357.172059][T18103] F2FS-fs (loop7): invalid crc value
[  357.217795][T11310] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  357.232118][T18103] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  357.239911][T18103] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4
[  357.320325][T18125] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[  357.507521][T18130] loop6: detected capacity change from 0 to 32768
[  357.560892][T18130] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  357.592097][T18130] XFS (loop6): Ending clean mount
[  357.595784][T18130] XFS (loop6): Quotacheck needed: Please wait.
[  357.683734][T18130] XFS (loop6): Quotacheck: Done.
[  357.941491][   T10] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[  358.101708][   T10] usb 4-1: Using ep0 maxpacket: 8
[  358.110963][   T10] usb 4-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64
[  358.114610][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  358.119055][   T10] usb 4-1: Product: syz
[  358.120747][   T10] usb 4-1: Manufacturer: syz
[  358.122688][   T10] usb 4-1: SerialNumber: syz
[  358.132326][   T10] usb 4-1: config 0 descriptor??
[  358.139747][   T10] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state.
[  358.142769][   T10] pctv452e: pctv452e_power_ctrl: 1
[  358.142769][   T10] 
[  358.145699][   T10] usb 4-1: selecting invalid altsetting 3
[  358.148237][   T10] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22
[  358.148237][   T10] 
[  358.152319][   T10] dvb-usb: bulk message failed: -22 (5/0)
[  358.176215][   T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  358.181451][   T10] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600)
[  358.193488][   T10] usb 4-1: media controller created
[  358.219821][   T10] dvb-usb: bulk message failed: -22 (8/0)
[  358.225190][   T10] pctv452e: I2C error -22; AA 01  A0 01 14 -> aa 01 31 04 a0 01 14
[  358.237986][T18165] loop7: detected capacity change from 0 to 512
[  358.238049][   T10] dvb-usb: MAC address reading failed.
[  358.277498][T18165] EXT4-fs (loop7): can't mount with journal_checksum, fs mounted w/o journal
[  358.284614][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  358.432468][T18175] Bluetooth: hci0: unsupported parameter 256
[  358.434545][T18175] Bluetooth: hci0: invalid length 0, exp 2 for type 9
[  358.556777][   T10] DVB: Unable to find symbol stb0899_attach()
[  358.558988][   T10] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600'
[  358.646621][   T10] rc_core: IR keymap rc-tt-1500 not found
[  358.648434][   T10] Registered IR keymap rc-empty
[  358.652787][   T10] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0
[  358.662037][   T10] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input26
[  358.674131][   T10] dvb-usb: schedule remote query interval to 100 msecs.
[  358.681159][   T10] pctv452e: pctv452e_power_ctrl: 0
[  358.681159][   T10] 
[  358.686168][   T10] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected.
[  358.703716][   T10] usb 4-1: USB disconnect, device number 50
[  358.907241][   T10] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected.
[  359.124694][T11310] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  359.282317][T18208] loop7: detected capacity change from 0 to 8192
[  360.133911][ T5077] usb 4-1: new full-speed USB device number 51 using dummy_hcd
[  360.232636][T18246] loop6: detected capacity change from 0 to 1764
[  360.329392][ T5077] usb 4-1: not running at top speed; connect to a high speed hub
[  360.341185][ T5077] usb 4-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config
[  360.364012][ T5077] usb 4-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=60.1b
[  360.376511][ T5077] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  360.388358][ T5077] usb 4-1: Product: syz
[  360.392459][ T5077] usb 4-1: Manufacturer: syz
[  360.396176][ T5077] usb 4-1: SerialNumber: syz
[  360.689485][T18234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  360.731543][T18234] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  360.824084][ T5077] usb 4-1: USB disconnect, device number 51
[  361.335101][ T5618] Bluetooth: hci2: link tx timeout
[  361.356417][ T5618] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  361.483515][ T5618] Bluetooth: hci2: link tx timeout
[  361.486565][ T5618] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  362.237908][T18310] loop7: detected capacity change from 0 to 2048
[  362.247897][T18310] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  362.345939][   T33] audit: type=1800 audit(1779795919.554:165): pid=18310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2614" name="file2" dev="loop7" ino=1416 res=0 errno=0
[  362.905192][T18323] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2617'.
[  363.364463][T18330] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2616'.
[  363.550854][ T5618] Bluetooth: hci2: command 0x0406 tx timeout
[  364.269103][T18347] loop6: detected capacity change from 0 to 32768
[  364.485332][T18373] loop3: detected capacity change from 0 to 16
[  364.493744][T18373] erofs (device loop3): mounted with root inode @ nid 36.
[  364.523365][T18373] erofs (device loop3): invalid h_shared_count 83 @ nid 46
[  364.527289][T18373] erofs (device loop3): invalid h_shared_count 83 @ nid 46
[  364.529675][T18373] overlayfs: failed to get redirect (-117)
[  364.570209][T18381] loop6: detected capacity change from 0 to 256
[  364.601436][T18381] FAT-fs (loop6): Directory bread(block 64) failed
[  364.605975][T18381] FAT-fs (loop6): Directory bread(block 65) failed
[  364.611765][T18381] FAT-fs (loop6): Directory bread(block 66) failed
[  364.614643][T18381] FAT-fs (loop6): Directory bread(block 67) failed
[  364.619837][T18381] FAT-fs (loop6): Directory bread(block 68) failed
[  364.624979][T18381] FAT-fs (loop6): Directory bread(block 69) failed
[  364.627632][T18381] FAT-fs (loop6): Directory bread(block 70) failed
[  364.632348][T18381] FAT-fs (loop6): Directory bread(block 71) failed
[  364.637884][T18381] FAT-fs (loop6): Directory bread(block 72) failed
[  364.640089][T18381] FAT-fs (loop6): Directory bread(block 73) failed
[  364.672677][ T5077] usb 8-1: new high-speed USB device number 24 using dummy_hcd
[  364.839174][ T5077] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  364.845712][ T5077] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  364.849513][ T5077] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  364.855530][ T5077] usb 8-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00
[  364.859673][ T5077] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  364.871963][ T5077] usb 8-1: config 0 descriptor??
[  365.325292][ T5077] steelseries 0003:1038:1410.001D: unknown main item tag 0x0
[  365.331498][ T5077] steelseries 0003:1038:1410.001D: unknown main item tag 0x0
[  365.337532][ T5077] steelseries 0003:1038:1410.001D: unknown main item tag 0x0
[  365.342096][ T5077] steelseries 0003:1038:1410.001D: unknown main item tag 0x0
[  365.344881][ T5077] steelseries 0003:1038:1410.001D: not enough fields in HID_OUTPUT_REPORT 0
[  365.350487][ T5691] usb 7-1: new high-speed USB device number 23 using dummy_hcd
[  365.505981][ T5691] usb 7-1: Using ep0 maxpacket: 32
[  365.510550][ T5691] usb 7-1: config 3 has no interfaces?
[  365.517618][ T5691] usb 7-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 1.00
[  365.521348][ T5691] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  365.524571][ T5691] usb 7-1: Product: syz
[  365.526255][ T5691] usb 7-1: Manufacturer: syz
[  365.529804][ T5691] usb 7-1: SerialNumber: syz
[  365.556077][   T24] usb 8-1: USB disconnect, device number 24
[  365.771724][ T5691] usb 7-1: USB disconnect, device number 23
[  366.024176][T18442] loop3: detected capacity change from 0 to 131072
[  366.028537][T18442] F2FS-fs (loop3): invalid crc value
[  366.071894][T18442] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  366.085747][T18442] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  366.369611][T18476] loop6: detected capacity change from 0 to 2048
[  366.386884][T18476] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  366.437419][T11310] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  366.531799][ T5676] usb 8-1: new high-speed USB device number 25 using dummy_hcd
[  366.630222][T18491] binder: 18490:18491 ioctl c0306201 2000000001c0 returned -14
[  366.702530][ T5676] usb 8-1: Using ep0 maxpacket: 8
[  366.707319][ T5676] usb 8-1: config 0 has an invalid interface number: 1 but max is 0
[  366.710673][ T5676] usb 8-1: config 0 has no interface number 0
[  366.714374][ T5676] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  366.720046][ T5676] usb 8-1: config 0 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  366.724526][ T5676] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  366.728386][ T5676] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  366.740557][ T5676] usb 8-1: config 0 descriptor??
[  366.757528][ T5676] iowarrior 8-1:0.1: no interrupt-in endpoint found
[  366.978984][ T5676] usb 8-1: USB disconnect, device number 25
[  367.087533][T18526] loop3: detected capacity change from 0 to 4096
[  367.093537][T18526] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512).
[  367.114349][T18526] ntfs3(loop3): try to read out of volume at offset 0x103000
[  367.118397][T18526] ntfs3(loop3): Failed to load $Volume (-5).
[  367.193785][T18540] loop3: detected capacity change from 0 to 16
[  367.204431][T18540] erofs (device loop3): mounted with root inode @ nid 36.
[  367.235907][ T6663] erofs (device loop3): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 9000
[  367.272875][T18540] erofs (device loop3): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 9000
[  367.302112][T18540] erofs (device loop3): read error -117 @ 2 of nid 89
[  367.310047][   T33] audit: type=1800 audit(1779795924.262:166): pid=18540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2662" name="file2" dev="loop3" ino=89 res=0 errno=0
[  367.418928][T18554] cgroup: Invalid name
[  367.740028][T18591] loop7: detected capacity change from 0 to 256
[  367.758778][T18591] exfat: Deprecated parameter 'namecase'
[  367.772885][T18591] exfat: Deprecated parameter 'namecase'
[  367.797423][T18591] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  367.813993][ T5691] usb 4-1: new high-speed USB device number 52 using dummy_hcd
[  367.980382][ T5691] usb 4-1: config 1 has an invalid interface number: 93 but max is 0
[  367.983737][ T5691] usb 4-1: config 1 has no interface number 0
[  367.992052][ T5691] usb 4-1: config 1 interface 93 has no altsetting 0
[  368.002472][ T5691] usb 4-1: New USB device found, idVendor=05e3, idProduct=0502, bcdDevice=6b.02
[  368.018204][ T5691] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  368.113849][T18610] loop6: detected capacity change from 0 to 32768
[  368.128416][T18610] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  368.169642][T18610] XFS (loop6): Ending clean mount
[  368.207160][T18610] XFS (loop6): Quotacheck needed: Please wait.
[  368.262628][ T5691] usb 4-1: string descriptor 0 read error: -71
[  368.275029][ T5691] gl620a 4-1:1.93: probe with driver gl620a failed with error -22
[  368.292563][ T5691] usb 4-1: USB disconnect, device number 52
[  368.312600][T18610] XFS (loop6): Quotacheck: Done.
[  368.319124][T18642] input: syz0 as /devices/virtual/input/input28
[  368.416855][T11310] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  368.762261][T18665] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached
[  369.137206][T18680] loop6: detected capacity change from 0 to 4096
[  369.173707][T18680] ntfs3(loop6): $Secure::$SII is corrupted.
[  369.176186][T18680] ntfs3(loop6): Failed to initialize $Secure (-22).
[  369.459210][ T5678] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[  369.619293][ T5678] usb 4-1: Using ep0 maxpacket: 32
[  369.626011][ T5678] usb 4-1: config 1 has an invalid interface number: 216 but max is 0
[  369.634044][ T5678] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  369.641834][ T5678] usb 4-1: config 1 has no interface number 0
[  369.647575][ T5678] usb 4-1: config 1 interface 216 has no altsetting 0
[  369.655634][ T5678] usb 4-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=17.ee
[  369.663042][ T5678] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  369.666325][ T5678] usb 4-1: Product: syz
[  369.668153][ T5678] usb 4-1: Manufacturer: syz
[  369.669951][ T5678] usb 4-1: SerialNumber: syz
[  369.707381][T18699] loop6: detected capacity change from 0 to 40427
[  369.715027][T18699] F2FS-fs (loop6): invalid crc value
[  369.722918][T18699] F2FS-fs (loop6): invalid journal entries nats 250 sits 6
[  369.728394][T18699] F2FS-fs (loop6): Failed to initialize F2FS segment manager (-22)
[  369.777784][T18709] loop6: detected capacity change from 0 to 256
[  369.923959][ T5678] xr_serial 4-1:1.216: skipping garbage
[  369.926956][ T5678] xr_serial 4-1:1.216: More than one union descriptor, skipping ...
[  369.940932][ T5678] usb 4-1: USB disconnect, device number 53
[  370.090328][T18731] loop7: detected capacity change from 0 to 256
[  370.106478][T18731] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x478b151d, utbl_chksum : 0xe619d30d)
[  370.507795][T18720] F2FS-fs (loop6): Test dummy encryption mode enabled
[  370.512556][T18720] F2FS-fs (loop6): invalid crc value
[  370.570299][T18720] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  370.584115][T18720] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  371.287158][T18762] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  371.292620][T18762] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  371.761926][T18814] set_capacity_and_notify: 2 callbacks suppressed
[  371.761941][T18814] loop7: detected capacity change from 0 to 4096
[  371.817506][T18814] ntfs3(loop7): Different NTFS sector size (1024) and media sector size (512).
[  371.998481][T18814] ntfs3(loop7): Mark volume as dirty due to NTFS errors
[  372.002051][T18814] ntfs3(loop7): Failed to load $Extend (-22).
[  372.004675][T18814] ntfs3(loop7): Failed to initialize $Extend.
[  372.085924][T18825] loop7: detected capacity change from 0 to 1764
[  372.965779][ T5000] Bluetooth: hci0: command 0x0406 tx timeout
[  373.380962][   T24] usb 7-1: new high-speed USB device number 24 using dummy_hcd
[  373.541961][   T24] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  373.549548][   T24] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  373.557105][   T24] usb 7-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  373.572013][   T24] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  373.583926][   T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  373.593246][   T24] usb 7-1: Product: syz
[  373.595172][   T24] usb 7-1: Manufacturer: syz
[  373.597145][   T24] usb 7-1: SerialNumber: syz
[  373.616262][   T24] cdc_mbim 7-1:1.0: skipping garbage
[  373.721291][T18881] loop7: detected capacity change from 0 to 512
[  373.739457][T18881] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended
[  373.758146][T18881] Quota error (device loop7): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  373.762139][T18881] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0
[  373.766785][T18881] EXT4-fs error (device loop7): ext4_acquire_dquot:7034: comm syz.7.2741: Failed to acquire dquot type 1
[  373.771139][T18881] loop7: lost filesystem error report for type 5 error -5
[  373.772216][T18881] EXT4-fs (loop7): 1 truncate cleaned up
[  373.777266][    C0] EXT4-fs (loop7): error count since last fsck: 1
[  373.777277][    C0] EXT4-fs (loop7): last error at time 1779795930: ext4_acquire_dquot:7034
[  373.783585][T18881] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[  373.802910][T12506] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[  374.182778][   T10] usb 8-1: new high-speed USB device number 26 using dummy_hcd
[  374.411855][T18904] loop3: detected capacity change from 0 to 32768
[  374.423811][T18904] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  374.434742][T18904] XFS (loop3): Ending clean mount
[  374.438522][T18904] XFS (loop3): Quotacheck needed: Please wait.
[  374.499191][T18904] XFS (loop3): Quotacheck: Done.
[  374.501908][   T10] usb 8-1: Using ep0 maxpacket: 16
[  374.506167][   T10] usb 8-1: config 252 has an invalid interface number: 15 but max is 0
[  374.508946][   T10] usb 8-1: config 252 has no interface number 0
[  374.511151][   T10] usb 8-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  374.532223][ T6378] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  374.533013][   T10] usb 8-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29
[  374.538426][   T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  374.540897][   T10] usb 8-1: Product: syz
[  374.542415][   T10] usb 8-1: Manufacturer: syz
[  374.544124][   T10] usb 8-1: SerialNumber: syz
[  374.592503][   T10] usb 8-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  374.708691][   T24] cdc_mbim 7-1:1.0: bind() failure
[  374.729629][   T24] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found
[  374.737424][   T24] cdc_ncm 7-1:1.1: bind() failure
[  374.746887][   T24] usb 7-1: USB disconnect, device number 24
[  374.787417][T18896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  374.797832][T18896] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  374.803726][   T12] usb 8-1: Failed to submit usb control message: -71
[  374.806377][ T5077] usb 8-1: USB disconnect, device number 26
[  374.809248][   T12] usb 8-1: unable to send the bmi data to the device: -71
[  374.823419][   T12] usb 8-1: unable to get target info from device
[  374.825779][   T12] usb 8-1: could not get target info (-71)
[  374.827988][   T12] usb 8-1: could not probe fw (-71)
[  374.927933][T18946] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2747'.
[  374.933065][T18946] openvswitch: netlink: Flow actions attr not present in new flow.
[  375.853446][T18967] loop3: detected capacity change from 0 to 1024
[  375.865191][T18967] EXT4-fs: Ignoring removed bh option
[  375.899256][T18967] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback.
[  375.995421][ T6378] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[  376.328908][   T10] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[  376.500190][   T10] usb 4-1: Using ep0 maxpacket: 32
[  376.504986][   T10] usb 4-1: config 0 has an invalid interface number: 51 but max is 0
[  376.508047][   T10] usb 4-1: config 0 has no interface number 0
[  376.513263][   T10] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  376.516747][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  376.520144][   T10] usb 4-1: Product: syz
[  376.522012][   T10] usb 4-1: Manufacturer: syz
[  376.523846][   T10] usb 4-1: SerialNumber: syz
[  376.529012][   T10] usb 4-1: config 0 descriptor??
[  376.539166][   T10] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  376.759659][   T10] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  376.772339][   T10] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  377.076747][   T10] usb 7-1: new high-speed USB device number 25 using dummy_hcd
[  377.182195][    C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71
[  377.185364][ T5678] usb 4-1: USB disconnect, device number 54
[  377.193656][ T5678] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  377.204321][ T5678] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  377.209888][ T5678] quatech2 4-1:0.51: device disconnected
[  377.237032][   T10] usb 7-1: Using ep0 maxpacket: 16
[  377.241366][   T10] usb 7-1: unable to get BOS descriptor or descriptor too short
[  377.244807][   T10] usb 7-1: config 7 has an invalid interface number: 17 but max is 0
[  377.247425][   T10] usb 7-1: config 7 has no interface number 0
[  377.250374][   T10] usb 7-1: config 7 interface 17 has no altsetting 0
[  377.254806][   T10] usb 7-1: New USB device found, idVendor=046d, idProduct=c11f, bcdDevice=57.ca
[  377.258949][   T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  377.262359][   T10] usb 7-1: Product: syz
[  377.264858][   T10] usb 7-1: Manufacturer: syz
[  377.266757][   T10] usb 7-1: SerialNumber: syz
[  377.457985][   T33] audit: type=1326 audit(1779795933.762:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19036 comm="syz.7.2764" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cd659ce59 code=0x7ffc0000
[  377.467528][   T33] audit: type=1326 audit(1779795933.762:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19036 comm="syz.7.2764" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cd659ce59 code=0x7ffc0000
[  377.475571][   T33] audit: type=1326 audit(1779795933.771:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19036 comm="syz.7.2764" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cd659ce59 code=0x7ffc0000
[  377.485949][   T33] audit: type=1326 audit(1779795933.771:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19036 comm="syz.7.2764" exe="/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f4cd659ce59 code=0x7ffc0000
[  377.496533][   T33] audit: type=1326 audit(1779795933.771:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19036 comm="syz.7.2764" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cd659ce59 code=0x7ffc0000
[  377.508208][   T10] usb 7-1: unsupported MDLM descriptors
[  377.513157][   T33] audit: type=1326 audit(1779795933.771:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19036 comm="syz.7.2764" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cd659ce59 code=0x7ffc0000
[  377.520898][   T10] usb 7-1: USB disconnect, device number 25
[  377.526880][   T33] audit: type=1326 audit(1779795933.771:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19036 comm="syz.7.2764" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cd659ce59 code=0x7ffc0000
[  377.543147][   T33] audit: type=1326 audit(1779795933.771:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19036 comm="syz.7.2764" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f4cd659ce59 code=0x7ffc0000
[  377.721071][T19051] loop7: detected capacity change from 0 to 32768
[  378.115746][ T5669] usb 4-1: new full-speed USB device number 55 using dummy_hcd
[  378.166748][   T10] usb 8-1: new high-speed USB device number 27 using dummy_hcd
[  378.297298][ T5669] usb 4-1: config 0 has an invalid interface number: 214 but max is 0
[  378.303072][ T5669] usb 4-1: config 0 has no interface number 0
[  378.307235][ T5669] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  378.312189][ T5669] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  378.319080][ T5669] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[  378.322739][ T5669] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3
[  378.325877][ T5669] usb 4-1: Manufacturer: syz
[  378.331181][ T5669] usb 4-1: SerialNumber: syz
[  378.339579][   T10] usb 8-1: Using ep0 maxpacket: 32
[  378.344320][ T5669] usb 4-1: config 0 descriptor??
[  378.350697][   T10] usb 8-1: config 10 has an invalid interface number: 107 but max is 0
[  378.358476][   T10] usb 8-1: config 10 has no interface number 0
[  378.363373][   T10] usb 8-1: config 10 interface 107 has no altsetting 0
[  378.372082][   T10] usb 8-1: New USB device found, idVendor=f2f1, idProduct=4550, bcdDevice=2c.36
[  378.379466][   T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  378.384662][   T10] usb 8-1: Product: syz
[  378.386450][   T10] usb 8-1: Manufacturer: syz
[  378.388394][   T10] usb 8-1: SerialNumber: syz
[  378.615993][   T10] usb-storage 8-1:10.107: USB Mass Storage device detected
[  378.669517][   T10] usb 8-1: USB disconnect, device number 27
[  378.754223][ T5077] usb 7-1: new high-speed USB device number 26 using dummy_hcd
[  378.914552][ T5077] usb 7-1: Using ep0 maxpacket: 16
[  379.002139][ T5669] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.214/input/input29
[  379.223104][ T5669] usb 4-1: USB disconnect, device number 55
[  379.960762][T19131] loop3: detected capacity change from 0 to 1024
[  379.984389][T19131] hfsplus: failed to load extents file
[  380.241543][T19141] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2779'.
[  380.955137][   T10] usb 8-1: new full-speed USB device number 28 using dummy_hcd
[  381.117991][   T10] usb 8-1: not running at top speed; connect to a high speed hub
[  381.125386][   T10] usb 8-1: New USB device found, idVendor=0e41, idProduct=4750, bcdDevice= 0.40
[  381.129306][   T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  381.132781][   T10] usb 8-1: Product: syz
[  381.134705][   T10] usb 8-1: Manufacturer: syz
[  381.137027][   T10] usb 8-1: SerialNumber: syz
[  381.378599][   T10] usb 8-1: Quirk or no altset; falling back to MIDI 1.0
[  381.382568][   T10] usb 8-1: MIDIStreaming interface descriptor not found
[  381.491349][   T10] usb 8-1: USB disconnect, device number 28
[  381.528401][ T5620] udevd[5620]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  381.660842][ T5077] usb 7-1: unable to get BOS descriptor or descriptor too short
[  381.683978][ T5077] usb 7-1: unable to read config index 0 descriptor/start: -71
[  381.687542][ T5077] usb 7-1: can't read configurations, error -71
[  382.011693][T19214] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2792'.
[  382.092940][T19219] loop7: detected capacity change from 0 to 2048
[  382.103640][T19219] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  382.194213][T19231] trusted_key: syz.7.2796 sent an empty control message without MSG_MORE.
[  382.465498][T19247] loop7: detected capacity change from 0 to 4096
[  382.521696][   T33] kauditd_printk_skb: 1 callbacks suppressed
[  382.521710][   T33] audit: type=1804 audit(1779795938.507:176): pid=19247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.2802" name=2F6E6577726F6F742F3337392F131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D3382F627573 dev="loop7" ino=33 res=1 errno=0
[  382.742120][T19259] loop7: detected capacity change from 0 to 32768
[  382.749493][T19259] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  382.767664][T19259] XFS (loop7): Ending clean mount
[  382.964161][T12506] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  383.145822][ T5678] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[  383.264148][T19293] loop7: detected capacity change from 0 to 1024
[  383.276212][T19293] EXT4-fs: Ignoring removed bh option
[  383.290922][T19293] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  383.295876][T19293] ext4 filesystem being mounted at /383/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  383.310307][ T5678] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  383.313626][ T5678] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  383.326450][ T5678] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  383.331434][ T5678] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  383.334607][ T5678] usb 4-1: Product: syz
[  383.336419][ T5678] usb 4-1: Manufacturer: syz
[  383.339262][ T5678] usb 4-1: SerialNumber: syz
[  383.340288][T19293] EXT4-fs error (device loop7): ext4_map_blocks:833: inode #15: comm syz.7.2812: lblock 0 mapped to illegal pblock 0 (length 6)
[  383.347407][ T5678] usb 4-1: config 0 descriptor??
[  383.350999][T19279] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  383.351639][T19293] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117
[  383.354183][T19279] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  383.357668][T19293] EXT4-fs (loop7): This should not happen!! Data will be lost
[  383.357668][T19293] 
[  383.394937][ T9077] EXT4-fs error (device loop7): ext4_map_blocks:833: inode #15: block 8: comm kworker/u9:17: lblock 8 mapped to illegal pblock 8 (length 8)
[  383.399975][ T9077] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  383.404006][ T9077] EXT4-fs (loop7): This should not happen!! Data will be lost
[  383.404006][ T9077] 
[  383.409164][T12506] EXT4-fs warning (device loop7): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[  383.417338][T12506] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  383.482524][   T51] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  383.589679][T19279] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  383.613205][T19279] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  383.669873][T19315] loop7: detected capacity change from 0 to 256
[  383.901567][   T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  383.951444][T19326] loop7: detected capacity change from 0 to 1024
[  383.960204][T19326] hfsplus: invalid secondary volume header
[  384.107196][   T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  384.126698][ T5000] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  384.135337][ T5000] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  384.143947][ T5000] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  384.149119][ T5000] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  384.160018][ T5000] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  384.298277][ T5678] dm9601 4-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID
[  384.304941][ T5678] usb 4-1: USB disconnect, device number 56
[  384.359534][   T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  384.370364][T19360] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2824'.
[  384.466403][   T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  384.980465][   T12] bridge_slave_1: left allmulticast mode
[  384.984095][   T12] bridge_slave_1: left promiscuous mode
[  384.988518][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  385.009724][   T12] bridge_slave_0: left allmulticast mode
[  385.012145][   T12] bridge_slave_0: left promiscuous mode
[  385.014618][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  385.164692][   T10] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[  385.214839][T19456] loop7: detected capacity change from 0 to 32768
[  385.218126][T19456] btrfs: Deprecated parameter 'usebackuproot'
[  385.220585][T19456] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  385.224482][T19456] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.2832 (19456)
[  385.237177][T19456] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  385.240370][T19456] BTRFS info (device loop7): using crc32c checksum algorithm
[  385.339480][   T10] usb 4-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[  385.344598][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  385.350699][   T10] usb 4-1: Product: syz
[  385.352532][   T10] usb 4-1: Manufacturer: syz
[  385.353889][ T6112] BTRFS warning (device loop7): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  385.354640][   T10] usb 4-1: SerialNumber: syz
[  385.364408][T19456] BTRFS error (device loop7): failed to load root extent
[  385.366900][T19456] BTRFS warning (device loop7): try to load backup roots slot 1
[  385.373857][ T6112] BTRFS warning (device loop7): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  385.387875][T19456] BTRFS warning (device loop7): couldn't read tree root
[  385.390440][T19456] BTRFS warning (device loop7): try to load backup roots slot 2
[  385.395859][ T6112] BTRFS error (device loop7): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  385.424713][   T10] usb 4-1: config 0 descriptor??
[  385.457526][T19456] BTRFS warning (device loop7): couldn't read tree root
[  385.459771][T19456] BTRFS warning (device loop7): try to load backup roots slot 3
[  385.481486][T19456] BTRFS info (device loop7): rebuilding free space tree
[  385.520463][T19456] BTRFS info (device loop7): checking UUID tree
[  385.523587][T19456] BTRFS info (device loop7): enabling ssd optimizations
[  385.526380][T19456] BTRFS info (device loop7): turning on async discard
[  385.529374][T19456] BTRFS info (device loop7): enabling free space tree
[  385.532036][T19456] BTRFS info (device loop7): force clearing of disk cache
[  385.534526][T19456] BTRFS info (device loop7): enabling auto defrag
[  385.536496][T19456] BTRFS info (device loop7): trying to use backup root at mount time
[  385.539054][T19456] BTRFS info (device loop7): use zstd compression, level 3
[  385.695710][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  385.706917][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  385.724437][   T12] bond0 (unregistering): Released all slaves
[  386.236836][T12506] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  386.394925][ T5618] Bluetooth: hci0: command tx timeout
[  386.760390][T19556] input: syz1 as /devices/virtual/input/input30
[  387.018685][   T10] usb 4-1: f81604_read: reg: 200f failed: -EPROTO
[  387.024973][T19334] bridge0: port 1(bridge_slave_0) entered blocking state
[  387.027441][   T10] usb 4-1: USB disconnect, device number 57
[  387.039288][T19334] bridge0: port 1(bridge_slave_0) entered disabled state
[  387.045328][T19334] bridge_slave_0: entered allmulticast mode
[  387.048748][T19334] bridge_slave_0: entered promiscuous mode
[  387.109656][ T5356] 8021q: adding VLAN 0 to HW filter on device eth17
[  387.129869][   T10] usb 4-1: f81604_read: reg: 100f failed: -ENODEV
[  387.177528][T19334] bridge0: port 2(bridge_slave_1) entered blocking state
[  387.182865][T19334] bridge0: port 2(bridge_slave_1) entered disabled state
[  387.186317][T19334] bridge_slave_1: entered allmulticast mode
[  387.190431][T19334] bridge_slave_1: entered promiscuous mode
[  387.204601][   T12] hsr_slave_0: left promiscuous mode
[  387.208391][   T12] hsr_slave_1: left promiscuous mode
[  387.211392][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  387.214447][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  387.219288][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  387.222331][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  387.241477][   T12] veth1_macvtap: left promiscuous mode
[  387.244056][   T12] veth1_vlan: left promiscuous mode
[  387.246461][   T12] veth0_vlan: left promiscuous mode
[  387.552906][   T12] team0 (unregistering): Port device team_slave_1 removed
[  387.574535][   T12] team0 (unregistering): Port device team_slave_0 removed
[  387.645689][T19582] loop3: detected capacity change from 0 to 8
[  387.652060][T19582] SQUASHFS error: zlib decompression failed, data probably corrupt
[  387.659774][T19582] SQUASHFS error: Failed to read block 0x9b: -5
[  387.662030][T19582] SQUASHFS error: Unable to read metadata cache entry [99]
[  387.665813][T19582] SQUASHFS error: Unable to read inode 0x127
[  387.773812][ T5356] usb 4-1: f81604_read: reg: 200f failed: -ENODEV
[  387.776924][ T5356] usb 4-1: f81604_read: reg: 200f failed: -ENODEV
[  387.853800][   T10] usb 4-1: f81604_read: reg: 200f failed: -ENODEV
[  387.938873][T19334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  387.979486][T19334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  388.122649][T19334] team0: Port device team_slave_0 added
[  388.211558][T19334] team0: Port device team_slave_1 added
[  388.261950][T19334] batman_adv: batadv0: Adding interface: batadv_slave_0
[  388.267207][T19334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  388.306245][T19334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  388.332339][T19334] batman_adv: batadv0: Adding interface: batadv_slave_1
[  388.335127][T19334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  388.368581][T19334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  388.420643][T19672] loop7: detected capacity change from 0 to 128
[  388.477847][T19672] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  388.498573][T19672] ext4 filesystem being mounted at /403/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  388.515442][T19334] hsr_slave_0: entered promiscuous mode
[  388.517973][T19334] hsr_slave_1: entered promiscuous mode
[  388.521198][T19334] debugfs: 'hsr0' already exists in 'hsr'
[  388.523192][T19334] Cannot create hsr debugfs directory
[  388.594371][ T5618] Bluetooth: hci0: command tx timeout
[  388.608864][T12506] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  388.631228][ T5356] 8021q: adding VLAN 0 to HW filter on device eth18
[  389.124624][ T5356] 8021q: adding VLAN 0 to HW filter on device eth19
[  389.283052][T19830] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2847'.
[  389.395338][T19334] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  389.423881][T19334] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  389.433558][T19334] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  389.473553][T19334] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  389.485100][T19334] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  389.497370][T19334] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  389.504140][T19334] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  389.531300][T19334] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  389.535861][ T5077] usb 8-1: new high-speed USB device number 29 using dummy_hcd
[  389.579342][ T5356] 8021q: adding VLAN 0 to HW filter on device eth20
[  389.688735][T19334] 8021q: adding VLAN 0 to HW filter on device bond0
[  389.707248][T19334] 8021q: adding VLAN 0 to HW filter on device team0
[  389.725640][ T6112] bridge0: port 1(bridge_slave_0) entered blocking state
[  389.727989][ T6112] bridge0: port 1(bridge_slave_0) entered forwarding state
[  389.732507][ T5077] usb 8-1: Using ep0 maxpacket: 32
[  389.746681][ T5077] usb 8-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7
[  389.750507][ T6112] bridge0: port 2(bridge_slave_1) entered blocking state
[  389.752731][ T6112] bridge0: port 2(bridge_slave_1) entered forwarding state
[  389.756244][ T5077] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  389.770423][ T5077] usb 8-1: config 0 descriptor??
[  389.793676][ T5077] gspca_main: sq930x-2.14.0 probing 041e:403c
[  389.797847][T19334] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  390.136023][ T5669] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[  390.151288][T19334] 8021q: adding VLAN 0 to HW filter on device batadv0
[  390.299516][ T5669] usb 4-1: Using ep0 maxpacket: 16
[  390.305358][ T5669] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  390.313041][ T5669] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  390.333371][ T5669] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  390.340743][ T5669] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  390.347954][ T5669] usb 4-1: Product: syz
[  390.349482][ T5669] usb 4-1: Manufacturer: syz
[  390.352820][ T5669] usb 4-1: SerialNumber: syz
[  390.365563][ T5669] usb 4-1: config 0 descriptor??
[  390.376848][T19334] veth0_vlan: entered promiscuous mode
[  390.383868][ T5669] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  390.387558][ T5669] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class)
[  390.403465][T19334] veth1_vlan: entered promiscuous mode
[  390.465862][T19334] veth0_macvtap: entered promiscuous mode
[  390.470900][T19334] veth1_macvtap: entered promiscuous mode
[  390.480876][ T5077] gspca_sq930x: reg_w 0305 fd00 failed -71
[  390.483314][T19334] batman_adv: batadv0: Interface activated: batadv_slave_0
[  390.486425][ T5077] sq930x 8-1:0.0: probe with driver sq930x failed with error -71
[  390.497051][T19334] batman_adv: batadv0: Interface activated: batadv_slave_1
[  390.504810][ T5077] usb 8-1: USB disconnect, device number 29
[  390.519577][ T5677] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  390.523273][ T5677] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  390.537333][ T5677] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  390.543073][ T5677] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  390.781050][ T5924] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  390.787362][ T5924] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  390.818270][ T5618] Bluetooth: hci0: command tx timeout
[  390.827566][ T5924] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  390.831410][ T5924] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  391.031722][ T5669] em28xx 4-1:0.0: chip ID is em2884
[  391.049175][   T33] audit: type=1326 audit(1779795946.481:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19936 comm="syz.8.2856" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fede4f9ce59 code=0x7ffc0000
[  391.064230][   T33] audit: type=1326 audit(1779795946.491:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19936 comm="syz.8.2856" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fede4f9ce59 code=0x7ffc0000
[  391.084684][   T33] audit: type=1326 audit(1779795946.491:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19936 comm="syz.8.2856" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fede4f9ce59 code=0x7ffc0000
[  391.096195][   T33] audit: type=1326 audit(1779795946.491:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19936 comm="syz.8.2856" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fede4f9ce59 code=0x7ffc0000
[  391.123031][   T33] audit: type=1326 audit(1779795946.491:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19936 comm="syz.8.2856" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fede4f9ce59 code=0x7ffc0000
[  391.151763][   T33] audit: type=1326 audit(1779795946.491:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19936 comm="syz.8.2856" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fede4f9ce59 code=0x7ffc0000
[  391.178445][   T33] audit: type=1326 audit(1779795946.491:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19936 comm="syz.8.2856" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fede4f9ce59 code=0x7ffc0000
[  391.195233][   T33] audit: type=1326 audit(1779795946.491:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19936 comm="syz.8.2856" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fede4f9ce59 code=0x7ffc0000
[  391.212399][   T33] audit: type=1326 audit(1779795946.491:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19936 comm="syz.8.2856" exe="/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fede4f9ce59 code=0x7ffc0000
[  391.235190][   T33] audit: type=1326 audit(1779795946.491:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19936 comm="syz.8.2856" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fede4f9ce59 code=0x7ffc0000
[  391.253644][ T5669] em28xx 4-1:0.0: Config register raw data: 0xfffffffb
[  391.264221][ T5669] em28xx 4-1:0.0: AC97 chip type couldn't be determined
[  391.273452][ T5669] em28xx 4-1:0.0: No AC97 audio processor
[  391.295718][ T5669] usb 4-1: USB disconnect, device number 58
[  391.302538][ T5669] em28xx 4-1:0.0: Disconnecting em28xx
[  391.371526][ T5669] em28xx 4-1:0.0: Freeing device
[  391.525507][T19977] loop7: detected capacity change from 0 to 256
[  391.862337][T20007] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2865'.
[  391.897186][T20007] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2865'.
[  392.269951][ T5678] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  392.296641][T20015] dvmrp1: entered allmulticast mode
[  392.299714][T20015] dvmrp1: left allmulticast mode
[  392.430012][ T5678] usb 9-1: Using ep0 maxpacket: 16
[  392.434552][ T5678] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  392.439283][ T5678] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  392.453132][ T5678] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  392.459173][ T5678] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  392.471607][ T5678] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  392.490586][ T5678] usb 9-1: config 0 descriptor??
[  392.937017][T20028] loop7: detected capacity change from 0 to 32768
[  392.967423][ T5678] microsoft 0003:045E:07DA.001E: unbalanced collection at end of report description
[  392.967810][T20028] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  392.979959][ T5678] microsoft 0003:045E:07DA.001E: parse failed
[  392.987619][ T5678] microsoft 0003:045E:07DA.001E: probe with driver microsoft failed with error -22
[  392.999419][T20028] XFS (loop7): Ending clean mount
[  393.005426][T20028] XFS (loop7): Quotacheck needed: Please wait.
[  393.039804][ T5618] Bluetooth: hci0: command tx timeout
[  393.095673][T20028] XFS (loop7): Quotacheck: Done.
[  393.172065][T13030] usb 9-1: USB disconnect, device number 2
[  393.693225][T12506] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  394.555245][T20104] loop3: detected capacity change from 0 to 4096
[  394.563333][T20104] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512).
[  394.594900][T20104] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  394.602900][T20104] ntfs3(loop3): Failed to load $Extend (-22).
[  394.609916][T20104] ntfs3(loop3): Failed to initialize $Extend.
[  394.636918][T20112] program syz.7.2886 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  395.081094][T20138] loop7: detected capacity change from 0 to 1024
[  395.109580][T20138] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  395.142500][T20138] EXT4-fs error (device loop7): ext4_map_blocks:833: inode #3: block 8: comm syz.7.2893: lblock 8 mapped to illegal pblock 8 (length 1)
[  395.153966][T20138] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  395.154232][    C0] EXT4-fs (loop7): error count since last fsck: 1
[  395.159802][    C0] EXT4-fs (loop7): initial error at time 1779795950: ext4_map_blocks:833: inode 3: block 8
[  395.163775][    C0] EXT4-fs (loop7): last error at time 1779795950: ext4_map_blocks:833: inode 3: block 8
[  395.173386][T20153] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2897'.
[  395.180653][T20138] EXT4-fs error (device loop7): ext4_acquire_dquot:7034: comm syz.7.2893: Failed to acquire dquot type 0
[  395.196388][T20138] loop7: lost filesystem error report for type 5 error -117
[  395.196730][T20138] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #3: block 8: comm syz.7.2893: lblock 8 mapped to illegal pblock 8 (length 1)
[  395.212728][T20138] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  395.213030][T20138] EXT4-fs error (device loop7): ext4_acquire_dquot:7034: comm syz.7.2893: Failed to acquire dquot type 0
[  395.228724][T20138] loop7: lost filesystem error report for type 5 error -117
[  395.230477][T20138] EXT4-fs error (device loop7): ext4_free_blocks:6718: comm syz.7.2893: Freeing blocks not in datazone - block = 0, count = 4096
[  395.249451][T20138] loop7: lost filesystem error report for type 5 error -117
[  395.265149][T20138] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #3: block 8: comm syz.7.2893: lblock 8 mapped to illegal pblock 8 (length 1)
[  395.344311][T20138] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  395.382444][T20138] EXT4-fs error (device loop7): ext4_acquire_dquot:7034: comm syz.7.2893: Failed to acquire dquot type 0
[  395.396494][T20138] loop7: lost filesystem error report for type 5 error -117
[  395.401376][T20138] EXT4-fs (loop7): 1 orphan inode deleted
[  395.406838][T20170] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2901'.
[  395.419011][T20138] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  395.480660][T20138] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #3: block 8: comm syz.7.2893: lblock 8 mapped to illegal pblock 8 (length 1)
[  395.500619][T20138] EXT4-fs error (device loop7): ext4_acquire_dquot:7034: comm syz.7.2893: Failed to acquire dquot type 0
[  395.555529][T12506] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  395.608492][ T5678] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  395.784886][ T5678] usb 9-1: Using ep0 maxpacket: 16
[  395.789167][ T5678] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  395.793417][ T5678] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[  395.799346][ T5678] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  395.802960][ T5678] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  395.806364][ T5678] usb 9-1: Product: syz
[  395.808098][ T5678] usb 9-1: Manufacturer: syz
[  395.809937][ T5678] usb 9-1: SerialNumber: syz
[  395.828710][ T5678] usb 9-1: 0:2 : does not exist
[  395.909189][T20190] loop7: detected capacity change from 0 to 32768
[  395.936680][T20190] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  395.961105][T20190] XFS (loop7): Ending clean mount
[  396.013639][T12506] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  396.066925][T20193] loop3: detected capacity change from 0 to 32768
[  396.090376][T20193] 
[  396.090376][T20193]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  396.090376][T20193] 
[  396.133757][ T5678] usb 9-1: 5:0: failed to get current value for ch 0 (-22)
[  396.142240][T20193] ialloc: diAlloc returned -5!
[  396.241672][ T6378] 
[  396.241672][ T6378]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  396.241672][ T6378] 
[  396.260749][ T6378] 
[  396.260749][ T6378]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  396.260749][ T6378] 
[  396.261229][ T5678] usb 9-1: USB disconnect, device number 3
[  396.446683][T20228] loop7: detected capacity change from 0 to 256
[  396.454450][T20228] exfat: Deprecated parameter 'utf8'
[  396.504843][T20228] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x5f26ded4, utbl_chksum : 0xe619d30d)
[  396.570383][T20241] bridge1: entered promiscuous mode
[  396.572106][T20241] bridge1: entered allmulticast mode
[  396.587662][T20241] team0: Port device bridge1 added
[  396.589436][T20246] netlink: 'syz.7.2912': attribute type 5 has an invalid length.
[  396.721799][T20257] netlink: 'syz.3.2915': attribute type 12 has an invalid length.
[  396.953951][T20276] mac80211_hwsim hwsim19 wlan0: entered promiscuous mode
[  396.960629][T20276] mac80211_hwsim hwsim19 wlan0: entered allmulticast mode
[  397.134137][T20293] loop8: detected capacity change from 0 to 1024
[  397.174715][T20293] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  397.524960][T20318] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  397.528599][T20295] loop7: detected capacity change from 0 to 32768
[  397.569585][T20295] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  397.695706][T12506] ocfs2: Unmounting device (7,7) on (node local)
[  397.829300][T20329] loop7: detected capacity change from 0 to 256
[  397.844954][T20329] FAT-fs (loop7): Directory bread(block 64) failed
[  397.854680][T20329] FAT-fs (loop7): Directory bread(block 65) failed
[  397.858293][T20329] FAT-fs (loop7): Directory bread(block 66) failed
[  397.861037][T20329] FAT-fs (loop7): Directory bread(block 67) failed
[  397.863380][T20329] FAT-fs (loop7): Directory bread(block 68) failed
[  397.865587][T20329] FAT-fs (loop7): Directory bread(block 69) failed
[  397.867825][T20329] FAT-fs (loop7): Directory bread(block 70) failed
[  397.871079][T20329] FAT-fs (loop7): Directory bread(block 71) failed
[  397.873867][T20329] FAT-fs (loop7): Directory bread(block 72) failed
[  397.876404][T20329] FAT-fs (loop7): Directory bread(block 73) failed
[  397.884205][T20329] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  398.476656][T20343] loop8: detected capacity change from 0 to 256
[  398.750557][T20354] loop8: detected capacity change from 0 to 256
[  398.763619][T20354] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  398.980165][T20354] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  399.611101][ T5077] usb 8-1: new high-speed USB device number 30 using dummy_hcd
[  399.769875][ T5077] usb 8-1: Using ep0 maxpacket: 32
[  399.777038][ T5077] usb 8-1: unable to get BOS descriptor or descriptor too short
[  399.782128][ T5077] usb 8-1: config index 0 descriptor too short (expected 16989, got 10)
[  399.785118][ T5077] usb 8-1: config 94 has too many interfaces: 206, using maximum allowed: 32
[  399.788514][ T5077] usb 8-1: config 94 descriptor has 1 excess byte, ignoring
[  399.793782][ T5077] usb 8-1: config 94 has 0 interfaces, different from the descriptor's value: 206
[  399.799830][ T5077] usb 8-1: New USB device found, idVendor=1e35, idProduct=000a, bcdDevice= 0.40
[  399.805540][ T5077] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  399.809276][ T5077] usb 8-1: Product: syz
[  399.811153][ T5077] usb 8-1: Manufacturer: syz
[  399.813710][ T5077] usb 8-1: SerialNumber: syz
[  400.040834][  T798] usb 8-1: USB disconnect, device number 30
[  400.208331][ T5077] usb 4-1: new high-speed USB device number 59 using dummy_hcd
[  400.269815][T20414] xt_hashlimit: size too large, truncated to 1048576
[  400.378887][ T5077] usb 4-1: Using ep0 maxpacket: 16
[  400.387354][ T5077] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00
[  400.391242][ T5077] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  400.404004][ T5077] usb 4-1: config 0 descriptor??
[  400.412529][ T5077] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected
[  400.465273][T20422] netlink: 'syz.8.2952': attribute type 12 has an invalid length.
[  400.629807][ T5077] usb 4-1: Detected FT232A
[  400.645314][ T5077] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  400.685235][ T5077] usb 4-1: USB disconnect, device number 59
[  400.704947][ T5077] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  400.712110][ T5077] ftdi_sio 4-1:0.0: device disconnected
[  400.768839][T20451] loop7: detected capacity change from 0 to 512
[  400.773637][T20451] EXT4-fs (loop7): Test dummy encryption mode enabled
[  400.788145][T20451] EXT4-fs error (device loop7): ext4_orphan_get:1397: inode #15: comm syz.7.2956: inode has both inline data and extents flags
[  400.793100][T20451] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  400.793301][T20451] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.2956: couldn't read orphan inode 15 (err -117)
[  400.796562][    C1] EXT4-fs (loop7): error count since last fsck: 1
[  400.796575][    C1] EXT4-fs (loop7): initial error at time 1779795955: ext4_orphan_get:1397: inode 15
[  400.796590][    C1] EXT4-fs (loop7): last error at time 1779795955: ext4_orphan_get:1397: inode 15
[  400.817277][   T24] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  400.824712][T20451] loop7: lost filesystem error report for type 5 error -117
[  400.828269][T20451] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  400.954252][T12506] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  401.012052][   T24] usb 9-1: Using ep0 maxpacket: 32
[  401.016532][   T24] usb 9-1: config 0 has an invalid interface number: 51 but max is 0
[  401.024092][   T24] usb 9-1: config 0 has no interface number 0
[  401.034775][   T24] usb 9-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  401.038368][   T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  401.041929][   T24] usb 9-1: Product: syz
[  401.044349][   T24] usb 9-1: Manufacturer: syz
[  401.046318][   T24] usb 9-1: SerialNumber: syz
[  401.055022][   T24] usb 9-1: config 0 descriptor??
[  401.063549][   T24] quatech2 9-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  401.280452][   T24] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  401.295809][   T24] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  401.326872][T20480] loop3: detected capacity change from 0 to 4096
[  401.339394][T20480] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  401.380224][T20480] ntfs3(loop3): ino=19, mi_enum_attr
[  401.382191][T20480] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  401.382245][T20496] loop7: detected capacity change from 0 to 8
[  401.400483][T20496] SQUASHFS error: zlib decompression failed, data probably corrupt
[  401.407387][T20496] SQUASHFS error: Failed to read block 0x9b: -5
[  401.416460][T20496] SQUASHFS error: Unable to read metadata cache entry [99]
[  401.425080][T20496] SQUASHFS error: Unable to read inode 0x104
[  401.461483][T20480] ntfs3(loop3): ino=21, "file1" failed to extend initialized size to 8000c61.
[  401.495688][    C1] quatech-serial ttyUSB0: qt2_process_read_urb - port change to invalid port: 38
[  401.593463][T20511] loop7: detected capacity change from 0 to 128
[  401.617815][T20511] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  401.632710][T20511] ext4 filesystem being mounted at /451/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  401.690156][T12506] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  401.719059][    C1] usb 9-1: qt2_read_bulk_callback - non-zero urb status: -71
[  401.723190][  T798] usb 9-1: USB disconnect, device number 4
[  401.752193][  T798] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  401.823966][  T798] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  401.842919][  T798] quatech2 9-1:0.51: device disconnected
[  401.911399][T20546] loop7: detected capacity change from 0 to 512
[  401.962263][T20546] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  401.981508][T20546] ext4 filesystem being mounted at /453/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  402.044448][T12506] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  402.180134][T20570] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  402.441018][   T31] usb 8-1: new full-speed USB device number 31 using dummy_hcd
[  402.453777][ T6378] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  402.700592][T20600] set_capacity_and_notify: 1 callbacks suppressed
[  402.700605][T20600] loop3: detected capacity change from 0 to 256
[  403.057644][T20611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  403.066083][T20611] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  403.559381][ T1379] ieee802154 phy0 wpan0: encryption failed: -22
[  403.561440][ T1379] ieee802154 phy1 wpan1: encryption failed: -22
[  403.565019][ T1379] ------------[ cut here ]------------
[  403.570110][ T1379] !skb_transport_header_was_set(skb)
[  403.570120][ T1379] WARNING: ./include/linux/skbuff.h:3242 at lowpan_xmit+0xdfe/0x1420, CPU#0: aoe_tx0/1379
[  403.575299][ T1379] Modules linked in:
[  403.580099][ T1379] CPU: 0 UID: 0 PID: 1379 Comm: aoe_tx0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  403.584000][ T1379] Tainted: [L]=SOFTLOCKUP
[  403.585502][ T1379] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  403.588631][ T1379] RIP: 0010:lowpan_xmit+0xdfe/0x1420
[  403.590302][ T1379] Code: 3c 02 00 00 49 89 c6 e8 50 34 65 f6 4c 8b 7c 24 10 e9 74 f5 ff ff e8 41 34 65 f6 90 0f 0b 90 e9 59 f6 ff ff e8 33 34 65 f6 90 <0f> 0b 90 e9 24 f7 ff ff e8 25 34 65 f6 e9 f5 fb ff ff 90 0f 0b 90
[  403.596704][ T1379] RSP: 0018:ffffc90008977740 EFLAGS: 00010293
[  403.599073][ T1379] RAX: ffffffff8b6081cd RBX: ffff88810a563680 RCX: ffff88810c203b00
[  403.601726][ T1379] RDX: 0000000000000000 RSI: 000000000000ffff RDI: 000000000000ffff
[  403.604672][ T1379] RBP: ffffc90008977910 R08: 0000000000000003 R09: 0000000000000000
[  403.607761][ T1379] R10: ffffc900089775f0 R11: fffff5200112eec4 R12: ffffc90008977820
[  403.610455][ T1379] R13: 0000000000000020 R14: dffffc0000000000 R15: 000000000000ffff
[  403.613108][ T1379] FS:  0000000000000000(0000) GS:ffff88818dc87000(0000) knlGS:0000000000000000
[  403.616261][ T1379] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  403.618396][ T1379] CR2: 00007fdb188c993a CR3: 000000016d204000 CR4: 00000000000006f0
[  403.620856][ T1379] Call Trace:
[  403.621919][ T1379]  <TASK>
[  403.622869][ T1379]  ? __pfx_lowpan_xmit+0x10/0x10
[  403.624651][ T1379]  ? lockdep_unlock+0x5d/0xd0
[  403.626438][ T1379]  ? __lock_acquire+0x146e/0x2cf0
[  403.628333][ T1379]  ? lockdep_hardirqs_on+0x7a/0x110
[  403.630238][ T1379]  dev_hard_start_xmit+0x2cd/0x830
[  403.632088][ T1379]  __dev_queue_xmit+0x14d9/0x3950
[  403.633811][ T1379]  ? __dev_queue_xmit+0x2b6/0x3950
[  403.635577][ T1379]  ? __lock_acquire+0x6b5/0x2cf0
[  403.637517][ T1379]  ? __pfx___dev_queue_xmit+0x10/0x10
[  403.639189][ T1379]  ? do_raw_spin_lock+0x12b/0x2f0
[  403.640793][ T1379]  ? _raw_spin_unlock_irq+0x23/0x50
[  403.642397][ T1379]  tx+0x6b/0x190
[  403.643523][ T1379]  ? __pfx_tx+0x10/0x10
[  403.645015][ T1379]  kthread+0x1e0/0x3f0
[  403.646430][ T1379]  ? lock_acquire+0x106/0x350
[  403.647938][ T1379]  ? __pfx_kthread+0x10/0x10
[  403.649428][ T1379]  ? __pfx_default_wake_function+0x10/0x10
[  403.651598][ T1379]  ? __kthread_parkme+0x7a/0x1f0
[  403.653260][ T1379]  kthread+0x389/0x470
[  403.654869][ T1379]  ? __pfx_kthread+0x10/0x10
[  403.656624][ T1379]  ? __pfx_kthread+0x10/0x10
[  403.658250][ T1379]  ret_from_fork+0x514/0xb70
[  403.660166][ T1379]  ? __pfx_ret_from_fork+0x10/0x10
[  403.662162][ T1379]  ? __switch_to+0xc79/0x1410
[  403.663990][ T1379]  ? __pfx_kthread+0x10/0x10
[  403.665798][ T1379]  ret_from_fork_asm+0x1a/0x30
[  403.667677][ T1379]  </TASK>
[  403.668925][ T1379] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  403.671685][ T1379] CPU: 0 UID: 0 PID: 1379 Comm: aoe_tx0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  403.675704][ T1379] Tainted: [L]=SOFTLOCKUP
[  403.677454][ T1379] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  403.681331][ T1379] Call Trace:
[  403.682641][ T1379]  <TASK>
[  403.683892][ T1379]  vpanic+0x56c/0xa60
[  403.685479][ T1379]  ? __pfx__printk+0x10/0x10
[  403.687287][ T1379]  ? __pfx_vpanic+0x10/0x10
[  403.689100][ T1379]  ? is_bpf_text_address+0x292/0x2b0
[  403.691204][ T1379]  ? is_bpf_text_address+0x26/0x2b0
[  403.693295][ T1379]  panic+0xc5/0xd0
[  403.694797][ T1379]  ? __pfx_panic+0x10/0x10
[  403.696579][ T1379]  ? ret_from_fork_asm+0x1a/0x30
[  403.698555][ T1379]  __warn+0x315/0x4c0
[  403.700214][ T1379]  ? lowpan_xmit+0xdfe/0x1420
[  403.702067][ T1379]  ? lowpan_xmit+0xdfe/0x1420
[  403.703883][ T1379]  __report_bug+0x29a/0x540
[  403.705609][ T1379]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  403.707987][ T1379]  ? lowpan_xmit+0xdfe/0x1420
[  403.709784][ T1379]  ? __pfx___report_bug+0x10/0x10
[  403.711753][ T1379]  ? stack_trace_save+0xa9/0x100
[  403.713690][ T1379]  ? __pfx_stack_trace_save+0x10/0x10
[  403.715811][ T1379]  ? lowpan_xmit+0xdfe/0x1420
[  403.717675][ T1379]  report_bug+0x16a/0x220
[  403.719378][ T1379]  ? lowpan_xmit+0xdfe/0x1420
[  403.721203][ T1379]  ? lowpan_xmit+0xe00/0x1420
[  403.723036][ T1379]  handle_bug+0x9c/0x200
[  403.724656][ T1379]  exc_invalid_op+0x1a/0x50
[  403.726456][ T1379]  asm_exc_invalid_op+0x1a/0x20
[  403.728354][ T1379] RIP: 0010:lowpan_xmit+0xdfe/0x1420
[  403.730412][ T1379] Code: 3c 02 00 00 49 89 c6 e8 50 34 65 f6 4c 8b 7c 24 10 e9 74 f5 ff ff e8 41 34 65 f6 90 0f 0b 90 e9 59 f6 ff ff e8 33 34 65 f6 90 <0f> 0b 90 e9 24 f7 ff ff e8 25 34 65 f6 e9 f5 fb ff ff 90 0f 0b 90
[  403.737851][ T1379] RSP: 0018:ffffc90008977740 EFLAGS: 00010293
[  403.740214][ T1379] RAX: ffffffff8b6081cd RBX: ffff88810a563680 RCX: ffff88810c203b00
[  403.743282][ T1379] RDX: 0000000000000000 RSI: 000000000000ffff RDI: 000000000000ffff
[  403.746369][ T1379] RBP: ffffc90008977910 R08: 0000000000000003 R09: 0000000000000000
[  403.749486][ T1379] R10: ffffc900089775f0 R11: fffff5200112eec4 R12: ffffc90008977820
[  403.752644][ T1379] R13: 0000000000000020 R14: dffffc0000000000 R15: 000000000000ffff
[  403.755756][ T1379]  ? lowpan_xmit+0xdfd/0x1420
[  403.757636][ T1379]  ? __pfx_lowpan_xmit+0x10/0x10
[  403.759611][ T1379]  ? lockdep_unlock+0x5d/0xd0
[  403.761485][ T1379]  ? __lock_acquire+0x146e/0x2cf0
[  403.763490][ T1379]  ? lockdep_hardirqs_on+0x7a/0x110
[  403.765511][ T1379]  dev_hard_start_xmit+0x2cd/0x830
[  403.767476][ T1379]  __dev_queue_xmit+0x14d9/0x3950
[  403.769413][ T1379]  ? __dev_queue_xmit+0x2b6/0x3950
[  403.771411][ T1379]  ? __lock_acquire+0x6b5/0x2cf0
[  403.773378][ T1379]  ? __pfx___dev_queue_xmit+0x10/0x10
[  403.775477][ T1379]  ? do_raw_spin_lock+0x12b/0x2f0
[  403.777419][ T1379]  ? _raw_spin_unlock_irq+0x23/0x50
[  403.779358][ T1379]  tx+0x6b/0x190
[  403.780784][ T1379]  ? __pfx_tx+0x10/0x10
[  403.782434][ T1379]  kthread+0x1e0/0x3f0
[  403.784009][ T1379]  ? lock_acquire+0x106/0x350
[  403.785610][ T1379]  ? __pfx_kthread+0x10/0x10
[  403.787395][ T1379]  ? __pfx_default_wake_function+0x10/0x10
[  403.789506][ T1379]  ? __kthread_parkme+0x7a/0x1f0
[  403.791183][ T1379]  kthread+0x389/0x470
[  403.792414][ T1379]  ? __pfx_kthread+0x10/0x10
[  403.793942][ T1379]  ? __pfx_kthread+0x10/0x10
[  403.795507][ T1379]  ret_from_fork+0x514/0xb70
[  403.797358][ T1379]  ? __pfx_ret_from_fork+0x10/0x10
[  403.799307][ T1379]  ? __switch_to+0xc79/0x1410
[  403.801159][ T1379]  ? __pfx_kthread+0x10/0x10
[  403.802900][ T1379]  ret_from_fork_asm+0x1a/0x30
[  403.804754][ T1379]  </TASK>
[  403.806663][ T1379] Kernel Offset: disabled
[  403.808335][ T1379] Rebooting in 86400 seconds..
