last executing test programs:

1m36.307822127s ago: executing program 1 (id=1015):
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000100)='./file1\x00', 0x13b)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$qrtrtun(r0, &(0x7f0000000600)="001a0000000000", 0x7)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40)

1m36.144070659s ago: executing program 1 (id=1020):
r0 = socket$netlink(0x10, 0x3, 0x4)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x4, 0x2ffffffff}, 0x2e)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
listen(r1, 0x2)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10)
close_range(r1, 0xffffffffffffffff, 0x0)

1m36.057527273s ago: executing program 1 (id=1022):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="fc010000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000200000200000089000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000440105"], 0x1fc}}, 0x0)

1m35.989816878s ago: executing program 1 (id=1023):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x6, [@typedef={0x4, 0x0, 0x0, 0x8, 0x2}, @func_proto, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x1}]}]}, {0x0, [0x0, 0x0, 0x0, 0x51]}}, 0x0, 0x4e}, 0x28)

1m35.928835975s ago: executing program 1 (id=1024):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080000000000000010000009400000007ad4160850000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000180), 0x1, 0x553, &(0x7f0000001080)="$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")
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYRES32=r0], 0x0, 0x8, 0x28, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180))

1m35.049725255s ago: executing program 1 (id=1031):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @remote}, @ipv4={'\x00', '\xff\xff', @loopback}, 0x2000000, 0x0, 0x8, 0x400, 0x0, 0x930310})
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x8f}, 0x1, 0x0, 0x40, 0x500, 0x4000209, 0x80810208})

1m20.061719149s ago: executing program 32 (id=1031):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @remote}, @ipv4={'\x00', '\xff\xff', @loopback}, 0x2000000, 0x0, 0x8, 0x400, 0x0, 0x930310})
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x8f}, 0x1, 0x0, 0x40, 0x500, 0x4000209, 0x80810208})

1.448825685s ago: executing program 3 (id=2044):
syz_init_net_socket$nfc_raw(0x27, 0x3, 0x416d)

1.364765822s ago: executing program 3 (id=2045):
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f00000004c0)='./file1\x00', 0x80, &(0x7f00000001c0)={[{@gid}, {@creator={'creator', 0x3d, "ff60f383"}}, {@creator={'creator', 0x3d, "7af940e2"}}, {@nls={'nls', 0x3d, 'maccenteuro'}}, {@nobarrier}, {@gid}, {@creator={'creator', 0x3d, "1362a84f"}}, {@force}]}, 0x1, 0x6f4, &(0x7f0000000680)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
getdents(r0, 0x0, 0x54)

1.278359752s ago: executing program 3 (id=2047):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x34, r0, 0x8de13c6b70ae92c3, 0x41403, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xed}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x28000800}, 0x0)

1.216879081s ago: executing program 0 (id=2049):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_GET_HW_INFO(r0, 0x3b8a, &(0x7f0000000380)={0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000})

1.150414397s ago: executing program 3 (id=2051):
r0 = syz_io_uring_setup(0x3e, &(0x7f0000000640)={0x0, 0xaddc, 0x10100, 0x1, 0x203}, &(0x7f0000000380)=<r1=>0x0, &(0x7f00000003c0)=<r2=>0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x80002101})
io_uring_enter(r0, 0xd81, 0x0, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r4)
sendmmsg$sock(r4, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24000055)

1.150239021s ago: executing program 0 (id=2052):
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
unshare(0x20040600)
readahead(r0, 0x401, 0x6c9)

1.096638387s ago: executing program 0 (id=2054):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x3, 0xfd, 0x3, 0x200}})
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x108, 0x300, 0x100, 0x1, 0x4000}})

1.042067212s ago: executing program 0 (id=2056):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0)
recvmmsg(r3, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x26e}], 0x3}}], 0x7, 0x0, 0x0)

552.050126ms ago: executing program 2 (id=2059):
syz_mount_image$exfat(&(0x7f0000000540), &(0x7f0000000140)='./file0\x00', 0x10, &(0x7f0000000300)=ANY=[@ANYBLOB='utf8,utf8,iocharset=cp862,iocharset=cp864,discard,errors=remount-ro,fmask=00000000000000000007777,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c757466382c616c6c6f775f7574696d653d3030303030303030303030303030303030312c616c6c6f775f7574696d653d30303030303030303030303030303030303030333737372c0002e5cc2c3640db32594e71db"], 0x1, 0x1526, &(0x7f0000000780)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0)
clock_gettime(0x0, &(0x7f00000002c0))

472.935994ms ago: executing program 2 (id=2060):
syz_mount_image$erofs(&(0x7f00000001c0), &(0x7f0000000400)='./file0\x00', 0x2000809, &(0x7f0000000000)=ANY=[], 0x0, 0x227, &(0x7f0000000440)="$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")

472.692399ms ago: executing program 2 (id=2061):
r0 = syz_open_dev$video(&(0x7f0000000180), 0x3ff, 0x2000)
ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000200)=0x1)

401.423067ms ago: executing program 2 (id=2062):
r0 = socket$nl_generic(0x11, 0x3, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0xfffd, 0x0, 0x0, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x22, 0x7c, 0x0, @loopback}}}}}, 0x0)
sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0)

400.978067ms ago: executing program 2 (id=2063):
r0 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f00000000c0)={0x0, 0x1, 0x1000000, 0x0, 0xffffffff, 0xfa000, 0x1a5e00})

369.207477ms ago: executing program 2 (id=2064):
syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000207d1e512d0000000000010902240001000000000904000001030002000921000000012205000905810300"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000c40)=ANY=[@ANYBLOB='\x00\x00W'], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x14a042)
syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x44200)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)

271.875429ms ago: executing program 3 (id=2065):
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map=0x1, 0x2e, 0x0, 0x0, &(0x7f00000000c0)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40)

271.35263ms ago: executing program 3 (id=2066):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000040)={[{@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0x1, 0x559a, &(0x7f0000005680)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="0bcb93b7b7c4", 0xf6d}], 0x1)
write$P9_RSTATu(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="750000007d020000005f000900020000000803000000040000000000000000005400080000000c000000050000402c2a2d2b5b214025295c5e5b1e00626c6b696f2e6266712e696f5f6d65726765645f72656375727369766500000001000001"], 0x75)
write$cgroup_subtree(r0, &(0x7f0000000000)={[{0x0, 'devices'}]}, 0x9)

62.306635ms ago: executing program 0 (id=2067):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000011c0)={'vxcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000001200)={0x1d, r1, 0x1000000000}, 0x18)
connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x4, {0x1, 0xff, 0x3}, 0xfe}, 0x18)
writev(r0, &(0x7f0000000240)=[{&(0x7f0000000000)='h', 0xfdef}], 0x1)

0s ago: executing program 0 (id=2068):
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x6, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
read$nci(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TCFLSH(r1, 0x80045438, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0)
ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0)
setsockopt$packet_int(r2, 0x107, 0x7, 0x0, 0x0)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xd)
ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x4, {0x965, 0x1, 0x3, 0x9, 0x0, 0x4}})
write$nci(0xffffffffffffffff, &(0x7f0000001740)=ANY=[@ANYBLOB="500105010c000000030300040905030072bad45e265e96dc1ce36dac131b1126baa0c7c8a90c3a824b51746b3992a9ef887b6a3f4ae94bac3b6ad3a447290631"], 0x83)
keyctl$read(0x2, 0x0, &(0x7f00000000c0)=""/4096, 0x1000)
execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000001900), &(0x7f0000000a80)={[&(0x7f00000011c0)='.^*%$\'-\\:\x00\xfb\x12#\x19\t\x99n\x1e\xef,NA\xf3)\xc8\xcd\x9bM\x83\x9d\v\x80\xcbU\xdcV\xe4\xff\xa8\xf19\xf0\x10|A\xef\x06\xe0\xee\xa6\x9fd\xeb\x88\xbb\x8d\x1cJ\xe9\xf2\xb5\n\xd8\x86\xdd\xcc\xee\xd9\xd4.\x12\x0e\x03\'a\xb2H\xf0\x06\xd7\xa2Obry\x05\xa44\x85\xefB\xcf\xcbhL%5\xe6C\xb5\x8c|\x1ax*K\x93\xca\\\xdfCSs\x10\x91G\x8b&\xc3P\xe5H\x91\xbc\xea\xbc[\xcb\xdb\xfd8{\xa4\xa1\x1c\xf8\xa4wWT\xa7#\xc5\v\x94~\x88]g\\x\x8b\x89\xf2\xca\xfc\xbf\xc3C\xb2\xeb\xf5\x88\x83\xaa`%\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00]fx\r\x9fRd\x13\xf4\xba;\xf2\xb6\x81\xcf\xcd\xff\x1bO\xca\xfdA\xd0\'t=\x02\xc6\xa2R\xac\xd2\xb2\x9f\xa8R\xe7@\xf7\xf6\x8a<$s\x90d\x826[A\xcdtU\xb0\xa6']})
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000180)={0xfb, 0x8, 0x0, "062383a78614d321eb086bebba55db0dfca05613826fffd4ee640ffed6cd68cb", 0x32314d54})
socket$inet_icmp_raw(0x2, 0x3, 0x1)

kernel console output (not intermixed with test programs):

 idVendor=1e71, idProduct=170e, bcdDevice= 0.00
[  146.697383][  T976] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.726581][  T976] usb 3-1: config 0 descriptor??
[  146.734733][ T8228] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))"
[  146.783375][ T5849] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  147.007283][ T8244] netlink: 27 bytes leftover after parsing attributes in process `syz.0.879'.
[  147.231176][  T976] nzxt-kraken2 0003:1E71:170E.0008: hidraw0: USB HID v0.00 Device [HID 1e71:170e] on usb-dummy_hcd.2-1/input0
[  147.395845][  T976] usb 3-1: USB disconnect, device number 14
[  147.584963][   T10] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  147.766954][   T10] usb 1-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36
[  147.770356][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  147.779751][   T10] usb 1-1: config 0 descriptor??
[  148.011948][   T10] kaweth 1-1:0.0: Firmware present in device.
[  148.205636][   T10] kaweth 1-1:0.0: Statistics collection: 0
[  148.208667][   T10] kaweth 1-1:0.0: Multicast filter limit: 0
[  148.211571][   T10] kaweth 1-1:0.0: MTU: 0
[  148.213671][   T10] kaweth 1-1:0.0: Read MAC address 00:00:00:00:00:00
[  148.357364][ T8275] loop2: detected capacity change from 0 to 128
[  148.543182][ T8283] netlink: 'syz.2.899': attribute type 11 has an invalid length.
[  148.607206][   T10] kaweth 1-1:0.0: Error setting SOFS wait
[  148.610928][   T10] kaweth 1-1:0.0: probe with driver kaweth failed with error -5
[  148.623816][   T10] usb 1-1: USB disconnect, device number 16
[  149.102584][ T8306] loop2: detected capacity change from 0 to 8
[  149.196169][ T8308] sch_tbf: burst 3 is lower than device lo mtu (81) !
[  149.246727][ T8312] netlink: 8 bytes leftover after parsing attributes in process `syz.1.912'.
[  149.551333][ T8341] loop1: detected capacity change from 0 to 512
[  149.560639][ T8341] EXT4-fs: Ignoring removed bh option
[  149.563269][ T8341] ext3: Unknown parameter 'noacl'
[  150.231744][ T8349] netlink: 52 bytes leftover after parsing attributes in process `syz.0.928'.
[  150.353869][ T8357] loop2: detected capacity change from 0 to 64
[  150.764927][   T10] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  150.931553][   T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  150.935382][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  150.938422][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  150.941425][   T10] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  150.948491][   T10] usb 2-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94
[  150.951655][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  150.968660][   T10] usb 2-1: config 0 descriptor??
[  151.196183][   T10] usb 2-1: USB disconnect, device number 12
[  152.951917][ T8400] netlink: 8 bytes leftover after parsing attributes in process `syz.2.948'.
[  153.428251][ T8410] net_ratelimit: 13 callbacks suppressed
[  153.428274][ T8410] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  153.433699][ T8410] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  154.100050][ T8427] syz.1.957 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  155.613962][ T8451] loop0: detected capacity change from 0 to 40427
[  155.626945][ T8451] F2FS-fs (loop0): invalid crc value
[  155.703536][ T8451] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  155.709838][ T8451] F2FS-fs (loop0): Start checkpoint disabled!
[  155.723541][ T8451] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  156.419523][ T8470] mac80211_hwsim hwsim3 `: renamed from wlan1 (while UP)
[  156.528349][ T8475] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  156.561859][ T8464] loop0: detected capacity change from 0 to 32768
[  157.109941][ T8505] loop2: detected capacity change from 0 to 128
[  157.516835][ T8505] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  157.524631][ T8505] ext4 filesystem being mounted at /301/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  157.601006][ T5854] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  157.950420][ T8519] loop1: detected capacity change from 0 to 1024
[  159.126245][ T8552] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1009'.
[  159.170608][ T8554] loop1: detected capacity change from 0 to 1024
[  159.181252][ T8554] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  159.203466][ T8554] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  159.206658][ T8554] EXT4-fs (loop1): orphan cleanup on readonly fs
[  159.211452][ T8554] EXT4-fs error (device loop1): __ext4_get_inode_loc:4861: comm syz.1.1007: Invalid inode table block 0 in block_group 0
[  159.223803][ T8554] EXT4-fs (loop1): Remounting filesystem read-only
[  159.229049][ T8554] Quota error (device loop1): write_blk: dquota write failed
[  159.232265][ T8554] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  159.239235][ T8554] EXT4-fs (loop1): 1 truncate cleaned up
[  159.261409][ T8554] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  159.281876][ T8554] EXT4-fs (loop1): shut down requested (1)
[  159.329412][ T5853] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  159.462265][ T8574] loop2: detected capacity change from 0 to 256
[  159.571743][ T8581] loop2: detected capacity change from 0 to 128
[  159.627101][   T33] audit: type=1800 audit(1755177663.249:57): pid=8581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1021" name="bus" dev="loop2" ino=1048600 res=0 errno=0
[  159.687376][ T8585] loop1: detected capacity change from 0 to 1024
[  159.708193][ T8585] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  159.712725][ T8575] loop0: detected capacity change from 0 to 32768
[  159.733850][ T8575] o2cb: This node has not been configured.
[  159.748405][ T8575] o2cb: Cluster check failed. Fix errors before retrying.
[  159.753814][ T8575] (syz.0.1018,8575,0):ocfs2_dlm_init:3354 ERROR: status = -22
[  159.758128][ T8575] (syz.0.1018,8575,0):ocfs2_mount_volume:1735 ERROR: status = -22
[  159.774723][ T8575] (syz.0.1018,8575,1):ocfs2_fill_super:1177 ERROR: status = -22
[  160.154986][  T976] usb 3-1: new full-speed USB device number 15 using dummy_hcd
[  160.205060][   T51] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  160.307272][  T976] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83
[  160.311769][  T976] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 203, changing to 4
[  160.316376][  T976] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 46388, setting to 1023
[  160.320986][  T976] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  160.324623][  T976] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  160.331489][  T976] usb 3-1: config 0 descriptor??
[  160.360544][   T51] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  160.364261][   T51] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  160.368412][   T51] usb 1-1: Product: syz
[  160.370448][   T51] usb 1-1: Manufacturer: syz
[  160.372451][   T51] usb 1-1: SerialNumber: syz
[  160.384111][   T51] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  160.422952][  T793] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  160.532879][ T5853] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  160.549656][  T976] ath6kl: Failed to submit usb control message: -71
[  160.554504][  T976] ath6kl: unable to send the bmi data to the device: -71
[  160.557252][  T976] ath6kl: Unable to send get target info: -71
[  160.571302][  T976] ath6kl: Failed to init ath6kl core: -71
[  160.574405][  T976] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71
[  160.581271][  T976] usb 3-1: USB disconnect, device number 15
[  161.034102][ T5905] usb 1-1: USB disconnect, device number 17
[  161.385016][  T976] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  161.494933][  T793] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[  161.500935][  T793] ath9k_htc: Failed to initialize the device
[  161.504716][ T5905] usb 1-1: ath9k_htc: USB layer deinitialized
[  161.546557][  T976] usb 3-1: Using ep0 maxpacket: 16
[  161.553375][  T976] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 7.00
[  161.565166][  T976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.568141][  T976] usb 3-1: Product: syz
[  161.569692][  T976] usb 3-1: Manufacturer: syz
[  161.577665][  T976] usb 3-1: SerialNumber: syz
[  161.587639][  T976] usb 3-1: config 0 descriptor??
[  161.599311][  T976] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected
[  161.603109][  T976] usb 3-1: Detected FT2232H
[  161.802008][  T976] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  161.806839][  T976] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  161.811205][  T976] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  161.820011][  T976] usb 3-1: USB disconnect, device number 16
[  161.827999][  T976] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  161.831931][  T976] ftdi_sio 3-1:0.0: device disconnected
[  162.073337][ T8619] loop0: detected capacity change from 0 to 128
[  163.209269][ T8636] loop2: detected capacity change from 0 to 32768
[  163.213031][ T8636] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1046 (8636)
[  163.246277][ T8636] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  163.250488][ T8636] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  163.260919][ T8636] BTRFS info (device loop2): using free-space-tree
[  163.439607][ T5854] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  164.683288][ T8678] loop0: detected capacity change from 0 to 32768
[  164.833431][ T8678] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow
[  164.833449][ T8678]   allowing incompatible features above 0.0: (unknown version)
[  164.833456][ T8678]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  164.845049][ T8678] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[  164.847565][ T8678] bcachefs (loop0): initializing new filesystem
[  164.859759][ T8678] bcachefs (loop0): going read-write
[  164.871844][ T8678] bcachefs (loop0): marking superblocks
[  164.881669][ T8678] bcachefs (loop0): initializing freespace
[  164.887443][ T8678] bcachefs (loop0): done initializing freespace
[  164.892473][ T8678] bcachefs (loop0): reading snapshots table
[  164.894382][ T8678] bcachefs (loop0): reading snapshots done
[  164.938279][ T8678] bcachefs (loop0): done starting filesystem
[  165.772439][ T8678] syz.0.1064 (8678) used greatest stack depth: 16424 bytes left
[  165.833133][ T5849] bcachefs (loop0): shutting down
[  165.836359][ T5849] bcachefs (loop0): going read-only
[  165.840748][ T5849] bcachefs (loop0): finished waiting for writes to stop
[  165.849260][ T5849] bcachefs (loop0): flushing journal and stopping allocators, journal seq 4
[  165.881837][ T5849] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 5
[  165.913415][ T5849] bcachefs (loop0): clean shutdown complete, journal seq 6
[  165.920153][ T5849] bcachefs (loop0): marking filesystem clean
[  166.005950][ T5849] bcachefs (loop0): shutdown complete
[  166.314402][ T8701] loop2: detected capacity change from 0 to 1024
[  166.327682][ T8701] EXT4-fs (loop2): orphan cleanup on readonly fs
[  166.335769][ T8701] EXT4-fs (loop2): 1 truncate cleaned up
[  166.342409][ T8701] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  166.365892][ T5854] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.544917][ T5905] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  167.704875][ T5905] usb 1-1: Using ep0 maxpacket: 32
[  167.708358][ T5905] usb 1-1: config index 0 descriptor too short (expected 35577, got 27)
[  167.711101][ T5905] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  167.713971][ T5905] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  167.717238][ T5905] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92
[  167.720113][ T5905] usb 1-1: config 1 has no interface number 0
[  167.722110][ T5905] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  167.725264][ T5905] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  167.735763][ T5905] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found
[  167.938343][ T5905] snd_usb_pod 1-1:1.1: set_interface failed
[  167.940982][ T5905] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected
[  167.943883][ T5905] snd_usb_pod 1-1:1.1: probe with driver snd_usb_pod failed with error -71
[  167.949520][ T5905] usb 1-1: USB disconnect, device number 18
[  168.519977][ T8727] openvswitch: netlink: VXLAN extension message has 3 unknown bytes.
[  168.762254][ T8741] tipc: Started in network mode
[  168.765177][ T8741] tipc: Node identity 8680618b482b, cluster identity 4711
[  168.776130][ T8741] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  168.779497][ T8741] syzkaller0: entered promiscuous mode
[  168.781247][ T8741] syzkaller0: entered allmulticast mode
[  168.791100][ T8741] tipc: Resetting bearer <eth:syzkaller0>
[  168.808397][ T8741] tipc: Disabling bearer <eth:syzkaller0>
[  168.828566][ T8743] loop0: detected capacity change from 0 to 4096
[  168.844361][ T8743] NILFS (loop0): mounting unchecked fs
[  168.848399][ T8743] NILFS (loop0): invalid segment: Checksum error in segment payload
[  168.851521][ T8743] NILFS (loop0): trying rollback from an earlier position
[  168.873681][ T8743] NILFS (loop0): recovery cancelled because norecovery option was specified for a read/write mount
[  169.506718][ T8771] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  169.509289][ T8771] IPv6: NLM_F_CREATE should be set when creating new route
[  169.709377][ T8766] loop0: detected capacity change from 0 to 40427
[  169.713703][ T8766] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  169.717964][ T8766] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  169.724038][ T8766] F2FS-fs (loop0): invalid crc value
[  169.759214][ T8766] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  169.767913][ T8766] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  169.770395][ T8766] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  169.779221][ T8766] fscrypt (loop0, inode 3): Error -61 getting encryption context
[  169.958761][   T33] audit: type=1326 audit(1755177673.579:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8776 comm="syz.0.1094" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f134018ebe9 code=0x7ffc0000
[  169.966087][   T33] audit: type=1326 audit(1755177673.579:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8776 comm="syz.0.1094" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f134018ebe9 code=0x7ffc0000
[  169.972991][   T33] audit: type=1326 audit(1755177673.579:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8776 comm="syz.0.1094" exe="/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f134018ebe9 code=0x7ffc0000
[  169.983626][   T33] audit: type=1326 audit(1755177673.589:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8776 comm="syz.0.1094" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f134018ebe9 code=0x7ffc0000
[  169.994948][   T33] audit: type=1326 audit(1755177673.589:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8776 comm="syz.0.1094" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f134018ebe9 code=0x7ffc0000
[  170.003607][   T33] audit: type=1326 audit(1755177673.589:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8776 comm="syz.0.1094" exe="/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f134018ebe9 code=0x7ffc0000
[  170.010398][   T33] audit: type=1326 audit(1755177673.609:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8778 comm="syz.0.1094" exe="/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f134018ebe9 code=0x7ffc0000
[  170.017165][   T33] audit: type=1326 audit(1755177673.609:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8776 comm="syz.0.1094" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f134018ebe9 code=0x7ffc0000
[  170.023832][   T33] audit: type=1326 audit(1755177673.609:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8776 comm="syz.0.1094" exe="/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f134018ebe9 code=0x7ffc0000
[  170.031097][   T33] audit: type=1326 audit(1755177673.609:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8776 comm="syz.0.1094" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f134018ebe9 code=0x7ffc0000
[  170.484955][  T976] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  170.637194][  T976] usb 3-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid wMaxPacketSize 0
[  170.641347][  T976] usb 3-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  170.648594][  T976] usb 3-1: config 0 interface 0 has no altsetting 0
[  170.651538][  T976] usb 3-1: New USB device found, idVendor=05ac, idProduct=025b, bcdDevice= 0.00
[  170.655439][  T976] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  170.663529][  T976] usb 3-1: config 0 descriptor??
[  170.879142][  T976] usb 3-1: string descriptor 0 read error: -71
[  170.881876][ T8788] loop0: detected capacity change from 0 to 512
[  170.888076][ T8788] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  170.894737][  T976] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input12
[  170.905887][ T5280] bcm5974 3-1:0.0: could not read from device
[  170.921304][ T8788] EXT4-fs (loop0): 1 truncate cleaned up
[  170.924082][ T8788] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  170.929101][ T5280] bcm5974 3-1:0.0: could not read from device
[  170.950353][  T976] usb 3-1: USB disconnect, device number 17
[  170.955608][ T8788] EXT4-fs error (device loop0): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.0.1099: bad entry in directory: inode out of bounds - offset=0, inode=184549378, rec_len=12, size=1024 fake=1
[  170.972230][ T5280] bcm5974 3-1:0.0: could not read from device
[  170.987385][ T7811] udevd[7811]: Unable to EVIOCGABS device "/dev/input/event3"
[  170.989855][ T7811] udevd[7811]: Unable to EVIOCGABS device "/dev/input/event3"
[  170.992459][ T7811] udevd[7811]: Unable to EVIOCGABS device "/dev/input/event3"
[  170.997952][ T7811] udevd[7811]: Unable to EVIOCGABS device "/dev/input/event3"
[  171.007318][ T5849] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  171.209296][ T8794] fuse: Bad value for 'fd'
[  171.300166][  T976] Process accounting resumed
[  172.125801][ T8799] tipc: Started in network mode
[  172.127440][ T8799] tipc: Node identity 66a9bf113f5a, cluster identity 4711
[  172.131785][ T8799] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  172.135741][ T8799] syzkaller0: entered promiscuous mode
[  172.137530][ T8799] syzkaller0: entered allmulticast mode
[  172.146024][ T8799] tipc: Resetting bearer <eth:syzkaller0>
[  172.161209][ T8799] tipc: Disabling bearer <eth:syzkaller0>
[  172.532838][ T8805] Driver unsupported XDP return value 0 on prog  (id 107) dev N/A, expect packet loss!
[  172.729285][ T8809] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1108'.
[  172.899537][ T8821] team_slave_0: left promiscuous mode
[  172.901808][ T8821] team_slave_1: left promiscuous mode
[  172.932700][ T8813] loop0: detected capacity change from 0 to 32768
[  173.117018][ T8821] team0 (unregistering): Port device team_slave_0 removed
[  173.123310][ T8821] team0 (unregistering): Port device team_slave_1 removed
[  173.261395][ T8828] loop2: detected capacity change from 0 to 2048
[  173.268662][ T8828] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  173.393523][ T8829] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  173.599290][ T8832] loop2: detected capacity change from 0 to 4096
[  173.621413][ T8832] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  173.634352][ T8832] ntfs3(loop2): ino=b, mi_enum_attr
[  173.636884][ T8832] ntfs3(loop2): Failed to load $Extend (-22).
[  173.639253][ T8832] ntfs3(loop2): Failed to initialize $Extend.
[  173.773426][ T8841] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  174.364932][   T10] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  174.514876][   T10] usb 1-1: Using ep0 maxpacket: 32
[  174.519366][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  174.524133][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  174.528453][   T10] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  174.532383][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  174.539169][   T10] usb 1-1: config 0 descriptor??
[  174.545517][   T10] hub 1-1:0.0: USB hub found
[  174.748612][   T10] hub 1-1:0.0: 1 port detected
[  174.782010][ T8853] loop2: detected capacity change from 0 to 1024
[  174.786291][ T8853] EXT4-fs: inline encryption not supported
[  174.789953][ T8853] EXT4-fs: Ignoring removed i_version option
[  174.816172][ T8853] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  174.840250][ T8853] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt.
[  174.882866][ T5854] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  175.147662][ T8857] loop2: detected capacity change from 0 to 32768
[  175.172164][ T8857] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  175.192361][ T8857] XFS (loop2): Ending clean mount
[  175.200066][ T8857] XFS (loop2): Quotacheck needed: Please wait.
[  175.240569][ T8857] XFS (loop2): Quotacheck: Done.
[  175.273863][ T5854] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  175.359014][ T5905] hub 1-1:0.0: activate --> -90
[  175.473887][ T8867] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1129'.
[  175.776200][  T793] usb 1-1: USB disconnect, device number 19
[  175.877373][   T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  175.881435][   T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  175.889447][   T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  175.901152][   T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  175.905718][   T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  175.991991][ T8883] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 2, id = 0
[  176.014632][ T8885] loop2: detected capacity change from 0 to 256
[  176.022251][ T8885] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d)
[  176.154630][ T8877] chnl_net:caif_netlink_parms(): no params data found
[  176.232691][ T8877] bridge0: port 1(bridge_slave_0) entered blocking state
[  176.236646][ T8877] bridge0: port 1(bridge_slave_0) entered disabled state
[  176.240333][ T8877] bridge_slave_0: entered allmulticast mode
[  176.243952][ T8877] bridge_slave_0: entered promiscuous mode
[  176.250272][ T8877] bridge0: port 2(bridge_slave_1) entered blocking state
[  176.253695][ T8877] bridge0: port 2(bridge_slave_1) entered disabled state
[  176.257082][ T8877] bridge_slave_1: entered allmulticast mode
[  176.260747][ T8877] bridge_slave_1: entered promiscuous mode
[  176.353191][ T8877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  176.374127][ T8877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  176.433314][ T8877] team0: Port device team_slave_0 added
[  176.445886][ T8877] team0: Port device team_slave_1 added
[  176.489100][ T8877] batman_adv: batadv0: Adding interface: batadv_slave_0
[  176.492232][ T8877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  176.510342][ T8877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  176.520905][ T8877] batman_adv: batadv0: Adding interface: batadv_slave_1
[  176.523887][ T8877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  176.556826][ T8877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  176.620673][ T8877] hsr_slave_0: entered promiscuous mode
[  176.624056][ T8877] hsr_slave_1: entered promiscuous mode
[  176.627332][ T8877] debugfs: 'hsr0' already exists in 'hsr'
[  176.630196][ T8877] Cannot create hsr debugfs directory
[  176.676655][   T51] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  176.827989][ T8877] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  176.832727][ T8877] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  176.840212][   T51] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  176.843722][   T51] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  176.846973][   T51] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  176.853708][   T51] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  176.857741][ T8877] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  176.864017][   T51] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  176.869153][ T8877] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  176.873144][   T51] usb 3-1: config 0 descriptor??
[  176.915315][ T8877] bridge0: port 2(bridge_slave_1) entered blocking state
[  176.917616][ T8877] bridge0: port 2(bridge_slave_1) entered forwarding state
[  176.920063][ T8877] bridge0: port 1(bridge_slave_0) entered blocking state
[  176.922320][ T8877] bridge0: port 1(bridge_slave_0) entered forwarding state
[  176.979361][ T8877] 8021q: adding VLAN 0 to HW filter on device bond0
[  176.992142][ T1091] bridge0: port 1(bridge_slave_0) entered disabled state
[  177.000496][ T1091] bridge0: port 2(bridge_slave_1) entered disabled state
[  177.018268][ T8877] 8021q: adding VLAN 0 to HW filter on device team0
[  177.029416][ T7643] bridge0: port 1(bridge_slave_0) entered blocking state
[  177.032119][ T7643] bridge0: port 1(bridge_slave_0) entered forwarding state
[  177.040141][ T7643] bridge0: port 2(bridge_slave_1) entered blocking state
[  177.042675][ T7643] bridge0: port 2(bridge_slave_1) entered forwarding state
[  177.210419][ T8877] 8021q: adding VLAN 0 to HW filter on device batadv0
[  177.244285][ T8877] veth0_vlan: entered promiscuous mode
[  177.253230][ T8877] veth1_vlan: entered promiscuous mode
[  177.273471][ T8877] veth0_macvtap: entered promiscuous mode
[  177.277872][ T8877] veth1_macvtap: entered promiscuous mode
[  177.289076][   T51] plantronics 0003:047F:FFFF.0009: item 0 0 0 9 parsing failed
[  177.292041][   T51] plantronics 0003:047F:FFFF.0009: parse failed
[  177.293984][ T8877] batman_adv: batadv0: Interface activated: batadv_slave_0
[  177.296722][   T51] plantronics 0003:047F:FFFF.0009: probe with driver plantronics failed with error -22
[  177.303501][ T8877] batman_adv: batadv0: Interface activated: batadv_slave_1
[  177.317076][ T5679] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  177.321962][ T5679] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  177.327140][ T5679] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  177.330973][ T5679] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  177.409472][ T7643] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  177.411958][ T7643] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  177.436319][ T7643] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  177.439008][ T7643] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  177.493379][ T5917] usb 3-1: USB disconnect, device number 18
[  177.732544][ T8946] loop0: detected capacity change from 0 to 512
[  177.738785][ T8946] EXT4-fs: Ignoring removed bh option
[  177.742383][ T8946] ext3: Unknown parameter 'noacl'
[  178.098295][ T5860] Bluetooth: hci3: command tx timeout
[  178.323511][ T8954] loop2: detected capacity change from 0 to 512
[  178.327857][ T8954] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  178.358591][ T8954] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  178.368456][ T8954] EXT4-fs (loop2): 1 truncate cleaned up
[  178.376842][ T8954] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  178.415096][ T5905] usb 4-1: new full-speed USB device number 2 using dummy_hcd
[  178.429548][ T5854] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  178.566950][ T5905] usb 4-1: config 0 interface 0 has no altsetting 0
[  178.569649][ T5905] usb 4-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00
[  178.573249][ T5905] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  178.599613][ T8962] loop2: detected capacity change from 0 to 512
[  178.602343][ T8962] EXT4-fs: Ignoring removed i_version option
[  178.609257][ T8962] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  178.659473][ T8962] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e12c, mo2=0002]
[  178.664017][ T5905] usb 4-1: config 0 descriptor??
[  178.672492][ T8962] System zones: 1-12
[  178.679561][ T8962] EXT4-fs (loop2): orphan cleanup on readonly fs
[  178.684558][ T8962] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.1162: invalid indirect mapped block 12 (level 1)
[  178.699403][ T8962] EXT4-fs (loop2): Remounting filesystem read-only
[  178.722366][ T8962] EXT4-fs (loop2): 1 truncate cleaned up
[  178.728074][ T8962] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  178.782288][ T5854] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  179.086884][ T5905] logitech 0003:046D:C294.000A: unknown main item tag 0x6
[  179.089802][ T5905] logitech 0003:046D:C294.000A: item fetching failed at offset 5/7
[  179.095426][ T8975] loop2: detected capacity change from 0 to 16
[  179.109576][ T5905] logitech 0003:046D:C294.000A: parse failed
[  179.112405][ T5905] logitech 0003:046D:C294.000A: probe with driver logitech failed with error -22
[  179.117528][ T8975] erofs (device loop2): mounted with root inode @ nid 36.
[  179.294065][   T10] usb 4-1: USB disconnect, device number 2
[  179.795072][   T10] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  179.951305][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  179.956123][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  179.960012][   T10] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  179.963650][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  179.969901][   T10] usb 3-1: config 0 descriptor??
[  180.134922][   T54] Bluetooth: hci3: command tx timeout
[  180.157692][ T9006] loop3: detected capacity change from 0 to 2048
[  180.193542][ T9007] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  180.219507][ T9006] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  180.228677][ T9006] Remounting filesystem read-only
[  180.245513][ T8877] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer
[  180.392374][   T10] pyra 0003:1E7D:2CF6.000B: unknown main item tag 0x0
[  180.395729][   T10] pyra 0003:1E7D:2CF6.000B: unknown main item tag 0x0
[  180.398644][   T10] pyra 0003:1E7D:2CF6.000B: unknown main item tag 0x0
[  180.401424][   T10] pyra 0003:1E7D:2CF6.000B: unknown main item tag 0x0
[  180.404152][   T10] pyra 0003:1E7D:2CF6.000B: unknown main item tag 0x0
[  180.407159][   T10] pyra 0003:1E7D:2CF6.000B: unknown main item tag 0x0
[  180.410075][   T10] pyra 0003:1E7D:2CF6.000B: unknown main item tag 0x0
[  180.417169][   T10] pyra 0003:1E7D:2CF6.000B: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.2-1/input0
[  180.789910][   T10] pyra 0003:1E7D:2CF6.000B: couldn't init struct pyra_device
[  180.793067][   T10] pyra 0003:1E7D:2CF6.000B: couldn't install mouse
[  180.799760][   T10] pyra 0003:1E7D:2CF6.000B: probe with driver pyra failed with error -71
[  180.806500][   T10] usb 3-1: USB disconnect, device number 19
[  181.148822][ T9012] netlink: 'syz.3.1185': attribute type 1 has an invalid length.
[  181.158882][ T9012] vlan2: entered allmulticast mode
[  181.160693][ T9012] veth0_to_bond: entered allmulticast mode
[  181.255450][ T5860] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  181.259283][   T54] Bluetooth: hci2: command 0x1003 tx timeout
[  181.312051][ T9014] loop3: detected capacity change from 0 to 4096
[  181.345202][ T9016] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  181.494125][ T9019] libceph: resolve 'R' (ret=-3): failed
[  181.754163][ T9024] loop3: detected capacity change from 0 to 32768
[  181.775176][ T9024] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1189 (9024)
[  181.789517][ T9024] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  181.793672][ T9024] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  181.797617][ T9024] BTRFS info (device loop3): using free-space-tree
[  181.875325][   T96] usb 3-1: new low-speed USB device number 20 using dummy_hcd
[  181.909662][ T8877] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  182.060680][ T9048] loop3: detected capacity change from 0 to 128
[  182.070908][   T96] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  182.074527][   T96] usb 3-1: config 0 has no interface number 0
[  182.085512][   T96] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  182.088779][ T9048] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000).
[  182.094730][   T96] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  182.102725][ T9048] qnx6: wrong signature (magic) in superblock #1.
[  182.110023][ T9048] qnx6: unable to read the first superblock
[  182.111180][   T96] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  182.135188][   T96] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  182.155749][   T96] usb 3-1: config 0 descriptor??
[  182.158677][ T9028] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  182.202897][   T96] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  182.215926][ T5860] Bluetooth: hci3: command tx timeout
[  182.419113][   T10] usb 3-1: USB disconnect, device number 20
[  182.421611][    C0] iowarrior 3-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19
[  183.194937][ T5905] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  183.394990][ T5905] usb 1-1: Using ep0 maxpacket: 32
[  183.403942][ T5905] usb 1-1: config 0 has an invalid interface number: 43 but max is 1
[  183.414464][ T5905] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  183.419267][ T5905] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2
[  183.422889][ T5905] usb 1-1: config 0 has no interface number 0
[  183.423646][ T9073] loop3: detected capacity change from 0 to 128
[  183.429128][ T5905] usb 1-1: config 0 interface 43 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  183.432715][ T9073] EXT4-fs: Ignoring removed nobh option
[  183.435841][ T5905] usb 1-1: config 0 interface 43 has no altsetting 0
[  183.445691][ T5905] usb 1-1: New USB device found, idVendor=06cd, idProduct=0104, bcdDevice=c8.6a
[  183.449673][ T5905] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  183.453035][ T5905] usb 1-1: Product: syz
[  183.459642][ T5905] usb 1-1: Manufacturer: syz
[  183.462226][ T5905] usb 1-1: SerialNumber: syz
[  183.464571][ T9073] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  183.467401][ T5905] usb 1-1: config 0 descriptor??
[  183.476840][ T9073] ext4 filesystem being mounted at /23/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  183.499583][ T9073] fscrypt (loop3, inode 12): Unsupported log2_data_unit_size in encryption policy: 179
[  183.522299][ T8877] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  183.581614][ T9077] loop3: detected capacity change from 0 to 2048
[  183.592068][ T9077] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  183.668475][ T9079] netlink: 165 bytes leftover after parsing attributes in process `syz.3.1207'.
[  183.682693][ T5905] keyspan_pda 1-1:0.43: required endpoints missing
[  183.704245][ T5905] usb 1-1: USB disconnect, device number 20
[  183.716801][ T9081] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1208'.
[  183.723101][ T9081] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1208'.
[  183.728188][ T9081] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1208'.
[  183.864659][ T9087] loop3: detected capacity change from 0 to 2048
[  183.881183][ T9088] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  184.010540][ T9069] orangefs_mount: mount request failed with -4
[  184.182334][ T9094] loop2: detected capacity change from 0 to 32768
[  184.186507][ T9094] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1213 (9094)
[  184.206995][ T9094] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  184.211138][ T9094] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  184.215133][ T9094] BTRFS info (device loop2): using free-space-tree
[  184.274456][ T9107] loop0: detected capacity change from 0 to 1024
[  184.295371][ T5860] Bluetooth: hci3: command tx timeout
[  184.360183][ T5854] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  184.425272][  T793] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  184.614729][  T793] usb 4-1: config 0 has no interfaces?
[  184.619679][  T793] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  184.634406][  T793] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  184.642711][  T793] usb 4-1: config 0 descriptor??
[  184.759166][ T9114] loop0: detected capacity change from 0 to 32768
[  184.787903][ T9114] XFS (loop0): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[  184.820313][ T9114] XFS (loop0): Ending clean mount
[  184.867924][  T793] usb 4-1: USB disconnect, device number 3
[  184.885396][ T5849] XFS (loop0): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[  185.148921][ T9137] loop0: detected capacity change from 0 to 1024
[  185.157650][ T9137] EXT4-fs: Ignoring removed orlov option
[  185.175301][ T9137] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869)
[  185.181984][ T9137] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  185.186831][ T9137] EXT4-fs (loop0): invalid journal inode
[  185.189382][ T9137] EXT4-fs (loop0): can't get journal size
[  185.221020][ T9137] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  186.721523][ T5849] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  186.751579][ T9147] netlink: 'syz.0.1225': attribute type 2 has an invalid length.
[  186.754273][ T9147] netlink: 119 bytes leftover after parsing attributes in process `syz.0.1225'.
[  186.861140][ T9149] loop0: detected capacity change from 0 to 1024
[  187.308569][ T9159] netlink: 'syz.0.1230': attribute type 3 has an invalid length.
[  187.311783][ T9159] netlink: 'syz.0.1230': attribute type 3 has an invalid length.
[  187.322907][ T9159] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1230'.
[  187.359979][ T9163] syz.3.1233: attempt to access beyond end of device
[  187.359979][ T9163] nbd3: rw=0, sector=64, nr_sectors = 1 limit=0
[  187.364436][ T9163] syz.3.1233: attempt to access beyond end of device
[  187.364436][ T9163] nbd3: rw=0, sector=256, nr_sectors = 1 limit=0
[  187.389810][ T9163] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256
[  187.399714][ T9163] syz.3.1233: attempt to access beyond end of device
[  187.399714][ T9163] nbd3: rw=0, sector=512, nr_sectors = 1 limit=0
[  187.409712][ T9167] loop0: detected capacity change from 0 to 16
[  187.412914][ T9167] erofs (device loop0): mounted with root inode @ nid 36.
[  187.421730][ T9163] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512
[  187.443771][ T9163] syz.3.1233: attempt to access beyond end of device
[  187.443771][ T9163] nbd3: rw=0, sector=64, nr_sectors = 2 limit=0
[  187.455663][ T9163] syz.3.1233: attempt to access beyond end of device
[  187.455663][ T9163] nbd3: rw=0, sector=512, nr_sectors = 2 limit=0
[  187.464941][ T9163] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256
[  187.476707][ T9163] syz.3.1233: attempt to access beyond end of device
[  187.476707][ T9163] nbd3: rw=0, sector=1024, nr_sectors = 2 limit=0
[  187.482162][ T9163] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512
[  187.521718][ T9163] syz.3.1233: attempt to access beyond end of device
[  187.521718][ T9163] nbd3: rw=0, sector=64, nr_sectors = 4 limit=0
[  187.555513][ T9163] syz.3.1233: attempt to access beyond end of device
[  187.555513][ T9163] nbd3: rw=0, sector=1024, nr_sectors = 4 limit=0
[  187.575793][ T9163] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256
[  187.580268][ T9163] syz.3.1233: attempt to access beyond end of device
[  187.580268][ T9163] nbd3: rw=0, sector=2048, nr_sectors = 4 limit=0
[  187.597472][ T9163] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512
[  187.610234][ T9163] syz.3.1233: attempt to access beyond end of device
[  187.610234][ T9163] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0
[  187.622706][ T9163] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256
[  187.636234][ T9163] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512
[  187.640487][ T9163] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1)
[  187.901287][ T9191] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  187.903814][ T9191] IPv6: NLM_F_CREATE should be set when creating new route
[  187.906572][ T9191] IPv6: NLM_F_CREATE should be set when creating new route
[  187.909340][ T9191] IPv6: NLM_F_CREATE should be set when creating new route
[  187.927369][ T9191] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  188.054084][ T9202] mmap: syz.3.1252 (9202): VmData 175878144 exceed data ulimit 1764. Update limits or use boot option ignore_rlimit_data.
[  188.157266][ T9205] block nbd2: shutting down sockets
[  188.284862][  T793] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  188.460079][  T793] usb 1-1: config 0 has an invalid interface number: 93 but max is 0
[  188.465219][  T793] usb 1-1: config 0 has no interface number 0
[  188.470041][  T793] usb 1-1: New USB device found, idVendor=1a0a, idProduct=0104, bcdDevice=3f.ac
[  188.473665][  T793] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  188.484970][  T793] usb 1-1: Product: syz
[  188.486658][  T793] usb 1-1: Manufacturer: syz
[  188.488624][  T793] usb 1-1: SerialNumber: syz
[  188.501143][  T793] usb 1-1: config 0 descriptor??
[  188.575140][ T5905] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  188.727905][ T5905] usb 3-1: Using ep0 maxpacket: 32
[  188.739995][ T5905] usb 3-1: config 0 has an invalid interface number: 84 but max is 1
[  188.743133][ T5905] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  188.752865][ T5905] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[  188.756909][ T5905] usb 3-1: config 0 has no interface number 0
[  188.759548][ T5905] usb 3-1: config 0 interface 84 altsetting 127 endpoint 0x1 has invalid wMaxPacketSize 0
[  188.762622][ T5905] usb 3-1: config 0 interface 84 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 15
[  188.766955][ T5905] usb 3-1: config 0 interface 84 has no altsetting 0
[  188.771307][ T5905] usb 3-1: New USB device found, idVendor=05ac, idProduct=030b, bcdDevice=db.55
[  188.774123][ T5905] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  188.777492][ T5905] usb 3-1: Product: syz
[  188.778878][ T5905] usb 3-1: Manufacturer: syz
[  188.780420][ T5905] usb 3-1: SerialNumber: syz
[  188.785622][ T5905] usb 3-1: config 0 descriptor??
[  188.829545][  T793] usb_ehset_test 1-1:0.93: probe with driver usb_ehset_test failed with error -32
[  188.837314][  T793] usb 1-1: USB disconnect, device number 21
[  189.065588][ T5905] appletouch 3-1:0.84: Could not find int-in endpoint
[  189.069002][ T5905] appletouch 3-1:0.84: probe with driver appletouch failed with error -5
[  189.072183][ T5905] usbhid 3-1:0.84: couldn't find an input interrupt endpoint
[  189.080509][ T5905] usb 3-1: USB disconnect, device number 21
[  190.203639][ T9266] loop2: detected capacity change from 0 to 4096
[  190.690495][ T9270] netlink: 'syz.0.1281': attribute type 1 has an invalid length.
[  190.742356][ T9270] bond1: entered promiscuous mode
[  190.755026][ T9270] bond1: entered allmulticast mode
[  190.757319][ T9270] 8021q: adding VLAN 0 to HW filter on device bond1
[  190.791355][ T9270] bridge1: entered promiscuous mode
[  190.793373][ T9270] bridge1: entered allmulticast mode
[  190.797719][ T9270] bond1: (slave bridge1): Enslaving as a backup interface with an up link
[  190.811669][ T9275] loop2: detected capacity change from 0 to 512
[  190.846525][ T5902] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  190.891107][ T9275] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  190.915224][ T9275] ext4 filesystem being mounted at /436/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  190.975816][ T5902] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  191.014034][ T5854] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  191.069879][ T9286] loop0: detected capacity change from 0 to 1024
[  191.085597][ T9286] EXT4-fs: Ignoring removed nobh option
[  191.095873][ T5860] Bluetooth: hci1: command 0x0406 tx timeout
[  191.107833][ T9286] EXT4-fs: Ignoring removed bh option
[  191.142803][ T9286] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  191.168049][ T9292] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1289'.
[  191.171475][ T9292] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1289'.
[  191.293539][ T5849] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  191.324376][ T9296] netlink: zone id is out of range
[  191.377549][ T9296] netlink: set zone limit has 4 unknown bytes
[  191.395515][ T9296] netlink: del zone limit has 4 unknown bytes
[  191.435008][    T9] usb 3-1: new full-speed USB device number 22 using dummy_hcd
[  191.595313][   T96] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  191.627962][    T9] usb 3-1: config 0 has an invalid interface number: 147 but max is 0
[  191.630540][    T9] usb 3-1: config 0 has no interface number 0
[  191.632769][    T9] usb 3-1: config 0 interface 147 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  191.640249][    T9] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.03
[  191.643072][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  191.646340][    T9] usb 3-1: Product: syz
[  191.647658][    T9] usb 3-1: Manufacturer: syz
[  191.649474][    T9] usb 3-1: SerialNumber: syz
[  191.652975][    T9] usb 3-1: config 0 descriptor??
[  191.657683][ T9291] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  191.668129][    T9] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  191.745926][   T96] usb 1-1: Using ep0 maxpacket: 8
[  191.758320][   T96] usb 1-1: config 2 has an invalid interface number: 25 but max is 0
[  191.760891][   T96] usb 1-1: config 2 has no interface number 0
[  191.763140][   T96] usb 1-1: config 2 interface 25 has no altsetting 0
[  191.771046][   T96] usb 1-1: New USB device found, idVendor=413c, idProduct=4004, bcdDevice=33.1b
[  191.774457][   T96] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  191.779528][   T96] usb 1-1: Product: syz
[  191.781151][   T96] usb 1-1: Manufacturer: syz
[  191.782790][   T96] usb 1-1: SerialNumber: syz
[  191.790636][   T96] ipaq 1-1:2.25: PocketPC PDA converter detected
[  191.798350][   T96] usb 1-1: active config #2 != 1 ??
[  191.876246][ T5679] usb 3-1: Failed to submit usb control message: -71
[  191.876390][  T976] usb 3-1: USB disconnect, device number 22
[  191.883986][ T5679] usb 3-1: unable to send the bmi data to the device: -71
[  191.888379][ T5679] usb 3-1: unable to get target info from device
[  191.890453][ T5679] usb 3-1: could not get target info (-71)
[  191.892366][ T5679] usb 3-1: could not probe fw (-71)
[  192.005062][   T96] usb 1-1: USB disconnect, device number 22
[  192.852256][ T9349] loop2: detected capacity change from 0 to 1024
[  192.871668][ T9349] EXT4-fs: Ignoring removed nobh option
[  192.873670][ T9349] EXT4-fs: Ignoring removed bh option
[  192.898769][ T9349] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  192.931457][ T5854] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  192.995152][ T9357] loop0: detected capacity change from 0 to 4096
[  193.027095][ T9358] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  193.215321][    T9] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  193.265827][ T9362] loop3: detected capacity change from 0 to 32768
[  193.326501][ T9370] loop0: detected capacity change from 0 to 256
[  193.385831][ T9362] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow
[  193.385848][ T9362]   allowing incompatible features above 0.0: (unknown version)
[  193.385855][ T9362]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  193.388632][    T9] usb 3-1: config 1 interface 0 altsetting 165 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  193.390368][ T9362] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0
[  193.397060][    T9] usb 3-1: config 1 interface 0 has no altsetting 0
[  193.398027][ T9362] bcachefs (loop3): initializing new filesystem
[  193.404652][    T9] usb 3-1: New USB device found, idVendor=18d1, idProduct=503c, bcdDevice= 0.40
[  193.411821][ T9362] bcachefs (loop3): going read-write
[  193.413205][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  193.425023][ T9362] bcachefs (loop3): marking superblocks
[  193.434372][ T9362] bcachefs (loop3): initializing freespace
[  193.438521][ T9362] bcachefs (loop3): done initializing freespace
[  193.440764][    T9] usb 3-1: Product: syz
[  193.442993][ T9362] bcachefs (loop3): reading snapshots table
[  193.443020][ T9362] bcachefs (loop3): reading snapshots done
[  193.453552][    T9] usb 3-1: Manufacturer: syz
[  193.461742][    T9] usb 3-1: SerialNumber: syz
[  193.468832][ T9362] bcachefs (loop3): done starting filesystem
[  193.701816][    T9] usbhid 3-1:1.0: can't add hid device: -71
[  193.703780][    T9] usbhid 3-1:1.0: probe with driver usbhid failed with error -71
[  193.718881][    T9] usb 3-1: USB disconnect, device number 23
[  194.065234][ T1366] ieee802154 phy0 wpan0: encryption failed: -22
[  194.067802][ T1366] ieee802154 phy1 wpan1: encryption failed: -22
[  194.233584][ T8877] bcachefs (loop3): shutting down
[  194.238178][ T8877] bcachefs (loop3): going read-only
[  194.240364][ T8877] bcachefs (loop3): finished waiting for writes to stop
[  194.251628][ T8877] bcachefs (loop3): flushing journal and stopping allocators, journal seq 5
[  194.270016][ T8877] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 5
[  194.273899][ T8877] bcachefs (loop3): clean shutdown complete, journal seq 6
[  194.277222][ T8877] bcachefs (loop3): marking filesystem clean
[  194.290863][ T8877] bcachefs (loop3): shutdown complete
[  194.507981][ T9390] loop2: detected capacity change from 0 to 1024
[  194.525675][ T9390] EXT4-fs: Ignoring removed bh option
[  194.542880][ T9390] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  194.659625][ T5854] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  194.760209][ T9401] loop0: detected capacity change from 0 to 256
[  194.774311][ T9401] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  194.784123][ T9401] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  194.794093][ T9401] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  194.907638][ T9405] genirq: Flags mismatch irq 5. 00200000 (pcl818) vs. 00200000 (pcl812)
[  195.116468][ T9407] loop0: detected capacity change from 0 to 32768
[  195.120879][ T9407] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1333 (9407)
[  195.135923][ T9407] BTRFS info (device loop0): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  195.139641][ T9407] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  195.144881][ T9407] BTRFS info (device loop0): using free-space-tree
[  195.381300][ T5849] BTRFS info (device loop0): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  195.619981][ T9427] loop0: detected capacity change from 0 to 4096
[  196.537767][ T9429] loop3: detected capacity change from 0 to 262144
[  196.555692][ T9429] F2FS-fs (loop3): invalid crc value
[  196.595947][ T9429] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  196.602078][ T9429] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  196.810087][ T9435] loop0: detected capacity change from 0 to 32768
[  196.833661][ T9435] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  196.891712][ T5849] ocfs2: Unmounting device (7,0) on (node local)
[  197.336448][ T9445] loop3: detected capacity change from 0 to 4096
[  197.734997][    T9] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[  197.901282][    T9] usb 4-1: unable to get BOS descriptor or descriptor too short
[  197.908099][    T9] usb 4-1: not running at top speed; connect to a high speed hub
[  197.918766][    T9] usb 4-1: config 1 interface 0 has no altsetting 0
[  197.927015][    T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice= 0.40
[  197.930258][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  197.932779][    T9] usb 4-1: Product: syz
[  197.948781][    T9] usb 4-1: Manufacturer: syz
[  197.950382][    T9] usb 4-1: SerialNumber: syz
[  198.137753][ T9451] loop0: detected capacity change from 0 to 32768
[  198.206041][ T9451] ocfs2: Slot 0 on device (7,0) was already allocated to this node!
[  198.208777][    T9] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input13
[  198.227479][    T9] usb 4-1: USB disconnect, device number 4
[  198.272394][ T9451] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  198.568683][ T5849] ocfs2: Unmounting device (7,0) on (node local)
[  198.690703][ T9465] loop0: detected capacity change from 0 to 512
[  198.693921][ T9465] EXT4-fs (loop0): bad geometry: block count 1024 exceeds size of device (256 blocks)
[  198.914360][ T9471] loop0: detected capacity change from 0 to 32768
[  198.919585][ T9471] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1351 (9471)
[  198.941549][ T9471] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  198.948389][ T9471] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm
[  198.951126][ T9471] BTRFS info (device loop0): using free-space-tree
[  199.091571][ T9471] BTRFS info (device loop0): rebuilding free space tree
[  199.208636][ T5849] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  199.212793][ T9494] loop2: detected capacity change from 0 to 2048
[  199.226555][ T9473] loop3: detected capacity change from 0 to 32768
[  199.331771][ T9473] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  199.409944][ T9473] XFS (loop3): Ending clean mount
[  199.434469][ T9504] ip_vti0: Master is either lo or non-ether device
[  199.452186][ T9473] XFS (loop3): Quotacheck needed: Please wait.
[  199.473721][ T9473] XFS (loop3): Quotacheck: Done.
[  199.548178][ T8877] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  199.596050][ T9506] bio_check_eod: 2 callbacks suppressed
[  199.596064][ T9506] syz.0.1355: attempt to access beyond end of device
[  199.596064][ T9506] loop0: rw=0, sector=2, nr_sectors = 2 limit=0
[  199.607328][ T9506] syz.0.1355: attempt to access beyond end of device
[  199.607328][ T9506] loop0: rw=0, sector=16, nr_sectors = 2 limit=0
[  199.791746][   T33] kauditd_printk_skb: 245 callbacks suppressed
[  199.791760][   T33] audit: type=1326 audit(1755177703.409:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9513 comm="syz.0.1361" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f134018ebe9 code=0x0
[  199.848553][ T9516] loop3: detected capacity change from 0 to 2048
[  199.873690][ T9510] loop2: detected capacity change from 0 to 32768
[  199.886791][ T9510] bcachefs (/dev/loop2): error validating superblock: Invalid superblock section members_v2: device 0: bucket size 0 smaller than block size 8
[  199.886791][ T9510] members_v2 (size 152):
[  199.886791][ T9510] Device:                        0
[  199.886791][ T9510]   Label:                       (none)
[  199.886791][ T9510]   UUID:                        7af6772b-00de-4159-84cd-1faead05aceb
[  199.886791][ T9510]   Size:                        0
[  199.886791][ T9510]   read errors:                 0
[  199.886791][ T9510]   write errors:                0
[  199.886791][ T9510]   checksum errors:             0
[  199.886791][ T9510]   seqread iops:                0
[  199.886791][ T9510]   seqwrite iops:               1048320
[  199.886791][ T9510]   randread iops:               0
[  199.886791][ T9510]   randwrite iops:              0
[  199.886791][ T9510]   Bucket size:                 0
[  199.886791][ T9510]   First bucket:                0
[  199.886791][ T9510]   Buckets:                     128
[  199.886791][ T9510]   Last mount:                  9223372038569457075
[  199.886791][ T9510]   Last superblock write:       42
[  199.886791][ T9510]   State:                       unknown
[  199.886791][ T9510]   Data allowed:                (none)
[  199.886791][ T9510]   Has data:                    (none)
[  199.886791][ T9510]   Btree allocated bitmap blocksize:256
[  199.886791][ T9510]   Btree allocated bitmap:      0000000000000000000001000010000010011000000000000000000000000000
[  199.886791][ T9510]   Durability
[  199.886897][ T9510] bcachefs: bch2_fs_get_tree() error: invalid_sb_members
[  199.898461][ T9516] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  199.958558][   T33] audit: type=1800 audit(1755177703.579:314): pid=9516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1358" name="bus" dev="loop3" ino=18 res=0 errno=0
[  200.030827][ T8877] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  200.224656][ T9524] loop3: detected capacity change from 0 to 32768
[  200.227447][ T9524] XFS: ikeep mount option is deprecated.
[  200.234659][ T9524] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  200.255299][  T976] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  200.276081][ T9524] XFS (loop3): Ending clean mount
[  200.281455][ T9524] XFS (loop3): Quotacheck needed: Please wait.
[  200.318164][ T9524] XFS (loop3): Quotacheck: Done.
[  200.355813][ T8877] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  200.410860][  T976] usb 3-1: Using ep0 maxpacket: 32
[  200.424082][  T976] usb 3-1: config 0 has an invalid interface number: 66 but max is 0
[  200.436249][  T976] usb 3-1: config 0 has no interface number 0
[  200.449541][  T976] usb 3-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50
[  200.452670][  T976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  200.465321][  T976] usb 3-1: Product: syz
[  200.466951][  T976] usb 3-1: Manufacturer: syz
[  200.468465][  T976] usb 3-1: SerialNumber: syz
[  200.472496][  T976] usb 3-1: config 0 descriptor??
[  200.502680][  T976] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state.
[  200.505786][  T976] dvb-usb: bulk message failed: -22 (2/0)
[  200.525528][  T976] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  200.528914][  T976] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold)
[  200.531351][  T976] usb 3-1: media controller created
[  200.550672][  T976] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  200.566684][  T976] cxusb: set interface failed
[  200.568228][  T976] dvb-usb: bulk message failed: -22 (1/0)
[  200.590352][  T976] DVB: Unable to find symbol lgdt330x_attach()
[  200.592345][  T976] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold'
[  200.618086][ T9537] dummy0: entered promiscuous mode
[  200.622743][ T9537] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  200.636961][ T9537] debugfs: 'hsr1' already exists in 'hsr'
[  200.638812][ T9537] Cannot create hsr debugfs directory
[  200.641702][ T9537] hsr1: entered allmulticast mode
[  200.643733][ T9537] dummy0: entered allmulticast mode
[  200.648658][ T9537] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  200.674960][  T976] rc_core: IR keymap rc-dvico-portable not found
[  200.677524][  T976] Registered IR keymap rc-empty
[  200.687003][  T976] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0
[  200.736160][  T976] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input14
[  200.750755][  T976] dvb-usb: schedule remote query interval to 100 msecs.
[  200.753157][  T976] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected.
[  200.779918][  T976] usb 3-1: USB disconnect, device number 24
[  201.295329][  T976] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected.
[  201.566715][ T9547] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  202.434859][ T9558] loop2: detected capacity change from 0 to 32768
[  202.443491][ T9558] XFS: ikeep mount option is deprecated.
[  202.470994][ T9558] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  202.548296][ T9558] XFS (loop2): Ending clean mount
[  202.566548][ T9558] XFS (loop2): Quotacheck needed: Please wait.
[  202.631581][ T9558] XFS (loop2): Quotacheck: Done.
[  202.804085][ T5854] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  202.828365][ T9571] loop3: detected capacity change from 0 to 40427
[  202.831827][ T9571] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  202.834582][ T9571] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  202.838922][ T9571] F2FS-fs (loop3): invalid crc value
[  202.890688][ T9571] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  202.909206][ T9571] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  202.911375][ T9571] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  203.006517][ T9578] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  203.594930][   T51] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  203.658530][ T9586] netlink: 'syz.0.1379': attribute type 3 has an invalid length.
[  203.667964][ T9586] netlink: 'syz.0.1379': attribute type 3 has an invalid length.
[  203.745157][   T51] usb 3-1: Using ep0 maxpacket: 16
[  203.749009][   T51] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  203.763531][   T51] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  203.771043][   T51] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  203.778604][   T51] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  203.783170][   T51] usb 3-1: Product: syz
[  203.785652][   T51] usb 3-1: Manufacturer: syz
[  203.787443][   T51] usb 3-1: SerialNumber: syz
[  204.007441][   T51] usb 3-1: 0:2 : does not exist
[  204.035838][   T51] usb 3-1: USB disconnect, device number 25
[  204.387221][ T5902] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  204.391447][ T5902] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.480065][ T5902] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  204.484234][ T5902] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.600705][   T51] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  204.602232][ T5902] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  204.619211][ T5902] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.670096][ T9619] loop2: detected capacity change from 0 to 256
[  204.676668][ T9619] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  204.681237][ T9619] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[  204.718251][ T5902] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  204.719158][ T9619] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  204.722399][ T5902] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.769065][   T51] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  204.772775][   T51] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  204.793888][   T51] usb 1-1: config 0 descriptor??
[  204.806895][   T51] gspca_main: cpia1-2.14.0 probing 0813:0001
[  205.003120][ T5902] bridge_slave_1: left allmulticast mode
[  205.005635][ T5902] bridge_slave_1: left promiscuous mode
[  205.010460][ T5902] bridge0: port 2(bridge_slave_1) entered disabled state
[  205.029627][ T5902] bridge_slave_0: left allmulticast mode
[  205.031528][ T5902] bridge_slave_0: left promiscuous mode
[  205.034498][ T5902] bridge0: port 1(bridge_slave_0) entered disabled state
[  205.222022][   T51] cpia1 1-1:0.0: unexpected state after lo power cmd: 00
[  205.532267][ T5902] bond1 (unregistering): (slave gretap1): Releasing active interface
[  205.812031][ T9626] Process accounting resumed
[  205.838216][   T51] gspca_cpia1: usb_control_msg 05, error -71
[  205.840545][   T51] cpia1 1-1:0.0: unexpected systemstate: 00
[  205.849239][ T9634] netlink: 'syz.2.1398': attribute type 1 has an invalid length.
[  205.851668][ T9634] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1398'.
[  205.857055][   T51] usb 1-1: USB disconnect, device number 23
[  205.929648][ T9636] loop2: detected capacity change from 0 to 2048
[  205.963377][ T9636] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  206.105744][ T9641] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1397'.
[  206.110134][ T9641] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1397'.
[  206.113094][ T5854] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  206.376616][ T5902] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  206.380931][ T5902] bond_slave_0: left promiscuous mode
[  206.393774][ T5902] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  206.397849][ T5902] bond_slave_1: left promiscuous mode
[  206.401410][ T5902] bond0 (unregistering): Released all slaves
[  206.897499][ T5902] bond1 (unregistering): Released all slaves
[  207.034409][ T5902] tipc: Left network mode
[  207.243459][ T9658] tap0: tun_chr_ioctl cmd 1074025677
[  207.265157][ T9658] tap0: linktype set to 270
[  207.807984][ T5902] hsr_slave_0: left promiscuous mode
[  207.837374][ T5902] hsr_slave_1: left promiscuous mode
[  207.843300][ T5902] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  207.849851][ T5902] batman_adv: batadv0: Removing interface: batadv_slave_0
[  207.858899][ T5902] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  207.864960][ T5902] batman_adv: batadv0: Removing interface: batadv_slave_1
[  207.941610][ T5902] veth1_macvtap: left promiscuous mode
[  207.944133][ T5902] veth0_macvtap: left promiscuous mode
[  207.946307][ T5902] veth1_vlan: left promiscuous mode
[  207.948982][ T5902] veth0_vlan: left promiscuous mode
[  208.295461][   T24] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  208.414893][   T96] usb 1-1: new full-speed USB device number 24 using dummy_hcd
[  208.466737][   T24] usb 3-1: config 0 has no interfaces?
[  208.495595][   T24] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  208.498559][   T24] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  208.501049][   T24] usb 3-1: Product: syz
[  208.502354][   T24] usb 3-1: Manufacturer: syz
[  208.506338][   T24] usb 3-1: config 0 descriptor??
[  208.569069][   T96] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  208.573200][   T96] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  208.588314][   T96] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[  208.592044][   T96] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  208.595347][   T96] usb 1-1: SerialNumber: syz
[  208.628715][   T96] usb 1-1: 0:2 : does not exist
[  208.670663][ T5902] team0 (unregistering): Port device team_slave_1 removed
[  208.723054][ T5902] team0 (unregistering): Port device team_slave_0 removed
[  208.729005][   T24] usb 3-1: USB disconnect, device number 26
[  209.037641][   T24] usb 1-1: USB disconnect, device number 24
[  209.760175][ T9722] loop2: detected capacity change from 0 to 4096
[  209.786402][ T9722] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512).
[  209.815004][ T5917] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  209.822374][ T9722] ntfs3(loop2): Failed to load $MFT.
[  209.978827][ T5917] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[  209.983803][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  209.996598][ T5917] usb 4-1: Product: syz
[  209.997964][ T5917] usb 4-1: Manufacturer: syz
[  209.999466][ T5917] usb 4-1: SerialNumber: syz
[  210.008396][ T5917] usb 4-1: config 0 descriptor??
[  210.118692][ T9740] loop0: detected capacity change from 0 to 4096
[  210.124335][ T9740] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512).
[  210.150128][ T9740] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  210.212582][ T9716] bpq0: entered promiscuous mode
[  210.228835][ T5917] usb-storage 4-1:0.0: USB Mass Storage device detected
[  210.331990][ T5917] usb 4-1: USB disconnect, device number 5
[  210.775890][ T9783] 9pnet_fd: Insufficient options for proto=fd
[  211.093873][ T9802] futex_wake_op: syz.3.1452 tries to shift op by -1; fix this program
[  211.669954][ T9807] netlink: 'syz.2.1453': attribute type 2 has an invalid length.
[  211.744980][ T9807] k*]: entered promiscuous mode
[  212.085137][ T9809] loop3: detected capacity change from 0 to 32768
[  212.409442][ T9832] IPv6: Can't replace route, no match found
[  212.804927][   T96] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  212.925037][  T976] usb 1-1: new full-speed USB device number 25 using dummy_hcd
[  212.969057][   T96] usb 4-1: Using ep0 maxpacket: 32
[  212.973500][   T96] usb 4-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7
[  212.977979][   T96] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  212.991408][   T96] usb 4-1: config 0 descriptor??
[  212.998590][   T96] gspca_main: sq930x-2.14.0 probing 041e:403c
[  213.149227][  T976] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  213.154174][  T976] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 34151, setting to 64
[  213.216911][  T976] usb 1-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=d4.aa
[  213.221299][  T976] usb 1-1: New USB device strings: Mfr=16, Product=150, SerialNumber=0
[  213.224686][  T976] usb 1-1: Product: syz
[  213.229244][  T976] usb 1-1: Manufacturer: syz
[  213.301975][  T976] usb 1-1: config 0 descriptor??
[  213.374491][ T9848] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  213.411232][  T976] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input16
[  213.419523][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  213.422743][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  213.425740][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  213.431108][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  213.435164][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  213.438398][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  213.441296][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  213.443589][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  213.446773][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  213.449441][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  213.452312][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  213.455600][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  213.458922][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  213.462030][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  213.465129][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  213.468096][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  213.471205][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  213.474345][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  213.477414][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  213.480444][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  213.483488][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  213.486678][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  213.489782][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  213.492850][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  213.496109][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  213.499211][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  213.502301][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  213.506559][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  213.509683][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  213.512357][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  213.516077][   T96] gspca_sq930x: ucbus_write failed -71
[  213.516611][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  213.518005][   T96] sq930x 4-1:0.0: probe with driver sq930x failed with error -71
[  213.521195][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  213.527625][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  213.530604][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  213.533796][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  213.537253][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  213.540893][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  213.544063][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  213.547141][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  213.547447][   T96] usb 4-1: USB disconnect, device number 6
[  213.550307][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  213.555200][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  213.558394][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  213.561486][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  213.564584][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  213.567694][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  213.570715][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  213.573664][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  213.576804][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  213.579709][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  213.582825][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  213.585855][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  213.588889][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  213.592016][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  213.595195][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  213.599417][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  213.602478][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  213.605558][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  213.608648][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  213.611632][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  213.614715][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  213.618805][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  213.621858][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  213.623494][ T5280] usb 1-1: control msg error: -71
[  213.626194][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  213.630562][    C1] usb 1-1: pegasus_irq - usb_submit_urb failed with result -1
[  213.639060][    C0] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  213.642278][    C0] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  213.642777][ T5280] usb 1-1: control msg error: -71
[  213.645464][    C0] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  213.650213][    C0] usb 1-1: pegasus_irq - usb_submit_urb failed with result -1
[  213.655392][  T976] usb 1-1: USB disconnect, device number 25
[  214.997624][ T9905] loop3: detected capacity change from 0 to 256
[  215.000871][ T9905] exfat: Unknown parameter ''
[  216.162079][ T9937] netlink: 'syz.2.1504': attribute type 10 has an invalid length.
[  216.165884][ T9937] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1504'.
[  216.170757][ T9937] batman_adv: batadv0: Adding interface: vlan1
[  216.173292][ T9937] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  216.195911][ T9937] batman_adv: batadv0: Interface activated: vlan1
[  216.774014][ T9960] overlayfs: failed to clone upperpath
[  218.424918][    T9] usb 1-1: new full-speed USB device number 26 using dummy_hcd
[  218.565030][ T5917] usb 4-1: new full-speed USB device number 7 using dummy_hcd
[  218.577461][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  218.581531][    T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  218.585947][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64
[  218.592312][    T9] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  218.595795][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  218.598965][    T9] usb 1-1: Product: syz
[  218.600551][    T9] usb 1-1: Manufacturer: syz
[  218.602308][    T9] usb 1-1: SerialNumber: syz
[  218.606654][    T9] usb 1-1: config 0 descriptor??
[  218.612357][ T9994] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  218.616192][ T9994] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  218.620465][    T9] usb 1-1: ucan: probing device on interface #0
[  218.717338][ T5917] usb 4-1: config 4 has an invalid interface number: 121 but max is 0
[  218.721175][ T5917] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  218.726910][ T5917] usb 4-1: config 4 has no interface number 0
[  218.729621][ T5917] usb 4-1: config 4 interface 121 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  218.737842][ T5917] usb 4-1: config 4 interface 121 has no altsetting 0
[  218.743743][ T5917] usb 4-1: New USB device found, idVendor=6b86, idProduct=c24a, bcdDevice=25.ca
[  218.748916][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  218.752468][ T5917] usb 4-1: Product: syz
[  218.754346][ T5917] usb 4-1: Manufacturer: syz
[  218.756593][ T5917] usb 4-1: SerialNumber: syz
[  218.989195][ T5917] usb 4-1: USB disconnect, device number 7
[  219.029799][    T9] usb 1-1: ucan: failed to retrieve device info
[  219.032225][    T9] usb 1-1: ucan: probe failed; try to update the device firmware
[  219.044225][    T9] usb 1-1: USB disconnect, device number 26
[  219.050592][ T5862] udevd[5862]: setting mode of /dev/bus/usb/001/026 to 020664 failed: No such file or directory
[  219.055208][ T5862] udevd[5862]: setting owner of /dev/bus/usb/001/026 to uid=0, gid=0 failed: No such file or directory
[  219.467719][T10015] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16)
[  219.471105][T10015] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  219.885934][T10041] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1545'.
[  219.889850][T10041] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1545'.
[  219.893379][T10041] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1545'.
[  220.690545][T10061] loop3: detected capacity change from 0 to 16
[  220.706817][T10061] erofs (device loop3): rootino(nid 36) is not a directory(i_mode 102700)
[  220.823438][T10065] loop0: detected capacity change from 0 to 4096
[  220.839849][T10070] loop3: detected capacity change from 0 to 16
[  220.847685][T10070] erofs (device loop3): rootino(nid 36) is not a directory(i_mode 17700)
[  221.032702][T10078] loop0: detected capacity change from 0 to 256
[  221.042798][T10078] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  221.051910][T10078] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512
[  221.060083][T10078] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[  221.063390][T10078] UDF-fs: Scanning with blocksize 512 failed
[  221.080305][T10078] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  221.096725][T10078] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  221.420195][T10093] loop0: detected capacity change from 0 to 256
[  221.434421][T10093] exfat: Deprecated parameter 'namecase'
[  221.443485][T10093] exfat: Deprecated parameter 'namecase'
[  221.446523][T10093] exfat: Deprecated parameter 'namecase'
[  221.450611][T10093] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  221.472038][T10093] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d)
[  221.599049][   T33] audit: type=1326 audit(1755177725.219:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10098 comm="syz.3.1569" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3f6978ebe9 code=0x0
[  221.702062][T10105] loop3: detected capacity change from 0 to 64
[  221.787587][T10111] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1576'.
[  221.791375][T10111] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1576'.
[  221.877180][T10115] loop3: detected capacity change from 0 to 1024
[  221.881304][T10115] EXT4-fs: Ignoring removed orlov option
[  221.931256][T10115] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  221.935759][   T96] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  221.946970][   T33] audit: type=1800 audit(1755177725.569:316): pid=10115 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1578" name="file1" dev="loop3" ino=15 res=0 errno=0
[  222.005008][ T8877] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  222.133324][   T96] usb 1-1: config 220 has too many interfaces: 184, using maximum allowed: 32
[  222.140573][   T96] usb 1-1: config 220 has 1 interface, different from the descriptor's value: 184
[  222.149908][   T96] usb 1-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85
[  222.157341][   T96] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  222.173022][   T96] gspca_main: sn9c2028-2.14.0 probing 0c45:8008
[  222.240698][T10137] wg1 speed is unknown, defaulting to 1000
[  222.243221][T10137] wg1 speed is unknown, defaulting to 1000
[  222.257166][T10137] wg1 speed is unknown, defaulting to 1000
[  222.267365][T10137] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  222.294452][T10137] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  222.367003][T10137] wg1 speed is unknown, defaulting to 1000
[  222.373027][T10137] wg1 speed is unknown, defaulting to 1000
[  222.377661][T10137] wg1 speed is unknown, defaulting to 1000
[  222.382580][   T96] gspca_sn9c2028: read1 error -71
[  222.389654][   T96] gspca_sn9c2028: read1 error -71
[  222.396866][   T96] gspca_sn9c2028: read1 error -71
[  222.399400][   T96] sn9c2028 1-1:220.0: probe with driver sn9c2028 failed with error -71
[  222.413481][   T96] usb 1-1: USB disconnect, device number 27
[  222.850956][T10179] netlink: 'syz.3.1599': attribute type 32 has an invalid length.
[  223.389859][T10215] loop3: detected capacity change from 0 to 128
[  223.393753][T10215] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  223.407909][T10215] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  223.438790][   T33] audit: type=1800 audit(1755177727.039:317): pid=10215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1613" name="file1" dev="loop3" ino=1048619 res=0 errno=0
[  223.508203][ T1211] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  223.588202][T10228] loop3: detected capacity change from 0 to 1024
[  223.622369][T10231] netlink: 'syz.0.1619': attribute type 10 has an invalid length.
[  223.634350][T10231] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  223.730650][T10241] netlink: 'syz.0.1623': attribute type 11 has an invalid length.
[  223.738033][T10241] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1623'.
[  223.901891][T10255] loop3: detected capacity change from 0 to 512
[  223.912135][T10255] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.1629: casefold flag without casefold feature
[  223.919578][T10255] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1629: couldn't read orphan inode 15 (err -117)
[  223.939331][T10255] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  224.046050][ T8877] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  224.405005][    T9] usb 4-1: new full-speed USB device number 8 using dummy_hcd
[  224.914373][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  224.928631][    T9] usb 4-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00
[  224.938793][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  224.946773][    T9] usb 4-1: config 0 descriptor??
[  224.953221][T10272] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  225.377543][    T9] belkin 0003:050D:3201.000C: item fetching failed at offset 0/3
[  225.380496][    T9] belkin 0003:050D:3201.000C: parse failed
[  225.382354][    T9] belkin 0003:050D:3201.000C: probe with driver belkin failed with error -22
[  225.585055][   T51] usb 4-1: USB disconnect, device number 8
[  226.180899][   T51] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  226.345698][   T51] usb 1-1: Using ep0 maxpacket: 32
[  226.376825][   T51] usb 1-1: config 14 has an invalid interface number: 137 but max is 3
[  226.380000][   T51] usb 1-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config
[  226.383767][   T51] usb 1-1: config 14 has 2 interfaces, different from the descriptor's value: 4
[  226.394003][   T51] usb 1-1: config 14 has no interface number 1
[  226.397528][   T51] usb 1-1: config 14 interface 137 has no altsetting 0
[  226.402444][   T51] usb 1-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=2a.8a
[  226.407889][   T51] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  226.410923][   T51] usb 1-1: Product: syz
[  226.412530][   T51] usb 1-1: Manufacturer: syz
[  226.414280][   T51] usb 1-1: SerialNumber: syz
[  226.534008][T10346] sp0: Synchronizing with TNC
[  226.654603][   T51] ati_remote2 1-1:14.0: ati_remote2_probe(): interface 0 must have an endpoint
[  226.669662][   T51] usb 1-1: USB disconnect, device number 28
[  227.193844][T10354] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1667'.
[  227.200579][T10354] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1667'.
[  227.441055][T10365] netlink: 16222 bytes leftover after parsing attributes in process `syz.2.1672'.
[  228.290712][T10372] loop0: detected capacity change from 0 to 40427
[  228.299089][T10372] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  228.302288][T10372] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  228.372858][T10372] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  228.398428][T10372] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  228.401148][T10372] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  228.548792][T10398] sg_write: data in/out 512/1 bytes for SCSI command 0xb7-- guessing data in;
[  228.548792][T10398]    program syz.3.1686 not setting count and/or reply_len properly
[  228.794229][T10414] loop0: detected capacity change from 0 to 4096
[  228.829406][T10414] ntfs3(loop0): ino=3, ntfs_set_state failed, -22.
[  228.832119][T10414] ntfs3(loop0): Failed to initialize $Secure::$SII (-22).
[  228.840869][T10414] ntfs3(loop0): Failed to initialize $Secure (-22).
[  228.843786][T10414] ntfs3(loop0): ino=3, ntfs3_write_inode failed, -22.
[  228.954272][T10422] loop0: detected capacity change from 0 to 256
[  228.957520][   T24] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  229.324840][   T24] usb 4-1: Using ep0 maxpacket: 16
[  229.328136][   T24] usb 4-1: config 0 has an invalid interface number: 45 but max is 0
[  229.330828][   T24] usb 4-1: config 0 has no interface number 0
[  229.334599][   T24] usb 4-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=85.00
[  229.339143][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  229.341760][   T24] usb 4-1: Product: syz
[  229.343182][   T24] usb 4-1: Manufacturer: syz
[  229.344698][   T24] usb 4-1: SerialNumber: syz
[  229.348957][   T24] usb 4-1: config 0 descriptor??
[  229.559685][   T24] cdc_subset 4-1:0.45: probe with driver cdc_subset failed with error -22
[  229.772405][   T24] usb 4-1: USB disconnect, device number 9
[  230.079378][T10442] delete_channel: no stack
[  230.223355][T10450] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1709'.
[  230.674299][T10484] loop0: detected capacity change from 0 to 8192
[  230.739569][T10481] loop3: detected capacity change from 0 to 32768
[  230.759324][T10481] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1723 (10481)
[  230.778328][T10481] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  230.785918][T10481] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm
[  230.789335][T10481] BTRFS info (device loop3): using free-space-tree
[  230.845716][T10487] mkiss: ax0: crc mode is auto.
[  230.893772][T10481] BTRFS info (device loop3): rebuilding free space tree
[  231.038567][ T8877] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  231.461088][T10516] loop3: detected capacity change from 0 to 32768
[  231.474919][T10516] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1728 (10516)
[  231.503936][T10516] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  231.513604][T10516] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  231.521511][T10516] BTRFS info (device loop3): using free-space-tree
[  231.589567][T10530] loop0: detected capacity change from 0 to 1024
[  231.593361][T10530] EXT4-fs: Ignoring removed nomblk_io_submit option
[  231.627429][T10530] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  231.754625][ T5902] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared)
[  231.759924][ T5849] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  231.821565][ T8877] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  231.948308][T10546] loop0: detected capacity change from 0 to 64
[  232.409051][   T33] audit: type=1804 audit(1755177736.029:318): pid=10557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1742" name="/newroot/172/file0" dev="tmpfs" ino=918 res=1 errno=0
[  232.467328][T10564] netlink: 'syz.0.1745': attribute type 29 has an invalid length.
[  232.472919][T10564] netlink: 'syz.0.1745': attribute type 29 has an invalid length.
[  232.680307][T10570] loop3: detected capacity change from 0 to 8192
[  232.843068][   T33] audit: type=1800 audit(1755177736.459:319): pid=10577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.3.1751" name="/newroot/175/file0" dev="tmpfs" ino=934 res=0 errno=0
[  233.037221][T10587] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1755'.
[  233.111316][   T33] audit: type=1326 audit(1755177736.729:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10593 comm="syz.2.1758" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c51d8ebe9 code=0x7ffc0000
[  233.133859][   T33] audit: type=1326 audit(1755177736.729:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10593 comm="syz.2.1758" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c51d8ebe9 code=0x7ffc0000
[  233.149412][   T33] audit: type=1326 audit(1755177736.729:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10593 comm="syz.2.1758" exe="/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f6c51d8ebe9 code=0x7ffc0000
[  233.159316][   T33] audit: type=1326 audit(1755177736.729:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10593 comm="syz.2.1758" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c51d8ebe9 code=0x7ffc0000
[  233.184844][   T33] audit: type=1326 audit(1755177736.729:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10593 comm="syz.2.1758" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c51d8ebe9 code=0x7ffc0000
[  233.199996][   T33] audit: type=1326 audit(1755177736.729:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10593 comm="syz.2.1758" exe="/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f6c51d8ebe9 code=0x7ffc0000
[  233.224871][   T33] audit: type=1326 audit(1755177736.729:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10593 comm="syz.2.1758" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c51d8ebe9 code=0x7ffc0000
[  233.242865][   T33] audit: type=1326 audit(1755177736.729:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10593 comm="syz.2.1758" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c51d8ebe9 code=0x7ffc0000
[  233.253761][T10601] hugetlbfs: syz.0.1759 (10601): Using mlock ulimits for SHM_HUGETLB is obsolete
[  233.700604][T10598] loop3: detected capacity change from 0 to 32768
[  233.727701][T10598] bcachefs (/dev/loop3): error validating superblock: Invalid superblock section clean: entry type (unknown jset_entry_type 255) overruns end of section
[  233.727701][T10598] clean (size 2912):
[  233.727701][T10598] flags:          0
[  233.727701][T10598] journal_seq:    10
[  233.727701][T10598] write_buffer_keys: btree=inodes level=0 u64s 8 type deleted 0:21474836481:0 len 0 ver 562954248388608: 
[  233.727701][T10598] usage: type=key_version v=0
[  233.727701][T10598] usage: type=reserved v=0
[  233.727701][T10598] usage: type=reserved v=0
[  233.727701][T10598] usage: type=reserved v=0
[  233.727701][T10598] usage: type=reserved v=0
[  233.727701][T10598] data_usage: btree: 1/1 [0]=2816
[  233.727701][T10598] data_usage: journal: 1/1 [0]=0
[  233.727701][T10598] data_usage: user: 1/1 [0]=16
[  233.727701][T10598] dev_usage: dev=0  
[  233.727701][T10598]   free: buckets=83 sectors=0 fragmented=0
[  233.727701][T10598]   sb: buckets=25 sectors=6152 fragmented=248
[  233.727701][T10598]   journal: buckets=8 sectors=2048 fragmented=0
[  233.727701][T10598]   btree: buckets=11 sectors=2816 fragmented=0
[  233.727701][T10598]   user: buckets=1 sectors=16 fragmented=240
[  233.727701][T10598]   cached: buckets=0 sectors=0 fragmented=0
[  233.727701][T10598]   parity: buckets=0 sectors=0 fragmented=0
[  233.727701][T10598]   stripe: buckets=0 sectors=0 fragmented=0
[  233.727701][T10598]   need_gc_gens: buckets=0 sectors=0 fragmented=0
[  233.727701][T10598]   need_discard: buckets=0 sectors=0 fragmented=0
[  233.727701][T10598] clock: read=0
[  233.727701][T10598] clock:
[  233.728055][T10598] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean
[  234.451028][T10626] ieee802154 phy0 wpan0: encryption failed: -22
[  234.591787][T10632] loop0: detected capacity change from 0 to 16
[  234.608640][T10632] erofs (device loop0): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk!
[  234.612663][T10632] erofs (device loop0): mounted with root inode @ nid 36.
[  234.729140][T10636] loop0: detected capacity change from 0 to 128
[  234.738054][T10636] EXT4-fs: Ignoring removed nomblk_io_submit option
[  234.740315][T10636] EXT4-fs: Ignoring removed nomblk_io_submit option
[  234.752152][T10636] EXT4-fs (loop0): Test dummy encryption mode enabled
[  234.757103][T10636] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  234.762204][T10636] ext4 filesystem being mounted at /568/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  234.811217][ T5849] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  234.982737][T10654] loop3: detected capacity change from 0 to 1024
[  235.057757][T10660] loop3: detected capacity change from 0 to 1024
[  235.061271][T10660] EXT4-fs: Ignoring removed orlov option
[  235.070554][T10660] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  235.206086][    T9] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  235.389241][    T9] usb 1-1: config index 0 descriptor too short (expected 45, got 36)
[  235.396182][    T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  235.407110][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  235.416178][ T8877] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  235.419875][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  235.424516][    T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  235.432508][    T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  235.438371][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  235.447337][    T9] usb 1-1: config 0 descriptor??
[  235.450429][T10652] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  235.560776][T10671] loop3: detected capacity change from 0 to 1024
[  235.565854][T10671] EXT4-fs: Ignoring removed nobh option
[  235.568192][T10671] EXT4-fs: Ignoring removed bh option
[  235.587029][T10671] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  235.620068][ T8877] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  235.795882][T10683] loop3: detected capacity change from 0 to 512
[  235.803686][T10683] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.1795: casefold flag without casefold feature
[  235.810508][T10683] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1795: couldn't read orphan inode 15 (err -117)
[  235.816837][T10683] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  235.846479][ T8877] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  235.930504][    T9] plantronics 0003:047F:FFFF.000D: reserved main item tag 0xd
[  235.963275][    T9] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  235.984725][T10692] netlink: 'syz.3.1799': attribute type 5 has an invalid length.
[  236.223566][  T976] usb 1-1: USB disconnect, device number 29
[  237.206065][T10710] loop3: detected capacity change from 0 to 32768
[  237.270768][T10710] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  237.329890][T10710] XFS (loop3): Ending clean mount
[  237.341558][T10710] XFS (loop3): Quotacheck needed: Please wait.
[  237.389969][T10710] XFS (loop3): Quotacheck: Done.
[  237.434938][ T8877] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  237.678478][T10732] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1811'.
[  238.213641][T10751] loop0: detected capacity change from 0 to 32768
[  238.217277][T10751] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1821 (10751)
[  238.223557][T10751] BTRFS info (device loop0): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  238.228039][T10751] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  238.231283][T10751] BTRFS info (device loop0): using free-space-tree
[  239.159694][ T5849] BTRFS info (device loop0): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  239.513652][T10796] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1834'.
[  239.555225][T10796] netlink: 'syz.2.1834': attribute type 2 has an invalid length.
[  239.655173][    T9] usb 1-1: new full-speed USB device number 30 using dummy_hcd
[  239.708256][T10807] netlink: 'syz.3.1839': attribute type 1 has an invalid length.
[  239.798356][T10811] loop3: detected capacity change from 0 to 256
[  239.808996][T10811] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f41, chksum : 0x2f9e4978, utbl_chksum : 0xe619d30d)
[  239.817942][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  239.822042][    T9] usb 1-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00
[  239.831731][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  239.850710][    T9] usb 1-1: config 0 descriptor??
[  239.853471][T10794] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  240.072663][    T9] usbhid 1-1:0.0: can't add hid device: -71
[  240.077232][    T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  240.085962][    T9] usb 1-1: USB disconnect, device number 30
[  240.181921][T10826] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1848'.
[  240.292556][T10832] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1851'.
[  240.297650][T10832] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  241.457922][T10870] loop3: detected capacity change from 0 to 32768
[  241.766468][T10870] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  241.827846][T10870] XFS (loop3): Ending clean mount
[  241.884717][T10870] XFS (loop3): User initiated shutdown received.
[  241.889838][T10870] XFS (loop3): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:476).  Shutting down filesystem.
[  241.899758][T10870] XFS (loop3): Please unmount the filesystem and rectify the problem(s)
[  241.932397][ T8877] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  242.566597][T10913] loop0: detected capacity change from 0 to 4096
[  242.571454][T10913] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512).
[  242.578937][T10913] ntfs3(loop0): $Volume is corrupted.
[  242.700803][T10919] loop0: detected capacity change from 0 to 2048
[  242.703483][T10919] EXT4-fs: Ignoring removed nomblk_io_submit option
[  242.721431][T10919] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  242.728458][T10919] EXT4-fs error (device loop0): ext4_find_dest_de:2052: inode #12: block 5: comm syz.0.1887: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=7952, size=56 fake=0
[  242.739244][T10919] EXT4-fs (loop0): Remounting filesystem read-only
[  242.757002][ T5849] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  242.936441][T10932] random: crng reseeded on system resumption
[  243.064411][T10938] program syz.3.1895 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  243.069177][T10938] program syz.3.1895 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  243.205050][T10945] loop3: detected capacity change from 0 to 512
[  243.231457][T10945] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  243.257125][T10945] EXT4-fs error (device loop3): xattr_find_entry:333: inode #15: comm syz.3.1898: corrupted xattr entries
[  243.268550][T10945] EXT4-fs (loop3): Remounting filesystem read-only
[  243.270712][T10945] EXT4-fs (loop3): 1 truncate cleaned up
[  243.282231][T10945] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  243.295556][T10952] loop0: detected capacity change from 0 to 8
[  243.316677][ T8877] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  243.341111][T10952] SQUASHFS error: Failed to read block 0x6e6: -5
[  243.343364][T10952] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  243.348691][T10952] SQUASHFS error: Unable to read directory block [631:26]
[  243.380887][T10954] loop3: detected capacity change from 0 to 1024
[  243.535839][T10966] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input18
[  243.846145][ T5905] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  244.025936][ T5905] usb 4-1: Using ep0 maxpacket: 32
[  244.093696][ T5905] usb 4-1: config index 0 descriptor too short (expected 35577, got 27)
[  244.097336][ T5905] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  244.100922][ T5905] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92
[  244.104605][ T5905] usb 4-1: config 1 has no interface number 0
[  244.107218][ T5905] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  244.111554][ T5905] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  244.116863][ T5905] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  244.120763][ T5905] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  244.149674][ T5905] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found
[  244.346913][ T5905] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached
[  244.766035][   T51] usb 4-1: USB disconnect, device number 10
[  244.775289][   T51] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected
[  245.163482][T11015] netlink: 'syz.2.1931': attribute type 21 has an invalid length.
[  245.410714][T11032] overlayfs: failed to clone upperpath
[  245.424083][T11029] loop3: detected capacity change from 0 to 4096
[  245.447456][T11029] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512).
[  245.601191][T11030] loop0: detected capacity change from 0 to 32768
[  245.627679][T11030] bcachefs (/dev/loop0): error validating superblock: Invalid superblock section clean: entry type btree_keys overruns end of section
[  245.627679][T11030] clean (size 40):
[  245.627679][T11030] flags:          9
[  245.627679][T11030] journal_seq:    7
[  245.627679][T11030] 
[  245.649259][T11030] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean
[  245.954866][T11036] ntfs3(loop3): ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" ni_find_attr
[  245.963700][T11036] ntfs3(loop3): ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" ni_find_attr
[  246.403603][T11059] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1952'.
[  246.418398][T11059] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1952'.
[  246.945422][ T5905] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  247.097834][ T5905] usb 1-1: Using ep0 maxpacket: 8
[  247.102528][ T5905] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  247.113375][ T5905] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  247.118747][ T5905] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  247.122630][ T5905] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  247.135095][ T5905] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  247.138763][ T5905] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  248.065580][ T5905] usb 1-1: GET_CAPABILITIES returned 0
[  248.070986][ T5905] usbtmc 1-1:16.0: can't read capabilities
[  248.093600][ T5905] usb 1-1: USB disconnect, device number 31
[  248.537132][T11108] loop3: detected capacity change from 0 to 40427
[  248.540877][T11108] F2FS-fs: heap/no_heap options were deprecated
[  248.551735][T11108] F2FS-fs (loop3): build fault injection rate: 19
[  248.553988][T11108] F2FS-fs (loop3): build fault injection type: 0x3bfe8c
[  248.568041][T11108] F2FS-fs (loop3): invalid crc value
[  248.579590][T11108] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x615/0x970
[  248.592920][T11126] netlink: 'syz.2.1978': attribute type 10 has an invalid length.
[  248.658816][T11128] loop0: detected capacity change from 0 to 4096
[  248.659854][T11108] F2FS-fs (loop3): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x20a/0x3f0
[  248.676300][T11108] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  248.681936][T11132] netlink: 'syz.2.1981': attribute type 1 has an invalid length.
[  248.684683][T11108] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  248.688346][T11132] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  248.707078][T11108] F2FS-fs (loop3): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[  248.713838][T11108] F2FS-fs (loop3): inject lock_op in f2fs_trylock_op of f2fs_write_single_data_page+0x9f1/0x16a0
[  248.721920][T11108] syz.3.1971: attempt to access beyond end of device
[  248.721920][T11108] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  248.767361][ T8877] syz-executor: attempt to access beyond end of device
[  248.767361][ T8877] loop3: rw=2049, sector=45112, nr_sectors = 8 limit=40427
[  248.785514][ T8877] CPU: 0 UID: 0 PID: 8877 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  248.785532][ T8877] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  248.785538][ T8877] Call Trace:
[  248.785542][ T8877]  <TASK>
[  248.785547][ T8877]  dump_stack_lvl+0x189/0x250
[  248.785565][ T8877]  ? __pfx_dump_stack_lvl+0x10/0x10
[  248.785575][ T8877]  ? __pfx_queue_work_on+0x10/0x10
[  248.785584][ T8877]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  248.785596][ T8877]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  248.785611][ T8877]  f2fs_handle_critical_error+0x37c/0x540
[  248.785626][ T8877]  f2fs_write_end_io+0x886/0xb60
[  248.785642][ T8877]  __submit_merged_bio+0x27a/0x6a0
[  248.785656][ T8877]  __submit_merged_write_cond+0x255/0x530
[  248.785670][ T8877]  f2fs_write_data_pages+0x261d/0x3000
[  248.785696][ T8877]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  248.785726][ T8877]  ? __mod_zone_page_state+0xd7/0x140
[  248.785743][ T8877]  ? folios_put_refs+0x560/0x640
[  248.785756][ T8877]  ? __pfx_folios_put_refs+0x10/0x10
[  248.785763][ T8877]  ? rcu_is_watching+0x15/0xb0
[  248.785776][ T8877]  ? __lock_acquire+0xab9/0xd20
[  248.785794][ T8877]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  248.785806][ T8877]  do_writepages+0x32e/0x550
[  248.785829][ T8877]  ? do_raw_spin_unlock+0x4d/0x240
[  248.785846][ T8877]  filemap_fdatawrite+0x199/0x240
[  248.785862][ T8877]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  248.785904][ T8877]  ? do_raw_spin_unlock+0x4d/0x240
[  248.785921][ T8877]  f2fs_sync_dirty_inodes+0x31f/0x830
[  248.785941][ T8877]  f2fs_write_checkpoint+0x95a/0x1df0
[  248.785960][ T8877]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  248.785992][ T8877]  ? kill_f2fs_super+0x298/0x6c0
[  248.786004][ T8877]  kill_f2fs_super+0x2c3/0x6c0
[  248.786015][ T8877]  ? __pfx_kill_f2fs_super+0x10/0x10
[  248.786021][ T8877]  ? radix_tree_delete_item+0x2b6/0x400
[  248.786036][ T8877]  ? shrinker_free+0x2ce/0x3e0
[  248.786047][ T8877]  deactivate_locked_super+0xbc/0x130
[  248.786058][ T8877]  cleanup_mnt+0x425/0x4c0
[  248.786068][ T8877]  ? lockdep_hardirqs_on+0x9c/0x150
[  248.786080][ T8877]  task_work_run+0x1d4/0x260
[  248.786093][ T8877]  ? __pfx_task_work_run+0x10/0x10
[  248.786102][ T8877]  ? __x64_sys_umount+0x122/0x160
[  248.786114][ T8877]  ? exit_to_user_mode_loop+0x40/0x110
[  248.786127][ T8877]  exit_to_user_mode_loop+0xec/0x110
[  248.786138][ T8877]  do_syscall_64+0x2bd/0x3b0
[  248.786149][ T8877]  ? lockdep_hardirqs_on+0x9c/0x150
[  248.786159][ T8877]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  248.786167][ T8877]  ? exc_page_fault+0x9f/0xf0
[  248.786178][ T8877]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  248.786186][ T8877] RIP: 0033:0x7f3f6978ff17
[  248.786195][ T8877] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  248.786203][ T8877] RSP: 002b:00007ffeae96ea88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  248.786213][ T8877] RAX: 0000000000000000 RBX: 00007f3f69811c05 RCX: 00007f3f6978ff17
[  248.786225][ T8877] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffeae96eb40
[  248.786230][ T8877] RBP: 00007ffeae96eb40 R08: 0000000000000000 R09: 0000000000000000
[  248.786234][ T8877] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffeae96fbd0
[  248.786240][ T8877] R13: 00007f3f69811c05 R14: 000000000003cb38 R15: 00007ffeae96fc10
[  248.786253][ T8877]  </TASK>
[  248.786257][ T8877] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  250.094965][  T976] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  250.518143][  T976] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  250.521706][  T976] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  250.526393][  T976] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping
[  250.530584][  T976] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  250.537858][  T976] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  250.540955][  T976] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  250.543613][  T976] usb 4-1: SerialNumber: syz
[  250.759090][  T976] usb 4-1: 0:2 : does not exist
[  250.760691][  T976] usb 4-1: unit 5 not found!
[  250.778152][  T976] usb 4-1: USB disconnect, device number 11
[  250.798675][ T5862] udevd[5862]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  250.832275][T11171] futex_wake_op: syz.2.1996 tries to shift op by 32; fix this program
[  250.991527][T11167] loop0: detected capacity change from 0 to 40427
[  251.053022][T11167] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  251.060008][T11167] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  251.095855][   T33] kauditd_printk_skb: 1 callbacks suppressed
[  251.095866][   T33] audit: type=1800 audit(1755177754.699:329): pid=11167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1994" name="file1" dev="loop0" ino=10 res=0 errno=0
[  251.106881][ T5849] syz-executor: attempt to access beyond end of device
[  251.106881][ T5849] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  251.111298][ T5849] CPU: 1 UID: 0 PID: 5849 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  251.111314][ T5849] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  251.111320][ T5849] Call Trace:
[  251.111325][ T5849]  <TASK>
[  251.111329][ T5849]  dump_stack_lvl+0x189/0x250
[  251.111347][ T5849]  ? __pfx_dump_stack_lvl+0x10/0x10
[  251.111357][ T5849]  ? __pfx_queue_work_on+0x10/0x10
[  251.111366][ T5849]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  251.111378][ T5849]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  251.111394][ T5849]  f2fs_handle_critical_error+0x37c/0x540
[  251.111410][ T5849]  f2fs_write_end_io+0x886/0xb60
[  251.111428][ T5849]  __submit_merged_bio+0x27a/0x6a0
[  251.111443][ T5849]  __submit_merged_write_cond+0x255/0x530
[  251.111458][ T5849]  f2fs_write_data_pages+0x261d/0x3000
[  251.111487][ T5849]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  251.111528][ T5849]  ? folios_put_refs+0x559/0x640
[  251.111545][ T5849]  ? __lock_acquire+0xab9/0xd20
[  251.111561][ T5849]  ? do_raw_spin_lock+0x121/0x290
[  251.111576][ T5849]  ? do_raw_spin_unlock+0x4d/0x240
[  251.111585][ T5849]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  251.111596][ T5849]  do_writepages+0x32e/0x550
[  251.111613][ T5849]  ? do_raw_spin_unlock+0x4d/0x240
[  251.111625][ T5849]  filemap_fdatawrite+0x199/0x240
[  251.111635][ T5849]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  251.111670][ T5849]  ? do_raw_spin_unlock+0x4d/0x240
[  251.111681][ T5849]  f2fs_sync_dirty_inodes+0x31f/0x830
[  251.111698][ T5849]  f2fs_write_checkpoint+0x95a/0x1df0
[  251.111718][ T5849]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  251.111751][ T5849]  ? kill_f2fs_super+0x298/0x6c0
[  251.111762][ T5849]  kill_f2fs_super+0x2c3/0x6c0
[  251.111773][ T5849]  ? __pfx_kill_f2fs_super+0x10/0x10
[  251.111780][ T5849]  ? radix_tree_delete_item+0x2b6/0x400
[  251.111795][ T5849]  ? shrinker_free+0x2ce/0x3e0
[  251.111806][ T5849]  deactivate_locked_super+0xbc/0x130
[  251.111817][ T5849]  cleanup_mnt+0x425/0x4c0
[  251.111826][ T5849]  ? lockdep_hardirqs_on+0x9c/0x150
[  251.111837][ T5849]  task_work_run+0x1d4/0x260
[  251.111849][ T5849]  ? __pfx_task_work_run+0x10/0x10
[  251.111858][ T5849]  ? __x64_sys_umount+0x122/0x160
[  251.111871][ T5849]  ? exit_to_user_mode_loop+0x40/0x110
[  251.111885][ T5849]  exit_to_user_mode_loop+0xec/0x110
[  251.111896][ T5849]  do_syscall_64+0x2bd/0x3b0
[  251.111906][ T5849]  ? lockdep_hardirqs_on+0x9c/0x150
[  251.111916][ T5849]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  251.111924][ T5849]  ? exc_page_fault+0x9f/0xf0
[  251.111935][ T5849]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  251.111942][ T5849] RIP: 0033:0x7f134018ff17
[  251.111952][ T5849] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  251.111960][ T5849] RSP: 002b:00007ffcdccd1dd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  251.111969][ T5849] RAX: 0000000000000000 RBX: 00007f1340211c05 RCX: 00007f134018ff17
[  251.111975][ T5849] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcdccd1e90
[  251.111980][ T5849] RBP: 00007ffcdccd1e90 R08: 0000000000000000 R09: 0000000000000000
[  251.111985][ T5849] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcdccd2f20
[  251.111990][ T5849] R13: 00007f1340211c05 R14: 000000000003d457 R15: 00007ffcdccd2f60
[  251.112005][ T5849]  </TASK>
[  251.112009][ T5849] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  251.752831][T11191] loop3: detected capacity change from 0 to 128
[  251.785325][T11191] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  251.792395][T11191] ext4 filesystem being mounted at /246/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  251.863092][ T8877] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  253.620972][T11266] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2035'.
[  254.078905][T11279] loop3: detected capacity change from 0 to 2048
[  254.091458][T11279] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found!
[  254.099618][T11279] UDF-fs: warning (device loop3): udf_fill_super: No partition found (2)
[  254.241615][T11287] loop3: detected capacity change from 0 to 1024
[  254.253627][T11287] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  255.095181][ T5860] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  255.100733][ T5860] Bluetooth: hci1: Injecting HCI hardware error event
[  255.108098][   T54] Bluetooth: hci1: hardware error 0x00
[  255.517363][ T1366] ieee802154 phy0 wpan0: encryption failed: -22
[  255.519944][ T1366] ieee802154 phy1 wpan1: encryption failed: -22
[  255.556295][T11336] vxcan0: tx drop: invalid sa for name 0x0000001000000000
[  255.672424][T11339] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000005: 0000 [#1] SMP KASAN PTI
[  255.677476][T11339] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f]
[  255.681020][T11339] CPU: 0 UID: 0 PID: 11339 Comm: syz.0.2068 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  255.686682][T11339] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  255.690746][T11339] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0
[  255.693020][T11339] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 39 5e 36 f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 18 5e 36 f9 4d 8b 24 24 48 83 c3
[  255.700568][T11339] RSP: 0018:ffffc900075f7a60 EFLAGS: 00010206
[  255.702998][T11339] RAX: 0000000000000005 RBX: ffff888039064600 RCX: 0000000000080000
[  255.706161][T11339] RDX: ffffc9000a749000 RSI: 00000000000003b4 RDI: 00000000000003b5
[  255.709380][T11339] RBP: 0000000000000001 R08: ffff88810f5da92f R09: 1ffff11021ebb525
[  255.712731][T11339] R10: dffffc0000000000 R11: ffffffff88ec9110 R12: 0000000000000028
[  255.715892][T11339] R13: dffffc0000000000 R14: ffff88810f5da800 R15: dffffc0000000000
[  255.719050][T11339] FS:  00007f1340fc86c0(0000) GS:ffff8880b861c000(0000) knlGS:0000000000000000
[  255.722490][T11339] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  255.724990][T11339] CR2: 0000001b3281fff8 CR3: 0000000109f9a000 CR4: 00000000000006f0
[  255.728068][T11339] Call Trace:
[  255.729449][T11339]  <TASK>
[  255.730675][T11339]  pcl818_detach+0x66/0xd0
[  255.732513][T11339]  comedi_device_detach_locked+0x178/0x750
[  255.734916][T11339]  comedi_unlocked_ioctl+0xcde/0x1020
[  255.737116][T11339]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  255.739470][T11339]  ? __lock_acquire+0xab9/0xd20
[  255.741485][T11339]  ? __fget_files+0x2a/0x420
[  255.743362][T11339]  ? __fget_files+0x2a/0x420
[  255.745259][T11339]  ? __fget_files+0x3a0/0x420
[  255.747176][T11339]  ? __fget_files+0x2a/0x420
[  255.749068][T11339]  ? bpf_lsm_file_ioctl+0x9/0x20
[  255.751196][T11339]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  255.753580][T11339]  __se_sys_ioctl+0xfc/0x170
[  255.755435][T11339]  do_syscall_64+0xfa/0x3b0
[  255.757270][T11339]  ? lockdep_hardirqs_on+0x9c/0x150
[  255.759351][T11339]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  255.761784][T11339]  ? exc_page_fault+0x9f/0xf0
[  255.763693][T11339]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  255.766066][T11339] RIP: 0033:0x7f134018ebe9
[  255.767906][T11339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  255.775591][T11339] RSP: 002b:00007f1340fc8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  255.778977][T11339] RAX: ffffffffffffffda RBX: 00007f13403b6090 RCX: 00007f134018ebe9
[  255.782199][T11339] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000005
[  255.785409][T11339] RBP: 00007f1340211e19 R08: 0000000000000000 R09: 0000000000000000
[  255.788607][T11339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  255.791749][T11339] R13: 00007f13403b6128 R14: 00007f13403b6090 R15: 00007ffcdccd2b48
[  255.794800][T11339]  </TASK>
[  255.796091][T11339] Modules linked in:
[  255.798877][T11339] ---[ end trace 0000000000000000 ]---
[  255.806544][T11334] loop3: detected capacity change from 0 to 32768
[  255.825092][T11339] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0
[  255.839554][T11334] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2066 (11334)
[  255.862304][T11339] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 39 5e 36 f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 18 5e 36 f9 4d 8b 24 24 48 83 c3
[  255.881509][T11339] RSP: 0018:ffffc900075f7a60 EFLAGS: 00010206
[  255.889254][T11334] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  255.894526][T11334] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  255.897519][T11339] RAX: 0000000000000005 RBX: ffff888039064600 RCX: 0000000000080000
[  255.902813][T11339] RDX: ffffc9000a749000 RSI: 00000000000003b4 RDI: 00000000000003b5
[  255.904399][T11334] BTRFS info (device loop3): using free-space-tree
[  255.907104][T11339] RBP: 0000000000000001 R08: ffff88810f5da92f R09: 1ffff11021ebb525
[  255.916179][T11339] R10: dffffc0000000000 R11: ffffffff88ec9110 R12: 0000000000000028
[  255.926368][T11339] R13: dffffc0000000000 R14: ffff88810f5da800 R15: dffffc0000000000
[  255.935860][T11339] FS:  00007f1340fc86c0(0000) GS:ffff8880b861c000(0000) knlGS:0000000000000000
[  255.945475][T11339] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  255.948335][T11339] CR2: 00007ffc015a11c8 CR3: 0000000109f9a000 CR4: 00000000000006f0
[  255.951573][T11339] Kernel panic - not syncing: Fatal exception
[  255.954714][T11339] Kernel Offset: disabled
[  255.956476][T11339] Rebooting in 86400 seconds..

VM DIAGNOSIS:
13:22:39  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=0000000000000000 RCX=0000000000000000 RDX=00000000000003f9
RSI=00000000000015aa RDI=00000000000015ab RBP=00000000000003f9 RSP=ffffc900075f71f0
R8 =0000000000000001 R9 =0000000000000000 R10=dffffc0000000000 R11=ffffffff854efeb0
R12=dffffc0000000000 R13=dffffc0000000000 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854eff2c RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f1340fc86c0 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b3281fff8 CR3=0000000109f9a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f1340387498 00007f1340387470 XMM03=00007f13403874a8 00007f13403874a0
XMM04=00007f1340eed100 00007f1340387460 XMM05=00007f1340387478 00007f13403874c0
XMM06=00007f13403874b8 00007f13403874b0 XMM07=00007f13403874a8 00007f13403874a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f1340212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=1ffff11009608341 RCX=0000000000080000 RDX=ffffc9002a801000
RSI=000000000007ffff RDI=0000000000080000 RBP=ffffc900072d76e0 RSP=ffffc900072d7560
R8 =ffffffff8fa37e37 R9 =1ffffffff1f46fc6 R10=dffffc0000000000 R11=fffffbfff1f46fc7
R12=ffff88804b041a08 R13=dffffc0000000000 R14=ffff88813663b1c0 R15=0000000000000000
RIP=ffffffff81b44d3c RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f3f6a56e6c0 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f1340fc8d58 CR3=000000011f844000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=00007f3f6a56d5a0 00007f3f6a56d580
XMM02=00007f3f6a56d6e0 00007f3f6a56d560 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00007f3f6a56d5a0 XMM05=0000000000000000 00007f3f6a56d6e0
XMM06=00007f3f6a56d6e0 00007f3f6a56d560 XMM07=00007f3f6a56d5a0 00007f3f6a56d580
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 00007f3f69812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
