last executing test programs:

6m5.769514886s ago: executing program 2 (id=1275):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x200801f, &(0x7f00000000c0), 0xfe, 0x4ec, &(0x7f0000000380)="$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")
syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000200)='./file2\x00', 0x40c8, &(0x7f0000000880)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}}, 0x1, 0x0, 0x0)

6m5.476829504s ago: executing program 2 (id=1278):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_rdma(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=rdma,port'])
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='cifs\x00', 0x0, &(0x7f00000001c0)='=\n\x9b\xa1Q\x83\xe9\n@\xf6\"2a\xd7\x1fch\x1a}#\xfa\xe4`\xdc[\x03\x97\xcd\xf1\xa6b\x9a\x1f\xff\xff\xffIT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,,\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nS\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|')

6m5.339459007s ago: executing program 2 (id=1280):
syz_usb_connect(0x3, 0x3f, &(0x7f0000000400)={{0x12, 0x1, 0x200, 0x46, 0x6c, 0x39, 0x40, 0x1784, 0x6, 0xbb2f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x30, 0x3, 0xb0, 0x8, [{{0x9, 0x4, 0x0, 0x62, 0x3, 0x94, 0x98, 0x2f, 0xd7, [], [{{0x9, 0x5, 0x4, 0x2, 0x400, 0x26, 0xe, 0x6}}, {{0x9, 0x5, 0x8, 0x0, 0x40, 0x9, 0x4, 0x7}}, {{0x9, 0x5, 0x9, 0x2, 0x400, 0x0, 0x30, 0xe0}}]}}]}}]}}, 0x0)

6m3.998760799s ago: executing program 2 (id=1295):
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x0, 0xa, 0xfffffffb, 0x14, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x0, 0x1}, 0x48)

6m2.08197586s ago: executing program 2 (id=1308):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2145c99, 0x0)
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0)

6m2.003526427s ago: executing program 2 (id=1310):
r0 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r0, 0x84, 0x25, 0x0, 0x0)

5m45.954037887s ago: executing program 32 (id=1310):
r0 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r0, 0x84, 0x25, 0x0, 0x0)

5m22.315162498s ago: executing program 0 (id=1808):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r1}, 0x10)

5m22.314994616s ago: executing program 0 (id=1809):
r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000003c0)={0x101, 0x2, 0x4, 0x0, 0xe1})
ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405668, &(0x7f0000000100)={0x2, 0x0, 0x2, 0x800})

5m22.31037238s ago: executing program 0 (id=1812):
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/146, 0x97}], 0x1, &(0x7f0000002f40)=""/229, 0xffffffffffffff8d}, 0x0)
sendmsg$tipc(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000d80)="b8d3d8e48974aae503984742e847457d61b9459b68100dbf05177b2436f9d642df271fd6b9aa365ffc723899ad120c5a54b1c64080f64f103ee1de769e5e9dd8cbb6f06952a16f40cb3a1f6f3d5f8df14c53b2e6b5397f7806b6ff846de37a3408000000c57c6f0cd8a09cede8676044eafd3d7935f90698aa2d9c57276322b82e8976f5a4d980eaeb3b636610f2e2c7945ed5000529e4f8f9f5", 0x9a}], 0x1, 0x0, 0x0, 0x94}, 0x20004001)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x2000001, 0x31, 0xffffffffffffffff, 0xf983e000)
close(r1)

5m22.236984744s ago: executing program 0 (id=1815):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket(0x25, 0x1, 0x0)
r0 = syz_io_uring_setup(0x9e, &(0x7f0000000000)={0x0, 0xec25, 0x0, 0x2, 0x40000333}, &(0x7f0000000240)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6007, @fd_index=0x4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001800)=""/211, 0xd3}], 0x1})
io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0)

5m21.66047018s ago: executing program 0 (id=1821):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt', 0x0, 0x0)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a})
r1 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
syz_usbip_server_init(0x1)
ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1, 0x9})
r2 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0)
poll(&(0x7f0000000380)=[{r2, 0x1200}], 0x1, 0x60000000)
ioctl$SNDCTL_SEQ_RESET(r3, 0x5100)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x1c0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x0, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r4, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @aes256, 0x0, '\x00', @a})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000700)='mnt/encrypted_dir/file\x00', 0x42, 0x180)
write(r5, &(0x7f0000000740)='foo', 0x3)

5m21.504116935s ago: executing program 3 (id=1822):
r0 = socket(0x2, 0x80805, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x0, 0x8000, 0xffffffff, 0x7, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x68, 0x700, 0x88, 0x29, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}}}}})
getsockopt$bt_hci(r0, 0x84, 0x71, &(0x7f0000000000)=""/4102, &(0x7f0000001080)=0x1006)

5m21.504016579s ago: executing program 1 (id=1823):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r1, &(0x7f0000000000)="2e000000010002", 0x7)

5m21.399060591s ago: executing program 3 (id=1824):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', <r1=>0x0})
capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140))
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x7, 0x2262, 0x2, 0x0, 0xffffffffffffffff, 0x4, '\x00', r1}, 0x50)

5m21.398879473s ago: executing program 1 (id=1825):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0xabd7, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000240)={0x0})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={0x0})
ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f00000004c0)={0x0, 0x0, 0x0})

5m21.30824992s ago: executing program 3 (id=1826):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "0002002000", "07f217bd74511e465bbbd5de01000000f9044677d4d588363d63af84db44be59", "00f8ff00", "8ce63ecbc640735f"}, 0x38)
r1 = socket$inet6(0x10, 0x2, 0x4)
sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x40, 0x0, 0x0)

5m21.229618064s ago: executing program 1 (id=1827):
syz_emit_ethernet(0x5a, &(0x7f0000000380)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0xe, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210104, @local, {[@timestamp_addr={0x44, 0x14, 0xa, 0x1, 0x0, [{@multicast1}, {@multicast2}]}, @generic={0x7, 0x10, "0990e4742f779fb0a61c61af8e0c"}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0)

5m21.229303572s ago: executing program 3 (id=1828):
r0 = syz_open_dev$vbi(&(0x7f0000001040), 0x0, 0x2)
ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000002c0)={0x7, 0x6, 0x1, 0x0, 0x4})

5m21.136626954s ago: executing program 1 (id=1829):
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2041, 0x0)
write$sndseq(r0, &(0x7f0000000600)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x2}, {}, @addr={0x5b, 0x5d}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {0x5}, @quote={{0x5, 0x5}}}, {0x0, 0x0, 0x0, 0x0, @tick=0x5, {}, {0x0, 0xfd}, @connect={{0x7, 0x5f}, {0x2, 0x1}}}, {0x1, 0x0, 0x1, 0x0, @tick=0x2, {0x4, 0x1}, {0x4, 0x8}, @quote={{0x2, 0xd8}, 0x8}}], 0x70)

5m21.064610065s ago: executing program 3 (id=1830):
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}}, 0x14}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x4048000}, 0x14)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="760100001b"], 0x188}, 0x1, 0x0, 0x0, 0x40004}, 0x0)

5m21.064376426s ago: executing program 1 (id=1831):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x30, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0)

5m20.886484029s ago: executing program 1 (id=1832):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
mkdir(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x4b, 0x89}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
creat(&(0x7f00000001c0)='./file0\x00', 0x40)
syz_io_uring_setup(0x5ce, &(0x7f0000000240)={0x0, 0x7730, 0x80, 0x0, 0x34d}, &(0x7f0000000480)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4)
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7)
ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=<r9=>0x0)
sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYRES32=r9], 0x1c}}, 0x0)
sendmsg$NFC_CMD_START_POLL(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x24, r5, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NFC_ATTR_PROTOCOLS={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x40000010)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0xb2752a96f73d6e15, 0x0, 0x0, 0x0, 0x31712})
r10 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4)
setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10)
setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10)

4m46.749790214s ago: executing program 0 (id=1833):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0xffffffff, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x3cd, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x1, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0xfffffe57}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x5}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0xe32fa770305bfcda}, 0x0)

4m46.678972255s ago: executing program 3 (id=1834):
syz_emit_ethernet(0x56, &(0x7f0000004180)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x0, @local, @local, {[], {{0x8000, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x100, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @timestamp={0x8, 0xa, 0x0, 0x8}]}}}}}}}}, 0x0)

4m46.584303004s ago: executing program 33 (id=1832):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
mkdir(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x4b, 0x89}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
creat(&(0x7f00000001c0)='./file0\x00', 0x40)
syz_io_uring_setup(0x5ce, &(0x7f0000000240)={0x0, 0x7730, 0x80, 0x0, 0x34d}, &(0x7f0000000480)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4)
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7)
ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=<r9=>0x0)
sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYRES32=r9], 0x1c}}, 0x0)
sendmsg$NFC_CMD_START_POLL(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x24, r5, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NFC_ATTR_PROTOCOLS={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x40000010)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0xb2752a96f73d6e15, 0x0, 0x0, 0x0, 0x31712})
r10 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4)
setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10)
setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10)

4m46.410295952s ago: executing program 34 (id=1833):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0xffffffff, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x3cd, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x1, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0xfffffe57}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x5}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0xe32fa770305bfcda}, 0x0)

4m45.618056273s ago: executing program 35 (id=1834):
syz_emit_ethernet(0x56, &(0x7f0000004180)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x0, @local, @local, {[], {{0x8000, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x100, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @timestamp={0x8, 0xa, 0x0, 0x8}]}}}}}}}}, 0x0)

3m14.201476636s ago: executing program 5 (id=2482):
r0 = fsopen(&(0x7f0000000000)='nfs4\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source', &(0x7f0000001bc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b<M\n\xc0`[\x82\xf6$\xa4\xbe\x1e\xd3\xe4\xd9L\x14\xed\xcfK\xcc\xeb,\x1a1\xa6\xf3e\xc2F\xc3\x00\xaa\xd5\xfc\x1bR\xa9\x8c\xb4&\x9f\xa2$\x06\x1a\xb0W#\xf4\xde6\x04c\xc0\xeec\xa0l\xd5d\xe5\xcd\xb2\xc10\x97w\x87\xe5\x06\x91W\rr\xf5\x97%\xe8pO\xeb]\xc2\x98C\xffK\xa0\xb3\\\x99{\xcdR\x92\x94\xf7\x1d\x01Q\x1a\xbd\x15b\x15h\xe2!\x00\xb9z)\x19\x00\xee\xd2)[p`\xb3\x03\xa7p\'X\xec\xcdoX\x05\xff\xff/o\xb2\xad\xb8\x89i@\f\xffS&\x8a\xc9\xfez\xc2\x90\xe7F\xa6\xdb\r\x03j,N\xe1lw\n\xad\xe8\xf0\xbd\xa1\x98\xce\xf9\x1eR\x9cc\xc5ke_\xa7\x11\"\x04\xd8.\xa0\x15\x83\xf1\x92\xdby\xe9\xdc@.\xc1g\xc6\fc\xa26\xd8\xdf\xef\xf7\x9c\x1a\xcc\x8am\x8b7\xcf\xc5\xa6\xf4\f\xabj%Y\xa9\xdd\x0e9e\xb5\xec\x99@\xd2\t\n\xb1o', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='source', &(0x7f00000019c0)='//\xf2/\x06\b/?\\o\xdc\xea\x95\x9a)\x00bb\x8a\x80\x91\xdf\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6h\xd1\x1d\xac\xaa\xfb\xc7Y\xcd\xc5n\xeb\xab\xf70\x99\xef\x8b<M\n\xc0`[\x82\xf6$\xa4\xbe\x1e\xd3\xe4\xd9L\x14\xed\xcfK\xcc\xeb,\x1a1\xa6\xf3e\xc2F\xc3\x00\x9c\x00\x00\x00\x00\x00\x00\x00&\x9f\xa2$\x06\x1a\xb0W#\xf4\xde6\x04c\xc0\xeec\xa0l\xd5d\xe5\xcd\xb2\xc50\x97w\x87\xe5\x06\x91W\rr\xf5\x97%\xe8pO\xeb]\xc2\x98C\xffK\xa0\xb3\\\x99{\xcdR\x92\x94\xf7\x1d\x01Q\x1a\xbd\x15b\x15h\xe2!\x00\xb9z)\x19\x00\xee\xd2)[p`\xb3\x03\xa7p\'X\xec\xcdoX\x05\xff\xff/o\xb2\xad\xb8\x89i@\f\xffS&\x8a\xc9\xfez\xc2\x90\xe7F\xa6\xdb\r\x03j,N\xe1lw\n\xad\xe8\xf0\xbd\xa1\x98\xce\xf9\x1eR\x9cc\xc5ke_\xa7\x11\"\x04\xd8.\xa0\x15\x83\xf1\x92\xdby\xe9\xdc@.\xc1g\xc6\fc\xa26\xd8\xdf\xef\xf7\x9c\x1a\xcc\x8am\x8b7\xcf\xc5\xa6\x05\f\xabj%Y\xa9\xdd\x0e9e\xb5\xec\x99@\xd2\t\n\xb1oO\xe4\x99\xd6\xed\x83\xb0\x18q\xb9\xda\xf1kk\xb0N\xe69D\x12\x1f\x96\x85y\xe1\xf6\x83\x81\xc1\xcb\x169\xa5A%\xcb\n\xaby\x9f\x97\xde\xcf\x14\x0f\xffl\xb0e\xa2m\xb3\x8fsI\xc8v<\x8a\\7\xbaA\xef\x92\x98K\xfd\xaa\xdb', 0x0)

3m14.013025465s ago: executing program 5 (id=2485):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0x9, {"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", 0x1000}}, 0x1068)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)

3m13.882097182s ago: executing program 4 (id=2488):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a3200000000090001"], 0xe8}}, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)

3m12.880747479s ago: executing program 4 (id=2490):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xfffffc}, 0x10)
write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000901000000000000000005000000000800040001000000", 0x24)

3m12.816667064s ago: executing program 5 (id=2491):
ioctl$VIDIOC_ENUMSTD(0xffffffffffffffff, 0xc0205647, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
io_setup(0x4, &(0x7f0000000340))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8)
syz_clone3(&(0x7f0000000980)={0x200, 0x0, &(0x7f0000000780), 0x0, {0x5}, &(0x7f0000000800)=""/112, 0x70, 0x0, 0x0}, 0x58)
io_setup(0x7, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
io_submit(0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x23, 0x8, 0x7ffd}, 0x50)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)

3m12.816479604s ago: executing program 4 (id=2492):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x60040, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@delchain={0x24, 0x64, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)

3m12.483597128s ago: executing program 6 (id=2498):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x4, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x4}, @func_proto={0x2, 0x0, 0x0, 0x12, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x54, 0x0, 0x2}, 0x28)
close(0x3)

3m12.400980149s ago: executing program 4 (id=2499):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000400), 0x9)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000440)=ANY=[], 0x1f)
ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000500)=0x3)
ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x2)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000140)=0xffffffc0)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000280)=0x4)
ioctl$TIOCSTI(r3, 0x5412, 0x0)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0)

3m12.331886144s ago: executing program 6 (id=2500):
syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x2000c8, &(0x7f0000000c80)={[{@fat=@fmask={'fmask', 0x3d, 0x6}}, {@nodots}, {@dots}, {@fat=@tz_utc}, {@dots}, {@nodots}, {@dots}, {@dots}, {@dots}, {@fat=@umask={'umask', 0x3d, 0x6}}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x40001}}, {@fat=@codepage={'codepage', 0x3d, '874'}}, {@nodots}, {@nodots}, {@fat=@sys_immutable}, {@dots}, {@nodots}, {@dots}, {@dots}, {@fat=@usefree}, {@fat=@codepage={'codepage', 0x3d, '860'}}, {@nodots}, {@nodots}]}, 0x0, 0x1bf, &(0x7f0000000940)="$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")

3m12.087134198s ago: executing program 6 (id=2501):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000580)={0x3, &(0x7f0000000680)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}, {0x2c, 0x2, 0x1, 0x3}, {0x6, 0xd5, 0x9, 0x5}]})

3m11.972557656s ago: executing program 6 (id=2502):
socket$inet(0x2, 0x801, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0)
rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8)
r1 = gettid()
r2 = getpid()
rt_tgsigqueueinfo(r2, r1, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x4})
r3 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffe]}, 0x8)
read(r3, &(0x7f0000000740)=""/384, 0x200008c0)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)

3m10.627898845s ago: executing program 5 (id=2503):
pipe2(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
splice(r1, 0x0, r0, 0x0, 0x2000, 0x0)

3m10.453284724s ago: executing program 6 (id=2504):
syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file0\x00', 0xa00000, &(0x7f0000000000)=ANY=[@ANYBLOB='anchor=0\x00000000000000000001,\x00'], 0x0, 0xc85, &(0x7f0000000100)="$eJzs3V9sZNdZAPDvXI93ZjeUuE1Y0tK0E0Bls82G/dd4m0XJLHEMlTabVb3uWyXPrr3LKF7bsr2wiQq4vPDAAxJCPPTJEixIRVQRRRUPILkQpPYlEqhPPFmgRBXiwaBKRUjI6N45sx57vYm73vX+ye+X2N/cO+fce86543sSy989AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABE/OqrZ44eS9u8MXAfGgMA7IlzY18+eny7+R8AeGRduN3//wMAAAAAAAAAAAAAAA+KFEU8ESnmzq2liWq7q3G2M3jt+vjI6PbV9qeq5kBVvvxqHDt+4uQXXhg+1YtnOzMfUP9u+1S8PnbhTPOV2atz81MLC1OTzfGZzqXZyakdH2G39bc6XA1A8+ob1yYvX15oHn/+xKa3rw+9X3/s4NDp4WePPN0rOz4yOjq2UaTRX752xw3p2i7D43cjYl8UcSRSPPetH6Z2RBSx+7Fo7O2132p/1YnDVSfGR0arjkx32jOL5ZvnewNRRDT7KrV6Y7T9tYja4J72Yavi5qtWxFK5o2zw4bJ7Y3Pt+fbF6anm+fb8YmexMztzPnVbW/anGUWcShHLEbFav/XAg1FELVJ84/G1dDE/9aMah89XicE7adF9UbazORixXDyw1+yhUI8iXosUP3rnUFzK95nqXvO5iNfK+J2IG2V8KSKVH4yTEe9t8zni4VSLIv6gvP5/97E0Wd0PeveVs19pfmnm8mxf2d595SecH265U9zj+eGzt9m/f0vcGw/4vakRRbSrO/5a+rAJ3o89AAAAAAAAAAAAAAAAwN7ZH0V8MlK8+i+/WeUVR5WX/vjp4V8b+lh/zvhTH3KcsuzzEbFU7Cwnd19ODDyfzqd0n3OJP8oaUcRv5/y/r9/vxgAAAAAAAAAAAAAAAAAAAHykFfGDSPHiu4fScvSvKd6ZudK80L443V0Vtrf2b2/N9PX19fVm6sZWjhM5LuW4nONKjqs5RpHr59jKcSLHpRyXc1zJcTXHGMj1c2zlOJHjUo7LOa7kuJpj1HL9HFs5TvRWBs7byzmu5LiaYzwga/cCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADxKiihisLeRIqIV9Rjqbq7U72PDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICb6qmIb0eK5q+3bu6rRUSq/u06VH47Ga19ZfxEtIbL+FK0zuTYrmKt9fX70H52ZzAV8f1IUW+8ffOC5+s/2N26+TGIG1/b2PpUrRsHem8OvV9/7ODjp4dHP/PU7V6n7Rpw+Gxn5tr15vjIaIz17a7ls3+ib99QPm9xd7pORCy8+dYb7enpqfk7f1F+BHZR/SF6kWp33tO7OOAf5ReNPT1p1HZceH3gEfsp2HyfaNyHexP3Xjn/vxcpfvndf+1N+N35vxE/1d26OcPHj39nY/5/ceuBPmz+fzmq+b+2tV6e/8s5fbv5/4m+fS/m/xoZrEU0Fq/ODR6MaCy8+daRztX2lakrUzMnjx794vDwF08cHdwX0bjcmZ7qe3VXhgsAAAAAAAAAAAAAAABg76QiXo4U7e+vpWZEXK/ytYZODz975OmBGKjyrTblbb8+duFM85XZq3PzUwsLU5PN8ZnOpdnJqZ2erlGle42PjN6TznyYp/bf4/bvb7wyO/fmfOfKbyxu+/6BxpmLC4vz7Uvdt/ffUj+KiFb/nsNVg8dHRqtGT3faM1XV89VF2X0m/GAq4t8ixaWTzfRM3pfz/7dm+G/K/1/aeqDd5f/XxkdGR3v5f585sJH/9/G+ouU5Uyrix5Hil/7oqXimaueBuGXMcrk/ixSHT306l4t9ZbleG7rPFehmBpZl/ytS/PX/bS7by4d8YqPssZ9ocB8C5fV/PFJ8+/e/GT+f921+/sP21//A1gPt/vkPo9vlfz7Zt+/ApvT5XXedfP2PRIqXnng7fqHa878f+PyP3h3nULfwxvM57tH1/5m+fUP5vL94tzoPAAAAAAAAAADwEBtMRfxFpPjuaC29kPft5O//Jrce6B79/Ve9b9/kHi2fs+tBBQAAAIAHxGAq4geR4sri2zdzqDfnf/d+a1fEjV/J+Z//s76+nja/2/09309Xzw24m7//6zcUESMpYuIu9R0AAAAAAAAAAAAAAAAAAAAeFCkV8UJeT32iyuefvO166iuR4tX/eC6XSwfLcr114Ieq741zszNHzkxPzzZisX1xeqo5Nte+NFXWfTJSrP3pp3Pdolpf/Zlo9p1hYy32+Ugx+pe9st212Htrkz+5UfZYWfbjkeLf/2pz2bw0dV47uip7vCz7J5Hiq3+7fdmDG2VPlGW/GSm+99Vmr+yBsmzv+ag/u1H2+Uuzu1+DHwAAAAAAAAAAAAAAAAAAAAZTEb8XKf7z6vLNXP68/v9g32blxtf61vvf4nq1zv9Qtf7/7V7fyfr/1XMFlm53VgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeDSlKOKtSDF3bi2t1MvtrsbZzsy16+MjoxExcGu1/amqOVCVL78ax46fOPmFF4ZP9WJf/T3wyXh97MKZ5iuzV+fmpxYWpiab4zOdS7OTUzs+wm7rb3W4GoDm1TeuTV6+vNA8/vyJTSN5fej9+mMHh04PP3vk6V7Z8ZHR0bG+Q9QG7/jst0i32b8vivjjSPHct36YvluPKGL3Y9HY22u/1f6qE4erToyPjFYdme60ZxbL0T/fG4giotlXqdUboz24FrvSilgqm182+HDZvbG59nz74vRU83x7frGz2JmdOZ+6rS3704wiTqWI5YhYrd96uMEo4o1I8Y3H19I/1Luf0GocPn9u7MtHj9++HcU97OMOlO1sDkYsFw/BNXuA1aOIv4kUP3rnUPxjPaIW3a/4XMRrZfxOxI3oXu9UfjBORry3zeeIh1Mtivjv8vqfXkvv1Mv7Qe++cvYrzS/NXJ7tK9u7r3zQ/LBvB+e87/PDXuq7N322b3c5kn/+8p62ZFuNKOJ71R1/Lf2Tn2sAAAAAAAAAAAAAAACAB0gRPxcpXnz3UKryg2/mFHdmrjQvtC9Od9O+e7l/vZzp9fX19WbqxlaOEzku5bic40qOqzlGkevn2CpjY319Im8v5bic40qOqznGQK6fY2sg/vnvy/Pn7aUcl3NcyXE1x6jl+jm2cpzIcSnH5RxXclzNMeQVAwAAAAAAAAAAAAAAAAAA90BR/ZPiD39rLa3Xu+tLT0Q3rlgP9JH3/wEAAP//G33xqw==")

3m10.362994122s ago: executing program 5 (id=2505):
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x181942, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x100, 0x800, 0x0)
read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, <r1=>0x0}, 0x2020)
syz_fuse_handle_req(r0, &(0x7f0000002300)="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", 0x2000, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x130, 0x0, 0x403, {0x1, 0xfffffff4, 0x0, '\x00', {0x7ff, 0xa2b, 0x40000d32, 0x8000, 0x0, 0x0, 0x1000, '\x00', 0x0, 0x2, 0xb4e7, 0x2, {0x8007, 0xb}, {0x6, 0xa}, {0x1, 0x7}, {0x2000000014, 0xa00}, 0x2, 0x3, 0x4, 0x119}}}})
write$FUSE_INIT(r0, &(0x7f0000001200)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x50054091, 0x2, 0x3, 0x1000}}, 0x50)

3m10.187060267s ago: executing program 6 (id=2506):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socket$packet(0x11, 0x2, 0x300)
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
sendmsg$tipc(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000800)="7deb", 0x5dc}, {0x0}], 0x2, 0x0, 0x0, 0x10}, 0x24048801)

3m10.078216541s ago: executing program 4 (id=2507):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
syz_usb_connect(0x2, 0x2d, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0xe0000000, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50)
syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0)
syz_fuse_handle_req(r1, 0x0, 0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8923, &(0x7f0000000040)={'vlan0\x00', 0x40})
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x7, 0x3, 0x6, 0xfffa}, 0x1000001d, [0x8000, 0xc95a, 0xf, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x4, 0x49, 0x39cc191b, 0x5f, 0x9, 0x209, 0xffff2d33, 0xffffff01, 0x6, 0x3, 0x20000, 0x5, 0x4, 0xe4a1, 0x4, 0x3c5b, 0x1, 0x24, 0x9, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x6, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x0, 0xe, 0x0, 0x71, 0x6, 0x7, 0x1, 0x7, 0x9, 0x3e, 0x8f, 0x3, 0x6, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x7, 0x8000, 0x10, 0x1, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x15a, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x8c2, 0xea4, 0x0, 0x4, 0x2, 0x8004, 0x2009, 0x3fc, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f2e, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xffff, 0x42, 0x7f, 0x9, 0x3, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x81, 0x223], [0x7, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x4005, 0x7fff, 0xfffffffc, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x3, 0x9, 0x86, 0x3, 0x9, 0x3e7, 0x9, 0x5, 0x8, 0x2, 0x3, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x5, 0x5, 0x9, 0xac8, 0xbf, 0x59, 0x3, 0x80000000, 0xfffffff9, 0x0, 0x9, 0xffff, 0xb0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xa2ed, 0x4, 0x25], [0x9, 0xbb31, 0x7, 0xb, 0x5, 0x938, 0x4, 0x6, 0x0, 0x5, 0xce7, 0x8001, 0x2, 0x7, 0x5, 0x3, 0x101, 0x0, 0x6, 0x7fff, 0xffff, 0xa620, 0x2, 0xffffffff, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0x7, 0xffff, 0x10, 0x7a, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x5, 0x80010080, 0x5, 0x8, 0x1000, 0xa1f, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x0, 0x200, 0xffff343e, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
dup3(r1, r3, 0x6700000000000000)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r4, 0xffffffffffffffff, 0x0)

3m9.308507097s ago: executing program 5 (id=2508):
syz_usb_connect$uac1(0x69a90eab3db9c902, 0xa6, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000406b1d010140000102030109029400030104a0090904000000010100000a2401f7ff0702010209240303000303030b05240506020904010000010200000904010101010200000924020182040910ca0c2402010904070606000000090501090004ffc80307250100040500090402"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0})

2m55.260321045s ago: executing program 4 (id=2509):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xc0}, [@ldst={0x5}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48)

2m38.760602172s ago: executing program 36 (id=2508):
syz_usb_connect$uac1(0x69a90eab3db9c902, 0xa6, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000406b1d010140000102030109029400030104a0090904000000010100000a2401f7ff0702010209240303000303030b05240506020904010000010200000904010101010200000924020182040910ca0c2402010904070606000000090501090004ffc80307250100040500090402"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0})

2m37.907723086s ago: executing program 37 (id=2506):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socket$packet(0x11, 0x2, 0x300)
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
sendmsg$tipc(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000800)="7deb", 0x5dc}, {0x0}], 0x2, 0x0, 0x0, 0x10}, 0x24048801)

2m36.741709332s ago: executing program 38 (id=2509):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xc0}, [@ldst={0x5}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48)

2.540695822s ago: executing program 8 (id=3957):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0)
recvmmsg(r0, &(0x7f0000008200)=[{{0x0, 0x6, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)=""/153, 0x99}, {&(0x7f00000009c0)=""/4110, 0x100e}, {&(0x7f0000000640)=""/211, 0xd3}], 0x3}, 0x6}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000001a00)=""/156, 0x9c}, {&(0x7f0000001f40)=""/213, 0xd5}, {&(0x7f0000000980)=""/51, 0x33}, {&(0x7f0000000540)=""/85, 0x55}, {&(0x7f0000002d40)=""/4115, 0x1013}, {&(0x7f0000000440)=""/68, 0x44}, {&(0x7f0000000840)=""/245, 0xf5}], 0x7}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x3}], 0x5, 0x12142, 0x0)

2.309736805s ago: executing program 8 (id=3958):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0x3)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d)
sendfile(r0, r1, 0x0, 0x1000004)

2.018441359s ago: executing program 7 (id=3964):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x2080, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0xe, r1})

1.954743748s ago: executing program 7 (id=3965):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010023484af53b607cc707000000080001"], 0x2c}}, 0x0)

1.868027289s ago: executing program 7 (id=3966):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x1, 0x442d, &(0x7f0000004480)="$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")
r0 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20)
fallocate(r0, 0x1, 0x0, 0x1001f0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)
pwrite64(r2, &(0x7f00000002c0)='=', 0x1, 0xfecc)
pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0)

1.50454375s ago: executing program 7 (id=3968):
syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000200)='./bus\x00', 0x2010880, &(0x7f0000000300)=ANY=[@ANYBLOB="646973636172643d3078303030303030303030303030303030342c71756f74612c6572726f72733d636f6e74696e75652c646973636172643d3078303030303030303030303030303030342c756d61736b3d303430372c75737271756f74612c6572726f72733d72656d6f756e742d726f006e6f646973636172642c726573697a653d3078303030303030303030303031303030302c756d61736b3d3078301030303030303030303030303030322c71756f74612c67695b3d00"/199, @ANYRES32, @ANYBLOB=',resize=0x0000000000008045,res,ze,uid>', @ANYRESDEC, @ANYRES8], 0x1, 0x61fd, &(0x7f00000068c0)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0)

1.329457242s ago: executing program 8 (id=3969):
r0 = syz_io_uring_setup(0x23a, &(0x7f0000000400)={0x0, 0x80d7, 0x10, 0x5, 0x2cd}, &(0x7f0000000380), &(0x7f00000002c0))
io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f00000001c0)={0x3dfa, 0x5}, 0x1)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00')
preadv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/29, 0x1d}], 0x1, 0x0, 0x0)

1.323624858s ago: executing program 9 (id=3970):
r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0)
fsetxattr$trusted_overlay_upper(r0, &(0x7f0000002740), 0x0, 0x0, 0x1)

1.133079441s ago: executing program 8 (id=3971):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi4\x00', 0x40000, 0x0)
ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f0000000000)={0x1, &(0x7f0000134fc0)=[{0xa000006, 0x0, 0x0, 0x30000}]})

1.132918086s ago: executing program 8 (id=3972):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
writev(r0, &(0x7f0000000480)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec90806", 0xffbf}, {0x0}], 0x2)

1.000799095s ago: executing program 7 (id=3973):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
getsockopt$sock_int(r0, 0x1, 0x2a, 0x0, &(0x7f00000000c0))

820.66957ms ago: executing program 7 (id=3974):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))
syz_open_dev$MSR(&(0x7f0000000000), 0x302, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=0x0, @ANYRES64=r0], 0x0)

820.538858ms ago: executing program 9 (id=3975):
capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x0, 0x10ffff, 0xfffffffd})
setgid(0x0)

765.12589ms ago: executing program 9 (id=3976):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="8b3300000000fcdbdf2505"], 0x28}}, 0x50)
recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}, 0x6868}], 0x1, 0x0, 0x0)

201.73437ms ago: executing program 9 (id=3977):
r0 = socket$packet(0x11, 0x2, 0x300)
accept$packet(r0, 0x0, 0x0)

133.731754ms ago: executing program 9 (id=3978):
syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000240)='./file0\x00', 0x4006, &(0x7f0000002440)=ANY=[], 0x1, 0xc0a, &(0x7f0000001040)="$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")
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/raw\x00')
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
copy_file_range(r1, 0x0, r0, 0x0, 0xffffffffa003e459, 0x700000000000000)

133.489693ms ago: executing program 8 (id=3979):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x0, 0x0)
socket$inet6(0xa, 0x2, 0x3a)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
syncfs(r1)
socket$inet_udp(0x2, 0x2, 0x0)
setreuid(0xee00, 0x0)
mkdir(&(0x7f0000000000)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd'])
mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))

0s ago: executing program 9 (id=3980):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0)
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x14, r1, 0x1, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40111}, 0x20000004)

kernel console output (not intermixed with test programs):

ead-write
[  411.637023][T13548] bcachefs (loop9): marking superblocks
[  411.642994][T13548] bcachefs (loop9): initializing freespace
[  411.646533][T13548] bcachefs (loop9): done initializing freespace
[  411.649675][T13548] bcachefs (loop9): reading snapshots table
[  411.651798][T13548] bcachefs (loop9): reading snapshots done
[  411.685645][T13548] bcachefs (loop9): done starting filesystem
[  411.748109][T13548] bcachefs (loop9): shutting down
[  411.749790][T13548] bcachefs (loop9): going read-only
[  411.751422][T13548] bcachefs (loop9): finished waiting for writes to stop
[  411.764845][T13548] bcachefs (loop9): flushing journal and stopping allocators, journal seq 3
[  411.787902][T13548] bcachefs (loop9): flushing journal and stopping allocators complete, journal seq 3
[  411.791590][T13548] bcachefs (loop9): clean shutdown complete, journal seq 4
[  411.794106][T13548] bcachefs (loop9): marking filesystem clean
[  411.813057][T13548] bcachefs (loop9): shutdown complete
[  411.931779][T13577] netlink: 136 bytes leftover after parsing attributes in process `syz.7.2963'.
[  411.949918][T12345] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  412.388967][ T5910] usb 9-1: new high-speed USB device number 12 using dummy_hcd
[  412.560929][ T5910] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  412.564578][ T5910] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  412.568757][ T5910] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  412.572239][ T5910] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  412.576129][ T5910] usb 9-1: config 0 descriptor??
[  413.023842][ T5910] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0
[  413.034891][ T5910] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0
[  413.127210][T13600] netlink: 180 bytes leftover after parsing attributes in process `syz.9.2973'.
[  413.242346][T13612] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2979'.
[  413.251834][T13612] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2979'.
[  413.281199][T13614] tmpfs: Bad value for 'usrquota_block_hardlimit'
[  413.333654][ T5910] usb 9-1: USB disconnect, device number 12
[  413.574035][T13636] loop7: detected capacity change from 0 to 512
[  413.579981][T13636] EXT4-fs error (device loop7): ext4_get_branch:178: inode #11: block 4294967295: comm syz.7.2991: invalid block
[  413.584084][T13636] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.2991: invalid indirect mapped block 4294967295 (level 1)
[  413.593509][T13636] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.2991: invalid indirect mapped block 4294967295 (level 1)
[  413.599990][T13636] EXT4-fs (loop7): 2 truncates cleaned up
[  413.602596][T13636] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  413.612845][T13636] EXT4-fs warning (device loop7): ext4_block_to_path:107: block 1768304430 > max in inode 16
[  413.634557][T12350] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  414.182645][T13647] loop7: detected capacity change from 0 to 40427
[  414.199172][T13647] F2FS-fs (loop7): invalid crc value
[  414.324264][T13647] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  414.328082][T13647] F2FS-fs (loop7): Start checkpoint disabled!
[  414.333241][T13647] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6
[  414.378121][   T26] kworker/u9:0: attempt to access beyond end of device
[  414.378121][   T26] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  414.384487][   T26] CPU: 0 UID: 0 PID: 26 Comm: kworker/u9:0 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  414.384499][   T26] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  414.384504][   T26] Workqueue: writeback wb_workfn (flush-7:7)
[  414.384536][   T26] Call Trace:
[  414.384540][   T26]  <TASK>
[  414.384544][   T26]  dump_stack_lvl+0x189/0x250
[  414.384556][   T26]  ? lockdep_hardirqs_on+0x9c/0x150
[  414.384567][   T26]  ? __pfx_dump_stack_lvl+0x10/0x10
[  414.384578][   T26]  ? dump_stack+0x9/0x20
[  414.384589][   T26]  f2fs_handle_critical_error+0x37c/0x540
[  414.384603][   T26]  f2fs_write_end_io+0x886/0xb60
[  414.384621][   T26]  __submit_merged_bio+0x27a/0x6a0
[  414.384632][   T26]  __submit_merged_write_cond+0x255/0x530
[  414.384643][   T26]  f2fs_write_data_pages+0x261d/0x3000
[  414.384667][   T26]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  414.384682][   T26]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  414.384706][   T26]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  414.384715][   T26]  ? look_up_lock_class+0x74/0x170
[  414.384727][   T26]  ? trace_f2fs_writepages+0x7f/0x200
[  414.384736][   T26]  ? f2fs_write_node_pages+0x478/0x6e0
[  414.384746][   T26]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  414.384760][   T26]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  414.384770][   T26]  do_writepages+0x32e/0x550
[  414.384782][   T26]  ? reacquire_held_locks+0x127/0x1d0
[  414.384790][   T26]  ? writeback_sb_inodes+0x384/0x1010
[  414.384803][   T26]  __writeback_single_inode+0x145/0xff0
[  414.384812][   T26]  ? do_raw_spin_unlock+0x4d/0x240
[  414.384823][   T26]  writeback_sb_inodes+0x6c7/0x1010
[  414.384842][   T26]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  414.384868][   T26]  ? rcu_is_watching+0x15/0xb0
[  414.384886][   T26]  wb_writeback+0x43b/0xaf0
[  414.384898][   T26]  ? queue_io+0x391/0x590
[  414.384908][   T26]  ? __pfx_wb_writeback+0x10/0x10
[  414.384920][   T26]  ? _raw_spin_unlock_irq+0x23/0x50
[  414.384931][   T26]  wb_workfn+0x409/0xef0
[  414.384945][   T26]  ? __pfx_wb_workfn+0x10/0x10
[  414.384954][   T26]  ? __lock_acquire+0xab9/0xd20
[  414.384969][   T26]  ? process_scheduled_works+0x9ef/0x17b0
[  414.384979][   T26]  ? _raw_spin_unlock_irq+0x23/0x50
[  414.384986][   T26]  ? process_scheduled_works+0x9ef/0x17b0
[  414.384992][   T26]  ? process_scheduled_works+0x9ef/0x17b0
[  414.385000][   T26]  process_scheduled_works+0xae1/0x17b0
[  414.385018][   T26]  ? __pfx_process_scheduled_works+0x10/0x10
[  414.385037][   T26]  worker_thread+0x8a0/0xda0
[  414.385055][   T26]  kthread+0x711/0x8a0
[  414.385065][   T26]  ? __pfx_worker_thread+0x10/0x10
[  414.385072][   T26]  ? __pfx_kthread+0x10/0x10
[  414.385082][   T26]  ? _raw_spin_unlock_irq+0x23/0x50
[  414.385089][   T26]  ? lockdep_hardirqs_on+0x9c/0x150
[  414.385096][   T26]  ? __pfx_kthread+0x10/0x10
[  414.385105][   T26]  ret_from_fork+0x3fc/0x770
[  414.385114][   T26]  ? __pfx_ret_from_fork+0x10/0x10
[  414.385124][   T26]  ? __switch_to_asm+0x39/0x70
[  414.385132][   T26]  ? __switch_to_asm+0x33/0x70
[  414.385140][   T26]  ? __pfx_kthread+0x10/0x10
[  414.385149][   T26]  ret_from_fork_asm+0x1a/0x30
[  414.385165][   T26]  </TASK>
[  414.385214][   T26] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[  414.625868][T13654] loop8: detected capacity change from 0 to 40427
[  414.630973][T13654] F2FS-fs: heap/no_heap options were deprecated
[  414.667003][T13654] F2FS-fs (loop8): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[  414.669538][T13654] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock
[  414.687010][T13654] F2FS-fs (loop8): old and new quota format mixing
[  415.101942][T13659] loop8: detected capacity change from 0 to 32768
[  415.104983][T13659] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.3000 (13659)
[  415.112652][T13659] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  415.116239][T13659] BTRFS info (device loop8): using sha256 (sha256-lib) checksum algorithm
[  415.119746][T13659] BTRFS info (device loop8): using free-space-tree
[  415.216870][T12345] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  415.226929][T13683] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3004'.
[  415.431926][T13686] loop8: detected capacity change from 0 to 32768
[  415.446210][T13686] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.3005 (13686)
[  415.478426][T13686] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  415.481634][T13686] BTRFS info (device loop8): using sha256 (sha256-lib) checksum algorithm
[  415.484337][T13686] BTRFS info (device loop8): using free-space-tree
[  415.655760][T13692] loop9: detected capacity change from 0 to 32768
[  415.703999][T12345] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  415.810097][T13712] netem: incorrect gi model size
[  415.812030][T13712] netem: change failed
[  415.901918][T13718] loop9: detected capacity change from 0 to 128
[  415.913769][T13718] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  415.933898][T13718] ext4 filesystem being mounted at /172/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  415.971695][T13718] EXT4-fs warning (device loop9): verify_group_input:137: Cannot add at group 25 (only 1 groups)
[  416.028671][T12348] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  416.138130][T13728] netlink: 'syz.9.3016': attribute type 17 has an invalid length.
[  416.140733][T13728] netlink: 148 bytes leftover after parsing attributes in process `syz.9.3016'.
[  417.199313][T10605] usb 9-1: new high-speed USB device number 13 using dummy_hcd
[  417.361785][T10605] usb 9-1: unable to get BOS descriptor or descriptor too short
[  417.365404][T10605] usb 9-1: config 4 has an invalid interface number: 214 but max is 0
[  417.369591][T10605] usb 9-1: config 4 has no interface number 0
[  417.373162][T10605] usb 9-1: config 4 interface 214 has no altsetting 0
[  417.377111][T10605] usb 9-1: New USB device found, idVendor=05ac, idProduct=0243, bcdDevice=87.6e
[  417.380009][T10605] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  417.382800][T10605] usb 9-1: Product: syz
[  417.384148][T10605] usb 9-1: Manufacturer: syz
[  417.385624][T10605] usb 9-1: SerialNumber: syz
[  417.594879][ T5910] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  417.613804][T10605] input: bcm5974 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:4.214/input/input26
[  417.622065][ T5279] bcm5974 9-1:4.214: could not read from device
[  417.625599][ T5279] bcm5974 9-1:4.214: could not read from device
[  417.627896][T10605] usb 9-1: USB disconnect, device number 13
[  417.776629][ T5910] usb 10-1: Using ep0 maxpacket: 32
[  417.780360][ T5910] usb 10-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  417.783395][ T5910] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  417.787704][ T5910] usb 10-1: config 0 descriptor??
[  418.007387][ T5910] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  418.017369][ T5910] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  418.021980][ T5910] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  418.024571][ T5910] usb 10-1: media controller created
[  418.041380][ T5910] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  418.232586][ T5910] az6027: usb out operation failed. (-71)
[  418.247685][ T5910] az6027: usb out operation failed. (-71)
[  418.250078][ T5910] stb0899_attach: Driver disabled by Kconfig
[  418.252455][ T5910] az6027: no front-end attached
[  418.252455][ T5910] 
[  418.255759][ T5910] az6027: usb out operation failed. (-71)
[  418.258187][ T5910] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  418.265521][ T5910] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb10/10-1/input/input27
[  418.273243][ T5910] dvb-usb: schedule remote query interval to 400 msecs.
[  418.276748][ T5910] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  418.286682][ T5910] usb 10-1: USB disconnect, device number 5
[  418.427948][ T5910] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  418.575663][T13749] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3025'.
[  419.198493][   T24] usb 10-1: new full-speed USB device number 6 using dummy_hcd
[  419.371014][   T24] usb 10-1: config 13 has an invalid interface number: 144 but max is 0
[  419.373685][   T24] usb 10-1: config 13 has no interface number 0
[  419.375692][   T24] usb 10-1: config 13 interface 144 has no altsetting 0
[  419.379957][   T24] usb 10-1: New USB device found, idVendor=19ab, idProduct=1000, bcdDevice= 1.01
[  419.382992][   T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  419.385864][   T24] usb 10-1: Product: syz
[  419.387386][   T24] usb 10-1: Manufacturer: syz
[  419.389009][   T24] usb 10-1: SerialNumber: syz
[  419.637992][   T24] usb 10-1: Found UVC 0.00 device syz (19ab:1000)
[  419.644576][T13765] loop8: detected capacity change from 0 to 4096
[  419.647728][   T24] usb 10-1: No valid video chain found.
[  419.650341][T13765] ntfs3(loop8): Different NTFS sector size (4096) and media sector size (512).
[  419.665531][T13765] ntfs3(loop8): ino=19, mi_enum_attr
[  419.665614][   T24] usb 10-1: USB disconnect, device number 6
[  419.668336][T13765] ntfs3(loop8): Mark volume as dirty due to NTFS errors
[  419.686366][   T33] audit: type=1800 audit(1754929462.583:100): pid=13765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3032" name="file0" dev="loop8" ino=0 res=0 errno=0
[  419.706625][   T33] audit: type=1804 audit(1754929462.602:101): pid=13765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.3032" name="/newroot/179/file0/file0" dev="loop8" ino=0 res=1 errno=0
[  419.921558][T13777] loop8: detected capacity change from 0 to 1024
[  420.377678][T13800] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3048'.
[  420.465268][T13802] loop9: detected capacity change from 0 to 256
[  420.576787][T13802] FAT-fs (loop9): Directory bread(block 1285) failed
[  420.816464][T13810] loop8: detected capacity change from 0 to 1024
[  420.874737][T13812] loop8: detected capacity change from 0 to 1024
[  420.890345][T13812] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  420.910145][T13812] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  420.925037][T13812] evm: overlay not supported
[  420.949271][T12345] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  421.278202][T13830] loop8: detected capacity change from 0 to 2048
[  421.329888][T13830] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  421.333821][T13830] ext4 filesystem being mounted at /205/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  421.373548][T12345] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  421.657466][T10605] usb 9-1: new high-speed USB device number 14 using dummy_hcd
[  421.811234][T13840] loop7: detected capacity change from 0 to 1024
[  421.817808][T10605] usb 9-1: Using ep0 maxpacket: 16
[  421.828185][T10605] usb 9-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  421.831667][T10605] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  421.834473][T10605] usb 9-1: Product: syz
[  421.836214][T10605] usb 9-1: Manufacturer: syz
[  421.838006][T10605] usb 9-1: SerialNumber: syz
[  421.843688][T10605] r8152-cfgselector 9-1: Unknown version 0x0000
[  421.845941][T10605] r8152-cfgselector 9-1: config 0 descriptor??
[  422.290252][T12422] r8152-cfgselector 9-1: USB disconnect, device number 14
[  422.551728][T13849] loop9: detected capacity change from 0 to 40427
[  422.589945][T13849] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  422.593463][T13849] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[  422.609673][   T33] audit: type=1800 audit(1754929465.324:102): pid=13849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3067" name="file1" dev="loop9" ino=10 res=0 errno=0
[  422.617758][   T33] audit: type=1800 audit(1754929465.324:103): pid=13849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3067" name="file1" dev="loop9" ino=10 res=0 errno=0
[  422.638244][T12348] syz-executor: attempt to access beyond end of device
[  422.638244][T12348] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  422.643576][T12348] CPU: 1 UID: 0 PID: 12348 Comm: syz-executor Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  422.643591][T12348] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  422.643596][T12348] Call Trace:
[  422.643600][T12348]  <TASK>
[  422.643604][T12348]  dump_stack_lvl+0x189/0x250
[  422.643621][T12348]  ? __pfx_dump_stack_lvl+0x10/0x10
[  422.643631][T12348]  ? __pfx_queue_work_on+0x10/0x10
[  422.643640][T12348]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  422.643651][T12348]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  422.643664][T12348]  f2fs_handle_critical_error+0x37c/0x540
[  422.643678][T12348]  f2fs_write_end_io+0x886/0xb60
[  422.643697][T12348]  __submit_merged_bio+0x27a/0x6a0
[  422.643708][T12348]  __submit_merged_write_cond+0x255/0x530
[  422.643720][T12348]  f2fs_write_data_pages+0x261d/0x3000
[  422.643743][T12348]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  422.643774][T12348]  ? folios_put_refs+0x559/0x640
[  422.643789][T12348]  ? __lock_acquire+0xab9/0xd20
[  422.643805][T12348]  ? do_raw_spin_lock+0x121/0x290
[  422.643819][T12348]  ? do_raw_spin_unlock+0x4d/0x240
[  422.643836][T12348]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  422.643847][T12348]  do_writepages+0x32e/0x550
[  422.643862][T12348]  ? do_raw_spin_unlock+0x4d/0x240
[  422.643872][T12348]  filemap_fdatawrite+0x199/0x240
[  422.643883][T12348]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  422.643912][T12348]  ? do_raw_spin_unlock+0x4d/0x240
[  422.643923][T12348]  f2fs_sync_dirty_inodes+0x31f/0x830
[  422.643940][T12348]  f2fs_write_checkpoint+0x95a/0x1df0
[  422.643960][T12348]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  422.643989][T12348]  ? kill_f2fs_super+0x298/0x6c0
[  422.644002][T12348]  kill_f2fs_super+0x2c3/0x6c0
[  422.644015][T12348]  ? __pfx_kill_f2fs_super+0x10/0x10
[  422.644024][T12348]  ? radix_tree_delete_item+0x2b6/0x400
[  422.644037][T12348]  ? shrinker_free+0x2ce/0x3e0
[  422.644047][T12348]  deactivate_locked_super+0xbc/0x130
[  422.644057][T12348]  cleanup_mnt+0x425/0x4c0
[  422.644066][T12348]  ? lockdep_hardirqs_on+0x9c/0x150
[  422.644084][T12348]  task_work_run+0x1d4/0x260
[  422.644096][T12348]  ? __pfx_task_work_run+0x10/0x10
[  422.644104][T12348]  ? __x64_sys_umount+0x122/0x160
[  422.644116][T12348]  ? exit_to_user_mode_loop+0x40/0x110
[  422.644129][T12348]  exit_to_user_mode_loop+0xec/0x110
[  422.644140][T12348]  do_syscall_64+0x2bd/0x3b0
[  422.644149][T12348]  ? lockdep_hardirqs_on+0x9c/0x150
[  422.644158][T12348]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  422.644165][T12348]  ? exc_page_fault+0x9f/0xf0
[  422.644174][T12348]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  422.644182][T12348] RIP: 0033:0x7fce00f8ff17
[  422.644191][T12348] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  422.644198][T12348] RSP: 002b:00007fffe3c0db78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  422.644207][T12348] RAX: 0000000000000000 RBX: 00007fce01011c05 RCX: 00007fce00f8ff17
[  422.644212][T12348] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffe3c0dc30
[  422.644217][T12348] RBP: 00007fffe3c0dc30 R08: 0000000000000000 R09: 0000000000000000
[  422.644221][T12348] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffe3c0ecc0
[  422.644226][T12348] R13: 00007fce01011c05 R14: 0000000000062225 R15: 00007fffe3c0ed00
[  422.644239][T12348]  </TASK>
[  422.644242][T12348] F2FS-fs (loop9): Stopped filesystem due to reason: 3
[  423.122400][T13863] netlink: 140 bytes leftover after parsing attributes in process `syz.9.3072'.
[  423.143467][T10605] usb 9-1: new high-speed USB device number 15 using dummy_hcd
[  423.325011][T10605] usb 9-1: Using ep0 maxpacket: 8
[  423.329718][T10605] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  423.332788][T10605] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  423.335489][T10605] usb 9-1: Product: syz
[  423.337330][T10605] usb 9-1: Manufacturer: syz
[  423.339491][T10605] usb 9-1: SerialNumber: syz
[  423.342491][T10605] usb 9-1: config 0 descriptor??
[  423.421285][T12422] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[  423.563446][T10605] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  423.592479][T12422] usb 10-1: Using ep0 maxpacket: 32
[  423.597428][T12422] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  423.602591][T12422] usb 10-1: New USB device found, idVendor=0c72, idProduct=0011, bcdDevice= 9.75
[  423.605955][T12422] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  423.609235][T12422] usb 10-1: Product: syz
[  423.610626][T12422] usb 10-1: Manufacturer: syz
[  423.612260][T12422] usb 10-1: SerialNumber: syz
[  423.615179][T12422] usb 10-1: config 0 descriptor??
[  423.841235][T12422] peak_usb 10-1:0.0 can0: unable to request usb[type=0 value=1] err=-71
[  423.844204][T12422] peak_usb 10-1:0.0: unable to read PCAN-USB Pro FD firmware info (err -71)
[  423.893563][T12422] peak_usb 10-1:0.0: probe with driver peak_usb failed with error -71
[  423.901171][T12422] usb 10-1: USB disconnect, device number 7
[  424.442656][T13867] loop9: detected capacity change from 0 to 4096
[  424.457036][T13867] ntfs3: Invalid value for umask.
[  424.509866][T13869] loop9: detected capacity change from 0 to 1024
[  424.539203][T13869] syz.9.3075: attempt to access beyond end of device
[  424.539203][T13869] loop9: rw=0, sector=201326592, nr_sectors = 2 limit=1024
[  424.548300][T13869] buffer_io_error: 138 callbacks suppressed
[  424.548310][T13869] Buffer I/O error on dev loop9, logical block 100663296, async page read
[  424.553836][T13869] hfsplus: unable to mark blocks free: error -5
[  424.556656][T13869] hfsplus: can't free extent
[  424.636656][T13873] netlink: 44 bytes leftover after parsing attributes in process `syz.9.3077'.
[  424.743610][T13879] sg_write: process 430 (syz.9.3080) changed security contexts after opening file descriptor, this is not allowed.
[  425.248011][T13892] loop7: detected capacity change from 0 to 256
[  425.252882][T13892] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  425.256265][T13892] exFAT-fs (loop7): Medium has reported failures. Some data may be lost.
[  425.263583][T13892] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  425.395164][T13898] loop7: detected capacity change from 0 to 1024
[  425.414051][T13898] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  425.422733][T13898] EXT4-fs error (device loop7): ext4_generic_delete_entry:2668: inode #12: block 7: comm syz.7.3088: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0
[  425.435537][T13898] EXT4-fs (loop7): Remounting filesystem read-only
[  425.455674][T12350] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  425.566714][T10605] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  425.571053][T10605] usb 9-1: USB disconnect, device number 15
[  425.618154][T13903] loop7: detected capacity change from 0 to 32768
[  425.624936][T13903] XFS (loop7): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  425.655960][T13903] XFS (loop7): Ending clean mount
[  425.672326][T13903] XFS (loop7): Quotacheck needed: Please wait.
[  425.686348][T13903] XFS (loop7): Quotacheck: Done.
[  425.730530][T12350] XFS (loop7): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  425.996516][T13916] loop7: detected capacity change from 0 to 32768
[  425.999157][T13916] XFS: ikeep mount option is deprecated.
[  426.079208][T13919] overlayfs: overlapping lowerdir path
[  426.135955][T13916] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  426.166079][T13916] XFS (loop7): Ending clean mount
[  426.170611][T13916] XFS (loop7): Quotacheck needed: Please wait.
[  426.201451][T13916] XFS (loop7): Quotacheck: Done.
[  426.805592][T13934] loop8: detected capacity change from 0 to 131072
[  426.821377][T13934] F2FS-fs (loop8): invalid crc value
[  426.861580][T13934] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  426.868038][T13934] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4
[  426.880374][T12350] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  426.895768][T13934] F2FS-fs (loop8): f2fs_lookup: inode (ino=4) has zero i_nlink
[  427.081223][T13939] loop9: detected capacity change from 0 to 32768
[  427.095934][T13939] JBD2: Ignoring recovery information on journal
[  427.125496][T13939] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode.
[  427.184684][T12348] ocfs2: Unmounting device (7,9) on (node local)
[  427.510813][T13958] loop7: detected capacity change from 0 to 512
[  427.568670][T13958] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  427.590273][T13958] ext4 filesystem being mounted at /179/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  427.639708][T12350] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  428.029061][T13962] loop8: detected capacity change from 0 to 32768
[  428.095429][T13962] ERROR: (device loop8): diAllocBit: iag inconsistent
[  428.095429][T13962] 
[  428.112870][T13962] ialloc: diAlloc returned -5!
[  428.162810][T13966] loop7: detected capacity change from 0 to 32768
[  428.192652][T13966] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  428.272499][T13966] XFS (loop7): Ending clean mount
[  428.278165][T13966] XFS (loop7): Quotacheck needed: Please wait.
[  428.342304][T13966] XFS (loop7): Quotacheck: Done.
[  428.501323][T12350] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  428.586321][T13978] loop8: detected capacity change from 0 to 512
[  428.612826][T13978] EXT4-fs error (device loop8): ext4_iget_extra_inode:5104: inode #15: comm syz.8.3105: corrupted in-inode xattr: invalid ea_ino
[  428.649520][T13978] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.3105: couldn't read orphan inode 15 (err -117)
[  428.656720][T13978] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  428.782930][T13984] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3106'.
[  428.965441][T13992] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3111'.
[  428.983134][T13982] loop9: detected capacity change from 0 to 32768
[  428.988154][T13982] jfs_mount: Mount Failure: superblock is corrupt!
[  428.997902][T13982] Mount JFS Failure: -22
[  429.001505][T13982] jfs_mount failed w/return code = -22
[  429.036886][T13996] qnx6: unable to read the first superblock
[  429.368896][T12345] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  429.424362][T14010] loop8: detected capacity change from 0 to 47
[  429.451941][T10605] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[  429.462666][T14012] loop8: detected capacity change from 0 to 256
[  429.467084][T14012] exFAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  429.470950][T14012] exFAT-fs (loop8): Medium has reported failures. Some data may be lost.
[  429.479164][T14012] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d)
[  429.534249][T14016] netlink: 112 bytes leftover after parsing attributes in process `syz.8.3123'.
[  429.613045][T10605] usb 10-1: config 0 has an invalid interface number: 69 but max is 0
[  429.615825][T10605] usb 10-1: config 0 has no interface number 0
[  429.617917][T10605] usb 10-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023
[  429.621480][T10605] usb 10-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  429.634178][T10605] usb 10-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[  429.638470][T10605] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  429.643774][T10605] usb 10-1: Product: syz
[  429.645289][T10605] usb 10-1: Manufacturer: syz
[  429.646851][T10605] usb 10-1: SerialNumber: syz
[  429.650849][T10605] usb 10-1: config 0 descriptor??
[  429.653561][T14006] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22
[  429.665226][T10605] cyberjack 10-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[  429.677722][T10605] usb 10-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[  429.725818][T14024] loop8: detected capacity change from 0 to 8192
[  429.805735][T14026] loop8: detected capacity change from 0 to 512
[  429.828208][T14026] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  429.832322][T14026] ext4 filesystem being mounted at /222/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  429.839014][T14026] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #2: comm syz.8.3128: corrupted inode contents
[  429.847812][T14026] EXT4-fs error (device loop8): ext4_dirty_inode:6538: inode #2: comm syz.8.3128: mark_inode_dirty error
[  429.852538][T14026] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #2: comm syz.8.3128: corrupted inode contents
[  429.862360][T14026] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #2: comm syz.8.3128: corrupted inode contents
[  429.868886][T14026] EXT4-fs error (device loop8): ext4_dirty_inode:6538: inode #2: comm syz.8.3128: mark_inode_dirty error
[  429.872949][T14026] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #2: comm syz.8.3128: corrupted inode contents
[  429.878066][T14026] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #2: comm syz.8.3128: mark_inode_dirty error
[  429.882066][T14026] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #2: comm syz.8.3128: corrupted inode contents
[  429.886304][T14026] EXT4-fs error (device loop8): ext4_dirty_inode:6538: inode #2: comm syz.8.3128: mark_inode_dirty error
[  429.886499][    C0] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22
[  429.911138][T12345] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  430.054614][T14030] loop8: detected capacity change from 0 to 32768
[  430.063080][T14030] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.3129 (14030)
[  430.073496][T14030] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  430.076949][T14030] BTRFS info (device loop8): using sha256 (sha256-lib) checksum algorithm
[  430.079811][T14030] BTRFS info (device loop8): using free-space-tree
[  430.105097][T10614] usb 10-1: USB disconnect, device number 8
[  430.111610][T10614] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[  430.119720][T10614] cyberjack 10-1:0.69: device disconnected
[  430.178053][T12345] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  431.200557][T14057] netlink: 340 bytes leftover after parsing attributes in process `syz.8.3133'.
[  431.652861][T14091] loop9: detected capacity change from 0 to 2048
[  431.663982][T14091] NILFS (loop9): broken superblock, retrying with spare superblock (blocksize = 1024)
[  431.671505][T12916] udevd[12916]: incorrect nilfs2 checksum on /dev/loop9
[  431.701841][T12916] udevd[12916]: incorrect nilfs2 checksum on /dev/loop9
[  431.702069][T14093] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  431.714585][T14091] NILFS error (device loop9): __nilfs_read_inode: invalid file type bits in mode 0177777 for inode 12
[  431.724321][T14091] Remounting filesystem read-only
[  432.038951][T14100] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3152'.
[  432.628778][T14126] loop8: detected capacity change from 0 to 128
[  432.634351][T14126] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  432.639859][T14126] ext4 filesystem being mounted at /244/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  432.674587][T12345] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  433.577340][T10614] usb 10-1: new high-speed USB device number 9 using dummy_hcd
[  433.759106][T10614] usb 10-1: Using ep0 maxpacket: 8
[  433.762965][T10614] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  433.766501][T10614] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  433.771061][T10614] usb 10-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00
[  433.773945][T10614] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  433.778181][T10614] usb 10-1: config 0 descriptor??
[  434.112008][ T5910] usb 9-1: new full-speed USB device number 16 using dummy_hcd
[  434.217222][T10614] cherry 0003:046A:0027.0016: fixing up Cherry Cymotion report descriptor
[  434.222050][T10614] cherry 0003:046A:0027.0016: unknown main item tag 0x0
[  434.224493][T10614] cherry 0003:046A:0027.0016: unknown main item tag 0x0
[  434.226835][T10614] cherry 0003:046A:0027.0016: unknown main item tag 0x0
[  434.230695][T10614] cherry 0003:046A:0027.0016: unknown main item tag 0x6
[  434.232993][T10614] cherry 0003:046A:0027.0016: unknown main item tag 0x5
[  434.235400][T10614] cherry 0003:046A:0027.0016: unknown main item tag 0x4
[  434.237694][T10614] cherry 0003:046A:0027.0016: unknown main item tag 0x0
[  434.239946][T10614] cherry 0003:046A:0027.0016: unknown main item tag 0x0
[  434.244909][T10614] cherry 0003:046A:0027.0016: hidraw0: USB HID v0.00 Device [HID 046a:0027] on usb-dummy_hcd.9-1/input0
[  434.286248][ T5910] usb 9-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66
[  434.289203][ T5910] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  434.291864][ T5910] usb 9-1: Product: syz
[  434.293245][ T5910] usb 9-1: Manufacturer: syz
[  434.295477][ T5910] usb 9-1: SerialNumber: syz
[  434.303027][ T5910] usb 9-1: config 0 descriptor??
[  434.307107][ T5910] snd-usb-audio 9-1:0.0: probe with driver snd-usb-audio failed with error -22
[  434.438875][ T5910] usb 10-1: USB disconnect, device number 9
[  434.526509][ T5877] usb 9-1: USB disconnect, device number 16
[  435.022916][T14148] loop9: detected capacity change from 0 to 128
[  435.033994][T14148] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none.
[  435.061272][T12348] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  435.182705][T14159] syzkaller1: tun_chr_ioctl cmd 1074025677
[  435.184607][T14159] syzkaller1: Linktype set failed because interface is up
[  435.250436][T14163] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3180'.
[  435.253191][T14163] net_ratelimit: 6171 callbacks suppressed
[  435.253199][T14163] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[  435.258874][T14163] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  435.303305][T14167] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  435.326545][T14169] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3183'.
[  435.329425][T14169] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3183'.
[  435.612090][T14178] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3187'.
[  436.340220][T14201] loop7: detected capacity change from 0 to 4096
[  436.367411][T14203] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  436.758319][T14218] loop8: detected capacity change from 0 to 32768
[  436.761735][T14218] bcachefs (/dev/loop8): error validating superblock: Invalid superblock section clean: entry type btree_keys overruns end of section
[  436.761735][T14218] clean (size 2912):
[  436.761735][T14218] flags:          0
[  436.761735][T14218] journal_seq:    10
[  436.761735][T14218] usage: type=inodes v=8
[  436.761735][T14218] usage: type=key_version v=0
[  436.761735][T14218] usage: type=reserved v=0
[  436.761735][T14218] usage: type=reserved v=0
[  436.761735][T14218] usage: type=reserved v=0
[  436.761735][T14218] usage: type=reserved v=0
[  436.761735][T14218] data_usage: btree: 1/1 [0]=2816
[  436.761735][T14218] data_usage: journal: 1/1 [0]=0
[  436.761735][T14218] data_usage: user: 1/1 [0]=16
[  436.761735][T14218] dev_usage: dev=0  
[  436.761735][T14218]   free: buckets=83 sectors=0 fragmented=0
[  436.761735][T14218]   sb: buckets=25 sectors=6152 fragmented=248
[  436.761735][T14218]   journal: buckets=8 sectors=2048 fragmented=0
[  436.761735][T14218]   btree: buckets=11 sectors=2816 fragmented=0
[  436.761735][T14218]   user: buckets=1 sectors=16 fragmented=240
[  436.761735][T14218]   cached: buckets=0 sectors=0 fragmented=0
[  436.761735][T14218]   parity: buckets=0 sectors=0 fragmented=0
[  436.761735][T14218]   stripe: buckets=0 sectors=0 fragmented=0
[  436.761735][T14218]   need_gc_gens: buckets=0 sectors=0 fragmented=0
[  436.761735][T14218]   need_discard: buckets=0 sectors=0 fragmented=0
[  436.761735][T14218] log: 
[  436.761735][T14218] clock: write=1280
[  436.761735][T14218] 
[  436.806449][T10614] usb 10-1: new high-speed USB device number 10 using dummy_hcd
[  436.812441][T14218] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean
[  436.970035][T10614] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  436.972953][T10614] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  436.977583][T10614] usb 10-1: config 0 descriptor??
[  436.982292][T10614] cp210x 10-1:0.0: cp210x converter detected
[  437.415571][T10614] cp210x 10-1:0.0: failed to get vendor val 0x000e size 3: -32
[  437.422754][T10614] usb 10-1: cp210x converter now attached to ttyUSB0
[  437.553849][T14225] loop7: detected capacity change from 0 to 512
[  437.558604][T14225] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem
[  437.580590][T14225] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c118, mo2=0002]
[  437.599735][T14225] EXT4-fs error (device loop7): ext4_iget_extra_inode:5104: inode #15: comm syz.7.3208: corrupted in-inode xattr: e_value size too large
[  437.609149][T14225] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.3208: couldn't read orphan inode 15 (err -117)
[  437.617648][T14225] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  437.639055][ T5910] usb 10-1: USB disconnect, device number 10
[  437.650888][ T5910] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  437.658196][ T5910] cp210x 10-1:0.0: device disconnected
[  437.702926][T12350] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  438.336980][T14241] loop9: detected capacity change from 0 to 32768
[  438.340175][T14241] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.3215 (14241)
[  438.353560][T14241] BTRFS info (device loop9): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  438.357379][T14241] BTRFS info (device loop9): using sha256 (sha256-lib) checksum algorithm
[  438.370102][T14241] BTRFS info (device loop9): rebuilding free space tree
[  438.376481][T14241] BTRFS info (device loop9): disabling free space tree
[  438.379049][T14241] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  438.382064][T14241] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  438.458785][T12348] BTRFS info (device loop9): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  438.863580][T14277] random: crng reseeded on system resumption
[  439.040279][ T5235] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  439.040738][ T5849] Bluetooth: hci2: command 0x1003 tx timeout
[  439.467893][ T5910] usb 9-1: new high-speed USB device number 17 using dummy_hcd
[  439.649621][ T5910] usb 9-1: Using ep0 maxpacket: 16
[  439.652851][ T5910] usb 9-1: config 1 has an invalid interface number: 223 but max is 0
[  439.655694][ T5910] usb 9-1: config 1 has no interface number 0
[  439.657776][ T5910] usb 9-1: config 1 interface 223 has no altsetting 0
[  439.662487][ T5910] usb 9-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice=42.53
[  439.665476][ T5910] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  439.668404][ T5910] usb 9-1: Product: syz
[  439.669783][ T5910] usb 9-1: Manufacturer: syz
[  439.671715][ T5910] usb 9-1: SerialNumber: syz
[  439.679111][ T5910] input: bcm5974 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.223/input/input28
[  439.892968][ T5279] bcm5974 9-1:1.223: could not read from device
[  439.902007][ T5910] usb 9-1: USB disconnect, device number 17
[  439.904071][ T5279] bcm5974 9-1:1.223: could not read from device
[  439.909221][ T5279] bcm5974 9-1:1.223: could not read from device
[  440.087889][T10614] usb 10-1: new high-speed USB device number 11 using dummy_hcd
[  440.248963][T10614] usb 10-1: Using ep0 maxpacket: 16
[  440.252809][T10614] usb 10-1: config 1 has an invalid interface number: 105 but max is 0
[  440.255536][T10614] usb 10-1: config 1 has an invalid interface number: 4 but max is 0
[  440.258157][T10614] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 1
[  440.261099][T10614] usb 10-1: config 1 has no interface number 0
[  440.263300][T10614] usb 10-1: config 1 has no interface number 1
[  440.265283][T10614] usb 10-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  440.269675][T10614] usb 10-1: config 1 interface 4 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  440.273018][T10614] usb 10-1: config 1 interface 4 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 16
[  440.277101][T10614] usb 10-1: config 1 interface 105 has no altsetting 0
[  440.279272][T10614] usb 10-1: config 1 interface 4 has no altsetting 0
[  440.284044][T10614] usb 10-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  440.286921][T10614] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  440.289519][T10614] usb 10-1: Product: syz
[  440.291144][T10614] usb 10-1: Manufacturer: syz
[  440.292807][T10614] usb 10-1: SerialNumber: syz
[  440.521216][T10614] aqc111 10-1:1.105: probe with driver aqc111 failed with error -22
[  440.522974][T14295] binder: 14294:14295 ioctl c0306201 200000000100 returned -14
[  440.646402][T14303] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3236'.
[  440.737232][ T5910] usb 10-1: USB disconnect, device number 11
[  440.849707][T14310] block device autoloading is deprecated and will be removed.
[  440.850862][T14309] block device autoloading is deprecated and will be removed.
[  440.910667][T14313] loop8: detected capacity change from 0 to 4096
[  440.913591][T14313] ntfs3(loop8): Different NTFS sector size (4096) and media sector size (512).
[  440.925823][T14313] ntfs3(loop8): Failed to initialize $Extend/$Reparse.
[  440.997963][T14315] smc: net device bond0 applied user defined pnetid SYZ2
[  441.319883][T14326] loop9: detected capacity change from 0 to 164
[  441.342240][T14326] isofs: Unable to find the ".." directory for NFS.
[  441.390780][T14330] C: renamed from team_slave_0 (while UP)
[  441.401662][T14330] netlink: 'syz.9.3248': attribute type 1 has an invalid length.
[  441.404912][T14330] netlink: 152 bytes leftover after parsing attributes in process `syz.9.3248'.
[  441.409124][T14330] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  443.991099][T14382] tmpfs: Bad value for 'mpol'
[  443.995564][T14382] tmpfs: Bad value for 'mpol'
[  444.052790][T14386] loop9: detected capacity change from 0 to 128
[  444.645520][T14396] loop7: detected capacity change from 0 to 256
[  444.649161][T14396] exfat: Unknown parameter 'sys_tz'
[  445.111276][T14407] loop9: detected capacity change from 0 to 47
[  445.213427][T14413] loop9: detected capacity change from 0 to 512
[  445.246072][T14413] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  445.249882][T14413] ext4 filesystem being mounted at /282/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  445.265600][   T33] audit: type=1804 audit(1754929486.511:104): pid=14413 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.3286" name="/newroot/282/file1/file1" dev="loop9" ino=15 res=1 errno=0
[  445.277261][T14413] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  445.289718][T14413] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28
[  445.293628][T14413] EXT4-fs (loop9): This should not happen!! Data will be lost
[  445.293628][T14413] 
[  445.298226][T14413] EXT4-fs (loop9): Total free blocks count 0
[  445.300065][T14413] EXT4-fs (loop9): Free/Dirty block details
[  445.301990][T14413] EXT4-fs (loop9): free_blocks=65280
[  445.303584][T14413] EXT4-fs (loop9): dirty_blocks=33
[  445.305724][T14413] EXT4-fs (loop9): Block reservation details
[  445.314744][T14413] EXT4-fs (loop9): i_reserved_data_blocks=33
[  445.322949][T14420] netlink: 9280 bytes leftover after parsing attributes in process `syz.8.3288'.
[  445.357042][T12348] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  445.656107][   T33] audit: type=1800 audit(1754929486.876:105): pid=14401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3280" name="/" dev="fuse" ino=18446744073709551613 res=0 errno=0
[  445.689081][T14434] program syz.7.3294 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  445.744910][ T5910] usb 10-1: new high-speed USB device number 12 using dummy_hcd
[  445.904085][ T5910] usb 10-1: Using ep0 maxpacket: 32
[  445.907805][ T5910] usb 10-1: config 0 has an invalid interface number: 126 but max is 0
[  445.910509][ T5910] usb 10-1: config 0 has no interface number 0
[  445.912640][ T5910] usb 10-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023
[  445.917112][ T5910] usb 10-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8
[  445.921960][ T5910] usb 10-1: config 0 interface 126 has no altsetting 0
[  445.928539][ T5910] usb 10-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c
[  445.931473][ T5910] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  445.934039][ T5910] usb 10-1: Product: syz
[  445.935468][ T5910] usb 10-1: Manufacturer: syz
[  445.937667][ T5910] usb 10-1: SerialNumber: syz
[  445.942808][ T5910] usb 10-1: config 0 descriptor??
[  445.946104][T14432] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  445.951140][T14432] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  446.014446][T14452] loop7: detected capacity change from 0 to 32768
[  446.021536][   T33] audit: type=1800 audit(1754929487.222:106): pid=14452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3303" name="file1" dev="loop7" ino=4 res=0 errno=0
[  446.030719][T14452] ERROR: (device loop7): xtSearch: xt_getpage: xtree page corrupt
[  446.030719][T14452] 
[  446.037188][T14452] ERROR: (device loop7): remounting filesystem as read-only
[  446.039515][T14452] xtLookup: xtSearch returned -5
[  446.043321][T14452] ERROR: (device loop7): xtSearch: xt_getpage: xtree page corrupt
[  446.043321][T14452] 
[  446.047657][T14452] xtLookup: xtSearch returned -5
[  446.049343][T14452] ERROR: (device loop7): xtTruncate: xt_getpage: xtree page corrupt
[  446.049343][T14452] 
[  446.287782][T14458] loop8: detected capacity change from 0 to 1024
[  446.319874][T14458] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  446.331309][T14458] ext4 filesystem being mounted at /286/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  446.377766][T12345] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  446.415778][ T5910] ir_usb 10-1:0.126: IR Dongle converter detected
[  446.445350][T14462] loop7: detected capacity change from 0 to 32768
[  446.486512][T14462] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  446.497163][T14462] XFS (loop7): Ending clean mount
[  446.518836][T12350] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  446.837083][ T5910] usb 10-1: IR Dongle converter now attached to ttyUSB0
[  446.855269][ T5910] usb 10-1: USB disconnect, device number 12
[  446.864115][ T5910] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0
[  446.867586][ T5910] ir_usb 10-1:0.126: device disconnected
[  447.230537][T14500] loop7: detected capacity change from 0 to 32768
[  447.241589][T14500] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  447.251868][T14500] XFS (loop7): Ending clean mount
[  447.278949][T12350] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  447.461640][T14514] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3324'.
[  447.687800][T14540] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3337'.
[  447.750665][T14546] usb usb8: usbfs: process 14546 (syz.9.3340) did not claim interface 0 before use
[  447.816950][T14554] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3345'.
[  447.821346][T14554] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3345'.
[  447.824321][T14554] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3345'.
[  447.884690][T14560] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3347'.
[  448.001835][T14565] loop9: detected capacity change from 0 to 512
[  448.014849][T14565] EXT4-fs error (device loop9): ext4_iget_extra_inode:5104: inode #15: comm syz.9.3349: corrupted in-inode xattr: invalid ea_ino
[  448.024210][T14565] EXT4-fs error (device loop9): ext4_orphan_get:1397: comm syz.9.3349: couldn't read orphan inode 15 (err -117)
[  448.029624][T14565] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  448.042843][T14565] EXT4-fs error (device loop9): ext4_add_entry:2417: inode #2: comm syz.9.3349: Directory hole found for htree leaf block 0
[  448.062907][T12348] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  448.248635][T14572] loop9: detected capacity change from 0 to 32768
[  448.253313][T14572] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.3352 (14572)
[  448.262012][T14572] BTRFS info (device loop9): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  448.265231][T14572] BTRFS info (device loop9): using sha256 (sha256-lib) checksum algorithm
[  448.268399][T14572] BTRFS info (device loop9): using free-space-tree
[  448.303923][ T7902] BTRFS warning (device loop9): checksum verify failed on logical 5292032 mirror 1 wanted 0xd5bc16bf7502c3940107ef92895f3d2e7f4c766f4585e38c0ad39b0a5d2e0772 found 0xe411c7a0efa54fabafc8c0ad0545277d3e683b146ef1a47775d9ca9aa10535d4 level 0
[  448.312643][T14572] BTRFS warning (device loop9): failed to read root (objectid=9): -5
[  448.392949][T14572] BTRFS error (device loop9): open_ctree failed: -5
[  448.590319][T14597] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3357'.
[  448.851063][T14615] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  449.072077][T14625] loop7: detected capacity change from 0 to 1024
[  449.180478][T14627] loop7: detected capacity change from 0 to 512
[  449.183771][T14627] EXT4-fs: Ignoring removed i_version option
[  449.195442][T14627] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  449.226629][T14627] EXT4-fs (loop7): 1 truncate cleaned up
[  449.231145][T14627] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  449.338253][T12350] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  449.525188][T14639] loop8: detected capacity change from 0 to 1024
[  449.791718][T14650] loop9: detected capacity change from 0 to 512
[  449.798339][T14648] netlink: 64 bytes leftover after parsing attributes in process `syz.8.3380'.
[  449.801099][T14648] netlink: 64 bytes leftover after parsing attributes in process `syz.8.3380'.
[  449.810344][T14650] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.3381: invalid indirect mapped block 32768 (level 0)
[  449.828496][T14650] EXT4-fs (loop9): Remounting filesystem read-only
[  449.832157][T14650] EXT4-fs (loop9): 1 truncate cleaned up
[  449.834657][T14650] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  449.867806][T12348] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  450.222865][T10605] usb 10-1: new high-speed USB device number 13 using dummy_hcd
[  450.385109][T10605] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  450.388377][T10605] usb 10-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00
[  450.391533][T10605] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  450.396458][T10605] usb 10-1: config 0 descriptor??
[  450.498564][T14702] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING
[  450.838937][T10605] greenasia 0003:0E8F:0012.0017: hidraw0: USB HID v0.00 Device [HID 0e8f:0012] on usb-dummy_hcd.9-1/input0
[  450.843121][T10605] greenasia 0003:0E8F:0012.0017: no inputs found
[  450.928338][T10614] usb 9-1: new high-speed USB device number 18 using dummy_hcd
[  451.051562][T10605] usb 10-1: USB disconnect, device number 13
[  451.089419][T10614] usb 9-1: Using ep0 maxpacket: 8
[  451.095464][T10614] usb 9-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[  451.098814][T10614] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  451.102724][T10614] usb 9-1: Product: syz
[  451.104523][T10614] usb 9-1: Manufacturer: syz
[  451.106506][T10614] usb 9-1: SerialNumber: syz
[  451.112102][T10614] usb 9-1: config 0 descriptor??
[  451.116803][T10614] gspca_main: sq930x-2.14.0 probing 2770:930c
[  451.546551][T10614] gspca_sq930x: ucbus_write failed -71
[  451.640432][T14718] dvmrp1: entered allmulticast mode
[  451.783529][T10614] gspca_sq930x: Sensor ov9630 not yet treated
[  451.785708][T10614] sq930x 9-1:0.0: probe with driver sq930x failed with error -22
[  451.795225][T10614] usb 9-1: USB disconnect, device number 18
[  453.039774][T14745] 
[  453.074962][T14751] loop7: detected capacity change from 0 to 128
[  453.096313][T14751] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  453.101947][T14751] ext4 filesystem being mounted at /261/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  453.114040][T14751] fscrypt (loop7, inode 12): Unsupported encryption flags (0x99)
[  453.129692][T12350] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  453.345695][ T5877] usb 9-1: new low-speed USB device number 19 using dummy_hcd
[  453.517783][ T5877] usb 9-1: config 32 has 1 interface, different from the descriptor's value: 2
[  453.520554][ T5877] usb 9-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10
[  453.523974][ T5877] usb 9-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 255, setting to 8
[  453.527446][ T5877] usb 9-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7
[  453.530303][ T5877] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  453.534989][T14753] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  453.759277][ T5877] usb 9-1: string descriptor 0 read error: -71
[  453.779970][ T5877] usb 9-1: USB disconnect, device number 19
[  454.072268][T14776] loop9: detected capacity change from 0 to 1024
[  454.077470][T14776] EXT4-fs: Ignoring removed oldalloc option
[  454.095692][T14776] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  454.120046][T12348] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  455.230475][T14811] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3440'.
[  455.233641][T14811] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3440'.
[  455.240991][T14811] netlink: 50 bytes leftover after parsing attributes in process `syz.7.3440'.
[  455.272481][T14813] loop9: detected capacity change from 0 to 4096
[  455.285192][T14813] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  455.299864][T12348] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  455.337047][T14819] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3443'.
[  455.406544][T14823] syzkaller0: entered promiscuous mode
[  455.409883][T14823] syzkaller0: entered allmulticast mode
[  457.050159][T14827] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3447'.
[  457.214553][T14839] loop9: detected capacity change from 0 to 2048
[  457.218075][T14839] udf: Unexpected value for 'undelete'
[  457.403593][T14854] loop9: detected capacity change from 0 to 256
[  457.583389][   T33] audit: type=1800 audit(1754929498.035:107): pid=14856 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.3460" name="file1" dev="loop9" ino=1048662 res=0 errno=0
[  459.796584][T14892] loop8: detected capacity change from 0 to 64
[  459.821133][T14894] loop9: detected capacity change from 0 to 512
[  459.826950][T14892] syz.8.3476: attempt to access beyond end of device
[  459.826950][T14892] loop8: rw=0, sector=130062, nr_sectors = 2 limit=64
[  459.832037][T14892] Buffer I/O error on dev loop8, logical block 65031, async page read
[  459.836734][T14892] syz.8.3476: attempt to access beyond end of device
[  459.836734][T14892] loop8: rw=0, sector=130062, nr_sectors = 2 limit=64
[  459.843292][T14892] Buffer I/O error on dev loop8, logical block 65031, async page read
[  459.848670][T14894] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  459.852740][T14894] ext4 filesystem being mounted at /359/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  459.868285][T14894] EXT4-fs warning (device loop9): verify_group_input:137: Cannot add at group 25 (only 1 groups)
[  459.884703][T12348] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  459.948604][T14903] loop8: detected capacity change from 0 to 256
[  460.125295][T14907] loop8: detected capacity change from 0 to 32768
[  460.133103][T14907] XFS (loop8): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  460.142171][T14907] XFS (loop8): Ending clean mount
[  460.145182][T14907] XFS (loop8): Quotacheck needed: Please wait.
[  460.179139][T14907] XFS (loop8): Quotacheck: Done.
[  460.186349][T10614] usb 10-1: new high-speed USB device number 14 using dummy_hcd
[  460.211368][T14907] XFS (loop8): User initiated shutdown received.
[  460.213674][T14907] XFS (loop8): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x105/0x150 (fs/xfs/xfs_fsops.c:466).  Shutting down filesystem.
[  460.218157][T14907] XFS (loop8): Please unmount the filesystem and rectify the problem(s)
[  460.235215][T12345] XFS (loop8): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  460.347397][T10614] usb 10-1: Using ep0 maxpacket: 32
[  460.350062][   T33] audit: type=1326 audit(1754929500.626:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14916 comm="syz.8.3483" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aec58ebe9 code=0x7ffc0000
[  460.350572][T10614] usb 10-1: config 0 interface 0 has no altsetting 0
[  460.359711][   T33] audit: type=1326 audit(1754929500.636:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14916 comm="syz.8.3483" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aec58ebe9 code=0x7ffc0000
[  460.368156][T10614] usb 10-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  460.371115][T10614] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  460.373654][T10614] usb 10-1: Product: syz
[  460.375609][T10614] usb 10-1: Manufacturer: syz
[  460.381458][T10614] usb 10-1: SerialNumber: syz
[  460.387732][T10614] usb 10-1: config 0 descriptor??
[  460.823731][T10614] gs_usb 10-1:0.0: Configuring for 2 interfaces
[  461.038067][T10614] gs_usb 10-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO)
[  461.040920][T10614] gs_usb 10-1:0.0: probe with driver gs_usb failed with error -71
[  461.046756][T10614] usb 10-1: USB disconnect, device number 14
[  461.487303][T14933] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3491'.
[  461.491312][T14933] netlink: 'syz.8.3491': attribute type 5 has an invalid length.
[  461.494618][T14933] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3491'.
[  461.627018][T14939] loop8: detected capacity change from 0 to 1024
[  461.648247][T14939] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  461.665588][T14939] EXT4-fs error (device loop8): ext4_generic_delete_entry:2668: inode #2: block 16: comm syz.8.3493: bad entry in directory: inode out of bounds - offset=12, inode=1282, rec_len=12, size=1024 fake=1
[  461.689851][T14939] EXT4-fs error (device loop8) in ext4_delete_entry:2739: Corrupt filesystem
[  461.692963][T14939] EXT4-fs warning (device loop8): ext4_rename_delete:3735: inode #2: comm syz.8.3493: Deleting old file: nlink 4, error=-117
[  461.711155][T12345] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  461.766763][T14950] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3498'.
[  461.781446][T14948] loop8: detected capacity change from 0 to 4096
[  461.784940][T14948] ntfs3(loop8): Different NTFS sector size (4096) and media sector size (512).
[  461.798102][T14948] ntfs3(loop8): ino=19, mi_enum_attr
[  461.809802][T14948] ntfs3(loop8): ino=5, "/" indx_read
[  461.813664][T14948] ntfs3(loop8): ino=5, "/" ntfs_readdir
[  462.005053][T14966] loop8: detected capacity change from 0 to 256
[  462.018116][T14966] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x4f8593fa, utbl_chksum : 0xe619d30d)
[  462.057509][T10614] usb 10-1: new high-speed USB device number 15 using dummy_hcd
[  462.228415][T10614] usb 10-1: Using ep0 maxpacket: 8
[  462.231806][T10614] usb 10-1: config 179 has an invalid interface number: 65 but max is 0
[  462.235200][T10614] usb 10-1: config 179 has no interface number 0
[  462.237800][T10614] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  462.242611][T10614] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  462.247116][T10614] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0
[  462.253183][T10614] usb 10-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  462.258788][T10614] usb 10-1: config 179 interface 65 has no altsetting 0
[  462.261756][T10614] usb 10-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  462.265400][T10614] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  462.345830][T10605] usb 9-1: new full-speed USB device number 20 using dummy_hcd
[  462.497951][T10614] usb 10-1: USB disconnect, device number 15
[  462.507892][T10605] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  462.511336][T10605] usb 9-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00
[  462.514232][T10605] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  462.519587][T10605] usb 9-1: config 0 descriptor??
[  462.658419][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  462.665806][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  462.957481][T10605] uclogic 0003:5543:0522.0018: unbalanced delimiter at end of report description
[  462.960740][T10605] uclogic 0003:5543:0522.0018: parse failed
[  462.962704][T10605] uclogic 0003:5543:0522.0018: probe with driver uclogic failed with error -22
[  463.070734][T14978] loop9: detected capacity change from 0 to 4096
[  463.079742][T14978] NILFS (loop9): invalid segment: Checksum error in segment payload
[  463.082253][T14978] NILFS (loop9): trying rollback from an earlier position
[  463.089885][T14978] NILFS (loop9): recovery complete
[  463.092160][T14979] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  463.184016][ T5910] usb 9-1: USB disconnect, device number 20
[  463.203560][T14985] loop9: detected capacity change from 0 to 512
[  463.207935][T14985] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -13
[  463.210684][T14985] EXT4-fs error (device loop9): ext4_orphan_get:1392: inode #13: comm syz.9.3514: iget: bad i_size value: 12154757448730
[  463.215997][T14985] EXT4-fs error (device loop9): ext4_orphan_get:1397: comm syz.9.3514: couldn't read orphan inode 13 (err -117)
[  463.220729][T14985] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  463.242814][T12348] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  463.692900][ T5910] usb 10-1: new high-speed USB device number 16 using dummy_hcd
[  463.851877][T14998] loop8: detected capacity change from 0 to 4096
[  463.881692][ T5910] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  463.890131][ T5910] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  463.893337][ T5910] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  463.899323][ T5910] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  463.910965][ T5910] usb 10-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16
[  463.913786][ T5910] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  463.916281][ T5910] usb 10-1: Product: syz
[  463.931029][ T5910] usb 10-1: Manufacturer: syz
[  463.932566][ T5910] usb 10-1: SerialNumber: syz
[  463.941487][ T5910] usb 10-1: config 0 descriptor??
[  463.950688][ T5910] kvaser_usb 10-1:0.0: CMD_MAP_CHANNEL_REQ failed for CAN0
[  463.953075][ T5910] kvaser_usb 10-1:0.0: error -EMSGSIZE: Failed to initialize card
[  463.955680][ T5910] kvaser_usb 10-1:0.0: probe with driver kvaser_usb failed with error -90
[  464.005579][T15006] loop8: detected capacity change from 0 to 512
[  464.008566][T15006] EXT4-fs: Ignoring removed bh option
[  464.014066][T15006] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem
[  464.020037][T15006] EXT4-fs (loop8): 1 truncate cleaned up
[  464.023912][T15006] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  464.171022][T10605] usb 10-1: USB disconnect, device number 16
[  464.805319][T15018] loop9: detected capacity change from 0 to 512
[  464.808471][T15018] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem
[  464.820284][T15018] EXT4-fs error (device loop9): ext4_orphan_get:1392: inode #15: comm syz.9.3527: iget: bogus i_mode (5)
[  464.825276][T15018] EXT4-fs error (device loop9): ext4_orphan_get:1397: comm syz.9.3527: couldn't read orphan inode 15 (err -117)
[  464.832820][T15018] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  464.837015][T15018] ext2 filesystem being mounted at /376/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  464.862782][T12348] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  464.941241][T12345] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  465.092395][T15034] loop9: detected capacity change from 0 to 512
[  465.102788][T15034] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  465.110223][T15034] EXT4-fs (loop9): blocks per group (34) and clusters per group (32768) inconsistent
[  465.287472][T15039] loop8: detected capacity change from 0 to 16
[  465.291766][T15039] erofs (device loop8): unsupported datalayout 5 of nid 36
[  465.393641][ T5910] usb 10-1: new high-speed USB device number 17 using dummy_hcd
[  465.554614][ T5910] usb 10-1: config 0 has an invalid interface number: 111 but max is 0
[  465.557377][ T5910] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  465.560747][ T5910] usb 10-1: config 0 has no interface number 0
[  465.562764][ T5910] usb 10-1: too many endpoints for config 0 interface 111 altsetting 99: 44, using maximum allowed: 30
[  465.567072][ T5910] usb 10-1: config 0 interface 111 altsetting 99 has 0 endpoint descriptors, different from the interface descriptor's value: 44
[  465.571360][ T5910] usb 10-1: config 0 interface 111 has no altsetting 0
[  465.573688][ T5910] usb 10-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53
[  465.576736][ T5910] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  465.580703][ T5910] usb 10-1: config 0 descriptor??
[  465.586806][ T5910] usb 10-1: selecting invalid altsetting 0
[  465.807884][ T5910] usb 10-1: USB disconnect, device number 17
[  466.297694][T15051] netlink: 'syz.8.3541': attribute type 12 has an invalid length.
[  466.963048][T15090] loop8: detected capacity change from 0 to 32768
[  466.972652][T15090] XFS (loop8): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  466.982259][T15090] XFS (loop8): Ending clean mount
[  466.990408][   T33] audit: type=1800 audit(1754929506.837:110): pid=15090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3558" name="file1" dev="loop8" ino=6150 res=0 errno=0
[  467.009882][T12345] XFS (loop8): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  467.237614][T15102] loop8: detected capacity change from 0 to 32768
[  467.242733][T15102] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.3560 (15102)
[  467.255376][T15102] BTRFS info (device loop8): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  467.258941][T15102] BTRFS info (device loop8): using sha256 (sha256-lib) checksum algorithm
[  467.261746][T15102] BTRFS info (device loop8): using free-space-tree
[  467.348834][T15102] BTRFS info (device loop8): rebuilding free space tree
[  467.385855][T15102] BTRFS info (device loop8): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  467.675177][   T33] audit: type=1326 audit(1754929507.473:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15132 comm="syz.9.3567" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce00f8ebe9 code=0x7ffc0000
[  467.686045][   T33] audit: type=1326 audit(1754929507.483:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15132 comm="syz.9.3567" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce00f8ebe9 code=0x7ffc0000
[  467.695931][   T33] audit: type=1326 audit(1754929507.483:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15132 comm="syz.9.3567" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce00f8ebe9 code=0x7ffc0000
[  467.705088][   T33] audit: type=1326 audit(1754929507.483:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15132 comm="syz.9.3567" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce00f8ebe9 code=0x7ffc0000
[  467.712218][   T33] audit: type=1326 audit(1754929507.483:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15132 comm="syz.9.3567" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce00f8ebe9 code=0x7ffc0000
[  467.719250][   T33] audit: type=1326 audit(1754929507.483:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15132 comm="syz.9.3567" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce00f8ebe9 code=0x7ffc0000
[  467.727562][   T33] audit: type=1326 audit(1754929507.483:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15132 comm="syz.9.3567" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce00f8ebe9 code=0x7ffc0000
[  467.737558][   T33] audit: type=1326 audit(1754929507.483:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15132 comm="syz.9.3567" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce00f8ebe9 code=0x7ffc0000
[  467.744300][   T33] audit: type=1326 audit(1754929507.483:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15132 comm="syz.9.3567" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce00f8ebe9 code=0x7ffc0000
[  467.798011][ T5910] usb 9-1: new full-speed USB device number 21 using dummy_hcd
[  467.942017][T15138] loop9: detected capacity change from 0 to 128
[  467.948856][T15138] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256
[  467.955494][T15138] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  467.985767][ T5910] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  467.996753][ T5910] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  467.999721][T15140] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3570'.
[  467.999826][ T5910] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  468.013037][ T5910] usb 9-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00
[  468.021268][ T5910] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  468.031639][ T5910] usb 9-1: config 0 descriptor??
[  468.394378][T15174] loop9: detected capacity change from 0 to 64
[  468.478869][ T5910] acrux 0003:1A34:0802.0019: unknown main item tag 0x0
[  468.481217][ T5910] acrux 0003:1A34:0802.0019: unknown main item tag 0x0
[  468.493880][ T5910] acrux 0003:1A34:0802.0019: unknown main item tag 0x0
[  468.496200][ T5910] acrux 0003:1A34:0802.0019: unknown main item tag 0x0
[  468.498341][ T5910] acrux 0003:1A34:0802.0019: unknown main item tag 0x0
[  468.505405][ T5910] acrux 0003:1A34:0802.0019: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.8-1/input0
[  468.508903][ T5910] acrux 0003:1A34:0802.0019: no inputs found
[  468.510822][ T5910] acrux 0003:1A34:0802.0019: Failed to enable force feedback support, error: -19
[  468.698358][ T5910] usb 9-1: USB disconnect, device number 21
[  469.558610][T15206] loop7: detected capacity change from 0 to 512
[  469.564630][T15206] EXT4-fs (loop7): revision level too high, forcing read-only mode
[  469.567355][T15206] EXT4-fs (loop7): orphan cleanup on readonly fs
[  469.569836][T15206] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.3602: Failed to acquire dquot type 1
[  469.581993][T15206] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.3602: bg 0: block 40: padding at end of block bitmap is not set
[  469.592306][T15206] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  469.597938][T15206] EXT4-fs (loop7): 1 truncate cleaned up
[  469.601223][T15206] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  469.623257][T12350] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  469.711625][T10614] usb 9-1: new full-speed USB device number 22 using dummy_hcd
[  469.874160][T10614] usb 9-1: config 255 has an invalid interface number: 91 but max is 0
[  469.877005][T10614] usb 9-1: config 255 has no interface number 0
[  469.879204][T10614] usb 9-1: config 255 interface 91 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  469.884470][T10614] usb 9-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice=a8.6a
[  469.887239][T10614] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  469.889651][T10614] usb 9-1: Product: syz
[  469.890918][T10614] usb 9-1: Manufacturer: syz
[  469.892374][T10614] usb 9-1: SerialNumber: syz
[  469.900446][T10614] usbtouchscreen 9-1:255.91: probe with driver usbtouchscreen failed with error -12
[  470.115616][T10614] usb 9-1: USB disconnect, device number 22
[  470.646411][T15224] loop9: detected capacity change from 0 to 256
[  471.005831][T10614] usb 10-1: new high-speed USB device number 18 using dummy_hcd
[  471.166392][T10614] usb 10-1: Using ep0 maxpacket: 16
[  471.172271][T10614] usb 10-1: config 0 has an invalid interface number: 4 but max is 0
[  471.174815][T10614] usb 10-1: config 0 has no interface number 0
[  471.178346][T10614] usb 10-1: config 0 interface 4 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[  471.181497][T10614] usb 10-1: config 0 interface 4 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  471.186672][T10614] usb 10-1: New USB device found, idVendor=0742, idProduct=200a, bcdDevice=7e.46
[  471.190305][T10614] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  471.192864][T10614] usb 10-1: Product: syz
[  471.194270][T10614] usb 10-1: Manufacturer: syz
[  471.195812][T10614] usb 10-1: SerialNumber: syz
[  471.199021][T10614] usb 10-1: config 0 descriptor??
[  471.202153][T15233] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22
[  471.204735][T15233] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22
[  471.208975][T10614] HFC-S_USB 10-1:0.4: probe with driver HFC-S_USB failed with error -5
[  471.400695][ T5910] usb 9-1: new high-speed USB device number 23 using dummy_hcd
[  471.428609][T10614] usb 10-1: USB disconnect, device number 18
[  471.571845][ T5910] usb 9-1: Using ep0 maxpacket: 16
[  471.576083][ T5910] usb 9-1: config 0 has an invalid interface number: 105 but max is 0
[  471.579648][ T5910] usb 9-1: config 0 descriptor has 1 excess byte, ignoring
[  471.582916][ T5910] usb 9-1: config 0 has no interface number 0
[  471.587883][ T5910] usb 9-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  471.591771][ T5910] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  471.595397][ T5910] usb 9-1: Product: syz
[  471.597256][ T5910] usb 9-1: Manufacturer: syz
[  471.599286][ T5910] usb 9-1: SerialNumber: syz
[  471.606758][ T5910] usb 9-1: config 0 descriptor??
[  471.612401][ T5910] usb 9-1: Found UVC 0.00 device syz (046d:08f3)
[  471.615292][ T5910] usb 9-1: No valid video chain found.
[  471.835415][ T5910] usb 9-1: USB disconnect, device number 23
[  472.228819][T15252] loop9: detected capacity change from 0 to 32768
[  472.232608][T15252] bcachefs (/dev/loop9): error validating superblock: Invalid superblock section quota: wrong size (got 40 should be 80)
[  472.232608][T15252] quota (size 40):
[  472.232608][T15252] user: flags 9 space timelimit 7 warnlimit 0 inodes timelimit 24 warnlimit 0
[  472.232608][T15252] group: flags 1 space timelimit 80 warnlimit 10 inodes timelimit 0 warnlimit 0
[  472.232608][T15252] project: flags 38 space timelimit 0 warnlimit 0 inodes timelimit 0 warnlimit 0
[  472.232608][T15252] 
[  472.248466][T15252] bcachefs: bch2_fs_get_tree() error: invalid_sb_quota
[  472.410927][T15258] loop9: detected capacity change from 0 to 2048
[  472.482536][T15263] loop9: detected capacity change from 0 to 4096
[  472.499466][T15263] ntfs3(loop9): ino=1a, mi_enum_attr
[  472.501290][T15263] ntfs3(loop9): Mark volume as dirty due to NTFS errors
[  472.557055][T15266] netlink: 'syz.9.3630': attribute type 1 has an invalid length.
[  472.559656][T15266] nbd: couldn't find a device at index 393224
[  472.598996][T15268] loop9: detected capacity change from 0 to 8
[  472.607679][T15264] loop8: detected capacity change from 0 to 32768
[  472.617360][T15264] XFS: ikeep mount option is deprecated.
[  472.619904][T15268] MTD: Attempt to mount non-MTD device "/dev/loop9"
[  472.631561][T15264] XFS (loop8): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  472.645032][T15264] XFS (loop8): Ending clean mount
[  472.653597][T15264] XFS (loop8): Quotacheck needed: Please wait.
[  472.694380][T15264] XFS (loop8): Quotacheck: Done.
[  472.724025][T12345] XFS (loop8): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  472.844676][T15285] loop8: detected capacity change from 0 to 4096
[  472.881752][T15285] NILFS (loop8): invalid segment: Checksum error in segment payload
[  472.884526][T15285] NILFS (loop8): trying rollback from an earlier position
[  472.924988][T15285] NILFS (loop8): recovery complete
[  472.950300][T15290] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  473.039416][T15298] Option 'TXƮ' to dns_resolver key: bad/missing value
[  473.131710][T15306] libceph: resolve '400' (ret=-3): failed
[  473.175529][T10473] usb 10-1: new high-speed USB device number 19 using dummy_hcd
[  473.312216][T15315] loop7: detected capacity change from 0 to 32768
[  473.312284][T15313] loop8: detected capacity change from 0 to 32768
[  473.337518][T10473] usb 10-1: Using ep0 maxpacket: 32
[  473.340655][T10473] usb 10-1: config 0 has an invalid interface number: 108 but max is 0
[  473.343326][T10473] usb 10-1: config 0 has no interface number 0
[  473.350223][T10473] usb 10-1: config 0 interface 108 altsetting 180 endpoint 0x2 has invalid wMaxPacketSize 0
[  473.362261][T10473] usb 10-1: config 0 interface 108 has no altsetting 0
[  473.373296][T10473] usb 10-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=97.c3
[  473.376139][T10473] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  473.389217][T10473] usb 10-1: Product: syz
[  473.390650][T10473] usb 10-1: Manufacturer: syz
[  473.392213][T10473] usb 10-1: SerialNumber: syz
[  473.401195][T10473] usb 10-1: config 0 descriptor??
[  473.404901][T10473] ttusbir 10-1:0.108: cannot find expected altsetting
[  473.405779][T15313] bcachefs (loop8): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,str_hash=crc32c,noacl,usrquota,grpquota,nojournal_transaction_names,allocator_stuck_timeout=256
[  473.429626][T15313]   allowing incompatible features above 0.0: (unknown version)
[  473.432383][T15313]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  473.436796][T15313] bcachefs (loop8): Using encoding defined by superblock: utf8-12.1.0
[  473.439459][T15313] bcachefs (loop8): initializing new filesystem
[  473.449694][T15313] bcachefs (loop8): going read-write
[  473.455444][T15313] bcachefs (loop8): marking superblocks
[  473.477083][T15313] bcachefs (loop8): initializing freespace
[  473.480599][T15313] bcachefs (loop8): done initializing freespace
[  473.483697][T15313] bcachefs (loop8): reading snapshots table
[  473.496024][T15313] bcachefs (loop8): reading snapshots done
[  473.522247][T15313] bcachefs (loop8): done starting filesystem
[  473.591062][T12345] bcachefs (loop8): shutting down
[  473.594308][T12345] bcachefs (loop8): going read-only
[  473.596031][T12345] bcachefs (loop8): finished waiting for writes to stop
[  473.601727][T12345] bcachefs (loop8): flushing journal and stopping allocators, journal seq 2
[  473.616355][T15324] loop7: detected capacity change from 0 to 32768
[  473.623450][T12345] bcachefs (loop8): flushing journal and stopping allocators complete, journal seq 3
[  473.629396][T10473] usb 10-1: USB disconnect, device number 19
[  473.631256][T12345] bcachefs (loop8): clean shutdown complete, journal seq 4
[  473.631563][T12345] bcachefs (loop8): marking filesystem clean
[  473.650821][T15324] ocfs2: Slot 0 on device (7,7) was already allocated to this node!
[  473.659034][T15324] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  473.659746][T12345] bcachefs (loop8): shutdown complete
[  473.726584][T12350] ocfs2: Unmounting device (7,7) on (node local)
[  473.950819][T15334] loop7: detected capacity change from 0 to 32768
[  473.968877][T15334] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  473.978060][T15334] XFS (loop7): Ending clean mount
[  474.021687][T12350] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  474.479637][ T5910] usb 10-1: new high-speed USB device number 20 using dummy_hcd
[  474.650659][ T5910] usb 10-1: Using ep0 maxpacket: 16
[  474.653792][ T5910] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  474.657798][ T5910] usb 10-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00
[  474.660822][ T5910] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  474.665637][ T5910] usb 10-1: config 0 descriptor??
[  474.800930][T15364] loop8: detected capacity change from 0 to 512
[  474.808323][T15364] fscrypt (loop8, inode 2): Error -61 getting encryption context
[  474.813177][T15364] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -61
[  474.816535][T15364] EXT4-fs error (device loop8): ext4_orphan_get:1392: inode #13: comm syz.8.3663: iget: bad i_size value: 12154757448730
[  474.820985][T15364] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.3663: couldn't read orphan inode 13 (err -117)
[  474.826401][T15364] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  474.834297][T15364] fscrypt (loop8, inode 2): Error -61 getting encryption context
[  474.855215][T12345] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  474.926186][T15370] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3665'.
[  475.099806][ T5910] logitech-djreceiver 0003:046D:C513.001A: unknown main item tag 0x0
[  475.102491][ T5910] logitech-djreceiver 0003:046D:C513.001A: unknown main item tag 0x0
[  475.105115][ T5910] logitech-djreceiver 0003:046D:C513.001A: unknown main item tag 0x0
[  475.107684][ T5910] logitech-djreceiver 0003:046D:C513.001A: unknown main item tag 0x0
[  475.115506][ T5910] logitech-djreceiver 0003:046D:C513.001A: unknown main item tag 0x0
[  475.162320][T15380] loop8: detected capacity change from 0 to 32768
[  475.165428][T15380] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.3670 (15380)
[  475.172723][T15380] BTRFS info (device loop8): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  475.178027][T15380] BTRFS info (device loop8): using sha256 (sha256-lib) checksum algorithm
[  475.180959][T15380] BTRFS info (device loop8): using free-space-tree
[  475.244709][T12345] BTRFS info (device loop8): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  475.313728][T10614] usb 10-1: USB disconnect, device number 20
[  475.870569][T15406] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3674'.
[  476.065916][T10473] IPVS: starting estimator thread 0...
[  476.069003][T15416] tipc: Started in network mode
[  476.070680][T15416] tipc: Node identity ac1414aa, cluster identity 4711
[  476.075395][T15416] tipc: Enabled bearer <udp:s>, priority 10
[  476.158552][T15417] IPVS: using max 84 ests per chain, 201600 per kthread
[  476.372157][T10473] usb 10-1: new high-speed USB device number 21 using dummy_hcd
[  476.430064][T15433] loop8: detected capacity change from 0 to 1024
[  476.446509][T15433] hfsplus: found bad thread record in catalog
[  476.465056][T12545] hfsplus: b-tree write err: -5, ino 4
[  476.543000][T10473] usb 10-1: Using ep0 maxpacket: 8
[  476.554886][T10473] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  476.558553][T10473] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  476.561737][T10473] usb 10-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00
[  476.574981][T10473] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  476.579179][T10473] usb 10-1: config 0 descriptor??
[  476.675950][T15438] loop8: detected capacity change from 0 to 32768
[  476.691228][T15438] XFS (loop8): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  476.731983][T15438] XFS (loop8): Ending clean mount
[  476.770088][T12345] XFS (loop8): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  477.025413][T10473] cherry 0003:046A:0027.001B: unknown main item tag 0x0
[  477.027756][T10473] cherry 0003:046A:0027.001B: unknown main item tag 0x6
[  477.030124][T10473] cherry 0003:046A:0027.001B: unknown main item tag 0x5
[  477.033414][T10473] cherry 0003:046A:0027.001B: unknown main item tag 0x4
[  477.038036][T10473] cherry 0003:046A:0027.001B: unknown main item tag 0x0
[  477.040398][T10473] cherry 0003:046A:0027.001B: unknown global tag 0xd
[  477.042677][T10473] cherry 0003:046A:0027.001B: item 0 4 1 13 parsing failed
[  477.043074][T15450] loop8: detected capacity change from 0 to 32768
[  477.045780][T10473] cherry 0003:046A:0027.001B: probe with driver cherry failed with error -22
[  477.067969][T15450] ERROR: (device loop8): dbFindCtl: Corrupt dmapctl page
[  477.067969][T15450] 
[  477.071280][T15450] ERROR: (device loop8): remounting filesystem as read-only
[  477.073656][T15450] ERROR: (device loop8): dbDiscardAG: -EIO
[  477.073656][T15450] 
[  477.151730][T15452] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3692'.
[  477.157678][T15452] ipvlan2: entered promiscuous mode
[  477.258015][T12422] usb 10-1: USB disconnect, device number 21
[  477.274585][T10473] tipc: Node number set to 2886997162
[  477.284523][T15456] loop8: detected capacity change from 0 to 2048
[  477.289693][T15456] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  477.310872][T15456] overlayfs: upper fs needs to support d_type.
[  477.318043][T15456] overlayfs: cleanup of 'work/#2c' failed (-2)
[  477.320527][T15456] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  477.322821][T15456] overlayfs: failed to set xattr on upper
[  477.325450][T15456] overlayfs: ...falling back to redirect_dir=nofollow.
[  477.327855][T15456] overlayfs: ...falling back to index=off.
[  477.329740][T15456] overlayfs: ...falling back to uuid=null.
[  477.331662][T15456] overlayfs: conflicting lowerdir path
[  477.435184][T15459] tipc: Started in network mode
[  477.436880][T15459] tipc: Node identity 26ae7d92f71f, cluster identity 4711
[  477.439215][T15459] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  477.442474][T15459] syzkaller0: entered promiscuous mode
[  477.444364][T15459] syzkaller0: entered allmulticast mode
[  477.452360][T15457] tipc: Resetting bearer <eth:syzkaller0>
[  477.469335][T15457] tipc: Disabling bearer <eth:syzkaller0>
[  477.722955][T15475] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3703'.
[  477.804434][T10614] usb 9-1: new high-speed USB device number 24 using dummy_hcd
[  477.969028][T10614] usb 9-1: config 0 has an invalid interface number: 216 but max is 0
[  477.971681][T10614] usb 9-1: config 0 has no interface number 0
[  477.974824][T10614] usb 9-1: config 0 interface 216 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  477.982273][T10614] usb 9-1: config 0 interface 216 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  477.989654][T10614] usb 9-1: New USB device found, idVendor=0499, idProduct=1002, bcdDevice=df.d7
[  477.992463][T10614] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  477.994926][T10614] usb 9-1: Product: syz
[  477.996333][T10614] usb 9-1: Manufacturer: syz
[  477.999269][T10614] usb 9-1: SerialNumber: syz
[  478.010886][T10614] usb 9-1: config 0 descriptor??
[  478.025254][T10614] usb 9-1: Quirk or no altset; falling back to MIDI 1.0
[  478.074059][T10614] snd-usb-audio 9-1:0.216: probe with driver snd-usb-audio failed with error -2
[  478.080914][T15491] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0.
[  478.113963][T12916] udevd[12916]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.216/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  478.238509][T12422] usb 9-1: USB disconnect, device number 24
[  479.163171][T15503] loop9: detected capacity change from 0 to 32768
[  479.194299][T15503] XFS (loop9): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  479.227189][T15503] XFS (loop9): Ending clean mount
[  479.309860][T12348] XFS (loop9): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  479.693360][T15529] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3720'.
[  480.496460][T15556] loop9: detected capacity change from 0 to 32768
[  480.501938][T15556] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.3733 (15556)
[  480.523401][T15556] BTRFS info (device loop9): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  480.532336][T15556] BTRFS info (device loop9): using crc32c (crc32c-lib) checksum algorithm
[  480.540089][T15556] BTRFS info (device loop9): disk space caching is enabled
[  480.545033][T15556] BTRFS warning (device loop9): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  480.599966][T10614] usb 9-1: new high-speed USB device number 25 using dummy_hcd
[  480.624717][T15556] BTRFS info (device loop9): rebuilding free space tree
[  480.641396][T15556] BTRFS info (device loop9): disabling free space tree
[  480.649571][T15556] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  480.655016][T15556] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  480.710391][T12348] BTRFS info (device loop9): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  481.037184][T15579] 9pnet: p9_errstr2errno: server reported unknown error @0x0000000000000003
[  481.332584][T10614] usb 9-1: Using ep0 maxpacket: 8
[  481.341617][T10614] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 7
[  481.370670][T10614] usb 9-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  481.374546][T10614] usb 9-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  481.378550][T10614] usb 9-1: Product: syz
[  481.380149][T10614] usb 9-1: Manufacturer: syz
[  481.396478][T10614] usb 9-1: SerialNumber: syz
[  481.797546][T10614] usb 9-1: Handspring Visor / Palm OS: No valid connect info available
[  481.800908][T10614] usb 9-1: Handspring Visor / Palm OS: port 79, is for unknown use
[  481.803619][T10614] usb 9-1: Handspring Visor / Palm OS: port 0, is for Debugger use
[  481.806130][T10614] usb 9-1: Handspring Visor / Palm OS: Number of ports: 2
[  482.135053][T10614] usb 9-1: palm_os_3_probe - error -71 getting bytes available request
[  482.137980][T10614] visor 9-1:1.0: Handspring Visor / Palm OS converter detected
[  482.154029][T10614] usb 9-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[  482.165574][T10614] usb 9-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[  482.176620][T10614] usb 9-1: USB disconnect, device number 25
[  482.192059][T10614] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[  482.211788][T10614] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[  482.216700][T10614] visor 9-1:1.0: device disconnected
[  482.552725][T15596] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3743'.
[  482.565093][T15598] loop9: detected capacity change from 0 to 512
[  482.580308][T15598] EXT4-fs: Ignoring removed bh option
[  482.594803][T15598] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem
[  482.676878][T15598] EXT4-fs (loop9): failed to open journal device unknown-block(0,0) -6
[  482.698168][T15598] loop9: detected capacity change from 0 to 16
[  482.707463][T15598] erofs (device loop9): mounted with root inode @ nid 36.
[  483.112492][T15629] loop9: detected capacity change from 0 to 32768
[  483.118798][T15629] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.3758 (15629)
[  483.130981][T15629] BTRFS info (device loop9): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  483.134244][T15629] BTRFS info (device loop9): using sha256 (sha256-lib) checksum algorithm
[  483.136880][T15629] BTRFS info (device loop9): using free-space-tree
[  483.327084][T12348] BTRFS info (device loop9): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  483.359927][T15653] loop7: detected capacity change from 0 to 8192
[  483.367956][T15653] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512).
[  483.421382][T15653] ntfs3(loop7): Failed to initialize $Extend/$ObjId.
[  483.578962][T15664] loop9: detected capacity change from 0 to 256
[  483.600858][T15664] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d)
[  483.694751][T15674] loop9: detected capacity change from 0 to 512
[  483.706328][T15674] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  483.735951][T15674] EXT4-fs (loop9): 1 truncate cleaned up
[  483.739197][T15674] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  483.822626][T12348] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  483.840219][T12422] usb 9-1: new high-speed USB device number 26 using dummy_hcd
[  483.931736][T15693] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3779'.
[  483.998842][T15697] loop9: detected capacity change from 0 to 4096
[  484.004031][T15697] ntfs3(loop9): Different NTFS sector size (4096) and media sector size (512).
[  484.007522][T12422] usb 9-1: Using ep0 maxpacket: 16
[  484.012280][T12422] usb 9-1: config 0 has an invalid interface number: 35 but max is 0
[  484.014913][T12422] usb 9-1: config 0 has no interface number 0
[  484.018356][T15697] ntfs3(loop9): ino=1a, mi_enum_attr
[  484.020055][T15697] ntfs3(loop9): Mark volume as dirty due to NTFS errors
[  484.022969][T12422] usb 9-1: config 0 interface 35 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7
[  484.023490][T15697] ntfs3(loop9): ino=1a, mi_enum_attr
[  484.028534][T15697] ntfs3(loop9): Failed to initialize $Extend/$Reparse.
[  484.033743][T12422] usb 9-1: config 0 interface 35 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[  484.043853][T12422] usb 9-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c
[  484.046898][T12422] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  484.050242][T12422] usb 9-1: Product: syz
[  484.051622][T12422] usb 9-1: Manufacturer: syz
[  484.053580][T12422] usb 9-1: SerialNumber: syz
[  484.067504][T12422] usb 9-1: config 0 descriptor??
[  484.076068][T12422] cypress_m8 9-1:0.35: Nokia CA-42 V2 Adapter converter detected
[  484.310140][T12422] usb 9-1: Nokia CA-42 V2 Adapter converter now attached to ttyUSB0
[  484.319560][T12422] usb 9-1: USB disconnect, device number 26
[  484.323455][T12422] nokiaca42v2 ttyUSB0: Nokia CA-42 V2 Adapter converter now disconnected from ttyUSB0
[  484.327790][T12422] cypress_m8 9-1:0.35: device disconnected
[  484.518152][T10473] usb 10-1: new high-speed USB device number 22 using dummy_hcd
[  484.678490][T10473] usb 10-1: Using ep0 maxpacket: 8
[  484.682447][T10473] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  484.686743][T10473] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  484.692554][T10473] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  484.698775][T10473] usb 10-1: config 0 descriptor??
[  484.925167][T10473] iowarrior 10-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  485.364745][T10473] usb 10-1: USB disconnect, device number 22
[  486.633152][T15752] gtp0: entered promiscuous mode
[  486.636501][T15752] gtp0: entered allmulticast mode
[  486.726450][T15758] erspan0: entered promiscuous mode
[  486.888650][T15768] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3814'.
[  486.892989][T15768] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3814'.
[  487.243516][T15777] loop9: detected capacity change from 0 to 1024
[  487.253040][   T33] kauditd_printk_skb: 18 callbacks suppressed
[  487.253051][   T33] audit: type=1326 audit(1754929525.788:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15779 comm="syz.7.3818" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f9c58ebe9 code=0x7ffc0000
[  487.280554][   T33] audit: type=1326 audit(1754929525.788:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15779 comm="syz.7.3818" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f9c58ebe9 code=0x7ffc0000
[  487.288299][   T33] audit: type=1326 audit(1754929525.788:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15779 comm="syz.7.3818" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0f9c58ebe9 code=0x7ffc0000
[  487.298930][T15777] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  487.304190][   T33] audit: type=1326 audit(1754929525.788:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15779 comm="syz.7.3818" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f9c58ebe9 code=0x7ffc0000
[  487.317025][   T33] audit: type=1326 audit(1754929525.788:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15779 comm="syz.7.3818" exe="/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7f0f9c58ebe9 code=0x7ffc0000
[  487.325699][   T33] audit: type=1326 audit(1754929525.788:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15779 comm="syz.7.3818" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f9c58ebe9 code=0x7ffc0000
[  487.350057][T15788] loop7: detected capacity change from 0 to 128
[  487.355452][T15788] EXT4-fs: Ignoring removed nobh option
[  487.360890][T15788] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  487.367149][T15788] ext4 filesystem being mounted at /342/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  487.401281][T12350] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  488.081212][T15814] loop8: detected capacity change from 0 to 4096
[  488.084267][T15814] ntfs3(loop8): Different NTFS sector size (4096) and media sector size (512).
[  488.095921][T15814] ntfs3(loop8): ino=19, mi_enum_attr
[  488.097743][T15814] ntfs3(loop8): Mark volume as dirty due to NTFS errors
[  488.102294][T15814] ntfs3(loop8): Failed to initialize $Extend/$Reparse.
[  488.160881][T12348] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  488.226998][T15822] loop8: detected capacity change from 0 to 2
[  488.230339][T15822] jffs2: Bad value for 'rp_size'
[  488.396631][T15826] loop8: detected capacity change from 0 to 32768
[  488.410566][T15826] bcachefs (/dev/loop8): error validating superblock: Invalid superblock section downgrade: downgrade entry with mismatched major version (0 != 1)
[  488.410566][T15826] downgrade (size 2912):
[  488.410566][T15826] version:	0.0: (unknown version)
[  488.410566][T15826] recovery passes:	
[  488.410566][T15826] errors:	sb_clean_missing
[  488.410566][T15826] version:	0.0: (unknown version)
[  488.410566][T15826] recovery passes:	snapshots_read
[  488.410566][T15826] errors:	
[  488.410566][T15826] version:	0.0: (unknown version)
[  488.410566][T15826] recovery passes:	set_fs_needs_rebalance
[  488.410566][T15826] errors:	
[  488.410566][T15826] version:	0.0: (unknown version)
[  488.410566][T15826] recovery passes:	alloc_read,check_inodes,delete_dead_inodes,set_fs_needs_rebalance
[  488.410566][T15826] errors:	(unknown error 512)
[  488.410566][T15826] version:	0.5: (unknown version)
[  488.410566][T15826] recovery passes:	
[  488.410566][T15826] errors:	
[  488.410566][T15826] version:	0.0: (unknown version)
[  488.410566][T15826] recovery passes:	
[  488.410566][T15826] errors:	
[  488.410566][T15826] version:	0.0: (unknown version)
[  488.410566][T15826] recovery passes:	fs_freespace_init,bucket_gens_init,check_inodes,delete_dead_inodes
[  488.410566][T15826] errors:	
[  488.410566][T15826] version:	0.0: (unknown version)
[  488.410566][T15826] recovery passes:	
[  488.410566][T15826] errors:	
[  488.410566][T15826] version:	0.6: (unknown version)
[  488.410566][T15826] recovery passes:	check_subvols
[  488.410566][T15826] errors:	
[  488.410566][T15826] version:	0.33: (unknown version)
[  488.410566][T15826] recovery passes:	check_snapshots
[  488.410566][T15826] errors:	
[  488.410566][T15826] version:	0.0: (unknown version)
[  488.461261][T15826] bcachefs: bch2_fs_get_tree() error: invalid_sb_downgrade
[  488.464737][   T24] usb 10-1: new full-speed USB device number 23 using dummy_hcd
[  488.565770][T15828] loop8: detected capacity change from 0 to 47
[  488.640410][   T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  488.644848][   T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  488.655119][   T24] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  488.661363][   T24] usb 10-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00
[  488.664926][   T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  488.670521][   T24] usb 10-1: config 0 descriptor??
[  488.754052][T15836] netlink: 'syz.8.3844': attribute type 21 has an invalid length.
[  488.756557][T15836] netlink: 128 bytes leftover after parsing attributes in process `syz.8.3844'.
[  488.759371][T15836] netlink: 'syz.8.3844': attribute type 5 has an invalid length.
[  488.761813][T15836] netlink: 'syz.8.3844': attribute type 6 has an invalid length.
[  488.766124][T15836] netlink: 3 bytes leftover after parsing attributes in process `syz.8.3844'.
[  489.117389][   T24] ntrig 0003:1B96:0009.001C: hidraw0: USB HID v0.00 Device [HID 1b96:0009] on usb-dummy_hcd.9-1/input0
[  489.168696][T10605] usb 9-1: new high-speed USB device number 27 using dummy_hcd
[  489.332391][   T24] ntrig 0003:1B96:0009.001C: Firmware version: 2.3.14.45.6 (cd15 bed5)
[  489.332536][T10605] usb 9-1: config 0 has an invalid interface number: 50 but max is 0
[  489.337686][T10605] usb 9-1: config 0 has no interface number 0
[  489.341734][T10605] usb 9-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  489.351416][T10605] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  489.354290][T10605] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  489.356853][T10605] usb 9-1: Product: syz
[  489.358254][T10605] usb 9-1: Manufacturer: syz
[  489.359802][T10605] usb 9-1: SerialNumber: syz
[  489.363200][T10605] usb 9-1: config 0 descriptor??
[  489.370896][T10605] yurex 9-1:0.50: USB YUREX device now attached to Yurex #0
[  489.549624][T10605] usb 10-1: USB disconnect, device number 23
[  489.584740][    C0] yurex 9-1:0.50: yurex_interrupt - overflow with length 8, actual length is 8
[  489.800640][T10605] usb 9-1: USB disconnect, device number 27
[  489.804856][T10605] yurex 9-1:0.50: USB YUREX #0 now disconnected
[  490.111480][T15848] netlink: 'syz.9.3850': attribute type 1 has an invalid length.
[  490.127361][T15848] 8021q: adding VLAN 0 to HW filter on device bond2
[  490.144746][T15848] bond2: (slave veth3): Enslaving as an active interface with a down link
[  490.157628][T15848] 8021q: adding VLAN 0 to HW filter on device batadv1
[  490.159948][T15848] bond2: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  490.437807][T15857] loop4: detected capacity change from 0 to 524255232
[  490.483718][T15857] loop4: detected capacity change from 524255232 to 524287956
[  490.784306][T15872] netlink: 17 bytes leftover after parsing attributes in process `syz.7.3861'.
[  490.787117][T15872] netlink: zone id is out of range
[  490.788730][T15872] netlink: zone id is out of range
[  490.796838][T15872] netlink: zone id is out of range
[  490.798850][T15872] netlink: zone id is out of range
[  490.800847][T15872] netlink: zone id is out of range
[  490.802742][T15872] netlink: zone id is out of range
[  490.805363][T15872] netlink: zone id is out of range
[  490.807051][T15872] netlink: zone id is out of range
[  490.808917][T15872] netlink: zone id is out of range
[  490.810527][T15872] netlink: zone id is out of range
[  490.923035][T15884] loop9: detected capacity change from 0 to 1024
[  492.040778][T15900] loop9: detected capacity change from 0 to 256
[  492.047786][T15900] exfat: Deprecated parameter 'namecase'
[  492.049990][T15900] exfat: Deprecated parameter 'namecase'
[  492.060609][T15900] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  492.547328][T10605] usb 10-1: new high-speed USB device number 24 using dummy_hcd
[  492.707382][T10605] usb 10-1: Using ep0 maxpacket: 8
[  492.723270][T10605] usb 10-1: config index 0 descriptor too short (expected 301, got 45)
[  492.726083][T10605] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  492.733459][T10605] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  492.736615][T10605] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  492.740095][T10605] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  492.744407][T10605] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  492.747305][T10605] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  492.982045][T10605] usb 10-1: GET_CAPABILITIES returned 0
[  492.984121][T10605] usbtmc 10-1:16.0: can't read capabilities
[  493.155258][T15911] loop8: detected capacity change from 0 to 4096
[  493.177234][T15911] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  493.196190][T15911] EXT4-fs: inline encryption not supported
[  493.198175][T15911] EXT4-fs: Ignoring removed mblk_io_submit option
[  493.199848][T15907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  493.202128][T15911] EXT4-fs: Can't set or change test_dummy_encryption on remount
[  493.205030][T15907] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  493.225138][T12345] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  493.268439][T15907] usbtmc 10-1:16.0: usb_control_msg returned -71
[  493.271142][T10473] usb 10-1: USB disconnect, device number 24
[  493.616323][T10605] usb 9-1: new high-speed USB device number 28 using dummy_hcd
[  493.776386][T10605] usb 9-1: Using ep0 maxpacket: 16
[  493.782624][T10605] usb 9-1: unable to get BOS descriptor or descriptor too short
[  493.786370][T10605] usb 9-1: config 117 has an invalid interface number: 106 but max is 0
[  493.789217][T10605] usb 9-1: config 117 has no interface number 0
[  493.791217][T10605] usb 9-1: config 117 interface 106 has no altsetting 0
[  493.795357][T10605] usb 9-1: New USB device found, idVendor=110a, idProduct=1451, bcdDevice=6d.26
[  493.798647][T10605] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  493.801152][T10605] usb 9-1: Product: syz
[  493.802475][T10605] usb 9-1: Manufacturer: syz
[  493.804035][T10605] usb 9-1: SerialNumber: syz
[  494.030248][T10605] mxuport 9-1:117.106: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71)
[  494.035460][T10605] mxuport 9-1:117.106: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71)
[  494.045115][T10605] mxuport 9-1:117.106: probe with driver mxuport failed with error -71
[  494.054766][T10605] usb 9-1: USB disconnect, device number 28
[  494.063789][T15924] loop9: detected capacity change from 0 to 256
[  494.080066][T15924] exFAT-fs (loop9): bogus data start sector
[  494.081979][T15924] exFAT-fs (loop9): failed to read boot sector
[  494.083973][T15924] exFAT-fs (loop9): failed to recognize exfat type
[  494.263281][T10605] hid_parser_main: 5 callbacks suppressed
[  494.263294][T10605] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  494.272123][T15938] loop7: detected capacity change from 0 to 1024
[  494.277226][T15938] EXT4-fs: Ignoring removed nomblk_io_submit option
[  494.285366][T15938] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  494.289792][T15940] loop9: detected capacity change from 0 to 512
[  494.293974][T10605] hid-generic 0000:0000:0000.001D: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  494.308463][T15938] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  494.313000][T15940] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  494.337034][T15940] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002]
[  494.339821][T15940] System zones: 0-2, 18-18, 34-34
[  494.355953][T15940] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  494.359255][T12350] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  494.360710][T15940] ext4 filesystem being mounted at /528/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  494.414613][T12348] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  494.856007][   T24] usb 10-1: new high-speed USB device number 25 using dummy_hcd
[  495.017977][   T24] usb 10-1: config 0 has an invalid interface number: 199 but max is 1
[  495.021299][   T24] usb 10-1: config 0 has no interface number 1
[  495.024073][   T24] usb 10-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  495.030326][   T24] usb 10-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  495.035820][   T24] usb 10-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00
[  495.039800][   T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  495.043292][   T24] usb 10-1: SerialNumber: syz
[  495.047879][   T24] usb 10-1: config 0 descriptor??
[  495.055873][   T24] usb 10-1: Found UVC 0.00 device <unnamed> (0002:0000)
[  495.059085][   T24] usb 10-1: No valid video chain found.
[  495.112561][T10605] usb 9-1: new high-speed USB device number 29 using dummy_hcd
[  495.274499][   T24] usb 10-1: USB disconnect, device number 25
[  495.274814][T10605] usb 9-1: unable to get BOS descriptor or descriptor too short
[  495.282543][T10605] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  495.286128][T10605] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9
[  495.289155][T10605] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  495.292240][T10605] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0
[  495.297194][T10605] usb 9-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39
[  495.300058][T10605] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  495.302594][T10605] usb 9-1: Product: syz
[  495.304081][T10605] usb 9-1: Manufacturer: syz
[  495.306477][T10605] usb 9-1: SerialNumber: syz
[  495.309313][T10605] usb 9-1: config 0 descriptor??
[  495.311427][T15982] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22
[  495.319593][    C0] usb 9-1: NFC: Urb failure (status -71)
[  495.322340][T10605] usb 9-1: NFC: Unable to get FW version
[  495.324416][T10605] pn533_usb 9-1:0.0: probe with driver pn533_usb failed with error -90
[  495.540543][   T24] usb 9-1: USB disconnect, device number 29
[  497.111774][T12422] usb 10-1: new high-speed USB device number 26 using dummy_hcd
[  497.282684][T12422] usb 10-1: Using ep0 maxpacket: 8
[  497.289445][T12422] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  497.292542][T12422] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  497.295881][T12422] usb 10-1: Product: syz
[  497.297271][T12422] usb 10-1: Manufacturer: syz
[  497.298939][T12422] usb 10-1: SerialNumber: syz
[  497.304432][T12422] usb 10-1: config 0 descriptor??
[  497.525761][T12422] dvb_usb_rtl28xxu 10-1:0.0: chip type detection failed -71
[  497.532742][T12422] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  497.537112][T12422] usb 10-1: USB disconnect, device number 26
[  497.998253][T16023] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3927'.
[  498.023263][T16015] loop7: detected capacity change from 0 to 32768
[  498.028208][T16025] netlink: 'syz.8.3928': attribute type 29 has an invalid length.
[  498.032164][T16025] netlink: 'syz.8.3928': attribute type 29 has an invalid length.
[  498.033607][T16015] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.3923 (16015)
[  498.049751][T16015] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  498.058121][T16015] BTRFS info (device loop7): using sha256 (sha256-lib) checksum algorithm
[  498.060821][T16015] BTRFS info (device loop7): using free-space-tree
[  498.114256][T16015] BTRFS info (device loop7): rebuilding free space tree
[  498.208908][T12350] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  498.391437][T16051] loop9: detected capacity change from 0 to 32768
[  498.398246][T16047] loop8: detected capacity change from 0 to 32768
[  498.416345][T16051] XFS (loop9): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  498.473114][T16051] XFS (loop9): Ending clean mount
[  498.475967][T16051] XFS (loop9): Quotacheck needed: Please wait.
[  498.516235][T16051] XFS (loop9): Quotacheck: Done.
[  498.596179][T12348] XFS (loop9): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  498.827770][T16069] overlayfs: empty lowerdir
[  499.195925][ T5910] hid-generic 0000:0000:0000.001E: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz1
[  499.820529][T16086] loop8: detected capacity change from 0 to 32768
[  499.828585][T16086] bcachefs (/dev/loop8): error validating superblock: Not a bcachefs superblock layout
[  499.831897][T16086] bcachefs: bch2_fs_get_tree() error: invalid_sb_layout
[  500.308538][ T5910] usb 10-1: new high-speed USB device number 27 using dummy_hcd
[  500.469186][ T5910] usb 10-1: Using ep0 maxpacket: 32
[  500.471050][   T24] usb 9-1: new full-speed USB device number 30 using dummy_hcd
[  500.475098][ T5910] usb 10-1: config 0 interface 0 has no altsetting 0
[  500.480484][ T5910] usb 10-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  500.483728][ T5910] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  500.486331][ T5910] usb 10-1: Product: syz
[  500.487699][ T5910] usb 10-1: Manufacturer: syz
[  500.489281][ T5910] usb 10-1: SerialNumber: syz
[  500.492404][ T5910] usb 10-1: config 0 descriptor??
[  500.630549][   T24] usb 9-1: config 0 has an invalid interface number: 6 but max is 0
[  500.633241][   T24] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  500.636562][   T24] usb 9-1: config 0 has no interface number 0
[  500.638642][   T24] usb 9-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  500.644755][   T24] usb 9-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12
[  500.647764][   T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  500.650535][   T24] usb 9-1: Product: syz
[  500.652031][   T24] usb 9-1: Manufacturer: syz
[  500.653573][   T24] usb 9-1: SerialNumber: syz
[  500.657525][   T24] usb 9-1: config 0 descriptor??
[  500.659740][T16105] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22
[  500.667627][T16105] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22
[  500.679422][   T24] comedi comedi4: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'.
[  500.899205][T10614] usb 9-1: USB disconnect, device number 30
[  500.928999][ T5910] gs_usb 10-1:0.0: Configuring for 2 interfaces
[  500.990095][T12373] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  500.995050][T12373] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  501.065245][T12373] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  501.071532][T12373] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  501.121107][T12373] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  501.125192][T12373] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  501.181107][T12373] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  501.186238][T12373] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  501.296088][T12373] bridge_slave_1: left allmulticast mode
[  501.298081][T12373] bridge_slave_1: left promiscuous mode
[  501.299984][T12373] bridge0: port 2(bridge_slave_1) entered disabled state
[  501.305374][T12373] bridge_slave_0: left allmulticast mode
[  501.307200][T12373] bridge_slave_0: left promiscuous mode
[  501.309100][T12373] bridge0: port 1(bridge_slave_0) entered disabled state
[  501.437705][T12373] bond1 (unregistering): (slave gretap1): Releasing active interface
[  501.641631][T16110] loop8: detected capacity change from 0 to 256
[  501.645864][T16110] exfat: Deprecated parameter 'namecase'
[  501.647772][T16110] exfat: Deprecated parameter 'utf8'
[  501.662896][T16110] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[  501.836711][T12373] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  501.838441][T16112] loop7: detected capacity change from 0 to 32768
[  501.842517][T16112] XFS: ikeep mount option is deprecated.
[  501.844364][T16112] XFS: ikeep mount option is deprecated.
[  501.846546][T12373] bond_slave_0: left allmulticast mode
[  501.852151][T12373] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  501.855758][T12373] bond_slave_1: left allmulticast mode
[  501.859032][T12373] bond0 (unregistering): Released all slaves
[  501.866055][T12373] bond1 (unregistering): Released all slaves
[  501.876550][T16112] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  501.876960][ T5910] gs_usb 10-1:0.0: Couldn't get bit timing const for channel 1 (-EPROTO)
[  501.898726][T16112] XFS (loop7): Ending clean mount
[  501.918314][T12373] k*]: left promiscuous mode
[  501.957933][T12350] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  501.983527][ T5910] gs_usb 10-1:0.0: probe with driver gs_usb failed with error -71
[  501.989865][ T5910] usb 10-1: USB disconnect, device number 27
[  502.245212][T16138] loop9: detected capacity change from 0 to 2048
[  502.276831][T16141] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  502.286745][T16138] NILFS error (device loop9): nilfs_lookup: deleted inode referenced: 12
[  502.288854][T16143] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3965'.
[  502.316342][T16138] Remounting filesystem read-only
[  502.529738][T12373] hsr_slave_0: left promiscuous mode
[  502.533912][T12373] hsr_slave_1: left promiscuous mode
[  502.537355][T12373] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  502.546187][T12373] batman_adv: batadv0: Removing interface: batadv_slave_0
[  502.559792][T16145] loop7: detected capacity change from 0 to 32768
[  502.613810][T12373] team_slave_0: left promiscuous mode
[  502.616044][T12373] team_slave_1: left promiscuous mode
[  502.629536][T16145] ocfs2: Mounting device (7,7) on (node local, slot 0) with writeback data mode.
[  502.643646][T12373] veth1_macvtap: left promiscuous mode
[  502.647323][T12373] veth0_macvtap: left promiscuous mode
[  502.651042][T12373] veth1_vlan: left promiscuous mode
[  502.662992][T12373] veth0_vlan: left promiscuous mode
[  502.763595][T12350] ocfs2: Unmounting device (7,7) on (node local)
[  502.789297][T16147] loop9: detected capacity change from 0 to 131072
[  502.792421][T16147] F2FS-fs (loop9): Test dummy encryption mode enabled
[  502.796160][T16147] F2FS-fs (loop9): invalid crc value
[  502.854661][T16147] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  502.858890][T16147] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[  502.916194][   T33] audit: type=1800 audit(1754929540.437:142): pid=16147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3967" name="file1" dev="loop9" ino=10 res=0 errno=0
[  503.134783][T16154] loop7: detected capacity change from 0 to 32768
[  503.154925][T16154] ERROR: (device loop7): diAllocAG: nfreeinos = 0, but iag on freelist
[  503.154925][T16154] 
[  503.176183][T16154] ERROR: (device loop7): remounting filesystem as read-only
[  503.181638][T16154] ialloc: diAlloc returned -5!
[  503.249241][T12373] team0 (unregistering): Port device vlan0 removed
[  503.562319][T12373] team0 (unregistering): Port device team_slave_1 removed
[  503.596363][T12373] team0 (unregistering): Port device team_slave_0 removed
[  503.987297][T16171] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3976'.
[  504.128384][T16176] loop9: detected capacity change from 0 to 2048
[  504.140149][T16176] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  504.207036][T16179] autofs: Bad value for 'fd'
[  504.299146][T12373] ------------[ cut here ]------------
[  504.300953][T12373] WARNING: CPU: 0 PID: 12373 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0x81/0x100
[  504.304155][T12373] Modules linked in:
[  504.305973][T12373] CPU: 0 UID: 0 PID: 12373 Comm: kworker/u8:5 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  504.311079][T12373] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  504.314550][T12373] Workqueue: netns cleanup_net
[  504.316311][T12373] RIP: 0010:xfrm6_tunnel_net_exit+0x81/0x100
[  504.318596][T12373] Code: 55 41 e0 f7 4b 83 3c 2c 00 75 19 e8 a9 d6 7c f7 49 81 fd f8 07 00 00 74 1d e8 9b d6 7c f7 49 83 c5 08 eb c9 e8 90 d6 7c f7 90 <0f> 0b 90 49 81 fd f8 07 00 00 75 e3 48 81 c3 00 08 00 00 45 31 f6
[  504.324436][T12373] RSP: 0018:ffffc90008dd78b0 EFLAGS: 00010293
[  504.326422][T12373] RAX: ffffffff8a42d520 RBX: ffff888109794000 RCX: ffff888038e89cc0
[  504.329036][T12373] RDX: 0000000000000000 RSI: ffffffff8dba33cb RDI: ffff888109794000
[  504.331591][T12373] RBP: ffffc90008dd79b0 R08: ffffffff8fa34237 R09: 1ffffffff1f46846
[  504.334070][T12373] R10: dffffc0000000000 R11: fffffbfff1f46847 R12: ffff888109794000
[  504.336554][T12373] R13: 0000000000000000 R14: ffff888113888000 R15: dffffc0000000000
[  504.339430][T12373] FS:  0000000000000000(0000) GS:ffff8880b8624000(0000) knlGS:0000000000000000
[  504.342246][T12373] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  504.344335][T12373] CR2: 00007fce01ce56c0 CR3: 000000011d09e000 CR4: 00000000000006f0
[  504.346865][T12373] Call Trace:
[  504.347987][T12373]  <TASK>
[  504.349144][T12373]  ops_undo_list+0x49a/0x990
[  504.350653][T12373]  ? __pfx_ops_undo_list+0x10/0x10
[  504.352284][T12373]  ? do_raw_spin_unlock+0x4d/0x240
[  504.353947][T12373]  cleanup_net+0x4c5/0x800
[  504.355388][T12373]  ? __pfx_cleanup_net+0x10/0x10
[  504.356984][T12373]  ? _raw_spin_unlock_irq+0x23/0x50
[  504.358716][T12373]  ? process_scheduled_works+0x9ef/0x17b0
[  504.360722][T12373]  ? process_scheduled_works+0x9ef/0x17b0
[  504.362637][T12373]  process_scheduled_works+0xae1/0x17b0
[  504.364410][T12373]  ? __pfx_process_scheduled_works+0x10/0x10
[  504.366423][T12373]  worker_thread+0x8a0/0xda0
[  504.367920][T12373]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  504.370014][T12373]  ? __kthread_parkme+0x7b/0x200
[  504.371771][T12373]  kthread+0x711/0x8a0
[  504.373153][T12373]  ? __pfx_worker_thread+0x10/0x10
[  504.374784][T12373]  ? __pfx_kthread+0x10/0x10
[  504.376284][T12373]  ? _raw_spin_unlock_irq+0x23/0x50
[  504.378010][T12373]  ? lockdep_hardirqs_on+0x9c/0x150
[  504.379698][T12373]  ? __pfx_kthread+0x10/0x10
[  504.381462][T12373]  ret_from_fork+0x3fc/0x770
[  504.383036][T12373]  ? __pfx_ret_from_fork+0x10/0x10
[  504.384655][T12373]  ? __switch_to_asm+0x39/0x70
[  504.386186][T12373]  ? __switch_to_asm+0x33/0x70
[  504.387747][T12373]  ? __pfx_kthread+0x10/0x10
[  504.389237][T12373]  ret_from_fork_asm+0x1a/0x30
[  504.390792][T12373]  </TASK>
[  504.391980][T12373] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  504.394214][T12373] CPU: 0 UID: 0 PID: 12373 Comm: kworker/u8:5 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  504.397942][T12373] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  504.401053][T12373] Workqueue: netns cleanup_net
[  504.402551][T12373] Call Trace:
[  504.403648][T12373]  <TASK>
[  504.404592][T12373]  dump_stack_lvl+0x99/0x250
[  504.406063][T12373]  ? __asan_memcpy+0x40/0x70
[  504.407551][T12373]  ? __pfx_dump_stack_lvl+0x10/0x10
[  504.409196][T12373]  ? __pfx__printk+0x10/0x10
[  504.410645][T12373]  vpanic+0x281/0x750
[  504.411943][T12373]  ? __pfx__printk+0x10/0x10
[  504.413397][T12373]  ? __pfx_vpanic+0x10/0x10
[  504.414821][T12373]  ? is_bpf_text_address+0x292/0x2b0
[  504.416465][T12373]  panic+0xb9/0xc0
[  504.417634][T12373]  ? __pfx_panic+0x10/0x10
[  504.419041][T12373]  __warn+0x31b/0x4b0
[  504.420303][T12373]  ? xfrm6_tunnel_net_exit+0x81/0x100
[  504.421982][T12373]  ? xfrm6_tunnel_net_exit+0x81/0x100
[  504.423685][T12373]  report_bug+0x2be/0x4f0
[  504.425042][T12373]  ? xfrm6_tunnel_net_exit+0x81/0x100
[  504.426718][T12373]  ? xfrm6_tunnel_net_exit+0x81/0x100
[  504.428410][T12373]  ? xfrm6_tunnel_net_exit+0x83/0x100
[  504.430081][T12373]  handle_bug+0x84/0x160
[  504.431420][T12373]  exc_invalid_op+0x1a/0x50
[  504.432843][T12373]  asm_exc_invalid_op+0x1a/0x20
[  504.434365][T12373] RIP: 0010:xfrm6_tunnel_net_exit+0x81/0x100
[  504.436216][T12373] Code: 55 41 e0 f7 4b 83 3c 2c 00 75 19 e8 a9 d6 7c f7 49 81 fd f8 07 00 00 74 1d e8 9b d6 7c f7 49 83 c5 08 eb c9 e8 90 d6 7c f7 90 <0f> 0b 90 49 81 fd f8 07 00 00 75 e3 48 81 c3 00 08 00 00 45 31 f6
[  504.442074][T12373] RSP: 0018:ffffc90008dd78b0 EFLAGS: 00010293
[  504.443963][T12373] RAX: ffffffff8a42d520 RBX: ffff888109794000 RCX: ffff888038e89cc0
[  504.446408][T12373] RDX: 0000000000000000 RSI: ffffffff8dba33cb RDI: ffff888109794000
[  504.448855][T12373] RBP: ffffc90008dd79b0 R08: ffffffff8fa34237 R09: 1ffffffff1f46846
[  504.451283][T12373] R10: dffffc0000000000 R11: fffffbfff1f46847 R12: ffff888109794000
[  504.453709][T12373] R13: 0000000000000000 R14: ffff888113888000 R15: dffffc0000000000
[  504.456157][T12373]  ? xfrm6_tunnel_net_exit+0x80/0x100
[  504.457815][T12373]  ops_undo_list+0x49a/0x990
[  504.459269][T12373]  ? __pfx_ops_undo_list+0x10/0x10
[  504.460879][T12373]  ? do_raw_spin_unlock+0x4d/0x240
[  504.462478][T12373]  cleanup_net+0x4c5/0x800
[  504.463896][T12373]  ? __pfx_cleanup_net+0x10/0x10
[  504.465439][T12373]  ? _raw_spin_unlock_irq+0x23/0x50
[  504.467072][T12373]  ? process_scheduled_works+0x9ef/0x17b0
[  504.468856][T12373]  ? process_scheduled_works+0x9ef/0x17b0
[  504.470610][T12373]  process_scheduled_works+0xae1/0x17b0
[  504.472329][T12373]  ? __pfx_process_scheduled_works+0x10/0x10
[  504.474221][T12373]  worker_thread+0x8a0/0xda0
[  504.475692][T12373]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  504.477665][T12373]  ? __kthread_parkme+0x7b/0x200
[  504.479228][T12373]  kthread+0x711/0x8a0
[  504.480514][T12373]  ? __pfx_worker_thread+0x10/0x10
[  504.482113][T12373]  ? __pfx_kthread+0x10/0x10
[  504.483573][T12373]  ? _raw_spin_unlock_irq+0x23/0x50
[  504.485170][T12373]  ? lockdep_hardirqs_on+0x9c/0x150
[  504.486763][T12373]  ? __pfx_kthread+0x10/0x10
[  504.488227][T12373]  ret_from_fork+0x3fc/0x770
[  504.489669][T12373]  ? __pfx_ret_from_fork+0x10/0x10
[  504.491260][T12373]  ? __switch_to_asm+0x39/0x70
[  504.492757][T12373]  ? __switch_to_asm+0x33/0x70
[  504.494240][T12373]  ? __pfx_kthread+0x10/0x10
[  504.495662][T12373]  ret_from_fork_asm+0x1a/0x30
[  504.497198][T12373]  </TASK>
[  504.498835][T12373] Kernel Offset: disabled
[  504.500179][T12373] Rebooting in 86400 seconds..

VM DIAGNOSIS:
16:21:51  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000050 RBX=0000000000000050 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90008dd7050
R8 =ffff888020db8237 R9 =1ffff110041b7046 R10=dffffc0000000000 R11=ffffffff854e72a0
R12=dffffc0000000000 R13=ffffffff99af18d9 R14=ffffffff99de64e0 R15=0000000000000000
RIP=ffffffff854e731c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8624000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fce01ce56c0 CR3=000000011d09e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff8133c57e ffffffff8133c57e
XMM02=ffffffff8133c57e ffffffff8133c57e XMM03=ffffffff8133c57e ffffffff8133c57e
XMM04=ffffffff8133c57e ffffffff8133c57e XMM05=ffffffff8133c57e ffffffff8133c57e
XMM06=ffffffff8133c57e ffffffff8133c57e XMM07=ffffffff8133c57e ffffffff8133c57e
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f1aec612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=51f6fec9029f0300 RBX=ffffffff81968308 RCX=51f6fec9029f0300 RDX=0000000000000001
RSI=ffffffff8d9b4408 RDI=ffffffff8be32600 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa34230 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d4000
RIP=ffffffff8b7893f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c24000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055749dcbd7e8 CR3=0000000011f08000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000017 000000000003bf12
XMM02=85f4d808000f9003 0204000f8c030000 XMM03=02000fa00304ddfe eff808000f980307
XMM04=0000000000000000 0000000000000000 XMM05=0000555571598d3a 0000555571598c40
XMM06=000055557158d4f4 000055557158d4f0 XMM07=12d00300100012c0 0302100012b00328
XMM08=1000119003000400 0fa4030002000fa2 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
