last executing test programs:

8m19.827059763s ago: executing program 1 (id=71):
r0 = syz_mount_image$udf(&(0x7f00000002c0), &(0x7f00000000c0)='./file1\x00', 0x2000c8, &(0x7f0000000380)=ANY=[@ANYBLOB='uid=', @ANYRESOCT, @ANYBLOB="2c756e64656c6574652c6e6f7672732c6164696e6963622c766f6c756d653d30303030303030303030303030303030303030322c7569643d666f726765742c6769643d666f726765742c6e6f7374726963742c6e6f7672732c0000005733010312bb6086da1fd41ffabd4b47acca2b8d488be702157dd8711c31732d"], 0xff, 0xc2d, &(0x7f0000001100)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x69577000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdirat(r0, 0x0, 0x0)
r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000100)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c643c, &(0x7f0000000300)={0x0, 0x0, r4})

8m18.130304706s ago: executing program 1 (id=81):
syz_init_net_socket$llc(0x1a, 0x0, 0x0)

8m18.032604186s ago: executing program 1 (id=84):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0xe, &(0x7f0000000540)={[{@resuid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$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")
mkdir(&(0x7f0000000080)='./bus\x00', 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000100)=@v2={0x2, @aes128, 0x4, '\x00', @b})

8m17.771935697s ago: executing program 1 (id=86):
syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000012c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800010, &(0x7f0000000f00)={[{@uid_forget}, {@unhide}, {@volume={'volume', 0x3d, 0x4}}, {@session}, {@gid}, {@rootdir={'rootdir', 0x3d, 0x5}}, {@adinicb}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@session={'session', 0x3d, 0x10001}}, {@longad}, {@uid_ignore}]}, 0x1, 0xc43, &(0x7f00000001c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x10, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b732673618000000fffff2ff0000000000edcce000", [0x1]})
pwrite64(r0, &(0x7f00000000c0)='a', 0x1, 0xb762)

8m17.163766975s ago: executing program 1 (id=87):
syz_mount_image$exfat(&(0x7f00000003c0), &(0x7f0000000240)='./file0\x00', 0x3000050, &(0x7f0000000600)=ANY=[], 0x2, 0x150b, &(0x7f0000001d40)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
getdents64(r0, &(0x7f00000000c0)=""/55, 0x37)

8m16.702840053s ago: executing program 1 (id=91):
r0 = syz_open_dev$vbi(&(0x7f0000002300), 0x1, 0x2)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000002340)={0x1, @sdr={0x4c47504a, 0x2}})

8m16.367532529s ago: executing program 32 (id=91):
r0 = syz_open_dev$vbi(&(0x7f0000002300), 0x1, 0x2)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000002340)={0x1, @sdr={0x4c47504a, 0x2}})

7m7.110554456s ago: executing program 2 (id=661):
syz_emit_ethernet(0x36, &(0x7f0000001940)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x3, 0xffffffff}}}}}, 0x0)

7m7.031506377s ago: executing program 2 (id=663):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x3}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0)
sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x54}}, 0x4000)
syz_genetlink_get_family_id$devlink(&(0x7f0000000400), r1)

7m5.801683802s ago: executing program 2 (id=666):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x17)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r0}, @ldst={0x1, 0x3, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x90)

7m5.668563934s ago: executing program 2 (id=667):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0xc0ed000a, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@nolazytime}, {@debug}, {@noload}, {@auto_da_alloc}, {@commit={'commit', 0x3d, 0x5}}, {@lazytime}, {@discard}, {@nodelalloc}]}, 0xfe, 0x473, &(0x7f00000004c0)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1c0000000, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]})
lstat(&(0x7f00000000c0)='./file1\x00', 0x0)

7m4.292350543s ago: executing program 2 (id=671):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

7m3.958830225s ago: executing program 2 (id=672):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x81a0}, [@call={0x85, 0x0, 0x0, 0x29}, @printk={@d}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000003c0)="b874386d1929ebfd66cc265d21bc", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

7m3.701720225s ago: executing program 33 (id=672):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x81a0}, [@call={0x85, 0x0, 0x0, 0x29}, @printk={@d}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000003c0)="b874386d1929ebfd66cc265d21bc", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

5m29.7530143s ago: executing program 4 (id=1624):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x79, 0x1846, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x64, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x0, 0x4}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000880)={0x0, 0x6, 0x10, {0xffffffffffffffd2, 0x10, "3d91419da546052dcdcf01abdc14"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

5m28.081608219s ago: executing program 4 (id=1633):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000006540)='./file1\x00', 0x2a08848, &(0x7f0000000040)=ANY=[], 0x6, 0x69f, &(0x7f0000000580)="$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")
r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x1100, 0x400000})

5m27.970235123s ago: executing program 4 (id=1634):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)='M', 0x1}], 0x1}, 0x40c1)
recvmsg$unix(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002)
write$cgroup_type(r0, &(0x7f0000000000), 0x9)
close(r1)

5m27.852272918s ago: executing program 4 (id=1637):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000b80)='./file0/file0\x00', 0x100)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x221)

5m27.777438385s ago: executing program 4 (id=1639):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x400e, &(0x7f0000000300), 0x1, 0x440, &(0x7f0000000cc0)="$eJzs28tvG8UfAPDv2kn66+uXUJVHH0CgIMoradJSeuACAokDSEhwKMeQpFWo26AmSLSKICBUjqgSJy6IIxJ/ASe4IOCExBXuqFKFcmnhZLT2bmI7thunTlzqz0dad2Z33Jmvd8ee2ckG0LdG05ckYk9E/B4Rw9VsfYHR6j83V5am/15Zmk6iXH7zr6RS7sbK0nReNH/f7jwzEFH4NIlDTepduHT53FSpNHsxy48vnn9vfOHS5Wfnzk+dnT07e2Hy1KkTxyeePzn5XFfiTOO6cfDD+cMHXn376uvTp6++8/O3SR5/QxxdMtru4OPlcper6629NelkoIcNoSPFajeNwUr/H45irJ284Xjlk542DthS5XK5fF/rw8tl4C6WRK9bAPRG/kOfzn/zbZuGHneE6y9WJ0Bp3DezrXpkIApZmcGG+W03jUbE6eV/vkq32Jr7EAAAdb5Pxz/PNBv/FaL2vtD/szWUkYi4JyL2RcTJiNgfEfdGVMreHxEPdFh/4yLJ+vFP4dqmAtugdPz3Qra2VT/+y0d/MVLMcnsr8Q8mZ+ZKs8eyz+RoDO5I8xNt6vjh5d8+b3WsdvyXbmn9+Vgwa8e1gR3175mZWpy6nZhrXf844uBAs/iT1ZWAJCIORMTBTdYx99Q3h1sdu3X8bXRhnan8dcQT1fO/HA3x55L265Pj/4vS7LHx/KpY75dfr7zRqv7bir8L0vO/q+n1vxr/SFK7XrvQyf/+5ZPp65U/Pms5p9ns9T+UvFW374OpxcWLExFDyWvVRtfun2woN7lWPo3/6JHm/X9frH0ShyIivYgfjIiHIuLhrO2PRMSjEXGkzafw00uPvbv5+LdWGv9MR+d/LTEUjXuaJ4rnfvyurtKRTuJPz/+JSupotmcj338baVenVzMAAAD8VxUiYk8khbHVdKEwNlb9G/79satQml9YfPrM/PsXZqrPCIzEYCG/0zVccz90IpvW5/nJhvzx7L7xF8WdlfzY9HxpptfBQ5/b3aL/p/4s9rp1wJbzvBb0L/0f+pf+D/1L/4f+1aT/7+xFO4Dt1+z3/6MetAPYfg3937If9BHzf+hfm+n/vjPg7tC2Lw9tXzuAbbWwM279kLyExLpEFO6IZkhsUaLX30wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADd8W8AAAD//58P56I=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000180)={0x31, 0x8, 0x9, 0xffffffffffffffff, 0x20401, 0x5})

5m27.552445222s ago: executing program 4 (id=1646):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70fd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xffe0}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x12000000}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x400}]}}]}, 0x44}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

5m27.375141483s ago: executing program 34 (id=1646):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70fd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xffe0}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x12000000}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x400}]}}]}, 0x44}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

5m4.040476815s ago: executing program 5 (id=1833):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000010c0)=ANY=[@ANYBLOB="94000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000a000000800004801300010062726f6164636173742d6c696e6b"], 0x94}}, 0x0)

5m4.040280616s ago: executing program 5 (id=1834):
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x109c02, 0x0)
r0 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x179}, &(0x7f0000000100)=<r1=>0x0, &(0x7f00000007c0)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x40, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="1a", 0x1}, {0x0, 0x47}], 0x2})
io_uring_enter(r0, 0x4d10, 0x2, 0x2, 0x0, 0x0)

5m3.930506712s ago: executing program 5 (id=1835):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000002c0)="140000001d000b63d25a80648c2594", 0xf}, {&(0x7f0000000580)="3f192725e7", 0x5}], 0x2}, 0x0)

5m3.930136572s ago: executing program 5 (id=1836):
syz_mount_image$hfsplus(&(0x7f00000001c0), &(0x7f0000000980)='./file1\x00', 0xc8, &(0x7f0000000a00)=ANY=[], 0x1, 0x6ac, &(0x7f0000001380)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
open_tree(0xffffffffffffffff, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x20)
add_key$user(&(0x7f00000003c0), 0x0, &(0x7f0000000940)="a6c13c6a7c8c0074e36a3b54e9ce669b3b032f120a3cf850c51871f3c5", 0x1d, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x3bdc51, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x206e)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x800000000000003)
syz_io_uring_setup(0x3, &(0x7f0000000580)={0x0, 0xc7c9, 0x1, 0x1, 0x57}, &(0x7f0000000240), 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180900000020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58)
r2 = syz_open_dev$radio(0x0, 0x1, 0x2)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$VIDIOC_G_MODULATOR(r2, 0xc0445636, 0x0)
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0)

5m3.847620394s ago: executing program 5 (id=1837):
socket$inet6_mptcp(0xa, 0x1, 0x106)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0xc00, 0x0)
r0 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x8a73, 0x100, 0x22, 0x1b7}, &(0x7f0000000300)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/15, 0xf}], 0x1})
io_uring_enter(r0, 0x47bc, 0x3000000, 0x0, 0x0, 0x0)

5m3.560281525s ago: executing program 5 (id=1839):
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1004c, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x43}, 0x94)

5m3.331261741s ago: executing program 35 (id=1839):
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1004c, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x43}, 0x94)

3m28.973782051s ago: executing program 6 (id=2857):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x5, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x2, 0x1}]}]}, {0x0, [0x2e, 0x61, 0x20]}}, 0x0, 0x31, 0x0, 0x1, 0x7}, 0x28)

3m28.973484803s ago: executing program 6 (id=2858):
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x106d)

3m28.909633772s ago: executing program 6 (id=2860):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000005500010026bdf0010000000007000000", @ANYRES32=r1, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="000203000d"], 0x38}}, 0x10)

3m28.905588246s ago: executing program 6 (id=2861):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x221)

3m28.769341036s ago: executing program 6 (id=2862):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200080, &(0x7f0000000080)={[{@errors_remount}, {@delalloc}, {@bsdgroups}]}, 0x3, 0x56d, &(0x7f0000000c00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020660b, &(0x7f0000000040)={0x0, 0x10000002000003, 0x0, 0x0, 0x300})

3m28.179291891s ago: executing program 6 (id=2867):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newsa={0x158, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x1, 0x0, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in=@empty, {0x0, 0x0, 0x8, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x28}, [@algo_aead={0x68, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0xe0, 0x80, "316f74eeac053deb73fc018493cc121927a9bca207141b9a451c00aa"}}]}, 0x158}, 0x1, 0x0, 0x0, 0xc0}, 0x0)

3m27.889475943s ago: executing program 36 (id=2867):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newsa={0x158, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x1, 0x0, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in=@empty, {0x0, 0x0, 0x8, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x28}, [@algo_aead={0x68, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0xe0, 0x80, "316f74eeac053deb73fc018493cc121927a9bca207141b9a451c00aa"}}]}, 0x158}, 0x1, 0x0, 0x0, 0xc0}, 0x0)

12.141424116s ago: executing program 3 (id=5191):
r0 = syz_open_dev$video(&(0x7f0000000000), 0x5, 0x240)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x4, 0x1, {0x1, @pix={0x7, 0x4, 0x49323159, 0x4, 0x2a, 0x4, 0x0, 0x0, 0x1, 0x2, 0x2, 0x3}}, 0x3})
ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000540)={0x1, 0x401, 0x3, 0x80000})

12.005518178s ago: executing program 3 (id=5193):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000001c0)=0x3)
ioctl$PPPIOCGIDLE(r0, 0x541b, 0x0)

11.841735294s ago: executing program 3 (id=5198):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0x40045010, &(0x7f0000000040)=0x6)
ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0)

11.140393577s ago: executing program 3 (id=5203):
mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a)
mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x3c00e9, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'default'}}}]})

11.092580027s ago: executing program 3 (id=5204):
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10)
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x8000, 0x2)

10.893834913s ago: executing program 3 (id=5205):
syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800089, &(0x7f0000000300)=ANY=[@ANYBLOB='nobarrier,gid=', @ANYRESHEX=0xee00, @ANYBLOB="2c6e6f6465636f6d706f73652c73657373696f6e3d3078303030303030303038303030303030312c63726561746f723d38df05622c6769643d", @ANYRESHEX=0x0, @ANYBLOB="2c6e6c733d8400c3c78882dab07ed3efa0136d616363656e746575726f2c00"], 0x48, 0x6f7, &(0x7f00000010c0)="$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")

1.910765349s ago: executing program 7 (id=5258):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000300)={'wg1\x00', <r2=>0x0})
sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010030bd7400fddbdf251f0000002000018008000100", @ANYRES32=r2, @ANYBLOB="140002"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4040)

1.83090722s ago: executing program 7 (id=5260):
syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x0, 0x17d, &(0x7f0000001ac0)="$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")
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]})
chdir(&(0x7f0000000140)='./bus\x00')
rename(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000040)='./file1\x00')
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)
open(&(0x7f00000001c0)='./file1\x00', 0x101000, 0x4)

1.649505112s ago: executing program 7 (id=5263):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r0, r1, 0x5}, 0x10)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB='&'], 0x10)

1.535147173s ago: executing program 7 (id=5265):
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x41, 0x0)
writev(r0, &(0x7f0000001440)=[{0x0}, {&(0x7f0000000040)="3e7f71", 0x3}], 0x2)

1.351142293s ago: executing program 7 (id=5266):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f00000021c0)={[{@fat=@flush}, {@iocharset={'iocharset', 0x3d, 'maccroatian'}}, {@shortname_lower}, {@fat=@nfs}, {@rodir}, {@fat=@codepage={'codepage', 0x3d, '932'}}, {@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@fat=@tz_utc}, {@numtail}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@shortname_win95}]}, 0x1, 0x356, &(0x7f0000000200)="$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")
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000003c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05", @ANYRES16=r0, @ANYRES64=r0], 0x0)

809.585434ms ago: executing program 0 (id=5271):
r0 = gettid()
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000006040)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x10}], 0x2, 0x0, 0x0)
write(r1, &(0x7f0000000000)="38000000010003", 0x7)
timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000380))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

740.867409ms ago: executing program 0 (id=5272):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002080)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000280)="f6", 0x1}], 0x1}}, {{&(0x7f0000000540)={0xa, 0x4e20, 0x75, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffffffff}, 0x1c, &(0x7f00000008c0)=[{&(0x7f0000000640)='\t', 0x1}], 0x1, &(0x7f0000000940)=ANY=[@ANYBLOB='x\x00'], 0x78}}], 0x2, 0x4050)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

681.215802ms ago: executing program 0 (id=5273):
syz_mount_image$xfs(&(0x7f00000000c0), &(0x7f0000009740)='./file0\x00', 0x4000400, &(0x7f0000000100)={[{@grpquota}, {@grpquota}]}, 0x7f, 0x9882, &(0x7f000001c800)="$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")
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=<r1=>0x0)
timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

68.679505ms ago: executing program 0 (id=5274):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48)

68.259702ms ago: executing program 0 (id=5275):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x24000850}, 0x40)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x20, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31a60000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)

617.477µs ago: executing program 0 (id=5276):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
io_setup(0x42, &(0x7f0000000100)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000580)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000000)='e', 0x3f}])
sendmmsg$alg(r1, &(0x7f0000000c80)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="82f01d073a0361a0abcfd1a4cdcb3f8a", 0x10}], 0x1, 0x0, 0x0, 0x80}], 0x1, 0x20008040)

0s ago: executing program 7 (id=5277):
r0 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000002c0)={'team0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xb0, 0x24, 0xf0b, 0x0, 0xfffffffe, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x80, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xbb80}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffd], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x4]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1}]}]}]}}]}, 0xb0}}, 0x0)

kernel console output (not intermixed with test programs):

 408.454724][ T6145]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  408.454736][ T6145] RIP: 0033:0x7fbea178fed7
[  408.454749][ T6145] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  408.454760][ T6145] RSP: 002b:00007fff723b2bf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  408.454775][ T6145] RAX: 0000000000000000 RBX: 00007fbea1811c05 RCX: 00007fbea178fed7
[  408.454783][ T6145] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff723b2cb0
[  408.454790][ T6145] RBP: 00007fff723b2cb0 R08: 0000000000000000 R09: 0000000000000000
[  408.454797][ T6145] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff723b3d40
[  408.454805][ T6145] R13: 00007fbea1811c05 R14: 0000000000063adf R15: 00007fff723b3d80
[  408.454829][ T6145]  </TASK>
[  408.454835][ T6145] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  408.767154][T14089] loop7: detected capacity change from 0 to 32768
[  409.028695][T14099] netlink: 14 bytes leftover after parsing attributes in process `syz.7.3183'.
[  409.448296][T14124] loop3: detected capacity change from 0 to 4096
[  409.456494][T14124] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  409.496665][T14124] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  409.554946][ T6145] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  409.623501][T14131] loop3: detected capacity change from 0 to 512
[  409.647493][T14131] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  409.661577][T14131] EXT4-fs (loop3): 1 truncate cleaned up
[  409.672514][T14131] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  409.714555][ T6145] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  409.889911][T14136] 9pnet_virtio: no channels available for device syz
[  410.676592][T14164] loop3: detected capacity change from 0 to 512
[  410.685348][T14164] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  410.701659][T14164] EXT4-fs (loop3): 1 truncate cleaned up
[  410.709518][T14164] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  410.723710][T14164] fscrypt (loop3, inode 18): Can't use IV_INO_LBLK_64 policy with contents mode other than AES-256-XTS
[  411.319424][ T6145] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  411.429738][   T33] audit: type=1326 audit(1758171551.266:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14172 comm="syz.3.3218" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea178eba9 code=0x7ffc0000
[  411.454849][   T33] audit: type=1326 audit(1758171551.266:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14172 comm="syz.3.3218" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea178eba9 code=0x7ffc0000
[  411.474406][   T33] audit: type=1326 audit(1758171551.266:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14172 comm="syz.3.3218" exe="/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7fbea178eba9 code=0x7ffc0000
[  411.482616][   T33] audit: type=1326 audit(1758171551.266:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14172 comm="syz.3.3218" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea178eba9 code=0x7ffc0000
[  411.493311][   T33] audit: type=1326 audit(1758171551.266:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14172 comm="syz.3.3218" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea178eba9 code=0x7ffc0000
[  411.652584][T14192] cifs: Bad value for 'port'
[  411.793957][T14201] 8021q: adding VLAN 0 to HW filter on device bond1
[  412.204387][T14214] netlink: 'syz.3.3237': attribute type 4 has an invalid length.
[  412.461625][T14220] program syz.3.3240 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  412.592395][T14206] loop7: detected capacity change from 0 to 131072
[  412.596710][T14206] F2FS-fs (loop7): Invalid log sectorsize (67108873)
[  412.599731][T14206] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  412.611323][T14206] F2FS-fs (loop7): invalid crc value
[  412.672683][T14206] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  412.681374][T14206] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  412.684295][T14206] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4
[  412.973837][T14230] loop3: detected capacity change from 0 to 40427
[  412.978319][T14230] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  412.981496][T14230] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  412.987287][T14230] F2FS-fs (loop3): invalid crc value
[  413.051728][T14230] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  413.060962][T14230] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  413.063871][T14230] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  413.530272][T14259] batman_adv: batadv0: Interface activated: batadv_slave_0
[  413.567578][T14261] trusted_key: encrypted_key: master key parameter 'u' is invalid
[  413.752135][ T6145] syz-executor: attempt to access beyond end of device
[  413.752135][ T6145] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  413.772760][ T6145] CPU: 1 UID: 0 PID: 6145 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  413.772784][ T6145] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  413.772793][ T6145] Call Trace:
[  413.772798][ T6145]  <TASK>
[  413.772806][ T6145]  dump_stack_lvl+0x189/0x250
[  413.772831][ T6145]  ? __pfx_dump_stack_lvl+0x10/0x10
[  413.772845][ T6145]  ? __pfx_queue_work_on+0x10/0x10
[  413.772858][ T6145]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  413.772878][ T6145]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  413.772907][ T6145]  f2fs_handle_critical_error+0x37c/0x540
[  413.772943][ T6145]  f2fs_write_end_io+0x886/0xb60
[  413.772975][ T6145]  __submit_merged_bio+0x27a/0x6a0
[  413.772994][ T6145]  ? up_write+0x1c4/0x420
[  413.773014][ T6145]  __submit_merged_write_cond+0x44c/0x530
[  413.773040][ T6145]  f2fs_sync_node_pages+0x1479/0x15e0
[  413.773080][ T6145]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  413.773125][ T6145]  ? f2fs_write_checkpoint+0xe43/0x1df0
[  413.773143][ T6145]  ? up_write+0x1c4/0x420
[  413.773155][ T6145]  ? do_raw_spin_unlock+0x4d/0x240
[  413.773177][ T6145]  f2fs_write_checkpoint+0xe6f/0x1df0
[  413.773215][ T6145]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  413.773276][ T6145]  ? kill_f2fs_super+0x298/0x6c0
[  413.773297][ T6145]  kill_f2fs_super+0x2c3/0x6c0
[  413.773317][ T6145]  ? __pfx_kill_f2fs_super+0x10/0x10
[  413.773329][ T6145]  ? radix_tree_delete_item+0x2b6/0x400
[  413.773359][ T6145]  ? shrinker_free+0x2ce/0x3e0
[  413.773378][ T6145]  deactivate_locked_super+0xbc/0x130
[  413.773403][ T6145]  cleanup_mnt+0x425/0x4c0
[  413.773419][ T6145]  ? lockdep_hardirqs_on+0x9c/0x150
[  413.773436][ T6145]  task_work_run+0x1d4/0x260
[  413.773487][ T6145]  ? __pfx_task_work_run+0x10/0x10
[  413.773503][ T6145]  ? __x64_sys_umount+0x122/0x160
[  413.773526][ T6145]  ? exit_to_user_mode_loop+0x40/0x110
[  413.773550][ T6145]  exit_to_user_mode_loop+0xec/0x110
[  413.773567][ T6145]  do_syscall_64+0x2bd/0x3b0
[  413.773581][ T6145]  ? lockdep_hardirqs_on+0x9c/0x150
[  413.773594][ T6145]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  413.773607][ T6145]  ? exc_page_fault+0x9f/0xf0
[  413.773624][ T6145]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  413.773636][ T6145] RIP: 0033:0x7fbea178fed7
[  413.773651][ T6145] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  413.773662][ T6145] RSP: 002b:00007fff723b2bf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  413.773678][ T6145] RAX: 0000000000000000 RBX: 00007fbea1811c05 RCX: 00007fbea178fed7
[  413.773687][ T6145] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff723b2cb0
[  413.773695][ T6145] RBP: 00007fff723b2cb0 R08: 0000000000000000 R09: 0000000000000000
[  413.773703][ T6145] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff723b3d40
[  413.773712][ T6145] R13: 00007fbea1811c05 R14: 0000000000064ec4 R15: 00007fff723b3d80
[  413.773739][ T6145]  </TASK>
[  413.773746][ T6145] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  414.243577][T14265] loop7: detected capacity change from 0 to 4096
[  414.253118][T14265] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512).
[  414.548987][T14265] ntfs3(loop7): Mark volume as dirty due to NTFS errors
[  414.552448][T14265] ntfs3(loop7): ino=1a, mi_enum_attr
[  414.554709][T14265] ntfs3(loop7): Failed to initialize $Extend/$ObjId.
[  414.750175][T14269] tipc: Enabling of bearer </h:s> rejected, media not registered
[  415.057271][T14288] loop3: detected capacity change from 0 to 256
[  415.238838][T14292] loop7: detected capacity change from 0 to 1024
[  415.259616][T14292] EXT4-fs: Ignoring removed orlov option
[  415.333311][T14292] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  415.522233][T13236] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  415.687557][T14297] loop7: detected capacity change from 0 to 1024
[  415.694465][T14297] EXT4-fs: Ignoring removed oldalloc option
[  415.733232][T14297] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  415.746701][T14297] ext4 filesystem being mounted at /128/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  415.970971][T13236] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  417.408292][T14354] loop3: detected capacity change from 0 to 128
[  417.434115][T14354] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[  417.451233][T14354] FAT-fs (loop3): Filesystem has been set read-only
[  417.460046][T14354] syz.3.3294: attempt to access beyond end of device
[  417.460046][T14354] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128
[  417.477161][T14354] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[  417.480461][T14354] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[  417.487689][T14354] syz.3.3294: attempt to access beyond end of device
[  417.487689][T14354] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128
[  417.504904][   T33] audit: type=1800 audit(1758171557.346:77): pid=14354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3294" name="file2" dev="loop3" ino=1048687 res=0 errno=0
[  417.627943][T14364] 9pnet: p9_errstr2errno: server reported unknown error @cF	S++
[  417.854538][T14370] loop3: detected capacity change from 0 to 2048
[  417.880546][T14370] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  418.175365][ T5849] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  418.181767][T14391] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3313'.
[  418.331641][ T5849] usb 8-1: config 0 has an invalid interface number: 105 but max is 0
[  418.336240][ T5849] usb 8-1: config 0 has no interface number 0
[  418.341275][ T5849] usb 8-1: New USB device found, idVendor=05ac, idProduct=0259, bcdDevice=f0.b2
[  418.349651][ T5849] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  418.367472][ T5849] usb 8-1: config 0 descriptor??
[  418.387639][ T5849] input: bcm5974 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.105/input/input13
[  418.581375][ T5279] bcm5974 8-1:0.105: could not read from device
[  418.670080][ T5279] bcm5974 8-1:0.105: could not read from device
[  418.673642][ T5849] usb 8-1: USB disconnect, device number 4
[  418.703760][ T5856] udevd[5856]: Error opening device "/dev/input/event3": No such file or directory
[  418.703827][ T5856] udevd[5856]: Unable to EVIOCGABS device "/dev/input/event3"
[  418.703875][ T5856] udevd[5856]: Unable to EVIOCGABS device "/dev/input/event3"
[  418.703921][ T5856] udevd[5856]: Unable to EVIOCGABS device "/dev/input/event3"
[  418.703996][ T5856] udevd[5856]: Unable to EVIOCGABS device "/dev/input/event3"
[  421.904499][T14524] netlink: 'syz.0.3344': attribute type 11 has an invalid length.
[  422.405285][ T7830] usb 8-1: new full-speed USB device number 5 using dummy_hcd
[  422.577560][ T7830] usb 8-1: config 5 has an invalid interface number: 179 but max is 0
[  422.580896][ T7830] usb 8-1: config 5 has no interface number 0
[  422.592420][ T7830] usb 8-1: New USB device found, idVendor=19d2, idProduct=0038, bcdDevice= e.8c
[  422.601878][ T7830] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  422.608576][ T7830] usb 8-1: Product: syz
[  422.612062][ T7830] usb 8-1: Manufacturer: syz
[  422.614008][ T7830] usb 8-1: SerialNumber: syz
[  422.780352][T14565] loop3: detected capacity change from 0 to 1024
[  422.815879][T14565] hfsplus: small file entry
[  422.843393][ T7830] usb 8-1: bad CDC descriptors
[  422.859001][ T7830] usb 8-1: USB disconnect, device number 5
[  423.054393][T14581] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3372'.
[  423.106137][T14583] netlink: 'syz.3.3373': attribute type 3 has an invalid length.
[  423.264994][T14595] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3378'.
[  423.595436][   T48] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  423.626128][T14602] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3380'.
[  423.630103][T14602] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3380'.
[  423.795397][ T7830] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  423.855205][   T48] usb 4-1: Using ep0 maxpacket: 16
[  423.859247][   T48] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  423.863540][   T48] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0
[  423.867020][   T48] usb 4-1: config 0 interface 0 has no altsetting 0
[  423.871086][   T48] usb 4-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00
[  423.875373][   T48] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  423.881990][   T48] usb 4-1: config 0 descriptor??
[  423.961602][ T7830] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  423.964734][ T7830] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  423.968085][ T7830] usb 8-1: Product: syz
[  423.969592][ T7830] usb 8-1: Manufacturer: syz
[  423.971144][ T7830] usb 8-1: SerialNumber: syz
[  424.303832][   T48] zeroplus 0003:0C12:0005.000E: hidraw0: USB HID v0.07 Device [HID 0c12:0005] on usb-dummy_hcd.3-1/input0
[  424.308869][   T48] zeroplus 0003:0C12:0005.000E: no inputs found
[  424.511755][   T48] usb 4-1: USB disconnect, device number 40
[  424.994276][ T7830] cdc_ncm 8-1:1.0: MAC-Address: 42:42:42:42:42:42
[  424.996886][ T7830] cdc_ncm 8-1:1.0: setting tx_max = 184
[  425.382030][T14613] Invalid ELF header type: 0 != 1
[  425.428228][ T7830] cdc_ncm 8-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.7-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[  425.438244][ T7830] usb 8-1: USB disconnect, device number 6
[  425.445893][ T7830] cdc_ncm 8-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.7-1, CDC NCM (NO ZLP)
[  425.534410][T14615] loop3: detected capacity change from 0 to 256
[  425.553097][T14615] exfat: Deprecated parameter 'utf8'
[  425.571876][T14615] exfat: Unknown parameter 'iocharseC'
[  425.606933][T14615] Invalid source name
[  425.742263][T14619] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3389'.
[  425.881329][T14625] loop3: detected capacity change from 0 to 2048
[  425.890802][T14625] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  425.931098][T14626] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  425.931380][T14625] syz.3.3392: attempt to access beyond end of device
[  425.931380][T14625] loop3: rw=524288, sector=33554430, nr_sectors = 2 limit=2048
[  425.959852][T14625] syz.3.3392: attempt to access beyond end of device
[  425.959852][T14625] loop3: rw=0, sector=33554430, nr_sectors = 2 limit=2048
[  425.978578][T14625] NILFS (loop3): I/O error reading meta-data file (ino=6, block-offset=3)
[  425.984147][T14625] NILFS (loop3): error -5 reading inode: ino=15
[  426.000822][T14625] syz.3.3392: attempt to access beyond end of device
[  426.000822][T14625] loop3: rw=0, sector=33554430, nr_sectors = 2 limit=2048
[  426.008083][T14628] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  426.012036][T14625] NILFS (loop3): I/O error reading meta-data file (ino=6, block-offset=3)
[  426.018480][T14625] NILFS (loop3): error -5 reading inode: ino=15
[  426.599971][T14652] netlink: 56 bytes leftover after parsing attributes in process `syz.7.3401'.
[  427.219991][T14684] fuse: Bad value for 'fd'
[  428.030524][T14707] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3426'.
[  428.082005][T14713] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3428'.
[  428.090124][T14713] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3428'.
[  428.093886][T14713] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3428'.
[  428.098662][T14713] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3428'.
[  428.102416][T14713] netlink: 'syz.7.3428': attribute type 6 has an invalid length.
[  428.230619][T14724] netlink: 'syz.0.3433': attribute type 1 has an invalid length.
[  429.040759][   T33] audit: type=1326 audit(1758171568.886:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14744 comm="syz.0.3442" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66858eba9 code=0x7ffc0000
[  429.060107][   T33] audit: type=1326 audit(1758171568.906:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14744 comm="syz.0.3442" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66858eba9 code=0x7ffc0000
[  429.069825][T14747] loop7: detected capacity change from 0 to 256
[  429.078028][   T33] audit: type=1326 audit(1758171568.906:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14744 comm="syz.0.3442" exe="/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7ff66858eba9 code=0x7ffc0000
[  429.104118][   T33] audit: type=1326 audit(1758171568.906:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14744 comm="syz.0.3442" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66858eba9 code=0x7ffc0000
[  429.113601][   T33] audit: type=1326 audit(1758171568.906:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14744 comm="syz.0.3442" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66858eba9 code=0x7ffc0000
[  429.480072][T14765] loop7: detected capacity change from 0 to 256
[  429.496103][T14765] FAT-fs (loop7): Directory bread(block 1285) failed
[  429.510272][T14765] FAT-fs (loop7): Directory bread(block 1285) failed
[  429.697750][T14773] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3454'.
[  429.929025][T14788] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3461'.
[  430.143131][T14799] loop3: detected capacity change from 0 to 8
[  430.267756][T14801] fuse: Unknown parameter 'dSWYVBM'
[  430.388087][T14801] SQUASHFS error: xz decompression failed, data probably corrupt
[  430.401741][T14801] SQUASHFS error: Failed to read block 0xa8: -5
[  430.453627][T14801] SQUASHFS error: xz decompression failed, data probably corrupt
[  430.457384][T14801] SQUASHFS error: Failed to read block 0xa8: -5
[  430.465688][   T33] audit: type=1800 audit(1758171570.306:83): pid=14801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3464" name="file0" dev="loop3" ino=3 res=0 errno=0
[  431.056343][   T48] usb 8-1: new full-speed USB device number 7 using dummy_hcd
[  431.222077][   T48] usb 8-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  431.253572][   T48] usb 8-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[  431.258126][   T48] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  431.261598][   T48] usb 8-1: Product: syz
[  431.263716][   T48] usb 8-1: Manufacturer: syz
[  431.266058][   T48] usb 8-1: SerialNumber: syz
[  431.323646][   T48] usb 8-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[  432.036469][   T48] usb 8-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter)
[  432.069568][   T48] usb 8-1: USB disconnect, device number 7
[  432.295257][ T5914] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  432.457017][ T5914] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.02
[  432.461800][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  432.468990][ T5914] usb 4-1: Product: syz
[  432.470750][ T5914] usb 4-1: Manufacturer: syz
[  432.472878][ T5914] usb 4-1: SerialNumber: syz
[  432.478013][ T5914] usb 4-1: config 0 descriptor??
[  432.814536][T14835] loop7: detected capacity change from 0 to 4096
[  432.818705][ T5914] hso 4-1:0.0: Failed to find BULK IN ep
[  432.864197][T14835] EXT4-fs: Ignoring removed mblk_io_submit option
[  432.879472][T14835] EXT4-fs (loop7): Test dummy encryption mode enabled
[  432.888318][T14835] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0083]
[  432.891717][T14835] System zones: 0-5
[  432.899467][T14835] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  432.902656][ T5914] usb 4-1: USB disconnect, device number 41
[  433.273741][T13236] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  433.450641][T14845] loop7: detected capacity change from 0 to 4096
[  433.454870][T14845] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512).
[  433.487813][T14845] ntfs3(loop7): ino=19, mi_enum_attr
[  433.490192][T14845] ntfs3(loop7): Mark volume as dirty due to NTFS errors
[  433.937539][T14867] loop7: detected capacity change from 0 to 512
[  433.967759][T14867] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  433.985383][T14867] ext4 filesystem being mounted at /189/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  434.084412][T13236] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  434.168551][T14876] loop3: detected capacity change from 0 to 8
[  434.174907][T14876] syz.3.3498: attempt to access beyond end of device
[  434.174907][T14876] loop3: rw=2048, sector=36028797018963960, nr_sectors = 16 limit=8
[  434.190849][T14876] SQUASHFS error: Failed to read block 0xfffffffffffffffa: -5
[  434.193919][T14876] unable to read xattr id index table
[  434.873874][T14908] loop7: detected capacity change from 0 to 512
[  434.879865][T14908] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  434.911336][T14908] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a01ec018, mo2=0002]
[  434.932404][T14908] System zones: 1-12
[  434.941195][T14908] EXT4-fs (loop7): 1 truncate cleaned up
[  434.948575][T14908] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  434.958015][   T33] audit: type=1800 audit(1758171574.806:84): pid=14908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3514" name="file1" dev="loop7" ino=15 res=0 errno=0
[  434.980188][   T33] audit: type=1800 audit(1758171574.826:85): pid=14908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3514" name="file2" dev="loop7" ino=16 res=0 errno=0
[  435.031187][T13236] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  435.076134][T14921] CIFS mount error: No usable UNC path provided in device string!
[  435.076134][T14921] 
[  435.079329][T14921] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  435.425199][ T5914] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  435.517639][T14935] loop7: detected capacity change from 0 to 32768
[  435.602483][ T5914] usb 4-1: New USB device found, idVendor=0b05, idProduct=19b6, bcdDevice= 0.00
[  435.607277][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  435.620645][ T5914] usb 4-1: config 0 descriptor??
[  436.052164][ T5914] asus 0003:0B05:19B6.000F: hidraw0: USB HID v0.04 Device [HID 0b05:19b6] on usb-dummy_hcd.3-1/input0
[  436.068371][ T5914] asus 0003:0B05:19B6.000F: Asus input not registered
[  436.080270][ T5914] asus 0003:0B05:19B6.000F: probe with driver asus failed with error -12
[  436.161560][T14957] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3536'.
[  436.166013][T14957] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3536'.
[  436.242769][ T5914] usb 4-1: USB disconnect, device number 42
[  436.403892][T14967] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3541'.
[  436.684118][T14979] loop7: detected capacity change from 0 to 512
[  436.909871][T14987] loop3: detected capacity change from 0 to 1024
[  436.914252][T14987] EXT4-fs: Ignoring removed nobh option
[  436.930516][T14987] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  436.939367][T14987] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #11: comm syz.3.3551: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[  436.953261][T14987] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.3551: couldn't read orphan inode 11 (err -117)
[  436.964280][T14987] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  437.014005][ T6145] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  437.241572][   T10] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  437.274468][T15006] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3560'.
[  437.278228][T15006] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3560'.
[  437.281783][T15006] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3560'.
[  437.343334][T15008] loop3: detected capacity change from 0 to 1024
[  437.568911][   T10] usb 8-1: unable to get BOS descriptor or descriptor too short
[  437.572954][   T10] usb 8-1: config 13 has an invalid interface number: 50 but max is 3
[  437.576738][   T10] usb 8-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config
[  437.580791][   T10] usb 8-1: config 13 has 1 interface, different from the descriptor's value: 4
[  437.584364][   T10] usb 8-1: config 13 has no interface number 0
[  437.587688][   T10] usb 8-1: config 13 interface 50 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 9
[  437.593358][   T10] usb 8-1: config 13 interface 50 has no altsetting 0
[  437.709683][   T10] usb 8-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=a9.e8
[  437.718961][   T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  437.721835][   T10] usb 8-1: Product: syz
[  437.752785][   T10] usb 8-1: Manufacturer: syz
[  437.759433][   T10] usb 8-1: SerialNumber: syz
[  438.046254][   T10] usb 8-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  438.052224][ T6162] usb 8-1: Failed to submit usb control message: -71
[  438.055694][   T10] usb 8-1: USB disconnect, device number 8
[  438.059871][ T6162] usb 8-1: unable to send the bmi data to the device: -71
[  438.062744][ T6162] usb 8-1: unable to get target info from device
[  438.066253][ T6162] usb 8-1: could not get target info (-71)
[  438.068932][ T6162] usb 8-1: could not probe fw (-71)
[  438.491651][T15042] loop3: detected capacity change from 0 to 128
[  438.499367][T15042] EXT4-fs: inline encryption not supported
[  438.525265][T15042] EXT4-fs: Mount option(s) incompatible with ext2
[  439.891690][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  440.171260][T15068] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3585'.
[  440.619139][T15071] loop3: detected capacity change from 0 to 4096
[  440.631364][T15071] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512).
[  441.592102][ T5899] usb 4-1: new full-speed USB device number 43 using dummy_hcd
[  441.786219][ T5899] usb 4-1: unable to get BOS descriptor or descriptor too short
[  441.796222][ T5899] usb 4-1: not running at top speed; connect to a high speed hub
[  441.817350][ T5899] usb 4-1: config 4 has an invalid interface number: 32 but max is 0
[  441.832336][ T5899] usb 4-1: config 4 has no interface number 0
[  441.839705][ T5899] usb 4-1: New USB device found, idVendor=17dc, idProduct=0202, bcdDevice=f1.50
[  441.843696][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  441.856221][ T5899] usb 4-1: Product: syz
[  441.858027][ T5899] usb 4-1: Manufacturer: syz
[  441.859941][ T5899] usb 4-1: SerialNumber: syz
[  441.870155][T15088] netlink: 'syz.0.3591': attribute type 19 has an invalid length.
[  441.873243][T15088] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3591'.
[  441.877539][T15088] netlink: 'syz.0.3591': attribute type 19 has an invalid length.
[  441.880698][T15088] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3591'.
[  442.408727][ T5899] usb 4-1: Found UVC 0.02 device syz (17dc:0202)
[  442.411519][ T5899] usb 4-1: No valid video chain found.
[  442.420901][ T5899] usb 4-1: USB disconnect, device number 43
[  443.006407][T15113] sch_tbf: burst 0 is lower than device macvtap0 mtu (1514) !
[  443.232047][T15121] loop3: detected capacity change from 0 to 4096
[  443.281437][T15124] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  443.428564][T15132] netlink: 'syz.0.3611': attribute type 4 has an invalid length.
[  443.747255][T15130] loop3: detected capacity change from 0 to 40427
[  443.751704][T15130] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  443.755854][T15130] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  443.765992][T15130] F2FS-fs (loop3): invalid crc value
[  443.845976][T15130] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  443.851703][T15130] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  443.854952][T15130] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  444.371670][T15148] loop3: detected capacity change from 0 to 32768
[  444.377290][T15148] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3616 (15148)
[  444.396582][T15148] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  444.400629][T15148] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  444.489068][T15148] BTRFS info (device loop3): enabling ssd optimizations
[  444.491931][T15148] BTRFS info (device loop3): enabling free space tree
[  444.554747][ T6145] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  445.982128][T15202] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3633'.
[  445.989697][T15202] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3633'.
[  445.998527][T15202] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3633'.
[  446.124117][T15208] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3636'.
[  447.049100][T15250] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3654'.
[  447.052557][T15250] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3654'.
[  447.057412][T15250] netlink: 'syz.0.3654': attribute type 18 has an invalid length.
[  447.142530][   T33] audit: type=1326 audit(1758171586.986:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15255 comm="syz.0.3657" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66858eba9 code=0x7ffc0000
[  447.164604][   T33] audit: type=1326 audit(1758171586.986:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15255 comm="syz.0.3657" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66858eba9 code=0x7ffc0000
[  447.180035][   T33] audit: type=1326 audit(1758171586.986:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15255 comm="syz.0.3657" exe="/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff66858eba9 code=0x7ffc0000
[  447.197695][   T33] audit: type=1326 audit(1758171586.986:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15255 comm="syz.0.3657" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66858eba9 code=0x7ffc0000
[  447.215367][   T33] audit: type=1326 audit(1758171586.986:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15255 comm="syz.0.3657" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66858eba9 code=0x7ffc0000
[  447.224347][   T33] audit: type=1326 audit(1758171586.986:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15255 comm="syz.0.3657" exe="/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7ff66858eba9 code=0x7ffc0000
[  447.232974][   T33] audit: type=1326 audit(1758171586.986:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15255 comm="syz.0.3657" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66858eba9 code=0x7ffc0000
[  448.322537][T15294] netlink: 'syz.3.3674': attribute type 32 has an invalid length.
[  448.381044][T15296] netlink: 'syz.3.3675': attribute type 4 has an invalid length.
[  448.544189][T15298] loop7: detected capacity change from 0 to 512
[  448.550884][T15298] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  448.555842][T15300] netlink: 172 bytes leftover after parsing attributes in process `syz.3.3676'.
[  448.559302][T15300] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3676'.
[  448.578811][T15298] EXT4-fs (loop7): 1 truncate cleaned up
[  448.582280][T15298] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  448.591576][T15300] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3676'.
[  448.639952][T13236] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  448.789363][T15311] 9pnet_fd: Insufficient options for proto=fd
[  449.469129][T15323] sctp: [Deprecated]: syz.3.3685 (pid 15323) Use of struct sctp_assoc_value in delayed_ack socket option.
[  449.469129][T15323] Use struct sctp_sack_info instead
[  449.995381][T15334] overlay: Bad value for 'workdir'
[  450.150266][T15340] netlink: 212376 bytes leftover after parsing attributes in process `syz.7.3693'.
[  450.192021][T15342] loop3: detected capacity change from 0 to 128
[  451.008761][T15365] syz.0.3704 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  451.113408][   T33] audit: type=1326 audit(1758171590.956:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15370 comm="syz.7.3707" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa75218eba9 code=0x0
[  451.149041][T15373] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  451.527378][T15387] loop3: detected capacity change from 0 to 256
[  451.530961][T15387] exfat: Bad value for 'uid'
[  451.532873][T15387] exfat: Bad value for 'uid'
[  451.594766][T15389] loop7: detected capacity change from 0 to 24
[  451.601308][T15389] MTD: Attempt to mount non-MTD device "/dev/loop7"
[  451.674599][T15389] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  451.718319][T15389] VFS: Lookup of 'file0' in romfs loop7 would have caused loop
[  452.031620][T15404] tmpfs: Bad value for 'mpol'
[  452.471539][T15409] loop7: detected capacity change from 0 to 1024
[  452.476142][T15409] EXT4-fs: Ignoring removed bh option
[  452.483817][T15409] EXT4-fs: Ignoring removed nobh option
[  452.492020][T15409] EXT4-fs: Ignoring removed bh option
[  452.524695][T15409] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  453.066370][T15414] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4183: comm syz.7.3724: Allocating blocks 497-513 which overlap fs metadata
[  453.083380][T15414] EXT4-fs (loop7): pa ffff88802b264570: logic 256, phys. 385, len 8
[  453.087182][T15414] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1
[  453.434206][T13236] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  453.469137][T15427] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.3730'.
[  453.642746][ T7830] libceph: connect (1)[c::]:6789 error -101
[  453.644805][ T7830] libceph: mon0 (1)[c::]:6789 connect error
[  453.798249][T15436] ceph: No mds server is up or the cluster is laggy
[  453.806438][T15441] loop7: detected capacity change from 0 to 256
[  453.822227][T15441] exFAT-fs (loop7): failed to load upcase table (idx : 0x00011e3e, chksum : 0x38c882e6, utbl_chksum : 0xe619d30d)
[  454.165209][ T5849] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  454.217075][T15447] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3737'.
[  454.324405][T15453] kernel read not supported for file /file0 (pid: 15453 comm: syz.3.3740)
[  454.325959][ T5849] usb 8-1: Using ep0 maxpacket: 8
[  454.329818][   T33] audit: type=1800 audit(1758171594.176:94): pid=15453 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3740" name="file0" dev="mqueue" ino=39436 res=0 errno=0
[  454.341901][ T5849] usb 8-1: config 162 has an invalid interface number: 97 but max is 0
[  454.347904][ T5849] usb 8-1: config 162 has no interface number 0
[  454.350215][ T5849] usb 8-1: config 162 interface 97 has no altsetting 0
[  454.360665][ T5849] usb 8-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=e1.3b
[  454.363606][ T5849] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  454.369961][ T5849] usb 8-1: Product: syz
[  454.371684][ T5849] usb 8-1: Manufacturer: syz
[  454.378423][ T5849] usb 8-1: SerialNumber: syz
[  454.601089][ T5849] metro_usb 8-1:162.97: Metrologic USB to Serial converter detected
[  454.607357][ T5849] usb 8-1: Metrologic USB to Serial converter now attached to ttyUSB0
[  454.617543][T15469] loop3: detected capacity change from 0 to 2048
[  454.618247][ T5849] usb 8-1: USB disconnect, device number 9
[  454.626909][T15469] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  454.640768][ T5849] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0
[  454.651127][ T5849] metro_usb 8-1:162.97: device disconnected
[  456.141590][T15483] loop3: detected capacity change from 0 to 131072
[  456.146736][T15483] F2FS-fs (loop3): Test dummy encryption mode enabled
[  456.152742][T15483] F2FS-fs (loop3): invalid crc value
[  456.205553][T15483] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  456.210424][T15483] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  456.732516][T15523] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  456.733465][T15525] loop7: detected capacity change from 0 to 512
[  456.777801][T15525] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters
[  456.788046][T15525] EXT4-fs (loop7): Remounting filesystem read-only
[  456.791024][T15525] EXT4-fs (loop7): 1 truncate cleaned up
[  456.794418][T15525] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  456.917479][T13236] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  457.212080][T15540] netlink: 'syz.0.3778': attribute type 1 has an invalid length.
[  457.222667][T15542] netlink: 260 bytes leftover after parsing attributes in process `syz.7.3779'.
[  457.516045][   T10] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  457.870178][   T10] usb 4-1: New USB device found, idVendor=0421, idProduct=0007, bcdDevice=b8.51
[  457.875124][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  457.878318][   T10] usb 4-1: Product: syz
[  457.880023][   T10] usb 4-1: Manufacturer: syz
[  457.881890][   T10] usb 4-1: SerialNumber: syz
[  457.887411][   T10] usb 4-1: config 0 descriptor??
[  457.893720][   T10] rndis_host 4-1:0.0: skipping garbage
[  457.903355][   T10] rndis_host 4-1:0.0: More than one union descriptor, skipping ...
[  457.907447][   T10] usb 4-1: bad CDC descriptors
[  457.910415][   T10] cdc_acm 4-1:0.0: skipping garbage
[  457.912561][   T10] cdc_acm 4-1:0.0: More than one union descriptor, skipping ...
[  458.494933][   T10] usb 4-1: USB disconnect, device number 44
[  458.615721][T15564] loop7: detected capacity change from 0 to 4096
[  458.619866][T15564] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512).
[  458.633647][T15564] ntfs3(loop7): ino=3, mi_enum_attr
[  458.635895][T15564] ntfs3(loop7): Mark volume as dirty due to NTFS errors
[  458.638114][T15564] ntfs3(loop7): Failed to load $LogFile (-22).
[  458.779434][T15573] pim6reg1: entered promiscuous mode
[  458.781491][T15573] pim6reg1: entered allmulticast mode
[  459.144752][T15585] loop3: detected capacity change from 0 to 4096
[  459.184508][T15585] ntfs3(loop3): ino=9, attr_set_size
[  459.264227][T15586] IPVS: ip_vs_add_dest(): server weight less than zero
[  460.763082][T15624] loop7: detected capacity change from 0 to 2048
[  460.810826][T15629] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  460.831974][T15629] NILFS (loop7): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  460.843102][T15629] NILFS error (device loop7): nilfs_bmap_propagate: broken bmap (inode number=4)
[  460.858488][T15629] Remounting filesystem read-only
[  460.891291][T13236] NILFS (loop7): disposed unprocessed dirty file(s) when stopping log writer
[  461.195286][ T5914] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[  461.341724][T15649] loop3: detected capacity change from 0 to 32768
[  461.352745][T15649] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  461.370286][ T5914] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  461.373918][ T5914] usb 8-1: config 0 interface 0 has no altsetting 0
[  461.381995][ T5914] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  461.384888][ T5914] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  461.387209][T15649] XFS (loop3): Ending clean mount
[  461.392341][ T5914] usb 8-1: Product: syz
[  461.393798][ T5914] usb 8-1: Manufacturer: syz
[  461.395675][ T5914] usb 8-1: SerialNumber: syz
[  461.398999][ T5914] usb 8-1: config 0 descriptor??
[  461.408442][T15649] XFS (loop3): Quotacheck needed: Please wait.
[  461.409039][ T5914] usb 8-1: selecting invalid altsetting 0
[  461.470262][T15649] XFS (loop3): Quotacheck: Done.
[  461.512369][ T6145] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  461.618500][T15637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  461.636330][T15637] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  461.643592][T15637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  461.672326][T15637] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  461.754650][   T10] usb 8-1: USB disconnect, device number 10
[  461.928636][T15674] openvswitch: netlink: ct_state flags 7fffffff unsupported
[  462.673663][T15684] loop3: detected capacity change from 0 to 32768
[  462.709632][T15684] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3839 (15684)
[  462.761731][T15684] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  462.776408][T15684] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  462.874672][ T1091] BTRFS warning (device loop3): checksum verify failed on logical 5341184 mirror 1 wanted 0x0a5a7a5ae10eed219743b156b36184dc5a58d72503dc57b157a62f9528df24e9 found 0xff549293dea1dbaf9b0a1f0ee28e0a88db67a3e97fd64b068aed23a93a8eb1b1 level 0
[  462.922897][T15684] BTRFS error (device loop3): failed to load root free space
[  463.023260][T15684] BTRFS error (device loop3): open_ctree failed: -5
[  463.572767][ T5849] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[  463.966010][ T5849] usb 8-1: Using ep0 maxpacket: 16
[  464.025739][ T5849] usb 8-1: unable to get BOS descriptor or descriptor too short
[  464.050741][ T5849] usb 8-1: config 0 has an invalid interface number: 51 but max is 0
[  464.106027][ T5849] usb 8-1: config 0 has no interface number 0
[  464.181647][ T5849] usb 8-1: config 0 interface 51 has no altsetting 0
[  464.186820][ T5849] usb 8-1: New USB device found, idVendor=eb1a, idProduct=2710, bcdDevice=83.9c
[  464.190277][ T5849] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  464.193305][ T5849] usb 8-1: Product: syz
[  464.195444][ T5849] usb 8-1: Manufacturer: syz
[  464.197379][ T5849] usb 8-1: SerialNumber: syz
[  464.210395][ T5849] usb 8-1: config 0 descriptor??
[  464.267786][T15733] netlink: 'syz.3.3854': attribute type 29 has an invalid length.
[  464.287670][T15733] netlink: 'syz.3.3854': attribute type 29 has an invalid length.
[  464.399104][T15739] openvswitch: netlink: Message has 4 unknown bytes.
[  464.409705][T15738] loop3: detected capacity change from 0 to 1024
[  464.429191][ T5849] em28xx 8-1:0.51: audio device (eb1a:2710): interface 51, class 1
[  464.436291][ T5849] usb 8-1: USB disconnect, device number 11
[  464.448689][T15738] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  464.454042][T15738] ext4 filesystem being mounted at /1115/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  464.640714][ T6145] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  465.944661][T15786] loop3: detected capacity change from 0 to 512
[  465.960522][T15786] EXT4-fs: Ignoring removed oldalloc option
[  465.974796][T15788] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3877'.
[  465.979841][T15786] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.3875: Parent and EA inode have the same ino 15
[  465.993901][T15788] openvswitch: netlink: nsh attr 0 has unexpected len 1019 expected 0
[  465.999934][T15786] EXT4-fs (loop3): Remounting filesystem read-only
[  466.002555][T15786] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -30)
[  466.007786][T15788] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  466.012128][T15786] EXT4-fs (loop3): 1 orphan inode deleted
[  466.016124][T15786] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  466.067128][ T6145] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  466.073908][T15778] loop7: detected capacity change from 0 to 32768
[  466.588952][   T10] usb 4-1: new full-speed USB device number 45 using dummy_hcd
[  466.748743][   T10] usb 4-1: not running at top speed; connect to a high speed hub
[  466.753471][   T10] usb 4-1: config 176 has an invalid interface number: 163 but max is 0
[  466.757265][   T10] usb 4-1: config 176 has no interface number 0
[  466.759963][   T10] usb 4-1: config 176 interface 163 has no altsetting 0
[  466.765412][   T10] usb 4-1: New USB device found, idVendor=6ef8, idProduct=31cb, bcdDevice=e8.b9
[  466.769284][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  466.772533][   T10] usb 4-1: Product: syz
[  466.774295][   T10] usb 4-1: Manufacturer: syz
[  466.776704][   T10] usb 4-1: SerialNumber: syz
[  466.989512][   T10] usb-storage 4-1:176.163: USB Mass Storage device detected
[  467.059271][   T10] usb 4-1: USB disconnect, device number 45
[  468.158947][T15823] loop7: detected capacity change from 0 to 131072
[  468.215453][T15823] F2FS-fs (loop7): invalid crc value
[  468.395551][T15823] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  468.404967][T15823] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4
[  468.645892][T15844] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  468.697808][T15847] loop3: detected capacity change from 0 to 512
[  468.720434][T15847] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.3902: casefold flag without casefold feature
[  468.728084][T15847] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.3902: couldn't read orphan inode 15 (err -117)
[  468.732716][T15847] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  469.449287][T15871] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0
[  469.451478][T15870] IPVS: stopping backup sync thread 15871 ...
[  469.642054][ T6145] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  469.672891][T15877] overlayfs: failed to clone upperpath
[  469.821743][T15886] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.3916'.
[  471.165159][T15903] kernel profiling enabled (shift: 7)
[  472.646288][T15925] loop7: detected capacity change from 0 to 32768
[  472.653488][T15925] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.3931 (15925)
[  472.665167][T15925] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  472.668872][T15925] BTRFS info (device loop7): using sha256 (sha256-lib) checksum algorithm
[  472.815735][T15925] BTRFS info (device loop7): enabling ssd optimizations
[  472.818932][T15925] BTRFS info (device loop7): enabling free space tree
[  472.892332][T15951] netlink: 'syz.3.3936': attribute type 10 has an invalid length.
[  472.900196][T15951] veth1_macvtap: left promiscuous mode
[  472.915523][T15951] team0: Device veth1_macvtap failed to register rx_handler
[  472.919209][T13236] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  473.798214][T15979] overlayfs: failed to resolve './file0': -2
[  474.233881][T16009] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3960'.
[  474.252998][ T5879] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  474.269434][ T5879] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  474.284111][ T5879] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  474.304350][ T5879] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  474.565357][   T48] usb 8-1: new high-speed USB device number 12 using dummy_hcd
[  474.617241][T16013] loop3: detected capacity change from 0 to 40427
[  474.698745][T16025] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3970'.
[  474.701848][T16025] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  474.704843][T16025] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  474.715806][   T48] usb 8-1: Using ep0 maxpacket: 16
[  474.724032][   T48] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  474.739145][   T48] usb 8-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25
[  474.741965][   T48] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  474.744722][   T48] usb 8-1: Product: syz
[  474.753880][   T48] usb 8-1: Manufacturer: syz
[  474.756566][   T48] usb 8-1: SerialNumber: syz
[  474.764322][   T48] usb 8-1: config 0 descriptor??
[  474.773215][   T48] uvcvideo 8-1:0.0: probe with driver uvcvideo failed with error -22
[  474.886956][T16031] loop3: detected capacity change from 0 to 2048
[  474.904107][T16031] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  474.930593][T16031] UDF-fs: error (device loop3): udf_verify_fi: directory (ino 1376) has entry where CRC length (32) does not match entry length (24)
[  474.977365][   T48] usb 8-1: USB disconnect, device number 12
[  475.201867][T16045] loop3: detected capacity change from 0 to 128
[  475.233769][T16045] syz.3.3980: attempt to access beyond end of device
[  475.233769][T16045] loop3: rw=2049, sector=138, nr_sectors = 2 limit=128
[  475.664071][T16063] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  476.085894][T16080] loop3: detected capacity change from 0 to 4096
[  476.251643][T16082] loop3: detected capacity change from 0 to 512
[  476.257953][T16082] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000001)
[  476.419857][T16092] binder: 16091:16092 ioctl c0306201 200000000080 returned -14
[  476.424314][T16092] binder: 16091:16092 ioctl c0306201 200000000180 returned -22
[  476.483685][T16096] loop3: detected capacity change from 0 to 256
[  476.495665][T16096] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d)
[  476.519586][T16096] exFAT-fs (loop3): error, invalid access to FAT free cluster (entry 0x00000008)
[  476.758824][T16108] loop7: detected capacity change from 0 to 512
[  476.804496][T16108] EXT4-fs (loop7): 1 orphan inode deleted
[  476.808580][T16108] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  476.814960][T16108] ext4 filesystem being mounted at /309/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  476.829303][ T9764] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  476.845599][ T9764] EXT4-fs error (device loop7): ext4_release_dquot:6973: comm kworker/u9:14: Failed to release dquot type 1
[  476.935873][T13236] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  478.703670][T16152] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4028'.
[  479.144562][T16162] overlayfs: failed to clone upperpath
[  479.316294][T16175] loop3: detected capacity change from 0 to 2048
[  479.345699][T16175] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  479.371710][   T33] audit: type=1800 audit(1758171619.216:95): pid=16175 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4039" name="file1" dev="loop3" ino=1367 res=0 errno=0
[  479.663272][T16171] loop7: detected capacity change from 0 to 32768
[  479.671107][T16171] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.4037 (16171)
[  479.722647][T16171] BTRFS info (device loop7): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  479.737354][T16171] BTRFS info (device loop7): using blake2b (blake2b-256-generic) checksum algorithm
[  479.863137][T16171] BTRFS info (device loop7): enabling ssd optimizations
[  479.882498][T16171] BTRFS info (device loop7): enabling free space tree
[  480.148408][T16216] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4049'.
[  480.403309][T13236] BTRFS info (device loop7): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  480.478374][   T48] usb 4-1: new low-speed USB device number 46 using dummy_hcd
[  480.626967][   T48] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  480.634325][   T48] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  480.666842][   T48] usb 4-1: config 0 descriptor??
[  480.787365][T16218] loop7: detected capacity change from 0 to 4096
[  480.840596][T16218] ntfs3(loop7): Primary boot: invalid bytes per sector 1792.
[  480.843868][T16218] ntfs3(loop7): try to read out of volume at offset 0x1ffe00
[  481.389593][T16248] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4066'.
[  481.583362][T16258] netlink: 64535 bytes leftover after parsing attributes in process `syz.7.4071'.
[  481.684229][T16262] loop7: detected capacity change from 0 to 1024
[  481.691823][T16262] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  481.702010][T16262] EXT4-fs (loop7): revision level too high, forcing read-only mode
[  481.706459][T16262] EXT4-fs (loop7): orphan cleanup on readonly fs
[  481.709696][T16262] EXT4-fs error (device loop7): ext4_free_blocks:6696: comm syz.7.4073: Freeing blocks not in datazone - block = 0, count = 4096
[  481.719434][T16262] EXT4-fs (loop7): 1 orphan inode deleted
[  481.726276][T16262] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  481.751804][T13236] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  482.090584][T16280] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  482.730666][   T48] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71
[  482.759202][   T48] asix 4-1:0.0: probe with driver asix failed with error -71
[  482.765781][   T33] audit: type=1800 audit(1758171622.616:96): pid=16291 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4085" name="nullb0" dev="tmpfs" ino=5232 res=0 errno=0
[  482.795533][   T48] usb 4-1: USB disconnect, device number 46
[  483.056038][T16298] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4088'.
[  483.683198][T16309] loop7: detected capacity change from 0 to 512
[  483.743651][T16309] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  483.805190][T16309] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #16: comm syz.7.4092: invalid indirect mapped block 4294967295 (level 0)
[  483.818083][T16309] EXT4-fs (loop7): Remounting filesystem read-only
[  483.829495][T16309] EXT4-fs (loop7): 1 orphan inode deleted
[  483.840064][T16309] EXT4-fs (loop7): 1 truncate cleaned up
[  483.847550][T16309] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  483.914760][T13236] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  484.578390][T16326] netlink: 'syz.7.4098': attribute type 12 has an invalid length.
[  485.080781][T16354] loop7: detected capacity change from 0 to 2048
[  485.090748][T16354] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024)
[  485.111105][T16354] syz.7.4112: attempt to access beyond end of device
[  485.111105][T16354] loop7: rw=524288, sector=33554430, nr_sectors = 2 limit=2048
[  485.116765][T16357] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  485.156392][T16354] NILFS error (device loop7): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  485.179347][T16354] Remounting filesystem read-only
[  485.183855][T16354] NILFS error (device loop7): nilfs_bmap_last_key: broken bmap (inode number=16)
[  485.190913][T16354] NILFS (loop7): error -5 truncating bmap (ino=16)
[  485.219681][T13236] NILFS (loop7): disposed unprocessed dirty file(s) when detaching log writer
[  486.638473][T16381] nbd0: detected capacity change from 0 to 7
[  486.654001][ T5856] Buffer I/O error on dev nbd0, logical block 3, async page read
[  486.659129][T11194] block nbd0: Receive control failed (result -104)
[  486.925957][T16393] loop7: detected capacity change from 0 to 2048
[  486.939860][T16393] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  487.226043][T16397] sch_tbf: burst 0 is lower than device lo mtu (11337746) !
[  487.543286][T16407] openvswitch: netlink: Tunnel attr 171 out of range max 16
[  487.616792][T16409] loop7: detected capacity change from 0 to 256
[  488.632117][T16427] netlink: 76 bytes leftover after parsing attributes in process `syz.7.4143'.
[  489.216440][T16435] loop7: detected capacity change from 0 to 32768
[  489.226143][T16435] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.4146 (16435)
[  489.261901][T16435] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  489.275263][T16435] BTRFS info (device loop7): using sha256 (sha256-lib) checksum algorithm
[  489.347557][  T725] BTRFS error (device loop7): bad fsid on logical 5287936 mirror 1
[  489.350830][T16435] BTRFS warning (device loop7): failed to read root (objectid=4): -5
[  489.366819][T16435] BTRFS error (device loop7): open_ctree failed: -5
[  490.894789][T16496] loop7: detected capacity change from 0 to 2048
[  490.926615][T16496] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024)
[  490.930447][T16496] NILFS (loop7): mounting unchecked fs
[  490.931744][ T5968] udevd[5968]: incorrect nilfs2 checksum on /dev/loop7
[  490.946390][T16496] NILFS (loop7): recovery complete
[  490.954723][T16503] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  490.996893][T16502] wg1 speed is unknown, defaulting to 1000
[  491.063573][T16504] wg1 speed is unknown, defaulting to 1000
[  491.584051][T16513] delete_channel: no stack
[  491.631300][T16515] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4172'.
[  491.913495][T16527] ptrace attach of "/syz-executor exec"[16529] was attempted by "/syz-executor exec"[16527]
[  494.418192][   T54] Bluetooth: hci1: ACL packet for unknown connection handle 201
[  494.680553][T16610] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4213'.
[  494.854580][T16619] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4217'.
[  495.743343][   T60] block nbd0: Connection timed out, retrying (0/1 alive)
[  495.748197][   T60] block nbd0: Connection timed out, retrying (0/1 alive)
[  495.751635][   T60] block nbd0: Connection timed out, retrying (0/1 alive)
[  495.754954][   T60] block nbd0: Dead connection, failed to find a fallback
[  495.759800][   T60] block nbd0: shutting down sockets
[  495.763392][   T60] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  495.767675][   T60] Buffer I/O error on dev nbd0, logical block 2, async page read
[  495.772017][   T60] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  495.775022][   T60] Buffer I/O error on dev nbd0, logical block 1, async page read
[  495.777919][   T60] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  495.780948][   T60] Buffer I/O error on dev nbd0, logical block 0, async page read
[  495.786675][ T5856] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  495.792558][ T5856] Buffer I/O error on dev nbd0, logical block 0, async page read
[  495.796338][ T5856] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  495.800126][ T5856] Buffer I/O error on dev nbd0, logical block 1, async page read
[  495.803424][ T5856] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  495.807107][ T5856] Buffer I/O error on dev nbd0, logical block 2, async page read
[  495.811729][ T5856] Buffer I/O error on dev nbd0, logical block 3, async page read
[  495.815626][ T5856] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  495.819439][ T5856] Buffer I/O error on dev nbd0, logical block 0, async page read
[  495.823341][ T5856] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  495.827481][ T5856] Buffer I/O error on dev nbd0, logical block 1, async page read
[  495.830956][ T5856] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  495.834766][ T5856] Buffer I/O error on dev nbd0, logical block 2, async page read
[  495.838549][ T5856] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  495.849749][ T5856] ldm_validate_partition_table(): Disk read failed.
[  495.854190][ T5856] Dev nbd0: unable to read RDB block 0
[  495.858213][ T5856]  nbd0: unable to read partition table
[  495.860778][ T5856] nbd0: partition table beyond EOD, truncated
[  495.876171][ T5856] ldm_validate_partition_table(): Disk read failed.
[  495.957946][ T5856] Dev nbd0: unable to read RDB block 0
[  495.961273][ T5856]  nbd0: unable to read partition table
[  495.963655][ T5856] nbd0: partition table beyond EOD, truncated
[  497.770536][T16691] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4244'.
[  498.063278][T16703] macsec0: entered promiscuous mode
[  498.066455][T16703] macsec0: entered allmulticast mode
[  498.451152][   T48] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[  498.459685][T16716] loop7: detected capacity change from 0 to 128
[  498.468667][T16716] FAT-fs (loop7): Directory bread(block 414) failed
[  498.471559][T16716] FAT-fs (loop7): Directory bread(block 415) failed
[  498.474196][T16716] FAT-fs (loop7): Directory bread(block 416) failed
[  498.481664][T16716] FAT-fs (loop7): Directory bread(block 417) failed
[  498.484372][T16716] FAT-fs (loop7): Directory bread(block 418) failed
[  498.491122][T16716] FAT-fs (loop7): Directory bread(block 419) failed
[  498.494374][T16716] FAT-fs (loop7): Directory bread(block 420) failed
[  498.504393][T16716] FAT-fs (loop7): Directory bread(block 421) failed
[  498.615440][   T48] usb 4-1: Using ep0 maxpacket: 16
[  498.625878][   T48] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00
[  498.629411][   T48] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  498.632586][   T48] usb 4-1: Product: syz
[  498.634252][   T48] usb 4-1: Manufacturer: syz
[  498.648188][   T48] usb 4-1: SerialNumber: syz
[  498.656579][   T48] usb 4-1: config 0 descriptor??
[  498.661631][   T48] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected
[  498.667398][   T48] usb 4-1: Detected FT232H
[  499.074046][   T48] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  499.078816][   T48] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71
[  499.084467][   T48] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  499.094057][   T48] usb 4-1: USB disconnect, device number 47
[  499.105694][   T48] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  499.114493][   T48] ftdi_sio 4-1:0.0: device disconnected
[  500.723929][T16764] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4276'.
[  501.341328][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  502.434053][T16822] netlink: 'syz.0.4300': attribute type 21 has an invalid length.
[  502.437717][T16822] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4300'.
[  502.441484][T16822] netlink: 'syz.0.4300': attribute type 4 has an invalid length.
[  502.444734][T16822] netlink: 'syz.0.4300': attribute type 3 has an invalid length.
[  502.449482][T16822] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4300'.
[  503.243334][T16834] loop7: detected capacity change from 0 to 65
[  503.250088][T16834] BFS-fs: bfs_fill_super(): NOTE: filesystem loop7 was created with 512 inodes, the real maximum is 511, mounting anyway
[  503.263645][T16834] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop7
[  503.405285][ T5853] Bluetooth: hci2: command 0x0406 tx timeout
[  503.708513][T16856] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  503.735310][ T7830] usb 8-1: new full-speed USB device number 13 using dummy_hcd
[  503.887725][ T7830] usb 8-1: config 0 has an invalid interface number: 251 but max is 0
[  503.890766][ T7830] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  503.894567][ T7830] usb 8-1: config 0 has no interface number 0
[  503.897500][ T7830] usb 8-1: config 0 interface 251 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  503.903716][ T7830] usb 8-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  503.906978][ T7830] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  503.909686][ T7830] usb 8-1: Product: syz
[  503.911433][ T7830] usb 8-1: Manufacturer: syz
[  503.913323][ T7830] usb 8-1: SerialNumber: syz
[  503.918052][ T7830] usb 8-1: config 0 descriptor??
[  503.924127][ T7830] asix 8-1:0.251: probe with driver asix failed with error -22
[  504.133051][ T7830] usb 8-1: USB disconnect, device number 13
[  504.565255][   T10] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[  504.725965][T16878] netlink: 'syz.0.4323': attribute type 30 has an invalid length.
[  504.736833][   T10] usb 4-1: Using ep0 maxpacket: 8
[  504.986372][   T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  504.996782][   T10] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  505.000526][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  505.011543][   T10] usb 4-1: config 0 descriptor??
[  505.019218][   T10] gspca_main: vc032x-2.14.0 probing 046d:0892
[  505.059888][T16883] program syz.7.4325 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  505.831976][   T10] gspca_vc032x: reg_w err -71
[  505.835320][   T10] vc032x 4-1:0.0: probe with driver vc032x failed with error -71
[  505.842043][   T10] usb 4-1: USB disconnect, device number 48
[  506.151510][T16895] loop7: detected capacity change from 0 to 764
[  506.209985][T16897] loop7: detected capacity change from 0 to 16
[  506.213324][T16897] erofs (device loop7): mounted with root inode @ nid 36.
[  506.359757][T16903] loop7: detected capacity change from 0 to 512
[  506.391300][T16903] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  506.397766][T16903] ext4 filesystem being mounted at /419/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  506.452062][T16903] EXT4-fs error (device loop7): ext4_empty_dir:3077: inode #12: comm syz.7.4334: invalid size
[  506.467879][T16903] EXT4-fs (loop7): Remounting filesystem read-only
[  506.513651][T13236] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  506.521627][ T1096] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  506.539791][ T1096] Quota error (device loop7): write_blk: dquota write failed
[  506.554402][ T1096] Quota error (device loop7): free_dqentry: Can't write quota data block 5
[  508.393604][T16945] bridge0: port 2(bridge_slave_1) entered disabled state
[  508.400110][T16945] bridge0: port 1(bridge_slave_0) entered disabled state
[  508.546207][T16945] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  508.563235][T16945] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  508.641370][T16956] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4354'.
[  508.888025][ T6162] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  508.896776][ T6162] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  508.906588][ T6162] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  508.914422][ T6162] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  509.224649][T16966] loop7: detected capacity change from 0 to 2048
[  509.229194][T16966] EXT4-fs: inline encryption not supported
[  509.263437][T16966] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000002000000 r/w without journal. Quota mode: none.
[  509.269202][T16966] ext4 filesystem being mounted at /425/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  509.307375][T13236] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000002000000.
[  510.454767][T16993] overlayfs: failed to clone lowerpath
[  510.715469][   T10] usb 8-1: new high-speed USB device number 14 using dummy_hcd
[  510.901711][   T10] usb 8-1: config 3 has an invalid interface number: 71 but max is 0
[  510.904582][   T10] usb 8-1: config 3 has no interface number 0
[  510.907152][   T10] usb 8-1: config 3 interface 71 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  510.910507][   T10] usb 8-1: New USB device found, idVendor=0bc7, idProduct=0004, bcdDevice=a7.ac
[  510.913386][   T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  510.940383][   T10] ati_remote 8-1:3.71: ati_remote_probe: Unexpected endpoint_in
[  511.149498][T17006] netlink: 'syz.0.4373': attribute type 2 has an invalid length.
[  511.150989][   T10] usb 8-1: USB disconnect, device number 14
[  512.231237][T17035] fuse: Bad value for 'fd'
[  512.514918][T17041] loop7: detected capacity change from 0 to 1024
[  512.523725][T17041] EXT4-fs: inline encryption not supported
[  512.530298][T17041] EXT4-fs: Mount option(s) incompatible with ext3
[  512.781333][T17055] sctp: [Deprecated]: syz.7.4395 (pid 17055) Use of int in maxseg socket option.
[  512.781333][T17055] Use struct sctp_assoc_value instead
[  514.755658][T17158] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  515.695616][T17183] sd 0:0:0:0: PR command failed: 1026
[  515.697567][T17183] sd 0:0:0:0: Sense Key : Illegal Request [current] 
[  515.700194][T17183] sd 0:0:0:0: Add. Sense: Invalid command operation code
[  515.741582][T17187] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[  516.392863][   T33] audit: type=1326 audit(1758171656.236:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17241 comm="syz.3.4482" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbea178eba9 code=0x0
[  516.513974][T17248] loop7: detected capacity change from 0 to 256
[  516.528193][T17248] FAT-fs (loop7): Directory bread(block 64) failed
[  516.530608][T17248] FAT-fs (loop7): Directory bread(block 65) failed
[  516.532783][T17248] FAT-fs (loop7): Directory bread(block 66) failed
[  516.534858][T17248] FAT-fs (loop7): Directory bread(block 67) failed
[  516.537898][T17248] FAT-fs (loop7): Directory bread(block 68) failed
[  516.540543][T17248] FAT-fs (loop7): Directory bread(block 69) failed
[  516.542941][T17248] FAT-fs (loop7): Directory bread(block 70) failed
[  516.546961][T17248] FAT-fs (loop7): Directory bread(block 71) failed
[  516.549822][T17248] FAT-fs (loop7): Directory bread(block 72) failed
[  516.552441][T17248] FAT-fs (loop7): Directory bread(block 73) failed
[  516.726360][   T48] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[  516.885591][   T48] usb 4-1: Using ep0 maxpacket: 16
[  516.890318][   T48] usb 4-1: unable to get BOS descriptor or descriptor too short
[  516.894394][   T48] usb 4-1: config 8 has an invalid interface number: 132 but max is 0
[  516.898636][   T48] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  516.902685][   T48] usb 4-1: config 8 has no interface number 0
[  516.906988][   T48] usb 4-1: config 8 interface 132 altsetting 252 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  516.913048][   T48] usb 4-1: config 8 interface 132 has no altsetting 0
[  516.918436][   T48] usb 4-1: New USB device found, idVendor=07cf, idProduct=1001, bcdDevice=8f.8b
[  516.922073][   T48] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  516.932232][   T48] usb 4-1: Product: syz
[  516.934295][   T48] usb 4-1: Manufacturer: syz
[  516.945263][   T48] usb 4-1: SerialNumber: syz
[  517.163566][   T48] usb-storage 4-1:8.132: USB Mass Storage device detected
[  517.184324][   T48] usb-storage 4-1:8.132: Quirks match for vid 07cf pid 1001: a
[  517.246759][   T48] usb 4-1: USB disconnect, device number 49
[  517.800507][T17276] netlink: 'syz.0.4497': attribute type 5 has an invalid length.
[  518.422106][   T33] audit: type=1800 audit(1758171658.266:98): pid=17290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4502" name="/" dev="9p" ino=589826 res=0 errno=0
[  518.543777][T17294] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4503'.
[  518.585797][T17285] loop7: detected capacity change from 0 to 32768
[  518.793705][T17308] loop7: detected capacity change from 0 to 512
[  518.805485][T17308] EXT4-fs (loop7): Test dummy encryption mode enabled
[  518.807673][T17308] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  518.832371][T17308] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00cc018, mo2=0002]
[  518.835540][T17308] System zones: 1-12
[  518.840588][T17308] EXT4-fs (loop7): 1 truncate cleaned up
[  518.875815][T17308] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  518.957570][T13236] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  519.179460][T17318] netlink: 'syz.7.4514': attribute type 15 has an invalid length.
[  519.183103][T17318] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4514'.
[  520.426134][T17349] 9pnet_fd: Insufficient options for proto=fd
[  520.531315][T17357] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4530'.
[  520.534991][T17357] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4530'.
[  520.553299][T17359] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4529'.
[  520.657520][   T48] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[  520.815348][   T48] usb 4-1: Using ep0 maxpacket: 32
[  520.822261][   T48] usb 4-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0
[  520.827050][   T48] usb 4-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  520.832081][   T48] usb 4-1: config 0 interface 0 has no altsetting 0
[  520.834766][   T48] usb 4-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00
[  520.838706][   T48] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  520.853051][   T48] usb 4-1: config 0 descriptor??
[  520.875424][   T10] usb 8-1: new high-speed USB device number 15 using dummy_hcd
[  521.027994][   T10] usb 8-1: Using ep0 maxpacket: 32
[  521.031766][   T10] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  521.035682][   T10] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x32, changing to 0x2
[  521.045190][   T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 108, setting to 64
[  521.048508][   T10] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  521.063060][   T10] usb 8-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16
[  521.068404][   T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  521.071312][   T10] usb 8-1: Product: syz
[  521.072824][   T10] usb 8-1: Manufacturer: syz
[  521.074599][   T10] usb 8-1: SerialNumber: syz
[  521.079948][   T10] usb 8-1: config 0 descriptor??
[  521.094297][   T10] usb 8-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  521.279894][   T48] magicmouse 0003:05AC:0324.0010: unknown main item tag 0x0
[  521.283087][   T48] magicmouse 0003:05AC:0324.0010: unknown main item tag 0x0
[  521.290294][   T10] usb 8-1: USB disconnect, device number 15
[  521.292735][ T6162] usb 8-1: Failed to submit usb control message: -71
[  521.296444][   T48] magicmouse 0003:05AC:0324.0010: unknown main item tag 0x0
[  521.299436][   T48] magicmouse 0003:05AC:0324.0010: unknown main item tag 0x0
[  521.302315][   T48] magicmouse 0003:05AC:0324.0010: unknown main item tag 0x0
[  521.305963][ T6162] usb 8-1: unable to send the bmi data to the device: -71
[  521.311938][ T6162] usb 8-1: unable to get target info from device
[  521.314539][ T6162] usb 8-1: could not get target info (-71)
[  521.319499][ T6162] usb 8-1: could not probe fw (-71)
[  521.327714][   T48] magicmouse 0003:05AC:0324.0010: hidraw0: USB HID v80.00 Device [HID 05ac:0324] on usb-dummy_hcd.3-1/input0
[  521.335679][   T48] magicmouse 0003:05AC:0324.0010: magicmouse input not registered
[  521.391072][   T48] magicmouse 0003:05AC:0324.0010: probe with driver magicmouse failed with error -12
[  521.433817][   T33] audit: type=1326 audit(1758171661.276:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17407 comm="syz.0.4550" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff66858eba9 code=0x0
[  521.485576][ T7830] usb 4-1: USB disconnect, device number 50
[  522.520441][   T33] audit: type=1326 audit(1758171662.366:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17434 comm="syz.0.4562" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66858eba9 code=0x7ffc0000
[  522.545305][   T33] audit: type=1326 audit(1758171662.376:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17434 comm="syz.0.4562" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff66858eba9 code=0x7ffc0000
[  522.563215][   T33] audit: type=1326 audit(1758171662.376:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17434 comm="syz.0.4562" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66858eba9 code=0x7ffc0000
[  522.578276][   T33] audit: type=1326 audit(1758171662.376:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17434 comm="syz.0.4562" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66858eba9 code=0x7ffc0000
[  522.586511][   T33] audit: type=1326 audit(1758171662.386:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17434 comm="syz.0.4562" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff66858eba9 code=0x7ffc0000
[  522.594684][   T33] audit: type=1326 audit(1758171662.386:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17434 comm="syz.0.4562" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66858eba9 code=0x7ffc0000
[  522.604815][   T33] audit: type=1326 audit(1758171662.386:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17434 comm="syz.0.4562" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff668585b67 code=0x7ffc0000
[  522.612461][   T33] audit: type=1326 audit(1758171662.386:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17434 comm="syz.0.4562" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff66852ada9 code=0x7ffc0000
[  522.635169][   T33] audit: type=1326 audit(1758171662.386:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17434 comm="syz.0.4562" exe="/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7ff66858eba9 code=0x7ffc0000
[  523.284913][T17453] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  523.392797][T17449] netlink: 'syz.7.4567': attribute type 1 has an invalid length.
[  523.397499][T17449] netlink: 'syz.7.4567': attribute type 1 has an invalid length.
[  524.126988][T17472] loop7: detected capacity change from 0 to 256
[  525.313820][T17492] netlink: 'syz.7.4590': attribute type 5 has an invalid length.
[  526.104106][ T7830] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[  526.265502][ T7830] usb 4-1: Using ep0 maxpacket: 16
[  526.273096][ T7830] usb 4-1: config 254 has an invalid interface number: 235 but max is 0
[  526.290355][ T7830] usb 4-1: config 254 has an invalid descriptor of length 0, skipping remainder of the config
[  526.297296][ T7830] usb 4-1: config 254 has no interface number 0
[  526.302423][ T7830] usb 4-1: config 254 interface 235 altsetting 2 endpoint 0x6 has an invalid bInterval 0, changing to 7
[  526.309323][ T7830] usb 4-1: config 254 interface 235 altsetting 2 endpoint 0x6 has invalid wMaxPacketSize 0
[  526.312818][ T7830] usb 4-1: config 254 interface 235 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  526.319962][ T7830] usb 4-1: config 254 interface 235 has no altsetting 0
[  526.332931][ T7830] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1
[  526.339451][ T7830] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  526.342123][ T7830] usb 4-1: Product: syz
[  526.343695][ T7830] usb 4-1: Manufacturer: syz
[  526.348560][ T7830] usb 4-1: SerialNumber: syz
[  526.606986][ T7830] usbtest 4-1:254.235: couldn't get endpoints, -71
[  526.622253][ T7830] usbtest 4-1:254.235: probe with driver usbtest failed with error -71
[  526.644145][ T7830] usb 4-1: USB disconnect, device number 51
[  527.276408][T17560] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  527.276408][T17560] The task syz.7.4618 (17560) triggered the difference, watch for misbehavior.
[  527.715179][   T48] usb 4-1: new high-speed USB device number 52 using dummy_hcd
[  527.945377][   T48] usb 4-1: Using ep0 maxpacket: 32
[  528.246789][   T48] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  528.250821][   T48] usb 4-1: New USB device found, idVendor=046d, idProduct=c539, bcdDevice= 0.00
[  528.254556][   T48] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  528.267540][   T48] usb 4-1: config 0 descriptor??
[  528.292380][T17583] loop7: detected capacity change from 0 to 512
[  528.302600][T17583] EXT4-fs error (device loop7): ext4_orphan_get:1392: inode #15: comm syz.7.4629: casefold flag without casefold feature
[  528.309913][T17583] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.4629: couldn't read orphan inode 15 (err -117)
[  528.317890][T17583] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  528.330743][T17583] fscrypt (loop7, inode 18): Mutually exclusive encryption flags (0x1b)
[  528.358979][T13236] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  528.442382][ T5899] Process accounting resumed
[  528.455359][T17587] loop7: detected capacity change from 0 to 512
[  528.479805][T17587] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.4630: invalid indirect mapped block 27 (level 1)
[  528.492543][T17587] EXT4-fs (loop7): Remounting filesystem read-only
[  528.494873][T17587] EXT4-fs (loop7): 1 truncate cleaned up
[  528.501717][T17587] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  528.512181][T17587] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  528.899971][ T7830] usb 4-1: USB disconnect, device number 52
[  529.542054][T17636] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4654'.
[  529.581531][T17640] loop7: detected capacity change from 0 to 2048
[  529.617282][T17640] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  529.623482][   T33] kauditd_printk_skb: 3 callbacks suppressed
[  529.623491][   T33] audit: type=1800 audit(1758171669.466:112): pid=17640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4656" name="bus" dev="loop7" ino=18 res=0 errno=0
[  529.857651][T13236] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  530.143258][T17665] loop7: detected capacity change from 0 to 16
[  530.175575][T17665] erofs (device loop7): mounted with root inode @ nid 36.
[  532.078799][T17691] binder: 17690:17691 ioctl 541b 0 returned -22
[  532.269205][T17699] netlink: 'syz.0.4677': attribute type 4 has an invalid length.
[  532.280602][T17699] netlink: 'syz.0.4677': attribute type 4 has an invalid length.
[  532.286213][T17703] netlink: 'syz.3.4679': attribute type 11 has an invalid length.
[  533.335023][T17741] loop7: detected capacity change from 0 to 128
[  533.489610][T17745] netlink: 'syz.0.4700': attribute type 4 has an invalid length.
[  533.495401][T17745] netlink: 'syz.0.4700': attribute type 4 has an invalid length.
[  533.761734][T17762] binder: 17761:17762 ioctl c018620c 2000000000c0 returned -22
[  534.422398][T17776] loop7: detected capacity change from 0 to 1024
[  534.440031][T17776] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  534.444846][T17776] ext4 filesystem being mounted at /535/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  534.463763][T17776] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  534.478898][T17776] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28
[  534.483594][T17776] EXT4-fs (loop7): This should not happen!! Data will be lost
[  534.483594][T17776] 
[  534.488738][T17776] EXT4-fs (loop7): Total free blocks count 0
[  534.491265][T17776] EXT4-fs (loop7): Free/Dirty block details
[  534.493826][T17776] EXT4-fs (loop7): free_blocks=4293918720
[  534.496888][T17776] EXT4-fs (loop7): dirty_blocks=80
[  534.499155][T17776] EXT4-fs (loop7): Block reservation details
[  534.501709][T17776] EXT4-fs (loop7): i_reserved_data_blocks=5
[  534.514702][T17776] EXT4-fs error (device loop7): ext4_map_blocks:814: inode #15: block 3: comm syz.7.4712: lblock 3 mapped to illegal pblock 3 (length 3)
[  534.523476][T17776] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  534.550228][  T155] EXT4-fs error (device loop7): ext4_map_blocks:814: inode #15: block 8: comm kworker/u9:3: lblock 8 mapped to illegal pblock 8 (length 8)
[  534.713685][T17789] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4716'.
[  534.716910][T17789] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4716'.
[  534.726727][T17789] geneve2: entered promiscuous mode
[  534.728553][T17789] geneve2: entered allmulticast mode
[  534.752066][ T5879] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  534.757123][ T5879] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  534.760145][ T5879] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  534.762950][ T5879] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  536.062220][T17838] hfsplus: unable to find HFS+ superblock
[  536.595375][   T10] usb 8-1: new full-speed USB device number 16 using dummy_hcd
[  536.750579][   T10] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  536.754757][   T10] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[  536.768495][   T10] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  536.772099][   T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  536.785133][   T10] usb 8-1: Product: syz
[  536.786977][   T10] usb 8-1: Manufacturer: syz
[  536.788646][   T10] usb 8-1: SerialNumber: syz
[  536.995883][   T10] usb 8-1: 0:2 : does not exist
[  537.001384][   T10] usb 8-1: 5:0: failed to get current value for ch 0 (-22)
[  537.012796][   T10] usb 8-1: USB disconnect, device number 16
[  537.041437][T16848] udevd[16848]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  537.539983][   T54] Bluetooth: hci2: unexpected event for opcode 0x2010
[  538.304855][T17881] netlink: 10 bytes leftover after parsing attributes in process `syz.3.4753'.
[  538.706610][T17913] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.4769'.
[  538.914929][T17931] loop7: detected capacity change from 0 to 2048
[  538.941660][T17936] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  539.390425][T17941] loop7: detected capacity change from 0 to 32768
[  539.470194][T17941] XFS (loop7): DAX unsupported by block device. Turning off DAX.
[  539.473970][T17941] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  539.487055][T17941] XFS (loop7): Ending clean mount
[  539.490473][T17941] XFS (loop7): Quotacheck needed: Please wait.
[  539.533041][T17941] XFS (loop7): Quotacheck: Done.
[  539.544605][   T33] audit: type=1800 audit(1758171679.386:113): pid=17941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4781" name="file1" dev="loop7" ino=6150 res=0 errno=0
[  539.577438][T13236] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  539.882281][T17965] loop7: detected capacity change from 0 to 512
[  539.900410][T17965] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  540.240064][T17974] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 548)
[  540.246593][T17974] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548)
[  540.251556][T17974] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548)
[  540.773806][T17986] fuse: Bad value for 'fd'
[  540.940258][T17996] overlayfs: failed to clone upperpath
[  540.957059][T17996] overlayfs: failed to clone upperpath
[  541.266852][T18019] loop7: detected capacity change from 0 to 16
[  541.275923][T18019] erofs (device loop7): mounted with root inode @ nid 36.
[  541.307888][T18019] erofs (device loop7): bogus lookback distance 0 @ lcn 1 of nid 89
[  541.311149][T18019] erofs (device loop7): readahead error at folio 2 @ nid 89
[  541.314013][T18019] erofs (device loop7): bogus lookback distance 0 @ lcn 1 of nid 89
[  541.322361][T18019] erofs (device loop7): readahead error at folio 1 @ nid 89
[  541.334468][T18019] erofs (device loop7): bogus lookback distance 0 @ lcn 1 of nid 89
[  541.338869][T18019] erofs (device loop7): bogus lookback distance 0 @ lcn 1 of nid 89
[  541.345839][T18019] erofs (device loop7): read error -117 @ 1 of nid 89
[  541.353398][   T33] audit: type=1800 audit(1758171681.196:114): pid=18019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.4812" name="file3" dev="loop7" ino=89 res=0 errno=0
[  544.247507][   T33] audit: type=1326 audit(1758171684.096:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18085 comm="syz.3.4840" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbea178eba9 code=0x0
[  545.130330][T18107] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  545.172415][T18110] comedi comedi0: pcl730: I/O port conflict (0x3,4)
[  545.178921][T18111] 9pnet: p9_errstr2errno: server reported unknown error 017777777
[  546.022623][T18135] loop7: detected capacity change from 0 to 4096
[  546.027715][T18135] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512).
[  546.056288][T18135] ntfs3(loop7): Mark volume as dirty due to NTFS errors
[  546.060317][T18135] ntfs3(loop7): ino=19, mi_enum_attr
[  546.775294][   T10] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[  546.945163][   T10] usb 4-1: Using ep0 maxpacket: 16
[  546.949089][   T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  546.953294][   T10] usb 4-1: config 0 has no interfaces?
[  546.955971][   T10] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  546.959488][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  546.971940][   T10] usb 4-1: config 0 descriptor??
[  547.197536][T18152] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4869'.
[  547.223494][T18152] macvtap1: entered promiscuous mode
[  547.229418][T18152] bond0: entered promiscuous mode
[  547.231458][T18152] bond_slave_0: entered promiscuous mode
[  547.234907][T18152] bond_slave_1: entered promiscuous mode
[  547.238285][T18152] macvtap1: entered allmulticast mode
[  547.240494][T18152] bond0: entered allmulticast mode
[  547.242537][T18152] bond_slave_0: entered allmulticast mode
[  547.244824][T18152] bond_slave_1: entered allmulticast mode
[  547.252457][T18152] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  547.265227][T18161] bond0: left allmulticast mode
[  547.267157][T18161] bond_slave_0: left allmulticast mode
[  547.269561][T18161] bond_slave_1: left allmulticast mode
[  547.271827][T18161] bond0: left promiscuous mode
[  547.273793][T18161] bond_slave_0: left promiscuous mode
[  547.280556][T18161] bond_slave_1: left promiscuous mode
[  547.305003][   T10] usb 4-1: USB disconnect, device number 53
[  548.223278][T18192] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4885'.
[  548.764434][T18193] loop7: detected capacity change from 0 to 32768
[  548.833016][T18193] ocfs2: Slot 0 on device (7,7) was already allocated to this node!
[  548.852831][T18193] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  548.977528][T18193] overlayfs: upper fs does not support tmpfile.
[  549.002051][T18193] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  549.004946][T18193] overlayfs: failed to set xattr on upper
[  549.013943][T18193] overlayfs: ...falling back to redirect_dir=nofollow.
[  549.023327][T18193] overlayfs: ...falling back to index=off.
[  549.027844][T18193] overlayfs: ...falling back to uuid=null.
[  549.029799][T18193] overlayfs: upper fs missing required features.
[  549.149352][T13236] ocfs2: Unmounting device (7,7) on (node local)
[  549.795421][ T5899] usb 8-1: new high-speed USB device number 17 using dummy_hcd
[  549.945682][ T5899] usb 8-1: Using ep0 maxpacket: 16
[  549.949996][ T5899] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  549.954657][ T5899] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  549.959548][ T5899] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00
[  549.963588][ T5899] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  549.970301][ T5899] usb 8-1: config 0 descriptor??
[  550.390426][ T5899] konepure 0003:1E7D:2DB4.0012: unknown main item tag 0x0
[  550.393381][ T5899] konepure 0003:1E7D:2DB4.0012: unknown main item tag 0x0
[  550.396626][ T5899] konepure 0003:1E7D:2DB4.0012: item fetching failed at offset 2/4
[  550.400475][ T5899] konepure 0003:1E7D:2DB4.0012: parse failed
[  550.403029][ T5899] konepure 0003:1E7D:2DB4.0012: probe with driver konepure failed with error -22
[  550.591734][   T10] usb 8-1: USB disconnect, device number 17
[  550.949624][T18243] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4907'.
[  552.716993][   T33] audit: type=1800 audit(1758171692.466:116): pid=18288 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4923" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=46914 res=0 errno=0
[  553.219621][T18311] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4932'.
[  553.405343][ T5899] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[  553.555883][ T5899] usb 4-1: Using ep0 maxpacket: 8
[  553.561482][ T5899] usb 4-1: too many configurations: 255, using maximum allowed: 8
[  553.577176][ T5899] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  553.589644][ T5899] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  553.602188][ T5899] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  553.609217][ T5899] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  553.617892][ T5899] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  553.623461][ T5899] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  553.630576][ T5899] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  553.636352][ T5899] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  553.643428][ T5899] usb 4-1: New USB device found, idVendor=22b8, idProduct=2377, bcdDevice=f2.ab
[  553.647442][ T5899] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=255
[  553.650748][ T5899] usb 4-1: Product: syz
[  553.652220][ T5899] usb 4-1: Manufacturer: syz
[  553.653772][ T5899] usb 4-1: SerialNumber: syz
[  553.658975][ T5899] usb 4-1: config 0 descriptor??
[  553.900459][ T5899] usb 4-1: USB disconnect, device number 54
[  553.970872][T18323] loop7: detected capacity change from 0 to 164
[  554.272111][T18342] netlink: 'syz.0.4942': attribute type 1 has an invalid length.
[  555.273696][ T5899] usb 4-1: new high-speed USB device number 55 using dummy_hcd
[  555.293828][T18361] netlink: 'syz.0.4950': attribute type 6 has an invalid length.
[  555.436826][ T5899] usb 4-1: Using ep0 maxpacket: 16
[  555.447975][ T5899] usb 4-1: too many configurations: 212, using maximum allowed: 8
[  555.458559][ T5899] usb 4-1: config 6 has no interfaces?
[  555.468195][ T5899] usb 4-1: config 6 has no interfaces?
[  555.477398][ T5899] usb 4-1: config 6 has no interfaces?
[  555.486232][ T5899] usb 4-1: config 6 has no interfaces?
[  555.494538][ T5899] usb 4-1: config 6 has no interfaces?
[  555.510706][ T5899] usb 4-1: config 6 has no interfaces?
[  555.518374][ T5899] usb 4-1: config 6 has no interfaces?
[  555.528311][ T5899] usb 4-1: config 6 has no interfaces?
[  555.572735][ T5899] usb 4-1: string descriptor 0 read error: -71
[  555.583337][ T5899] usb 4-1: New USB device found, idVendor=0980, idProduct=06fd, bcdDevice=14.8c
[  555.594722][ T5899] usb 4-1: New USB device strings: Mfr=54, Product=54, SerialNumber=151
[  555.643186][ T5899] usb 4-1: rejected 8 configurations due to insufficient available bus power
[  555.647542][ T5899] usb 4-1: no configuration chosen from 8 choices
[  555.678335][ T5899] usb 4-1: USB disconnect, device number 55
[  556.756226][T18389] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551613)
[  556.760523][T18389] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647
[  557.103249][T18407] loop7: detected capacity change from 0 to 1024
[  557.129970][T18407] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  557.144937][T18407] ext4 filesystem being mounted at /613/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  557.168313][T18407] EXT4-fs error (device loop7): ext4_map_blocks:814: inode #15: comm syz.7.4972: lblock 0 mapped to illegal pblock 0 (length 1)
[  557.201648][T18407] EXT4-fs (loop7): Remounting filesystem read-only
[  557.230010][T13236] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  558.377775][T18434] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4983'.
[  558.381598][T18434] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4983'.
[  558.384696][T18434] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4983'.
[  560.426862][T18469] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4998'.
[  560.583040][T18477] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5004'.
[  560.587256][T18477] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5004'.
[  560.707249][T18489] 9pnet_fd: Insufficient options for proto=fd
[  560.823720][T18497] loop7: detected capacity change from 0 to 1024
[  560.832067][T18497] EXT4-fs: Ignoring removed bh option
[  560.845739][T18497] EXT4-fs (loop7): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  560.874415][T18499] tmpfs: Bad value for 'nr_inodes'
[  560.887716][T18497] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  560.951402][T13236] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  561.061358][   T54] Bluetooth: hci1: ACL packet for unknown connection handle 201
[  561.161885][T18520] dvmrp0: left allmulticast mode
[  561.336175][T18514] loop7: detected capacity change from 0 to 32768
[  561.341916][T18514] bcachefs (/dev/loop7): error validating superblock: Invalid superblock section errors: entries out of order
[  561.341916][T18514] errors (size 64):
[  561.341916][T18514] (unknown error 63098)           98139432299383  16981954538416098692
[  561.341916][T18514] backpointer_to_missing_ptr      0               34376515584
[  561.341916][T18514] (unknown error 62899)           26163           1611530240
[  561.341916][T18514] 
[  561.372992][T18514] bcachefs: bch2_fs_get_tree() error: invalid_sb_errors
[  561.509617][T18518] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5021'.
[  561.640690][   T33] audit: type=1800 audit(1758171701.486:117): pid=18531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.3.5027" name="/" dev="sockfs" ino=48358 res=0 errno=0
[  561.763999][T18542] genirq: Flags mismatch irq 4. 00200000 (pcl818) vs. 00200080 (ttyS0)
[  561.808210][T18528] loop7: detected capacity change from 0 to 32768
[  562.135778][ T5899] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[  562.285640][ T5899] usb 4-1: Using ep0 maxpacket: 16
[  562.291937][ T5899] usb 4-1: config 0 has an invalid interface number: 2 but max is 0
[  562.301551][ T5899] usb 4-1: config 0 has no interface number 0
[  562.303976][ T5899] usb 4-1: config 0 interface 2 altsetting 0 has an endpoint descriptor with address 0xBC, changing to 0x8C
[  562.320001][ T5899] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7
[  562.324534][ T5899] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0
[  562.330869][ T5899] usb 4-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88
[  562.334380][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  562.341430][ T5899] usb 4-1: Product: syz
[  562.343270][ T5899] usb 4-1: SerialNumber: syz
[  562.349301][ T5899] usb 4-1: config 0 descriptor??
[  562.434894][T18560] _Z`Ԁ@: entered promiscuous mode
[  562.442855][T18562] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  562.559606][ T5899] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  562.571898][ T5899] usb 4-1: invalid MIDI out EP 0
[  562.593669][T18568] fuse: Bad value for 'fd'
[  562.643783][ T5899] snd-usb-audio 4-1:0.2: probe with driver snd-usb-audio failed with error -22
[  562.652989][ T5899] usb 4-1: USB disconnect, device number 56
[  562.708713][T18575] udevd[18575]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  562.771113][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  562.933578][T18591] fuse: Bad value for 'fd'
[  563.001677][T18595] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5054'.
[  563.044926][T18597] lo: entered promiscuous mode
[  563.049867][T18597] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  563.193335][T18610] loop7: detected capacity change from 0 to 128
[  563.475214][ T5899] usb 8-1: new high-speed USB device number 18 using dummy_hcd
[  563.585582][   T10] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[  563.629662][ T5899] usb 8-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  563.634366][ T5899] usb 8-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  563.638838][ T5899] usb 8-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  563.643898][ T5899] usb 8-1: config 0 interface 0 has no altsetting 0
[  563.646867][ T5899] usb 8-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.00
[  563.650694][ T5899] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  563.656345][ T5899] usb 8-1: config 0 descriptor??
[  563.737915][   T10] usb 4-1: config 0 interface 0 has no altsetting 0
[  563.740252][   T10] usb 4-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00
[  563.743110][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  563.759179][   T10] usb 4-1: config 0 descriptor??
[  564.068670][ T5899] apple 0003:05AC:020F.0013: unknown main item tag 0x0
[  564.071276][ T5899] apple 0003:05AC:020F.0013: unknown main item tag 0x0
[  564.073798][ T5899] apple 0003:05AC:020F.0013: unknown main item tag 0x0
[  564.076525][ T5899] apple 0003:05AC:020F.0013: unknown main item tag 0x0
[  564.078701][ T5899] apple 0003:05AC:020F.0013: unknown main item tag 0x0
[  564.080875][ T5899] apple 0003:05AC:020F.0013: unknown main item tag 0x0
[  564.083761][ T5899] apple 0003:05AC:020F.0013: unknown main item tag 0x0
[  564.087609][ T5899] apple 0003:05AC:020F.0013: unknown main item tag 0x0
[  564.091690][ T5899] apple 0003:05AC:020F.0013: unknown main item tag 0x0
[  564.095479][ T5899] apple 0003:05AC:020F.0013: unknown main item tag 0x0
[  564.100030][ T5899] apple 0003:05AC:020F.0013: unexpected long global item
[  564.103488][ T5899] apple 0003:05AC:020F.0013: parse failed
[  564.105745][ T5899] apple 0003:05AC:020F.0013: probe with driver apple failed with error -22
[  564.174647][   T10] pantherlord 0003:0E8F:0003.0014: item fetching failed at offset 0/3
[  564.179894][   T10] pantherlord 0003:0E8F:0003.0014: parse failed
[  564.182614][   T10] pantherlord 0003:0E8F:0003.0014: probe with driver pantherlord failed with error -22
[  564.268984][ T5899] usb 8-1: USB disconnect, device number 18
[  564.373570][   T48] usb 4-1: USB disconnect, device number 57
[  565.055558][   T10] usb 8-1: new high-speed USB device number 19 using dummy_hcd
[  565.205298][   T10] usb 8-1: Using ep0 maxpacket: 32
[  565.210025][   T10] usb 8-1: config 0 has an invalid interface number: 35 but max is 0
[  565.213701][   T10] usb 8-1: config 0 has no interface number 0
[  565.219498][   T10] usb 8-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[  565.223116][   T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  565.226787][   T10] usb 8-1: Product: syz
[  565.228556][   T10] usb 8-1: Manufacturer: syz
[  565.230521][   T10] usb 8-1: SerialNumber: syz
[  565.235221][ T7830] usb 4-1: new full-speed USB device number 58 using dummy_hcd
[  565.239115][   T10] usb 8-1: config 0 descriptor??
[  565.245760][   T10] radio-si470x 8-1:0.35: could not find interrupt in endpoint
[  565.249626][   T10] radio-si470x 8-1:0.35: probe with driver radio-si470x failed with error -5
[  565.376145][T18638] fuse: Bad value for 'fd'
[  565.402065][ T7830] usb 4-1: config 0 has an invalid interface number: 139 but max is 0
[  565.411535][ T7830] usb 4-1: config 0 has no interface number 0
[  565.414014][ T7830] usb 4-1: config 0 interface 139 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  565.418793][ T7830] usb 4-1: config 0 interface 139 altsetting 0 has an endpoint descriptor with address 0xBD, changing to 0x8D
[  565.423603][ T7830] usb 4-1: config 0 interface 139 altsetting 0 endpoint 0x8D has invalid maxpacket 14158, setting to 64
[  565.429774][ T7830] usb 4-1: config 0 interface 139 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  565.443539][ T7830] usb 4-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=fd.d6
[  565.449561][ T7830] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  565.454494][ T7830] usb 4-1: Product: syz
[  565.461243][   T10] radio-raremono 8-1:0.35: this is not Thanko's Raremono.
[  565.464707][   T10] usbhid 8-1:0.35: couldn't find an input interrupt endpoint
[  565.467969][ T7830] usb 4-1: Manufacturer: syz
[  565.470985][ T7830] usb 4-1: SerialNumber: syz
[  565.477331][ T7830] usb 4-1: config 0 descriptor??
[  565.481011][T18633] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  565.484756][T18633] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  565.672526][   T10] usb 8-1: USB disconnect, device number 19
[  565.709901][ T7830] mct_u232 4-1:0.139: MCT U232 converter detected
[  565.721768][ T7830] usb 4-1: MCT U232 converter now attached to ttyUSB0
[  565.734908][ T7830] usb 4-1: USB disconnect, device number 58
[  565.746589][ T7830] mct_u232 ttyUSB0: MCT U232 converter now disconnected from ttyUSB0
[  565.753164][ T7830] mct_u232 4-1:0.139: device disconnected
[  566.046388][T18659] 8021q: adding VLAN 0 to HW filter on device bond0
[  566.659477][T18673] netlink: 216 bytes leftover after parsing attributes in process `syz.3.5090'.
[  566.664551][T18673] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5090'.
[  566.672172][T18673] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5090'.
[  569.211716][T18739] fuse: Bad value for 'fd'
[  569.675395][ T7830] usb 4-1: new high-speed USB device number 59 using dummy_hcd
[  570.185207][ T7830] usb 4-1: Using ep0 maxpacket: 16
[  570.202394][ T7830] usb 4-1: config 1 interface 0 has no altsetting 0
[  570.212934][ T7830] usb 4-1: New USB device found, idVendor=0738, idProduct=1709, bcdDevice= 0.40
[  570.217212][ T7830] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  570.219927][ T7830] usb 4-1: Product: syz
[  570.221457][ T7830] usb 4-1: Manufacturer: syz
[  570.223074][ T7830] usb 4-1: SerialNumber: syz
[  570.537213][ T7830] usbhid 4-1:1.0: can't add hid device: -71
[  570.539960][ T7830] usbhid 4-1:1.0: probe with driver usbhid failed with error -71
[  570.558349][ T7830] usb 4-1: USB disconnect, device number 59
[  571.053867][T18772] loop7: detected capacity change from 0 to 16
[  571.085518][T18772] erofs (device loop7): mounted with root inode @ nid 36.
[  571.150813][T18778] erofs (device loop7): bogus lookback distance 1586 @ lcn 46 of nid 36
[  571.154071][T18778] erofs (device loop7): readahead error at folio 47 @ nid 36
[  571.180424][T18778] erofs (device loop7): bogus lookback distance 1586 @ lcn 46 of nid 36
[  571.183269][T18778] erofs (device loop7): readahead error at folio 46 @ nid 36
[  571.204209][T18778] erofs (device loop7): readahead error at folio 45 @ nid 36
[  571.224788][T18778] erofs (device loop7): bogus lookback distance 1388 @ lcn 42 of nid 36
[  571.234742][T18778] erofs (device loop7): readahead error at folio 43 @ nid 36
[  571.241229][T18778] erofs (device loop7): bogus lookback distance 1388 @ lcn 42 of nid 36
[  571.251438][T18778] erofs (device loop7): readahead error at folio 42 @ nid 36
[  571.254379][T18778] erofs (device loop7): bogus lookback distance 774 @ lcn 40 of nid 36
[  571.265231][T18778] erofs (device loop7): readahead error at folio 41 @ nid 36
[  571.271139][T18778] erofs (device loop7): bogus lookback distance 774 @ lcn 40 of nid 36
[  571.283725][T18778] erofs (device loop7): readahead error at folio 40 @ nid 36
[  571.287661][T18778] erofs (device loop7): readahead error at folio 39 @ nid 36
[  571.293883][T18778] erofs (device loop7): readahead error at folio 38 @ nid 36
[  571.308955][T18778] erofs (device loop7): readahead error at folio 36 @ nid 36
[  571.323904][T18778] erofs (device loop7): bogus lookback distance 1468 @ lcn 31 of nid 36
[  571.332567][T18778] erofs (device loop7): readahead error at folio 31 @ nid 36
[  571.341536][T18778] erofs (device loop7): readahead error at folio 25 @ nid 36
[  571.351718][T18778] erofs (device loop7): readahead error at folio 24 @ nid 36
[  571.357563][T18778] erofs (device loop7): readahead error at folio 19 @ nid 36
[  571.364833][T18778] syz.7.5137: attempt to access beyond end of device
[  571.364833][T18778] loop7: rw=524288, sector=784, nr_sectors = 64 limit=16
[  571.386735][T18778] syz.7.5137: attempt to access beyond end of device
[  571.386735][T18778] loop7: rw=524288, sector=13478624080, nr_sectors = 24 limit=16
[  571.402867][T18778] syz.7.5137: attempt to access beyond end of device
[  571.402867][T18778] loop7: rw=524288, sector=13478624032, nr_sectors = 48 limit=16
[  571.417959][T18778] syz.7.5137: attempt to access beyond end of device
[  571.417959][T18778] loop7: rw=524288, sector=16, nr_sectors = 16 limit=16
[  572.612128][T18821] loop7: detected capacity change from 0 to 64
[  572.729733][T18826] netlink: 'syz.0.5159': attribute type 1 has an invalid length.
[  572.736210][T18826] netlink: 'syz.0.5159': attribute type 1 has an invalid length.
[  574.307280][T18862] IPVS: Error connecting to the multicast addr
[  574.473416][T18870] mmap: syz.7.5178 (18870): VmData 37482496 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data.
[  575.210705][T18882] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5183'.
[  575.214239][T18882] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5183'.
[  575.334356][T18892] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5188'.
[  575.379638][T18896] ALSA: mixer_oss: invalid index 40000
[  575.551289][   T33] audit: type=1800 audit(1758171715.396:118): pid=18904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.5194" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0
[  576.390019][T18931] tmpfs: Bad value for 'mpol'
[  577.266992][T18939] loop7: detected capacity change from 0 to 4096
[  577.277880][T18939] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512).
[  577.299043][T18939] ntfs3(loop7): ino=1a, mi_enum_attr
[  577.301282][T18939] ntfs3(loop7): Mark volume as dirty due to NTFS errors
[  577.304452][T18939] ntfs3(loop7): ino=1a, mi_enum_attr
[  577.310313][T18939] ntfs3(loop7): Failed to initialize $Extend/$Reparse.
[  579.350768][ T5853] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  579.360591][ T5853] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  579.365825][ T5853] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  579.371519][ T5853] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  579.377689][ T5853] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  579.419813][T18964] wg1 speed is unknown, defaulting to 1000
[  579.609015][T18964] chnl_net:caif_netlink_parms(): no params data found
[  579.710567][T18964] bridge0: port 1(bridge_slave_0) entered blocking state
[  579.713853][T18964] bridge0: port 1(bridge_slave_0) entered disabled state
[  579.722702][T18964] bridge_slave_0: entered allmulticast mode
[  579.726641][T18964] bridge_slave_0: entered promiscuous mode
[  579.730848][T18964] bridge0: port 2(bridge_slave_1) entered blocking state
[  579.733876][T18964] bridge0: port 2(bridge_slave_1) entered disabled state
[  579.742239][T18964] bridge_slave_1: entered allmulticast mode
[  579.746272][T18964] bridge_slave_1: entered promiscuous mode
[  579.793421][T18964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  579.804644][T18964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  579.843286][T18964] team0: Port device team_slave_0 added
[  579.850169][T18964] team0: Port device team_slave_1 added
[  579.882056][T18964] batman_adv: batadv0: Adding interface: batadv_slave_0
[  579.884753][T18964] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  579.897998][T18964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  579.903960][T18964] batman_adv: batadv0: Adding interface: batadv_slave_1
[  579.907835][T18964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  579.919239][T18964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  579.979157][T18964] hsr_slave_0: entered promiscuous mode
[  579.982073][T18964] hsr_slave_1: entered promiscuous mode
[  579.984713][T18964] debugfs: 'hsr0' already exists in 'hsr'
[  579.987690][T18964] Cannot create hsr debugfs directory
[  580.212055][T18964] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  580.315599][T18964] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  580.389391][T18964] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  580.460681][T18964] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  580.643668][T18964] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  580.651813][T18964] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  580.663890][T18964] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  580.672104][T18964] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  580.759938][T18964] 8021q: adding VLAN 0 to HW filter on device bond0
[  580.780808][T18964] 8021q: adding VLAN 0 to HW filter on device team0
[  580.792934][ T9755] bridge0: port 1(bridge_slave_0) entered blocking state
[  580.795734][ T9755] bridge0: port 1(bridge_slave_0) entered forwarding state
[  580.810918][ T9755] bridge0: port 2(bridge_slave_1) entered blocking state
[  580.813626][ T9755] bridge0: port 2(bridge_slave_1) entered forwarding state
[  581.091958][T18964] 8021q: adding VLAN 0 to HW filter on device batadv0
[  581.388147][T18964] veth0_vlan: entered promiscuous mode
[  581.405991][   T54] Bluetooth: hci2: command tx timeout
[  581.407036][T18964] veth1_vlan: entered promiscuous mode
[  581.460155][T18964] veth0_macvtap: entered promiscuous mode
[  581.472650][T18964] veth1_macvtap: entered promiscuous mode
[  581.511578][T18964] batman_adv: batadv0: Interface activated: batadv_slave_0
[  581.523507][T18964] batman_adv: batadv0: Interface activated: batadv_slave_1
[  581.533192][ T5723] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  581.539075][ T5723] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  581.542858][ T5723] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  581.579202][ T5723] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  581.678142][  T725] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  581.681172][  T725] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  581.736743][  T725] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  581.740711][  T725] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  582.216817][ T6279] usb 8-1: new high-speed USB device number 20 using dummy_hcd
[  582.376225][ T6279] usb 8-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33
[  582.379786][ T6279] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  582.382987][T19017] overlayfs: failed to resolve './file0': -2
[  582.420032][ T6279] usb 8-1: config 0 descriptor??
[  582.427816][ T6279] gspca_main: sunplus-2.14.0 probing 055f:c420
[  582.838949][ T6279] gspca_sunplus: reg_w_riv err -71
[  582.842069][ T6279] sunplus 8-1:0.0: probe with driver sunplus failed with error -71
[  582.863269][ T6279] usb 8-1: USB disconnect, device number 20
[  582.920489][   T33] audit: type=1800 audit(1758171722.766:119): pid=19031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5234" name="nullb0" dev="tmpfs" ino=5232 res=0 errno=0
[  583.074421][T19040] netlink: 'syz.0.5238': attribute type 7 has an invalid length.
[  583.080251][T19040] netlink: 'syz.0.5238': attribute type 5 has an invalid length.
[  583.083215][T19040] netlink: 17 bytes leftover after parsing attributes in process `syz.0.5238'.
[  583.497680][   T54] Bluetooth: hci2: command tx timeout
[  583.912005][T19046] loop7: detected capacity change from 0 to 32768
[  583.929907][T19046] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.5241 (19046)
[  583.977198][T19046] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  583.981261][T19046] BTRFS info (device loop7): using sha256 (sha256-lib) checksum algorithm
[  584.131784][T19046] BTRFS info (device loop7): enabling ssd optimizations
[  584.134964][T19046] BTRFS info (device loop7): enabling free space tree
[  584.144578][   T33] audit: type=1800 audit(1758171723.986:120): pid=19046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.5241" name="file1" dev="loop7" ino=260 res=0 errno=0
[  584.237536][T18964] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  584.723718][T19080] loop7: detected capacity change from 0 to 512
[  584.745841][T19080] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  584.811741][   T68] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  585.576025][   T54] Bluetooth: hci2: command tx timeout
[  585.709841][T19103] loop7: detected capacity change from 0 to 16
[  585.746580][T19103] erofs (device loop7): mounted with root inode @ nid 36.
[  586.071422][T19116] random: crng reseeded on system resumption
[  586.107303][T19116] Unrecognized hibernate image header format!
[  586.112318][T19116] PM: hibernation: Image mismatch: architecture specific data
[  586.188455][T19118] loop7: detected capacity change from 0 to 256
[  586.247076][T19118] FAT-fs (loop7): Directory bread(block 64) failed
[  586.249527][T19118] FAT-fs (loop7): Directory bread(block 65) failed
[  586.252196][T19118] FAT-fs (loop7): Directory bread(block 66) failed
[  586.254596][T19118] FAT-fs (loop7): Directory bread(block 67) failed
[  586.286148][T19118] FAT-fs (loop7): Directory bread(block 68) failed
[  586.288985][T19118] FAT-fs (loop7): Directory bread(block 69) failed
[  586.291905][T19118] FAT-fs (loop7): Directory bread(block 70) failed
[  586.294590][T19118] FAT-fs (loop7): Directory bread(block 71) failed
[  586.315301][T19118] FAT-fs (loop7): Directory bread(block 72) failed
[  586.318701][T19118] FAT-fs (loop7): Directory bread(block 73) failed
[  586.595261][ T7830] usb 8-1: new high-speed USB device number 21 using dummy_hcd
[  586.758438][ T7830] usb 8-1: config 1 has an invalid descriptor of length 167, skipping remainder of the config
[  586.762514][ T7830] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[  586.786709][ T7830] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  586.790224][ T7830] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  586.793395][ T7830] usb 8-1: SerialNumber: syz
[  587.011700][ T7830] usb 8-1: 0:2 : does not exist
[  587.043917][ T7830] usb 8-1: USB disconnect, device number 21
[  587.083444][T19012] udevd[19012]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  587.475200][T19138] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5275'.
[  587.659322][   T54] Bluetooth: hci2: command tx timeout
[  587.660280][T19147] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000005: 0000 [#1] SMP KASAN PTI
[  587.665580][T19147] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f]
[  587.668695][T19147] CPU: 1 UID: 0 PID: 19147 Comm: syz.7.5278 Not tainted syzkaller #0 PREEMPT(full) 
[  587.672825][T19147] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  587.675992][T19147] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0
[  587.677874][T19147] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 e9 a2 35 f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 c8 a2 35 f9 4d 8b 24 24 48 83 c3
[  587.684598][T19147] RSP: 0018:ffffc90007d1fa60 EFLAGS: 00010206
[  587.686594][T19147] RAX: 0000000000000005 RBX: ffff888031732500 RCX: 0000000000080000
[  587.689197][T19147] RDX: ffffc90003309000 RSI: 00000000000003bc RDI: 00000000000003bd
[  587.691764][T19147] RBP: 0000000000000001 R08: ffff8881060cc92f R09: 1ffff11020c19925
[  587.694403][T19147] R10: dffffc0000000000 R11: ffffffff88ed6630 R12: 0000000000000028
[  587.697425][T19147] R13: dffffc0000000000 R14: ffff8881060cc800 R15: dffffc0000000000
[  587.700643][T19147] FS:  00007fedbff6e6c0(0000) GS:ffff8881a3c15000(0000) knlGS:0000000000000000
[  587.703989][T19147] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  587.706118][T19147] CR2: 0000001b2dd23ffc CR3: 000000010dd84000 CR4: 00000000000006f0
[  587.708500][T19147] Call Trace:
[  587.709600][T19147]  <TASK>
[  587.710539][T19147]  pcl818_detach+0x66/0xd0
[  587.711958][T19147]  comedi_device_detach_locked+0x178/0x750
[  587.713713][T19147]  comedi_unlocked_ioctl+0xcde/0x1020
[  587.716083][T19147]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  587.718018][T19147]  ? __lock_acquire+0xab9/0xd20
[  587.719735][T19147]  ? __fget_files+0x2a/0x420
[  587.721635][T19147]  ? __fget_files+0x2a/0x420
[  587.723535][T19147]  ? __fget_files+0x3a0/0x420
[  587.725477][T19147]  ? __fget_files+0x2a/0x420
[  587.727375][T19147]  ? bpf_lsm_file_ioctl+0x9/0x20
[  587.729406][T19147]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  587.731798][T19147]  __se_sys_ioctl+0xfc/0x170
[  587.733692][T19147]  do_syscall_64+0xfa/0x3b0
[  587.735553][T19147]  ? lockdep_hardirqs_on+0x9c/0x150
[  587.737667][T19147]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  587.740147][T19147]  ? exc_page_fault+0x9f/0xf0
[  587.742092][T19147]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  587.744507][T19147] RIP: 0033:0x7fedbf18eba9
[  587.746354][T19147] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  587.752994][T19147] RSP: 002b:00007fedbff6e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  587.755722][T19147] RAX: ffffffffffffffda RBX: 00007fedbf3d5fa0 RCX: 00007fedbf18eba9
[  587.758424][T19147] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000003
[  587.760933][T19147] RBP: 00007fedbf211e19 R08: 0000000000000000 R09: 0000000000000000
[  587.763517][T19147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  587.765897][T19147] R13: 00007fedbf3d6038 R14: 00007fedbf3d5fa0 R15: 00007ffc420a3678
[  587.768517][T19147]  </TASK>
[  587.769715][T19147] Modules linked in:
[  587.773069][T19147] ---[ end trace 0000000000000000 ]---
[  587.780018][T19147] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0
[  587.781701][T19147] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 e9 a2 35 f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 c8 a2 35 f9 4d 8b 24 24 48 83 c3
[  587.787965][T19147] RSP: 0018:ffffc90007d1fa60 EFLAGS: 00010206
[  587.790279][T19147] RAX: 0000000000000005 RBX: ffff888031732500 RCX: 0000000000080000
[  587.792822][T19147] RDX: ffffc90003309000 RSI: 00000000000003bc RDI: 00000000000003bd
[  587.801920][T19147] RBP: 0000000000000001 R08: ffff8881060cc92f R09: 1ffff11020c19925
[  587.804323][T19147] R10: dffffc0000000000 R11: ffffffff88ed6630 R12: 0000000000000028
[  587.807519][T19147] R13: dffffc0000000000 R14: ffff8881060cc800 R15: dffffc0000000000
[  587.810461][T19147] FS:  00007fedbff6e6c0(0000) GS:ffff8881a3c15000(0000) knlGS:0000000000000000
[  587.814076][T19147] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  587.818206][T19147] CR2: 0000001b2dd23ffc CR3: 000000010dd84000 CR4: 00000000000006f0
[  587.820989][T19147] Kernel panic - not syncing: Fatal exception
[  587.823631][T19147] Kernel Offset: disabled
[  587.825185][T19147] Rebooting in 86400 seconds..

VM DIAGNOSIS:
04:49:27  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff8238178c RBX=0000000000000000 RCX=ffff888107bb1cc0 RDX=0000000000000000
RSI=ffff88802b33a8d0 RDI=ffff888107e53028 RBP=ffffc9000789fcf0 RSP=ffffc9000789fb98
R8 =ffff88802b33a98b R9 =1ffff11005667531 R10=dffffc0000000000 R11=ffffed1005667532
R12=dffffc0000000000 R13=1ffff92000f13f84 R14=0000000000200000 R15=ffff88802b33a8d0
RIP=ffffffff823ad210 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fe09fb6bc80 ffffffff 00c00000
GS =0000 ffff8880b8615000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055556086a5c8 CR3=0000000108bb6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 000000000000ff00 XMM01=2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c
XMM02=0000000000000000 00ff00000000ff00 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 000000000000ff00 XMM05=2a002a2d302d305b 7166617200003100
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=00ff000000000000 00000000ffff00ff XMM09=2a5d392d305b7466 717761720000312d
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000038 RBX=0000000000000038 RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000000ea2b RDI=000000000000ea2c RBP=00000000000003f8 RSP=ffffc90007d1f1f0
R8 =ffff8881062f0237 R9 =1ffff11020c5e046 R10=dffffc0000000000 R11=ffffffff854fa930
R12=dffffc0000000000 R13=ffffffff99b00900 R14=ffffffff99df5440 R15=0000000000000000
RIP=ffffffff854fa9ac RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fedbff6e6c0 ffffffff 00c00000
GS =0000 ffff8881a3c15000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b2dd23ffc CR3=000000010dd84000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fedbf3a7498 00007fedbf3a7470 XMM03=00007fedbf3a74a8 00007fedbf3a74a0
XMM04=00007fedbff0d100 00007fedbf3a7460 XMM05=00007fedbf3a7478 00007fedbf3a74c0
XMM06=00007fedbf3a74b8 00007fedbf3a74b0 XMM07=00007fedbf3a74a8 00007fedbf3a74a0
XMM08=0000000000000000 00007fedbf212ee7 XMM09=0000000000000000 00007fedbf212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
